ebff6cea9d
new package OBS-URL: https://build.opensuse.org/request/show/1113657 OBS-URL: https://build.opensuse.org/package/show/security/fudo?expand=0&rev=1
83 lines
2.7 KiB
RPMSpec
83 lines
2.7 KiB
RPMSpec
#
|
|
# spec file for package fudo
|
|
#
|
|
# Copyright (c) 2023 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: fudo
|
|
Version: 0
|
|
Release: 0
|
|
Summary: Fake sudo
|
|
License: MIT
|
|
Source: 30-fudo-machinectl-shell.rules
|
|
Source1: fudo.sh
|
|
Source2: 50-machinectl-shell-run-env.rules
|
|
BuildRequires: polkit
|
|
Requires: polkit
|
|
Requires: systemd-container
|
|
|
|
%description
|
|
Fake sudo leveraging machinctl shell and polkit to be able to
|
|
execute commands as root
|
|
|
|
- just a few lines of shell and js
|
|
- no setuid program
|
|
- no hard to understand config file
|
|
|
|
%package policy-noauth-wheel
|
|
Summary: fudo policy no authentication for wheel group
|
|
Requires: group(wheel)
|
|
Conflicts: fudo-policy
|
|
Provides: fudo-policy
|
|
|
|
%description policy-noauth-wheel
|
|
Members of the wheel group do not need to authenticate when using
|
|
fudo
|
|
|
|
%package policy-selfauth-wheel
|
|
Summary: fudo policy wheel group members use own password
|
|
Requires: group(wheel)
|
|
Conflicts: fudo-policy
|
|
Provides: fudo-policy
|
|
|
|
%description policy-selfauth-wheel
|
|
Members of the wheel group use their own password to authenticate
|
|
as root
|
|
|
|
%prep
|
|
%setup -q -c -T
|
|
|
|
%build
|
|
|
|
%install
|
|
install -D -m 644 %{SOURCE0} %{buildroot}%{_datadir}/polkit-1/rules.d/30-fudo-machinectl-shell.rules
|
|
install -D -m 644 %{SOURCE1} %{buildroot}%{_prefix}%{_sysconfdir}/profile.d/fudo.sh
|
|
install -D -m 644 %{SOURCE2} %{buildroot}%{_docdir}/50-machinectl-shell-run-env.rules
|
|
echo 'polkit._fudo_noauth_group = "wheel";' > %{buildroot}%{_datadir}/polkit-1/rules.d/31-fudo-machinectl-shell-noauth-wheel.rules
|
|
echo 'polkit._fudo_selfauth_group = "wheel";' > %{buildroot}%{_datadir}/polkit-1/rules.d/31-fudo-machinectl-shell-selfauth-wheel.rules
|
|
|
|
%files
|
|
%{_docdir}/50-machinectl-shell-run-env.rules
|
|
%{_datadir}/polkit-1/rules.d/30-fudo-machinectl-shell.rules
|
|
%{_prefix}%{_sysconfdir}/profile.d/fudo.sh
|
|
|
|
%files policy-noauth-wheel
|
|
%{_datadir}/polkit-1/rules.d/31-fudo-machinectl-shell-noauth-wheel.rules
|
|
|
|
%files policy-selfauth-wheel
|
|
%{_datadir}/polkit-1/rules.d/31-fudo-machinectl-shell-selfauth-wheel.rules
|
|
|
|
%changelog
|