From 528eff0ac5c4d8007509d88547cb968f907e734d Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai Date: Fri, 12 Oct 2007 18:32:28 +0000 Subject: [PATCH] - make krb5.conf %%verify(not md5 size mtime) in addition to %%config(noreplace), like /etc/nsswitch.conf (#329811) --- krb5.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/krb5.spec b/krb5.spec index 3bc1e7e..40432a8 100644 --- a/krb5.spec +++ b/krb5.spec @@ -210,6 +210,10 @@ installed on systems which are meant provide these services. %endif %changelog +* Fri Oct 12 2007 Nalin Dahyabhai +- make krb5.conf %%verify(not md5 size mtime) in addition to + %%config(noreplace), like /etc/nsswitch.conf (#329811) + * Mon Oct 1 2007 Nalin Dahyabhai 1.6.2-9 - apply the fix for CVE-2007-4000 instead of the experimental patch for setting ok-as-delegate flags @@ -1717,7 +1721,7 @@ exit 0 %files libs %defattr(-,root,root) %docdir %{krb5prefix}/man -%config(noreplace) /etc/krb5.conf +%verify(not md5 size mtime) %config(noreplace) /etc/krb5.conf %dir %{krb5prefix} %dir %{krb5prefix}/man %dir %{krb5prefix}/man/man1