source: server/fedora/specs/nss_nonlocal.spec @ 780

Last change on this file since 780 was 750, checked in by andersk, 16 years ago
Add nss_nonlocal.
File size: 1.1 KB
Line 
1Summary: nsswitch proxy module to prevent local account spoofing
2Group: System Environment/Libraries
3Name: nss_nonlocal
4Version: 1.6
5Release: 0
6URL: http://debathena.mit.edu/nss_nonlocal/
7License: GPL
8Source: %{name}.tar.gz
9BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
10
11%description
12This nsswitch module acts as a proxy for other nsswitch modules like hesiod,
13but prevents non-local users from potentially gaining local privileges by
14spoofing local UIDs and GIDs.
15
16%prep
17%setup -q -n %{name}
18
19%build
20make CFLAGS='%optflags' LDFLAGS='%optflags'
21
22%install
23[ $RPM_BUILD_ROOT != / ] && rm -rf $RPM_BUILD_ROOT
24make install DESTDIR=$RPM_BUILD_ROOT libdir=/%{_lib}
25
26%clean
27[ $RPM_BUILD_ROOT != / ] && rm -rf $RPM_BUILD_ROOT
28
29%files
30%defattr(-, root, root)
31%doc README
32/%{_lib}/libnss_nonlocal.so.2
33
34%pre
35groupadd -r nss-local-users || :
36groupadd -r nss-nonlocal-users || :
37
38%post
39/sbin/ldconfig
40
41%postun
42/sbin/ldconfig
43test "$1" != 0 || groupdel nss-local-users || :
44test "$1" != 0 || groupdel nss-nonlocal-users || :
45
46%changelog
47
48* Thu May  8 2008 Anders Kaseorg <andersk@mit.edu> 1.6-0
49- Initial RPM release.
Note: See TracBrowser for help on using the repository browser.