packaging/csr-framework.spec

   1 # services timeoout time on idle for on-demand activation.
   2 # give it '-1' if don't want to timeout on idle.
   3 %define service_idle_timeout_time       60
   4 %define popup_service_idle_timeout_time 10
   5
   6 # Configure engine file system.
   7 #
   8 # ro_dir_name / rw_dir_name
   9 # - dir name is directory name inside of CSR directory.
  10 # - 'dbspace' cannot be used as a dir_name.
  11 %define engine_ro_dir_name engine
  12 %define engine_rw_dir_name engine
  13
  14 # base of detailed url of content screening engine.
  15 # If it's defined, detailed_url for client will be generated by
  16 #                  concatenating base url + malware name.
  17 # Else it's not defined, detailed_url getter in engine API will be used.
  18 %define with_detailed_base_url 0
  19 %define detailed_base_url %nil
  20
  21 %define with_sample_engine 1
  22
  23 Summary: A general purpose content screening and reputation solution
  24 Name: csr-framework
  25 Version: 2.3.4
  26 Release: 0
  27 Source: %{name}-%{version}.tar.gz
  28 License: Apache-2.0 and BSL-1.0
  29 Group: Security/Service
  30 URL: http://tizen.org
  31 BuildRequires: cmake
  32 BuildRequires: gettext-tools
  33 BuildRequires: pkgconfig(dlog)
  34 BuildRequires: pkgconfig(libsystemd-daemon)
  35 BuildRequires: pkgconfig(vconf)
  36 BuildRequires: pkgconfig(sqlite3)
  37 BuildRequires: pkgconfig(pkgmgr)
  38 BuildRequires: pkgconfig(pkgmgr-info)
  39 BuildRequires: pkgconfig(libsmack)
  40 BuildRequires: pkgconfig(capi-appfw-application)
  41 BuildRequires: pkgconfig(elementary)
  42 BuildRequires: pkgconfig(efl-extension)
  43 BuildRequires: pkgconfig(icu-i18n)
  44 BuildRequires: pkgconfig(libtzplatform-config)
  45 BuildRequires: pkgconfig(cynara-client)
  46 Requires:      lib%{name}-common = %{version}-%{release}
  47 %{?systemd_requires}
  48
  49 %description
  50 General purpose content screening and reputation solution. Can scan
  51 file contents and checking url to prevent malicious items.
  52
  53 %global service_name                 csr
  54 %global bin_dir                      %{_bindir}
  55 %global sbin_dir                     /sbin
  56 %global ro_data_dir                  %{_datadir}
  57 %global rw_data_dir                  /opt/share
  58 %global ro_db_dir                    %{ro_data_dir}/%{service_name}/dbspace
  59 %global rw_db_dir                    %{rw_data_dir}/%{service_name}/dbspace
  60 %global ro_res_dir                   %{ro_data_dir}/%{service_name}/res
  61 %global engine_rw_working_dir        %{rw_data_dir}/%{service_name}/%{engine_rw_dir_name}
  62 %global engine_dir                   %{ro_data_dir}/%{service_name}/%{engine_ro_dir_name}
  63 %global test_dir                     %{rw_data_dir}/%{service_name}-test
  64 %global test_res_dir                 %{ro_data_dir}/%{service_name}-test
  65
  66 %global service_user                 security_fw
  67 %global service_group                security_fw
  68 %global test_user                    owner
  69 %global popup_service_env_file_path  /run/tizen-system-env
  70 %global smack_domain_name            System
  71 %global popup_unitdir                %{_unitdir_user}
  72
  73 %package -n lib%{name}-common
  74 Summary: CSR framework (common library)
  75 License: Apache-2.0
  76 Group:   Security/Libraries
