# build against xz?

%bcond_without xz

# just for giggles, option to build with internal Berkeley DB

%bcond_with int_bdb

# run internal testsuite?

%bcond_with check

# build with plugins?

%bcond_without plugins

# build with sanitizers?

%bcond_with sanitizer

# build with libarchive? (needed for rpm2archive)

%bcond_without libarchive

# build with libimaevm.so

%bcond_without libimaevm

# build with new db format

%bcond_with ndb

# build with zstd support?

%bcond_without zstd

# build with lmdb support?

%bcond_with lmdb

# build with readonly sqlite support?

%bcond_without sqlite

%if 0%{?rhel} > 7

# Disable python2 build by default

%bcond_with python2

%else

%bcond_without python2

%endif

%define rpmhome /usr/lib/rpm

%global rpmver 4.14.3

#global snapver rc2

%global rel 30

%global srcver %{version}%{?snapver:-%{snapver}}

%global srcdir %{?snapver:testing}%{!?snapver:%{name}-%(echo %{version} | cut -d'.' -f1-2).x}

%define bdbname libdb

%define bdbver 5.3.15

%define dbprefix db

Summary: The RPM package management system

Name: rpm

Version: %{rpmver}

Release: %{?snapver:0.%{snapver}.}%{rel}%{?dist}

Group: System Environment/Base

Url: http://www.rpm.org/

Source0: http://ftp.rpm.org/releases/%{srcdir}/%{name}-%{srcver}.tar.bz2

%if %{with int_bdb}

Source1: db-%{bdbver}.tar.gz

%else

BuildRequires: libdb-devel

%endif

# Disable autoconf config.site processing (#962837)

Patch1: rpm-4.11.x-siteconfig.patch

# Fedora specspo is setup differently than what rpm expects, considering

# this as Fedora-specific patch for now

Patch2: rpm-4.13.0-fedora-specspo.patch

# In current Fedora, man-pages pkg owns all the localized man directories

Patch3: rpm-4.9.90-no-man-dirs.patch

# gnupg2 comes installed by default, avoid need to drag in gnupg too

Patch4: rpm-4.8.1-use-gpg2.patch

# Temporary band-aid for rpm2cpio whining on payload size mismatch (#1142949)

Patch5: rpm-4.12.0-rpm2cpio-hack.patch

# Downstream-only patch:

# Add envvar that will be present during RPM build

# - Part of a Fedora Change for F28:

# - "Avoid /usr/bin/python in RPM build"

# - https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build

Patch7: rpm-4.14.1-Add-envvar-that-will-be-present-during-RPM-build.patch

# Patches already upstream:

Patch101: rpm-4.14.2-RPMTAG_MODULARITYLABEL.patch

Patch102: 0001-Document-noverify-in-the-man-page-RhBug-1646458.patch

Patch104: 0001-Mark-elements-with-associated-problems-as-failed.patch

Patch108: 0001-Only-read-through-payload-on-verify-if-actually-need.patch

Patch111: 0003-Verify-packages-before-signing-RhBug-1646388.patch

Patch112: 0001-Fix-FA_TOUCH-on-files-with-suid-sgid-bits-and-or-cap.patch

Patch116: 0001-Add-flag-to-use-strip-g-instead-of-full-strip-on-DSO.patch

Patch119: 0001-Use-in-condition-to-avoid-sub-processes-in-find-debu.patch

Patch132: 0001-debugedit-Refactor-reading-writing-of-relocated-valu.patch

Patch133: 0002-Handle-.debug_macro-in-debugedit.patch

Patch134: 0003-debugedit-Make-sure-.debug_line-old-new-idx-start-eq.patch

Patch135: 0001-Pass-RPM_BUILD_NCPUS-to-build-scripts.patch

Patch136: 0001-Use-RPM_BUILD_NCPUS-in-brp-strip-static-archive.patch

Patch137: 0001-Fix-brp-strip-static-archive-parallelism.patch

Patch138: 0001-Use-newline-as-a-delimiter-to-avoid-xargs-messing-up.patch

Patch139: 0001-Make-check-buildroot-check-the-build-files-in-parall.patch

Patch140: 0001-Fix-resource-leaks-on-zstd-open-error-paths.patch

# XXX should be before 0001-Pass-RPM_BUILD_NCPUS-to-build-scripts.patch

Patch141: 0001-Isolate-_smp_build_ncpus-and-use-it-for-_smp_mflags.patch

