From 95d9108847b36bca699e163c7ad68aa121c4e6d9 Mon Sep 17 00:00:00 2001 From: Kamil Dudka Date: Wed, 28 Apr 2010 13:52:40 +0000 Subject: [PATCH] - make it possible to start a testing OpenSSH server when building with SELinux in the enforcing mode (#521087) --- curl.spec | 14 ++++++++++++-- hide_selinux.c | 8 ++++++++ 2 files changed, 20 insertions(+), 2 deletions(-) create mode 100644 hide_selinux.c diff --git a/curl.spec b/curl.spec index 837081b..1e1f3c2 100644 --- a/curl.spec +++ b/curl.spec @@ -1,11 +1,12 @@ Summary: A utility for getting files from remote servers (FTP, HTTP, and others) Name: curl Version: 7.20.1 -Release: 4%{?dist} +Release: 5%{?dist} License: MIT Group: Applications/Internet Source: http://curl.haxx.se/download/%{name}-%{version}.tar.lzma Source2: curlbuild.h +Source3: hide_selinux.c # upstream commit e32fe30d0cf7c1f7045ac0bd29322e7fb4feb5c8 Patch0: curl-7.20.0-e32fe30.patch @@ -156,11 +157,16 @@ export LD_LIBRARY_PATH # uncomment to use the non-stripped library in tests # LD_PRELOAD=`find -name \*.so` # LD_PRELOAD=`readlink -f $LD_PRELOAD` -# export LD_PRELOAD cd tests make %{?_smp_mflags} +# make it possible to start a testing OpenSSH server with SELinux +# in the enforcing mode (#521087) +gcc -o hide_selinux.so -shared %{SOURCE3} +LD_PRELOAD="`readlink -f ./hide_selinux.so`:$LD_PRELOAD" +export LD_PRELOAD + # use different port range for 32bit and 64bit build, thus make it possible # to run both in parallel on the same machine ./runtests.pl -a -b%{?__isa_bits}90 -p -v @@ -219,6 +225,10 @@ rm -rf $RPM_BUILD_ROOT %{_datadir}/aclocal/libcurl.m4 %changelog +* Wed Apr 28 2010 Kamil Dudka 7.20.1-5 +- make it possible to start a testing OpenSSH server when building with SELinux + in the enforcing mode (#521087) + * Sat Apr 24 2010 Kamil Dudka 7.20.1-4 - upstream patch preventing failure of test536 with threaded DNS resolver - upstream patch preventing SSL handshake timeout underflow diff --git a/hide_selinux.c b/hide_selinux.c new file mode 100644 index 0000000..d34be1a --- /dev/null +++ b/hide_selinux.c @@ -0,0 +1,8 @@ +/* + * make it possible to start a testing OpenSSH server with SELinux + * in the enforcing mode (#521087) + */ +int security_getenforce(void) +{ + return 0; +}