From 081ff84911f9887c4e998e7491e465fe10887fee Mon Sep 17 00:00:00 2001 From: Scott Mayhew Date: Fri, 27 Feb 2026 08:46:19 -0500 Subject: [PATCH] Add requires for selinux-policy The fixes for rpc.mountd need the selinux-policy to have "Allow nfsd_t domain setuid and setgid capability for rpc.mountd". Resolves: CVE-2025-12801 Resolves: RHEL-127095 Signed-off-by: Scott Mayhew --- nfs-utils.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/nfs-utils.spec b/nfs-utils.spec index bb39c13..e35bf40 100644 --- a/nfs-utils.spec +++ b/nfs-utils.spec @@ -2,7 +2,7 @@ Summary: NFS utilities and supporting clients and daemons for the kernel NFS ser Name: nfs-utils URL: http://linux-nfs.org/ Version: 2.3.3 -Release: 67%{?dist} +Release: 68%{?dist} Epoch: 1 # group all 32bit related archs @@ -167,6 +167,7 @@ Requires: libnfsidmap libevent Requires: libtirpc >= 0.2.3-1 libblkid libcap libmount %{?systemd_requires} Requires: gssproxy => 0.7.0-3 +Requires: (selinux-policy >= 3.14.3-139.el8_10.2 if selinux-policy) %package -n libnfsidmap Summary: NFSv4 User and Group ID Mapping Library @@ -402,6 +403,9 @@ fi %{_libdir}/libnfsidmap.so %changelog +* Fri Feb 27 2026 Scott Mayhew 2.3.3-68 +- Add requires for selinux-policy (RHEL-127095) + * Fri Jan 30 2026 Scott Mayhew 2.3.3-67 - mountd: Minor refactor of get_rootfh() (RHEL-127095) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127095)