Compare commits
No commits in common. "09b46f1bb7154056b324f0273f9b1cddef87c6c4" and "c54ca8d5a9ca3fbd7c23836fb2726469cc253e07" have entirely different histories.
09b46f1bb7
...
c54ca8d5a9
@ -1,33 +0,0 @@
|
|||||||
From bf6d97e7f14bdefb7e9e889ae29e29b0d8484a16 Mon Sep 17 00:00:00 2001
|
|
||||||
From: openEuler Buildteam <buildteam@openeuler.org>
|
|
||||||
Date: Tue, 15 Dec 2020 14:14:57 +0800
|
|
||||||
Subject: [PATCH] Fix config file to deny noraml user to stop Setroubleshootd.
|
|
||||||
|
|
||||||
---
|
|
||||||
org.fedoraproject.Setroubleshootd.conf | 5 ++++-
|
|
||||||
1 file changed, 4 insertions(+), 1 deletion(-)
|
|
||||||
|
|
||||||
diff --git a/org.fedoraproject.Setroubleshootd.conf b/org.fedoraproject.Setroubleshootd.conf
|
|
||||||
index 65a0daa..fe0e2f4 100644
|
|
||||||
--- a/org.fedoraproject.Setroubleshootd.conf
|
|
||||||
+++ b/org.fedoraproject.Setroubleshootd.conf
|
|
||||||
@@ -9,12 +9,15 @@
|
|
||||||
</policy>
|
|
||||||
<policy user="root">
|
|
||||||
<allow send_destination="org.fedoraproject.Setroubleshootd"/>
|
|
||||||
+ <allow send_destination="org.fedoraproject.Setroubleshootd"
|
|
||||||
+ send_interface="org.fedoraproject.SetroubleshootdIface"
|
|
||||||
+ send_member="finish"/>
|
|
||||||
</policy>
|
|
||||||
<policy context="default">
|
|
||||||
<allow send_destination="org.fedoraproject.Setroubleshootd"
|
|
||||||
send_interface="org.fedoraproject.SetroubleshootdIface"
|
|
||||||
send_member="start"/>
|
|
||||||
- <allow send_destination="org.fedoraproject.Setroubleshootd"
|
|
||||||
+ <deny send_destination="org.fedoraproject.Setroubleshootd"
|
|
||||||
send_interface="org.fedoraproject.SetroubleshootdIface"
|
|
||||||
send_member="finish"/>
|
|
||||||
<allow send_destination="org.fedoraproject.Setroubleshootd"
|
|
||||||
--
|
|
||||||
1.8.3.1
|
|
||||||
|
|
||||||
File diff suppressed because it is too large
Load Diff
BIN
setroubleshoot-3.3.20.tar.gz
Normal file
BIN
setroubleshoot-3.3.20.tar.gz
Normal file
Binary file not shown.
Binary file not shown.
@ -1,6 +1,6 @@
|
|||||||
Name: setroubleshoot
|
Name: setroubleshoot
|
||||||
Version: 3.3.24
|
Version: 3.3.20
|
||||||
Release: 3
|
Release: 2
|
||||||
Summary: SELinux Trouble Shooting Tool
|
Summary: SELinux Trouble Shooting Tool
|
||||||
License: GPLv2+
|
License: GPLv2+
|
||||||
URL: https://pagure.io/setroubleshoot
|
URL: https://pagure.io/setroubleshoot
|
||||||
@ -8,10 +8,6 @@ URL: https://pagure.io/setroubleshoot
|
|||||||
Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz
|
Source0: https://releases.pagure.org/setroubleshoot/%{name}-%{version}.tar.gz
|
||||||
Source1: %{name}.tmpfiles
|
Source1: %{name}.tmpfiles
|
||||||
|
|
||||||
Patch1: backport-0001-framework-Update-translations.patch
|
|
||||||
|
|
||||||
Patch9000: Fix-config-file-to-deny-noraml-user-to-stop-Setroubleshootd.patch
|
|
||||||
|
|
||||||
BuildRequires: gcc libcap-ng-devel intltool gettext python3 python3-devel git
|
BuildRequires: gcc libcap-ng-devel intltool gettext python3 python3-devel git
|
||||||
BuildRequires: desktop-file-utils dbus-glib-devel gtk2-devel libnotify-devel audit-libs-devel libselinux-devel polkit-devel
|
BuildRequires: desktop-file-utils dbus-glib-devel gtk2-devel libnotify-devel audit-libs-devel libselinux-devel polkit-devel
