rpms/mysql-selinux
7
0
Fork 0
Code Issues Pull Requests Releases Activity
3294b48acf
mysql-selinux/mysql-selinux.spec

140 lines
4.5 KiB
RPMSpec
Raw Normal View History

initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
# defining macros needed by SELinux
%global selinuxtype targeted
%global moduletype contrib
%global modulename mysql
Rebase to 1.0.1 release This release is just a sync-up with upstream selinux-policy URL changed to a new upstream repository
2020-12-01 19:24:57 +00:00
Name: mysql-selinux
[packit] 1.0.7 upstream release Upstream tag: 1.0.7 Upstream commit: d718485d
2023-09-14 09:12:41 +00:00
Version: 1.0.7
Release: 1%{?dist}
Rebase to 1.0.1 release This release is just a sync-up with upstream selinux-policy URL changed to a new upstream repository
2020-12-01 19:24:57 +00:00
migrated to SPDX license
2023-03-30 20:59:46 +00:00
License: GPL-3.0-only
Rebase to 1.0.1 release This release is just a sync-up with upstream selinux-policy URL changed to a new upstream repository
2020-12-01 19:24:57 +00:00
URL: https://github.com/devexp-db/mysql-selinux
Summary: SELinux policy modules for MySQL and MariaDB packages
Fix RPMLint warning: "invalid-url Source0" Fixed by: https://docs.fedoraproject.org/en-US/packaging-guidelines/SourceURL/#_troublesome_urls
2021-09-13 11:15:19 +00:00
Source0: https://github.com/devexp-db/mysql-selinux/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
Rebase to 1.0.1 release This release is just a sync-up with upstream selinux-policy URL changed to a new upstream repository
2020-12-01 19:24:57 +00:00
BuildArch: noarch
Additional explanation for the previous commit: In the previous commit, the line: both the line | Requires(post): policycoreutils and is removed, since it is already contained in the macro | %{?selinux_requires} on line after them. $ rpm -E %{?selinux_requires} | | Requires: selinux-policy >= 37.22-1.fc37 | BuildRequires: pkgconfig(systemd) | BuildRequires: selinux-policy | BuildRequires: selinux-policy-devel | Requires(post): selinux-policy-base >= 37.22-1.fc37 | Requires(post): libselinux-utils | Requires(post): policycoreutils | %if 037 || 0 > 7 | Requires(post): policycoreutils-python-utils | %else | Requires(post): policycoreutils-python | %endif Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_32 However this can't be applied to the line: | BuildRequires: selinux-policy-devel Since the it is a recursive problem - the BuildRequires has to be already evaluated for a package containing the macro %{?selinux_requires} to be brought in. So the additional BuildRequires that macro brings has no effect as the evaluation of this kind of symbols has already finished. That's why in the examples as: https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Example_spec_file_changes_to_incorporate_-selinux_subpackage is the lines | BuildRequires: selinux-policy-devel | %{?selinux_requires} Next to each other. Even though the first line would seem redundant, it in fact isn´t. In this commit, I've changed ordering of the lines to group up same symbols together as they logically go one after another. I believe that having all BuildRequires grouped together is easier to read and understand.
2023-09-15 12:46:53 +00:00
Code reorganisation - whitespace changes - remove empty %check phase - move all scriptlets to one place
2021-09-13 11:23:20 +00:00
BuildRequires: make
Rebase to 1.0.1 release This release is just a sync-up with upstream selinux-policy URL changed to a new upstream repository
2020-12-01 19:24:57 +00:00
BuildRequires: selinux-policy-devel
Additional explanation for the previous commit: In the previous commit, the line: both the line | Requires(post): policycoreutils and is removed, since it is already contained in the macro | %{?selinux_requires} on line after them. $ rpm -E %{?selinux_requires} | | Requires: selinux-policy >= 37.22-1.fc37 | BuildRequires: pkgconfig(systemd) | BuildRequires: selinux-policy | BuildRequires: selinux-policy-devel | Requires(post): selinux-policy-base >= 37.22-1.fc37 | Requires(post): libselinux-utils | Requires(post): policycoreutils | %if 037 || 0 > 7 | Requires(post): policycoreutils-python-utils | %else | Requires(post): policycoreutils-python | %endif Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_32 However this can't be applied to the line: | BuildRequires: selinux-policy-devel Since the it is a recursive problem - the BuildRequires has to be already evaluated for a package containing the macro %{?selinux_requires} to be brought in. So the additional BuildRequires that macro brings has no effect as the evaluation of this kind of symbols has already finished. That's why in the examples as: https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Example_spec_file_changes_to_incorporate_-selinux_subpackage is the lines | BuildRequires: selinux-policy-devel | %{?selinux_requires} Next to each other. Even though the first line would seem redundant, it in fact isn´t. In this commit, I've changed ordering of the lines to group up same symbols together as they logically go one after another. I believe that having all BuildRequires grouped together is easier to read and understand.
