Change in vdsm[master]: spec: Require newer selinux-policy-targeted on EL7
nsoffer at redhat.com
nsoffer at redhat.com
Mon Dec 15 18:06:54 UTC 2014
Nir Soffer has uploaded a new change for review.
Change subject: spec: Require newer selinux-policy-targeted on EL7
......................................................................
spec: Require newer selinux-policy-targeted on EL7
In EL7 and fedora, selinux did not allow sanlock to send signals to
vdsm. When the master domain is not accessible on the spm, sanlock was
trying to terminate and kill vdsm, but since it is not allowed to send
signals to vdsm, the attempt would fail and the watchdog would reboot
the machine.
The new policy fixes this issue, and now vdsm should terminate cleanly
or will be killed without rebooting the machine.
We need also a package for Fedora, but the package was not released yet.
Change-Id: I99ce144a289a4e15ac85331062ad6d5e2588bd46
Bug-Url: https://bugzilla.redhat.com/1141658
Relates-to: https://bugzilla.redhat.com/1142454
Relates-to: https://bugzilla.redhat.com/1152594
Signed-off-by: Nir Soffer <nsoffer at redhat.com>
---
M vdsm.spec.in
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.ovirt.org:29418/vdsm refs/changes/88/36188/1
diff --git a/vdsm.spec.in b/vdsm.spec.in
index bdcdb03..3bde852 100644
--- a/vdsm.spec.in
+++ b/vdsm.spec.in
@@ -201,7 +201,7 @@
Requires: lvm2
Requires: python
Requires: policycoreutils-python
-Requires: selinux-policy-targeted
+Requires: selinux-policy-targeted >= 3.12.1-153.el7_0.13
%else
Requires: python
Requires: device-mapper-multipath >= 0.4.9-52
--
To view, visit http://gerrit.ovirt.org/36188
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I99ce144a289a4e15ac85331062ad6d5e2588bd46
Gerrit-PatchSet: 1
Gerrit-Project: vdsm
Gerrit-Branch: master
Gerrit-Owner: Nir Soffer <nsoffer at redhat.com>
More information about the vdsm-patches
mailing list