From d81259178600f27415bd979a0d8307271a18cac0 Mon Sep 17 00:00:00 2001 From: David King Date: Sun, 13 Jun 2021 16:51:09 +0100 Subject: [PATCH] Verify GPG signature of sources Additionally, use pkgconfig syntax for BuildRequires. --- dbus-python.spec | 17 +++++++++++++---- ...6EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg | Bin 0 -> 10012 bytes 2 files changed, 13 insertions(+), 4 deletions(-) create mode 100644 gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg diff --git a/dbus-python.spec b/dbus-python.spec index 42ebf9f..f8bd9d9 100644 --- a/dbus-python.spec +++ b/dbus-python.spec @@ -1,20 +1,24 @@ -Summary: D-Bus Python Bindings Name: dbus-python Version: 1.2.16 -Release: 5%{?dist} +Release: 6%{?dist} +Summary: D-Bus Python Bindings License: MIT URL: http://www.freedesktop.org/wiki/Software/DBusBindings/ Source0: http://dbus.freedesktop.org/releases/dbus-python/%{name}-%{version}.tar.gz Source1: http://dbus.freedesktop.org/releases/dbus-python/%{name}-%{version}.tar.gz.asc +# gpg --keyserver keyring.debian.org --recv-keys 36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F +# gpg --export --export-options export-minimal > gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg +Source2: gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg # borrow centos7 patch to use sitearch properly Patch0: 0001-Move-python-modules-to-architecture-specific-directo.patch # https://bugzilla.redhat.com/show_bug.cgi?id=1788491 Patch1: python39.patch -BuildRequires: dbus-devel -BuildRequires: glib2-devel +BuildRequires: gnupg2 +BuildRequires: pkgconfig(dbus-1) +BuildRequires: pkgconfig(glib-2.0) # for %%check BuildRequires: dbus-x11 BuildRequires: python%{python3_pkgversion}-gobject @@ -45,6 +49,7 @@ Headers and static libraries for hooking up custom mainloops to the dbus python bindings. %prep +%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}' %autosetup -p1 # For new arches (aarch64/ppc64le), and patch0 @@ -80,6 +85,10 @@ make check -k || (cat test-suite.log && false) %{_libdir}/pkgconfig/dbus-python.pc %changelog +* Sun Jun 13 2021 David King - 1.2.16-6 +- Verify GPG signature of sources +- Use