commit b073b43a79cf521f521e5257fbe818bbe38798cf Author: CentOS Sources Date: Tue May 17 07:04:43 2022 -0400 import uid_wrapper-1.2.7-7.el9 diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..db87fea --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +SOURCES/uid_wrapper-1.2.7.tar.gz +SOURCES/uid_wrapper.keyring diff --git a/.uid_wrapper.metadata b/.uid_wrapper.metadata new file mode 100644 index 0000000..250dd2b --- /dev/null +++ b/.uid_wrapper.metadata @@ -0,0 +1,2 @@ +7a3b027c8eea8868d19d893a16c1e8fadfa2fe79 SOURCES/uid_wrapper-1.2.7.tar.gz +3f2ab0bca02893402ba0ad172a6bd44456a65f86 SOURCES/uid_wrapper.keyring diff --git a/SOURCES/0001-pkg-config-Fix-installation-path.patch b/SOURCES/0001-pkg-config-Fix-installation-path.patch new file mode 100644 index 0000000..e9bcfb0 --- /dev/null +++ b/SOURCES/0001-pkg-config-Fix-installation-path.patch @@ -0,0 +1,23 @@ +From 7b3211858d07cb93f89c1fd5eaa178f14e1f1968 Mon Sep 17 00:00:00 2001 +From: Andreas Schneider +Date: Wed, 12 Feb 2020 09:52:40 +0100 +Subject: [PATCH] pkg-config: Fix installation path + +Signed-off-by: Andreas Schneider +--- + uid_wrapper.pc.cmake | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/uid_wrapper.pc.cmake b/uid_wrapper.pc.cmake +index c15d3be..7e0095c 100644 +--- a/uid_wrapper.pc.cmake ++++ b/uid_wrapper.pc.cmake +@@ -1,4 +1,4 @@ + Name: @PROJECT_NAME@ + Description: The uid_wrapper library + Version: @PROJECT_VERSION@ +-Libs: @CMAKE_INSTALL_LIBDIR@/@UID_WRAPPER_LIB@ ++Libs: @CMAKE_INSTALL_FULL_LIBDIR@/@UID_WRAPPER_LIB@ +-- +2.24.1 + diff --git a/SOURCES/uid_wrapper-1.2.7-cmake-config-fix-installation-path.patch b/SOURCES/uid_wrapper-1.2.7-cmake-config-fix-installation-path.patch new file mode 100644 index 0000000..d159122 --- /dev/null +++ b/SOURCES/uid_wrapper-1.2.7-cmake-config-fix-installation-path.patch @@ -0,0 +1,6 @@ +index 0a3e3fd..43ab1fa 100644 +--- a/uid_wrapper-config.cmake.in ++++ b/uid_wrapper-config.cmake.in +@@ -1 +1 @@ +-set(UID_WRAPPER_LIBRARY @CMAKE_INSTALL_LIBDIR@/@UID_WRAPPER_LIB@) ++set(UID_WRAPPER_LIBRARY @CMAKE_INSTALL_FULL_LIBDIR@/@UID_WRAPPER_LIB@) diff --git a/SOURCES/uid_wrapper-1.2.7.tar.gz.asc b/SOURCES/uid_wrapper-1.2.7.tar.gz.asc new file mode 100644 index 0000000..025b613 --- /dev/null +++ b/SOURCES/uid_wrapper-1.2.7.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEEjf9T4Y8qvI2PPJIjfuD8TcwBTj0FAl0tlh4ACgkQfuD8TcwB +Tj1rrxAApPy4C4EBYcVi+J5N7S3t57dtuA0reY2OG7KKFXzD2j54KeM/N3h/TpHK +KbhxF5/xYdle6jhDXTq4kBX98qFpbx9AGOiAkoAg480YpgX+xVVNPWzovfytuRoe +IWKG6/jpzr9PEDg/ivjcYAXZaLokXOaUt+XUigyr/93dPpRmgcuxGrEHKfLtZEsn +uLThWBvX9rLwIEcbqOmrsBiTJUdUTFcJkYakFIeOXKnnM2RpfQ9vXewzATGmUwjV +t1AraXQWHF/MQmjeZhJp98x36UDIHfFXxuOpJ0s2vK0oyjOfyR+8+rf77s7gBKC3 +71A1Tcy85cKJ3qLO3EpuTOGR9L0rx+2jxKkQdhtD9v0ppUTF/L7MxT1S3xnAe8jt +hxTQBs8dbEa0RGNpJorBajAaz2DsQJOnC8o5UE2eqLZYco4B2kRi0C6GtqeGqtos +0GNddCtHrYKjnh6/h5vmXPllONB3f7f/7gGqjA9+0nAITpmAOSNowN7jcUXBCgWt +D4taInPqa2Riehy//+YmrANIs7OHqCfirm8d/bI8ZMJpuYFsO1RpGPIQQ8owl5Br +gniTWA9/niL8Oky/prc0ZS3pJW0al4u5pTG2jknAVui39KwPcRMYqSHeTv2avPUb +dDknqtXsrULxO+Ai2QXxq3gzRgT9okX6aAwqT85juXH7tz66l8E= +=vJOX +-----END PGP SIGNATURE----- diff --git a/SPECS/uid_wrapper.spec b/SPECS/uid_wrapper.spec new file mode 100644 index 0000000..5fbe6fd --- /dev/null +++ b/SPECS/uid_wrapper.spec @@ -0,0 +1,192 @@ +Name: uid_wrapper +Version: 1.2.7 +Release: 7%{?dist} + +Summary: A wrapper for privilege separation +License: GPLv3+ +Url: http://cwrap.org/ + +Source0: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz +Source1: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz.asc +Source2: uid_wrapper.keyring + +Patch0: 0001-pkg-config-Fix-installation-path.patch +Patch1: uid_wrapper-1.2.7-cmake-config-fix-installation-path.patch + +BuildRequires: gcc +BuildRequires: cmake +BuildRequires: gnupg2 +BuildRequires: libcmocka-devel >= 1.1.0 + +Recommends: cmake +Recommends: pkgconfig + +%description +Some projects like a file server need privilege separation to be able to switch +to the connection user and do file operations. uid_wrapper convincingly lies +to the application letting it believe it is operating as root and even +switching between UIDs and GIDs as needed. + +To use it set the following environment variables: + +LD_PRELOAD=libuid_wrapper.so +UID_WRAPPER=1 + +This package doesn't have a devel package cause this project is for +development/testing. + +%prep +gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0} +%autosetup -p1 + +%build +%cmake \ + -DUNIT_TESTING=ON +%cmake_build + +%install +%cmake_install + +%ldconfig_scriptlets + +%check +%ctest + +%files +%doc AUTHORS README.md ChangeLog +%license LICENSE +%{_libdir}/libuid_wrapper.so* +%dir %{_libdir}/cmake +%dir %{_libdir}/cmake/uid_wrapper +%{_libdir}/cmake/uid_wrapper/uid_wrapper-config-version.cmake +%{_libdir}/cmake/uid_wrapper/uid_wrapper-config.cmake +%dir %{_libdir}/pkgconfig +%{_libdir}/pkgconfig/uid_wrapper.pc +%{_mandir}/man1/uid_wrapper.1* + +%changelog +* Tue Aug 10 2021 Mohan Boddu - 1.2.7-7 +- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags + Related: rhbz#1991688 + +* Fri Apr 16 2021 Mohan Boddu - 1.2.7-6 +- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + +* Wed Jan 27 2021 Fedora Release Engineering - 1.2.7-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + +* Wed Jul 29 2020 Fedora Release Engineering - 1.2.7-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + +* Tue Mar 03 2020 Anderson Sasaki - 1.2.7-3 +- Fix invalid library path in cmake configuration file (bz#1809275) + +* Wed Feb 12 2020 Andreas Schneider - 1.2.7-2 +- resolves: #1801869 - Fix invalid lib pkg-config lib path + +* Tue Feb 11 2020 Andreas Schneider - 1.2.7-1 +- Update to version 1.2.7 + * Fix unsetting initial XIDs + * Fix manpage installation + * Fix cmake-config installation + * Fixed running with sanitizers +- resolves: #1690028 - Allow running without RTLD_DEEPBIND + +* Fri Jan 31 2020 Fedora Release Engineering - 1.2.4-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + +* Sat Jul 27 2019 Fedora Release Engineering - 1.2.4-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild + +* Sun Feb 