Attachment 865177 Details for Bug 1067119 – The changes to spec file to enable full hardening.

[patch] The changes to spec file to enable full hardening.

strongimcv-specfile.patch (text/plain), 2.92 KB, created by Avesh Agarwal on 2014-02-19 18:30:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Avesh Agarwal

Created: 2014-02-19 18:30:24 UTC

Size: 2.92 KB

patch

obsolete

>diff --git a/strongimcv.spec b/strongimcv.spec
>index 8287b9b..e86353e 100644
>--- a/strongimcv.spec
>+++ b/strongimcv.spec
>@@ -1,9 +1,9 @@
>-%global hardened_build 1
>+%global _hardened_build 1
> %global name2 strongswan
> 
> Name:           strongimcv
> Version:        5.1.1
>-Release:        3%{?dist}
>+Release:        4%{?dist}
> Summary:        Trusted Network Connect (TNC) Architecture
> Group:          Applications/System
> License:        GPLv2+
>@@ -16,7 +16,7 @@ Patch3:         libstrongswan-settings-debug.patch
> Patch4:         libstrongswan-973315.patch
> Patch5:         strongswan-1036844.patch
> 
>-BuildRequires:  gmp-devel autoconf automake
>+BuildRequires:  autoconf automake
> BuildRequires:  libcurl-devel
> BuildRequires:  openssl-devel
> BuildRequires:  sqlite-devel
>@@ -38,11 +38,12 @@ Requires(preun): initscripts
> %description
> This package provides Trusted Network Connect's (TNC) architecture support.
> It includes support for TNC client and server (IF-TNCCS), IMC and IMV message
>-exchange (IF-M), interface between IMC/IMV and TNC client/server (IF-IMC and IF-IMV).
>-It also includes PTS based IMC/IMV for TPM based remote attestation, SWID IMC/IMV,
>-and OS IMC/IMV. It's IMC/IMV dynamic libraries modules can be used by any third party
>-TNC Client/Server implementation possessing a standard IF-IMC/IMV interface. In
>-addition, it implements PT-TLS to support TNC over TLS.
>+exchange (IF-M), interface between IMC/IMV and TNC client/server (IF-IMC
>+and IF-IMV). It also includes PTS based IMC/IMV for TPM based remote
>+attestation, SWID IMC/IMV, and OS IMC/IMV. It's IMC/IMV dynamic libraries
>+modules can be used by any third party TNC Client/Server implementation
>+possessing a standard IF-IMC/IMV interface. In addition, it implements
>+PT-TLS to support TNC over TLS.
> 
> This package has disabled it's IKE features as those are not supported.
> 
>@@ -132,8 +133,10 @@ mv  %{buildroot}%{_unitdir}/%{name2}.service %{buildroot}%{_unitdir}/%{name}.ser
> %else
> install -D -m 755 init/sysvinit/%{name} %{buildroot}/%{_initddir}/%{name}
> %endif
>-#rename /usr/bin/pki to avoid conflict with pki-core/pki-tools
>-mv %{buildroot}%{_bindir}/pki %{buildroot}%{_bindir}/%{name}-pki
>+##rename /usr/bin/pki to avoid conflict with pki-core/pki-tools
>+#mv %{buildroot}%{_bindir}/pki %{buildroot}%{_bindir}/%{name}-pki
>+#move /usr/bin/pki to avoid conflict with pki-core/pki-tools
>+mv %{buildroot}%{_bindir}/pki %{buildroot}%{_libexecdir}/%{name}/pki
> #rename swid tag directory
> mv %{buildroot}%{_datadir}/regid.2004-03.org.%{name2} %{buildroot}%{_datadir}/regid.2004-03.org.%{name}
> 
>@@ -170,7 +173,6 @@ fi
> %else
> %endif
> 
>-
> %files
> %doc README COPYING NEWS TODO
> %dir %{_sysconfdir}/%{name}
>@@ -217,7 +219,8 @@ fi
> %{_libexecdir}/%{name}/scepclient
> %{_libexecdir}/%{name}/starter
> %{_libexecdir}/%{name}/stroke
>-%{_bindir}/%{name}-pki
>+%{_libexecdir}/%{name}/pki
>+#%{_bindir}/%{name}-pki
> %{_sbindir}/%{name}
> %{_mandir}/man1/%{name}_pki*.1.gz
> %{_mandir}/man5/%{name}_%{name2}.conf.5.gz

Actions: View | Diff

Attachments on bug 1067119: 865177 | 865668 | 865669