rpms
/
selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Add safeguard around "semodule -n -d sandbox" 

Each time this package is updated, it remove the sandbox module, thus
making the sandbox command not working until someone reenable it.

The main cause is likely the non intuitive ordering of RPM post install
script, as %preun is run after %post. See the details on
https://fedoraproject.org/wiki/Packaging:Scriptlets
This commit is contained in:
Michael Scherer 2017-04-20 01:58:54 +02:00 committed by Petr Lautrbach
parent e08cffb7e1
commit c8b7cd49fb
1 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
selinux-policy.spec
View File

@ -19,7 +19,7 @@
Summary: SELinux policy configuration Summary: SELinux policy configuration
Name: selinux-policy Name: selinux-policy
Version: 3.13.1 Version: 3.13.1
Release: 251%{?dist} Release: 252%{?dist}
License: GPLv2+ License: GPLv2+
Group: System Environment/Base Group: System Environment/Base
Source: serefpolicy-%{version}.tgz Source: serefpolicy-%{version}.tgz
@ -116,10 +116,13 @@ fi;
exit 0 exit 0
%preun sandbox %preun sandbox
semodule -n -d sandbox 2>/dev/null if [ $1 -eq 0 ] ; then
if /usr/sbin/selinuxenabled ; then semodule -n -d sandbox 2>/dev/null
/usr/sbin/load_policy if /usr/sbin/selinuxenabled ; then
fi;exit 0 /usr/sbin/load_policy
fi;
fi;
exit 0
%package devel %package devel
Summary: SELinux policy devel Summary: SELinux policy devel
@ -682,6 +685,9 @@ exit 0
%endif %endif
%changelog %changelog
* Thu Apr 20 2017 Michael Scherer <misc@fedoraproject.org> - 3.13.1-252
- fix #1380325, selinux-policy-sandbox always removing sandbox module on upgrade
* Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251 * Tue Apr 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-251
- Fix abrt module to reflect all changes in abrt release - Fix abrt module to reflect all changes in abrt release