Hello community, here is the log from the commit of package gmp for openSUSE:Leap:15.2 checked in at 2020-04-14 14:18:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/gmp (Old) and /work/SRC/openSUSE:Leap:15.2/.gmp.new.3248 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gmp" Tue Apr 14 14:18:50 2020 rev:17 rq:793089 version:6.1.2 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/gmp/gmp.changes 2020-01-15 15:04:20.873870282 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.gmp.new.3248/gmp.changes 2020-04-14 14:18:54.109181374 +0200 @@ -1,0 +2,7 @@ +Tue Oct 1 15:25:33 UTC 2019 - Vítězslav Čížek <[email protected]> + +- Install checksums for binary integrity verification which are + required when running in FIPS mode (bsc#1152692, jsc#SLE-9518) +- Run spec-cleaner on the spec + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gmp.spec ++++++ --- /var/tmp/diff_new_pack.WdeAVt/_old 2020-04-14 14:18:54.541181696 +0200 +++ /var/tmp/diff_new_pack.WdeAVt/_new 2020-04-14 14:18:54.541181696 +0200 @@ -1,7 +1,7 @@ # # spec file for package gmp # -# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ # @@ -20,19 +20,19 @@ Version: 6.1.2 Release: 0 Summary: The GNU MP Library -License: GPL-3.0+ and LGPL-3.0+ +License: GPL-3.0-or-later AND LGPL-3.0-or-later Group: System/Libraries -Url: https://gmplib.org/ +URL: https://gmplib.org/ Source0: https://gmplib.org/download/%{name}/%{name}-%{version}.tar.xz Source1: https://gmplib.org/download/%{name}/%{name}-%{version}.tar.xz.sig Source2: %{name}.keyring Source3: baselibs.conf Patch0: gmp-noexec.diff Patch1: gmp-6.1.2-conftest.patch +BuildRequires: fipscheck BuildRequires: gcc-c++ BuildRequires: m4 BuildRequires: xz -BuildRoot: %{_tmppath}/%{name}-%{version}-build %description A library for calculating huge numbers (integer and floating point). @@ -84,17 +84,30 @@ make %{?_smp_mflags} check %install -make %{?_smp_mflags} DESTDIR=%{buildroot} install +%make_install rm %{buildroot}%{_libdir}/libgmp.la rm %{buildroot}%{_libdir}/libgmpxx.la rm %{buildroot}%{_libdir}/libgmpxx.a +# the hmac hashes: +# +# this is a hack that re-defines the __os_install_post macro +# for a simple reason: the macro strips the binaries and thereby +# invalidates a HMAC that may have been created earlier. +# solution: create the hashes _after_ the macro runs. +# +# this shows up earlier because otherwise the %expand of +# the macro is too late. +# remark: This is the same as running +# openssl dgst -sha256 -hmac 'orboDeJITITejsirpADONivirpUkvarP' +%{expand:%%global __os_install_post {%__os_install_post +%{_bindir}/fipshmac %{buildroot}%{_libdir}/libgmp.so.10 +}} + %post -n libgmp10 -p /sbin/ldconfig %post -n libgmpxx4 -p /sbin/ldconfig - %postun -n libgmp10 -p /sbin/ldconfig %postun -n libgmpxx4 -p /sbin/ldconfig - %post devel %install_info --info-dir=%{_infodir} %{_infodir}/%{name}.info%{ext_info} @@ -102,16 +115,14 @@ %install_info_delete --info-dir=%{_infodir} %{_infodir}/%{name}.info%{ext_info} %files -n libgmp10 -%defattr(-,root,root) %license COPYING* %{_libdir}/libgmp.so.10* +%{_libdir}/.libgmp.so.10.hmac %files -n libgmpxx4 -%defattr(-,root,root) %{_libdir}/libgmpxx.so.4* %files devel -%defattr(-,root,root) %doc AUTHORS README NEWS %doc demos %{_infodir}/gmp.info*%{ext_info}
