Elena Reshetova [Fri, 26 Jul 2013 07:09:13 +0000 (10:09 +0300)]
Security plugin: support for --root option
-adding macros to configure location of default policy
-adding a default security policy to rpm-plugins dir
-adding copying of policy file to chroot dir when rpm is run with --root param
-moving policy saving to post_tsm hook
Elena Reshetova [Tue, 23 Jul 2013 13:37:05 +0000 (16:37 +0300)]
Security plugin: pkg_name allocation in conflict
- fix to the pkg_name allocation in conflict handling
Elena Reshetova [Fri, 5 Jul 2013 11:48:42 +0000 (14:48 +0300)]
Security plugin: allowing multiple domains definition
- allowing multiple domains definition per manifest
- fixing indirect include of config.h
- restricting adding new sw source with the same key info
Alexandru Cornea [Sat, 29 Jun 2013 02:10:40 +0000 (05:10 +0300)]
resetting manifest requested domain to floor
Anas Nashif [Wed, 12 Jun 2013 11:58:21 +0000 (07:58 -0400)]
update changelog
Anas Nashif [Wed, 12 Jun 2013 11:57:26 +0000 (07:57 -0400)]
update macros from project conf
Anas Nashif [Wed, 12 Jun 2013 11:57:05 +0000 (07:57 -0400)]
Merge branch 'tizen' of ssh://review.tizen.org/platform/upstream/rpm into tizen
Elena Reshetova [Fri, 31 May 2013 12:52:22 +0000 (15:52 +0300)]
Security plugin: Adding configuration option --disable-dchecks
Elena Reshetova [Fri, 31 May 2013 12:51:38 +0000 (15:51 +0300)]
Security-plugin: Fix the null pointer comparison
possibility in msmXattrSupport
Anas Nashif [Fri, 10 May 2013 18:52:37 +0000 (14:52 -0400)]
Set license using %license
William Douglas [Tue, 7 May 2013 19:57:42 +0000 (12:57 -0700)]
Fix 32bit kernel builds by not using eu-strip
Right now 32bit kernel builds are failing because eu-strip is not
performing safe operations. In order to work around this, use objdump
as before when running a kernel build (by checking for a Kconfig file
in the BUILDIR).
Change-Id: I8c24eaab9e0ac1dfe21484522ce4e415d21fcb14
Signed-off-by: William Douglas <william.douglas@intel.com>
Elena Reshetova [Mon, 22 Apr 2013 12:16:24 +0000 (15:16 +0300)]
Cleaning up code identation
Elena Reshetova [Thu, 18 Apr 2013 12:19:13 +0000 (15:19 +0300)]
Fix the missing path prefix for Plugin init hook
Elena Reshetova [Tue, 16 Apr 2013 10:23:37 +0000 (13:23 +0300)]
Fixes to rpm security plugin
- stricter control over smack64exec label assigment
- strciter control over dbus interface labels
Alexander Kanevskiy [Sat, 13 Apr 2013 06:27:41 +0000 (09:27 +0300)]
Add VCS tag into .src.rpm
Anas Nashif [Fri, 29 Mar 2013 13:53:09 +0000 (06:53 -0700)]
Update changelog
Anas Nashif [Fri, 29 Mar 2013 13:52:58 +0000 (06:52 -0700)]
add find-provides.ksyms
Anas Nashif [Fri, 29 Mar 2013 13:52:38 +0000 (06:52 -0700)]
add find-provides.ksyms
Elena Reshetova [Tue, 26 Mar 2013 13:56:17 +0000 (15:56 +0200)]
init message test
Elena Reshetova [Tue, 26 Mar 2013 08:39:30 +0000 (10:39 +0200)]
Adding Isolated domain to policy
Elena Reshetova [Tue, 26 Mar 2013 08:38:44 +0000 (10:38 +0200)]
Changing smack load path
Anas Nashif [Fri, 22 Mar 2013 18:07:33 +0000 (11:07 -0700)]
Fixed package groups
Elena Reshetova [Fri, 8 Mar 2013 09:02:45 +0000 (11:02 +0200)]
Adding a new attribute tag to manifest
Attribute tag allows to specify the type of the package (currenlty only application or system)
that affects setting SMACK64EXEC label.
For system packages it isn't set by default and for applications it is set to requested domain.
Nashif, Anas [Fri, 8 Mar 2013 07:50:22 +0000 (23:50 -0800)]
Merge "Keep function symbols for backtraces."
