## This package understands the following switches:

%bcond_without		fedora

%bcond_without		noarch

%global username		toranon

%global uid			19

%global homedir			%_var/lib/%name

%global logdir			%_var/log/%name

%{?with_noarch:%global noarch	BuildArch:	noarch}

%{!?release_func:%global release_func() %%{?prerelease:0.}%1%%{?prerelease:.%%prerelease}%%{?dist}}

Name:		tor

Version:	0.2.1.32

Release:	%release_func 1400

Group:		System Environment/Daemons

License:	BSD

Summary:	Anonymizing overlay network for TCP (The onion router)

URL:		http://tor.eff.org

Requires:	%name-core = %version-%release

Requires:	%name-lsb  = %version-%release

%package core

Summary:	Core programs for tor

Group:		System Environment/Daemons

URL:		http://www.torproject.org

Source0:	https://www.torproject.org/dist/%name-%version.tar.gz

Source1:	https://www.torproject.org/dist/%name-%version.tar.gz.asc

Source2:	tor.logrotate

BuildRoot:	%_tmppath/%name-%version-%release-root

BuildRequires:	libevent-devel openssl-devel transfig ghostscript

BuildRequires:	/usr/bin/latex

BuildRequires:	texlive-texmf-fonts

BuildRequires:	fedora-usermgmt-devel

Provides:		user(%username)  = %uid

Provides:		group(%username) = %uid

Requires:		init(%name)

Requires(pre):		/etc/logrotate.d

Requires(postun):	/etc/logrotate.d

%{?FE_USERADD_REQ}

%package doc

Summary:	Documentation for tor

Group:		System Environment/Daemons

Requires:	%name-core = %version-%release

%{?noarch}

%package lsb

Summary:	LSB initscripts for tor

Group:		System Environment/Daemons

Provides:	init(%name) = lsb

Conflicts:	init(%name) = sysv

Requires:	%name-core =  %version-%release

Source10:	tor.lsb

Requires(pre):		%name-core

Requires(postun):	lsb-core-noarch %name-core

Requires(post):		lsb-core-noarch

Requires(preun):	lsb-core-noarch

%{?noarch}

%package sysv

Summary:	Tor initscripts for Red Hat's proprietary initsystem

Group:		System Environment/Daemons

Provides:	init(%name) = sysv

Conflicts:	init(%name) = lsb

Requires:	%name-core =  %version-%release

Source30:	tor.sysv

Requires(pre):		%name-core

Requires(post): chkconfig

Requires(preun): chkconfig

# This is for /sbin/service

Requires(preun): initscripts

# This is for /sbin/service

Requires(postun): initscripts

%{?noarch}

%package upstart

Summary:		upstart initscripts for %name

Group:			System Environment/Base

Source20:		%name.upstart

Provides:		init(%name) = upstart

Requires:		%name-core = %version-%release

Requires(pre):		/etc/init

Requires(post):		/usr/bin/killall

Requires(postun):	/sbin/initctl

%{?noarch}

%description

Tor is a connection-based low-latency anonymous communication system.

Applications connect to the local Tor proxy using the SOCKS protocol. The

local proxy chooses a path through a set of relays, in which each relay

knows its predecessor and successor, but no others. Traffic flowing down

the circuit is unwrapped by a symmetric key at each relay, which reveals

the downstream relay.

Warnings: Tor does no protocol cleaning.  That means there is a danger

that application protocols and associated programs can be induced to

reveal information about the initiator. Tor depends on Privoxy and

similar protocol cleaners to solve this problem. This is alpha code,

and is even more likely than released code to have anonymity-spoiling

bugs. The present network is very small -- this further reduces the

strength of the anonymity provided. Tor is not presently suitable for

high-stakes anonymity.

%description core

Tor is a connection-based low-latency anonymous communication system.

This package provides the "tor" program, which serves as both a client

and a relay node.

%description doc

Tor is a connection-based low-latency anonymous communication system.

This package provides documentation for "tor".

%description lsb

Tor is a connection-based low-latency anonymous communication system.

This package contains the LSB compliant initscripts to start the "tor"

daemon.

%description sysv

Tor is a connection-based low-latency anonymous communication system.

This package contains the initscripts to start the "tor" daemon with

Red Hat's proprietary initsystem.

%description upstart

Tor is a connection-based low-latency anonymous communication system.

This package contains the upstart compliant initscripts to start the "tor"

daemon.

%prep

%setup -q

sed -i -e 's!^\(\# *\)\?DataDirectory .*!DataDirectory %homedir/.tor!' src/config/torrc.sample.in

cat <<EOF >>src/config/torrc.sample.in

Log notice syslog

User  %username

EOF

%build

export LDFLAGS='-Wl,--as-needed'

%configure

make %{?_smp_mflags}

make -C doc/design-paper tor-design.pdf

%install

rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT

mv $RPM_BUILD_ROOT%_sysconfdir/tor/torrc{.sample,}

mkdir -p $RPM_BUILD_ROOT{%_sysconfdir/logrotate.d,%_initrddir,%logdir,%homedir,%_var/run/%name}

install -p -m0755 %SOURCE10 $RPM_BUILD_ROOT%_initrddir/tor

install -p -m0644 %SOURCE2  $RPM_BUILD_ROOT%_sysconfdir/logrotate.d/tor

install -pD -m 0644 %SOURCE20 $RPM_BUILD_ROOT/etc/init/tor.conf

%pre core

%__fe_groupadd %uid -r %username &>/dev/null || :

%__fe_useradd  %uid -r -s /sbin/nologin -d %homedir -M          \

                    -c 'TOR anonymizing user' -g %username %username &>/dev/null || :

%postun core

%__fe_userdel  %username &>/dev/null || :

%__fe_groupdel %username &>/dev/null || :

%post lsb

/usr/lib/lsb/install_initd %_initrddir/tor

%preun lsb

test "$1" != 0 || %_initrddir/tor stop &>/dev/null || :

test "$1" != 0 || /usr/lib/lsb/remove_initd %_initrddir/tor

%postun lsb

test "$1"  = 0 || env -i %_initrddir/tor try-restart &>/dev/null

%post sysv

# This adds the proper /etc/rc*.d links for the script

/sbin/chkconfig --add <script>

%preun sysv

if [ $1 = 0 ] ; then

    /sbin/service <script> stop >/dev/null 2>&1

    /sbin/chkconfig --del <script>

fi

%postun sysv

if [ "$1" -ge "1" ] ; then

    /sbin/service <script> condrestart >/dev/null 2>&1 || :

fi

%postun upstart

/usr/bin/killall -u %username -s INT tor 2>/dev/null || :

%preun upstart

test "$1" != "0" || /sbin/initctl -q stop tor || :

%clean

rm -rf $RPM_BUILD_ROOT

%files

%files doc

%defattr(-,root,root,-)

%doc doc/HACKING

%doc doc/design-paper/tor-design.pdf

%files core

%defattr(-,root,root,-)

%doc AUTHORS LICENSE README ChangeLog

%doc ReleaseNotes

%dir               %_sysconfdir/tor

%config(noreplace) %_sysconfdir/logrotate.d/tor

%attr(0700,%username,%username) %dir %homedir

%attr(0730,root,%username)      %dir %logdir

%attr(0640,root,%username) %config(noreplace) %_sysconfdir/tor/torrc

%_bindir/*

%_mandir/man1/*

%_datadir/tor

%exclude %_bindir/torify

%exclude %_mandir/man1/torify*

%exclude %_sysconfdir/tor/tor-tsocks.conf

%files lsb

  %defattr(-,root,root,-)

  %config %_initrddir/*

  %attr(0755,%username,%username) %dir %_var/run/%name

%files upstart

%defattr(-,root,root,-)

%config(noreplace) /etc/init/*

%changelog

* Sat Dec 17 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.32-1400

- updated to 0.2.1.32 (security)

- CVE-2011-2778: Tor heap-based buffer overflow

* Fri Oct 28 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.31-1400

- updated to 0.2.1.31; critical privacy/anonymity fixes

- CVE-2011-2768

- CVE-2011-2769

* Thu Mar 17 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.30-1400

- updated to 0.2.1.30

* Mon Jan 17 2011 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.29-1400

- updated to 0.2.1.29 (SECURITY)

- CVE-2011-0427: heap overflow bug, potential remote code execution

* Tue Dec 21 2010 Luke Macken <lmacken@redhat.com> - 0.2.1.28-1400

- updated to 0.2.1.28 (SECURITY: fixes a remotely exploitable heap overflow bug)

