From ea0d9634a3de5d296842a3dd22bad87994e77c2b Mon Sep 17 00:00:00 2001 From: Petr Lautrbach Date: Thu, 29 Nov 2018 10:14:37 +0100 Subject: [PATCH] Update scriptlets to reload auditd service When setroubleshoot sedispatch is installed, or updated, auditd needs to be reloaded so that it runs the new installed plugin. Since auditd needs to know who reloaded him, `systemctl` can't be used. We need to use `service` script. This fixes the problem when setroubleshoot is installed, but it doesn't collect AVC denial messages until the machine is rebooted. /com/redhat/setroubleshootd interface is not used for years therefore we can drop it. --- setroubleshoot.spec | 12 ++---------- 1 file changed, 2 insertions(+), 10 deletions(-) diff --git a/setroubleshoot.spec b/setroubleshoot.spec index 1632988..3acc0ce 100644 --- a/setroubleshoot.spec +++ b/setroubleshoot.spec @@ -62,14 +62,6 @@ to user preference. The same tools can be run on existing log files. %{_bindir}/seapplet -%post -dbus-send --system /com/redhat/setroubleshootd com.redhat.SEtroubleshootdIface.restart string:'rpm install' >/dev/null 2>&1 || : -%systemd_post auditd.service - -%postun -%systemd_postun_with_restart auditd.service - - %prep %autosetup -p 2 @@ -120,10 +112,10 @@ to user preference. The same tools can be run on existing log files. getent passwd %{username} >/dev/null || useradd -r -U -s /sbin/nologin -d %{pkgvardatadir} %{username} %post server -%systemd_post auditd.service +/sbin/service auditd reload >/dev/null 2>&1 || : %postun server -%systemd_postun_with_restart auditd.service +/sbin/service auditd reload >/dev/null 2>&1 || : %triggerun server -- %{name}-server < 3.2.24-4 chown -R setroubleshoot:setroubleshoot %{pkgvardatadir}