1 %define name procprotect
5 ### legacy from locally-built kernels, used to define these
6 # kernel_release : 1.fc16 (24 is then the planetlab taglevel)
7 # kernel_version : 3.3.7
8 # kernel_arch : i686 | x86_64
10 # compute this with "rpm -q --qf .. kernel-devel" when with the stock kernel
12 #%define module_release %( rpm -q --qf "%{version}" kernel-headers )
13 # causes recursive macro definition no matter how much you quote
17 %define kernel_version %( rpm -q --qf %{percent}%{braop}version%{bracl} kernel-headers )
18 %define kernel_release %( rpm -q --qf %{percent}%{braop}release%{bracl} kernel-headers )
19 %define kernel_arch %( rpm -q --qf %{percent}%{braop}arch%{bracl} kernel-headers )
21 # this is getting really a lot of stuff, could be made simpler probably
22 %define release %{kernel_version}.%{kernel_release}.%{taglevel}%{?pldistro:.%{pldistro}}%{?date:.%{date}}
24 %define kernel_id %{kernel_version}-%{kernel_release}.%{kernel_arch}
25 %define kernelpath /usr/src/kernels/%{kernel_id}
29 Packager: PlanetLab Central <support@planet-lab.org>
30 Distribution: PlanetLab %{plrelease}
38 Group: System Environment/Kernel
39 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot
40 Source0: procprotect-%{version}.tar.gz
43 ACLs for protecting entries in the proc filesystem.
49 make -C %{kernelpath} V=1 M=$(pwd) modules
52 install -D -m 755 procprotect.ko $RPM_BUILD_ROOT/lib/modules/%{kernel_id}/kernel/net/procprotect/procprotect.ko
53 mkdir -p $RPM_BUILD_ROOT/etc/modules-load.d
54 install -m 644 procprotect.conf $RPM_BUILD_ROOT/etc/modules-load.d/procprotect.conf
57 rm -rf $RPM_BUILD_ROOT
60 /lib/modules/%{kernel_id}
61 /etc/modules-load.d/procprotect.conf
69 * Thu Feb 21 2013 Thierry Parmentelat <thierry.parmentelat@sophia.inria.fr> - procprotect-0.3-1
70 - changes for kernel 3.6.2
72 * Mon Nov 26 2012 Thierry Parmentelat <thierry.parmentelat@sophia.inria.fr> - procprotect-0.1-3
73 - Fixed bad security loophole in write path
75 * Mon Jul 09 2012 Thierry Parmentelat <thierry.parmentelat@sophia.inria.fr> - procprotect-0.1-2
76 - module to get loaded at boot-time