+# services timeoout time on idle for on-demand activation.
+# give it '-1' if don't want to timeout on idle.
+%define service_idle_timeout_time 60
+%define popup_service_idle_timeout_time 10
+
+# Configure engine file system.
+#
+# ro_dir_name / rw_dir_name
+# - dir name is directory name inside of CSR directory.
+# - 'dbspace' cannot be used as a dir_name.
+%define engine_ro_dir_name engine
+%define engine_rw_dir_name engine
+
+# base of detailed url of content screening engine.
+# If it's defined, detailed_url for client will be generated by
+# concatenating base url + malware name.
+# Else it's not defined, detailed_url getter in engine API will be used.
+%define with_detailed_base_url 0
+%define detailed_base_url %nil
+
+%define with_sample_engine 1
+
Summary: A general purpose content screening and reputation solution
Name: csr-framework
-Version: 2.0.0
+Version: 2.3.7
Release: 0
Source: %{name}-%{version}.tar.gz
License: Apache-2.0 and BSL-1.0
Group: Security/Service
URL: http://tizen.org
BuildRequires: cmake
+BuildRequires: gettext-tools
BuildRequires: pkgconfig(dlog)
-BuildRequires: pkgconfig(libsystemd-daemon)
+BuildRequires: pkgconfig(libsystemd)
BuildRequires: pkgconfig(vconf)
-BuildRequires: pkgconfig(elementary)
BuildRequires: pkgconfig(sqlite3)
BuildRequires: pkgconfig(pkgmgr)
-BuildRequires: pkgconfig(glib-2.0)
+BuildRequires: pkgconfig(pkgmgr-info)
BuildRequires: pkgconfig(libsmack)
+BuildRequires: pkgconfig(capi-appfw-application)
+BuildRequires: pkgconfig(elementary)
+BuildRequires: pkgconfig(efl-extension)
+BuildRequires: pkgconfig(icu-i18n)
+BuildRequires: pkgconfig(libtzplatform-config)
+BuildRequires: pkgconfig(cynara-client)
Requires: lib%{name}-common = %{version}-%{release}
%{?systemd_requires}
General purpose content screening and reputation solution. Can scan
file contents and checking url to prevent malicious items.
-%global service_user system
-%global service_group system
%global service_name csr
%global bin_dir %{_bindir}
%global sbin_dir /sbin
%global rw_data_dir /opt/share
%global ro_db_dir %{ro_data_dir}/%{service_name}/dbspace
%global rw_db_dir %{rw_data_dir}/%{service_name}/dbspace
-%global sample_engine_ro_res_dir %{ro_data_dir}/%{service_name}/engine
-%global sample_engine_rw_working_dir %{rw_data_dir}/%{service_name}/engine
-%global sample_engine_dir %{_libdir}
+%global ro_res_dir %{ro_data_dir}/%{service_name}/res
+%global engine_rw_working_dir %{rw_data_dir}/%{service_name}/%{engine_rw_dir_name}
+%global engine_dir %{ro_data_dir}/%{service_name}/%{engine_ro_dir_name}
%global test_dir %{rw_data_dir}/%{service_name}-test
+%global test_res_dir %{ro_data_dir}/%{service_name}-test
+
+%global service_user security_fw
+%global service_group security_fw
+%global test_user owner
+%global popup_service_env_file_path /run/tizen-system-env
+%global smack_domain_name System
+%global popup_unitdir %{_unitdir_user}
%package -n lib%{name}-common
-Summary: Common library package for %{name}
+Summary: CSR framework (common library)
License: Apache-2.0
Group: Security/Libraries
-Requires: %{sbin_dir}/ldconfig
+BuildRequires: pkgconfig(cynara-creds-socket)
Requires: %{sbin_dir}/ldconfig
%description -n lib%{name}-common
-csr-framework common library package.
+Content Screening and Reputation framework package (common library)
%package -n lib%{name}-client
-Summary: Client library package for %{name}
+Summary: CSR framework (client library)
License: Apache-2.0
Group: Security/Libraries
BuildRequires: pkgconfig(capi-base-common)
Requires: %{name} = %{version}-%{release}
Requires: %{sbin_dir}/ldconfig
-Requires: %{sbin_dir}/ldconfig
%description -n lib%{name}-client
-csr-framework client library package.
