From f70042ff4b728ec5c978b40a31819bfeecb95436 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <lautrbach@redhat.com>
Date: Mon, 27 Jul 2026 15:07:47 +0200
Subject: [PATCH] Fix /run/fapolicyd file attributes

The /run/fapolicyd directory and its files are created and removed at
runtime. As they are not installed from the RPM payload they must be
declared as %ghost and not checked for attributes.

Fixes:
    # systemctl start fapolicyd
    # systemctl stop fapolicyd
    # rpm -V fapolicyd
    missing     /run/fapolicyd

Resolves: RHEL-186528
---
 fapolicyd.spec | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/fapolicyd.spec b/fapolicyd.spec
index c70c9a3..7929da3 100644
--- a/fapolicyd.spec
+++ b/fapolicyd.spec
@@ -257,8 +257,10 @@ fi
 %attr(644,root,root) %{_mandir}/man5/*
 %ghost %attr(440,%{name},%{name}) %verify(not md5 size mtime) %{_localstatedir}/log/%{name}-access.log
 %attr(770,root,%{name}) %dir %{_localstatedir}/lib/%{name}
-%attr(770,root,%{name}) %dir /run/%{name}
-%ghost %attr(660,root,%{name}) /run/%{name}/%{name}.fifo
+%ghost %attr(770,root,%{name}) %dir %{_rundir}/%{name}
+%ghost %attr(660,root,%{name}) %{_rundir}/%{name}/%{name}.fifo
+%ghost %attr(600,root,root) %verify(not md5 size mtime) %{_rundir}/%{name}/%{name}.pid
+%ghost %attr(640,%{name},%{name}) %verify(not md5 size mtime) %{_rundir}/%{name}/%{name}.state
 %ghost %attr(660,%{name},%{name}) %verify(not md5 size mtime) %{_localstatedir}/lib/%{name}/data.mdb
 %ghost %attr(660,%{name},%{name}) %verify(not md5 size mtime) %{_localstatedir}/lib/%{name}/lock.mdb