0b340d0ef3
Do not disable PKINIT if some of the well-known DH groups are unavailable Resolves: rhbz#2214297 Make PKINIT CMS SHA-1 signature verification available in FIPS mode Resolves: rhbz#2214300 Allow to set PAC ticket signature as optional Resolves: rhbz#2181311 Add support for MS-PAC extended KDC signature (CVE-2022-37967) Resolves: rhbz#2166001 Fix syntax error in aclocal.m4 Resolves: rhbz#2143306 Signed-off-by: Julien Rische <jrische@redhat.com>
32 lines
1.0 KiB
Diff
32 lines
1.0 KiB
Diff
From 6adfd97a3558aae4ace346685266bac9dae8bba9 Mon Sep 17 00:00:00 2001
|
|
From: Julien Rische <jrische@redhat.com>
|
|
Date: Mon, 9 Jan 2023 22:39:52 +0100
|
|
Subject: [PATCH] [downstream] Do not set root as ksu file owner
|
|
|
|
Upstream Makefile uses the install command to set root as owner of the
|
|
ksu executable file. However, this is no longer supported on latest
|
|
versions of the Mock build environment.
|
|
|
|
In case of ksu, the owner, group, and mode are already set using %attr()
|
|
in the specfile.
|
|
---
|
|
src/config/pre.in | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/src/config/pre.in b/src/config/pre.in
|
|
index 7eaa2f351c..e9ae71471e 100644
|
|
--- a/src/config/pre.in
|
|
+++ b/src/config/pre.in
|
|
@@ -185,7 +185,7 @@ INSTALL_PROGRAM=@INSTALL_PROGRAM@ $(INSTALL_STRIP)
|
|
INSTALL_SCRIPT=@INSTALL_PROGRAM@
|
|
INSTALL_DATA=@INSTALL_DATA@
|
|
INSTALL_SHLIB=@INSTALL_SHLIB@
|
|
-INSTALL_SETUID=$(INSTALL) $(INSTALL_STRIP) -m 4755 -o root
|
|
+INSTALL_SETUID=$(INSTALL)
|
|
## This is needed because autoconf will sometimes define @exec_prefix@ to be
|
|
## ${prefix}.
|
|
prefix=@prefix@
|
|
--
|
|
2.40.1
|
|
|