367 lines
10 KiB
RPMSpec
367 lines
10 KiB
RPMSpec
%global _hardened_build 1
|
|
|
|
%define with_gui_qt5 1
|
|
%define with_dbus 1
|
|
|
|
Name: usbguard
|
|
Version: 0.7.1
|
|
Release: 1%{?dist}
|
|
Summary: A tool for implementing USB device usage policy
|
|
Group: System Environment/Daemons
|
|
License: GPLv2+
|
|
## Not installed
|
|
# src/ThirdParty/Catch: Boost Software License - Version 1.0
|
|
URL: https://usbguard.github.io/
|
|
Source0: https://github.com/USBGuard/usbguard/releases/download/%{name}-%{version}/%{name}-%{version}.tar.gz
|
|
Source1: usbguard-daemon.conf
|
|
|
|
Requires: systemd
|
|
Requires(post): systemd
|
|
Requires(preun): systemd
|
|
Requires(postun): systemd
|
|
Requires(post): /sbin/ldconfig
|
|
Requires(postun): /sbin/ldconfig
|
|
|
|
BuildRequires: libqb-devel
|
|
BuildRequires: libgcrypt-devel
|
|
BuildRequires: libstdc++-devel
|
|
BuildRequires: protobuf-devel protobuf-compiler
|
|
BuildRequires: PEGTL-static
|
|
BuildRequires: catch-devel
|
|
BuildRequires: autoconf automake libtool
|
|
BuildRequires: bash-completion
|
|
BuildRequires: asciidoctor
|
|
BuildRequires: audit-libs-devel
|
|
# For `pkg-config systemd` only
|
|
BuildRequires: systemd
|
|
|
|
%if 0%{with_gui_qt5}
|
|
BuildRequires: qt5-qtbase-devel qt5-qtsvg-devel qt5-linguist
|
|
%endif
|
|
|
|
%if 0%{with_dbus}
|
|
BuildRequires: dbus-glib-devel
|
|
BuildRequires: dbus-devel
|
|
BuildRequires: glib2-devel
|
|
BuildRequires: polkit-devel
|
|
BuildRequires: libxslt
|
|
BuildRequires: libxml2
|
|
%endif
|
|
|
|
Patch0: usbguard-0.6.3-disable-cast-align-warning.patch
|
|
Patch1: usbguard-0.7.0-disable-unused-parameter-warning.patch
|
|
Patch2: usbguard-0.7.1-quiet-compiler-warnings.patch
|
|
# Workaround: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66425
|
|
Patch3: usbguard-0.7.1-disable-unused-result.patch
|
|
|
|
%description
|
|
The USBGuard software framework helps to protect your computer against rogue USB
|
|
devices by implementing basic whitelisting/blacklisting capabilities based on
|
|
USB device attributes.
|
|
|
|
%package devel
|
|
Summary: Development files for %{name}
|
|
Group: Development/Libraries
|
|
Requires: %{name} = %{version}-%{release}
|
|
Requires: pkgconfig
|
|
Requires: libstdc++-devel
|
|
|
|
%description devel
|
|
The %{name}-devel package contains libraries and header files for
|
|
developing applications that use %{name}.
|
|
|
|
%package tools
|
|
Summary: USBGuard Tools
|
|
Group: Applications/System
|
|
Requires: %{name} = %{version}-%{release}
|
|
|
|
%description tools
|
|
The %{name}-tools package contains optional tools from the USBGuard
|
|
software framework.
|
|
|
|
%if 0%{with_gui_qt5}
|
|
###
|
|
%package applet-qt
|
|
Summary: USBGuard Qt 5.x Applet
|
|
Group: Applications/System
|
|
Requires: %{name} = %{version}-%{release}
|
|
Obsoletes: usbguard-applet-qt <= 0.3
|
|
|
|
%description applet-qt
|
|
The %{name}-applet-qt package contains an optional Qt 5.x desktop applet
|
|
for interacting with the USBGuard daemon component.
