|
 |
65f427 |
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
|
|
|
793dd5 |
From: Peter Jones <pjones@redhat.com>
|
|
|
793dd5 |
Date: Mon, 14 Aug 2017 11:37:43 -0400
|
|
|
65f427 |
Subject: [PATCH] Make macros.pesign error in kojibuilder if we don't have
|
|
|
65f427 |
perms on the socket
|
|
|
793dd5 |
|
|
|
793dd5 |
---
|
|
|
65f427 |
src/macros.pesign | 15 +++++++++++++++
|
|
|
65f427 |
1 file changed, 15 insertions(+)
|
|
|
793dd5 |
|
|
|
793dd5 |
diff --git a/src/macros.pesign b/src/macros.pesign
|
|
|
65f427 |
index 22a3ee6..dfdac02 100644
|
|
|
793dd5 |
--- a/src/macros.pesign
|
|
|
793dd5 |
+++ b/src/macros.pesign
|
|
|
793dd5 |
@@ -43,6 +43,21 @@
|
|
|
793dd5 |
%{_pesign} -R ${sattrs}.sig -I ${sattrs} %{-i} \\\
|
|
|
793dd5 |
--certdir ${nss} -c signer %{-o} \
|
|
|
793dd5 |
rm -rf ${sattrs} ${sattrs}.sig ${nss} \
|
|
|
793dd5 |
+ elif [ "%{vendor}" == "Fedora Project" -a \\\
|
|
|
793dd5 |
+ "$(id -un)" == "mockbuild" -a \\\
|
|
|
793dd5 |
+ "$(uname -m)" == "x86_64" ] && \\\
|
|
|
793dd5 |
+ grep -q ID=fedora /etc/os-release && \\\
|
|
|
793dd5 |
+ [[ "%{_buildhost}" =~ ^bkernel.* ]] && \\\
|
|
|
793dd5 |
+ ! [ -S /var/run/pesign/socket ]; then \
|
|
|
793dd5 |
+ echo "No socket even though this is %{_buildhost}" \
|
|
|
793dd5 |
+ ls -ld /var/run/pesign || : \
|
|
|
793dd5 |
+ getfacl /var/run/pesign || : \
|
|
|
793dd5 |
+ ls -l /var/run/pesign/socket || : \
|
|
|
793dd5 |
+ getfacl /var/run/pesign/socket || : \
|
|
|
793dd5 |
+ echo =========== env ============== \
|
|
|
793dd5 |
+ set \
|
|
|
793dd5 |
+ echo =========== env ============== \
|
|
|
793dd5 |
+ exit 1 \
|
|
|
793dd5 |
elif [ -S /var/run/pesign/socket ]; then \
|
|
|
793dd5 |
%{_pesign_client} -t %{__pesign_client_token} \\\
|
|
|
793dd5 |
-c %{__pesign_client_cert} \\\
|