Patch142: rpm-4.14.3-GPG-Switch-back-to-pipe-7-for-signing.patch

Patch143: 0001-Work-around-buggy-signature-region-preventing-resign.patch

Patch144: 0001-Fix-python-ts.addErase-not-raising-exception-on-not-.patch

Patch145: 0001-Always-close-libelf-handle-1313.patch

Patch146: 0001-When-doing-the-same-thing-more-than-once-use-a-loop.patch

Patch147: 0001-Introduce-patch_nums-and-source_nums-Lua-variables-i.patch

Patch148: 0001-Add-limits-to-autopatch-macro.patch

Patch149: rpm-4.14.3-bump-up-the-limit-of-signature-header-to-64MB.patch

Patch150: rpm-4.14.3-add-fapolicyd-rpm-plugin.patch

Patch151: 0001-Unblock-signals-in-forked-scriptlets.patch

Patch152: rpm-4.14.3-fix-ambiguous-diagnostics-on-file-triggers.patch

Patch153: rpm-4.14.3-ELF-files-strip-when-debuginfo-disabled.patch

Patch154: rpm-4.14.3-more-careful-sig-hdr-copy.patch

Patch156: rpm-4.14.3-hdrblobInit-add-bounds-check.patch

Patch157: rpm-4.14.3-add-read-only-support-for-sqlite.patch

Patch158: rpm-4.14.3-imp-covscan-fixes.patch

Patch159: rpm-4.14.3-add-path-query-option.patch

Patch160: rpm-4.14.3-macroize-find-debuginfo-script-location.patch

Patch161: rpm-4.14.3-validate-and-require-subkey-binding-sigs.patch

Patch162: rpm-4.14.3-fix-spurious-transfiletriggerpostun-execution.patch

Patch163: rpm-4.14.3-skip-recorded-symlinks-in-setperms.patch

Patch164: rpm-4.14.3-fapolicyd-make-write-nonblocking.patch

Patch165: rpm-4.16.1.3-rpm2archive-error-handling.patch

Patch166: rpm-4.14.3-rpm2archive-nocompression.patch

Patch167: rpm-4.14.3-rpm2archive-parse-popt-options.patch

Patch168: rpm-4.14.3-rpm2archive-Don-t-print-usage.patch

# Backport fsm to fix CVEs

Patch169: 0001-Eliminate-code-duplication-from-rpmfiNext.patch

Patch170: 0001-Add-optional-callback-on-directory-changes-during-rp.patch

Patch171: 0001-Pass-file-descriptor-to-file-prepare-plugin-hook-use.patch

Patch172: 0001-Swap-over-to-dirfd-basename-based-operation-within-t.patch

Patch173: 0001-Use-file-state-machine-from-rpm-4.19.patch

# Python 3 string API sanity

Patch500: 0001-In-Python-3-return-all-our-string-data-as-surrogate-.patch

Patch501: 0001-Return-NULL-string-as-None-from-utf8FromString.patch

# Make test-suite work with Python 3

Patch503: 0001-Honor-PYTHON-from-configure-when-running-tests.patch

Patch504: 0002-Use-Python-3-compatible-exception-syntax-in-tests.patch

Patch505: 0003-Fix-couple-of-bytes-vs-strings-issues-in-Python-test.patch

Patch506: 0004-Bump-the-minimum-Python-version-requirement-to-2.7.patch

Patch507: 0005-Drop-an-unnecessary-Python-2-vs-3-incompatibility-fr.patch

Patch508: rpm-4.14.3-python3.diff

Patch509: rpm-4-14.3-selinux-log-error.patch

# These are not yet upstream

# Audit support

Patch800: rpm-4.14.2-audit-3.patch

Patch906: rpm-4.7.1-geode-i686.patch

# Probably to be upstreamed in slightly different form

Patch907: rpm-4.13.90-ldflags.patch

# Switch off the part of the brp-python-bytecompile script

# that utilizes python2 to bytecompile .py files within

# non-standard paths.

Patch1000: disable-python-extra.patch

# Compile Python 3.6 stuff with /usr/libexec/platform-python instead of

# /usr/bin/python3.6

Patch1001: compile-with-Platform-Python-binary-where-relevant.patch

# make unversioned %%__python an error unless explicitly overridden

Patch1002: rpm-4.14.2-unversioned-python.patch

# Make brp-python-bytecompile compatible with Python 3.10+

Patch1003: brp-python-bytecompile-compatibility-with-newer-pyth.patch

# Partially GPL/LGPL dual-licensed and some bits with BSD

# SourceLicense: (GPLv2+ and LGPLv2+ with exceptions) and BSD 

License: GPLv2+

