1 # services timeoout time on idle for on-demand activation.
2 # give it '-1' if don't want to timeout on idle.
3 %define service_idle_timeout_time 60
4 %define popup_service_idle_timeout_time 10
6 # Configure engine file system.
8 # ro_dir_name / rw_dir_name
9 # - dir name is directory name inside of CSR directory.
10 # - 'dbspace' cannot be used as a dir_name.
11 %define engine_ro_dir_name engine
12 %define engine_rw_dir_name engine
14 # base of detailed url of content screening engine.
15 # If it's defined, detailed_url for client will be generated by
16 # concatenating base url + malware name.
17 # Else it's not defined, detailed_url getter in engine API will be used.
18 %define with_detailed_base_url 0
19 %define detailed_base_url %nil
21 %define with_sample_engine 1
23 Summary: A general purpose content screening and reputation solution
27 Source: %{name}-%{version}.tar.gz
28 License: Apache-2.0 and BSL-1.0
29 Group: Security/Service
32 BuildRequires: gettext-tools
33 BuildRequires: pkgconfig(dlog)
34 BuildRequires: pkgconfig(libsystemd)
35 BuildRequires: pkgconfig(vconf)
36 BuildRequires: pkgconfig(sqlite3)
37 BuildRequires: pkgconfig(pkgmgr)
38 BuildRequires: pkgconfig(pkgmgr-info)
39 BuildRequires: pkgconfig(libsmack)
40 BuildRequires: pkgconfig(capi-appfw-application)
41 BuildRequires: pkgconfig(elementary)
42 BuildRequires: pkgconfig(efl-extension)
43 BuildRequires: pkgconfig(icu-i18n)
44 BuildRequires: pkgconfig(libtzplatform-config)
45 BuildRequires: pkgconfig(cynara-client)
46 Requires: lib%{name}-common = %{version}-%{release}
50 General purpose content screening and reputation solution. Can scan
51 file contents and checking url to prevent malicious items.
53 %global service_name csr
54 %global bin_dir %{_bindir}
55 %global sbin_dir /sbin
56 %global ro_data_dir %{_datadir}
57 %global rw_data_dir /opt/share
58 %global ro_db_dir %{ro_data_dir}/%{service_name}/dbspace
59 %global rw_db_dir %{rw_data_dir}/%{service_name}/dbspace
60 %global ro_res_dir %{ro_data_dir}/%{service_name}/res
61 %global engine_rw_working_dir %{rw_data_dir}/%{service_name}/%{engine_rw_dir_name}
62 %global engine_dir %{ro_data_dir}/%{service_name}/%{engine_ro_dir_name}
63 %global test_dir %{rw_data_dir}/%{service_name}-test
64 %global test_res_dir %{ro_data_dir}/%{service_name}-test
66 %global service_user security_fw
67 %global service_group security_fw
68 %global test_user owner
69 %global popup_service_env_file_path /run/tizen-system-env
70 %global smack_domain_name System
71 %global popup_unitdir %{_unitdir_user}
73 %package -n lib%{name}-common
74 Summary: CSR framework (common library)
76 Group: Security/Libraries
77 BuildRequires: pkgconfig(cynara-creds-socket)
78 Requires: %{sbin_dir}/ldconfig
80 %description -n lib%{name}-common
81 Content Screening and Reputation framework package (common library)
83 %package -n lib%{name}-client
84 Summary: CSR framework (client library)
86 Group: Security/Libraries
87 BuildRequires: pkgconfig(capi-base-common)
88 Requires: %{name} = %{version}-%{release}
89 Requires: %{sbin_dir}/ldconfig
91 %description -n lib%{name}-client
92 Content Screening and Reputation framework package (client library)
95 Summary: CSR framework (development files)
97 Group: Security/Development
98 BuildRequires: pkgconfig(capi-base-common)
99 Requires: %{name} = %{version}-%{release}
100 Requires: lib%{name}-client
103 Content Screening and Reputation framework development files like headers and pkgconfigs
105 %package engine-devel
106 Summary: CSR framework (engine development files)
108 Group: Security/Development
110 %description engine-devel
111 Content Screening and Reputation framework engine development files like headers and
115 Summary: CSR framework (test program)
116 License: Apache-2.0 and BSL-1.0
117 Group: Security/Testing
118 BuildRequires: boost-devel
119 BuildRequires: pkgconfig(pkgmgr-info)
120 BuildRequires: pkgconfig(glib-2.0)
