# build against xz?

%bcond_without xz

# just for giggles, option to build with internal Berkeley DB

%bcond_with int_bdb

# run internal testsuite?

%bcond_with check

# build with plugins?

%bcond_without plugins

# build with sanitizers?

%bcond_with sanitizer

# build with libarchive? (needed for rpm2archive)

%bcond_without libarchive

# build with libimaevm.so

%bcond_without libimaevm

# build with new db format

%bcond_with ndb

# build with zstd support?

%bcond_without zstd

# build with lmdb support?

%bcond_with lmdb

# build with readonly sqlite support?

%bcond_without sqlite

%if 0%{?rhel} > 7

# Disable python2 build by default

%bcond_with python2

%else

%bcond_without python2

%endif

%define rpmhome /usr/lib/rpm

%global rpmver 4.14.3

#global snapver rc2

%global rel 18

%global srcver %{version}%{?snapver:-%{snapver}}

%global srcdir %{?snapver:testing}%{!?snapver:%{name}-%(echo %{version} | cut -d'.' -f1-2).x}

%define bdbname libdb

%define bdbver 5.3.15

%define dbprefix db

Summary: The RPM package management system

Name: rpm

Version: %{rpmver}

Release: %{?snapver:0.%{snapver}.}%{rel}%{?dist}

Group: System Environment/Base

Url: http://www.rpm.org/

Source0: http://ftp.rpm.org/releases/%{srcdir}/%{name}-%{srcver}.tar.bz2

%if %{with int_bdb}

Source1: db-%{bdbver}.tar.gz

%else

BuildRequires: libdb-devel

%endif

# Disable autoconf config.site processing (#962837)

Patch1: rpm-4.11.x-siteconfig.patch

# Fedora specspo is setup differently than what rpm expects, considering

# this as Fedora-specific patch for now

Patch2: rpm-4.13.0-fedora-specspo.patch

# In current Fedora, man-pages pkg owns all the localized man directories

Patch3: rpm-4.9.90-no-man-dirs.patch

# gnupg2 comes installed by default, avoid need to drag in gnupg too

Patch4: rpm-4.8.1-use-gpg2.patch

# Temporary band-aid for rpm2cpio whining on payload size mismatch (#1142949)

Patch5: rpm-4.12.0-rpm2cpio-hack.patch

# Downstream-only patch:

# Add envvar that will be present during RPM build

# - Part of a Fedora Change for F28:

# - "Avoid /usr/bin/python in RPM build"

# - https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build

Patch7: rpm-4.14.1-Add-envvar-that-will-be-present-during-RPM-build.patch

# Patches already upstream:

Patch101: rpm-4.14.2-RPMTAG_MODULARITYLABEL.patch

Patch102: 0001-Document-noverify-in-the-man-page-RhBug-1646458.patch

Patch104: 0001-Mark-elements-with-associated-problems-as-failed.patch

Patch108: 0001-Only-read-through-payload-on-verify-if-actually-need.patch

Patch111: 0003-Verify-packages-before-signing-RhBug-1646388.patch

Patch112: 0001-Fix-FA_TOUCH-on-files-with-suid-sgid-bits-and-or-cap.patch

Patch116: 0001-Add-flag-to-use-strip-g-instead-of-full-strip-on-DSO.patch

Patch119: 0001-Use-in-condition-to-avoid-sub-processes-in-find-debu.patch

Patch132: 0001-debugedit-Refactor-reading-writing-of-relocated-valu.patch

Patch133: 0002-Handle-.debug_macro-in-debugedit.patch

Patch134: 0003-debugedit-Make-sure-.debug_line-old-new-idx-start-eq.patch

Patch135: 0001-Pass-RPM_BUILD_NCPUS-to-build-scripts.patch

Patch136: 0001-Use-RPM_BUILD_NCPUS-in-brp-strip-static-archive.patch

Patch137: 0001-Fix-brp-strip-static-archive-parallelism.patch

Patch138: 0001-Use-newline-as-a-delimiter-to-avoid-xargs-messing-up.patch

Patch139: 0001-Make-check-buildroot-check-the-build-files-in-parall.patch

Patch140: 0001-Fix-resource-leaks-on-zstd-open-error-paths.patch

# XXX should be before 0001-Pass-RPM_BUILD_NCPUS-to-build-scripts.patch

Patch141: 0001-Isolate-_smp_build_ncpus-and-use-it-for-_smp_mflags.patch

Patch142: rpm-4.14.3-GPG-Switch-back-to-pipe-7-for-signing.patch

Patch143: 0001-Work-around-buggy-signature-region-preventing-resign.patch

Patch144: 0001-Fix-python-ts.addErase-not-raising-exception-on-not-.patch

