Projects
Eulaceura:Factory
linux-sgx
_service:obs_scm:linux-sgx.spec
Sign Up
Log In
Username
Password
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _service:obs_scm:linux-sgx.spec of Package linux-sgx
Name: linux-sgx Version: 2.19 Release: 6 Summary: Intel(R) Software Guard Extensions for Linux* OS ExclusiveArch: x86_64 License: BSD-3-Clause URL: https://github.com/intel/linux-sgx %define DCAP_version 1.16 %define protobuf_version 3.20.1 %define openssl_version 1.1.1t %define intel_sgx_ssl_version 2.19 %define sgx_emm_version 1.0.0 Source0: https://github.com/intel/linux-sgx/archive/refs/tags/sgx_%{version}.tar.gz Source1: https://github.com/intel/SGXDataCenterAttestationPrimitives/archive/refs/tags/DCAP_%{DCAP_version}.tar.gz Source2: https://github.com/llvm-mirror/openmp/archive/svn-tags/openmp_code.tar.gz Source3: https://github.com/oneapi-src/oneDNN/archive/oneDNN-2.5.tar.gz Source4: https://github.com/intel/ipp-crypto/archive/ipp-crypto.tar.gz Source5: https://download.01.org/intel-sgx/sgx-linux/%{version}/optimized_libs_%{version}.tar.gz Source6: https://download.01.org/intel-sgx/sgx-linux/%{version}/prebuilt_ae_%{version}.tar.gz Source7: https://github.com/protocolbuffers/protobuf/archive/refs/tags/v%{protobuf_version}.tar.gz Source8: https://download.01.org/intel-sgx/sgx-dcap/%{DCAP_version}/linux/prebuilt_dcap_%{DCAP_version}.tar.gz Source9: https://www.openssl.org/source/old/1.1.1/openssl-%{openssl_version}.tar.gz Source10: https://github.com/intel/intel-sgx-ssl/archive/refs/tags/lin_%{intel_sgx_ssl_version}_%{openssl_version}.tar.gz Source11: https://github.com/intel/sgx-emm/archive/refs/tags/sgx-emm-%{sgx_emm_version}.tar.gz Patch0: 0001-disable-the-download-process-in-building.patch Patch1: 0002-fix-building-error-for-systemd.patch Patch2: 0003-add-secure-compilation-options.patch Patch3: 0004-adapt-openssl-CVE.patch Patch4: 0005-DCAP-disabling-the-rpatch-option.patch Patch5: 0006-fix-build-error.patch Patch6: 0007-fix-C-17-build-failed.patch Patch7: backport-CVE-2023-0464-x509-excessive-resource-use-verifying-policy-constra.patch Patch8: backport-CVE-2023-0465-Ensure-that-EXFLAG_INVALID_POLICY-is-checked-even-in.patch Patch9: backport-CVE-2023-0466-Fix-documentation-of-X509_VERIFY_PARAM_add0_policy.patch Patch10: backport-CVE-2023-2650-Restrict-the-size-of-OBJECT-IDENTIFIERs-that-OBJ_obj.patch Patch11: backport-CVE-2023-3446-Fix-DH_check-excessive-time-with-over-sized-modulus.patch Patch12: backport-CVE-2023-3817-DH_check-Do-not-try-checking-q-properties-if-it-is-o.patch Patch13: backport-CVE-2023-5678-Make-DH_check_pub_key-and-DH_generate_key-safer-yet.patch Patch14: backport-CVE-2024-5535-Fix-SSL_select_next_proto-and-add-ALPN.patch BuildRequires: gcc-c++ protobuf-devel libtool ocaml ocaml-ocamlbuild compat-openssl11-devel cmake python curl-devel createrepo_c git nasm BuildRequires: protobuf-lite-devel protobuf-c-devel boost-devel Requires: glibc %description Intel(R) Software Guard Extensions (Intel(R) SGX) is an Intel technology for application developers seeking to protect select code and data from disclosure or modification. %package -n sgxsdk Summary: Development files for linux sgx Requires: glibc tar Provides: libsgx_urts_sim.so()(64bit) %description -n sgxsdk Development files for linux sgx %package -n libsgx-ae-qe3 Summary: Intel(R) Software Guard Extensions QE3 %description -n libsgx-ae-qe3 Intel(R) Software Guard Extensions QE3 %package -n libsgx-pce-logic Summary: Intel(R) Software Guard Extensions PCE logic Requires: libsgx-urts >= %{version} libsgx-ae-pce >= %{version} %description -n libsgx-pce-logic Intel(R) Software Guard Extensions PCE logic %package -n libsgx-qe3-logic Summary: Intel(R) Software Guard Extensions QE3 logic Requires: libsgx-urts >= %{version} libsgx-ae-pce >= %{version} %description -n libsgx-qe3-logic Intel(R) Software Guard Extensions QE3 logic %package -n sgx-aesm-service Summary: Intel(R) Software Guard Extensions AESM Service %description -n sgx-aesm-service Intel(R) Software Guard Extensions AESM Service %package -n libsgx-ae-epid Summary: Intel(R) Software Guard Extensions QE and PvE %description -n libsgx-ae-epid Intel(R) Software Guard Extensions QE and PvE %package -n libsgx-ae-le Summary: Intel(R) Software Guard Extensions LE %description -n libsgx-ae-le Intel(R) Software Guard Extensions LE %package -n libsgx-ae-pce Summary: Intel(R) Software Guard Extensions PCE %description -n libsgx-ae-pce Intel(R) Software Guard Extensions PCE %package -n libsgx-aesm-ecdsa-plugin Summary: ECDSA Quote Plugin for Intel(R) Software Guard Extensions AESM Service Requires: sgx-aesm-service >= %{version}-%{release} libsgx-qe3-logic >= %{version}-%{release} libsgx-aesm-pce-plugin >= %{version}-%{release} %description -n libsgx-aesm-ecdsa-plugin ECDSA Quote Plugin for Intel(R) Software Guard Extensions AESM Service %package -n libsgx-aesm-epid-plugin Summary: EPID Quote Plugin for Intel(R) Software Guard Extensions AESM Service Requires: sgx-aesm-service >= %{version}-%{release} libsgx-ae-epid >= %{version}-%{release} libsgx-aesm-pce-plugin >= %{version}-%{release} %description -n libsgx-aesm-epid-plugin EPID Quote Plugin for Intel(R) Software Guard Extensions AESM Service %package -n libsgx-aesm-launch-plugin Summary: Launch Plugin for Intel(R) Software Guard Extensions AESM Service Requires: sgx-aesm-service >= %{version}-%{release} libsgx-ae-le >= %{version}-%{release} %description -n libsgx-aesm-launch-plugin Launch Plugin for Intel(R) Software Guard Extensions AESM Service %package -n libsgx-aesm-pce-plugin Summary: PCE Plugin for Intel(R) Software Guard Extensions AESM Service Requires: sgx-aesm-service >= %{version}-%{release} libsgx-pce-logic >= %{version}-%{release} %description -n libsgx-aesm-pce-plugin PCE Plugin for Intel(R) Software Guard Extensions AESM Service %package -n libsgx-aesm-quote-ex-plugin