From fbebbca150e7be037a23ea7f56a8beb067887068 Mon Sep 17 00:00:00 2001 From: tigro Date: Sat, 14 Dec 2024 22:58:49 +0300 Subject: [PATCH] import priv_wrapper-1.0.1-8.el10 --- .gitignore | 1 + .priv_wrapper.metadata | 1 + SOURCES/priv_wrapper-1.0.1.tar.gz.asc | 16 +++ ...iv_wrapper-fix-cmocka-1.1.6+-support.patch | 31 ++++++ SOURCES/priv_wrapper.keyring | Bin 0 -> 3432 bytes SPECS/priv_wrapper.spec | 103 ++++++++++++++++++ 6 files changed, 152 insertions(+) create mode 100644 .gitignore create mode 100644 .priv_wrapper.metadata create mode 100644 SOURCES/priv_wrapper-1.0.1.tar.gz.asc create mode 100644 SOURCES/priv_wrapper-fix-cmocka-1.1.6+-support.patch create mode 100644 SOURCES/priv_wrapper.keyring create mode 100644 SPECS/priv_wrapper.spec diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..07eeda6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +SOURCES/priv_wrapper-1.0.1.tar.gz diff --git a/.priv_wrapper.metadata b/.priv_wrapper.metadata new file mode 100644 index 0000000..56ed5f2 --- /dev/null +++ b/.priv_wrapper.metadata @@ -0,0 +1 @@ +4930e4409b8fa60c086cf875a6edd4c3da6767ef SOURCES/priv_wrapper-1.0.1.tar.gz diff --git a/SOURCES/priv_wrapper-1.0.1.tar.gz.asc b/SOURCES/priv_wrapper-1.0.1.tar.gz.asc new file mode 100644 index 0000000..8a4c63e --- /dev/null +++ b/SOURCES/priv_wrapper-1.0.1.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEjf9T4Y8qvI2PPJIjfuD8TcwBTj0FAmN/etIACgkQfuD8TcwB +Tj3jSA//TAqda21/+ci925Q62+0HzIzDN+yNabCvOgrPeZqf6haFmPZUJgIvyvtI +mDr4MQjZxknUAgAkuqz9e+xwNUvi3TqG3LI5o0Z61PCQ64kdC4/COPRPXJh+qmRx +5RWqdjnyc5zsdA8eZQiCoDreUyn8gi76hTwQB7FTbW+RzBhT4BC6p/hSknWLYMgA +4evs7juu8rUAFD82UEQSQCDnt8qLpPr+duOcdemKktuEYUL5LVqWoYXwwEnNKxLh +i8h2UhbI1KHCvaKsIH1yFpmuNSZyPjAEbNqs+MkjNY/rOcvLJfj9OYIbqgUDpGoG +WwHT1WRbEzTNu2ExEbmeFGcUpMlwm2ZJKvaolGBt0ImiCQRYom+i7QZ6FKvAbcKm +uTjXZI2SQZCLNTVCsK/v4rlxw1puiFITQjOYZhkyZuOZB97VUP/QzOpR7OnYH9FM +l6MkGO8e5yrodfuyWqeL3RPOB0IupAuoJdqkqTVRw4F4SeL/cxS1namBP6SbwxD3 +gG7+aF1398KmqGYFn15YA0MzDDeBrIMsq06REfz+/wwKj300s6a6JhFuKBReRn5C +ZUv388fQodItIeGeo4PoO6Sz1jpeF8vgPBqYcvxLGK6zuvZnnOeIZ7ZChjgDv/uu +Ib3ucisSdnDI/k95anEHmLbaGJWB8n91rJcAmY7XaPmUnakkDs8= +=LFpF +-----END PGP SIGNATURE----- diff --git a/SOURCES/priv_wrapper-fix-cmocka-1.1.6+-support.patch b/SOURCES/priv_wrapper-fix-cmocka-1.1.6+-support.patch new file mode 100644 index 0000000..2af953c --- /dev/null +++ b/SOURCES/priv_wrapper-fix-cmocka-1.1.6+-support.patch @@ -0,0 +1,31 @@ +From 295bcbe9de1fb37531678d482efb12583b77c6d0 Mon Sep 17 00:00:00 2001 +From: Andreas Schneider +Date: Fri, 17 Feb 2023 17:51:27 +0100 +Subject: [PATCH] cmake: Fix cmocka >= 1.1.6 find_package() in CONFIG mode +MIME-Version: 1.0 +Content-Type: text/plain; charset=UTF-8 +Content-Transfer-Encoding: 8bit + +Signed-off-by: Andreas Schneider +Reviewed-by: Pavel Filipenský +--- + tests/CMakeLists.txt | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/tests/CMakeLists.txt b/tests/CMakeLists.txt +index d33cf15..46147cf 100644 +--- a/tests/CMakeLists.txt ++++ b/tests/CMakeLists.txt +@@ -1,5 +1,9 @@ + project(tests C) + ++if (TARGET cmocka::cmocka) ++ set(CMOCKA_LIBRARY cmocka::cmocka) ++endif() ++ + include_directories( + ${CMAKE_BINARY_DIR} + ${CMAKE_CURRENT_SOURCE_DIR} +-- +2.39.2 + diff --git a/SOURCES/priv_wrapper.keyring b/SOURCES/priv_wrapper.keyring new file mode 100644 index 0000000000000000000000000000000000000000..411bf36750f0fc4a8856034415e39c7116559ee4 GIT binary patch literal 3432 zcma*p_ct4i!ocx}QL!m1M$D?3u}kf!7>&Kfo>jzNwfC+*)QGKCjjC0OQpBF2iW)Uz zuiB;D=e_5i^FF`a_q_kZ=X}pM8%R!|t2L&GM+F!>lQPCyyIvl`cuN@$-G>|ou&}^A zn93lyCo!q)4>ia3)el-n*1nj^vXJGQThLGx{NnCp;L^s1(PBlSFEXaSzqiqHCY|Id zZL;oMaJk9*-Y}D^u@0LTMT-kB>#wDZL;*&GW~y!D9OJcT_H}-W3Uz%p8N&m4CUS7> zD-$(KGF!hH;-%I|{sgrT=$64vNgx3y zk6cyafMfnTZk;oDS-&XwToz$?4HG2@AT|d5v#;2?GmSH}!`IX4V3Z4b)oAz=2pZRy9};;0gB`uUi48bFN)z-#1IbhGocxAtPwvvqQ_e_?0u$tGj%<)&ck z8Q|`Xa(&_QQV`|oC>IZuA-InR1aJeH@b8g=i0|P8@rdY%fglo60(u}m9uR^Dd=N$m z)YY0y1%mMaBp|B4(I7_fG-dsvRDkl6bCGmiA5G$Wu-n+uzoaaMu@$LFQM>wT1WY?3 zkl`S1YZ{^K;Uc068akUF1?XQKYWinR_qf+5tTaDS_T&5Ma%Qm@G;UzWb@ER&0dP!?BHkITj|CtGNKbVNej z^lkm9-UehnIPes}p8v8%fo!NF=Q^yS+AIR;^i0_BpS^!=Kj~h~_;AMZ4aWG-`p&!R zpR#c?AE884S%wnC0!E2!;Y>4$>5i8V5ANh!F7EuIOa^XfzIy*w!jmz`@A~n$ZZ3Kg z_oO8&P2}g~Fh|=CGB}UT*PCi)s-!iX!EppqJumx>_>mJMVZVI0?SbIjgQ{c_NSakw z`4M;YuIJ}Z9T^iUjIA37yxz}`Mmtk$DQGlQZ;o7J6d{8@R}%Vub^jQ{AoY1A!V6a} zv)ZQ)9{<)V|MRryQ3(L|g3`GU8lUg+XGNQ0987ZjhsSeg755GLk>uV|j8CTO-17Gv zp;H2@iV;>N2EwE?4A%-Jox5bFe5|m>t#R1^fctzM(v~NmEYbIh+dMvRX}aigPdaE% z?Nu{Q8@b}hI16GDuQ{koe6uP1gVwzmj*n|oJw`I`<@$kdICa^!IpsB8Hl<_3bj@{R zmU>q6v#(>p&V~FexOG?~`+s5PW$kKX{U2dc{}#si{}A?1UUBM_cZOh|e%=GAb4Kd6 zX+>srORAGXdV`JT-=yuy#W_)o!oKZSI-9@xf^BSv z%Hk}`Yyao{>7sq?s3>&C@=*tymxWj=yV^oAKmHzcTphuh`yDHy4=kVKb4hh>DFyk- zU>-M>wcYvD^B8qsX(~3PB-dPhXkLknp5KaY-ZvbDy87eWgJ-Bw9f8=4N$8C91iw8` zxj*TZjb$9wiJnswT}*k;O^OA**D2X9!