import uid_wrapper-1.2.7-7.el9
This commit is contained in:
commit
6ad90f13e5
2
.gitignore
vendored
Normal file
2
.gitignore
vendored
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
SOURCES/uid_wrapper-1.2.7.tar.gz
|
||||||
|
SOURCES/uid_wrapper.keyring
|
2
.uid_wrapper.metadata
Normal file
2
.uid_wrapper.metadata
Normal file
@ -0,0 +1,2 @@
|
|||||||
|
7a3b027c8eea8868d19d893a16c1e8fadfa2fe79 SOURCES/uid_wrapper-1.2.7.tar.gz
|
||||||
|
3f2ab0bca02893402ba0ad172a6bd44456a65f86 SOURCES/uid_wrapper.keyring
|
23
SOURCES/0001-pkg-config-Fix-installation-path.patch
Normal file
23
SOURCES/0001-pkg-config-Fix-installation-path.patch
Normal file
@ -0,0 +1,23 @@
|
|||||||
|
From 7b3211858d07cb93f89c1fd5eaa178f14e1f1968 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Andreas Schneider <asn@samba.org>
|
||||||
|
Date: Wed, 12 Feb 2020 09:52:40 +0100
|
||||||
|
Subject: [PATCH] pkg-config: Fix installation path
|
||||||
|
|
||||||
|
Signed-off-by: Andreas Schneider <asn@samba.org>
|
||||||
|
---
|
||||||
|
uid_wrapper.pc.cmake | 2 +-
|
||||||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/uid_wrapper.pc.cmake b/uid_wrapper.pc.cmake
|
||||||
|
index c15d3be..7e0095c 100644
|
||||||
|
--- a/uid_wrapper.pc.cmake
|
||||||
|
+++ b/uid_wrapper.pc.cmake
|
||||||
|
@@ -1,4 +1,4 @@
|
||||||
|
Name: @PROJECT_NAME@
|
||||||
|
Description: The uid_wrapper library
|
||||||
|
Version: @PROJECT_VERSION@
|
||||||
|
-Libs: @CMAKE_INSTALL_LIBDIR@/@UID_WRAPPER_LIB@
|
||||||
|
+Libs: @CMAKE_INSTALL_FULL_LIBDIR@/@UID_WRAPPER_LIB@
|
||||||
|
--
|
||||||
|
2.24.1
|
||||||
|
|
@ -0,0 +1,6 @@
|
|||||||
|
index 0a3e3fd..43ab1fa 100644
|
||||||
|
--- a/uid_wrapper-config.cmake.in
|
||||||
|
+++ b/uid_wrapper-config.cmake.in
|
||||||
|
@@ -1 +1 @@
|
||||||
|
-set(UID_WRAPPER_LIBRARY @CMAKE_INSTALL_LIBDIR@/@UID_WRAPPER_LIB@)
|
||||||
|
+set(UID_WRAPPER_LIBRARY @CMAKE_INSTALL_FULL_LIBDIR@/@UID_WRAPPER_LIB@)
|
16
SOURCES/uid_wrapper-1.2.7.tar.gz.asc
Normal file
16
SOURCES/uid_wrapper-1.2.7.tar.gz.asc
Normal file
@ -0,0 +1,16 @@
|
|||||||
|
-----BEGIN PGP SIGNATURE-----
|
||||||
|
|
||||||
|
iQIzBAABCAAdFiEEjf9T4Y8qvI2PPJIjfuD8TcwBTj0FAl0tlh4ACgkQfuD8TcwB
|
||||||
|
Tj1rrxAApPy4C4EBYcVi+J5N7S3t57dtuA0reY2OG7KKFXzD2j54KeM/N3h/TpHK
|
||||||
|
KbhxF5/xYdle6jhDXTq4kBX98qFpbx9AGOiAkoAg480YpgX+xVVNPWzovfytuRoe
|
||||||
|
IWKG6/jpzr9PEDg/ivjcYAXZaLokXOaUt+XUigyr/93dPpRmgcuxGrEHKfLtZEsn
|
||||||
|
uLThWBvX9rLwIEcbqOmrsBiTJUdUTFcJkYakFIeOXKnnM2RpfQ9vXewzATGmUwjV
|
||||||
|
t1AraXQWHF/MQmjeZhJp98x36UDIHfFXxuOpJ0s2vK0oyjOfyR+8+rf77s7gBKC3
|
||||||
|
71A1Tcy85cKJ3qLO3EpuTOGR9L0rx+2jxKkQdhtD9v0ppUTF/L7MxT1S3xnAe8jt
|
||||||
|
hxTQBs8dbEa0RGNpJorBajAaz2DsQJOnC8o5UE2eqLZYco4B2kRi0C6GtqeGqtos
|
||||||
|
0GNddCtHrYKjnh6/h5vmXPllONB3f7f/7gGqjA9+0nAITpmAOSNowN7jcUXBCgWt
|
||||||
|
D4taInPqa2Riehy//+YmrANIs7OHqCfirm8d/bI8ZMJpuYFsO1RpGPIQQ8owl5Br
|
||||||
|
gniTWA9/niL8Oky/prc0ZS3pJW0al4u5pTG2jknAVui39KwPcRMYqSHeTv2avPUb
|
||||||
|
dDknqtXsrULxO+Ai2QXxq3gzRgT9okX6aAwqT85juXH7tz66l8E=
|
||||||
|
=vJOX
|
||||||
|
-----END PGP SIGNATURE-----
|
192
SPECS/uid_wrapper.spec
Normal file
192
SPECS/uid_wrapper.spec
Normal file
@ -0,0 +1,192 @@
|
|||||||
|
Name: uid_wrapper
|
||||||
|
Version: 1.2.7
|
||||||
|
Release: 7%{?dist}
|
||||||
|
|
||||||
|
Summary: A wrapper for privilege separation
|
||||||
|
License: GPLv3+
|
||||||
|
Url: http://cwrap.org/
|
||||||
|
|
||||||
|
Source0: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz
|
||||||
|
