From 5eae8641cce42b0212e3b5bc2bb09e43e30f7665 Mon Sep 17 00:00:00 2001
From: Martin Stransky <stransky@fedoraproject.org>
Date: Nov 22 2006 14:07:26 +0000
Subject: added fix from #215997: incorrect permissions on dnszone.schema


---

diff --git a/bind.spec b/bind.spec
index 814a5e1..8b34c67 100644
--- a/bind.spec
+++ b/bind.spec
@@ -203,10 +203,13 @@ Summary: The Berkeley Internet Name Domain (BIND) DNS (Domain Name System) serve
 Group: System Environment/Daemons
 PreReq:   bind       = %{epoch}:%{version}-%{release}
 Requires: bind-utils = %{epoch}:%{version}-%{release}
+Requires(pre):    /etc/openldap/schema
 Requires(post):   bash, coreutils, sed, grep, mktemp
 Requires(preun):  bash, coreutils, sed, grep
 %if %{selinux}
 Requires(post): policycoreutils
+Conflicts: selinux-policy-strict < 2.2.0
+Conflicts: selinux-policy-targeted < 2.2.0
 %endif
 
 %description sdb
@@ -447,7 +450,7 @@ for f in my.internal.zone.db slaves/my.slave.internal.zone.db slaves/my.ddns.int
   echo '@ in soa localhost. root 1 3H 15M 1W 1D
   ns localhost.' > sample/var/named/$f; 
 done
-/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: bind.spec,v 1.145 2006/11/21 16:33:52 stransky Exp $/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\
+/usr/bin/tail -n '+'`/bin/egrep -n '\\$Id: bind.spec,v 1.146 2006/11/22 14:07:26 stransky Exp $/+1/' | bc` bin/rndc/rndc.conf | sed '/Sample rndc configuration file./{p;i\
  *\
  * NOTE: you only need to create this file if it is to\
  * differ from the following default contents:
@@ -624,7 +627,7 @@ chmod 0755 ${RPM_BUILD_ROOT}%{_libdir}/lib*so.*
 %{_sbindir}/zone2ldap
 %{_sbindir}/ldap2zone
 %{_sbindir}/zonetodb
-%defattr(0640,root,named,0755)
+%defattr(0644,root,root,0755)
 %config /etc/openldap/schema/dnszone.schema
 %defattr(0644,root,named,0755)
 %{_mandir}/man1/zone2ldap.1*
@@ -780,6 +783,7 @@ rm -rf ${RPM_BUILD_ROOT}
 - added back an interval to restart
 - renamed package, it should meet the N-V-R criteria
 - fix for #216185: bind-chroot-admin able to change root mode 750
+- added fix from #215997: incorrect permissions on dnszone.schema
 
 * Mon Oct 30 2006 Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
 - fix for #200465: named-checkzone and co. cannot be run as non-root user