[arch-commits] Commit in apparmor/repos (3 files)

[David Runge]

    Date: Saturday, August 27, 2022 @ 10:41:21
  Author: dvzrv
Revision: 454599

archrelease: copy trunk to staging-x86_64

Added:
  apparmor/repos/staging-x86_64/
  apparmor/repos/staging-x86_64/PKGBUILD
    (from rev 454598, apparmor/trunk/PKGBUILD)
  apparmor/repos/staging-x86_64/keys/

----------+
 PKGBUILD |  123 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 123 insertions(+)

Copied: apparmor/repos/staging-x86_64/PKGBUILD (from rev 454598, apparmor/trunk/PKGBUILD)
===================================================================
--- staging-x86_64/PKGBUILD	                        (rev 0)
+++ staging-x86_64/PKGBUILD	2022-08-27 10:41:21 UTC (rev 454599)
@@ -0,0 +1,123 @@
+# Maintainer: David Runge <dvzrv at archlinux.org>
+
+pkgname=apparmor
+pkgver=3.1.1
+pkgrel=1
+pkgdesc="Mandatory Access Control (MAC) using Linux Security Module (LSM)"
+arch=(x86_64)
+url="https://gitlab.com/apparmor/apparmor"
+license=(GPL2 LGPL2.1)
+depends=(audit glibc pam python)
+makedepends=(apache libxcrypt python-setuptools ruby swig)
+checkdepends=(dejagnu perl-locale-gettext python-notify2 python-psutil)
+optdepends=(
+  'perl: for perl bindings'
+  'python-notify2: for aa-notify'
+  'python-psutil: for aa-notify'
+  'ruby: for ruby bindings'
+)
+provides=(libapparmor.so)
+backup=(
+  etc/apparmor/easyprof.conf
+  etc/apparmor/logprof.conf
+  etc/apparmor/notify.conf
+  etc/apparmor/parser.conf
+  etc/apparmor/severity.db
+)
+options=(debug)
+source=(https://launchpad.net/$pkgname/${pkgver%.[0-9]}/$pkgver/+download/$pkgname-$pkgver.tar.gz{,.asc})
+sha512sums=('ece3a0c45fec0477d49c223559ee46b28affeb7da488ba972ae032dc61a27d5e293686a0745da96e2cd3761cf4e0695130c326d42ba6f667d6b5110a824965f5'
+            'SKIP')
+b2sums=('a7c721c5812db2c8a55224d739f06af44b3c2ebf831a7d5deb3a36aa762ca7f4ecb5bbf6698474e85a5d3fe7999c6d8eec194c475054eb4c7804deb00d86bce3'
+        'SKIP')
+validpgpkeys=('3ECDCBA5FB34D254961CC53F6689E64E3D3664BB') # AppArmor Development Team (AppArmor signing key) <apparmor at lists.ubuntu.com>
+_core_perl="/usr/bin/core_perl"
+
+prepare() {
+  cd $pkgname-$pkgver/libraries/libapparmor/
+  autoreconf -fiv
+}
+
+build() {
+  cd $pkgname-$pkgver
+
+  # export required perl executable locations
+  export MAKEFLAGS+=" POD2MAN=$_core_perl/pod2man"
+  export MAKEFLAGS+=" POD2HTML=$_core_perl/pod2html"
+  export MAKEFLAGS+=" PODCHECKER=$_core_perl/podchecker"
+  export MAKEFLAGS+=" PROVE=$_core_perl/prove"
+  (
+    cd libraries/libapparmor/
+    ./configure \
+      --prefix=/usr \
+      --sbindir=/usr/bin \
+      --with-perl \
+      --with-python \
+      --with-ruby
+    make
+  )
+  make -C binutils
+  make -C parser
+  make -C profiles
+  make -C utils
+  make -C changehat/pam_apparmor
+  make -C changehat/mod_apparmor
+  make -C utils/vim
+
+  # copy to test location as some tests render the resulting python bytecode
+  # unreproducible: https://gitlab.com/apparmor/apparmor/-/issues/184
+  cd ..
+  cp -av $pkgname-$pkgver $pkgname-$pkgver-test
+}
+
+check() {
+  cd $pkgname-$pkgver-test
+  echo "INFO: Running check: libraries/libapparmor"
+  make -C libraries/libapparmor check
+  echo "INFO: Running check binutils"
+  make -C binutils check
+  echo "INFO: Running check parser"
+  make -C parser check
+  # NOTE: the profiles checks are notoriously broken, so run each separately
+  echo "INFO: Running check-abstractions.d profiles"
+  make -C profiles check-abstractions.d
+#  # many hardcoded paths are not accounted for:
+#  # https://gitlab.com/apparmor/apparmor/-/issues/137
+#  echo "INFO: Running check-logprof profiles"
+#  make -C profiles check-logprof
+  echo "INFO: Running check-parser profiles"
+  make -C profiles check-parser
+  echo "INFO: Running check utils"
+  # we do not care about linting when running tests
+  # https://gitlab.com/apparmor/apparmor/-/issues/121
+  make PYFLAKES='/usr/bin/true' -C utils check
+}
+
+package() {
+  depends+=(libcrypt.so)
+
+  cd $pkgname-$pkgver
+  make -C libraries/libapparmor DESTDIR="$pkgdir" install
+  make -C changehat/pam_apparmor DESTDIR="$pkgdir/usr" install
+  make -C changehat/mod_apparmor DESTDIR="$pkgdir" install
+  make -C binutils DESTDIR="$pkgdir" SBINDIR="$pkgdir/usr/bin" USR_SBINDIR="$pkgdir/usr/bin" install
+  make -C parser -j1 DESTDIR="$pkgdir" SBINDIR="$pkgdir/usr/bin" USR_SBINDIR="$pkgdir/usr/bin" APPARMOR_BIN_PREFIX="$pkgdir/usr/lib/apparmor" install install-systemd
+  make -C profiles DESTDIR="$pkgdir" install
+  make -C utils DESTDIR="$pkgdir" SBINDIR="$pkgdir/usr/bin" USR_SBINDIR="$pkgdir/usr/bin" BINDIR="$pkgdir/usr/bin" VIM_INSTALL_PATH="$pkgdir/usr/share/vim/vimfiles/syntax" install
+
+  # set file mode to allow the perl library to be stripped:
+  # https://gitlab.com/apparmor/apparmor/issues/34
+  find "$pkgdir/usr/lib/perl5/" -type f -iname "*.so" -exec chmod 755 {} \;
+
+  # remove empty core_perl directory:
+  # https://gitlab.com/apparmor/apparmor/issues/40
+  rm -rv "${pkgdir}"/usr/lib/perl5/*/core_perl
+  # move ruby bindings to vendor_ruby:
+  # https://gitlab.com/apparmor/apparmor/issues/35
+  mv -v "$pkgdir/usr/lib/ruby/"{site,vendor}_ruby
+  # adding files below /etc/apparmor.d to backup array
+  cd "$pkgdir"
+  # trick extract_function_variable() in makepkg into not detecting the
+  # backup array modification and adding remaining configuration files
+  [[ /usr/bin/true ]] && backup=( ${backup[@]} $(find "etc/$pkgname.d/" -type f | LC_ALL=C sort) )
+}