rpms/selinux-policy
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Protect the targeted and mls subpackages

Browse Source 
Protect the targeted and mls subpackages from uninstallation by dnf
when conditional dependencies may suggest so.

Related: RHEL-54303
This commit is contained in:
Zdenek Pytela 2024-05-20 16:12:51 +02:00 committed by Petr Lautrbach
parent 579a5b4d7e
commit c9eca3f2d7
3 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
selinux-policy-mls.conf Normal file
View File

@ -0,0 +1 @@
selinux-policy-mls

1
selinux-policy-targeted.conf Normal file
View File

@ -0,0 +1 @@
selinux-policy-targeted

9
selinux-policy.spec
View File

@ -63,6 +63,9 @@ Source36: selinux-check-proper-disable.service
# Script to convert /var/run file context entries to /run # Script to convert /var/run file context entries to /run
Source37: varrun-convert.sh Source37: varrun-convert.sh
# Configuration files to dnf-protect targeted and/or mls subpackages
Source38: selinux-policy-targeted.conf
Source39: selinux-policy-mls.conf
# Provide rpm macros for packages installing SELinux modules # Provide rpm macros for packages installing SELinux modules
Source102: rpm.macros Source102: rpm.macros
@ -451,6 +454,10 @@ mkdir -p %{buildroot}%{_sharedstatedir}/selinux/{targeted,mls,minimum,modules}/
mkdir -p %{buildroot}%{_datadir}/selinux/packages mkdir -p %{buildroot}%{_datadir}/selinux/packages
mkdir -p %{buildroot}%{_sysconfdir}/dnf/protected.d/
install -m 755 %{SOURCE38} %{buildroot}%{_sysconfdir}/dnf/protected.d/
install -m 755 %{SOURCE39} %{buildroot}%{_sysconfdir}/dnf/protected.d/
# Install devel # Install devel
make clean make clean
%if %{BUILD_TARGETED} %if %{BUILD_TARGETED}
@ -679,6 +686,7 @@ fi
exit 0 exit 0
%files targeted -f %{buildroot}%{_datadir}/selinux/targeted/nonbasemodules.lst %files targeted -f %{buildroot}%{_datadir}/selinux/targeted/nonbasemodules.lst
%config(noreplace) %{_sysconfdir}/dnf/protected.d/selinux-policy-targeted.conf
%config(noreplace) %{_sysconfdir}/selinux/targeted/contexts/users/unconfined_u %config(noreplace) %{_sysconfdir}/selinux/targeted/contexts/users/unconfined_u
%config(noreplace) %{_sysconfdir}/selinux/targeted/contexts/users/sysadm_u %config(noreplace) %{_sysconfdir}/selinux/targeted/contexts/users/sysadm_u
%fileList targeted %fileList targeted
@ -857,6 +865,7 @@ exit 0
%files mls -f %{buildroot}%{_datadir}/selinux/mls/nonbasemodules.lst %files mls -f %{buildroot}%{_datadir}/selinux/mls/nonbasemodules.lst
%config(noreplace) %{_sysconfdir}/dnf/protected.d/selinux-policy-mls.conf
%config(noreplace) %{_sysconfdir}/selinux/mls/contexts/users/unconfined_u %config(noreplace) %{_sysconfdir}/selinux/mls/contexts/users/unconfined_u
%fileList mls %fileList mls
%endif %endif