Elena Reshetova [Fri, 8 Mar 2013 07:48:25 +0000 (09:48 +0200)]
Adding System ac domain to the policy
William Douglas [Wed, 6 Mar 2013 23:18:17 +0000 (15:18 -0800)]
Keep function symbols for backtraces.
In order to get minimal backtraces in gdb without installing
debug-info packages strip packages with eu-strip -g.
Also check for kernel modules and strip them without attempting
to leave minimal function symbols in place (as this does not work
correctly).
Signed-off-by: William Douglas <william.douglas@intel.com>
Anas Nashif [Tue, 5 Mar 2013 07:59:00 +0000 (23:59 -0800)]
Fixed find-lang
Anas Nashif [Tue, 5 Mar 2013 07:57:57 +0000 (23:57 -0800)]
Fixed package groups
Anas Nashif [Tue, 5 Mar 2013 07:57:39 +0000 (23:57 -0800)]
add macro no_lang_C
Anas Nashif [Tue, 5 Mar 2013 07:57:17 +0000 (23:57 -0800)]
update find-lang
Anas Nashif [Mon, 4 Mar 2013 22:15:00 +0000 (14:15 -0800)]
Use find-lang from opensuse
Anas Nashif [Thu, 7 Feb 2013 03:02:35 +0000 (19:02 -0800)]
Merge branch 'master' of ssh://tz.otcshare.org/profile/base/rpm
Anas Nashif [Thu, 7 Feb 2013 03:01:03 +0000 (19:01 -0800)]
Call ldconfig
Anas Nashif [Thu, 7 Feb 2013 03:00:44 +0000 (19:00 -0800)]
call ldconfig
Nashif, Anas [Wed, 6 Feb 2013 15:54:16 +0000 (07:54 -0800)]
Merge "Include %{VCS} in rpm -q --info output"
Anas Nashif [Wed, 6 Feb 2013 15:47:44 +0000 (07:47 -0800)]
Move libs back to main package
Anas Nashif [Wed, 6 Feb 2013 15:47:25 +0000 (07:47 -0800)]
move libs back to main package
Simon McVittie [Wed, 6 Feb 2013 15:04:23 +0000 (15:04 +0000)]
Include %{VCS} in rpm -q --info output
When packages are built from a VCS with an automatically-assigned
release number, checking the commit ID of an installed package is
relatively common and important.
Elena Reshetova [Mon, 4 Feb 2013 08:14:23 +0000 (10:14 +0200)]
Moving some plugin info prints to debug
Anas Nashif [Sun, 3 Feb 2013 00:54:07 +0000 (16:54 -0800)]
Update to 4.11.0.1
Anas Nashif [Sun, 3 Feb 2013 00:45:34 +0000 (16:45 -0800)]
Update to 4.11.0.1
Anas Nashif [Tue, 29 Jan 2013 13:53:31 +0000 (05:53 -0800)]
update BR for python package
Markus Lehtonen [Tue, 29 Jan 2013 13:44:25 +0000 (15:44 +0200)]
Update changelog
Signed-off-by: Markus Lehtonen <markus.lehtonen@linux.intel.com>
Elena Reshetova [Mon, 28 Jan 2013 07:38:08 +0000 (09:38 +0200)]
Temporally making loading of a configured plugin optional
Anas Nashif [Thu, 17 Jan 2013 14:31:04 +0000 (06:31 -0800)]
fixing error in cleanup if magic db can't be loaded [Elena Reshetova]
Elena Reshetova [Thu, 17 Jan 2013 14:20:02 +0000 (16:20 +0200)]
fixing error in cleanup if magic db can't be loaded
Anas Nashif [Thu, 17 Jan 2013 00:25:08 +0000 (16:25 -0800)]
Enable security plugin/Smack
Elena Reshetova [Fri, 4 Jan 2013 10:46:42 +0000 (12:46 +0200)]
Adding security msm plugin
Elena Reshetova [Fri, 30 Nov 2012 16:35:44 +0000 (18:35 +0200)]
Making pre/post tsm/psm hooks more consistent.
-All post hooks take an additional rc argument that indicates general return code from operation.
-All post hooks are always called if correspoding pre hook has been called.
-The return value from post hooks is curently ignored
Signed-off-by: Panu Matilainen <pmatilai@redhat.com>
Elena Reshetova [Thu, 22 Nov 2012 18:49:27 +0000 (20:49 +0200)]
Improving scriptlet related rpm plugin hooks.
