rpms/clevis
7
0
Fork 0
Code Issues Pull Requests Releases Activity

New upstream release

Browse Source
This commit is contained in:
Nathaniel McCallum 2017-06-27 07:28:46 -04:00
parent 042f0905c4
commit 5fd422d0ac
3 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored
View File

@ -1 +1 @@
/clevis-5.tar.bz2 /clevis-6.tar.bz2

15
clevis.spec
View File

@ -1,7 +1,7 @@
%global _hardened_build 1 %global _hardened_build 1
Name: clevis Name: clevis
Version: 5 Version: 6
Release: 1%{?dist} Release: 1%{?dist}
Summary: Automated decryption framework Summary: Automated decryption framework
@ -24,6 +24,7 @@ BuildRequires: curl
Requires: coreutils Requires: coreutils
Requires: jose >= 8 Requires: jose >= 8
Requires: curl Requires: curl
Requires(pre): shadow-utils
%description %description
Clevis is a framework for automated decryption. It allows you to encrypt Clevis is a framework for automated decryption. It allows you to encrypt
@ -59,7 +60,6 @@ Automatically unlocks LUKSv1 block devices in early boot.
%package udisks2 %package udisks2
Summary: UDisks2/Storaged integration for clevis Summary: UDisks2/Storaged integration for clevis
Requires: %{name}-luks%{?_isa} = %{version}-%{release} Requires: %{name}-luks%{?_isa} = %{version}-%{release}
Requires(pre): shadow-utils
%description udisks2 %description udisks2
Automatically unlocks LUKSv1 block devices in desktop environments that Automatically unlocks LUKSv1 block devices in desktop environments that
@ -69,20 +69,18 @@ use UDisks2 or storaged (like GNOME).
%setup -q %setup -q
%build %build
%configure %configure --enable-user=clevis --enable-group=clevis
%make_build V=1 %make_build V=1
%install %install
%make_install %make_install
%{__sed} -i "s|^\(Exec=.*/clevis-luks-udisks2\)$|\1 -u %{name} -g %{name}|" \
%{buildroot}/%{_sysconfdir}/xdg/autostart/%{name}-luks-udisks2.desktop
%check %check
desktop-file-validate \ desktop-file-validate \
%{buildroot}/%{_sysconfdir}/xdg/autostart/%{name}-luks-udisks2.desktop %{buildroot}/%{_sysconfdir}/xdg/autostart/%{name}-luks-udisks2.desktop
%make_build check %make_build check
%pre udisks2 %pre
getent group %{name} >/dev/null || groupadd -r %{name} getent group %{name} >/dev/null || groupadd -r %{name}
getent passwd %{name} >/dev/null || \ getent passwd %{name} >/dev/null || \
useradd -r -g %{name} -d %{_localstatedir}/cache/%{name} -s /sbin/nologin \ useradd -r -g %{name} -d %{_localstatedir}/cache/%{name} -s /sbin/nologin \
@ -117,6 +115,11 @@ exit 0
%attr(4755, root, root) %{_libexecdir}/%{name}-luks-udisks2 %attr(4755, root, root) %{_libexecdir}/%{name}-luks-udisks2
%changelog %changelog
* Tue Jun 27 2017 Nathaniel McCallum <npmccallum@redhat.com> - 6-1
- New upstream release
- Specify unprivileged user/group during configuration
- Move clevis user/group creation to base clevis package
* Mon Jun 26 2017 Nathaniel McCallum <npmccallum@redhat.com> - 5-1 * Mon Jun 26 2017 Nathaniel McCallum <npmccallum@redhat.com> - 5-1
- New upstream release - New upstream release
- Run clevis decryption from udisks2 under an unprivileged user - Run clevis decryption from udisks2 under an unprivileged user

2
sources
View File

@ -1 +1 @@
SHA512 (clevis-5.tar.bz2) = 2679b2f9575a98eb325202f899d34cbe1e32de7cb06d58178a7890e5ca477f3c8761050db1751812b220ee1321cf7f5a24a819c2c88b93619b255c5def03ce70 SHA512 (clevis-6.tar.bz2) = 5a465aa23f0559fc2a1c22b54992ba799e8528fcb62a0b3d9d1874a0ba4b2ee9307619837089bb811beb20fe337d5c1d3f7dfa66fa500a2209cae96027a0864b