Summary: Unified Quote Plugin for Intel(R) Software Guard Extensions AESM Service Requires: sgx-aesm-service >= %{version}-%{release} libsgx-aesm-ecdsa-plugin >= %{version}-%{release} Recommends: libsgx-aesm-epid-plugin >= %{version}-%{release} %description -n libsgx-aesm-quote-ex-plugin Unified Quote Plugin for Intel(R) Software Guard Extensions AESM Service %package -n libsgx-epid Summary: Intel(R) Software Guard Extensions EPID Quote Service Recommends: libsgx-aesm-epid-plugin >= %{version}-%{release} %description -n libsgx-epid Intel(R) Software Guard Extensions EPID Quote Service %package -n libsgx-epid-devel Summary: Intel(R) Software Guard Extensions EPID Quote Service for Developers Requires: libsgx-epid = %{version}-%{release} %description -n libsgx-epid-devel Intel(R) Software Guard Extensions EPID Quote Service for Developers %package -n libsgx-launch Summary: Intel(R) Software Guard Extensions Launch Service Recommends: libsgx-aesm-launch-plugin >= %{version}-%{release} %description -n libsgx-launch Intel(R) Software Guard Extensions Launch Service %package -n libsgx-launch-devel Summary: Intel(R) Software Guard Extensions Launch Service for Developers Requires: libsgx-launch = %{version}-%{release} %description -n libsgx-launch-devel Intel(R) Software Guard Extensions Launch Service for Developers %package -n libsgx-quote-ex Summary: Intel(R) Software Guard Extensions Unified Quote Service Recommends: libsgx-aesm-quote-ex-plugin >= %{version}-%{release} %description -n libsgx-quote-ex Intel(R) Software Guard Extensions Unified Quote Service %package -n libsgx-quote-ex-devel Summary: Intel(R) Software Guard Extensions Unified Quote Service for Developers Requires: libsgx-quote-ex = %{version}-%{release} %description -n libsgx-quote-ex-devel Intel(R) Software Guard Extensions Unified Quote Service for Developers %package -n libsgx-uae-service Summary: Intel(R) Software Guard Extensions Untrusted AE Service Requires: libsgx-epid >= %{version}-%{release} libsgx-launch >= %{version}-%{release} libsgx-quote-ex >= %{version}-%{release} %description -n libsgx-uae-service Intel(R) Software Guard Extensions Untrusted AE Service %package -n libsgx-enclave-common Summary: Intel(R) Software Guard Extensions Enclave Common Loader Recommends: libsgx-launch >= %{version}-%{release} %description -n libsgx-enclave-common Intel(R) Software Guard Extensions Enclave Common Loader %package -n libsgx-enclave-common-devel Summary: Intel(R) Software Guard Extensions Enclave Common Loader for Developers Requires: libsgx-enclave-common = %{version}-%{release} %description -n libsgx-enclave-common-devel Intel(R) Software Guard Extensions Enclave Common Loader for Developers %package -n libsgx-urts Summary: Intel(R) Software Guard Extensions uRTS Requires: libsgx-enclave-common >= %{version}-%{release} %description -n libsgx-urts Intel(R) Software Guard Extensions uRTS %package -n libsgx-dcap-default-qpl Summary: Intel(R) Software Guard Extensions Default Quote Provider Library %description -n libsgx-dcap-default-qpl Intel(R) Software Guard Extensions Default Quote Provider Library %package -n libsgx-dcap-default-qpl-devel Summary: Intel(R) Software Guard Extensions Default Quote Provider Library for Developers Requires: libsgx-dcap-default-qpl = %{version}-%{release} %description -n libsgx-dcap-default-qpl-devel Intel(R) Software Guard Extensions Default Quote Provider Library for Developers %package -n sgx-dcap-pccs Summary: Intel(R) Software Guard Extensions PCK Caching Service %description -n sgx-dcap-pccs Intel(R) Software Guard Extensions PCK Caching Service %package -n libsgx-dcap-ql Summary: Intel(R) Software Guard Extensions Data Center Attestation Primitives Requires: libsgx-qe3-logic >= %{version}-%{release} libsgx-pce-logic >= %{version}-%{release} Requires: libsgx-dcap-quote-verify >= %{version}-%{release} libsgx-ae-qve >= %{version}-%{release} %description -n libsgx-dcap-ql Intel(R) Software Guard Extensions Data Center Attestation Primitives %package -n libsgx-dcap-ql-devel Summary: Intel(R) Software Guard Extensions Data Center Attestation Primitives for Developers Requires: libsgx-dcap-ql = %{version}-%{release} %description -n libsgx-dcap-ql-devel Intel(R) Software Guard Extensions Data Center Attestation Primitives for Developers %package -n libsgx-ae-qve Summary: Intel(R) Software Guard Extensions QVE %description -n libsgx-ae-qve Intel(R) Software Guard Extensions QVE %package -n libsgx-dcap-quote-verify Summary: Intel(R) Software Guard Extensions Data Center Attestation Primitives Recommends: libsgx-ae-qve >= %{version}-%{release} libsgx-urts >= %{version}-%{release} %description -n libsgx-dcap-quote-verify Intel(R) Software Guard Extensions Data Center Attestation Primitives %package -n libsgx-dcap-quote-verify-devel Summary: Intel(R) Software Guard Extensions Data Center Attestation Primitives for Developers Requires: libsgx-dcap-quote-verify >= %{version}-%{release} %description -n libsgx-dcap-quote-verify-devel Intel(R) Software Guard Extensions Data Center Attestation Primitives for Developers %package -n sgx-pck-id-retrieval-tool Summary: Intel(R) Software Guard Extensions:this tool is used to collect the platform information to retrieve the PCK certs from PCS(Provisioning Certification Server) Recommends: libsgx-urts >= %{version}-%{release}, libsgx-dcap-ql >= %{version}-%{release}, libsgx-ra-uefi >= %{version}-%{release} %description -n sgx-pck-id-retrieval-tool %package -n libsgx-ra-uefi Summary: Intel(R) Software Guard Extensions Registration Agent UEFI Library %description -n libsgx-ra-uefi Intel(R) Software Guard Extensions Registration Agent UEFI Library %package -n libsgx-ra-uefi-devel Summary: Intel(R) Software Guard Extensions Registration Agent UEFI Library for Developers Requires: libsgx-ra-uefi = %{version}-%{release} %description -n libsgx-ra-uefi-devel Intel(R) Software Guard Extensions Registration Agent UEFI Library for Developers %package -n libsgx-ra-network Summary: Intel(R) Software Guard Extensions Registration Agent Network Library %description -n libsgx-ra-network Intel(R) Software Guard Extensions Registration Agent Network Library %package -n libsgx-ra-network-devel Summary: Intel(R) Software Guard Extensions Registration Agent Network Library for Developers Requires: libsgx-ra-network = %{version}-%{release} %description -n libsgx-ra-network-devel Intel(R) Software Guard Extensions Registration Agent Network Library for Developers %package -n sgx-ra-service Summary: Intel(R) Software Guard Extensions Registration Agent Service Requires: libsgx-ra-uefi >= %{version}-%{release}, libsgx-ra-network >= %{version}-%{release} %description -n sgx-ra-service Intel(R) Software Guard Extensions Registration Agent Service %package -n libsgx-headers Summary: Intel(R) Software Guard Extensions Basic Headers %description -n libsgx-headers Intel(R) Software Guard Extensions Basic Headers %package_help %prep %setup -q -b 0 -n linux-sgx-sgx_%{version} %setup -q -D -a 1 -n linux-sgx-sgx_%{version}/external/dcap_source %setup -q -D -a 2 -n linux-sgx-sgx_%{version}/external/openmp %setup -q -D -a 3 -n linux-sgx-sgx_%{version}/external/dnnl/dnnl %setup -q -D -a 4 -n linux-sgx-sgx_%{version}/external/ippcp_internal %setup -q -D -a 5 -n linux-sgx-sgx_%{version} %setup -q -D -a 6 -n linux-sgx-sgx_%{version} %setup -q -D -a 7 -n linux-sgx-sgx_%{version}/external/protobuf %setup -q -D -a 8 -n linux-sgx-sgx_%{version}/external/dcap_source/SGXDataCenterAttestationPrimitives-DCAP_%{DCAP_version}/QuoteGeneration %setup -q -D -a 10 -n linux-sgx-sgx_%{version}/external/dcap_source/SGXDataCenterAttestationPrimitives-DCAP_%{DCAP_version}/QuoteVerification/ %setup -q -D -a 9 -n linux-sgx-sgx_%{version}/external/dcap_source/SGXDataCenterAttestationPrimitives-DCAP_%{DCAP_version}/QuoteVerification/intel-sgx-ssl-lin_%{intel_sgx_ssl_version}_%{openssl_version}/openssl_source %setup -q -D -a 11 -n linux-sgx-sgx_%{version}/external/sgx-emm/emm_src %setup -q -D -n linux-sgx-sgx_%{version} pushd external/protobuf mv protobuf-%{protobuf_version}/{.[!.],}* ./protobuf_code rm -rf protobuf-%{protobuf_version} popd pushd external/dcap_source/ mv SGXDataCenterAttestationPrimitives-DCAP_%{DCAP_version}/{.[!.],}* . rm -rf SGXDataCenterAttestationPrimitives-DCAP_%{DCAP_version} popd pushd external/dcap_source/QuoteVerification mv intel-sgx-ssl-lin_%{intel_sgx_ssl_version}_%{openssl_version} sgxssl popd cp %{SOURCE9} external/dcap_source/QuoteVerification/sgxssl/openssl_source pushd external/dnnl/dnnl mv oneDNN-2.5/{.[!.],}* . rm -rf oneDNN-2.5 popd pushd external/sgx-emm/emm_src mv sgx-emm-sgx-emm-%{sgx_emm_version}/{.[!.],}* . rm -rf sgx-emm-sgx-emm-%{sgx_emm_version} popd %autopatch -p1 %build make preparation make -j -C external/ippcp_internal/ make -j2 sdk_install_pkg_no_mitigation ./linux/installer/bin/sgx_linux_x64_sdk_2.19.100.3.bin --prefix=./ source ./sgxsdk/environment make psw make -C external/dcap_source QuoteGeneration PCKCertSelection PCKRetrievalTool SGXPlatformRegistration %define LINUX_INSTALLER_COMMON_DIR linux/installer/common %define LINUX_INSTALLER_RPM_DIR linux/installer/rpm packages1=(libsgx-enclave-common libsgx-epid libsgx-headers libsgx-launch libsgx-quote-ex libsgx-uae-service libsgx-urts psw sdk sgx-aesm-service) for package1 in ${packages1[@]} do if [ ${package1} == sdk -o ${package1} == psw ]; then source ./%{LINUX_INSTALLER_COMMON_DIR}/${package1}/installConfig.x64 else source ./%{LINUX_INSTALLER_COMMON_DIR}/${package1}/installConfig fi %{LINUX_INSTALLER_COMMON_DIR}/${package1}/createTarball.sh mkdir -p %{LINUX_INSTALLER_RPM_DIR}/${package1}/build tar -xvf %{LINUX_INSTALLER_COMMON_DIR}/${package1}/output/${TARBALL_NAME} -C %{LINUX_INSTALLER_RPM_DIR}/${package1}/build done %define DCAP_LINUX_INSTALLER_COMMON_DIR external/dcap_source/QuoteGeneration/installer/linux/common/ %define DCAP_LINUX_INSTALLER_RPM_DIR external/dcap_source/QuoteGeneration/installer/linux/rpm packages2=(libsgx-ae-qe3 libsgx-ae-qve libsgx-dcap-default-qpl libsgx-dcap-ql libsgx-dcap-quote-verify libsgx-pce-logic libsgx-qe3-logic sgx-dcap-pccs) for package2 in ${packages2[@]} do if [ ${package2} == sgx-dcap-pccs ]; then mkdir -p external/dcap_source/QuoteGeneration/pccs/lib/ cp external/dcap_source/tools/PCKCertSelection/out/libPCKCertSelection.so external/dcap_source/QuoteGeneration/pccs/lib/ fi source ./%{DCAP_LINUX_INSTALLER_COMMON_DIR}/${package2}/installConfig %{DCAP_LINUX_INSTALLER_COMMON_DIR}/${package2}/createTarball.sh mkdir -p %{DCAP_LINUX_INSTALLER_RPM_DIR}/${package2}/build tar -xvf %{DCAP_LINUX_INSTALLER_COMMON_DIR}/${package2}/output/${TARBALL_NAME} -C %{DCAP_LINUX_INSTALLER_RPM_DIR}/${package2}/build done source ./external/dcap_source/tools/PCKRetrievalTool/installer/common/sgx-pck-id-retrieval-tool/installConfig external/dcap_source/tools/PCKRetrievalTool/installer/common/sgx-pck-id-retrieval-tool/createTarball.sh mkdir -p external/dcap_source/tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/build tar -xvf external/dcap_source/tools/PCKRetrievalTool/installer/common/sgx-pck-id-retrieval-tool/output/${TARBALL_NAME} -C external/dcap_source/tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/build %define TOOLS_INSTALLER_PLATFORM_DIR external/dcap_source/tools/SGXPlatformRegistration/ %define TOOLS_INSTALLER_COMMON_DIR external/dcap_source/tools/SGXPlatformRegistration/package/installer/common/ %define TOOLS_INSTALLER_RPM_DIR external/dcap_source/tools/SGXPlatformRegistration/package/installer/rpm #make -C %{TOOLS_INSTALLER_PLATFORM_DIR}/package MP_VERIFY_DATA_STRUCTS=$(MP_VERIFY_DATA_STRUCTS) mkdir -p %{TOOLS_INSTALLER_PLATFORM_DIR}/build/installer packages3=(libsgx-ra-uefi libsgx-ra-network sgx-ra-service) for package3 in ${packages3[@]} do source ./%{TOOLS_INSTALLER_COMMON_DIR}/${package3}/installConfig %{TOOLS_INSTALLER_COMMON_DIR}/${package3}/createTarball.sh mkdir -p %{TOOLS_INSTALLER_RPM_DIR}/${package3}/build tar -xvf %{TOOLS_INSTALLER_COMMON_DIR}/${package3}/output/${TARBALL_NAME} -C %{TOOLS_INSTALLER_RPM_DIR}/${package3}/build done %install %define _install_path /opt/intel/sgxsdk pushd %{LINUX_INSTALLER_RPM_DIR}/sdk/build mkdir %{?buildroot}/sdk-dir/ make DESTDIR=%{?buildroot}/sdk-dir/ install install -d %{?buildroot}/sdk-dir%{_docdir}/sgxsdk popd cp ./sgxsdk/environment %{?buildroot}/sdk-dir/opt/intel/sgxsdk sed -i 's/^.