%define rev 1245 Summary: Base AppArmor profiles Name: apparmor-profiles Version: 2.3 Release: %mkrel 1.%{rev}.1 License: GPL Group: System/Base URL: http://forge.novell.com/modules/xfmod/project/?apparmor Source0: %{name}-%{version}-%{rev}.tar.gz Source1: usr.sbin.slapd.apparmor Patch: apparmor-profiles-2.1.2-1091-avahi.patch Patch1: apparmor-profiles-2.1.2-1091-nscd.patch Requires: apparmor-parser Requires(post): apparmor-parser BuildRoot: %{_tmppath}/%{name}-%{version}-root Buildarch: noarch %description AppArmor is a security framework that proactively protects the operating system and applications. This package contains the basic AppArmor profiles (aka security policy). %prep %setup -q # no backup as it touches a profile and they all get copied during %%install %patch -p1 %patch1 -p1 install -m 0644 %{SOURCE1} apparmor/profiles/extras/usr.sbin.slapd %install rm -rf %{buildroot} %{makeinstall_std} EXTRASDIR=%{buildroot}%{_sysconfdir}/apparmor/profiles/extras # remove profiles shipped elsewhere rm -f %{buildroot}%{_sysconfdir}/apparmor.d/sbin.rpcbind \ %{buildroot}%{_sysconfdir}/apparmor.d/usr.sbin.traceroute \ %{buildroot}%{_sysconfdir}/apparmor.d/bin.ping \ %{buildroot}%{_sysconfdir}/apparmor.d/bin.netstat \ %{buildroot}%{_sysconfdir}/apparmor.d/sbin.syslogd \ %{buildroot}%{_sysconfdir}/apparmor.d/sbin.klogd \ %{buildroot}%{_sysconfdir}/apparmor.d/usr.sbin.ntpd %posttrans /sbin/service apparmor condreload %clean rm -rf %{buildroot} %files %defattr(-,root,root) %dir %{_sysconfdir}/apparmor.d %config(noreplace) %{_sysconfdir}/apparmor.d/usr.* %config(noreplace) %{_sysconfdir}/apparmor.d/sbin.* %dir %{_sysconfdir}/apparmor.d/abstractions %dir %{_sysconfdir}/apparmor.d/program-chunks %dir %{_sysconfdir}/apparmor.d/tunables %config(noreplace) %{_sysconfdir}/apparmor.d/abstractions/* %config(noreplace) %{_sysconfdir}/apparmor.d/program-chunks/* %config(noreplace) %{_sysconfdir}/apparmor.d/tunables/* %dir %{_sysconfdir}/apparmor %dir %{_sysconfdir}/apparmor/profiles %dir %{_sysconfdir}/apparmor/profiles/extras %{_sysconfdir}/apparmor/profiles/extras/README %config(noreplace) %{_sysconfdir}/apparmor/profiles/extras/usr.* %config(noreplace) %{_sysconfdir}/apparmor/profiles/extras/etc.* %config(noreplace) %{_sysconfdir}/apparmor/profiles/extras/sbin.* %config(noreplace) %{_sysconfdir}/apparmor/profiles/extras/bin.* %changelog * Wed Aug 06 2008 Luiz Fernando Capitulino <lcapitulino@mandriva.com> 2.3-1.1245.1mdv2009.0 + Revision: 264713 - updated to version 2.3 svnrev 1245 * Fri Mar 14 2008 Andreas Hasenack <andreas@mandriva.com> 2.1.2-1.1091.7mdv2008.1 + Revision: 187850 - fix nscd profile (reported by Vincent Panel <yohonet@gmail.com>) * Thu Mar 06 2008 Andreas Hasenack <andreas@mandriva.com> 2.1.2-1.1091.6mdv2008.1 + Revision: 181085 - avahi-daemon profile: allow it to read /etc/lsb-release * Fri Feb 29 2008 Andreas Hasenack <andreas@mandriva.com> 2.1.2-1.1091.5mdv2008.1 + Revision: 176831 - include a writable slapd.d rule in openldap's profile - let openldap read the rootcerts * Fri Feb 29 2008 Andreas Hasenack <andreas@mandriva.com> 2.1.2-1.1091.4mdv2008.1 + Revision: 176818 - included initial profile for openldap (slapd) * Thu Feb 28 2008 Andreas Hasenack <andreas@mandriva.com> 2.1.2-1.1091.3mdv2008.1 + Revision: 176451 - drop syslog profile patch: we are no longer shipping that profile here (it's in the syslog package) * Thu Feb 28 2008 Andreas Hasenack <andreas@mandriva.com> 2.1.2-1.1091.2mdv2008.1 + Revision: 176375 - remove profiles that are shipped elsewhere * Wed Feb 27 2008 Andreas Hasenack <andreas@mandriva.com> 2.1.2-1.1091.1mdv2008.1 + Revision: 175858 - re-added forgotten syslogd profile patch - rpcbind needs setgid too - updated apparmor-profiles to 2.1.2-1091 - copied to apparmor-profiles - apparmor-parser updated to 2.1.2-1088 - apparmor becomes apparmor-parser * Thu Jan 17 2008 Thierry Vignaud <tvignaud@mandriva.com> 2.1-1.1076.2mdv2008.1 + Revision: 154124 - rebuild for new perl * Tue Jan 08 2008 Andreas Hasenack <andreas@mandriva.com> 2.1-1.1076.1mdv2008.1 + Revision: 146893 - updated to svn revision 1076 + Olivier Blin <oblin@mandriva.com> - restore BuildRoot + Thierry Vignaud <tvignaud@mandriva.com> - kill re-definition of %%buildroot on Pixel's request * Wed Sep 19 2007 Andreas Hasenack <andreas@mandriva.com> 2.1-1.961.5mdv2008.0 + Revision: 91191 - remove more profiles from standard package: they are shipped in their own packages now * Wed Sep 19 2007 Andreas Hasenack <andreas@mandriva.com> 2.1-1.961.4mdv2008.0 + Revision: 91061 - drop rpcbind profile, it's shipped in the rpcbind package now * Fri Sep 14 2007 Andreas Hasenack <andreas@mandriva.com> 2.1-1.961.3mdv2008.0 + Revision: 85766 - bonobo file is under a noarch libdir - build dbus and gnome applet packages * Fri Sep 14 2007 Andreas Hasenack <andreas@mandriva.com> 2.1-1.961.1mdv2008.0 + Revision: 85546 - install perl module in arch dir as the makefile does for x86_64 (doesn't seem right, though) - make it not require an installed libapparmor-devel to build - added swig to buildrequires - added profile for rpcbind - fix default syslog profile - obsolete apparmor-docs (manpages are in each package now) - better place for the LibAppArmor module - build apache-mod_apparmor package - install LibAppArmor.pm - added utils subpackage - Import apparmor