PR#19: add seccomp support - rpms/file

Vincent Mihalkovic • 7 months ago

91d7ac6

Vincent Mihalkovic • 7 months ago

1202043

file-5.44-seccomp.patch

file added

+30

		`@@ -0,0 +1,30 @@`
		`+ From 1590a653b520123d47070a47436abfba42d4c943 Mon Sep 17 00:00:00 2001`
		`+ From: Christos Zoulas <christos@zoulas.com>`
		`+ Date: Mon, 26 Dec 2022 18:57:29 +0000`
		`+ Subject: [PATCH] PR/408: SpraxDev: Add utimes to the allow list for -p`
		`+`
		`+ ---`
		`+ src/seccomp.c \| 3 ++-`
		`+ 1 file changed, 2 insertions(+), 1 deletion(-)`
		`+`
		`+ diff --git a/src/seccomp.c b/src/seccomp.c`
		`+ index 70d9b1045..87d4c49e7 100644`
		`+ --- a/src/seccomp.c`
		`+ +++ b/src/seccomp.c`
		`+ @@ -27,7 +27,7 @@`
		`+ #include "file.h"`
		`+`
		`+ #ifndef lint`
		`+ -FILE_RCSID("@(#)$File: seccomp.c,v 1.24 2022/09/24 20:30:13 christos Exp $")`
		`+ +FILE_RCSID("@(#)$File: seccomp.c,v 1.25 2022/12/26 18:57:29 christos Exp $")`
		`+ #endif /* lint */`
		`+`
		`+ #if HAVE_LIBSECCOMP`
		`+ @@ -233,6 +233,7 @@ enable_sandbox_full(void)`
		`+ ALLOW_RULE(umask); // Used in file_pipe2file()`
		`+ ALLOW_RULE(getpid); // Used by glibc in file_pipe2file()`
		`+ ALLOW_RULE(unlink);`
		`+ + ALLOW_RULE(utimes);`
		`+ ALLOW_RULE(write);`
		`+ ALLOW_RULE(writev);`
		`+`

file.spec

file modified

+8 -1

		`@@ -15,7 +15,7 @@`
		`Summary: Utility for determining file types`
		`Name: file`
		`Version: 5.44`
		`- Release: 1%{?dist}`
		`+ Release: 2%{?dist}`
		`License: BSD`
		`Source0: http://ftp.astron.com/pub/file/file-%{version}.tar.gz`
		`Source1: http://ftp.astron.com/pub/file/file-%{version}.tar.gz.asc`
		`@@ -32,6 +32,9 @@`
		`# upstream commit: https://github.com/file/file/commit/1dd21dd360472d7b830825df8e40a06cdc1cbbcf`
		`Patch3: file-5.44-compression.patch`

		`+ # upstream commit: https://github.com/file/file/commit/1590a653b520123d47070a47436abfba42d4c943`
		`+ Patch4: file-5.44-seccomp.patch`
		`+`
		`URL: https://www.darwinsys.com/file/`
		`Requires: file-libs%{?_isa} = %{version}-%{release}`
		`BuildRequires: zlib-devel`
		`@@ -40,6 +43,7 @@`
		`BuildRequires: libtool`
		`BuildRequires: make`
		`BuildRequires: gnupg2`
		`+ BuildRequires: libseccomp-devel`

		`%description`
		`The file command is used to identify a particular file according to the`
		`@@ -216,6 +220,9 @@`
		`%endif`

		`%changelog`
		`+ * Thu Jan 26 2023 Vincent Mihalkovic <vmihalko@redhat.com> - 5.44-2`
		`+ - fix seccomp support`
		`+`
		`* Fri Jan 20 2023 Vincent Mihalkovic <vmihalko@redhat.com> - 5.44-1`
		`- update to new version 5.44`