%global moduletype apps %global modulename copr %global selinuxbooleans httpd_enable_cgi=1 httpd_can_network_connect=1 httpd_can_sendmail=1 nis_enabled=1 # We can build 'mls' too, once this is resolved: # https://github.com/fedora-selinux/selinux-policy-macros/pull/4 %global selinuxvariants targeted Name: copr-selinux Version: 1.57 Release: 1.20251205112616488321.pr4039.54.gaa5f0516d%{?dist} Summary: SELinux module for COPR License: GPL-2.0-or-later URL: https://github.com/fedora-copr/copr # Source is created by: # git clone %%url && cd copr # tito build --tgz --tag %%name-%%version-%%release Source0: copr-selinux-git-0.6288c0e.tar.gz BuildArch: noarch BuildRequires: asciidoc BuildRequires: libxslt BuildRequires: perl BuildRequires: selinux-policy-devel %{?selinux_requires} %description COPR is lightweight build system. It allows you to create new project in WebUI, and submit new builds and COPR will create yum repository from latest builds. This package include SELinux targeted module for COPR %prep %setup -q -n copr-selinux-git-0.6288c0e %build # convert manages a2x -d manpage -f manpage man/copr-selinux-enable.8.asciidoc a2x -d manpage -f manpage man/copr-selinux-relabel.8.asciidoc perl -i -pe 'BEGIN { $VER = join ".", grep /^\d+$/, split /\./, "%{version}.%{release}"; } s!\@\@VERSION\@\@!$VER!g;' %{modulename}.te for selinuxvariant in %selinuxvariants; do make NAME=${selinuxvariant} -f %{_datadir}/selinux/devel/Makefile bzip2 -9 %{modulename}.pp mv %{modulename}.pp.bz2 %{modulename}.pp.bz2.${selinuxvariant} make NAME=${selinuxvariant} -f %{_datadir}/selinux/devel/Makefile clean done %install for selinuxvariant in %selinuxvariants; do install -d %{buildroot}%{_datadir}/selinux/${selinuxvariant} install -p -m 644 %{modulename}.pp.bz2.${selinuxvariant} \ %{buildroot}%{_datadir}/selinux/${selinuxvariant}/%{modulename}.pp.bz2 done # Install SELinux interfaces install -d %{buildroot}%{_datadir}/selinux/devel/include/%{moduletype} install -p -m 644 %{modulename}.if \ %{buildroot}%{_datadir}/selinux/devel/include/%{moduletype}/%{modulename}.if install -d %{buildroot}%{_bindir} install -p -m 755 %{name}-enable %{buildroot}%{_bindir}/%{name}-enable install -p -m 755 %{name}-relabel %{buildroot}%{_bindir}/%{name}-relabel install -d %{buildroot}%{_mandir}/man8 install -p -m 644 man/%{name}-enable.8 %{buildroot}/%{_mandir}/man8/ install -p -m 644 man/%{name}-relabel.8 %{buildroot}/%{_mandir}/man8/ %pre for selinuxvariant in %selinuxvariants; do %selinux_relabel_pre -s $selinuxvariant done %post for selinuxvariant in %selinuxvariants; do %selinux_modules_install -s $selinuxvariant %{_datadir}/selinux/${selinuxvariant}/%{modulename}.pp.bz2 %selinux_set_booleans -s $selinuxvariant %{selinuxbooleans} done %postun for selinuxvariant in %selinuxvariants; do %selinux_modules_uninstall -s $selinuxvariant %{modulename} %selinux_unset_booleans -s $selinuxvariant %{selinuxbooleans} done %posttrans for selinuxvariant in %selinuxvariants; do %selinux_relabel_post -s $selinuxvariant done %files %license LICENSE %{_datadir}/selinux/*/%{modulename}.pp.bz2 # empty, do not distribute it for now %exclude %{_datadir}/selinux/devel/include/%{moduletype}/%{modulename}.if %{_bindir}/%{name}-enable %{_bindir}/%{name}-relabel %{_mandir}/man8/%{name}-enable.8* %{_mandir}/man8/%{name}-relabel.8* %changelog * Fri Dec 05 2025 Packit - 1.57-1.20251205112616488321.pr4039.54.gaa5f0516d - testing-farm: install pre-release packages with Ansible (Pavel Raiskup) - test rebuilds (Pavel Raiskup) - frontend: generate build URL from a preloaded copr object (Jakub Kadlcik) - frontend: preload copr.forked_from.group and copr.forked_from.user (Jakub Kadlcik) - docker: update containers to F43 (Jakub Kadlcik) - beaker-tests: add a superficial coverage for the WebUI routes (Jakub Kadlcik) - backend: skip already migrated projects (Jakub Kadlcik) - backend: show progress of currently uploaded RPMs (Jakub Kadlcik) - backend: catch KeyboardInterrupt exception (Jakub Kadlcik) - doc: explain how to migrate projects to Pulp (Jakub Kadlcik) - build(deps): bump actions/checkout from 5 to 6 (dependabot[bot]) - backend, common: set user agent for Pulp requests to crc-pulp-client (Jakub Kadlcik) - backend: set longer timeout for Pulp file uploads (Jakub Kadlcik) - beaker-tests: custom method tests: avoid using spax (Pavel Raiskup) - beaker-tests: move testing OCI image to F43 (Pavel Raiskup) - common: send JSON data for PATCH requests (Jakub Kadlcik) - backend: ignore the "Regenerate" button for Pulp projects without manual createrepo (Jakub Kadlcik) - doc: use RTH theme again (Jakub Kadlcik) - doc: link Pulp SOP (Jakub Kadlcik) - doc: link the Fedora Infra Copr SOP (Jakub Kadlcik) - testing-farm: do not fail tests if no packages are built (Pavel Raiskup) - testing-farm: start Copr stack with playbooks (Pavel Raiskup) - frontend: preload fields for streamed responses (Pavel Raiskup) - backend: recognize Pulp format for RPM package URLs (Jakub Kadlcik) - backend: fix deleting project from pulp-redirect.txt (Jiri Kyjovsky) - frontend: migrate from pytz to zoneinfo (Peter Robinson) - backend: spec: drop requirement on pytz (Peter Robinson) - frontend, cli, python: add API endpoint for generating a new token (Jakub Kadlcik) - backend: Add Pagination for PulpClient.get_content (Jiri Kyjovsky) - build(deps): bump actions/upload-artifact from 4 to 5 (dependabot[bot]) - backend: allow non-standard ssh ports on builders (Pavel Raiskup) - backend, common: implement chunked uploads to Pulp (Jakub Kadlcik) - doc, python: fix errors and warnings when building documentation Fix #3955 - add double underscore in package_source_types.rst - handle WARNING: Duplicate explicit target name - add double backticks in copr/v3/proxies project.py and project_chroot.py - handle WARNING: 'any' reference target not found - add :orphan: to rst files that are not in any doctree - handle WARNING: document isn't included in any toctree - add sphinx.ext.todo in sphinx conf - handle ERROR: Unknown directive type 'todo' - remove from docs/client_v3/proxies.rst - fix for autodoc: failed to import class - remove try-except block and use importlib to check for theme package (Anton Petrov) - python: Make copr.v3.helpers.wait official part of API (Jiri Kyjovsky) - backend: catch 400 from timeouted Pulp uploads (Jakub Kadlcik) - backend: don't create "spawner", "terminator" and "vmm" logs (Pavel Raiskup) - remove general exception handling (Anton Petrov) - fix linting errors (Anton Petrov) - feat: continue on exceptions in prune_results (Anton Petrov) - feat: add exception handling (Anton Petrov) - doc: Document how PULP pruning works (Jiri Kyjovsky) - frontend: drop custom RedisSession in favor of flask-session (Jakub Kadlcik) - testing-farm: basic installability test (Pavel Raiskup) - frontend: fix swapped canceled and ended builds (Jiri Kyjovsky) - build(deps): bump github/codeql-action from 3 to 4 (dependabot[bot]) - frontend: gitignore test.src.rpm (Jakub Kadlcik) - doc: document we don't support high-perf s390x (Pavel Raiskup) - frontend: do not traceback for OAuthError (Pavel Raiskup) - testing-farm: skeleton for sanity tests (Pavel Raiskup) - backend: fix hitcounter auth to frontend (Jakub Kadlcik) - doc: upload the golden image howto (Pavel Raiskup) - backend, frontend: add option to migrate all projects for an owner (Jakub Kadlcik) - frontend, cli: Add wildcard support for 'Packit allowed forge projects' (Jiri Kyjovsky) - doc: add 2025-09-30 release notes (Jakub Kadlcik) - Automatic commit of package [copr-backend] release [2.10-1]. (Jakub Kadlcik) - Automatic commit of package [python-copr-common] release [1.4-1]. (Jakub Kadlcik) - Automatic commit of package [python-copr] release [2.4-1]. (Jakub Kadlcik) - Automatic commit of package [copr-rpmbuild] release [1.6-1]. (Jakub Kadlcik) - Automatic commit of package [copr-frontend] release [2.5-1]. (Jakub Kadlcik) - Automatic commit of package [copr-cli] release [2.3-1]. (Jakub Kadlcik) - backend: don't run builds or actions in projects that are migrated to Pulp (Jakub Kadlcik) - rpmbuild: re-store umask to default Fedora value (Pavel Raiskup) - backend: log conflicting NEVRAs when uploading (Pavel Raiskup) - frontend, backend, python, cli: drop support for building modules (Jakub Kadlcik) - Automatic commit of package [copr-backend] release [2.9-1]. (Jakub Kadlcik) - backend: log the error message that we got from Pulp (Jakub Kadlcik) - backend: fix duplicate NEVRA error when migrating projects to Pulp (Jakub Kadlcik) - doc: fix a bulletpoint in the 2025-09-17 release notes (Jakub Kadlcik) - common: increase the user SSH builder max expiration to 3 days (Jakub Kadlcik) - rpmbuild: don't traceback on builders without user SSH access (Jakub Kadlcik) - doc: add 2025-09-17 release notes (Jakub Kadlcik) - backend: change-storage: fix sub-project handling (Pavel Raiskup) - Automatic commit of package [copr-frontend] release [2.4-1]. (Jakub Kadlcik) - Automatic commit of package [copr-backend] release [2.8-1]. (Jakub Kadlcik) - Automatic commit of package [copr-rpmbuild] release [1.5-1]. (Jakub Kadlcik) - Automatic commit of package [python-copr] release [2.3-1]. (Jakub Kadlcik) - Automatic commit of package [copr-keygen] release [2.2-1]. (Jakub Kadlcik) - Automatic commit of package [copr-dist-git] release [1.3-1]. (Jakub Kadlcik) - Automatic commit of package [python-copr-common] release [1.3-1]. (Jakub Kadlcik) - frontend: use beginning of the build as reference for timestamp (Jiri Kyjovsky) - common: saferequest to retry upon error 408 (Pavel Raiskup) - frontend: support both POST and DELETE for deleting a build (Jakub Kadlcik) - python: v3.proxies: Correct used HTTP methods (Petr Stodulka) - python: introduce v3.requests.DELETE method (Petr Stodulka) - common: send data only for POST and PUT requests (Jakub Kadlcik) - frontend: print architecture statistics on status page (Pavel Raiskup) - rpmbuild: read the specfile that is produced by specfile generator (Pavel Raiskup) - backend: fix test mocks after f40a284 (Jakub Kadlcik) - docker: set SERVER_NAME for frontend (Jakub Kadlcik) - backend: don't traceback when trying to run the action for second time (Jakub Kadlcik) - frontend, backend: implement branch-fedora support for Pulp projects (Jakub Kadlcik) - backend: add a helper script to query Pulp results (Jakub Kadlcik) - backend, common: handle unsuccessful Pulp requests (Jakub