summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMartin Kosek <mkosek@redhat.com>2013-07-17 16:21:14 +0200
committerMartin Kosek <mkosek@redhat.com>2013-07-17 16:21:14 +0200
commit1dcbb3adfae78e6f46ff76f72d651d75850c46ab (patch)
treeca9e37d241d635c361f9fd7eba100f4d226dc89e
parentb5d008ed5a2ec074bf28ca5835785ee3160d6a9d (diff)
downloadfreeipa-1dcbb3adfae78e6f46ff76f72d651d75850c46ab.zip
freeipa-1dcbb3adfae78e6f46ff76f72d651d75850c46ab.tar.gz
freeipa-1dcbb3adfae78e6f46ff76f72d651d75850c46ab.tar.xz
Require new selinux-policy replacing old server-selinux subpackage
Features of the new policy: - labels /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t which is writeable by PKI and readable by HTTPD - contains Conflicts with old freeipa-server-selinux package to avoid SELinux upgrade issues https://fedorahosted.org/freeipa/ticket/3788
-rw-r--r--freeipa.spec.in6
1 files changed, 5 insertions, 1 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in
index 2f241b2..93c69e5 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -130,7 +130,7 @@ Requires: python-memcached
Requires: systemd-units >= 38
Requires(pre): systemd-units
Requires(post): systemd-units
-Requires: selinux-policy >= 3.11.1-86
+Requires: selinux-policy >= 3.12.1-65
Requires(post): selinux-policy-base
Requires: slapi-nis >= 0.44
Requires: pki-ca >= 10.0.2
@@ -825,6 +825,10 @@ fi
%endif # ! %{ONLY_CLIENT}
%changelog
+* Wed Jul 17 2013 Martin Kosek <mkosek@redhat.com> - 3.2.99-7
+- Require selinux-policy 3.12.1-65 containing missing policy after removal of
+ freeipa-server-selinux subpackage
+
* Tue Jul 16 2013 Tomas Babej <tbabej@redhat.com> - 3.2.99-6
- Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost