2 commits - rel-eng/packages selinux/oracle-xe-selinux
by Jan Pazdziora
rel-eng/packages/oracle-xe-selinux | 2 +-
selinux/oracle-xe-selinux/oracle-xe-selinux-enable | 2 +-
selinux/oracle-xe-selinux/oracle-xe-selinux.spec | 6 +++++-
3 files changed, 7 insertions(+), 3 deletions(-)
New commits:
commit 1cdda86fa530edb90bb201cc929d1a74efd0323f
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Fri Nov 27 14:21:19 2009 +0100
Automatic commit of package [oracle-xe-selinux] minor release [10.2-15].
diff --git a/rel-eng/packages/oracle-xe-selinux b/rel-eng/packages/oracle-xe-selinux
index f2e2e2b..15a93f8 100644
--- a/rel-eng/packages/oracle-xe-selinux
+++ b/rel-eng/packages/oracle-xe-selinux
@@ -1 +1 @@
-10.2-14 selinux/oracle-xe-selinux/
+10.2-15 selinux/oracle-xe-selinux/
diff --git a/selinux/oracle-xe-selinux/oracle-xe-selinux.spec b/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
index e0f1f8e..003d3ed 100644
--- a/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
+++ b/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
@@ -6,7 +6,7 @@
Name: oracle-xe-selinux
Version: 10.2
-Release: 14%{?dist}
+Release: 15%{?dist}
Summary: SELinux policy module supporting Oracle XE
Group: System Environment/Base
License: GPLv2+
@@ -138,6 +138,9 @@ fi
%attr(0755,root,root) %{_sbindir}/%{name}-enable
%changelog
+* Fri Nov 27 2009 Jan Pazdziora 10.2-15
+- Change the port from 9000 to 9055.
+
* Thu Nov 26 2009 Jan Pazdziora 10.2-14
- In RHEL5 one process reading information on another in the /proc directory
caused a ptrace access check, allow
commit f3731464f665997c86594e69cf48f05a039d3c42
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Fri Nov 27 14:19:16 2009 +0100
Due to change in bugzilla 533908, on Fedora 12 the port 9000 is now hardcoded in the policy. We shall use 9055 now.
diff --git a/selinux/oracle-xe-selinux/oracle-xe-selinux-enable b/selinux/oracle-xe-selinux/oracle-xe-selinux-enable
index 5e471ce..e2abdf7 100644
--- a/selinux/oracle-xe-selinux/oracle-xe-selinux-enable
+++ b/selinux/oracle-xe-selinux/oracle-xe-selinux-enable
@@ -7,7 +7,7 @@ for selinuxvariant in mls strict targeted
/usr/share/selinux/${selinuxvariant}/oracle-xe.pp &> /dev/null || :
done
-/usr/sbin/semanage port -a -t oracle_port_t -p tcp 9000 || :
+/usr/sbin/semanage port -a -t oracle_port_t -p tcp 9055 || :
# Relabel oracle-xe-univ's files
rpm -ql oracle-xe-univ | xargs -n 100 /sbin/restorecon -Rivv
diff --git a/selinux/oracle-xe-selinux/oracle-xe-selinux.spec b/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
index aadf6ed..e0f1f8e 100644
--- a/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
+++ b/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
@@ -121,6 +121,7 @@ if [ $1 -eq 0 ]; then
done
/usr/sbin/semanage port -d -t oracle_port_t -p tcp 9000 || :
+ /usr/sbin/semanage port -d -t oracle_port_t -p tcp 9055 || :
# Clean up oracle-xe-univ's files
rpm -ql oracle-xe-univ | xargs -n 100 /sbin/restorecon -Rivv
14 years, 5 months
client/rhel
by Miroslav Suchý
client/rhel/yum-rhn-plugin/rhnplugin.py | 24 +++++++++++++++++++-----
1 file changed, 19 insertions(+), 5 deletions(-)
New commits:
commit ce560b1c1e1b12161eccf935803539e7b8c312c2
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Fri Nov 27 14:05:00 2009 +0100
437822 - when persistent enable/disable of rhn repo is requested, do it in rhnplugin.conf
diff --git a/client/rhel/yum-rhn-plugin/rhnplugin.py b/client/rhel/yum-rhn-plugin/rhnplugin.py
index b38271a..23f4e5d 100644
--- a/client/rhel/yum-rhn-plugin/rhnplugin.py
+++ b/client/rhel/yum-rhn-plugin/rhnplugin.py
@@ -16,7 +16,7 @@ import yum.Errors
from urlgrabber.grabber import URLGrabber
from urlgrabber.grabber import URLGrabError
-
+from iniparse import INIConfig
import gettext
_ = gettext.gettext
@@ -245,6 +245,7 @@ class RhnRepo(YumRepository):
def __init__(self, channel):
YumRepository.__init__(self, channel['label'])
self.name = channel['name']
+ self.label = channel['label']
self._callbacks_changed = False
# support failover urls, #232567
@@ -444,18 +445,31 @@ class RhnRepo(YumRepository):
grabfunc = property(lambda self: self._getgrabfunc())
grab = property(lambda self: self._getgrab())
+ def _setChannelEnable(self, value=1):
+ """ Enable or disable channel in file rhnplugin.conf.
