pool/crypto-policies
SHA256
2
0
Fork 2
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ee902fbb42
crypto-policies/crypto-policies.spec

216 lines
8.2 KiB
RPMSpec
Raw Normal View History

Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
#
# spec file for package crypto-policies
#
# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
%global _python_bytecompile_extra 0
Name: crypto-policies
Accepting request 868718 from home:dimstar:Factory Let's use a real _service file. NOTE: the version is a small downgrade, but that's because I use %cd (aka commit date) as version identifier. in the _service file I used the same commit date, so in fact this is the same source. - Convert to use a proper git source _service: + To update, one just needs to update the commit/revision in the _service file and run `osc service dr`. + The version of the package is defined by the commit date of the revision, followed by the abbreviated git hash (The same revision used before results thus in a downgrade to 20210118, but as this is a alltime new package, this is acceptable. OBS-URL: https://build.opensuse.org/request/show/868718 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=7
2021-02-02 18:53:21 +01:00
Version: 20210118.b21c811
Accepting request 865444 from home:pmonrealgonzalez:branches:security:tls - Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option - Fix the man pages generation - Add crypto-policies-asciidoc.patch - Test only supported modules - Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos OBS-URL: https://build.opensuse.org/request/show/865444 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=2
2021-01-21 15:53:23 +01:00
Release: 0
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
Summary: System-wide crypto policies
License: LGPL-2.1-or-later
fix lua syntax in post section and add group tag OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=4
2021-02-02 14:17:12 +01:00
Group: Productivity/Networking/Security
OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=5
2021-02-02 17:59:41 +01:00
URL: https://gitlab.com/redhat-crypto/fedora-%{name}
Accepting request 870258 from home:pmonrealgonzalez:branches:security:tls - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch OBS-URL: https://build.opensuse.org/request/show/870258 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=8
2021-02-08 12:33:22 +01:00
Source0: fedora-%{name}-%{version}.tar.gz
Accepting request 865444 from home:pmonrealgonzalez:branches:security:tls - Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option - Fix the man pages generation - Add crypto-policies-asciidoc.patch - Test only supported modules - Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos OBS-URL: https://build.opensuse.org/request/show/865444 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=2
2021-01-21 15:53:23 +01:00
Source1: README.SUSE
Accepting request 870258 from home:pmonrealgonzalez:branches:security:tls - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch OBS-URL: https://build.opensuse.org/request/show/870258 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=8
2021-02-08 12:33:22 +01:00
Source2: crypto-policies.7.gz
Source3: fips-mode-setup.8.gz
Source4: fips-finish-install.8.gz
Source5: update-crypto-policies.8.gz
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
Patch0: crypto-policies-asciidoc.patch
Accepting request 865444 from home:pmonrealgonzalez:branches:security:tls - Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option - Fix the man pages generation - Add crypto-policies-asciidoc.patch - Test only supported modules - Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos OBS-URL: https://build.opensuse.org/request/show/865444 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=2
2021-01-21 15:53:23 +01:00
Patch1: crypto-policies-typos.patch
Patch2: crypto-policies-test_supported_modules_only.patch
Accepting request 870258 from home:pmonrealgonzalez:branches:security:tls - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch OBS-URL: https://build.opensuse.org/request/show/870258 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=8
2021-02-08 12:33:22 +01:00
Patch3: crypto-policies-no-build-manpages.patch
Accepting request 870817 from home:dimstar:Factory - Use tar_scm service, not obs_scm: With crypto-policies entering Ring0 (distro bootstrap) we want to be sure to keep the buildtime deps as low as possible. - Add python3-base BuildRequires: previously, OBS' tar service pulled this in for us. - Add a BuildIgnore for crypto-policies OBS-URL: https://build.opensuse.org/request/show/870817 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=10
2021-02-10 12:03:59 +01:00
BuildRequires: python3-base
Accepting request 870258 from home:pmonrealgonzalez:branches:security:tls - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch OBS-URL: https://build.opensuse.org/request/show/870258 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=8
2021-02-08 12:33:22 +01:00
# BuildRequires: asciidoc
- Update to git version 20210127 * Bump Python requirement to 3.6 * Output sigalgs required by nss >=3.59 * Do not require bind during build * Break build cycles with openssl and gnutls OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=3
2021-02-02 13:43:48 +01:00
# BuildRequires: gnutls >= 3.6.0
Accepting request 870258 from home:pmonrealgonzalez:branches:security:tls - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch OBS-URL: https://build.opensuse.org/request/show/870258 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=8
