2 # - REVIEW patches and configuration
4 # For this to work correctly, you will need to patch your linux
5 # kernel with the TOS preserving ZPH patch.
6 # The kernel patch can be downloaded from http://zph.bratcheda.org
9 %bcond_with combined_log # enables apache-like combined log format
11 Summary: SQUID Internet Object Cache
12 Summary(es.UTF-8): proxy/cache para WWW/FTP/gopher
13 Summary(pl.UTF-8): Uniwersalny serwer proxy-cache
14 Summary(pt_BR.UTF-8): Cache Squid de objetos Internet
15 Summary(ru.UTF-8): Squid - кэш объектов Internet
16 Summary(uk.UTF-8): Squid - кеш об'єктів Internet
17 Summary(zh_CN.UTF-8): SQUID 高速缓冲代理服务器
23 Group: Networking/Daemons
24 Source0: http://www.squid-cache.org/Versions/v3/3.4/%{name}-%{version}.tar.xz
25 # Source0-md5: 74677634121649ccb87a5655fcd4298d
27 Source2: %{name}.sysconfig
28 Source3: http://squid-docs.sourceforge.net/latest/zip-files/book-full-html.zip
29 # Source3-md5: 4f3b6dab1de9cbb847df89d8b417378a
30 Source4: %{name}.conf.patch
31 Source5: %{name}.logrotate
33 Source7: %{name}-cachemgr-apache.conf
34 Source8: %{name}.tmpfiles
35 Source9: %{name}-cachemgr-httpd.conf
36 Patch0: %{name}-fhs.patch
37 Patch1: %{name}-location.patch
38 Patch2: %{name}-crash-on-ENOSPC.patch
39 Patch4: %{name}-2.5.STABLE4-apache-like-combined-log.patch
40 Patch5: %{name}-ppc-m32.patch
41 Patch6: %{name}-cachemgr-webapp.patch
42 # http://www.squid-cache.org/mail-archive/squid-dev/201207/att-0177/squidv3-vary-headers-shm-hack.patch
43 Patch7: squidv3-vary-headers-shm-hack.patch
44 Patch8: ecap-1p0-t2.patch
45 Patch9: digest-edirectory-m4.patch
46 URL: http://www.squid-cache.org/
47 BuildRequires: autoconf
48 BuildRequires: automake
49 BuildRequires: cppunit-devel
50 BuildRequires: cyrus-sasl-devel >= 2.1.0
51 BuildRequires: db-devel
52 BuildRequires: expat-devel
53 BuildRequires: heimdal-devel
54 BuildRequires: libcap-devel >= 1:2.09
55 BuildRequires: libecap-devel >= 0.2.0
56 BuildRequires: libltdl-devel
57 BuildRequires: libnetfilter_conntrack-devel
58 BuildRequires: libstdc++-devel
59 BuildRequires: libtool
60 BuildRequires: libxml2-devel
61 BuildRequires: openldap-devel >= 2.3.0
62 BuildRequires: openssl-devel >= 0.9.7d
63 BuildRequires: pam-devel
64 BuildRequires: perl-base
65 BuildRequires: rpmbuild(macros) >= 1.268
66 BuildRequires: sed >= 4.0
67 BuildRequires: tar >= 1:1.22
70 Requires(post): /bin/hostname
71 Requires(post): fileutils
72 Requires(post): findutils
74 Requires(post,preun): /sbin/chkconfig
75 Requires(postun): /usr/sbin/groupdel
76 Requires(postun): /usr/sbin/userdel
77 Requires(pre): /usr/bin/getgid
78 Requires(pre): /usr/lib/rpm/user_group.sh
79 Requires(pre): /usr/sbin/groupadd
80 Requires(pre): /usr/sbin/useradd
81 Requires(pre,triggerpostun): /bin/id
82 Requires(pre,triggerpostun): /usr/sbin/usermod
83 Requires: rc-scripts >= 0.2.0
84 Requires: setup >= 2.4.6
85 Provides: group(squid)
86 # epoll enabled by default:
87 Requires: uname(release) >= 2.6
88 # TPROXYv4 (v2 disabled b/c it breaks v4)
89 #Suggests: uname(release) >= 2.6.28.3
91 Conflicts: logrotate < 3.8.0
92 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
94 %define _webapps /etc/webapps
95 %define _webapp cachemgr
96 %define _libexecdir %{_libdir}/%{name}
97 %define _sysconfdir /etc/%{name}
98 %define _cgidir %{_prefix}/lib/cgi-bin/%{_webapp}
101 Squid is a high-performance proxy caching server for web clients,
102 supporting FTP, gopher, and HTTP data objects. Unlike traditional
103 caching software, Squid handles all requests in a single,
104 non-blocking, I/O-driven process. Squid keeps meta data and especially
105 hot objects cached in RAM, caches DNS lookups, supports non-blocking
106 DNS lookups, and implements negative caching of failed requests. If
107 you are tight on memory, check out the NOVM version of this package.
108 Squid supports SSL, extensive access controls, and full request
109 logging. By using the lightweight Internet Cache Protocol, Squid
110 caches can be arranged in a hierarchy or mesh for additional bandwidth
111 savings. Squid consists of a main server program squid, a Domain Name
112 System lookup program dnsserver, a program for retrieving FTP data
113 ftpget, and some management and client tools. When squid starts up, it
114 spawns a configurable number of dnsserver processes, each of which can
115 perform a single, blocking Domain Name System (DNS) lookup. This
116 reduces the amount of time the cache waits for DNS lookups. Squid is
117 derived from the ARPA-funded Harvest project.
119 %description -l es.UTF-8
120 Squid es un servidor proxy con caché de alto desempeño para clientes
121 web, soportando FTP, gopher y HTTP. Diferentemente de softwares
122 tradicionales de caché squid manipula todas las requisiciones en un
123 único proceso sin bloqueos, direccionado a E/S. Mantienen metadatos y
124 objetos frecuentemente pedidos en uno caché en memoria RAM. Hace caché
125 de resoluciones DNS, soporta resoluciones DNS sin bloqueo y implementa
126 un caché negativo de requisiciones que fallen. Si tiene poca memoria
127 da un vistazo en la versión NOVM de este paquete. También soporta SSL,
128 controles extensivos de acceso y registro (log) completo de las
129 requisiciones. Usando el ligero Protocolo de Caches Internet (ICP)
130 puede ser usado en una jerarquía de servidores para mayor ahorro de la
131 banda de comunicación. Está compuesto del programa squid (servidor
132 principal), del programa dnsserver (para resolución DNS), del programa
133 ftpget (para transmisiones ftp) y otras herramientas clientes y para
134 administración. Cuando squid se inicia, dispara un número configurable
135 de procesos dnsserver, cada uno pudiendo ejecutar solamente una
136 resolución DNS con poder de bloquear. Esto reduce el tiempo que el
137 caché espera por resoluciones DNS. Fue derivado del proyecto Harvest,
138 financiado por la ARPA.
140 %description -l pl.UTF-8
141 Squid jest wysoce wydajnym serwerem proxy-cache dla przeglądarek WWW,
142 klientów FTP i gopher. Squid przechowuje najczęściej pobierane dane w
143 pamięci RAM i zapamiętuje odwołania do DNS. Squid oferuje wsparcie dla
144 SSL, rozbudowaną kontrolę dostępu oraz pełne rejestrowanie pobieranych
145 danych. Dzięki użyciu protokołu ICP (Internet Cache Protocol), serwer
146 squid można łączyć w hierarchię, zwiększając ich efektywność. Pakiet
147 squid obejmuje: główny program serwera squid, program dostarczający
148 informacji z DNS dnsserver, program odbierający dane FTP ftpget, oraz
149 pomocnicze programy do zarządzania. Squid wywodzi się ze
150 sponsorowanego przez ARPA projektu Harvest.
152 %description -l pt_BR.UTF-8
153 O Squid é um servidor proxy com cache de alta performance para
154 clientes web, suportando FTP, gopher e HTTP. Diferentemente de
155 softwares tradicionais de cache o squid manipula todas as requisições
156 em um único processo sem bloqueios, direcionado a E/S.
158 Mantém meta dados e objetos freqüentemente pedidos num cache em
159 memória RAM. Faz cache de resoluções DNS, suporta resoluções DNS sem
160 bloqueio e implementa um cache negativo de requisições que falharem.
161 Se você tem pouca memória dê uma olhada na versão NOVM deste pacote.
163 Também suporta SSL, controles extensivos de acesso e registro (log)
164 completo das requisições. Usando o leve Protocolo de Caches Internet
165 (ICP) ele pode ser usado em uma hierarquia de servidores para maior
166 economia de banda de comunicação.
168 Ele consiste do programa squid (servidor principal), do programa
169 dnsserver (para resolução DNS), do programa ftpget (para transmissões
170 ftp) e outras ferramentas clientes e para gerenciamento. Quando o
171 squid é inicializado ele dispara um número configurável de processos
172 dnsserver, cada um podendo executar somente uma resolução DNS
173 bloqueante. Isto reduz o tempo que o cache espera por resoluções DNS.
175 Foi derivado do projeto Harvest, financiado pela ARPA.
177 %description -l ru.UTF-8
178 Squid - это высокопроизводительный кэширующий прокси-сервер для
179 клиентов web, поддерживающий объекты данных типа FTP, gopher и HTTP. В
180 отличие от традиционных кэширующих программ, Squid обрабатывает все
181 запросы при помощи одного неблокирующегося, управляемого
182 вводом-выводом процесса.
184 Этот пакет имеет встроенную поддержку базы данных сетевых ICMP-проб
187 %description -l uk.UTF-8
188 Squid - це кешуючий проксі-сервер для web-клієнтів, що підтримує
189 об'єкти даних типу FTP, gopher та HTTP. На відміну від традиційних
190 кешуючих програм, Squid обробляє всі запити за допомогою одного
191 неблокуючого, керованого вводом-виводом процесу.
193 Цей пакет має вбудовану підтримку бази даних мережевих ICMP-проб
197 Summary: CGI script for Squid management
198 Summary(pl.UTF-8): Skrypt CGI do zarządzania Squidem przez WWW
199 Group: Applications/WWW
200 # does not require squid locally
201 Requires: group(http)
204 Requires: webserver(access)
205 Requires: webserver(alias)
206 Requires: webserver(cgi)
207 Conflicts: apache-base < 2.4.0-1
209 %description cachemgr
210 Cachemgr.cgi is a CGI script that allows administrator to check
211 various informations about Squid via WWW.
213 %description cachemgr -l pl.UTF-8
214 Cachemgr.cgi jest skryptem CGI, który pozwala administratorowi
215 zapoznać się z informacjami o pracy Squida poprzez WWW.
217 %package kerberos_auth
218 Summary: Authentication via the Negotiate RFC 4559 for proxies
219 Summary(pl.UTF-8): Uwierzytelnianie przez negocjację RFC 4559 dla serwerów proxy
220 Group: Networking/Admin
221 Requires: %{name} = %{epoch}:%{version}-%{release}
222 Provides: squid-kerb_auth = %{epoch}:%{version}-%{release}
223 Obsoletes: squid-kerb_auth < %{epoch}:%{version}-%{release}
225 %description kerberos_auth
226 This squid helper is a reference implementation that supports
227 authentication via the Negotiate RFC 4559 for proxies. It decodes RFC
228 2478 SPNEGO GSS-API tokens from IE7 either through helper functions or
229 via SPNEGO supporting Kerberos libraries and RFC 1964 Kerberos tokens
230 from Firefox on Linux.
232 %description kerberos_auth -l pl.UTF-8
233 Pakiet ten jest implementacją uwierzytelniania przez negocjacji RFC
234 4559 dla serwerów proxy. Dekoduje żetony SPNEGO GSS-API RFC 2478 z IE7
235 poprzez funkcje pomocnicze lub przez biblioteki Kerberos wspierające
236 SPNEGO i żetony Kerberos RFC 1964 z Firefoksa w Linuksie.
239 Summary: LDAP authentication helper for Squid
240 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
241 Group: Networking/Admin
242 Requires: %{name} = %{epoch}:%{version}-%{release}
244 %description ldap_auth
245 This Squid helper allows authentication against LDAP directories using
246 the "simple authentication" (plain-text).
248 %description ldap_auth -l pl.UTF-8
249 Pakiet ten pozwala na uwierzytelnianie przez LDAP za pomocą prostego
250 uwierzytelniania (otwartym tekstem).
253 Summary: PAM authentication helper for Squid
254 Summary(pl.UTF-8): Obsługa uwierzytelniania PAM dla squida
255 Group: Networking/Admin
256 Requires: %{name} = %{epoch}:%{version}-%{release}
257 Requires: pam >= 0.77.3
259 %description pam_auth
260 This program authenticates users against a PAM configured
261 authentication service "squid". This allows you to authenticate Squid
262 users to any authentication source for which you have a PAM module.
264 %description pam_auth -l pl.UTF-8
265 Program ten pozwala na uwierzytelnianie użytkowników squida w dowolnym
266 źródle posiadającym moduł PAM.
269 Summary: SMB authentication helper for Squid
270 Summary(pl.UTF-8): Obsługa uwierzytelniania SMB dla squida
271 Group: Networking/Admin
272 Requires: %{name} = %{epoch}:%{version}-%{release}
274 %description smb_auth
275 This is a proxy authentication module. With smb_auth you can
276 authenticate proxy users against an SMB server like Windows NT or
279 %description smb_auth -l pl.UTF-8
280 To jest moduł uwierzytelniania proxy. Przy pomocy smb_auth można
281 uwierzytelniać użytkowników proxy na serwerach SMB, jak Windows NT czy
285 Summary: MSNT domain authentication helper for Squid
286 Summary(pl.UTF-8): Obsługa uwierzytelniania w domenie MSNT dla squida
287 Group: Networking/Admin
288 Requires: %{name} = %{epoch}:%{version}-%{release}
290 %description msnt_auth
291 This is an authentication module for the Squid proxy server to
292 authenticate users on an NT domain.
294 %description msnt_auth -l pl.UTF-8
295 Jest to moduł uwierzytelniania proxy, który pozwala na
296 uwierzytelnianie użytkowników proxy w domenie NT.
299 Summary: NIS authentication helper for Squid
300 Summary(pl.UTF-8): Obsługa uwierzytelniania NIS dla squida
301 Group: Networking/Admin
302 Requires: %{name} = %{epoch}:%{version}-%{release}
303 Provides: squid-yp_auth = %{epoch}:%{version}-%{release}
304 Obsoletes: squid-yp_auth < %{epoch}:%{version}-%{release}
306 %description nis_auth
307 This is an authentication module for the Squid proxy server to
308 authenticate users on NIS.
310 %description nis_auth -l pl.UTF-8
311 Jest to moduł uwierzytelniania proxy, który pozwala na
312 uwierzytelnianie użytkowników proxy poprzez NIS.
315 Summary: NCSA httpd style authentication helper for Squid
316 Summary(pl.UTF-8): Obsługa uwierzytelniania NCSA httpd dla squida
317 Group: Networking/Admin
318 Requires: %{name} = %{epoch}:%{version}-%{release}
320 %description ncsa_auth
321 This module uses a NCSA httpd style password file for authentication.
323 %description ncsa_auth -l pl.UTF-8
324 Moduł uwierzytelniania proxy używający pliku haseł jak w NCSA httpd.
327 Summary: SASL authentication helper for Squid
328 Summary(pl.UTF-8): Obsługa uwierzytelniania SASL dla squida
329 Group: Networking/Admin
330 Requires: %{name} = %{epoch}:%{version}-%{release}
332 %description sasl_auth
333 This is an authentication module for the Squid proxy server to
334 authenticate users via SASL.
336 %description sasl_auth -l pl.UTF-8
337 Jest to moduł uwierzytelniania proxy, który pozwala na
338 uwierzytelnianie użytkowników proxy poprzez SASL.
340 %package getpwname_auth
341 Summary: getpwname authentication helper for Squid
342 Summary(pl.UTF-8): Obsługa uwierzytelniania getpwname dla squida
343 Group: Networking/Admin
344 Requires: %{name} = %{epoch}:%{version}-%{release}
346 %description getpwname_auth
347 This is an authentication module for the Squid proxy server to
348 authenticate users using getpwname.
350 %description getpwname_auth -l pl.UTF-8
351 Jest to moduł uwierzytelniania proxy, który pozwala na
352 uwierzytelnianie użytkowników proxy poprzez getpwname.
355 Summary: passwd authentication helper for Squid
356 Summary(pl.UTF-8): Obsługa uwierzytelniania passwd dla squida
357 Group: Networking/Admin
358 Requires: %{name} = %{epoch}:%{version}-%{release}
360 %description passwd_auth
361 This is an authentication module for the Squid proxy server to
362 authenticate users with separate passwd file.
364 %description passwd_auth -l pl.UTF-8
365 Jest to moduł uwierzytelniania proxy, który pozwala na
366 uwierzytelnianie użytkowników proxy poprzez oddzielny plik passwd.
369 Summary: NTLM authentication helper for Squid
370 Summary(pl.UTF-8): Obsługa uwierzytelniania NTLM dla squida
371 Group: Networking/Admin
372 Requires: %{name} = %{epoch}:%{version}-%{release}
374 %description ntlm_auth
375 This is an authentication module for the Squid proxy server to
376 authenticate users on NTLM.
378 %description ntlm_auth -l pl.UTF-8
379 Jest to moduł uwierzytelniania proxy, który pozwala na
380 uwierzytelnianie użytkowników proxy poprzez NTLM.
383 Summary: RADIUS authentication helper for Squid
384 Summary(pl.UTF-8): Obsługa uwierzytelniania RADIUS dla squida
385 Group: Networking/Admin
386 Requires: %{name} = %{epoch}:%{version}-%{release}
388 %description radius_auth
389 This helper allows Squid to connect to a RADIUS server to validate the
390 user name and password of Basic HTTP authentication.
392 %description radius_auth -l pl.UTF-8
393 Program ten pozwala na uwierzytelnianie użytkowników squida przez
397 Summary: Database authentication helper for Squid
398 Summary(pl.UTF-8): Obsługa uwierzytelniania przez bazę danych dla squida
399 Group: Networking/Admin
400 Requires: %{name} = %{epoch}:%{version}-%{release}
402 Suggests: perl-DBD-mysql
405 This is an authentication module for the Squid proxy server to
406 authenticate users againsta a database.
408 %description db_auth -l pl.UTF-8
409 Jest to moduł uwierzytelniania proxy, który pozwala na
410 uwierzytelnianie użytkowników proxy poprzez bazę danych.
413 Summary: POP3 authentication helper for Squid
414 Summary(pl.UTF-8): Obsługa uwierzytelniania POP3 dla squida
415 Group: Networking/Admin
416 Requires: %{name} = %{epoch}:%{version}-%{release}
418 %description pop3_auth
419 This is an authentication module for the Squid proxy server to
420 authenticate users on POP3.
422 %description pop3_auth -l pl.UTF-8
423 Jest to moduł uwierzytelniania proxy, który pozwala na
424 uwierzytelnianie użytkowników proxy poprzez POP3.
426 %package negotiate_wrapper_auth
427 Summary: Kerberos authentication helper for Squid
428 Summary(pl.UTF-8): Obsługa uwierzytelniania Kerberos dla squida
429 Group: Networking/Admin
430 Requires: %{name} = %{epoch}:%{version}-%{release}
431 Requires: %{name}-kerberos_auth = %{epoch}:%{version}-%{release}
432 Requires: %{name}-ntlm_auth = %{epoch}:%{version}-%{release}
434 %description negotiate_wrapper_auth
435 This is an authentication module for the Squid proxy server to
436 authenticate users on Kerberos.
438 %description negotiate_wrapper_auth -l pl.UTF-8
439 Jest to moduł uwierzytelniania proxy, który pozwala na
440 uwierzytelnianie użytkowników proxy poprzez Kerberosa.
442 %package digest_edirectory_auth
443 Summary: eDirectory authentication helper for Squid
444 Summary(pl.UTF-8): Obsługa uwierzytelniania eDirectory dla squida
445 Group: Networking/Admin
446 Requires: %{name} = %{epoch}:%{version}-%{release}
448 %description digest_edirectory_auth
449 This is an authentication module for the Squid proxy server to
450 authenticate users on eDirectory.
452 %description digest_edirectory_auth -l pl.UTF-8
453 Jest to moduł uwierzytelniania proxy, który pozwala na
454 uwierzytelnianie użytkowników proxy poprzez eDirectory.
456 %package digest_ldap_auth
457 Summary: LDAP authentication helper for Squid
458 Summary(pl.UTF-8): Obsługa uwierzytelniania LDAP dla squida
459 Group: Networking/Admin
460 Requires: %{name} = %{epoch}:%{version}-%{release}
462 %description digest_ldap_auth
463 This is an authentication module for the Squid proxy server to
464 authenticate users on LDAP.
466 %description digest_ldap_auth -l pl.UTF-8
467 Jest to moduł uwierzytelniania proxy, który pozwala na
468 uwierzytelnianie użytkowników proxy poprzez LDAP.
471 Summary: IP external ACL helper for Squid
472 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez IP dla squida
473 Group: Networking/Admin
474 Requires: %{name} = %{epoch}:%{version}-%{release}
477 This is an external ACL module for the Squid proxy server to limit
478 access for users based on IP address.
480 %description ip_acl -l pl.UTF-8
481 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
482 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP.
485 Summary: LDAP group external ACL helper for Squid
486 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP dla squida
487 Group: Networking/Admin
488 Requires: %{name} = %{epoch}:%{version}-%{release}
490 %description ldap_acl
491 This is an external ACL module for the Squid proxy server to limit
492 access for users based on LDAP group membership.
494 %description ldap_acl -l pl.UTF-8
495 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
496 ograniczenie dostępu użytkowników proxy na podstawie ich
497 przynależności do grup LDAP.
500 Summary: UNIX group external ACL helper for Squid
501 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy UNIX dla squida
502 Group: Networking/Admin
503 Requires: %{name} = %{epoch}:%{version}-%{release}
505 %description unix_acl
506 This is an external ACL module for the Squid proxy server to limit
507 access for users based on UNIX group membership.
509 %description unix_acl -l pl.UTF-8
510 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
511 ograniczenie dostępu użytkowników proxy na podstawie ich
512 przynależności do grup UNIX.
515 Summary: NT domain group external ACL helper for Squid
516 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy w domenie NT dla squida
517 Group: Networking/Admin
518 Requires: %{name} = %{epoch}:%{version}-%{release}
520 %description wbinfo_acl
521 This is an external ACL module for the Squid proxy server to limit
522 access for users based on NT domain group membership using wbinfo.
524 %description wbinfo_acl -l pl.UTF-8
525 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
526 ograniczenie dostępu użytkowników proxy na podstawie ich
527 przynależności do grup w domenie NT przy użyciu wbinfo.
530 Summary: Squid session tracking external ACL group helper
531 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez śledzenie sesji
532 Group: Networking/Admin
533 Requires: %{name} = %{epoch}:%{version}-%{release}
535 %description session_acl
536 This helper maintains a concept of sessions by monitoring requests and
537 timing out sessions if no requests have been seen for the idle timeout
540 %description session_acl -l pl.UTF-8
541 Moduł oparty na koncepcji sesji, śledzący zapytania i wygaszający
542 sesje jeśli w określonym czasie nie widziano w ich obrębie kolejnych
545 %package edirectory_userip_acl
546 Summary: Squid eDirectory IP Lookup Helper
547 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez eDirectory
548 Group: Networking/Admin
549 Requires: %{name} = %{epoch}:%{version}-%{release}
551 %description edirectory_userip_acl
552 This is an external ACL module for the Squid proxy server to limit
553 access for users based on IP address lookup in eDirectory.
555 %description edirectory_userip_acl -l pl.UTF-8
556 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
557 ograniczenie dostępu użytkowników proxy na podstawie ich adresu IP
558 popranego z eDirectory.
560 %package kerberos_ldap_group_acl
561 Summary: Squid LDAP external acl group helper for Kerberos or NTLM credentials
562 Summary(pl.UTF-8): Wsparcie kontroli dostępu przez grupy LDAP/Kerberos/NTLM dla squida
563 Group: Networking/Admin
564 Requires: %{name} = %{epoch}:%{version}-%{release}
566 %description kerberos_ldap_group_acl
567 This is an external ACL module for the Squid proxy server to limit
568 access for users based on LDAP Kerberos or NTLM credentials.
570 %description kerberos_ldap_group_acl -l pl.UTF-8
571 Jest to moduł kontroli dostępu (ACL) do proxy, który pozwala na
572 ograniczenie dostępu użytkowników proxy na podstawie ich uprawnień
573 Kerberosowych lub NTLM-owych w LDAP.
575 %package sql_session_acl
576 Summary: SQL Database session lookup helper for Squid
577 Group: Networking/Admin
578 Requires: %{name} = %{epoch}:%{version}-%{release}
580 %description sql_session_acl
581 Validates an HTTP requests access authorization with a session
584 %package time_quota_acl
585 Summary: Squid time quota external acl helper
586 Group: Networking/Admin
587 Requires: %{name} = %{epoch}:%{version}-%{release}
589 %description time_quota_acl
590 This extension allows an administrator to define time budgets for the
591 users of squid to limit the time using squid.
593 %package log_db_daemon
594 Summary: Database logging daemon for Squid
595 Group: Networking/Admin
596 Requires: %{name} = %{epoch}:%{version}-%{release}
598 %description log_db_daemon
599 This program writes Squid access.log entries to a database. Presently
600 only accepts the squid native format.
602 %package storeid_file_rewrite
603 Summary: File based Store-ID helper for Squid
604 Group: Networking/Admin
605 Requires: %{name} = %{epoch}:%{version}-%{release}
607 %description storeid_file_rewrite
608 This program acts as a store_id helper program, rewriting URLs passed
609 by Squid into storage-ids that can be used to achieve better caching
610 for websites that use different URLs for the same content.
613 Summary: Perl scripts for Squid
614 Summary(pl.UTF-8): Skrypty perlowe dla Squida
615 Group: Networking/Admin
616 Requires: %{name} = %{epoch}:%{version}-%{release}
619 This package contains Perl scripts and contributed programs for Squid.
621 %description scripts -l pl.UTF-8
622 Ten pakiet zawiera skrypty perlowe i dodatkowe programy dla Squida.
629 %{?with_combined_log:%patch4 -p1}
638 %{__sed} -i -e '1s#!.*bin/perl#!%{__perl}#' {contrib,scripts}/*.pl
647 --disable-strict-error-checking \
648 --with-default-user=squid \
649 --with-logdir=/var/log/squid \
650 --with-swapdir=/var/cache/squid \
651 --with-pidfile=/var/run/squid.pid \
652 --datadir=%{_datadir}/squid \
655 --enable-basic-auth-helpers \
656 --enable-ntlm-auth-helpers \
657 --enable-negotiate-auth-helpers \
658 --enable-digest-auth-helpers \
659 --enable-external-acl-helpers \
660 --enable-url-rewrite-helpers \
661 --enable-ntlm-fail-open \
662 --enable-cache-digests \
663 --enable-coss-aio-ops \
664 --enable-delay-pools \
665 --enable-err-language=English \
667 --enable-follow-x-forwarded-for \
668 --enable-forward-log \
669 --enable-forw-via-db \
673 --enable-icap-client \
676 --enable-kill-parent-hack \
677 --enable-large-cache-files \
678 --enable-linux-netfilter \
679 --disable-linux-tproxy \
680 --enable-multicast-miss \
681 --enable-referer-log \
682 --enable-removal-policies="heap,lru" \
683 --enable-storeio="aufs,diskd,rock,ufs" \
684 --enable-storeid-rewrite-helpers="file" \
688 --enable-useragent-log \
689 --enable-x-accelerator-vary \
690 --localstatedir=/var \
691 --sysconfdir=%{_sysconfdir} \
692 --with-auth-on-acceleration \
703 rm -rf $RPM_BUILD_ROOT
704 install -d $RPM_BUILD_ROOT{%{_cgidir},%{_webapps}/%{_webapp}} \
705 $RPM_BUILD_ROOT/etc/{pam.d,rc.d/init.d,security,sysconfig,logrotate.d} \
706 $RPM_BUILD_ROOT{%{_sbindir},%{_bindir},%{_libexecdir}/contrib} \
707 $RPM_BUILD_ROOT%{_mandir}/man8 \
708 $RPM_BUILD_ROOT%{_datadir}/squid \
709 $RPM_BUILD_ROOT/var/{cache,log{,/archive}}/squid \
710 $RPM_BUILD_ROOT%{systemdtmpfilesdir}
713 DESTDIR=$RPM_BUILD_ROOT
715 %{__cp} -a contrib/*.pl $RPM_BUILD_ROOT%{_libexecdir}/contrib
716 install scripts/*.pl $RPM_BUILD_ROOT%{_libexecdir}
718 install %{SOURCE6} $RPM_BUILD_ROOT/etc/pam.d/squid
719 touch $RPM_BUILD_ROOT/etc/security/blacklist.squid
721 install %{SOURCE8} $RPM_BUILD_ROOT%{systemdtmpfilesdir}/squid.conf
723 %{__mv} -f $RPM_BUILD_ROOT%{_libdir}/squid/cachemgr.cgi $RPM_BUILD_ROOT%{_cgidir}
724 %{__cp} -a %{SOURCE7} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/apache.conf
725 %{__cp} -a %{SOURCE9} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/httpd.conf
726 %{__rm} $RPM_BUILD_ROOT%{_webapps}/%{_webapp}/cachemgr.conf.default
728 cd $RPM_BUILD_ROOT/etc/squid
729 %{__patch} -p0 < %{SOURCE4}
730 %{__rm} *.default squid.conf.documented
733 install %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/squid
734 install %{SOURCE2} $RPM_BUILD_ROOT/etc/sysconfig/squid
735 install %{SOURCE5} $RPM_BUILD_ROOT/etc/logrotate.d/squid
737 touch $RPM_BUILD_ROOT/var/log/squid/{access,cache,store}.log
739 %{__rm} $RPM_BUILD_ROOT%{_datadir}/squid/errors/{COPYRIGHT,TRANSLATORS}
741 # cp, to have re-entrant install
744 # We don't want Makefiles as docs...
745 %{__rm} docs/Makefile*
747 :> $RPM_BUILD_ROOT/var/cache/squid/netdb_state
748 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state
749 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.clean
750 :> $RPM_BUILD_ROOT/var/cache/squid/swap.state.last-clean
753 rm -rf $RPM_BUILD_ROOT
756 %groupadd -g 91 squid
757 %useradd -o -u 91 -s /bin/false -g squid -c "SQUID http caching daemon" -d /var/cache/squid squid
758 %addusertogroup stats squid
760 [ -L %{_datadir}/squid/errors ] && rm -f %{_datadir}/squid/errors || :
763 if ! grep -q "^visible_hostname" /etc/squid/squid.conf; then
764 hostname=`/bin/hostname -f 2>/dev/null` || hostname='localhost'
765 echo visible_hostname $hostname >> /etc/squid/squid.conf
768 /sbin/chkconfig --add squid
769 if [ "$1" = "1" ]; then
770 /sbin/service squid init >&2
772 %service squid restart
775 if [ "$1" = "0" ]; then
776 /sbin/chkconfig --del squid
779 # nuke squid cache if uninstalling
780 rm -rf /var/cache/squid/??
784 if [ "$1" = "0" ]; then
789 %triggerpostun -- squid < 7:2.5.STABLE7-5
790 %addusertogroup stats squid
792 %triggerin cachemgr -- apache1 < 1.3.37-3, apache1-base
793 %webapp_register apache %{_webapp}
795 %triggerun cachemgr -- apache1 < 1.3.37-3, apache1-base
796 %webapp_unregister apache %{_webapp}
798 %triggerin cachemgr -- apache-base
799 %webapp_register httpd %{_webapp}
801 %triggerun cachemgr -- apache-base
802 %webapp_unregister httpd %{_webapp}
804 %triggerpostun -- cachemgr < 7:3.0.STABLE10-0.2
805 if [ -f %{_sysconfdir}/cachemgr.conf.rpmsave ]; then
806 cp -f %{_webapps}/%{_webapp}/cachemgr.conf{,.rpmsave}
807 mv -f %{_sysconfdir}/cachemgr.conf.rpmsave %{_webapps}/%{_webapp}/cachemgr.conf
811 %defattr(644,root,root,755)
812 %doc CONTRIBUTORS COPYRIGHT CREDITS README ChangeLog QUICKSTART
813 %doc RELEASENOTES.html SPONSORS docs/* src/mib.txt book-full.html
814 %doc src/squid.conf.default src/squid.conf.documented src/mime.conf.default
815 %doc errors/TRANSLATORS
816 %attr(755,root,root) %{_bindir}/purge
817 %attr(755,root,root) %{_bindir}/squidclient
820 %attr(755,root,root) %{_libexecdir}/diskd
821 # YES, it has to be suid root, it sends ICMP packets.
822 %attr(4754,root,squid) %{_libexecdir}/pinger
823 %attr(755,root,root) %{_libexecdir}/unlinkd
824 %attr(755,root,root) %{_libexecdir}/ntlm_fake_auth
825 %attr(755,root,root) %{_libexecdir}/basic_fake_auth
826 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite
827 %attr(755,root,root) %{_libexecdir}/url_fake_rewrite.sh
828 %attr(755,root,root) %{_libexecdir}/log_file_daemon
829 %attr(755,root,root) %{_sbindir}/squid
831 %attr(754,root,root) /etc/rc.d/init.d/squid
832 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/squid
833 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/sysconfig/squid
836 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/squid.conf
837 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/mime.conf
838 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/errorpage.css
840 %dir %{_datadir}/squid
841 %dir %{_datadir}/squid/errors
842 %{_datadir}/squid/icons
843 %{_datadir}/squid/mib.txt
844 %{_datadir}/squid/errors/templates
845 %lang(af) %{_datadir}/squid/errors/af
846 %lang(ar) %{_datadir}/squid/errors/ar
847 %lang(ar) %{_datadir}/squid/errors/ar-*
848 %lang(az) %{_datadir}/squid/errors/az
849 %lang(az) %{_datadir}/squid/errors/az-*
850 %lang(bg) %{_datadir}/squid/errors/bg
851 %lang(bg) %{_datadir}/squid/errors/bg-*
852 %lang(ca) %{_datadir}/squid/errors/ca
853 %lang(cs) %{_datadir}/squid/errors/cs
854 %lang(cs) %{_datadir}/squid/errors/cs-*
855 %lang(da) %{_datadir}/squid/errors/da
856 %lang(da) %{_datadir}/squid/errors/da-*
857 %lang(de) %{_datadir}/squid/errors/de
858 %lang(de) %{_datadir}/squid/errors/de-*
859 %lang(el) %{_datadir}/squid/errors/el
860 %lang(el) %{_datadir}/squid/errors/el-*
861 %{_datadir}/squid/errors/en
862 %{_datadir}/squid/errors/en-*
863 %lang(es) %{_datadir}/squid/errors/es
864 %lang(es) %{_datadir}/squid/errors/es-*
865 %lang(et) %{_datadir}/squid/errors/et
866 %lang(et) %{_datadir}/squid/errors/et-*
867 %lang(fa) %{_datadir}/squid/errors/fa
868 %lang(fa) %{_datadir}/squid/errors/fa-*
869 %lang(fi) %{_datadir}/squid/errors/fi
870 %lang(fi) %{_datadir}/squid/errors/fi-*
871 %lang(fr) %{_datadir}/squid/errors/fr
872 %lang(fr) %{_datadir}/squid/errors/fr-*
873 %lang(he) %{_datadir}/squid/errors/he
874 %lang(he) %{_datadir}/squid/errors/he-*
875 %lang(hu) %{_datadir}/squid/errors/hu
876 %lang(hu) %{_datadir}/squid/errors/hu-*
877 %lang(hy) %{_datadir}/squid/errors/hy
878 %lang(hy) %{_datadir}/squid/errors/hy-*
879 %lang(id) %{_datadir}/squid/errors/id
880 %lang(id) %{_datadir}/squid/errors/id-*
881 %lang(it) %{_datadir}/squid/errors/it
882 %lang(it) %{_datadir}/squid/errors/it-*
883 %lang(ja) %{_datadir}/squid/errors/ja
884 %lang(ja) %{_datadir}/squid/errors/ja-*
885 %lang(ko) %{_datadir}/squid/errors/ko
886 %lang(ko) %{_datadir}/squid/errors/ko-*
887 %lang(lt) %{_datadir}/squid/errors/lt
888 %lang(lt) %{_datadir}/squid/errors/lt-*
889 %lang(lv) %{_datadir}/squid/errors/lv
890 %lang(lv) %{_datadir}/squid/errors/lv-*
891 %lang(ms) %{_datadir}/squid/errors/ms
892 %lang(ms) %{_datadir}/squid/errors/ms-*
893 %lang(nl) %{_datadir}/squid/errors/nl
894 %lang(nl) %{_datadir}/squid/errors/nl-*
895 %lang(oc) %{_datadir}/squid/errors/oc
896 %lang(pl) %{_datadir}/squid/errors/pl
897 %lang(pl) %{_datadir}/squid/errors/pl-*
898 %lang(pt) %{_datadir}/squid/errors/pt
899 %lang(pt) %{_datadir}/squid/errors/pt-pt
900 %lang(pt_BR) %{_datadir}/squid/errors/pt-br
901 %lang(ro) %{_datadir}/squid/errors/ro
902 %lang(ro) %{_datadir}/squid/errors/ro-*
903 %lang(ru) %{_datadir}/squid/errors/ru
904 %lang(ru) %{_datadir}/squid/errors/ru-*
905 %lang(sk) %{_datadir}/squid/errors/sk
906 %lang(sk) %{_datadir}/squid/errors/sk-*
907 %lang(sk) %{_datadir}/squid/errors/sl
908 %lang(sk) %{_datadir}/squid/errors/sl-*
909 %lang(sr) %{_datadir}/squid/errors/sr
910 %lang(sr) %{_datadir}/squid/errors/sr-*
911 %lang(sv) %{_datadir}/squid/errors/sv
912 %lang(sv) %{_datadir}/squid/errors/sv-*
913 %lang(th) %{_datadir}/squid/errors/th
914 %lang(th) %{_datadir}/squid/errors/th-*
915 %lang(tr) %{_datadir}/squid/errors/tr
916 %lang(tr) %{_datadir}/squid/errors/tr-*
917 %lang(uk) %{_datadir}/squid/errors/uk
918 %lang(uk) %{_datadir}/squid/errors/uk-*
919 %lang(uz) %{_datadir}/squid/errors/uz
920 %lang(vi) %{_datadir}/squid/errors/vi
921 %lang(vi) %{_datadir}/squid/errors/vi-*
922 %lang(zh_CN) %{_datadir}/squid/errors/zh-cn
923 %lang(zh_CN) %{_datadir}/squid/errors/zh-sg
924 %lang(zh_CN) %{_datadir}/squid/errors/zh-tw
925 %lang(zh_TW) %{_datadir}/squid/errors/zh-hk
926 %lang(zh_TW) %{_datadir}/squid/errors/zh-mo
928 %{systemdtmpfilesdir}/squid.conf
929 %attr(770,root,squid) %dir /var/run/squid
931 %attr(770,root,squid) %dir /var/log/archive/squid
932 %attr(770,root,squid) %dir /var/log/squid
933 %attr(660,root,squid) %ghost /var/log/squid/*
935 %attr(770,root,squid) %dir /var/cache/squid
936 %ghost /var/cache/squid/netdb_state
937 %ghost /var/cache/squid/swap.state
938 %ghost /var/cache/squid/swap.state.clean
939 %ghost /var/cache/squid/swap.state.last-clean
940 %{_mandir}/man1/squidclient.1*
941 %{_mandir}/man8/squid.8*
944 %defattr(644,root,root,755)
945 %dir %attr(750,root,http) %{_webapps}/%{_webapp}
946 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/apache.conf
947 %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/httpd.conf
948 %attr(640,root,http) %config(noreplace) %verify(not md5 mtime size) %{_webapps}/%{_webapp}/cachemgr.conf
950 %attr(755,root,root) %{_cgidir}/cachemgr.cgi
951 %{_mandir}/man8/cachemgr.cgi.8*
954 %defattr(644,root,root,755)
955 %doc helpers/basic_auth/LDAP/README
956 %attr(755,root,root) %{_libexecdir}/basic_ldap_auth
957 %{_mandir}/man8/basic_ldap_auth.*
960 %defattr(644,root,root,755)
961 %config(noreplace) /etc/pam.d/squid
962 %config(noreplace) /etc/security/blacklist.squid
963 # it has to be suid root to access /etc/shadow
964 %attr(4755,root,root) %{_libexecdir}/basic_pam_auth
965 %{_mandir}/man8/basic_pam_auth.8*
968 %defattr(644,root,root,755)
969 %doc helpers/basic_auth/SMB/ChangeLog
970 %attr(755,root,root) %{_libexecdir}/basic_smb_auth*
973 %defattr(644,root,root,755)
974 %doc helpers/basic_auth/MSNT/README*
975 %doc helpers/basic_auth/MSNT-multi-domain/README*
976 %attr(755,root,root) %{_libexecdir}/basic_msnt_auth
977 %attr(755,root,root) %{_libexecdir}/basic_msnt_multi_domain_auth
978 %attr(640,root,squid) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/msntauth.conf
981 %defattr(644,root,root,755)
982 %attr(755,root,root) %{_libexecdir}/basic_nis_auth
985 %defattr(644,root,root,755)
986 %attr(755,root,root) %{_libexecdir}/basic_ncsa_auth
987 %{_mandir}/man8/basic_ncsa_auth.8*
990 %defattr(644,root,root,755)
991 %doc helpers/basic_auth/SASL/basic_sasl_auth.{conf,pam}
992 %attr(755,root,root) %{_libexecdir}/basic_sasl_auth
993 %{_mandir}/man8/basic_sasl_auth.8*
995 %files getpwname_auth
996 %defattr(644,root,root,755)
997 %attr(755,root,root) %{_libexecdir}/basic_getpwnam_auth
998 %{_mandir}/man8/basic_getpwnam_auth.8*
1001 %defattr(644,root,root,755)
1002 %attr(755,root,root) %{_libexecdir}/digest_file_auth
1003 %{_mandir}/man8/digest_file_auth.8*
1005 %files kerberos_auth
1006 %defattr(644,root,root,755)
1007 %doc helpers/negotiate_auth/kerberos/README
1008 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth
1009 %attr(755,root,root) %{_libexecdir}/negotiate_kerberos_auth_test
1010 %{_mandir}/man8/negotiate_kerberos_auth.8*
1013 %defattr(644,root,root,755)
1014 %attr(755,root,root) %{_libexecdir}/ntlm_smb_lm_auth
1017 %defattr(644,root,root,755)
1018 %doc helpers/basic_auth/RADIUS/README
1019 %attr(755,root,root) %{_libexecdir}/basic_radius_auth
1020 %{_mandir}/man8/basic_radius_auth.8*
1022 %files digest_ldap_auth
1023 %defattr(644,root,root,755)
1024 %attr(755,root,root) %{_libexecdir}/digest_ldap_auth
1027 %defattr(644,root,root,755)
1028 %attr(755,root,root) %{_libexecdir}/basic_db_auth
1029 %{_mandir}/man8/basic_db_auth.8*
1032 %defattr(644,root,root,755)
1033 %{_libexecdir}/basic_pop3_auth
1035 %files digest_edirectory_auth
1036 %defattr(644,root,root,755)
1037 %{_libexecdir}/digest_edirectory_auth
1039 %files negotiate_wrapper_auth
1040 %defattr(644,root,root,755)
1041 %{_libexecdir}/negotiate_wrapper_auth
1044 %defattr(644,root,root,755)
1045 %doc helpers/external_acl/file_userip/example*
1046 %attr(755,root,root) %{_libexecdir}/ext_file_userip_acl
1047 %{_mandir}/man8/ext_file_userip_acl.*
1050 %defattr(644,root,root,755)
1051 %attr(755,root,root) %{_libexecdir}/ext_ldap_group_acl
1052 %{_mandir}/man8/ext_ldap_group_acl.*
1055 %defattr(644,root,root,755)
1056 %attr(755,root,root) %{_libexecdir}/ext_unix_group_acl
1057 %{_mandir}/man8/ext_unix_group_acl.*
1060 %defattr(644,root,root,755)
1061 %attr(755,root,root) %{_libexecdir}/ext_wbinfo_group_acl
1062 %{_mandir}/man8/ext_wbinfo_group_acl.8*
1065 %defattr(644,root,root,755)
1066 %attr(755,root,root) %{_libexecdir}/ext_session_acl
1067 %{_mandir}/man8/ext_session_acl.8*
1069 %files edirectory_userip_acl
1070 %defattr(644,root,root,755)
1071 %{_libexecdir}/ext_edirectory_userip_acl
1072 %{_mandir}/man8/ext_edirectory_userip_acl.8*
1074 %files kerberos_ldap_group_acl
1075 %defattr(644,root,root,755)
1076 %{_libexecdir}/ext_kerberos_ldap_group_acl
1078 %files sql_session_acl
1079 %defattr(644,root,root,755)
1080 %{_libexecdir}/ext_sql_session_acl
1081 %{_mandir}/man8/ext_sql_session_acl.8*
1083 %files time_quota_acl
1084 %defattr(644,root,root,755)
1085 %{_libexecdir}/ext_time_quota_acl
1086 %{_mandir}/man8/ext_time_quota_acl.8*
1088 %files log_db_daemon
1089 %defattr(644,root,root,755)
1090 %{_libexecdir}/log_db_daemon
1091 %{_mandir}/man8/log_db_daemon.8*
1093 %files storeid_file_rewrite
1094 %defattr(644,root,root,755)
1095 %{_libexecdir}/storeid_file_rewrite
1096 %{_mandir}/man8/storeid_file_rewrite.8*
1099 %defattr(644,root,root,755)
1100 %attr(755,root,root) %{_libexecdir}/contrib
1101 %attr(755,root,root) %{_libexecdir}/AnnounceCache.pl
1102 %attr(755,root,root) %{_libexecdir}/access-log-matrix.pl
1103 %attr(755,root,root) %{_libexecdir}/cache-compare.pl
1104 %attr(755,root,root) %{_libexecdir}/cachetrace.pl
1105 %attr(755,root,root) %{_libexecdir}/calc-must-ids.pl
1106 %attr(755,root,root) %{_libexecdir}/cert_tool
1107 %attr(755,root,root) %{_libexecdir}/cert_valid.pl
1108 %attr(755,root,root) %{_libexecdir}/check_cache.pl
1109 %attr(755,root,root) %{_libexecdir}/fileno-to-pathname.pl
1110 %attr(755,root,root) %{_libexecdir}/find-alive.pl
1111 %attr(755,root,root) %{_libexecdir}/flag_truncs.pl
1112 %attr(755,root,root) %{_libexecdir}/helper-mux.pl
1113 %attr(755,root,root) %{_libexecdir}/icpserver.pl
1114 %attr(755,root,root) %{_libexecdir}/icp-test.pl
1115 %attr(755,root,root) %{_libexecdir}/tcp-banger.pl
1116 %attr(755,root,root) %{_libexecdir}/trace-job.pl
1117 %attr(755,root,root) %{_libexecdir}/trace-master.pl
1118 %attr(755,root,root) %{_libexecdir}/udp-banger.pl
1119 %attr(755,root,root) %{_libexecdir}/upgrade-1.0-store.pl