diff options
| author | Tomas Babej <tbabej@redhat.com> | 2013-07-16 12:10:54 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2013-07-16 12:17:40 +0200 |
| commit | 7a105604e265222cf6f96b0ac060d4f1b2504b6c (patch) | |
| tree | 22a9b92905f5f36259dc29b00f21a3931334eaae /freeipa.spec.in | |
| parent | 0fa42af840579d641ceb76974fb4c0277c9c6d6b (diff) | |
| download | freeipa.git-7a105604e265222cf6f96b0ac060d4f1b2504b6c.tar.gz freeipa.git-7a105604e265222cf6f96b0ac060d4f1b2504b6c.tar.xz freeipa.git-7a105604e265222cf6f96b0ac060d4f1b2504b6c.zip | |
Change group ownership of CRL publish directory
Spec file modified so that /var/lib/ipa/pki-ca/publish/ is no
longer owned by created with package installation. The directory
is rather created/removed with the CA instance itself.
This ensures proper creation/removeal, group ownership
and SELinux context.
https://fedorahosted.org/freeipa/ticket/3727
Diffstat (limited to 'freeipa.spec.in')
| -rw-r--r-- | freeipa.spec.in | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in index b0beb16a..74287753 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -383,7 +383,6 @@ rm %{buildroot}/%{_libdir}/samba/pdb/ipasam.la mkdir -p %{buildroot}/%{_sysconfdir}/ipa/html mkdir -p %{buildroot}/%{_localstatedir}/cache/ipa/sysrestore mkdir -p %{buildroot}/%{_localstatedir}/cache/ipa/sysupgrade -mkdir -p %{buildroot}/%{_localstatedir}/cache/ipa/pki-ca/publish mkdir %{buildroot}%{_usr}/share/ipa/html/ ln -s ../../../..%{_sysconfdir}/ipa/html/ffconfig.js \ %{buildroot}%{_usr}/share/ipa/html/ffconfig.js @@ -712,7 +711,7 @@ fi %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysupgrade %attr(755,root,root) %dir %{_localstatedir}/lib/ipa/pki-ca -%attr(755,root,root) %dir %{_localstatedir}/lib/ipa/pki-ca/publish +%ghost %{_localstatedir}/lib/ipa/pki-ca/publish %attr(755,root,root) %{_libdir}/krb5/plugins/kdb/ipadb.so %{_mandir}/man1/ipa-replica-conncheck.1.gz %{_mandir}/man1/ipa-replica-install.1.gz @@ -821,6 +820,9 @@ fi %endif # ! %{ONLY_CLIENT} %changelog +* Tue Jul 16 2013 Tomas Babej <tbabej@redhat.com> - 3.2.99-6 +- Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost + * Thu Jul 11 2013 Martin Kosek <mkosek@redhat.com> - 3.2.99-5 - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency issues when there are still old parts of software (like entitlements plugin) |