Change in vdsm[master]: spec: requires selinux-policy to avoid selinux failure on ac...

wudxw at linux.vnet.ibm.com wudxw at linux.vnet.ibm.com
Wed Jan 23 06:59:08 UTC 2013


Mark Wu has uploaded a new change for review.

Change subject: spec: requires selinux-policy to avoid selinux failure on access tls cert
......................................................................

spec: requires selinux-policy to avoid selinux failure on access tls cert

selinux-policy tightened up the security on svirt_t on fedora18. It causes
that svirt_t is disallowed to access cert_t file. And therefore it will block
qemu run spice server with tls. For more details, please see:
https://bugzilla.redhat.com/show_bug.cgi?id=890345

Change-Id: I9fe74c6187e7e9f2a8c0b2a824d2871fb5497d86
Signed-off-by: Mark Wu <wudxw at linux.vnet.ibm.com>
---
M vdsm.spec.in
1 file changed, 2 insertions(+), 1 deletion(-)


  git pull ssh://gerrit.ovirt.org:29418/vdsm refs/changes/90/11290/1

diff --git a/vdsm.spec.in b/vdsm.spec.in
index 632d315..7b4f579 100644
--- a/vdsm.spec.in
+++ b/vdsm.spec.in
@@ -131,9 +131,10 @@
 Requires: lvm2 >= 2.02.95
 %endif
 
+%if 0%{?fedora} >= 18
+Requires: selinux-policy >= 3.11.1-71
 # In order to avoid a policycoreutils bug (rhbz 883355) when selinux is
 # disabled we now require the version 2.1.13-44 (or newer) of Fedora.
-%if 0%{?fedora} >= 18
 Requires: policycoreutils >= 2.1.13-44
 %endif
 


--
To view, visit http://gerrit.ovirt.org/11290
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I9fe74c6187e7e9f2a8c0b2a824d2871fb5497d86
Gerrit-PatchSet: 1
Gerrit-Project: vdsm
Gerrit-Branch: master
Gerrit-Owner: Mark Wu <wudxw at linux.vnet.ibm.com>


More information about the vdsm-patches mailing list