%define libapivermajor 1

%define libapiversion %{libapivermajor}.10

# % define buildid .local

Name:    keyutils

Version: 1.6.3

Release: 1%{?buildid}%{?dist}

Summary: Linux Key Management Utilities

License: GPLv2+ and LGPLv2+

Url:	https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/keyutils.git

Source0: %{url}/snapshot/keyutils-%{version}.tar.gz

BuildRequires: gcc

BuildRequires: glibc-kernheaders >= 2.4-9.1.92

BuildRequires: make

BuildRequires: g++

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%description

Utilities to control the kernel key management facility and to provide

a mechanism by which the kernel call back to user space to get a key

instantiated.

%package libs

Summary: Key utilities library

%description libs

This package provides a wrapper library for the key management facility system

calls.

%package libs-devel

Summary: Development package for building Linux key management utilities

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

%description libs-devel

This package provides headers and libraries for building key utilities.

%prep

%setup -q

%build

make \

	NO_ARLIB=1 \

	ETCDIR=%{_sysconfdir} \

	LIBDIR=%{_libdir} \

	USRLIBDIR=%{_libdir} \

	BINDIR=%{_bindir} \

	SBINDIR=%{_sbindir} \

	MANDIR=%{_mandir} \

	INCLUDEDIR=%{_includedir} \

	SHAREDIR=%{_datadir}/%{name} \

	RELEASE=.%{release} \

	NO_GLIBC_KEYERR=1 \

	CFLAGS="-Wall $RPM_OPT_FLAGS" \

	LDFLAGS="%{?__global_ldflags}"

%install

make \

	NO_ARLIB=1 \

	DESTDIR=$RPM_BUILD_ROOT \

	ETCDIR=%{_sysconfdir} \

	LIBDIR=%{_libdir} \

	USRLIBDIR=%{_libdir} \

	BINDIR=%{_bindir} \

	SBINDIR=%{_sbindir} \

	MANDIR=%{_mandir} \

	INCLUDEDIR=%{_includedir} \

	SHAREDIR=%{_datadir}/%{name} \

	install

%ldconfig_scriptlets libs

%files

%doc README

%license LICENCE.GPL

%config(noreplace) %{_sysconfdir}/*

%{_bindir}/keyctl

%{_sbindir}/key.dns_resolver

%{_sbindir}/request-key

%{_datadir}/%{name}

%{_mandir}/man1/*

%{_mandir}/man5/*

%{_mandir}/man8/*

%files libs

%license LICENCE.LGPL

%{_libdir}/libkeyutils.so.%{libapiversion}

%{_libdir}/libkeyutils.so.%{libapivermajor}

%{_mandir}/man7/*

%files libs-devel

%{_libdir}/libkeyutils.so

%{_includedir}/keyutils.h

%{_libdir}/pkgconfig/libkeyutils.pc

%{_mandir}/man3/*

%changelog

* Fri Oct 14 2022 Pavel Reichl <preichl@redhat.com> - 1.6.3-1

- Update to upstream version 1.6.3

  Related: rhbz#2119105

* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.6.1-4

- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

  Related: rhbz#1991688

* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.6.1-3

- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.1-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

* Tue Jan  5 2021 Peter Robinson <pbrobinson@fedoraproject.org> - 1.6.1-1

- Update to 1.6.1

- Spec cleanups

* Tue Jul 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.6-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.6-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.6-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.6-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

* Tue Nov 13 2018 David Howells <dhowells@redhat.com> - 1.6-1

- Apply various specfile cleanups from Fedora.

- request-key: Provide a command line option to suppress helper execution.

- request-key: Find least-wildcard match rather than first match.

- Remove the dependency on MIT Kerberos.

- Fix some error messages

- keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes.

- Fix doc and comment typos.

- Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20).

- Add pkg-config support for finding libkeyutils.

* Tue Aug 28 2018 David Howells <dhowells@redhat.com> 1.5.11-1

- Add keyring restriction support.

- Add KDF support to the Diffie-Helman function.

- DNS: Add support for AFS config files and SRV records

* Sat Jul 21 2018 Peter Robinson <pbrobinson@fedoraproject.org> 1.5.10-8

- Spec cleanups, add gcc build requires

* Fri Feb 09 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.5.10-6

- Escape macros in %%changelog

* Sat Feb 03 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.5.10-4

- Switch to %%ldconfig_scriptlets

* Wed Mar 15 2017 David Howells <dhowells@redhat.com> - 1.5.10-1

- Include sys/types.h in keyutils.h.

