%{?scl:%scl_package nginx}

%if 0%{?rhel} > 6

%define use_systemd 1

%else

%define use_systemd 0

%endif

%define use_geoip 0

%define use_perl 1

%global with_gperftools     0

%global  _hardened_build     1

%global  nginx_user          nginx

%global  nginx_group         %{nginx_user}

%global  nginx_home          %{_localstatedir}/lib/nginx

%global  nginx_home_tmp      %{nginx_home}/tmp

%global  nginx_confdir       %{_sysconfdir}/nginx

%global  nginx_datadir       %{_datadir}/nginx

%global  nginx_logdir        %{_localstatedir}/log/nginx

%global  nginx_webroot       %{nginx_datadir}/html

%global service_name %{?scl_prefix}nginx

%if 0%{?scl:1}

%global scl_upper %{lua:print(string.upper(string.gsub(rpm.expand("%{scl}"), "-", "_")))}

%endif

%{!?scl_perl_prefix: %global scl_perl_prefix rh-perl524-}

%{!?_nginx_perl_vendorarch: %global _nginx_perl_vendorarch %perl_vendorarch}

%{?filter_setup:

%filter_requires_in %{_nginx_perl_vendorarch}

%filter_provides_in %{_nginx_perl_vendorarch}

%filter_provides_in %{_libdir}/nginx/modules

%filter_setup

}

Name:              %{?scl:%scl_prefix}nginx

Epoch:             1

Version:           1.10.2

Release:           8%{?dist}.1

Summary:           A high performance web server and reverse proxy server

Group:             System Environment/Daemons

# BSD License (two clause)

# http://www.freebsd.org/copyright/freebsd-license.html

License:           BSD

URL:               http://nginx.org/

Source0:           http://nginx.org/download/nginx-%{version}.tar.gz

Source2:           scl-register-helper.sh

Source3:           daemon-scl-helper.sh

Source10:          nginx.service

Source11:          nginx.logrotate

Source12:          nginx.conf

Source13:          action-upgrade.sh

Source15:          nginx.init

Source16:          nginx.sysconfig

Source100:         index.html

Source101:         poweredby.png

Source102:         nginx-logo.png

Source103:         404.html

Source104:         50x.html

Source200:         README.dynamic

# removes -Werror in upstream build scripts.  -Werror conflicts with

# -D_FORTIFY_SOURCE=2 causing warnings to turn into errors.

Patch0:            nginx-auto-cc-gcc.patch

Patch1:            nginx-1.10.2-CVE-2017-7529.patch

Patch2:            nginx-1.10.2-CVE-2018-16843.patch

Patch3:            nginx-1.10.2-CVE-2018-16845.patch

BuildRequires:     gd-devel

%if 0%{?with_gperftools}

BuildRequires:     gperftools-devel

%endif

BuildRequires:     libxslt-devel

BuildRequires:     openssl-devel

BuildRequires:     pcre-devel

BuildRequires:     zlib-devel

%if 0%{?use_geoip}

BuildRequires:     GeoIP-devel

%endif

Requires:          gd

Requires(pre):     shadow-utils

Provides:          webserver

%if %{use_systemd}

BuildRequires:     systemd

Requires(post):    systemd

Requires(preun):   systemd

Requires(postun):  systemd

%else

Requires(post):    chkconfig

Requires(preun):   chkconfig, initscripts

Requires(postun):  initscripts

%endif

Requires(post): policycoreutils-python libselinux-utils

%{?scl:Requires:%scl_runtime}

%description

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and

IMAP protocols, with a strong focus on high concurrency, performance and low

memory usage.

%if 0%{?use_geoip}

%package mod-http-geoip

Group:             System Environment/Daemons

Summary:           Nginx HTTP geoip module

BuildRequires:     GeoIP-devel

Requires:          %{?scl:%scl_prefix}nginx

Requires:          GeoIP

%description mod-http-geoip

%{summary}.

%endif

%package mod-http-image-filter

Group:             System Environment/Daemons

Summary:           Nginx HTTP image filter module

BuildRequires:     gd-devel

Requires:          %{?scl:%scl_prefix}nginx

Requires:          gd

%description mod-http-image-filter

%{summary}.

%if 0%{?use_perl}

%package mod-http-perl

Group:             System Environment/Daemons

Summary:           Nginx HTTP perl module

BuildRequires:     %{scl_perl_prefix}perl-devel

%if 0%{?fedora} >= 24

BuildRequires:     %{scl_perl_prefix}perl-generators

%endif

BuildRequires:     %{scl_perl_prefix}perl(ExtUtils::Embed)

Requires:          %{?scl:%scl_prefix}nginx

Requires:          %{scl_perl_prefix}perl(:MODULE_COMPAT_%(%{?scl:scl enable %{scl_perl} '}eval "`%{__perl} -V:version`"; echo $version%{?scl:'}))

%description mod-http-perl

%{summary}.

%endif

%package mod-http-xslt-filter

Group:             System Environment/Daemons

Summary:           Nginx XSLT module

BuildRequires:     libxslt-devel

Requires:          %{?scl:%scl_prefix}nginx

%description mod-http-xslt-filter

%{summary}.

%package mod-mail

Group:             System Environment/Daemons

Summary:           Nginx mail modules

Requires:          %{?scl:%scl_prefix}nginx

%description mod-mail

%{summary}.

%package mod-stream

Group:             System Environment/Daemons

Summary:           Nginx stream modules

Requires:          %{?scl:%scl_prefix}nginx

%description mod-stream

%{summary}.

%prep

%setup -q -n nginx-%{version}

%patch0 -p0

%patch1 -p0 -b .CVE-2017-7529

%patch2 -p1 -b .CVE-2018-16843

%patch3 -p1 -b .CVE-2018-16845

cp %{SOURCE200} .

%build

%{?scl:scl enable %{scl_perl} - << \EOF}

set -x

# nginx does not utilize a standard configure script.  It has its own

# and the standard configure options cause the nginx configure script

# to error out.  This is is also the reason for the DESTDIR environment

# variable.

export DESTDIR=%{buildroot}

./configure \

    --prefix=%{nginx_datadir} \

    --sbin-path=%{_sbindir}/nginx \

    --modules-path=%{_libdir}/nginx/modules \

    --conf-path=%{nginx_confdir}/nginx.conf \

    --error-log-path=%{nginx_logdir}/error.log \

    --http-log-path=%{nginx_logdir}/access.log \

    --http-client-body-temp-path=%{nginx_home_tmp}/client_body \

    --http-proxy-temp-path=%{nginx_home_tmp}/proxy \

    --http-fastcgi-temp-path=%{nginx_home_tmp}/fastcgi \

    --http-uwsgi-temp-path=%{nginx_home_tmp}/uwsgi \

    --http-scgi-temp-path=%{nginx_home_tmp}/scgi \

    --pid-path=%{_localstatedir}/run/nginx/nginx.pid \

    --lock-path=%{_localstatedir}/lock/subsys/nginx \

    --user=%{nginx_user} \

    --group=%{nginx_group} \

    --with-file-aio \

    --with-ipv6 \

    --with-http_ssl_module \

    --with-http_v2_module \

    --with-http_realip_module \

    --with-http_addition_module \

    --with-http_xslt_module=dynamic \

    --with-http_image_filter_module=dynamic \

%if 0%{?use_geoip}

    --with-http_geoip_module=dynamic \

%endif

    --with-http_sub_module \

    --with-http_dav_module \

    --with-http_flv_module \

    --with-http_mp4_module \

    --with-http_gunzip_module \

    --with-http_gzip_static_module \

    --with-http_random_index_module \

    --with-http_secure_link_module \

    --with-http_degradation_module \

    --with-http_slice_module \

    --with-http_stub_status_module \

%if 0%{?use_perl}

    --with-http_perl_module=dynamic \

%endif

    --with-mail=dynamic \

    --with-mail_ssl_module \

    --with-pcre \

    --with-pcre-jit \

    --with-stream=dynamic \

    --with-stream_ssl_module \

%if 0%{?with_gperftools}

    --with-google_perftools_module \

%endif

    --with-debug \

    --with-cc-opt="%{optflags} $(pcre-config --cflags)" \

    --with-ld-opt="$RPM_LD_FLAGS -Wl,-E" # so the perl module finds its symbols

make %{?_smp_mflags}

%{?scl:EOF}

%install

#include helper script for creating register stuff

export _SR_BUILDROOT=%{buildroot}

export _SR_SCL_SCRIPTS=%{?_scl_scripts}

source %{SOURCE2}

%{?scl:scl enable %{scl_perl} - << \EOF}

set -x

make install DESTDIR=%{buildroot} INSTALLDIRS=vendor \

     INSTALLVENDORARCH=%{_nginx_perl_vendorarch} \

     INSTALLVENDORMAN3DIR=%{_mandir}/man3

%{?scl:EOF}

find %{buildroot} -type f -name .packlist -exec rm -f '{}' \;