|
|
###
|
|
%endif
|
|
|
|
%if 0%{with_dbus}
|
|
###
|
|
%package dbus
|
|
Summary: USBGuard D-Bus Service
|
|
Group: Applications/System
|
|
Requires: %{name} = %{version}-%{release}
|
|
Requires: dbus
|
|
Requires: polkit
|
|
|
|
%description dbus
|
|
The %{name}-dbus package contains an optional component that provides
|
|
a D-Bus interface to the USBGuard daemon component.
|
|
###
|
|
%endif
|
|
|
|
%prep
|
|
%setup -q
|
|
# Remove bundled library sources before build
|
|
rm -rf src/ThirdParty/{Catch,PEGTL}
|
|
|
|
%patch0 -p1
|
|
%patch1 -p1
|
|
%patch2 -p1
|
|
%patch3 -p1
|
|
|
|
%build
|
|
mkdir -p ./m4
|
|
autoreconf -i -v --no-recursive ./
|
|
%configure \
|
|
--disable-silent-rules \
|
|
--without-bundled-catch \
|
|
--without-bundled-pegtl \
|
|
--enable-systemd \
|
|
%if 0%{with_gui_qt5}
|
|
--with-gui-qt=qt5 \
|
|
%endif
|
|
%if 0%{with_dbus}
|
|
--with-dbus \
|
|
--with-polkit \
|
|
%else
|
|
--without-dbus \
|
|
--without-polkit \
|
|
%endif
|
|
--with-crypto-library=gcrypt \
|
|
--enable-werror
|
|
|
|
make %{?_smp_mflags}
|
|
|
|
%check
|
|
make check
|
|
|
|
%install
|
|
make install INSTALL='install -p' DESTDIR=%{buildroot}
|
|
|
|
# Overwrite configuration with distribution defaults
|
|
mkdir -p %{buildroot}%{_sysconfdir}/usbguard
|
|
install -p -m 644 %{SOURCE1} %{buildroot}%{_sysconfdir}/usbguard/usbguard-daemon.conf
|
|
|
|
# Cleanup
|
|
find %{buildroot} \( -name '*.la' -o -name '*.a' \) -exec rm -f {} ';'
|
|
|
|
%preun
|
|
%systemd_preun usbguard.service
|
|
|
|
%post
|
|
/sbin/ldconfig
|
|
%systemd_post usbguard.service
|
|
|
|
%postun
|
|
/sbin/ldconfig
|
|
%systemd_postun usbguard.service
|
|
|
|
%files
|
|
%defattr(-,root,root,-)
|
|
%doc README.adoc CHANGELOG.md
|
|
%license LICENSE
|
|
%{_libdir}/*.so.*
|
|
%{_sbindir}/usbguard-daemon
|
|
%{_bindir}/usbguard
|
|
%dir %{_localstatedir}/log/usbguard
|
|
%dir %{_sysconfdir}/usbguard
|
|
%dir %{_sysconfdir}/usbguard/IPCAccessControl.d
|
|
%config(noreplace) %attr(0600,-,-) %{_sysconfdir}/usbguard/usbguard-daemon.conf
|
|
%config(noreplace) %attr(0600,-,-) %{_sysconfdir}/usbguard/rules.conf
|
|
%{_unitdir}/usbguard.service
|
|
%{_datadir}/man/man8/usbguard-daemon.8.gz
|
|
%{_datadir}/man/man5/usbguard-daemon.conf.5.gz
|
|
%{_datadir}/man/man5/usbguard-rules.conf.5.gz
|
|
%{_datadir}/man/man1/usbguard.1.gz
|
|
%{_datadir}/bash-completion/completions/usbguard
|
|
|
|
%files devel
|
|
%defattr(-,root,root,-)
|
|
%{_includedir}/*
|
|
%{_libdir}/*.so
|
|
%{_libdir}/pkgconfig/*.pc
|
|
|
|
%files tools
|
|
%defattr(-,root,root,-)
|
|
%{_bindir}/usbguard-rule-parser
|
|
|
|
%if 0%{with_gui_qt5}
|
|
###
|
|
%files applet-qt
