diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..e5f87db --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/libcap-ng-0.7.3.tar.gz diff --git a/.libcap-ng.metadata b/.libcap-ng.metadata new file mode 100644 index 0000000..589ebb2 --- /dev/null +++ b/.libcap-ng.metadata @@ -0,0 +1 @@ +b4c61c664d9b90810f2e947c46a41ed8abb9e292 SOURCES/libcap-ng-0.7.3.tar.gz diff --git a/README.md b/README.md deleted file mode 100644 index 0e7897f..0000000 --- a/README.md +++ /dev/null @@ -1,5 +0,0 @@ -The master branch has no content - -Look at the c7 branch if you are working with CentOS-7, or the c4/c5/c6 branch for CentOS-4, 5 or 6 - -If you find this file in a distro specific branch, it means that no content has been checked in yet diff --git a/SOURCES/libcap-ng-0.7.4-badfd.patch b/SOURCES/libcap-ng-0.7.4-badfd.patch new file mode 100644 index 0000000..7161ba5 --- /dev/null +++ b/SOURCES/libcap-ng-0.7.4-badfd.patch @@ -0,0 +1,12 @@ +diff -urp libcap-ng-0.7.3/utils/pscap.c libcap-ng-0.7.4/utils/pscap.c +--- libcap-ng-0.7.3/utils/pscap.c 2012-11-09 14:45:43.000000000 -0500 ++++ libcap-ng-0.7.4/utils/pscap.c 2012-11-30 10:06:42.000000000 -0500 +@@ -142,8 +142,6 @@ int main(int argc, char *argv[]) + fclose(f); + } + +- len = read(fd, buf, sizeof buf - 1); +- close(fd); + if (header == 0) { + printf("%-5s %-5s %-10s %-16s %s\n", + "ppid", "pid", "name", "command", diff --git a/SOURCES/libcap-ng-0.7.5-linux316.patch b/SOURCES/libcap-ng-0.7.5-linux316.patch new file mode 100644 index 0000000..817edc7 --- /dev/null +++ b/SOURCES/libcap-ng-0.7.5-linux316.patch @@ -0,0 +1,14 @@ +Update table for 3.16 kernel + +(backport of upstream commit 62) + +--- a/src/captab.h ++++ b/src/captab.h +@@ -76,4 +76,7 @@ + #ifdef CAP_COMPROMISE_KERNEL + _S(CAP_COMPROMISE_KERNEL, "compromise_kernel" ) + #endif ++#ifdef CAP_AUDIT_READ ++_S(CAP_AUDIT_READ, "audit_read" ) ++#endif + diff --git a/SPECS/libcap-ng.spec b/SPECS/libcap-ng.spec new file mode 100644 index 0000000..56e8ba0 --- /dev/null +++ b/SPECS/libcap-ng.spec @@ -0,0 +1,209 @@ +%global aarchrev .1 + +%{!?python_sitearch: %global python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib(1)")} + +Summary: An alternate posix capabilities library +Name: libcap-ng +Version: 0.7.3 +Release: 5%{?aarchrev}%{?dist} +License: LGPLv2+ +Group: System Environment/Libraries +URL: http://people.redhat.com/sgrubb/libcap-ng +Source0: http://people.redhat.com/sgrubb/libcap-ng/%{name}-%{version}.tar.gz +Patch1: libcap-ng-0.7.4-badfd.patch +Patch2: libcap-ng-0.7.5-linux316.patch +BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) +BuildRequires: kernel-headers >= 2.6.11 + +%description +Libcap-ng is a library that makes using posix capabilities easier + +%package devel +Summary: Header files for libcap-ng library +License: LGPLv2+ +Group: Development/Libraries +Requires: kernel-headers >= 2.6.11 +Requires: %{name} = %{version}-%{release} +Requires: pkgconfig + +%description devel +The libcap-ng-devel package contains the files needed for developing +applications that need to use the libcap-ng library. + +%package python +Summary: Python bindings for libcap-ng library +License: LGPLv2+ +Group: Development/Libraries +BuildRequires: python-devel swig +Requires: %{name} = %{version}-%{release} + +%description python +The libcap-ng-python package contains the bindings so that libcap-ng +and can be used by python applications. + +%package utils +Summary: Utilities for analyzing and setting file capabilities +License: GPLv2+ +Group: Development/Libraries +Requires: %{name} = %{version}-%{release} + +%description utils +The libcap-ng-utils package contains applications to analyze the +posix capabilities of all the program running on a system. It also +lets you set the file system based capabilities. + +%prep +%setup -q +%patch1 -p1 +%patch2 -p1 + +%build +%configure --libdir=/%{_lib} +make %{?