Update profile scripts to be safer

Resolves: RHEL-166369
This commit is contained in:
Jakub Jelen 2026-04-20 10:28:14 +02:00
parent 3631156b84
commit bba65dd426
3 changed files with 9 additions and 2 deletions

3
gnupg2.csh Normal file
View File

@ -0,0 +1,3 @@
if ( $?prompt ) then
setenv GPG_TTY `tty`
endif

3
gnupg2.sh Normal file
View File

@ -0,0 +1,3 @@
if [[ $- == *i* ]]; then
export GPG_TTY=$(tty)
fi

View File

@ -9,6 +9,8 @@ License: CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later
Source0: https://gnupg.org/ftp/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2
Source1: https://gnupg.org/ftp/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2.sig
Source2: https://gnupg.org/signature_key.asc
Source3: gnupg2.sh
Source4: gnupg2.csh
# needed for compatibility with system FIPS mode
Patch3: gnupg-2.1.10-secmem.patch
# non-upstreamable patch adding file-is-digest option needed for Copr
@ -167,8 +169,7 @@ mkdir -p $HOME/.gnupg
mkdir -p %{buildroot}%{_sysconfdir}/gnupg
touch %{buildroot}%{_sysconfdir}/gnupg/gpgconf.conf
mkdir -p %{buildroot}%{_sysconfdir}/profile.d
echo "export GPG_TTY=\$(tty)" > %{buildroot}%{_sysconfdir}/profile.d/gnupg2.sh
echo "setenv GPG_TTY \`tty\`" > %{buildroot}%{_sysconfdir}/profile.d/gnupg2.csh
install -p %{SOURCE3} %{SOURCE4} %{buildroot}%{_sysconfdir}/profile.d
# more docs
install -m644 -p AUTHORS NEWS THANKS TODO \