passt/contrib/fedora, branch 2023_03_21.1ee2f7c

fedora: Refresh SELinux labels in scriptlets, require -selinux package

2023-03-17T07:26:07+00:00

Instead of:
  https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft

follow this:
  https://fedoraproject.org/wiki/PackagingDrafts/SELinux_Independent_Policy

which seems to make more sense and fixes the issue that, on a fresh
install, without a reboot, the file contexts for the binaries are not
actually updated.

In detail:

- labels are refreshed using the selinux_relabel_pre and
  selinux_relabel_post on install, upgrade, and uninstall

- use the selinux_modules_install and selinux_modules_uninstall
  macros, instead of calling 'semodule' directly (no functional
  changes in our case)

- require the -selinux package on SELinux-enabled environments and if
  the current system policy is "targeted"

Signed-off-by: Stefano Brivio

fedora: Install SELinux interface files to shared include directory

2023-03-10T19:01:41+00:00

Link: https://github.com/fedora-selinux/selinux-policy/pull/1613
Signed-off-by: Stefano Brivio

conf, log, Makefile: Add versioning information

2022-10-15T00:10:28+00:00

Add a --version option displaying that, and also include this
information in the log files.

Signed-off-by: Stefano Brivio

fedora: Escape % characters in spec file's changelog

2022-09-07T09:01:22+00:00

...rpmbuild otherwise expands valid macro names in changelog entries.

Signed-off-by: Stefano Brivio

fedora: Add selinux-policy Requires: tag

2022-09-02T16:03:57+00:00

fedora-review says:

  Note: Directories without known owners:
  /usr/share/selinux/packages/passt, /usr/share/doc/passt,
  /usr/share/selinux, /usr/share/selinux/packages

and selinux-policy owns those two last ones.

While at it, split Requires: tags also for post and preun actions
onto different lines, for consistency.

Reported-by: Daniel P. Berrangé 
Signed-off-by: Stefano Brivio

fedora: Add %dir entries for own SELinux policy directory and documentation

2022-09-02T15:55:23+00:00

fedora-review says:

  Note: No known owner of /usr/share/selinux/packages/passt,
  /usr/share/doc/passt

While at it, replace "passt" by "%{name}" in a few places for
consistency.

Reported-by: Daniel P. Berrangé 
Signed-off-by: Stefano Brivio

fedora: Pass explicit bindir, mandir, docdir, and drop OpenSUSE override

2022-08-30T17:17:48+00:00

Fedora's parameters currently match the ones from the Makefile (which
is based on GNU recommendations), but that's not necessarily
guaranteed.

This should make the OpenSUSE Tumbleweed override for docdir
unnecessary: drop it.

Suggested-by: Daniel P. Berrangé 
Signed-off-by: Stefano Brivio

fedora: Use full versioning for SELinux subpackage Requires: tag

2022-08-30T17:16:44+00:00

...as recommended in:
  https://docs.fedoraproject.org/en-US/packaging-guidelines/#_requiring_base_package

Reported-by: Daniel P. Berrangé 
Signed-off-by: Stefano Brivio

fedora: Define git_hash in spec file and reuse it

2022-08-30T17:16:44+00:00

...as it's used twice. The short version, however, appears hardcoded
only once in the output, and it comes straight from the rpkg macro
building the version string -- leave that macro as it is.

Suggested-by: Daniel P. Berrangé 
Signed-off-by: Stefano Brivio

fedora: Drop comment stating the spec file is an example file

2022-08-30T17:16:44+00:00

...as this ends up in the actual spec file.

Suggested-by: Daniel P. Berrangé 
Signed-off-by: Stefano Brivio