- The dns resolver needs limits.h.

- Overhaul of all manual pages.

- Some manual pages moved to Linux man-pages project.

- Add Diffie-Helman keyctl function.

* Fri Aug 14 2015 Adam Jackson <ajax@redhat.com> 1.5.9-7

- Pass ldflags into the build so hardening works

* Sat Jul 12 2014 Tom Callaway <spot@fedoraproject.org> - 1.5.9-3

- Fix license handling

* Fri Feb 21 2014 David Howells <dhowells@redhat.com> - 1.5.9-1

- Add manpages for get_persistent.

- Fix memory leaks in keyctl_describe/read/get_security_alloc().

- Use keyctl_describe_alloc in dump_key_tree_aux rather than open coding it.

- Exit rather than returning from act_xxx() functions.

- Fix memory leak in dump_key_tree_aux.

- Only get the groups list if we need it.

- Don't trust sscanf's %%n argument.

- Use the correct path macros in the specfile.

- Avoid use realloc when the memory has no content.

- Fix a bunch of issues in key.dns_resolver.

- Fix command table searching in keyctl utility.

- Fix a typo in the permissions mask constants.

- Improve the keyctl_read manpage.

- Add man7 pages describing various keyrings concepts.

* Fri Oct 4 2013 David Howells <dhowells@redhat.com> - 1.5.8-1

- New lib symbols should go in a new library minor version.

* Wed Oct 2 2013 David Howells <dhowells@redhat.com> - 1.5.7-1

- Provide a utility function to find a key by type and name.

- Allow keyctl commands to take a type+name arg instead of a key-id arg.

- Add per-UID get_persistent keyring function.

* Thu Aug 29 2013 David Howells <dhowells@redhat.com> - 1.5.6-1

- Fix the request-key.conf.5 manpage.

- Fix the max depth of key tree dump (keyctl show).

- The input buffer size for keyctl padd and pinstantiate should be larger.

- Add keyctl_invalidate.3 manpage.

* Wed Nov 30 2011 David Howells <dhowells@redhat.com> - 1.5.5-1

- Fix a Makefile error.

* Wed Nov 30 2011 David Howells <dhowells@redhat.com> - 1.5.4-1

- Fix the keyctl padd command and similar to handle binary input.

- Make keyctl show able to take a keyring to dump.

- Make keyctl show able to take a flag to request hex key IDs.

- Make keyctl show print the real ID of the root keyring.

* Tue Nov 15 2011 David Howells <dhowells@redhat.com>

- Allow /sbin/request-key to have multiple config files.

* Wed Aug 31 2011 David Howells <dhowells@redhat.com>

- Adjust the manual page for 'keyctl unlink' to show keyring is optional.

- Add --version support for the keyutils version and build date.

* Thu Aug 11 2011 David Howells <dhowells@redhat.com> - 1.5.3-1

- Make the keyutils rpm depend on the same keyutils-libs rpm version.

* Tue Jul 26 2011 David Howells <dhowells@redhat.com> - 1.5.2-1

- Use correct format spec for printing pointer subtraction results.

* Tue Jul 19 2011 David Howells <dhowells@redhat.com> - 1.5.1-1

- Fix unread variables.

- Licence file update.

* Thu Mar 10 2011 David Howells <dhowells@redhat.com> - 1.5-1

- Disable RPATH setting in Makefile.

- Add -I. to build to get this keyutils.h.

- Make CFLAGS override on make command line work right.

- Make specfile UTF-8.

- Support KEYCTL_REJECT.

- Support KEYCTL_INSTANTIATE_IOV.

- Add AFSDB DNS lookup program from Wang Lei.

- Generalise DNS lookup program.

- Add recursive scan utility function.

- Add bad key reap command to keyctl.

- Add multi-unlink variant to keyctl unlink command.

- Add multi key purge command to keyctl.

- Handle multi-line commands in keyctl command table.

- Move the package to version to 1.5.

* Tue Mar 1 2011 David Howells <dhowells@redhat.com> - 1.4-4

- Make build guess at default libdirs and word size.

- Make program build depend on library in Makefile.

- Don't include $(DESTDIR) in MAN* macros.

