Attachment 238111 Details for Bug 353321 – xguest.spec

xguest.spec

xguest.spec (text/x-rpm-spec), 2.00 KB, created by Daniel Walsh on 2007-10-25 21:36:48 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Walsh

Created: 2007-10-25 21:36:48 UTC

Size: 2.00 KB

patch

obsolete

>Summary: Install xguest user to be a locked down user 
>Name: xguest
>Version: 1.0.2
>Release: 1%{?dist}
>License: GPLv2+
>Group: System Environment/Base
>BuildArch: noarch
>Source: %{name}-%{version}.tar.bz2
>URL: http://
>
>BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
>Requires(post): pam >= 0.99.8.1-9.fc8 selinux-policy > 3.0.8-12.fc8
>Requires(post): policycoreutils
>Requires(post): sabayon-apply
>Requires: gdm >= 1:2.20.0-15.fc8
>
>%description
>Setup the xguest user to be used by switch user or as a kiosk.  
>Account disabled unless SELinux is in enforcing mode.  Only allowed to log 
>in via gdm.
>
>%prep
>%setup -q
>
>%build
>
>%clean
>%{__rm} -fR %{buildroot}
>exit 0
>
>%install
>%{__rm} -fR %{buildroot}
>%{__mkdir} -p %{buildroot}/%{_sysconfdir}/desktop-profiles
>install -m0644 xguest.zip %{buildroot}/%{_sysconfdir}/desktop-profiles/
>exit 0
>
>%post
>if [ $1 = 1 ]; then
>
>echo -n \
>'/tmp    tmpfs   tmpfs   ~xguest
>/var/tmp        tmpfs   tmpfs   ~xguest
>$HOME           tmpfs   tmpfs   ~xguest' \
> >> /etc/security/namespace.conf 
>
>echo xguest >> /etc/security/sepermit.conf
>
>semanage user -a -P xguest -R xguest_r xguest_u  2> /dev/null
>useradd -c "X Guest User" -Z xguest_u xguest 2> /dev/null
>fi
>/usr/bin/python << __eof
>from sabayon import userdb
>db = userdb.get_database()
>db.set_profile("xguest", "xguest.zip")
>__eof
>setsebool -P allow_polyinstantiation 1
>
>exit 0
>
>%files
>%config(noreplace) /etc/desktop-profiles/xguest.zip
>%doc README
>
>%preun
>if [ $1 = 0 ]; then
>sed -i '/^xguest$/d' /etc/security/sepermit.conf
>semanage login -d xguest 2> /dev/null
>
>/usr/bin/python << __eof
>from sabayon import userdb
>db = userdb.get_database()
>db.set_profile("xguest", "")
>__eof
>fi
>
>exit 0
>
>%changelog
>* Mon Oct 22 2007 Dan Walsh <dwalsh@redhat.com> - 1.0.2-1
>- Cleanup spec file
>
>* Mon Oct 22 2007 Dan Walsh <dwalsh@redhat.com> - 1.0.1-2
>- Turn on allow_polyinstantiation boolean
>
>* Fri Oct 12 2007 Dan Walsh <dwalsh@redhat.com> - 1.0.1-1
>- Add sabayon support
>
>* Thu Sep 13 2007 Dan Walsh <dwalsh@redhat.com> - 1.0.0-1
>- Initial version

Actions: View

Attachments on bug 353321: 238111