Blame SPECS/oscap-anaconda-addon.spec

207d15
# Patch0 applies correctly but with mismatch and we dont't want backup file
207d15
%global _default_patch_flags --no-backup-if-mismatch
207d15
c9fe61
Name:           oscap-anaconda-addon
d4907f
Version:        0.9
f0da9c
Release:        3%{?dist}
c9fe61
Summary:        Anaconda addon integrating OpenSCAP to the installation process
c9fe61
c9fe61
License:        GPLv2+
d4907f
URL:            https://www.open-scap.org/tools/oscap-anaconda-addon/
c9fe61
c9fe61
# This is a Red Hat maintained package which is specific to
c9fe61
# our distribution.
c9fe61
#
c9fe61
# The source is thus available only from within this SRPM
c9fe61
# or via direct git checkout:
fd2bce
# git clone https://github.com/OpenSCAP/oscap-anaconda-addon.git
c9fe61
Source0:        %{name}-%{version}.tar.gz
c9fe61
207d15
Patch0:         datastream_tailoring_1364929.patch
d4907f
Patch1:         update_japanese_translation_1569449.patch
f0da9c
Patch2:         translation_summary_screen_1543318.patch
f0da9c
c9fe61
BuildArch:      noarch
fd2bce
BuildRequires:  gettext
c9fe61
BuildRequires:	python2-devel
c9fe61
#BuildRequires:  python-mock
fd2bce
#BuildRequires:  python-nose
fd2bce
#BuildRequires:  python-cpio
73b831
BuildRequires:  anaconda-core >= 21.48.22.99
73b831
Requires:       anaconda-core >= 21.48.22.99
c9fe61
Requires:       openscap openscap-utils openscap-python
c9fe61
Requires:       python-cpio
fd2bce
Requires:       scap-security-guide
c9fe61
c9fe61
%description
c9fe61
This is an addon that integrates OpenSCAP utilities with the Anaconda installer
c9fe61
and allows installation of systems following restrictions given by a SCAP
c9fe61
content.
c9fe61
c9fe61
%prep
fd2bce
%setup -q -n %{name}-%{version}
207d15
%patch0 -p1
fd2bce
%patch1 -p1
f0da9c
%patch2 -p1
c9fe61
c9fe61
%build
c9fe61
c9fe61
#%check
c9fe61
#make test
c9fe61
c9fe61
c9fe61
%install
c9fe61
make install DESTDIR=%{buildroot}
fd2bce
%find_lang %{name}
c9fe61
fd2bce
%files -f %{name}.lang
c9fe61
%{_datadir}/anaconda/addons/org_fedora_oscap
c9fe61
207d15
%doc COPYING ChangeLog README.md
c9fe61
c9fe61
%changelog
f0da9c
* Thu Mar 14 2019 Jan Černý <jcerny@redhat.com> - 0.9-3
f0da9c
- Enable translation of title 'SECURITY POLICY' at Installation Summary screen
f0da9c
  Resolves: rhbz#1543318
913686
d4907f
* Mon Aug 20 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.9-2
d4907f
- Add Japanese translation
d4907f
d4907f
* Mon Jun 11 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.9-1
d4907f
- Rebase to the upstream version 0.9
d4907f
- Drop patch that fixed selection of RHEL Alternate Architecture datastream
d4907f
  Resolves: rhbz#1564903
d4907f
- Update project URL
d4907f
  Resolves: rhbz#1502379
d4907f
207d15
* Tue Feb 06 2018 Watson Yuuma Sato <wsato@redhat.com> - 0.8-4
207d15
- Define translation domain of oscap-anaconda-addon
207d15
  Resolves: rhbz#1540302
207d15
207d15
* Tue Dec 12 2017 Watson Yuuma Sato <wsato@redhat.com> - 0.8-3
207d15
- Return empty string when there is no tailoring file
207d15
  Resolves: rhbz#1520276
207d15
207d15
* Mon Dec 11 2017 Watson Sato <wsato@redhat.com> - 0.8-2
207d15
- Add japanese translation
207d15
- Update other translations
207d15
  Resolves: rhbz#1481190
207d15
- Fix selection of RHEL datastream
207d15
  Resolves: rhbz#1520358
207d15
207d15
* Mon Nov 27 2017 Watson Sato <wsato@redhat.com> - 0.8-1
207d15
- Rebase to the upstream version 0.8
207d15
  Related: rhbz#1472419
207d15
73b831
* Tue May 30 2017 Watson Sato <wsato@redhat.com> - 0.7-15
73b831
- Add japanese translation
73b831
- Update other translations
73b831
  Resolves: rhbz#1383181
73b831
73b831
* Thu Apr 20 2017 Raphael Sanchez Prudencio <rsprudencio@redhat.com> - 0.7-14
73b831
- Fixed gtk warning messages when anaconda is starting.