2023-09-15 12:46:53 +00:00
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
%{?selinux_requires}
Additional explanation for the previous commit: In the previous commit, the line: both the line | Requires(post): policycoreutils and is removed, since it is already contained in the macro | %{?selinux_requires} on line after them. $ rpm -E %{?selinux_requires} | | Requires: selinux-policy >= 37.22-1.fc37 | BuildRequires: pkgconfig(systemd) | BuildRequires: selinux-policy | BuildRequires: selinux-policy-devel | Requires(post): selinux-policy-base >= 37.22-1.fc37 | Requires(post): libselinux-utils | Requires(post): policycoreutils | %if 037 || 0 > 7 | Requires(post): policycoreutils-python-utils | %else | Requires(post): policycoreutils-python | %endif Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_32 However this can't be applied to the line: | BuildRequires: selinux-policy-devel Since the it is a recursive problem - the BuildRequires has to be already evaluated for a package containing the macro %{?selinux_requires} to be brought in. So the additional BuildRequires that macro brings has no effect as the evaluation of this kind of symbols has already finished. That's why in the examples as: https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Example_spec_file_changes_to_incorporate_-selinux_subpackage is the lines | BuildRequires: selinux-policy-devel | %{?selinux_requires} Next to each other. Even though the first line would seem redundant, it in fact isn´t. In this commit, I've changed ordering of the lines to group up same symbols together as they logically go one after another. I believe that having all BuildRequires grouped together is easier to read and understand.
2023-09-15 12:46:53 +00:00
Requires: selinux-policy-%{selinuxtype}
Requires(post): selinux-policy-%{selinuxtype}
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
%description
Rebase to 1.0.1 release This release is just a sync-up with upstream selinux-policy URL changed to a new upstream repository
2020-12-01 19:24:57 +00:00
SELinux policy modules for MySQL and MariaDB packages.
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
Code reorganisation - whitespace changes - remove empty %check phase - move all scriptlets to one place
2021-09-13 11:23:20 +00:00
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
%prep
Rebase to 1.0.1 release This release is just a sync-up with upstream selinux-policy URL changed to a new upstream repository
2020-12-01 19:24:57 +00:00
%setup -q -n %{name}-%{version}
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
%build
make
%install
# install policy modules
install -d %{buildroot}%{_datadir}/selinux/packages
install -m 0644 %{modulename}.pp.bz2 %{buildroot}%{_datadir}/selinux/packages
Code reorganisation - whitespace changes - remove empty %check phase - move all scriptlets to one place
2021-09-13 11:23:20 +00:00
%pre
%selinux_relabel_pre -s %{selinuxtype}
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
%post
Add Requires(post) on policycoreutils for semodule and make sure post/postun cannot fail
2019-01-10 20:23:05 +00:00
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{modulename}.pp.bz2 || :
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
%postun
if [ $1 -eq 0 ]; then
Add Requires(post) on policycoreutils for semodule and make sure post/postun cannot fail
2019-01-10 20:23:05 +00:00
%selinux_modules_uninstall -s %{selinuxtype} %{modulename} || :
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
fi
%posttrans
Also make sure posttrans does not fail.
2019-01-11 17:19:40 +00:00
%selinux_relabel_post -s %{selinuxtype} || :
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
Code reorganisation - whitespace changes - remove empty %check phase - move all scriptlets to one place
2021-09-13 11:23:20 +00:00
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
%files
%defattr(-,root,root,0755)
%attr(0644,root,root) %{_datadir}/selinux/packages/%{modulename}.pp.bz2
Fix rpm verification
2021-04-21 10:36:17 +00:00
%ghost %verify(not mode md5 size mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulename}
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
%license COPYING
%changelog
[packit] 1.0.7 upstream release Upstream tag: 1.0.7 Upstream commit: d718485d
2023-09-14 09:12:41 +00:00
* Thu Sep 14 2023 Packit <hello@packit.dev> - 1.0.7-1
- Empty commit to test Fedora PACKIT configuration for packaging automation (Michal Schorm)
Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 16:09:50 +00:00
* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Rebase to 1.0.6
2023-07-12 07:50:00 +00:00
* Wed Jul 12 2023 Adam Dobes <adobes@redhat.com> - 1.0.6-1
- Rebase to 1.0.6
Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 21:04:54 +00:00
* Thu Jan 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-22 00:04:40 +00:00
* Fri Jul 22 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Changelog fixup
2022-06-09 11:15:18 +00:00
* Thu Jun 09 2022 Michal Schorm <mschorm@redhat.com> - 1.0.5-1
Rebase to 1.0.5
2022-06-09 10:02:46 +00:00
- Rebase to 1.0.5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 20:44:42 +00:00
* Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 15:41:48 +00:00
* Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Fix rpm verification
2021-04-21 10:36:17 +00:00
* Wed Apr 21 2021 Lukas Javorsky <ljavorsk@redhat.com> - 1.0.4-2
- Fix rpm verification it's a ghost file so it should ignore the error
Rebase to 1.0.4 Unintentional removal of semicolon
2021-03-19 13:29:40 +00:00
* Fri Mar 19 2021 Lukas Javorsky <ljavorsk@redhat.com> - 1.0.4-1
- Rebase to 1.0.4
- Unintentional removal of semicolon
Rebase to 1.0.3 Remove setuid/setgid capabilities from mysqld_t type
2021-03-19 12:39:30 +00:00
* Fri Mar 19 2021 Lukas Javorsky <ljavorsk@redhat.com> - 1.0.3-1
- Rebase to 1.0.3
- Remove setuid/setgid capabilities from mysqld_t type.
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-26 21:06:30 +00:00
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Rebase to 1.0.2 release Added context for "*mariadb*" named executables --- Since MariaDB 10.4, the upstream added "*mariadb*" named symlinks for "*mysql*" named executables. https://jira.mariadb.org/browse/MDEV-17591 Since MariaDB 10.5, the upstream switched them, so the executables are now "*mariadb*" named and the symlinks are "*mysql*" named. https://jira.mariadb.org/browse/MDEV-21303 Without these SELinux rules, the new "*mariadb*" files haven't got a correct context.
2020-12-02 16:43:18 +00:00
* Wed Dec 02 2020 Michal Schorm <mschorm@redhat.com> - 1.0.2-1
- Rebase to 1.0.2 release
Added context for "*mariadb*" named executables
Rebase to 1.0.1 release This release is just a sync-up with upstream selinux-policy URL changed to a new upstream repository
2020-12-01 19:24:57 +00:00
* Tue Dec 01 2020 Michal Schorm <mschorm@redhat.com> - 1.0.1-1
- Rebase to 1.0.1 release
This release is just a sync-up with upstream selinux-policy
- URL changed to a new upstream repository
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 08:43:58 +00:00
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 14:25:49 +00:00
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-01 11:49:31 +00:00
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Also make sure posttrans does not fail.
2019-01-11 17:19:40 +00:00
* Fri Jan 11 2019 Kevin Fenzi <kevin@scrye.com> - 1.0.0-7
- Also make sure posttrans does not fail.
Add Requires(post) on policycoreutils for semodule and make sure post/postun cannot fail
2019-01-10 20:23:05 +00:00
* Thu Jan 10 2019 Kevin Fenzi <kevin@scrye.com> - 1.0.0-6
- Add Requires(post) on policycoreutils for semodule and make sure post/postun cannot fail
Sync with upstream
2018-12-06 09:44:21 +00:00
* Thu Dec 06 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-5
- Sync with upstream
add missing spec file changes
2018-08-29 15:04:53 +00:00
* Wed Aug 29 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-4
- Allow mysqld sys_nice capability
initial version 1.0.0-3
2018-08-20 14:00:36 +00:00
* Mon Aug 20 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-3
- reflect latest changes of mysql policy
* Fri Jul 27 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-2
- reflect latest changes of Independent Product Policy
* Wed Jul 18 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-1
- First Build
Reference in New Issue Copy Permalink