pool/cepces
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 913166 from home:dmulder:branches:security:idm:no_selinux

Browse Source 
- Disable selinux where not supported; (jsc#SLE-18456).

OBS-URL: https://build.opensuse.org/request/show/913166
OBS-URL: https://build.opensuse.org/package/show/security:idm/cepces?expand=0&rev=6
This commit is contained in:
David Mulder 2021-08-19 18:38:12 +00:00 committed by Git OBS Bridge
parent 8b7838fd02
commit febfaf2aeb
2 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cepces.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Thu Aug 19 14:39:17 UTC 2021 - David Mulder <dmulder@suse.com>
- Disable selinux where not supported; (jsc#SLE-18456).
-------------------------------------------------------------------
Mon Jul 19 14:32:34 UTC 2021 - David Mulder <dmulder@suse.com>

12
cepces.spec
View File

@ -31,7 +31,9 @@ Source0: %{name}-%{version}.tar.bz2
BuildArch: noarch
Requires: %{app_name}-certmonger == %{version}
%if 0%{?sle_version} > 150300 || 0%{?suse_version} > 1500
Requires: %{app_name}-selinux == %{version}
%endif
Requires: python3-%{app_name} == %{version}
%description
@ -64,6 +66,7 @@ Requires: certmonger
%{app_name} is an application for enrolling certificates through CEP and CES.
This package provides the certmonger integration.
%if 0%{?sle_version} > 150300 || 0%{?suse_version} > 1500
%package selinux
Summary: SELinux support for %{app_name}
@ -74,6 +77,7 @@ Requires(post): selinux-policy-targeted
%description selinux
SELinux support for %{app_name}
%endif
%prep
%setup -q -n %{app_name}-%{version}
@ -81,17 +85,20 @@ SELinux support for %{app_name}
%build
%py3_build
%if 0%{?sle_version} > 150300 || 0%{?suse_version} > 1500
# Build the SELinux module(s).
for SELINUXVARIANT in %{selinux_variants}; do
make -C selinux clean all
mv -v selinux/%{app_name}.pp selinux/%{app_name}-${SELINUXVARIANT}.pp
done
%endif
%install
%py3_install
install -d -m 0700 %{buildroot}%{logdir}
%if 0%{?sle_version} > 150300 || 0%{?suse_version} > 1500
# Install the SELinux module(s).
rm -fv selinux-files.txt
@ -103,6 +110,7 @@ for SELINUXVARIANT in %{selinux_variants}; do
echo %{_datadir}/selinux/${SELINUXVARIANT}/%{app_name}.pp >> \
selinux-files.txt
done
%endif
# Install configuration files.
install -d %{buildroot}%{_sysconfdir}/%{app_name}
@ -121,6 +129,7 @@ install -p -m 755 bin/%{app_name}-submit \
sed -i 's/\/usr\/bin\/env python3/\/usr\/bin\/python3/g' %{buildroot}%{_libexecdir}/certmonger/%{app_name}-submit
%if 0%{?sle_version} > 150300 || 0%{?suse_version} > 1500
%post selinux
for SELINUXVARIANT in %{selinux_variants}; do
%{_sbindir}/semodule -n -s ${SELINUXVARIANT} \
@ -142,6 +151,7 @@ then
fi
done
fi
%endif
%post certmonger
# Install the CA into certmonger.
@ -177,7 +187,9 @@ popd
%dir %{_libexecdir}/certmonger
%{_libexecdir}/certmonger/%{app_name}-submit
%if 0%{?sle_version} > 150300 || 0%{?suse_version} > 1500
%files selinux -f selinux-files.txt
%defattr(0644,root,root,0755)
%endif
%changelog