|
 |
0de4d1 |
Name: tang
|
|
|
d5b522 |
Version: 11
|
|
|
d5b522 |
Release: 1%{?dist}
|
|
|
0de4d1 |
Summary: Network Presence Binding Daemon
|
|
|
0de4d1 |
|
|
|
0de4d1 |
License: GPLv3+
|
|
|
0de4d1 |
URL: https://github.com/latchset/%{name}
|
|
|
0de4d1 |
Source0: https://github.com/latchset/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.xz
|
|
|
0de4d1 |
|
|
|
0de4d1 |
BuildRequires: gcc
|
|
|
0de4d1 |
BuildRequires: meson
|
|
|
0de4d1 |
BuildRequires: git-core
|
|
|
0de4d1 |
BuildRequires: jose >= 8
|
|
|
0de4d1 |
BuildRequires: libjose-devel >= 8
|
|
|
0de4d1 |
BuildRequires: libjose-zlib-devel >= 8
|
|
|
0de4d1 |
BuildRequires: libjose-openssl-devel >= 8
|
|
|
0de4d1 |
|
|
|
0de4d1 |
BuildRequires: http-parser-devel >= 2.7.1-3
|
|
|
0de4d1 |
BuildRequires: systemd-devel
|
|
|
0de4d1 |
BuildRequires: pkgconfig
|
|
|
0de4d1 |
|
|
|
0de4d1 |
BuildRequires: systemd
|
|
|
0de4d1 |
BuildRequires: curl
|
|
|
0de4d1 |
|
|
|
0de4d1 |
BuildRequires: asciidoc
|
|
|
0de4d1 |
BuildRequires: coreutils
|
|
|
0de4d1 |
BuildRequires: grep
|
|
|
0de4d1 |
BuildRequires: socat
|
|
|
0de4d1 |
BuildRequires: sed
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%{?systemd_requires}
|
|
|
0de4d1 |
Requires: coreutils
|
|
|
0de4d1 |
Requires: jose >= 8
|
|
|
0de4d1 |
Requires: grep
|
|
|
0de4d1 |
Requires: sed
|
|
|
0de4d1 |
|
|
|
0de4d1 |
Requires(pre): shadow-utils
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%description
|
|
|
0de4d1 |
Tang is a small daemon for binding data to the presence of a third party.
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%prep
|
|
|
0de4d1 |
%autosetup -S git
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%build
|
|
|
0de4d1 |
%meson
|
|
|
0de4d1 |
%meson_build
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%install
|
|
|
0de4d1 |
%meson_install
|
|
|
0de4d1 |
echo "User=%{name}" >> $RPM_BUILD_ROOT/%{_unitdir}/%{name}d@.service
|
|
|
0de4d1 |
%{__mkdir_p} $RPM_BUILD_ROOT/%{_localstatedir}/db/%{name}
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%check
|
|
|
0de4d1 |
%meson_test
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%pre
|
|
|
0de4d1 |
getent group %{name} >/dev/null || groupadd -r %{name}
|
|
|
0de4d1 |
getent passwd %{name} >/dev/null || \
|
|
|
0de4d1 |
useradd -r -g %{name} -d %{_localstatedir}/cache/%{name} -s /sbin/nologin \
|
|
|
0de4d1 |
-c "Tang Network Presence Daemon user" %{name}
|
|
|
0de4d1 |
exit 0
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%post
|
|
|
0de4d1 |
%systemd_post %{name}d.socket
|
|
|
0de4d1 |
|
|
|
d5b522 |
# Let's make sure any existing keys are readable only
|
|
|
d5b522 |
# by the owner/group.
|
|
|
d5b522 |
if [ -d /var/db/tang ]; then
|
|
|
d5b522 |
for k in /var/db/tang/*.jwk; do
|
|
|
d5b522 |
test -e "${k}" || continue
|
|
|
d5b522 |
chmod 0440 -- "${k}"
|
|
|
d5b522 |
done
|
|
|
d5b522 |
for k in /var/db/tang/.*.jwk; do
|
|
|
d5b522 |
test -e "${k}" || continue
|
|
|
d5b522 |
chmod 0440 -- "${k}"
|
|
|
d5b522 |
done
|
|
|
d5b522 |
chown tang:tang -R /var/db/tang
|
|
|
d5b522 |
fi
|
|
|
d5b522 |
|
|
|
0de4d1 |
%preun
|
|
|
0de4d1 |
%systemd_preun %{name}d.socket
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%postun
|
|
|
0de4d1 |
%systemd_postun_with_restart %{name}d.socket
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%files
|
|
|
0de4d1 |
%license COPYING
|
|
|
0de4d1 |
%attr(0700, %{name}, %{name}) %{_localstatedir}/db/%{name}
|
|
|
0de4d1 |
%{_unitdir}/%{name}d@.service
|
|
|
0de4d1 |
%{_unitdir}/%{name}d.socket
|
|
|
0de4d1 |
%{_libexecdir}/%{name}d-keygen
|
|
|
0de4d1 |
%{_libexecdir}/%{name}d-rotate-keys
|
|
|
0de4d1 |
%{_libexecdir}/%{name}d
|
|
|
0de4d1 |
%{_mandir}/man8/tang.8*
|
|
|
0de4d1 |
%{_bindir}/%{name}-show-keys
|
|
|
0de4d1 |
%{_mandir}/man1/tang-show-keys.1*
|
|
|
d5b522 |
%{_mandir}/man1/tangd-rotate-keys.1.*
|
|
|
0de4d1 |
|
|
|
0de4d1 |
%changelog
|
|
|
d5b522 |
* Tue Dec 14 2021 Sergio Correia <scorreia@redhat.com> - 11-1
|
|
|
d5b522 |
- New upstream release - v11.