121 BuildRequires: pkgconfig(storage)
123 Requires: %{name} = %{version}
126 Content Screening and Reputation framework (test program)
130 Summary: CSR framework (gcov)
131 Group: Security/Testing
135 Content Screening and Reputation framework (gcov)
143 # define build architecture
145 %define test_target emulator
147 %define test_target target
151 export CFLAGS+=" -fprofile-arcs -ftest-coverage"
152 export CXXFLAGS+=" -fprofile-arcs -ftest-coverage"
153 export FFLAGS+=" -fprofile-arcs -ftest-coverage"
154 export LDFLAGS+=" -lgcov"
158 -DCMAKE_BUILD_TYPE=%{?build_type:%build_type}%{!?build_type:RELEASE} \
159 -DCMAKE_VERBOSE_MAKEFILE=ON \
160 -DCMAKE_INSTALL_PREFIX=%{_prefix} \
161 -DSERVICE_USER=%{service_user} \
162 -DSERVICE_GROUP=%{service_group} \
163 -DSMACK_DOMAIN_NAME=%{smack_domain_name} \
164 -DPOPUP_SERVICE_ENV_FILE_PATH:PATH=%{popup_service_env_file_path} \
165 -DSERVICE_NAME=%{service_name} \
166 -DVERSION=%{version} \
167 -DINCLUDE_INSTALL_DIR:PATH=%{_includedir} \
168 -DBIN_DIR:PATH=%{bin_dir} \
169 -DSYSTEMD_UNIT_DIR=%{_unitdir} \
170 -DPOPUP_SYSTEMD_UNIT_DIR=%{popup_unitdir} \
171 -DRO_DBSPACE:PATH=%{ro_db_dir} \
172 -DRW_DBSPACE:PATH=%{rw_db_dir} \
173 -DRO_RES_DIR:PATH=%{ro_res_dir} \
174 -DRO_DATA_DIR:PATH=%{ro_data_dir} \
175 -DSERVICE_IDLE_TIMEOUT_TIME=%{service_idle_timeout_time} \
176 -DPOPUP_SERVICE_IDLE_TIMEOUT_TIME=%{popup_service_idle_timeout_time} \
177 -DENGINE_RW_WORKING_DIR:PATH=%{engine_rw_working_dir} \
178 -DENGINE_DIR:PATH=%{engine_dir} \
179 -DTEST_TARGET=%{test_target} \
180 -DTEST_DIR:PATH=%{test_dir} \
181 -DTEST_RES_DIR:PATH=%{test_res_dir} \
182 %if 0%{?with_detailed_base_url}
183 -DDETAILED_URL_BASE:STRING=%{detailed_base_url} \
185 %if 0%{?with_sample_engine}
186 -DWITH_SAMPLE_ENGINE:BOOL=ON \
188 -DWITH_SAMPLE_ENGINE:BOOL=OFF \
190 -DTZ_SYS_STORAGE=%TZ_SYS_STORAGE \
191 -DTZ_SYS_RW_APP=%TZ_SYS_RW_APP \
192 -DTZ_SYS_RO_APP=%TZ_SYS_RO_APP \
193 -DBUILD_GCOV=%{?gcov:1}%{!?gcov:0}
195 make %{?jobs:-j%jobs}
199 %install_service sockets.target.wants %{service_name}-cs.socket
200 %install_service sockets.target.wants %{service_name}-wp.socket
201 %install_service sockets.target.wants %{service_name}-admin.socket
202 %install_service ../user/sockets.target.wants %{service_name}-popup.socket
204 mkdir -p %{buildroot}%{rw_db_dir}
205 mkdir -p %{buildroot}%{ro_db_dir}
206 cp data/scripts/*.sql %{buildroot}%{ro_db_dir}
208 mkdir -p %{buildroot}%{engine_dir}
209 mkdir -p %{buildroot}%{engine_rw_working_dir}
211 %find_lang %{service_name}
214 builddir=$(basename $PWD)
215 gcno_obj_dir=%{buildroot}%{_datadir}/gcov/obj/%{name}/"$builddir"
216 mkdir -p "$gcno_obj_dir"
217 find . -name '*.gcno' -exec cp --parents '{}' "$gcno_obj_dir" ';'
221 rm -f %{rw_db_dir}/.%{service_name}.db*
223 systemctl daemon-reload
225 systemctl start %{service_name}-cs.socket
226 systemctl start %{service_name}-wp.socket
227 systemctl start %{service_name}-admin.socket
228 systemctl start %{service_name}.service
230 systemctl --user start %{service_name}-popup.socket
231 systemctl --user start %{service_name}-popup.service
232 elif [ $1 = 2 ]; then
233 systemctl stop %{service_name}-cs.socket
234 systemctl stop %{service_name}-wp.socket
235 systemctl stop %{service_name}-admin.socket
236 systemctl restart %{service_name}.service
238 systemctl --user stop %{service_name}-popup.socket
239 systemctl --user restart %{service_name}-popup.service
244 systemctl stop %{service_name}-cs.socket
245 systemctl stop %{service_name}-wp.socket
246 systemctl stop %{service_name}-admin.socket
247 systemctl stop %{service_name}.service
249 systemctl --user stop %{service_name}-popup.socket
250 systemctl --user stop %{service_name}-popup.service
255 systemctl daemon-reload
258 %post -n lib%{name}-common -p %{sbin_dir}/ldconfig
259 %post -n lib%{name}-client -p %{sbin_dir}/ldconfig
260 %postun -n lib%{name}-common -p %{sbin_dir}/ldconfig