|
||||||
BuildRequires: python3-libselinux python3-pydbus python3-gobject gtk3-devel xdg-utils
|
BuildRequires: python3-libselinux python3-pydbus python3-gobject gtk3-devel xdg-utils
|
||||||
@ -30,7 +26,7 @@ SELinux Trouble Shooting Tool
|
|||||||
Summary: SELinux troubleshoot server
|
Summary: SELinux troubleshoot server
|
||||||
|
|
||||||
Requires: %{name}-plugins >= 3.3.8
|
Requires: %{name}-plugins >= 3.3.8
|
||||||
Requires: audit >= 2.8.5
|
Requires: audit >= 3
|
||||||
Requires: python3-audit
|
Requires: python3-audit
|
||||||
Requires: python3-libxml2
|
Requires: python3-libxml2
|
||||||
Requires: python3-rpm
|
Requires: python3-rpm
|
||||||
@ -41,7 +37,7 @@ BuildRequires: python3-devel
|
|||||||
Requires: python3-slip python3-systemd
|
Requires: python3-slip python3-systemd
|
||||||
Requires: python3-gobject >= 3.11
|
Requires: python3-gobject >= 3.11
|
||||||
Requires: dbus
|
Requires: dbus
|
||||||
Requires: python3-dbus python3-pydbus
|
Requires: python3-dbus
|
||||||
Requires: polkit
|
Requires: polkit
|
||||||
Requires(pre): /usr/sbin/useradd /usr/sbin/groupadd
|
Requires(pre): /usr/sbin/useradd /usr/sbin/groupadd
|
||||||
|
|
||||||
@ -84,20 +80,19 @@ install -m644 -D %{SOURCE1} $RPM_BUILD_ROOT%{_tmpfilesdir}/%{name}.conf
|
|||||||
|
|
||||||
%post
|
%post
|
||||||
dbus-send --system /com/redhat/setroubleshootd com.redhat.SEtroubleshootdIface.restart string:'rpm install' >/dev/null 2>&1 || :
|
dbus-send --system /com/redhat/setroubleshootd com.redhat.SEtroubleshootdIface.restart string:'rpm install' >/dev/null 2>&1 || :
|
||||||
/sbin/service auditd reload >/dev/null 2>&1 || :
|
%systemd_post auditd.service
|
||||||
|
|
||||||
%postun
|
%postun
|
||||||
/sbin/service auditd reload >/dev/null 2>&1 || :
|
%systemd_postun_with_restart auditd.service
|
||||||
|
|
||||||
%pre server
|
%pre server
|
||||||
getent passwd setroubleshoot >/dev/null || useradd -r -U -s /sbin/nologin -d %{_localstatedir}/lib/%{name} setroubleshoot
|
getent passwd setroubleshoot >/dev/null || useradd -r -U -s /sbin/nologin -d %{_localstatedir}/lib/%{name} setroubleshoot
|
||||||
|
|
||||||
%post server
|
%post server
|
||||||
/sbin/service auditd reload >/dev/null 2>&1 || :
|
%systemd_post auditd.service
|
||||||
|
|
||||||
%postun server
|
%postun server
|
||||||
/sbin/service auditd reload >/dev/null 2>&1 || :
|
%systemd_postun_with_restart auditd.service
|
||||||
|
|
||||||
%triggerun server -- %{name}-server < 3.2.24-4
|
%triggerun server -- %{name}-server < 3.2.24-4
|
||||||
chown -R setroubleshoot:setroubleshoot %{_localstatedir}/lib/%{name}
|
chown -R setroubleshoot:setroubleshoot %{_localstatedir}/lib/%{name}
|
||||||
|
|
||||||
@ -132,16 +127,14 @@ chown -R setroubleshoot:setroubleshoot %{_localstatedir}/lib/%{name}
|
|||||||
%exclude %{python3_sitelib}/%{name}/__pycache__/gui_utils.cpython*
|
%exclude %{python3_sitelib}/%{name}/__pycache__/gui_utils.cpython*
|
||||||
%dir %{_datadir}/%{name}
|
%dir %{_datadir}/%{name}
|
||||||
%{_datadir}/%{name}/SetroubleshootFixit.py
|
%{_datadir}/%{name}/SetroubleshootFixit.py
|
||||||
%{_datadir}/%{name}/SetroubleshootPrivileged.py
|
%{_datadir}/%{name}/updater.py
|
||||||
%config(noreplace) %{_sysconfdir}/%{name}/%{name}.conf
