Compare commits
27 Commits
Author | SHA256 | Date | |
---|---|---|---|
ea880556c3 | |||
|
0dd76c3fb1 | ||
28a3ba978a | |||
24b0354b14 | |||
660ade3bb1 | |||
73ddc33a8e | |||
|
e6e6fdcbb8 | ||
e9bed7037d | |||
090bf5ef30 | |||
|
cd05c14a49 | ||
|
7f9841f325 | ||
1507d9a094 | |||
7a9befa693 | |||
|
6e6893108a | ||
|
0823836080 | ||
066c89155b | |||
64fc4926ab | |||
|
4c1a7e3419 | ||
0b818bbcb7 | |||
d236d87ed8 | |||
03cfa0ca67 | |||
3a2bee3ebf | |||
73fb2a82f6 | |||
93d212c167 | |||
|
bf358d8fff | ||
747483e617 | |||
8b1778e6ae |
@ -1,4 +0,0 @@
|
||||
mtime: 1738574756
|
||||
commit: 0dd76c3fb1e8976e3f2203732d255929ddd4647604210f34bc9970c9c866a7c6
|
||||
url: https://src.opensuse.org/jengelh/sssd
|
||||
revision: master
|
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:057383006ab62d4a1ca24c5a28ada9061ca2aacd5b4b70b4384ba1850e394e6f
|
||||
size 256
|
@ -1,3 +1,8 @@
|
||||
-------------------------------------------------------------------
|
||||
Tue Mar 11 21:35:32 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
|
||||
|
||||
- Run mkdir/rm with verbose mode for the build log
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 30 14:24:04 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
|
||||
|
||||
|
34
sssd.spec
34
sssd.spec
@ -451,26 +451,26 @@ b="%buildroot"
|
||||
|
||||
# Copy some defaults
|
||||
%if "%{?_distconfdir}" != ""
|
||||
install -D -p -m 0600 src/examples/sssd-example.conf "$b/%_distconfdir/sssd/sssd.conf"
|
||||
install -d -m 0755 "$b/%_distconfdir/sssd/conf.d"
|
||||
install -Dpvm 0600 src/examples/sssd-example.conf "$b/%_distconfdir/sssd/sssd.conf"
|
||||
install -dvm 0755 "$b/%_distconfdir/sssd/conf.d"
|
||||
%else
|
||||
install -D -p -m 0600 src/examples/sssd-example.conf "$b/%_sysconfdir/sssd/sssd.conf"
|
||||
install -d -m 0755 "$b/%_sysconfdir/sssd/conf.d"
|
||||
install -Dpm 0600 src/examples/sssd-example.conf "$b/%_sysconfdir/sssd/sssd.conf"
|
||||
install -dvm 0755 "$b/%_sysconfdir/sssd/conf.d"
|
||||
%endif
|
||||
install -d "$b/%_unitdir"
|
||||
install -dv "$b/%_unitdir"
|
||||
%if 0%{?suse_version} > 1500
|
||||
install -d "$b/%_distconfdir/logrotate.d"
|
||||
install -m644 src/examples/logrotate "$b/%_distconfdir/logrotate.d/sssd"
|
||||
install -d "$b/%_pam_vendordir"
|
||||
install -dv "$b/%_distconfdir/logrotate.d"
|
||||
install -vm644 src/examples/logrotate "$b/%_distconfdir/logrotate.d/sssd"
|
||||
install -dv "$b/%_pam_vendordir"
|
||||
mv "$b/%_pam_confdir/sssd-shadowutils" "$b/%_pam_vendordir"
|
||||
%else
|
||||
install -d "$b/%_sysconfdir/logrotate.d"
|
||||
install -m644 src/examples/logrotate "$b/%_sysconfdir/logrotate.d/sssd"
|
||||
install -dv "$b/%_sysconfdir/logrotate.d"
|
||||
install -vm644 src/examples/logrotate "$b/%_sysconfdir/logrotate.d/sssd"
|
||||
%endif
|
||||
|
||||
rm -Rfv "$b/%_initddir"
|
||||
%if 0%{?suse_version} < 1600
|
||||
ln -s service "$b/%_sbindir/rcsssd"
|
||||
ln -sv service "$b/%_sbindir/rcsssd"
|
||||
%endif
|
||||
|
||||
mkdir -pv "$b/%sssdstatedir/mc"
|
||||
@ -478,8 +478,8 @@ find "$b" -type f -name "*.la" -print -delete
|
||||
%find_lang %name --all-name
|
||||
|
||||
# dummy target for cifs-idmap-plugin
|
||||
mkdir -p %{buildroot}%{_sysconfdir}/cifs-utils
|
||||
ln -s -f %{cifs_idmap_lib} %{buildroot}%{cifs_idmap_plugin}
|
||||
mkdir -pv %buildroot/%_sysconfdir/cifs-utils
|
||||
ln -sfv %cifs_idmap_lib %buildroot/%cifs_idmap_plugin
|
||||
|
||||
%python3_fix_shebang
|
||||
%if 0%{?suse_version} > 1600
|
||||
@ -490,16 +490,16 @@ sed -i '1s@#!.*python.*@#!%_bindir/python3.11@' "$b/%_libexecdir/%name/sss_analy
|
||||
%endif
|
||||
|
||||
echo 'u sssd - "System Security Services Daemon" /run/sssd /sbin/nologin' >system-user-sssd.conf
|
||||
mkdir -p "$b/%_sysusersdir"
|
||||
cp -a system-user-sssd.conf "$b/%_sysusersdir/"
|
||||
mkdir -pv "$b/%_sysusersdir"
|
||||
cp -av system-user-sssd.conf "$b/%_sysusersdir/"
|
||||
%sysusers_generate_pre system-user-sssd.conf random system-user-sssd.conf
|
||||
install -Dpm 0644 contrib/sssd-tmpfiles.conf "%buildroot/%_tmpfilesdir/%name.conf"
|
||||
install -Dpvm 0644 contrib/sssd-tmpfiles.conf "%buildroot/%_tmpfilesdir/%name.conf"
|
||||
#
|
||||
# Security considerations for capabilities, chown and stuff:
|
||||
# https://www.openwall.com/lists/oss-security/2024/12/19/1
|
||||
#
|
||||
# should match entry from %%files list
|
||||
mkdir -p "$b/%permissions_path"
|
||||
mkdir -pv "$b/%permissions_path"
|
||||
cat >"$b/%permissions_path/sssd" <<-EOF
|
||||
%_libexecdir/sssd/sssd_pam root:sssd 0750
|
||||
+capabilities cap_dac_read_search=p
|
||||
|
Loading…
x
Reference in New Issue
Block a user