From 393a02b48ac409e99c059eeff9f8a4f41c15a1b1 Mon Sep 17 00:00:00 2001 From: jpzhang187 Date: Fri, 6 Nov 2020 17:44:34 +0800 Subject: [PATCH] Remove unsupported permission names --- 0001-Remove-unsupported-permission-names.patch | 15 +++++++++++++++ openvswitch.spec | 8 ++++++-- 2 files changed, 21 insertions(+), 2 deletions(-) create mode 100644 0001-Remove-unsupported-permission-names.patch diff --git a/0001-Remove-unsupported-permission-names.patch b/0001-Remove-unsupported-permission-names.patch new file mode 100644 index 0000000..661015e --- /dev/null +++ b/0001-Remove-unsupported-permission-names.patch @@ -0,0 +1,15 @@ +diff --git a/selinux/openvswitch-custom.te.in b/selinux/openvswitch-custom.te.in +index 2adaf23..b2c63ab 100644 +--- a/selinux/openvswitch-custom.te.in ++++ b/selinux/openvswitch-custom.te.in +@@ -78,8 +78,8 @@ domtrans_pattern(openvswitch_t, openvswitch_load_module_exec_t, openvswitch_load + + #============= openvswitch_t ============== + allow openvswitch_t self:capability { dac_override audit_write net_broadcast net_raw }; +-allow openvswitch_t self:netlink_audit_socket { create nlmsg_relay audit_write read write }; +-allow openvswitch_t self:netlink_netfilter_socket { create nlmsg_relay audit_write read write }; ++allow openvswitch_t self:netlink_audit_socket { create nlmsg_relay read write }; ++allow openvswitch_t self:netlink_netfilter_socket { create read write }; + @begin_dpdk@ + allow openvswitch_t self:netlink_rdma_socket { setopt bind create }; + @end_dpdk@ diff --git a/openvswitch.spec b/openvswitch.spec index f0d25a1..c7efb1b 100644 --- a/openvswitch.spec +++ b/openvswitch.spec @@ -3,10 +3,11 @@ Summary: Production Quality, Multilayer Open Virtual Switch URL: http://www.openvswitch.org/ Version: 2.12.0 License: ASL 2.0 -Release: 6 +Release: 7 Source: https://www.openvswitch.org/releases/openvswitch-%{version}.tar.gz Buildroot: /tmp/openvswitch-rpm Patch0000: 0000-openvswitch-add-stack-protector-strong.patch +Patch0001: 0001-Remove-unsupported-permission-names.patch Requires: logrotate hostname python >= 2.7 python2-six selinux-policy-targeted BuildRequires: python2-six, openssl-devel checkpolicy selinux-policy-devel autoconf automake libtool python-sphinx unbound-devel Provides: openvswitch-selinux-policy = %{version}-%{release} @@ -32,7 +33,7 @@ Summary: Helpful information for Open vSwitch Documents and helpful information for Open vSwitch. %prep -%autosetup +%autosetup -p1 %build autoreconf @@ -202,6 +203,9 @@ exit 0 %doc README.rst NEWS rhel/README.RHEL.rst %changelog +* Fri Nov 6 2020 zhangjiapeng - 2.12.0-7 +- Remove unsupported permission names + * Fri Sep 25 2020 luosuwang - 2.12.0-6 - Remove openvswitch-kmod package -- Gitee