rel-eng/packages/spacewalk-config | 2 +-
spacewalk/config/spacewalk-config.spec | 12 ++++++++++--
2 files changed, 11 insertions(+), 3 deletions(-)
New commits:
commit a1ad2e8cb79b70d66c07c1acc24f482caaafb4c9
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Tue May 3 14:02:18 2011 +0200
Automatic commit of package [spacewalk-config] release [1.5.3-1].
diff --git a/rel-eng/packages/spacewalk-config b/rel-eng/packages/spacewalk-config
index 767f217..5ffc19a 100644
--- a/rel-eng/packages/spacewalk-config
+++ b/rel-eng/packages/spacewalk-config
@@ -1 +1 @@
-1.5.2-1 spacewalk/config/
+1.5.3-1 spacewalk/config/
diff --git a/spacewalk/config/spacewalk-config.spec
b/spacewalk/config/spacewalk-config.spec
index 5750789..9014100 100644
--- a/spacewalk/config/spacewalk-config.spec
+++ b/spacewalk/config/spacewalk-config.spec
@@ -1,6 +1,6 @@
Name: spacewalk-config
Summary: Spacewalk Configuration
-Version: 1.5.2
+Version: 1.5.3
Release: 1%{?dist}
URL:
http://fedorahosted.org/spacewalk
Source0:
https://fedorahosted.org/releases/s/p/spacewalk/%{name}-%{version}.tar.gz
@@ -105,6 +105,10 @@ chgrp apache /etc/rhn /etc/rhn/rhn.conf /etc/rhn/cluster.ini || :
chmod o-rwx /etc/rhn/rhn.conf* /etc/rhn/cluster.ini* /etc/sysconfig/rhn/backup-*
/var/lib/rhn/rhn-satellite-prep/* || :
%changelog
+* Tue May 03 2011 Jan Pazdziora 1.5.3-1
+- We restrict access to some files that were too open in the past (some of them
+ are not tracked by rpm).
+
* Thu Apr 21 2011 Jan Pazdziora 1.5.2-1
- Explicitly setting attributes of .../rhn-satellite-prep/etc/rhn.
commit 6db056d3b8fcf2df1760628fd2f7136e8d4d4e37
Author: Jan Pazdziora <jpazdziora(a)redhat.com>
Date: Tue May 3 12:01:52 2011 +0200
We restrict access to some files that were too open in the past (some of them are not
tracked by rpm).
diff --git a/spacewalk/config/spacewalk-config.spec
b/spacewalk/config/spacewalk-config.spec
index 78e53d6..5750789 100644
--- a/spacewalk/config/spacewalk-config.spec
+++ b/spacewalk/config/spacewalk-config.spec
@@ -98,7 +98,11 @@ if [ -f /etc/init.d/satellite-httpd ] ; then
%{__perl} -i -ne 'print unless /satellite-httpd\.pid/'
/etc/logrotate.d/httpd
fi
-
+# Set the group to allow Apache to access the conf files ...
+chgrp apache /etc/rhn /etc/rhn/rhn.conf /etc/rhn/cluster.ini || :
+# ... once we restrict access to some files that were too open in
+# the past.
+chmod o-rwx /etc/rhn/rhn.conf* /etc/rhn/cluster.ini* /etc/sysconfig/rhn/backup-*
/var/lib/rhn/rhn-satellite-prep/* || :
%changelog
* Thu Apr 21 2011 Jan Pazdziora 1.5.2-1