diff --git a/SPECS/crypto-policies.spec b/SPECS/crypto-policies.spec index f3d81c8..042c418 100644 --- a/SPECS/crypto-policies.spec +++ b/SPECS/crypto-policies.spec @@ -63,6 +63,10 @@ Conflicts: gnutls < 3.7.2-3 Conflicts: gnutls < 3.7.6-22 %endif +Requires: openssl-gost-engine +Requires: authselect +Requires: findutils + %description This package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, @@ -194,6 +198,8 @@ end %dir %{_sysconfdir}/crypto-policies/policies/ %dir %{_sysconfdir}/crypto-policies/policies/modules/ %dir %{_datarootdir}/crypto-policies/ +%dir %{_sysconfdir}/authselect/custom/sssd_gost/ +%{_sysconfdir}/authselect/custom/sssd_gost/* %ghost %config(missingok,noreplace) %{_sysconfdir}/crypto-policies/config @@ -210,6 +216,7 @@ end %ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/libreswan.config %ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/libssh.config %ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/openssl_fips.config +%ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/auth.config # %verify(not mode) comes from the fact # these turn into symlinks and back to regular files at will, see bz1898986 @@ -221,6 +228,8 @@ end %{_datarootdir}/crypto-policies/DEFAULT %{_datarootdir}/crypto-policies/FUTURE %{_datarootdir}/crypto-policies/FIPS +%{_datarootdir}/crypto-policies/GOST-ONLY +%{_datarootdir}/crypto-policies/GOST-ONLY-PAM %{_datarootdir}/crypto-policies/back-ends %{_datarootdir}/crypto-policies/default-config %{_datarootdir}/crypto-policies/reload-cmds.sh @@ -232,6 +241,7 @@ end %{_bindir}/update-crypto-policies %{_mandir}/man8/update-crypto-policies.8* %{_datarootdir}/crypto-policies/python +%{_datarootdir}/crypto-policies-scripts/auth_apply.sh %{_bindir}/fips-mode-setup %{_bindir}/fips-finish-install