Requires: coreutils

%if %{without int_bdb}

# db recovery tools, rpmdb_util symlinks

Requires: %{_bindir}/%{dbprefix}_stat

%endif

Requires: popt%{_isa} >= 1.10.2.1

Requires: curl

%if %{without int_bdb}

BuildRequires: %{bdbname}-devel

%endif

%if %{with check}

BuildRequires: fakechroot gnupg2

%endif

# XXX generally assumed to be installed but make it explicit as rpm

# is a bit special...

BuildRequires: redhat-rpm-config

BuildRequires: gcc make

BuildRequires: gawk

BuildRequires: elfutils-devel >= 0.112

BuildRequires: elfutils-libelf-devel

BuildRequires: readline-devel zlib-devel

BuildRequires: openssl-devel

# The popt version here just documents an older known-good version

BuildRequires: popt-devel >= 1.10.2

BuildRequires: file-devel

BuildRequires: gettext-devel

BuildRequires: ncurses-devel

BuildRequires: bzip2-devel >= 0.9.0c-2

BuildRequires: lua-devel >= 5.1

BuildRequires: libcap-devel

BuildRequires: libacl-devel

BuildRequires: audit-libs-devel

%if %{with sqlite}

BuildRequires: sqlite-devel

%endif

%if %{with xz}

BuildRequires: xz-devel >= 4.999.8

%endif

%if %{with libarchive}

BuildRequires: libarchive-devel

%endif

%if %{with zstd}

BuildRequires: libzstd-devel

%endif

%if %{with lmdb}

BuildRequires: lmdb-devel

%endif

# Only required by sepdebugcrcfix patch

BuildRequires: binutils-devel

# Couple of patches change makefiles so, require for now...

BuildRequires: automake libtool

%if %{with plugins}

BuildRequires: libselinux-devel

BuildRequires: dbus-devel

%endif

%if %{with sanitizer}

BuildRequires: libasan

BuildRequires: libubsan

#BuildRequires: liblsan

#BuildRequires: libtsan

%global sanitizer_flags -fsanitize=address -fsanitize=undefined

%endif

%if %{with libimaevm}

%if 0%{?fedora} >= 28 || 0%{?rhel} > 7

%global imadevname ima-evm-utils-devel

%else

%global imadevname ima-evm-utils

%endif

BuildRequires: %{imadevname} >= 1.0

%endif

%description

The RPM Package Manager (RPM) is a powerful command line driven

package management system capable of installing, uninstalling,

verifying, querying, and updating software packages. Each software

package consists of an archive of files along with information about

the package like its version, a description, etc.

%package libs

Summary:  Libraries for manipulating RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

# librpm uses cap_compare, introduced sometimes between libcap 2.10 and 2.16.

# A manual require is needed, see #505596

Requires: libcap%{_isa} >= 2.16

%description libs

This package contains the RPM shared libraries.

%package build-libs

Summary:  Libraries for building and signing RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: %{_bindir}/gpg2

%description build-libs

This package contains the RPM shared libraries for building and signing

packages.

%package devel

Summary:  Development files for manipulating RPM packages

Group: Development/Libraries

License: GPLv2+ and LGPLv2+ with exceptions

Requires: %{name} = %{version}-%{release}

Requires: %{name}-libs%{_isa} = %{version}-%{release}

Requires: %{name}-build-libs%{_isa} = %{version}-%{release}

Requires: popt-devel%{_isa}

%description devel

This package contains the RPM C library and header files. These

development files will simplify the process of writing programs that

manipulate RPM packages and databases. These files are intended to

simplify the process of creating graphical package managers or any

other tools that need an intimate knowledge of RPM packages in order

to function.

This package should be installed if you want to develop programs that

will manipulate RPM packages and databases.

%package build

Summary: Scripts and executable programs used to build packages

Group: Development/Tools

Requires: rpm = %{version}-%{release}

Requires: elfutils >= 0.128 binutils

Requires: findutils sed grep gawk diffutils file patch >= 2.5

Requires: tar unzip gzip bzip2 cpio xz

%if %{with zstd}

Requires: zstd

%endif

Requires: pkgconfig >= 1:0.24

Requires: /usr/bin/gdb-add-index

# Technically rpmbuild doesn't require any external configuration, but

# creating distro-compatible packages does. To make the common case

# "just work" while allowing for alternatives, depend on a virtual

# provide, typically coming from redhat-rpm-config.

Requires: system-rpm-config

%description build

The rpm-build package contains the scripts and executable programs

that are used to build packages using the RPM Package Manager.

%package sign

Summary: Package signing support

Group: System Environment/Base

Requires: rpm-build-libs%{_isa} = %{version}-%{release}

%description sign

This package contains support for digitally signing RPM packages.

%if %{with python2}

%package -n python2-%{name}

Summary: Python 2 bindings for apps which will manipulate RPM packages

Group: Development/Libraries

BuildRequires: python2-devel

%{?python_provide:%python_provide python2-%{name}}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Provides: %{name}-python = %{version}-%{release}

Obsoletes: %{name}-python < %{version}-%{release}

%description -n python2-%{name}

The python2-rpm package contains a module that permits applications

written in the Python programming language to use the interface

supplied by RPM Package Manager libraries.

This package should be installed if you want to develop Python 2

programs that will manipulate RPM packages and databases.

%endif # with python2

%package -n python3-%{name}

Summary: Python 3 bindings for apps which will manipulate RPM packages

Group: Development/Libraries

BuildRequires: python3-devel

%{?python_provide:%python_provide python3-%{name}}

Requires: %{name}-libs%{?_isa} = %{version}-%{release}

Provides: %{name}-python3 = %{version}-%{release}

Obsoletes: %{name}-python3 < %{version}-%{release}

# Lowest compatible DNF version (acts as a safeguard to protect DNF from

# breaking in case the user attempts to upgrade RPM separately).

# Version 4.2.7 added support for the new API output format introduced in

# rpm-4.14.2-10.

Conflicts: python3-dnf < 4.2.7

%description -n python3-%{name}

The python3-rpm package contains a module that permits applications

written in the Python programming language to use the interface

supplied by RPM Package Manager libraries.

This package should be installed if you want to develop Python 3

programs that will manipulate RPM packages and databases.

%package apidocs

Summary: API documentation for RPM libraries

Group: Documentation

BuildArch: noarch

%description apidocs

This package contains API documentation for developing applications

that will manipulate RPM packages and databases.

%package cron

Summary: Create daily logs of installed packages.

Group: System Environment/Base

BuildArch: noarch

Requires: crontabs logrotate rpm = %{version}-%{release}

%description cron

This package contains a cron job which creates daily logs of installed

packages on a system.

%if %{with plugins}

%package plugin-selinux

Summary: Rpm plugin for SELinux functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

Requires: selinux-policy-base

%description plugin-selinux

%{summary}

%package plugin-syslog

Summary: Rpm plugin for syslog functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-syslog

%{summary}

%package plugin-systemd-inhibit

Summary: Rpm plugin for systemd inhibit functionality

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-systemd-inhibit

This plugin blocks systemd from entering idle, sleep or shutdown while an rpm

transaction is running using the systemd-inhibit mechanism.

%package plugin-ima

Summary: Rpm plugin ima file signatures

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-ima

%{summary}

%package plugin-prioreset

Summary: Rpm plugin for resetting scriptlet priorities for SysV init

Group: System Environment/Base

Requires: rpm-libs%{_isa} = %{version}-%{release}

%description plugin-prioreset

%{summary}

Useful on legacy SysV init systems if you run rpm transactions with

nice/ionice priorities. Should not be used on systemd systems.