+ channel is label of channel and value should be 1 or 0.
+ """
+ cfg = INIConfig(file('/etc/yum/pluginconf.d/rhnplugin.conf'))
+ # we cannot use directly cfg[channel].['enabled'], because
+ # if that section do not exist it raise error
+ func=getattr(cfg, self.label)
+ func.enabled=value
+ f=open('/etc/yum/pluginconf.d/rhnplugin.conf', 'w')
+ print >>f, cfg
+ f.close()
+
def enablePersistent(self):
"""
- Despite name, this method does not alter persistent data
- It enables the repo temporarily
+ Persistently enable channel in rhnplugin.conf
"""
+ self._setChannelEnable(1)
self.enable()
def disablePersistent(self):
"""
- Despite name, this method does not alter persistent data
- It disables the repo temporarily
+ Persistently disable channel in rhnplugin.conf
"""
+ self._setChannelEnable(0)
self.disable()
def _getRepoXML(self):
14 years, 5 months
client/rhel
by Milan Zazrivec
client/rhel/rhn-client-tools/src/up2date_client/rpcServer.py | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
New commits:
commit 116344e5a23cc1fe7da54f3fb07607de03b1b803
Author: Milan Zazrivec <mzazrivec(a)redhat.com>
Date: Thu Nov 26 21:11:54 2009 +0100
541262 - revised networkRetries logic
* treat all values less or equal to zero as: make exactly one connection
attempt
* treat all values greater than zero as: make exactly that many connection
attempts
According to this specifying one or zero will have the same effect
(i.e. exactly one connection attempt).
diff --git a/client/rhel/rhn-client-tools/src/up2date_client/rpcServer.py b/client/rhel/rhn-client-tools/src/up2date_client/rpcServer.py
index 1a810d9..6e0794e 100644
--- a/client/rhel/rhn-client-tools/src/up2date_client/rpcServer.py
+++ b/client/rhel/rhn-client-tools/src/up2date_client/rpcServer.py
@@ -191,10 +191,10 @@ def doCall(method, *args, **kwargs):
ret = None
attempt_count = 1
- if cfg["networkRetries"]:
- attempts = cfg["networkRetries"] or 5
+ if cfg["networkRetries"] <= 0:
+ attempts = 1
else:
- attempts = 0
+ attempts = cfg["networkRetries"]
while 1:
failure = 0
14 years, 5 months
client/rhel
by Milan Zazrivec
client/rhel/rhnsd/rhnsd.c | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
New commits:
commit 101cc01226d8d5ad165e21c122733aad1dae4f8c
Author: Milan Zazrivec <mzazrivec(a)redhat.com>
Date: Thu Nov 26 18:53:56 2009 +0100
541682 - make env. for rhn_check consistent with osad
diff --git a/client/rhel/rhnsd/rhnsd.c b/client/rhel/rhnsd/rhnsd.c
index 5a21e70..d41f7a0 100644
--- a/client/rhel/rhnsd/rhnsd.c
+++ b/client/rhel/rhnsd/rhnsd.c
@@ -355,7 +355,6 @@ static int rhn_do_action(void)
if ((child = fork()) == 0) {
/* Okay, maybe we're too paranoid... */
char *args[] = { NULL, NULL };
- char *envp[] = { NULL };
/* close the read end of the pipe */
close(fds[0]);
@@ -374,7 +373,7 @@ static int rhn_do_action(void)
unset_signal_handlers ();
/* exec binary helper */
args[0] = RHN_CHECK;
- execve(RHN_CHECK, args, envp);
+ execv(RHN_CHECK, args);
/* should not get here: exit with error */
set_signal_handlers ();
14 years, 5 months
Changes to 'refs/tags/oracle-xe-selinux-10.2-14'
by Jan Pazdziora
Tag 'oracle-xe-selinux-10.2-14' created by Jan Pazdziora <jpazdziora(a)redhat.com> at 2009-11-26 13:57 +0000
Tagging package [oracle-xe-selinux] version [10.2-14] in directory [selinux/oracle-xe-selinux/].
