You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
218 lines
7.1 KiB
218 lines
7.1 KiB
From d498f7aa562cf41e0999f7733664c27fa62bcf7c Mon Sep 17 00:00:00 2001
|
|
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
|
|
Date: Fri, 23 Feb 2024 11:54:44 +0100
|
|
Subject: [PATCH 02/11] spec: modify specfile for Fedora 40 and RHEL 10 as
|
|
minimal version
|
|
|
|
- conditionals that are no longer used are removed
|
|
- upgrade path is removed
|
|
- this was already triggered in Fedora 38, so it is no longer useful
|
|
- RHEL is updated to authselect with leapp when going from 7 to 8
|
|
we don't want to touch existing configurations
|
|
---
|
|
rpm/authselect.spec.in | 102 ++---------------------------------------
|
|
1 file changed, 3 insertions(+), 99 deletions(-)
|
|
|
|
diff --git a/rpm/authselect.spec.in b/rpm/authselect.spec.in
|
|
index 24ce4e603208ce26eb228bbee565c868428a2af1..e2c0482f1e7cfceac4aed3a3a4375bca031ac8c1 100644
|
|
--- a/rpm/authselect.spec.in
|
|
+++ b/rpm/authselect.spec.in
|
|
@@ -12,20 +12,6 @@ Source0: %{url}/archive/%{version}/%{name}-%{version}.tar.gz
|
|
|
|
%global makedir %{_builddir}/%{name}-%{version}
|
|
|
|
-%if 0%{?fedora} >= 35 || 0%{?rhel} >= 10
|
|
-%global with_compat 0
|
|
-%else
|
|
-%global with_compat 1
|
|
-%endif
|
|
-
|
|
-%if 0%{?fedora} >= 36 || 0%{?rhel} >= 10
|
|
-%global with_user_nsswitch 0
|
|
-%global enforce_authselect 1
|
|
-%else
|
|
-%global with_user_nsswitch 1
|
|
-%global enforce_authselect 0
|
|
-%endif
|
|
-
|
|
# Set the default profile
|
|
%{?fedora:%global default_profile local with-silent-lastlog}
|
|
%{?rhel:%global default_profile local}
|
|
@@ -43,21 +29,14 @@ BuildRequires: po4a
|
|
BuildRequires: %{_bindir}/a2x
|
|
BuildRequires: libcmocka-devel >= 1.0.0
|
|
BuildRequires: libselinux-devel
|
|
-%if %{with_compat}
|
|
-BuildRequires: python3-devel
|
|
-%endif
|
|
Requires: authselect-libs%{?_isa} = %{version}-%{release}
|
|
Suggests: sssd
|
|
Suggests: samba-winbind
|
|
Suggests: fprintd-pam
|
|
Suggests: oddjob-mkhomedir
|
|
|
|
-%if !%{with_compat}
|
|
# Properly obsolete removed authselect-compat package.
|
|
-Obsoletes: authselect-compat < 1.2.4
|
|
-# Inherited from former authselect-compat package.
|
|
-Obsoletes: authconfig < 7.0.1-6
|
|
-%endif
|
|
+Obsoletes: authselect-compat < 1.3
|
|
|
|
%description
|
|
Authselect is designed to be a replacement for authconfig but it takes
|
|
@@ -74,14 +53,6 @@ Summary: Utility library used by the authselect tool
|
|
Requires: coreutils
|
|
Requires: sed
|
|
Suggests: systemd
|
|
-%if %{enforce_authselect}
|
|
-# authselect now owns nsswitch.conf (glibc) and pam files
|
|
-Conflicts: pam < 1.5.2-8
|
|
-Conflicts: glibc < 2.34.9000-27
|
|
-# systemd, nss-mdns no longer contains nsswitch.conf scriptlets
|
|
-Conflicts: systemd < 249.7-4
|
|
-Conflicts: nss-mdns < 0.15.1-3
|
|
-%endif
|
|
|
|
%description libs
|
|
Common library files for authselect. This package is used by the authselect
|
|
@@ -95,25 +66,6 @@ Requires: authselect-libs%{?_isa} = %{version}-%{release}
|
|
System header files and development libraries for authselect. Useful if
|
|
you develop a front-end for the authselect library.
|
|
|
|
-%if %{with_compat}
|
|
-%package compat
|
|
-Summary: Tool to provide minimum backwards compatibility with authconfig
|
|
-Obsoletes: authconfig < 7.0.1-6
|
|
-Provides: authconfig
|
|
-Requires: authselect%{?_isa} = %{version}-%{release}
|
|
-Recommends: oddjob-mkhomedir
|
|
-Suggests: sssd
|
|
-Suggests: realmd
|
|
-Suggests: samba-winbind
|
|
-
|
|
-%description compat
|
|
-This package will replace %{_sbindir}/authconfig with a tool that will
|
|
-translate some of the authconfig calls into authselect calls. It provides
|
|
-only minimum backward compatibility and users are encouraged to migrate
|
|
-to authselect completely.
