# Copyright (c) 2000-2008, JPackage Project

# All rights reserved.

#

# Redistribution and use in source and binary forms, with or without

# modification, are permitted provided that the following conditions

# are met:

#

# 1. Redistributions of source code must retain the above copyright

#    notice, this list of conditions and the following disclaimer.

# 2. Redistributions in binary form must reproduce the above copyright

#    notice, this list of conditions and the following disclaimer in the

#    documentation and/or other materials provided with the

#    distribution.

# 3. Neither the name of the JPackage Project nor the names of its

#    contributors may be used to endorse or promote products derived

#    from this software without specific prior written permission.

#

# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS

# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT

# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR

# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT

# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT

# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,

# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY

# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT

# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE

# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#

%global jspspec 2.2

%global major_version 7

%global minor_version 0

%global micro_version 76

%global packdname apache-tomcat-%{version}-src

%global servletspec 3.0

%global elspec 2.2

%global tcuid 53

# FHS 2.3 compliant tree structure - http://www.pathname.com/fhs/2.3/

%global basedir %{_var}/lib/%{name}

%global appdir %{basedir}/webapps

%global homedir %{_datadir}/%{name}

%global bindir %{homedir}/bin

%global confdir %{_sysconfdir}/%{name}

%global libdir %{_javadir}/%{name}

%global logdir %{_var}/log/%{name}

%global cachedir %{_var}/cache/%{name}

%global tempdir %{cachedir}/temp

%global workdir %{cachedir}/work

%global _initrddir %{_sysconfdir}/init.d

%global _systemddir /lib/systemd/system

Name:          tomcat

Epoch:         0

Version:       %{major_version}.%{minor_version}.%{micro_version}

Release:       9%{?dist}

Summary:       Apache Servlet/JSP Engine, RI for Servlet %{servletspec}/JSP %{jspspec} API

Group:         System Environment/Daemons

License:       ASL 2.0

URL:           http://tomcat.apache.org/

Source0:       http://www.apache.org/dist/tomcat/tomcat-%{major_version}/v%{version}/src/%{packdname}.tar.gz