Source1: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz.asc
|
||||||
|
Source2: uid_wrapper.keyring
|
||||||
|
|
||||||
|
Patch0: 0001-pkg-config-Fix-installation-path.patch
|
||||||
|
Patch1: uid_wrapper-1.2.7-cmake-config-fix-installation-path.patch
|
||||||
|
|
||||||
|
BuildRequires: gcc
|
||||||
|
BuildRequires: cmake
|
||||||
|
BuildRequires: gnupg2
|
||||||
|
BuildRequires: libcmocka-devel >= 1.1.0
|
||||||
|
|
||||||
|
Recommends: cmake
|
||||||
|
Recommends: pkgconfig
|
||||||
|
|
||||||
|
%description
|
||||||
|
Some projects like a file server need privilege separation to be able to switch
|
||||||
|
to the connection user and do file operations. uid_wrapper convincingly lies
|
||||||
|
to the application letting it believe it is operating as root and even
|
||||||
|
switching between UIDs and GIDs as needed.
|
||||||
|
|
||||||
|
To use it set the following environment variables:
|
||||||
|
|
||||||
|
LD_PRELOAD=libuid_wrapper.so
|
||||||
|
UID_WRAPPER=1
|
||||||
|
|
||||||
|
This package doesn't have a devel package cause this project is for
|
||||||
|
development/testing.
|
||||||
|
|
||||||
|
%prep
|
||||||
|
gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0}
|
||||||
|
%autosetup -p1
|
||||||
|
|
||||||
|
%build
|
||||||
|
%cmake \
|
||||||
|
-DUNIT_TESTING=ON
|
||||||
|
%cmake_build
|
||||||
|
|
||||||
|
%install
|
||||||
|
%cmake_install
|
||||||
|
|
||||||
|
%ldconfig_scriptlets
|
||||||
|
|
||||||
|
%check
|
||||||
|
%ctest
|
||||||
|
|
||||||
|
%files
|
||||||
|
%doc AUTHORS README.md ChangeLog
|
||||||
|
%license LICENSE
|
||||||
|
%{_libdir}/libuid_wrapper.so*
|
||||||
|
%dir %{_libdir}/cmake
|
||||||
|
%dir %{_libdir}/cmake/uid_wrapper
|
||||||
|
%{_libdir}/cmake/uid_wrapper/uid_wrapper-config-version.cmake
|
||||||
|
%{_libdir}/cmake/uid_wrapper/uid_wrapper-config.cmake
|
||||||
|
%dir %{_libdir}/pkgconfig
|
||||||
|
%{_libdir}/pkgconfig/uid_wrapper.pc
|
||||||
|
%{_mandir}/man1/uid_wrapper.1*
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.7-7
|
||||||
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
||||||
|
Related: rhbz#1991688
|
||||||
|
|
||||||
|
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.7-6
|
||||||
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
||||||
|
|
||||||
|
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.7-5
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.7-4
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Mar 03 2020 Anderson Sasaki <ansasaki@redhat.com> - 1.2.7-3
|
||||||
|
- Fix invalid library path in cmake configuration file (bz#1809275)
|
||||||
|
|
||||||
|
* Wed Feb 12 2020 Andreas Schneider <asn@redhat.com> - 1.2.7-2
|
||||||
|
- resolves: #1801869 - Fix invalid lib pkg-config lib path
|
||||||
|
|
||||||
|
* Tue Feb 11 2020 Andreas Schneider <asn@redhat.com> - 1.2.7-1
|
||||||
|
- Update to version 1.2.7
|
||||||
|
* Fix unsetting initial XIDs
|
||||||
|
* Fix manpage installation
|
||||||
|
* Fix cmake-config installation
|
||||||
|
* Fixed running with sanitizers
|
||||||
|
- resolves: #1690028 - Allow running without RTLD_DEEPBIND
|
||||||
|
|
||||||
|
* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-6
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-5
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-4
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
||||||
|
|
||||||
|
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Jul 31 2017 Andreas Schneider <asn@redhat.com> - 1.2.4-1
|
||||||
|
- Update to version 1.2.4