*export SGX_SDK.*$/export SGX_SDK=\/opt\/intel\/sgxsdk/g' %{?buildroot}/sdk-dir/opt/intel/sgxsdk/environment find %{LINUX_INSTALLER_RPM_DIR}/sdk/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/sdk-dir%{_docdir}/sgxsdk/COPYING echo "/opt/intel/sgxsdk" > %{LINUX_INSTALLER_RPM_DIR}/sdk/build/list-sgxsdk find %{?buildroot}/sdk-dir/ | sort | \ awk '$0 !~ last "/" {print last} {last=$0} END {print last}' | \ sed -e "s#^%{?buildroot}/sdk-dir##" | \ grep -v "^/opt/intel/sgxsdk/SampleCode" >> %{LINUX_INSTALLER_RPM_DIR}/sdk/build/list-sgxsdk || : sed -i '2d' %{LINUX_INSTALLER_RPM_DIR}/sdk/build/list-sgxsdk cp -rf %{?buildroot}/sdk-dir/* %{?buildroot}/ rm -rf %{?buildroot}/sdk-dir/ rm -rf %{?buildroot}/opt/intel/sgxsdk/SampleCode pushd %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qe3/build mkdir -p %{?buildroot}/libsgx-ae-qe3-dir/ make DESTDIR=%{?buildroot}/libsgx-ae-qe3-dir/ install install -d %{?buildroot}/libsgx-ae-qe3-dir/%{_docdir}/libsgx-ae-qe3 popd find %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qe3/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-ae-qe3-dir%{_docdir}/libsgx-ae-qe3/COPYING rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qe3/build/list-libsgx-ae-qe3 for f in $(find %{?buildroot}/libsgx-ae-qe3-dir -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-ae-qe3-dir##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qe3/build/list-libsgx-ae-qe3 done cp -rf %{?buildroot}/libsgx-ae-qe3-dir/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-ae-qe3-dir/ pushd %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-pce-logic/build mkdir -p %{?buildroot}/libsgx-pce-logic-dir/ make DESTDIR=%{?buildroot}/libsgx-pce-logic-dir/ install install -d %{?buildroot}/libsgx-pce-logic-dir/%{_docdir}/libsgx-pce-logic popd find %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-pce-logic/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-pce-logic-dir%{_docdir}/libsgx-pce-logic/COPYING rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-pce-logic/build/list-libsgx-pce-logic for f in $(find %{?buildroot}/libsgx-pce-logic-dir -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-pce-logic-dir##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-pce-logic/build/list-libsgx-pce-logic done cp -rf %{?buildroot}/libsgx-pce-logic-dir/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-pce-logic-dir/ pushd %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-qe3-logic/build mkdir -p %{?buildroot}/libsgx-qe3-logic-dir/ make DESTDIR=%{?buildroot}/libsgx-qe3-logic-dir/ install install -d %{?buildroot}/libsgx-qe3-logic-dir/%{_docdir}/libsgx-qe3-logic popd find %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-qe3-logic/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-qe3-logic-dir%{_docdir}/libsgx-qe3-logic/COPYING rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-qe3-logic/build/list-libsgx-qe3-logic for f in $(find %{?buildroot}/libsgx-qe3-logic-dir -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-qe3-logic-dir##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-qe3-logic/build/list-libsgx-qe3-logic done cp -rf %{?buildroot}/libsgx-qe3-logic-dir/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-qe3-logic-dir/ pushd %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-default-qpl/build mkdir -p %{?buildroot}/libsgx-dcap-default-qpl-dir/ make DESTDIR=%{?buildroot}/libsgx-dcap-default-qpl-dir/ install install -d %{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl%{_docdir}/libsgx-dcap-default-qpl popd find %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-default-qpl/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl%{_docdir}/libsgx-dcap-default-qpl/COPYING rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-default-qpl/build/list-libsgx-dcap-default-qpl for f in $(find %{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-default-qpl/build/list-libsgx-dcap-default-qpl done cp -rf %{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl/ for f in $(find %{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl-dev##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-default-qpl/build/list-libsgx-dcap-default-qpl-devel done cp -r %{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-dcap-default-qpl-dir/libsgx-dcap-default-qpl-dev/ sed -i 's#^/etc/sgx_default_qcnl.conf#%config &#' %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-default-qpl/build/list-libsgx-dcap-default-qpl pushd %{DCAP_LINUX_INSTALLER_RPM_DIR}/sgx-dcap-pccs/build mkdir -p %{?buildroot}/sgx-dcap-pccs-dir/ make DESTDIR=%{?buildroot}/sgx-dcap-pccs-dir/ install install -d %{?buildroot}/sgx-dcap-pccs-dir%{_docdir}/sgx-dcap-pccs popd find %{DCAP_LINUX_INSTALLER_RPM_DIR}/sgx-dcap-pccs/build/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/sgx-dcap-pccs-dir%{_docdir}/sgx-dcap-pccs/COPYING find %{?buildroot}/sgx-dcap-pccs-dir -type d -links 2 | \ sed -e "s#^%{?buildroot}/sgx-dcap-pccs-dir##" | \ grep -v "^%{_libdir}" | \ grep -v "^%{_bindir}" | \ grep -v "^%{_sysconfdir}" | \ grep -v "^%{_install_path}" | \ sed -e "s#^#%dir #" > %{DCAP_LINUX_INSTALLER_RPM_DIR}/sgx-dcap-pccs/build/list-sgx-dcap-pccs for f in $(find %{?buildroot}/sgx-dcap-pccs-dir); do if [ -d ${f} ]; then echo ${f} | \ sed -e "s#^%{?buildroot}/sgx-dcap-pccs-dir##" | \ grep "^%{_install_path}" | \ sed -e "s#^#%dir #" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/sgx-dcap-pccs/build/list-sgx-dcap-pccs else echo ${f} | \ sed -e "s#^%{?buildroot}/sgx-dcap-pccs-dir##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/sgx-dcap-pccs/build/list-sgx-dcap-pccs fi done sed -i 's#^%{_install_path}/config/default.json#%config &#' %{DCAP_LINUX_INSTALLER_RPM_DIR}/sgx-dcap-pccs/build/list-sgx-dcap-pccs cp -r %{?buildroot}/sgx-dcap-pccs-dir/* %{?buildroot}/ rm -rf %{?buildroot}/sgx-dcap-pccs-dir/ pushd %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-ql/build mkdir -p %{?buildroot}/libsgx-dcap-ql-dir/ make DESTDIR=%{?buildroot}/libsgx-dcap-ql-dir/ install install -d %{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql%{_docdir}/libsgx-dcap-ql popd find %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-ql/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql%{_docdir}/libsgx-dcap-ql/COPYING rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-ql/build/list-libsgx-dcap-ql for f in $(find %{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-ql/build/list-libsgx-dcap-ql done cp -rf %{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-ql/build/list-libsgx-dcap-ql-devel for f in $(find %{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql-dev##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-ql/build/list-libsgx-dcap-ql-devel done cp -r %{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-dcap-ql-dir/libsgx-dcap-ql-dev pushd %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qve/build mkdir -p %{?buildroot}/libsgx-ae-qve-dir/ make DESTDIR=%{?buildroot}/libsgx-ae-qve-dir/ install install -d %{?buildroot}/libsgx-ae-qve-dir%{_docdir}/libsgx-ae-qve popd find %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qve/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-ae-qve-dir/%{_docdir}/libsgx-ae-qve/COPYING rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qve/build/list-libsgx-ae-qve for f in $(find %{?buildroot}/libsgx-ae-qve-dir -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-ae-qve-dir##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qve/build/list-libsgx-ae-qve done cp -r %{?buildroot}/libsgx-ae-qve-dir/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-ae-qve-dir/ pushd %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-quote-verify/build mkdir -p %{?buildroot}/libsgx-dcap-quote-verify-dir/ make DESTDIR=%{?buildroot}/libsgx-dcap-quote-verify-dir/ install install -d %{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify%{_docdir}/libsgx-dcap-quote-verify popd find %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-quote-verify/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify%{_docdir}/libsgx-dcap-quote-verify/COPYING rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-quote-verify/build/list-libsgx-dcap-quote-verify for f in $(find %{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-quote-verify/build/list-libsgx-dcap-quote-verify done cp -r %{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify rm -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-quote-verify/build/list-libsgx-dcap-quote-verify-devel for f in $(find %{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify-dev##" >> %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-quote-verify/build/list-libsgx-dcap-quote-verify-devel done cp -r %{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-dcap-quote-verify-dir/libsgx-dcap-quote-verify-dev pushd external/dcap_source/tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/build mkdir -p %{?buildroot}/sgx-pck-id-retrieval-tool-dir/ make DESTDIR=%{?buildroot}/sgx-pck-id-retrieval-tool-dir/ install popd echo "/opt/intel/sgx-pck-id-retrieval-tool" > external/dcap_source/tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/build/list-sgx-pck-id-retrieval-tool find %{?buildroot}/sgx-pck-id-retrieval-tool-dir | sort | \ awk '$0 !~ last "/" {print last} {last=$0} END {print last}' | \ sed -e "s#^%{?buildroot}/sgx-pck-id-retrieval-tool-dir##" | \ grep -v "^/opt/intel/sgx-pck-id-retrieval-tool" >> external/dcap_source/tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/build/list-sgx-pck-id-retrieval-tool || : sed -i 's#^/etc/rad.conf#%config &#' external/dcap_source/tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/build/list-sgx-pck-id-retrieval-tool cp -r %{?buildroot}/sgx-pck-id-retrieval-tool-dir/* %{?buildroot}/ rm -rf %{?buildroot}/sgx-pck-id-retrieval-tool-dir/ source ./%{LINUX_INSTALLER_COMMON_DIR}/sgx-aesm-service/installConfig PACKAGE_NAMES[0]=${AESM_SERVICE_PACKAGE_NAME} PACKAGE_NAMES[1]=${AE_EPID_PACKAGE_NAME} PACKAGE_NAMES[2]=${AE_LE_PACKAGE_NAME} PACKAGE_NAMES[3]=${AE_PCE_PACKAGE_NAME} PACKAGE_NAMES[4]=${AESM_ECDSA_PACKAGE_NAME} PACKAGE_NAMES[5]=${AESM_EPID_PACKAGE_NAME} PACKAGE_NAMES[6]=${AESM_LAUNCH_PACKAGE_NAME} PACKAGE_NAMES[7]=${AESM_PCE_PACKAGE_NAME} PACKAGE_NAMES[8]=${AESM_QUOTE_EX_PACKAGE_NAME} pushd %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build mkdir -p %{?buildroot}/sgx-aesm-service-dir/ make DESTDIR=%{?buildroot}/sgx-aesm-service-dir/ install popd for PACKAGE_NAME in ${PACKAGE_NAMES[@]}; do install -d %{?buildroot}/sgx-aesm-service-dir/${PACKAGE_NAME}%{_docdir}/${PACKAGE_NAME} find %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/sgx-aesm-service-dir/${PACKAGE_NAME}%{_docdir}/${PACKAGE_NAME}/COPYING # echo "${AESM_SERVICE_PACKAGE_PATH}/${AESM_SERVICE_PACKAGE_NAME}" > %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-${PACKAGE_NAME} find %{?buildroot}/sgx-aesm-service-dir/${PACKAGE_NAME} | sort | \ awk '$0 !