Source1:       %{name}-%{major_version}.%{minor_version}.conf

Source3:       %{name}-%{major_version}.%{minor_version}.sysconfig

Source4:       %{name}-%{major_version}.%{minor_version}.wrapper

Source5:       %{name}-%{major_version}.%{minor_version}.logrotate

Source6:       %{name}-%{major_version}.%{minor_version}-digest.script

Source7:       %{name}-%{major_version}.%{minor_version}-tool-wrapper.script

Source8:       servlet-api-OSGi-MANIFEST.MF

Source9:       jsp-api-OSGi-MANIFEST.MF

Source10:      %{name}-%{major_version}.%{minor_version}-log4j.properties

Source11:      %{name}-%{major_version}.%{minor_version}.service

Source12:      el-api-OSGi-MANIFEST.MF

Source13:      jasper-el-OSGi-MANIFEST.MF

Source14:      jasper-OSGi-MANIFEST.MF

Source15:      tomcat-api-OSGi-MANIFEST.MF

Source16:      tomcat-juli-OSGi-MANIFEST.MF

Source20:      %{name}-%{major_version}.%{minor_version}-jsvc.service

Source21:      tomcat-functions

Source22:      tomcat-preamble

Source23:      tomcat-server

Source24:      tomcat-named.service

Source25:      tomcat-juli-adapters.jar

Source26:      tomcat-juli.jar

Patch0: %{name}-%{major_version}.%{minor_version}-bootstrap-MANIFEST.MF.patch

Patch1: %{name}-%{major_version}.%{minor_version}-tomcat-users-webapp.patch

Patch2: %{name}-7.0.54-rebase.patch

Patch3: %{name}-7.0-catalina-policy.patch

Patch4: %{name}-7.0.76-CVE-2017-5664.patch

Patch5: %{name}-7.0.76-CVE-2017-5647.patch

Patch6: %{name}-7.0.76-CVE-2017-7674.patch

Patch7: %{name}-7.0.76-CVE-2017-12617.patch

Patch8: patch.rhbz1602060

Patch9: %{name}-7.0.76-CVE-2018-1336.patch

Patch10: %{name}-7.0.76-CVE-2018-11784.patch

BuildArch:     noarch

BuildRequires: ant

#BuildRequires: ant-nodeps

BuildRequires: ecj >= 1:4.2.1

BuildRequires: findutils

BuildRequires: apache-commons-collections

BuildRequires: apache-commons-daemon

BuildRequires: apache-commons-dbcp

BuildRequires: apache-commons-pool

BuildRequires: jakarta-taglibs-standard

BuildRequires: java-devel >= 1:1.6.0

BuildRequires: jpackage-utils >= 0:1.7.0

BuildRequires: junit

BuildRequires: log4j

BuildRequires: geronimo-jaxrpc

BuildRequires: wsdl4j

BuildRequires: systemd-units

Requires:      apache-commons-daemon

Requires:      apache-commons-logging

Requires:      apache-commons-collections

Requires:      apache-commons-dbcp

Requires:      apache-commons-pool

Requires:      java >= 1:1.6.0

Requires:      procps

Requires:      %{name}-lib = %{epoch}:%{version}-%{release}

Requires(pre):    shadow-utils

Requires(post):   chkconfig

Requires(preun):  chkconfig

Requires(post):   systemd-units

Requires(preun):  systemd-units

Requires(postun): systemd-units

%description

Tomcat is the servlet container that is used in the official Reference

Implementation for the Java Servlet and JavaServer Pages technologies.

The Java Servlet and JavaServer Pages specifications are developed by

Sun under the Java Community Process.

Tomcat is developed in an open and participatory environment and

released under the Apache Software License version 2.0. Tomcat is intended

to be a collaboration of the best-of-breed developers from around the world.

%package admin-webapps

Group: Applications/System

Summary: The host-manager and manager web applications for Apache Tomcat

Requires: %{name} = %{epoch}:%{version}-%{release}

%description admin-webapps

The host-manager and manager web applications for Apache Tomcat.

%package docs-webapp

Group: Applications/Text

Summary: The docs web application for Apache Tomcat

Requires: %{name} = %{epoch}:%{version}-%{release}

%description docs-webapp

The docs web application for Apache Tomcat.

%package javadoc

Group: Documentation

Summary: Javadoc generated documentation for Apache Tomcat

Requires: jpackage-utils

%description javadoc

Javadoc generated documentation for Apache Tomcat.

%package jsvc

Group: System Environment/Daemons

Summary: Apache jsvc wrapper for Apache Tomcat as separate service

Requires: %{name} = %{epoch}:%{version}-%{release}

Requires: apache-commons-daemon-jsvc

%description jsvc

Systemd service and wrapper scripts to start tomcat with jsvc,

which allows tomcat to perform some privileged operations

(e.g. bind to a port < 1024) and then switch identity to a non-privileged user.

%package jsp-%{jspspec}-api

Group: Development/Libraries

Summary: Apache Tomcat JSP API implementation classes

Provides: jsp = %{jspspec}

Provides: jsp22

Requires: %{name}-servlet-%{servletspec}-api = %{epoch}:%{version}-%{release}

Requires(post): chkconfig

Requires(postun): chkconfig

%description jsp-%{jspspec}-api

Apache Tomcat JSP API implementation classes.

%package lib

Group: Development/Libraries

Summary: Libraries needed to run the Tomcat Web container

Requires: %{name}-jsp-%{jspspec}-api = %{epoch}:%{version}-%{release}

Requires: %{name}-servlet-%{servletspec}-api = %{epoch}:%{version}-%{release}

Requires: %{name}-el-%{elspec}-api = %{epoch}:%{version}-%{release}

Requires: ecj >= 1:4.2.1

Requires: apache-commons-collections

Requires: apache-commons-dbcp

Requires: apache-commons-pool

Requires(preun): coreutils

%description lib

Libraries needed to run the Tomcat Web container.

%package servlet-%{servletspec}-api

Group: Development/Libraries

Summary: Apache Tomcat Servlet API implementation classes

Provides: servlet = %{servletspec}

Provides: servlet6

Provides: servlet3

Requires(post): chkconfig

Requires(postun): chkconfig

%description servlet-%{servletspec}-api

Apache Tomcat Servlet API implementation classes.

%package el-%{elspec}-api

Group: Development/Libraries

Summary: Expression Language v%{elspec} API

Provides: el_1_0_api = %{epoch}:%{version}-%{release}

Provides: el_api = %{elspec}

Requires(post): chkconfig

Requires(postun): chkconfig

%description el-%{elspec}-api

Expression Language %{elspec}.