|
|
%defattr(-,root,root,-)
|
|
%{_bindir}/usbguard-applet-qt
|
|
%{_mandir}/man1/usbguard-applet-qt.1.gz
|
|
%{_datadir}/applications/usbguard-applet-qt.desktop
|
|
%{_datadir}/icons/hicolor/scalable/apps/usbguard-icon.svg
|
|
###
|
|
%endif
|
|
|
|
%if 0%{with_dbus}
|
|
###
|
|
%files dbus
|
|
%defattr(-,root,root,-)
|
|
%{_sbindir}/usbguard-dbus
|
|
%{_datadir}/dbus-1/system-services/org.usbguard.service
|
|
%{_datadir}/dbus-1/system.d/org.usbguard.conf
|
|
%{_datadir}/polkit-1/actions/org.usbguard.policy
|
|
%{_unitdir}/usbguard-dbus.service
|
|
%{_mandir}/man8/usbguard-dbus.8.gz
|
|
|
|
%preun dbus
|
|
%systemd_preun usbguard-dbus.service
|
|
|
|
%post dbus
|
|
%systemd_post usbguard-dbus.service
|
|
|
|
%postun dbus
|
|
%systemd_postun_with_restart usbguard-dbus.service
|
|
###
|
|
%endif
|
|
|
|
%changelog
|
|
* Wed Dec 06 2017 Daniel Kopeček <dkopecek@redhat.com> - 0.7.1-1
|
|
- Update to 0.7.1
|
|
|
|
* Wed Nov 29 2017 Igor Gnatenko <ignatenko@redhat.com> - 0.7.0-9
|
|
- Rebuild for protobuf 3.5
|
|
|
|
* Mon Nov 13 2017 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 0.7.0-8
|
|
- Rebuild for protobuf 3.4
|
|
|
|
* Mon Oct 16 2017 Daniel Kopeček <dkopecek@redhat.com> 0.7.0-7
|
|
- Fix enumeration timeout on kernel >= 4.13
|
|
Resolves: rhbz#1499052
|
|
|
|
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-6
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-5
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
* Thu Jul 13 2017 Daniel Kopeček <dkopecek@redhat.com> 0.7.0-4
|
|
- Added patch to disable unused parameter warning for protobuf
|
|
generated sources to fix compilation with newer protobuf version
|
|
|
|
* Tue Jun 13 2017 Orion Poplawski <orion@cora.nwra.com> - 0.7.0-3
|
|
- Rebuild for protobuf 3.3.1
|
|
|
|
* Mon May 15 2017 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.0-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_27_Mass_Rebuild
|
|
|
|
* Thu Apr 13 2017 Daniel Kopeček <dkopecek@redhat.com> 0.7.0-1
|
|
- Update to 0.7.0
|
|
- changed PresentDevicePolicy setting from keep to apply-policy
|
|
- added AuditFilePath configuration option pointing to
|
|
/var/log/usbguard/usbguard-audit.log file
|
|
- install bash-completion script
|
|
- use 0600 file permissions for usbguard-daemon.conf and rules.conf
|
|
|
|
* Sun Mar 19 2017 Daniel Kopeček <dkopecek@redhat.com> 0.6.3-0.1.20170319
|
|
- Update to latest git snapshot
|
|
|
|
* Fri Mar 17 2017 Daniel Kopeček <dkopecek@redhat.com> 0.6.3-0.1.20170317
|
|
- Update to latest git snapshot
|
|
- Use --enable-werror configure option as the upstream default
|
|
changed to not use -Werror.