261 %postun -n lib%{name}-client -p %{sbin_dir}/ldconfig
263 %post -n %{name}-test
264 chsmack -a "_" %{test_dir}/test_dir/dir1
265 %if 0%{?with_sample_engine}
266 systemctl stop %{service_name}-cs.socket
267 systemctl stop %{service_name}-wp.socket
268 systemctl stop %{service_name}-admin.socket
269 systemctl restart %{service_name}.service
271 touch %{engine_rw_working_dir}/csret_cs_virus_signatures
272 touch %{engine_rw_working_dir}/csret_wp_risky_urls
276 chmod 777 -R /tmp/home/abuild/rpmbuild/BUILD/csr-framework-*
277 su - owner -c %{bin_dir}/%{service_name}-test
278 %{bin_dir}/%{service_name}-internal-test
279 %{bin_dir}/%{service_name}-threadpool-test
282 %files -f %{service_name}.lang
283 %defattr(-,root,root,-)
284 %manifest %{service_name}.manifest
286 %license LICENSE.BSL-1.0
287 %{bin_dir}/%{service_name}-server
288 %{bin_dir}/%{service_name}-popup
289 %{_unitdir}/%{service_name}.service
290 %{_unitdir}/sockets.target.wants/%{service_name}-cs.socket
291 %{_unitdir}/sockets.target.wants/%{service_name}-wp.socket
292 %{_unitdir}/sockets.target.wants/%{service_name}-admin.socket
293 %{_unitdir}/%{service_name}-cs.socket
294 %{_unitdir}/%{service_name}-wp.socket
295 %{_unitdir}/%{service_name}-admin.socket
296 %{popup_unitdir}/%{service_name}-popup.socket
297 %{popup_unitdir}/sockets.target.wants/%{service_name}-popup.socket
298 %{popup_unitdir}/%{service_name}-popup.service
299 %{ro_res_dir}/default-icon.png
301 %dir %{ro_data_dir}/%{service_name}
302 %dir %attr(-, %{service_user}, %{service_group}) %{rw_data_dir}/%{service_name}
304 %dir %attr(-, %{service_user}, %{service_group}) %{rw_db_dir}
305 %attr(444, %{service_user}, %{service_group}) %{ro_db_dir}/*.sql
308 %dir %attr(775, %{service_user}, %{service_group}) %{engine_rw_working_dir}
310 %files -n lib%{name}-common
311 %defattr(-,root,root,-)
312 %manifest %{service_name}-common.manifest
314 %{_libdir}/lib%{service_name}-common.so.*
316 %files -n lib%{name}-client
317 %defattr(-,root,root,-)
318 %manifest %{service_name}-client.manifest
320 %{_libdir}/lib%{service_name}-client.so.*
323 %defattr(-,root,root,-)
324 %{_includedir}/csr/csr-content-screening.h
325 %{_includedir}/csr/csr-content-screening-types.h
326 %{_includedir}/csr/csr-web-protection.h
327 %{_includedir}/csr/csr-web-protection-types.h
328 %{_includedir}/csr/csr-error.h
329 %{_includedir}/csr/csr-engine-manager.h
330 %{_libdir}/pkgconfig/%{service_name}.pc
331 %{_libdir}/lib%{service_name}-client.so
332 %{_libdir}/lib%{service_name}-common.so
335 %defattr(-,root,root,-)
336 %{_includedir}/csre/csre-content-screening-engine-info.h
337 %{_includedir}/csre/csre-content-screening.h
338 %{_includedir}/csre/csre-content-screening-types.h
339 %{_includedir}/csre/csre-error.h
340 %{_includedir}/csre/csre-web-protection-engine-info.h
341 %{_includedir}/csre/csre-web-protection.h
342 %{_includedir}/csre/csre-web-protection-types.h
343 %{_libdir}/pkgconfig/%{service_name}-engine.pc
346 %defattr(-,root,root,-)
347 %manifest %{service_name}-test.manifest
349 %license LICENSE.BSL-1.0
350 %{_libdir}/lib%{service_name}-test-common.so
351 %attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-test
352 %attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-internal-test
353 %attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-popup-test
354 %attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-threadpool-test
357 %dir %attr(-, %{test_user}, %{service_group}) %{test_dir}
358 %attr(-, %{test_user}, %{service_group}) %{test_dir}/*
360 %dir %attr(-, %{test_user}, %{service_group}) %{test_res_dir}
361 %attr(-, %{test_user}, %{service_group}) %{test_res_dir}/*
363 # sample engine related files
364 %if 0%{?with_sample_engine}
365 %{engine_dir}/lib%{service_name}-cs-engine.so
366 %{engine_dir}/lib%{service_name}-wp-engine.so
367 %attr(-, %{service_user}, %{service_group}) %{engine_rw_working_dir}/*
372 %{_datadir}/gcov/obj/*