|
|
|
d5b522 |
Resolves: CVE-2021-4076
|
|
|
d5b522 |
|
|
|
0de4d1 |
* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 10-4
|
|
|
0de4d1 |
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
|
0de4d1 |
Related: rhbz#1991688
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Tue Jun 22 2021 Mohan Boddu <mboddu@redhat.com> - 10-3
|
|
|
0de4d1 |
- Rebuilt for RHEL 9 BETA for openssl 3.0
|
|
|
0de4d1 |
Related: rhbz#1971065
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Thu May 20 2021 Sergio Correia <scorreia@redhat.com> - 10-2
|
|
|
0de4d1 |
- Fix issues reported by static analyzer checks
|
|
|
0de4d1 |
Resolves: rhbz#1956765
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed May 05 2021 Sergio Correia <scorreia@redhat.com> - 10-1
|
|
|
0de4d1 |
- New upstream release - v10.
|
|
|
0de4d1 |
Resolves: rhbz#1956765
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 8-3
|
|
|
0de4d1 |
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Tue Feb 09 2021 Sergio Correia <scorreia@redhat.com> - 8-2
|
|
|
0de4d1 |
- Remove extra patches as they are already included in v8 release
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Mon Feb 08 2021 Sergio Correia <scorreia@redhat.com> - 8-1
|
|
|
0de4d1 |
- New upstream release - v8.
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 7-9
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Tue Dec 1 2020 Sergio Correia <scorreia@redhat.com> - 7.8
|
|
|
0de4d1 |
- Move build system to meson
|
|
|
0de4d1 |
Upstream commits (fed9020, 590de27)
|
|
|
0de4d1 |
- Move key handling to tang itself
|
|
|
0de4d1 |
Upstream commits (6090505, c71df1d, 7119454)
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 7-7
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed Apr 15 2020 Igor Raits <ignatenkobrain@fedoraproject.org> - 7-6
|
|
|
0de4d1 |
- Rebuild for http-parser 2.9.4
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Tue Feb 25 2020 Sergio Correia <scorreia@redhat.com> - 7-5
|
|
|
0de4d1 |
- Rebuilt after http-parser update
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 7-4
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 7-3
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 7-2
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Fri Aug 10 2018 Nathaniel McCallum <npmccallum@redhat.com> - 7-1
|
|
|
0de4d1 |
- New upstream release
|
|
|
0de4d1 |
- Retire tang-nagios package (now separate upstream)
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 6-5
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 6-4
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 6-3
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 6-2
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed Jun 14 2017 Nathaniel McCallum <npmccallum@redhat.com> - 6-1
|
|
|
0de4d1 |
- New upstream release
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed Jun 14 2017 Nathaniel McCallum <npmccallum@redhat.com> - 5-2
|
|
|
0de4d1 |
- Fix incorrect dependencies
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed Jun 14 2017 Nathaniel McCallum <npmccallum@redhat.com> - 5-1
|
|
|
0de4d1 |
- New upstream release
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 4-3
|
|
|
0de4d1 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Mon Nov 14 2016 Nathaniel McCallum <npmccallum@redhat.com> - 4-2
|
|
|
0de4d1 |
- Fix a race condition in one of the tests
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Thu Nov 10 2016 Nathaniel McCallum <npmccallum@redhat.com> - 4-1
|
|
|
0de4d1 |
- New upstream release
|
|
|
0de4d1 |
- Add nagios subpackage
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed Oct 26 2016 Nathaniel McCallum <npmccallum@redhat.com> - 3-1
|
|
|
0de4d1 |
- New upstream release
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Wed Oct 19 2016 Nathaniel McCallum <npmccallum@redhat.com> - 2-1
|
|
|
0de4d1 |
- New upstream release
|
|
|
0de4d1 |
|
|
|
0de4d1 |
* Tue Aug 23 2016 Nathaniel McCallum <npmccallum@redhat.com> - 1-1
|
|
|
0de4d1 |
- First release
|