pkgconfig for BuildRequires + * Thu Jun 03 2021 Python Maint - 1.2.16-5 - Rebuilt for Python 3.10 diff --git a/gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg b/gpgkey-36EC5A6448A4F5EF79BEFE98E05AE1478F814C4F.gpg new file mode 100644 index 0000000000000000000000000000000000000000..eb3bc760fa3886d23b980d5bb77d3d2985fb223c GIT binary patch literal 10012 zcmbt(WmH|uy6jpDcXx;2?(XjH5^UkFL4&(n2*D-6-CaX)cMA~QouH5Gea^Y(T^r+# z_qXT#@r~;0s_v@KAS6gRNV`EGDj;`}FjQfUJgX@-I4!Wwv^-(fii}rW2#qs zqVz0cu_s7yI~>aDMAj}InZcG>!~)*o?3ZGEQMl8uF5Vgg#7xh8MpM@hWlfsKw3G}_BHZ(g{yw_(M(E^#&fOkBkN*k+q4*!`g^Hy?#CM>OLH zVE0@mV_Q+Oq9k+kyb$jo%-gZJrR%O&(v&_Zp`2Np&h0lW116NIjkESVp z-kEr?r~bT3a=7_uR z=W5}sX@te5VdE-A7!>rAHTx2}It^8Zu3`Drbl1-qC?n(M-$Q&CME2D&T5w<{@GZHnlc!U~+V^ z6p93CKw<#l0YV@G2oNz4gcAUT00#>L0fhw*2a5oO4T1myu*o2o(=QERo%=I%4__G+ z_h0GE21gU1Kn7DBB2aLY>BHIpcsSI5u45#l0s@Rv8hSf~gmv#{)t7t%xfQfCi4@}B zL%4+tn^6SSdFt?VWTV0=Pro}(`^ixbm;a-9QjAWFBfBZFx_-{3Tlk~bvGY)}2`-rj zWkxAVZVN|*&RvNsYMkoV@#ij~PmucB{APmfuSTJ8w2EO$u!=!$5~Uo*0eGQCGR$&X zrEc_|;5~6zsrZMw;^bRX%ajvxHMO>82U7&x5M|2RZw>$)j8EWmHIv(>TM%;&WtbsR zzMYFJ=AC9oy&tPt>l6B|9Ic%_rhOuNs>9Q)yIjpCf&FXjc=b zFs@LR);3Y7V`90W;nxs%JNN#PieqoqhpH4iy+j04gPFSJOPhC9zW1MihDr7u6t7j6 z!#_)Yh#%$YJhL`9_>767m_HQ$x}B=0`kQ!iCiY<0|DYd@siTVnDJw4zJ0lAZBO52} z|1bU6|1162^if{b)+y}8kn%ih$8Sn|7RWrXenlD3Upep)@cPB`1MdXhrTlKIS;WIN z^^o1loywUQCZXgqrV5w|V`M#);dX_vzbLoXQZaW`ndnqa0d1|`=2-tcEqVA;>|9kcBp9eRTX zrZZMADac2fWKWEx*jtM^F0$YjofXC$#J6#bmjlW>%4Ca*;GIqZpsVN_EYu@PZRZCe>gZicrp@rS<(2UWgEkb`<^S5m6lP z=mrCF>%tyCxC0d{7v^~OsO7)dyoBMPouo8P>@q*L3o9l1V07gN6~n0KOS+5&C;}G= z5mnVpfVi?JkUlPjHz zBSs?-u|y5kIqN=+e7H%~&SCSwQn@2pGbn5;95r3Zv}x&eTk|DrQ4m;?w;0ThzI1Xf zb;tFq6;_QZipq0Fa@^#wD%D$@kXH=Q`%ux7p!Lc}Yo=Jc2es0qam);?j_=&#fX!{1 zccjKWuBZ8Lb~8MpV&Y)#XwPKk$mDMOrhnRh>7VGo^bdpw{C|@`;{VFQgR4?${=qqlRZrV>>Lg zPYGJ0iS8q+c{gUV-#xM^zrth$8sCO8*1Ye%8&*Zd-$fsw-ZV-T&VUOoa-sy?i)B+b zl04N`uRSm}F6gW>E0A^dZDdWkqV7@S7P-J_31Guv9o5%9Zie6EkHaycadHQ#H=k=_k~EYM1vEKNr@awPsc!Le|X+vs9ADUyk-Q zHouWPRsURTrZ9DLYQoL7x|{SM{K;X>TFGPtQqZi-$s*BAW7`H$4>mxdVe4Lz2d_+((4u14h1(~aRr-$%}GtYNZG}C zxVYIwS)@34x!Ad-Bw4sPM8(-zq&V3`IoL&6B{{^nxy4vGdH>y_i|A2as9(Bwk1l+n zhkmucW+20_$H4V@zTg4BbR<>fwCu%C#|rZcgcnkBSV9(r