~ last "/" {print last} {last=$0} END {print last}' | \ sed -e "s#^%{?buildroot}/sgx-aesm-service-dir/${PACKAGE_NAME}##" >> %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-${PACKAGE_NAME} # grep -v "${AESM_SERVICE_PACKAGE_PATH}/${AESM_SERVICE_PACKAGE_NAME}" >> %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-${PACKAGE_NAME} || : cp -r %{?buildroot}/sgx-aesm-service-dir/${PACKAGE_NAME}/* %{?buildroot}/ rm -rf %{?buildroot}/sgx-aesm-service-dir/${PACKAGE_NAME}/ sed -i 's#^/etc/aesmd.conf#%config &#' %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-${PACKAGE_NAME} done pushd %{LINUX_INSTALLER_RPM_DIR}/libsgx-epid/build mkdir %{?buildroot}/libsgx-epid-dir/ make DESTDIR=%{?buildroot}/libsgx-epid-dir/ install install -d %{?buildroot}/libsgx-epid-dir/libsgx-epid%{_docdir}/libsgx-epid popd find %{LINUX_INSTALLER_RPM_DIR}/libsgx-epid/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-epid-dir/libsgx-epid%{_docdir}/libsgx-epid/COPYING for f in $(find %{?buildroot}/libsgx-epid-dir/libsgx-epid -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-epid-dir/libsgx-epid##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-epid/build/list-libsgx-epid done cp -r %{?buildroot}/libsgx-epid-dir/libsgx-epid/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-epid-dir/libsgx-epid/ for f in $(find %{?buildroot}/libsgx-epid-dir/libsgx-epid-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-epid-dir/libsgx-epid-dev##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-epid/build/list-libsgx-epid-devel done cp -r %{?buildroot}/libsgx-epid-dir/libsgx-epid-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-epid-dir/libsgx-epid-dev pushd %{LINUX_INSTALLER_RPM_DIR}/libsgx-launch/build mkdir %{?buildroot}/libsgx-launch-dir/ make DESTDIR=%{?buildroot}/libsgx-launch-dir/ install install -d %{?buildroot}/libsgx-launch-dir/libsgx-launch%{_docdir}/libsgx-launch popd find %{LINUX_INSTALLER_RPM_DIR}/libsgx-launch/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-launch-dir/libsgx-launch%{_docdir}/libsgx-launch/COPYING for f in $(find %{?buildroot}/libsgx-launch-dir/libsgx-launch -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-launch-dir/libsgx-launch##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-launch/build/list-libsgx-launch done cp -r %{?buildroot}/libsgx-launch-dir/libsgx-launch/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-launch-dir/libsgx-launch/ for f in $(find %{?buildroot}/libsgx-launch-dir/libsgx-launch-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-launch-dir/libsgx-launch-dev##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-launch/build/list-libsgx-launch-devel done cp -r %{?buildroot}/libsgx-launch-dir/libsgx-launch-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-launch-dir/libsgx-launch-dev pushd %{LINUX_INSTALLER_RPM_DIR}/libsgx-quote-ex/build mkdir %{?buildroot}/libsgx-quote-ex-dir/ make DESTDIR=%{?buildroot}/libsgx-quote-ex-dir/ install install -d %{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex%{_docdir}/libsgx-quote-ex popd find %{LINUX_INSTALLER_RPM_DIR}/libsgx-quote-ex/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex%{_docdir}/libsgx-quote-ex/COPYING for f in $(find %{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-quote-ex/build/list-libsgx-quote-ex done cp -r %{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex/ for f in $(find %{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex-dev##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-quote-ex/build/list-libsgx-quote-ex-devel done cp -r %{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-quote-ex-dir/libsgx-quote-ex-dev pushd %{LINUX_INSTALLER_RPM_DIR}/libsgx-uae-service/build mkdir %{?buildroot}/libsgx-uae-service-dir/ make DESTDIR=%{?buildroot}/libsgx-uae-service-dir/ install install -d %{?buildroot}/libsgx-uae-service-dir%{_docdir}/libsgx-uae-service popd find %{LINUX_INSTALLER_RPM_DIR}/libsgx-uae-service/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-uae-service-dir%{_docdir}/libsgx-uae-service/COPYING for f in $(find %{?buildroot}/libsgx-uae-service-dir -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-uae-service-dir##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-uae-service/build/list-libsgx-uae-service done cp -r %{?buildroot}/libsgx-uae-service-dir/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-uae-service-dir/ pushd %{LINUX_INSTALLER_RPM_DIR}/libsgx-enclave-common/build mkdir %{?buildroot}/libsgx-enclave-common-dir/ make DESTDIR=%{?buildroot}/libsgx-enclave-common-dir/ install install -d %{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common%{_docdir}/libsgx-enclave-common popd find %{LINUX_INSTALLER_RPM_DIR}/libsgx-enclave-common/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common%{_docdir}/libsgx-enclave-common/COPYING for f in $(find %{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-enclave-common/build/list-libsgx-enclave-common done cp -r %{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common/ for f in $(find %{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common-dev##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-enclave-common/build/list-libsgx-enclave-common-devel done cp -r %{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-enclave-common-dir/libsgx-enclave-common-dev pushd %{LINUX_INSTALLER_RPM_DIR}/libsgx-urts/build mkdir %{?buildroot}/libsgx-urts-dir/ make DESTDIR=%{?buildroot}/libsgx-urts-dir/ install install -d %{?buildroot}/libsgx-urts-dir%{_docdir}/libsgx-urts popd find %{LINUX_INSTALLER_RPM_DIR}/libsgx-urts/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-urts-dir%{_docdir}/libsgx-urts/COPYING for f in $(find %{?buildroot}/libsgx-urts-dir -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-urts-dir##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-urts/build/list-libsgx-urts done cp -r %{?buildroot}/libsgx-urts-dir/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-urts-dir/ pushd %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-uefi/build mkdir %{?buildroot}/libsgx-ra-uefi-dir/ make DESTDIR=%{?buildroot}/libsgx-ra-uefi-dir/ install popd for f in $(find %{?buildroot}/libsgx-ra-uefi-dir/libsgx-ra-uefi -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-ra-uefi-dir/libsgx-ra-uefi##" >> %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-uefi/build/list-libsgx-ra-uefi done cp -r %{?buildroot}/libsgx-ra-uefi-dir/libsgx-ra-uefi/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-ra-uefi-dir/libsgx-ra-uefi/ for f in $(find %{?buildroot}/libsgx-ra-uefi-dir/libsgx-ra-uefi-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-ra-uefi-dir/libsgx-ra-uefi-dev##" >> %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-uefi/build/list-libsgx-ra-uefi-devel done cp -r %{?buildroot}/libsgx-ra-uefi-dir/libsgx-ra-uefi-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-ra-uefi-dir/libsgx-ra-uefi-dev pushd %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-network/build mkdir %{?buildroot}/libsgx-ra-network-dir/ make DESTDIR=%{?buildroot}/libsgx-ra-network-dir/ install popd for f in $(find %{?buildroot}/libsgx-ra-network-dir/libsgx-ra-network -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-ra-network-dir/libsgx-ra-network##" >> %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-network/build/list-libsgx-ra-network done cp -r %{?buildroot}/libsgx-ra-network-dir/libsgx-ra-network/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-ra-network-dir/libsgx-ra-network/ for f in $(find %{?buildroot}/libsgx-ra-network-dir/libsgx-ra-network-dev -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-ra-network-dir/libsgx-ra-network-dev##" >> %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-network/build/list-libsgx-ra-network-devel done cp -r %{?buildroot}/libsgx-ra-network-dir/libsgx-ra-network-dev/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-ra-network-dir/libsgx-ra-network-dev pushd %{TOOLS_INSTALLER_RPM_DIR}/sgx-ra-service/build mkdir %{?buildroot}/sgx-ra-service-dir/ make DESTDIR=%{?buildroot}/sgx-ra-service-dir/ install popd echo "/opt/intel/sgx-ra-service" > %{TOOLS_INSTALLER_RPM_DIR}/sgx-ra-service/build/list-sgx-ra-service find %{?buildroot}/sgx-ra-service-dir | sort | \ awk '$0 !~ last "/" {print last} {last=$0} END {print last}' | \ sed -e "s#^%{?buildroot}/sgx-ra-service-dir##" | \ grep -v "^/opt/intel/sgx-ra-service" >> %{TOOLS_INSTALLER_RPM_DIR}/sgx-ra-service/build/list-sgx-ra-service || : sed -i 's#^/etc/mpa_registration.conf#%config &#' %{TOOLS_INSTALLER_RPM_DIR}/sgx-ra-service/build/list-sgx-ra-service cp -r %{?buildroot}/sgx-ra-service-dir/* %{?buildroot}/ rm -rf %{?buildroot}/sgx-ra-service-dir/ pushd %{LINUX_INSTALLER_RPM_DIR}/libsgx-headers/build mkdir %{?buildroot}/libsgx-headers-dir/ make DESTDIR=%{?buildroot}/libsgx-headers-dir/ install install -d %{?buildroot}/libsgx-headers-dir%{_docdir}/libsgx-headers popd find %{LINUX_INSTALLER_RPM_DIR}/libsgx-headers/build/package/licenses/ -type f -print0 | xargs -0 -n1 cat >> %{?buildroot}/libsgx-headers-dir%{_docdir}/libsgx-headers/COPYING for f in $(find %{?buildroot}/libsgx-headers-dir -type f -o -type l); do echo $f | sed -e "s#%{?buildroot}/libsgx-headers-dir##" >> %{LINUX_INSTALLER_RPM_DIR}/libsgx-headers/build/list-libsgx-headers done cp -r %{?buildroot}/libsgx-headers-dir/* %{?buildroot}/ rm -rf %{?buildroot}/libsgx-headers-dir/ %pre %post -n sgx-aesm-service if [ "$1" = "1" ];then if [ -x /opt/intel/sgx-aesm-service/startup.sh ]; then /opt/intel/sgx-aesm-service/startup.sh; fi fi %post -n libsgx-enclave-common trigger_udev() { if ! which udevadm &> /dev/null; then return 0 fi udevadm control --reload || : udevadm trigger || : } trigger_udev %preun -n sgx-dcap-pccs if [ $1 == 0 -a -x /opt/intel/sgx-dcap-pccs/cleanup.sh ]; then /opt/intel/sgx-dcap-pccs/cleanup.sh; fi %posttrans -n sgx-pck-id-retrieval-tool ################################################################################ # Set up SGX pck cert id retrieve tool # ################################################################################ # Install the SGX_PCK_ID_RETRIEVE_TOOL ln -s -f /opt/intel/sgx-pck-id-retrieval-tool/PCKIDRetrievalTool /usr/local/bin/PCKIDRetrievalTool retval=$? if test $retval -ne 0; then echo "failed to install $SGX_PCK_ID_RETRIEVE_TOOL_NAME." exit 6 fi echo -e "Installation succeed!" %post -n libsgx-ae-pce trigger_udev() { if ! which udevadm &> /dev/null; then return 0 fi udevadm control --reload || : udevadm trigger || : } # Add sgx_prv for in-kernel driver. if [ -c /dev/sgx_provision -o -c /dev/sgx/provision ]; then /usr/bin/getent group sgx_prv &> /dev/null || /usr/sbin/groupadd sgx_prv trigger_udev fi %preun -n sgx-ra-service if [ "$1" = "0" ]; then if [ -x /opt/intel/sgx-ra-service/cleanup.sh ]; then /opt/intel/sgx-ra-service/cleanup.sh; fi fi %posttrans -n sgx-ra-service if [ -x /opt/intel/sgx-ra-service/startup.sh ]; then /opt/intel/sgx-ra-service/startup.sh; fi %postun -n sgx-pck-id-retrieval-tool # Removing SGX_PCK_ID_RETRIEVE_TOOL soft link file if [ "$1" = "0" ]; then rm -f /usr/local/bin/PCKIDRetrievalTool fi echo -e "Uninstallation succeed!" %preun -n sgx-aesm-service if [ "$1" = "0" ]; then if [ -x /opt/intel/sgx-aesm-service/cleanup.sh ]; then /opt/intel/sgx-aesm-service/cleanup.sh; fi fi %post -n sgx-dcap-pccs if [ -x /opt/intel/sgx-dcap-pccs/startup.sh ]; then /opt/intel/sgx-dcap-pccs/startup.sh; fi %files -n sgxsdk -f %{LINUX_INSTALLER_RPM_DIR}/sdk/build/list-sgxsdk %files -n libsgx-ae-qe3 -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qe3/build/list-libsgx-ae-qe3 %files -n libsgx-pce-logic -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-pce-logic/build/list-libsgx-pce-logic %files -n libsgx-qe3-logic -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-qe3-logic/build/list-libsgx-qe3-logic %files -n libsgx-dcap-default-qpl -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-default-qpl/build/list-libsgx-dcap-default-qpl %files -n libsgx-dcap-default-qpl-devel -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-default-qpl/build/list-libsgx-dcap-default-qpl-devel %files -n sgx-aesm-service -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-sgx-aesm-service %exclude /var/opt/aesmd/data %files -n libsgx-ae-epid -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-libsgx-ae-epid %files -n libsgx-ae-le -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-libsgx-ae-le %files -n libsgx-ae-pce -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-libsgx-ae-pce %files -n libsgx-aesm-ecdsa-plugin -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-libsgx-aesm-ecdsa-plugin %files -n libsgx-aesm-epid-plugin -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-libsgx-aesm-epid-plugin %files -n libsgx-aesm-launch-plugin -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-libsgx-aesm-launch-plugin %files -n libsgx-aesm-pce-plugin -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-libsgx-aesm-pce-plugin %files -n libsgx-aesm-quote-ex-plugin -f %{LINUX_INSTALLER_RPM_DIR}/sgx-aesm-service/build/list-libsgx-aesm-quote-ex-plugin %files -n libsgx-epid -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-epid/build/list-libsgx-epid %files -n libsgx-epid-devel -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-epid/build/list-libsgx-epid-devel %files -n libsgx-launch -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-launch/build/list-libsgx-launch %files -n libsgx-launch-devel -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-launch/build/list-libsgx-launch-devel %files -n libsgx-quote-ex -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-quote-ex/build/list-libsgx-quote-ex %files -n libsgx-quote-ex-devel -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-quote-ex/build/list-libsgx-quote-ex-devel %files -n libsgx-uae-service -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-uae-service/build/list-libsgx-uae-service %files -n libsgx-enclave-common -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-enclave-common/build/list-libsgx-enclave-common %files -n libsgx-enclave-common-devel -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-enclave-common/build/list-libsgx-enclave-common-devel %files -n libsgx-urts -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-urts/build/list-libsgx-urts %files -n sgx-dcap-pccs -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/sgx-dcap-pccs/build/list-sgx-dcap-pccs %files -n libsgx-dcap-ql -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-ql/build/list-libsgx-dcap-ql %files -n libsgx-dcap-ql-devel -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-ql/build/list-libsgx-dcap-ql-devel %files -n libsgx-ae-qve -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-ae-qve/build/list-libsgx-ae-qve %files -n libsgx-dcap-quote-verify -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-quote-verify/build/list-libsgx-dcap-quote-verify %files -n libsgx-dcap-quote-verify-devel -f %{DCAP_LINUX_INSTALLER_RPM_DIR}/libsgx-dcap-quote-verify/build/list-libsgx-dcap-quote-verify-devel %files -n sgx-pck-id-retrieval-tool -f external/dcap_source/tools/PCKRetrievalTool/installer/rpm/sgx-pck-id-retrieval-tool/build/list-sgx-pck-id-retrieval-tool %files -n libsgx-ra-uefi -f %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-uefi/build/list-libsgx-ra-uefi %files -n libsgx-ra-uefi-devel -f %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-uefi/build/list-libsgx-ra-uefi-devel %files -n libsgx-ra-network -f %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-network/build/list-libsgx-ra-network %files -n libsgx-ra-network-devel -f %{TOOLS_INSTALLER_RPM_DIR}/libsgx-ra-network/build/list-libsgx-ra-network-devel %files -n sgx-ra-service -f %{TOOLS_INSTALLER_RPM_DIR}/sgx-ra-service/build/list-sgx-ra-service %files -n libsgx-headers -f %{LINUX_INSTALLER_RPM_DIR}/libsgx-headers/build/list-libsgx-headers %changelog * Thu Jul 18 2024 wangqingsan<wangqingsan@huawei.com> - 2.19-6 - fix CVE-2024-5535 * Mon Jun 17 2024 gengqihu<gengqihu2@h-partners.com> - 2.19-5 - Disabling the Automatic Startup of Software Package Upgrade * Mon Feb 26 2024 wangqingsan<wangqingsan@huawei.com> - 2.19-4 - fix CVE-2023-0464,CVE-2023-0465,CVE-2023-0466,CVE-2023-2650,CVE-2023-3446,CVE-2023-3817,CVE-2023-5678. * Sun Feb 25 2024 wangqingsan<wangqingsan@huawei.com> - 2.19-3 - fix build failed. * Thu Aug 10 2023 zhoushuiqing <zhoushuiqing2@huawei.com> - 2.19-2 - Keep in sync with the version number of intel-sgx-ssl. * Sat Jul 22 2023 zhoushuiqing <zhoushuiqing2@huawei.com> - 2.19-1 - Upgrade to 2.19 * Mon Feb 06 2023 wangyu <wangyu283@huawei.com> - 2.18.1-1 - Upgrade to 2.18.1 * Thu Feb 02 2023 wangyu <wangyu283@huawei.com> - 2.15.1-9 - Add ocaml and compat-openssl11-devel to build require * Sat Sep 24 2022 wangyu <wangyu283@huawei.com> - 2.15.1-8 - The postun script should distinguish uninstall and upgrade scenarios * Tue Sep 20 2022 wangyu <wangyu283@huawei.com> - 2.15.1-7 - add strip compilation option for pck-id-retrieval-tool * Fri Sep 09 2022 wangyu <wangyu283@huawei.com> - 2.15.1-6 - DCAP disabling the rpatch option * Sat Aug 27 2022 houmingyong<houmingyong@huawei.com> - 2.15.1-5 - backport openssl CVE-2022-2068 and CVE-2022-2097 * Mon Jun 27 2022 wangyu <wangyu283@huawei.com> - 2.15.1-4 - backport openssl CVE-2022-0778 and CVE-2022-1292, protobuf CVE-2021-22570 * Wed Jun 22 2022 zhengxiaoxiao <zhengxiaoxiao2@huawei.com> - 2.15.1-3 - sgx-aesm-service exclude /var/opt/aesmd/data * Wed Jun 22 2022 wangyu <wangyu283@huawei.com> - 2.15.1-2 - add yaml file * Mon Jun 13 2022 wangyu <wangyu283@huawei.com> - 2.15.1-1 - init
Locations
Projects
Search
Status Monitor
Help
Open Build Service
OBS Manuals
API Documentation
OBS Portal
Reporting a Bug
Contact
Mailing List
Forums
Chat (IRC)
Twitter
Open Build Service (OBS)
is an
openSUSE project
.
浙ICP备2022010568号-2