+Content Screening and Reputation framework package (client library)
%package devel
-Summary: Development files for %{name}
+Summary: CSR framework (development files)
LICENSE: Apache-2.0
Group: Security/Development
BuildRequires: pkgconfig(capi-base-common)
Requires: %{name} = %{version}-%{release}
+Requires: lib%{name}-client
%description devel
-csr-framework development files including headers and pkgconfig file.
+Content Screening and Reputation framework development files like headers and pkgconfigs
%package engine-devel
-Summary: Development files for %{name} engine
+Summary: CSR framework (engine development files)
LICENSE: Apache-2.0
Group: Security/Development
%description engine-devel
-csr-framework engine development files including headers and pkgconfig file.
+Content Screening and Reputation framework engine development files like headers and
+pkgconfigs
%package test
-Summary: test program for %{name}
+Summary: CSR framework (test program)
License: Apache-2.0 and BSL-1.0
Group: Security/Testing
BuildRequires: boost-devel
BuildRequires: pkgconfig(pkgmgr-info)
+BuildRequires: pkgconfig(glib-2.0)
+BuildRequires: pkgconfig(storage)
+Requires: boost-test
Requires: %{name} = %{version}
%description test
-test program of csr-framework
+Content Screening and Reputation framework (test program)
+
+%if 0%{?gcov:1}
+%package gcov
+Summary: CSR framework (gcov)
+Group: Security/Testing
+BuildRequires: lcov
+
+%description gcov
+Content Screening and Reputation framework (gcov)
+%endif
%prep
%setup -q
%build
+
+# define build architecture
+%ifarch %{ix86}
+%define test_target emulator
+%else
+%define test_target target
+%endif
+
+%if 0%{?gcov:1}
+export CFLAGS+=" -fprofile-arcs -ftest-coverage"
+export CXXFLAGS+=" -fprofile-arcs -ftest-coverage"
+export FFLAGS+=" -fprofile-arcs -ftest-coverage"
+export LDFLAGS+=" -lgcov"
+%endif
+
%cmake . \
-DCMAKE_BUILD_TYPE=%{?build_type:%build_type}%{!?build_type:RELEASE} \
-DCMAKE_VERBOSE_MAKEFILE=ON \
-DCMAKE_INSTALL_PREFIX=%{_prefix} \
-DSERVICE_USER=%{service_user} \
-DSERVICE_GROUP=%{service_group} \
+ -DSMACK_DOMAIN_NAME=%{smack_domain_name} \
+ -DPOPUP_SERVICE_ENV_FILE_PATH:PATH=%{popup_service_env_file_path} \
-DSERVICE_NAME=%{service_name} \
-DVERSION=%{version} \
-DINCLUDE_INSTALL_DIR:PATH=%{_includedir} \
-DBIN_DIR:PATH=%{bin_dir} \
-DSYSTEMD_UNIT_DIR=%{_unitdir} \
- -DSYSTEMD_UNIT_USER_DIR=%{_unitdir_user} \
+ -DPOPUP_SYSTEMD_UNIT_DIR=%{popup_unitdir} \
-DRO_DBSPACE:PATH=%{ro_db_dir} \
-DRW_DBSPACE:PATH=%{rw_db_dir} \
- -DSAMPLE_ENGINE_RO_RES_DIR:PATH=%{sample_engine_ro_res_dir} \
- -DSAMPLE_ENGINE_RW_WORKING_DIR:PATH=%{sample_engine_rw_working_dir} \
- -DSAMPLE_ENGINE_DIR:PATH=%{sample_engine_dir} \
- -DTEST_DIR:PATH=%{test_dir}
+ -DRO_RES_DIR:PATH=%{ro_res_dir} \
+ -DRO_DATA_DIR:PATH=%{ro_data_dir} \
+ -DSERVICE_IDLE_TIMEOUT_TIME=%{service_idle_timeout_time} \
+ -DPOPUP_SERVICE_IDLE_TIMEOUT_TIME=%{popup_service_idle_timeout_time} \
+ -DENGINE_RW_WORKING_DIR:PATH=%{engine_rw_working_dir} \
+ -DENGINE_DIR:PATH=%{engine_dir} \
+ -DTEST_TARGET=%{test_target} \
+ -DTEST_DIR:PATH=%{test_dir} \