03 2019 Fedora Release Engineering - 1.2.4-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild + +* Sat Jul 14 2018 Fedora Release Engineering - 1.2.4-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + +* Fri Feb 09 2018 Fedora Release Engineering - 1.2.4-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild + +* Mon Jul 31 2017 Andreas Schneider - 1.2.4-1 +- Update to version 1.2.4 + * Added deadlock workaround for glibc < 2.24 + * Fixed a possible deadlock bug if uid_wrapper is turned off + * Logging is always turned on now + * Fixed a memory leak + * Limited number of groups during fork+exec + +* Thu Jul 27 2017 Fedora Release Engineering - 1.2.2-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + +* Thu Jul 13 2017 Andreas Schneider - 1.2.2-1 +- Update to version 1.2.2: + * Added support for fork'ed and then exec'ed processes + * Added support for Alpha + +* Tue Jun 27 2017 Nils Philippsen - 1.2.1-3 +- drop requirements on cmake, pkgconfig and rather own the directories for the + files augmenting these packages + +* Sat Feb 11 2017 Fedora Release Engineering - 1.2.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild + +* Wed Mar 23 2016 Andreas Schneider - 1.2.1-1 +- Update to version 1.2.1 + * Documented missing options. + * Fixed a comipilation issue with -O3. + +* Fri Feb 05 2016 Fedora Release Engineering - 1.2.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + +* Thu Oct 29 2015 Andreas Schneider - 1.2.0-1 +- Update to version 1.2.0 + * Added privilege checks for all set*uid and set*gid functions. + * Added a lot more and accurate tests which work as root. + * Fixed some minor issues + +* Wed Sep 02 2015 Andreas Schneider - 1.1.1-1 +- Update to version 1.1.1 + +* Fri Jun 19 2015 Fedora Release Engineering - 1.1.0-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + +* Wed Jan 21 2015 Andreas Schneider - 1.1.0-1 +- Update to version 1.1.0 + +* Mon Dec 15 2014 Michael Adam - 1.0.2-5 +- Fix format errors in changelog. +- Require cmake. +- Don't own _libdir/pkgconfig, and require pkgconfig instead. + +* Thu Oct 02 2014 Andreas Schneider - 1.0.2-4 +- resolves: #1146410 - Do not own /usr/lib64/cmake. + +* Mon Aug 18 2014 Fedora Release Engineering - 1.0.2-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + +* Mon Aug 04 2014 Marcin Juszkiewicz - 1.0.2-2 +- Handle lack of SYS_access on AArch64 + +* Thu Jul 31 2014 Andreas Schneider - 1.0.2-1 +- Update to version 1.0.2. + +* Sun Jun 08 2014 Fedora Release Engineering - 1.0.1-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + +* Tue Mar 11 2014 Andreas Schneider - 1.0.1-3 +- Fix some typos. +- resolves: #1060910 - Fedora import + +* Tue Feb 11 2014 Andreas Schneider - 1.0.1-2 +- Remove Group +- Remove glibc-devel build requirement +- Do not create a subpackage. + +* Tue Feb 04 2014 Andreas Schneider - 1.0.1-1 +- Update to version 1.0.1 + * Added --libs to pkg-config. + * Added socket_wrapper-config.cmake + * Fixed a bug packaging the obj directory. + +* Mon Feb 03 2014 Andreas Schneider - 1.0.0-1 +- Initial version 1.0.0