]>
Commit | Line | Data |
---|---|---|
fa8b3432 ER |
1 | Summary: A SUID sandbox program |
2 | Name: firejail | |
3 | Version: 0.9.36 | |
4 | Release: 0.1 | |
5 | License: GPL v2+ | |
6 | Group: Applications | |
7 | Source0: https://github.com/netblue30/firejail/archive/%{version}/%{name}-%{version}.tar.gz | |
8 | # Source0-md5: 98a5b96118822aae423528cfe22b4a3c | |
9 | URL: https://github.com/netblue30/firejail | |
10 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) | |
11 | ||
12 | %description | |
13 | Firejail is a SUID security sandbox program that reduces the risk of | |
14 | security breaches by restricting the running environment of untrusted | |
15 | applications using Linux namespaces and seccomp-bpf. It allows a | |
16 | process and all its descendants to have their own private view of the | |
17 | globally shared kernel resources, such as the network stack, process | |
18 | table, and mount table. | |
19 | ||
20 | %prep | |
21 | %setup -qn %{name}-%{version} | |
22 | ||
23 | # Fix libdir. | |
24 | sed -i -e 's#/usr/lib#%{_libdir}#g' etc/disable-devel.inc | |
25 | ||
26 | %build | |
27 | %configure | |
28 | %{__make} | |
29 | ||
30 | %install | |
31 | rm -rf $RPM_BUILD_ROOT | |
32 | %{__make} install \ | |
33 | DESTDIR=$RPM_BUILD_ROOT | |
34 | ||
35 | chmod +x $RPM_BUILD_ROOT%{_libdir}/firejail/*.so | |
36 | ||
37 | # Install documentation ourselves. | |
38 | rm -r $RPM_BUILD_ROOT%{_docdir}/%{name} | |
39 | ||
40 | %files | |
41 | %defattr(644,root,root,755) | |
42 | %doc README README.md RELNOTES | |
43 | %doc COPYING | |
44 | ||
45 | %attr(4755,root,root) %{_bindir}/firejail | |
46 | %attr(755,root,root) %{_bindir}/firemon | |
47 | %dir %{_datadir}/bash-completion | |
48 | %dir %{bash_compdir} | |
49 | %{bash_compdir}/firejail | |
50 | %{bash_compdir}/firemon | |
51 | %{_mandir}/man1/firejail.1* | |
52 | %{_mandir}/man1/firemon.1* | |
53 | %{_mandir}/man5/firejail-login.5* | |
54 | %{_mandir}/man5/firejail-profile.5* | |
55 | ||
56 | %dir %{_libdir}/firejail | |
57 | %{_libdir}/firejail/fshaper.sh | |
58 | %{_libdir}/firejail/ftee | |
59 | %{_libdir}/firejail/libtrace.so | |
60 | %{_libdir}/firejail/libtracelog.so | |
61 | ||
62 | %dir %{_sysconfdir}/firejail | |
63 | %config(noreplace) %{_sysconfdir}/firejail/audacious.profile | |
64 | %config(noreplace) %{_sysconfdir}/firejail/bitlbee.profile | |
65 | %config(noreplace) %{_sysconfdir}/firejail/chromium-browser.profile | |
66 | %config(noreplace) %{_sysconfdir}/firejail/chromium.profile | |
67 | %config(noreplace) %{_sysconfdir}/firejail/clementine.profile | |
68 | %config(noreplace) %{_sysconfdir}/firejail/conkeror.profile | |
69 | %config(noreplace) %{_sysconfdir}/firejail/deadbeef.profile | |
70 | %config(noreplace) %{_sysconfdir}/firejail/deluge.profile | |
71 | %config(noreplace) %{_sysconfdir}/firejail/disable-common.inc | |
72 | %config(noreplace) %{_sysconfdir}/firejail/disable-devel.inc | |
73 | %config(noreplace) %{_sysconfdir}/firejail/disable-mgmt.inc | |
74 | %config(noreplace) %{_sysconfdir}/firejail/disable-secret.inc | |
75 | %config(noreplace) %{_sysconfdir}/firejail/dnscrypt-proxy.profile | |