find %{buildroot} -type f -name perllocal.pod -exec rm -f '{}' \;

find %{buildroot} -type f -empty -exec rm -f '{}' \;

find %{buildroot} -type f -iname '*.so' -exec chmod 0755 '{}' \;

install -D -p -m 0755 %{SOURCE3} \

    %{buildroot}%{_libexecdir}/nginx-scl-helper

%if %{use_systemd}

install -p -D -m 0644 %{SOURCE10} \

    %{buildroot}%{_unitdir}/%{?scl:%scl_prefix}nginx.service

sed -i 's|\$sbindir|%{_sbindir}|' \

    %{buildroot}%{_unitdir}/%{?scl:%scl_prefix}nginx.service

sed -i 's|\$localstatedir|%{_localstatedir}|' \

    %{buildroot}%{_unitdir}/%{?scl:%scl_prefix}nginx.service

sed -i 's|\$libexecdir|%{_libexecdir}|' \

    %{buildroot}%{_unitdir}/%{?scl:%scl_prefix}nginx.service

touch -r %{SOURCE10} \

    %{buildroot}%{_unitdir}/%{?scl:%scl_prefix}nginx.service

scl_reggen %{name} --cpfile %{_unitdir}/%{?scl:%scl_prefix}nginx.service

# Install action scripts

mkdir -p $RPM_BUILD_ROOT%{_root_libexecdir}/initscripts/legacy-actions/%{?scl:%scl_prefix}nginx

for f in upgrade; do

	install -p -m 755 $RPM_SOURCE_DIR/action-${f}.sh \

			$RPM_BUILD_ROOT%{_root_libexecdir}/initscripts/legacy-actions/%{?scl:%scl_prefix}nginx/${f}

	sed -i 's|\$nginxservice|%{?scl:%scl_prefix}nginx|' \

		$RPM_BUILD_ROOT%{_root_libexecdir}/initscripts/legacy-actions/%{?scl:%scl_prefix}nginx/${f}

	sed -i 's|\$localstatedir|%{_localstatedir}|' \

		$RPM_BUILD_ROOT%{_root_libexecdir}/initscripts/legacy-actions/%{?scl:%scl_prefix}nginx/${f}

	scl_reggen %{name} --cpfile %{_root_libexecdir}/initscripts/legacy-actions/%{?scl:%scl_prefix}nginx/${f}

done

%else

install -p -D -m 0755 %{SOURCE15} \

    %{buildroot}/etc/rc.d/init.d/%{?scl:%scl_prefix}nginx

sed -i 's|\$sbindir|%{_sbindir}|' \

    %{buildroot}/etc/rc.d/init.d/%{?scl:%scl_prefix}nginx

sed -i 's|\$localstatedir|%{_localstatedir}|' \

    %{buildroot}/etc/rc.d/init.d/%{?scl:%scl_prefix}nginx

sed -i 's|\$sysconfdir|%{_sysconfdir}|' \

    %{buildroot}/etc/rc.d/init.d/%{?scl:%scl_prefix}nginx

sed -i 's|\$sclprefix|%scl_prefix|g' \

    %{buildroot}/etc/rc.d/init.d/%{?scl:%scl_prefix}nginx

sed -i 's|\$sclname|%scl|g' \

    %{buildroot}/etc/rc.d/init.d/%{?scl:%scl_prefix}nginx

sed -i 's|\$upperscl|%{scl_upper}|g' \

    %{buildroot}/etc/rc.d/init.d/%{?scl:%scl_prefix}nginx

scl_reggen %{name} --cpfile %{_root_initddir}/%{?scl:%scl_prefix}nginx

install -p -D -m 0644 %{SOURCE16} \

    %{buildroot}/%{_sysconfdir}/sysconfig/%{?scl:%scl_prefix}nginx

sed -i 's|\$sysconfdir|%{_sysconfdir}|' \

    %{buildroot}/%{_sysconfdir}/sysconfig/%{?scl:%scl_prefix}nginx

scl_reggen %{name} --mkdir %{_sysconfdir}/sysconfig

scl_reggen %{name} --cpfile %{_sysconfdir}/sysconfig/%{?scl:%scl_prefix}nginx

%endif

install -p -D -m 0644 %{SOURCE11} \

    %{buildroot}/etc/logrotate.d/%{?scl:%scl_prefix}nginx

sed -i 's|\$logdir|%{nginx_logdir}|' \

    %{buildroot}/etc/logrotate.d/%{?scl:%scl_prefix}nginx

sed -i 's|\$localstatedir|%{_localstatedir}|' \

    %{buildroot}/etc/logrotate.d/%{?scl:%scl_prefix}nginx

scl_reggen %{name} --cpfile %{_root_sysconfdir}/logrotate.d/%{?scl:%scl_prefix}nginx