|
%config(noreplace) %{_sysconfdir}/%{name}/%{name}.conf
|
||||||
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.Setroubleshootd.conf
|
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.Setroubleshootd.conf
|
||||||
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.SetroubleshootPrivileged.conf
|
|
||||||
%attr(0700,setroubleshoot,setroubleshoot) %dir %{_localstatedir}/lib/%{name}
|
%attr(0700,setroubleshoot,setroubleshoot) %dir %{_localstatedir}/lib/%{name}
|
||||||
%ghost %attr(0600,setroubleshoot,setroubleshoot) %{_localstatedir}/lib/%{name}/setroubleshoot_database.xml
|
%ghost %attr(0600,setroubleshoot,setroubleshoot) %{_localstatedir}/lib/%{name}/setroubleshoot_database.xml
|
||||||
%ghost %attr(0644,setroubleshoot,setroubleshoot) %{_localstatedir}/lib/%{name}/email_alert_recipients
|
%ghost %attr(0644,setroubleshoot,setroubleshoot) %{_localstatedir}/lib/%{name}/email_alert_recipients
|
||||||
%config /etc/audit/plugins.d/sedispatch.conf
|
%config /etc/audit/plugins.d/sedispatch.conf
|
||||||
%{_datadir}/dbus-1/system-services/org.fedoraproject.Setroubleshootd.service
|
%{_datadir}/dbus-1/system-services/org.fedoraproject.Setroubleshootd.service
|
||||||
%{_datadir}/dbus-1/system-services/org.fedoraproject.SetroubleshootPrivileged.service
|
|
||||||
%{_datadir}/polkit-1/actions/org.fedoraproject.setroubleshootfixit.policy
|
%{_datadir}/polkit-1/actions/org.fedoraproject.setroubleshootfixit.policy
|
||||||
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.SetroubleshootFixit.conf
|
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.SetroubleshootFixit.conf
|
||||||
%{_datadir}/dbus-1/system-services/org.fedoraproject.SetroubleshootFixit.service
|
%{_datadir}/dbus-1/system-services/org.fedoraproject.SetroubleshootFixit.service
|
||||||
@ -160,21 +153,6 @@ chown -R setroubleshoot:setroubleshoot %{_localstatedir}/lib/%{name}
|
|||||||
%{_mandir}/man1/seapplet.1.gz
|
%{_mandir}/man1/seapplet.1.gz
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Mon Dec 27 2021 Hugel <gengqihu1@huawei.com> - 3.3.24-3
|
|
||||||
- Fix the problem when setroubleshoot is installed, or updated.
|
|
||||||
|
|
||||||
* Tue Mar 16 2021 yixiangzhike <zhangxingliang3@huawei.com> - 3.3.24-2
|
|
||||||
- add "Requires: python3-pydbus" for subpackage setroubleshoot-server
|
|
||||||
|
|
||||||
* Fri Jan 22 2021 yixiangzhike <zhangxingliang3@huawei.com> - 3.3.24-1
|
|
||||||
- update to 3.3.24
|
|
||||||
|
|
||||||
* Tue Dec 15 2020 panxiaohe <panxiaohe@huawei.com> - 3.3.20-4
|
|
||||||
- Fix config file to deny noraml user to stop Setroubleshootd.
|
|
||||||
|
|
||||||
* Thu Aug 20 2020 wangchen <wangchen137@huawei.com> - 3.3.20-3
|
|
||||||
- fix the failure of building for audit downgrade
|
|
||||||
|
|
||||||
* Thu Oct 10 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.3.20-2
|
* Thu Oct 10 2019 openEuler Buildteam <buildteam@openeuler.org> - 3.3.20-2
|
||||||
- add COPYING to license directory
|
- add COPYING to license directory
|
||||||
|
|
||||||
|
|||||||
@ -1,4 +0,0 @@
|
|||||||
version_control: git
|
|
||||||
src_repo: "https://pagure.io/setroubleshoot.git"
|
|
||||||
tag_prefix: "^setroubleshoot-"
|
|
||||||
seperator:
|
|
||||||
Loading…
x
Reference in New Issue
Block a user