[PATCH] - Provide selinux subpackage for labeling /var/lib/matahari - Matahari - Fedora mailing-lists

11 Aug 2011

- set filetype to qpidd in selinux context
Signed-off-by: Adam Stokes astokes@fedoraproject.org
---
 matahari.spec |   26 ++++++++++++++++++++++++--
 1 files changed, 24 insertions(+), 2 deletions(-)

diff --git a/matahari.spec b/matahari.spec
index 300bcb8..ff952e8 100644
--- a/matahari.spec
+++ b/matahari.spec
@@ -172,6 +172,15 @@ Requires:	%{name}-agent-lib = %{version}-%{release}
 %description consoles
 QMF console for monitoring various agents
+%package selinux
+Summary:        SElinux support for Matahari
+Requires:	%{name} = %{version}-%{release}
+Requires:       policycoreutils
+Requires:       selinux-policy-targeted
+BuildRequires:  selinux-policy-devel
+
+%description selinux
+Configures Matahari to run in SELinux enabled environments.
 %prep
 %setup -q -n matahari-matahari-%{upstream_version}
@@ -193,8 +202,8 @@ make DESTDIR=%{buildroot} install
 %{__install} matahari-broker.sysconf $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/matahari-broker
 %{__ln_s} qpidd $RPM_BUILD_ROOT/%{_sbindir}/matahari-brokerd
-%{__install} -d -m0755 %{buildroot}%{_localstatedir}/lib/%{name}
-%{__install} -d -m0755 %{buildroot}%{_localstatedir}/run/%{name}
+%{__mkdir} -p $RPM_BUILD_ROOT/%{_localstatedir}/lib/%{name}
+%{__mkdir} -p $RPM_BUILD_ROOT/%{_localstatedir}/run/%{name}
 %endif
%post -n matahari-lib -p /sbin/ldconfig
@@ -205,6 +214,15 @@ make DESTDIR=%{buildroot} install
 # Can't use -p, gives: '/sbin/ldconfig: relative path `0' used to build cache' error
 /sbin/ldconfig
+%post selinux
+semanage fcontext -a -t qpidd_var_lib_t '%{_localstatedir}/lib/%{name}(/.*)?' >/dev/null 2>&1 || :
+restorecon -R '%{_localstatedir}/lib/%{name}' || :
+
+%postun selinux
+if [ $1 -eq 0 ]; then
+   semanage fcontext -d -t qpidd_var_lib_t '%{_localstatedir}/lib/%{name}(/.*)?' >/dev/null 2>&1 || :
+fi
+
 %if %{with qmf}
 #== Host
@@ -293,6 +311,7 @@ test "x%{buildroot}" != "x" && rm -rf %{buildroot}
%files
 %defattr(644, root, root, 755)
+%attr(755,root,root) %{_localstatedir}/lib/%{name}
 %doc AUTHORS COPYING
%files agent-lib
@@ -422,6 +441,9 @@ test "x%{buildroot}" != "x" && rm -rf %{buildroot}
 %{_datadir}/polkit-1/actions/org.matahariproject.Resources.policy
 %endif
+%files selinux
+%defattr(-,root,root,-)
+
 %files devel
 %defattr(644, root, root, 755)
 %doc AUTHORS COPYING
-- 
1.7.6


    