%package webapps

Group: Applications/Internet

Summary: The ROOT and examples web applications for Apache Tomcat

Requires: %{name} = %{epoch}:%{version}-%{release}

Requires: jakarta-taglibs-standard >= 0:1.1

%description webapps

The ROOT and examples web applications for Apache Tomcat.

%prep

%setup -q -n %{packdname}

# remove pre-built binaries and windows files

find . -type f \( -name "*.bat" -o -name "*.class" -o -name Thumbs.db -o -name "*.gz" -o \

   -name "*.jar" -o -name "*.war" -o -name "*.zip" \) -delete

%patch0 -p0

%patch1 -p0

%patch2 -p0

%patch3 -p0

%patch4 -p0

%patch5 -p0

%patch6 -p0

%patch7 -p0

%patch8 -p0

%patch9 -p0

%patch10 -p0

%{__ln_s} $(build-classpath jakarta-taglibs-core) webapps/examples/WEB-INF/lib/jstl.jar

%{__ln_s} $(build-classpath jakarta-taglibs-standard) webapps/examples/WEB-INF/lib/standard.jar

%build

export OPT_JAR_LIST="xalan-j2-serializer"

   # we don't care about the tarballs and we're going to replace

   # tomcat-dbcp.jar with apache-commons-{collections,dbcp,pool}-tomcat5.jar

   # so just create a dummy file for later removal

   touch HACK

   %{__mkdir_p} HACKDIR

   touch HACKDIR/build.xml

   # who needs a build.properties file anyway

   %{ant} -Dbase.path="." \

      -Dbuild.compiler="modern" \

      -Dcommons-collections.jar="$(build-classpath apache-commons-collections)" \

      -Dcommons-daemon.jar="$(build-classpath apache-commons-daemon)" \

      -Dcommons-daemon.native.src.tgz="HACK" \

      -Djasper-jdt.jar="$(build-classpath ecj)" \

      -Djdt.jar="$(build-classpath ecj)" \

      -Dtomcat-dbcp.jar="$(build-classpath apache-commons-dbcp)" \

      -Dtomcat-native.tar.gz="HACK" \

      -Dtomcat-native.home="." \

      -Dcommons-daemon.native.win.mgr.exe="HACK" \

      -Dnsis.exe="HACK" \

      -Djaxrpc-lib.jar="$(build-classpath jaxrpc)" \

      -Dwsdl4j-lib.jar="$(build-classpath wsdl4j)" \

      -Dcommons-pool.home="HACKDIR" \

      -Dcommons-dbcp.home="HACKDIR" \

      -Dno.build.dbcp=true \

      -Dversion="%{version}" \

      -Dversion.build="%{micro_version}" \

      -Djava.7.home=%{java_home} \

      deploy dist-prepare dist-source javadoc

    # remove some jars that we'll replace with symlinks later

   %{__rm} output/build/bin/commons-daemon.jar \

           output/build/lib/ecj.jar \

           output/build/lib/apache-commons-dbcp.jar

    # remove the cruft we created

   %{__rm} output/build/bin/tomcat-native.tar.gz

pushd output/dist/src/webapps/docs/appdev/sample/src

%{__mkdir_p} ../web/WEB-INF/classes

%{javac} -cp ../../../../../../../../output/build/lib/servlet-api.jar -d ../web/WEB-INF/classes mypackage/Hello.java

pushd ../web

%{jar} cf ../../../../../../../../output/build/webapps/docs/appdev/sample/sample.war *

