81 lines
2.2 KiB
RPMSpec
81 lines
2.2 KiB
RPMSpec
Name: priv_wrapper
|
|
Version: 1.0.1
|
|
Release: 2%{?dist}
|
|
|
|
Summary: A library to disable resource limits and other privilege dropping
|
|
License: GPLv3+
|
|
Url: http://cwrap.org/
|
|
|
|
Source0: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz
|
|
Source1: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz.asc
|
|
Source2: priv_wrapper.keyring
|
|
|
|
BuildRequires: gcc
|
|
BuildRequires: cmake
|
|
BuildRequires: gnupg2
|
|
BuildRequires: libcmocka-devel >= 1.1.0
|
|
|
|
Recommends: cmake
|
|
Recommends: pkgconfig
|
|
|
|
%description
|
|
priv_wrapper aims to help running processes which are dropping privileges or
|
|
are restricting resources in test environments.
|
|
It can disable chroot, prctl, pledge and setrlmit system calls. A disabled call
|
|
always succeeds (i.e. returns 0) and does nothing.
|
|
The system call pledge exists only on OpenBSD.
|
|
|
|
To use it, set the following environment variables:
|
|
|
|
LD_PRELOAD=libpriv_wrapper.so
|
|
PRIV_WRAPPER_CHROOT_DISABLE=1
|
|
|
|
This package does not have a devel package, because this project is for
|
|
development/testing.
|
|
|
|
%prep
|
|
%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
|
|
%autosetup -p1
|
|
|
|
%build
|
|
%cmake \
|
|
-DUNIT_TESTING=ON
|
|
%cmake_build
|
|
|
|
%install
|
|
%cmake_install
|
|
|
|
%ldconfig_scriptlets
|
|
|
|
%check
|
|
%ctest
|
|
|
|
%files
|
|
%doc AUTHORS README.md CHANGELOG.md
|
|
%license LICENSE
|
|
%{_libdir}/libpriv_wrapper.so*
|
|
%dir %{_libdir}/cmake
|
|
%dir %{_libdir}/cmake/priv_wrapper
|
|
%{_libdir}/cmake/priv_wrapper/priv_wrapper-config-version.cmake
|
|
%{_libdir}/cmake/priv_wrapper/priv_wrapper-config.cmake
|
|
%dir %{_libdir}/pkgconfig
|
|
%{_libdir}/pkgconfig/priv_wrapper.pc
|
|
%{_mandir}/man1/priv_wrapper.1*
|
|
|
|
%changelog
|
|
* Fri Jan 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1.0.1-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
|
|
|
|
* Thu Nov 24 2022 Pavel Filipenský <pfilipenn@redhat.com> - 1.0.1-1
|
|
- Update to version 1.0.1
|
|
|
|
* Thu Nov 10 2022 Pavel Filipenský <pfilipen@redhat.com> - 1.0.0-3
|
|
- Patch prctl() on ppc64le
|
|
|
|
* Tue Oct 25 2022 Pavel Filipenský <pfilipen@redhat.com> - 1.0.0-2
|
|
- Verify packages using gpgverify
|
|
- Make description line length < 80
|
|
|
|
* Mon Oct 24 2022 Pavel Filipenský <pfilipen@redhat.com> - 1.0.0-1
|
|
- Initial package
|