Update privilege list: Add missing privileges to mapping
[platform/core/security/security-manager.git] / packaging / security-manager.spec
1 Name:       security-manager
2 Summary:    Security manager and utilities
3 Version:    1.1.0
4 Release:    1
5 Group:      Security/Service
6 License:    Apache-2.0
7 Source0:    %{name}-%{version}.tar.gz
8 Source1:    security-manager.manifest
9 Source3:    libsecurity-manager-client.manifest
10 Requires: security-manager-policy
11 Requires(post): smack
12 BuildRequires: cmake
13 BuildRequires: zip
14 BuildRequires: libattr-devel
15 BuildRequires: pkgconfig(libsmack)
16 BuildRequires: pkgconfig(libcap)
17 BuildRequires: pkgconfig(libsystemd-daemon)
18 BuildRequires: pkgconfig(libsystemd-journal)
19 BuildRequires: pkgconfig(libtzplatform-config)
20 BuildRequires: pkgconfig(sqlite3)
21 BuildRequires: pkgconfig(db-util)
22 BuildRequires: pkgconfig(cynara-admin)
23 BuildRequires: pkgconfig(cynara-client-async)
24 BuildRequires: boost-devel
25 %{?systemd_requires}
26
27 %description
28 Tizen security manager and utilities
29
30 %package -n libsecurity-manager-client
31 Summary:    Security manager (client)
32 Group:      Security/Libraries
33 Requires:   security-manager = %{version}-%{release}
34 Requires(post): /sbin/ldconfig
35 Requires(postun): /sbin/ldconfig
36
37 %description -n libsecurity-manager-client
38 Tizen Security manager client library
39
40 %package -n libsecurity-manager-client-devel
41 Summary:    Security manager (client-devel)
42 Group:      Security/Development
43 Requires:   libsecurity-manager-client = %{version}-%{release}
44
45 %description -n libsecurity-manager-client-devel
46 Development files needed for using the security manager client
47
48 %package policy
49 Summary:    Security manager policy
50 Group:      Security/Access Control
51 Requires:   sed
52 Requires(post): security-manager = %{version}-%{release}
53 Requires(post): cyad
54 Requires(post): sqlite
55 Requires(post): tizen-platform-config-tools
56
57 %description policy
58 Set of security rules that constitute security policy in the system
59
60 %prep
61 %setup -q
62 cp %{SOURCE1} .
63 cp %{SOURCE3} .
64
65 %build
66 %if 0%{?sec_build_binary_debug_enable}
67 export CFLAGS="$CFLAGS -DTIZEN_DEBUG_ENABLE"
68 export CXXFLAGS="$CXXFLAGS -DTIZEN_DEBUG_ENABLE"
69 export FFLAGS="$FFLAGS -DTIZEN_DEBUG_ENABLE"
70 %endif
71
72 export LDFLAGS+="-Wl,--rpath=%{_libdir}"
73
74 %cmake . -DVERSION=%{version} \
75         -DBIN_INSTALL_DIR=%{_bindir} \
76         -DDB_INSTALL_DIR=%{TZ_SYS_DB} \
77         -DSYSTEMD_INSTALL_DIR=%{_unitdir} \
78         -DCMAKE_BUILD_TYPE=%{?build_type:%build_type}%{!?build_type:RELEASE} \
79         -DCMAKE_VERBOSE_MAKEFILE=ON
80 make %{?jobs:-j%jobs}
81
82 %install
83 rm -rf %{buildroot}
84 mkdir -p %{buildroot}%{_datadir}/license
85 cp LICENSE %{buildroot}%{_datadir}/license/%{name}
86 cp LICENSE %{buildroot}%{_datadir}/license/libsecurity-manager-client
87 %make_install
88
89 mkdir -p %{buildroot}/%{_unitdir}/sockets.target.wants
90 ln -s ../security-manager.socket %{buildroot}/%{_unitdir}/sockets.target.wants/security-manager.socket
91 ln -s ../security-manager-master.socket %{buildroot}/%{_unitdir}/sockets.target.wants/security-manager-master.socket
92 ln -s ../security-manager-slave.socket %{buildroot}/%{_unitdir}/sockets.target.wants/security-manager-slave.socket
93
94 %clean
95 rm -rf %{buildroot}
96
97 %post
98 /sbin/ldconfig
99 systemctl daemon-reload
100 if [ $1 = 1 ]; then
101     # installation
102     systemctl start security-manager.service
103 fi
104
105 if [ $1 = 2 ]; then
106     # update
107     systemctl restart security-manager.service
108 fi
109 chsmack -a System %{TZ_SYS_DB}/.security-manager.db
110 chsmack -a System %{TZ_SYS_DB}/.security-manager.db-journal
111
112 %preun
113 if [ $1 = 0 ]; then
114     # unistall
115     systemctl stop security-manager.service
116 fi
117
118 %postun
119 /sbin/ldconfig
120 if [ $1 = 0 ]; then
121     # unistall
122     systemctl daemon-reload
123 fi
124
125 %post -n libsecurity-manager-client -p /sbin/ldconfig
126
127 %postun -n libsecurity-manager-client -p /sbin/ldconfig
128
129 %post policy
130 %{_bindir}/security-manager-policy-reload
131
132 %files -n security-manager
133 %manifest security-manager.manifest
134 %defattr(-,root,root,-)
135 %attr(755,root,root) %{_bindir}/security-manager
136 %attr(755,root,root) %{_bindir}/security-manager-cmd
137 %attr(755,root,root) %{_sysconfdir}/gumd/useradd.d/50_security-manager-add.post
138 %attr(755,root,root) %{_sysconfdir}/gumd/userdel.d/50_security-manager-remove.pre
139
140 %{_libdir}/libsecurity-manager-commons.so.*
141 %attr(-,root,root) %{_unitdir}/security-manager.*
142 %attr(-,root,root) %{_unitdir}/security-manager-master.*
143 %attr(-,root,root) %{_unitdir}/security-manager-slave.*
144 %attr(-,root,root) %{_unitdir}/sockets.target.wants/security-manager.*
145 %attr(-,root,root) %{_unitdir}/sockets.target.wants/security-manager-master.*
146 %attr(-,root,root) %{_unitdir}/sockets.target.wants/security-manager-slave.*
147 %config(noreplace) %attr(0600,root,root) %{TZ_SYS_DB}/.security-manager.db
148 %config(noreplace) %attr(0600,root,root) %{TZ_SYS_DB}/.security-manager.db-journal
149 %{_datadir}/license/%{name}
150
151 %files -n libsecurity-manager-client
152 %manifest libsecurity-manager-client.manifest
153 %defattr(-,root,root,-)
154 %{_libdir}/libsecurity-manager-client.so.*
155 %{_datadir}/license/libsecurity-manager-client
156
157 %files -n libsecurity-manager-client-devel
158 %manifest %{name}.manifest
159 %defattr(-,root,root,-)
160 %{_libdir}/libsecurity-manager-client.so
161 %{_libdir}/libsecurity-manager-commons.so
162 %{_includedir}/security-manager/security-manager.h
163 %{_libdir}/pkgconfig/security-manager.pc
164
165 %files -n security-manager-policy
166 %manifest %{name}.manifest
167 %{_datadir}/security-manager/policy
168 %attr(755,root,root) %{_bindir}/security-manager-policy-reload