[git.ipfire.org] IPFire 3.x development tree branch, master, updated. a8a8fc6638fa4a2a4a6810821fcc3d6c843d2861
This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 3.x development tree".
The branch, master has been updated via a8a8fc6638fa4a2a4a6810821fcc3d6c843d2861 (commit) via 636e102cc400e16aae2a2db990cad7c5c57fd9a1 (commit) via 87829961505bf57d0dcaff7638e895c066144ec8 (commit) via 6b93b933546d24ab0f8b7ad3646df628789f2b1b (commit) via 31bc0a598805a8c3ec29535f52fcc92c4d221895 (commit) via 27a002f43ae4cdd20d54cfc50abc0151bdce746d (commit) via 85964a3c4b77aa08ab783e13ac14fed52179cee8 (commit) via ebb66ccf61c6b1fc6259bdc36afe60a631e159d6 (commit) via 3f76c300c0badcebfb9cd735a185461ed68606b5 (commit) via 39c24e2b7f896989723efe81c7ea42563aa36a80 (commit) via c27b32b6dc1201d435c39c10939dad79629df2af (commit) via c0ca282ac7cae4b874b70cdb095409a50d6a794c (commit) via 1ba42494349e382881a4aa03ceff2aa3044d5644 (commit) via 6704e6147eeb46311b14e922deb4ad070354adcf (commit) via fb4b78cd72f13a1dae4b78bfc68163273585f9d9 (commit) via b4df42b998ff6a4e2db22c4bd7552b6550615885 (commit) via 8bb9c712f43795119d912832666a25ba8ba78d73 (commit) via f2ea1686f659217d0e6330f158191de52a66a5c3 (commit) via 03a80d8e0861758cbc20d9e517d8aaef81d7eac6 (commit) via fd82b10b794cc93213c41602ccafda58172dbb34 (commit) via 219c8795d3b44996f45ebfb0af26634c4e5cc1d8 (commit) via 43d20aa03ec4132c7b1387ed75a4404d5b53c29d (commit) via 5b701f740e34558995744019135dd85a7fcab476 (commit) via b07c8a3a156af9c9cbeb2faa6ea83cfe7dc3e67b (commit) via 6259d545737f7bf71f030cb585f08de53b6fb6a8 (commit) via 26038bccc895d929819ed2419cbc7dc750d5f1ad (commit) via 064c414364ebbe58ba76d12f55f1764277b04e39 (commit) via bae1ac3c3d868deece6a3140baee3de55a0eb21e (commit) via 043812ee2fc5d6b8d9598aafec9def9aa44f8049 (commit) via 8a161868d7dab959dde48b1b6ec0c3cc08636ba5 (commit) via b3a7567879d5ef40548cbb74178786c3ec66889f (commit) via 2ed3fd1396f49d9fbaebfa9805ce5a1b0b85dbff (commit) via bbfccb7592622bfc3be98625494ef78dabe677aa (commit) via 028bb2d0a498d671239d1b6acaf8608cf8285415 (commit) via 399ad458ce891ebaf2ad386ddd4b0557173cc30e (commit) via 783346bcbbf28f8402cbc725be4114611928e2cb (commit) via 5b1e664f59de03230b175d04427a03e0476fbe95 (commit) via 0cea553154a1fe259579c9909694aa5af8d2646d (commit) via 512b34071cf0e1ef04a7c950c5b95af3880d9760 (commit) via 28127228921c3ad1729961a8e4eec1219209476a (commit) via 8c7451543bdd415b7812eff7445f43f5320ec93e (commit) via a581c88cbffb0a34fdf90c4855bfbc119276d737 (commit) via 88452aab8647da88cbc99421003f58fb59da4356 (commit) via ff56eb248a00073214c661111e0e4f62c6487474 (commit) via 3e98b4628285764c471ad8b27efdf12e9ab83d59 (commit) via 21987bed02991f46bbb50e105f525f0f73b31d00 (commit) via d5df5d8de232760173aaa83e067f94b20934a7d2 (commit) via 6de61f743416634c44ec395f138660c40ef80d95 (commit) via 1e431bbd6e69976965f36ef9463d91e41ae9e67d (commit) via c29b2a4d1705d1c03c5012d843f8048ec9f6601f (commit) via 78e327905aeb400c030f4b9b960630517c1e306d (commit) via fe5c2860c0ec96070172d0d12dc000afcb70a61d (commit) via cf038b7b5ef8968dda47384db96163fda7ac37de (commit) via 3b750b7cb29d8b02bc85200a6d0c5a98317cad8d (commit) via 6ef843bce621401c0d2367da753e7b464f5fbf1f (commit) via 2fec7288a775dec5a20b8ec2bb927a380cd49dc2 (commit) via 281c7352ce6fd8a070decfe6a310406ff4b77097 (commit) via fd400b7617f89689c29edd33dc0ae9c5ea7bf5f7 (commit) via ce79e5ec81d988764262afb53a61c9a696b64ed0 (commit) via 6049dfdecf39c00046d45d3c47c43cb94ff43f0d (commit) via ea3d83fd8bdb0adb8bc89d5b532748a84c624662 (commit) via 438f71de4b1fa7f012cb540524f4c07dab7e64f5 (commit) via 5b2a8058cf187c93e4374a04841e4ec329169314 (commit) via 2af13801f93e742041ebcfdf48042f5af82466e7 (commit) via 01d132b2557ddfc8d2098fec5091ceeb3bdace5f (commit) via 4a394d6269b369e34f3eb617991031795686f3b2 (commit) via 76e876d2599eac895f9475f54824b348b264636a (commit) via daf193ba4c9eb11454e33a618ee6e427599f887d (commit) via bab10c261dc238c10f12445c20e9079dac74b26e (commit) via 410af549636529928133ece25a7ae6b209059027 (commit) via a1993fb58e2c13317d64259875a19079c676891c (commit) via a7c62c012bc7eecf4a66e0662b0ad9186199acb2 (commit) via c64008121bb22325c37973b9e53b2ca8bc997562 (commit) via c903105ea033c0a10b4acc54bcbb3c0e2f00f117 (commit) via 24613fea5239a637a5ec7f3d33ae221f51e44031 (commit) via 4bf81562d7735a0fc66311182da44731f8a911cf (commit) via 50292f2c7858f96f67d906c1cefc59f28ac043e6 (commit) via 68a22b2996b3f1a46da0e01be458cdda0ae0ce20 (commit) via 85965730acc503789058df27b61d2fc9f8e42112 (commit) via 6e7857b2412e59cfc3becdf3d34ee83e6737b056 (commit) via 39c6a57b958d81ead59117593f806645b0a76d79 (commit) via 2f36f464cae8770929e90b3e8f27b976f4544f79 (commit) via 26b098c6dd2920d993931ee8458d79e92f8d7773 (commit) via 5e6ef4c802cdcbd61b857de495cb579f8a227c62 (commit) from bf86a0e10d65377dea53319d98f75e06b368a093 (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit a8a8fc6638fa4a2a4a6810821fcc3d6c843d2861 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 18:47:48 2023 +0100
filesystem: Make filesystem structure FHS compliant
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 636e102cc400e16aae2a2db990cad7c5c57fd9a1 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Tue Mar 21 11:20:16 2023 +0100
kernel: Proper build the helper binaries with our C and LDFLAGS
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 87829961505bf57d0dcaff7638e895c066144ec8 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 12:41:11 2023 +0100
liboping: Re-enable setting capabilities
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 6b93b933546d24ab0f8b7ad3646df628789f2b1b Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 12:40:19 2023 +0100
iputils: Re-enable setting capabilities
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 31bc0a598805a8c3ec29535f52fcc92c4d221895 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 12:39:16 2023 +0100
util-linux: Re-enable setting capabilities
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 27a002f43ae4cdd20d54cfc50abc0151bdce746d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 12:35:52 2023 +0100
nfs-utils: mount.nfs - Use capabilities instead of suid bit
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 85964a3c4b77aa08ab783e13ac14fed52179cee8 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 12:04:14 2023 +0100
shadow-utils: Use capabilites and remove more unused binaries
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit ebb66ccf61c6b1fc6259bdc36afe60a631e159d6 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 12:01:37 2023 +0100
unbound: Use /run instead of /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 3f76c300c0badcebfb9cd735a185461ed68606b5 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 11:43:42 2023 +0100
screen: Make screen FHS compliant
* Explicit use pam. * Change socket dir to /run and add tmpfiles file. * Only ship a simple screen binary without version fragments * Remove SUID bit from binary
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 39c24e2b7f896989723efe81c7ea42563aa36a80 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 11:31:49 2023 +0100
sudo: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit c27b32b6dc1201d435c39c10939dad79629df2af Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 16:02:04 2023 +0100
network: Add patch to fix logdir
Add upstream patch to proper set the location to the logdir.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit c0ca282ac7cae4b874b70cdb095409a50d6a794c Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 15:49:00 2023 +0100
openssh: Change privsep directory to /var/lib/sshd
The old one /var/empty/sshd violated our FHS
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 1ba42494349e382881a4aa03ceff2aa3044d5644 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 15:48:19 2023 +0100
samba: Drop /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 6704e6147eeb46311b14e922deb4ad070354adcf Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 15:19:41 2023 +0100
unbound: Do not create /var/run
This violates our FHS specs.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit fb4b78cd72f13a1dae4b78bfc68163273585f9d9 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 15:13:54 2023 +0100
tcl: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit b4df42b998ff6a4e2db22c4bd7552b6550615885 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 15:01:44 2023 +0100
sssd: Use /var/lib/sss and drop /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 8bb9c712f43795119d912832666a25ba8ba78d73 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 14:39:26 2023 +0100
squid: Drop /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit f2ea1686f659217d0e6330f158191de52a66a5c3 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 12:07:16 2023 +0100
snort: Set correct permissions of helper script
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 03a80d8e0861758cbc20d9e517d8aaef81d7eac6 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:43:19 2023 +0100
spectre-meltdown-checker: Install binary with correct permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit fd82b10b794cc93213c41602ccafda58172dbb34 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:36:03 2023 +0100
python3-pygobject3: Fix header file permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 219c8795d3b44996f45ebfb0af26634c4e5cc1d8 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:26:55 2023 +0100
python3-cairo: Fix header permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 43d20aa03ec4132c7b1387ed75a4404d5b53c29d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:25:03 2023 +0100
ppp: Fix binary permissions and drop deprecated dirs in /var
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 5b701f740e34558995744019135dd85a7fcab476 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:16:49 2023 +0100
plymouth: Drop /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit b07c8a3a156af9c9cbeb2faa6ea83cfe7dc3e67b Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:09:57 2023 +0100
perl-WWW-Curl: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 6259d545737f7bf71f030cb585f08de53b6fb6a8 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:09:24 2023 +0100
perl-WWW-Curl: Enable testsuite
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 26038bccc895d929819ed2419cbc7dc750d5f1ad Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:07:39 2023 +0100
perl-XML-Parser: Fix library permissions
* Also enable the testsuite * Drop old fragment from QA