install -p -d -m 0755 %{buildroot}%{nginx_confdir}/conf.d

install -p -d -m 0755 %{buildroot}%{nginx_confdir}/default.d

install -p -d -m 0700 %{buildroot}%{nginx_home}

install -p -d -m 0700 %{buildroot}%{nginx_home_tmp}

install -p -d -m 0700 %{buildroot}%{nginx_home_tmp}/client_body

install -p -d -m 0700 %{buildroot}%{nginx_home_tmp}/proxy

install -p -d -m 0700 %{buildroot}%{nginx_home_tmp}/fastcgi

install -p -d -m 0700 %{buildroot}%{nginx_home_tmp}/uwsgi

install -p -d -m 0700 %{buildroot}%{nginx_home_tmp}/scgi

install -p -d -m 0700 %{buildroot}%{nginx_logdir}

install -p -d -m 0755 %{buildroot}%{nginx_webroot}

scl_reggen %{name} --mkdir %{nginx_confdir}/conf.d

scl_reggen %{name} --mkdir %{nginx_confdir}/default.d

scl_reggen %{name} --mkdir %{nginx_home}

scl_reggen %{name} --mkdir %{nginx_home_tmp}

scl_reggen %{name} --mkdir %{nginx_home_tmp}/client_body

scl_reggen %{name} --mkdir %{nginx_home_tmp}/proxy

scl_reggen %{name} --mkdir %{nginx_home_tmp}/fastcgi

scl_reggen %{name} --mkdir %{nginx_home_tmp}/uwsgi

scl_reggen %{name} --mkdir %{nginx_home_tmp}/scgi

scl_reggen %{name} --mkdir %{nginx_logdir}

scl_reggen %{name} --mkdir %{nginx_webroot}

scl_reggen %{name} --chmod 0755 %{nginx_confdir}/conf.d

scl_reggen %{name} --chmod 0755 %{nginx_confdir}/default.d

scl_reggen %{name} --chmod 0700 %{nginx_home}

scl_reggen %{name} --chmod 0700 %{nginx_home_tmp}

scl_reggen %{name} --chmod 0700 %{nginx_home_tmp}/client_body

scl_reggen %{name} --chmod 0700 %{nginx_home_tmp}/proxy

scl_reggen %{name} --chmod 0700 %{nginx_home_tmp}/fastcgi

scl_reggen %{name} --chmod 0700 %{nginx_home_tmp}/uwsgi

scl_reggen %{name} --chmod 0700 %{nginx_home_tmp}/scgi

scl_reggen %{name} --chmod 0700 %{nginx_logdir}

scl_reggen %{name} --chmod 0755 %{nginx_webroot}

scl_reggen %{name} --cpfile %{nginx_confdir}/fastcgi.conf

scl_reggen %{name} --cpfile %{nginx_confdir}/fastcgi.conf.default

scl_reggen %{name} --cpfile %{nginx_confdir}/fastcgi_params

scl_reggen %{name} --cpfile %{nginx_confdir}/fastcgi_params.default

scl_reggen %{name} --cpfile %{nginx_confdir}/koi-utf

scl_reggen %{name} --cpfile %{nginx_confdir}/koi-win

scl_reggen %{name} --cpfile %{nginx_confdir}/mime.types

scl_reggen %{name} --cpfile %{nginx_confdir}/mime.types.default

scl_reggen %{name} --cpfile %{nginx_confdir}/nginx.conf

scl_reggen %{name} --cpfile %{nginx_confdir}/nginx.conf.default

scl_reggen %{name} --cpfile %{nginx_confdir}/scgi_params

scl_reggen %{name} --cpfile %{nginx_confdir}/scgi_params.default

scl_reggen %{name} --cpfile %{nginx_confdir}/uwsgi_params

scl_reggen %{name} --cpfile %{nginx_confdir}/uwsgi_params.default

scl_reggen %{name} --cpfile %{nginx_confdir}/win-utf

scl_reggen %{name} --runafterregister "semanage fcontext -a -e /var/log/nginx %{nginx_logdir} >/dev/null 2>&1 || :"

scl_reggen %{name} --runafterregister "restorecon -R %{nginx_logdir} >/dev/null 2>&1 || :"

