diff --git a/SOURCES/fipscheck.conf b/SOURCES/fipscheck.conf new file mode 100644 index 0000000..8476d12 --- /dev/null +++ b/SOURCES/fipscheck.conf @@ -0,0 +1,2 @@ +-b /usr/lib{,64}/libfipscheck.so.* +-b /usr/bin/fipscheck diff --git a/SPECS/fipscheck.spec b/SPECS/fipscheck.spec index 2d1a349..89a0865 100644 --- a/SPECS/fipscheck.spec +++ b/SPECS/fipscheck.spec @@ -1,18 +1,22 @@ Summary: A library for integrity verification of FIPS validated modules Name: fipscheck Version: 1.4.1 -Release: 1%{?dist} +Release: 5%{?dist} License: BSD Group: System Environment/Libraries # This is a Red Hat maintained package which is specific to # our distribution. URL: http://fedorahosted.org/fipscheck/ Source0: http://fedorahosted.org/releases/f/i/%{name}/%{name}-%{version}.tar.bz2 +# Prelink blacklist +Source1: fipscheck.conf BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX) BuildRequires: openssl-devel >= 0.9.8j +Requires: %{name}-lib%{?_isa} = %{version}-%{release} + %description FIPSCheck is a library for integrity verification of FIPS validated modules. The package also provides helper binaries for creation and @@ -31,7 +35,7 @@ This package contains the FIPSCheck library. Summary: Development files for %{name} Group: System Environment/Libraries -Requires: %{name}-lib = %{version}-%{release} +Requires: %{name}-lib%{?_isa} = %{version}-%{release} %description devel This package contains development files for %{name}. @@ -62,6 +66,11 @@ find $RPM_BUILD_ROOT -type f -name "*.la" -delete mkdir -p $RPM_BUILD_ROOT%{_libdir}/fipscheck +# Prelink blacklist +mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/prelink.conf.d +install -m644 %{SOURCE1} \ + $RPM_BUILD_ROOT/%{_sysconfdir}/prelink.conf.d/fipscheck.conf + %clean rm -rf $RPM_BUILD_ROOT @@ -82,6 +91,8 @@ rm -rf $RPM_BUILD_ROOT %{_libdir}/libfipscheck.so.* %dir %{_libdir}/fipscheck %{_libdir}/fipscheck/libfipscheck.so.*.hmac +%dir %{_sysconfdir}/prelink.conf.d +%{_sysconfdir}/prelink.conf.d/fipscheck.conf %files devel %defattr(-,root,root,-) @@ -90,44 +101,57 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man3/* %changelog -* Tue Sep 10 2013 Tomáš Mráz - 1.4.1-1 +* Mon Feb 10 2014 Tomáš Mráz - 1.4.1-5 +- fix the library path in prelink blacklist + +* Fri Jan 24 2014 Daniel Mach - 1.4.1-4 +- Mass rebuild 2014-01-24 + +* Mon Jan 13 2014 Tomáš Mráz - 1.4.1-3 +- add versioned dependency to -lib on base package (#1010349) +- add prelink blacklist + +* Fri Dec 27 2013 Daniel Mach - 1.4.1-2 +- Mass rebuild 2013-12-27 + +* Tue Sep 10 2013 Tomáš Mráz - 1.4.1-1 - fix inverted condition in FIPSCHECK_verify_ex() -* Fri Sep 6 2013 Tomáš Mráz - 1.4.0-1 +* Fri Sep 6 2013 Tomáš Mráz - 1.4.0-1 - added new API calls to support setting hmac suffix -* Mon Apr 16 2012 Tomas Mraz - 1.3.1-1 +* Mon Apr 16 2012 Tomas Mraz - 1.3.1-1 - manual pages added by Paul Wouters -* Tue Sep 7 2010 Tomas Mraz - 1.3.0-1 +* Tue Sep 7 2010 Tomas Mraz - 1.3.0-1 - look up the hmac files in the _libdir/fipscheck first -* Tue May 26 2009 Tomas Mraz - 1.2.0-1 +* Tue May 26 2009 Tomas Mraz - 1.2.0-1 - add lib subpackage to avoid multilib on the base package - add ability to compute hmacs on multiple files at once - improved debugging with FIPSCHECK_DEBUG -* Thu Mar 19 2009 Tomas Mraz - 1.1.1-1 +* Thu Mar 19 2009 Tomas Mraz - 1.1.1-1 - move binaries and libraries to /usr -* Wed Mar 18 2009 Tomas Mraz - 1.1.0-1 +* Wed Mar 18 2009 Tomas Mraz - 1.1.0-1 - hmac check itself as required by FIPS -* Mon Feb 9 2009 Tomas Mraz - 1.0.4-1 +* Mon Feb 9 2009 Tomas Mraz - 1.0.4-1 - add some docs to the README, require current openssl in Fedora -* Fri Oct 24 2008 Tomas Mraz - 1.0.3-1 +* Fri Oct 24 2008 Tomas Mraz - 1.0.3-1 - use OpenSSL in FIPS mode to do the HMAC checksum instead of NSS -* Tue Sep 9 2008 Tomas Mraz - 1.0.2-1 +* Tue Sep 9 2008 Tomas Mraz - 1.0.2-1 - fix test for prelink -* Mon Sep 8 2008 Tomas Mraz - 1.0.1-1 +* Mon Sep 8 2008 Tomas Mraz - 1.0.1-1 - put binaries in /bin and libraries in /lib as fipscheck will be used by modules in /lib -* Mon Sep 8 2008 Tomas Mraz - 1.0.0-2 +* Mon Sep 8 2008 Tomas Mraz - 1.0.0-2 - minor fixes for package review -* Wed Sep 3 2008 Tomas Mraz - 1.0.0-1 +* Wed Sep 3 2008 Tomas Mraz - 1.0.0-1 - Initial spec file