|
||||||
|
* Added deadlock workaround for glibc < 2.24
|
||||||
|
* Fixed a possible deadlock bug if uid_wrapper is turned off
|
||||||
|
* Logging is always turned on now
|
||||||
|
* Fixed a memory leak
|
||||||
|
* Limited number of groups during fork+exec
|
||||||
|
|
||||||
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.2-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jul 13 2017 Andreas Schneider <asn@redhat.com> - 1.2.2-1
|
||||||
|
- Update to version 1.2.2:
|
||||||
|
* Added support for fork'ed and then exec'ed processes
|
||||||
|
* Added support for Alpha
|
||||||
|
|
||||||
|
* Tue Jun 27 2017 Nils Philippsen <nils@redhat.com> - 1.2.1-3
|
||||||
|
- drop requirements on cmake, pkgconfig and rather own the directories for the
|
||||||
|
files augmenting these packages
|
||||||
|
|
||||||
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.1-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Mar 23 2016 Andreas Schneider <asn@redhat.com> - 1.2.1-1
|
||||||
|
- Update to version 1.2.1
|
||||||
|
* Documented missing options.
|
||||||
|
* Fixed a comipilation issue with -O3.
|
||||||
|
|
||||||
|
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Oct 29 2015 Andreas Schneider <asn@redhat.com> - 1.2.0-1
|
||||||
|
- Update to version 1.2.0
|
||||||
|
* Added privilege checks for all set*uid and set*gid functions.
|
||||||
|
* Added a lot more and accurate tests which work as root.
|
||||||
|
* Fixed some minor issues
|
||||||
|
|
||||||
|
* Wed Sep 02 2015 Andreas Schneider <asn@redhat.com> - 1.1.1-1
|
||||||
|
- Update to version 1.1.1
|
||||||
|
|
||||||
|
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1.0-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jan 21 2015 Andreas Schneider <asn@redhat.com> - 1.1.0-1
|
||||||
|
- Update to version 1.1.0
|
||||||
|
|
||||||
|
* Mon Dec 15 2014 Michael Adam <madam@redhat.com> - 1.0.2-5
|
||||||
|
- Fix format errors in changelog.
|
||||||
|
- Require cmake.
|
||||||
|
- Don't own _libdir/pkgconfig, and require pkgconfig instead.
|
||||||
|
|
||||||
|
* Thu Oct 02 2014 Andreas Schneider <asn@redhat.com> - 1.0.2-4
|
||||||
|
- resolves: #1146410 - Do not own /usr/lib64/cmake.
|
||||||
|
|
||||||
|
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.2-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Aug 04 2014 Marcin Juszkiewicz <mjuszkiewicz@redhat.com> - 1.0.2-2
|
||||||
|
- Handle lack of SYS_access on AArch64
|
||||||
|
|
||||||
|
* Thu Jul 31 2014 Andreas Schneider <asn@redhat.com> - 1.0.2-1
|
||||||
|
- Update to version 1.0.2.
|
||||||
|
|
||||||
|
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.1-4
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Mar 11 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-3
|
||||||
|
- Fix some typos.
|
||||||
|
- resolves: #1060910 - Fedora import
|
||||||
|
|
||||||
|
* Tue Feb 11 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-2
|
||||||
|
- Remove Group
|
||||||
|
- Remove glibc-devel build requirement
|
||||||
|
- Do not create a subpackage.
|
||||||
|
|
||||||
|
* Tue Feb 04 2014 Andreas Schneider <asn@redhat.com> - 1.0.1-1
|
||||||
|
- Update to version 1.0.1
|
||||||
|
* Added --libs to pkg-config.
|
||||||
|
* Added socket_wrapper-config.cmake
|
||||||
|
* Fixed a bug packaging the obj directory.
|
||||||
|
|
||||||
|
* Mon Feb 03 2014 Andreas Schneider <asn@redhat.com> - 1.0.0-1
|
||||||
|
- Initial version 1.0.0
|
Loading…
Reference in New Issue
Block a user