popd

popd

# inject OSGi manifests

mkdir -p META-INF

cp -p %{SOURCE8} META-INF/MANIFEST.MF

touch META-INF/MANIFEST.MF

zip -u output/build/lib/servlet-api.jar META-INF/MANIFEST.MF

cp -p %{SOURCE9} META-INF/MANIFEST.MF

touch META-INF/MANIFEST.MF

zip -u output/build/lib/jsp-api.jar META-INF/MANIFEST.MF

cp -p %{SOURCE12} META-INF/MANIFEST.MF

touch META-INF/MANIFEST.MF

zip -u output/build/lib/el-api.jar META-INF/MANIFEST.MF

cp -p %{SOURCE13} META-INF/MANIFEST.MF

touch META-INF/MANIFEST.MF

zip -u output/build/lib/jasper-el.jar META-INF/MANIFEST.MF

cp -p %{SOURCE14} META-INF/MANIFEST.MF

touch META-INF/MANIFEST.MF

zip -u output/build/lib/jasper.jar META-INF/MANIFEST.MF

cp -p %{SOURCE15} META-INF/MANIFEST.MF

touch META-INF/MANIFEST.MF

zip -u output/build/lib/tomcat-api.jar META-INF/MANIFEST.MF

cp -p %{SOURCE16} META-INF/MANIFEST.MF

touch META-INF/MANIFEST.MF

zip -u output/build/bin/tomcat-juli.jar META-INF/MANIFEST.MF

%install

# build initial path structure

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_bindir}

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_sbindir}

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_javadocdir}/%{name}

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_initrddir}

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_systemddir}

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{appdir}

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{bindir}

%{__install} -d -m 0775 ${RPM_BUILD_ROOT}%{confdir}

%{__install} -d -m 0775 ${RPM_BUILD_ROOT}%{confdir}/Catalina/localhost

%{__install} -d -m 0775 ${RPM_BUILD_ROOT}%{confdir}/conf.d

/bin/echo "Place your custom *.conf files here. Shell expansion is supported." > ${RPM_BUILD_ROOT}%{confdir}/conf.d/README

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{libdir}

%{__install} -d -m 0775 ${RPM_BUILD_ROOT}%{logdir}

/bin/touch ${RPM_BUILD_ROOT}%{logdir}/catalina.out

%{__install} -d -m 0775 ${RPM_BUILD_ROOT}%{_localstatedir}/lib/tomcats

/bin/echo "%{name}-%{major_version}.%{minor_version}.%{micro_version} RPM installed" >> ${RPM_BUILD_ROOT}%{logdir}/catalina.out

%{__install} -d -m 0775 ${RPM_BUILD_ROOT}%{homedir}

%{__install} -d -m 0775 ${RPM_BUILD_ROOT}%{tempdir}

%{__install} -d -m 0775 ${RPM_BUILD_ROOT}%{workdir}

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_unitdir}

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_libexecdir}/%{name}

# move things into place

# First copy supporting libs to tomcat lib

pushd output/build

    %{__cp} -a bin/*.{jar,xml} ${RPM_BUILD_ROOT}%{bindir}

    %{__cp} %{SOURCE10} conf/log4j.properties

    %{__cp} -a conf/*.{policy,properties,xml} ${RPM_BUILD_ROOT}%{confdir}

    %{__cp} -a lib/*.jar ${RPM_BUILD_ROOT}%{libdir}

    %{__cp} -a webapps/* ${RPM_BUILD_ROOT}%{appdir}

popd

# javadoc

%{__cp} -a output/dist/webapps/docs/api/* ${RPM_BUILD_ROOT}%{_javadocdir}/%{name}