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 064c414364ebbe58ba76d12f55f1764277b04e39 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 11:06:31 2023 +0100
perl-XML-Parser: Set correct perl dependencies
Do not longer use perl-core/perl-devel as build dependencies.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit bae1ac3c3d868deece6a3140baee3de55a0eb21e Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:53:45 2023 +0100
perl-TermReadkey: Enable testsuite
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 043812ee2fc5d6b8d9598aafec9def9aa44f8049 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:53:08 2023 +0100
perl-TermReadkey: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 8a161868d7dab959dde48b1b6ec0c3cc08636ba5 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:47:48 2023 +0100
perl-SGMLSpm: Drop unneccessary perl script
We do not need this and it violates our FHS specs.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit b3a7567879d5ef40548cbb74178786c3ec66889f Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:37:25 2023 +0100
perl-Parse-Yapp: Fix library and binary permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 2ed3fd1396f49d9fbaebfa9805ce5a1b0b85dbff Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:32:49 2023 +0100
perl-Net-SSLeay: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit bbfccb7592622bfc3be98625494ef78dabe677aa Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:31:06 2023 +0100
perl-libintl-perl: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 028bb2d0a498d671239d1b6acaf8608cf8285415 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:29:11 2023 +0100
perl-IO-AIO: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 399ad458ce891ebaf2ad386ddd4b0557173cc30e Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:26:38 2023 +0100
perl-HTML-Tagset: Add proper perl build dependencies
Do not longer depend on perl-core or perl-devel.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 783346bcbbf28f8402cbc725be4114611928e2cb Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:24:07 2023 +0100
perl-HTML-Parser: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 5b1e664f59de03230b175d04427a03e0476fbe95 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:22:25 2023 +0100
perl-GSSAPI: Fix library permissions
* Also enable the testsuite
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 0cea553154a1fe259579c9909694aa5af8d2646d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:20:34 2023 +0100
perl-FCGI: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 512b34071cf0e1ef04a7c950c5b95af3880d9760 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:17:20 2023 +0100
perl-DBI: Fix library and binary permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 28127228921c3ad1729961a8e4eec1219209476a Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:16:43 2023 +0100
perl-Digest-SHA1: Enable testsuite
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 8c7451543bdd415b7812eff7445f43f5320ec93e Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:16:07 2023 +0100
perl-Digest-SHA1: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit a581c88cbffb0a34fdf90c4855bfbc119276d737 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:06:18 2023 +0100
perl-Crypt-OpenSSL-X509: Enable testsuite
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 88452aab8647da88cbc99421003f58fb59da4356 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 10:01:19 2023 +0100
perl-Crypt-OpenSSL-X509: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit ff56eb248a00073214c661111e0e4f62c6487474 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 09:59:31 2023 +0100
perl-Coro: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 3e98b4628285764c471ad8b27efdf12e9ab83d59 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sun Mar 19 09:57:44 2023 +0100
perl-BDB: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 21987bed02991f46bbb50e105f525f0f73b31d00 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 23:00:19 2023 +0100
libvirt: Fix binary permissions and drop /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit d5df5d8de232760173aaa83e067f94b20934a7d2 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 22:58:22 2023 +0100
pciutils: Install header files with correct permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 6de61f743416634c44ec395f138660c40ef80d95 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 22:15:52 2023 +0100
bash: Set correct permissions for /root and binaries
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 1e431bbd6e69976965f36ef9463d91e41ae9e67d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 21:45:09 2023 +0100
openssh: Fix permissions for sshd-keygen
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit c29b2a4d1705d1c03c5012d843f8048ec9f6601f Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 21:35:23 2023 +0100
openldap: Do not ship /run/openldap anymore
This violetes our FHS specs
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 78e327905aeb400c030f4b9b960630517c1e306d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 21:34:06 2023 +0100
nettle: Fix library permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit fe5c2860c0ec96070172d0d12dc000afcb70a61d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 21:30:41 2023 +0100
net-snmp: Do not create /var/run anymore
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit cf038b7b5ef8968dda47384db96163fda7ac37de Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 21:24:11 2023 +0100
netpbm: Drop unneeded pkgconfig_template file
Anyway it was located at an invalid place.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 3b750b7cb29d8b02bc85200a6d0c5a98317cad8d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 21:21:21 2023 +0100
mdadm: Use systemd tmpfile
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 6ef843bce621401c0d2367da753e7b464f5fbf1f Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 21:15:26 2023 +0100
lvm2: Do not ship /run and it's content
This violetes our FHS specs
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 2fec7288a775dec5a20b8ec2bb927a380cd49dc2 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 21:07:19 2023 +0100
lm-sensors: Proper use compiler and linker flags during build time
Those flags are required during build time and not during installation.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 281c7352ce6fd8a070decfe6a310406ff4b77097 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 20:49:10 2023 +0100
lldpd: Do not create /run/lldpd
This violates our FHS specs.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit fd400b7617f89689c29edd33dc0ae9c5ea7bf5f7 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 20:47:24 2023 +0100
kea: Drop /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit ce79e5ec81d988764262afb53a61c9a696b64ed0 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 20:32:35 2023 +0100
krb5: Change /var/kerberos to /var/lib/kerberos
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 6049dfdecf39c00046d45d3c47c43cb94ff43f0d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 20:29:58 2023 +0100
libdb: Fix binary and header file permissions
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit ea3d83fd8bdb0adb8bc89d5b532748a84c624662 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 19:52:37 2023 +0100
iptraf-ng: Proper use our compiler and linker flags
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 438f71de4b1fa7f012cb540524f4c07dab7e64f5 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 19:47:36 2023 +0100
iptraf-ng: Do not longer create /var/lock
This folder violetes our FHS specs.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 5b2a8058cf187c93e4374a04841e4ec329169314 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 19:44:06 2023 +0100
intel-microcode: Set correct permissions for dirs and files
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 2af13801f93e742041ebcfdf48042f5af82466e7 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 17:17:25 2023 +0100
gettext: The config.rpath script needs to be executeable
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 01d132b2557ddfc8d2098fec5091ceeb3bdace5f Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 17:12:51 2023 +0100
dma: Update to 0.13
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 4a394d6269b369e34f3eb617991031795686f3b2 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 16:58:42 2023 +0100
chrpath: Install documentation to the correct place
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 76e876d2599eac895f9475f54824b348b264636a Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 16:48:23 2023 +0100
dhcpcd: Fix permissions of dhcpcd binary
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit daf193ba4c9eb11454e33a618ee6e427599f887d Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 16:35:35 2023 +0100
cyrus-sasl: Use /run instead of /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit bab10c261dc238c10f12445c20e9079dac74b26e Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 16:33:13 2023 +0100
cups: Fix file permissions in /usr/include and drop /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 410af549636529928133ece25a7ae6b209059027 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 16:05:26 2023 +0100
sudo: Use systemd tmpfiles mechanism
Use the tmpfiles mechanism from systemd to proper recreate the /run/sudo directory.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit a1993fb58e2c13317d64259875a19079c676891c Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 15:37:20 2023 +0100
bird: Drop /var/run
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit a7c62c012bc7eecf4a66e0662b0ad9186199acb2 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 15:05:20 2023 +0100
git: Hook examples should not be executeable
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit c64008121bb22325c37973b9e53b2ca8bc997562 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 14:19:01 2023 +0100
gettext: Drop unneccessary stuff
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit c903105ea033c0a10b4acc54bcbb3c0e2f00f117 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 10:02:50 2023 +0100
sgml-common: Drop HTML documentation
We do not need this on our systems - anyway it has been installed in a wrong directory.
Also replaced all hardcoded path values.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 24613fea5239a637a5ec7f3d33ae221f51e44031 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 09:52:40 2023 +0100