73b831
  Resolves: rhbz#1437106
73b831
73b831
* Tue Mar 28 2017 Martin Preisler <mpreisle@redhat.com> - 0.7-13
73b831
- Avoid long delay before a GeoIP related timeout in case internet is not available
73b831
  Resolves: rhbz#1379479
189315
c5477d
* Tue Sep 13 2016 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-12
c5477d
- Properly handle tailoring files for datastreams
c5477d
  Resolves: rhbz#1364929
c5477d
c5477d
* Thu Aug 25 2016 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-11
c5477d
- Don't require blank stderr when running the oscap tool
c5477d
  Resolves: rhbz#1360765
c5477d
- Beware of the invalid profiles
c5477d
  Resolves: rhbz#1365130
c5477d
- Properly set the seen property for root passwords
c5477d
  Resolves: rhbz#1357603
c5477d
c5477d
* Thu Jun 30 2016 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-10
c5477d
- Clear spoke's info before setting an error
c5477d
  Resolves: rhbz#1349446
c5477d
c5477d
* Wed Jun  1 2016 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-9
c5477d
- Use the System hub category provided by Anaconda
c5477d
  Resolves: rhbz#1269211
c5477d
- Wait for Anaconda to settle before evaluation
c5477d
  Resolves: rhbz#1265552
c5477d
- Make the changes overview scrollable and smaller
c5477d
  Related: rhbz#1263582
c5477d
- Make the list of profiles scrollable
c5477d
  Resolves: rhbz#1263582
c5477d
- Do not try to create a single file multiple times
c5477d
  Related: rhbz#1263315
c5477d
- Avoid crashes on extraction errors
c5477d
  Resolves: rhbz#1263315
c5477d
- Disable GPG checks when installing content to the system
c5477d
  Resolves: rhbz#1263216
c5477d
- Allow fixing root password in graphical installations
c5477d
  Resolves: rhbz#1265116
c5477d
- Enforce the minimal root password length
c5477d
  Resolves: rhbz#1238281
c5477d
- Just report misconfiguration instead of crashing in text mode
c5477d
  Resolves: rhbz#1263207
c5477d
- Do not verify SSL if inst.noverifyssl was given
c5477d
  Resolves: rhbz#1263257
c5477d
- Also catch data_fetch.DataFetchError when trying to get content
c5477d
  Resolves: rhbz#1263239
c5477d
- Use new method signature with payload class
c5477d
  Related: rhbz#1288636
Karanbir Singh 72e552
fd2bce
* Wed Sep 16 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-8
fd2bce
- Do not remove the root password behind user's back
fd2bce
  Resolves: rhbz#1263254
fd2bce
fd2bce
* Mon Sep 7 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-7
fd2bce
- Completely skip the execute() part if no profile is selected
fd2bce
  Resolves: rhbz#1254973
fd2bce
fd2bce
* Mon Aug 24 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-6
fd2bce
- Specify the name of the help content file
fd2bce
  Resolves: rhbz#1254884
fd2bce
- Skip files unrecognized by the 'oscap info' command
fd2bce
  Resolves: rhbz#1255075
fd2bce
- Only allow DS and XCCDF ID selection if it makes sense
fd2bce
  Resolves: rhbz#1254876
fd2bce
fd2bce
* Tue Aug 4 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-5
fd2bce
- Make sure DS and XCCDF ID lists are correctly refreshed
fd2bce
  Resolves: rhbz#1240946
fd2bce
- Make sure the DS and XCCDF ID combo boxes are visible for DS content
fd2bce
  Resolves: rhbz#1249951
fd2bce
- Try to load the OSCAP session early for DS content
fd2bce
  Resolves: rhbz#1247654
fd2bce
- Test preinst_content_path before raw_preinst_content_path
fd2bce
  Resolves: rhbz#1249937
fd2bce
- Clear any error if switching to the dry-run mode
fd2bce
  Related: rhbz#1247677
fd2bce
- Do not continue with and invalid profile ID
fd2bce
  Resolves: rhbz#1247677
fd2bce
- Cover all potential places with a non-main thread changing Gtk stuff
fd2bce
  Resolves: rhbz#1240967
fd2bce
fd2bce
* Thu Jul 23 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-4
fd2bce
- Better handle and report erroneous states
fd2bce
  Resolves: rhbz#1241064
fd2bce
- Make sure (some more) GUI actions run in the main thread
fd2bce
  Resolves: rhbz#1240967
fd2bce
- Beware of RPM->cpio entries' paths having absolute paths
fd2bce
  Related: rhbz#1241064
fd2bce
- Only output the kickstart section with content and profile set
fd2bce
  Resolves: rhbz#1241395
fd2bce
- Just report integrity check failure instead of traceback
fd2bce
  Resolves: rhbz#1240710
fd2bce
- Properly react on download/loading issues in text+kickstart mode
fd2bce
  Related: rhbz#1240710
fd2bce
- Fetch and process the content even if GUI doesn't take care of it
fd2bce
  Resolves: rhbz#1240625
fd2bce
fd2bce
* Tue Jul 7 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-3
fd2bce
- Do not output redundant/invalid fields for the SSG content (vpodzime)
