From 5dd1b266026696ea80a8acac462bd929367fba39 Mon Sep 17 00:00:00 2001 From: Michal Ruprich Date: Fri, 3 Jul 2026 12:46:45 +0200 Subject: [PATCH] Resolves: RHEL-176258 - AVC when reading user's site-packages --- 0019-set-pythonnouser-env-var.patch | 12 ++++++++++++ frr.spec | 6 +++++- 2 files changed, 17 insertions(+), 1 deletion(-) create mode 100644 0019-set-pythonnouser-env-var.patch diff --git a/0019-set-pythonnouser-env-var.patch b/0019-set-pythonnouser-env-var.patch new file mode 100644 index 0000000..f1b72ec --- /dev/null +++ b/0019-set-pythonnouser-env-var.patch @@ -0,0 +1,12 @@ +diff --git a/tools/frr.service.in b/tools/frr.service.in +index 1e958dd93..4c3d3ae28 100644 +--- a/tools/frr.service.in ++++ b/tools/frr.service.in +@@ -21,6 +21,7 @@ PIDFile=@CFG_STATE@/watchfrr.pid + ExecStart=@CFG_SBIN@/frrinit.sh start + ExecStop=@CFG_SBIN@/frrinit.sh stop + ExecReload=@CFG_SBIN@/frrinit.sh reload ++Environment=PYTHONNOUSERSITE=1 + + [Install] + WantedBy=multi-user.target diff --git a/frr.spec b/frr.spec index 0be56ce..e988206 100644 --- a/frr.spec +++ b/frr.spec @@ -7,7 +7,7 @@ Name: frr Version: 8.5.3 -Release: 14%{?checkout}%{?dist} +Release: 15%{?checkout}%{?dist} Summary: Routing daemon License: GPLv2+ URL: http://www.frrouting.org @@ -82,6 +82,7 @@ Patch0015: 0015-ipv6-wrong-hash.patch Patch0016: 0016-dont-ignore-kernel-route.patch Patch0017: 0017-fix-CVE-2026-37457.patch Patch0018: 0018-ignored-int-after-flapping.patch +Patch0019: 0019-set-pythonnouser-env-var.patch %description FRRouting is free software that manages TCP/IP based routing protocols. It takes @@ -289,6 +290,9 @@ make check PYTHON=%{__python3} %endif %changelog +* Fri Jul 03 2026 Michal Ruprich - 8.5.3-15 +- Resolves: RHEL-176258 - AVC when reading user's site-packages + * Fri Jun 12 2026 Michal Ruprich - 8.5.3-14 - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface