+# TODO
+# - REVIEW patches and configuration
+# - ZPH TOS -
+# For this to work correctly, you will need to patch your linux
+# kernel with the TOS preserving ZPH patch.
+# The kernel patch can be downloaded from http://zph.bratcheda.org
#
# Conditional build:
%bcond_with combined_log # enables apache-like combined log format
#
Summary: SQUID Internet Object Cache
-Summary(es): proxy/cache para WWW/FTP/gopher
-Summary(pl): Uniwersalny serwer proxy-cache
-Summary(pt_BR): Cache Squid de objetos Internet
-Summary(ru): Squid - ËÜÛ ÏÂßÅËÔÏ× Internet
-Summary(uk): Squid - ËÅÛ ÏÂ'¤ËÔ¦× Internet
-Summary(zh_CN): SQUID ¸ßËÙ»º³å´úÀí·þÎñÆ÷
+Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher
+Summary(pl.UTF-8): Uniwersalny serwer proxy-cache
+Summary(pt_BR.UTF-8): Cache Squid de objetos Internet
+Summary(ru.UTF-8): Squid - кэш объектов Internet
+Summary(uk.UTF-8): Squid - кеш об'єктів Internet
+Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器
Name: squid
-Version: 2.5.STABLE7
-Release: 11
+Version: 4.6
+Release: 2
Epoch: 7
License: GPL v2
Group: Networking/Daemons
-Source0: http://www.squid-cache.org/Versions/v2/2.5/%{name}-%{version}.tar.bz2
-# Source0-md5: bf63e34906c68d716896eec0351108dc
-# http://www.squid-cache.org/Doc/FAQ/FAQ.tar.gz
-Source1: %{name}-FAQ.tar.gz
-# Source1-md5: cb9a955f8cda9cc166e086fccd412a43
-Source2: %{name}.init
-Source3: %{name}.sysconfig
-# http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip
-Source4: %{name}-book-full-html.zip
-# Source4-md5: 4f3b6dab1de9cbb847df89d8b417378a
-Source5: %{name}.conf.patch
-Source6: %{name}.logrotate
-Source7: %{name}.pamd
-# Bug fixes from Squid home page:
-Patch0: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-half_closed_POST.patch
-Patch1: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7_req_resp_header.patch
-Patch2: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-non_blocking_disk.patch
-Patch3: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-blank_response.patch
-Patch4: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-cachemgr_vmobjects.patch
-Patch5: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-dothost.patch
-Patch6: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-empty_acls.patch
-Patch7: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-header_parsing.patch
-Patch8: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-gopher_html_parsing.patch
-Patch9: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-wccp_denial_of_service.patch
-Patch10: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-ldap_spaces.patch
-Patch11: http://www.squid-cache.org/Versions/v2/2.5/bugs/squid-2.5.STABLE7-response_splitting.patch
-# Other patches:
-Patch100: http://www.sed.pl/~mrk/qos/%{name}_hit_miss_mark.patch
-Patch101: %{name}-fhs.patch
-Patch102: %{name}-location.patch
-Patch103: %{name}-domainmatch.patch
-Patch104: %{name}-libnsl_fixes.patch
-Patch105: %{name}-ac_fix.patch
-Patch106: %{name}-crash-on-ENOSPC.patch
-Patch107: %{name}-newssl.patch
-Patch108: %{name}-nolibs.patch
-Patch109: http://piorun.ds.pg.gda.pl/~blues/patches/%{name}-more_FD-new.patch
-Patch110: %{name}-empty-referer.patch
-Patch111: %{name}-2.5.STABLE4-apache-like-combined-log.patch
+Source0: http://www.squid-cache.org/Versions/v4/%{name}-%{version}.tar.xz
+# Source0-md5: e25e7cc37754ad14d8aa368c0c210e54
+Source1: %{name}.init
+Source2: %{name}.sysconfig
+Source3: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip
+# Source3-md5: 4f3b6dab1de9cbb847df89d8b417378a
+Source4: %{name}.conf.patch
+Source5: %{name}.logrotate
+Source6: %{name}.pamd
+Source7: %{name}-cachemgr-apache.conf
+Source8: %{name}.tmpfiles
+Source9: %{name}-cachemgr-httpd.conf
+Source10: %{name}.service
+Source11: %{name}-check_cache
+
+Patch1: %{name}-location.patch
+Patch2: %{name}-crash-on-ENOSPC.patch
+Patch4: %{name}-2.5.STABLE4-apache-like-combined-log.patch
+Patch5: %{name}-ppc-m32.patch
+Patch6: %{name}-cachemgr-webapp.patch
+# still needed? http://bugs.squid-cache.org/show_bug.cgi?id=3806
+# http://www.squid-cache.org/mail-archive/squid-dev/201207/att-0177/squidv3-vary-headers-shm-hack.patch
+Patch7: squidv3-vary-headers-shm-hack.patch
URL: http://www.squid-cache.org/
BuildRequires: autoconf
BuildRequires: automake
+BuildRequires: cppunit-devel
BuildRequires: cyrus-sasl-devel >= 2.1.0
-BuildRequires: openldap-devel
+BuildRequires: db-devel
+BuildRequires: expat-devel
+BuildRequires: heimdal-devel
+BuildRequires: libcap-devel >= 1:2.09
+BuildRequires: libecap-devel >= 1
+BuildRequires: libltdl-devel
+BuildRequires: libnetfilter_conntrack-devel
+BuildRequires: libstdc++-devel
+BuildRequires: libtool
+BuildRequires: libxml2-devel
+BuildRequires: openldap-devel >= 2.3.0
BuildRequires: openssl-devel >= 0.9.7d
BuildRequires: pam-devel
BuildRequires: perl-base
-BuildRequires: rpmbuild(macros) >= 1.166
+BuildRequires: rpmbuild(macros) >= 1.671
+BuildRequires: sed >= 4.0
+BuildRequires: tar >= 1:1.22
BuildRequires: unzip
-PreReq: rc-scripts >= 0.2.0
-PreReq: setup >= 2.4.6
-Requires(pre): /bin/id
-Requires(pre): /usr/bin/getgid
-Requires(pre): /usr/lib/rpm/user_group.sh
-Requires(pre): /usr/sbin/groupadd
-Requires(pre): /usr/sbin/useradd
-Requires(post,preun): /sbin/chkconfig
+BuildRequires: xz
+Requires(post): /bin/hostname
Requires(post): fileutils
Requires(post): findutils
Requires(post): grep
-Requires(post): /bin/hostname
+Requires(post,preun): /sbin/chkconfig
Requires(postun): /usr/sbin/groupdel
Requires(postun): /usr/sbin/userdel
+Requires(pre): /usr/bin/getgid
+Requires(pre): /usr/lib/rpm/user_group.sh
+Requires(pre): /usr/sbin/groupadd
+Requires(pre): /usr/sbin/useradd
+Requires(pre,triggerpostun): /bin/id
+Requires(pre,triggerpostun): /usr/sbin/usermod
+Requires(post,preun,postun): systemd-units >= 38
+Requires: rc-scripts >= 0.2.0
+Requires: setup >= 2.4.6
+Requires: systemd-units >= 38
Provides: group(squid)
+# epoll enabled by default:
+Requires: uname(release) >= 2.6
+# TPROXYv4 (v2 disabled b/c it breaks v4)
+#Suggests: uname(release) >= 2.6.28.3
Provides: user(squid)
+Conflicts: logrotate < 3.8.0
BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
+%define _webapps /etc/webapps
+%define _webapp cachemgr
%define _libexecdir %{_libdir}/%{name}
%define _sysconfdir /etc/%{name}
-%define _cgidir /home/services/httpd/cgi-bin
+%define _cgidir %{_prefix}/lib/cgi-bin/%{_webapp}
%description
Squid is a high-performance proxy caching server for web clients,
reduces the amount of time the cache waits for DNS lookups. Squid is
derived from the ARPA-funded Harvest project.
-%description -l es
-Squid es un servidor proxy con caché de alto desempeño para clientes
+%description -l es.UTF-8
+Squid es un servidor proxy con caché de alto desempeño para clientes
web, soportando FTP, gopher y HTTP. Diferentemente de softwares
-tradicionales de caché squid manipula todas las requisiciones en un
-único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y
-objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché
+tradicionales de caché squid manipula todas las requisiciones en un
+único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y
+objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché
de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa
-un caché negativo de requisiciones que fallen. Si tiene poca memoria
-da un vistazo en la versión NOVM de este paquete. También soporta SSL,
+un caché negativo de requisiciones que fallen. Si tiene poca memoria
+da un vistazo en la versión NOVM de este paquete. También soporta SSL,
controles extensivos de acceso y registro (log) completo de las
requisiciones. Usando el ligero Protocolo de Caches Internet (ICP)
-puede ser usado en una jerarquía de servidores para mayor ahorro de la
-banda de comunicación. Está compuesto del programa squid (servidor
-principal), del programa dnsserver (para resolución DNS), del programa
+puede ser usado en una jerarquía de servidores para mayor ahorro de la
+banda de comunicación. Está compuesto del programa squid (servidor
+principal), del programa dnsserver (para resolución DNS), del programa
ftpget (para transmisiones ftp) y otras herramientas clientes y para
-administración. Cuando squid se inicia, dispara un número configurable
+administración. Cuando squid se inicia, dispara un número configurable
de procesos dnsserver, cada uno pudiendo ejecutar solamente una
-resolución DNS con poder de bloquear. Esto reduce el tiempo que el
-caché espera por resoluciones DNS. Fue derivado del proyecto Harvest,
+resolución DNS con poder de bloquear. Esto reduce el tiempo que el
+caché espera por resoluciones DNS. Fue derivado del proyecto Harvest,
financiado por la ARPA.
-%description -l pl
-Squid jest wysoce wydajnym serwerem proxy-cache dla przegl±darek WWW,
-klientów FTP i gopher. Squid przechowuje najczê¶ciej pobierane dane w
-pamiêci RAM i zapamiêtuje odwo³ania do DNS. Squid oferuje wsparcie dla
-SSL, rozbudowan± kontrolê dostêpu oraz pe³ne rejestrowanie pobieranych
-danych. Dziêki u¿yciu protoko³u ICP (Internet Cache Protocol), serwer
-squid mo¿na ³±czyæ w hierarchiê, zwiêkszaj±c ich efektywno¶æ. Pakiet
-squid obejmuje: g³ówny program serwera squid, program dostarczaj±cy
-informacji z DNS dnsserver, program odbieraj±cy dane FTP ftpget, oraz
-pomocnicze programy do zarz±dzania. Squid wywodzi siê ze
+%description -l pl.UTF-8
+Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW,
+klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w
+pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla
+SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych
+danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer
+squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet
+squid obejmuje: główny program serwera squid, program dostarczający
+informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz
+pomocnicze programy do zarządzania. Squid wywodzi się ze
sponsorowanego przez ARPA projektu Harvest.
-%description -l pt_BR
-O Squid é um servidor proxy com cache de alta performance para
+%description -l pt_BR.UTF-8
+O Squid é um servidor proxy com cache de alta performance para
clientes web, suportando FTP, gopher e HTTP. Diferentemente de
-softwares tradicionais de cache o squid manipula todas as requisições
-em um único processo sem bloqueios, direcionado a E/S.
+softwares tradicionais de cache o squid manipula todas as requisições
+em um único processo sem bloqueios, direcionado a E/S.
-Mantém meta dados e objetos freqüentemente pedidos num cache em
-memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem
-bloqueio e implementa um cache negativo de requisições que falharem.
-Se você tem pouca memória dê uma olhada na versão NOVM deste pacote.
+Mantém meta dados e objetos freqüentemente pedidos num cache em
+memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem
+bloqueio e implementa um cache negativo de requisições que falharem.
+Se você tem pouca memória dê uma olhada na versão NOVM deste pacote.
-Também suporta SSL, controles extensivos de acesso e registro (log)
-completo das requisições. Usando o leve Protocolo de Caches Internet
+Também suporta SSL, controles extensivos de acesso e registro (log)
+completo das requisições. Usando o leve Protocolo de Caches Internet
(ICP) ele pode ser usado em uma hierarquia de servidores para maior
-economia de banda de comunicação.
+economia de banda de comunicação.
Ele consiste do programa squid (servidor principal), do programa
-dnsserver (para resolução DNS), do programa ftpget (para transmissões
+dnsserver (para resolução DNS), do programa ftpget (para transmissões
ftp) e outras ferramentas clientes e para gerenciamento. Quando o
-squid é inicializado ele dispara um número configurável de processos
-dnsserver, cada um podendo executar somente uma resolução DNS
-bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS.
+squid é inicializado ele dispara um número configurável de processos
+dnsserver, cada um podendo executar somente uma resolução DNS
+bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS.
Foi derivado do projeto Harvest, financiado pela ARPA.
-%description -l ru
-Squid - ÜÔÏ ×ÙÓÏËÏÐÒÏÉÚ×ÏÄÉÔÅÌØÎÙÊ ËÜÛÉÒÕÀÝÉÊ ÐÒÏËÓÉ-ÓÅÒ×ÅÒ ÄÌÑ
-ËÌÉÅÎÔÏ× web, ÐÏÄÄÅÒÖÉ×ÁÀÝÉÊ ÏÂßÅËÔÙ ÄÁÎÎÙÈ ÔÉÐÁ FTP, gopher É HTTP. ÷
-ÏÔÌÉÞÉÅ ÏÔ ÔÒÁÄÉÃÉÏÎÎÙÈ ËÜÛÉÒÕÀÝÉÈ ÐÒÏÇÒÁÍÍ, Squid ÏÂÒÁÂÁÔÙ×ÁÅÔ ×ÓÅ
-ÚÁÐÒÏÓÙ ÐÒÉ ÐÏÍÏÝÉ ÏÄÎÏÇÏ ÎÅÂÌÏËÉÒÕÀÝÅÇÏÓÑ, ÕÐÒÁ×ÌÑÅÍÏÇÏ
-××ÏÄÏÍ-×Ù×ÏÄÏÍ ÐÒÏÃÅÓÓÁ.
+%description -l ru.UTF-8
+Squid - это высокопроизводительный кэширующий прокси-сервер для
+клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В
+отличие от традиционных кэширующих программ, Squid обрабатывает все
+запросы при помощи одного неблокирующегося, управляемого
+вводом-выводом процесса.
-üÔÏÔ ÐÁËÅÔ ÉÍÅÅÔ ×ÓÔÒÏÅÎÎÕÀ ÐÏÄÄÅÒÖËÕ ÂÁÚÙ ÄÁÎÎÙÈ ÓÅÔÅ×ÙÈ ICMP-ÐÒÏÂ
+Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб
(Netdb).
-%description -l uk
-Squid - ÃÅ ËÅÛÕÀÞÉÊ ÐÒÏËÓ¦-ÓÅÒ×ÅÒ ÄÌÑ web-Ë̦¤ÎÔ¦×, ÝÏ Ð¦ÄÔÒÉÍÕ¤
-ÏÂ'¤ËÔÉ ÄÁÎÉÈ ÔÉÐÕ FTP, gopher ÔÁ HTTP. îÁ צÄͦÎÕ ×¦Ä ÔÒÁÄÉæÊÎÉÈ
-ËÅÛÕÀÞÉÈ ÐÒÏÇÒÁÍ, Squid ÏÂÒÏÂÌѤ ×Ó¦ ÚÁÐÉÔÉ ÚÁ ÄÏÐÏÍÏÇÏÀ ÏÄÎÏÇÏ
-ÎÅÂÌÏËÕÀÞÏÇÏ, ËÅÒÏ×ÁÎÏÇÏ ××ÏÄÏÍ-×É×ÏÄÏÍ ÐÒÏÃÅÓÕ.
+%description -l uk.UTF-8
+Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує
+об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних
+кешуючих програм, Squid обробляє всі запити за допомогою одного
+неблокуючого, керованого вводом-виводом процесу.
-ãÅÊ ÐÁËÅÔ ÍÁ¤ ×ÂÕÄÏ×ÁÎÕ Ð¦ÄÔÒÉÍËÕ ÂÁÚÉ ÄÁÎÉÈ ÍÅÒÅÖÅ×ÉÈ ICMP-ÐÒÏÂ
+Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб
(Netdb).
%package cachemgr
Summary: CGI script for Squid management
-Summary(pl): Skrypt CGI do zarz±dzania Squidem przez WWW
-Group: Networking/Admin
-Requires: %{name} = %{epoch}:%{version}-%{release}
-Requires: httpd
+Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW
+Group: Applications/WWW
+# does not require squid locally
+Requires: group(http)
+Requires: webapps
+Requires: webserver
+Requires: webserver(access)
+Requires: webserver(alias)
+Requires: webserver(cgi)
+Conflicts: apache-base < 2.4.0-1
%description cachemgr
-Cachemgr.cgi is a CGI script that allows administrator to chceck
+Cachemgr.cgi is a CGI script that allows administrator to check
various informations about Squid via WWW.
-%description cachemgr -l pl
-Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi
-zapoznaæ siê z informacjami o pracy Squida poprzez WWW.
+%description cachemgr -l pl.UTF-8
+Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi
+zapoznać się z informacjami o pracy Squida poprzez WWW.
+
+%package kerberos_auth
+Summary: Authentication via the Negotiate RFC 4559 for proxies
+Summary(pl.UTF-8): Uwierzytelnianie przez negocjację RFC 4559 dla serwerów proxy
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+Provides: squid-kerb_auth = %{epoch}:%{version}-%{release}
+Obsoletes: squid-kerb_auth < %{epoch}:%{version}-%{release}
+
+%description kerberos_auth
+This squid helper is a reference implementation that supports
+authentication via the Negotiate RFC 4559 for proxies. It decodes RFC
+2478 SPNEGO GSS-API tokens from IE7 either through helper functions or
+via SPNEGO supporting Kerberos libraries and RFC 1964 Kerberos tokens
+from Firefox on Linux.
+
+%description kerberos_auth -l pl.UTF-8
+Pakiet ten jest implementacją uwierzytelniania przez negocjacji RFC
+4559 dla serwerów proxy. Dekoduje żetony SPNEGO GSS-API RFC 2478 z IE7
+poprzez funkcje pomocnicze lub przez biblioteki Kerberos wspierające
+SPNEGO i żetony Kerberos RFC 1964 z Firefoksa w Linuksie.
%package ldap_auth
Summary: LDAP authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania LDAP dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This Squid helper allows authentication against LDAP directories using
the "simple authentication" (plain-text).
-%description ldap_auth -l pl
-Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomoc± prostego
+%description ldap_auth -l pl.UTF-8
+Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego
uwierzytelniania (otwartym tekstem).
%package pam_auth
Summary: PAM authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania PAM dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
Requires: pam >= 0.77.3
authentication service "squid". This allows you to authenticate Squid
users to any authentication source for which you have a PAM module.
-%description pam_auth -l pl
-Program ten pozwala na uwierzytelnianie u¿ytkowników squida w dowolnym
-¼ródle posiadaj±cym modu³ PAM.
+%description pam_auth -l pl.UTF-8
+Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym
+źródle posiadającym moduł PAM.
%package smb_auth
Summary: SMB authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania SMB dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
authenticate proxy users against an SMB server like Windows NT or
Samba.
-%description smb_auth -l pl
-To jest modu³ uwierzytelniania proxy. Przy pomocy smb_auth mo¿na
-uwierzytelniaæ u¿ytkowników proxy na serwerach SMB, jak Windows NT czy
+%description smb_auth -l pl.UTF-8
+To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można
+uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy
Samba.
%package msnt_auth
Summary: MSNT domain authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania w domenie MSNT dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an authentication module for the Squid proxy server to
authenticate users on an NT domain.
-%description msnt_auth -l pl
-Jest to modu³ uwierzytelniania proxy, który pozwala na
-uwierzytelnianie u¿ytkowników proxy w domenie NT.
+%description msnt_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy w domenie NT.
-%package yp_auth
-Summary: YP authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania YP dla squida
+%package nis_auth
+Summary: NIS authentication helper for Squid
+Summary(pl.UTF-8): Obsługa uwierzytelniania NIS dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
+Provides: squid-yp_auth = %{epoch}:%{version}-%{release}
+Obsoletes: squid-yp_auth < %{epoch}:%{version}-%{release}
-%description yp_auth
+%description nis_auth
This is an authentication module for the Squid proxy server to
-authenticate users on YP.
+authenticate users on NIS.
-%description yp_auth -l pl
-Jest to modu³ uwierzytelniania proxy, który pozwala na
-uwierzytelnianie u¿ytkowników proxy poprzez YP.
+%description nis_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez NIS.
%package ncsa_auth
Summary: NCSA httpd style authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania NCSA httpd dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
%description ncsa_auth
This module uses a NCSA httpd style password file for authentication.
-%description ncsa_auth -l pl
-Modu³ uwierzytelniania proxy u¿ywaj±cy pliku hase³ jak w NCSA httpd.
+%description ncsa_auth -l pl.UTF-8
+Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd.
%package sasl_auth
Summary: SASL authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania SASL dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an authentication module for the Squid proxy server to
authenticate users via SASL.
-%description sasl_auth -l pl
-Jest to modu³ uwierzytelniania proxy, który pozwala na
-uwierzytelnianie u¿ytkowników proxy poprzez SASL.
-
-%package winbind_auth
-Summary: WINBIND authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania WINBIND dla squida
-Group: Networking/Admin
-Requires: %{name} = %{epoch}:%{version}-%{release}
-
-%description winbind_auth
-This is an authentication module for the Squid proxy server to
-authenticate users via WINBIND.
-
-%description winbind_auth -l pl
-Jest to modu³ uwierzytelniania proxy, który pozwala na
-uwierzytelnianie u¿ytkowników proxy poprzez WINBIND.
+%description sasl_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez SASL.
%package getpwname_auth
Summary: getpwname authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania getpwname dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an authentication module for the Squid proxy server to
authenticate users using getpwname.
-%description getpwname_auth -l pl
-Jest to modu³ uwierzytelniania proxy, który pozwala na
-uwierzytelnianie u¿ytkowników proxy poprzez getpwname.
+%description getpwname_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez getpwname.
%package passwd_auth
Summary: passwd authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania passwd dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an authentication module for the Squid proxy server to
authenticate users with separate passwd file.
-%description passwd_auth -l pl
-Jest to modu³ uwierzytelniania proxy, który pozwala na
-uwierzytelnianie u¿ytkowników proxy poprzez oddzielny plik passwd.
+%description passwd_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd.
%package ntlm_auth
Summary: NTLM authentication helper for Squid
-Summary(pl): Obs³uga uwierzytelniania NTLM dla squida
+Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an authentication module for the Squid proxy server to
authenticate users on NTLM.
-%description ntlm_auth -l pl
-Jest to modu³ uwierzytelniania proxy, który pozwala na
-uwierzytelnianie u¿ytkowników proxy poprzez NTLM.
+%description ntlm_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez NTLM.
+
+%package radius_auth
+Summary: RADIUS authentication helper for Squid
+Summary(pl.UTF-8): Obsługa uwierzytelniania RADIUS dla squida
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description radius_auth
+This helper allows Squid to connect to a RADIUS server to validate the
+user name and password of Basic HTTP authentication.
+
+%description radius_auth -l pl.UTF-8
+Program ten pozwala na uwierzytelnianie użytkowników squida przez
+serwer RADIUS.
+
+%package db_auth
+Summary: Database authentication helper for Squid
+Summary(pl.UTF-8): Obsługa uwierzytelniania przez bazę danych dla squida
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+Requires: perl-DBI
+Suggests: perl-DBD-mysql
+
+%description db_auth
+This is an authentication module for the Squid proxy server to
+authenticate users againsta a database.
+
+%description db_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez bazę danych.
+
+%package pop3_auth
+Summary: POP3 authentication helper for Squid
+Summary(pl.UTF-8): Obsługa uwierzytelniania POP3 dla squida
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description pop3_auth
+This is an authentication module for the Squid proxy server to
+authenticate users on POP3.
+
+%description pop3_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez POP3.
+
+%package negotiate_wrapper_auth
+Summary: Kerberos authentication helper for Squid
+Summary(pl.UTF-8): Obsługa uwierzytelniania Kerberos dla squida
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+Requires: %{name}-kerberos_auth = %{epoch}:%{version}-%{release}
+Requires: %{name}-ntlm_auth = %{epoch}:%{version}-%{release}
+
+%description negotiate_wrapper_auth
+This is an authentication module for the Squid proxy server to
+authenticate users on Kerberos.
+
+%description negotiate_wrapper_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez Kerberosa.
+
+%package digest_edirectory_auth
+Summary: eDirectory authentication helper for Squid
+Summary(pl.UTF-8): Obsługa uwierzytelniania eDirectory dla squida
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description digest_edirectory_auth
+This is an authentication module for the Squid proxy server to
+authenticate users on eDirectory.
+
+%description digest_edirectory_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez eDirectory.
+
+%package digest_ldap_auth
+Summary: LDAP authentication helper for Squid
+Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description digest_ldap_auth
+This is an authentication module for the Squid proxy server to
+authenticate users on LDAP.
+
+%description digest_ldap_auth -l pl.UTF-8
+Jest to moduł uwierzytelniania proxy, który pozwala na
+uwierzytelnianie użytkowników proxy poprzez LDAP.
%package ip_acl
Summary: IP external ACL helper for Squid
-Summary(pl): Wsparcie kontroli dostêpu przez IP dla squida
+Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an external ACL module for the Squid proxy server to limit
access for users based on IP address.
-%description ip_acl -l pl
-Jest to modu³ kontroli dostêpu (ACL) do proxy, który pozwala na
-ograniczenie dostêpu u¿ytkowników proxy na podstawie ich adresu IP.
+%description ip_acl -l pl.UTF-8
+Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
+ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP.
%package ldap_acl
Summary: LDAP group external ACL helper for Squid
-Summary(pl): Wsparcie kontroli dostêpu przez grupy LDAP dla squida
+Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an external ACL module for the Squid proxy server to limit
access for users based on LDAP group membership.
-%description ldap_acl -l pl
-Jest to modu³ kontroli dostêpu (ACL) do proxy, który pozwala na
-ograniczenie dostêpu u¿ytkowników proxy na podstawie ich
-przynale¿no¶ci do grup LDAP.
+%description ldap_acl -l pl.UTF-8
+Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
+ograniczenie dostępu użytkowników proxy na podstawie ich
+przynależności do grup LDAP.
%package unix_acl
Summary: UNIX group external ACL helper for Squid
-Summary(pl): Wsparcie kontroli dostêpu przez grupy UNIX dla squida
+Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an external ACL module for the Squid proxy server to limit
access for users based on UNIX group membership.
-%description unix_acl -l pl
-Jest to modu³ kontroli dostêpu (ACL) do proxy, który pozwala na
-ograniczenie dostêpu u¿ytkowników proxy na podstawie ich
-przynale¿no¶ci do grup UNIX.
+%description unix_acl -l pl.UTF-8
+Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
+ograniczenie dostępu użytkowników proxy na podstawie ich
+przynależności do grup UNIX.
%package wbinfo_acl
Summary: NT domain group external ACL helper for Squid
-Summary(pl): Wsparcie kontroli dostêpu przez grupy w domenie NT dla squida
+Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
This is an external ACL module for the Squid proxy server to limit
access for users based on NT domain group membership using wbinfo.
-%description wbinfo_acl -l pl
-Jest to modu³ kontroli dostêpu (ACL) do proxy, który pozwala na
-ograniczenie dostêpu u¿ytkowników proxy na podstawie ich
-przynale¿no¶ci do grup w domenie NT przy u¿yciu wbinfo.
+%description wbinfo_acl -l pl.UTF-8
+Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
+ograniczenie dostępu użytkowników proxy na podstawie ich
+przynależności do grup w domenie NT przy użyciu wbinfo.
-%package winbind_acl
-Summary: NT domain group external ACL helper for Squid
-Summary(pl): Wsparcie kontroli dostêpu przez grupy w domenie NT dla squida
+%package session_acl
+Summary: Squid session tracking external ACL group helper
+Summary(pl.UTF-8): Wsparcie kontroli dostępu przez śledzenie sesji
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description session_acl
+This helper maintains a concept of sessions by monitoring requests and
+timing out sessions if no requests have been seen for the idle timeout
+timer.
+
+%description session_acl -l pl.UTF-8
+Moduł oparty na koncepcji sesji, śledzący zapytania i wygaszający
+sesje jeśli w określonym czasie nie widziano w ich obrębie kolejnych
+zapytań.
+
+%package edirectory_userip_acl
+Summary: Squid eDirectory IP Lookup Helper
+Summary(pl.UTF-8): Wsparcie kontroli dostępu przez eDirectory
Group: Networking/Admin
Requires: %{name} = %{epoch}:%{version}-%{release}
-%description winbind_acl
+%description edirectory_userip_acl
This is an external ACL module for the Squid proxy server to limit
-access for users based on NT domain group membership based on Samba
-Winbindd from Samba 2.2.4 or greater.
+access for users based on IP address lookup in eDirectory.
+
+%description edirectory_userip_acl -l pl.UTF-8
+Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
+ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP
+popranego z eDirectory.
+
+%package kerberos_ldap_group_acl
+Summary: Squid LDAP external acl group helper for Kerberos or NTLM credentials
+Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP/Kerberos/NTLM dla squida
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description kerberos_ldap_group_acl
+This is an external ACL module for the Squid proxy server to limit
+access for users based on LDAP Kerberos or NTLM credentials.
+
+%description kerberos_ldap_group_acl -l pl.UTF-8
+Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
+ograniczenie dostępu użytkowników proxy na podstawie ich uprawnień
+Kerberosowych lub NTLM-owych w LDAP.
+
+%package sql_session_acl
+Summary: SQL Database session lookup helper for Squid
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description sql_session_acl
+Validates an HTTP requests access authorization with a session
+database.
-%description winbind_acl -l pl
-Jest to modu³ kontroli dostêpu (ACL) do proxy, który pozwala na
-ograniczenie dostêpu u¿ytkowników proxy na podstawie ich
-przynale¿no¶ci do grup w domenie NT oparty na Samba Winbindd z pakietu
-Samba 2.2.4 lub wy¿szego.
+%package time_quota_acl
+Summary: Squid time quota external acl helper
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description time_quota_acl
+This extension allows an administrator to define time budgets for the
+users of squid to limit the time using squid.
+
+%package log_db_daemon
+Summary: Database logging daemon for Squid
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description log_db_daemon
+This program writes Squid access.log entries to a database. Presently
+only accepts the squid native format.
+
+%package storeid_file_rewrite
+Summary: File based Store-ID helper for Squid
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description storeid_file_rewrite
+This program acts as a store_id helper program, rewriting URLs passed
+by Squid into storage-ids that can be used to achieve better caching
+for websites that use different URLs for the same content.
+
+%package scripts
+Summary: Perl scripts for Squid
+Summary(pl.UTF-8): Skrypty perlowe dla Squida
+Group: Networking/Admin
+Requires: %{name} = %{epoch}:%{version}-%{release}
+
+%description scripts
+This package contains Perl scripts and contributed programs for Squid.
+
+%description scripts -l pl.UTF-8
+Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida.
%prep
-%setup -q -a1 -a4
-# Bug fixes from Squid home page:
-%patch0 -p1
+%setup -q -a3
+
%patch1 -p1
%patch2 -p1
-%patch3 -p1
-%patch4 -p1
+%{?with_combined_log:%patch4 -p1}
+%ifarch ppc
%patch5 -p1
+%endif
%patch6 -p1
-%patch7 -p1
-%patch8 -p1
-%patch9 -p1
-%patch10 -p1
-%patch11 -p1
-# Other patches:
-%patch100 -p1
-%patch101 -p1
-%patch102 -p1
-%patch103 -p1
-%patch104 -p1
-%patch105 -p1
-%patch106 -p1
-%patch107 -p1
-%patch108 -p1
-%patch109 -p1
-%patch110 -p1
-%{?with_combined_log:%patch111 -p1}
+#%patch7 -p1
+
+%{__sed} -i -e '1s#!.*bin/perl#!%{__perl}#' {contrib,scripts}/*.pl
%build
+%{__libtoolize}
%{__aclocal}
%{__autoconf}
+%{__autoheader}
%{__automake}
%configure \
+ --disable-silent-rules \
+ --disable-strict-error-checking \
+ --with-default-user=squid \
+ --with-logdir=/var/log/squid \
+ --with-swapdir=/var/cache/squid \
+ --with-pidfile=/var/run/squid.pid \
--datadir=%{_datadir}/squid \
- --disable-ipf-transparent \
--enable-arp-acl \
- --enable-auth=yes \
- --enable-basic-auth-helpers=yes \
+ --enable-auth \
+ --enable-basic-auth-helpers \
+ --enable-ntlm-auth-helpers \
+ --enable-negotiate-auth-helpers \
+ --enable-digest-auth-helpers \
+ --enable-external-acl-helpers \
+ --enable-url-rewrite-helpers \
+ --enable-ntlm-fail-open \
--enable-cache-digests \
- --enable-carp \
+ --enable-coss-aio-ops \
--enable-delay-pools \
- --enable-digest-auth-helpers=yes \
--enable-err-language=English \
- --enable-external-acl-helpers=yes \
+ --enable-esi \
+ --enable-follow-x-forwarded-for \
+ --enable-forward-log \
--enable-forw-via-db \
--enable-htcp \
+ --enable-wccp \
+ --enable-wccpv2 \
+ --enable-icap-client \
+ --enable-ecap \
--enable-icmp \
+ --enable-kill-parent-hack \
+ --enable-large-cache-files \
--enable-linux-netfilter \
- --enable-ntlm-auth-helpers=yes \
+ --disable-linux-tproxy \
+ --enable-multicast-miss \
--enable-referer-log \
- --enable-removal-policies="lru heap" \
- --enable-ssl \
+ --enable-removal-policies="heap,lru" \
+ --enable-storeio="aufs,diskd,rock,ufs" \
+ --enable-storeid-rewrite-helpers="file" \
--enable-snmp \
- --enable-storeio="aufs,coss,diskd,null,ufs" \
- --enable-underscores \
+ --enable-ssl \
+ --enable-ipv6 \
--enable-useragent-log \
--enable-x-accelerator-vary \
--localstatedir=/var \
--sysconfdir=%{_sysconfdir} \
- --with-pthreads
+ --with-auth-on-acceleration \
+ --with-large-files \
+ --with-maxfd=32768 \
+ --with-pthreads \
+ --with-openssl \
+ --without-nettle \
+ --enable-zph-qos
%{__make}
-perl -pi -e 's#%{_prefix}/.*bin/perl#%{_bindir}/perl#g' contrib/*
-perl -pi -e 's#%{_prefix}/.*bin/perl#%{_bindir}/perl#g' scripts/*
-find helpers/ -type f | xargs perl -pi -e 's#%{_prefix}/.*bin/perl#%{_bindir}/perl#g'
-
%install
rm -rf $RPM_BUILD_ROOT
-install -d $RPM_BUILD_ROOT%{_cgidir} \
+install -d $RPM_BUILD_ROOT{%{_cgidir},%{_webapps}/%{_webapp}} \
$RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \
$RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \
$RPM_BUILD_ROOT%{_mandir}/man8 \
$RPM_BUILD_ROOT%{_datadir}/squid \
- $RPM_BUILD_ROOT/var/{cache,log{,/archiv}}/squid
+ $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid \
+ $RPM_BUILD_ROOT%{systemdtmpfilesdir} \
+ $RPM_BUILD_ROOT%{systemdunitdir}
%{__make} install \
DESTDIR=$RPM_BUILD_ROOT
-cp -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib
+%{__cp} -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib
install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir}
-install %{SOURCE7} $RPM_BUILD_ROOT/etc/pam.d/squid
+install %{SOURCE6} $RPM_BUILD_ROOT/etc/pam.d/squid
touch $RPM_BUILD_ROOT/etc/security/blacklist.squid
-mv -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir}
+install %{SOURCE8} $RPM_BUILD_ROOT%{systemdtmpfilesdir}/squid.conf
+
+%{__mv} -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir}
+%{__cp} -a %{SOURCE7} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/apache.conf
+%{__cp} -a %{SOURCE9} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/httpd.conf
+%{__rm} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/cachemgr.conf.default
cd $RPM_BUILD_ROOT/etc/squid
-cp -f squid.conf{,.default}
-patch -p0 < %{SOURCE5}
+%{__patch} -p0 < %{SOURCE4}
+%{__rm} *.default squid.conf.documented
cd -
-install %{SOURCE2} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid
-install %{SOURCE3} $RPM_BUILD_ROOT/etc/sysconfig/squid
-install %{SOURCE6} $RPM_BUILD_ROOT/etc/logrotate.d/squid
+install %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid
+install %{SOURCE2} $RPM_BUILD_ROOT/etc/sysconfig/squid
+install %{SOURCE5} $RPM_BUILD_ROOT/etc/logrotate.d/squid
touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log
-# These two files start squid. They are replaced by /etc/rc.d/init.d script.
-rm -f $RPM_BUILD_ROOT%{_bindir}/R*
-
-# dunno why, but manual is not installed
-mv doc/squid.8 $RPM_BUILD_ROOT%{_mandir}/man8
+%{__rm} $RPM_BUILD_ROOT%{_datadir}/squid/errors/{COPYRIGHT,TRANSLATORS}
+# cp, to have re-entrant install
+%{__rm} -rf docs
+%{__cp} -a doc docs
# We don't want Makefiles as docs...
-rm -f doc/Makefile*
+%{__rm} docs/Makefile*
+
+:> $RPM_BUILD_ROOT/var/cache/squid/netdb_state
+:> $RPM_BUILD_ROOT/var/cache/squid/swap.state
+:> $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean
+:> $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean
-# We don't like message: rpm found unpackaged files ...
-rm -f $RPM_BUILD_ROOT/etc/squid/msntauth.conf.default \
- $RPM_BUILD_ROOT/etc/squid/squid.conf.orig
+%{__sed} -e 's|@@LIBEXECDIR@@|%{_libexecdir}|g' %{SOURCE10} >$RPM_BUILD_ROOT%{systemdunitdir}/squid.service
+cp -p %{SOURCE11} $RPM_BUILD_ROOT%{_libexecdir}/squid-check_cache
%clean
rm -rf $RPM_BUILD_ROOT
-%triggerpostun -- squid < 7:2.5.STABLE7-5
+%pre
+%groupadd -g 91 squid
+%useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid
%addusertogroup stats squid
-%pre
-if [ -n "`/usr/bin/getgid squid`" ]; then
- if [ "`/usr/bin/getgid squid`" != "91" ]; then
- echo "Error: group squid doesn't have gid=91. Correct this before installing squid." 1>&2
- exit 1
- fi
-else
- /usr/sbin/groupadd -g 91 squid 1>&2
-fi
-if [ -n "`/bin/id -u squid 2>/dev/null`" ]; then
- if [ "`/bin/id -u squid`" != "91" ]; then
- echo "Error: user squid doesn't have uid=91. Correct this before installing squid." 1>&2
- exit 1
- fi
-else
- /usr/sbin/useradd -o -u 91 -s /bin/false -g squid \
- -c "SQUID http caching daemon" -d /var/cache/squid squid 1>&2
- %addusertogroup stats squid
-fi
-[ -L %{_datadir}/squid/errors ] && rm -rf %{_datadir}/squid/errors || :
+[ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || :
%post
if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then
- echo visible_hostname `/bin/hostname -f` >> /etc/squid/squid.conf
+ hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost'
+ echo visible_hostname $hostname >> /etc/squid/squid.conf
fi
+/sbin/chkconfig --add squid
if [ "$1" = "1" ]; then
- /sbin/chkconfig --add squid
- echo "Run \"/etc/rc.d/init.d/squid start\" to start squid." >&2
-else
- if [ -f /var/lock/subsys/squid ]; then
- /etc/rc.d/init.d/squid restart >&2
- fi
+ /sbin/service squid init >&2
fi
+%service squid restart
+%systemd_post squid.service
%preun
if [ "$1" = "0" ]; then
- if [ -f /var/lock/subsys/squid ]; then
- /etc/rc.d/init.d/squid stop >&2
- fi
/sbin/chkconfig --del squid
+ %service squid stop
+
+ # nuke squid cache if uninstalling
+ rm -rf /var/cache/squid/??
fi
+%systemd_preun squid.service
%postun
if [ "$1" = "0" ]; then
%userremove squid
%groupremove squid
fi
+%systemd_reload
+
+%triggerpostun -- squid < 7:2.5.STABLE7-5
+%addusertogroup stats squid
+
+%triggerpostun -- squid < 7:3.4.7-2
+%systemd_trigger squid.service
+
+%triggerin cachemgr -- apache1 < 1.3.37-3, apache1-base
+%webapp_register apache %{_webapp}
+
+%triggerun cachemgr -- apache1 < 1.3.37-3, apache1-base
+%webapp_unregister apache %{_webapp}
+
+%triggerin cachemgr -- apache-base
+%webapp_register httpd %{_webapp}
+
+%triggerun cachemgr -- apache-base
+%webapp_unregister httpd %{_webapp}
+
+%triggerpostun -- cachemgr < 7:3.0.STABLE10-0.2
+if [ -f %{_sysconfdir}/cachemgr.conf.rpmsave ]; then
+ cp -f %{_webapps}/%{_webapp}/cachemgr.conf{,.rpmsave}
+ mv -f %{_sysconfdir}/cachemgr.conf.rpmsave %{_webapps}/%{_webapp}/cachemgr.conf
+fi
%files
%defattr(644,root,root,755)
-%doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART RELEASENOTES.html SPONSORS
-%doc doc/* src/mib.txt FAQ*.html book-full.html
+%doc CONTRIBUTORS CREDITS README ChangeLog QUICKSTART
+%doc RELEASENOTES.html SPONSORS docs/* src/mib.txt book-full.html
+%doc src/squid.conf.default src/squid.conf.documented src/mime.conf.default
+%doc errors/TRANSLATORS
+%attr(755,root,root) %{_bindir}/purge
%attr(755,root,root) %{_bindir}/squidclient
+
+%dir %{_libexecdir}
%attr(755,root,root) %{_libexecdir}/diskd
# YES, it has to be suid root, it sends ICMP packets.
%attr(4754,root,squid) %{_libexecdir}/pinger
%attr(755,root,root) %{_libexecdir}/unlinkd
-%attr(755,root,root) %{_libexecdir}/fakeauth_auth
-%attr(755,root,root) %{_sbindir}/*
-
-%attr(755,root,root) %dir %{_sysconfdir}
+%attr(755,root,root) %{_libexecdir}/ntlm_fake_auth
+%attr(755,root,root) %{_libexecdir}/basic_fake_auth
+%attr(755,root,root) %{_libexecdir}/ext_delayer_acl
+%attr(755,root,root) %{_libexecdir}/helper-mux
+%attr(755,root,root) %{_libexecdir}/url_fake_rewrite
+%attr(755,root,root) %{_libexecdir}/url_fake_rewrite.sh
+%attr(755,root,root) %{_libexecdir}/log_file_daemon
+%attr(755,root,root) %{_libexecdir}/security_fake_certverify
+%attr(755,root,root) %{_libexecdir}/security_file_certgen
+%attr(755,root,root) %{_libexecdir}/squid-check_cache
+%attr(755,root,root) %{_libexecdir}/url_lfs_rewrite
+%attr(755,root,root) %{_sbindir}/squid
%attr(754,root,root) /etc/rc.d/init.d/squid
%attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid
-%attr(640,root,squid) %config(noreplace) /etc/sysconfig/squid
+%attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid
+
+%dir %{_sysconfdir}
%attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf
%attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf
-%attr(640,root,root) %{_sysconfdir}/mime.conf.default
-%attr(640,root,root) %{_sysconfdir}/squid.conf.default
+%attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/errorpage.css
%dir %{_datadir}/squid
%dir %{_datadir}/squid/errors
%{_datadir}/squid/icons
%{_datadir}/squid/mib.txt
-%lang(bg) %{_datadir}/squid/errors/Bulgarian
-%lang(ca) %{_datadir}/squid/errors/Catalan
-%lang(cs) %{_datadir}/squid/errors/Czech
-%lang(da) %{_datadir}/squid/errors/Danish
-%lang(nl) %{_datadir}/squid/errors/Dutch
-%{_datadir}/squid/errors/English
-%lang(et) %{_datadir}/squid/errors/Estonian
-%lang(fi) %{_datadir}/squid/errors/Finnish
-%lang(fr) %{_datadir}/squid/errors/French
-%lang(de) %{_datadir}/squid/errors/German
-%lang(he) %{_datadir}/squid/errors/Hebrew
-%lang(hu) %{_datadir}/squid/errors/Hungarian
-%lang(it) %{_datadir}/squid/errors/Italian
-%lang(ja) %{_datadir}/squid/errors/Japanese
-%lang(ko) %{_datadir}/squid/errors/Korean
-%lang(lt) %{_datadir}/squid/errors/Lithuanian
-%lang(pl) %{_datadir}/squid/errors/Polish
-%lang(pt) %{_datadir}/squid/errors/Portuguese
-%lang(ro) %{_datadir}/squid/errors/Romanian
-%lang(ru) %{_datadir}/squid/errors/Russian-1251
-%lang(ru) %{_datadir}/squid/errors/Russian-koi8-r
-%lang(zh_CN) %{_datadir}/squid/errors/Simplify_Chinese
-%lang(sk) %{_datadir}/squid/errors/Slovak
-%lang(es) %{_datadir}/squid/errors/Spanish
-%lang(sr) %{_datadir}/squid/errors/Serbian
-%lang(sv) %{_datadir}/squid/errors/Swedish
-%lang(zh_TW) %{_datadir}/squid/errors/Traditional_Chinese
-%lang(tr) %{_datadir}/squid/errors/Turkish
-
-%attr(755,root,root) %dir %{_libexecdir}
-%attr(755,root,root) %{_libexecdir}/*.pl
-%attr(755,root,root) %{_libexecdir}/contrib
-
-%attr(770,root,squid) %dir /var/log/archiv/squid
+%{_datadir}/squid/errors/templates
+%lang(af) %{_datadir}/squid/errors/af
+%lang(ar) %{_datadir}/squid/errors/ar
+%lang(ar) %{_datadir}/squid/errors/ar-*
+%lang(az) %{_datadir}/squid/errors/az
+%lang(az) %{_datadir}/squid/errors/az-*
+%lang(bg) %{_datadir}/squid/errors/bg
+%lang(bg) %{_datadir}/squid/errors/bg-*
+%lang(ca) %{_datadir}/squid/errors/ca
+%lang(cs) %{_datadir}/squid/errors/cs
+%lang(cs) %{_datadir}/squid/errors/cs-*
+%lang(da) %{_datadir}/squid/errors/da
+%lang(da) %{_datadir}/squid/errors/da-*
+%lang(de) %{_datadir}/squid/errors/de
+%lang(de) %{_datadir}/squid/errors/de-*
+%lang(el) %{_datadir}/squid/errors/el
+%lang(el) %{_datadir}/squid/errors/el-*
+%{_datadir}/squid/errors/en
+%{_datadir}/squid/errors/en-*
+%lang(es) %{_datadir}/squid/errors/es
+%lang(es) %{_datadir}/squid/errors/es-*
+%lang(et) %{_datadir}/squid/errors/et
+%lang(et) %{_datadir}/squid/errors/et-*
+%lang(fa) %{_datadir}/squid/errors/fa
+%lang(fa) %{_datadir}/squid/errors/fa-*
+%lang(fi) %{_datadir}/squid/errors/fi
+%lang(fi) %{_datadir}/squid/errors/fi-*
+%lang(fr) %{_datadir}/squid/errors/fr
+%lang(fr) %{_datadir}/squid/errors/fr-*
+%lang(he) %{_datadir}/squid/errors/he
+%lang(he) %{_datadir}/squid/errors/he-*
+%lang(hu) %{_datadir}/squid/errors/hu
+%lang(hu) %{_datadir}/squid/errors/hu-*
+%lang(hy) %{_datadir}/squid/errors/hy
+%lang(hy) %{_datadir}/squid/errors/hy-*
+%lang(id) %{_datadir}/squid/errors/id
+%lang(id) %{_datadir}/squid/errors/id-*
+%lang(it) %{_datadir}/squid/errors/it
+%lang(it) %{_datadir}/squid/errors/it-*
+%lang(ja) %{_datadir}/squid/errors/ja
+%lang(ja) %{_datadir}/squid/errors/ja-*
+%lang(ka) %{_datadir}/squid/errors/ka
+%lang(ka) %{_datadir}/squid/errors/ka-*
+%lang(ko) %{_datadir}/squid/errors/ko
+%lang(ko) %{_datadir}/squid/errors/ko-*
+%lang(lt) %{_datadir}/squid/errors/lt
+%lang(lt) %{_datadir}/squid/errors/lt-*
+%lang(lv) %{_datadir}/squid/errors/lv
+%lang(lv) %{_datadir}/squid/errors/lv-*
+%lang(ms) %{_datadir}/squid/errors/ms
+%lang(ms) %{_datadir}/squid/errors/ms-*
+%lang(nl) %{_datadir}/squid/errors/nl
+%lang(nl) %{_datadir}/squid/errors/nl-*
+%lang(oc) %{_datadir}/squid/errors/oc
+%lang(pl) %{_datadir}/squid/errors/pl
+%lang(pl) %{_datadir}/squid/errors/pl-*
+%lang(pt) %{_datadir}/squid/errors/pt
+%lang(pt) %{_datadir}/squid/errors/pt-pt
+%lang(pt_BR) %{_datadir}/squid/errors/pt-br
+%lang(pt_BZ) %{_datadir}/squid/errors/pt-bz
+%lang(ro) %{_datadir}/squid/errors/ro
+%lang(ro) %{_datadir}/squid/errors/ro-*
+%lang(ru) %{_datadir}/squid/errors/ru
+%lang(ru) %{_datadir}/squid/errors/ru-*
+%lang(sk) %{_datadir}/squid/errors/sk
+%lang(sk) %{_datadir}/squid/errors/sk-*
+%lang(sk) %{_datadir}/squid/errors/sl
+%lang(sk) %{_datadir}/squid/errors/sl-*
+%lang(sr) %{_datadir}/squid/errors/sr
+%lang(sr) %{_datadir}/squid/errors/sr-*
+%lang(sv) %{_datadir}/squid/errors/sv
+%lang(sv) %{_datadir}/squid/errors/sv-*
+%lang(th) %{_datadir}/squid/errors/th
+%lang(th) %{_datadir}/squid/errors/th-*
+%lang(tr) %{_datadir}/squid/errors/tr
+%lang(tr) %{_datadir}/squid/errors/tr-*
+%lang(uk) %{_datadir}/squid/errors/uk
+%lang(uk) %{_datadir}/squid/errors/uk-*
+%lang(uz) %{_datadir}/squid/errors/uz
+%lang(vi) %{_datadir}/squid/errors/vi
+%lang(vi) %{_datadir}/squid/errors/vi-*
+%lang(zh_CN) %{_datadir}/squid/errors/zh-cn
+%lang(zh_CN) %{_datadir}/squid/errors/zh-han*
+%lang(zh_CN) %{_datadir}/squid/errors/zh-sg
+%lang(zh_CN) %{_datadir}/squid/errors/zh-tw
+%lang(zh_TW) %{_datadir}/squid/errors/zh-hk
+%lang(zh_TW) %{_datadir}/squid/errors/zh-mo
+
+%{systemdunitdir}/squid.service
+%{systemdtmpfilesdir}/squid.conf
+%attr(770,root,squid) %dir /var/run/squid
+
+%attr(770,root,squid) %dir /var/log/archive/squid
%attr(770,root,squid) %dir /var/log/squid
%attr(660,root,squid) %ghost /var/log/squid/*
%attr(770,root,squid) %dir /var/cache/squid
+%ghost /var/cache/squid/netdb_state
+%ghost /var/cache/squid/swap.state
+%ghost /var/cache/squid/swap.state.clean
+%ghost /var/cache/squid/swap.state.last-clean
+%{_mandir}/man1/purge.1*
+%{_mandir}/man1/squidclient.1*
+%{_mandir}/man8/ext_delayer_acl.8*
%{_mandir}/man8/squid.8*
+%{_mandir}/man8/helper-mux.8*
+%{_mandir}/man8/security_fake_certverify.8*
+%{_mandir}/man8/security_file_certgen.8*
+%{_mandir}/man8/url_lfs_rewrite.8*
%files cachemgr
%defattr(644,root,root,755)
-%attr(755,root,root) %{_cgidir}/*
+%dir %attr(750,root,http) %{_webapps}/%{_webapp}
+%attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/apache.conf
+%attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/httpd.conf
+%attr(640,root,http) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/cachemgr.conf
+%dir %{_cgidir}
+%attr(755,root,root) %{_cgidir}/cachemgr.cgi
+%{_mandir}/man8/cachemgr.cgi.8*
%files ldap_auth
%defattr(644,root,root,755)
-%doc helpers/basic_auth/LDAP/README
-%attr(755,root,root) %{_libexecdir}/%{name}_ldap_auth
-%{_mandir}/man8/%{name}_ldap_auth.*
+%attr(755,root,root) %{_libexecdir}/basic_ldap_auth
+%{_mandir}/man8/basic_ldap_auth.*
%files pam_auth
%defattr(644,root,root,755)
-%doc helpers/basic_auth/PAM/pam_auth.c
%config(noreplace) /etc/pam.d/squid
%config(noreplace) /etc/security/blacklist.squid
-%attr(755,root,root) %{_libexecdir}/pam_auth
-%{_mandir}/man8/pam_auth.8*
+# it has to be suid root to access /etc/shadow
+%attr(4755,root,root) %{_libexecdir}/basic_pam_auth
+%{_mandir}/man8/basic_pam_auth.8*
%files smb_auth
%defattr(644,root,root,755)
-%doc helpers/basic_auth/SMB/{README,ChangeLog,smb_auth.sh}
-%doc helpers/basic_auth/multi-domain-NTLM/*
-%attr(755,root,root) %{_libexecdir}/smb_auth*
+%doc src/auth/basic/SMB/ChangeLog
+%attr(755,root,root) %{_libexecdir}/basic_smb_auth*
%files msnt_auth
%defattr(644,root,root,755)
-%doc helpers/basic_auth/MSNT/README*
-%attr(755,root,root) %{_libexecdir}/msnt_auth
-%attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf
+#%attr(755,root,root) %{_libexecdir}/basic_msnt_multi_domain_auth
+#%{_mandir}/man8/basic_msnt_multi_domain_auth.8*
-%files yp_auth
+%files nis_auth
%defattr(644,root,root,755)
-%attr(755,root,root) %{_libexecdir}/yp_auth
+%attr(755,root,root) %{_libexecdir}/basic_nis_auth
%files ncsa_auth
%defattr(644,root,root,755)
-%attr(755,root,root) %{_libexecdir}/ncsa_auth
+%attr(755,root,root) %{_libexecdir}/basic_ncsa_auth
+%{_mandir}/man8/basic_ncsa_auth.8*
%files sasl_auth
%defattr(644,root,root,755)
-%doc helpers/basic_auth/SASL/{README,squid_sasl*}
-%attr(755,root,root) %{_libexecdir}/sasl_auth
-
-%files winbind_auth
-%defattr(644,root,root,755)
-%attr(755,root,root) %{_libexecdir}/wb_auth
+%doc src/auth/basic/SASL/basic_sasl_auth.{conf,pam}
+%attr(755,root,root) %{_libexecdir}/basic_sasl_auth
+%{_mandir}/man8/basic_sasl_auth.8*
%files getpwname_auth
%defattr(644,root,root,755)
-%attr(755,root,root) %{_libexecdir}/getpwname_auth
+%attr(755,root,root) %{_libexecdir}/basic_getpwnam_auth
+%{_mandir}/man8/basic_getpwnam_auth.8*
%files passwd_auth
%defattr(644,root,root,755)
-%attr(755,root,root) %{_libexecdir}/digest_pw_auth
+%attr(755,root,root) %{_libexecdir}/digest_file_auth
+%{_mandir}/man8/digest_file_auth.8*
+
+%files kerberos_auth
+%defattr(644,root,root,755)
+%doc src/auth/negotiate/kerberos/README
+%attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth
+%attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth_test
+%{_mandir}/man8/negotiate_kerberos_auth.8*
%files ntlm_auth
%defattr(644,root,root,755)
-%doc helpers/ntlm_auth/no_check/{README*,no_check.pl}
-%attr(755,root,root) %{_libexecdir}/wb_ntlmauth
-%attr(755,root,root) %{_libexecdir}/ntlm_auth
+#%attr(755,root,root) %{_libexecdir}/ntlm_smb_lm_auth
+
+%files radius_auth
+%defattr(644,root,root,755)
+%doc src/auth/basic/RADIUS/README
+%attr(755,root,root) %{_libexecdir}/basic_radius_auth
+%{_mandir}/man8/basic_radius_auth.8*
+
+%files digest_ldap_auth
+%defattr(644,root,root,755)
+%attr(755,root,root) %{_libexecdir}/digest_ldap_auth
+
+%files db_auth
+%defattr(644,root,root,755)
+%attr(755,root,root) %{_libexecdir}/basic_db_auth
+%{_mandir}/man8/basic_db_auth.8*
+
+%files pop3_auth
+%defattr(644,root,root,755)
+%{_libexecdir}/basic_pop3_auth
+%{_mandir}/man8/basic_pop3_auth.8*
+
+%files digest_edirectory_auth
+%defattr(644,root,root,755)
+%{_libexecdir}/digest_edirectory_auth
+
+%files negotiate_wrapper_auth
+%defattr(644,root,root,755)
+%{_libexecdir}/negotiate_wrapper_auth
%files ip_acl
%defattr(644,root,root,755)
-%doc helpers/external_acl/ip_user/{README,example*}
-%attr(755,root,root) %{_libexecdir}/ip_user_check
+%doc src/acl/external/file_userip/example*
+%attr(755,root,root) %{_libexecdir}/ext_file_userip_acl
+%{_mandir}/man8/ext_file_userip_acl.*
%files ldap_acl
%defattr(644,root,root,755)
-%attr(755,root,root) %{_libexecdir}/squid_ldap_group
-%{_mandir}/man8/%{name}_ldap_group.*
+%attr(755,root,root) %{_libexecdir}/ext_ldap_group_acl
+%{_mandir}/man8/ext_ldap_group_acl.*
%files unix_acl
%defattr(644,root,root,755)
-%doc helpers/external_acl/unix_group/README
-%attr(755,root,root) %{_libexecdir}/squid_unix_group
-%{_mandir}/man8/%{name}_unix_group.*
+%attr(755,root,root) %{_libexecdir}/ext_unix_group_acl
+%{_mandir}/man8/ext_unix_group_acl.*
%files wbinfo_acl
%defattr(644,root,root,755)
-%attr(755,root,root) %{_libexecdir}/wbinfo_group.pl
+%attr(755,root,root) %{_libexecdir}/ext_wbinfo_group_acl
+%{_mandir}/man8/ext_wbinfo_group_acl.8*
+
+%files session_acl
+%defattr(644,root,root,755)
+%attr(755,root,root) %{_libexecdir}/ext_session_acl
+%{_mandir}/man8/ext_session_acl.8*
+
+%files edirectory_userip_acl
+%defattr(644,root,root,755)
+%{_libexecdir}/ext_edirectory_userip_acl
+%{_mandir}/man8/ext_edirectory_userip_acl.8*
+
+%files kerberos_ldap_group_acl
+%defattr(644,root,root,755)
+%{_libexecdir}/ext_kerberos_ldap_group_acl
-%files winbind_acl
+%files sql_session_acl
%defattr(644,root,root,755)
-%doc helpers/external_acl/winbind_group/readme.txt
-%attr(755,root,root) %{_libexecdir}/wb_group
+%{_libexecdir}/ext_sql_session_acl
+%{_mandir}/man8/ext_sql_session_acl.8*
+
+%files time_quota_acl
+%defattr(644,root,root,755)
+%{_libexecdir}/ext_time_quota_acl
+%{_mandir}/man8/ext_time_quota_acl.8*
+
+%files log_db_daemon
+%defattr(644,root,root,755)
+%{_libexecdir}/log_db_daemon
+%{_mandir}/man8/log_db_daemon.8*
+
+%files storeid_file_rewrite
+%defattr(644,root,root,755)
+%{_libexecdir}/storeid_file_rewrite
+%{_mandir}/man8/storeid_file_rewrite.8*
+
+%files scripts
+%defattr(644,root,root,755)
+%attr(755,root,root) %{_libexecdir}/contrib
+%attr(755,root,root) %{_libexecdir}/AnnounceCache.pl
+%attr(755,root,root) %{_libexecdir}/access-log-matrix.pl
+%attr(755,root,root) %{_libexecdir}/cache-compare.pl
+%attr(755,root,root) %{_libexecdir}/cachetrace.pl
+%attr(755,root,root) %{_libexecdir}/calc-must-ids.pl
+%attr(755,root,root) %{_libexecdir}/cert_tool
+%attr(755,root,root) %{_libexecdir}/check_cache.pl
+%attr(755,root,root) %{_libexecdir}/fileno-to-pathname.pl
+%attr(755,root,root) %{_libexecdir}/find-alive.pl
+%attr(755,root,root) %{_libexecdir}/flag_truncs.pl
+%attr(755,root,root) %{_libexecdir}/icpserver.pl
+%attr(755,root,root) %{_libexecdir}/icp-test.pl
+%attr(755,root,root) %{_libexecdir}/tcp-banger.pl
+%attr(755,root,root) %{_libexecdir}/trace-job.pl
+%attr(755,root,root) %{_libexecdir}/trace-master.pl
+%attr(755,root,root) %{_libexecdir}/udp-banger.pl
+%attr(755,root,root) %{_libexecdir}/upgrade-1.0-store.pl