2013-01-14 11:49:40 +01:00
|
|
|
#
|
|
|
|
# spec file for package pesign
|
|
|
|
#
|
2021-05-06 11:48:22 +02:00
|
|
|
# Copyright (c) 2021 SUSE LLC
|
2013-01-14 11:49:40 +01:00
|
|
|
#
|
|
|
|
# All modifications and additions to the file contributed by third parties
|
|
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
|
|
# upon. The license for this file, and modifications and additions to the
|
|
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
|
|
# license for the pristine package is not an Open Source License, in which
|
|
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
|
|
# published by the Open Source Initiative.
|
|
|
|
|
2019-05-10 08:29:21 +02:00
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
2013-01-14 11:49:40 +01:00
|
|
|
#
|
|
|
|
|
|
|
|
|
|
|
|
Name: pesign
|
2019-05-13 09:18:23 +02:00
|
|
|
Version: 113
|
2013-01-21 11:35:31 +01:00
|
|
|
Release: 0
|
2013-01-14 11:49:40 +01:00
|
|
|
Summary: Signing tool for PE-COFF binaries
|
2019-05-13 09:18:23 +02:00
|
|
|
License: GPL-3.0-or-later
|
2013-01-14 11:49:40 +01:00
|
|
|
Group: Productivity/Security
|
2019-12-04 03:51:34 +01:00
|
|
|
URL: https://github.com/rhinstaller/pesign
|
2015-08-17 04:24:40 +02:00
|
|
|
Source: https://github.com/rhinstaller/pesign/releases/download/%{version}/%{name}-%{version}.tar.bz2
|
2013-01-14 11:49:40 +01:00
|
|
|
# PATCH-FIX-SUSE pesign-suse-build.patch glin@suse.com -- Adjust Makefile for the build service
|
|
|
|
Patch1: pesign-suse-build.patch
|
2013-02-07 03:04:33 +01:00
|
|
|
# PATCH-FIX-UPSTREAM pesign-privkey_unneeded.diff glin@suse.com -- Don't check the private key when importing the raw signature
|
2019-05-13 09:18:23 +02:00
|
|
|
Patch2: pesign-privkey_unneeded.diff
|
2014-04-16 09:27:13 +02:00
|
|
|
# PATCH-FIX-SUSE pesign-run.patch aj@suse.com - Use /run instead of /var/run
|
2019-05-13 09:18:23 +02:00
|
|
|
Patch3: pesign-run.patch
|
2014-10-29 09:11:07 +01:00
|
|
|
# PATCH-FIX-UPSTREAM pesign-fix-authvar-write-loop.patch glin@suse.com -- Fix the write loop in authvar
|
2019-05-13 09:18:23 +02:00
|
|
|
Patch4: pesign-fix-authvar-write-loop.patch
|
2019-07-11 11:05:00 +02:00
|
|
|
# PATCH-FIX-UPSTREAM pesign-efikeygen-Fix-the-build-with-nss-3.44.patch glin@suse.com -- Fix the NSS 3.44 compilation error
|
|
|
|
Patch5: pesign-efikeygen-Fix-the-build-with-nss-3.44.patch
|
2019-07-31 05:41:57 +02:00
|
|
|
# PATCH-FIX-SUSE pesign-boo1143063-remove-var-tracking.patch -- boo#1143063 Remove var-tracking from default CFLAGS
|
|
|
|
Patch6: pesign-boo1143063-remove-var-tracking.patch
|
2019-12-04 03:51:34 +01:00
|
|
|
# PATCH-FIX-UPSTREAM pesign-boo1158197-fix-pesigncheck-gcc10.patch glin@suse.com -- boo#1158197 Fix the gcc10 errors
|
|
|
|
Patch7: pesign-boo1158197-fix-pesigncheck-gcc10.patch
|
2021-05-06 11:48:22 +02:00
|
|
|
# PATCH-FIX-UPSTREAM pesign-boo1185663-set-rpmmacrodir.patch boo#1185663 glin@suse.com -- Set the rpm macro directory at build time
|
|
|
|
Patch8: pesign-boo1185663-set-rpmmacrodir.patch
|
2014-10-29 09:11:07 +01:00
|
|
|
BuildRequires: efivar-devel
|
|
|
|
BuildRequires: libuuid-devel
|
2013-01-14 11:49:40 +01:00
|
|
|
BuildRequires: mozilla-nss-devel
|
|
|
|
BuildRequires: pkg-config
|
2013-01-21 11:35:31 +01:00
|
|
|
BuildRequires: popt-devel
|
2013-01-14 11:49:40 +01:00
|
|
|
BuildRequires: pkgconfig(systemd)
|
2019-04-29 05:44:06 +02:00
|
|
|
Requires(pre): shadow
|
2013-01-14 11:49:40 +01:00
|
|
|
%{?systemd_requires}
|
2019-05-10 08:29:21 +02:00
|
|
|
ExclusiveArch: ia64 %ix86 x86_64 aarch64 %arm
|
2013-01-14 11:49:40 +01:00
|
|
|
|
|
|
|
%description
|
2019-06-03 09:10:55 +02:00
|
|
|
Signing tool for PE-COFF binaries. It is vaguely compliant
|
2013-01-14 11:49:40 +01:00
|
|
|
with the PE and Authenticode specifications.