Patch145: 0001-Always-close-libelf-handle-1313.patch

Patch146: 0001-When-doing-the-same-thing-more-than-once-use-a-loop.patch

Patch147: 0001-Introduce-patch_nums-and-source_nums-Lua-variables-i.patch

Patch148: 0001-Add-limits-to-autopatch-macro.patch

Patch149: rpm-4.14.3-bump-up-the-limit-of-signature-header-to-64MB.patch

Patch150: rpm-4.14.3-add-fapolicyd-rpm-plugin.patch

Patch151: 0001-Unblock-signals-in-forked-scriptlets.patch

Patch152: rpm-4.14.3-fix-ambiguous-diagnostics-on-file-triggers.patch

Patch153: rpm-4.14.3-ELF-files-strip-when-debuginfo-disabled.patch

Patch154: rpm-4.14.3-more-careful-sig-hdr-copy.patch

Patch155: rpm-4.14.3-preserve-kmod-secure-boot-signature.patch

Patch156: rpm-4.14.3-hdrblobInit-add-bounds-check.patch

Patch157: rpm-4.14.3-add-read-only-support-for-sqlite.patch

Patch158: rpm-4.14.3-imp-covscan-fixes.patch

# Python 3 string API sanity

Patch500: 0001-In-Python-3-return-all-our-string-data-as-surrogate-.patch

Patch501: 0001-Return-NULL-string-as-None-from-utf8FromString.patch

# Make test-suite work with Python 3

Patch503: 0001-Honor-PYTHON-from-configure-when-running-tests.patch

Patch504: 0002-Use-Python-3-compatible-exception-syntax-in-tests.patch

Patch505: 0003-Fix-couple-of-bytes-vs-strings-issues-in-Python-test.patch

Patch506: 0004-Bump-the-minimum-Python-version-requirement-to-2.7.patch

Patch507: 0005-Drop-an-unnecessary-Python-2-vs-3-incompatibility-fr.patch

Patch508: rpm-4.14.3-python3.diff

Patch509: rpm-4-14.3-selinux-log-error.patch

# These are not yet upstream

# Audit support

Patch800: rpm-4.14.2-audit-3.patch

Patch906: rpm-4.7.1-geode-i686.patch

# Probably to be upstreamed in slightly different form

Patch907: rpm-4.13.90-ldflags.patch

# Switch off the part of the brp-python-bytecompile script

# that utilizes python2 to bytecompile .py files within

# non-standard paths.

Patch1000: disable-python-extra.patch

# Compile Python 3.6 stuff with /usr/libexec/platform-python instead of

# /usr/bin/python3.6

Patch1001: compile-with-Platform-Python-binary-where-relevant.patch

# make unversioned %%__python an error unless explicitly overridden

Patch1002: rpm-4.14.2-unversioned-python.patch

# Partially GPL/LGPL dual-licensed and some bits with BSD

# SourceLicense: (GPLv2+ and LGPLv2+ with exceptions) and BSD 

License: GPLv2+

Requires: coreutils

%if %{without int_bdb}

# db recovery tools, rpmdb_util symlinks

Requires: %{_bindir}/%{dbprefix}_stat

%endif

Requires: popt%{_isa} >= 1.10.2.1

Requires: curl

%if %{without int_bdb}

BuildRequires: %{bdbname}-devel

%endif

%if %{with check}

BuildRequires: fakechroot gnupg2

%endif

# XXX generally assumed to be installed but make it explicit as rpm

# is a bit special...

BuildRequires: redhat-rpm-config

BuildRequires: gcc make

BuildRequires: gawk

BuildRequires: elfutils-devel >= 0.112

BuildRequires: elfutils-libelf-devel

BuildRequires: readline-devel zlib-devel

BuildRequires: openssl-devel

# The popt version here just documents an older known-good version

BuildRequires: popt-devel >= 1.10.2

BuildRequires: file-devel

BuildRequires: gettext-devel

BuildRequires: ncurses-devel

BuildRequires: bzip2-devel >= 0.9.0c-2

BuildRequires: lua-devel >= 5.1

BuildRequires: libcap-devel

BuildRequires: libacl-devel

BuildRequires: audit-libs-devel

%if %{with sqlite}

BuildRequires: sqlite-devel

%endif

%if %{with xz}

BuildRequires: xz-devel >= 4.999.8

%endif

%if %{with libarchive}

BuildRequires: libarchive-devel

%endif

%if %{with zstd}

BuildRequires: libzstd-devel

%endif

%if %{with lmdb}

BuildRequires: lmdb-devel

%endif

# Only required by sepdebugcrcfix patch

BuildRequires: binutils-devel

# Couple of patches change makefiles so, require for now...

BuildRequires: automake libtool

%if %{with plugins}

BuildRequires: libselinux-devel

BuildRequires: dbus-devel

%endif

