Mon, 20 Apr 2009 19:22:00 +0200
Change unfortunate but partly useful overreaching security tradeoff.
The principle of allocating each running process an individual system
user and group can have security benefits, however maintining a plethora
of users, groups, processes, file modes, file permissions, and even
nonportable file ACLs on a host serving from a hundred processes has
some security disadvantages. This tradeoff is even worse for systems
like OpenPKG which benefit from administration transparency through the
use of minimal system intrusion and only three usage privilege levels.
1 ##
2 ## radiusclient.spec -- OpenPKG RPM Package Specification
3 ## Copyright (c) 2000-2008 OpenPKG Foundation e.V. <http://openpkg.net/>
4 ##
5 ## Permission to use, copy, modify, and distribute this software for
6 ## any purpose with or without fee is hereby granted, provided that
7 ## the above copyright notice and this permission notice appear in all
8 ## copies.
9 ##
10 ## THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
11 ## WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
12 ## MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
13 ## IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR
14 ## CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
15 ## SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
16 ## LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
17 ## USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
18 ## ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
19 ## OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
20 ## OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
21 ## SUCH DAMAGE.
22 ##
24 # package information
25 Name: radiusclient
26 Summary: RADIUS Client Library and Tools
27 URL: http://radiusclient-ng.berlios.de/
28 Vendor: Lars Fenneberg et al.
29 Packager: OpenPKG Foundation e.V.
30 Distribution: OpenPKG Community
31 Class: EVAL
32 Group: RADIUS
33 License: BSD-style
34 Version: 0.5.6
35 Release: 20080620
37 # package options
38 %option with_fsl yes
39 %option with_brokenlibc no
42 # list of sources
43 Source0: ftp://ftp.iptel.org/pub/radiusclient-ng/radiusclient-ng-%{version}.tar.gz
44 Source2: fsl.radiusclient
45 Patch0: radiusclient.patch
46 Patch1: radiusclient.patch.libc
48 # build information
49 Prefix: %{l_prefix}
50 BuildRoot: %{l_buildroot}
51 BuildPreReq: OpenPKG, openpkg >= 20060823, make
52 PreReq: OpenPKG, openpkg >= 20060823
53 %if "%{with_fsl}" == "yes"
54 BuildPreReq: fsl
55 PreReq: fsl
56 %endif
57 AutoReq: no
58 AutoReqProv: no
60 %description
61 This is a RADIUS client library and corresponding tools.
63 %track
64 prog radiusclient = {
65 version = %{version}
66 url = ftp://ftp.iptel.org/pub/radiusclient-ng/
67 regex = radiusclient-ng-(__VER__)\.tar\.gz
68 }
70 %prep
71 %setup -q -n radiusclient-ng-%{version}
72 %patch -p0
73 %if "%{with_brokenlibc}" == "yes"
74 %patch -p0 -P 1
75 %endif
77 %build
78 CC="%{l_cc}" \
79 CFLAGS="%{l_cflags -O}" \
80 CPPFLAGS="%{l_cppflags}" \
81 LDFLAGS="%{l_ldflags} %{l_fsl_ldflags}" \
82 LIBS="%{l_fsl_libs}" \
83 GREP="grep" \
84 ./configure \
85 --prefix=%{l_prefix} \
86 --sysconfdir=%{l_prefix}/etc/radiusclient \
87 --disable-shared
88 %{l_make} %{l_mflags -O}
90 %install
91 rm -rf $RPM_BUILD_ROOT
92 %{l_make} %{l_mflags} install AM_MAKEFLAGS="DESTDIR=$RPM_BUILD_ROOT"
93 %{l_shtool} mkdir -f -p -m 755 $RPM_BUILD_ROOT%{l_prefix}/var/radiusclient
94 touch $RPM_BUILD_ROOT%{l_prefix}/var/radiusclient/radius.seq
95 mv \
96 $RPM_BUILD_ROOT%{l_prefix}/include/radiusclient-ng.h \
97 $RPM_BUILD_ROOT%{l_prefix}/include/radiusclient.h
98 rm -f $RPM_BUILD_ROOT%{l_prefix}/sbin/login.radius
99 strip $RPM_BUILD_ROOT%{l_prefix}/sbin/* >/dev/null 2>&1 || true
100 %{l_shtool} mkdir -f -p -m 755 $RPM_BUILD_ROOT%{l_prefix}/etc/fsl
101 %{l_shtool} install -c -m 644 %{l_value -s -a} \
102 %{SOURCE fsl.radiusclient} \
103 $RPM_BUILD_ROOT%{l_prefix}/etc/fsl/
105 %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \
106 %{l_files_std} \
107 '%not %dir %{l_prefix}/etc/fsl' \
108 '%config %{l_prefix}/etc/radiusclient/*' \
109 '%attr(640,%{l_mgrp},%{l_rgrp}) %{l_prefix}/etc/radiusclient/servers' \
110 '%attr(644,%{l_rusr},%{l_rgrp}) %{l_prefix}/var/radiusclient/radius.seq'
112 %files -f files
114 %clean
115 rm -rf $RPM_BUILD_ROOT
117 %preun
118 [ $1 -eq 0 ] || exit 0
119 rm -f $RPM_INSTALL_PREFIX/var/radiusclient/*.log >/dev/null 2>&1 || true
120 exit 0