systemd-selinux 232-8 update

1 files changed, 10 insertions, 0 deletions

diff --git a/systemd.install b/systemd.install
index b59de2008a1c..f799c882d53a 100644
--- a/systemd.install
+++ b/systemd.install
@@ -36,6 +36,15 @@ _230_1_changes() {
   echo ':: systemd-bootchart is no longer included with systemd'
 }
 
+_232_8_changes() {
+  # paper over possible effects of CVE-2016-10156
+  local stamps=(/var/lib/systemd/timers/*.timer)
+
+  if [[ -f ${stamps[0]} ]]; then
+    chmod 0644 "${stamps[@]}"
+  fi
+}
+
 post_install() {
   systemd-machine-id-setup
 
@@ -68,6 +77,7 @@ post_upgrade() {
     219-2
     219-4
     230-1
+    232-8
   )
 
   for v in "${upgrades[@]}"; do