|
|
|
|
* Thu Mar 02 2017 Daniel Kopeček <dkopecek@redhat.com> 0.6.3-0.1.20170301
|
|
- Update to latest git snapshot
|
|
- Disabled upstream alignment warning compiler flag
|
|
|
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.6.2-4
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
* Thu Jan 26 2017 Orion Poplawski <orion@cora.nwra.com> - 0.6.2-3
|
|
- Rebuild for protobuf 3.2.0
|
|
|
|
* Sat Nov 19 2016 Orion Poplawski <orion@cora.nwra.com> - 0.6.2-2
|
|
- Rebuild for protobuf 3.1.0
|
|
|
|
* Sun Sep 18 2016 Daniel Kopeček <dkopecek@redhat.com> 0.6.2-1
|
|
- Update to 0.6.2
|
|
|
|
* Fri Sep 16 2016 Daniel Kopeček <dkopecek@redhat.com> 0.6.1-1
|
|
- Update to 0.6.1
|
|
|
|
* Sun Sep 04 2016 Daniel Kopeček <dkopecek@redhat.com> 0.6.0-1
|
|
- Update to 0.6.0
|
|
|
|
* Thu Aug 18 2016 Daniel Kopeček <dkopecek@redhat.com> 0.5.14-1
|
|
- Update to 0.5.14
|
|
|
|
* Tue Aug 16 2016 Daniel Kopeček <dkopecek@redhat.com> 0.5.13-1
|
|
- Update to 0.5.13
|
|
|
|
* Sun Aug 14 2016 Daniel Kopeček <dkopecek@redhat.com> 0.5.12-1
|
|
- Update to 0.5.12
|
|
|
|
* Sat Aug 13 2016 Daniel Kopeček <dkopecek@redhat.com> 0.5.11-2
|
|
- Update source tarball
|
|
- Ship CHANGELOG.md
|
|
|
|
* Sat Aug 13 2016 Daniel Kopeček <dkopecek@redhat.com> 0.5.11-1
|
|
- Update to 0.5.11
|
|
- Use libgcrypt instead of libsodium for crypto
|
|
|
|
* Thu Jul 21 2016 Daniel Kopecek <dkopecek@redhat.com> 0.5.10-2
|
|
- Adjust the default configuration to keep the authorization state
|
|
of present controller devices.
|
|
|
|
* Sat Jul 09 2016 Daniel Kopecek <dkopecek@redhat.com> 0.5.10-1
|
|
- Update to release 0.5.10
|
|
|
|
* Mon Mar 07 2016 Remi Collet <remi@fedoraproject.org> - 0.4-5
|
|
- rebuild for new libsodium soname
|
|
|
|
* Sun Feb 07 2016 Daniel Kopecek <dkopecek@redhat.com> 0.4-4
|
|
- Update to version 0.4
|
|
- added usbguard CLI
|
|
- added a tools subpackage with usbguard-rule-parser binary
|
|
|
|
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.3p3-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3p3-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
* Tue Apr 14 2015 Daniel Kopecek <dkopecek@redhat.com> 0.3p3-1
|
|
- Update to version 0.3p3
|
|
- added %check section
|
|
- removed explicit -devel requires on systemd, libqb and
|
|
libsodium devel files
|
|
- added -devel requires on libstdc++-devel
|
|
|
|
* Sat Apr 11 2015 Daniel Kopecek <dkopecek@redhat.com> 0.3p2-1
|
|
- Update to version 0.3p2
|
|
- use system-wide json and spdlog packages
|
|
|
|
* Fri Apr 10 2015 Daniel Kopecek <dkopecek@redhat.com> 0.3p1-1
|
|
- Update to version 0.3p1
|
|
- removed bundled cppformat copylib
|
|
|
|
* Thu Apr 09 2015 Daniel Kopecek <dkopecek@redhat.com> 0.3-1
|
|
- Update to version 0.3
|
|
- disabled silent rules
|
|
- install license file
|
|
- added man pages
|
|
- use _hardened_build 1 instead of custom compilation flags
|
|
- fix file permissions on files in /etc
|
|
- do not install an empty rule set file
|
|
|
|
* Fri Apr 03 2015 Daniel Kopecek <dkopecek@redhat.com> 0.2-1
|
|
- Update to version 0.2
|
|
- Updated description
|
|
- Corrected package group
|
|
|
|
* Tue Mar 17 2015 Daniel Kopecek <dkopecek@redhat.com> 0.1-1
|
|
- Initial package
|