-em&Su-eTo|Cn54lh)QPr;w+x&gCH@u7_- zEQZR+2z`&wMOyH6uMiEFGewgo`PtW&$&5lODY-`63il0sKZbPatrF_~toqOs)!+e-?K*ID_Amsgsij+&6!VzOiML>Vxu zrco_mQ;jwd<&lWc7-53eO(L}0lB|1YJ#F88*WM>ZZcrE#eiJEks%aCtQb%tjjR8BV ze7pCKRwR=|cZgMesASEajgof2Q-(qgESH*UV_8zy#P7$N3%ykl@H*wxT&qnymykBQMd5%ow{~hF8%j}XMNe#iHeLGSoPE)gOBbfoSALf zF?Id99)$^fWAle0j3GA8$=k(dm|1WKh^YXkr)_>fIZ>LNGUFuWq_5mS#HG@*PjJEQ zACBeFxIa7yBjx`~J5-Doq1CXpq^eOvX?jP}k|sAm#uCHfwFU$pi%jP&lN)i$i<_<% zI#iH+507AW6^$2V7H8@fG~a&Wx-THchjmwYw&=@&@rvXivU!*&R<0WENa@&U zw49x3)}*`1l7lmjgiRu1s^nx<&`BfX@d8O}pC=;Dm@oHpi!NUXN4qbJ(ywyFJOT%* zGt*8_A;rAPm-So5$dFu#0;sp@%kpA->Z9tJ(U=;XJC|feP;3osXIaj=qvT`Ic%BEf zMW1;8Wb||V1yWEW;B>RaL(dU%C6CpshsL)Z@IWA2<@He-4n)I~_vGcynDD7n(F%9M ztLI{euUf!LrBHpc^W?3`t&vasi6N}_tKo*D_)WA=zE!@?{A&?VL$KoO)~|}TvfS7+ zUXclP7$|wNZ6!TZU{elwB=Wp2$7HA(H6Xwl4^tcrnF>Le61(<)4BH5lK`(He^UGy* z%b`7!GiNz&5S>wD4`49*&E0Cr$t-DGPI5I&KYqekSA0EePKz{T#EXasY{9c6dv{yv zL%{XH@+be$s7xul(fTdfJuJ;uyp) z6t3uCz<)`528o7Nyd$l2l|Y5&XPoxUyIdGMRwuhk6WWJ9^{u<7yf3T#u|{}N_jm0p ziG*>B&4R**r*0}{4{oPZYS;#x*!+in_-dxU5>=M*(Q(>mhqs_R4`+9##H{rQDNmd$ z<3GL8m+A2c+HN0Em|MzNi4e zszZ^O3|CJCW&}y2kY0M)Q)(7n%-OHtW{!&MCPB`pRyAe6PtJ9^PT^+x5Ms?2lpEcg zxLE42T2Q;)-@I2rN3bZf`ZGVsESUm*azDxK)1S)?X1dOY6Fk110>vSA>xs@(83LvN zrqZ8RqPwhP2MbDS8dN(KLk<M0^X91Y&-2YtVD z7BEl8V*IU1za57kjLA}OZbyBE4RPh&y8`PFdQS*AN%(*I0Dhl5g_`w+fV-wDz^?%e-MC+^^F)pKXO*>8GLAobn_18oHSlg1D@CVQ@t^{77jP+?~bsVsupi zx!ysj!tWst*4B-=Dlp12NVbB|9bzI+YYMDxj^+?*_K=k1?_vXW+YMq5Fgxu;00GLv7ozi8D%0m6&DgGm$ag&vThM`$#;S->ro4Abem9=|F=4Q<)fXi_hC?5-{)I4qJ<*-gGX^b5V}^M4xQA-l?J3`= z+j%iAdqjf#6K6CNg}+~#7iki!4|J-=5~{hT*G;m(8i?A7`d1HoY>4HBTts484LyV# WZDm2tMA4T=UAs2at-!xR8~z2&g;JCN literal 0 HcmV?d00001 diff --git a/SPECS/priv_wrapper.spec b/SPECS/priv_wrapper.spec new file mode 100644 index 0000000..5674f42 --- /dev/null +++ b/SPECS/priv_wrapper.spec @@ -0,0 +1,103 @@ +Name: priv_wrapper +Version: 1.0.1 +Release: 8%{?dist} + +Summary: A library to disable resource limits and other privilege dropping +License: GPL-3.0-or-later +Url: http://cwrap.org/ + +Source0: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz +Source1: https://ftp.samba.org/pub/cwrap/%{name}-%{version}.tar.gz.asc +Source2: priv_wrapper.keyring + +Patch0: priv_wrapper-fix-cmocka-1.1.6+-support.patch + +BuildRequires: gcc +BuildRequires: cmake +BuildRequires: gnupg2 +BuildRequires: libcmocka-devel >= 1.1.0 + +Recommends: cmake +Recommends: pkgconfig + +%description +priv_wrapper aims to help running processes which are dropping privileges or +are restricting resources in test environments. +It can disable chroot, prctl, pledge and setrlmit system calls. A disabled call +always succeeds (i.e. returns 0) and does nothing. +The system call pledge exists only on OpenBSD. + +To use it, set the following environment variables: + +LD_PRELOAD=libpriv_wrapper.so +PRIV_WRAPPER_CHROOT_DISABLE=1 + +This package does not have a devel package, because this project is for +development/testing. + +%prep +%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}' +%autosetup -p1 + +%build +%cmake \ + -DUNIT_TESTING=ON +%cmake_build + +%install +%cmake_install + +%ldconfig_scriptlets + +%check +%ctest + +%files +%doc AUTHORS README.md CHANGELOG.md +%license LICENSE +%{_libdir}/libpriv_wrapper.so* +%dir %{_libdir}/cmake +%dir %{_libdir}/cmake/priv_wrapper +%{_libdir}/cmake/priv_wrapper/priv_wrapper-config-version.cmake +%{_libdir}/cmake/priv_wrapper/priv_wrapper-config.cmake +%dir %{_libdir}/pkgconfig +%{_libdir}/pkgconfig/priv_wrapper.pc +%{_mandir}/man1/priv_wrapper.1* + +%changelog +* Sat Dec 14 2024 Arkady L. Shane - 1.0.1-8 +- Rebuilt for MSVSphere 10 + +* Mon Jun 24 2024 Troy Dawson - 1.0.1-8 +- Bump release for June 2024 mass rebuild + +* Fri Jan 26 2024 Fedora Release Engineering - 1.0.1-7 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Sun Jan 21 2024 Fedora Release Engineering - 1.0.1-6 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild + +* Fri Jul 21 2023 Fedora Release Engineering - 1.0.1-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild + +* Mon Mar 06 2023 Andreas Schneider - 1.0.1-4 +- Update License to SPDX expression + +* Mon Feb 27 2023 Andreas Schneider - 1.0.1-3 +- Fix building with cmocka >= 1.1.6 + +* Fri Jan 20 2023 Fedora Release Engineering - 1.0.1-2 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild + +* Thu Nov 24 2022 Pavel Filipenský - 1.0.1-1 +- Update to version 1.0.1 + +* Thu Nov 10 2022 Pavel Filipenský - 1.0.0-3 +- Patch prctl() on ppc64le + +* Tue Oct 25 2022 Pavel Filipenský - 1.0.0-2 +- Verify packages using gpgverify +- Make description line length < 80 + +* Mon Oct 24 2022 Pavel Filipenský - 1.0.0-1 +- Initial package