2021-02-08 12:33:22 +01:00
# BuildRequires: java-devel
# BuildRequires: libxslt
- Update to git version 20210127 * Bump Python requirement to 3.6 * Output sigalgs required by nss >=3.59 * Do not require bind during build * Break build cycles with openssl and gnutls OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=3
2021-02-02 13:43:48 +01:00
# BuildRequires: openssl
Accepting request 870258 from home:pmonrealgonzalez:branches:security:tls - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch OBS-URL: https://build.opensuse.org/request/show/870258 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=8
2021-02-08 12:33:22 +01:00
# BuildRequires: perl
# BuildRequires: python3-devel >= 3.6
# BuildRequires: perl(File::Copy)
# BuildRequires: perl(File::Temp)
# BuildRequires: perl(File::Which)
# BuildRequires: perl(File::pushd)
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
Recommends: crypto-policies-scripts
- Update to git version 20210127 * Bump Python requirement to 3.6 * Output sigalgs required by nss >=3.59 * Do not require bind during build * Break build cycles with openssl and gnutls OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=3
2021-02-02 13:43:48 +01:00
Conflicts: gnutls < 3.7.0
Accepting request 865444 from home:pmonrealgonzalez:branches:security:tls - Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option - Fix the man pages generation - Add crypto-policies-asciidoc.patch - Test only supported modules - Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos OBS-URL: https://build.opensuse.org/request/show/865444 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=2
2021-01-21 15:53:23 +01:00
#Conflicts: libreswan < 3.28
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
Conflicts: nss < 3.44.0
Accepting request 865444 from home:pmonrealgonzalez:branches:security:tls - Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option - Fix the man pages generation - Add crypto-policies-asciidoc.patch - Test only supported modules - Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos OBS-URL: https://build.opensuse.org/request/show/865444 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=2
2021-01-21 15:53:23 +01:00
#Conflicts: openssh < 8.2p1
- Add a BuildIgnore for crypto-policies OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=9
2021-02-08 12:47:47 +01:00
#!BuildIgnore: crypto-policies
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
BuildArch: noarch
%description
This package provides pre-built configuration files with
cryptographic policies for various cryptographic back-ends,
such as SSL/TLS libraries.
%package scripts
Summary: Tool to switch between crypto policies
Requires: %{name} = %{version}-%{release}
Recommends: grubby
Provides: fips-mode-setup = %{version}-%{release}
%description scripts
This package provides a tool update-crypto-policies, which applies
the policies provided by the crypto-policies package. These can be
either the pre-built policies from the base package or custom policies
defined in simple policy definition files.
The package also provides a tool fips-mode-setup, which can be used
to enable or disable the system FIPS mode.
%prep
Accepting request 868718 from home:dimstar:Factory Let's use a real _service file. NOTE: the version is a small downgrade, but that's because I use %cd (aka commit date) as version identifier. in the _service file I used the same commit date, so in fact this is the same source. - Convert to use a proper git source _service: + To update, one just needs to update the commit/revision in the _service file and run `osc service dr`. + The version of the package is defined by the commit date of the revision, followed by the abbreviated git hash (The same revision used before results thus in a downgrade to 20210118, but as this is a alltime new package, this is acceptable. OBS-URL: https://build.opensuse.org/request/show/868718 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=7
2021-02-02 18:53:21 +01:00
%autosetup -p1 -n fedora-%{name}-%{version}
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
%build
%make_build
%install
mkdir -p -m 755 %{buildroot}%{_datarootdir}/crypto-policies/
mkdir -p -m 755 %{buildroot}%{_datarootdir}/crypto-policies/back-ends/
mkdir -p -m 755 %{buildroot}%{_sysconfdir}/crypto-policies/back-ends/
mkdir -p -m 755 %{buildroot}%{_sysconfdir}/crypto-policies/state/
mkdir -p -m 755 %{buildroot}%{_sysconfdir}/crypto-policies/local.d/
mkdir -p -m 755 %{buildroot}%{_sysconfdir}/crypto-policies/policies/
mkdir -p -m 755 %{buildroot}%{_sysconfdir}/crypto-policies/policies/modules/
mkdir -p -m 755 %{buildroot}%{_bindir}
make DESTDIR=%{buildroot} DIR=%{_datarootdir}/crypto-policies MANDIR=%{_mandir} %{?_smp_mflags} install
Accepting request 870258 from home:pmonrealgonzalez:branches:security:tls - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch OBS-URL: https://build.opensuse.org/request/show/870258 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=8
2021-02-08 12:33:22 +01:00
# Install the manpages
mkdir -p -m 755 %{buildroot}%{_mandir}/
mkdir -p -m 755 %{buildroot}%{_mandir}/man7/
mkdir -p -m 755 %{buildroot}%{_mandir}/man8/
cp %{SOURCE2} %{buildroot}%{_mandir}/man7/
cp %{SOURCE3} %{SOURCE4} %{SOURCE5} %{buildroot}%{_mandir}/man8/
# Install the executable files
install -p -m 755 update-crypto-policies fips-finish-install fips-mode-setup %{buildroot}%{_bindir}/
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
install -p -m 644 default-config %{buildroot}%{_sysconfdir}/crypto-policies/config
