rpms/ima-evm-utils
7
0
Fork 0
Code Issues Pull Requests Releases Activity
63 Commits 8 Branches 29 Tags 240 KiB
15abff6d5f
Commit Graph

63 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Coiby Xu
15abff6d5f ima-setup: Allow users to specify custom reinstall_threshold 
Resolves: https://issues.redhat.com/browse/RHEL-34778
Conflict: None

Upstream Status: https://src.fedoraproject.org/rpms/ima-evm-utils.git

commit 141a74d96ab3cdee1b0d2cf6a0cba19337920e02
Author: Coiby Xu <coxu@redhat.com>
Date:   Tue May 28 09:54:19 2024 +0800

    ima-setup: Allow users to specify custom reinstall_threshold

    Some users may use custom built packages and we are not sure about the
    number of this type of packages. So make reinstall_threshold
    configurable.

    Suggested-by: Marko Myllynen <myllynen@redhat.com>

Signed-off-by: Coiby Xu <coxu@redhat.com>
 2024-11-08 10:58:05 +08:00
Coiby Xu
87e9121bc9 ima-setup: Install prerequisite package rpm-plugin-ima 
Upstream Status: RHEL-only

Since rpm-plugin-ima is not a BaseOS package, install it in ima-setup.

Signed-off-by: Coiby Xu <coxu@redhat.com>
 2024-11-08 10:58:05 +08:00
Coiby Xu
478b5e4548 Add some IMA setup tools 
Resolves: https://issues.redhat.com/browse/RHEL-34778
Conflict: Upstream has -libs subpackage

Upstream Status: https://src.fedoraproject.org/rpms/ima-evm-utils.git

commit 8980421a049c776e2b77e534793aafb925b3ad48
Author: Coiby Xu <coiby.xu@gmail.com>
Date:   Mon May 6 17:48:52 2024 +0800

    Add some IMA setup tools

    Some IMA setup tools are added to ease IMA setup which will do
    the following tasks,
       - add IMA signatures to installed packages files
       - load IMA keys and policy
       - enable the dracut integrity module to load IMA keys and policy
         automatically

    Two IMA polices as suggested by Stefan Berger are also provided which
    will be signed automatically with other package files.

    Thanks to Marko Myllynen for coming up with the idea to have a tool
    similar to fips-mode-setup. And thanks to Mimi Zohar and Stefan Berger
    for providing the feedback!

    Signed-off-by: Coiby Xu <coxu@redhat.com>

Signed-off-by: Coiby Xu <coxu@redhat.com>
 2024-11-08 10:58:05 +08:00
Troy Dawson
69ad52a70c Bump release for October 2024 mass rebuild: 
Resolves: RHEL-64018
 2024-10-29 08:36:27 -07:00
Troy Dawson
c44733edc2 Bump release for June 2024 mass rebuild 2024-06-24 08:51:12 -07:00
Linqing Lu
399096205d initial gating tests 
Signed-off-by: Linqing Lu <lilu@redhat.com>
 2024-04-09 11:03:52 -04:00
Fedora Release Engineering
428c33916c Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-24 22:39:14 +00:00
Fedora Release Engineering
bd16779462 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-20 23:00:52 +00:00
Fedora Release Engineering
9f48b24234 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-07-20 07:20:43 +00:00
Peter Robinson
196c511652 Disable bootstrap 2023-06-08 10:45:50 +01:00
Peter Robinson
631781e5b2 1.5, updates for bootstrapping 2023-06-08 09:31:11 +01:00
Fedora Release Engineering
eeac9f2aed Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2023-01-19 13:05:15 +00:00
Fedora Release Engineering
c7ba98a6ec Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-07-21 14:35:25 +00:00
Fedora Release Engineering
558c3df69c - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2022-01-20 13:13:49 +00:00
Björn Esser
65d5e121c8
Build without compat bootstrap sub package 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2022-01-20 06:54:07 +01:00
Björn Esser
e87fd6c09a
Build with compat bootstrap sub package 
Signed-off-by: Björn Esser <besser82@fedoraproject.org>
 2022-01-20 06:36:24 +01:00
Miro Hrončok
b6235bcbb3 Actually enable compat bcond 2022-01-19 23:12:34 +01:00
Peter Robinson
3164e5a1c5 add patches for compat build 2022-01-19 15:25:39 +00:00
Peter Robinson
0602436823 Build with compatible for bootstrap 2022-01-19 15:19:26 +00:00
Peter Robinson
e3218f0188 v1.4 2021-11-08 20:52:13 +00:00
Sahana Prasad
87a9da9dc3 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:04:41 +02:00
Fedora Release Engineering
fdeec277f7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-07-22 08:30:10 +00:00
Fedora Release Engineering
6d8b830293 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-01-26 14:17:04 +00:00
Tom Stellard
963df557f6 Add BuildRequires: make 
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
 2020-12-19 00:46:34 +00:00
Bruno Meneguele
406cc7e1e8 Rebase to new upstream v1.3.2 minor release 
Resolves: BZ#1892415
Signed-off-by: Bruno Meneguele <bmeneg@redhat.com>
 2020-10-28 17:57:46 -03:00
Bruno Meneguele
dad4a640db Rebase to new upstream v1.3.1 minor release 
Resolves: BZ#1868019
Signed-off-by: Bruno Meneguele <bmeneg@redhat.com>
 2020-08-11 11:31:20 -03:00
Fedora Release Engineering
b04b68a271 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-07-28 01:44:05 +00:00
Peter Robinson
845f3885b2 Fix devel deps 2020-07-26 14:07:37 +01:00
Peter Robinson
1598285d4e v1.3 2020-07-26 13:51:27 +01:00
Tom Stellard
c9a1da15a5 Use make macros 
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
 2020-07-13 20:15:21 +00:00
Fedora Release Engineering
51238b8dd6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-01-29 05:21:53 +00:00
Bruno E. O. Meneguele
9207116199 - Remove a leftover unused patch file 
Signed-off-by: Bruno E. O. Meneguele <bmeneg@redhat.com>
 2019-07-31 16:14:47 -03:00
Bruno E. O. Meneguele
44d7a51bef - Remove unused patch files 
Signed-off-by: Bruno E. O. Meneguele <bmeneg@redhat.com>
 2019-07-31 16:13:14 -03:00
Bruno E. O. Meneguele
a90ba569ba - Add pull request to correct lib soname version, wich was bumped to 1.0.0 
Signed-off-by: Bruno E. O. Meneguele <bmeneg@redhat.com>
 2019-07-31 15:32:02 -03:00
Miro Hrončok
ba5fde77a3 Avoid accidental soname version bumps 2019-07-31 20:23:06 +02:00
Bruno E. O. Meneguele
5c9e2a9130 - Rebase to upstream v1.2.1 
- Remove both patches that were already solved in upstream version
- Add runtime dependency of tss2 to retrieve PCR bank data from TPM2.0