scl_reggen %{name} --runafterregister "semanage fcontext -a -e %{_root_sysconfdir}/nginx %{nginx_confdir} >/dev/null 2>&1 || :"

scl_reggen %{name} --runafterregister "restorecon -R %{nginx_confdir} >/dev/null 2>&1 || :"

scl_reggen %{name} --runafterregister "semanage fcontext -a -e %{_root_localstatedir}/lib/nginx %{_localstatedir}/lib/nginx >/dev/null 2>&1 || :"

scl_reggen %{name} --runafterregister "restorecon -R %{_localstatedir}/lib/nginx >/dev/null 2>&1 || :"

scl_reggen %{name} --runafterregister "semanage fcontext -a -e %{_root_localstatedir}/run/nginx %{_localstatedir}/run/nginx >/dev/null 2>&1 || :"

scl_reggen %{name} --runafterregister "restorecon -R %{_localstatedir}/run/nginx >/dev/null 2>&1 || :"

install -p -m 0644 %{SOURCE12} \

    %{buildroot}%{nginx_confdir}

# Change the nginx.conf paths

sed -i 's|\$datadir|%{_datadir}|' \

    %{buildroot}%{nginx_confdir}/nginx.conf

sed -i 's|\$docdir|%{_docdir}|' \

    %{buildroot}%{nginx_confdir}/nginx.conf

sed -i 's|\$sysconfdir|%{_sysconfdir}|' \

    %{buildroot}%{nginx_confdir}/nginx.conf

sed -i 's|\$localstatedir|%{_localstatedir}|' \

    %{buildroot}%{nginx_confdir}/nginx.conf

sed -i 's|\$logdir|%{nginx_logdir}|' \

    %{buildroot}%{nginx_confdir}/nginx.conf

install -p -d -m 0755 %{buildroot}%{_datadir}/nginx/modules

install -p -d -m 0755 %{buildroot}%{_libdir}/nginx/modules

%if 0%{?use_geoip}

echo 'load_module "%{_libdir}/nginx/modules/ngx_http_geoip_module.so";' \

    > %{buildroot}%{_datadir}/nginx/modules/mod-http-geoip.conf

%endif

echo 'load_module "%{_libdir}/nginx/modules/ngx_http_image_filter_module.so";' \

    > %{buildroot}%{_datadir}/nginx/modules/mod-http-image-filter.conf

%if 0%{?use_perl}

cat > %{buildroot}%{_datadir}/nginx/modules/mod-http-perl.conf <

load_module "%{_libdir}/nginx/modules/ngx_http_perl_module.so";

env PERL5LIB;

env LD_LIBRARY_PATH;

EOF

%endif

echo 'load_module "%{_libdir}/nginx/modules/ngx_http_xslt_filter_module.so";' \

    > %{buildroot}%{_datadir}/nginx/modules/mod-http-xslt-filter.conf

echo 'load_module "%{_libdir}/nginx/modules/ngx_mail_module.so";' \

    > %{buildroot}%{_datadir}/nginx/modules/mod-mail.conf

echo 'load_module "%{_libdir}/nginx/modules/ngx_stream_module.so";' \

    > %{buildroot}%{_datadir}/nginx/modules/mod-stream.conf

touch -r %{SOURCE12} %{buildroot}%{nginx_confdir}/nginx.conf \

      %{buildroot}%{_datadir}/nginx/modules/*.conf

install -p -m 0644 %{SOURCE100} \

    %{buildroot}%{nginx_webroot}

install -p -m 0644 %{SOURCE101} %{SOURCE102} \

    %{buildroot}%{nginx_webroot}

install -p -m 0644 %{SOURCE103} %{SOURCE104} \

    %{buildroot}%{nginx_webroot}

install -p -D -m 0644 %{_builddir}/nginx-%{version}/man/nginx.8 \

    %{buildroot}%{_mandir}/man8/nginx.8

mkdir -p %{buildroot}%{_localstatedir}/run/nginx

# Replaces variables in man page with proper values

sed -i 's|\%\%PREFIX\%\%|%{nginx_datadir}|' \

    %{buildroot}%{_mandir}/man8/nginx.8

sed -i 's|\%\%PID_PATH\%\%|%{_localstatedir}/run/nginx/nginx.pid|' \

    %{buildroot}%{_mandir}/man8/nginx.8

sed -i 's|\%\%CONF_PATH\%\%|%{nginx_confdir}/nginx.conf|' \

    %{buildroot}%{_mandir}/man8/nginx.8

sed -i 's|\%\%ERROR_LOG_PATH\%\%|%{nginx_logdir}/error.log|' \

    %{buildroot}%{_mandir}/man8/nginx.8

%if 0%{?scl:1}

cat << EOF | tee -a %{buildroot}%{?_scl_scripts}/service-environment

# Services are started in a fresh environment without any influence of user's

# environment (like environment variable values). As a consequence,

# information of all enabled collections will be lost during service start up.

# If user needs to run a service under any software collection enabled, this

# collection has to be written into %{scl_upper}_SCLS_ENABLED variable

# in %{?_scl_scripts}/service-environment.

%{scl_upper}_SCLS_ENABLED="%{scl}"

