Blame SPECS/rtkit.spec

421f5e
%global _hardened_build 1
421f5e
421f5e
Name:             rtkit
421f5e
Version:          0.11
421f5e
Release:          19%{?dist}
421f5e
Summary:          Realtime Policy and Watchdog Daemon
421f5e
Group:            System Environment/Base
421f5e
# The daemon itself is GPLv3+, the reference implementation for the client BSD
421f5e
License:          GPLv3+ and BSD
421f5e
URL:              http://git.0pointer.net/rtkit.git/
421f5e
Requires:         dbus
421f5e
Requires:         polkit
421f5e
Requires(post):   systemd
421f5e
Requires(preun):  systemd
421f5e
Requires(postun): systemd
421f5e
BuildRequires:    dbus-devel >= 1.2
421f5e
BuildRequires:    libcap-devel
421f5e
BuildRequires:    polkit-devel
421f5e
BuildRequires:    autoconf automake libtool
421f5e
BuildRequires:    systemd
421f5e
Source0:          http://0pointer.de/public/%{name}-%{version}.tar.xz
421f5e
Patch1:           rtkit-mq_getattr.patch
421f5e
Patch2:           0001-SECURITY-Pass-uid-of-caller-to-polkit.patch
421f5e
Patch3:           rtkit-controlgroup.patch
421f5e
421f5e
# Temporarily disable -Werror=format-security since it breaks the build
421f5e
Patch4:           format-security.patch
421f5e
421f5e
%description
421f5e
RealtimeKit is a D-Bus system service that changes the
421f5e
scheduling policy of user processes/threads to SCHED_RR (i.e. realtime
421f5e
scheduling mode) on request. It is intended to be used as a secure
421f5e
mechanism to allow real-time scheduling to be used by normal user
421f5e
processes.
421f5e
421f5e
%prep
421f5e
%setup -q
421f5e
%patch1 -p1
421f5e
%patch2 -p1
421f5e
%patch3 -p1
421f5e
%patch4 -p1
421f5e
421f5e
%build
421f5e
autoreconf -fvi
421f5e
%configure --with-systemdsystemunitdir=/usr/lib/systemd/system
421f5e
make V=1 %{?_smp_mflags}
421f5e
./rtkit-daemon --introspect > org.freedesktop.RealtimeKit1.xml
421f5e
421f5e
%install
421f5e
%make_install
421f5e
install -Dm0644 org.freedesktop.RealtimeKit1.xml %{buildroot}%{_datadir}/dbus-1/interfaces/org.freedesktop.RealtimeKit1.xml
421f5e
421f5e
%pre
421f5e
getent group rtkit >/dev/null 2>&1 || groupadd \
421f5e
        -r \
421f5e
        -g 172 \
421f5e
        rtkit
421f5e
getent passwd rtkit >/dev/null 2>&1 || useradd \
421f5e
        -r -l \
421f5e
        -u 172 \
421f5e
        -g rtkit \
421f5e
        -d /proc \
421f5e
        -s /sbin/nologin \
421f5e
        -c "RealtimeKit" \
421f5e
        rtkit
421f5e
:;
421f5e
421f5e
%post
421f5e
%systemd_post rtkit-daemon.service
421f5e
dbus-send --system --type=method_call --dest=org.freedesktop.DBus / org.freedesktop.DBus.ReloadConfig >/dev/null 2>&1 || :
421f5e
421f5e
%preun
421f5e
%systemd_preun rtkit-daemon.service
421f5e
421f5e
%postun
421f5e
%systemd_postun
421f5e
421f5e
%files
421f5e
%doc README GPL LICENSE rtkit.c rtkit.h
421f5e
%attr(0755,root,root) %{_sbindir}/rtkitctl
421f5e
%attr(0755,root,root) %{_libexecdir}/rtkit-daemon
421f5e
%{_datadir}/dbus-1/system-services/org.freedesktop.RealtimeKit1.service
421f5e
%{_datadir}/dbus-1/interfaces/org.freedesktop.RealtimeKit1.xml
421f5e
%{_datadir}/polkit-1/actions/org.freedesktop.RealtimeKit1.policy
421f5e
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.freedesktop.RealtimeKit1.conf
421f5e
%{_prefix}/lib/systemd/system/rtkit-daemon.service
421f5e
%{_mandir}/man8/*
421f5e
421f5e
%changelog
421f5e
* Thu Jan 17 2019 Michal Sekletár <msekleta@redhat.com> - 0.11-19
421f5e
- add systemd to BuildRequires (#1654656)
421f5e
421f5e
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.11-18
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
421f5e
421f5e
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.11-17
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
421f5e
421f5e
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.11-16
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
421f5e
421f5e
* Fri May 12 2017 Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
421f5e
- Temporarily disable -Werror=format-security to unbreak the build
421f5e
- Build with verbose command-line visible in the logs
421f5e
- Resolves: rhbz#1424270
421f5e
421f5e
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.11-14
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
421f5e
421f5e
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.11-13
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
421f5e
421f5e
* Wed Nov  4 2015 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-12
421f5e
- Make dbus interface file non-executable (#1245938)
421f5e
421f5e
* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.11-11
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
421f5e
421f5e
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.11-10
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
421f5e
421f5e
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.11-9
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
421f5e
421f5e
* Sat Nov 16 2013 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-8
421f5e
- Use a simpler patch for -lrt.
421f5e
- Remove ControlGroup setting from the service file
421f5e
  Resolves: #1010534
421f5e
- Turn on hardening flags
421f5e
  Resolves: #996735, #1008399
421f5e
421f5e
* Mon Sep 23 2013 Colin Walters <walters@verbum.org> - 0.11-7
421f5e
- CVE-2013-4326
421f5e
  Resolves: #1009543
421f5e
421f5e
* Thu Aug 22 2013 Colin Walters <walters@verbum.org> - 0.11-6
421f5e
- Add patch to make this build again
421f5e
421f5e
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.11-5
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
421f5e
421f5e
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.11-4
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
421f5e
421f5e
* Fri Sep 14 2012 Lennart Poettering <lpoetter@redhat.com> - 0.11-3
421f5e
- Make use of the new systemd macros
421f5e
421f5e
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.11-2
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
421f5e
421f5e
* Tue May 15 2012 Lennart Poettering <lpoetter@redhat.com> - 0.11-1
421f5e
- New upstream release
421f5e
421f5e
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.10-2
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
421f5e
421f5e
* Thu Feb 17 2011 Lennart Poettering <lpoetter@redhat.com> - 0.10-1
421f5e
- new upstream release
421f5e
421f5e
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9-3
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
421f5e
421f5e
* Wed Aug  4 2010 Lennart Poettering <lpoetter@redhat.com> - 0.9-2
421f5e
- Convert systemd-install to systemctl
421f5e
421f5e
* Tue Jul 13 2010 Lennart Poettering <lpoetter@redhat.com> - 0.9-1
421f5e
- New upstream release
421f5e
421f5e
* Tue Jun 29 2010 Lennart Poettering <lpoetter@redhat.com> - 0.8-1
421f5e
- New upstream release
421f5e
421f5e
* Fri Dec 18 2009 Lennart Poettering <lpoetter@redhat.com> - 0.5-1
421f5e
- New release
421f5e
- By default don't demote unknown threads
421f5e
- Make messages less cute
421f5e
- Fixes 530582
421f5e
421f5e
* Wed Aug 5 2009 Lennart Poettering <lpoetter@redhat.com> - 0.4-1
421f5e
- New release
421f5e
421f5e
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3-2
421f5e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
421f5e
421f5e
* Thu Jul 2 2009 Lennart Poettering <lpoetter@redhat.com> - 0.3-1
421f5e
- New release
421f5e
421f5e
* Wed Jun 17 2009 Lennart Poettering <lpoetter@redhat.com> - 0.2-1
421f5e
- Initial packaging