|
|
-%endif
|
|
-
|
|
-
|
|
%prep
|
|
%setup -q
|
|
|
|
@@ -123,16 +75,7 @@ done
|
|
|
|
%build
|
|
autoreconf -if
|
|
-%configure \
|
|
-%if %{with_compat}
|
|
- --with-pythonbin="%{__python3}" \
|
|
- --with-compat \
|
|
-%endif
|
|
-%if %{with_user_nsswitch}
|
|
- --with-user-nsswitch \
|
|
-%endif
|
|
- %{nil}
|
|
-
|
|
+%configure
|
|
%make_build
|
|
|
|
%check
|
|
@@ -168,20 +111,14 @@ find $RPM_BUILD_ROOT -name "*.a" -exec %__rm -f {} \;
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/authselect/postlogin
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/authselect/smartcard-auth
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/authselect/system-auth
|
|
-%if %{enforce_authselect}
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/nsswitch.conf
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/pam.d/fingerprint-auth
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/pam.d/password-auth
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/pam.d/postlogin
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/pam.d/smartcard-auth
|
|
%ghost %attr(0644,root,root) %{_sysconfdir}/pam.d/system-auth
|
|
-%endif
|
|
%dir %{_localstatedir}/lib/authselect
|
|
%ghost %attr(0755,root,root) %{_localstatedir}/lib/authselect/backups/
|
|
-%if %{with_user_nsswitch}
|
|
-%ghost %attr(0644,root,root) %{_sysconfdir}/authselect/user-nsswitch.conf
|
|
-%ghost %attr(0644,root,root) %{_localstatedir}/lib/authselect/user-nsswitch-created
|
|
-%endif
|
|
%dir %{_datadir}/authselect
|
|
%dir %{_datadir}/authselect/vendor
|
|
%dir %{_datadir}/authselect/default
|
|
@@ -241,12 +178,6 @@ find $RPM_BUILD_ROOT -name "*.a" -exec %__rm -f {} \;
|
|
%{_libdir}/libauthselect.so
|
|
%{_libdir}/pkgconfig/authselect.pc
|
|
|
|
-%if %{with_compat}
|
|
-%files compat
|
|
-%{_sbindir}/authconfig
|
|
-%{python3_sitelib}/authselect/
|
|
-%endif
|
|
-
|
|
%files -f %{name}.8.lang -f %{name}-migration.7.lang
|
|
%{_bindir}/authselect
|
|
%{_mandir}/man8/authselect.8*
|
|
@@ -265,47 +196,21 @@ if [ $1 == 0 ] ; then
|
|
fi
|
|
|
|
%pre libs
|
|
-%if %{enforce_authselect}
|
|
# Check if this is a new installation.
|
|
%__rm -f %{forcefile}
|
|
if [ $1 -eq 1 ] ; then
|
|
touch %{forcefile}
|
|
fi
|
|
-
|
|
-# Check if we are upgrading from older version then authselect-1.3.0
|
|
-# The version command is not available on earlier versions
|
|
-if [ $1 -gt 1 ] ; then
|
|
- %{_bindir}/authselect check &> /dev/null
|
|
- if [ $? -ne 0 ]; then
|
|
- %{_bindir}/authselect version &> /dev/null
|
|
- if [ $? -ne 0 ]; then
|
|
- touch %{forcefile}
|
|
- fi
|
|
- fi
|
|
-fi
|
|
-%endif
|
|
-
|
|
exit 0
|
|
|
|
%posttrans libs
|
|
-# Copy nsswitch.conf to user-nsswitch.conf if it was not yet created
|
|
-%if %{with_user_nsswitch}
|
|
-if [ ! -f %{_localstatedir}/lib/authselect/user-nsswitch-created ]; then
|
|
- %__cp -n %{_sysconfdir}/nsswitch.conf %{_sysconfdir}/authselect/user-nsswitch.conf &> /dev/null
|
|
- touch %{_localstatedir}/lib/authselect/user-nsswitch-created &> /dev/null
|
|
-fi
|
|
-%endif
|
|
|
|
# Keep nss-altfiles for all rpm-ostree based systems.
|
|
# See https://github.com/authselect/authselect/issues/48
|
|
if test -e /run/ostree-booted; then
|
|
for PROFILE in `ls %{_datadir}/authselect/default`; do
|
|
%{_bindir}/authselect create-profile $PROFILE --vendor --base-on $PROFILE --symlink-pam --symlink-dconf --symlink=REQUIREMENTS --symlink=README &> /dev/null
|
|
-%if %{with_user_nsswitch}
|
|
- %__sed -ie "s/^\(passwd\|group\):\(.*\)systemd\(.*\)/\1:\2systemd altfiles\3/g" %{_datadir}/authselect/vendor/$PROFILE/nsswitch.conf &> /dev/null
|
|
-%else
|
|
%__sed -ie 's/{if "with-altfiles":altfiles }/altfiles /g' %{_datadir}/authselect/vendor/$PROFILE/nsswitch.conf &> /dev/null
|
|
-%endif
|
|
done
|
|
fi
|
|
|
|
@@ -314,8 +219,7 @@ if [ $? -eq 6 ]; then
|
|
NOBACKUP="--nobackup"
|
|
fi
|
|
|
|
-# If we are upgrading from pre authselect-1.3.0 or this is a new installation
|
|
-# select the default configuration.
|
|
+# If this is a new installation select the default configuration.
|
|
if [ -f %{forcefile} ]; then
|
|
%{_bindir}/authselect select %{default_profile} --force $NOBACKUP &> /dev/null
|
|
%__rm -f %{forcefile}
|
|
--
|
|
2.42.0
|
|
|