EOF

%endif #scl

%pre

getent group %{nginx_group} > /dev/null || groupadd -r %{nginx_group}

getent passwd %{nginx_user} > /dev/null || \

    useradd -r -d %{nginx_home} -g %{nginx_group} \

    -s /sbin/nologin -c "Nginx web server" %{nginx_user}

exit 0

%post

restorecon -R %{_scl_root} >/dev/null 2>&1 || :

semanage fcontext -a -e /var/log/nginx %{nginx_logdir} >/dev/null 2>&1 || :

restorecon -R %{nginx_logdir} >/dev/null 2>&1 || :

semanage fcontext -a -e %{_root_sysconfdir}/nginx %{nginx_confdir} >/dev/null 2>&1 || :

restorecon -R %{nginx_confdir} >/dev/null 2>&1 || :

semanage fcontext -a -e %{_root_localstatedir}/lib/nginx %{_localstatedir}/lib/nginx >/dev/null 2>&1 || :

restorecon -R %{_localstatedir}/lib/nginx >/dev/null 2>&1 || :

semanage fcontext -a -e %{_root_localstatedir}/run/nginx %{_localstatedir}/run/nginx >/dev/null 2>&1 || :

restorecon -R %{_localstatedir}/run/nginx >/dev/null 2>&1 || :

%if %{use_systemd}

# Ensure the helper script has the right context.

semanage fcontext -a -t httpd_exec_t %{_root_libexecdir}/nginx-scl-helper >/dev/null 2>&1 || :

restorecon -R %{_libexecdir}/nginx-scl-helper >/dev/null 2>&1 || :

%systemd_post %{service_name}.service

%else

semanage fcontext -a -e /etc/rc.d/init.d/nginx /etc/rc.d/init.d/%{?scl:%scl_prefix}nginx >/dev/null 2>&1 || :

restorecon -R /etc/rc.d/init.d/%{?scl:%scl_prefix}nginx >/dev/null 2>&1 || :

if [ $1 -eq 1 ]; then

    /sbin/chkconfig --add %{name}

fi

%endif

if [ $1 -eq 2 ]; then

    # Make sure these directories are not world readable.

    chmod 700 %{nginx_home}

    chmod -R 700 %{nginx_home_tmp}

    chmod 700 %{nginx_logdir}

fi

%preun

%if %{use_systemd}

%systemd_preun %{service_name}.service

%else

if [ $1 -eq 0 ]; then

    /sbin/service %{name} stop >/dev/null 2>&1

    /sbin/chkconfig --del %{name}

fi

%endif

%postun

%if %{use_systemd}

%systemd_postun %{service_name}.service

%else

if [ $1 -eq 2 ]; then

    /sbin/service %{name} upgrade || :