%package plugin-fapolicyd

Summary: Rpm plugin for fapolicyd functionality

Requires: rpm-libs%{_isa} = %{version}-%{release}

Provides: fapolicyd-plugin

Obsoletes: fapolicyd-dnf-plugin

%description plugin-fapolicyd

%{summary}.

%endif # with plugins

%prep

%autosetup -n %{name}-%{srcver} %{?with_int_bdb:-a 1} -p1

%if %{with int_bdb}

ln -s db-%{bdbver} db

%endif

%build

%if %{without int_bdb}

#CPPFLAGS=-I%{_includedir}/db%{bdbver} 

#LDFLAGS=-L%{_libdir}/db%{bdbver}

%endif

CPPFLAGS="$CPPFLAGS -DLUA_COMPAT_APIINTCASTS"

CFLAGS="$RPM_OPT_FLAGS %{?sanitizer_flags} -DLUA_COMPAT_APIINTCASTS"

LDFLAGS="$LDFLAGS %{?__global_ldflags}"

export CPPFLAGS CFLAGS LDFLAGS

autoreconf -i -f

# Hardening hack taken from macro %%configure defined in redhat-rpm-config

for i in $(find . -name ltmain.sh) ; do

     %{__sed} -i.backup -e 's~compiler_flags=$~compiler_flags="%{_hardened_ldflags}"~' $i

done;

# Using configure macro has some unwanted side-effects on rpm platform

# setup, use the old-fashioned way for now only defining minimal paths.

./configure \

    --prefix=%{_usr} \

    --sysconfdir=%{_sysconfdir} \

    --localstatedir=%{_var} \

    --sharedstatedir=%{_var}/lib \

    --libdir=%{_libdir} \

    --build=%{_target_platform} \

    --host=%{_target_platform} \

    --with-vendor=redhat \

    %{!?with_int_bdb: --with-external-db} \

    %{!?with_plugins: --disable-plugins} \

    --with-lua \

    --with-selinux \

    --with-cap \

    --with-acl \

    %{?with_ndb: --enable-ndb} \

    %{!?with_libarchive: --without-archive} \

    %{?with_libimaevm: --with-imaevm} \

    %{?with_zstd: --enable-zstd} \

    %{?with_lmdb: --enable-lmdb} \

    %{?with_sqlite: --enable-sqlite} \

    --with-fapolicyd \

    --enable-python \

    --with-crypto=openssl \

    PYTHON=python3

make %{?_smp_mflags}

pushd python

%if %{with python2}

%{__python2} setup.py build

%endif # with python2

%{__python3} setup.py build

popd

%install

rm -rf $RPM_BUILD_ROOT

make DESTDIR="$RPM_BUILD_ROOT" install

# We need to build with --enable-python for the self-test suite, but we

# actually package the bindings built with setup.py (#531543#c26)

pushd python

%if %{with python2}

%{__python2} setup.py install --skip-build --root $RPM_BUILD_ROOT

%endif # with python2

%{__python3} setup.py install --skip-build --root $RPM_BUILD_ROOT

popd

# Save list of packages through cron

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily

install -m 755 scripts/rpm.daily ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/rpm

mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d

install -m 644 scripts/rpm.log ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/rpm

