rpm/openCryptoki
SHA256
1
0
Fork 0
forked from pool/openCryptoki
Code Pull Requests Activity

Accepting request 1130765 from home:ngueorguiev:branches:security

Browse Source 
Amended the .spec file (bsc#1217703)

OBS-URL: https://build.opensuse.org/request/show/1130765
OBS-URL: https://build.opensuse.org/package/show/security/openCryptoki?expand=0&rev=138
This commit is contained in:
Nikolay Gueorguiev 2023-12-04 13:12:20 +00:00 committed by Git OBS Bridge
parent a44a3cdeeb
commit 8547c44c9d
3 changed files with 14 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
ocki-3.21-remove-make-install-chgrp.patch → ocki-3.22-remove-make-install-chgrp.patch
View File

5
openCryptoki.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Mon Dec 4 12:54:28 UTC 2023 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>
- Amended the .spec file for pkcsslotd (jsc#1217703)
-------------------------------------------------------------------
Thu Sep 21 10:55:56 UTC 2023 - Nikolay Gueorguiev <nikolay.gueorguiev@suse.com>

13
openCryptoki.spec
View File

@ -23,6 +23,7 @@
# autobuild:/work/cd/lib/misc/group
# openCryptoki pkcs11:x:64:
%define pkcs11_group_id 64
%define pkcs_group pkcs11
%define oc_cvs_tag opencryptoki
Name: openCryptoki
@ -38,13 +39,14 @@ Source2: openCryptoki-TFAQ.html
Source3: openCryptoki-rpmlintrc
# Patch 0 is needed because group pkcs11 doesn't exist in the build environment
# and because we don't want(?) various file and directory permissions to be 0700.
Patch000: ocki-3.21-remove-make-install-chgrp.patch
Patch000: ocki-3.22-remove-make-install-chgrp.patch
#
#
BuildRequires: bison
BuildRequires: dos2unix
BuildRequires: flex
BuildRequires: gcc-c++
BuildRequires: libcap-devel
BuildRequires: libitm1
BuildRequires: libtool
BuildRequires: libudev-devel
@ -53,10 +55,11 @@ BuildRequires: openssl-devel >= 1.0
BuildRequires: pkgconfig
BuildRequires: trousers-devel
BuildRequires: pkgconfig(systemd)
###
Requires(pre): %{_sbindir}/groupadd
Requires(pre): %{_sbindir}/useradd
Requires(pre): %{_sbindir}/usermod
###
BuildRequires: libcap-devel
# IBM maintains openCryptoki on these architectures:
ExclusiveArch: %{openCryptoki_32bit_arch} %{openCryptoki_64bit_arch}
@ -171,8 +174,10 @@ rm -f %{buildroot}%{_libdir}/opencryptoki/methods
%{service_add_pre pkcsslotd.service}
# autobuild:/work/cd/lib/misc/group
# openCryptoki pkcs11:x:64:
%{_sbindir}/groupadd -g %{pkcs11_group_id} -r pkcs11 2>/dev/null || true
%{_sbindir}/usermod -a -G pkcs11 root
# openCryptoki pkcsslotd:x:64:
%{_sbindir}/groupadd -g %{pkcs11_group_id} -r %{pkcs_group} 2>/dev/null || true
%{_sbindir}/useradd -g %{pkcs11_group_id} -r pkcsslotd -s /sbin/nologin -d /run/opencryptoki 2>/dev/null || true
%{_sbindir}/usermod -a -G %{pkcs_group} root
%preun
%{service_del_preun pkcsslotd.service}