%{__sed} -e "s|\@\@\@TCHOME\@\@\@|%{homedir}|g" \

   -e "s|\@\@\@TCTEMP\@\@\@|%{tempdir}|g" \

   -e "s|\@\@\@LIBDIR\@\@\@|%{_libdir}|g" %{SOURCE1} \

    > ${RPM_BUILD_ROOT}%{confdir}/%{name}.conf

%{__sed} -e "s|\@\@\@TCHOME\@\@\@|%{homedir}|g" \

   -e "s|\@\@\@TCTEMP\@\@\@|%{tempdir}|g" \

   -e "s|\@\@\@LIBDIR\@\@\@|%{_libdir}|g" %{SOURCE3} \

    > ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/%{name}

%{__install} -m 0644 %{SOURCE4} \

    ${RPM_BUILD_ROOT}%{_sbindir}/%{name}

%{__install} -m 0644 %{SOURCE11} \

    ${RPM_BUILD_ROOT}%{_unitdir}/%{name}.service

%{__install} -m 0644 %{SOURCE20} \

    ${RPM_BUILD_ROOT}%{_unitdir}/%{name}-jsvc.service

# %{__ln_s} %{name} ${RPM_BUILD_ROOT}%{_sbindir}/d%{name}

%{__sed} -e "s|\@\@\@TCLOG\@\@\@|%{logdir}|g" %{SOURCE5} \

    > ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name}

%{__sed} -e "s|\@\@\@TCHOME\@\@\@|%{homedir}|g" \

   -e "s|\@\@\@TCTEMP\@\@\@|%{tempdir}|g" \

   -e "s|\@\@\@LIBDIR\@\@\@|%{_libdir}|g" %{SOURCE6} \

    > ${RPM_BUILD_ROOT}%{_bindir}/%{name}-digest

%{__sed} -e "s|\@\@\@TCHOME\@\@\@|%{homedir}|g" \

   -e "s|\@\@\@TCTEMP\@\@\@|%{tempdir}|g" \

   -e "s|\@\@\@LIBDIR\@\@\@|%{_libdir}|g" %{SOURCE7} \

    > ${RPM_BUILD_ROOT}%{_bindir}/%{name}-tool-wrapper

%{__install} -m 0644 %{SOURCE21} \

    ${RPM_BUILD_ROOT}%{_libexecdir}/%{name}/functions         

%{__install} -m 0755 %{SOURCE22} \

    ${RPM_BUILD_ROOT}%{_libexecdir}/%{name}/preamble          

%{__install} -m 0755 %{SOURCE23} \

    ${RPM_BUILD_ROOT}%{_libexecdir}/%{name}/server            

%{__install} -m 0644 %{SOURCE24} \

    ${RPM_BUILD_ROOT}%{_unitdir}/%{name}@.service 

# create jsp and servlet API symlinks

pushd ${RPM_BUILD_ROOT}%{_javadir}

   %{__mv} %{name}/jsp-api.jar %{name}-jsp-%{jspspec}-api.jar

   %{__ln_s} %{name}-jsp-%{jspspec}-api.jar %{name}-jsp-api.jar

   %{__mv} %{name}/servlet-api.jar %{name}-servlet-%{servletspec}-api.jar

   %{__ln_s} %{name}-servlet-%{servletspec}-api.jar %{name}-servlet-api.jar

   %{__mv} %{name}/el-api.jar %{name}-el-%{elspec}-api.jar

   %{__ln_s} %{name}-el-%{elspec}-api.jar %{name}-el-api.jar

popd

pushd output/build

    %{_bindir}/build-jar-repository lib apache-commons-collections \

                                        apache-commons-dbcp apache-commons-pool ecj 2>&1

    # need to use -p here with b-j-r otherwise the examples webapp fails to

    # load with a java.io.IOException

    %{_bindir}/build-jar-repository -p webapps/examples/WEB-INF/lib \

    taglibs-core.jar taglibs-standard.jar 2>&1

popd

pushd ${RPM_BUILD_ROOT}%{libdir}

    # symlink JSP and servlet API jars

    %{__ln_s} ../%{name}-jsp-%{jspspec}-api.jar .

    %{__ln_s} ../%{name}-servlet-%{servletspec}-api.jar .

    %{__ln_s} ../%{name}-el-%{elspec}-api.jar .

    %{__ln_s} $(build-classpath apache-commons-collections) commons-collections.jar

    %{__ln_s} $(build-classpath apache-commons-dbcp) commons-dbcp.jar

    %{__ln_s} $(build-classpath apache-commons-pool) commons-pool.jar

    %{__ln_s} $(build-classpath log4j) log4j.jar

    %{__ln_s} $(build-classpath ecj) jasper-jdt.jar

    # Temporary copy the juli jar here from /usr/share/java/tomcat (for maven depmap)

    %{__cp} -a ${RPM_BUILD_ROOT}%{bindir}/tomcat-juli.jar ./

    # Add extras JULI jars

    %{__mkdir} extras

    pushd extras

        %{__cp} -p %{SOURCE25} .

        %{__cp} -p %{SOURCE26} .