fd2bce
  Resolves: rhbz#1240285
fd2bce
- Better handle unsupported URL types (vpodzime)
fd2bce
  Resolves: rhbz#1232631
fd2bce
- React better on network issues (vpodzime)
fd2bce
  Resolves: rhbz#1236657
fd2bce
- Improve the description of the default profile (vpodzime)
fd2bce
  Resolves: rhbz#1238080
fd2bce
- Use the openscap-scanner package instead of openscap-utils (vpodzime)
fd2bce
  Resolves: rhbz#1240249
fd2bce
- Better handle the case with no profile selected (vpodzime)
fd2bce
  Resolves: rhbz#1235750
fd2bce
- Add newline and one blank line after the %%addon section (vpodzime)
fd2bce
  Resolves: rhbz#1238267
fd2bce
- Word-wrap profile descriptions (vpodzime)
fd2bce
  Resolves: rhbz#1236644
fd2bce
fd2bce
* Wed Jun 17 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-2
fd2bce
- Add gettext to BuildRequires (vpodzime)
fd2bce
  Related: rhbz#1204640
fd2bce
fd2bce
* Tue Jun 16 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.7-1
fd2bce
- Rebase to the upstream version 0.7
fd2bce
  Related: rhbz#1204640
fd2bce
fd2bce
* Tue Apr 28 2015 Vratislav Podzimek <vpodzime@redhat.com> - 0.6-1
fd2bce
- Rebase to the upstream version 0.6
fd2bce
  Resolves: rhbz#1204640
fd2bce
6fd024
* Mon Aug 04 2014 Vratislav Podzimek <vpodzime@redhat.com> - 0.4-3
6fd024
- Don't distribute backup files
6fd024
  Resolves: rhbz#1065906
c9fe61
* Wed Jan 15 2014 Vratislav Podizmek <vpodzime@redhat.com> - 0.4-2
c9fe61
- Skip running tests on RHEL builds
c9fe61
  Related: rhbz#1035662
c9fe61
* Tue Jan 14 2014 Vratislav Podzimek <vpodzime@redhat.com> - 0.4-1
c9fe61
- Beware of running Gtk actions from a non-main thread
c9fe61
- Fix path to the tailoring file when getting rules
c9fe61
- A git hook for running tests when pushing
c9fe61
- Inform user if no profile is selected
c9fe61
- Visually mark the selected profile
c9fe61
- Better UX with content URL entry and progress label
c9fe61
- React on invalid content properly (#1032846)
c9fe61
- Stop spinner when data fetching is finished
c9fe61
- Make the data fetching thread non-fatal (#1049989)
c9fe61
- Exit code 2 from the oscap tool is not an error for us (#1050913)
c9fe61
- Be ready to work with archives/RPMs containing data streams
c9fe61
- Add unit tests for the keep_type_map function
c9fe61
- Add support for namedtuples to keep_type_map
c9fe61
- Add target for running pylint check
c9fe61
- Add target for running just unittests
c9fe61
- On the way to tailoring
c9fe61
- Tests for kickstart XCCDF tailoring handling
c9fe61
- Kickstart support for XCCDF tailoring
c9fe61
- Check session validity also when using XCCDF benchmark
c9fe61
c9fe61
* Tue Dec 10 2013 Vratislav Podzimek <vpodzime@redhat.com> - 0.3-1
c9fe61
- Implement and use our own better function for joining paths
c9fe61
- The content entry should have focus if there is no content
c9fe61
- RPM is just a weird archive in the pre-installation phase
c9fe61
- Ignore RPM files as well
c9fe61
- Adapt tests to dir constants now ending with "/"
c9fe61
- CpioArchive cannot be created from a piped output
c9fe61
- Fix namespace definitions in the testing XCCDF file
c9fe61
- Prevent putting None into xccdf_session_is_sds
c9fe61
- Fix the __all__ variable in the common module
c9fe61
- Strip content dir prefix when setting xccdf/cpe paths
c9fe61
- Inform user we now support archive URLs as well
c9fe61
- Ignore various file types in the git repository
c9fe61
- Try to find content files in the fetched archive or RPM
c9fe61
- Run pylint -E as part of the test target
c9fe61
- Return list of extracted files/directories when extracting archive
c9fe61
- Do not try to search for empty file paths in archives
c9fe61
- Properly set the content type based on the URL's suffix
c9fe61
- Switch profiles on double-click
c9fe61
- Hook urlEntry's activate signal to fetchButton click
c9fe61
- Save the spoke's glade file with a new Glade
c9fe61
- The addon now requires the python-cpio package
c9fe61
- Use really_hide for the UI elements for datastream-id and xccdf-id
c9fe61
- Support for RPM content in the GUI spoke
c9fe61
- RPM content support for kickstart processing
c9fe61
- Add property for the raw post-installation content path
c9fe61
- Make content type case insensitive
c9fe61
- Rest of the code needed for RPM extraction
c9fe61
- Actually look for the file path in entry names
c9fe61
- Basic stuff needed for the RPM content support
c9fe61
- Run tests in paralel
c9fe61
- Specify files in a better way in spec
c9fe61
c9fe61
* Mon Oct 21 2013 Vratislav Podzimek <vpodzime@redhat.com> - 0.2-1
c9fe61
- Initial RPM for the oscap-anaconda-addon