%if %{with sanitizer}

BuildRequires: libasan

BuildRequires: libubsan

#BuildRequires: liblsan

#BuildRequires: libtsan

%global sanitizer_flags -fsanitize=address -fsanitize=undefined

%endif

%if %{with libimaevm}

%if 0%{?fedora} >= 28 || 0%{?rhel} > 7

%global imadevname ima-evm-utils-devel

%else

%global imadevname ima-evm-utils

%endif

BuildRequires: %{imadevname} >= 1.0

%endif

%description

The RPM Package Manager (RPM) is a powerful command line driven

package management system capable of installing, uninstalling,

verifying, querying, and updating software packages. Each software

package consists of an archive of files along with information about

the package like its version, a description, etc.

%package libs

Summary:  Libraries for manipulating RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

# librpm uses cap_compare, introduced sometimes between libcap 2.10 and 2.16.

# A manual require is needed, see #505596

Requires: libcap%{_isa} >= 2.16

%description libs

This package contains the RPM shared libraries.

%package build-libs

Summary:  Libraries for building and signing RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: %{_bindir}/gpg2

%description build-libs

This package contains the RPM shared libraries for building and signing

packages.

%package devel

Summary:  Development files for manipulating RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

Requires: %{name}-libs%{_isa} = %{version}-%{release}

Requires: %{name}-build-libs%{_isa} = %{version}-%{release}

Requires: popt-devel%{_isa}

%description devel

This package contains the RPM C library and header files. These

development files will simplify the process of writing programs that

manipulate RPM packages and databases. These files are intended to

simplify the process of creating graphical package managers or any

other tools that need an intimate knowledge of RPM packages in order

to function.

This package should be installed if you want to develop programs that

will manipulate RPM packages and databases.

%package build

Summary: Scripts and executable programs used to build packages

Group: Development/Tools

Requires: rpm = %{version}-%{release}

Requires: elfutils >= 0.128 binutils

Requires: findutils sed grep gawk diffutils file patch >= 2.5

Requires: tar unzip gzip bzip2 cpio xz

%if %{with zstd}

Requires: zstd

%endif

Requires: pkgconfig >= 1:0.24

Requires: /usr/bin/gdb-add-index

# Technically rpmbuild doesn't require any external configuration, but

# creating distro-compatible packages does. To make the common case

# "just work" while allowing for alternatives, depend on a virtual

# provide, typically coming from redhat-rpm-config.

Requires: system-rpm-config

%description build

The rpm-build package contains the scripts and executable programs

that are used to build packages using the RPM Package Manager.

%package sign

Summary: Package signing support

Group: System Environment/Base

Requires: rpm-build-libs%{_isa} = %{version}-%{release}

%description sign

This package contains support for digitally signing RPM packages.

%if %{with python2}

%package -n python2-%{name}

Summary: Python 2 bindings for apps which will manipulate RPM packages

Group: Development/Libraries

BuildRequires: python2-devel

%{?python_provide:%python_provide python2-%{name}}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Provides: %{name}-python = %{version}-%{release}

Obsoletes: %{name}-python < %{version}-%{release}

%description -n python2-%{name}

The python2-rpm package contains a module that permits applications

written in the Python programming language to use the interface

supplied by RPM Package Manager libraries.

This package should be installed if you want to develop Python 2

programs that will manipulate RPM packages and databases.

%endif # with python2

%package -n python3-%{name}

Summary: Python 3 bindings for apps which will manipulate RPM packages

Group: Development/Libraries

BuildRequires: python3-devel

%{?python_provide:%python_provide python3-%{name}}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Provides: %{name}-python3 = %{version}-%{release}

Obsoletes: %{name}-python3 < %{version}-%{release}

# Lowest compatible DNF version (acts as a safeguard to protect DNF from

# breaking in case the user attempts to upgrade RPM separately).

# Version 4.2.7 added support for the new API output format introduced in

# rpm-4.14.2-10.

Conflicts: python3-dnf < 4.2.7

%description -n python3-%{name}

The python3-rpm package contains a module that permits applications

written in the Python programming language to use the interface

supplied by RPM Package Manager libraries.

This package should be installed if you want to develop Python 3

programs that will manipulate RPM packages and databases.

%package apidocs

Summary: API documentation for RPM libraries

Group: Documentation

BuildArch: noarch

%description apidocs

This package contains API documentation for developing applications

that will manipulate RPM packages and databases.

%package cron

Summary: Create daily logs of installed packages.

Group: System Environment/Base

BuildArch: noarch

Requires: crontabs logrotate rpm = %{version}-%{release}

%description cron

This package contains a cron job which creates daily logs of installed

packages on a system.

%if %{with plugins}

%package plugin-selinux

Summary: Rpm plugin for SELinux functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: selinux-policy-base

%description plugin-selinux

%{summary}

%package plugin-syslog

Summary: Rpm plugin for syslog functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-syslog

%{summary}

%package plugin-systemd-inhibit

Summary: Rpm plugin for systemd inhibit functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-systemd-inhibit

This plugin blocks systemd from entering idle, sleep or shutdown while an rpm

transaction is running using the systemd-inhibit mechanism.

%package plugin-ima

Summary: Rpm plugin ima file signatures

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-ima

%{summary}

%package plugin-prioreset

Summary: Rpm plugin for resetting scriptlet priorities for SysV init

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-prioreset

%{summary}

Useful on legacy SysV init systems if you run rpm transactions with

nice/ionice priorities. Should not be used on systemd systems.

%package plugin-fapolicyd

Summary: Rpm plugin for fapolicyd functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

Provides: fapolicyd-plugin

Obsoletes: fapolicyd-dnf-plugin

%description plugin-fapolicyd

%{summary}.

%endif # with plugins

%prep

%autosetup -n %{name}-%{srcver} %{?with_int_bdb:-a 1} -p1

%if %{with int_bdb}

ln -s db-%{bdbver} db

%endif

%build

%if %{without int_bdb}

#CPPFLAGS=-I%{_includedir}/db%{bdbver} 

#LDFLAGS=-L%{_libdir}/db%{bdbver}

%endif

CPPFLAGS="$CPPFLAGS -DLUA_COMPAT_APIINTCASTS"

CFLAGS="$RPM_OPT_FLAGS %{?sanitizer_flags} -DLUA_COMPAT_APIINTCASTS"

LDFLAGS="$LDFLAGS %{?__global_ldflags}"

export CPPFLAGS CFLAGS LDFLAGS

autoreconf -i -f

# Hardening hack taken from macro %%configure defined in redhat-rpm-config

for i in $(find . -name ltmain.sh) ; do

     %{__sed} -i.backup -e 's~compiler_flags=$~compiler_flags="%{_hardened_ldflags}"~' $i

done;

# Using configure macro has some unwanted side-effects on rpm platform

# setup, use the old-fashioned way for now only defining minimal paths.

./configure \

    --prefix=%{_usr} \

    --sysconfdir=%{_sysconfdir} \

    --localstatedir=%{_var} \

    --sharedstatedir=%{_var}/lib \

    --libdir=%{_libdir} \

    --build=%{_target_platform} \

    --host=%{_target_platform} \

    --with-vendor=redhat \

    %{!?with_int_bdb: --with-external-db} \

    %{!?with_plugins: --disable-plugins} \

    --with-lua \

    --with-selinux \

    --with-cap \

    --with-acl \

    %{?with_ndb: --enable-ndb} \

    %{!?with_libarchive: --without-archive} \

    %{?with_libimaevm: --with-imaevm} \

    %{?with_zstd: --enable-zstd} \

    %{?with_lmdb: --enable-lmdb} \

    %{?with_sqlite: --enable-sqlite} \

    --with-fapolicyd \

    --enable-python \

    --with-crypto=openssl \

    PYTHON=python3

make %{?_smp_mflags}

pushd python

%if %{with python2}

%{__python2} setup.py build

%endif # with python2

%{__python3} setup.py build

popd

%install

rm -rf $RPM_BUILD_ROOT

make DESTDIR="$RPM_BUILD_ROOT" install

# We need to build with --enable-python for the self-test suite, but we

# actually package the bindings built with setup.py (#531543#c26)

pushd python

%if %{with python2}

%{__python2} setup.py install --skip-build --root $RPM_BUILD_ROOT

%endif # with python2

%{__python3} setup.py install --skip-build --root $RPM_BUILD_ROOT

popd

# Save list of packages through cron

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily

install -m 755 scripts/rpm.daily ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/rpm

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d

install -m 644 scripts/rpm.log ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/rpm

mkdir -p ${RPM_BUILD_ROOT}/usr/lib/tmpfiles.d

echo "r /var/lib/rpm/__db.*" > ${RPM_BUILD_ROOT}/usr/lib/tmpfiles.d/rpm.conf

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rpm

mkdir -p $RPM_BUILD_ROOT%{rpmhome}/macros.d

mkdir -p $RPM_BUILD_ROOT/var/lib/rpm

for dbi in \

    Basenames Conflictname Dirnames Group Installtid Name Obsoletename \

    Packages Providename Requirename Triggername Sha1header Sigmd5 \

    __db.001 __db.002 __db.003 __db.004 __db.005 __db.006 __db.007 \

    __db.008 __db.009

do

    touch $RPM_BUILD_ROOT/var/lib/rpm/$dbi

done

# plant links to relevant db utils as rpmdb_foo for documention compatibility

%if %{without int_bdb}

for dbutil in dump load recover stat upgrade verify

do

    ln -s ../../bin/%{dbprefix}_${dbutil} $RPM_BUILD_ROOT/%{rpmhome}/rpmdb_${dbutil}

done

%endif

%find_lang %{name}

find $RPM_BUILD_ROOT -name "*.la"|xargs rm -f

# These live in perl-generators and python-rpm-generators now

rm -f $RPM_BUILD_ROOT/%{rpmhome}/{perldeps.pl,perl.*,pythond*}

rm -f $RPM_BUILD_ROOT/%{_fileattrsdir}/{perl*,python*}

# Axe unused cruft

rm -f $RPM_BUILD_ROOT/%{rpmhome}/{tcl.req,osgideps.pl}

# Avoid unnecessary dependency on /usr/bin/python

chmod a-x $RPM_BUILD_ROOT/%{rpmhome}/python-macro-helper

%if %{with check}

%check

make check || cat tests/rpmtests.log

%endif

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%post build-libs -p /sbin/ldconfig

%postun build-libs -p /sbin/ldconfig

%files -f %{name}.lang

%license COPYING

%doc CREDITS doc/manual/[a-z]*

/usr/lib/tmpfiles.d/rpm.conf

%dir %{_sysconfdir}/rpm

%attr(0755, root, root) %dir /var/lib/rpm

%attr(0644, root, root) %verify(not md5 size mtime) %ghost %config(missingok,noreplace) /var/lib/rpm/*

