File flatpak.spec of Package flatpak.28335

Overview Repositories Revisions Requests Users Attributes Meta

File flatpak.spec of Package flatpak.28335

#
# spec file for package flatpak
#
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#

%define libname libflatpak0
Name:           flatpak
Version:        1.2.3
Release:        0
Summary:        OSTree based application bundles management
License:        LGPL-2.1-or-later
Group:          System/Packages
URL:            https://flatpak.github.io/
Source:         %{name}-%{version}.tar.xz
Patch0:         polkit_rules_usability.patch
# PATCH-FIX-UPSTREAM fixes from upstream branch 1.2.x (boo#1130637 and boo#1155688)
Patch1:         0001-Only-compare-the-lowest-32-ioctl-arg-bits-for-TIOCSTI.patch
Patch2:         0001-dir-Fix-GError-handling-in-flatpak_load_deplot_data.patch
Patch3:         0002-oci-Handle-cancellations-for-appstream.patch
Patch4:         0003-icon-validator-portal-Guard-against-overlong-symlink-targets.patch
Patch5:         0004-update-Fix-OCI-updates-in-the-system-repo.patch
Patch6:         0005-dir-include-NULL-url-in-flatpak_dir_log-call.patch
Patch7:         0006-transaction-Install-an-extensions-required-runtime.patch
Patch8:         0007-dir-Use-ExtensionOf.runtime-for-apply_extra.patch
Patch9:         0008-transaction-Append-bundle-to-correct-list-on-flatpak_transaction_add_install_bundle.patch
Patch10:        0009-dir-Dont-overzealously-rewrite-an-error.patch
Patch11:        0010-OCI-correctly-handle-locally-present-icons.patch
Patch12:        0011-flatpak-installation-Handle-an-unconfigured-remote-when-listing-remotes.patch
Patch13:        0012-Handle-versions-key-when-finding-local-related-ref.patch
Patch14:        0013-dir-Ignore-trailing-slash-in-remote-URIs.patch
Patch15:        0014-tests-Add-test-for-required-flatpak-versioning.patch
Patch16:        0015-Support-multiple-versions-in-required-flatpak-metadata-key.patch
# PATCH-FIX-SLE Since we applied most important patches up to 1.2.5, pretend to be 1.2.5 when a package requires that version (boo#1155688)
Patch1000:      pretend-to-be-1.2.5.patch
# PATCH-FIX-UPSTREAM CVE-2021-21261.patch boo#1180996 mgorse@suse.com -- fix sandbox escape via spawn portal.
Patch1001:      CVE-2021-21261.patch
# PATCH-FIX-UPSTREAM flatpak-CVE-2021-21381.patch boo#1183459 mgorse@suse.com -- disallow @@ and @@u usage in desktop files.
Patch1002:      CVE-2021-21381.patch
# PATCH-FIX-UPSTREAM CVE-2021-41133.patch boo#1191507 mgorse@suse.com -- fix sandbox bypass via recent syscalls.
Patch1003:      CVE-2021-41133.patch
# PATCH-FIX-UPSTREAM flatpak-validate-metadata.patch boo#1194610 mgorse@suse.com -- ensure the metadata in the pull commit jmatches what we resolve.
Patch1004:      flatpak-validate-metadata.patch
# PATCH-FIX-UPSTREAM CVE-2021-43860.patch boo#1194610 mgorse@suse.com -- fix metadata validation.
Patch1005:      CVE-2021-43860.patch
# PATCH-FIX-UPSTREAM CVE-2023-28101.patch bsc#1209410 sckang@suse.com -- CVE-2023-28101: Metadata with ANSI control codes can cause misleading terminal output
Patch1006:         CVE-2023-28101.patch
# PATCH-FIX-UPSTREAM CVE-2023-28100.patch bsc#1209411 sckang@suse.com -- run: Prevent TIOCLINUX ioctl, the same as TIOCSTI
Patch1007:         CVE-2023-28100.patch
BuildRequires:  bison
BuildRequires:  bubblewrap >= 0.2.1
BuildRequires:  docbook-xsl-stylesheets
BuildRequires:  gtk-doc
BuildRequires:  intltool >= 0.35.0
BuildRequires:  libcap-devel
BuildRequires:  libdwarf-devel
BuildRequires:  libqgpgme-devel >= 1.1.8
BuildRequires:  libtool
BuildRequires:  pkgconfig
BuildRequires:  xsltproc
BuildRequires:  pkgconfig(appstream-glib)
BuildRequires:  pkgconfig(dconf)
BuildRequires:  pkgconfig(fuse)
BuildRequires:  pkgconfig(gio-2.0)
BuildRequires:  pkgconfig(gio-unix-2.0)
BuildRequires:  pkgconfig(glib-2.0) >= 2.44
BuildRequires:  pkgconfig(gobject-introspection-1.0) >= 1.40.0
BuildRequires:  pkgconfig(gobject-introspection-no-export-1.0) >= 1.40.0
BuildRequires:  pkgconfig(json-glib-1.0)
BuildRequires:  pkgconfig(libarchive) >= 2.8.0
BuildRequires:  pkgconfig(libelf) >= 0.8.12
BuildRequires:  pkgconfig(libseccomp)
BuildRequires:  pkgconfig(libsoup-2.4)
BuildRequires:  pkgconfig(ostree-1) >= 2018.7
BuildRequires:  pkgconfig(polkit-gobject-1)
BuildRequires:  pkgconfig(xau)
Requires:       %{libname} = %{version}
Requires:       bubblewrap >= 0.2.1
Requires:       ostree >= 2018.7
Requires:       xdg-desktop-portal >= 0.10
Recommends:     %{name}-lang = %{version}
# Remove after openSUSE Leap 42 is out of scope
Provides:       xdg-app = %{version}
Obsoletes:      xdg-app < %{version}
%{?systemd_requires}

