[Pki-devel] [PATCH] 41 - selinux policy changes

Ade Lee alee at redhat.com
Wed Jul 25 05:47:22 UTC 2012


This patch includes a simplification to the selinux policy because all
the java subsystems can co-exist on the same tomcat instance.  Hence, a
new type pki_tomcat_t has been introduced.  Aliases for old types have
also been introduced.

Scriptlets to add the selinux context (if needed) have also been added.
This checkin will likely break f16 builds because the selinux patch no
longer applies - and it likely calls on types that were only introduced
in f17+.  As dogtag 10 is targeted to f18, this is not something we
should worry about.  As of now, dogtag 10 must be run on f17+.

A separate patch will clean up the spec file.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pki-vakwetu-0042-Selinux-policy-for-new-configuration.patch
Type: text/x-patch
Size: 36258 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20120725/e8ce7b73/attachment.bin>


More information about the Pki-devel mailing list