fi

%endif

%files

%doc LICENSE CHANGES README README.dynamic

%dir %{nginx_datadir}

%{nginx_datadir}/html

%dir %{nginx_datadir}/modules

%{_sbindir}/nginx

%{_mandir}/man8/nginx.8*

%{?scl:%{_libexecdir}/nginx-scl-helper}

%if %{use_systemd}

%{_unitdir}/%{service_name}.service

%dir %{_root_libexecdir}/initscripts/legacy-actions/%{?scl:%scl_prefix}nginx

%{_root_libexecdir}/initscripts/legacy-actions/%{?scl:%scl_prefix}nginx/*

%else

/etc/rc.d/init.d/%{?scl:%scl_prefix}nginx

%config(noreplace) %{_sysconfdir}/sysconfig/%{?scl:%scl_prefix}nginx

%endif

%dir %{nginx_confdir}

%dir %{nginx_confdir}/conf.d

%dir %{nginx_confdir}/default.d

%config(noreplace) %{nginx_confdir}/fastcgi.conf

%config(noreplace) %{nginx_confdir}/fastcgi.conf.default

%config(noreplace) %{nginx_confdir}/fastcgi_params

%config(noreplace) %{nginx_confdir}/fastcgi_params.default

%config(noreplace) %{nginx_confdir}/koi-utf

%config(noreplace) %{nginx_confdir}/koi-win

%config(noreplace) %{nginx_confdir}/mime.types

%config(noreplace) %{nginx_confdir}/mime.types.default

%config(noreplace) %{nginx_confdir}/nginx.conf

%config(noreplace) %{nginx_confdir}/nginx.conf.default

%config(noreplace) %{nginx_confdir}/scgi_params

%config(noreplace) %{nginx_confdir}/scgi_params.default

%config(noreplace) %{nginx_confdir}/uwsgi_params

%config(noreplace) %{nginx_confdir}/uwsgi_params.default

%config(noreplace) %{nginx_confdir}/win-utf

%config(noreplace) /etc/logrotate.d/%{?scl:%scl_prefix}nginx

%attr(700,%{nginx_user},%{nginx_group}) %dir %{nginx_home}

%attr(700,%{nginx_user},%{nginx_group}) %{nginx_home_tmp}

%attr(700,%{nginx_user},%{nginx_group}) %dir %{nginx_logdir}

%attr(700,%{nginx_user},%{nginx_group}) %dir %{_localstatedir}/run/nginx

%dir %{_libdir}/nginx

%dir %{_libdir}/nginx/modules

%{?scl: %{_scl_scripts}/register.d/*}

%{?scl: %{_scl_scripts}/register.content/*}

%{?scl: %{_scl_scripts}/deregister.d/*}

%{?scl:%config(noreplace) %{?_scl_scripts}/service-environment}

%if 0%{?use_geoip}

%files mod-http-geoip

%{_datadir}/nginx/modules/mod-http-geoip.conf

%{_libdir}/nginx/modules/ngx_http_geoip_module.so

%endif

%files mod-http-image-filter

%{_datadir}/nginx/modules/mod-http-image-filter.conf

%{_libdir}/nginx/modules/ngx_http_image_filter_module.so

%if 0%{?use_perl}

%files mod-http-perl

%{_datadir}/nginx/modules/mod-http-perl.conf

%{_libdir}/nginx/modules/ngx_http_perl_module.so

%{_nginx_perl_vendorarch}/*

%{_mandir}/man3/nginx.3pm.*

%endif

%files mod-http-xslt-filter

%{_datadir}/nginx/modules/mod-http-xslt-filter.conf

%{_libdir}/nginx/modules/ngx_http_xslt_filter_module.so

%files mod-mail

%{_datadir}/nginx/modules/mod-mail.conf

%{_libdir}/nginx/modules/ngx_mail_module.so

%files mod-stream

%{_datadir}/nginx/modules/mod-stream.conf

%{_libdir}/nginx/modules/ngx_stream_module.so

%changelog

* Thu Nov 15 2018 Lubos Uhliarik <luhliari@redhat.com> - 1:1.10.2-8.1

- Resolves: #1648363 - CVE-2018-16845 rh-nginx110-nginx: nginx:

  Denial of service and memory disclosure via mp4 module

- Resolves: #1650091 - CVE-2018-16843 rh-nginx110-nginx: nginx:

  Excessive memory consumption via flaw in HTTP/2 implementation

* Tue Aug 22 2017 Luboš Uhliarik <luhliari@redhat.com> - 1:1.10.2-8

- Resolves: CVE-2017-7529 rh-nginx110-nginx: nginx: Integer overflow

  in nginx range filter module leading to memory disclosure

* Thu Mar 23 2017 Joe Orton <jorton@redhat.com> - 1:1.10.2-7

- filter auto-provides from module subpackages (#1434349)

- drop perl vendorarch directory ownership (#1434333)

* Thu Mar  2 2017 Joe Orton <jorton@redhat.com> - 1:1.10.2-6

- run nginx under SCL environment from SysV init script

* Thu Mar  2 2017 Joe Orton <jorton@redhat.com> - 1:1.10.2-5

- filter perl(*) req/prov (#1421927)

* Wed Mar  1 2017 Joe Orton <jorton@redhat.com> - 1:1.10.2-4

- drop explicit Requires for openssl, gd

- run nginx under SCL environment from systemd service

- fix module .conf path in nginx.conf

- pass PERL5LIB, LD_LIBRARY_PATH from env when perl is loaded (#1421927)

* Wed Feb  8 2017 Joe Orton <jorton@redhat.com> - 1:1.10.2-3

- add mod-http-perl

* Thu Jan 19 2017 Joe Orton <jorton@redhat.com> - 1:1.10.2-2

- own libdir/nginx

* Thu Jan 19 2017 Joe Orton <jorton@redhat.com> - 1:1.10.2-1

- update to 1.10.2 (#1404779)