%description
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.

%package -n %{libname}
Summary:        OSTree based application bundle management library
Group:          System/Libraries

%description -n %{libname}
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.

%package -n typelib-1_0-Flatpak-1_0
Summary:        Introspection bindings for the flatpak library
Group:          System/Libraries

%description -n typelib-1_0-Flatpak-1_0
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.

%package zsh-completion
Summary:        Zsh tab-completion for flatpak
Group:          System/Shells
Supplements:    packageand(%{name}:%(rpm -q --qf '%%{NAME}' --whatprovides zsh))

%description zsh-completion
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.

This package provides zsh tab-completion for flatpak.

%package devel
Summary:        Development files for the flatpak library
Group:          Development/Languages/C and C++
Requires:       %{libname} = %{version}
Requires:       %{name} = %{version}
Requires:       typelib-1_0-Flatpak-1_0 = %{version}

%description devel
flatpak is a system for building, distributing and running sandboxed desktop
applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for
more information.

%lang_package

%prep
%setup -q
%patch0 -p1
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
%patch11 -p1
%patch12 -p1
%patch13 -p1
%patch14 -p1
%patch15 -p1
%patch16 -p1
%patch1000 -p1
%patch1001 -p1
%patch1002 -p1
%patch1003 -p1
%patch1004 -p1
%patch1005 -p1
%patch1006 -p1
%patch1007 -p1

sed -i -e '1s,#!%{_bindir}/env python3,#!%{_bindir}/python3,' scripts/flatpak-*

%build
NOCONFIGURE=1 ./autogen.sh
%configure \
    --disable-silent-rules \
    --enable-gtk-doc \
    --disable-document-portal \
    --with-system-bubblewrap \
    --with-priv-mode=none \
    --with-dbus-config-dir=%{_datadir}/dbus-1/system.d
make %{?_smp_mflags}

