Initial import (fedora#2137343).

This commit is contained in:
Pavel Filipenský 2022-11-08 09:10:13 +01:00
parent 6bddcf6c84
commit cf8a0c1cad
4 changed files with 91 additions and 0 deletions

2
.gitignore vendored Normal file
View File

@ -0,0 +1,2 @@
/priv_wrapper-1.0.0.tar.gz
/priv_wrapper.keyring

View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=llkX
-----END PGP SIGNATURE-----

71
priv_wrapper.spec Normal file
View File

@ -0,0 +1,71 @@
Name: priv_wrapper
Version: 1.0.0
Release: 2%{?dist}
Summary: A library to disable resource limits and other privilege dropping
License: GPLv3+
Url: http://cwrap.org/
Source0: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz
Source1: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz.asc
Source2: priv_wrapper.keyring
BuildRequires: gcc
BuildRequires: cmake
BuildRequires: gnupg2
BuildRequires: libcmocka-devel >= 1.1.0
Recommends: cmake
Recommends: pkgconfig
%description
priv_wrapper aims to help running processes which are dropping privileges or
are restricting resources in test environments.
It can disable chroot, prctl, pledge and setrlmit system calls. A disabled call
always succeeds (i.e. returns 0) and does nothing.
The system call pledge exists only on OpenBSD.
To use it, set the following environment variables:
LD_PRELOAD=libpriv_wrapper.so
PRIV_WRAPPER_CHROOT_DISABLE=1
This package does not have a devel package, because this project is for
development/testing.
%prep
%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
%autosetup -p1
%build
%cmake \
-DUNIT_TESTING=ON
%cmake_build
%install
%cmake_install
%ldconfig_scriptlets
%check
%ctest
%files
%doc AUTHORS README.md CHANGELOG.md
%license LICENSE
%{_libdir}/libpriv_wrapper.so*
%dir %{_libdir}/cmake
%dir %{_libdir}/cmake/priv_wrapper
%{_libdir}/cmake/priv_wrapper/priv_wrapper-config-version.cmake
%{_libdir}/cmake/priv_wrapper/priv_wrapper-config.cmake
%dir %{_libdir}/pkgconfig
%{_libdir}/pkgconfig/priv_wrapper.pc
%{_mandir}/man1/priv_wrapper.1*
%changelog
* Tue Oct 25 2022 Pavel Filipenský <pfilipen@redhat.com> - 1.0.0-2
- Verify packages using gpgverify
- Make description line length < 80
* Mon Oct 24 2022 Pavel Filipenský <pfilipen@redhat.com> - 1.0.0-1
- Initial package

2
sources Normal file
View File

@ -0,0 +1,2 @@
SHA512 (priv_wrapper-1.0.0.tar.gz) = 3087916c36fe6244831809e8e589433774fac62aa969d528c11fddf743869a5b1dbd36ab38478bd0e7e3a32f5cf4d80a352dac7ef132b3ee362c37e88b2cb0dc
SHA512 (priv_wrapper.keyring) = 94e0b3873184c3c5bfed321a8cd70696c0d6a0f357ba3dd7ba0e68e3f2ee270c62fa3138b3dc5a869c15e9f6e0e4e14e9d4a060863b1c846a49082c05b68fc71