76 | %config(noreplace) %{_sysconfdir}/firejail/dropbox.profile | |
77 | %config(noreplace) %{_sysconfdir}/firejail/empathy.profile | |
78 | %config(noreplace) %{_sysconfdir}/firejail/evince.profile | |
79 | %config(noreplace) %{_sysconfdir}/firejail/fbreader.profile | |
80 | %config(noreplace) %{_sysconfdir}/firejail/filezilla.profile | |
81 | %config(noreplace) %{_sysconfdir}/firejail/firefox.profile | |
82 | %config(noreplace) %{_sysconfdir}/firejail/generic.profile | |
83 | %config(noreplace) %{_sysconfdir}/firejail/gnome-mplayer.profile | |
84 | %config(noreplace) %{_sysconfdir}/firejail/google-chrome-beta.profile | |
85 | %config(noreplace) %{_sysconfdir}/firejail/google-chrome-stable.profile | |
86 | %config(noreplace) %{_sysconfdir}/firejail/google-chrome-unstable.profile | |
87 | %config(noreplace) %{_sysconfdir}/firejail/google-chrome.profile | |
88 | %config(noreplace) %{_sysconfdir}/firejail/hexchat.profile | |
89 | %config(noreplace) %{_sysconfdir}/firejail/icecat.profile | |
90 | %config(noreplace) %{_sysconfdir}/firejail/icedove.profile | |
91 | %config(noreplace) %{_sysconfdir}/firejail/iceweasel.profile | |
92 | %config(noreplace) %{_sysconfdir}/firejail/login.users | |
93 | %config(noreplace) %{_sysconfdir}/firejail/midori.profile | |
94 | %config(noreplace) %{_sysconfdir}/firejail/nolocal.net | |
95 | %config(noreplace) %{_sysconfdir}/firejail/opera-beta.profile | |
96 | %config(noreplace) %{_sysconfdir}/firejail/opera.profile | |
97 | %config(noreplace) %{_sysconfdir}/firejail/parole.profile | |
98 | %config(noreplace) %{_sysconfdir}/firejail/pidgin.profile | |
99 | %config(noreplace) %{_sysconfdir}/firejail/qbittorrent.profile | |
100 | %config(noreplace) %{_sysconfdir}/firejail/quassel.profile | |
101 | %config(noreplace) %{_sysconfdir}/firejail/rhythmbox.profile | |
102 | %config(noreplace) %{_sysconfdir}/firejail/rtorrent.profile | |
103 | %config(noreplace) %{_sysconfdir}/firejail/server.profile | |
104 | %config(noreplace) %{_sysconfdir}/firejail/skype.profile | |
105 | %config(noreplace) %{_sysconfdir}/firejail/spotify.profile | |
106 | %config(noreplace) %{_sysconfdir}/firejail/steam.profile | |
107 | %config(noreplace) %{_sysconfdir}/firejail/thunderbird.profile | |
108 | %config(noreplace) %{_sysconfdir}/firejail/totem.profile | |
109 | %config(noreplace) %{_sysconfdir}/firejail/transmission-gtk.profile | |
110 | %config(noreplace) %{_sysconfdir}/firejail/transmission-qt.profile | |
111 | %config(noreplace) %{_sysconfdir}/firejail/unbound.profile | |
112 | %config(noreplace) %{_sysconfdir}/firejail/vlc.profile | |
113 | %config(noreplace) %{_sysconfdir}/firejail/webserver.net | |
114 | %config(noreplace) %{_sysconfdir}/firejail/weechat-curses.profile | |
115 | %config(noreplace) %{_sysconfdir}/firejail/weechat.profile | |
116 | %config(noreplace) %{_sysconfdir}/firejail/whitelist-common.inc | |
117 | %config(noreplace) %{_sysconfdir}/firejail/wine.profile | |
118 | %config(noreplace) %{_sysconfdir}/firejail/xchat.profile | |
119 | ||
120 | %clean | |
121 | rm -rf $RPM_BUILD_ROOT |