+ -DTEST_RES_DIR:PATH=%{test_res_dir} \
+%if 0%{?with_detailed_base_url}
+ -DDETAILED_URL_BASE:STRING=%{detailed_base_url} \
+%endif
+%if 0%{?with_sample_engine}
+ -DWITH_SAMPLE_ENGINE:BOOL=ON \
+%else
+ -DWITH_SAMPLE_ENGINE:BOOL=OFF \
+%endif
+ -DTZ_SYS_STORAGE=%TZ_SYS_STORAGE \
+ -DTZ_SYS_RW_APP=%TZ_SYS_RW_APP \
+ -DTZ_SYS_RO_APP=%TZ_SYS_RO_APP \
+ -DBUILD_GCOV=%{?gcov:1}%{!?gcov:0}
make %{?jobs:-j%jobs}
+%if 0%{?gcov:1}
+mkdir -p gcov-obj
+find . -name '*.gcno' -exec cp '{}' gcov-obj ';'
+%endif
+
%install
%make_install
-mkdir -p %{buildroot}%{_unitdir}/multi-user.target.wants
-mkdir -p %{buildroot}%{_unitdir}/sockets.target.wants
-ln -s ../%{service_name}.service %{buildroot}%{_unitdir}/multi-user.target.wants/%{service_name}.service
-ln -s ../%{service_name}.socket %{buildroot}%{_unitdir}/sockets.target.wants/%{service_name}.socket
-ln -s ../%{service_name}-popup.socket %{buildroot}%{_unitdir}/sockets.target.wants/%{service_name}-popup.socket
-
-mkdir -p %{buildroot}%{ro_data_dir}/license
-cp LICENSE %{buildroot}%{ro_data_dir}/license/%{name}
-cp LICENSE.BSL-1.0 %{buildroot}%{ro_data_dir}/license/%{name}.BSL-1.0
-cp LICENSE %{buildroot}%{ro_data_dir}/license/lib%{name}-client
-cp LICENSE %{buildroot}%{ro_data_dir}/license/lib%{name}-common
-cp LICENSE %{buildroot}%{ro_data_dir}/license/%{name}-test
-cp LICENSE.BSL-1.0 %{buildroot}%{ro_data_dir}/license/%{name}-test.BSL-1.0
+%install_service sockets.target.wants %{service_name}-cs.socket
+%install_service sockets.target.wants %{service_name}-wp.socket
+%install_service sockets.target.wants %{service_name}-admin.socket
+%install_service ../user/sockets.target.wants %{service_name}-popup.socket
-mkdir -p %{buildroot}%{ro_db_dir}
mkdir -p %{buildroot}%{rw_db_dir}
-mkdir -p %{buildroot}%{sample_engine_ro_res_dir}
+mkdir -p %{buildroot}%{ro_db_dir}
cp data/scripts/*.sql %{buildroot}%{ro_db_dir}
+mkdir -p %{buildroot}%{engine_dir}
+mkdir -p %{buildroot}%{engine_rw_working_dir}
+
+%find_lang %{service_name}
+
+%if 0%{?gcov:1}
+mkdir -p %{buildroot}%{_datadir}/gcov/obj
+install -m 0644 gcov-obj/* %{buildroot}%{_datadir}/gcov/obj/%{name}
+%endif
+
%post
+rm -f %{rw_db_dir}/.%{service_name}.db*
+
systemctl daemon-reload
if [ $1 = 1 ]; then
- systemctl start %{service_name}.socket
+ systemctl start %{service_name}-cs.socket
+ systemctl start %{service_name}-wp.socket
+ systemctl start %{service_name}-admin.socket
systemctl start %{service_name}.service
- systemctl start %{service_name}-popup.socket
-fi
-if [ $1 = 2 ]; then
- systemctl restart %{service_name}.socket
+ systemctl --user start %{service_name}-popup.socket
+ systemctl --user start %{service_name}-popup.service
+elif [ $1 = 2 ]; then
+ systemctl stop %{service_name}-cs.socket
+ systemctl stop %{service_name}-wp.socket
+ systemctl stop %{service_name}-admin.socket
systemctl restart %{service_name}.service
- systemctl restart %{service_name}-popup.socket
+
+ systemctl --user stop %{service_name}-popup.socket
+ systemctl --user restart %{service_name}-popup.service
fi
%preun
if [ $1 = 0 ]; then
+ systemctl stop %{service_name}-cs.socket