%install
%make_install
find %{buildroot} -type f -name "*.la" -delete -print
mkdir -p %{buildroot}%{_sbindir}
ln -s service %{buildroot}%{_sbindir}/rcflatpak-system-helper
# add a 60- prefix to the rules file, otherwise it is not effective, because
# /etc/polkit-1/rules.d/90-default-privs.rules is executed first and if no
# polkit-default-privs rule grants access then an explicit reject is the
# result. This should fix bsc#984817, granting members of group wheel access
# w/o password entry.
mv %{buildroot}/%{_datadir}/polkit-1/rules.d/{,60-}org.freedesktop.Flatpak.rules

%find_lang %{name}

%post   -n %{libname} -p /sbin/ldconfig
%postun -n %{libname} -p /sbin/ldconfig
%pre
%service_add_pre flatpak-system-helper.service

%preun
%service_del_preun flatpak-system-helper.service

%post
%service_add_post flatpak-system-helper.service

%postun
%service_del_postun flatpak-system-helper.service

%files -f %{name}.lang
%license COPYING
%{_bindir}/flatpak
%{_bindir}/flatpak-bisect
%{_bindir}/flatpak-coredumpctl
%{_libexecdir}/flatpak-dbus-proxy
%{_libexecdir}/flatpak-portal
%{_libexecdir}/flatpak-session-helper
%{_libexecdir}/flatpak-system-helper
%{_libexecdir}/flatpak-validate-icon
%{_datadir}/bash-completion/completions/flatpak
# # Own dirs so we don't have to depend on dbus for building.
%dir %{_datadir}/dbus-1
%dir %{_datadir}/dbus-1/interfaces
%dir %{_datadir}/dbus-1/services
%{_datadir}/dbus-1/interfaces/org.freedesktop.Flatpak.xml
%{_datadir}/dbus-1/interfaces/org.freedesktop.portal.Flatpak.xml
%{_datadir}/dbus-1/services/org.freedesktop.Flatpak.service
%{_datadir}/dbus-1/services/org.freedesktop.portal.Flatpak.service
%{_datadir}/dbus-1/system-services/org.freedesktop.Flatpak.SystemHelper.service
%{_datadir}/dbus-1/system.d/org.freedesktop.Flatpak.SystemHelper.conf
# policykit rules
%{_datadir}/polkit-1/actions/org.freedesktop.Flatpak.policy
%{_datadir}/polkit-1/rules.d/60-org.freedesktop.Flatpak.rules
%{_mandir}/man1/%{name}*.1%{ext_man}
%{_mandir}/man5/flatpak-metadata.5%{ext_man}
%{_mandir}/man5/flatpak-flatpakref.5%{ext_man}
%{_mandir}/man5/flatpak-flatpakrepo.5%{ext_man}
%{_mandir}/man5/flatpak-installation.5%{ext_man}
%{_mandir}/man5/flatpak-remote.5%{ext_man}
%{_datadir}/%{name}/
%config %{_sysconfdir}/profile.d/flatpak.sh
# Own dirs so we don't have to depend on gdm for building.
%dir %{_datadir}/gdm/
%dir %{_datadir}/gdm/env.d/
%{_datadir}/gdm/env.d/flatpak.env
%{_unitdir}/flatpak-system-helper.service
%{_sbindir}/rcflatpak-system-helper
%{_userunitdir}/flatpak-session-helper.service
%{_userunitdir}/flatpak-portal.service
%ghost %dir %{_localstatedir}/lib/flatpak
%{_libexecdir}/systemd/user-environment-generators/60-flatpak

%files -n %{libname}
%{_libdir}/libflatpak.so.*

%files -n typelib-1_0-Flatpak-1_0
%{_libdir}/girepository-1.0/Flatpak-1.0.typelib

%files zsh-completion
%dir %{_datadir}/zsh/site-functions
%{_datadir}/zsh/site-functions/_flatpak

%files devel
%{_libdir}/pkgconfig/flatpak.pc
%{_datadir}/gtk-doc/
%{_includedir}/%{name}/
%{_libdir}/libflatpak.so
%{_datadir}/gir-1.0/Flatpak-1.0.gir

%changelog

Places

File flatpak.spec of Package flatpak.28335

Places