From 4eebb51afeef48add13a5155a6a858b780327fce Mon Sep 17 00:00:00 2001 From: "Kaleb S. KEITHLEY" Date: Wed, 12 Jul 2017 07:43:51 -0400 Subject: packaging: glusterfs-ganesha update sometimes fails semanage Depending on how dnf orders updates, the updated version of selinux-policy-targeted with ganesha_use_fusefs may not be updated before the glusterfs-ganesha update execute its %post scriptlet containing the `semanage ganesha_use_fusefs ...` command. In such situations the semanage command (silently) fails. Use a %trigger (and %triggerun) to run the scriptlet (again) after selinux-policy-targeted with ganesha_use_fusefs has been installed or updated. Note: the %triggerun is probably unnecessary, but it doesn't hurt. The release-3.10 branch is the "upstream master" for the glusterfs- ganesha subpackage. Note: to be merged after https://review.gluster.org/17806 Change-Id: I1ad06d79fa1711e4abf038baf9f0a5b7bb665934 BUG: 1470040 Signed-off-by: Kaleb S. KEITHLEY Reviewed-on: https://review.gluster.org/17756 Smoke: Gluster Build System CentOS-regression: Gluster Build System Reviewed-by: Niels de Vos --- glusterfs.spec.in | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/glusterfs.spec.in b/glusterfs.spec.in index 3b391368f4e..67901aacbbc 100644 --- a/glusterfs.spec.in +++ b/glusterfs.spec.in @@ -964,6 +964,24 @@ exit 0 %endif exit 0 +##----------------------------------------------------------------------------- +## All %%trigger should be placed here and keep them sorted +## +%if ( 0%{?fedora} && 0%{?fedora} > 25 ) +%trigger ganesha -- selinux-policy-targeted +semanage boolean -m ganesha_use_fusefs --on +exit 0 +%endif + +##----------------------------------------------------------------------------- +## All %%triggerun should be placed here and keep them sorted +## +%if ( 0%{?fedora} && 0%{?fedora} > 25 ) +%triggerun ganesha -- selinux-policy-targeted +semanage boolean -m ganesha_use_fusefs --off +exit 0 +%endif + ##----------------------------------------------------------------------------- ## All %%files should be placed here and keep them grouped ## @@ -1287,6 +1305,9 @@ exit 0 %endif %changelog +* Wed Jul 12 2017 Kaleb S. KEITHLEY +- selinux enable, disable ganesha_access_fuse %%trigger, %%triggerun + * Wed Jun 21 2017 Kaleb S. KEITHLEY - selinux enable, disable ganesha_access_fuse on install, remove -- cgit