From ce823087c8da5da244ea414ca4086a3b09fb8a98 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <lautrbach@redhat.com>
Date: Fri, 15 Aug 2025 13:34:27 +0200
Subject: [PATCH] install fapolicyd sysusers.d configuration

See https://docs.fedoraproject.org/en-US/packaging-guidelines/UsersAndGroups/

Fixes creating user and groups on image mode system

Resolves: RHEL-104873
---
 fapolicyd.spec     | 3 +++
 fapolicyd.sysusers | 1 +
 2 files changed, 4 insertions(+)
 create mode 100644 fapolicyd.sysusers

diff --git a/fapolicyd.spec b/fapolicyd.spec
index ee5f268..0a57a40 100644
--- a/fapolicyd.spec
+++ b/fapolicyd.spec
@@ -12,6 +12,7 @@ Source0: https://people.redhat.com/sgrubb/fapolicyd/%{name}-%{version}.tar.gz
 Source1: https://github.com/linux-application-whitelisting/%{name}-selinux/releases/download/v%{semodule_version}/%{name}-selinux-%{semodule_version}.tar.gz
 # we bundle uthash for rhel9
 Source2: https://github.com/troydhanson/uthash/archive/refs/tags/v2.3.0.tar.gz#/uthash-2.3.0.tar.gz
+Source3: fapolicyd.sysusers
 BuildRequires: gcc
 BuildRequires: kernel-headers
 BuildRequires: autoconf automake make gcc libtool
@@ -131,6 +132,7 @@ make check
 %install
 %make_install
 install -p -m 644 -D init/%{name}-tmpfiles.conf %{buildroot}/%{_tmpfilesdir}/%{name}.conf
+install -p -D -m 0644 %{SOURCE3} %{buildroot}%{_sysusersdir}/%{name}.conf
 mkdir -p %{buildroot}/%{_localstatedir}/lib/%{name}
 mkdir -p %{buildroot}/run/%{name}
 mkdir -p %{buildroot}%{_sysconfdir}/%{name}/trust.d
@@ -203,6 +205,7 @@ fi
 %ghost %attr(644,root,%{name}) %{_sysconfdir}/%{name}/compiled.rules
 %attr(644,root,root) %{_unitdir}/%{name}.service
 %attr(644,root,root) %{_tmpfilesdir}/%{name}.conf
+%attr(644,root,root) %{_sysusersdir}/%{name}.conf
 %attr(755,root,root) %{_sbindir}/%{name}
 %attr(755,root,root) %{_sbindir}/%{name}-cli
 %attr(755,root,root) %{_sbindir}/%{name}-rpm-loader
diff --git a/fapolicyd.sysusers b/fapolicyd.sysusers
new file mode 100644
index 0000000..0ab998b
--- /dev/null
+++ b/fapolicyd.sysusers
@@ -0,0 +1 @@
+u! fapolicyd - "Application Whitelisting Daemon" /var/lib/fapolicyd