f16fb0
%global _hardened_build 1
f16fb0
f16fb0
Summary: A RFC 1413 ident protocol daemon
f16fb0
Name: authd
f16fb0
Version: 1.4.4
5ede6b
Release: 5%{?dist}.1
f16fb0
License: GPLv2+
f16fb0
URL: https://github.com/InfrastructureServices/authd
f16fb0
Obsoletes: pidentd < 3.2
f16fb0
Provides: pidentd = 3.2
f16fb0
Requires(post): openssl
f16fb0
Source0: https://github.com/InfrastructureServices/authd/releases/download/v1.4.4/authd-1.4.4.tar.gz
f16fb0
Source1: auth.socket
f16fb0
Source2: auth@.service
f16fb0
BuildRequires:  gcc
f16fb0
BuildRequires: openssl-devel gettext help2man systemd-units
f16fb0
Requires(post): systemd-units
f16fb0
Requires(preun): systemd-units
f16fb0
Requires(postun): systemd-units
f16fb0
f16fb0
Patch0: authd-covscan.patch
f16fb0
f16fb0
%description
f16fb0
authd is a small and fast RFC 1413 ident protocol daemon
f16fb0
with both xinetd server and interactive modes that
f16fb0
supports IPv6 and IPv4 as well as the more popular features
f16fb0
of pidentd.
f16fb0
f16fb0
%prep
f16fb0
%autosetup
f16fb0
f16fb0
%build
f16fb0
make prefix=%{_prefix} CFLAGS="%{optflags}" \
f16fb0
        LDFLAGS="-lcrypto %{build_ldflags}"
f16fb0
f16fb0
%install
f16fb0
%make_install datadir=%{buildroot}/%{_datadir} \
f16fb0
	sbindir=%{buildroot}/%{_sbindir}
f16fb0
f16fb0
install -d %{buildroot}%{_unitdir}/
f16fb0
install -m 644 %{SOURCE1} %{buildroot}%{_unitdir}/
f16fb0
install -m 644 %{SOURCE2} %{buildroot}%{_unitdir}/
f16fb0
f16fb0
install -d %{buildroot}%{_sysconfdir}/
f16fb0
touch %{buildroot}%{_sysconfdir}/ident.key
f16fb0
f16fb0
install -d %{buildroot}/%{_mandir}/man1/
f16fb0
help2man -N -v -V %{buildroot}/%{_sbindir}/in.authd -o \
f16fb0
         %{buildroot}/%{_mandir}/man1/in.authd.1
f16fb0
f16fb0
%find_lang %{name}
f16fb0
f16fb0
%post
f16fb0
/usr/sbin/adduser -s /sbin/nologin -u 98 -r -d '/' ident 2>/dev/null || true
f16fb0
/usr/bin/openssl rand -base64 -out %{_sysconfdir}/ident.key 32
f16fb0
echo CHANGE THE LINE ABOVE TO A PASSPHRASE >> %{_sysconfdir}/ident.key
f16fb0
/bin/chown ident:ident %{_sysconfdir}/ident.key
f16fb0
chmod o-rw %{_sysconfdir}/ident.key
f16fb0
%systemd_post auth.socket
f16fb0
f16fb0
%postun
f16fb0
%systemd_postun_with_restart auth.socket
f16fb0
f16fb0
%preun
f16fb0
%systemd_preun auth.socket
f16fb0
f16fb0
%files -f authd.lang
f16fb0
%license COPYING
f16fb0
%verify(not md5 size mtime user group) %config(noreplace) %attr(640,root,root) %{_sysconfdir}/ident.key
f16fb0
%doc COPYING README.html rfc1413.txt
f16fb0
%{_sbindir}/in.authd
f16fb0
%{_mandir}/*/*
f16fb0
%{_unitdir}/*
f16fb0
f16fb0
%changelog
5ede6b
* Wed Jul 17 2019 Pavel Zhukov <pzhukov@redhat.com> - 1.4.4-5.1
5ede6b
- Resolves: #1722492 - Partially revert covscan fix 
5ede6b
f16fb0
* Mon Feb 18 2019 Pavel Zhukov <pzhukov@redhat.com> - 1.4.4-5
f16fb0
- Related: #1642073 - Properly pass hardened ld flags
f16fb0
- Fix covscan reported errors
f16fb0
f16fb0
* Sun Feb 17 2019 Pavel Zhukov <pzhukov@redhat.com> - 1.4.4-2
f16fb0
- Related: #1642073 - Rebuild with RHEL CFLAGS
f16fb0
- Enabled hardered build
f16fb0
f16fb0
* Tue Feb 12 2019 Pavel Zhukov <pzhukov@redhat.com> - 1.4.4-1
f16fb0
- Import from Fedora
f16fb0
- New release (v1.4.4)
f16fb0
- New upstream URL
f16fb0
f16fb0