rpms/pam_mount/devel pam_mount.spec,1.32,1.33

[Till Maas (till)]

Author: till

Update of /cvs/pkgs/rpms/pam_mount/devel
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv31389

Modified Files:
	pam_mount.spec 
Log Message:
* Mon May 05 2008 Till Maas <opensource till name> - 0.35-1
- Update to new version
- Use $RPM_BUILD_ROOT instead of %{buildroot}
- Update description
- create and own %{_localstatedir}/run/pam_mount



Index: pam_mount.spec
===================================================================
RCS file: /cvs/pkgs/rpms/pam_mount/devel/pam_mount.spec,v
retrieving revision 1.32
retrieving revision 1.33
diff -u -r1.32 -r1.33
--- pam_mount.spec	24 Feb 2008 21:33:12 -0000	1.32
+++ pam_mount.spec	5 May 2008 18:42:15 -0000	1.33
@@ -1,5 +1,5 @@
 Name:           pam_mount
-Version:        0.33
+Version:        0.35
 Release:        1%{?dist}
 Summary:        A PAM module that can mount volumes for a user session
 
@@ -21,55 +21,42 @@
 
 
 %description
-This module is aimed at environments with SMB (Samba or Windows NT) 
-or NCP (Netware or Mars-NWE) servers that Unix users wish to access 
-transparently. It facilitates access to private volumes of these types 
-well. The module also supports mounting home directories using 
-loopback encrypted filesystems. The module was originally written for 
-use on the GNU/Linux operating system but has since been modified to 
-work on several flavors of BSD.
-
- o Every user can access his own volumes
-
- o The user needs to type the password just once (at login)
-
- o The mounting process is transparent to the users
-
- o There is no need to keep the login passwords in any additional file
-
- o The volumes are unmounted upon logout, so it saves system resources, 
- avoiding the need of listing every every possibly useful remote 
- volume in /etc/fstab or in an automount/supermount config file. This 
- is also necessary for securing encrypted filesystems.
-
-Pam_mount "understands" SMB, NCP, and any type of filesystem that can 
-be mounted using the standard mount command. If someone has a 
-particular need for a different filesystem, feel free to ask me to 
-include it and send me patches.
-
-If you intend to use pam_mount to protect volumes on your computer 
-using an encrypted filesystem system, please know that there are many 
-other issues you need to consider in order to protect your data. 
-For example, you probably want to disable or encrypt your swap 
-partition (the cryptoswap can help you do this). Don't assume a 
-system is secure without carefully considering potential threats.
+This module is aimed at environments with central file servers that a
+user wishes to mount on login and unmount on logout, such as
+(semi-)diskless stations where many users can logon.
+
+The module also supports mounting local filesystems of any kind the
+normal mount utility supports, with extra code to make sure certain
+volumes are set up properly because often they need more than just a
+mount call, such as encrypted volumes. This includes SMB/CIFS, NCP,
+davfs2, FUSE, losetup crypto, dm-crypt/cryptsetup and truecrypt.
+
+If you intend to use pam_mount to protect volumes on your computer
+using an encrypted filesystem system, please know that there are many
+other issues you need to consider in order to protect your data.  For
+example, you probably want to disable or encrypt your swap partition.
+Don't assume a system is secure without carefully considering
+potential threats.
+
 
 %prep
 %setup -q
 
 
 %build
-%configure --with-slibdir=/%{_lib} --with-selinux
+%configure --with-slibdir=/%{_lib}
 make %{?_smp_mflags}
 
 
 %install
-rm -rf %{buildroot}
-mkdir %{buildroot}
-make install DESTDIR=%{buildroot}
+rm -rf $RPM_BUILD_ROOT
+mkdir $RPM_BUILD_ROOT
+make install DESTDIR=$RPM_BUILD_ROOT
+# create for selinux
+mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/run/pam_mount
 
-install -p scripts/convert_pam_mount_conf.pl %{buildroot}/%{_bindir}
-rm -f %{buildroot}/%{_lib}/security/*.{a,la}
+install -p scripts/convert_pam_mount_conf.pl $RPM_BUILD_ROOT/%{_bindir}
+rm -f $RPM_BUILD_ROOT/%{_lib}/security/*.{a,la}
 
 
 %post
@@ -80,7 +67,7 @@
 
 
 %clean
-rm -rf %{buildroot}
+rm -rf $RPM_BUILD_ROOT
 
 
 %files
@@ -89,6 +76,7 @@
 %doc config/pam_mount.conf.xml
 %doc LICENSE.GPL2 LICENSE.GPL3
 %doc LICENSE.LGPL2 LICENSE.LGPL3
+%config(noreplace) %{_sysconfdir}/security/pam_mount.conf.xml
 /%{_lib}/security/pam_mount.so
 %{_sbindir}/pmvarrun
 %{_bindir}/autoehd
@@ -96,15 +84,20 @@
 %{_bindir}/mkehd
 %{_bindir}/mount_ehd
 %{_bindir}/passwdehd
+%{_bindir}/pmt-fd0ssh
 /sbin/mount.crypt
 /sbin/umount.crypt
 %{_mandir}/man?/*
-%config(noreplace) %{_sysconfdir}/security/pam_mount.conf.xml
-%policy %{_sysconfdir}/selinux/strict/src/policy/macros/pam_mount_macros.te
-%policy %{_sysconfdir}/selinux/strict/src/policy/file_contexts/misc/pam_mount.fc
+%{_localstatedir}/run/pam_mount
 
 
 %changelog
+* Mon May 05 2008 Till Maas <opensource till name> - 0.35-1
+- Update to new version
+- Use $RPM_BUILD_ROOT instead of %%{buildroot}
+- Update description
+- create and own %%{_localstatedir}/run/pam_mount
+
 * Sun Feb 24 2008 Till Maas <opensource till name> - 0.33-1
 - update to new version