_smp_mflags} + +%install +rm -rf $RPM_BUILD_ROOT +make DESTDIR="${RPM_BUILD_ROOT}" install + +# Move the symlink +rm -f $RPM_BUILD_ROOT/%{_lib}/%{name}.so +mkdir -p $RPM_BUILD_ROOT%{_libdir} +VLIBNAME=$(ls $RPM_BUILD_ROOT/%{_lib}/%{name}.so.*.*.*) +LIBNAME=$(basename $VLIBNAME) +ln -s ../../%{_lib}/$LIBNAME $RPM_BUILD_ROOT%{_libdir}/%{name}.so + +# Move the pkgconfig file +mv $RPM_BUILD_ROOT/%{_lib}/pkgconfig $RPM_BUILD_ROOT%{_libdir} + +# Remove a couple things so they don't get picked up +rm -f $RPM_BUILD_ROOT/%{_lib}/libcap-ng.la +rm -f $RPM_BUILD_ROOT/%{_lib}/libcap-ng.a +rm -f $RPM_BUILD_ROOT/%{_libdir}/python?.?/site-packages/_capng.a +rm -f $RPM_BUILD_ROOT/%{_libdir}/python?.?/site-packages/_capng.la + +%check +make check + +%clean +rm -rf $RPM_BUILD_ROOT + +%post -p /sbin/ldconfig + +%postun -p /sbin/ldconfig + + +%files +%defattr(-,root,root,-) +%doc COPYING.LIB +%attr(0755,root,root) /%{_lib}/libcap-ng.so.* + +%files devel +%defattr(-,root,root,-) +%attr(0644,root,root) %{_mandir}/man3/* +%attr(0644,root,root) %{_includedir}/cap-ng.h +%attr(0755,root,root) %{_libdir}/libcap-ng.so +%attr(0644,root,root) %{_datadir}/aclocal/cap-ng.m4 +%{_libdir}/pkgconfig/libcap-ng.pc + +%files python +%defattr(-,root,root,-) +%attr(755,root,root) /%{_libdir}/python?.?/site-packages/_capng.so +%{python_sitearch}/capng.py* + +%files utils +%defattr(-,root,root,-) +%doc COPYING +%attr(0755,root,root) %{_bindir}/* +%attr(0644,root,root) %{_mandir}/man8/* + +%changelog +* Fri Jan 23 2015 Yaakov Selkowitz - 0.7.3-5.1 +- Update caps table for newer kernels + +* Fri Jan 24 2014 Daniel Mach - 0.7.3-5 +- Mass rebuild 2014-01-24 + +* Fri Dec 27 2013 Daniel Mach - 0.7.3-4 +- Mass rebuild 2013-12-27 + +* Thu Feb 14 2013 Fedora Release Engineering - 0.7.3-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + +* Wed Dec 19 2012 Steve Grubb 0.7.3-2 +- Remove useless code in pscap causing EBADFD + +* Fri Nov 09 2012 Steve Grubb 0.7.3-1 +- New upstream release + +* Wed Oct 24 2012 Steve Grubb 0.7.1-1 +- New upstream release + +* Tue Jul 24 2012 Steve Grubb 0.7-1 +- New upstream release + +* Thu Jul 19 2012 Fedora Release Engineering - 0.6.6-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + +* Fri Jan 13 2012 Fedora Release Engineering - 0.6.6-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + +* Fri Jun 24 2011 Steve Grubb 0.6.6-1 +- New upstream release + +* Mon Feb 07 2011 Fedora Release Engineering - 0.6.5-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + +* Wed Nov 03 2010 Steve Grubb 0.6.5-1 +- New upstream release fixing 2.6.36 kernel header issue + +* Wed Jul 21 2010 David Malcolm - 0.6.4-4 +- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild + +* Thu Jun 17 2010 Steve Grubb 0.6.4-3 +- Only open regular files in filecap + +* Mon May 24 2010 Steve Grubb 0.6.4-2 +- In utils subpackage added a requires statement. + +* Thu May 06 2010 Steve Grubb 0.6.4-1 +- New upstream release fixing multi-threading issue + +* Wed Apr 28 2010 Steve Grubb 0.6.3-2 +- filecap shows full capabilities if a file has any + +* Thu Mar 11 2010 Steve Grubb 0.6.3-1 +- New upstream release + +* Tue Feb 16 2010 Steve Grubb 0.6.2-4 +- Use global macro and require pkgconfig for devel subpackage + +* Fri Oct 09 2009 Steve Grubb 0.6.2-3 +- Apply patch to retain setpcap only if clearing bounding set + +* Sat Oct 03 2009 Steve Grubb 0.6.2-2 +- Apply patch correcting pscap and netcap acct detection + +* Mon Sep 28 2009 Steve Grubb 0.6.2-1 +- New upstream release + +* Sun Jul 26 2009 Steve Grubb 0.6.1-1 +- New upstream release + +* Fri Jul 24 2009 Fedora Release Engineering - 0.6-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + +* Mon Jun 29 2009 Steve Grubb 0.6-1 +- New upstream release + +* Sun Jun 21 2009 Steve Grubb 0.5.1-1 +- New upstream release + +* Fri Jun 19 2009 Steve Grubb 0.5-1 +- New upstream release + +* Fri Jun 12 2009 Steve Grubb 0.4.2-1 +- New upstream release + +* Fri Jun 12 2009 Steve Grubb 0.4.1-1 +- Initial build. +