[libvirt] [PATCH] spec: Update polkit dependencies for CVE-2013-4311

Jiri Denemark jdenemar at redhat.com
Tue Jul 15 14:39:12 UTC 2014


On Tue, Jul 15, 2014 at 07:56:28 -0600, Eric Blake wrote:
> On 07/15/2014 07:23 AM, Jiri Denemark wrote:
> > Use secured polkit on distros which provide it. However, RHEL-6 will
> > still allow for older polkit-0.93 rather than forcing polkit-0.96-5
> > which is not available in all RHEL-6 releases.
> > 
> > Signed-off-by: Jiri Denemark <jdenemar at redhat.com>
> > ---
> >  libvirt.spec.in | 8 ++++++--
> >  1 file changed, 6 insertions(+), 2 deletions(-)
> > 
> > diff --git a/libvirt.spec.in b/libvirt.spec.in
> > index 8d1acfa..f32ab00 100644
> > --- a/libvirt.spec.in
> > +++ b/libvirt.spec.in
> > @@ -535,7 +535,9 @@ BuildRequires: module-init-tools
> >  BuildRequires: cyrus-sasl-devel
> >  %endif
> >  %if %{with_polkit}
> > -    %if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
> > +    %if 0%{?fedora} >= 21 || 0%{?rhel} >= 7
> > +BuildRequires: polkit-devel >= 0.112
> 
> Fedora 20 has polkit-devel-0.112-2 - so we might as well use >= 20 in
> that conditional.
> 
> 
> >      %if %{with_polkit}
> > -        %if 0%{?fedora} >= 12 || 0%{?rhel} >=6
> > +        %if 0%{?fedora} >= 21 || 0%{?rhel} >= 7
> > +Requires: polkit >= 0.112
> 
> and again.
> 
> ACK with that tweak.

Fixed and pushed, thanks.

Jirka




More information about the libvir-list mailing list