# run internal testsuite?

# fakechroot is severely broken beyond fedora 33, disable...

%if 0%{?fedora} > 33 || 0%{?rhel} > 8

%bcond_with check

%else

%bcond_without check

%endif

# build against xz?

%bcond_without xz

# build with plugins?

%bcond_without plugins

# build with libarchive? (needed for rpm2archive)

%bcond_without libarchive

# build with libimaevm.so

%bcond_without libimaevm

%ifarch ppc64le

# no fsverity on RHEL based ppc64le

# due to PAGESIZE == 64k

# https://pagure.io/centos-sig-hyperscale/package-bugs/issue/8

# build without libfsverity.so

%bcond_with libfsverity

%else

# build with libfsverity.so

%bcond_without libfsverity

%endif

# build with zstd support?

%bcond_without zstd

# build with ndb backend?

%bcond_without ndb

# build with sqlite support?

%bcond_without sqlite

# build with bdb support?

%bcond_with bdb

# build with internal Berkeley DB?

%bcond_with int_bdb

# build with bdb_ro support?

%bcond_without bdb_ro

%define rpmhome /usr/lib/rpm

%global rpmver 4.16.1.3

#global snapver rc1

%global rel 11.3

%global sover 9

%global srcver %{rpmver}%{?snapver:-%{snapver}}

%global srcdir %{?snapver:testing}%{!?snapver:rpm-%(echo %{rpmver} | cut -d'.' -f1-2).x}