zcuLjmM-QnxXqwMh*0lgysVr|?o?BG5O24=ey5hU}E(+Vz7z8G_EwPL2A%bILjzf$CdW$mV%J%VsWX$abFom5*wsWpDaAB17$PZiZLw@A*txnIHxvU|ou&cqUFaj-&@ ze4f*zII>RdGRU=^w1im`iVMuzslr=HvFJeckHa8Zl}4>#bnF@b*^duV&9M zB{p@AwQQFCRtT+aVc9}Z)_A>cYlFLWE!ST*3*SBlWQ2-1l>y6?jeM5@FWwe{dgTopG z2*YV3P(=xj6MX8vSAIu5R`%?xz}P(Dt80Ht+ouQ8-K(AX0NznlF8}R=g5q3`w{27O zb;Ss*hLIU7F(|t5fS_O`;I}V-+OdyPAjga)K-M;q3&*7!M0K0G_ANB-%0AKtJePFW zVX#SB?vQfa`K@vIInj^jUVZ1K+>kN*ImH2gqjh=Q=E2YQ#IGIt5LXHGaSu@b63RpN z(KTbbt7}MU0c@S5=3nefOay*y}m^ z8yV(R7d_HKkJ?w(XyY&*75wCaxW=pv=T5)NLiY!ZO}7m=jIkT1KyXHF-#-$cZz}Jk z=yb8j&ZX^(<&K|fA2x;m5Vj;hqcfJ27KI;)W7YaR<|kpjpA% zBC;#DUiH_d!AQGvG{CMLy=p&`NbJy%1q63UyLpViD4H@R!Kea!OnpXlf9x&iCP9~$ zK0=iV-YESLgP(=geoR)2Xi5x?#U|#kKN5>$QOxh6&Cf|7Xp-#jXCUwq2Jt34Vl(pXp|);yAm{f}NcUQ9R8S-#;cGA0jrGbZA!mt{dvcH+C#ESd15B#Xca@iu zeoES``u6WNoH64@4sFkb&c+46U70Wwb@uzx<;4jMdX$uqt45TapRsntw)+dI5i- z7`I}Rj$5Ea8IZ5EIpYpLWf@+&oq?pbZKFFY)2)l*GVMxX@``Q^(a3G9#1MR^`4oRO zvT}(3F6vcHMf2+l&gepOijbgRft6pw5QiPzZ)w^l+ugbSKxg#AGOu!0%kB%s0L@3d z$Q^=t;}!M0o8g|{=~YU1SyPzyczOFI6BQ3wOkBdL z_C7{L=F^B!{a|O~%mKLmc!JZbpWZ9vcWGCMaYEx2bNLnU>!l5H>CxIK9tYx)iUYhc zY2}%)@BH0>5y*ItmYnf>p`(Sz3V1ZKzL?uBe==2OCU9;k`$KkW$W^BQr%S$v zS38y}$)JcOS01a@l(|p}tS`+*H}ATh2BR~`5L)orC2KLD$ab)n!ZC1>TB-8}6*9eG zL2Kw(#zv}i2BIOPXQECEIW;nB=^%VFe(xvjKt1W&gAFocqEGjUx_V1ahrVm|>uyRW z($CsMO1)AUycri*qK*c}+~^XtIZL1NPrW-U<8xim1%4@EDrd`8M;d9o`-UpTA2IoL z_kQO%jWAks^OAU*J+zmVbvo6QC7p3L;>%2Wuy7N4)S_XUO55>{>Ntdjv1QgTUdV5^ z6k=fd^$4*R($5q^K@(L4ozo)(@l$%R?<`9g>0|p*96e!fS)KP1sv=0zejj-_N6iW$ zRygya*!#ofLzQ%JG;TxVlKa3CdbD2g->+{sht4j36AkcmR6fa?|qSJs@iyx^T86P!SU}k+sIMr2;|)CyBmat zTe{+;y}E3NmarqpWN&ZsnH5`JM`!(wq=Gdz3Lf#!3UgjPemU8IxQh{w`pqD9FN2&Yd2Wav`+{DY$aRe2}qf`(D? z9<|$p(Kde`KVHAHhjB+})JzjuF~nJ_N?2UGC<^EvD5w>Fqdis)$8^_A%#RWKPTpPn zqbr9qNG^e*>vRc;bKMdv@tzAs-(sbIVy0%W)J53iJ)dPZHzc@V?t|r&*$|(AuBs`Y zid7+&{4D5Qq;fKZ0S0>8Xr9o~G;B(T!%87QEs6Y14H?VREqmB+9=FhQ;E5F_o836x zafkj}pgorc|4ut@`MfuO4drgF1dd_)!QUp-UioH1b++!#F%c|hX(4h^#T7C8nLU^o z4`Gz-BU|IXj;q1T@=*H^-_?SsuG}3J0%bp3)aeil-6T z;IkzO-eHrQ(n0(TPvy{c%1q_u=N)6!l^c9NZXj-aN=d5M&h58nd)0tp`LbZecey7#ldovfDW;`TU zrc!C{$c-V3`;|xAheJ^!=UdxQOVZrWXnmRMeaKam4Ok!@`(MH%J}C0CB?