Accepting request 507005 from home:msmeissn:branches:security

- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.

OBS-URL: https://build.opensuse.org/request/show/507005
OBS-URL: https://build.opensuse.org/package/show/security/libkcapi?expand=0&rev=8
This commit is contained in:
Marcus Meissner 2017-06-29 09:56:15 +00:00 committed by Git OBS Bridge
parent c0795e8fb0
commit fb0569cfc9
3 changed files with 53 additions and 2 deletions

View File

@ -0,0 +1,44 @@
Index: libkcapi-0.13.0/apps/Makefile
===================================================================
--- libkcapi-0.13.0.orig/apps/Makefile
+++ libkcapi-0.13.0/apps/Makefile
@@ -65,27 +65,26 @@ install:
install -d ${DESTDIR}$(BINDIR)/
install -m 0755 $(NAME) -D -t ${DESTDIR}$(BINDIR)/
install -m 0755 sha1sum -D -t ${DESTDIR}$(BINDIR)/
- ./fipshmac ${DESTDIR}$(BINDIR)/sha1sum
+ fipshmac ${DESTDIR}$(BINDIR)/sha1sum
install -m 0755 sha224sum -D -t ${DESTDIR}$(BINDIR)/
- ./fipshmac ${DESTDIR}$(BINDIR)/sha224sum
+ fipshmac ${DESTDIR}$(BINDIR)/sha224sum
install -m 0755 sha256sum -D -t ${DESTDIR}$(BINDIR)/
- ./fipshmac ${DESTDIR}$(BINDIR)/sha256sum
+ fipshmac ${DESTDIR}$(BINDIR)/sha256sum
install -m 0755 sha384sum -D -t ${DESTDIR}$(BINDIR)/
- ./fipshmac ${DESTDIR}$(BINDIR)/sha384sum
+ fipshmac ${DESTDIR}$(BINDIR)/sha384sum
install -m 0755 sha512sum -D -t ${DESTDIR}$(BINDIR)/
- ./fipshmac ${DESTDIR}$(BINDIR)/sha512sum
+ fipshmac ${DESTDIR}$(BINDIR)/sha512sum
install -m 0755 fipscheck -D -t ${DESTDIR}$(BINDIR)/
- ./fipshmac ${DESTDIR}$(BINDIR)/fipscheck
+ fipshmac ${DESTDIR}$(BINDIR)/fipscheck
install -m 0755 fipshmac -D -t ${DESTDIR}$(BINDIR)/
- ./fipshmac ${DESTDIR}$(BINDIR)/fipshmac
+ fipshmac ${DESTDIR}$(BINDIR)/fipshmac
install -m 0755 sha1hmac -D -t ${DESTDIR}$(BINDIR)/
- ./sha512hmac sha1hmac > ${DESTDIR}$(BINDIR)/.sha1hmac.hmac
+ fipshmac ${DESTDIR}$(BINDIR)/sha1hmac
install -m 0755 sha224hmac -D -t ${DESTDIR}$(BINDIR)/
- ./sha512hmac sha224hmac > ${DESTDIR}$(BINDIR)/.sha224hmac.hmac
+ fipshmac ${DESTDIR}$(BINDIR)/sha224hmac
install -m 0755 sha256hmac -D -t ${DESTDIR}$(BINDIR)/
- ./sha512hmac sha256hmac > ${DESTDIR}$(BINDIR)/.sha256hmac.hmac
+ fipshmac ${DESTDIR}$(BINDIR)/sha256hmac
install -m 0755 sha384hmac -D -t ${DESTDIR}$(BINDIR)/
- ./sha512hmac sha384hmac > ${DESTDIR}$(BINDIR)/.sha384hmac.hmac
+ fipshmac ${DESTDIR}$(BINDIR)/sha384hmac
install -m 0755 sha512hmac -D -t ${DESTDIR}$(BINDIR)/
- ./sha512hmac sha512hmac > ${DESTDIR}$(BINDIR)/.sha512hmac.hmac
-
+ fipshmac ${DESTDIR}$(BINDIR)/sha512hmac

View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Thu Jun 29 08:13:54 UTC 2017 - meissner@suse.com
- libkcapi-use-external-fipshmac.patch: use external fipshmac,
our chroots / vm builds do not necessarily have the right kernel.
-------------------------------------------------------------------
Wed Jun 28 08:03:30 UTC 2017 - jengelh@inai.de

View File

@ -25,9 +25,9 @@ Group: Productivity/Security
Url: http://www.chronox.de/libkcapi.html
#Source: https://github.com/smuellerDD/libkcapi/archive/v0.13.0.zip
Source: libkcapi-0.13.0.tar.bz2
# this ensures this kernel is booted actually... as the kernel crypto api is used during testing.
BuildRequires: kernel-default
Patch0: libkcapi-use-external-fipshmac.patch
BuildRequires: docbook-utils xmlto
BuildRequires: fipscheck
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
@ -72,6 +72,7 @@ libkcapi user space tools to access certain hash algorithms.
%prep
%setup -q
%patch0 -p1
%build
cd lib