+ systemctl stop %{service_name}-wp.socket
+ systemctl stop %{service_name}-admin.socket
systemctl stop %{service_name}.service
- systemctl stop %{service_name}.socket
- systemctl stop %{service_name}-popup.socket
+
+ systemctl --user stop %{service_name}-popup.socket
+ systemctl --user stop %{service_name}-popup.service
fi
%postun
%postun -n lib%{name}-common -p %{sbin_dir}/ldconfig
%postun -n lib%{name}-client -p %{sbin_dir}/ldconfig
-%files
+%post -n %{name}-test
+chsmack -a "_" %{test_dir}/test_dir/dir1
+%if 0%{?with_sample_engine}
+systemctl stop %{service_name}-cs.socket
+systemctl stop %{service_name}-wp.socket
+systemctl stop %{service_name}-admin.socket
+systemctl restart %{service_name}.service
+
+touch %{engine_rw_working_dir}/csret_cs_virus_signatures
+touch %{engine_rw_working_dir}/csret_wp_risky_urls
+%endif
+
+%if 0%{?gcov:1}
+chmod 777 -R /tmp/home/abuild/rpmbuild/BUILD/csr-framework-*
+su - owner -c %{bin_dir}/%{service_name}-test
+%{bin_dir}/%{service_name}-internal-test
+%{bin_dir}/%{service_name}-threadpool-test
+%endif
+
+%files -f %{service_name}.lang
%defattr(-,root,root,-)
%manifest %{service_name}.manifest
-%{ro_data_dir}/license/%{name}
-%{ro_data_dir}/license/%{name}.BSL-1.0
+%license LICENSE
+%license LICENSE.BSL-1.0
%{bin_dir}/%{service_name}-server
%{bin_dir}/%{service_name}-popup
-%{_unitdir}/multi-user.target.wants/%{service_name}.service
%{_unitdir}/%{service_name}.service
-%{_unitdir}/sockets.target.wants/%{service_name}.socket
-%{_unitdir}/%{service_name}.socket
-%{_unitdir}/%{service_name}-popup.service
-%{_unitdir}/sockets.target.wants/%{service_name}-popup.socket
-%{_unitdir}/%{service_name}-popup.socket
+%{_unitdir}/sockets.target.wants/%{service_name}-cs.socket
+%{_unitdir}/sockets.target.wants/%{service_name}-wp.socket
+%{_unitdir}/sockets.target.wants/%{service_name}-admin.socket
+%{_unitdir}/%{service_name}-cs.socket
+%{_unitdir}/%{service_name}-wp.socket
+%{_unitdir}/%{service_name}-admin.socket
+%{popup_unitdir}/%{service_name}-popup.socket
+%{popup_unitdir}/sockets.target.wants/%{service_name}-popup.socket
+%{popup_unitdir}/%{service_name}-popup.service
+%{ro_res_dir}/default-icon.png
%dir %{ro_data_dir}/%{service_name}
%dir %attr(-, %{service_user}, %{service_group}) %{rw_data_dir}/%{service_name}
%dir %attr(-, %{service_user}, %{service_group}) %{rw_db_dir}
%attr(444, %{service_user}, %{service_group}) %{ro_db_dir}/*.sql
-# sample engine related files
-%dir %{sample_engine_dir}
-%dir %{sample_engine_ro_res_dir}
-%dir %attr(775, %{service_user}, %{service_group}) %{sample_engine_rw_working_dir}
-%{sample_engine_dir}/lib%{service_name}-cs-engine.so
-%{sample_engine_dir}/lib%{service_name}-wp-engine.so
-%attr(-, %{service_user}, %{service_group}) %{sample_engine_rw_working_dir}/*
+%dir %{engine_dir}
+%dir %attr(775, %{service_user}, %{service_group}) %{engine_rw_working_dir}
%files -n lib%{name}-common
%defattr(-,root,root,-)
%manifest %{service_name}-common.manifest
-%{ro_data_dir}/license/lib%{name}-common
+%license LICENSE
%{_libdir}/lib%{service_name}-common.so.*
%files -n lib%{name}-client