Signed-off-by: Bruno E. O. Meneguele <bmeneg@redhat.com>
 2019-07-31 11:16:55 -03:00
Fedora Release Engineering
4e1e279f2b - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-07-25 09:26:04 +00:00
Fedora Release Engineering
709a41c76d - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-02-01 03:16:37 +00:00
Bruno E. O. Meneguele
19405d5fc4 - Add patch to remove dependency from libattr-devel package (BZ#1604365) 
Signed-off-by: Bruno E. O. Meneguele <bmeneguele@gmail.com>
 2018-07-20 13:08:06 -03:00
Fedora Release Engineering
be14d5b217 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-13 05:39:26 +00:00
Peter Robinson
f0c437d053 build on releases newer than F27 for clean upgrade path 2018-03-04 23:15:35 +00:00
Bruno E. O. Meneguele
36a11b60e9 - Remove libtool files 
- Run ldconfig scriptlets after un/installing
- Add -devel subpackage to handle include files and examples
- Disable any static file in the package

Related: BZ#1548698
 2018-03-02 12:04:32 -03:00
Bruno E. O. Meneguele
8ec3a62d07 - New upstream release 
- Support for OpenSSL 1.1 was added directly to the source code in upstream,
  thus removing specific patch for it
- Docbook xsl stylesheet updated to a local path
 2018-02-21 17:18:31 -03:00
Bruno E. O. Meneguele
846f6b26d0 - New upstream release 
- Support for OpenSSL 1.1 added in upstream, thus removing specific patch for it
- Docbook xsl stylesheet updated to a local path

Signed-off-by: Bruno E. O. Meneguele <bmeneguele@gmail.com>
 2018-02-16 17:15:54 -02:00
Bruno E. O. Meneguele
0738659006 - Add OpenSSL 1.1 API support for the package, avoiding the need of 
compat-openssl10-devel package (BZ#1541274)
 2018-02-14 14:51:21 -02:00
Fedora Release Engineering
6519dd8625 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-02-07 17:22:31 +00:00
Igor Gnatenko
45aa5845e1
Switch to %ldconfig_scriptlets 
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
 2018-02-02 11:10:55 +01:00
Bruno E. O. Meneguele
f7d95ad7b1 - Add OpenSSL 1.1 API support for the package, avoiding the need of 
compat-openssl10-devel package (BZ#1516866)
 2017-12-01 18:04:04 -02:00
Bruno E. O. Meneguele
c40253b526 Adjusted docbook xsl path to match the correct stylesheet (BZ#1514985) 2017-11-20 18:42:01 -02:00
Bruno E. O. Meneguele
c1b3c4b3df - Adjusted docbook xsl path to match the correct stylesheet (BZ#1514985) 
- Remove only *.la files, considering there aren't any *.a files
 2017-11-20 18:31:48 -02:00