|=2*$0Fe z;mh`Jr`R(AVgyvJv{PG}em;NT%l8Bc5r6?Ex6b`sX*cjuq4Geu}AngN5XyT&)Sel@WxZ9}10`i8Sp~4BBC@c$m zWxl^8r9^6{sIezsi=QePemzrlsC59CbXV>)ppRma#|8b|C2%|Vj*p;TTm5sW2Yd3X zr=U!X41Dwfn1QoFFFoS^w;8tF4RV-Kll4xSaKaAMw~-kbt%H)Vrxx&LoWzE{sc{#? zg)2sXHf%sw__=oXmnYW`p?y@#!LD9CDu!Um*CayetK`X}z|X({kWK z?6G_~5`%(-^Wsaliap465|Z(rZ`)KMG7apk8Qa?!;B(^XoDEJW?C5lS#@Ylx)7BHI zfZf0@e^*MbZ&lKtILlSU%*D%z$<0wH63G9Sq=EpH|4LG!|7wyz&{(h_ICuoeKV1^k zTiiNn`xdeOIclQqG%ufFvs?t&U|wZqcQ;TJo;+T@p2*-6G?3CxghfDfM|O0xoeooV zULlIG+C=5f=`hhDy_e9jTz9#8$yP~-lNz$f%d%@~NXoCenV5wg$^5uHBnZqG8{ekW zTc0pR95>%%RW3z-aZ2Vw4QY5^Zb=Vx>!Q@YfeaAIgSLGz>io`HMKN55&s4tQ90RC% zNI}-MgAxVIgTm?X@vVX-9A-pYe&?T3-y*J~Xo)*SGC-{9tPqYtL^>NGwx5qk@8t(g z>U`X_$;w+b{&a1PsEnF@v*1ztibII>JaGj7C2DtHlO@}@qvfG5dtp7PifvL`_yr9_ z4*ij*t|RBCrB$NESJh20=G6%nb%>4#3EPxCO zq}811@CNl?S@j=`-yjD4h4J4t-oFDJeGKy=Bx0G3tV-JxlW~@`E**|>y!oxq2XCW3 z?$`I#sGVJkDNU>jJ)~#^?Ha?$lM`nNh9YXF)!NiA7<9|Bk9;sp5p-7PdH;w0@M2F-C6#_8L-<-4g78Bd$i zoJ@+z6R$8UPd=N(sY;~t<9{-MfZ$RJ{0z*8^)z)-i0f##_``o8>KaZASp%?eRkKV=fRS$Tu`R#+CJn%-rQgdz_+#0JNORGo& zfIyl>Ko&u;&u2oEu8-^YV$&QN%Jt2K)`)-{C5iPBW|twtabAWAmze0*3-QX+dcOZW z360uY-Y#R}M(XM4VoM6PH?g*RJD?u_7*xasY;I-Z_7>&a3;km@VknTfT1xcW8U2S4 zLSTU){u=PFp8d}O{pXC7-GFRnoYJ3^GDdY5)ZVR+bUn4mg6&BCh z((5%?1}nucI|>9y>n(#noJme@hP|F>4oOpH4-KmdzsBjkYA)~m_M}o~=HP4zW>m(2 z?Z(8!4EF!c+DuHI$%01G;abF44Z&*qTs-3%fkM~j)G8|$d$4GaOePJ0fPw_{)H*gJ zVd!1j#2&Cu=hB~T^>&k{=AwQX$a;dY17d_9*fn@Ua)}ORQb%_9U2w9YCW^(sUZ_eD zs!lI5HnZ?k^Qw`e>CW4UVX^ahwQKi2h(Vp;KWA6;1a-0y$JIXC^WYk4xO(5gb%f?L zVrM8SW~q5M>=mW(vnrpCc3cTZC_&=BaRK@-EE(6F7`^66xG6vF=WN(^DyGjWI@ZFIA!BE=QelgvwhY;^l_OiBcuF~Jks z202=T5Ack+Y_h@>o6z#4GQNC}PMCJ;uuUIj{C?9eDEs#<8ff(wz;IBYKd^uZKtS66 z;BL3!pWNmz`2T$ULu)LZXewRXLqiENSU?>{BC4j`z{qXC>$kj)%%hP#hcJw%+)vLd zJUU59W!de4(Vd!!Jvn}pI26B3cYN63kZ5%D@LN$kJML@hAP&L)%cL|4lh`RLw%l?({f z7kAS7HgqqEuPW_J%1Ux-X(>bMaP*TD#2V1Ulj~A`$*|z1@oTSy>Sv^(oI(mT8He_^C?LoE&TJtt(opvk;}w$zZAXSuswn{=i^OM| zs^Pw91lso@i?4ZKAE6*5^B>f+dZS)jcc)rseO&9#+PL2P!yKh$H}#|Lyz>|Y(}J(l z&+6vgIqKE~Y9SG7kz^I5e!{sA0cs)!-t+ffVBjZloC%J9|Z9>?yr~; z8!g*UAGvHC-7AhkT&kj}SjUk4MZE~we`B82TQl+Rs=1p9$gvHc!dJP&ZtH)z;SI3h gG=gbenE>SI#2*bbocUwU9`e>$SC(unp_IA(ACw_ZY5)KL literal 0 HcmV?d00001