Changes since oracle-instantclient-selinux-10.2-17:
Jan Pazdziora (2):
In RHEL5 one process reading information on another in the /proc directory caused a ptrace access check.
Automatic commit of package [oracle-xe-selinux] minor release [10.2-14].
Miroslav Suchý (1):
fix reference to config dir
---
rel-eng/koji-missing-builds.py | 2 +-
rel-eng/packages/oracle-xe-selinux | 2 +-
selinux/oracle-xe-selinux/oracle-xe-selinux.spec | 6 +++++-
selinux/oracle-xe-selinux/oracle-xe.te | 2 ++
4 files changed, 9 insertions(+), 3 deletions(-)
---
14 years, 5 months
2 commits - rel-eng/packages selinux/oracle-xe-selinux
by Jan Pazdziora
rel-eng/packages/oracle-xe-selinux | 2 +-
selinux/oracle-xe-selinux/oracle-xe-selinux.spec | 6 +++++-
selinux/oracle-xe-selinux/oracle-xe.te | 2 ++
3 files changed, 8 insertions(+), 2 deletions(-)
New commits:
commit bcb5bf5fe279e12cb3f990dab0bd1305994a0d01
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Thu Nov 26 14:57:22 2009 +0100
Automatic commit of package [oracle-xe-selinux] minor release [10.2-14].
diff --git a/rel-eng/packages/oracle-xe-selinux b/rel-eng/packages/oracle-xe-selinux
index 62c6ea0..f2e2e2b 100644
--- a/rel-eng/packages/oracle-xe-selinux
+++ b/rel-eng/packages/oracle-xe-selinux
@@ -1 +1 @@
-10.2-13 selinux/oracle-xe-selinux/
+10.2-14 selinux/oracle-xe-selinux/
diff --git a/selinux/oracle-xe-selinux/oracle-xe-selinux.spec b/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
index 4c5ec6a..aadf6ed 100644
--- a/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
+++ b/selinux/oracle-xe-selinux/oracle-xe-selinux.spec
@@ -6,7 +6,7 @@
Name: oracle-xe-selinux
Version: 10.2
-Release: 13%{?dist}
+Release: 14%{?dist}
Summary: SELinux policy module supporting Oracle XE
Group: System Environment/Base
License: GPLv2+
@@ -137,6 +137,10 @@ fi
%attr(0755,root,root) %{_sbindir}/%{name}-enable
%changelog
+* Thu Nov 26 2009 Jan Pazdziora 10.2-14
+- In RHEL5 one process reading information on another in the /proc directory
+ caused a ptrace access check, allow
+
* Mon Aug 03 2009 Jan Pazdziora 10.2-13
- Use rw_files_pattern instead of direct allows, to get open on new Fedoras
commit f73e3d94c589a634a972ac1d86583d5a34635836
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Thu Nov 26 14:50:17 2009 +0100
In RHEL5 one process reading information on another in the /proc directory caused a ptrace access check.