Three new hooks added:
PLUGINHOOK_SCRIPTLET_PRE_FUNC
Called before scriptlet execution
PLUGINHOOK_SCRIPTLET_FORK_POST_FUNC
Called after fork() but before scriptlet execution
PLUGINHOOK_SCRIPTLET_POST_FUNC
Called after scriptlet execution
Currently pre and post hooks are called for externals and internal lua scripts.
post hook is called even if scriptlet execution has failed and
the return code is given as an argument.
fork_post hook is only called for external scriptlets,
because for internal scriptlets no fork() is currently performed.
Signed-off-by: Panu Matilainen <pmatilai@redhat.com>
Elena Reshetova [Wed, 17 Oct 2012 11:55:39 +0000 (14:55 +0300)]
Extending rpm plugin interface, part 1
This change adds a new type of the rpm plugin, called transaction plugin
and a set of initial hooks for this plugin. The hooks are:
PLUGINHOOK_TSM_PRE
Pre-transaction hook that is called before an rpm transaction begins
PLUGINHOOK_TSM_POST
Post-transaction hook that is called after an rpm transaction ends
PLUGINHOOK_PSM_PRE
Pre-transaction-element hook that is called before an rpm
transaction-element is processed
PLUGINHOOK_PSM_POST
Post-transaction-element hook that is called after an rpm
transaction-element is processed
PLUGINHOOK_SCRIPT_SETUP
Per-script hook that is called once for each rpm mainainers script
that is present in the package
Each hook is called for every plugin that have this hook registered.
The avaliable transaction plugins can be specified in macros.in via
transaction_plugins element.
Signed-off-by: Panu Matilainen <pmatilai@redhat.com>
Elena Reshetova [Fri, 4 Jan 2013 11:46:32 +0000 (13:46 +0200)]
Adding manifest support for rpmbuild
Anas Nashif [Mon, 14 Jan 2013 16:54:40 +0000 (08:54 -0800)]
Move build related files to rpm-build
Anas Nashif [Mon, 14 Jan 2013 16:12:39 +0000 (08:12 -0800)]
reorg files in sub-packages
Anas Nashif [Fri, 4 Jan 2013 15:10:17 +0000 (07:10 -0800)]
bump python-rpm to 4.10.91
Anas Nashif [Fri, 4 Jan 2013 13:53:10 +0000 (05:53 -0800)]
spec cleanup
Anas Nashif [Sat, 15 Dec 2012 19:30:24 +0000 (11:30 -0800)]
cleanup macros
Anas Nashif [Sat, 15 Dec 2012 19:30:06 +0000 (11:30 -0800)]
cleanup macros
Anas Nashif [Sat, 15 Dec 2012 16:55:56 +0000 (08:55 -0800)]
update to 4.11.0 beta1
Anas Nashif [Fri, 14 Dec 2012 16:57:50 +0000 (08:57 -0800)]
fixed lang_package
Markus Lehtonen [Fri, 14 Dec 2012 01:57:32 +0000 (03:57 +0200)]
packaging: change some builddeps to be "pkgconfig" type
For better portability.
Signed-off-by: Markus Lehtonen <markus.lehtonen@linux.intel.com>
Anas Nashif [Sun, 2 Dec 2012 18:48:41 +0000 (10:48 -0800)]
lang_package now accepts arguments
-n to specify package name
-f to specify lang file name (without .lang)
Anas Nashif [Tue, 27 Nov 2012 05:15:28 +0000 (21:15 -0800)]
fixed package description
Anas Nashif [Wed, 21 Nov 2012 23:37:03 +0000 (15:37 -0800)]
add python-rpm spec
Anas Nashif [Wed, 21 Nov 2012 22:01:26 +0000 (14:01 -0800)]
remove file sepolicy from list
Anas Nashif [Wed, 21 Nov 2012 21:58:38 +0000 (13:58 -0800)]
include errno.h
Anas Nashif [Wed, 21 Nov 2012 21:45:23 +0000 (13:45 -0800)]
update to 4.11 alpha (4.10.90)
Anas Nashif [Thu, 8 Nov 2012 20:05:53 +0000 (12:05 -0800)]
libfile-devel -> file-devel
Anas Nashif [Thu, 8 Nov 2012 20:04:38 +0000 (12:04 -0800)]
libfile -< libmagic
Anas Nashif [Sun, 14 Oct 2012 04:09:08 +0000 (21:09 -0700)]
Assume executable libs
Anas Nashif [Sat, 13 Oct 2012 04:12:29 +0000 (21:12 -0700)]