* Fri Nov 26 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.27-1400

- updated to 0.2.1.27

- work around broken chkconfig by adding dummy Default-Start: in -lsb (#647512)

* Fri Nov 26 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.26-1401

- fixed 'limit' statement in upstart script

* Tue Jun  1 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.26-1400

- updated to 0.2.1.26

- log to syslog as request by upstream (#532373#19)

- removed workaround to install lsb initscript because parts of the

  underlying problem have been fixed in redhat-lsb and the remaining

  ones were solved by previous commit

- removed $local_fs dependency in -lsb initscript to workaround

  buggy redhat-lsb; $remote_fs should imply it and has been moved to

  Should-Start:

* Tue Jun  1 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>

- created -doc subpackage and moved most (all) files from main into it

* Sun Mar 28 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>

- added -sysv subpackage

* Thu Mar 18 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.25-1400

- updated to 0.2.1.25

* Wed Mar  3 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.24-1402

- removed /var/lib/tor-data dir (Chen Lei)

* Tue Mar  2 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.24-1401

- require tor-core, not tor in -upstart (thx to Dave Jones)

* Sat Feb 27 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.24-1400

- updated to 0.2.1.24

* Mon Feb 15 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.23-1300

- updated to 0.2.1.23

* Thu Jan 21 2010 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.22-1300

- updated to 0.2.1.22

* Thu Dec 31 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.21-1300

- updated to 0.2.1.21

* Sun Dec  6 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.20-1301

- updated -upstart to upstart 0.6.3

* Sat Nov 14 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.20-1300

- updated URLs (#532373)

- removed (inactive) update mechanism for GeoIP data; this might

  reduce anonimity  (#532373)

- use the pidfile at various places in the LSB initscript to operate

  on the correct process (#532373)

- set a higher 'nofile' limit in the upstart initscript to allow fast

  relays; LSB users will have to add a 'ulimit -n' into /etc/sysconfig/tor

  to get a similar effect (#532373)

- let the LSB initscript wait until process exits within a certain

  time; this fixes shutdown/restart problems when working as a server

  (#532373)

- fixed initng related typo in logrotate script (#532373)

- removed <linux/netfilter_ipv4.h> hack; it is fixed upstream and/or

  in the kernel sources

- use %%postun, not %%post as a -upstart scriptlet and send INT, not

  TERM signal to stop/restart daemon

* Sun Oct 25 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.20-1

- updated to 0.2.1.20

* Sat Sep 12 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.19-2

- workaround bug in redhat-lsb (#522053)

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 0.2.1.19-1

- rebuilt with new openssl

* Sun Aug  9 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.1.19-0

- updated to 0.2.1.19

- rediffed patches

* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0.35-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Fri Jun 26 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.35-1

- updated to 0.2.0.35

- added '--quiet' to startup options (bug #495987)

- updated %%doc entries

* Wed May  6 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.34-4

- made it easy to rebuild package in RHEL by adding a 'noarch'

  conditional to enable/disable noarch subpackages

* Sat Mar  7 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.34-3

- added -upstart subpackage (-lsb still wins by default as there exists

  no end-user friendly solution for managing upstart initscripts)

* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.0.34-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Tue Feb 10 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.34-1

- updated to 0.2.0.34 (SECURITY: fixes DoS vulnerabilities)

* Thu Jan 22 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.33-1

- updated to 0.2.0.33 (SECURITY: fixed heap-corruption bug)

* Sun Jan 18 2009 Tomas Mraz <tmraz@redhat.com> - 0.2.0.32-2

- rebuild with new openssl

* Sun Dec  7 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.32-1

- updated to 0.2.0.32

- removed -setgroups patch; supplementary groups are now set upstream

* Sun Jul 20 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.2.0.30-1

- updated to 0.2.0.30; rediffed patches

- (re)enabled transparent proxy support by workarounding broken

  <linux/netfilter_ipv4.h> header

- moved the 'geoip' database to /var/lib/tor-data where it can be

  updated periodically

- built with -Wl,--as-needed

* Thu Jul 10 2008 Nikolay Vladimirov <nikolay@vladimiroff.com> - 0.1.2.19-3

- rebuild for new libevent

* Wed Feb 13 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.19-2

- added 'missingok' to logrotate script (#429402)

* Tue Feb 12 2008 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.19-1

- updated to 0.1.2.19

- use file based BR for latex

- improved 'status' method of initscript to return rc of 'pidofproc'

  instead of doing further manual tests.  Calling 'pidofproc' directly

  instead of within a subshell should workaround #432254 too.

