Accepting request 1031090 from security

OBS-URL: https://build.opensuse.org/request/show/1031090
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rust-keylime?expand=0&rev=6

_service

@@ -14,8 +14,8 @@
   <!--    <param name="srcdir">rust-keylime</param> -->
   <!--    <param name="compression">xz</param> -->
   <!-- </service> -->
-  <!-- <service name="cargo_audit" mode="disabled"> -->
-  <!--    <param name="srcdir">rust-keylime</param> -->
-  <!-- </service> -->
+  <service name="cargo_audit" mode="disabled">
+    <param name="srcdir">rust-keylime</param>
+  </service> 
   <service name="set_version" mode="disabled"/>
 </services>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/keylime/rust-keylime.git</param>
-              <param name="changesrevision">0ea0492357432475377d7ed3e3e4a98927b8d529</param></service></servicedata>
+              <param name="changesrevision">f5de47bd3fdcf767403242d05032b5775f3883ed</param></service></servicedata>

rust-keylime-0.1.0+git.1664480840.0ea0492.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2b3625934ebce3ad5e604c5d124bc7e28b1cbe66a9f8c4ddef99f0ec13e095dd
-size 123780

rust-keylime-0.1.0+git.1666019359.f5de47b.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3689009ce99c1b288cdc6e77e13eb7e7b721948f0501620d584258d2c37595f2
+size 123780

rust-keylime.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Oct 25 08:16:33 UTC 2022 - aplanas@suse.com
+
+- Add cargo-audit service per policy
+- Update to version 0.1.0+git.1666019359.f5de47b:
+  * README: mark Rust agent as the official one, fix cargo run command
+
 -------------------------------------------------------------------
 Wed Oct 12 07:51:22 UTC 2022 - aplanas@suse.com
 

rust-keylime.spec

@@ -25,7 +25,7 @@
   %define _config_norepl %config(noreplace)
 %endif
 Name:           rust-keylime
-Version:        0.1.0+git.1664480840.0ea0492
+Version:        0.1.0+git.1666019359.f5de47b
 Release:        0
 Summary:        Rust implementation of the keylime agent
 License:        Apache-2.0 AND MIT
@@ -38,7 +38,7 @@ Source4:        keylime-user.conf
 Source5:        tmpfiles.keylime
 # PATCH-FIX-OPENSUSE keylime-agent.conf.diff
 Patch1:         keylime-agent.conf.diff
-BuildRequires:  cargo
+BuildRequires:  cargo-packaging
 BuildRequires:  clang
 BuildRequires:  firewall-macros
 BuildRequires:  libarchive-devel
@@ -51,6 +51,10 @@ Requires:       logrotate
 Requires:       tpm2.0-abrmd
 Provides:       user(keylime)
 %sysusers_requires
+# Disable this line if you wish to support all platforms.  In most
+# situations, you will likely only target tier1 arches for user facing
+# components.
+# ExclusiveArch:  %_{rust_tier1_arches}
 
 %description
 Rust implementation of keylime agent. Keylime is system integrity
@@ -62,11 +66,11 @@ mkdir .cargo
 cp %{SOURCE2} .cargo/config
 
 %build
-RUSTFLAGS=%{rustflags} cargo build --release --no-default-features --features "with-zmq"
+%{cargo_build} --no-default-features --features "with-zmq"
 %sysusers_generate_pre %{SOURCE4} keylime keylime-user.conf
 
 %install
-RUSTFLAGS=%{rustflags} cargo install --frozen --no-default-features --features "with-zmq" --root=%{buildroot}%{_prefix} --path .
+%{cargo_install} --no-default-features --features "with-zmq"
 
 install -Dpm 0600 keylime-agent.conf %{buildroot}%{_distconfdir}/keylime/agent.conf
 install -Dpm 0644 ./dist/systemd/system/keylime_agent.service %{buildroot}%{_unitdir}/keylime_agent.service
@@ -81,8 +85,8 @@ install -d %{buildroot}%{_libexecdir}/keylime
 # Create work directory
 mkdir -p %{buildroot}%{_sharedstatedir}/keylime
 
-rm %{buildroot}%{_prefix}/.crates.toml
-rm %{buildroot}%{_prefix}/.crates2.json
+# %_check
+# %_{cargo_test}
 
 %pre -f keylime.pre
 %service_add_pre keylime_agent.service

vendor.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:bd47248556be1aa9e661959b0fdcde9da8e437f73d1567666168608df25cfa87
-size 34231506
+oid sha256:461817a4fcad41b34e4df2965734fdb55c2dae0043eba1c5b119006a60758a9e
+size 21088228