- merge changes from Fedora

* Mon Jun 20 2016 Joe Orton <jorton@redhat.com> - 1:1.8.1-1

- update to 1.8.1 (CVE-2016-0742 CVE-2016-0746 CVE-2016-0747)

- add security fix for CVE-2016-4450

* Fri Nov 13 2015 Jan Kaluza <jkaluza@redhat.com> - 1:1.8.0-4

- fix SELinux context of /var/opt and /etc/opt directories (#1280221)

* Fri Sep 11 2015 Jan Kaluza <jkaluza@redhat.com> - 1:1.8.0-3

- fix bad path to nginx.pid in logrotate configuration (#1260595)

* Tue Aug 11 2015 Jan Kaluza <jkaluza@redhat.com> - 1:1.8.0-2

- move logs to /var/opt/rh/rh-nginx18/log (#1250095)

* Wed Jul 08 2015 Jan Kaluza <jkaluza@redhat.com> - 1:1.8.0-1

- update to version 1.8.0

* Wed Jan 21 2015 Jan Kaluza <jkaluza@redhat.com> - 1:1.6.2-3

- set use_systemd only on RHEL7

* Mon Jan 19 2015 Jan Kaluza <jkaluza@redhat.com> - 1:1.6.2-2

- add support for Phusion Passenger

* Tue Jan 06 2015 Jan Kaluza <jkaluza@redhat.com> - 1:1.6.2-1

- update to version 1.6.2

- do not use conditionals in systemd macros (#1152514)

* Wed Sep 17 2014 Jan Kaluza <jkaluza@redhat.com> - 1:1.6.1-2

- prevent SSL session reuse in unrelated server{} blocks (CVE-2014-3616)

* Wed Aug 06 2014 Jan Kaluza <jkaluza@redhat.com> - 1:1.6.1-1

- update to 1.6.1 (CVE-2014-3556)

* Wed Jul 02 2014 Jan Kaluza <jkaluza@redhat.com> - 1:1.6.0-4

- correct the path for previous SELinux fix (#1088912)

* Wed Jul 02 2014 Jan Kaluza <jkaluza@redhat.com> - 1:1.6.0-3

- fix SELinux context of initscript (#1088912)

* Tue Jun 24 2014 Jan Kaluza <jkaluza@redhat.com> - 1:1.6.0-2

- rebuild because of rename to nginx16

* Mon Jun  9 2014 Joe Orton <jorton@redhat.com> - 1:1.6.0-1

- update to 1.6.0 (#1101921)

* Tue Mar  4 2014 Joe Orton <jorton@redhat.com> - 1:1.4.4-10

- run restorecon in %%post for #1072266

* Tue Mar  4 2014 Joe Orton <jorton@redhat.com> - 1:1.4.4-9

- fix SELinux context for log directory (#1072266)

* Thu Feb 20 2014 Jan Kaluza <jkaluza@redhat.com> - 1:1.4.4-8

- update poweredby logo and show it on default pages (#1065981)

* Wed Jan 15 2014 Jan Kaluza <jkaluza@redhat.com> - 1:1.4.4-7

- call restorecon in post script (#1052935)

* Mon Jan 06 2014 Jan Kaluza <jkaluza@redhat.com> - 1:1.4.4-6

- create temp subdirectories in nginx_home_tmp during installation (#1040470)

* Tue Nov 26 2013 Joe Orton <jorton@redhat.com> - 1:1.4.4-5

- further default config tweak

* Tue Nov 26 2013 Joe Orton <jorton@redhat.com> - 1:1.4.4-4

- update config file for log directory

* Tue Nov 26 2013 Joe Orton <jorton@redhat.com> - 1:1.4.4-3

- change log directory

* Tue Nov 19 2013 Joe Orton <jorton@redhat.com> - 1:1.4.4-1

- update to 1.4.4 (CVE-2013-4547)

* Mon Nov 18 2013 Jan Kaluza <jkaluza@redhat.com> - 1:1.4.2-6

- require scl_runtime

* Mon Nov 18 2013 Jan Kaluza <jkaluza@redhat.com> - 1:1.4.2-5

- improved index.html

* Mon Nov 18 2013 Jan Kaluza <jkaluza@redhat.com> - 1:1.4.2-4

- support for software collections

* Fri Aug 09 2013 Jonathan Steffan <jsteffan@fedoraproject.org> - 1:1.4.2-3