File _service:obs_scm:usbguard.spec of Package usbguard

%global selinuxtype targeted
%global moduletype contrib
%define semodule_version 0.0.5

Name:          usbguard
Version:       1.1.3
Release:       2
Summary:       A tool for computer usb guard
License:       GPL-2.0-or-later
URL:           https://usbguard.github.io/
Source0:       https://github.com/USBGuard/usbguard/releases/download/usbguard-%{version}/usbguard-%{version}.tar.gz
Source1:       https://github.com/USBGuard/usbguard-selinux/archive/refs/tags/v%{semodule_version}.tar.gz
Source2:       usbguard-daemon.conf
Patch0000:     usbguard-revert-catch.patch

BuildRequires: libqb-devel libgcrypt-devel libstdc++-devel protobuf-devel protobuf-compiler PEGTL-devel gcc gcc-c++
BuildRequires: catch1-devel autoconf automake libtool bash-completion asciidoc audit-libs-devel systemd make
Requires:      systemd
Requires:      (%{name}-selinux if selinux-policy-%{selinuxtype})
Obsoletes:     %{name}-applet-qt < 0.7.6
%{?systemd_requires}

%description
USBGuard helps to protect your computer against rogue USB devices.

%package       devel
Summary:       Development files for usbguard
Requires:      usbguard = %{version}-%{release} pkgconfig libstdc++-devel

%description   devel
Development libraries and header files for usbguard.

%package       tools
Summary:       USBGuard Tools
Requires:      usbguard = %{version}-%{release}

%description   tools
Optional tools from the USBGuard software framework.

%package       dbus
Summary:       USBGuard D-Bus Service
BuildRequires: dbus-glib-devel dbus-devel glib2-devel
BuildRequires: polkit-devel libxslt libxml2
Requires:      usbguard = %{version}-%{release} dbus polkit
%{?systemd_requires}

%description   dbus
Optional component that provides a D-Bus interface to the USBGuard daemon component.

%package       selinux
Summary:       USBGuard selinux
Group:         Applications/System
Requires:      %{name} = %{version}-%{release}
BuildRequires: selinux-policy-devel
Requires:      selinux-policy-%{selinuxtype}
Requires(post): selinux-policy-%{selinuxtype}
BuildArch:      noarch
%{?selinux_requires}
 
%description   selinux
The %{name}-selinux package contains selinux policy for the USBGuard daemon.

%package_help

%prep
%setup -q
 
%setup -q -D -T -a 1
 
%patch -P0000 -p1 -b .catch

%build
install -d ./m4
autoreconf -i -v --no-recursive ./
%configure --disable-silent-rules --without-bundled-catch --without-bundled-pegtl \
           --enable-systemd --with-dbus --with-polkit \
           --with-crypto-library=gcrypt --disable-static

%make_build

pushd %{name}-selinux-%{semodule_version}
make
popd

%check
make check

%install
%make_install
%delete_la

mkdir -p %{buildroot}%{_sysconfdir}/usbguard/rules.d
install -d %{buildroot}%{_sysconfdir}/usbguard/IPCAccessControl.d
cp %{SOURCE2} %{buildroot}%{_sysconfdir}/usbguard/usbguard-daemon.conf
chmod 644 %{buildroot}%{_sysconfdir}/usbguard/usbguard-daemon.conf

install -d %{buildroot}%{_datadir}/selinux/packages/%{selinuxtype}
install -m 0644 %{name}-selinux-%{semodule_version}/%{name}.pp.bz2 %{buildroot}%{_datadir}/selinux/packages/%{selinuxtype}
install -d -p %{buildroot}%{_datadir}/selinux/devel/include/%{moduletype}
install -p -m 644 %{name}-selinux-%{semodule_version}/%{name}.if %{buildroot}%{_datadir}/selinux/devel/include/%{moduletype}/ipp-%{name}.if

%preun
%systemd_preun usbguard.service

%post
%systemd_post usbguard.service

%postun
%systemd_postun usbguard.service

%preun         dbus
%systemd_preun usbguard-dbus.service

%post          dbus
%systemd_post usbguard-dbus.service

%postun        dbus
%systemd_postun_with_restart usbguard-dbus.service

%pre           selinux
%selinux_relabel_pre -s %{selinuxtype}

%post          selinux
%selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.bz2
 
%postun        selinux
if [ $1 -eq 0 ]; then
    %selinux_modules_uninstall -s %{selinuxtype} %{name}
fi
 
%posttrans     selinux
%selinux_relabel_post -s %{selinuxtype}

%files
%doc LICENSE
%{_libdir}/*.so.*
%{_sbindir}/usbguard-daemon
%{_bindir}/usbguard
%dir %{_localstatedir}/log/usbguard
%dir %{_sysconfdir}/usbguard
%dir %{_sysconfdir}/usbguard/rules.d/
%dir %{_sysconfdir}/usbguard/IPCAccessControl.d
%config(noreplace) %attr(0600,-,-) %{_sysconfdir}/usbguard/usbguard-daemon.conf
%config(noreplace) %attr(0600,-,-) %{_sysconfdir}/usbguard/rules.conf
%{_unitdir}/usbguard.service
%{_datadir}/bash-completion/completions/usbguard

%files         devel
%{_includedir}/*
%{_libdir}/*.so
%{_libdir}/pkgconfig/*.pc

%files         tools
%{_bindir}/usbguard-rule-parser

%files         dbus
%{_sbindir}/usbguard-dbus
%{_datadir}/dbus-1/system-services/org.usbguard1.service
%{_datadir}/dbus-1/system.d/org.usbguard1.conf
%{_datadir}/polkit-1/actions/org.usbguard1.policy
%{_unitdir}/usbguard-dbus.service

%files         selinux
%{_datadir}/selinux/packages/%{selinuxtype}/%{name}.pp.bz2
%ghost %verify(not md5 size mode mtime) %{_sharedstatedir}/selinux/%{selinuxtype}/active/modules/200/%{name}
%{_datadir}/selinux/devel/include/%{moduletype}/ipp-%{name}.if

%files         help
%doc README.adoc CHANGELOG.md
%{_mandir}/man?/*

%changelog
* Wed Nov 06 2024 Funda Wang <fundawang@yeah.net> - 1.1.3-2
- cleanup spec
- PEGTL-devel only contains header files now, it does provide static devel name

* Thu Jul 04 2024 wangkai <13474090681@163.com> - 1.1.3-1
- Update to 1.1.3
- Fix typo in CLI --help message: "privilges" -> "privileges"
- Harden service file: Set OOMScoreAdjust to -1000
- The parent process should wait for the first child process to finish in forking mode(-f)
- dbus: check whether the client wanted interactive authentication
- Add "--version" option to the usbguard CLI
- ruleset: detect integer overflow of the ID and bail out
- Enable RuleFolder by default

* Thu Apr 20 2023 liyanan <thistleslyn@163.com> - 1.1.2-1
- upgrade 1.1.2

* Mon Mar 07 2022 houyingchao <houyingchao@huawei.com> - 0.7.2-7
- Fix CVE-2019-25058

* Mon Apr 27 2020 lizhenhua <lizhenhua21@huawei.com> - 0.7.2-6
- Package init