install fapolicyd sysusers.d configuration

See https://docs.fedoraproject.org/en-US/packaging-guidelines/UsersAndGroups/

Fixes creating user and groups on image mode system

Resolves: RHEL-104873
This commit is contained in:
Petr Lautrbach 2025-08-15 13:34:27 +02:00
parent 1165ecc896
commit ce823087c8
2 changed files with 4 additions and 0 deletions

View File

@ -12,6 +12,7 @@ Source0: https://people.redhat.com/sgrubb/fapolicyd/%{name}-%{version}.tar.gz
Source1: https://github.com/linux-application-whitelisting/%{name}-selinux/releases/download/v%{semodule_version}/%{name}-selinux-%{semodule_version}.tar.gz
# we bundle uthash for rhel9
Source2: https://github.com/troydhanson/uthash/archive/refs/tags/v2.3.0.tar.gz#/uthash-2.3.0.tar.gz
Source3: fapolicyd.sysusers
BuildRequires: gcc
BuildRequires: kernel-headers
BuildRequires: autoconf automake make gcc libtool
@ -131,6 +132,7 @@ make check
%install
%make_install
install -p -m 644 -D init/%{name}-tmpfiles.conf %{buildroot}/%{_tmpfilesdir}/%{name}.conf
install -p -D -m 0644 %{SOURCE3} %{buildroot}%{_sysusersdir}/%{name}.conf
mkdir -p %{buildroot}/%{_localstatedir}/lib/%{name}
mkdir -p %{buildroot}/run/%{name}
mkdir -p %{buildroot}%{_sysconfdir}/%{name}/trust.d
@ -203,6 +205,7 @@ fi
%ghost %attr(644,root,%{name}) %{_sysconfdir}/%{name}/compiled.rules
%attr(644,root,root) %{_unitdir}/%{name}.service
%attr(644,root,root) %{_tmpfilesdir}/%{name}.conf
%attr(644,root,root) %{_sysusersdir}/%{name}.conf
%attr(755,root,root) %{_sbindir}/%{name}
%attr(755,root,root) %{_sbindir}/%{name}-cli
%attr(755,root,root) %{_sbindir}/%{name}-rpm-loader

1
fapolicyd.sysusers Normal file
View File

@ -0,0 +1 @@
u! fapolicyd - "Application Whitelisting Daemon" /var/lib/fapolicyd