Date: Saturday, April 8, 2023 @ 06:11:26
Author: felixonmars
Revision: 473252
archrelease: copy trunk to staging-x86_64
Added:
apparmor/repos/staging-x86_64/
apparmor/repos/staging-x86_64/PKGBUILD
(from rev 473251, apparmor/trunk/PKGBUILD)
apparmor/repos/staging-x86_64/keys/
----------+
PKGBUILD | 125 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 125 insertions(+)
Copied: apparmor/repos/staging-x86_64/PKGBUILD (from rev 473251,
apparmor/trunk/PKGBUILD)
===================================================================
--- staging-x86_64/PKGBUILD (rev 0)
+++ staging-x86_64/PKGBUILD 2023-04-08 06:11:26 UTC (rev 473252)
@@ -0,0 +1,125 @@
+# Maintainer: David Runge <[email protected]>
+
+pkgname=apparmor
+pkgver=3.1.3
+pkgrel=2
+pkgdesc="Mandatory Access Control (MAC) using Linux Security Module (LSM)"
+arch=(x86_64)
+url="https://gitlab.com/apparmor/apparmor";
+license=(GPL2 LGPL2.1)
+depends=(audit glibc pam python)
+makedepends=(apache libxcrypt python-setuptools ruby swig)
+checkdepends=(dejagnu perl-locale-gettext python-notify2 python-psutil)
+optdepends=(
+ 'perl: for perl bindings'
+ 'python-notify2: for aa-notify'
+ 'python-psutil: for aa-notify'
+ 'ruby: for ruby bindings'
+)
+provides=(libapparmor.so)
+backup=(
+ etc/apparmor/easyprof.conf
+ etc/apparmor/logprof.conf
+ etc/apparmor/notify.conf
+ etc/apparmor/parser.conf
+ etc/apparmor/severity.db
+)
+source=(https://launchpad.net/$pkgname/${pkgver%.[0-9]}/$pkgver/+download/$pkgname-$pkgver.tar.gz{,.asc})
+sha512sums=('88ffb21813d1874e640ad407aa566d898fb47b65f819e321d2d451845be86088af7e1bcb4abac6601bedf353ef5d3cb6a07a7f57d0a666449a5f768ea0e49c94'
+ 'SKIP')
+b2sums=('a2aaec3e5439bc75509b6810c477df55ba837fc595b772bd884ded4860db32e8ce9d5fb015b269ce1597b84d69d78d5ebb45d775f658b4d05d51ed392aad7549'
+ 'SKIP')
+validpgpkeys=('3ECDCBA5FB34D254961CC53F6689E64E3D3664BB') # AppArmor
Development Team (AppArmor signing key) <[email protected]>
+_core_perl="/usr/bin/core_perl"
+
+prepare() {
+ cd $pkgname-$pkgver/libraries/libapparmor/
+ autoreconf -fiv
+}
+
+build() {
+ local configure_options=(
+ --prefix=/usr
+ --sbindir=/usr/bin
+ --with-perl
+ --with-python
+ --with-ruby
+ )
+
+ cd $pkgname-$pkgver
+
+ # export required perl executable locations
+ export MAKEFLAGS+=" POD2MAN=$_core_perl/pod2man"
+ export MAKEFLAGS+=" POD2HTML=$_core_perl/pod2html"
+ export MAKEFLAGS+=" PODCHECKER=$_core_perl/podchecker"
+ export MAKEFLAGS+=" PROVE=$_core_perl/prove"
+ (
+ cd libraries/libapparmor/
+ ./configure "${configure_options[@]}"
+ make
+ )
+ make -C binutils
+ make -C parser
+ make -C profiles
+ make -C utils
+ make -C changehat/pam_apparmor
+ make -C changehat/mod_apparmor
+ make -C utils/vim
+
+ # copy to test location as some tests render the resulting python bytecode
+ # unreproducible: https://gitlab.com/apparmor/apparmor/-/issues/184
+ cd ..
+ cp -av $pkgname-$pkgver $pkgname-$pkgver-test
+}
+
+check() {
+ cd $pkgname-$pkgver-test
+ echo "INFO: Running check: libraries/libapparmor"
+ make -C libraries/libapparmor check
+ echo "INFO: Running check binutils"
+ make -C binutils check
+ echo "INFO: Running check parser"
+ make -C parser check
+ # NOTE: the profiles checks are notoriously broken, so run each separately
+ echo "INFO: Running check-abstractions.d profiles"
+ make -C profiles check-abstractions.d
+# # many hardcoded paths are not accounted for:
+# # https://gitlab.com/apparmor/apparmor/-/issues/137
+# echo "INFO: Running check-logprof profiles"
+# make -C profiles check-logprof
+ echo "INFO: Running check-parser profiles"
+ make -C profiles check-parser
+ echo "INFO: Running check utils"
+ # we do not care about linting when running tests
+ # https://gitlab.com/apparmor/apparmor/-/issues/121
+ make PYFLAKES='/usr/bin/true' -C utils check
+}
+
+package() {
+ depends+=(libcrypt.so)
+
+ cd $pkgname-$pkgver
+ make -C libraries/libapparmor DESTDIR="$pkgdir" install
+ make -C changehat/pam_apparmor DESTDIR="$pkgdir/usr" install
+ make -C changehat/mod_apparmor DESTDIR="$pkgdir" install
+ make -C binutils DESTDIR="$pkgdir" SBINDIR="$pkgdir/usr/bin"
USR_SBINDIR="$pkgdir/usr/bin" install
+ make -C parser -j1 DESTDIR="$pkgdir" SBINDIR="$pkgdir/usr/bin"
USR_SBINDIR="$pkgdir/usr/bin" APPARMOR_BIN_PREFIX="$pkgdir/usr/lib/apparmor"
install install-systemd
+ make -C profiles DESTDIR="$pkgdir" install
+ make -C utils DESTDIR="$pkgdir" SBINDIR="$pkgdir/usr/bin"
USR_SBINDIR="$pkgdir/usr/bin" BINDIR="$pkgdir/usr/bin"
VIM_INSTALL_PATH="$pkgdir/usr/share/vim/vimfiles/syntax" install
+
+ # set file mode to allow the perl library to be stripped:
+ # https://gitlab.com/apparmor/apparmor/issues/34
+ find "$pkgdir/usr/lib/perl5/" -type f -iname "*.so" -exec chmod 755 {} \;
+
+ # remove empty core_perl directory:
+ # https://gitlab.com/apparmor/apparmor/issues/40
+ rm -rv "${pkgdir}"/usr/lib/perl5/*/core_perl
+ # move ruby bindings to vendor_ruby:
+ # https://gitlab.com/apparmor/apparmor/issues/35
+ mv -v "$pkgdir/usr/lib/ruby/"{site,vendor}_ruby
+ # adding files below /etc/apparmor.d to backup array
+ cd "$pkgdir"
+ # trick extract_function_variable() in makepkg into not detecting the
+ # backup array modification and adding remaining configuration files
+ [[ /usr/bin/true ]] && backup=( ${backup[@]} $(find "etc/$pkgname.d/" -type
f | LC_ALL=C sort) )
+}
