Add safeguard around "semodule -n -d sandbox"
Each time this package is updated, it remove the sandbox module, thus making the sandbox command not working until someone reenable it. The main cause is likely the non intuitive ordering of RPM post install script, as %preun is run after %post. See the details on https://fedoraproject.org/wiki/Packaging:Scriptlets
This commit is contained in:
parent
e08cffb7e1
commit
c8b7cd49fb
@ -19,7 +19,7 @@
|
|||||||
Summary: SELinux policy configuration
|
Summary: SELinux policy configuration
|
||||||
Name: selinux-policy
|
Name: selinux-policy
|
||||||
Version: 3.13.1
|
Version: 3.13.1
|
||||||
Release: 251%{?dist}
|
Release: 252%{?dist}
|
||||||
License: GPLv2+
|
License: GPLv2+
|
||||||
Group: System Environment/Base
|
Group: System Environment/Base
|
||||||
Source: serefpolicy-%{version}.tgz
|
Source: serefpolicy-%{version}.tgz
|
||||||
@ -116,10 +116,13 @@ fi;
|
|||||||
exit 0
|
exit 0
|
||||||
|
|
||||||
%preun sandbox
|
%preun sandbox
|
||||||
semodule -n -d sandbox 2>/dev/null
|
if [ $1 -eq 0 ] ; then
|
||||||
if /usr/sbin/selinuxenabled ; then
|
semodule -n -d sandbox 2>/dev/null
|
||||||
|
if /usr/sbin/selinuxenabled ; then
|
||||||
/usr/sbin/load_policy
|
/usr/sbin/load_policy
|
||||||
fi;exit 0
|
fi;
|
||||||
|
fi;
|
||||||
|
exit 0
|
||||||
|
|
||||||
%package devel
|
%package devel
|
||||||
Summary: SELinux policy devel
|
Summary: SELinux policy devel
|
||||||
@ -682,6 +685,9 @@ exit 0
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Thu Apr 20 2017 Michael Scherer <misc@fedoraproject.org> - 3.13.1-252
|
||||||
|
- fix #1380325, selinux-policy-sandbox always removing sandbox module on upgrade
|
||||||
|
|
||||||
* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251
|
* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251
|
||||||
- Fix abrt module to reflect all changes in abrt release
|
- Fix abrt module to reflect all changes in abrt release
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user