%global releasenum 2018-04-22a %global releasetag 20180422a Name: dokuwiki Version: 0 Release: 0.33.%{releasetag}%{?dist} Summary: Standards compliant simple to use wiki Group: Applications/Internet License: GPLv2 URL: https://www.dokuwiki.org/dokuwiki Source0: https://download.dokuwiki.org/src/%{name}/%{name}-%{releasenum}.tgz #Fedora specific patches to use fedora packaged libraries Patch1: dokuwiki-rm-bundled-libs.patch BuildArch: noarch Requires: php-gd Requires: php-xml Requires: php-json Requires: php-geshi Requires: php-simplepie Requires: php-email-address-validation Requires: php-lessphp Requires: php-paragonie-random-compat Requires: php-phpseclib %description DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating documentation of any kind. It has a simple but powerful syntax which makes sure the data-files remain readable outside the Wiki and eases the creation of structured texts. All data is stored in plain text files no database is required. %package selinux Summary: SElinux support for dokuwiki Requires: %name = %version-%release Requires: policycoreutils %if 0%{?rhel} > 5 || 0%{?fedora} Requires: python2-policycoreutils %endif Group: Applications/Internet BuildArch: noarch %description selinux Configures DokuWiki to run in SELinux enabled environments. %prep %setup -q -n %{name}-%{releasenum} # Remove bundled code # email-address-validator rm -r vendor/aziraphale # geshi rm -r vendor/geshi # lesserphp rm -r vendor/marcusschwarz # random_compat rm -r vendor/paragonie # phpseclib rm -r vendor/phpseclib # simplepie rm -r vendor/simplepie %patch1 -p1 -b .bundled mv -f conf/mysql.conf.php.example . sed -i "s:'./data':'%{_localstatedir}/lib/%{name}/data':" conf/%{name}.php sed -i "s:ALL 8:ALL 1:" conf/acl.auth.php.dist cat <%{name}.httpd Alias /%{name} %{_datadir}/%{name} # Apache 2.4 Require local # Apache 2.2 Options +FollowSymLinks Order Allow,Deny Allow from 127.0.0.1 ::1 Order Deny,Allow Deny from all Order Deny,Allow Deny from all Order Deny,Allow Deny from all Order Deny,Allow Deny from all EOF cat <DOKUWIKI-SELINUX.README %{name}-selinux ==================== This package configures dokuwiki to run in SELinux enabled environments EOF %build # nothing to do here %install install -d -p $RPM_BUILD_ROOT%{_sysconfdir}/%{name} install -d -p $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d install -d -p $RPM_BUILD_ROOT%{_datadir}/%{name} install -d -p $RPM_BUILD_ROOT%{_datadir}/%{name}/bin install -d -p $RPM_BUILD_ROOT%{_localstatedir}/lib/%{name} mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/%{name}/data/{index,tmp,media,attic,pages,cache,meta,locks,media_attic,media_meta} rm -f install.php rm -f inc/.htaccess rm -f inc/lang/.htaccess rm -f vendor/.htaccess cp -rp data/pages/* $RPM_BUILD_ROOT%{_localstatedir}/lib/%{name}/data/pages/ cp -rp conf/* $RPM_BUILD_ROOT%{_sysconfdir}/%{name} cp -rp bin/* $RPM_BUILD_ROOT%{_datadir}/%{name}/bin cp -rp lib $RPM_BUILD_ROOT%{_datadir}/%{name}/ cp -rp inc $RPM_BUILD_ROOT%{_datadir}/%{name}/ cp -rp vendor $RPM_BUILD_ROOT%{_datadir}/%{name}/ install -p -m0644 *.php $RPM_BUILD_ROOT%{_datadir}/%{name} install -p -m0644 %{name}.httpd $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/%{name}.conf pushd $RPM_BUILD_ROOT%{_sysconfdir}/%{name} for d in *.dist; do d0=`basename $d .dist` if [ ! -f "$d0" ]; then mv -f $d $d0 fi done popd pushd $RPM_BUILD_ROOT%{_datadir}/%{name} ln -sf ../../../etc/%name conf popd %post selinux semanage fcontext -a -t httpd_sys_rw_content_t '%{_sysconfdir}/%{name}(/.*)?' 2>/dev/null || : semanage fcontext -a -t httpd_sys_content_t '%{_datadir}/%{name}(/.*)?' 2>/dev/null || : semanage fcontext -a -t httpd_sys_rw_content_t '%{_datadir}/%{name}/lib/plugins(/.*)?' 2>/dev/null || : restorecon -R '%{_sysconfdir}/%{name}' || : restorecon -R '%{_datadir}/%{name}' || : %postun selinux if [ $1 -eq 0 ] ; then semanage fcontext -d -t httpd_sys_rw_content_t '%{_sysconfdir}/%{name}(/.*)?' 2>/dev/null || : semanage fcontext -d -t httpd_sys_content_t '%{_datadir}/%{name}(/.*)?' 2>/dev/null || : semanage fcontext -d -t httpd_sys_rw_content_t '%{_datadir}/%{name}/lib/plugins(/.*)?' 2>/dev/null || : fi %files %doc COPYING README VERSION mysql.conf.php.example %config(noreplace) %{_sysconfdir}/httpd/conf.d/%{name}.conf %config(noreplace) %attr(0644,apache,apache) %{_sysconfdir}/%{name}/* %dir %attr(0755,apache,apache) %{_sysconfdir}/%{name} %attr(0755,apache,apache) %{_datadir}/%{name}/bin/*.php %dir %{_datadir}/%{name} %{_datadir}/%{name}/conf %{_datadir}/%{name}/*.php %dir %{_datadir}/%{name}/lib %{_datadir}/%{name}/lib/exe %{_datadir}/%{name}/lib/images %{_datadir}/%{name}/lib/index.html %{_datadir}/%{name}/lib/scripts %{_datadir}/%{name}/lib/styles %{_datadir}/%{name}/lib/tpl %attr(0755,apache,apache) %dir %{_datadir}/%{name}/lib/plugins %{_datadir}/%{name}/lib/plugins/* %{_datadir}/%{name}/inc %{_datadir}/%{name}/vendor %dir %{_localstatedir}/lib/%{name} %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/media %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/attic %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/cache %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/meta %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/locks %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/tmp %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/index %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/media_attic %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/media_meta %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/pages %attr(0755,apache,apache) %dir %{_localstatedir}/lib/%{name}/data/pages/wiki %{_localstatedir}/lib/%{name}/data/pages/*/* %files selinux %doc DOKUWIKI-SELINUX.README %changelog * Fri Jul 13 2018 Peter 'Pessoft' Kolínek - 0-0.33.20180422a - Update to the latest stable upstream 2018-04-22a "Greebo" (#1390291: CVE-2016-7964, CVE-2016-7965, CVE-2017-12583, CVE-2017-12979, CVE-2017-12980, CVE-2017-18123) - Fix missing vendor directory issue (#1372948) - Fix Apache config file for access to conf and bin - Replace more bundled code in vendor directory with Fedora packages (lesserphp, random_compat, phpseclib, simplepie) - Fix source to HTTPS * Thu Jul 12 2018 Fedora Release Engineering - 0-0.32.20150810a - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Fri Mar 30 2018 Iryna Shcherbina - 0-0.31.20150810a - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) * Wed Feb 07 2018 Fedora Release Engineering - 0-0.30.20150810a - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering - 0-0.29.20150810a - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Fri Feb 10 2017 Fedora Release Engineering - 0-0.28.20150810a - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Wed Feb 03 2016 Fedora Release Engineering - 0-0.27.20150810a - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Wed Sep 30 2015 Adam Tkac - 0.0.26.20150810a - update to the latest upstream * Wed Jun 17 2015 Fedora Release Engineering - 0-0.25.20140929c - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Tue Mar 03 2015 Adam Tkac - 0.0.24.20140929c - update to the latest upstream (CVE-2015-2172) * Fri Dec 26 2014 Adam Tkac - 0.0.23.20140929b - update to the latest upstream - drop requirement of httpd (#1164396) - fix SELinux file contexts (#1064524) - require php-xml (#1061477) * Sat Jun 07 2014 Fedora Release Engineering - 0-0.22.20131208 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Thu Dec 12 2013 Adam Tkac - 0-0.21.20131208 - fix upstream source link - use macros for dokuwiki release numbers - update to the latest upstream * Tue Sep 03 2013 Adam Tkac - 0-0.20.20130510a - fix Requires for EL5, #967975 (patch by Charles R. Anderson) * Tue Sep 03 2013 Adam Tkac - 0-0.19.20121013 - update to the latest upstream * Tue Sep 03 2013 Adam Tkac - 0-0.18.20121013 - remove bundled code in specfile instead of via patch * Sat Aug 03 2013 Fedora Release Engineering - 0-0.17.20121013 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Feb 13 2013 Fedora Release Engineering - 0-0.16.20121013 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Sun Dec 02 2012 Johan Cwiklinski - 0-0.15.20121013 - Fix apache config file for httpd 2.4, #871388 * Sat Oct 20 2012 Andrew Colin Kissa - 0-0.14.20121013 - Latest upstream - Fix Bugzilla bugs #844726, #840255, #795487, #741384, #840686, #835145 * Thu Aug 02 2012 Andrew Colin Kissa - 0-0.13.20120125.b - Latest upstream - Fix Bugzilla bugs #844726, #840255, #795487, #741384, #840686, #835145 * Wed Jul 18 2012 Fedora Release Engineering - 0-0.12.20110525.a - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Tue Apr 24 2012 Andrew Colin Kissa - 0-0.11.20110525.a - Fix CVE-2012-2129 - Fix Bugzilla bugs #815123 * Fri Jan 13 2012 Fedora Release Engineering - 0-0.10.20110525.a - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Tue Jun 28 2011 Andrew Colin Kissa - 0-0.9.20110525.a - Upgrade to latest upstream - Fix Bugzilla bugs #717146, #717149, #717148, #715569 * Sun Mar 13 2011 Andrew Colin Kissa - 0-0.8.20101107.a - Fix genshi path * Tue Feb 08 2011 Fedora Release Engineering - 0-0.7.20101107.a - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild * Mon Jan 17 2011 Andrew Colin Kissa - 0-0.6.20101107.a - Fix selinux sub package * Mon Jan 17 2011 Andrew Colin Kissa - 0-0.5.20101107.a - Upgrade to latest upstream - Split package to create selinux package - Fix Bugzilla bug #668386 * Tue Jan 19 2010 Andrew Colin Kissa - 0-0.4.20091225.c - Fix CSRF bug Secunia advisory SA38205, dokuwiki bug #1853 - Fix Security ACL bypass bug Secunia advisory SA38183, dokuwiki bug #1847 - Upgrade to the latest upstream - Fix bugzilla bug #556494 * Tue Dec 15 2009 Andrew Colin Kissa - 0-0.3.20091202.rc - Fix versioning * Fri Dec 04 2009 Andrew Colin Kissa - 0-0.1.20091202.rc - Upgrade to new upstream - Fix bugzilla bug #544257 * Fri Aug 07 2009 Andrew Colin Kissa - 0-0.2.20090214.b - Fixes requested by reviewer * Thu Aug 06 2009 Andrew Colin Kissa - 0-0.1.20090214.b - Initial package