d21e4dbb5a
- This release is the same as 0.3.2 but the version number in configure.ac was accidentally still set to 0.3.1 - Update to version 0.3.2: - fixes boo#1136958 / CVE-2019-12439 This release fixes a mostly theoretical security issue in unusual/broken setups where `$XDG_RUNTIME_DIR` is unset. There are some other smaller fixes, as well as an addition to the JSON API that allows reading the inner process exit code, separately from the `bwrap` exit code. - Print "Out of memory" on stderr, not stdout - bwrap: add option json-status-fd to show child exit code - bwrap: Report COMMAND exit code in json-status-fd - man page: Describe --chdir, not nonexistent --cwd - Don't create our own temporary mount point for pivot_root - Make lockdata long enough on 32-bit with 64-bit file pointers. OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/bubblewrap?expand=0&rev=17
67 lines
2.1 KiB
RPMSpec
67 lines
2.1 KiB
RPMSpec
#
|
|
# spec file for package bubblewrap
|
|
#
|
|
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: bubblewrap
|
|
Version: 0.3.3
|
|
Release: 0
|
|
Summary: Core execution tool for unprivileged containers
|
|
License: LGPL-2.0-or-later
|
|
Group: Productivity/Security
|
|
Url: https://github.com/projectatomic/bubblewrap
|
|
Source0: https://github.com/projectatomic/bubblewrap/releases/download/v%{version}/%{name}-%{version}.tar.xz
|
|
BuildRequires: autoconf
|
|
BuildRequires: automake
|
|
BuildRequires: docbook-xsl-stylesheets
|
|
BuildRequires: gcc
|
|
BuildRequires: git
|
|
BuildRequires: libcap-devel
|
|
BuildRequires: libtool
|
|
BuildRequires: libxslt
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: pkgconfig(libselinux)
|
|
|
|
%description
|
|
Bubblewrap (%{_bindir}/bwrap) is a core execution engine for unprivileged
|
|
containers that works as a setuid binary on kernels without
|
|
user namespaces.
|
|
|
|
%prep
|
|
%autosetup -n %{name}-%{version}
|
|
sed -i '1d' completions/bash/bwrap
|
|
sed -i '1s/env //' demos/bubblewrap-shell.sh demos/userns-block-fd.py
|
|
|
|
%build
|
|
env NOCONFIGURE=1 ./autogen.sh
|
|
%configure --disable-silent-rules --with-priv-mode=none
|
|
make %{?_smp_mflags}
|
|
|
|
%install
|
|
%make_install DESTDIR=%{buildroot} INSTALL="install -p -c"
|
|
find %{buildroot} -type f -name "*.la" -delete -print
|
|
|
|
%files
|
|
%license COPYING
|
|
%doc README.md demos
|
|
%dir %{_datadir}/bash-completion
|
|
%dir %{_datadir}/bash-completion/completions
|
|
%{_datadir}/bash-completion/completions/bwrap
|
|
%{_bindir}/bwrap
|
|
%{_mandir}/man1/*
|
|
|
|
%changelog
|