|
|
|
|
|
|
|
|
%prep
|
|
|
|
%setup -q
|
|
|
|
%patch1 -p1
|
|
|
|
%patch2 -p1
|
|
|
|
%patch3 -p1
|
2019-05-13 09:18:23 +02:00
|
|
|
%patch4 -p1
|
2019-07-11 11:05:00 +02:00
|
|
|
%patch5 -p1
|
2019-07-31 05:41:57 +02:00
|
|
|
%patch6 -p1
|
2019-12-04 03:51:34 +01:00
|
|
|
%patch7 -p1
|
2021-05-06 11:48:22 +02:00
|
|
|
%patch8 -p1
|
2013-01-14 11:49:40 +01:00
|
|
|
|
|
|
|
%build
|
2019-06-03 09:10:55 +02:00
|
|
|
make %{?_smp_mflags} CFLAGS="%{optflags}"
|
2013-01-14 11:49:40 +01:00
|
|
|
|
|
|
|
%install
|
2014-11-27 03:23:44 +01:00
|
|
|
mkdir -p %{buildroot}%{_localstatedir}/lib/pesign
|
|
|
|
mkdir -p %{buildroot}%{_sbindir}
|
2021-05-06 11:48:22 +02:00
|
|
|
make INSTALLROOT=%{buildroot} \
|
|
|
|
UNITDIR=%{_unitdir} \
|
|
|
|
libexecdir=%{_libexecdir} \
|
|
|
|
rpmmacrodir=%{_rpmmacrodir} \
|
|
|
|
install_systemd
|
2013-01-14 11:49:40 +01:00
|
|
|
|
2015-08-17 04:24:40 +02:00
|
|
|
# create rcsymlink
|
|
|
|
ln -sv %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}
|
|
|
|
|
2013-01-14 11:49:40 +01:00
|
|
|
# there's some stuff that's not really meant to be shipped yet
|
2014-11-27 03:23:44 +01:00
|
|
|
rm -rf %{buildroot}/boot %{buildroot}%{_prefix}/include
|
2013-01-14 11:49:40 +01:00
|
|
|
rm -rf %{buildroot}%{_libdir}/libdpe*
|
|
|
|
|
|
|
|
%pre
|
|
|
|
getent group pesign >/dev/null || groupadd -r pesign
|
2014-11-27 03:23:44 +01:00
|
|
|
getent passwd pesign >/dev/null || useradd -r -g pesign -d %{_localstatedir}/lib/pesign -s /bin/false -c "PE-COFF signing daemon" pesign
|
2013-01-14 11:49:40 +01:00
|
|
|
%service_add_pre pesign.service
|
|
|
|
|
|
|
|
%preun
|
|
|
|
%service_del_preun pesign.service
|
|
|
|
|
|
|
|
%post
|
|
|
|
%service_add_post pesign.service
|
2020-05-06 03:06:06 +02:00
|
|
|
systemd-tmpfiles --create %{_tmpfilesdir}/pesign.conf || :
|
2013-01-14 11:49:40 +01:00
|
|
|
|
|
|
|
%postun
|
2015-08-17 04:24:40 +02:00
|
|
|
%service_del_postun pesign.service
|
2013-01-14 11:49:40 +01:00
|
|
|
|
|
|
|
%files
|
|
|
|
%defattr(-,root,root)
|
2019-05-13 09:18:23 +02:00
|
|
|
%license COPYING
|
2013-01-14 11:49:40 +01:00
|
|
|
%{_bindir}/pesign
|
|
|
|
%{_bindir}/pesign-client
|
2013-07-16 08:43:52 +02:00
|
|
|
%{_bindir}/efikeygen
|
2014-06-12 05:26:16 +02:00
|
|
|
%{_bindir}/pesigcheck
|
|
|
|
%{_bindir}/efisiglist
|
|
|
|
%{_bindir}/authvar
|
2015-08-17 04:24:40 +02:00
|
|
|
%{_sbindir}/rcpesign
|
2015-12-01 10:03:35 +01:00
|
|
|
%dir %{_sysconfdir}/pesign
|
|
|
|
%{_sysconfdir}/pesign/*
|
2013-01-14 11:49:40 +01:00
|
|
|
%dir %{_sysconfdir}/popt.d
|
|
|
|
%config %{_sysconfdir}/popt.d/pesign.popt
|
|
|
|
%{_sysconfdir}/pki/
|
2021-05-06 11:48:22 +02:00
|
|
|
%config %{_rpmmacrodir}/macros.pesign
|
2013-01-14 11:49:40 +01:00
|
|
|
%{_mandir}/man?/*
|
2014-11-27 03:23:44 +01:00
|
|
|
%{_localstatedir}/lib/pesign
|
2013-01-14 11:49:40 +01:00
|
|
|
%{_unitdir}/pesign.service
|
2020-05-06 03:06:06 +02:00
|
|
|
%{_tmpfilesdir}/pesign.conf
|
2015-12-01 10:03:35 +01:00
|
|
|
%dir %{_libexecdir}/pesign
|
2019-05-13 09:18:23 +02:00
|
|
|
%{_libexecdir}/pesign/pesign-authorize
|
2013-01-14 11:49:40 +01:00
|
|
|
%dir %attr(0775,pesign,pesign) %{_sysconfdir}/pki/pesign
|
2014-04-16 09:27:13 +02:00
|
|
|
%ghost %dir %attr(0770,pesign,pesign) /run/%{name}
|
2013-01-14 11:49:40 +01:00
|
|
|
%dir %attr(0770,pesign,pesign) %{_localstatedir}/lib/%{name}
|
|
|
|
|
|
|
|
%changelog
|