|
 |
15fce1 |
# defining macros needed by SELinux
|
|
|
15fce1 |
%global selinuxtype targeted
|
|
|
15fce1 |
%global moduletype contrib
|
|
|
15fce1 |
%global modulename mysql
|
|
|
15fce1 |
|
|
|
15fce1 |
Name: mysql-selinux
|
|
|
5eecb7 |
Version: 1.0.5
|
|
|
5eecb7 |
Release: 1%{?dist}
|
|
|
15fce1 |
|
|
|
15fce1 |
License: GPLv3
|
|
|
15fce1 |
URL: https://github.com/devexp-db/mysql-selinux
|
|
|
15fce1 |
Summary: SELinux policy modules for MySQL and MariaDB packages
|
|
|
15fce1 |
|
|
|
5eecb7 |
Source0: https://github.com/devexp-db/mysql-selinux/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
|
|
15fce1 |
|
|
|
15fce1 |
BuildArch: noarch
|
|
|
5eecb7 |
BuildRequires: make
|
|
|
15fce1 |
BuildRequires: selinux-policy-devel
|
|
|
15fce1 |
Requires(post): policycoreutils
|
|
|
15fce1 |
%{?selinux_requires}
|
|
|
15fce1 |
|
|
|
15fce1 |
%description
|
|
|
15fce1 |
SELinux policy modules for MySQL and MariaDB packages.
|
|
|
15fce1 |
|
|
|
5eecb7 |
|
|
|
15fce1 |
%prep
|
|
|
15fce1 |
%setup -q -n %{name}-%{version}
|
|
|
15fce1 |
|
|
|
15fce1 |
%build
|
|
|
15fce1 |
make
|
|
|
15fce1 |
|
|
|
15fce1 |
%install
|
|
|
15fce1 |
# install policy modules
|
|
|
15fce1 |
install -d %{buildroot}%{_datadir}/selinux/packages
|
|
|
15fce1 |
install -m 0644 %{modulename}.pp.bz2 %{buildroot}%{_datadir}/selinux/packages
|
|
|
15fce1 |
|
|
|
5eecb7 |
|
|
|
5eecb7 |
%pre
|
|
|
5eecb7 |
%selinux_relabel_pre -s %{selinuxtype}
|
|
|
15fce1 |
|
|
|
15fce1 |
%post
|
|
|
15fce1 |
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{modulename}.pp.bz2 || :
|
|
|
15fce1 |
|
|
|
15fce1 |
%postun
|
|
|
15fce1 |
if [ $1 -eq 0 ]; then
|
|
|
15fce1 |
%selinux_modules_uninstall -s %{selinuxtype} %{modulename} || :
|
|
|
15fce1 |
fi
|
|
|
15fce1 |
|
|
|
15fce1 |
%posttrans
|
|
|
15fce1 |
%selinux_relabel_post -s %{selinuxtype} || :
|
|
|
15fce1 |
|
|
|
5eecb7 |
|
|
|
15fce1 |
%files
|
|
|
15fce1 |
%defattr(-,root,root,0755)
|
|
|
15fce1 |
%attr(0644,root,root) %{_datadir}/selinux/packages/%{modulename}.pp.bz2
|
|
|
dee9a4 |
%ghost %verify(not mode md5 size mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{modulename}
|
|
|
15fce1 |
%license COPYING
|
|
|
15fce1 |
|
|
|
15fce1 |
%changelog
|
|
|
5eecb7 |
* Thu Jun 09 2022 Michal Schorm <mschorm@redhat.com> - 1.0.5-1
|
|
|
5eecb7 |
- Rebase to 1.0.5
|
|
|
5eecb7 |
|
|
|
5eecb7 |
* Fri Mar 18 2022 Lukas Javorsky <ljavorsk@redhat.com> - 1.0.4-1
|
|
|
5eecb7 |
- Rebase to 1.0.4
|
|
|
5eecb7 |
- Unintentional removal of semicolon
|
|
|
5eecb7 |
|
|
|
5eecb7 |
* Fri Mar 18 2022 Lukas Javorsky <ljavorsk@redhat.com> - 1.0.3-1
|
|
|
5eecb7 |
- Rebase to 1.0.3
|
|
|
5eecb7 |
- Remove setuid/setgid capabilities from mysqld_t type.
|
|
|
5eecb7 |
|
|
|
dee9a4 |
* Thu Jan 10 2022 Lukas Javorsky <ljavorsk@redhat.com> - 1.0.2-6
|
|
|
dee9a4 |
- Fix the gating.yaml file so it checks the correct tests
|
|
|
dee9a4 |
|
|
|
dee9a4 |
* Thu Apr 22 2021 Lukas Javorsky <ljavorsk@redhat.com> - 1.0.2-5
|
|
|
dee9a4 |
- Fix rpm verification it's a ghost file so it should ignore the error
|
|
|
dee9a4 |
|
|
|
15fce1 |
* Mon Dec 07 2020 Honza Horak <hhorak@redhat.com> - 1.0.2-4
|
|
|
15fce1 |
- Rebuild for added tmt gating
|
|
|
15fce1 |
Related: #1895021
|
|
|
15fce1 |
|
|
|
15fce1 |
* Wed Dec 02 2020 Michal Schorm <mschorm@redhat.com> - 1.0.2-1
|
|
|
15fce1 |
- Rebase to 1.0.2 release
|
|
|
15fce1 |
Added context for "*mariadb*" named executables
|
|
|
15fce1 |
|
|
|
15fce1 |
* Tue Dec 01 2020 Michal Schorm <mschorm@redhat.com> - 1.0.1-1
|
|
|
15fce1 |
- Rebase to 1.0.1 release
|
|
|
15fce1 |
This release is just a sync-up with upstream selinux-policy
|
|
|
15fce1 |
- URL changed to a new upstream repository
|
|
|
15fce1 |
|
|
|
15fce1 |
* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-10
|
|
|
15fce1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
15fce1 |
|
|
|
15fce1 |
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-9
|
|
|
15fce1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
15fce1 |
|
|
|
15fce1 |
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.0-8
|
|
|
15fce1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
15fce1 |
|
|
|
15fce1 |
* Fri Jan 11 2019 Kevin Fenzi <kevin@scrye.com> - 1.0.0-7
|
|
|
15fce1 |
- Also make sure posttrans does not fail.
|
|
|
15fce1 |
|
|
|
15fce1 |
* Thu Jan 10 2019 Kevin Fenzi <kevin@scrye.com> - 1.0.0-6
|
|
|
15fce1 |
- Add Requires(post) on policycoreutils for semodule and make sure post/postun cannot fail
|
|
|
15fce1 |
|
|
|
15fce1 |
* Thu Dec 06 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-5
|
|
|
15fce1 |
- Sync with upstream
|
|
|
15fce1 |
|
|
|
15fce1 |
* Wed Aug 29 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-4
|
|
|
15fce1 |
- Allow mysqld sys_nice capability
|
|
|
15fce1 |
|
|
|
15fce1 |
* Mon Aug 20 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-3
|
|
|
15fce1 |
- reflect latest changes of mysql policy
|
|
|
15fce1 |
|
|
|
15fce1 |
* Fri Jul 27 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-2
|
|
|
15fce1 |
- reflect latest changes of Independent Product Policy
|
|
|
15fce1 |
|
|
|
15fce1 |
* Wed Jul 18 2018 Jakub Janco <jjanco@redhat.com> - 1.0.0-1
|
|
|
15fce1 |
- First Build
|
|
|
15fce1 |
|