  77 BuildRequires: pkgconfig(cynara-creds-socket)
  78 Requires: %{sbin_dir}/ldconfig
  79
  80 %description -n lib%{name}-common
  81 Content Screening and Reputation framework package (common library)
  82
  83 %package -n lib%{name}-client
  84 Summary: CSR framework (client library)
  85 License: Apache-2.0
  86 Group:   Security/Libraries
  87 BuildRequires: pkgconfig(capi-base-common)
  88 Requires: %{name} = %{version}-%{release}
  89 Requires: %{sbin_dir}/ldconfig
  90
  91 %description -n lib%{name}-client
  92 Content Screening and Reputation framework package (client library)
  93
  94 %package devel
  95 Summary: CSR framework (development files)
  96 LICENSE: Apache-2.0
  97 Group:   Security/Development
  98 BuildRequires: pkgconfig(capi-base-common)
  99 Requires:      %{name} = %{version}-%{release}
 100 Requires:      lib%{name}-client
 101
 102 %description devel
 103 Content Screening and Reputation framework development files like headers and pkgconfigs
 104
 105 %package engine-devel
 106 Summary: CSR framework (engine development files)
 107 LICENSE: Apache-2.0
 108 Group:   Security/Development
 109
 110 %description engine-devel
 111 Content Screening and Reputation framework engine development files like headers and
 112 pkgconfigs
 113
 114 %package test
 115 Summary: CSR framework (test program)
 116 License: Apache-2.0 and BSL-1.0
 117 Group:   Security/Testing
 118 BuildRequires: boost-devel
 119 BuildRequires: pkgconfig(pkgmgr-info)
 120 BuildRequires: pkgconfig(glib-2.0)
 121 BuildRequires: pkgconfig(storage)
 122 Requires:      %{name} = %{version}
 123
 124 %description test
 125 Content Screening and Reputation framework (test program)
 126
 127 %prep
 128 %setup -q
 129
 130 %build
 131
 132 # define build architecture
 133 %ifarch %{ix86}
 134 %define test_target emulator
 135 %else
 136 %define test_target target
 137 %endif
 138
 139 %cmake . \
 140     -DCMAKE_BUILD_TYPE=%{?build_type:%build_type}%{!?build_type:RELEASE} \
 141     -DCMAKE_VERBOSE_MAKEFILE=ON \
 142     -DCMAKE_INSTALL_PREFIX=%{_prefix} \
 143     -DSERVICE_USER=%{service_user} \
 144     -DSERVICE_GROUP=%{service_group} \
 145     -DSMACK_DOMAIN_NAME=%{smack_domain_name} \
 146     -DPOPUP_SERVICE_ENV_FILE_PATH:PATH=%{popup_service_env_file_path} \
 147     -DSERVICE_NAME=%{service_name} \
 148     -DVERSION=%{version} \
 149     -DINCLUDE_INSTALL_DIR:PATH=%{_includedir} \
 150     -DBIN_DIR:PATH=%{bin_dir} \
 151     -DSYSTEMD_UNIT_DIR=%{_unitdir} \
 152     -DPOPUP_SYSTEMD_UNIT_DIR=%{popup_unitdir} \
 153     -DRO_DBSPACE:PATH=%{ro_db_dir} \
 154     -DRW_DBSPACE:PATH=%{rw_db_dir} \
 155     -DRO_RES_DIR:PATH=%{ro_res_dir} \
 156     -DRO_DATA_DIR:PATH=%{ro_data_dir} \
 157     -DSERVICE_IDLE_TIMEOUT_TIME=%{service_idle_timeout_time} \
 158     -DPOPUP_SERVICE_IDLE_TIMEOUT_TIME=%{popup_service_idle_timeout_time} \
 159     -DENGINE_RW_WORKING_DIR:PATH=%{engine_rw_working_dir} \
 160     -DENGINE_DIR:PATH=%{engine_dir} \
 161     -DTEST_TARGET=%{test_target} \
 162     -DTEST_DIR:PATH=%{test_dir} \
 163     -DTEST_RES_DIR:PATH=%{test_res_dir} \
 164 %if 0%{?with_detailed_base_url}
 165     -DDETAILED_URL_BASE:STRING=%{detailed_base_url} \
 166 %endif
 167 %if 0%{?with_sample_engine}
 168     -DWITH_SAMPLE_ENGINE:BOOL=ON \
 169 %else
 170     -DWITH_SAMPLE_ENGINE:BOOL=OFF \
