Resolves: #2124253 - SELinux is preventing zebra from setattr access on the directory frr

Better handling FRR files during upgrade

frr.spec

@@ -7,7 +7,7 @@
 
 Name:           frr
 Version:        8.3.1
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Routing daemon
 License:        GPLv2+
 URL:            http://www.frrouting.org
@@ -213,6 +213,9 @@ fi
 %post selinux
 %selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.bz2
 %selinux_relabel_post -s %{selinuxtype}
+#/var/tmp and /var/run need to be relabeled as well if FRR is running before upgrade
+%{_sbindir}/restorecon -R /var/tmp/frr &> /dev/null
+%{_sbindir}/restorecon -R /var/run/frr &> /dev/null
 
 %postun selinux
 if [ $1 -eq 0 ]; then
@@ -259,6 +262,10 @@ rm tests/lib/*grpc*
 %endif
 
 %changelog
+* Wed Sep 07 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-2
+- Resolves: #2124253 - SELinux is preventing zebra from setattr access on the directory frr
+- Better handling FRR files during upgrade
+
 * Tue Sep 06 2022 Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
 - New version 8.3.1