%defattr(-,root,root,-)
%manifest %{service_name}-client.manifest
-%{ro_data_dir}/license/lib%{name}-client
+%license LICENSE
%{_libdir}/lib%{service_name}-client.so.*
%files devel
%defattr(-,root,root,-)
-%{_includedir}/csr/content-screening.h
-%{_includedir}/csr/content-screening-types.h
-%{_includedir}/csr/web-protection.h
-%{_includedir}/csr/web-protection-types.h
-%{_includedir}/csr/error.h
-%{_includedir}/csr/engine-manager.h
+%{_includedir}/csr/csr-content-screening.h
+%{_includedir}/csr/csr-content-screening-types.h
+%{_includedir}/csr/csr-web-protection.h
+%{_includedir}/csr/csr-web-protection-types.h
+%{_includedir}/csr/csr-error.h
+%{_includedir}/csr/csr-engine-manager.h
%{_libdir}/pkgconfig/%{service_name}.pc
%{_libdir}/lib%{service_name}-client.so
%{_libdir}/lib%{service_name}-common.so
%files engine-devel
%defattr(-,root,root,-)
-%{_includedir}/csre/content-screening-engine-info.h
-%{_includedir}/csre/content-screening.h
-%{_includedir}/csre/content-screening-types.h
-%{_includedir}/csre/error.h
-%{_includedir}/csre/web-protection-engine-info.h
-%{_includedir}/csre/web-protection.h
-%{_includedir}/csre/web-protection-types.h
+%{_includedir}/csre/csre-content-screening-engine-info.h
+%{_includedir}/csre/csre-content-screening.h
+%{_includedir}/csre/csre-content-screening-types.h
+%{_includedir}/csre/csre-error.h
+%{_includedir}/csre/csre-web-protection-engine-info.h
+%{_includedir}/csre/csre-web-protection.h
+%{_includedir}/csre/csre-web-protection-types.h
%{_libdir}/pkgconfig/%{service_name}-engine.pc
%files test
%defattr(-,root,root,-)
%manifest %{service_name}-test.manifest
-%{ro_data_dir}/license/%{name}-test
-%{ro_data_dir}/license/%{name}-test.BSL-1.0
-%attr(-, %{service_user}, %{service_group}) %{bin_dir}/%{service_name}-test
-%attr(-, %{service_user}, %{service_group}) %{bin_dir}/%{service_name}-internal-test
-%attr(-, %{service_user}, %{service_group}) %{bin_dir}/%{service_name}-popup-test
-%attr(-, %{service_user}, %{service_group}) %{bin_dir}/%{service_name}-threadpool-test
+%license LICENSE
+%license LICENSE.BSL-1.0
+%{_libdir}/lib%{service_name}-test-common.so
+%attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-test
+%attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-internal-test
+%attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-popup-test
+%attr(-, %{test_user}, %{service_group}) %{bin_dir}/%{service_name}-threadpool-test
+
# test resources
-%dir %attr(-, %{service_user}, %{service_group}) %{test_dir}
-%attr(-, %{service_user}, %{service_group}) %{test_dir}/*
+%dir %attr(-, %{test_user}, %{service_group}) %{test_dir}
+%attr(-, %{test_user}, %{service_group}) %{test_dir}/*
+
+%dir %attr(-, %{test_user}, %{service_group}) %{test_res_dir}
+%attr(-, %{test_user}, %{service_group}) %{test_res_dir}/*
+
+# sample engine related files
+%if 0%{?with_sample_engine}
+%{engine_dir}/lib%{service_name}-cs-engine.so
+%{engine_dir}/lib%{service_name}-wp-engine.so
+%attr(-, %{service_user}, %{service_group}) %{engine_rw_working_dir}/*
+%endif
+
+%if 0%{?gcov:1}
+%files gcov
+%{_datadir}/gcov/obj/*
+%endif