Initial import

The tpm2-abrmd (TPM2 access broker and Resource Manager) daemon is already
included in Fedora but since version 1.2.0 it needs a SELinux policy module
to be used with the Fedora system wide SELinux policy.

This package ships the SELinux policy module that's included in the upstream
tpm2-abrmd project.

resolves: rhbz#1550595

Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
This commit is contained in:
Javier Martinez Canillas 2018-01-10 14:58:16 +01:00
parent 3401ee986b
commit bc94047832
No known key found for this signature in database
GPG Key ID: C751E590D63F3D69
4 changed files with 77 additions and 0 deletions

1
.gitignore vendored Normal file
View File

@ -0,0 +1 @@
/tpm2-abrmd-2.0.0.tar.gz

1
sources Normal file
View File

@ -0,0 +1 @@
SHA512 (tpm2-abrmd-2.0.0.tar.gz) = 38454838d448ea5724bf8138828d280722a29b5a2c517ae74ad67731b593f79928c2871f14b1868148ad238c797e8edad145d7037ff3fa4ccc2435b26b7d4193

Binary file not shown.

75
tpm2-abrmd-selinux.spec Normal file
View File

@ -0,0 +1,75 @@
# defining macros needed by SELinux
%global selinuxtype targeted
%global selinux_policyver 0.0.1
%global moduletype contrib
%global modulename tabrmd
Name: tpm2-abrmd-selinux
Version: 2.0.0
Release: 1%{?dist}
Summary: SELinux policies for tpm2-abrmd
License: BSD
URL: https://github.com/tpm2-software/tpm2-abrmd
Source0: https://github.com/tpm2-software/tpm2-abrmd/archive/%{version}/tpm2-abrmd-%{version}.tar.gz
BuildArch: noarch
Requires: selinux-policy >= %{selinux_policyver}
BuildRequires: git
BuildRequires: pkgconfig(systemd)
BuildRequires: selinux-policy
BuildRequires: selinux-policy-devel
Requires(post): selinux-policy-base >= %{selinux_policyver}
Requires(post): libselinux-utils
Requires(post): policycoreutils
%if 0%{?fedora}
Requires(post): policycoreutils-python-utils
%else
Requires(post): policycoreutils-python
%endif
%description
SELinux policy modules for tpm2-abrmd.
%prep
%setup -q -n tpm2-abrmd-%{version}
%build
pushd selinux
make %{?_smp_mflags} TARGET="tabrmd" SHARE="%{_datadir}"
popd
%pre
%selinux_relabel_pre -s %{selinuxtype}
%install
# install policy modules
pushd selinux
install -d %{buildroot}%{_datadir}/selinux/packages
install -d -p %{buildroot}%{_datadir}/selinux/devel/include/%{moduletype}
install -p -m 644 %{modulename}.if %{buildroot}%{_datadir}/selinux/devel/include/%{moduletype}
install -m 0644 %{modulename}.pp.bz2 %{buildroot}%{_datadir}/selinux/packages
popd
%check
%post
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{modulename}.pp.bz2
%postun
if [ $1 -eq 0 ]; then
%selinux_modules_uninstall -s %{selinuxtype} %{modulename}
fi
%posttrans
%selinux_relabel_post -s %{selinuxtype}
%files
%license LICENSE
%{_datadir}/selinux/*
%{_datadir}/selinux/packages/%{modulename}.pp.bz2
%{_datadir}/selinux/devel/include/%{moduletype}/%{modulename}.if
%changelog
* Wed Jul 04 2018 Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
- Initial import (rhbz#1550595)