- Remove NO_GLIBC_KEYSYS as it is obsolete.

- Have Makefile extract version info from specfile and version script.

- Provide RPM build rule in Makefile.

- Provide distclean rule in Makefile.

* Fri Dec 17 2010 Diego Elio Pettenò <flameeyes@hosting.flameeyes.eu> - 1.4-3

- Fix local linking and RPATH.

* Thu Jun 10 2010 David Howells <dhowells@redhat.com> - 1.4-2

- Fix prototypes in manual pages (some char* should be void*).

- Rename the keyctl_security.3 manpage to keyctl_get_security.3.

* Fri Mar 19 2010 David Howells <dhowells@redhat.com> - 1.4-1

- Fix the library naming wrt the version.

- Move the package to version to 1.4.

* Fri Mar 19 2010 David Howells <dhowells@redhat.com> - 1.3-3

- Fix spelling mistakes in manpages.

- Add an index manpage for all the keyctl functions.

* Thu Mar 11 2010 David Howells <dhowells@redhat.com> - 1.3-2

- Fix rpmlint warnings.

* Fri Feb 26 2010 David Howells <dhowells@redhat.com> - 1.3-1

- Fix compiler warnings in request-key.

- Expose the kernel function to get a key's security context.

- Expose the kernel function to set a processes keyring onto its parent.

- Move libkeyutils library version to 1.3.

* Tue Aug 22 2006 David Howells <dhowells@redhat.com> - 1.2-1

- Remove syscall manual pages (section 2) to man-pages package [BZ 203582]

- Don't write to serial port in debugging script

* Mon Jun 5 2006 David Howells <dhowells@redhat.com> - 1.1-4

- Call ldconfig during (un)installation.

* Fri May 5 2006 David Howells <dhowells@redhat.com> - 1.1-3

- Don't include the release number in the shared library filename

- Don't build static library

* Fri May 5 2006 David Howells <dhowells@redhat.com> - 1.1-2

- More bug fixes from Fedora reviewer.

* Thu May 4 2006 David Howells <dhowells@redhat.com> - 1.1-1

- Fix rpmlint errors

* Mon Dec 5 2005 David Howells <dhowells@redhat.com> - 1.0-2

- Add build dependency on glibc-kernheaders with key management syscall numbers

* Tue Nov 29 2005 David Howells <dhowells@redhat.com> - 1.0-1

- Add data pipe-in facility for keyctl request2

* Mon Nov 28 2005 David Howells <dhowells@redhat.com> - 1.0-1

- Rename library and header file "keyutil" -> "keyutils" for consistency

- Fix shared library version naming to same way as glibc.

- Add versioning for shared library symbols

- Create new keyutils-libs package and install library and main symlink there

- Install base library symlink in /usr/lib and place in devel package

- Added a keyutils archive library

- Shorten displayed key permissions list to just those we actually have

* Thu Nov 24 2005 David Howells <dhowells@redhat.com> - 0.3-4

- Add data pipe-in facilities for keyctl add, update and instantiate

* Fri Nov 18 2005 David Howells <dhowells@redhat.com> - 0.3-3

- Added stdint.h inclusion in keyutils.h

- Made request-key.c use request_key() rather than keyctl_search()

- Added piping facility to request-key

* Thu Nov 17 2005 David Howells <dhowells@redhat.com> - 0.3-2

- Added timeout keyctl option

- request_key auth keys must now be assumed

- Fix keyctl argument ordering for debug negate line in request-key.conf

* Thu Jul 28 2005 David Howells <dhowells@redhat.com> - 0.3-1

- Must invoke initialisation from perror() override in libkeyutils

- Minor UI changes

* Wed Jul 20 2005 David Howells <dhowells@redhat.com> - 0.2-2

- Bump version to permit building in main repositories.

* Tue Jul 12 2005 David Howells <dhowells@redhat.com> - 0.2-1

- Don't attempt to define the error codes in the header file.

- Pass the release ID through to the makefile to affect the shared library name.

* Tue Jul 12 2005 David Howells <dhowells@redhat.com> - 0.1-3

- Build in the perror() override to get the key error strings displayed.

* Tue Jul 12 2005 David Howells <dhowells@redhat.com> - 0.1-2

- Need a defattr directive after each files directive.

* Tue Jul 12 2005 David Howells <dhowells@redhat.com> - 0.1-1

- Package creation.