Addressing
avc: denied { ptrace } for pid=14422 comm="oracle" scontext=system_u:system_r:oracle_db_t:s0 tcontext=system_u:system_r:oracle_db_t:s0 tclass=process
diff --git a/selinux/oracle-xe-selinux/oracle-xe.te b/selinux/oracle-xe-selinux/oracle-xe.te
index 7094acf..8647094 100644
--- a/selinux/oracle-xe-selinux/oracle-xe.te
+++ b/selinux/oracle-xe-selinux/oracle-xe.te
@@ -30,3 +30,5 @@ dontaudit oracle_tnslsnr_t http_cache_port_t:tcp_socket name_bind;
allow oracle_db_t initrc_t:fifo_file { read ioctl };
+allow oracle_db_t self:process ptrace;
+
14 years, 5 months
rel-eng/koji-missing-builds.py
by Miroslav Suchý
rel-eng/koji-missing-builds.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit 2e45cda027ee65bdec07fe66e7d451dc12118a35
Author: Miroslav Suchý <msuchy(a)redhat.com>
Date: Thu Nov 26 14:30:06 2009 +0100
fix reference to config dir
diff --git a/rel-eng/koji-missing-builds.py b/rel-eng/koji-missing-builds.py
index 5481380..e311e77 100755
--- a/rel-eng/koji-missing-builds.py
+++ b/rel-eng/koji-missing-builds.py
@@ -11,7 +11,7 @@ from optparse import OptionParser
import ConfigParser
config = ConfigParser.RawConfigParser()
-config.read('global.build.py.props')
+config.read(["tito.props", "rel-eng/tito.props"])
usage = "usage: %prog [options] <tag to check>"
parser = OptionParser(usage, version='%prog 0.0.1')
14 years, 5 months
Changes to 'refs/tags/spacewalk-reports-0.1.1-1'
by Jan Pazdziora
Tag 'spacewalk-reports-0.1.1-1' created by Jan Pazdziora <jpazdziora(a)redhat.com> at 2009-11-20 16:26 +0000
Tagging package [spacewalk-reports] version [0.1.1-1] in directory [reporting/scripted/].
Changes since spacewalk-backend-0.7.15-1:
Jan Pazdziora (2):
Move spacewalk reporting to separate package.
Automatic commit of package [spacewalk-reports] release [0.1.1-1].
---
backend/satellite_tools/reports.py | 124 ------------
backend/satellite_tools/reports/data/entitlements | 52 -----
backend/satellite_tools/reports/data/errata-list | 41 ----
backend/satellite_tools/reports/data/errata-systems | 38 ---
backend/satellite_tools/reports/data/inventory | 123 ------------
backend/satellite_tools/reports/data/users | 65 ------
backend/satellite_tools/reports/data/users-systems | 59 ------
backend/satellite_tools/spacewalk-report | 192 --------------------
backend/satellite_tools/spacewalk-report.sgml | 127 -------------
rel-eng/packages/spacewalk-reports | 1
reporting/scripted/reports.py | 124 ++++++++++++
reporting/scripted/reports/data/entitlements | 52 +++++
reporting/scripted/reports/data/errata-list | 41 ++++
reporting/scripted/reports/data/errata-systems | 38 +++
reporting/scripted/reports/data/inventory | 123 ++++++++++++
reporting/scripted/reports/data/users | 65 ++++++
reporting/scripted/reports/data/users-systems | 59 ++++++
reporting/scripted/spacewalk-report | 192 ++++++++++++++++++++
reporting/scripted/spacewalk-report.sgml | 127 +++++++++++++
reporting/scripted/spacewalk-reports.spec | 45 ++++
20 files changed, 867 insertions(+), 821 deletions(-)
---
14 years, 5 months
Changes to 'refs/tags/oracle-instantclient-selinux-10.2-17'
by Jan Pazdziora
Tag 'oracle-instantclient-selinux-10.2-17' created by Jan Pazdziora <jpazdziora(a)redhat.com> at 2009-11-26 12:38 +0000
Tagging package [oracle-instantclient-selinux] version [10.2-17] in directory [selinux/oracle-instantclient-selinux/].
Changes since jabberd-selinux-1.4.7-1:
Jan Pazdziora (2):
On 64bit platform, the libsqlplusic.so needs textrel_shlib_t.