    popd

popd

# symlink to the FHS locations where we've installed things

pushd ${RPM_BUILD_ROOT}%{homedir}

    %{__ln_s} %{appdir} webapps

    %{__ln_s} %{confdir} conf

    %{__ln_s} %{libdir} lib

    %{__ln_s} %{logdir} logs

    %{__ln_s} %{tempdir} temp

    %{__ln_s} %{workdir} work

popd

# install sample webapp

%{__mkdir_p} ${RPM_BUILD_ROOT}%{appdir}/sample

pushd ${RPM_BUILD_ROOT}%{appdir}/sample

%{jar} xf ${RPM_BUILD_ROOT}%{appdir}/docs/appdev/sample/sample.war

popd

%{__rm} ${RPM_BUILD_ROOT}%{appdir}/docs/appdev/sample/sample.war

# Allow linking for example webapp

%{__mkdir_p} ${RPM_BUILD_ROOT}%{appdir}/examples/META-INF

pushd ${RPM_BUILD_ROOT}%{appdir}/examples/META-INF

echo ''>context.xml

echo '<Context allowLinking="true"/>'>>context.xml

popd

pushd ${RPM_BUILD_ROOT}%{appdir}/examples/WEB-INF/lib

%{__ln_s} -f $(build-classpath jakarta-taglibs-core) jstl.jar

%{__ln_s} -f $(build-classpath jakarta-taglibs-standard) standard.jar

popd

# Install the maven metadata

%{__install} -d -m 0755 ${RPM_BUILD_ROOT}%{_mavenpomdir}

pushd output/dist/src/res/maven

for pom in *.pom; do

    # fix-up version in all pom files

    sed -i 's/@MAVEN.DEPLOY.VERSION@/%{version}/g' $pom

done

# we won't install dbcp, juli-adapters and juli-extras pom files

for libname in annotations-api catalina jasper-el jasper catalina-ha; do

    %{__cp} -a %{name}-$libname.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP.%{name}-$libname.pom

    %add_maven_depmap JPP.%{name}-$libname.pom %{name}/$libname.jar

done

# servlet-api jsp-api and el-api are not in tomcat subdir, since they are widely re-used elsewhere

%{__cp} -a tomcat-jsp-api.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP-tomcat-jsp-api.pom

%add_maven_depmap JPP-tomcat-jsp-api.pom tomcat-jsp-api.jar -f "tomcat-jsp-api" -a "javax.servlet.jsp:javax.servlet.jsp-api,javax.servlet:jsp-api,org.eclipse.jetty.orbit:javax.servlet.jsp"

%{__cp} -a tomcat-el-api.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP-tomcat-el-api.pom

%add_maven_depmap JPP-tomcat-el-api.pom tomcat-el-api.jar -f "tomcat-el-api" -a "javax.el:javax.el-api,javax.el:el-api,org.eclipse.jetty.orbit:javax.el"

%{__cp} -a tomcat-servlet-api.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP-tomcat-servlet-api.pom

# Generate a depmap fragment javax.servlet:servlet-api pointing to

# tomcat-servlet-3.0-api for backwards compatibility

# also provide jetty depmap (originally in jetty package, but it's cleaner to have it here

%add_maven_depmap JPP-tomcat-servlet-api.pom tomcat-servlet-api.jar -f "tomcat-servlet-api" -a "javax.servlet:servlet-api,javax.servlet:javax.servlet-api,org.mortbay.jetty:servlet-api,org.eclipse.jetty.orbit:javax.servlet"

# two special pom where jar files have different names

%{__cp} -a tomcat-tribes.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP.%{name}-catalina-tribes.pom

%add_maven_depmap JPP.%{name}-catalina-tribes.pom %{name}/catalina-tribes.jar

%{__cp} -a tomcat-coyote.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP.%{name}-tomcat-coyote.pom

%add_maven_depmap JPP.%{name}-tomcat-coyote.pom %{name}/tomcat-coyote.jar

%{__cp} -a tomcat-juli.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP.%{name}-tomcat-juli.pom

%add_maven_depmap JPP.%{name}-tomcat-juli.pom %{name}/tomcat-juli.jar

%{__cp} -a tomcat-api.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP.%{name}-tomcat-api.pom

%add_maven_depmap JPP.%{name}-tomcat-api.pom %{name}/tomcat-api.jar

%{__cp} -a tomcat-util.pom ${RPM_BUILD_ROOT}%{_mavenpomdir}/JPP.%{name}-tomcat-util.pom

%add_maven_depmap JPP.%{name}-tomcat-util.pom %{name}/tomcat-util.jar

# replace temporary copy with link

%{__ln_s} -f %{bindir}/tomcat-juli.jar ${RPM_BUILD_ROOT}%{libdir}/

%pre

# add the tomcat user and group

getent group tomcat >/dev/null || %{_sbindir}/groupadd -f -g %{tcuid} -r tomcat

if ! getent passwd tomcat >/dev/null ; then

    if ! getent passwd %{tcuid} >/dev/null ; then

        %{_sbindir}/useradd -r -u %{tcuid} -g tomcat -d %{homedir} -s /sbin/nologin -c "Apache Tomcat" tomcat

