Accepting request 143958 from security

Verify GPG signature: Perform build-time offline GPG verification.
Please verify that included keyring matches your needs.
For manipulation with the offline keyring, please use gpg-offline tool from openSUSE:Factory, devel-tools-building or Base:System.
See the man page and/or /usr/share/doc/packages/gpg-offline/PACKAGING.HOWTO.

If you need to build your package for older products and don't want to mess spec file with ifs, please follow PACKAGING.HOWTO:
you can link or aggregate gpg-offline from
devel:tools:building or use following trick with "osc meta prjconf":

--- Cut here ----
%if 0%{?suse_version} <= 1220
Substitute: gpg-offline
%endif

Macros:
%gpg_verify(dnf) \
%if 0%{?suse_version} > 1220\
echo "WARNING: Using %%gpg_verify macro from prjconf, not from gpg-offline package."\
gpg-offline --directory="%{-d:%{-d*}}%{!-d:%{_sourcedir}}" --package="%{-n:%{-n*}}%{!-n:%{name}}""%{-f: %{-f*}}" --verify %{**}\
%else\
echo "WARNING: Dummy prjconf macro. gpg-offline is not available, skipping %{**} GPG signature verification!"\
%endif\
%nil
-----------------
 (forwarded request 143937 from sbrabec)

OBS-URL: https://build.opensuse.org/request/show/143958
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/tomoyo-tools?expand=0&rev=12

tomoyo-tools.changes

@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Thu Nov 29 19:20:40 CET 2012 - sbrabec@suse.cz
+
+- Verify GPG signature.
+
 -------------------------------------------------------------------
 Wed Oct 19 13:26:11 UTC 2011 - meissner@suse.com
 

tomoyo-tools.keyring

@@ -0,0 +1,20 @@
+pub   1024D/4B975A98 2008-07-29 [expires: 2013-07-29]
+uid                  Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.19 (GNU/Linux)
+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eZB3
+-----END PGP PUBLIC KEY BLOCK-----

tomoyo-tools.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package tomoyo-tools
 #
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -21,15 +21,16 @@
 BuildRequires:  ncurses-devel
 
 Name:           tomoyo-tools
+Summary:        Userspace tools for TOMOYO Linux 2.4.x
 License:        GPL-2.0
 Group:          Development/Tools/Other
-AutoReqProv:    on
-Summary:        Userspace tools for TOMOYO Linux 2.4.x
 Url:            http://sourceforge.jp/projects/tomoyo/
 Version:        2.4.0.20110929
-Release:        81
+Release:        0
 Source0:        http://sourceforge.jp/frs/redir.php?f=/tomoyo/52848/tomoyo-tools-%{downloadver}.tar.gz
 Source1:        http://sourceforge.jp/frs/redir.php?f=/tomoyo/52848/tomoyo-tools-%{downloadver}.tar.gz.asc
+Source2:        %{name}.keyring
+BuildRequires:  gpg-offline
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %description
@@ -37,6 +38,7 @@ This package contains userspace tools for administrating TOMOYO Linux 2.4.
 Please see http://tomoyo.sourceforge.jp/2.4/ for documentation.
 
 %prep
+%gpg_verify %{S:1}
 %setup -q -n %{name}
 
 %build