From d4dd68448113cb8f5851b16fd3c45f5a4e55b0d5 Mon Sep 17 00:00:00 2001 From: Tomasz Pala Date: Sat, 9 Aug 2014 09:17:40 +0200 Subject: [PATCH] create and provide tcpdump user only when build with drop_priv such lame priviledge disposal only pollutes one's user database, while it's all up to cap_net_raw,cap_net_admin=ep --- tcpdump.spec | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/tcpdump.spec b/tcpdump.spec index a2c9e64..c1b4f4e 100644 --- a/tcpdump.spec +++ b/tcpdump.spec @@ -29,10 +29,12 @@ BuildRequires: libpcap-devel >= 2:1.6.1 BuildRequires: openssl-devel >= 0.9.7d BuildRequires: rpmbuild(macros) >= 1.202 Requires: libpcap >= 2:1.6.1 +%if %{with drop_priv} Provides: user(tcpdump) -Requires(postun): /usr/sbin/userdel Requires(pre): /bin/id Requires(pre): /usr/sbin/useradd +%endif +Requires(postun): /usr/sbin/userdel BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) %description @@ -100,12 +102,14 @@ rm -rf $RPM_BUILD_ROOT %{__rm} $RPM_BUILD_ROOT%{_sbindir}/tcpdump.%{version} +%if %{with drop_priv} %pre %useradd -u 273 -r -d /usr/share/empty -s /bin/false -c "tcpdump User" -g nobody tcpdump +%endif %postun if [ "$1" = "0" ]; then - %userremove tcpdump + %userremove tcpdump || : fi %clean -- 2.44.0