        # Tomcat uses a reserved ID, so there should never be an else

    fi

fi

exit 0

%post

# install but don't activate

%systemd_post %{name}.service

%post jsp-%{jspspec}-api

%{_sbindir}/update-alternatives --install %{_javadir}/jsp.jar jsp \

    %{_javadir}/%{name}-jsp-%{jspspec}-api.jar 20200

%post servlet-%{servletspec}-api

%{_sbindir}/update-alternatives --install %{_javadir}/servlet.jar servlet \

    %{_javadir}/%{name}-servlet-%{servletspec}-api.jar 30000

%post el-%{elspec}-api

%{_sbindir}/update-alternatives --install %{_javadir}/elspec.jar elspec \

   %{_javadir}/%{name}-el-%{elspec}-api.jar 20300

%preun

# clean tempdir and workdir on removal or upgrade

%{__rm} -rf %{workdir}/* %{tempdir}/*

%systemd_preun %{name}.service

%postun

%systemd_postun_with_restart %{name}.service 

%postun jsp-%{jspspec}-api

if [ "$1" = "0" ]; then

    %{_sbindir}/update-alternatives --remove jsp \

        %{_javadir}/%{name}-jsp-%{jspspec}-api.jar

fi

%postun servlet-%{servletspec}-api

if [ "$1" = "0" ]; then

    %{_sbindir}/update-alternatives --remove servlet \

        %{_javadir}/%{name}-servlet-%{servletspec}-api.jar

fi

%postun el-%{elspec}-api

if [ "$1" = "0" ]; then

    %{_sbindir}/update-alternatives --remove elspec \

        %{_javadir}/%{name}-el-%{elspec}-api.jar

fi

%triggerun -- tomcat < 0:7.0.22-2

/usr/bin/systemd-sysv-convert -- save tomcat > /dev/null 2>&1 || :

# Run these becasue the SysV package being removed won't do them

/sbin/chkconfig --del tomcat > /dev/null 2>&1 || :

/bin/systemctl try-restart tomcat.service > /dev/null 2>&1 || :

%files

%defattr(0664,root,tomcat,0755)

%doc {LICENSE,NOTICE,RELEASE*}

%attr(0755,root,root) %{_bindir}/%{name}-digest

%attr(0755,root,root) %{_bindir}/%{name}-tool-wrapper

%attr(0755,root,root) %{_sbindir}/%{name}

%attr(0644,root,root) %{_unitdir}/%{name}.service

%attr(0644,root,root) %{_unitdir}/%{name}@.service

%attr(0755,root,root) %dir %{_libexecdir}/%{name}

%attr(0755,root,root) %dir %{_localstatedir}/lib/tomcats

%attr(0644,root,root) %{_libexecdir}/%{name}/functions

%attr(0755,root,root) %{_libexecdir}/%{name}/preamble

%attr(0755,root,root) %{_libexecdir}/%{name}/server

%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}

%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/%{name}

%attr(0755,root,tomcat) %dir %{basedir}

%attr(0755,root,tomcat) %dir %{confdir}

%defattr(0664,tomcat,root,0770)

%attr(0770,tomcat,root) %dir %{logdir}

%defattr(0664,root,tomcat,0770)

%attr(0660,tomcat,tomcat) %verify(not size md5 mtime) %{logdir}/catalina.out

%attr(0770,root,tomcat) %dir %{cachedir}

%attr(0770,root,tomcat) %dir %{tempdir}

%attr(0770,root,tomcat) %dir %{workdir}

%defattr(0644,root,tomcat,0775)

%attr(0775,root,tomcat) %dir %{appdir}

%attr(0775,root,tomcat) %dir %{confdir}/Catalina

%attr(0775,root,tomcat) %dir %{confdir}/Catalina/localhost

%attr(0755,root,tomcat) %dir %{confdir}/conf.d

%{confdir}/conf.d/README

%config(noreplace) %{confdir}/%{name}.conf

%config(noreplace) %{confdir}/*.policy

%config(noreplace) %{confdir}/*.properties

%config(noreplace) %{confdir}/context.xml

%config(noreplace) %{confdir}/server.xml

%attr(0640,root,tomcat) %config(noreplace) %{confdir}/tomcat-users.xml

%config(noreplace) %{confdir}/web.xml

%dir %{homedir}

%{bindir}/bootstrap.jar

%{bindir}/catalina-tasks.xml

%{homedir}/lib

%{homedir}/temp

%{homedir}/webapps

%{homedir}/work

%{homedir}/logs

%{homedir}/conf

%files admin-webapps

%defattr(0664,root,tomcat,0755)

