summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMartin Kosek <mkosek@redhat.com>2013-07-17 12:13:50 +0200
committerMartin Kosek <mkosek@redhat.com>2013-07-17 16:20:02 +0200
commitbe327e21ce1877b944508b4ff14101dc3c922d0c (patch)
tree966d9bbb3316b3065932b8421261e236b87d4fd2
parentaac1c2da1629634469034bbcb58ed52aa46a556c (diff)
downloadfreeipa.git-be327e21ce1877b944508b4ff14101dc3c922d0c.tar.gz
freeipa.git-be327e21ce1877b944508b4ff14101dc3c922d0c.tar.xz
freeipa.git-be327e21ce1877b944508b4ff14101dc3c922d0c.zip
Require new selinux-policy replacing old server-selinux subpackage
Features of the new policy: - labels /var/lib/ipa/pki-ca/publish as pki_tomcat_cert_t which is writeable by PKI and readable by HTTPD - contains Conflicts with old freeipa-server-selinux package to avoid SELinux upgrade issues https://fedorahosted.org/freeipa/ticket/3788
-rw-r--r--freeipa.spec.in6
1 files changed, 5 insertions, 1 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in
index f0f1fc6a..b4552599 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -129,7 +129,7 @@ Requires: python-memcached
Requires: systemd-units >= 38
Requires(pre): systemd-units
Requires(post): systemd-units
-Requires: selinux-policy >= 3.11.1-86
+Requires: selinux-policy >= 3.12.1-65
Requires(post): selinux-policy-base
Requires: slapi-nis >= 0.44
Requires: pki-ca >= 10.0.2
@@ -776,6 +776,10 @@ fi
%ghost %attr(0644,root,apache) %config(noreplace) %{_sysconfdir}/ipa/ca.crt
%changelog
+* Wed Jul 17 2013 Martin Kosek <mkosek@redhat.com> - 3.2.1-4
+- Require selinux-policy 3.12.1-65 containing missing policy after removal of
+ freeipa-server-selinux subpackage
+
* Tue Jul 16 2013 Martin Kosek <mkosek@redhat.com> - 3.2.1-3
- Drop freeipa-server-selinux subpackage
- Drop redundant directory /var/cache/ipa/sessions