docbook-xsl: Fix file and directory permissions
The violated our FHS standards.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 4bf81562d7735a0fc66311182da44731f8a911cf Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 09:50:57 2023 +0100
docbook-utils: Drop HTML documentation
We do not need this on our systems - Anyway it has been installed to a wrong place by default.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 50292f2c7858f96f67d906c1cefc59f28ac043e6 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Sat Mar 18 09:49:50 2023 +0100
docbook-dtds: Install files not executeable
This is not required and vilates our FSH standards.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 68a22b2996b3f1a46da0e01be458cdda0ae0ce20 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Fri Mar 17 19:41:42 2023 +0100
qemu: Drop unused firmware files and /var/run
* Drop firmware files for platforms we do not support. * Drop /var/run directory which violetes the FSH.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 85965730acc503789058df27b61d2fc9f8e42112 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Fri Mar 17 18:30:32 2023 +0100
perl: Fix library permissions
They did not fit the FSH and our own specs.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 6e7857b2412e59cfc3becdf3d34ee83e6737b056 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Fri Mar 17 16:08:23 2023 +0100
util-linux: Do no create /run/uuidd
The folder will be created by systemd and violates the FSH.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 39c6a57b958d81ead59117593f806645b0a76d79 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Fri Mar 17 15:56:08 2023 +0100
systemd: Do not create /run/log/journal
This will be done by the corresponding tmpfiles configuration and violetes the FHS.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 2f36f464cae8770929e90b3e8f27b976f4544f79 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Fri Mar 17 15:48:36 2023 +0100
setup: Do not create /run/motd.d folder
This folder will be created from systemd by the corresponding tmpfiles script and fails our FHS checks.
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org
commit 26b098c6dd2920d993931ee8458d79e92f8d7773 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 20:06:43 2023 +0100
dwz: New package
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 5e6ef4c802cdcbd61b857de495cb579f8a227c62 Author: Stefan Schantl stefan.schantl@ipfire.org Date: Mon Mar 20 20:06:24 2023 +0100
xxhash: New package
Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
-----------------------------------------------------------------------
Summary of changes: bash/bash.nm | 7 ++- bird/bird.nm | 7 ++- chrpath/chrpath.nm | 16 +++++- cups/cups.nm | 14 ++++- cyrus-sasl/cyrus-sasl.nm | 6 +- dhcpcd/dhcpcd.nm | 5 +- dma/dma.nm | 9 ++- docbook-dtds/docbook-dtds.nm | 10 ++-- docbook-utils/docbook-utils.nm | 9 ++- docbook-xsl/docbook-xsl.nm | 8 ++- dwz/dwz.nm | 66 ++++++++++++++++++++++ filesystem/filesystem.nm | 26 +++------ gettext/gettext.nm | 12 +++- git/git.nm | 6 +- intel-microcode/intel-microcode.nm | 6 +- iptraf-ng/iptraf-ng.nm | 11 +++- iputils/iputils.nm | 8 +-- kea/kea.nm | 5 +- kernel/kernel.nm | 9 ++- krb5/kdc.conf | 4 +- krb5/krb5.nm | 10 ++-- krb5/systemd/kadmin.service | 2 +- krb5/systemd/kprop.service | 2 +- libdb/libdb.nm | 10 +++- liboping/liboping.nm | 7 ++- libvirt/libvirt.nm | 8 ++- lldpd/lldpd.nm | 8 +-- lm-sensors/lm-sensors.nm | 13 +++-- lvm2/lvm2.nm | 5 +- mdadm/mdadm.nm | 7 +-- mdadm/mdadm.tmpfiles | 1 + net-snmp/net-snmp.nm | 6 +- netpbm/netpbm.nm | 4 +- nettle/nettle.nm | 7 ++- network/network.nm | 2 +- network/patches/network-fix-logdir-path.patch | 23 ++++++++ nfs-utils/nfs-utils.nm | 7 ++- openldap/openldap.nm | 4 +- openssh/openssh.nm | 10 ++-- pciutils/pciutils.nm | 10 ++-- perl-BDB/perl-BDB.nm | 9 ++- perl-Coro/perl-Coro.nm | 8 ++- perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm | 16 +++++- perl-DBI/perl-DBI.nm | 12 +++- perl-Digest-SHA1/perl-Digest-SHA1.nm | 14 ++++- perl-FCGI/perl-FCGI.nm | 10 +++- perl-GSSAPI/perl-GSSAPI.nm | 14 ++++- perl-HTML-Parser/perl-HTML-Parser.nm | 9 ++- perl-HTML-Tagset/perl-HTML-Tagset.nm | 6 +- perl-IO-AIO/perl-IO-AIO.nm | 6 +- perl-Net-SSLeay/perl-Net-SSLeay.nm | 10 +++- perl-Parse-Yapp/perl-Parse-Yapp.nm | 12 +++- perl-SGMLSpm/perl-SGMLSpm.nm | 8 ++- perl-TermReadKey/perl-TermReadKey.nm | 13 ++++- perl-WWW-Curl/perl-WWW-Curl.nm | 33 +++++++++-- perl-XML-Parser/perl-XML-Parser.nm | 21 ++++--- perl-libintl-perl/perl-libintl-perl.nm | 9 ++- perl/perl.nm | 5 +- plymouth/plymouth.nm | 5 +- ppp/ppp.nm | 7 ++- python3-cairo/python3-cairo.nm | 6 +- python3-gobject3/python3-gobject3.nm | 6 +- qemu/qemu.nm | 15 ++++- samba/samba.nm | 10 +--- screen/screen.nm | 17 ++++-- screen/screen.tmpfiles | 1 + setup/setup.nm | 3 +- sgml-common/sgml-common.nm | 47 +++++++-------- shadow-utils/shadow-utils.nm | 10 ++-- snort/snort.nm | 7 ++- .../spectre-meltdown-checker.nm | 4 +- squid/squid.nm | 5 +- sssd/sssd.nm | 13 +++-- sudo/sudo.nm | 13 ++++- systemd/systemd.nm | 6 +- tcl/tcl.nm | 10 +++- unbound/unbound.nm | 8 +-- unbound/unbound.tmpfiles | 2 +- util-linux/util-linux.nm | 10 ++-- xxhash/xxhash.nm | 60 ++++++++++++++++++++ 80 files changed, 644 insertions(+), 226 deletions(-) create mode 100644 dwz/dwz.nm create mode 100644 mdadm/mdadm.tmpfiles create mode 100644 network/patches/network-fix-logdir-path.patch create mode 100644 screen/screen.tmpfiles create mode 100644 xxhash/xxhash.nm
Difference in files: diff --git a/bash/bash.nm b/bash/bash.nm index cbe78a422..845eca8da 100644 --- a/bash/bash.nm +++ b/bash/bash.nm @@ -5,7 +5,7 @@
name = bash version = 5.2.9 -release = 1 +release = 2
groups = System/Tools url = http://www.gnu.org/software/bash/ @@ -67,7 +67,7 @@ build
install_cmds mkdir -pv %{BUILDROOT}%{sysconfdir}/{profile.d,skel} - mkdir -pv %{BUILDROOT}/root + install -v -m 700 -d %{BUILDROOT}/root
# Bash startup files cp -vf %{DIR_SOURCE}/dot_bash_logout %{BUILDROOT}%{sysconfdir}/skel/.bash_logout @@ -92,6 +92,9 @@ build ) > "%{BUILDROOT}/%{bindir}/${f}" chmod +x "%{BUILDROOT}%{bindir}/${f}" done + + # Set correct permissions for binaries. + find %{BUILDROOT}%{bindir} -type f -executable -exec chmod 755 {} ; end end
diff --git a/bird/bird.nm b/bird/bird.nm index cee24efd5..350cd0eae 100644 --- a/bird/bird.nm +++ b/bird/bird.nm @@ -5,7 +5,7 @@
name = bird version = 2.0.10 -release = 1 +release = 2
groups = Networking/Routing url = https://bird.network.cz/ @@ -26,6 +26,11 @@ build ncurses-devel readline-devel end + + install_cmds + # Drop /var/run + rm -rvf %{BUILDROOT}%{localstatedir}/run + end end
packages diff --git a/chrpath/chrpath.nm b/chrpath/chrpath.nm index 5739082b4..6f24793cb 100644 --- a/chrpath/chrpath.nm +++ b/chrpath/chrpath.nm @@ -5,7 +5,7 @@
name = chrpath version = 0.16 -release = 1 +release = 2
groups = Development/Tools url = https://directory.fsf.org/wiki/Chrpath/ @@ -22,6 +22,20 @@ end source_dl = https://deb.debian.org/debian/pool/main/c/chrpath/ sources = %{name}_%{version}.orig.tar.gz
+build + configure_options += \ + --docdir=%{docdir} + + install_cmds + # Chrpath ignores the docdir swith during configure. + # Move the documentation to the correct place. + mv -vf %{BUILDROOT}/usr/doc/%{name}-* %{BUILDROOT}%{docdir} + + # Remove empty directory + rm -rvf %{BUILDROOT}/usr/doc + end +end + packages package %{name}
diff --git a/cups/cups.nm b/cups/cups.nm index d038d41c8..113819ee2 100644 --- a/cups/cups.nm +++ b/cups/cups.nm @@ -5,7 +5,7 @@
name = cups version = 2.3.6 -release = 2 +release = 3
groups = Applications/Printing url = https://cups.org/software.php @@ -56,12 +56,20 @@ build --enable-webif \ --with-xinetd=no
- install - make install BUILDROOT=%{BUILDROOT} + make_install_targets += \ + BUILDROOT=%{BUILDROOT}
+ install_cmds # Install default config file. mkdir -pv %{BUILDROOT}/etc/cups cp -vf %{DIR_APP}/conf/cupsd.conf %{BUILDROOT}/etc/cups/ + + # Fix file permissions in /usr/include + find %{BUILDROOT}%{includedir} -type f -iname "*.h" \ + -exec chmod 644 {} ; + + # Drop /var/run + rm -rvf %{BUILDROOT}%{localstatedir}/run end end
diff --git a/cyrus-sasl/cyrus-sasl.nm b/cyrus-sasl/cyrus-sasl.nm index 1ede85d0a..9288350dc 100644 --- a/cyrus-sasl/cyrus-sasl.nm +++ b/cyrus-sasl/cyrus-sasl.nm @@ -5,7 +5,7 @@
name = cyrus-sasl version = 2.1.28 -release = 3 +release = 4
groups = System/Libraries url = https://github.com/cyrusimap/cyrus-sasl @@ -33,7 +33,7 @@ build --with-configdir=%{libdir}/sasl2:/etc/sasl2 \ --with-plugindir=%{libdir}/sasl2 \ --with-dbpath=/var/lib/sasl/sasldb2 \ - --with-saslauthd=/var/run/saslauthd + --with-saslauthd=/run/saslauthd
make_install_targets += sasldir=%{libdir}/sasl2
@@ -44,7 +44,7 @@ build mkdir -pv %{BUILDROOT}%{libdir}/sasl2 cp -vf %{DIR_SOURCE}/smtpd.conf %{BUILDROOT}%{libdir}/sasl2/
- install -v -m700 -d %{BUILDROOT}/var/lib/sasl %{BUILDROOT}/var/run/saslauthd + install -v -m700 -d %{BUILDROOT}/var/lib/sasl end end
diff --git a/dhcpcd/dhcpcd.nm b/dhcpcd/dhcpcd.nm index 99c244498..48c692144 100644 --- a/dhcpcd/dhcpcd.nm +++ b/dhcpcd/dhcpcd.nm @@ -5,7 +5,7 @@
name = dhcpcd version = 9.4.1 -release = 1 +release = 2
groups = Network/Base url = https://roy.marples.name/projects/dhcpcd/ @@ -35,6 +35,9 @@ build install_cmds # Assign db directory to the correct user and group. chown dhcpcd:dhcpcd %{BUILDROOT}%{sharedstatedir}/dhcpcd + + # Fix permission of /sbin/dhcpcd + chmod 755 %{BUILDROOT}%{sbindir}/dhcpcd end end
diff --git a/dma/dma.nm b/dma/dma.nm index 259421ac6..8a4533459 100644 --- a/dma/dma.nm +++ b/dma/dma.nm @@ -4,7 +4,7 @@ ###############################################################################
name = dma -version = 0.10 +version = 0.13 release = 1
groups = Mail @@ -21,6 +21,8 @@ description SMTP authentication. end
+source_dl = https://github.com/corecode/dma/archive/v%%7Bversion%7D.tar.gz#/ + build requires bison @@ -34,10 +36,13 @@ build make_build_targets += LEX="flex -l"
make_install_targets += PREFIX=%{prefix} \ - sendmail-link mailq-link install-spool-dirs install-etc + sendmail-link mailq-link install-etc
install_cmds install -m 755 %{DIR_SOURCE}/dma-cleanup-spool %{BUILDROOT}%{sbindir} + + # Set corret ownwership. + chown root:root %{BUILDROOT}%{sbindir}/dma end end
diff --git a/docbook-dtds/docbook-dtds.nm b/docbook-dtds/docbook-dtds.nm index eaf363c21..1ed875384 100644 --- a/docbook-dtds/docbook-dtds.nm +++ b/docbook-dtds/docbook-dtds.nm @@ -5,7 +5,7 @@
