diff options
| author | Ade Lee <alee@redhat.com> | 2012-07-20 18:22:12 -0400 |
|---|---|---|
| committer | Ade Lee <alee@redhat.com> | 2012-07-20 18:22:12 -0400 |
| commit | 868e724716512762ad780f15a10a7a4b88fb1487 (patch) | |
| tree | 889d330ccdae64540312fc06037d7990d2c29991 | |
| parent | eb7eedcc54f1bb3894bdb6c88fe0aa587fa0b782 (diff) | |
| download | pki-868e724716512762ad780f15a10a7a4b88fb1487.tar.gz pki-868e724716512762ad780f15a10a7a4b88fb1487.tar.xz pki-868e724716512762ad780f15a10a7a4b88fb1487.zip | |
BZ 841966 - latest selinux policy fix breaks dogtag
| -rw-r--r-- | base/selinux/src/pki.if | 7 | ||||
| -rw-r--r-- | specs/pki-core.spec | 5 |
2 files changed, 10 insertions, 2 deletions
diff --git a/base/selinux/src/pki.if b/base/selinux/src/pki.if index 0709176ea..af4b7b672 100644 --- a/base/selinux/src/pki.if +++ b/base/selinux/src/pki.if @@ -38,12 +38,18 @@ template(`pki_ca_template',` gen_require(` type java_exec_t; type initrc_t; + type tomcat_exec_t; + type tomcat_cache_t; ') domtrans_pattern($1_script_t, java_exec_t, $1_t) role system_r types $1_script_t; allow $1_t java_exec_t:file entrypoint; allow initrc_t $1_script_t:process transition; + can_exec($1_t, tomcat_exec_t) + miscfiles_read_hwdata($1_t) + allow pki_ca_t tomcat_cache_t:dir {getattr search}; + #tomcat_search_cache($1_t) type $1_etc_rw_t, pki_ca_config; files_type($1_etc_rw_t) @@ -90,7 +96,6 @@ template(`pki_ca_template',` # for file signing corenet_tcp_connect_http_port($1_t) - # This is for /etc/$1/tomcat.conf: can_exec($1_t, $1_tomcat_exec_t) allow $1_t $1_tomcat_exec_t:file {getattr read}; diff --git a/specs/pki-core.spec b/specs/pki-core.spec index b761011d5..4b305b04a 100644 --- a/specs/pki-core.spec +++ b/specs/pki-core.spec @@ -1,5 +1,5 @@ Name: pki-core -Version: 9.0.20 +Version: 9.0.21 Release: 1%{?dist} Summary: Certificate System - PKI Core Components URL: http://pki.fedoraproject.org/ @@ -749,6 +749,9 @@ fi %changelog +* Fri Jul 20 2012 Ade Lee <alee@redhat.com> 9.0.21-1 +- Bugzilla Bug #841996 - latest selinux policy fix breaks dogtag + * Mon May 7 2012 Andrew Wnuk <awnuk@redhat.com> 9.0.20-1 - New official build |