summaryrefslogtreecommitdiffstats
path: root/kernel.spec
diff options
context:
space:
mode:
authorJustin M. Forbes <jforbes@redhat.com>2012-04-09 16:40:04 -0500
committerJustin M. Forbes <jforbes@redhat.com>2012-04-09 16:40:04 -0500
commit1d7d6c12f3998ded631f92f6dccb997e1776a5c6 (patch)
treede0edce04ae5c6957e2eae6e1fb36676f2708ec9 /kernel.spec
parent232e1a44c9753a19cc105aa7ab0b6767e3db1919 (diff)
downloadkernel-1d7d6c12f3998ded631f92f6dccb997e1776a5c6.tar.gz
kernel-1d7d6c12f3998ded631f92f6dccb997e1776a5c6.tar.xz
kernel-1d7d6c12f3998ded631f92f6dccb997e1776a5c6.zip
- SELinux apply a different permission to ptrace a child vs non-child
- Reenable debug
Diffstat (limited to 'kernel.spec')
-rw-r--r--kernel.spec18
1 files changed, 15 insertions, 3 deletions
diff --git a/kernel.spec b/kernel.spec
index fbb0cb068..c6fdf3227 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -62,7 +62,7 @@ Summary: The Linux kernel
# For non-released -rc kernels, this will be appended after the rcX and
# gitX tags, so a 3 here would become part of release "0.rcX.gitX.3"
#
-%global baserelease 2
+%global baserelease 3
%global fedora_build %{baserelease}
# base_sublevel is the kernel version we're starting with and patching
@@ -163,7 +163,7 @@ Summary: The Linux kernel
# Set debugbuildsenabled to 1 for production (build separate debug kernels)
# and 0 for rawhide (all kernels are debug kernels).
# See also 'make debug' and 'make release'.
-%define debugbuildsenabled 1
+%define debugbuildsenabled 0
# Want to build a vanilla kernel build without any non-upstream patches?
%define with_vanilla %{?_with_vanilla: 1} %{?!_with_vanilla: 0}
@@ -176,7 +176,7 @@ Summary: The Linux kernel
%define doc_build_fail true
%endif
-%define rawhide_skip_docs 0
+%define rawhide_skip_docs 1
%if 0%{?rawhide_skip_docs}
%define with_doc 0
%define doc_build_fail true
@@ -746,6 +746,9 @@ Patch21400: unhandled-irqs-switch-to-polling.patch
Patch22000: weird-root-dentry-name-debug.patch
+#selinux ptrace child permissions
+Patch22001: selinux-apply-different-permission-to-ptrace-child.patch
+
%endif
BuildRoot: %{_tmppath}/kernel-%{KVERREL}-root
@@ -1429,6 +1432,9 @@ ApplyPatch unhandled-irqs-switch-to-polling.patch
ApplyPatch weird-root-dentry-name-debug.patch
+#selinux ptrace child permissions
+ApplyPatch selinux-apply-different-permission-to-ptrace-child.patch
+
#Highbank clock functions
ApplyPatch highbank-export-clock-functions.patch
@@ -2293,6 +2299,12 @@ fi
# ||----w |
# || ||
%changelog
+* Mon Apr 09 2012 Justin M. Forbes <jforbes@redhat.com> - 3.4.0-0.rc2.git0.3
+- Reenable debugging options.
+
+* Mon Apr 09 2012 Justin M. Forbes <jforbes@redhat.com>
+- SELinux apply a different permission to ptrace a child vs non-child
+
* Mon Apr 09 2012 Justin M. Forbes <jforbes@redhat.com> - 3.4.0-0.rc2.git0.2
- Disable debugging options.