%{appdir}/host-manager

%{appdir}/manager

%config(noreplace) %{appdir}/manager/WEB-INF/web.xml

%config(noreplace) %{appdir}/host-manager/WEB-INF/web.xml

%files docs-webapp

%defattr(-,root,root,-)

%{appdir}/docs

%files javadoc

%defattr(-,root,root,-)

%{_javadocdir}/%{name}

%files jsp-%{jspspec}-api

%defattr(-,root,root,-)

%{_javadir}/%{name}-jsp-%{jspspec}*.jar

%{_javadir}/%{name}-jsp-api.jar

%{_mavenpomdir}/JPP-%{name}-jsp-api.pom

%{_mavendepmapfragdir}/%{name}-tomcat-jsp-api

%files lib

%defattr(-,root,root,-)

%{libdir}

%{bindir}/tomcat-juli.jar

%{_mavendepmapfragdir}/%{name}

%{_mavenpomdir}/JPP.%{name}-annotations-api.pom

%{_mavenpomdir}/JPP.%{name}-catalina-ha.pom

%{_mavenpomdir}/JPP.%{name}-catalina-tribes.pom

%{_mavenpomdir}/JPP.%{name}-catalina.pom

%{_mavenpomdir}/JPP.%{name}-jasper-el.pom

%{_mavenpomdir}/JPP.%{name}-jasper.pom

%{_mavenpomdir}/JPP.%{name}-tomcat-api.pom

%{_mavenpomdir}/JPP.%{name}-tomcat-juli.pom

%{_mavenpomdir}/JPP.%{name}-tomcat-coyote.pom

%{_mavenpomdir}/JPP.%{name}-tomcat-util.pom

%exclude %{libdir}/%{name}-el-%{elspec}-api.jar

%files servlet-%{servletspec}-api

%defattr(-,root,root,-)

%doc LICENSE

%{_javadir}/%{name}-servlet-%{servletspec}*.jar

%{_javadir}/%{name}-servlet-api.jar

%{_mavendepmapfragdir}/%{name}-tomcat-servlet-api

%{_mavenpomdir}/JPP-%{name}-servlet-api.pom

%files el-%{elspec}-api

%defattr(-,root,root,-)

%doc LICENSE

%{_javadir}/%{name}-el-%{elspec}-api.jar

%{_javadir}/%{name}-el-api.jar

%{libdir}/%{name}-el-%{elspec}-api.jar

%{_mavenpomdir}/JPP-%{name}-el-api.pom

%{_mavendepmapfragdir}/%{name}-tomcat-el-api

%files webapps

%defattr(0644,tomcat,tomcat,0755)

%{appdir}/ROOT

%{appdir}/examples

%{appdir}/sample

%files jsvc

%defattr(755,root,root,0755)

%attr(0644,root,root) %{_unitdir}/%{name}-jsvc.service

%changelog

* Tue Feb 12 2019 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-9

- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet

* Fri Oct 12 2018 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-8

- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS

* Tue Jul 24 2018 Jean-Frederic Clere <jclere@redhat.com> 0:7.0.76-7

- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session

* Wed Nov 08 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-6

- Related: rhbz#1505762 Remove erroneous useradd

* Tue Nov 07 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-5

- Resolves: rhbz#1485453 man page uid and gid mismatch for service accounts

- Resolves: rhbz#1505762 Problem to start tomcat with a user whose group has a name different to the user

* Mon Nov 06 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-3

- Resolves: rhbz#1498343 CVE-2017-12615 CVE-2017-12617 tomcat: various flaws

- Resolves: rhbz#1495655 CVE-2017-7674 tomcat: Vary header not added by CORS filter leading to cache poisoning

- Resolves: rhbz#1470597 CVE-2017-5647 Add follow up revision

* Thu Jun 08 2017 Coty Sutherland <csutherl@redhat.com> 0:7.0.76-2

- Resolves: rhbz#1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism