blob: f93dfffcc8cbc38df2da781e690617fc35a52b5a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
# Copyright 2017 Google Inc. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# For EL7, if building on CentOS, override dist to be el7.
%if 0%{?rhel} == 7
%define dist .el7
%endif
Name: google-compute-engine-oslogin
Version: %{_version}
Release: 1%{?dist}
Summary: OS Login Functionality for Google Compute Engine
License: ASL 2.0
Source0: %{name}_%{version}.orig.tar.gz
BuildRequires: boost-devel
BuildRequires: gcc-c++
BuildRequires: make
BuildRequires: libcurl
BuildRequires: json-c-devel
BuildRequires: pam-devel
%if 0%{?rhel} == 8
BuildRequires: python3-policycoreutils
Requires: python3-policycoreutils
%else
BuildRequires: policycoreutils-python
Requires: policycoreutils-python
%endif
Requires: boost-regex
Requires: json-c
%description
This package contains several libraries and changes to enable OS Login functionality
for Google Compute Engine.
%global debug_package %{nil}
%prep
%setup
%build
make %{?_smp_mflags} LDLIBS="-lcurl -ljson-c -lboost_regex"
%install
rm -rf %{buildroot}
make install DESTDIR=%{buildroot} LIBDIR=/%{_lib} INSTALL_SELINUX=y
%files
%doc
/%{_lib}/libnss_oslogin-%{version}.so
/%{_lib}/libnss_cache_oslogin-%{version}.so
/%{_lib}/libnss_oslogin.so.2
/%{_lib}/libnss_cache_oslogin.so.2
/%{_lib}/security/pam_oslogin_admin.so
/%{_lib}/security/pam_oslogin_login.so
/usr/bin/google_authorized_keys
/usr/bin/google_oslogin_control
/usr/bin/google_oslogin_nss_cache
/usr/share/selinux/packages/oslogin.pp
%{_mandir}/man8/nss-oslogin.8.gz
%{_mandir}/man8/libnss_oslogin.so.2.8.gz
%{_mandir}/man8/nss-cache-oslogin.8.gz
%{_mandir}/man8/libnss_cache_oslogin.so.2.8.gz
%post
/sbin/ldconfig
if [ $1 -gt 1 ]; then # This is an upgrade.
if semodule -l | grep -qi oslogin.el6; then
echo "Removing old SELinux module for OS Login."
semodule -r oslogin.el6
fi
fi
echo "Installing SELinux module for OS Login."
semodule -i /usr/share/selinux/packages/oslogin.pp
if [ -e /var/google-sudoers.d ]; then
fixfiles restore /var/google-sudoers.d
fi
%postun
/sbin/ldconfig
if [ $1 = 0 ]; then # This is an uninstall.
if semodule -l|grep -qi oslogin; then
echo "Removing SELinux module for OS Login."
semodule -r oslogin
fi
fi
%changelog
|
