source: branches/fc13-dev/server/fedora/specs/nss_nonlocal.spec @ 2734

Last change on this file since 2734 was 1554, checked in by andersk, 15 years ago
nss_nonlocal.spec: License is LGPLv2+.
File size: 1.7 KB
Line 
1Summary: nsswitch proxy module to prevent local account spoofing
2Group: System Environment/Libraries
3Name: nss_nonlocal
4Version: 1.11
5Release: 1
6URL: http://debathena.mit.edu/nss_nonlocal/
7BuildRequires: autoconf
8BuildRequires: automake
9BuildRequires: libtool
10License: LGPLv2+
11Source: %{name}.tar.gz
12BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
13
14%description
15This nsswitch module acts as a proxy for other nsswitch modules like hesiod,
16but prevents non-local users from potentially gaining local privileges by
17spoofing local UIDs and GIDs.
18
19%prep
20%setup -q -n %{name}
21
22cat >find_requires.sh <<EOF
23#!/bin/sh
24%{__find_requires} | grep -v GLIBC_PRIVATE
25exit 0
26EOF
27chmod +x find_requires.sh
28%define _use_internal_dependency_generator 0
29%define __find_requires %{_builddir}/%{buildsubdir}/find_requires.sh
30
31%build
32autoreconf -i
33%configure --libdir=/%{_lib}
34make
35
36%install
37[ $RPM_BUILD_ROOT != / ] && rm -rf $RPM_BUILD_ROOT
38make install DESTDIR=$RPM_BUILD_ROOT
39
40%clean
41[ $RPM_BUILD_ROOT != / ] && rm -rf $RPM_BUILD_ROOT
42
43%files
44%defattr(-, root, root)
45%doc README
46/%{_lib}/libnss_nonlocal.so.*
47
48%pre
49groupadd -r nss-local-users || :
50groupadd -r nss-nonlocal-users || :
51
52%post
53/sbin/ldconfig
54
55%postun
56/sbin/ldconfig
57
58%changelog
59
60* Sun May  2 2010 Anders Kaseorg <andersk@mit.edu> 1.11-1
61- New upstream version.
62
63* Fri Mar 12 2010 Mitchell Berger <mitchb@mit.edu> 1.9-1
64- Per Fedora packaging guidelines, don't ever remove groups.
65- Rebuild to ensure that the nss-nonlocal-users group is added, even if it was
66  previously rejected by a buggy groupadd with an incorrect name length limit.
67
68* Thu May  8 2008 Anders Kaseorg <andersk@mit.edu> 1.6-0
69- Initial RPM release.
Note: See TracBrowser for help on using the repository browser.