name = docbook-dtds version = 1.0 -release = 6 +release = 7 arch = noarch
groups = Applications/Text @@ -106,11 +106,11 @@ build DESTDIR=%{BUILDROOT}/usr/share/sgml/docbook/$fmt-dtd-$ver mkdir -pv $DESTDIR case $fmt in - sgml) mkdir -pv $DESTDIR; install -v *.dcl $DESTDIR ;; - xml) mkdir -pv $DESTDIR/ent; install -v ent/* $DESTDIR/ent ;; + sgml) mkdir -pv $DESTDIR; install -v -m 644 *.dcl $DESTDIR ;; + xml) mkdir -pv $DESTDIR/ent; install -v -m 644 ent/* $DESTDIR/ent ;; esac - install -v *.dtd *.mod $DESTDIR - install -v docbook.cat $DESTDIR/catalog + install -v -m 644 *.dtd *.mod $DESTDIR + install -v -m 644 docbook.cat $DESTDIR/catalog touch %{BUILDROOT}/etc/sgml/${dir#*-}-docbook-$ver.cat done end diff --git a/docbook-utils/docbook-utils.nm b/docbook-utils/docbook-utils.nm index 9790d5ac1..b97c93ba8 100644 --- a/docbook-utils/docbook-utils.nm +++ b/docbook-utils/docbook-utils.nm @@ -5,7 +5,7 @@
name = docbook-utils version = 0.6.14 -release = 2 +release = 3
groups = Applications/Text url = http://sources.redhat.com/docbook-tools/ @@ -39,7 +39,12 @@ build
configure_options += \ --libdir=%{libdir} \ - --mandir=/usr/share/man + --mandir=%{mandir} + + install_cmds + # Drop unneeded and wrongly installed HTML documentation. + rm -rvf %{BUILDROOT}%{prefix}/doc + end end
packages diff --git a/docbook-xsl/docbook-xsl.nm b/docbook-xsl/docbook-xsl.nm index c1c5caf3c..0ae968c93 100644 --- a/docbook-xsl/docbook-xsl.nm +++ b/docbook-xsl/docbook-xsl.nm @@ -5,7 +5,7 @@
name = docbook-xsl version = 1.79.2 -release = 2 +release = 3 arch = noarch
groups = Applications/Text @@ -48,6 +48,12 @@ build
# Remove unneeded tool for .epub formats. rm -rvf %{BUILDROOT}/%{datadir}/sgml/docbook/xsl-stylesheets-%{version}/epub + + # Fix directory permissions. + find %{BUILDROOT}%{datadir} -type d -exec chmod 755 {} ; + + # Fix file permissions. + find %{BUILDROOT}%{datadir} -type f -exec chmod 644 {} ; end end
diff --git a/dwz/dwz.nm b/dwz/dwz.nm new file mode 100644 index 000000000..8b63a64fc --- /dev/null +++ b/dwz/dwz.nm @@ -0,0 +1,66 @@ +############################################################################### +# IPFire.org - An Open Source Firewall Solution # +# Copyright (C) - IPFire Development Team info@ipfire.org # +############################################################################### + +name = dwz +version = 0.15 +release = 1 + +groups = Development/Tools +url = https://sourceware.org/dwz/ +license = GPLv2+ and GPLv3+ +summary = DWARF optimization and duplicate removal tool + +description + The dwz package contains a program that attempts to optimize DWARF + debugging information contained in ELF shared libraries and ELF executables + for size, by replacing DWARF information representation with equivalent + smaller representation where possible and by reducing the amount of + duplication using techniques from DWARF standard appendix E - creating + DW_TAG_partial_unit compilation units (CUs) for duplicated information + and using DW_TAG_imported_unit to import it into each CU that needs it. +end + +source_dl = https://sourceware.org/ftp/dwz/releases/ +sources = %{thisapp}.tar.xz + +build + requires + elfutils-devel + xxhash-devel + + # Testsuite + dejagnu + gdb + end + + DIR_APP = %{DIR_SRC}/%{name} + + make_build_targets += \ + CFLAGS="%{CFLAGS}" \ + LDFLAGS="%{LDFLAGS}" \ + srcdir=%{DIR_APP} \ + prefix=%{prefix} \ + bindir=%{bindir} \ + mandir=%{mandir} + + test + # Compile the testsuite without any compiler or linker flags. + CFLAGS= LDFLAGS= srcdir=%{DIR_APP} make check + end + + make_install_targets += \ + srcdir=%{DIR_APP} \ + prefix=%{prefix} \ + bindir=%{bindir} \ + mandir=%{mandir} +end + +packages + package %{name} + + package %{name}-debuginfo + template DEBUGINFO + end +end diff --git a/filesystem/filesystem.nm b/filesystem/filesystem.nm index f94eedbac..f270b8616 100644 --- a/filesystem/filesystem.nm +++ b/filesystem/filesystem.nm @@ -5,7 +5,7 @@
name = filesystem version = 002 -release = 4 +release = 5
maintainer = Michael Tremer michael.tremer@ipfire.org groups = Base Build System/Base @@ -44,10 +44,8 @@ build opt \ proc \ root \ - run/lock \ srv \ sys \ - tmp \ usr/bin \ usr/include \ usr/lib \ @@ -60,11 +58,9 @@ build usr/src \ var/empty \ var/lib \ - var/local \ var/log \ - var/nis \ - var/preserve \ - var/spool/{mail,lpd} \ + var/mail \ + var/spool \ var/tmp \ var/db \ var/cache @@ -74,20 +70,12 @@ build ln -snf usr/lib lib [ "%{lib}" = "lib" ] || ln -snf usr/%{lib} %{lib}
- ln -snf ../var/tmp usr/tmp - ln -snf spool/mail var/mail - ln -snf ../run var/run - ln -snf ../run/lock var/lock - # Setting correct permissions. - chmod 1777 %{BUILDROOT}/{,var/}tmp - chown root:mail %{BUILDROOT}/var/spool/mail - chmod 775 %{BUILDROOT}/var/spool/mail + chmod -v 755 %{BUILDROOT}/var/tmp + chown -v root:mail %{BUILDROOT}/var/mail + chmod -v 755 %{BUILDROOT}/var/mail + chmod -v 700 %{BUILDROOT}/root end - - # XXX not implemented at the moment - export QUALITY_AGENT_NO_DIRECTORY_CHECK = yes - export QUALITY_AGENT_NO_DIRECTORY_PRUNE = yes end
packages diff --git a/gettext/gettext.nm b/gettext/gettext.nm index 1e2af67f7..000db01b2 100644 --- a/gettext/gettext.nm +++ b/gettext/gettext.nm @@ -5,7 +5,7 @@
name = gettext version = 0.21.1 -release = 3 +release = 5
groups = System/Base url = https://www.gnu.org/software/gettext/ @@ -65,6 +65,16 @@ build
# Fix library permissions. chmod 755 %{BUILDROOT}%{libdir}/preloadable_libintl.so + + # Remove examples. + rm -rvf %{BUILDROOT}%{docdir}/%{name}/examples + + # Gettext provides only a HTML documentation, so we + # safely can drop the remaining doc directory. + rm -rvf %{BUILDROOT}%{docdir} + + # Drop trigger and team-address files for GNOME, KDE and TP projects + rm -rvf %{BUILDROOT}%{datadir}/%{name}/projects end end
diff --git a/git/git.nm b/git/git.nm index b3b5f789b..adb785081 100644 --- a/git/git.nm +++ b/git/git.nm @@ -5,7 +5,7 @@
name = git version = 2.38.1 -release = 3 +release = 4
groups = Development/Tools url = http://git-scm.com/ @@ -96,6 +96,10 @@ build rm -rvf %{BUILDROOT}/usr/lib/git-core/*p4* rm -rvf %{BUILDROOT}/usr/lib/git-core/mergetools/p4* rm -rvf %{BUILDROOT}%{mandir}/man1/*p4* + + # Fix file permissions of the hook examples. + find %{BUILDROOT}%{datadir}/git-core/ -type f -iname "*.sample" \ + -exec chmod 644 {} ; end end
diff --git a/intel-microcode/intel-microcode.nm b/intel-microcode/intel-microcode.nm index ca1881a2c..b29557baf 100644 --- a/intel-microcode/intel-microcode.nm +++ b/intel-microcode/intel-microcode.nm @@ -5,7 +5,7 @@
name = intel-microcode version = 20221108 -release = 1 +release = 2 arch = noarch thisapp = microcode-%{version}
@@ -32,6 +32,10 @@ build install mkdir -pv %{BUILDROOT}%{prefix}/lib/firmware cp -prv intel-ucode %{BUILDROOT}%{prefix}/lib/firmware + + # Set correct permissions for directories and firmware files. + find %{BUILDROOT}%{prefix}/lib/firmware -type d -exec chmod 755 {} ; + find %{BUILDROOT}%{prefix}/lib/firmware -type f -exec chmod 644 {} ; end end
diff --git a/iptraf-ng/iptraf-ng.nm b/iptraf-ng/iptraf-ng.nm index f7b4eb5c3..4e7fea29e 100644 --- a/iptraf-ng/iptraf-ng.nm +++ b/iptraf-ng/iptraf-ng.nm @@ -5,7 +5,7 @@
name = iptraf-ng version = 1.2.1 -release = 1 +release = 3
groups = Networking/Tools url = https://github.com/iptraf-ng/iptraf-ng @@ -38,10 +38,15 @@ build ncurses-devel end
- make_install_targets += prefix=%{prefix} + make_build_targets += \ + CFLAGS="%{CFLAGS}" \ + LDFLAGS="%{LDFLAGS}" + + make_install_targets += \ + prefix=%{prefix}
install_cmds - mkdir -pv %{BUILDROOT}%{localstatedir}/{lock,log,lib}/iptraf-ng + mkdir -pv %{BUILDROOT}%{localstatedir}/{log,lib}/iptraf-ng end end
diff --git a/iputils/iputils.nm b/iputils/iputils.nm index 5bcab41e9..d94645446 100644 --- a/iputils/iputils.nm +++ b/iputils/iputils.nm @@ -5,7 +5,7 @@
name = iputils version = 20221126 -release = 1 +release = 2
groups = Networking/Tools url = https://www.skbuff.net/iputils @@ -49,9 +49,9 @@ build ln -svf tracepath %{BUILDROOT}%{bindir}/tracepath6 ln -svf tracepath.8 %{BUILDROOT}%{mandir}/man8/tracepath6.8
- # This currently does not work in pakfire - #setcap cap_net_admin=ep %{BUILDROOT}%{bindir}/ping - #setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/arping + # Set capabilities + setcap cap_net_admin=ep %{BUILDROOT}%{bindir}/ping + setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/arping end end
diff --git a/kea/kea.nm b/kea/kea.nm index c4e23a23f..a0dab0262 100644 --- a/kea/kea.nm +++ b/kea/kea.nm @@ -5,7 +5,7 @@
name = kea version = 2.3.5 -release = 1 +release = 2
groups = System/Daemons url = http://kea.isc.org @@ -49,6 +49,9 @@ build mkdir -pv %{BUILDROOT}%{sharedstatedir}/kea/ touch %{BUILDROOT}%{sharedstatedir}/kea/kea-leases4.csv touch %{BUILDROOT}%{sharedstatedir}/kea/kea-leases6.csv + + # Drop /var/run + rm -rvf %{BUILDROOT}%{localstatedir}/run end end
diff --git a/kernel/kernel.nm b/kernel/kernel.nm index 9b340f8b3..cf6b1c620 100644 --- a/kernel/kernel.nm +++ b/kernel/kernel.nm @@ -5,7 +5,7 @@
name = kernel version = 6.2 -release = 2 +release = 3 thisapp = linux-%{version}
maintainer = Arne Fitzenreiter arne.fitzenreiter@ipfire.org @@ -131,9 +131,12 @@ build cat .config
# Run the build. - make ARCH=%{kernel_arch} olddefconfig >/dev/null + make ARCH=%{kernel_arch} HOSTCFLAGS="%{CFLAGS}" \ + HOSTLDFLAGS="%{LDFLAGS}" olddefconfig >/dev/null + make ARCH=%{kernel_arch} %{kernel_target} modules \ - KERNELRELEASE=${fullversion} %{PARALLELISMFLAGS} + KERNELRELEASE=${fullversion} HOSTCFLAGS="%{CFLAGS}" \ + HOSTLDFLAGS="%{LDFLAGS}" %{PARALLELISMFLAGS}
# Compile Flattened Device Tree database case "${DISTRO_ARCH}" in diff --git a/krb5/kdc.conf b/krb5/kdc.conf index a4f590150..ef9974454 100644 --- a/krb5/kdc.conf +++ b/krb5/kdc.conf @@ -5,8 +5,8 @@ [realms] EXAMPLE.COM = { #master_key_type = aes256-cts - acl_file = /var/kerberos/krb5kdc/kadm5.acl + acl_file = /var/lib/kerberos/krb5kdc/kadm5.acl dict_file = /usr/share/dict/words - admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab + admin_keytab = /var/lib/kerberos/krb5kdc/kadm5.keytab supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal } diff --git a/krb5/krb5.nm b/krb5/krb5.nm index 9113a4a55..075019d3c 100644 --- a/krb5/krb5.nm +++ b/krb5/krb5.nm @@ -7,7 +7,7 @@ name = krb5 version = %{ver_maj}.%{ver_min} ver_maj = 1.20 ver_min = 1 -release = 3 +release = 4
groups = System/Libraries url = https://web.mit.edu/kerberos/www/ @@ -47,7 +47,7 @@ build configure_options += \ --enable-shared \ --disable-rpath \ - --localstatedir=/var/kerberos \ + --localstatedir=%{sharedstatedir}/kerberos \ --with-system-et \ --with-system-ss \ --with-netlib=-lresolv \ @@ -70,9 +70,9 @@ build
