commit eac9c25f04eb0269ebcfa04a3e17d6d627500e771d65f248c11f336d7faf8fda Author: Martin Pluskal Date: Tue Nov 1 08:27:26 2022 +0000 Accepting request 1030863 from home:gladiac Add the latest cwrap wrapper ... OBS-URL: https://build.opensuse.org/request/show/1030863 OBS-URL: https://build.opensuse.org/package/show/devel:tools/priv_wrapper?expand=0&rev=1 diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/priv_wrapper-1.0.0.tar.gz b/priv_wrapper-1.0.0.tar.gz new file mode 100644 index 0000000..6967607 --- /dev/null +++ b/priv_wrapper-1.0.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:00a46013aee3b1fddb8c84369bbcb7f7733969ce3db9e1ce44fe3237d07d8535 +size 31545 diff --git a/priv_wrapper-1.0.0.tar.gz.asc b/priv_wrapper-1.0.0.tar.gz.asc new file mode 100644 index 0000000..1fcb2aa --- /dev/null +++ b/priv_wrapper-1.0.0.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEjf9T4Y8qvI2PPJIjfuD8TcwBTj0FAmNWbwUACgkQfuD8TcwB +Tj2r+BAApO1QivmVmz8S+QFk30gK/gJ2ZdXlh+i7ZkalfWDRoqym6JZ9NntG9I59 +aslMNjwb2T1ADKFXfzr2lC5iioNexMhL38WBddjpCE4fXTa4+BCKi36rPQhN4mIQ +HWxKSl3XIYWbLbS3Ug9GAVI6UyLmLakANWSVvMKBpuN+gMpeTVsQPbBA3GhkaN8v +vc8Z2BBS/jUwqvtogi1rmwE7vWTOh3/Vcmp2YWwRDi6gAnr0A9tgoaRb+TDMy4rw +yhoHc+eIO5v+rQmDBl3x1Sr69Xc9HMEjCBL1n2BpigIR+wy65m+nkCtYydcXsfcF +cZZOu8t8YWFvIaAFmNtr0J+ZKncSyc+i+8I3Hub6vl6XI7ruAxzzcruNW6FBzG2P +s1Ng8YB2Qg0STP3Tc5Px4kmwcAIn4JtDQ05GWl0I3BkEFYTgJakm82VHmD+RNZjk +AGkrqw5jIUkpWfvUQ3w3wsUTvB1AaOPKk7zMAPV9ZjhYaVHQycNEaErUluxD4M8r +VwXZJewIVkFo08O0mmy0xBUTXr/V1JwSUcHVmP1a8gAW+G8esDU5dX8QTfcHH7mM +LpG35uHOzgakjOwIyEJtlYLo4YGdpxT0TDD5zkaF4ZtXqCQ3/gBWhse2Zt56arKm ++oFPFzt+lFmgn49xzfEgIanOIb1rdujyfLK5huGvXilNoWWGeKk= +=llkX +-----END PGP SIGNATURE----- diff --git a/priv_wrapper-rpmlintrc b/priv_wrapper-rpmlintrc new file mode 100644 index 0000000..49634f9 --- /dev/null +++ b/priv_wrapper-rpmlintrc @@ -0,0 +1,7 @@ +# This is a special library only for testing purposes. You cannot link this +# library. It is only inteded to be used with LD_PRELOAD. This package is +# the devel package. +# +# Learn more at http://cwrap.org +# +addFilter("devel-file-in-non-devel-package") diff --git a/priv_wrapper.changes b/priv_wrapper.changes new file mode 100644 index 0000000..40be57f --- /dev/null +++ b/priv_wrapper.changes @@ -0,0 +1,4 @@ +------------------------------------------------------------------- +Mon Oct 24 11:06:37 UTC 2022 - Andreas Schneider + +- Initial package diff --git a/priv_wrapper.keyring b/priv_wrapper.keyring new file mode 100644 index 0000000..da7a828 Binary files /dev/null and b/priv_wrapper.keyring differ diff --git a/priv_wrapper.spec b/priv_wrapper.spec new file mode 100644 index 0000000..4883230 --- /dev/null +++ b/priv_wrapper.spec @@ -0,0 +1,88 @@ +# +# spec file for package priv_wrapper +# +# Copyright (c) 2022 Andreas Schneider +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +############################# NOTE ################################## +# +# This is a special library. You are not able to link this library. +# Do NOT create library package or a devel package! +# +############################# NOTE ################################## +Name: priv_wrapper +Version: 1.0.0 +Release: 0 +Summary: A library to disable resource limits and other privilege dropping +License: GPL-3.0-or-later +Group: Development/Libraries/C and C++ +URL: https://cwrap.org/ +Source0: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz +Source1: %{name}-rpmlintrc +Source2: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz.asc +Source3: priv_wrapper.keyring +BuildRequires: cmake +BuildRequires: libcmocka-devel +BuildRequires: pkgconf +BuildRequires: user(nobody) +Recommends: cmake +Recommends: pkgconf + +%description +priv_wrapper aims to help running processes which are dropping privileges or are +restricting resources in test environments. +It can disable chroot, prctl, pledge and setrlmit system calls. A disabled call always +succeeds (i.e. returns 0) and does nothing. +The system call pledge exists only on OpenBSD. + +To use it, set the following environment variables: + +LD_PRELOAD=libpriv_wrapper.so +PRIV_WRAPPER_CHROOT_DISABLE=1 + +This package does not have a devel package, because this project is for +development/testing. + +%prep +%setup -q + +%build +# CMAKE_SKIP_RPATH:BOOL=OFF is need to run the tests! +%cmake \ + -DUNIT_TESTING=ON \ + -DCMAKE_SKIP_RPATH:BOOL=OFF + +%make_build + +%install +%cmake_install + +%check +%ctest + +%post -p /sbin/ldconfig +%postun -p /sbin/ldconfig + +%files +%doc AUTHORS README.md CHANGELOG.md +%license LICENSE +%{_libdir}/libpriv_wrapper.so* +%dir %{_libdir}/cmake/priv_wrapper +%{_libdir}/cmake/priv_wrapper/priv_wrapper-config-version.cmake +%{_libdir}/cmake/priv_wrapper/priv_wrapper-config.cmake +%{_libdir}/pkgconfig/priv_wrapper.pc +%{_mandir}/man1/priv_wrapper.1%{?ext_man} + +%changelog