Line | |
---|
1 | Summary: nsswitch proxy module to prevent local account spoofing |
---|
2 | Group: System Environment/Libraries |
---|
3 | Name: nss_nonlocal |
---|
4 | Version: 1.8 |
---|
5 | Release: 0 |
---|
6 | URL: http://debathena.mit.edu/nss_nonlocal/ |
---|
7 | BuildRequires: autoconf |
---|
8 | BuildRequires: automake |
---|
9 | BuildRequires: libtool |
---|
10 | License: GPL |
---|
11 | Source: %{name}.tar.gz |
---|
12 | BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
---|
13 | |
---|
14 | %description |
---|
15 | This nsswitch module acts as a proxy for other nsswitch modules like hesiod, |
---|
16 | but prevents non-local users from potentially gaining local privileges by |
---|
17 | spoofing local UIDs and GIDs. |
---|
18 | |
---|
19 | %prep |
---|
20 | %setup -q -n %{name} |
---|
21 | |
---|
22 | cat >find_requires.sh <<EOF |
---|
23 | #!/bin/sh |
---|
24 | %{__find_requires} | grep -v GLIBC_PRIVATE |
---|
25 | exit 0 |
---|
26 | EOF |
---|
27 | chmod +x find_requires.sh |
---|
28 | %define _use_internal_dependency_generator 0 |
---|
29 | %define __find_requires %{_builddir}/%{buildsubdir}/find_requires.sh |
---|
30 | |
---|
31 | %build |
---|
32 | autoreconf -i |
---|
33 | %configure --libdir=/%{_lib} |
---|
34 | make |
---|
35 | |
---|
36 | %install |
---|
37 | [ $RPM_BUILD_ROOT != / ] && rm -rf $RPM_BUILD_ROOT |
---|
38 | make install DESTDIR=$RPM_BUILD_ROOT |
---|
39 | |
---|
40 | %clean |
---|
41 | [ $RPM_BUILD_ROOT != / ] && rm -rf $RPM_BUILD_ROOT |
---|
42 | |
---|
43 | %files |
---|
44 | %defattr(-, root, root) |
---|
45 | %doc README |
---|
46 | /%{_lib}/libnss_nonlocal.so.* |
---|
47 | |
---|
48 | %pre |
---|
49 | groupadd -r nss-local-users || : |
---|
50 | groupadd -r nss-nonlocal-users || : |
---|
51 | |
---|
52 | %post |
---|
53 | /sbin/ldconfig |
---|
54 | |
---|
55 | %postun |
---|
56 | /sbin/ldconfig |
---|
57 | test "$1" != 0 || groupdel nss-local-users || : |
---|
58 | test "$1" != 0 || groupdel nss-nonlocal-users || : |
---|
59 | |
---|
60 | %changelog |
---|
61 | |
---|
62 | * Thu May 8 2008 Anders Kaseorg <andersk@mit.edu> 1.6-0 |
---|
63 | - Initial RPM release. |
---|
Note: See
TracBrowser
for help on using the repository browser.