install_cmds # Sample KDC config files (bundled kdc.conf and kadm5.acl). - mkdir -pv %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc - install -pm 600 %{DIR_SOURCE}/kdc.conf %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc/ - install -pm 600 %{DIR_SOURCE}/kadm5.acl %{BUILDROOT}%{localstatedir}/kerberos/krb5kdc/ + mkdir -pv %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc + install -pm 600 %{DIR_SOURCE}/kdc.conf %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc/ + install -pm 600 %{DIR_SOURCE}/kadm5.acl %{BUILDROOT}%{sharedstatedir}/kerberos/krb5kdc/
# Default configuration file for everything. mkdir -pv %{BUILDROOT}/etc diff --git a/krb5/systemd/kadmin.service b/krb5/systemd/kadmin.service index 7775ea74c..4d8bbbf57 100644 --- a/krb5/systemd/kadmin.service +++ b/krb5/systemd/kadmin.service @@ -1,7 +1,7 @@ [Unit] Description=Kerberos 5 Password-changing and Administration After=syslog.target network.target -ConditionPathExists=!/var/kerberos/krb5kdc/kpropd.acl +ConditionPathExists=!/var/lib/kerberos/krb5kdc/kpropd.acl
[Service] Type=forking diff --git a/krb5/systemd/kprop.service b/krb5/systemd/kprop.service index 99ba12976..3f5816535 100644 --- a/krb5/systemd/kprop.service +++ b/krb5/systemd/kprop.service @@ -1,7 +1,7 @@ [Unit] Description=Kerberos 5 Propagation After=syslog.target network.target -ConditionPathExists=/var/kerberos/krb5kdc/kpropd.acl +ConditionPathExists=/var/lib/kerberos/krb5kdc/kpropd.acl
[Service] Type=forking diff --git a/libdb/libdb.nm b/libdb/libdb.nm index ed20767cd..08d60a401 100644 --- a/libdb/libdb.nm +++ b/libdb/libdb.nm @@ -8,7 +8,7 @@ version_major = 6 version_minor = 1 version_patch = 26 version = %{version_major}.%{version_minor}.%{version_patch} -release = 3 +release = 4 thisapp = db-%{version}
soversion = %{version_major}.%{version_minor} @@ -85,6 +85,14 @@ build for i in db.h db_cxx.h db_185.h; do ln -svf %{name}/${i} %{BUILDROOT}/%{includedir} done + + # Fix binary permissions. + find %{BUILDROOT}%{bindir} -type f -executable \ + -exec chmod 755 {} ; + + # Fix header permissions. + find %{BUILDROOT}%{includedir} -type f -iname "*.h" \ + -exec chmod 644 {} ; end end
diff --git a/liboping/liboping.nm b/liboping/liboping.nm index 8f2296e7f..480ccf014 100644 --- a/liboping/liboping.nm +++ b/liboping/liboping.nm @@ -5,7 +5,7 @@
name = liboping version = 1.10.0 -release = 4 +release = 5
groups = Development/Tools url = https://noping.cc/ @@ -32,8 +32,9 @@ build --without-perl-bindings
install_cmds - #setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/oping - #setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/noping + # Set capabilities + setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/oping + setcap cap_net_raw=ep %{BUILDROOT}%{bindir}/noping end end
diff --git a/libvirt/libvirt.nm b/libvirt/libvirt.nm index 0014ab38f..9c0b0a91b 100644 --- a/libvirt/libvirt.nm +++ b/libvirt/libvirt.nm @@ -5,7 +5,7 @@
name = libvirt version = 8.10.0 -release = 4 +release = 5
maintainer = Jonatan Schlag jonatan.schlag@ipfire.org groups = Applications/Virtualization @@ -134,6 +134,12 @@ build
install %{meson_install} + + # Fix binary permissions. + find %{BUILDROOT}%{bindir} -type f -executable -exec chmod 755 {} ; + + # Drop /var/run + rm -rvf %{BUILDROOT}%{localstatedir}/run end end
diff --git a/lldpd/lldpd.nm b/lldpd/lldpd.nm index 54f00168d..0736fe310 100644 --- a/lldpd/lldpd.nm +++ b/lldpd/lldpd.nm @@ -5,7 +5,7 @@
name = lldpd version = 1.0.16 -release = 1.1 +release = 2
groups = Networking/Tools url = https://lldpd.github.io @@ -47,12 +47,6 @@ build prepare_cmds %{create_user} end - - install_cmds - # Create tmp directory. - mkdir -pv -m 700 %{BUILDROOT}/run/lldpd - chown -v lldpd.lldpd %{BUILDROOT}/run/lldpd - end end
create_user diff --git a/lm-sensors/lm-sensors.nm b/lm-sensors/lm-sensors.nm index b49b296e0..464ed1a5c 100644 --- a/lm-sensors/lm-sensors.nm +++ b/lm-sensors/lm-sensors.nm @@ -5,7 +5,7 @@
name = lm-sensors version = 3.6.0 -release = 1 +release = 2 thisapp = %{name}-3-6-0
groups = Applications/Statistics @@ -27,14 +27,19 @@ build rrdtool-devel end
+ make_build_targets += \ + CFLAGS="%{CFLAGS}" \ + LDFLAGS="%{LDFLAGS}" \ + EXLDFLAGS="%{LDFLAGS}" \ + BUILD_STATIC_LIB=0 \ + PROG_EXTRA=sensord + make_install_targets += \ PREFIX=%{prefix} \ LIBDIR=%{libdir} \ MANDIR=%{mandir} \ - PROG_EXTRA=sensord \ BUILD_STATIC_LIB=0 \ - CFLAGS="%{CFLAGS}" \ - EXLDFLAGS="%{LDFLAGS}" + PROG_EXTRA=sensord end
packages diff --git a/lvm2/lvm2.nm b/lvm2/lvm2.nm index abcdd1bd9..4acd10799 100644 --- a/lvm2/lvm2.nm +++ b/lvm2/lvm2.nm @@ -5,7 +5,7 @@
name = lvm2 version = 2.03.16 -release = 1 +release = 2 thisapp = LVM2.%{version}
groups = System/Base @@ -72,6 +72,9 @@ build make install_systemd_units DESTDIR=%{BUILDROOT} make install_systemd_generators DESTDIR=%{BUILDROOT} make install_tmpfiles_configuration DESTDIR=%{BUILDROOT} + + # Remove /run and it's content. + rm -rvf %{BUILDROOT}/run end end
diff --git a/mdadm/mdadm.nm b/mdadm/mdadm.nm index d4a25fdee..d40dfe51a 100644 --- a/mdadm/mdadm.nm +++ b/mdadm/mdadm.nm @@ -5,7 +5,7 @@
name = mdadm version = 4.2 -release = 1 +release = 2
groups = System/Base url = http://www.kernel.org/pub/linux/utils/raid/mdadm/ @@ -48,11 +48,6 @@ build BINDIR=%{sbindir} \ UDEVDIR=%{prefix}/%{lib}/udev \ SYSTEMD_DIR="%{unitdir}" - - install_cmds - mkdir -pv %{BUILDROOT}/var/run/mdadm - chmod 700 %{BUILDROOT}/var/run/mdadm - end end
packages diff --git a/mdadm/mdadm.tmpfiles b/mdadm/mdadm.tmpfiles new file mode 100644 index 000000000..e163ef8f9 --- /dev/null +++ b/mdadm/mdadm.tmpfiles @@ -0,0 +1 @@ +d /run/mdadm 0700 root root - diff --git a/net-snmp/net-snmp.nm b/net-snmp/net-snmp.nm index 1bcc538ac..26e905313 100644 --- a/net-snmp/net-snmp.nm +++ b/net-snmp/net-snmp.nm @@ -5,7 +5,7 @@
name = net-snmp version = 5.9.3 -release = 2 +release = 3
groups = Networking/Daemons url = http://net-snmp.sourceforge.net @@ -93,8 +93,8 @@ build install -v -m644 %{DIR_SOURCE}/snmptrapd.conf \ %{BUILDROOT}%{sysconfdir}/snmp/snmptrapd.conf
- # Prepare runtime directories. - mkdir -pv %{BUILDROOT}%{localstatedir}/{lib,run}/net-snmp + # Prepare runtime directory + mkdir -pv %{BUILDROOT}%{sharedstatedir}/net-snmp
# Remove scripts in /bin which requires the SNMP # perl bindings. diff --git a/netpbm/netpbm.nm b/netpbm/netpbm.nm index cbafb517c..bca23a696 100644 --- a/netpbm/netpbm.nm +++ b/netpbm/netpbm.nm @@ -5,7 +5,7 @@
name = netpbm version = 10.73.42 -release = 2 +release = 3
groups = System/Libraries url = https://netpbm.sourceforge.net/ @@ -86,7 +86,7 @@ build fi ln -svf libnetpbm.so.11 %{BUILDROOT}%{libdir}/libnetpbm.so
- rm -rvf %{BUILDROOT}%{prefix}/{README,VERSION,link,misc,man,pkginfo,config_template} + rm -rvf %{BUILDROOT}%{prefix}/{README,VERSION,link,misc,man,pkginfo,config_template,pkgconfig_template} rm -rvf %{BUILDROOT}%{bindir}/doc.url end end diff --git a/nettle/nettle.nm b/nettle/nettle.nm index 253119d03..b6a0657b8 100644 --- a/nettle/nettle.nm +++ b/nettle/nettle.nm @@ -5,7 +5,7 @@
name = nettle version = 3.8.1 -release = 1 +release = 2
groups = System/Libraries url = http://www.lysator.liu.se/~nisse/nettle/ @@ -34,6 +34,11 @@ build test make check end + + install_cmds + # Fix library permissions. + find %{BUILDROOT}%{libdir} -type f -exec chmod 755 {} ; + end end
packages diff --git a/network/network.nm b/network/network.nm index 4879f71f9..85a9d15b3 100644 --- a/network/network.nm +++ b/network/network.nm @@ -5,7 +5,7 @@
name = network version = 010 -release = 4.2 +release = 5
maintainer = Michael Tremer michael.tremer@ipfire.org groups = Base Networking/Tools diff --git a/network/patches/network-fix-logdir-path.patch b/network/patches/network-fix-logdir-path.patch new file mode 100644 index 000000000..f708c030a --- /dev/null +++ b/network/patches/network-fix-logdir-path.patch @@ -0,0 +1,23 @@ +commit 88e5f32944b8dc1c4b1c74028c7d46c37b2aad34 +Author: Stefan Schantl stefan.schantl@ipfire.org +Date: Sun Mar 19 15:58:11 2023 +0100 + + Makefile.am: Fix typo defining the logdir + + The correct value name should be "localstatedir" + + Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org + +diff --git a/Makefile.am b/Makefile.am +index 893f1b8..5dc4629 100644 +--- a/Makefile.am ++++ b/Makefile.am +@@ -51,7 +51,7 @@ hooks_zonesdir = $(hooksdir)/zones + + triggersdir = $(networkdir)/triggers + +-logdir = $(localestatedir)/log/network ++logdir = $(localstatedir)/log/network + utildir = $(networkdir) + + CLEANFILES = diff --git a/nfs-utils/nfs-utils.nm b/nfs-utils/nfs-utils.nm index 771c47636..9cc6740bb 100644 --- a/nfs-utils/nfs-utils.nm +++ b/nfs-utils/nfs-utils.nm @@ -5,7 +5,7 @@
name = nfs-utils version = 2.6.2 -release = 4 +release = 5
groups = Networking/Tools url = http://nfs.sourceforge.net/ @@ -51,6 +51,7 @@ build --enable-mountconfig \ --enable-ipv6 \ --enable-gss \ + --enable-caps \ --with-statedir=/var/lib/nfs \ --with-statdpath=/var/lib/nfs/statd \ --with-start-statd=/usr/bin/start-statd \ @@ -82,6 +83,10 @@ build
mkdir -pv %{BUILDROOT}/var/lib/nfs/statd/sm{,.bak} chown rpcuser:rpcuser -Rv %{BUILDROOT}/var/lib/nfs/statd + + # Set capabilities + chmod -v 0755 %{BUILDROOT}%{bindir}/mount.nfs + setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/mount.nfs end end
diff --git a/openldap/openldap.nm b/openldap/openldap.nm index afda58701..2fef95225 100644 --- a/openldap/openldap.nm +++ b/openldap/openldap.nm @@ -5,7 +5,7 @@
name = openldap version = 2.6.4 -release = 2 +release = 3
groups = System/Daemons url = https://www.openldap.org/ @@ -92,12 +92,10 @@ build # Create directoires. mkdir -pv %{BUILDROOT}%{sysconfdir}/%{name}/slapd.d mkdir -pv %{BUILDROOT}%{sysconfdir}/%{name}/certs - mkdir -pv %{BUILDROOT}/run/%{name} mkdir -pv %{BUILDROOT}%{sharedstatedir}/ldap
# Fix permissions and ownerships. chown -Rv ldap:ldap %{BUILDROOT}%{sysconfdir}/%{name} - chown ldap:ldap %{BUILDROOT}/run/%{name} chown ldap:ldap %{BUILDROOT}%{sharedstatedir}/ldap chmod 700 -Rv %{BUILDROOT}%{sharedstatedir}/ldap end diff --git a/openssh/openssh.nm b/openssh/openssh.nm index 9ae7bf738..2d90ee6ba 100644 --- a/openssh/openssh.nm +++ b/openssh/openssh.nm @@ -5,7 +5,7 @@
name = openssh version = 9.1p1 -release = 2 +release = 4