mkdir -p ${RPM_BUILD_ROOT}/usr/lib/tmpfiles.d

echo "r /var/lib/rpm/__db.*" > ${RPM_BUILD_ROOT}/usr/lib/tmpfiles.d/rpm.conf

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/rpm

mkdir -p $RPM_BUILD_ROOT%{rpmhome}/macros.d

mkdir -p $RPM_BUILD_ROOT/var/lib/rpm

for dbi in \

    Basenames Conflictname Dirnames Group Installtid Name Obsoletename \

    Packages Providename Requirename Triggername Sha1header Sigmd5 \

    __db.001 __db.002 __db.003 __db.004 __db.005 __db.006 __db.007 \

    __db.008 __db.009

do

    touch $RPM_BUILD_ROOT/var/lib/rpm/$dbi

done

# plant links to relevant db utils as rpmdb_foo for documention compatibility

%if %{without int_bdb}

for dbutil in dump load recover stat upgrade verify

do

    ln -s ../../bin/%{dbprefix}_${dbutil} $RPM_BUILD_ROOT/%{rpmhome}/rpmdb_${dbutil}

done

%endif

%find_lang %{name}

find $RPM_BUILD_ROOT -name "*.la"|xargs rm -f

# These live in perl-generators and python-rpm-generators now

rm -f $RPM_BUILD_ROOT/%{rpmhome}/{perldeps.pl,perl.*,pythond*}

rm -f $RPM_BUILD_ROOT/%{_fileattrsdir}/{perl*,python*}

# Axe unused cruft

rm -f $RPM_BUILD_ROOT/%{rpmhome}/{tcl.req,osgideps.pl}

# Avoid unnecessary dependency on /usr/bin/python

chmod a-x $RPM_BUILD_ROOT/%{rpmhome}/python-macro-helper

%if %{with check}

%check

make check || cat tests/rpmtests.log

%endif

%post libs -p /sbin/ldconfig

%postun libs -p /sbin/ldconfig

%post build-libs -p /sbin/ldconfig

%postun build-libs -p /sbin/ldconfig

%files -f %{name}.lang

%license COPYING

%doc CREDITS doc/manual/[a-z]*

/usr/lib/tmpfiles.d/rpm.conf

%dir %{_sysconfdir}/rpm

%attr(0755, root, root) %dir /var/lib/rpm

%attr(0644, root, root) %verify(not md5 size mtime) %ghost %config(missingok,noreplace) /var/lib/rpm/*

%{_bindir}/rpm

%if %{with libarchive}

%{_bindir}/rpm2archive

%endif

%{_bindir}/rpm2cpio

%{_bindir}/rpmdb

%{_bindir}/rpmkeys

%{_bindir}/rpmquery

%{_bindir}/rpmverify

%{_mandir}/man8/rpm.8*

%{_mandir}/man8/rpmdb.8*

%{_mandir}/man8/rpmkeys.8*

%{_mandir}/man8/rpm2cpio.8*

%{_mandir}/man8/rpm-misc.8*

# XXX this places translated manuals to wrong package wrt eg rpmbuild

%lang(fr) %{_mandir}/fr/man[18]/*.[18]*

%lang(ko) %{_mandir}/ko/man[18]/*.[18]*

%lang(ja) %{_mandir}/ja/man[18]/*.[18]*

%lang(pl) %{_mandir}/pl/man[18]/*.[18]*

%lang(ru) %{_mandir}/ru/man[18]/*.[18]*

%lang(sk) %{_mandir}/sk/man[18]/*.[18]*

%attr(0755, root, root) %dir %{rpmhome}

%{rpmhome}/macros

%{rpmhome}/macros.d

%{rpmhome}/rpmpopt*

%{rpmhome}/rpmrc

%{rpmhome}/rpmdb_*

%{rpmhome}/rpm.daily

%{rpmhome}/rpm.log

%{rpmhome}/rpm.supp

%{rpmhome}/rpm2cpio.sh

%{rpmhome}/tgpg

%{rpmhome}/python-macro-helper

%{rpmhome}/platform

%dir %{rpmhome}/fileattrs

%files libs

%{_libdir}/librpmio.so.*

%{_libdir}/librpm.so.*

%if %{with plugins}

%dir %{_libdir}/rpm-plugins

%files plugin-syslog

%{_libdir}/rpm-plugins/syslog.so

%files plugin-selinux

%{_libdir}/rpm-plugins/selinux.so

%files plugin-systemd-inhibit

%{_libdir}/rpm-plugins/systemd_inhibit.so

%{_mandir}/man8/rpm-plugin-systemd-inhibit.8*

%files plugin-ima

%{_libdir}/rpm-plugins/ima.so

%files plugin-prioreset

%{_libdir}/rpm-plugins/prioreset.so

%files plugin-fapolicyd

%{_libdir}/rpm-plugins/fapolicyd.so

%{_mandir}/man8/rpm-plugin-fapolicyd.8*

%endif # with plugins

%files build-libs

%{_libdir}/librpmbuild.so.*

%{_libdir}/librpmsign.so.*

%files build

%{_bindir}/rpmbuild

%{_bindir}/gendiff

%{_bindir}/rpmspec

%{_mandir}/man1/gendiff.1*

%{_mandir}/man8/rpmbuild.8*

%{_mandir}/man8/rpmdeps.8*

%{_mandir}/man8/rpmspec.8*

%{rpmhome}/brp-*

%{rpmhome}/check-*

%{rpmhome}/debugedit

%{rpmhome}/sepdebugcrcfix

%{rpmhome}/find-debuginfo.sh

%{rpmhome}/find-lang.sh

%{rpmhome}/*provides*

%{rpmhome}/*requires*

%{rpmhome}/*deps*

%{rpmhome}/*.prov

%{rpmhome}/*.req

%{rpmhome}/config.*

%{rpmhome}/mkinstalldirs

%{rpmhome}/macros.p*

%{rpmhome}/fileattrs/*

%files sign

%{_bindir}/rpmsign

%{_mandir}/man8/rpmsign.8*

%if %{with python2}

%files -n python2-%{name}

%{python2_sitearch}/%{name}/

%{python2_sitearch}/%{name}-%{version}*.egg-info

%endif # with python2

%files -n python3-%{name}

%{python3_sitearch}/%{name}/

%{python3_sitearch}/%{name}-%{version}*.egg-info

%files devel

%{_mandir}/man8/rpmgraph.8*

%{_bindir}/rpmgraph

%{_libdir}/librp*[a-z].so

%{_libdir}/pkgconfig/%{name}.pc

%{_includedir}/%{name}/

%files cron

%{_sysconfdir}/cron.daily/rpm

%config(noreplace) %{_sysconfdir}/logrotate.d/rpm

%files apidocs

%license COPYING

%doc doc/librpm/html/*

%changelog

* Fri Nov 10 2023 Florian Festi <ffesti@redhat.com> - 4.14.3-30

- Backport file handling code from rpm-4.19 to fix CVE-2021-35937,

  CVE-2021-35938 and CVE-2021-35939

* Tue Sep 26 2023 Lumír Balhar <lbalhar@redhat.com> - 4.14.3-27

- Make brp-python-bytecompile script compatible with Python 3.10+

Resolves: RHEL-6423

* Mon Dec 19 2022 Florian Festi <ffesti@redhat.com> - 4.14.3-26

- Add --nocompression to rpm2archive (#2129345)

* Tue Sep 13 2022 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-24

- Make write() nonblocking in fapolicyd plugin (#2110787)

* Tue Apr 05 2022 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-23

- Fix minor ABI regression in rpmcli.h (#1940895)

* Tue Feb 15 2022 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22

- Fix spurious %transfiletriggerpostun execution (#2023693)

- Skip recorded symlinks in --setperms (#1900662)

* Mon Jan 10 2022 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-21

- Address covscan issues in binding sigs validation patch (#1958480)

* Thu Dec 09 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20

- Add --path query option (#1940895)

- Macroize find-debuginfo script location (#2019540)

- Validate and require subkey binding sigs on PGP pubkeys (#1958480)

- Fixes CVE-2021-3521

* Wed Oct 06 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-19

- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)

* Thu Aug 26 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-18

- Address important covscan issues (#1996665), vol. 2

* Mon Aug 23 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-17

- Address important covscan issues (#1996665)

* Thu Aug 19 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16

- Add support for read-only sqlite rpmdb (#1938928)

- Drop compat .decode() method from returned Py3 strings (#1840142)

* Thu Jul 15 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15

- Add out-of-bounds checks to hdrblobInit() (#1929445)

- Fixes CVE-2021-20266

- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)

* Thu May 27 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-14

- Be more careful about copying data from signature header (#1958477)

- Fixes CVE-2021-20271

* Fri Feb 12 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13

- Fix minor issues found by COVSCAN in fapolicyd plugin

- Actually honor libarchive bcond at configure time (#1902887)

* Tue Feb 09 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12

- Bump up the limit of signature header to 64MB (#1918777)

- Add fapolicyd plugin (#1923167)

- Unblock signals in forked scriptlets (#1913765)

- Fix ambiguous diagnostics output on file triggers (#1883338)

