File bubblewrap.spec of Package bubblewrap.10583

Overview Repositories Revisions Requests Users Attributes Meta

File bubblewrap.spec of Package bubblewrap.10583

#
# spec file for package bubblewrap
#
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#

Name:           bubblewrap
Version:        0.2.0
Release:        0
Summary:        Core execution tool for unprivileged containers
License:        LGPL-2.0+
Group:          Productivity/Security
Url:            https://github.com/projectatomic/bubblewrap
Source:         https://github.com/projectatomic/bubblewrap/archive/v%{version}.tar.gz
# Does not have README.md and autogen.sh included -> unusable
# Source0:        https://github.com/projectatomic/bubblewrap/releases/download/v%%{version}/%%{name}-%%{version}.tar.xz
# PATCH-FIX-UPSTREAM fix-cve-2019-12439.patch boo#1136958 CVE-2019-12439
# adapted from https://github.com/projectatomic/bubblewrap/commit/efc89e3b939b4bde42c10f065f6b7b02958ed50e.patch
Patch0:         fix-cve-2019-12439.patch
# We always run autogen.sh
BuildRequires:  autoconf
BuildRequires:  automake
BuildRequires:  docbook-xsl-stylesheets
BuildRequires:  gcc
BuildRequires:  git
BuildRequires:  libcap-devel
BuildRequires:  libtool
BuildRequires:  libxslt
BuildRequires:  pkgconfig
BuildRequires:  pkgconfig(libselinux)

%description
Bubblewrap (%{_bindir}/bwrap) is a core execution engine for unprivileged
containers that works as a setuid binary on kernels without
user namespaces.

%prep
# autosetup applies the patch itself according to the build log
%autosetup -n %{name}-%{version}
sed -i '1d' completions/bash/bwrap

%build
env NOCONFIGURE=1 ./autogen.sh
%configure --disable-silent-rules --with-priv-mode=none
make %{?_smp_mflags}

%install
%make_install DESTDIR=%{buildroot} INSTALL="install -p -c"
find %{buildroot} -type f -name "*.la" -delete -print

%files
%license COPYING
%doc README.md
%dir %{_datadir}/bash-completion
%dir %{_datadir}/bash-completion/completions
%{_datadir}/bash-completion/completions/bwrap
%{_bindir}/bwrap
%{_mandir}/man1/*

%changelog

Places

File bubblewrap.spec of Package bubblewrap.10583

Places