groups = Application/Internet url = https://www.openssh.com/portable.html @@ -41,7 +41,7 @@ build --libexecdir=%{libdir}/openssh \ --with-default-path=/usr/local/bin:/bin:/usr/bin \ --with-superuser-path=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin \ - --with-privsep-path=/var/empty/sshd \ + --with-privsep-path=%{sharedstatedir}/sshd \ --enable-vendor-patchlevel="%{DISTRO_NAME} %{thisver}" \ --disable-strip \ --with-ssl-engine \ @@ -68,7 +68,7 @@ build
# Install scriptfile for key generation mkdir -pv %{BUILDROOT}%{sbindir} - install -m 754 %{DIR_SOURCE}/sshd-keygen %{BUILDROOT}%{sbindir} + install -m 755 %{DIR_SOURCE}/sshd-keygen %{BUILDROOT}%{sbindir}
# Install ssh-copy-id. install -m755 contrib/ssh-copy-id %{BUILDROOT}%{bindir} @@ -147,7 +147,7 @@ packages %{mandir}/man5/moduli.5* %{mandir}/man8/sshd.8* %{mandir}/man8/sftp-server.8* - /var/empty/sshd + %{sharedstatedir}/sshd end
configfiles @@ -164,7 +164,7 @@ packages getent group sshd >/dev/null || groupadd -r sshd getent passwd sshd >/dev/null || useradd -r -g sshd \ -c "Privilege-separated SSH" \ - -d /var/empty/sshd -s /sbin/nologin sshd + -d /var/lib/sshd -s /sbin/nologin sshd end
script postin diff --git a/pciutils/pciutils.nm b/pciutils/pciutils.nm index 976bcc48c..8a819fbc8 100644 --- a/pciutils/pciutils.nm +++ b/pciutils/pciutils.nm @@ -5,7 +5,7 @@
name = pciutils version = 3.9.0 -release = 1 +release = 2
groups = System/Base url = https://mj.ucw.cz/sw/pciutils/ @@ -46,10 +46,10 @@ build
# Install headers. mkdir -pv %{BUILDROOT}%{includedir}/pci - install -p lib/pci.h %{BUILDROOT}%{includedir}/pci - install -p lib/header.h %{BUILDROOT}%{includedir}/pci - install -p lib/config.h %{BUILDROOT}%{includedir}/pci - install -p lib/types.h %{BUILDROOT}%{includedir}/pci + install -p -m 644 lib/pci.h %{BUILDROOT}%{includedir}/pci + install -p -m 644 lib/header.h %{BUILDROOT}%{includedir}/pci + install -p -m 644 lib/config.h %{BUILDROOT}%{includedir}/pci + install -p -m 644 lib/types.h %{BUILDROOT}%{includedir}/pci
# Install pkg-config files. mkdir -pv %{BUILDROOT}%{libdir}/pkgconfig diff --git a/perl-BDB/perl-BDB.nm b/perl-BDB/perl-BDB.nm index 326ee37cb..3ad22acf0 100644 --- a/perl-BDB/perl-BDB.nm +++ b/perl-BDB/perl-BDB.nm @@ -5,7 +5,7 @@
name = perl-BDB version = 1.91 -release = 1.1 +release = 2 thisapp = BDB-%{version}
groups = Development/Libraries @@ -25,7 +25,6 @@ build perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) libdb-devel - pakfire >= 0.9.26-3.1 end
build @@ -39,6 +38,12 @@ build
make_install_targets = \ pure_install DESTDIR=%{BUILDROOT} + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-Coro/perl-Coro.nm b/perl-Coro/perl-Coro.nm index 7a87e13d1..c5b8e22ef 100644 --- a/perl-Coro/perl-Coro.nm +++ b/perl-Coro/perl-Coro.nm @@ -5,7 +5,7 @@
name = perl-Coro version = 6.57 -release = 1 +release = 2 thisapp = Coro-%{version}
groups = Development/Libraries @@ -45,6 +45,12 @@ build
make_install_targets = \ pure_install DESTDIR=%{BUILDROOT} + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm b/perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm index 9ab4b1fbe..1a09bce7c 100644 --- a/perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm +++ b/perl-Crypt-OpenSSL-X509/perl-Crypt-OpenSSL-X509.nm @@ -5,7 +5,7 @@
name = perl-Crypt-OpenSSL-X509 version = 1.914 -release = 1 +release = 3 thisapp = Crypt-OpenSSL-X509-%{version}
groups = Development/Libraries @@ -21,9 +21,11 @@ source_dl = https://cpan.metacpan.org/authors/id/J/JO/JONASBN/
build requires + openssl-devel perl(Crypt::OpenSSL::Guess) + perl(Convert::ASN1) perl(ExtUtils::MakeMaker) - openssl-devel + perl(Test::More) end
build @@ -33,6 +35,16 @@ build
make_install_targets = \ pure_install + + test + make test + end + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-DBI/perl-DBI.nm b/perl-DBI/perl-DBI.nm index 3d1d668d4..e7c581687 100644 --- a/perl-DBI/perl-DBI.nm +++ b/perl-DBI/perl-DBI.nm @@ -5,7 +5,7 @@
name = perl-DBI version = 1.643 -release = 1.1 +release = 2 thisapp = DBI-%{version}
groups = Development/Libraries @@ -67,6 +67,16 @@ build
make_install_targets = \ pure_install DESTDIR=%{BUILDROOT} + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + + # Set correct binary permissions. + find %{BUILDROOT}%{bindir} -type f -executable \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-Digest-SHA1/perl-Digest-SHA1.nm b/perl-Digest-SHA1/perl-Digest-SHA1.nm index ac3aaa4ea..b9b607e2d 100644 --- a/perl-Digest-SHA1/perl-Digest-SHA1.nm +++ b/perl-Digest-SHA1/perl-Digest-SHA1.nm @@ -5,7 +5,7 @@
name = perl-Digest-SHA1 version = 2.13 -release = 4.1 +release = 6 thisapp = Digest-SHA1-%{version}
groups = Development/Libraries @@ -33,7 +33,7 @@ build requires perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) - pakfire >= 0.9.26-3.1 + perl(Test::More) end
build @@ -41,8 +41,18 @@ build make %{PARALLELISMFLAGS} end
+ test + make test + end + make_install_targets = \ pure_install + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-FCGI/perl-FCGI.nm b/perl-FCGI/perl-FCGI.nm index c2f3a3b8e..73ac9047e 100644 --- a/perl-FCGI/perl-FCGI.nm +++ b/perl-FCGI/perl-FCGI.nm @@ -5,7 +5,7 @@
name = perl-FCGI version = 0.77 -release = 1.1 +release = 2 thisapp = FCGI-%{version}
groups = Development/Libraries @@ -23,7 +23,7 @@ build requires perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) - pakfire >= 0.9.26-3.1 + perl(Test::More) end
build @@ -37,6 +37,12 @@ build
make_install_targets = \ pure_install DESTDIR=%{BUILDROOT} + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-GSSAPI/perl-GSSAPI.nm b/perl-GSSAPI/perl-GSSAPI.nm index ca2e5dec7..18ed8f2c0 100644 --- a/perl-GSSAPI/perl-GSSAPI.nm +++ b/perl-GSSAPI/perl-GSSAPI.nm @@ -5,7 +5,7 @@
name = perl-GSSAPI version = 0.28 -release = 1 +release = 2 thisapp = GSSAPI-%{version}
groups = Development/Libraries @@ -25,7 +25,7 @@ build requires krb5-devel perl(ExtUtils::MakeMaker) - perl(Test::More) >= 0.47 + perl(Test::More) end
build @@ -33,6 +33,16 @@ build INSTALLDIRS=vendor OPTIMIZE="%{CFLAGS}" make %{PARALLELISMFLAGS} end + + test + make test + end + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-HTML-Parser/perl-HTML-Parser.nm b/perl-HTML-Parser/perl-HTML-Parser.nm index 02d8b3c9a..f5cb7b857 100644 --- a/perl-HTML-Parser/perl-HTML-Parser.nm +++ b/perl-HTML-Parser/perl-HTML-Parser.nm @@ -5,7 +5,7 @@
name = perl-HTML-Parser version = 3.71 -release = 1.1 +release = 2
groups = Development/Libratries url = http://search.cpan.org/dist/HTML-Parser/ @@ -28,7 +28,6 @@ build perl-devel perl(HTML::Tagset) perl(Test::More) - pakfire >= 0.9.26-3.1 end
build @@ -39,6 +38,12 @@ build test make test end + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-HTML-Tagset/perl-HTML-Tagset.nm b/perl-HTML-Tagset/perl-HTML-Tagset.nm index 9a1d342c0..cb6f21ac6 100644 --- a/perl-HTML-Tagset/perl-HTML-Tagset.nm +++ b/perl-HTML-Tagset/perl-HTML-Tagset.nm @@ -5,7 +5,7 @@
name = perl-HTML-Tagset version = 3.20 -release = 1 +release = 2 arch = noarch thisapp = HTML-Tagset-%{version}
@@ -23,8 +23,8 @@ source_dl = http://search.cpan.org/CPAN/authors/id/P/PE/PETDANCE/
build requires - perl-core - perl-devel + perl(ExtUtils::MakeMaker) + perl(Test::More) end
build diff --git a/perl-IO-AIO/perl-IO-AIO.nm b/perl-IO-AIO/perl-IO-AIO.nm index dd29ef244..0149ca8b1 100644 --- a/perl-IO-AIO/perl-IO-AIO.nm +++ b/perl-IO-AIO/perl-IO-AIO.nm @@ -5,7 +5,7 @@
name = perl-IO-AIO version = 4.32 -release = 1.2 +release = 2 thisapp = IO-AIO-%{version}
groups = Development/Libraries @@ -45,6 +45,10 @@ build install_cmds # Remove script we don't want packaged rm -rvf %{BUILDROOT}%{bindir}/treescan + + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; end end
diff --git a/perl-Net-SSLeay/perl-Net-SSLeay.nm b/perl-Net-SSLeay/perl-Net-SSLeay.nm index 3083b1eac..f4774caf3 100644 --- a/perl-Net-SSLeay/perl-Net-SSLeay.nm +++ b/perl-Net-SSLeay/perl-Net-SSLeay.nm @@ -5,7 +5,7 @@
name = perl-Net-SSLeay version = 1.85 -release = 1 +release = 2 thisapp = Net-SSLeay-%{version}
groups = Development/Libraries @@ -26,7 +26,7 @@ build perl(FindBin) perl(ExtUtils::MakeMaker) perl(Module::Install) - perl(Test::More) >= 0.47 + perl(Test::More) zlib-devel end
@@ -40,6 +40,12 @@ build #test # make test #end + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-Parse-Yapp/perl-Parse-Yapp.nm b/perl-Parse-Yapp/perl-Parse-Yapp.nm index 4ceb6441b..663b48b89 100644 --- a/perl-Parse-Yapp/perl-Parse-Yapp.nm +++ b/perl-Parse-Yapp/perl-Parse-Yapp.nm @@ -5,7 +5,7 @@
name = perl-Parse-Yapp version = 1.21 -release = 1 +release = 2 thisapp = Parse-Yapp-%{version}
groups = Development/Libratries @@ -35,6 +35,16 @@ build test make test end + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + + # Set correct binary permissions. + find %{BUILDROOT}%{bindir} -type f -executable \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-SGMLSpm/perl-SGMLSpm.nm b/perl-SGMLSpm/perl-SGMLSpm.nm index bc03dd3e8..a408ae7c5 100644 --- a/perl-SGMLSpm/perl-SGMLSpm.nm +++ b/perl-SGMLSpm/perl-SGMLSpm.nm @@ -5,7 +5,7 @@
name = perl-SGMLSpm version = 1.1 -release = 1 +release = 2 thisapp = SGMLSpm-%{version} arch = noarch
@@ -24,6 +24,7 @@ source_dl = https://cpan.metacpan.org/authors/id/R/RA/RAAB/ build requires perl(ExtUtils::MakeMaker) + perl(Test::More) end
build @@ -34,6 +35,11 @@ build test make test end + + install_cmds + # Drop unwanted script + rm -rvf %{BUILDROOT}%{bindir}/sgmlspl.pl + end end
packages diff --git a/perl-TermReadKey/perl-TermReadKey.nm b/perl-TermReadKey/perl-TermReadKey.nm index e3822cc2d..5c21cc897 100644 --- a/perl-TermReadKey/perl-TermReadKey.nm +++ b/perl-TermReadKey/perl-TermReadKey.nm @@ -5,7 +5,7 @@
name = perl-TermReadKey version = 2.38 -release = 1 +release = 3 thisapp = TermReadKey-%{version}
groups = Development/Libraries @@ -31,6 +31,7 @@ build perl(Carp) perl(Exporter) perl(ExtUtils::MakeMaker) + perl(Test::More) end
build @@ -38,8 +39,18 @@ build make %{PARALLELISMFLAGS} end
+ test + make test + end + make_install_targets = \ pure_install + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-WWW-Curl/perl-WWW-Curl.nm b/perl-WWW-Curl/perl-WWW-Curl.nm index 20619266a..c7b69426e 100644 --- a/perl-WWW-Curl/perl-WWW-Curl.nm +++ b/perl-WWW-Curl/perl-WWW-Curl.nm @@ -5,7 +5,7 @@
name = perl-WWW-Curl version = 4.17 -release = 1.2 +release = 3 thisapp = WWW-Curl-%{version}
groups = Development/Libraries @@ -21,12 +21,12 @@ source_dl = http://search.cpan.org/CPAN/authors/id/S/SZ/SZBALINT/
build requires + libcurl-devel perl(FindBin) perl(ExtUtils::MakeMaker) perl(ExtUtils::ParseXS) perl(Module::Install) - libcurl-devel - pakfire >= 0.9.26-3.1 + perl(Test::More) end
