f8f4c7531f
To simplify udica testing on Fedora, add an option that allows running the tests with real system packages (selinux and semanage).
139 lines
5.0 KiB
RPMSpec
139 lines
5.0 KiB
RPMSpec
Summary: A tool for generating SELinux security policies for containers
|
|
Name: udica
|
|
Version: 0.1.5
|
|
Release: 2%{?dist}
|
|
Source0: https://github.com/containers/udica/archive/v%{version}.tar.gz
|
|
License: GPLv3+
|
|
BuildArch: noarch
|
|
Url: https://github.com/containers/udica
|
|
%if 0%{?fedora} || 0%{?rhel} > 7
|
|
BuildRequires: python3 python3-devel python3-setuptools
|
|
Requires: python3 python3-libsemanage python3-libselinux
|
|
%else
|
|
BuildRequires: python2 python2-devel python2-setuptools
|
|
Requires: python2 libsemanage-python libselinux-python
|
|
%endif
|
|
patch1: 0001-Add-allow-rules-for-container_runtime_t-to-base_cont.patch
|
|
patch2: 0002-Add-an-option-for-running-tests-with-real-modules.patch
|
|
patch3: 0003-Allow-running-test_main.py-directly.patch
|
|
|
|
%description
|
|
Tool for generating SELinux security profiles for containers based on
|
|
inspection of container JSON file.
|
|
|
|
%prep
|
|
%autosetup -p 1
|
|
|
|
%build
|
|
%if 0%{?fedora} || 0%{?rhel} > 7
|
|
%{__python3} setup.py build
|
|
%else
|
|
%{__python2} setup.py build
|
|
%endif
|
|
|
|
%install
|
|
install --directory %%{buildroot}%{_datadir}/udica/templates
|
|
|
|
%if 0%{?fedora} || 0%{?rhel} > 7
|
|
%{__python3} setup.py install --single-version-externally-managed --root=%{buildroot}
|
|
%else
|
|
%{__python2} setup.py install --single-version-externally-managed --root=%{buildroot}
|
|
%endif
|
|
|
|
install --directory %{buildroot}%{_mandir}/man8
|
|
install -m 0644 udica/man/man8/udica.8 %{buildroot}%{_mandir}/man8/udica.8
|
|
|
|
%files
|
|
%{_mandir}/man8/udica.8*
|
|
%{_bindir}/udica
|
|
%dir %{_datadir}/udica
|
|
%dir %{_datadir}/udica/templates
|
|
%{_datadir}/udica/templates/*
|
|
|
|
%if 0%{?fedora} || 0%{?rhel} > 7
|
|
%license LICENSE
|
|
%{python3_sitelib}/udica/
|
|
%{python3_sitelib}/udica-*.egg-info
|
|
%else
|
|
%{_datarootdir}/licenses/udica/LICENSE
|
|
%{python2_sitelib}/udica/
|
|
%{python2_sitelib}/udica-*.egg-info
|
|
%endif
|
|
|
|
%changelog
|
|
* Tue Apr 30 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-2
|
|
- Add allow rules for container_runtime_t to base_container.cil, Podman version 1.2.0 requires new allow rules.
|
|
* Fri Apr 19 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.5-1
|
|
- Create mock selinux and semanage module
|
|
- Update testing section in README
|
|
- Add travis file for Travis CI
|
|
- Grammar fixes in the udica.8 manpage file
|
|
- Support port ranges (Resolves: #16)
|
|
- Test port ranges
|
|
|
|
* Mon Mar 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.4-1
|
|
- Fix minor problems reported by pylint #11
|
|
- Catch FileNotFoundError when inspecting containers #12
|
|
- Create basic tests #13
|
|
- Restore working directory #14
|
|
- udica cannot use the container ID once it is provided #10
|
|
|
|
* Mon Feb 25 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-4
|
|
- Update manpage with the latest known bug described in https://github.com/containers/udica/issues/8
|
|
- Add check if runtimes are installed on the system
|
|
|
|
* Sun Feb 17 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-3
|
|
- Improve capability parsing for docker containers
|
|
- Update small changes in manpage, like issue with mandatory option '-c' for docker containers
|
|
- Fix parsing Mountpoints in docker inspect JSON file
|
|
|
|
* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.1.3-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
|
* Wed Jan 23 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.3-1
|
|
- Fix capability allow rules when capabilities are specified in JSON file
|
|
- Add additional SELinux allow rules to base container template to allow container to read proc_type types.
|
|
|
|
* Fri Jan 04 2019 Lukas Vrabec <lvrabec@redhat.com> - 0.1.2-1
|
|
- Fix invalid syntax output when policy is using just one template
|
|
Resolves: #6
|
|
|
|
* Tue Oct 23 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.1.1-2
|
|
- Fix small issues in spec file like improve description and change files section.
|
|
|
|
* Mon Oct 22 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.1.1-1
|
|
- Add proper shebang to all source files
|
|
- Add License to all source files
|
|
|
|
* Sat Oct 13 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.1.0-1
|
|
- Add support for docker containers
|
|
|
|
* Mon Oct 08 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.0.5-1
|
|
- Update x_container template based on testing container related to Nvidia Cuda operations
|
|
|
|
* Mon Oct 08 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.0.4-2
|
|
- Build udica on Red Hat Enterprise Linux 7 with python version 2
|
|
|
|
* Mon Oct 08 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.0.4-1
|
|
- Add manpages
|
|
- Add support for communicating with libvirt daemon
|
|
- Add support for communicating with X server.
|
|
- Add support for read/write to the controlling terminal
|
|
|
|
* Sun Oct 07 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.0.3-1
|
|
- Remove required parameters -i or -j and added support for reading json file from stdin.
|
|
- Remove "-n" or "--name" parameter. Name of the container will be required for this tool
|
|
|
|
* Tue Sep 25 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.0.2-1
|
|
- Use subprocess.Popen instead of subprocess.run for inspecting to support also python2
|
|
|
|
* Thu Sep 20 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.0.1-3
|
|
- Update readme and setup.py files after migration to github
|
|
|
|
* Sun Sep 16 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.0.1-2
|
|
- Update LICENSE
|
|
- Improve %%files section
|
|
|
|
* Sun Sep 16 2018 Lukas Vrabec <lvrabec@redhat.com> - 0.0.1-1
|
|
- Initial build
|