Blame SPECS/uid_wrapper.spec

0f1ae7
Name:           uid_wrapper
0f1ae7
Version:        1.2.4
0f1ae7
Release:        4%{?dist}
0f1ae7
0f1ae7
Summary:        A wrapper for privilege separation
0f1ae7
License:        GPLv3+
0f1ae7
Url:            http://cwrap.org/
0f1ae7
0f1ae7
Source0:        https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz
0f1ae7
0f1ae7
BuildRequires:  gcc
0f1ae7
BuildRequires:  cmake
0f1ae7
BuildRequires:  libcmocka-devel
0f1ae7
0f1ae7
%description
0f1ae7
Some projects like a file server need privilege separation to be able to switch
0f1ae7
to the connection user and do file operations. uid_wrapper convincingly lies
0f1ae7
to the application letting it believe it is operating as root and even
0f1ae7
switching between UIDs and GIDs as needed.
0f1ae7
0f1ae7
To use it set the following environment variables:
0f1ae7
0f1ae7
LD_PRELOAD=libuid_wrapper.so
0f1ae7
UID_WRAPPER=1
0f1ae7
0f1ae7
This package doesn't have a devel package cause this project is for
0f1ae7
development/testing.
0f1ae7
0f1ae7
%prep
0f1ae7
%setup -q
0f1ae7
0f1ae7
%build
0f1ae7
if test ! -e "obj"; then
0f1ae7
  mkdir obj
0f1ae7
fi
0f1ae7
pushd obj
0f1ae7
%cmake \
0f1ae7
  -DUNIT_TESTING=ON \
0f1ae7
  %{_builddir}/%{name}-%{version}
0f1ae7
0f1ae7
make %{?_smp_mflags} VERBOSE=1
0f1ae7
popd
0f1ae7
0f1ae7
%install
0f1ae7
pushd obj
0f1ae7
make DESTDIR=%{buildroot} install
0f1ae7
popd
0f1ae7
0f1ae7
%ldconfig_scriptlets
0f1ae7
0f1ae7
%check
0f1ae7
pushd obj
0f1ae7
make test || cat $(find Testing -name "*.log")
0f1ae7
popd
0f1ae7
0f1ae7
%files
0f1ae7
%doc AUTHORS README ChangeLog COPYING
0f1ae7
%{_libdir}/libuid_wrapper.so*
0f1ae7
%dir %{_libdir}/cmake
0f1ae7
%dir %{_libdir}/cmake/uid_wrapper
0f1ae7
%{_libdir}/cmake/uid_wrapper/uid_wrapper-config-version.cmake
0f1ae7
%{_libdir}/cmake/uid_wrapper/uid_wrapper-config.cmake
0f1ae7
%dir %{_libdir}/pkgconfig
0f1ae7
%{_libdir}/pkgconfig/uid_wrapper.pc
0f1ae7
%{_mandir}/man1/uid_wrapper.1*
0f1ae7
0f1ae7
%changelog
0f1ae7
* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-4
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
0f1ae7
0f1ae7
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-3
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
0f1ae7
0f1ae7
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-2
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
0f1ae7
0f1ae7
* Mon Jul 31 2017 Andreas Schneider <asn@redhat.com> - 1.2.4-1
0f1ae7
- Update to version 1.2.4
0f1ae7
  * Added deadlock workaround for glibc < 2.24
0f1ae7
  * Fixed a possible deadlock bug if uid_wrapper is turned off
0f1ae7
  * Logging is always turned on now
0f1ae7
  * Fixed a memory leak
0f1ae7
  * Limited number of groups during fork+exec
0f1ae7
0f1ae7
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.2-2
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
0f1ae7
0f1ae7
* Thu Jul 13 2017 Andreas Schneider <asn@redhat.com> - 1.2.2-1
0f1ae7
- Update to version 1.2.2:
0f1ae7
  * Added support for fork'ed and then exec'ed processes
0f1ae7
  * Added support for Alpha
0f1ae7
0f1ae7
* Tue Jun 27 2017 Nils Philippsen <nils@redhat.com> - 1.2.1-3
0f1ae7
- drop requirements on cmake, pkgconfig and rather own the directories for the
0f1ae7
  files augmenting these packages
0f1ae7
0f1ae7
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.1-2
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
0f1ae7
0f1ae7
* Wed Mar 23 2016 Andreas Schneider <asn@redhat.com> - 1.2.1-1
0f1ae7
- Update to version 1.2.1
0f1ae7
  * Documented missing options.
0f1ae7
  * Fixed a comipilation issue with -O3.
0f1ae7
0f1ae7
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-2
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
0f1ae7
0f1ae7
* Thu Oct 29 2015 Andreas Schneider <asn@redhat.com> - 1.2.0-1
0f1ae7
- Update to version 1.2.0
0f1ae7
  * Added privilege checks for all set*uid and set*gid functions.
0f1ae7
  * Added a lot more and accurate tests which work as root.
0f1ae7
  * Fixed some minor issues
0f1ae7
0f1ae7
* Wed Sep 02 2015 Andreas Schneider <asn@redhat.com> - 1.1.1-1
0f1ae7
- Update to version 1.1.1
0f1ae7
0f1ae7
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1.0-2
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
0f1ae7
0f1ae7
* Wed Jan 21 2015 Andreas Schneider <asn@redhat.com> - 1.1.0-1
0f1ae7
- Update to version 1.1.0
0f1ae7
0f1ae7
* Mon Dec 15 2014 Michael Adam <madam@redhat.com> - 1.0.2-5
0f1ae7
- Fix format errors in changelog.
0f1ae7
- Require cmake.
0f1ae7
- Don't own _libdir/pkgconfig, and require pkgconfig instead.
0f1ae7
0f1ae7
* Thu Oct 02 2014 Andreas Schneider <asn@redhat.com> - 1.0.2-4
0f1ae7
- resolves: #1146410 - Do not own /usr/lib64/cmake.
0f1ae7
0f1ae7
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.2-3
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
0f1ae7
0f1ae7
* Mon Aug 04 2014 Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 1.0.2-2
0f1ae7
- Handle lack of SYS_access on AArch64
0f1ae7
0f1ae7
* Thu Jul 31 2014 Andreas Schneider <asn@redhat.com> - 1.0.2-1
0f1ae7
- Update to version 1.0.2.
0f1ae7
0f1ae7
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.1-4
0f1ae7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
0f1ae7
0f1ae7
* Tue Mar 11 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-3
0f1ae7
- Fix some typos.
0f1ae7
- resolves: #1060910 - Fedora import
0f1ae7
0f1ae7
* Tue Feb 11 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-2
0f1ae7
- Remove Group
0f1ae7
- Remove glibc-devel build requirement
0f1ae7
- Do not create a subpackage.
0f1ae7
0f1ae7
* Tue Feb 04 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-1
0f1ae7
- Update to version 1.0.1
0f1ae7
  * Added --libs to pkg-config.
0f1ae7
  * Added socket_wrapper-config.cmake
0f1ae7
  * Fixed a bug packaging the obj directory.
0f1ae7
0f1ae7
* Mon Feb 03 2014 Andreas Schneider <asn@redhat.com> - 1.0.0-1
0f1ae7
- Initial version 1.0.0