build @@ -34,7 +34,32 @@ build make %{PARALLELISMFLAGS} end
- make_install_targets = pure_install + test + # The following tests requires network connectivity + # Remove them + rm t/01basic.t + rm t/02callbacks.t + rm t/04abort-test.t + rm t/05progress.t + rm t/08ssl.t + rm t/09times.t + rm t/14duphandle.t + rm t/15duphandle-callback.t + rm t/18twinhandles.t + rm t/19multi.t + rm t/21write-to-scalar.t + + make test + end + + make_install_targets = \ + pure_install + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl-XML-Parser/perl-XML-Parser.nm b/perl-XML-Parser/perl-XML-Parser.nm index eae88d709..d1d2e540d 100644 --- a/perl-XML-Parser/perl-XML-Parser.nm +++ b/perl-XML-Parser/perl-XML-Parser.nm @@ -5,7 +5,7 @@
name = perl-XML-Parser version = 2.44 -release = 2 +release = 4 thisapp = XML-Parser-%{version}
groups = Development/Libraries @@ -24,20 +24,25 @@ source_dl = http://search.cpan.org/CPAN/authors/id/T/TO/TODDR/ build requires expat-devel - pakfire >= 0.9.26-3.1 - perl-core - perl-devel + perl(English) + perl(ExtUtils::MakeMaker) + perl(FileHandle) + perl(Test::More) end
build perl Makefile.PL INSTALLDIRS=vendor make %{PARALLELISMFLAGS} end -end
-quality-agent - whitelist_rpath - /lib + test + make test + end + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; end end
diff --git a/perl-libintl-perl/perl-libintl-perl.nm b/perl-libintl-perl/perl-libintl-perl.nm index f7cd25eec..588bb633f 100644 --- a/perl-libintl-perl/perl-libintl-perl.nm +++ b/perl-libintl-perl/perl-libintl-perl.nm @@ -5,7 +5,7 @@
name = perl-libintl-perl version = 1.33 -release = 1 +release = 2 thisapp = libintl-perl-%{version}
groups = Development/Libraries @@ -27,7 +27,6 @@ build perl(locale) perl(ExtUtils::MakeMaker) perl(Test::More) - pakfire >= 0.9.26-3.1 end
build @@ -41,6 +40,12 @@ build
make_install_targets = \ pure_install DESTDIR=%{BUILDROOT} + + install_cmds + # Set correct library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod 755 {} ; + end end
packages diff --git a/perl/perl.nm b/perl/perl.nm index 3a7bad525..a19be3dcc 100644 --- a/perl/perl.nm +++ b/perl/perl.nm @@ -10,7 +10,7 @@ ver_plevel = 0 version = %{ver_major}.%{ver_minor}.%{ver_plevel}
# Never reset release in this package, just increase. -release = 3 +release = 4
thisver = %{version}-%{_release}
@@ -143,6 +143,9 @@ build install_cmds # Remove precreated directories rm -rfv %{BUILDROOT}/usr/local + + # Fix filer permissions of the so files. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" -exec chmod 755 {} ; end end
diff --git a/plymouth/plymouth.nm b/plymouth/plymouth.nm index 429551896..57b878dab 100644 --- a/plymouth/plymouth.nm +++ b/plymouth/plymouth.nm @@ -5,7 +5,7 @@
name = plymouth version = 22.02.122 -release = 4 +release = 5
groups = System/Base url = https://www.freedesktop.org/wiki/Software/Plymouth @@ -58,6 +58,9 @@ build rm -vf %{BUILDROOT}%{datadir}/plymouth/themes/spinfinity/header-image.png cp -vf %{datadir}/pixmaps/system-logo-white.png \ %{BUILDROOT}%{datadir}/plymouth/themes/spinfinity/header-image.png + + # Drop /var/run directory + rm -rvf %{BUILDROOT}%{localstatedir}/run end end
diff --git a/ppp/ppp.nm b/ppp/ppp.nm index dc57a1b45..8013c4818 100644 --- a/ppp/ppp.nm +++ b/ppp/ppp.nm @@ -5,7 +5,7 @@
name = ppp version = 2.4.9 -release = 3.1 +release = 4
groups = System/Daemons url = https://ppp.samba.org/ @@ -58,8 +58,9 @@ build ln -svf secrets %{BUILDROOT}/etc/ppp/pap-secrets ln -svf secrets %{BUILDROOT}/etc/ppp/chap-secrets
- mkdir -pv %{BUILDROOT}%{localstatedir}/lock/ppp - mkdir -pv %{BUILDROOT}/run/ppp + # Fix binary permissions. + find %{BUILDROOT}%{sbindir} -type f -executable \ + -exec chmod 755 {} ; end end
diff --git a/python3-cairo/python3-cairo.nm b/python3-cairo/python3-cairo.nm index 88fa587ea..29a2187f2 100644 --- a/python3-cairo/python3-cairo.nm +++ b/python3-cairo/python3-cairo.nm @@ -5,7 +5,7 @@
name = python3-cairo version = 1.23.0 -release = 1 +release = 2 thisapp = pycairo-%{version}
groups = Development/Tools @@ -33,6 +33,10 @@ build
install %{python3} setup.py install --skip-build --root="%{BUILDROOT}" + + # Fix header permissions. + find %{BUILDROOT}%{includedir} -type f -iname "*.h" \ + -exec chmod -v 644 {} ; end end
diff --git a/python3-gobject3/python3-gobject3.nm b/python3-gobject3/python3-gobject3.nm index f98cd5769..50518fea5 100644 --- a/python3-gobject3/python3-gobject3.nm +++ b/python3-gobject3/python3-gobject3.nm @@ -7,7 +7,7 @@ name = python3-gobject3 version = %{ver_major}.%{ver_minor} ver_major = 3.42 ver_minor = 2 -release = 1 +release = 2 thisapp = pygobject-%{version}
groups = Development/Tools @@ -41,6 +41,10 @@ build
install %{python3} setup.py install --skip-build --root=%{BUILDROOT} + + # Set correct header file permissions. + find %{BUILDROOT}%{includedir} -type f -iname "*.h" \ + -exec chmod -v 644 {} ; end end
diff --git a/qemu/qemu.nm b/qemu/qemu.nm index 84a9f8d4d..f0ca0b84f 100644 --- a/qemu/qemu.nm +++ b/qemu/qemu.nm @@ -5,7 +5,7 @@
name = qemu version = 7.2.0 -release = 2 +release = 3
groups = Applications/Virtualization url = https://www.qemu.org @@ -92,6 +92,19 @@ build # Remove ivshm stuff rm -vf %{BUILDROOT}%{bindir}/ivshmem* %{BUILDROOT}%{mandir}/ivshmem*
+ # Remove deprecated run directory. + rm -rvf %{BUILDROOT}/var/run + + # Remove firmware files for non supported platforms. + rm -rvf %{BUILDROOT}%{datadir}/%{name}/hppa-firmware.img + rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-ppc + rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-sparc32 + rm -rvf %{BUILDROOT}%{datadir}/%{name}/openbios-sparc64 + rm -rvf %{BUILDROOT}%{datadir}/%{name}/palcode-clipper + rm -rvf %{BUILDROOT}%{datadir}/%{name}/s390-ccw.img + rm -rvf %{BUILDROOT}%{datadir}/%{name}/s390-netboot.img + rm -rvf %{BUILDROOT}%{datadir}/%{name}/u-boot.e500 + # Make firmware non-executable find %{BUILDROOT}%{datadir}/%{name} -type f -executable | xargs chmod -v a-x end diff --git a/samba/samba.nm b/samba/samba.nm index e407f4988..2500967d7 100644 --- a/samba/samba.nm +++ b/samba/samba.nm @@ -5,7 +5,7 @@
name = samba version = 4.17.5 -release = 1.1 +release = 2
groups = Networking/Daemons url = http://www.samba.org/ @@ -100,13 +100,9 @@ build mkdir -pv %{BUILDROOT}%{sysconfdir}/samba echo "127.0.0.1 localhost" > %{BUILDROOT}%{sysconfdir}/samba/lmhosts cp -vf %{DIR_SOURCE}/smb.conf %{BUILDROOT}/%{sysconfdir}/%{name} - end -end
-quality-agent - whitelist_rpath - %{libdir}/samba - %{libdir}/tdb + # Drop /var/run + rm -rvf %{BUILDROOT}%{localstatedir}/run end end
diff --git a/screen/screen.nm b/screen/screen.nm index eb8add2c0..4fe960b05 100644 --- a/screen/screen.nm +++ b/screen/screen.nm @@ -5,7 +5,7 @@
name = screen version = 4.9.0 -release = 1.1 +release = 2
groups = Application/System url = https://www.gnu.org/software/screen @@ -32,8 +32,9 @@ build end
configure_options += \ - --with-socket-dir=/var/run/screen \ - --with-sys-screenrc=/etc/screenrc + --enable-pam \ + --with-socket-dir=/run/screen \ + --with-sys-screenrc=%{sysconfdir}/screenrc
prepare_cmds ./autogen.sh @@ -41,8 +42,14 @@ build
install_cmds # Install screenrc - mkdir -pv %{BUILDROOT}/etc - cp -vf %{DIR_SOURCE}/screenrc %{BUILDROOT}/etc/screenrc + mkdir -pv %{BUILDROOT}%{sysconfdir} + cp -vf %{DIR_SOURCE}/screenrc %{BUILDROOT}%{sysconfdir}/screenrc + + # Rename versioned screen binary into simple screen + mv -vf %{BUILDROOT}%{bindir}/screen{-%{version},} + + # Remove suid bit from binary. + chmod -v -s %{BUILDROOT}%{bindir}/screen end end
diff --git a/screen/screen.tmpfiles b/screen/screen.tmpfiles new file mode 100644 index 000000000..9e4da5690 --- /dev/null +++ b/screen/screen.tmpfiles @@ -0,0 +1 @@ +d /run/screen 0775 root root diff --git a/setup/setup.nm b/setup/setup.nm index 3b41b2d3f..cee66fab4 100644 --- a/setup/setup.nm +++ b/setup/setup.nm @@ -5,7 +5,7 @@
name = setup version = 3.0 -release = 17 +release = 18 arch = noarch
groups = Base Build System/Base @@ -60,7 +60,6 @@ build
# Create MOTD (message of the day) folder layout. mkdir -p %{BUILDROOT}/etc/motd.d - mkdir -p %{BUILDROOT}/run/motd.d mkdir -p %{BUILDROOT}/usr/lib/motd.d touch %{BUILDROOT}/usr/lib/motd diff --git a/sgml-common/sgml-common.nm b/sgml-common/sgml-common.nm index e1e3f13f3..5a3a72483 100644 --- a/sgml-common/sgml-common.nm +++ b/sgml-common/sgml-common.nm @@ -5,7 +5,7 @@
name = sgml-common version = 0.6.3 -release = 2 +release = 3 arch = noarch
groups = Applications/Text @@ -31,60 +31,63 @@ build end
configure_options += \ - --mandir=/usr/share/man \ - --sysconfdir=/etc + --mandir=%{mandir} \ + --sysconfdir=%{sysconfdir}
prepare_cmds for i in COPYING INSTALL install-sh missing mkinstalldirs; do \ rm -f ${i}; \ - cp -pvf /usr/share/automake*/${i} .; \ + cp -pvf %{datadir}/automake*/${i} .; \ done end
install_cmds - mkdir -pv %{BUILDROOT}/etc/{sg,x}ml/docbook - mkdir -pv %{BUILDROOT}/usr/share/sgml/docbook + mkdir -pv %{BUILDROOT}%{sysconfdir}/{sg,x}ml/docbook + mkdir -pv %{BUILDROOT}%{datadir}/sgml/docbook
# Touch SGML catalog - touch %{BUILDROOT}/etc/sgml/catalog + touch %{BUILDROOT}%{sysconfdir}/sgml/catalog
# Create an empty XML catalog. - xmlcatalog --noout --create %{BUILDROOT}/etc/xml/catalog + xmlcatalog --noout --create %{BUILDROOT}%{sysconfdir}/xml/catalog
# Now put the common DocBook entries in it xmlcatalog --noout --add "delegatePublic" \ "-//OASIS//ENTITIES DocBook XML" \ - "file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog + "file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
xmlcatalog --noout --add "delegatePublic" \ "-//OASIS//DTD DocBook XML" \ - "file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog + "file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
xmlcatalog --noout --add "delegatePublic" \ "ISO 8879:1986" \ - "file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog + "file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
xmlcatalog --noout --add "delegateSystem" \ "http://www.oasis-open.org/docbook/" \ - "file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog + "file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
xmlcatalog --noout --add "delegateURI" \ "http://www.oasis-open.org/docbook/" \ - "file:///etc/sgml/docbook/xmlcatalog" %{BUILDROOT}/etc/xml/catalog + "file://%{sysconfdir}/sgml/docbook/xmlcatalog" %{BUILDROOT}%{sysconfdir}/xml/catalog
# Also create the common DocBook catalog xmlcatalog --noout --create \ - %{BUILDROOT}/etc/sgml/docbook/xmlcatalog + %{BUILDROOT}%{sysconfdir}/sgml/docbook/xmlcatalog
- ln -svf ../../../../etc/sgml/docbook/xmlcatalog \ - %{BUILDROOT}/usr/share/sgml/docbook/xmlcatalog + ln -svf ../../../..%{sysconfdir}/sgml/docbook/xmlcatalog \ + %{BUILDROOT}%{datadir}/sgml/docbook/xmlcatalog