%if %{with bdb}

%define bdbver 5.3.15

# Build-dependency on systemd for the sake of one macro would be a bit much...

%{!?_tmpfilesdir:%global _tmpfilesdir /usr/lib/tmpfiles.d}

%endif

Summary: The RPM package management system

Name: rpm

Version: %{rpmver}

Release: %{?snapver:0.%{snapver}.}%{rel}%{?dist}

Url: http://www.rpm.org/

Source0: http://ftp.rpm.org/releases/%{srcdir}/rpm-%{srcver}.tar.bz2

%if %{with bdb} && %{with int_bdb}

Source1: db-%{bdbver}.tar.gz

%endif

Source10: rpmdb-rebuild.service

Source20: rpmdb-migrate.service

Source21: rpmdb_migrate

# Needed for selinux subpackage

Source100: Makefile.selinux

Source101: rpm_hs.te

Source102: rpm_hs.fc

# Set rpmdb path to /usr/lib/sysimage/rpm

Patch0: rpm-4.16.x-rpm_dbpath.patch

# Disable autoconf config.site processing (#962837)

Patch1: rpm-4.15.x-siteconfig.patch

# In current Fedora, man-pages pkg owns all the localized man directories

Patch3: rpm-4.9.90-no-man-dirs.patch

# Temporary band-aid for rpm2cpio whining on payload size mismatch (#1142949)

Patch5: rpm-4.12.0-rpm2cpio-hack.patch

# https://github.com/rpm-software-management/rpm/pull/473

Patch6: 0001-find-debuginfo.sh-decompress-DWARF-compressed-ELF-se.patch

Patch7: 0001-Issue-deprecation-warning-when-creating-BDB-database.patch

# Patches already upstream:

Patch100: rpm-4.16.1.3-imp-covscan-fixes.patch

Patch101: rpm-4.16.1.3-rpmsign-support-EdDSA-sig.patch

Patch102: rpm-4.16.1.3-add-fapolicyd-plugin.patch

Patch103: rpm-4.16.1.3-unblock-signals-in-forked-scriptlets.patch

Patch104: rpm-4.16.1.3-support-bdb-hash-v8.patch

Patch105: rpm-4.16.1.3-ELF-files-strip-when-debuginfo-disabled.patch

Patch106: rpm-4.16.1.3-unbreak-checking-of-installed-rich-deps.patch

Patch107: rpm-4.16.1.3-fix-IMA-sig-len-assumed-const.patch

Patch108: rpm-4.16.1.3-validate-and-require-subkey-binding-sigs.patch

Patch109: rpm-4.16.1.3-bump-rpmdb-cookie-hash-to-SHA256-for-FIPS.patch

Patch110: rpm-4.16.1.3-add-path-query-option.patch

Patch111: rpm-4.16.1.3-skip-recorded-symlinks-in-setperms.patch

Patch112: rpm-4.16.1.3-fix-regression-reading-rpm-v3-pkgs.patch

Patch113: rpm-4.16.1.3-fix-spurious-transfiletriggerpostun-execution.patch

# These are not yet upstream

Patch906: rpm-4.7.1-geode-i686.patch

# Probably to be upstreamed in slightly different form

Patch907: rpm-4.15.x-ldflags.patch

# Not yet (all) upstream, debugedit DWARF5

# https://code.wildebeest.org/git/user/mjw/rpm/log/?h=gcc-dwarf5-4.16.1.2

Patch911: 0001-NFC-debugedit-Protect-macro-arguments-by-parentheses.patch

Patch912: 0002-NFC-debugedit-Move-code-from-edit_dwarf2-to-edit_inf.patch

Patch913: 0003-debugedit-Fix-missing-relocation-of-.debug_types-sec.patch

Patch914: 0004-NFC-debugedit-Move-code-to-separate-functions.patch

Patch915: 0005-debugedit-Implement-DWARF-5-unit-header-and-new-form.patch

Patch916: 0006-debugedit-Handle-DWARF-5-debug_line-and-debug_line_s.patch

# Downstream-only patches

Patch1000: rpm-4.16.1.3-hashtab-use-after-free-fix.patch

# fsverity support

%if %{with libfsverity}

Patch1964: 0015-rpmsign-RPMSIGN_FLAG_IMA-is-already-set.patch

Patch1965: 0016-Add-basic-autoconf-and-framework-for-fsverity-suppor.patch

Patch1966: 0017-rpmsign-Add-helper-to-indicate-file-signing-enabled.patch

Patch1967: 0018-rpmsign-Handle-certpath-for-signing-certificate.patch

Patch1968: 0019-Implement-rpmSignVerity.patch

Patch1969: 0020-Introduce-base2bin-a-helper-to-convert-tag-array-of-.patch

Patch1970: 0021-rpmsignverity-Add-verity-signature-headers-to-the-pa.patch

Patch1971: 0022-rpmSignVerity-Generate-signatures-for-files-not-pres.patch

Patch1972: 0023-Process-verity-tag-on-package-read.patch

Patch1973: 0024-Generate-a-zero-length-signature-for-symlinks.patch

Patch1974: 0025-rpmsignverity.c-Clean-up-debug-logging.patch

Patch1975: 0026-fsverity-add-tag-for-fsverity-algorithm.patch

Patch1976: 0027-plugins-fsverity-Install-fsverity-signatures.patch

Patch1977: 0028-fsverity-plugin-Use-tag-for-algorithm.patch

Patch1978: 0029-Add-fsverity-tags-to-rpmgeneral.at.patch

Patch1979: 0030-Add-delfilesign-flag-to-delete-IMA-and-fsverity-file.patch

Patch1980: 0031-Update-man-page-for-rpmsign.patch

Patch1981: 0032-rpmsign-Add-argument-to-specify-algorithm-for-fsveri.patch

Patch1982: 0033-Enable-fsverity-in-CI.patch

Patch1983: 0034-rpmsign-Adopting-PKCS11-opaque-keys-support-in-libfsverity-for-fsverity-signatures.patch

%endif

Patch9800: 1534.patch

# Copy-on-Write

Patch9901: 0001-RPM-with-Copy-on-Write.patch

Patch9902: 0002-Remove-use-of-bool-type-for-consistency.patch

Patch9903: 0003-Match-formatting-style-of-existing-code.patch

Patch9904: 0004-Fix-printf-formatting-in-reflink.c.patch

Patch9905: 0005-tests-rpm2extents-Add-basic-tests-for-rpm2extents.patch

Patch9906: 0006-rpm2extents-verify-package-signature-during-transcod.patch

Patch9907: 0007-rpm2extents-write-RC-and-output-to-transcodedfile-me.patch

Patch9908: 0008-rpm2extents-Add-script-to-troubleshoot-transcoded-fi.patch

Patch9909: 0009-rpm2extents-Add-test-verifying-RC-code-and-signature.patch

Patch9910: 0010-rpm2extents-Make-rpmkeys-support-reading-metadata-fr.patch

Patch9911: 0011-rpm2extents-Perform-digest-computation-within-the-va.patch

Patch9912: 0012-rpmextents-Create-an-internal-library-to-make-rpmext.patch

Patch9913: 0013-plugin-add-plugin_fsm_file_install_func-plugin-hook.patch

Patch9914: 0014-fsm-Call-new-rpmpluginsCallFsmFileInstall-in-rpmPack.patch

Patch9915: 0015-reflink-use-reflink_fsm_file_install-hook-instead-of.patch

Patch9916: 0016-test-new-runroot_plugins-function-to-run-command-in-.patch

Patch9917: 0017-test-Add-test-installing-an-RPM-with-reflink-plugin.patch

Patch9918: 0018-plugin-add-rpmpluginsCallFsmFileArchiveReader.patch

Patch9919: 0019-reflink-use-rpmpluginsCallFsmFileArchiveReader-to-pr.patch

Patch9920: 0020-reflink-tests-Can-install-standard-RPM-with-reflink.patch

Patch9921: 0021-tests-Fix-tests-AT_KEYWORDS-usage.patch

Patch9922: 0022-reflink-fix-support-for-hardlinks.patch

Patch9923: 0023-rpm2extents-Improve-logging.patch

Patch9924: 0024-rpm2extents-create-footer-struct-and-helpers.patch

Patch9925: 0025-extents-move-more-functions-helpers-behind-rpmextent.patch

Patch9926: 0026-fix-integer-underflow-in-vfyFDCb.patch

Patch9927: 0027-rpmchecksig-Refactor-rpmpkgVerifySigs-with-custom-ve.patch

Patch9928: 0028-reflink-remove-requirement-for-executable-stack-flag.patch

Patch9929: 0029-extentsVerifySigs-Make-it-optional-to-print-the-sign.patch

Patch9930: 0030-rpmcow-Make-rpm-i-install-package-without-the-need-o.patch

Provides: rpm(pr1470)

Provides: rpm(pr1470_1)

Patch9999: measure.patch

# Partially GPL/LGPL dual-licensed and some bits with BSD

# SourceLicense: (GPLv2+ and LGPLv2+ with exceptions) and BSD

License: GPLv2+

Requires: coreutils

Requires: popt%{_isa} >= 1.10.2.1

Requires: curl

Obsoletes: python2-rpm < %{version}-%{release}

%if %{with bdb} && %{without int_bdb}

BuildRequires: libdb-devel

%endif

%if %{with check}

BuildRequires: fakechroot gnupg2

%endif

# XXX generally assumed to be installed but make it explicit as rpm

# is a bit special...

BuildRequires: redhat-rpm-config >= 94

BuildRequires: systemd-rpm-macros

BuildRequires: gcc make

BuildRequires: gawk

BuildRequires: elfutils-devel >= 0.112

BuildRequires: elfutils-libelf-devel

BuildRequires: readline-devel zlib-devel

BuildRequires: openssl-devel

# The popt version here just documents an older known-good version

BuildRequires: popt-devel >= 1.10.2

BuildRequires: file-devel

BuildRequires: gettext-devel

BuildRequires: ncurses-devel

BuildRequires: bzip2-devel >= 0.9.0c-2

BuildRequires: lua-devel >= 5.1

BuildRequires: libcap-devel

BuildRequires: libacl-devel

%if %{with xz}

BuildRequires: xz-devel >= 4.999.8

%endif

%if %{with libarchive}

BuildRequires: libarchive-devel

%endif

%if %{with zstd}

BuildRequires: libzstd-devel

%endif

%if %{with sqlite}

BuildRequires: sqlite-devel

%endif

# Couple of patches change makefiles so, require for now...

BuildRequires: automake libtool

%if %{with plugins}

BuildRequires: libselinux-devel

BuildRequires: dbus-devel

BuildRequires: audit-libs-devel

%endif

%if %{with libimaevm}

BuildRequires: ima-evm-utils-devel >= 1.0

%endif

%if %{with libfsverity}

BuildRequires: fsverity-utils-devel >= 1.4

%endif

# For the rpmdb migration scriptlet (#2055033)

Requires(pre): coreutils

Requires(pre): findutils

Requires(pre): sed

# Force the SELinux module to be installed if SELinux policy is installed

Requires:      (%{name}-selinux = %{version}-%{release} if selinux-policy)

%description

The RPM Package Manager (RPM) is a powerful command line driven

package management system capable of installing, uninstalling,

verifying, querying, and updating software packages. Each software

package consists of an archive of files along with information about

the package like its version, a description, etc.

%package libs

Summary:  Libraries for manipulating RPM packages

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

%description libs

This package contains the RPM shared libraries.

%package build-libs

Summary:  Libraries for building RPM packages

License: GPLv2+ and LGPLv2+ with exceptions

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description build-libs

This package contains the RPM shared libraries for building packages.

%package sign-libs

Summary:  Libraries for signing RPM packages

License: GPLv2+ and LGPLv2+ with exceptions

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: %{_bindir}/gpg2

%description sign-libs

This package contains the RPM shared libraries for signing packages.

%package devel

Summary:  Development files for manipulating RPM packages

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

Requires: %{name}-libs%{_isa} = %{version}-%{release}

Requires: %{name}-build-libs%{_isa} = %{version}-%{release}

Requires: %{name}-sign-libs%{_isa} = %{version}-%{release}

Requires: popt-devel%{_isa}

%description devel

This package contains the RPM C library and header files. These

development files will simplify the process of writing programs that

manipulate RPM packages and databases. These files are intended to

simplify the process of creating graphical package managers or any

other tools that need an intimate knowledge of RPM packages in order

to function.

This package should be installed if you want to develop programs that

will manipulate RPM packages and databases.

%package build

Summary: Scripts and executable programs used to build packages

Requires: rpm = %{version}-%{release}

Requires: elfutils >= 0.128 binutils

Requires: findutils sed grep gawk diffutils file patch >= 2.5

Requires: tar unzip gzip bzip2 cpio xz

%if %{with zstd}

Requires: zstd

%endif

Requires: pkgconfig >= 1:0.24

Requires: /usr/bin/gdb-add-index

# https://fedoraproject.org/wiki/Changes/Minimal_GDB_in_buildroot

Suggests: gdb-minimal

# Technically rpmbuild doesn't require any external configuration, but

# creating distro-compatible packages does. To make the common case

# "just work" while allowing for alternatives, depend on a virtual

# provide, typically coming from redhat-rpm-config.

Requires: system-rpm-config

%description build

The rpm-build package contains the scripts and executable programs

that are used to build packages using the RPM Package Manager.

%package sign

Summary: Package signing support

Requires: rpm-sign-libs%{_isa} = %{version}-%{release}

%description sign

This package contains support for digitally signing RPM packages.

%package -n python3-%{name}

Summary: Python 3 bindings for apps which will manipulate RPM packages

BuildRequires: python3-devel

%{?python_provide:%python_provide python3-%{name}}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Provides: %{name}-python3 = %{version}-%{release}

Obsoletes: %{name}-python3 < %{version}-%{release}

Obsoletes: platform-python-%{name} < %{version}-%{release}

%description -n python3-%{name}

The python3-rpm package contains a module that permits applications

written in the Python programming language to use the interface

supplied by RPM Package Manager libraries.

This package should be installed if you want to develop Python 3

programs that will manipulate RPM packages and databases.

%package apidocs

Summary: API documentation for RPM libraries

BuildArch: noarch

%description apidocs

This package contains API documentation for developing applications

that will manipulate RPM packages and databases.

%package cron

Summary: Create daily logs of installed packages.

BuildArch: noarch

Requires: crontabs logrotate rpm = %{version}-%{release}

%description cron

This package contains a cron job which creates daily logs of installed

packages on a system.

%if %{with plugins}

%package plugin-selinux

Summary: Rpm plugin for SELinux functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: selinux-policy-base

%description plugin-selinux

%{summary}.

%package plugin-syslog

Summary: Rpm plugin for syslog functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-syslog

%{summary}.

%package plugin-systemd-inhibit

Summary: Rpm plugin for systemd inhibit functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-systemd-inhibit

This plugin blocks systemd from entering idle, sleep or shutdown while an rpm

transaction is running using the systemd-inhibit mechanism.

%package plugin-ima

Summary: Rpm plugin ima file signatures

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-ima

%{summary}.

%if %{with libfsverity}

%package plugin-fsverity

Summary: Rpm plugin fsverity file signatures

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-fsverity

%{summary}

%endif

%package plugin-fapolicyd

Summary: Rpm plugin for fapolicyd functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

Provides: fapolicyd-plugin

Obsoletes: fapolicyd-dnf-plugin

%description plugin-fapolicyd

%{summary}.

%package plugin-reflink

Summary: Rpm plugin for reflink functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-reflink

%{summary}.

%package plugin-prioreset

Summary: Rpm plugin for resetting scriptlet priorities for SysV init

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-prioreset

%{summary}.

Useful on legacy SysV init systems if you run rpm transactions with

nice/ionice priorities. Should not be used on systemd systems.

%package plugin-audit

Summary: Rpm plugin for logging audit events on package operations

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-audit

%{summary}.

%package plugin-measure

Summary: Rpm plugin for measure

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-measure

Adds measure support

# with plugins

%endif

%package selinux

Summary:        SELinux module for rpm

BuildArch:      noarch

BuildRequires:  bzip2

BuildRequires:  make

BuildRequires:  selinux-policy

BuildRequires:  selinux-policy-devel

Requires(post): selinux-policy-base >= %{_selinux_policy_version}

Requires(post): policycoreutils

Requires(post): policycoreutils-python-utils

Requires(pre):  libselinux-utils

Requires(post): libselinux-utils

%description selinux

This package provides the SELinux policy module to ensure rpm

runs properly under an environment with SELinux enabled.

%prep

%autosetup -n rpm-%{srcver} %{?with_int_bdb:-a 1} -p1

%if %{with bdb} && %{with int_bdb}

ln -s db-%{bdbver} db

%endif

# switch to sqlite db by default, including during build-time tests

%if %{with sqlite}

sed -i -e "/_db_backend/ s/ bdb/ sqlite/g" macros.in

%endif

# SELinux policy files

mkdir selinux-policy

cp %{SOURCE100} %{SOURCE101} %{SOURCE102} selinux-policy

%build

%set_build_flags

autoreconf -i -f

# Hardening hack taken from macro %%configure defined in redhat-rpm-config

for i in $(find . -name ltmain.sh) ; do

     %{__sed} -i.backup -e 's~compiler_flags=$~compiler_flags="%{_hardened_ldflags}"~' $i

done;

# Using configure macro has some unwanted side-effects on rpm platform

# setup, use the old-fashioned way for now only defining minimal paths.

./configure \

    --prefix=%{_usr} \

    --sysconfdir=%{_sysconfdir} \

    --localstatedir=%{_var} \

    --sharedstatedir=%{_var}/lib \

    --libdir=%{_libdir} \

    --build=%{_target_platform} \

    --host=%{_target_platform} \

    --with-vendor=redhat \

    --enable-bdb=%{?with_bdb:yes}%{!?with_bdb:no} \

    %{!?with_int_bdb: --with-external-db} \

    %{!?with_plugins: --disable-plugins} \

    --with-lua \

    --with-selinux \

    --with-cap \

    --with-acl \

    %{?with_ndb: --enable-ndb} \

    %{!?with_libarchive: --without-archive} \

    %{?with_libimaevm: --with-imaevm} \

    %{?with_libfsverity: --with-fsverity} \

    %{?with_zstd: --enable-zstd} \

    %{?with_sqlite: --enable-sqlite} \

    %{?with_bdb_ro: --enable-bdb-ro} \

    --with-fapolicyd \

    --enable-python \

    --with-crypto=openssl

%make_build

pushd python

%py3_build

popd

pushd selinux-policy

%{__make} -f Makefile.selinux SHARE="%{_datadir}" TARGETS="rpm_hs"

popd

%install

%make_install

# We need to build with --enable-python for the self-test suite, but we

# actually package the bindings built with setup.py (#531543#c26)

pushd python

%py3_install

popd

install -d -p %{buildroot}%{_datadir}/selinux/packages

install -p -m 0644 selinux-policy/rpm_hs.pp.bz2 %{buildroot}%{_datadir}/selinux/packages

mkdir -p $RPM_BUILD_ROOT%{_unitdir}

install -m 644 %{SOURCE10} $RPM_BUILD_ROOT/%{_unitdir}

install -m 644 %{SOURCE20} $RPM_BUILD_ROOT/%{_unitdir}

mkdir -p $RPM_BUILD_ROOT%{rpmhome}

install -m 755 %{SOURCE21} $RPM_BUILD_ROOT/%{rpmhome}

# Save list of packages through cron

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily

install -m 755 scripts/rpm.daily ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/rpm

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d

install -m 644 scripts/rpm.log ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/rpm

%if %{with bdb}

mkdir -p ${RPM_BUILD_ROOT}%{_tmpfilesdir}

echo "r /usr/lib/sysimage/rpm/__db.*" > ${RPM_BUILD_ROOT}%{_tmpfilesdir}/rpm.conf

%endif

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rpm

mkdir -p $RPM_BUILD_ROOT%{rpmhome}/macros.d

mkdir -p $RPM_BUILD_ROOT/usr/lib/sysimage/rpm

# init an empty database for %ghost'ing for all supported backends

for be in %{?with_ndb:ndb} %{?with_sqlite:sqlite} %{?with_bdb:bdb}; do

    ./rpmdb --define "_db_backend ${be}" --dbpath=${PWD}/${be} --initdb

    cp -va ${be}/. $RPM_BUILD_ROOT/usr/lib/sysimage/rpm/

done

%find_lang rpm

find $RPM_BUILD_ROOT -name "*.la"|xargs rm -f

# These live in perl-generators and python-rpm-generators now

rm -f $RPM_BUILD_ROOT/%{rpmhome}/{perldeps.pl,perl.*,pythond*}

rm -f $RPM_BUILD_ROOT/%{_fileattrsdir}/{perl*,python*}

rm -rf $RPM_BUILD_ROOT/var/tmp

%if %{with check}

%check

make check TESTSUITEFLAGS=-j%{_smp_build_ncpus} || (cat tests/rpmtests.log; exit 1)

# rpm >= 4.16.0 testsuite leaves a read-only tree behind, clean it up

make clean

%endif

%pre

# Symlink all rpmdb files to the new location if we're still using /var/lib/rpm

if [ -d /var/lib/rpm ]; then

    mkdir -p /usr/lib/sysimage/rpm

    rpmdb_files=$(find /var/lib/rpm -maxdepth 1 -type f | sed 's|^/var/lib/rpm/||g' | sort)

    for rpmdb_file in ${rpmdb_files[@]}; do

        ln -sfr /var/lib/rpm/${rpmdb_file} /usr/lib/sysimage/rpm/${rpmdb_file}

    done

fi

%triggerun -- rpm < 4.16.1.3-11.3

# Handle rpmdb migrate service on erasure of old to avoid ordering issues

if [ -x /usr/bin/systemctl ]; then

    systemctl --no-reload preset rpmdb-migrate ||:

fi

%posttrans

if [ -d /var/lib/rpm ]; then

    touch /var/lib/rpm/.migratedb

fi

%pre selinux

%selinux_relabel_pre

%post selinux

%selinux_modules_install %{_datadir}/selinux/packages/rpm_hs.pp.bz2

%selinux_relabel_post

%posttrans selinux

%selinux_relabel_post

%postun selinux

%selinux_modules_uninstall rpm_hs

if [ $1 -eq 0 ]; then

    %selinux_relabel_post

fi

%files -f rpm.lang

%license COPYING

%doc CREDITS doc/manual/[a-z]*

%if %{with bdb}

%{_tmpfilesdir}/rpm.conf

%endif

%{_unitdir}/rpmdb-rebuild.service

%{_unitdir}/rpmdb-migrate.service

%dir %{_sysconfdir}/rpm

%attr(0755, root, root) %dir /usr/lib/sysimage/rpm

%attr(0644, root, root) %ghost %config(missingok,noreplace) /usr/lib/sysimage/rpm/*

%attr(0644, root, root) %ghost /usr/lib/sysimage/rpm/.*.lock

%{_bindir}/rpm

%if %{with libarchive}

%{_bindir}/rpm2archive

%endif

%{_bindir}/rpm2cpio

%{_bindir}/rpmdb

%{_bindir}/rpmkeys

%{_bindir}/rpmquery

%{_bindir}/rpmverify

%{_mandir}/man8/rpm.8*

%{_mandir}/man8/rpmdb.8*

%{_mandir}/man8/rpmkeys.8*

%if %{with libarchive}

%{_mandir}/man8/rpm2archive.8*

%endif

%{_mandir}/man8/rpm2cpio.8*

%{_mandir}/man8/rpm-misc.8*

%{_mandir}/man8/rpm-plugins.8*

# XXX this places translated manuals to wrong package wrt eg rpmbuild

%lang(fr) %{_mandir}/fr/man[18]/*.[18]*

%lang(ko) %{_mandir}/ko/man[18]/*.[18]*

%lang(ja) %{_mandir}/ja/man[18]/*.[18]*

%lang(pl) %{_mandir}/pl/man[18]/*.[18]*

%lang(ru) %{_mandir}/ru/man[18]/*.[18]*

%lang(sk) %{_mandir}/sk/man[18]/*.[18]*

%attr(0755, root, root) %dir %{rpmhome}

%{rpmhome}/macros

%{rpmhome}/macros.d

%{rpmhome}/lua

%{rpmhome}/rpmpopt*

%{rpmhome}/rpmrc

%{rpmhome}/rpmdb_*

%{rpmhome}/rpm.daily

%{rpmhome}/rpm.log

%{rpmhome}/rpm.supp

%{rpmhome}/rpm2cpio.sh

%{rpmhome}/tgpg

%{rpmhome}/platform

%dir %{rpmhome}/fileattrs

%files libs

%{_libdir}/librpmio.so.%{sover}

%{_libdir}/librpm.so.%{sover}

%{_libdir}/librpmio.so.%{sover}.*

%{_libdir}/librpm.so.%{sover}.*

%if %{with plugins}

%dir %{_libdir}/rpm-plugins

%if %{with libfsverity}

%files plugin-fsverity

%{_libdir}/rpm-plugins/fsverity.so

%endif

%files plugin-syslog

%{_libdir}/rpm-plugins/syslog.so

%{_mandir}/man8/rpm-plugin-syslog.8*

%files plugin-selinux

%{_libdir}/rpm-plugins/selinux.so

%{_mandir}/man8/rpm-plugin-selinux.8*

%files plugin-systemd-inhibit

%{_libdir}/rpm-plugins/systemd_inhibit.so

%{_mandir}/man8/rpm-plugin-systemd-inhibit.8*

%files plugin-ima

%{_libdir}/rpm-plugins/ima.so

%{_mandir}/man8/rpm-plugin-ima.8*

%files plugin-fapolicyd

%{_libdir}/rpm-plugins/fapolicyd.so