Change in vdsm[ovirt-3.2]: spec: requires selinux-policy to avoid selinux failure on ac...

danken at redhat.com danken at redhat.com
Thu Jan 24 12:29:41 UTC 2013


Hello Douglas Schilling Landgraf, Mark Wu,

I'd like you to do a code review.  Please visit

    http://gerrit.ovirt.org/11364

to review the following change.

Change subject: spec: requires selinux-policy to avoid selinux failure on access tls cert
......................................................................

spec: requires selinux-policy to avoid selinux failure on access tls cert

selinux-policy tightened up the security on svirt_t on fedora18. It causes
that svirt_t is disallowed to access cert_t file. And therefore it will block
qemu run spice server with tls. For more details, please see:
https://bugzilla.redhat.com/show_bug.cgi?id=890345

Change-Id: I9fe74c6187e7e9f2a8c0b2a824d2871fb5497d86
Signed-off-by: Mark Wu <wudxw at linux.vnet.ibm.com>
Reviewed-on: http://gerrit.ovirt.org/11290
Reviewed-by: Douglas Schilling Landgraf <dougsland at redhat.com>
Reviewed-by: Dan Kenigsberg <danken at redhat.com>
---
M vdsm.spec.in
1 file changed, 2 insertions(+), 1 deletion(-)


  git pull ssh://gerrit.ovirt.org:29418/vdsm refs/changes/64/11364/1

diff --git a/vdsm.spec.in b/vdsm.spec.in
index e153880..dfc2459 100644
--- a/vdsm.spec.in
+++ b/vdsm.spec.in
@@ -131,9 +131,10 @@
 Requires: lvm2 >= 2.02.95
 %endif
 
+%if 0%{?fedora} >= 18
+Requires: selinux-policy-targeted >= 3.11.1-71
 # In order to avoid a policycoreutils bug (rhbz 883355) when selinux is
 # disabled we now require the version 2.1.13-44 (or newer) of Fedora.
-%if 0%{?fedora} >= 18
 Requires: policycoreutils >= 2.1.13-44
 %endif
 


--
To view, visit http://gerrit.ovirt.org/11364
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I9fe74c6187e7e9f2a8c0b2a824d2871fb5497d86
Gerrit-PatchSet: 1
Gerrit-Project: vdsm
Gerrit-Branch: ovirt-3.2
Gerrit-Owner: Dan Kenigsberg <danken at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>
Gerrit-Reviewer: Mark Wu <wudxw at linux.vnet.ibm.com>


More information about the vdsm-patches mailing list