Automatic commit of package [oracle-instantclient-selinux] minor release [10.2-17].
Miroslav Suchý (1):
514467 - when we say RHN is disabled, we may actually really disable it
---
client/rhel/yum-rhn-plugin/rhnplugin.py | 1 +
rel-eng/packages/oracle-instantclient-selinux | 2 +-
selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec | 6 +++++-
3 files changed, 7 insertions(+), 2 deletions(-)
---
14 years, 5 months
2 commits - rel-eng/packages selinux/oracle-instantclient-selinux
by Jan Pazdziora
rel-eng/packages/oracle-instantclient-selinux | 2 +-
selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec | 6 +++++-
2 files changed, 6 insertions(+), 2 deletions(-)
New commits:
commit c291df98d2e05f39988fadf732bb5a4fd3511dae
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Thu Nov 26 13:38:16 2009 +0100
Automatic commit of package [oracle-instantclient-selinux] minor release [10.2-17].
diff --git a/rel-eng/packages/oracle-instantclient-selinux b/rel-eng/packages/oracle-instantclient-selinux
index dcaf6e5..8efbd98 100644
--- a/rel-eng/packages/oracle-instantclient-selinux
+++ b/rel-eng/packages/oracle-instantclient-selinux
@@ -1 +1 @@
-10.2-16 selinux/oracle-instantclient-selinux/
+10.2-17 selinux/oracle-instantclient-selinux/
diff --git a/selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec b/selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec
index c7e1cf2..f1241b3 100644
--- a/selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec
+++ b/selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec
@@ -1,7 +1,7 @@
Name: oracle-instantclient-selinux
Version: 10.2
-Release: 16%{?dist}
+Release: 17%{?dist}
Summary: SELinux support for Oracle Instant Client
Group: System Environment/Base
License: GPLv2+
@@ -111,6 +111,9 @@ fi
%attr(0755,root,root) %{_sbindir}/oracle-instantclient-sqlplus-selinux-enable
%changelog
+* Thu Nov 26 2009 Jan Pazdziora 10.2-17
+- On 64bit platform, the libsqlplusic.so needs textrel_shlib_t
+
* Wed Sep 09 2009 Michael Mraka <michael.mraka(a)redhat.com> 10.2-16
- 506951 - execstack -c moved to instantclient packages
commit 21dcf58b74f58093371e70ae5a25e0f81781aa77
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Thu Nov 26 13:35:36 2009 +0100
On 64bit platform, the libsqlplusic.so needs textrel_shlib_t.
Otherwise, running sqlplus leads to
# sqlplus
Error 6 initializing SQL*Plus
Message file sp1<lang>.msb not found
SP2-0750: You may need to set ORACLE_HOME to your Oracle software directory
under Enforcing even if the system is otherwise configured
properly.
Addressing
avc: denied { execmod } for pid=8809 comm="sqlplus" path="/usr/lib/oracle/10.2.0.4/client64/lib/libsqlplusic.so" dev=dm-0 ino=97651 scontext=unconfined_u:unconfined_r:oracle_sqlplus_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=file
diff --git a/selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec b/selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec
index 700ff2a..c7e1cf2 100644
--- a/selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec
+++ b/selinux/oracle-instantclient-selinux/oracle-instantclient-selinux.spec
@@ -59,6 +59,7 @@ cat <<'EOS' > %{buildroot}%{_sbindir}/oracle-instantclient-sqlplus-selinux-enabl
/usr/sbin/semanage fcontext -a -t oracle_sqlplus_exec_t '/usr/lib/oracle/10\.2\..*/client.*/bin/sqlplus'
/usr/sbin/semanage fcontext -a -t textrel_shlib_t '/usr/lib/oracle/10\.2\..*/client.*/lib/libsqlplus\.so'
+/usr/sbin/semanage fcontext -a -t textrel_shlib_t '/usr/lib/oracle/10\.2\..*/client64/lib/libsqlplusic\.so'
/sbin/restorecon -Rvv /usr/lib/oracle/10.2.*/client* || :
EOS
14 years, 5 months