From f575ae0ed678b6216615c7e238fac830d41544e9 Mon Sep 17 00:00:00 2001 From: Radovan Sroka Date: Mon, 11 Mar 2019 12:07:44 +0100 Subject: [PATCH] New upstream release - Added new DNF plugin that can update the trust database when rpms are installed - Added support for FAN_OPEN_EXEC_PERM --- .gitignore | 1 + fapolicyd.spec | 51 +++++++++++++++++++++++++++++++++----------------- sources | 2 +- 3 files changed, 36 insertions(+), 18 deletions(-) diff --git a/.gitignore b/.gitignore index 59b6e3f..0cd01fe 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ /fapolicyd-0.8.5.tar.gz /fapolicyd-0.8.6.tar.gz /fapolicyd-0.8.7.tar.gz +/fapolicyd-0.8.8.tar.gz diff --git a/fapolicyd.spec b/fapolicyd.spec index 0c6cda7..bdd4c3b 100644 --- a/fapolicyd.spec +++ b/fapolicyd.spec @@ -1,14 +1,15 @@ Summary: Application Whitelisting Daemon Name: fapolicyd -Version: 0.8.7 -Release: 3%{?dist} +Version: 0.8.8 +Release: 1%{?dist} License: GPLv3+ URL: http://people.redhat.com/sgrubb/fapolicyd Source0: https://people.redhat.com/sgrubb/fapolicyd/%{name}-%{version}.tar.gz -BuildRequires: gcc BuildRequires: kernel-headers +BuildRequires: autoconf automake make gcc libtool BuildRequires: systemd-devel libgcrypt-devel rpm-devel file-devel BuildRequires: libcap-ng-devel libseccomp-devel lmdb-devel +BuildRequires: python3-devel Requires(pre): shadow-utils Requires(post): systemd-units Requires(preun): systemd-units @@ -24,46 +25,61 @@ makes use of the kernel's fanotify interface to determine file access rights. %setup -q %build -%configure --with-audit +./autogen.sh +%configure --with-audit make CFLAGS="%{optflags}" %{?_smp_mflags} %install make DESTDIR="%{buildroot}" INSTALL='install -p' install +mkdir -p %{buildroot}/%{python3_sitelib}/dnf-plugins/ +install -p -m 644 dnf/%{name}-dnf-plugin.py %{buildroot}/%{python3_sitelib}/dnf-plugins/ mkdir -p %{buildroot}/%{_localstatedir}/lib/%{name} +mkdir -p %{buildroot}/%{_localstatedir}/run/%{name} %pre -getent passwd fapolicyd >/dev/null || useradd -r -M -s /sbin/nologin -c "Application Whitelisting Daemon" fapolicyd +getent passwd %{name} >/dev/null || useradd -r -M -s /sbin/nologin -c "Application Whitelisting Daemon" %{name} %post -%systemd_post fapolicyd.service +%systemd_post %{name}.service %preun -%systemd_preun fapolicyd.service +%systemd_preun %{name}.service %postun -%systemd_postun_with_restart fapolicyd.service +%systemd_postun_with_restart %{name}.service %files -%doc README +%doc README.md %{!?_licensedir:%global license %%doc} %license COPYING -%attr(750,root,fapolicyd) %dir %{_sysconfdir}/%{name} -%config(noreplace) %attr(644,root,fapolicyd) %{_sysconfdir}/%{name}/fapolicyd.rules -%config(noreplace) %attr(644,root,fapolicyd) %{_sysconfdir}/%{name}/fapolicyd.mounts -%config(noreplace) %attr(644,root,fapolicyd) %{_sysconfdir}/%{name}/fapolicyd.conf -%attr(644,root,root) %{_unitdir}/fapolicyd.service -%attr(755,root,root) %{_sbindir}/fapolicyd +%attr(750,root,%{name}) %dir %{_sysconfdir}/%{name} +%config(noreplace) %attr(644,root,%{name}) %{_sysconfdir}/%{name}/%{name}.rules +%config(noreplace) %attr(644,root,%{name}) %{_sysconfdir}/%{name}/%{name}.mounts +%config(noreplace) %attr(644,root,%{name}) %{_sysconfdir}/%{name}/%{name}.conf +%attr(644,root,root) %{_unitdir}/%{name}.service +%attr(755,root,root) %{_sbindir}/%{name} +%attr(755,root,root) %{_sbindir}/%{name}-cli %attr(644,root,root) %{_mandir}/man8/* %attr(644,root,root) %{_mandir}/man5/* -%ghost %{_localstatedir}/log/fapolicyd-access.log -%attr(770,root,fapolicyd) %dir %{_localstatedir}/lib/%{name} +%ghost %{_localstatedir}/log/%{name}-access.log +%attr(770,root,%{name}) %dir %{_localstatedir}/lib/%{name} +%attr(770,root,%{name}) %dir %{_localstatedir}/run/%{name} +%ghost %{_localstatedir}/run/%{name}/%{name}.fifo %ghost %{_localstatedir}/lib/%{name}/data.mdb %ghost %{_localstatedir}/lib/%{name}/lock.mdb +%{python3_sitelib}/dnf-plugins/%{name}-dnf-plugin.py +%{python3_sitelib}/dnf-plugins/__pycache__/%{name}-dnf-plugin.*.pyc %changelog +* Mon Mar 11 2019 Radovan Sroka - 0.8.8-1 +- New upstream release +- Added new DNF plugin that can update the trust database when rpms are installed +- Added support for FAN_OPEN_EXEC_PERM + * Thu Jan 31 2019 Fedora Release Engineering - 0.8.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + * Wed Oct 03 2018 Steve Grubb 0.8.7-1 - New upstream bugfix release @@ -79,3 +95,4 @@ getent passwd fapolicyd >/dev/null || useradd -r -M -s /sbin/nologin -c "Applica * Fri Feb 16 2018 Steve Grubb 0.8.5-1 - New release + diff --git a/sources b/sources index dd70a14..29b8c92 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (fapolicyd-0.8.7.tar.gz) = d5d50b39ed60635c5c790b258e4b79a373d93150d3b9e06b3c144a16f9511edc808cf7ab9c1c9a6c66ae3415d5fc057090db2ba81fb63462b57c522eb6399cbe +SHA512 (fapolicyd-0.8.8.tar.gz) = 1aefdcea23862d7d18a6dbe8433f975d40047828674cc5f6a87e2190132eaa6ea4457be994a090597c248343936eb5c687a8dd732a8e6c8a254c242f28f1ad88