rpms/mysql-selinux
7
0
Fork 0
Code Issues Pull Requests Releases Activity
3beee6268b
mysql-selinux/mysql-selinux.spec

130 lines
4.1 KiB
RPMSpec
Raw Normal View History

Add useful notes for maintainers Related: RHEL-19372
2023-09-15 12:46:18 +00:00
# General maintainer notes:
# Fedora guideliens for packaging of SELinux rules:
# https://fedoraproject.org/wiki/SELinux/IndependentPolicy
# RHEL instructions regarding Troubleshooting problems related to SELinux:
# https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/using_selinux/troubleshooting-problems-related-to-selinux_using-selinux
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
# defining macros needed by SELinux
%global selinuxtype targeted
%global modulename mysql
Name: mysql-selinux
1.0.7 upstream release Upstream tag: 1.0.7 Upstream commit: d718485d Related: RHEL-19372
2023-09-14 09:12:41 +00:00
Version: 1.0.7
Rebase to 1.0.5 -- Cherry-picked Fedora commit: f2713718dcb68db4204f5fd3989387d17ddf9d4e Squashed with Fedora commit: f1c1fc7ee08cb3e8693afda0720a28b5459aa2af -- Resolves: #2073386
2022-06-09 10:49:47 +00:00
Release: 1%{?dist}
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
License: GPLv3
URL: https://github.com/devexp-db/mysql-selinux
Summary: SELinux policy modules for MySQL and MariaDB packages
Fix RPMLint warning: "invalid-url Source0" Fixed by: https://docs.fedoraproject.org/en-US/packaging-guidelines/SourceURL/#_troublesome_urls -- Cherry-picked Fedora commit: 298890f801c5beb40eefa49c0f4c171c22eeba1c -- Related: #2073386
2021-09-13 11:15:19 +00:00
Source0: https://github.com/devexp-db/mysql-selinux/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
BuildArch: noarch
Additional explanation for the previous commit: In the previous commit, the line: both the line | Requires(post): policycoreutils and is removed, since it is already contained in the macro | %{?selinux_requires} on line after them. $ rpm -E %{?selinux_requires} | | Requires: selinux-policy >= 37.22-1.fc37 | BuildRequires: pkgconfig(systemd) | BuildRequires: selinux-policy | BuildRequires: selinux-policy-devel | Requires(post): selinux-policy-base >= 37.22-1.fc37 | Requires(post): libselinux-utils | Requires(post): policycoreutils | %if 037 || 0 > 7 | Requires(post): policycoreutils-python-utils | %else | Requires(post): policycoreutils-python | %endif Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_32 However this can't be applied to the line: | BuildRequires: selinux-policy-devel Since the it is a recursive problem - the BuildRequires has to be already evaluated for a package containing the macro %{?selinux_requires} to be brought in. So the additional BuildRequires that macro brings has no effect as the evaluation of this kind of symbols has already finished. That's why in the examples as: https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Example_spec_file_changes_to_incorporate_-selinux_subpackage is the lines | BuildRequires: selinux-policy-devel | %{?selinux_requires} Next to each other. Even though the first line would seem redundant, it in fact isn´t. In this commit, I've changed ordering of the lines to group up same symbols together as they logically go one after another. I believe that having all BuildRequires grouped together is easier to read and understand. Related: RHEL-19372
2023-09-15 12:46:53 +00:00
Code reorganisation - whitespace changes - remove empty %check phase - move all scriptlets to one place -- Cherry-picked Fedora commit: 082bdac2473eceba348ba3b0eedd47b5e01315eb -- Related: #2073386
2021-09-13 11:23:20 +00:00
BuildRequires: make
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
BuildRequires: selinux-policy-devel
Additional explanation for the previous commit: In the previous commit, the line: both the line | Requires(post): policycoreutils and is removed, since it is already contained in the macro | %{?selinux_requires} on line after them. $ rpm -E %{?selinux_requires} | | Requires: selinux-policy >= 37.22-1.fc37 | BuildRequires: pkgconfig(systemd) | BuildRequires: selinux-policy | BuildRequires: selinux-policy-devel | Requires(post): selinux-policy-base >= 37.22-1.fc37 | Requires(post): libselinux-utils | Requires(post): policycoreutils | %if 037 || 0 > 7 | Requires(post): policycoreutils-python-utils | %else | Requires(post): policycoreutils-python | %endif Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_32 However this can't be applied to the line: | BuildRequires: selinux-policy-devel Since the it is a recursive problem - the BuildRequires has to be already evaluated for a package containing the macro %{?selinux_requires} to be brought in. So the additional BuildRequires that macro brings has no effect as the evaluation of this kind of symbols has already finished. That's why in the examples as: https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Example_spec_file_changes_to_incorporate_-selinux_subpackage is the lines | BuildRequires: selinux-policy-devel | %{?selinux_requires} Next to each other. Even though the first line would seem redundant, it in fact isn´t. In this commit, I've changed ordering of the lines to group up same symbols together as they logically go one after another. I believe that having all BuildRequires grouped together is easier to read and understand. Related: RHEL-19372
2023-09-15 12:46:53 +00:00
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
%{?selinux_requires}
Additional explanation for the previous commit: In the previous commit, the line: both the line | Requires(post): policycoreutils and is removed, since it is already contained in the macro | %{?selinux_requires} on line after them. $ rpm -E %{?selinux_requires} | | Requires: selinux-policy >= 37.22-1.fc37 | BuildRequires: pkgconfig(systemd) | BuildRequires: selinux-policy | BuildRequires: selinux-policy-devel | Requires(post): selinux-policy-base >= 37.22-1.fc37 | Requires(post): libselinux-utils | Requires(post): policycoreutils | %if 037 || 0 > 7 | Requires(post): policycoreutils-python-utils | %else | Requires(post): policycoreutils-python | %endif Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_32 However this can't be applied to the line: | BuildRequires: selinux-policy-devel Since the it is a recursive problem - the BuildRequires has to be already evaluated for a package containing the macro %{?selinux_requires} to be brought in. So the additional BuildRequires that macro brings has no effect as the evaluation of this kind of symbols has already finished. That's why in the examples as: https://fedoraproject.org/wiki/SELinux/IndependentPolicy#Example_spec_file_changes_to_incorporate_-selinux_subpackage is the lines | BuildRequires: selinux-policy-devel | %{?selinux_requires} Next to each other. Even though the first line would seem redundant, it in fact isn´t. In this commit, I've changed ordering of the lines to group up same symbols together as they logically go one after another. I believe that having all BuildRequires grouped together is easier to read and understand. Related: RHEL-19372
2023-09-15 12:46:53 +00:00
Requires: selinux-policy-%{selinuxtype}
Requires(post): selinux-policy-%{selinuxtype}
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
%description
SELinux policy modules for MySQL and MariaDB packages.
Code reorganisation - whitespace changes - remove empty %check phase - move all scriptlets to one place -- Cherry-picked Fedora commit: 082bdac2473eceba348ba3b0eedd47b5e01315eb -- Related: #2073386
2021-09-13 11:23:20 +00:00
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
%prep
%setup -q -n %{name}-%{version}
%build
make
%install
# install policy modules
install -d %{buildroot}%{_datadir}/selinux/packages
install -m 0644 %{modulename}.pp.bz2 %{buildroot}%{_datadir}/selinux/packages
Code reorganisation - whitespace changes - remove empty %check phase - move all scriptlets to one place -- Cherry-picked Fedora commit: 082bdac2473eceba348ba3b0eedd47b5e01315eb -- Related: #2073386
2021-09-13 11:23:20 +00:00
%pre
%selinux_relabel_pre -s %{selinuxtype}
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
%post
Don't ignore errors in SELinux scriptlets ... well, at leats on the SPECfile side. They are still being ignored in the macros themselves $ rpm -E %selinux_modules_install | | if [ -e /etc/selinux/config ]; then | . /etc/selinux/config | fi | _policytype= | if [ -z "${_policytype}" ]; then | _policytype="targeted" | fi | if [ "${SELINUXTYPE}" = "${_policytype}" ]; then | /usr/sbin/semodule -n -s ${_policytype} -X 200 -i || : | /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : | fi $ rpm -E %selinux_modules_uninstall | | if [ -e /etc/selinux/config ]; then | . /etc/selinux/config | fi | _policytype= | if [ -z "${_policytype}" ]; then | _policytype="targeted" | fi | if [ $1 -eq 0 ]; then | if [ "${SELINUXTYPE}" = "${_policytype}" ]; then | /usr/sbin/semodule -n -X 200 -s ${_policytype} -r &> /dev/null || : | /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : | fi | fi Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_48 The reason is described here: https://bugzilla.redhat.com/show_bug.cgi?id=1665643 TL;DR: The return values of any scriptlet in Fedora MUST be zero. No matter how the errors in the scriptlets are handled. For now, the "handled" means "ignored" in the case of SELinux scriplet macros. Related: RHEL-19372
2023-09-15 12:35:36 +00:00
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{modulename}.pp.bz2
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
%postun
if [ $1 -eq 0 ]; then
Don't ignore errors in SELinux scriptlets ... well, at leats on the SPECfile side. They are still being ignored in the macros themselves $ rpm -E %selinux_modules_install | | if [ -e /etc/selinux/config ]; then | . /etc/selinux/config | fi | _policytype= | if [ -z "${_policytype}" ]; then | _policytype="targeted" | fi | if [ "${SELINUXTYPE}" = "${_policytype}" ]; then | /usr/sbin/semodule -n -s ${_policytype} -X 200 -i || : | /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : | fi $ rpm -E %selinux_modules_uninstall | | if [ -e /etc/selinux/config ]; then | . /etc/selinux/config | fi | _policytype= | if [ -z "${_policytype}" ]; then | _policytype="targeted" | fi | if [ $1 -eq 0 ]; then | if [ "${SELINUXTYPE}" = "${_policytype}" ]; then | /usr/sbin/semodule -n -X 200 -s ${_policytype} -r &> /dev/null || : | /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : | fi | fi Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_48 The reason is described here: https://bugzilla.redhat.com/show_bug.cgi?id=1665643 TL;DR: The return values of any scriptlet in Fedora MUST be zero. No matter how the errors in the scriptlets are handled. For now, the "handled" means "ignored" in the case of SELinux scriplet macros. Related: RHEL-19372
2023-09-15 12:35:36 +00:00
%selinux_modules_uninstall -s %{selinuxtype} %{modulename}
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
fi
%posttrans
Don't ignore errors in SELinux scriptlets ... well, at leats on the SPECfile side. They are still being ignored in the macros themselves $ rpm -E %selinux_modules_install | | if [ -e /etc/selinux/config ]; then | . /etc/selinux/config | fi | _policytype= | if [ -z "${_policytype}" ]; then | _policytype="targeted" | fi | if [ "${SELINUXTYPE}" = "${_policytype}" ]; then | /usr/sbin/semodule -n -s ${_policytype} -X 200 -i || : | /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : | fi $ rpm -E %selinux_modules_uninstall | | if [ -e /etc/selinux/config ]; then | . /etc/selinux/config | fi | _policytype= | if [ -z "${_policytype}" ]; then | _policytype="targeted" | fi | if [ $1 -eq 0 ]; then | if [ "${SELINUXTYPE}" = "${_policytype}" ]; then | /usr/sbin/semodule -n -X 200 -s ${_policytype} -r &> /dev/null || : | /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : | fi | fi Defined here: https://src.fedoraproject.org/rpms/selinux-policy/blob/rawhide/f/rpm.macros#_48 The reason is described here: https://bugzilla.redhat.com/show_bug.cgi?id=1665643 TL;DR: The return values of any scriptlet in Fedora MUST be zero. No matter how the errors in the scriptlets are handled. For now, the "handled" means "ignored" in the case of SELinux scriplet macros. Related: RHEL-19372
2023-09-15 12:35:36 +00:00
%selinux_relabel_post -s %{selinuxtype}
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
Code reorganisation - whitespace changes - remove empty %check phase - move all scriptlets to one place -- Cherry-picked Fedora commit: 082bdac2473eceba348ba3b0eedd47b5e01315eb -- Related: #2073386
2021-09-13 11:23:20 +00:00
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
%files
%defattr(-,root,root,0755)
%attr(0644,root,root) %{_datadir}/selinux/packages/%{modulename}.pp.bz2
Rebase to 1.0.4 Fix rpm verify error Resolves: bz#1954070
2021-05-03 09:05:13 +00:00
%ghost %verify(not mode md5 size mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulename}
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
%license COPYING
%changelog
1.0.7 upstream release Upstream tag: 1.0.7 Upstream commit: d718485d Related: RHEL-19372
2023-09-14 09:12:41 +00:00
* Thu Sep 14 2023 Packit <hello@packit.dev> - 1.0.7-1
- Empty commit to test Fedora PACKIT configuration for packaging automation (Michal Schorm)
Rebase to 1.0.6 Related: RHEL-19372
2023-07-12 07:50:00 +00:00
* Wed Jul 12 2023 Adam Dobes <adobes@redhat.com> - 1.0.6-1
- Rebase to 1.0.6
Rebase to 1.0.5 -- Cherry-picked Fedora commit: f2713718dcb68db4204f5fd3989387d17ddf9d4e Squashed with Fedora commit: f1c1fc7ee08cb3e8693afda0720a28b5459aa2af -- Resolves: #2073386
2022-06-09 10:49:47 +00:00
* Thu Jun 09 2022 Michal Schorm <mschorm@redhat.com> - 1.0.5-1
- Rebase to 1.0.5
Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-09 22:25:53 +00:00
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.0.4-2
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Rebase to 1.0.4 Fix rpm verify error Resolves: bz#1954070
2021-05-03 09:05:13 +00:00
* Tue May 04 2021 Lukas Javorsky <ljavorsk@redhat.com> - 1.0.4-1
- Rebase to 1.0.4
- Fix rpm verification it's a ghost file so it should ignore the error
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 02:19:41 +00:00
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.0.2-3
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Merged update from upstream sources This is an automated DistroBaker update from upstream sources. If you do not know what this is about or would like to opt out, contact the OSCI team. Source: https://src.fedoraproject.org/rpms/mysql-selinux.git#7e7c60d6498ee587f87fc114f867ef78086bc7d1
2021-02-06 04:35:20 +00:00
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Wed Dec 02 2020 Michal Schorm <mschorm@redhat.com> - 1.0.2-1
- Rebase to 1.0.2 release
Added context for "*mariadb*" named executables
* Tue Dec 01 2020 Michal Schorm <mschorm@redhat.com> - 1.0.1-1
- Rebase to 1.0.1 release
This release is just a sync-up with upstream selinux-policy
- URL changed to a new upstream repository
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Fri Jan 11 2019 Kevin Fenzi <kevin@scrye.com> - 1.0.0-7
- Also make sure posttrans does not fail.
* Thu Jan 10 2019 Kevin Fenzi <kevin@scrye.com> - 1.0.0-6
- Add Requires(post) on policycoreutils for semodule and make sure post/postun cannot fail
* Thu Dec 06 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-5
- Sync with upstream
* Wed Aug 29 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-4
- Allow mysqld sys_nice capability
* Mon Aug 20 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-3
- reflect latest changes of mysql policy
* Fri Jul 27 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-2
- reflect latest changes of Independent Product Policy
* Wed Jul 18 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-1
- First Build
Reference in New Issue Copy Permalink