remove patch from suse
Anas Nashif [Fri, 12 Oct 2012 15:49:44 +0000 (08:49 -0700)]
Remove some old craft
Anas Nashif [Fri, 12 Oct 2012 15:45:43 +0000 (08:45 -0700)]
Remove some old craft
Anas Nashif [Fri, 12 Oct 2012 15:35:00 +0000 (08:35 -0700)]
Remove some old craft
Anas Nashif [Thu, 11 Oct 2012 22:56:20 +0000 (15:56 -0700)]
add packaging files
Anas Nashif [Thu, 11 Oct 2012 22:53:59 +0000 (15:53 -0700)]
disable dep tracking
Anas Nashif [Thu, 11 Oct 2012 22:52:52 +0000 (15:52 -0700)]
Find supplements
Anas Nashif [Thu, 11 Oct 2012 22:52:02 +0000 (15:52 -0700)]
File attributes
Anas Nashif [Thu, 11 Oct 2012 22:49:02 +0000 (15:49 -0700)]
remove languages we do not yet support
Anas Nashif [Thu, 11 Oct 2012 22:48:26 +0000 (15:48 -0700)]
GStreamer provides, codecs
Anas Nashif [Thu, 11 Oct 2012 22:47:45 +0000 (15:47 -0700)]
Font dependencies
Anas Nashif [Thu, 11 Oct 2012 22:47:01 +0000 (15:47 -0700)]
Python dependencies
Anas Nashif [Thu, 11 Oct 2012 22:45:41 +0000 (15:45 -0700)]
Don't complain about a bad md5 sum for repackaged rpms.
Anas Nashif [Thu, 11 Oct 2012 22:45:00 +0000 (15:45 -0700)]
Prefer sys/vfs.h, as statvfs stats all filesystems again
Anas Nashif [Thu, 11 Oct 2012 22:43:32 +0000 (15:43 -0700)]
debug link
Anas Nashif [Thu, 11 Oct 2012 22:42:33 +0000 (15:42 -0700)]
Create a debuginfo package for each subpackage.
Originally from opensuse rpm
Anas Nashif [Thu, 11 Oct 2012 22:32:35 +0000 (15:32 -0700)]
Let debuginfo packages provide the build-id
This patch lets debuginfo packages provide build-id like follows:
debuginfo(build-id) =
c63cb23876c5fa85f36beaff58f8557e1bf22517
Users can therefore ask zypper to install the correct debuginfo package
with:
zypper install -C "debuginfo(build-id) =
c63cb23876c5fa85f36beaff58f8557e1bf22517"
Anas Nashif [Thu, 11 Oct 2012 22:30:04 +0000 (15:30 -0700)]
Firmware dependencies
Anas Nashif [Thu, 11 Oct 2012 22:28:50 +0000 (15:28 -0700)]
Do the symbolic links right in the first place
Since brp-symlink relinks symbolic links to enforce a certain policy we
should do it right in the first place. So this patch changes find-debuginfo.sh
scripts behavior to reflect that policy.
Signed-off-by: Jan Blunck <jblunck@suse.de>
Anas Nashif [Thu, 11 Oct 2012 22:27:31 +0000 (15:27 -0700)]
debugedit canon fix
Anas Nashif [Thu, 11 Oct 2012 22:26:14 +0000 (15:26 -0700)]
remove references to removed brp scripts
Anas Nashif [Thu, 11 Oct 2012 22:24:15 +0000 (15:24 -0700)]
Split sources for debugging into separate -debugsource package
At the moment the -debuginfo package also include the sources where used
to build the binary. The patches moves them into a separate package -debugsource.
Anas Nashif [Thu, 11 Oct 2012 22:23:31 +0000 (15:23 -0700)]
short changelog
Anas Nashif [Thu, 11 Oct 2012 22:22:40 +0000 (15:22 -0700)]
Support a "first version wins" semantics.
Anas Nashif [Thu, 11 Oct 2012 22:19:09 +0000 (15:19 -0700)]
Provide rpmqpack
a fast way to list all installed packages are
check if some package is installed. This is a hack.
Anas Nashif [Thu, 11 Oct 2012 22:17:10 +0000 (15:17 -0700)]
strip off the tag
Anas Nashif [Thu, 11 Oct 2012 22:15:50 +0000 (15:15 -0700)]
adding find-supplements scripts
Anas Nashif [Thu, 11 Oct 2012 22:15:28 +0000 (15:15 -0700)]
rpmrc changes
Anas Nashif [Thu, 11 Oct 2012 22:11:03 +0000 (15:11 -0700)]
Add distribution
Anas Nashif [Thu, 11 Oct 2012 22:09:49 +0000 (15:09 -0700)]
platform changes