%{_bindir}/rpm

%if %{with libarchive}

%{_bindir}/rpm2archive

%endif

%{_bindir}/rpm2cpio

%{_bindir}/rpmdb

%{_bindir}/rpmkeys

%{_bindir}/rpmquery

%{_bindir}/rpmverify

%{_mandir}/man8/rpm.8*

%{_mandir}/man8/rpmdb.8*

%{_mandir}/man8/rpmkeys.8*

%{_mandir}/man8/rpm2cpio.8*

%{_mandir}/man8/rpm-misc.8*

# XXX this places translated manuals to wrong package wrt eg rpmbuild

%lang(fr) %{_mandir}/fr/man[18]/*.[18]*

%lang(ko) %{_mandir}/ko/man[18]/*.[18]*

%lang(ja) %{_mandir}/ja/man[18]/*.[18]*

%lang(pl) %{_mandir}/pl/man[18]/*.[18]*

%lang(ru) %{_mandir}/ru/man[18]/*.[18]*

%lang(sk) %{_mandir}/sk/man[18]/*.[18]*

%attr(0755, root, root) %dir %{rpmhome}

%{rpmhome}/macros

%{rpmhome}/macros.d

%{rpmhome}/rpmpopt*

%{rpmhome}/rpmrc

%{rpmhome}/rpmdb_*

%{rpmhome}/rpm.daily

%{rpmhome}/rpm.log

%{rpmhome}/rpm.supp

%{rpmhome}/rpm2cpio.sh

%{rpmhome}/tgpg

%{rpmhome}/python-macro-helper

%{rpmhome}/platform

%dir %{rpmhome}/fileattrs

%files libs

%{_libdir}/librpmio.so.*

%{_libdir}/librpm.so.*

%if %{with plugins}

%dir %{_libdir}/rpm-plugins

%files plugin-syslog

%{_libdir}/rpm-plugins/syslog.so

%files plugin-selinux

%{_libdir}/rpm-plugins/selinux.so

%files plugin-systemd-inhibit

%{_libdir}/rpm-plugins/systemd_inhibit.so

%{_mandir}/man8/rpm-plugin-systemd-inhibit.8*

%files plugin-ima

%{_libdir}/rpm-plugins/ima.so

%files plugin-prioreset

%{_libdir}/rpm-plugins/prioreset.so

%files plugin-fapolicyd

%{_libdir}/rpm-plugins/fapolicyd.so

%{_mandir}/man8/rpm-plugin-fapolicyd.8*

%endif # with plugins

%files build-libs

%{_libdir}/librpmbuild.so.*

%{_libdir}/librpmsign.so.*

%files build

%{_bindir}/rpmbuild

%{_bindir}/gendiff

%{_bindir}/rpmspec

%{_mandir}/man1/gendiff.1*

%{_mandir}/man8/rpmbuild.8*

%{_mandir}/man8/rpmdeps.8*

%{_mandir}/man8/rpmspec.8*

%{rpmhome}/brp-*

%{rpmhome}/check-*

%{rpmhome}/debugedit

%{rpmhome}/sepdebugcrcfix

%{rpmhome}/find-debuginfo.sh

%{rpmhome}/find-lang.sh

%{rpmhome}/*provides*

%{rpmhome}/*requires*

%{rpmhome}/*deps*

%{rpmhome}/*.prov

%{rpmhome}/*.req

%{rpmhome}/config.*

%{rpmhome}/mkinstalldirs

%{rpmhome}/macros.p*

%{rpmhome}/fileattrs/*

%files sign

%{_bindir}/rpmsign

%{_mandir}/man8/rpmsign.8*

%if %{with python2}

%files -n python2-%{name}

%{python2_sitearch}/%{name}/

%{python2_sitearch}/%{name}-%{version}*.egg-info

%endif # with python2

%files -n python3-%{name}

%{python3_sitearch}/%{name}/

%{python3_sitearch}/%{name}-%{version}*.egg-info

%files devel

%{_mandir}/man8/rpmgraph.8*

%{_bindir}/rpmgraph

%{_libdir}/librp*[a-z].so

%{_libdir}/pkgconfig/%{name}.pc

%{_includedir}/%{name}/

%files cron

%{_sysconfdir}/cron.daily/rpm

%config(noreplace) %{_sysconfdir}/logrotate.d/rpm

%files apidocs

%license COPYING

%doc doc/librpm/html/*

%changelog

* Thu Aug 26 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-18

- Address important covscan issues (#1996665), vol. 2

* Mon Aug 23 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-17

- Address important covscan issues (#1996665)

* Thu Aug 19 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16

- Add support for read-only sqlite rpmdb (#1938928)

- Drop compat .decode() method from returned Py3 strings (#1840142)

* Thu Jul 15 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15

- Add out-of-bounds checks to hdrblobInit() (#1929445)

- Fixes CVE-2021-20266

- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)

* Thu May 27 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-14

- Be more careful about copying data from signature header (#1958477)

- Fixes CVE-2021-20271

* Fri Feb 12 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13

- Fix minor issues found by COVSCAN in fapolicyd plugin

- Actually honor libarchive bcond at configure time (#1902887)

* Tue Feb 09 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12

- Bump up the limit of signature header to 64MB (#1918777)

- Add fapolicyd plugin (#1923167)