From: Tomasz Pala Date: Sat, 9 Aug 2014 07:17:40 +0000 (+0200) Subject: create and provide tcpdump user only when build with drop_priv X-Git-Tag: auto/th/tcpdump-4.6.2-1~2 X-Git-Url: http://git.pld-linux.org/?p=packages%2Ftcpdump.git;a=commitdiff_plain;h=d4dd684 create and provide tcpdump user only when build with drop_priv such lame priviledge disposal only pollutes one's user database, while it's all up to cap_net_raw,cap_net_admin=ep --- diff --git a/tcpdump.spec b/tcpdump.spec index a2c9e64..c1b4f4e 100644 --- a/tcpdump.spec +++ b/tcpdump.spec @@ -29,10 +29,12 @@ BuildRequires: libpcap-devel >= 2:1.6.1 BuildRequires: openssl-devel >= 0.9.7d BuildRequires: rpmbuild(macros) >= 1.202 Requires: libpcap >= 2:1.6.1 +%if %{with drop_priv} Provides: user(tcpdump) -Requires(postun): /usr/sbin/userdel Requires(pre): /bin/id Requires(pre): /usr/sbin/useradd +%endif +Requires(postun): /usr/sbin/userdel BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) %description @@ -100,12 +102,14 @@ rm -rf $RPM_BUILD_ROOT %{__rm} $RPM_BUILD_ROOT%{_sbindir}/tcpdump.%{version} +%if %{with drop_priv} %pre %useradd -u 273 -r -d /usr/share/empty -s /bin/false -c "tcpdump User" -g nobody tcpdump +%endif %postun if [ "$1" = "0" ]; then - %userremove tcpdump + %userremove tcpdump || : fi %clean