Change in vdsm[master]: spec: Require newer selinux-policy-targeted on EL7

nsoffer at redhat.com nsoffer at redhat.com
Mon Dec 15 18:06:54 UTC 2014


Nir Soffer has uploaded a new change for review.

Change subject: spec: Require newer selinux-policy-targeted on EL7
......................................................................

spec: Require newer selinux-policy-targeted on EL7

In EL7 and fedora, selinux did not allow sanlock to send signals to
vdsm. When the master domain is not accessible on the spm, sanlock was
trying to terminate and kill vdsm, but since it is not allowed to send
signals to vdsm, the attempt would fail and the watchdog would reboot
the machine.

The new policy fixes this issue, and now vdsm should terminate cleanly
or will be killed without rebooting the machine.

We need also a package for Fedora, but the package was not released yet.

Change-Id: I99ce144a289a4e15ac85331062ad6d5e2588bd46
Bug-Url: https://bugzilla.redhat.com/1141658
Relates-to: https://bugzilla.redhat.com/1142454
Relates-to: https://bugzilla.redhat.com/1152594
Signed-off-by: Nir Soffer <nsoffer at redhat.com>
---
M vdsm.spec.in
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.ovirt.org:29418/vdsm refs/changes/88/36188/1

diff --git a/vdsm.spec.in b/vdsm.spec.in
index bdcdb03..3bde852 100644
--- a/vdsm.spec.in
+++ b/vdsm.spec.in
@@ -201,7 +201,7 @@
 Requires: lvm2
 Requires: python
 Requires: policycoreutils-python
-Requires: selinux-policy-targeted
+Requires: selinux-policy-targeted >= 3.12.1-153.el7_0.13
 %else
 Requires: python
 Requires: device-mapper-multipath >= 0.4.9-52


-- 
To view, visit http://gerrit.ovirt.org/36188
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I99ce144a289a4e15ac85331062ad6d5e2588bd46
Gerrit-PatchSet: 1
Gerrit-Project: vdsm
Gerrit-Branch: master
Gerrit-Owner: Nir Soffer <nsoffer at redhat.com>


More information about the vdsm-patches mailing list