touch %{buildroot}%{_sysconfdir}/crypto-policies/state/current
touch %{buildroot}%{_sysconfdir}/crypto-policies/state/CURRENT.pol
# Drop pre-generated GOST-ONLY policy, we do not need to ship the files
rm -rf %{buildroot}%{_datarootdir}/crypto-policies/GOST-ONLY
# Create back-end configs for mounting with read-only /etc/
for d in LEGACY DEFAULT FUTURE FIPS ; do
mkdir -p -m 755 %{buildroot}%{_datarootdir}/crypto-policies/back-ends/$d
for f in %{buildroot}%{_datarootdir}/crypto-policies/$d/* ; do
ln $f %{buildroot}%{_datarootdir}/crypto-policies/back-ends/$d/$(basename $f .txt).config
done
done
for f in %{buildroot}%{_datarootdir}/crypto-policies/DEFAULT/* ; do
ln -sf %{_datarootdir}/crypto-policies/DEFAULT/$(basename $f) %{buildroot}%{_sysconfdir}/crypto-policies/back-ends/$(basename $f .txt).config
done
%py3_compile %{buildroot}%{_datadir}/crypto-policies/python
Accepting request 865444 from home:pmonrealgonzalez:branches:security:tls - Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option - Fix the man pages generation - Add crypto-policies-asciidoc.patch - Test only supported modules - Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos OBS-URL: https://build.opensuse.org/request/show/865444 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=2
2021-01-21 15:53:23 +01:00
cp %{SOURCE1} %{buildroot}%{_sysconfdir}/crypto-policies
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
%check
- Update to git version 20210127 * Bump Python requirement to 3.6 * Output sigalgs required by nss >=3.59 * Do not require bind during build * Break build cycles with openssl and gnutls OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=3
2021-02-02 13:43:48 +01:00
%make_build check || :
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
%post -p <lua>
if not posix.access("%{_sysconfdir}/crypto-policies/config") then
local policy = "DEFAULT"
local cf = io.open("/proc/sys/crypto/fips_enabled", "r")
if cf then
if cf:read() == "1" then
policy = "FIPS"
end
cf:close()
end
cf = io.open("%{_sysconfdir}/crypto-policies/config", "w")
if cf then
cf:write(policy.."\n")
cf:close()
end
cf = io.open("%{_sysconfdir}/crypto-policies/state/current", "w")
if cf then
cf:write(policy.."\n")
cf:close()
end
local policypath = "%{_datarootdir}/crypto-policies/"..policy
for fn in posix.files(policypath) do
- Update to git version 20210127 * Bump Python requirement to 3.6 * Output sigalgs required by nss >=3.59 * Do not require bind during build * Break build cycles with openssl and gnutls OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=3
2021-02-02 13:43:48 +01:00
if fn ~= "." and fn ~= ".." then
local backend = fn:gsub(".*/", ""):gsub("%%..*", "")
local cfgfn = "%{_sysconfdir}/crypto-policies/back-ends/"..backend..".config"
posix.unlink(cfgfn)
posix.symlink(policypath.."/"..fn, cfgfn)
fix lua syntax in post section and add group tag OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=4
2021-02-02 14:17:12 +01:00
end
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
end
end
%posttrans scripts
%{_bindir}/update-crypto-policies --no-check >/dev/null 2>/dev/null || :
%files
%dir %{_sysconfdir}/crypto-policies/
%dir %{_sysconfdir}/crypto-policies/back-ends/
%dir %{_sysconfdir}/crypto-policies/state/
%dir %{_sysconfdir}/crypto-policies/local.d/
%dir %{_sysconfdir}/crypto-policies/policies/
%dir %{_sysconfdir}/crypto-policies/policies/modules/
%dir %{_datarootdir}/crypto-policies/
Accepting request 865444 from home:pmonrealgonzalez:branches:security:tls - Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option - Fix the man pages generation - Add crypto-policies-asciidoc.patch - Test only supported modules - Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos OBS-URL: https://build.opensuse.org/request/show/865444 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=2
2021-01-21 15:53:23 +01:00
%{_sysconfdir}/crypto-policies/README.SUSE
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/gnutls.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/openssl.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/opensslcnf.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/openssh.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/opensshserver.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/nss.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/bind.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/java.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/krb5.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/libreswan.config
%ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/back-ends/libssh.config
%ghost %{_sysconfdir}/crypto-policies/state/current
%ghost %{_sysconfdir}/crypto-policies/state/CURRENT.pol
%{_mandir}/man7/crypto-policies.7%{?ext_man}
%{_datarootdir}/crypto-policies/LEGACY
%{_datarootdir}/crypto-policies/DEFAULT
%{_datarootdir}/crypto-policies/FUTURE
%{_datarootdir}/crypto-policies/FIPS
%{_datarootdir}/crypto-policies/EMPTY
%{_datarootdir}/crypto-policies/back-ends
%{_datarootdir}/crypto-policies/default-config
%{_datarootdir}/crypto-policies/reload-cmds.sh
%{_datarootdir}/crypto-policies/policies
%license COPYING.LESSER
%files scripts
%{_bindir}/update-crypto-policies
%{_mandir}/man8/update-crypto-policies.8%{?ext_man}
%{_datarootdir}/crypto-policies/python
%{_bindir}/fips-mode-setup
%{_bindir}/fips-finish-install
%{_mandir}/man8/fips-mode-setup.8%{?ext_man}
%{_mandir}/man8/fips-finish-install.8%{?ext_man}
%changelog
Reference in New Issue Copy Permalink