- Ensure ELF files get stripped when debuginfo is disabled (#1634084)

* Sun Jan 10 2021 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-10

- Rebuild for libimaevm soname bump, now for real (#1896046)

* Thu Jan 07 2021 Florian Festi <ffesti@redhat.com> - 4.14.3-8

- Add limits to autopatch macro (#1834931)

* Thu Dec 03 2020 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-6

- Rebuild for libimaevm soname bump (#1896046)

* Fri Oct 30 2020 Florian Festi <ffesti@redhat.com> - 4.14.3-5

- Don't error out when replacing an invalid signature (#1874062)

- Raise an expection when erasing a package fails in Python (#1872623)

- Fix builds on NFS filesystems (#1840728)

* Fri Jun 26 2020 Michal Domonkos <mdomonko@redhat.com> - 4.14.3-4

- Fix hang when signing with expired key (#1746353)

* Wed May 13 2020 Panu Matilainen <pmatilai@redhat.com> - 4.14.3-3

- Fix configure option for --with ndb (#1817010, Matthew Almond)

* Mon May 11 2020 Florian Festi <ffesti@redhat.com> - 4.14.3-2

- Re-add selinux fix dropped in rebase

* Mon May 4 2020 Florian Festi <ffesti@redhat.com> - 4.14.3-1

- Rebase to 4.14.3 (#1765187)

* Fri Feb 21 2020 Michal Domonkos <mdomonko@redhat.com> - 4.14.2-37

- Add API safeguard for DNF by using Conflicts: (#1790400)

* Thu Jan 09 2020 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-36

- Revert DBUS shutdown patch, it causes regressions (#1783346)

* Wed Nov 27 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-35

- Revert mistakenly included patch from caret backport

* Thu Nov 21 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-34

- Backport caret version operator (#1654901)

* Thu Nov 21 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-33

- Backport _smp_build_ncpus macro for #1691824 and #1704354

* Thu Nov 21 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-32

- Fix resource leaks on zstd open error

* Mon Nov 18 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-31

- Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)

- Parallelize /usr/lib/rpm/check-buildroot (#1704354)

* Tue Nov 12 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-30

- Handle gcc -g3 debug level output in debuginfo (#1630926)

* Thu Oct 24 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-29

- Use Python 3 for the test suite and make it pass (#1724138)

* Thu Oct 24 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-28

- Accept PGP public keys with missing EOL (#1733971)

* Thu Oct 24 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-27

- Support generating build-id's from compressed ELF files (#1650074)

- Compress annobit notes in find-debuginfo (#1719837)

* Wed Oct 16 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-26

- Re-enable support for zstd (#1715799)

* Wed Aug 07 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-25

- Fix memory leak in verify code (#1714657)

* Wed Jul 31 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-24

- Fix off-by-one in hdrblobGet() breaking large packages (#1722921)

* Thu Jul 25 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-23

- Use --dpbath only with full path (#1696408)

- Fix memory leaks (#1714657)

- Remove capabilities instead of setting empty caps via. --setcaps (#1700920)

- Fix bash warning from solution for #1689810

* Thu Jul 18 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-22

- Add information about FIPS mode to rpmsign man page (#1726678)

* Wed Jul 03 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-21

- Fix bash warning from solution for #1689810

* Thu Jun 06 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-20

- Fix packages getting removed on failed update via dnf (#1710346)

* Tue Jun 04 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-19

- Fix rare segfault in fingerprinting symlink round (#1660232)

* Tue Jun 04 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-18

- Make use of unversioned %%__python macro an error (#1645663)

* Wed Apr 24 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-17

- Add flag to use strip -g instead of full strip on DSOs (#1689810)

* Wed Apr 24 2019 Florian Festi <ffesti@redhat.com> - 4.14.2-16

- Sort list of hard linked files in find-debuginfo.sh (#1421272)

- Correct rpm -ql exit value when optional -p is omitted (#1680610)

- Show list of files only once when use rpm -ql and multiple rpm files (#1689898)

* Fri Apr 12 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-15

- Fix %_minimize_writes stripping suid/sgid bits and capabilities (#1690876)

* Thu Apr 11 2019 Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14