Kadlcik) - build(deps): bump actions/github-script from 7 to 8 (dependabot[bot]) - backend: don't upload results to Pulp in parallel (Jakub Kadlcik) - backend: gitignore dump.rdb (Jakub Kadlcik) - frontend: gdpr: drop libravatar url from data dump (Pavel Raiskup) - frontend: gdpr: delete data signs-out and redirects to homepage (Pavel Raiskup) - frontend: gdpr: delete also e-mail entry (Pavel Raiskup) - frontend: update e-mail on login (Pavel Raiskup) - dist-git: Stop using deprecated %%py3_build/%%py3_install macros (Miroslav Suchý) - keygen: Stop using deprecated %%py3_build/%%py3_install macros (Miroslav Suchý) - doc: gitignore the doc/copr_frontend.log file (Jakub Kadlcik) - doc: add 2025-08-28 release notes (Jakub Kadlcik) - doc: we don't use .dev suffixes anymore, only patch versions (Jakub Kadlcik) - doc: use fedora-distro-aliases to generate branch names (Jakub Kadlcik) - packit: temporarily disable triggers from the main branch (Jakub Kadlcik) - Automatic commit of package [copr-dist-git] release [1.2-1]. (Jakub Kadlcik) * Tue Aug 26 2025 Jakub Kadlcik 1.57-1 - Modernize spec file and drop old stuff * Tue Mar 25 2025 Pavel Raiskup 1.56-1 - unify bindir and sbindir * Tue Jan 24 2023 Jakub Kadlcik 1.55-1 - Use spdx license * Wed Nov 30 2022 Pavel Raiskup 1.54-1 - new package built with tito - httpd_t on copr-frontend has the rights to link copr_data_t files (uploaded stuff) * Mon Feb 11 2019 Jakub Kadlčík 1.53-1 - Add more rules for keygen (follow-up to 4f689743) * Tue Jan 15 2019 Miroslav Suchý 1.52-1 - allow signd to write to socket * Fri Oct 19 2018 Miroslav Suchý 1.51-1 - do the relabel in %%posttrans - use git_dir_archive instead of git_dir_pack - allow frontend's apache to ioctl uploaded tarballs - packaging: Python 2/3, RHEL/Fedora fixes * Tue Aug 07 2018 clime 1.50-1 - fix distro condition for policycoreutils-python * Mon Aug 06 2018 clime 1.49-1 - rpkg deployment into COPR * Fri Feb 23 2018 clime 1.48-1 - remove Group tag * Mon Dec 18 2017 Dominik Turecek 1.47-1 - wrap map permission in an optional block * Wed Apr 19 2017 clime 1.46-1 - add perl as build dependency * Wed Apr 19 2017 clime 1.45-1 - replace fedorahosted links * Wed Aug 03 2016 Miroslav Suchý 1.44-1 - restore context of only those files, which context changed * Fri Jul 01 2016 clime 1.43-1 - Revert "add selinux rule for cgit" * Wed Jun 29 2016 Miroslav Suchý 1.42-1 - add selinux rule for cgit * Sat Jun 04 2016 Miroslav Suchý 1.41-1 - adjust selinux policy generation for separated log file paths * Sun May 29 2016 Pete Travis - 1.40-2 - separate log file paths for backend and frontend * Mon Mar 14 2016 Miroslav Suchý 1.40-1 - add missing types to requires section * Fri Feb 12 2016 Miroslav Suchý 1.39-1 - allow copr-dist-git to read dist-git * Wed Feb 03 2016 Miroslav Suchý 1.38-1 - add rules for dist-git and keygen * Mon Jul 27 2015 Miroslav Suchý 1.37-1 - 1246610 - depend on policycoreutils-python-utils * Thu Mar 05 2015 Valentin Gologuzov 1.36-1 - [selinux] allow httpd_t to write into /var/log/copr/ * Wed Oct 22 2014 Miroslav Suchý 1.35-1 - remove old changelogs * Mon Oct 20 2014 Miroslav Suchý 1.34-1 - 1077795 - co-own /usr/share/selinux/mls * Tue Oct 14 2014 Miroslav Suchý 1.33-1 - 1077795 - use macro for /usr/share/ * Mon Oct 13 2014 Miroslav Suchý 1.32-1 - 1077795 - spec cleanup * Wed May 21 2014 Miroslav Suchý 1.31-1 - follow selinux packaging draft * Tue Mar 18 2014 Miroslav Suchý 1.30-1 - finish move selinux into separate package