Add tmpfiles.d snippet to guarantee permissions of /opt/isu

Change-Id: I21ae22abe0888eda540abf9ede65e4c2cdab956c

diff --git a/config/opt-isu.conf b/config/opt-isu.conf
new file mode 100644 (file)
index 0000000..b1f74e0
--- /dev/null
+++ b/config/opt-isu.conf
@@ -0,0 +1,2 @@
+d       /opt/isu       0755    root    root    -
+t       /opt/isu       -       -       -       -       security.SMACK64="_"

diff --git a/packaging/isu.spec b/packaging/isu.spec
index b20906d..a92a10d 100644 (file)
--- a/packaging/isu.spec
+++ b/packaging/isu.spec
@@ -1,6 +1,6 @@
 Summary: Individual Service Upgrade support
 Name:    isu
-Version: 8.0.5
+Version: 8.0.6
 Release: 1
 Source0: %{name}-%{version}.tar.gz
 License: MIT
@@ -24,11 +24,13 @@ cp packaging/isu.manifest .
 mkdir -p %{buildroot}/usr/libexec
 mkdir -p %{buildroot}/usr/lib/systemd/system-generators
 mkdir -p %{buildroot}/usr/lib/systemd/user-generators
+mkdir -p %{buildroot}/usr/lib/tmpfiles.d
 mkdir -p %{buildroot}/%{_bindir}
 install -m755 src/systemd_generator/isu-generator %{buildroot}/usr/libexec/
 ln -s ../../../libexec/isu-generator %{buildroot}/usr/lib/systemd/system-generators/isu-system-generator
 ln -s ../../../libexec/isu-generator %{buildroot}/usr/lib/systemd/user-generators/isu-user-generator
 install -m644 -D src/helpers/service-common.inc %{buildroot}/etc/isu/service-common.inc
+install -m644 config/opt-isu.conf %{buildroot}/usr/lib/tmpfiles.d/opt-isu.conf
 install -m750 src/pkg_manager/isu %{buildroot}/%{_bindir}/isu
 
 %files
@@ -37,5 +39,6 @@ install -m750 src/pkg_manager/isu %{buildroot}/%{_bindir}/isu
 /usr/libexec/isu-generator
 /usr/lib/systemd/user-generators/isu-user-generator
 /usr/lib/systemd/system-generators/isu-system-generator
+/usr/lib/tmpfiles.d/opt-isu.conf
 /etc/isu/service-common.inc
 %{_bindir}/isu