From 8779e924e976822606201813e10ddeec1bcaa55a Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: Thu, 21 Feb 2013 20:06:41 +0100
Subject: [PATCH] Sepolixy should not throw an exception on an SELinux disabled
 machine

- Switch from using console app to using pkexec, so we will work better
with policykit.
- Add missing import to fix system-config-selinux startup
- Add comment to pamd files about pam_rootok.so
- Fix sepolicy generate to not comment out the first line
---
 policycoreutils.spec | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policycoreutils.spec b/policycoreutils.spec
index c20b273..7601e16 100644
--- a/policycoreutils.spec
+++ b/policycoreutils.spec
@@ -256,6 +256,7 @@ rm -rf %{buildroot}
 %{_bindir}/semodule_package
 %{_bindir}/semodule_unpackage
 %config(noreplace) %{_sysconfdir}/sestatus.conf
+%config(noreplace) %{_sysconfdir}/pam.d/newrole
 # selinux-policy Requires: policycoreutils, so we own this set of directories and our files within them
 %{_mandir}/man5/selinux_config.5.gz
 %{_mandir}/man5/sestatus.conf.5.gz