- rm -f %{BUILDROOT}/usr/share/sgml/xml.dcl + rm -rvf %{BUILDROOT}%{datadir}/sgml/xml.dcl
install -p -m0644 %{DIR_SOURCE}/*.dcl %{DIR_SOURCE}/*.soc \ - %{BUILDROOT}/usr/share/sgml + %{BUILDROOT}%{datadir}/sgml
- rm -rf %{BUILDROOT}/usr/share/xml/* + rm -rvf %{BUILDROOT}%{datadir}/xml/* + + # Remove unused and wrongly installed HTML documentation. + rm -rvf %{BUILDROOT}%{prefix}/doc end end
@@ -104,9 +107,9 @@ packages end
files - /etc/xml - /etc/sgml/docbook/xmlcatalog - /usr/share/sgml/docbook/xmlcatalog + %{sysconfdir}/xml + %{sysconfdir}/sgml/docbook/xmlcatalog + %{datadir}/sgml/docbook/xmlcatalog end end end diff --git a/shadow-utils/shadow-utils.nm b/shadow-utils/shadow-utils.nm index 1b3be3674..fcc4fd5fd 100644 --- a/shadow-utils/shadow-utils.nm +++ b/shadow-utils/shadow-utils.nm @@ -5,7 +5,7 @@
name = shadow-utils version = 4.13 -release = 1 +release = 2 thisapp = shadow-%{version}
groups = System/Base @@ -51,14 +51,12 @@ build --with-yescrypt \ --without-audit \ --without-selinux \ - --without-su - - # This should be enabled, but our environment currently does not support this - configure_options += --without-fcaps + --without-su \ + --with-fcaps
install_cmds rm -vf \ - %{BUILDROOT}/{%{bindir},%{sbindir},%{mandir}/*}/{chfn,chsh,login,logoutd,newgrp,nologin,sg,vigr,vipw}* + %{BUILDROOT}/{%{bindir},%{sbindir},%{mandir}/*}/{chage,chfn,chsh,expiry,login,logoutd,newgrp,nologin,sg,vigr,vipw}* end end
diff --git a/snort/snort.nm b/snort/snort.nm index 3334d5b9b..53389edf9 100644 --- a/snort/snort.nm +++ b/snort/snort.nm @@ -5,7 +5,7 @@
name = snort version = 3.1.50.0 -release = 1 +release = 2 thisapp = snort3-%{version}
groups = Networking/Tools @@ -45,6 +45,11 @@ build
make %{PARALLELISMFLAGS} end + + install_cmds + # Set correct permissions for helper script. + chmod -v 755 %{BUILDROOT}%{bindir}/appid_detector_builder.sh + end end
packages diff --git a/spectre-meltdown-checker/spectre-meltdown-checker.nm b/spectre-meltdown-checker/spectre-meltdown-checker.nm index 11cfb1818..96f10326c 100644 --- a/spectre-meltdown-checker/spectre-meltdown-checker.nm +++ b/spectre-meltdown-checker/spectre-meltdown-checker.nm @@ -5,7 +5,7 @@
name = spectre-meltdown-checker version = 0.45 -release = 1 +release = 2
groups = Development/Tools url = https://github.com/speed47/spectre-meltdown-checker @@ -26,7 +26,7 @@ build
install mkdir -pv %{BUILDROOT}%{sbindir} - install -v -m 754 spectre-meltdown-checker.sh \ + install -v -m 755 spectre-meltdown-checker.sh \ %{BUILDROOT}%{sbindir}/spectre-meltdown-checker end end diff --git a/squid/squid.nm b/squid/squid.nm index eca35788f..053c05543 100644 --- a/squid/squid.nm +++ b/squid/squid.nm @@ -7,7 +7,7 @@ name = squid major_ver = 5 minor_ver = 7 version = %{major_ver}.%{minor_ver} -release = 1.2 +release = 2
groups = Networking/Daemons url = https://www.squid-cache.org/ @@ -106,6 +106,9 @@ build cp -vf %{DIR_SOURCE}/cache_swap.sh %{BUILDROOT}/usr/lib/squid/ chmod 755 %{BUILDROOT}/usr/lib/squid/cache_swap.sh chown -Rv squid:squid %{BUILDROOT}/usr/lib/squid/cache_swap.sh + + # Drop /var/run + rm -rvf %{BUILDROOT}%{localstatedir}/run end end
diff --git a/sssd/sssd.nm b/sssd/sssd.nm index 2a6c8aa19..90d804469 100644 --- a/sssd/sssd.nm +++ b/sssd/sssd.nm @@ -5,7 +5,7 @@
name = sssd version = 2.8.2 -release = 1.1 +release = 2
groups = System/Tools url = https://github.com/SSSD/sssd @@ -63,10 +63,10 @@ build
configure_options += \ --with-crypto=libcrypto \ - --with-db-path=%{localstatedir}/sss/db \ - --with-pipe-path=%{localstatedir}/sss/pipe \ - --with-pubconf-path=%{localstatedir}/sss/pubconf \ - --with-mcache-path=%{localstatedir}/sss/mc \ + --with-db-path=%{sharedstatedir}/sss/db \ + --with-pipe-path=%{sharedstatedir}/sss/pipe \ + --with-pubconf-path=%{sharedstatedir}/sss/pubconf \ + --with-mcache-path=%{sharedstatedir}/sss/mc \ --with-krb5-rcache-dir=%{localstatedir}/cache/krb5rcache \ --with-default-ccache-dir=/run/user/%U \ --with-default-ccname-template=DIR:%d/krb5cc \ @@ -92,6 +92,9 @@ build
# Remove old sysVinit stuff. rm -rvf %{BUILDROOT}%{sysconfdir}/rc.d + + # Drop /var/run + rm -rvf %{BUILDROOT}%{localstatedir}/run end end
diff --git a/sudo/sudo.nm b/sudo/sudo.nm index 1ccd04f3c..55e4d42e1 100644 --- a/sudo/sudo.nm +++ b/sudo/sudo.nm @@ -5,7 +5,7 @@
name = sudo version = 1.9.12p1 -release = 1 +release = 3
groups = Applications/System url = https://www.sudo.ws/ @@ -46,7 +46,8 @@ build --with-ignore-dot \ --with-tty-tickets \ --with-ldap \ - --with-passprompt="[sudo] password for %p: " + --with-passprompt="[sudo] password for %p: " \ + --enable-tmpfiles.d=%{tmpfilesdir}
prepare_cmds # The tarball contains files owned by a stange uid:gid which will let @@ -59,8 +60,16 @@ build end
install_cmds + # Create sudoers config file. mkdir -pv %{BUILDROOT}%{sysconfdir} cp -vf %{DIR_SOURCE}/sudoers %{BUILDROOT}%{sysconfdir}/sudoers + + # Do not ship /run. + rm -rvf %{BUILDROOT}/run + + # Fix library permissions. + find %{BUILDROOT}%{libdir}/%{name} -type f -iname "*.so" -exec chmod 755 {} ; + end end
diff --git a/systemd/systemd.nm b/systemd/systemd.nm index 9bcefa3a7..30d1e829f 100644 --- a/systemd/systemd.nm +++ b/systemd/systemd.nm @@ -5,7 +5,7 @@
name = systemd version = 252 -release = 2.1 +release = 3
maintainer = Stefan Schantl stefan.schantl@ipfire.org groups = System/Base @@ -193,10 +193,6 @@ build # Don't let udev set up any networking rm -vf %{BUILDROOT}/usr/lib/udev/rules.d/80-net-setup-link.rules
- # Create journald related folders. - mkdir -pv %{BUILDROOT}/run/log/journal - chown root:systemd-journal %{BUILDROOT}/run/log/journal - mkdir -pv %{BUILDROOT}/var/log/journal chown root:systemd-journal %{BUILDROOT}/var/log/journal
diff --git a/tcl/tcl.nm b/tcl/tcl.nm index 76bc6eea9..19e5024d2 100644 --- a/tcl/tcl.nm +++ b/tcl/tcl.nm @@ -6,7 +6,7 @@ name = tcl major_ver = 8.6 version = %{major_ver}.13 -release = 1.2 +release = 2 thisapp = tcl%{version}
groups = Development/Languages @@ -15,8 +15,8 @@ license = TCL summary = Tool Command Language, pronounced tickle.
description - The Tcl (Tool Command Language) provides a powerful platform for\ - creating integration applications that tie together diverse \ + The Tcl (Tool Command Language) provides a powerful platform for + creating integration applications that tie together diverse applications, protocols, devices, and frameworks. end
@@ -64,6 +64,10 @@ build
# Fix permissions. chmod 644 %{BUILDROOT}%{libdir}/libtclstub%{major_ver}.a + + # Fix private shared library permissions. + find %{BUILDROOT}%{libdir} -type f -iname "*.so" \ + -exec chmod -v 755 {} ; end end
diff --git a/unbound/unbound.nm b/unbound/unbound.nm index 2feaf3296..daba56558 100644 --- a/unbound/unbound.nm +++ b/unbound/unbound.nm @@ -5,7 +5,7 @@
name = unbound version = 1.17.0 -release = 1 +release = 3
groups = System/Daemons url = https://www.nlnetlabs.nl/unbound/ @@ -33,7 +33,7 @@ build
configure_options += \ --with-conf-file=%{sysconfdir}/%{name}/unbound.conf \ - --with-pidfile=%{localstatedir}/run/%{name}/%{name}.pid \ + --with-pidfile=/run/%{name}/%{name}.pid \ --with-rootkey-file=%{sharedstatedir}/unbound/root.key \ --without-libevent \ --with-pthreads \ @@ -53,10 +53,6 @@ build end
install_cmds - # Create directories. - mkdir -pv %{BUILDROOT}%{localstatedir}/run/%{name} - mkdir -pv %{BUILDROOT}%{sharedstatedir}/%{name} - # Directory for user specified and additional config files. mkdir -pv %{BUILDROOT}%{sysconfdir}/%{name}/conf.d/
diff --git a/unbound/unbound.tmpfiles b/unbound/unbound.tmpfiles index d6255896c..bb88f01e2 100644 --- a/unbound/unbound.tmpfiles +++ b/unbound/unbound.tmpfiles @@ -1 +1 @@ -D /var/run/unbound 0755 unbound unbound - +D /run/unbound 0755 unbound unbound - diff --git a/util-linux/util-linux.nm b/util-linux/util-linux.nm index 684e57b0a..fbb17f901 100644 --- a/util-linux/util-linux.nm +++ b/util-linux/util-linux.nm @@ -6,7 +6,7 @@ name = util-linux ver_maj = 2.38 version = %{ver_maj}.1 -release = 1 +release = 3
maintainer = Stefan Schantl stefan.schantl@ipfire.org groups = System/Base @@ -70,7 +70,6 @@ build %{BUILDROOT}/var/lib/libuuid \ %{BUILDROOT}/var/lib/hwclock \ %{BUILDROOT}/usr/share/man/man8 \ - %{BUILDROOT}/run/uuidd \ %{BUILDROOT}/var/log
touch %{BUILDROOT}/var/log/lastlog @@ -84,15 +83,14 @@ build rm -fv %{BUILDROOT}/usr/share/getopt/*.tcsh
# Set capabilities - # XXX: Setting capabilities is currently unusable due to #13010 chmod -v -s %{BUILDROOT}%{bindir}/mount - #setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/mount + setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/mount chmod -v -s %{BUILDROOT}%{bindir}/umount - #setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/umount + setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}%{bindir}/umount
# su (set right capabilities) chmod -v u-s %{BUILDROOT}%{bindir}/su - #setcap cap_setgid,cap_setuid+ep %{BUILDROOT}%{bindir}/su + setcap cap_setgid,cap_setuid+ep %{BUILDROOT}%{bindir}/su end end
diff --git a/xxhash/xxhash.nm b/xxhash/xxhash.nm new file mode 100644 index 000000000..d551178ae --- /dev/null +++ b/xxhash/xxhash.nm @@ -0,0 +1,60 @@ +############################################################################### +# IPFire.org - An Open Source Firewall Solution # +# Copyright (C) - IPFire Development Team info@ipfire.org # +############################################################################### + +name = xxhash +version = 0.8.1 +release = 1 + +groups = System/Libraries +url = https://www.xxhash.com/ +license = BSD and GPLv2+ +summary = Extremely fast hash algorithm + +description + xxHash is an Extremely fast Hash algorithm, running at RAM speed + limits. +end + +source_dl = https://github.com/Cyan4973/xxHash/archive/v%%7Bversion%7D/ +sources = %{thisapp}.tar.gz + +build + DIR_APP = %{DIR_SRC}/xxHash-%{version} + + make_build_targets += \ + MOREFLAGS="%{CFLAGS} %{LDFLAGS}" + + test + make check + make test-xxhsum-c + end + + make_install_targets += \ + PREFIX=%{prefix} \ + LIBDIR=%{libdir} + + install_cmds + # Fix broken symlinks. + for bit in 32 64 128; do + ln -svf xxhsum.1 %{BUILDROOT}%{mandir}/man1/xxh${bit}sum.1 + done + end +end + +packages + package %{name} + + package %{name}-libs + template LIBS + end + + package %{name}-devel + template DEVEL + end + + package %{name}-debuginfo + template DEBUGINFO + end +end
hooks/post-receive -- IPFire 3.x development tree
-
Michael Tremer