* Sat Jan 26 2008 Alex Lancaster <alexlan[AT]fedoraproject org> - 0.1.2.18-4

- Update BuildRequires: tex(latex),

- BR: texlive-texmf-fonts seems also to be necessary

* Sat Jan 26 2008 Alex Lancaster <alexlan[AT]fedoraproject org> - 0.1.2.18-3

- Rebuild for new libevent.

* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> - 0.1.2.18-2

- Rebuild for deps

* Tue Oct 30 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.18-1

- updated to 0.1.2.18

* Fri Aug 31 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.17-1

- updated to 0.1.2.17

* Sat Aug 25 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.16-2

- fixed open(2) issue

* Fri Aug  3 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.16-1

- updated to 0.1.2.16 (SECURITY)

* Sat Jul 28 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.15-1

- updated to 0.1.2.15

* Sat May 26 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.14-1

- updated to 0.1.2.14

* Wed Apr 25 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.2.13-1

- updated to 0.1.2.13

- minor cleanups; especially in the %%doc section

* Sun Apr  8 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.26-4

- rebuilt for (yet another) new libevent

* Mon Feb 26 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.26-3

- rebuilt for new libevent

* Wed Jan 24 2007 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.26-2

- updated -setgroups patch (#224090, thx to Sami Farin)

* Sun Dec 17 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.26-1

- updated to 0.1.1.26 (SECURITY)

- do not turn on logging by default; it's easier to say "we do not log

  anything" to the police instead of enumerating the logged event

  classes and trying to explain that they do not contain any valuable

  information

* Sun Nov 12 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.25-1

- updated to 0.1.1.25

* Thu Oct  5 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.24-1

- updated to 0.1.1.24

* Sat Sep 30 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-5

- updated to recent fedora-usermgmt

- minor cleanups

- require only 'lsb-core-noarch' instead of whole 'lsb'

* Tue Sep 26 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-4

- first FE release (review #175433)

* Mon Sep 25 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-3

- removed '.have-lsb' and related logic in logrotate script; check for

  existence of the corresponding initscript instead of

- fixed bare '%%' in changelog section

* Thu Sep 21 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-2

- simplified things yet more and removed tsocks/torify too

- build -lsb unconditionally

* Thu Sep 21 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-1

- simplified spec file and removed -initng and -minit stuff

* Sun Aug 13 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.23-0

- updated to 0.1.1.23

* Sat Jul  8 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.22-0

- updated to 0.1.1.22

* Tue Jun 13 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.21-0

- updated to 0.1.1.21

* Wed May 24 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.1.20-0

- updated to 0.1.1.20; adjusted %%doc file-list

- added (optional) -tsocks subpackage

- use the more modern %%bcond_with* for specifying optional features

* Sun Feb 19 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.17-0

- updated to 0.1.0.17

* Mon Jan 30 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.16-0.1

- renamed the current main-package into a '-core' subpackage and

  created a new main-package which requires both the 'tor-core'

  subpackage and this with the current default init-method. This

  allows 'yum install tor' to work better; because yum is not very

  smart, the old packaging might install unwanted packages else.

* Wed Jan  4 2006 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.16-0

- updated to 0.1.0.16

* Fri Dec 23 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.11

- reworked the 'setgroups' patch so that 'tor' survives a SIGHUP

- (re)added the 'reload' functionality to the lsb initscript and use

  it in logrotate

* Fri Dec 23 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.8

- added ChangeLog to %%doc

- made torrc not world-readable

- added logrotate script

* Thu Dec 22 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.4

- updated initng scripts to initng-0.4.8 syntax

- tweaked some Requires(...):

- added ghostscript BuildRequires:

- install initng scripts into the correct dir

* Thu Dec 15 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.2

- use relative UID of 19 instead of 18 due to conflicts with the

  'munin' package

* Wed Dec 14 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1.1

- added -minit subpackage

* Sat Dec 10 2005 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.1.0.15-1

- initial build