 171 %endif
 172     -DTZ_SYS_STORAGE=%TZ_SYS_STORAGE \
 173     -DTZ_SYS_RW_APP=%TZ_SYS_RW_APP \
 174     -DTZ_SYS_RO_APP=%TZ_SYS_RO_APP
 175
 176 make %{?jobs:-j%jobs}
 177
 178 %install
 179 %make_install
 180 %install_service sockets.target.wants %{service_name}-cs.socket
 181 %install_service sockets.target.wants %{service_name}-wp.socket
 182 %install_service sockets.target.wants %{service_name}-admin.socket
 183 %install_service ../user/sockets.target.wants %{service_name}-popup.socket
 184 %install_service ../system/user-sockets@.target.wants %{service_name}-popup@.socket
 185
 186 mkdir -p %{buildroot}%{rw_db_dir}
 187 mkdir -p %{buildroot}%{ro_db_dir}
 188 cp data/scripts/*.sql %{buildroot}%{ro_db_dir}
 189
 190 mkdir -p %{buildroot}%{engine_dir}
 191 mkdir -p %{buildroot}%{engine_rw_working_dir}
 192
 193 %find_lang %{service_name}
 194
 195 %post
 196 set_cap_script=%{ro_data_dir}/security-config/set_capability
 197 if [ -f $set_cap_script ]; then
 198     $set_cap_script
 199 fi
 200
 201 rm -f %{rw_db_dir}/.%{service_name}.db*
 202
 203 systemctl daemon-reload
 204 if [ $1 = 1 ]; then
 205     systemctl start %{service_name}-cs.socket
 206     systemctl start %{service_name}-wp.socket
 207     systemctl start %{service_name}-admin.socket
 208     systemctl start %{service_name}.service
 209
 210     systemctl --user start %{service_name}-popup.socket
 211     systemctl --user start %{service_name}-popup.service
 212 elif [ $1 = 2 ]; then
 213     systemctl stop %{service_name}-cs.socket
 214     systemctl stop %{service_name}-wp.socket
 215     systemctl stop %{service_name}-admin.socket
 216     systemctl restart %{service_name}.service
 217
 218     systemctl --user stop %{service_name}-popup.socket
 219     systemctl --user restart %{service_name}-popup.service
 220 fi
 221
 222 %preun
 223 if [ $1 = 0 ]; then
 224     systemctl stop %{service_name}-cs.socket
 225     systemctl stop %{service_name}-wp.socket
 226     systemctl stop %{service_name}-admin.socket
 227     systemctl stop %{service_name}.service
 228
 229     systemctl --user stop %{service_name}-popup.socket
 230     systemctl --user stop %{service_name}-popup.service
 231 fi
 232
 233 %postun
 234 if [ $1 = 0 ]; then
 235     systemctl daemon-reload
 236 fi
 237
 238 %post -n lib%{name}-common -p %{sbin_dir}/ldconfig
 239 %post -n lib%{name}-client -p %{sbin_dir}/ldconfig
 240 %postun -n lib%{name}-common -p %{sbin_dir}/ldconfig
 241 %postun -n lib%{name}-client -p %{sbin_dir}/ldconfig
 242
 243 %post -n %{name}-test
 244 chsmack -a "_" %{test_dir}/test_dir/dir1
 245 %if 0%{?with_sample_engine}
 246 systemctl stop %{service_name}-cs.socket
 247 systemctl stop %{service_name}-wp.socket
 248 systemctl stop %{service_name}-admin.socket
 249 systemctl restart %{service_name}.service
 250
 251 touch %{engine_rw_working_dir}/csret_cs_virus_signatures
 252 touch %{engine_rw_working_dir}/csret_wp_risky_urls
 253 %endif
 254
 255 %files -f %{service_name}.lang
 256 %defattr(-,root,root,-)
 257 %manifest %{service_name}.manifest
 258 %license LICENSE
 259 %license LICENSE.BSL-1.0
 260 %{bin_dir}/%{service_name}-server
 261 %{bin_dir}/%{service_name}-popup
 262 %{_unitdir}/%{service_name}.service
 263 %{_unitdir}/sockets.target.wants/%{service_name}-cs.socket
 264 %{_unitdir}/sockets.target.wants/%{service_name}-wp.socket
 265 %{_unitdir}/sockets.target.wants/%{service_name}-admin.socket
 266 %{_unitdir}/%{service_name}-cs.socket
 267 %{_unitdir}/%{service_name}-wp.socket
 268 %{_unitdir}/%{service_name}-admin.socket
 269 %{popup_unitdir}/%{service_name}-popup.socket
 270 %{popup_unitdir}/sockets.target.wants/%{service_name}-popup.socket
 271 %{popup_unitdir}/%{service_name}-popup.service
 272 %{_unitdir}/%{service_name}-popup@.socket
 273 %{_unitdir}/user-sockets@.target.wants/%{service_name}-popup@.socket
 274 %{_unitdir}/%{service_name}-popup@.service
 275 %{ro_res_dir}/default-icon.png
 276
 277 %dir %{ro_data_dir}/%{service_name}
 278 %dir %attr(-, %{service_user}, %{service_group}) %{rw_data_dir}/%{service_name}
 279 %dir %{ro_db_dir}
 280 %dir %attr(-, %{service_user}, %{service_group}) %{rw_db_dir}
 281 %attr(444, %{service_user}, %{service_group}) %{ro_db_dir}/*.sql
 282
 283 %dir %{engine_dir}
 284 %dir %attr(775, %{service_user}, %{service_group}) %{engine_rw_working_dir}
 285
 286 %files -n lib%{name}-common
 287 %defattr(-,root,root,-)
 288 %manifest %{service_name}-common.manifest
 289 %license LICENSE
 290 %{_libdir}/lib%{service_name}-common.so.*
 291
 292 %files -n lib%{name}-client
 293 %defattr(-,root,root,-)
 294 %manifest %{service_name}-client.manifest
 295 %license LICENSE
 296 %{_libdir}/lib%{service_name}-client.so.*
 297
 298 %files devel
 299 %defattr(-,root,root,-)
 300 %{_includedir}/csr/csr-content-screening.h
 301 %{_includedir}/csr/csr-content-screening-types.h
 302 %{_includedir}/csr/csr-web-protection.h
 303 %{_includedir}/csr/csr-web-protection-types.h
 304 %{_includedir}/csr/csr-error.h
 305 %{_includedir}/csr/csr-engine-manager.h
 306 %{_libdir}/pkgconfig/%{service_name}.pc
 307 %{_libdir}/lib%{service_name}-client.so
 308 %{_libdir}/lib%{service_name}-common.so
 309
 310 %files engine-devel
 311 %defattr(-,root,root,-)
 312 %{_includedir}/csre/csre-content-screening-engine-info.h
 313 %{_includedir}/csre/csre-content-screening.h
 314 %{_includedir}/csre/csre-content-screening-types.h
 315 %{_includedir}/csre/csre-error.h
 316 %{_includedir}/csre/csre-web-protection-engine-info.h
 317 %{_includedir}/csre/csre-web-protection.h
 318 %{_includedir}/csre/csre-web-protection-types.h
 319 %{_libdir}/pkgconfig/%{service_name}-engine.pc
 320
 321 %files test
 322 %defattr(-,root,root,-)
 323 %manifest %{service_name}-test.manifest
 324 %license LICENSE
 325 %license LICENSE.BSL-1.0
 326 %{_libdir}/lib%{service_name}-test-common.so
 327 %attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-test
 328 %attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-internal-test
 329 %attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-popup-test
 330 %attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-threadpool-test
 331
 332 # test resources
 333 %dir %attr(-, %{test_user}, %{service_group}) %{test_dir}
 334 %attr(-, %{test_user}, %{service_group}) %{test_dir}/*
 335
 336 %dir %attr(-, %{test_user}, %{service_group}) %{test_res_dir}
 337 %attr(-, %{test_user}, %{service_group}) %{test_res_dir}/*
 338
 339 # sample engine related files
 340 %if 0%{?with_sample_engine}
 341 %{engine_dir}/lib%{service_name}-cs-engine.so
 342 %{engine_dir}/lib%{service_name}-wp-engine.so
 343 %attr(-, %{service_user}, %{service_group}) %{engine_rw_working_dir}/*
 344 %endif