1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
|
# sitelib for noarch packages, sitearch for others (remove the unneeded one)
%{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
%{!?python_version: %define python_version %(%{__python} -c "import sys; print sys.version[0:3]")}
Name: @PKGNAME@
Version: @VERSION@
Release: @RELEASE@%{?dist}
Summary: A one-person isolation shell
Group: System Environment/Daemons
License: MIT
URL: http://wiki.laptop.org/go/Rainbow
Source0: http://dev.laptop.org/~mstone/releases/SOURCES/%{name}-%{version}.tar.bz2
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildArch: noarch
Requires: python
BuildRequires: python-devel
BuildRequires: python-setuptools
%description
An isolation shell for single-user systems, based on the Bitfrost threat model.
%prep
%setup -q
%build
%{__python} setup.py build
%install
rm -rf $RPM_BUILD_ROOT
%{__python} setup.py install -O1 --skip-build --root $RPM_BUILD_ROOT
install -d $RPM_BUILD_ROOT/%{_sbindir}
install -m 755 bin/rainbow-run $RPM_BUILD_ROOT/%{_sbindir}/rainbow-run
install -d $RPM_BUILD_ROOT/%{_bindir}
install -m 755 bin/mkenvdir $RPM_BUILD_ROOT/%{_bindir}/mkenvdir
install -d $RPM_BUILD_ROOT/%{_sysconfdir}/security/console.perms.d
install -m 644 rainbow/conf/51-rainbow.perms $RPM_BUILD_ROOT/%{_sysconfdir}/security/console.perms.d/51-rainbow.perms
install -d $RPM_BUILD_ROOT/%{_sysconfdir}/dbus-1
install -m 644 rainbow/conf/session-olpc.conf $RPM_BUILD_ROOT/%{_sysconfdir}/dbus-1/session-olpc.conf
install -d $RPM_BUILD_ROOT/%{_localstatedir}/spool/rainbow/2
%clean
rm -rf $RPM_BUILD_ROOT
%files
%defattr(-,root,root,-)
%config(noreplace) %{_sysconfdir}/dbus-1/session-olpc.conf
%config(noreplace) %{_sysconfdir}/security/console.perms.d/51-rainbow.perms
%doc README COPYING AUTHORS
%{python_sitelib}/*
%{_sbindir}/rainbow-run
%{_bindir}/mkenvdir
%dir %{_localstatedir}/spool/rainbow
%changelog
* Tue Sep 16 2008 Michael Stone <michael@laptop.org> - 0.7.24-1.olpc3
- Michael Stone (1):
Apply the _get_lang() checks to the correct variable.
* Tue Sep 16 2008 Michael Stone <michael@laptop.org> - 0.7.23-1.olpc3
- Sayamindu Dasgupta (1):
dlo#8127: Strip double-quotes in _get_lang().
* Fri Sep 12 2008 Michael Stone <michael@laptop.org> - 0.7.22-1.olpc3
- Michael Stone (1):
dlo#8434: Add a use-serial permission.
* Fri Sep 05 2008 Michael Stone <michael@laptop.org> - 0.7.21-1.olpc3
- Michael Stone (1):
Move the permissions.info file into the activity directory.
* Tue Sep 02 2008 Michael Stone <michael@laptop.org> - 0.7.20-1.olpc3
- Michael Stone (6):
dlo#7921: Read ~/.i18n and set $LANG before importing gtk.
Always call setgroups().
dlo#6465: Make a 'constant-uid' bundle permission.
Ensure that $HOME exists regardless of what useradd tells you.
Make the instance directory setgid.
Clean /home/olpc/.i18n before passing its contents to arbitrary uid-0 code.
- Simon Schampijer (1):
dlo#5428: downloads not starting in Browse due to old compreg.dat
* Mon Aug 04 2008 Michael Stone <michael@laptop.org> - 0.7.19-1.olpc3
- Michael Stone (1):
Adjust the rainbow startup and logging logic.
* Sat Aug 02 2008 Michael Stone <michael@laptop.org> - 0.7.18-1.olpc3
- Bobby Powers (1):
dlo#6797: Fix module preloading on F9-based builds.
- C. Scott Ananian (1):
The sugar session.info file was removed; don't try to inject it.
- Michael Stone (1):
Drop the rainbow initscript.
* Mon Jul 24 2008 Michael Stone <michael@laptop.org> - 0.7.17-1.olpc3
- Michael Stone (1):
dlo#7587: Make logging and pid-file writing optional.
* Mon Jul 24 2008 Michael Stone <michael@laptop.org> - 0.7.16-1.olpc3
- C. Scott Ananian (2):
Update Makefile.fedora to be kinder to cross-building from debian systems.
dlo#317: Adjust location of XAUTHORITY and ICEAUTHORITY files.
* Mon Jul 21 2008 Michael Stone <michael@laptop.org> - 0.7.15-1.olpc3
- Martin Dengler (1):
Fix '/etc/init.d/rainbow status'.
- Tomeu Vizoso (1):
dlo#7574 Copy .ICEauthority to $HOME.
* Mon Jun 25 2008 Michael Stone <michael@laptop.org> - 0.7.14-1.olpc3
- Daniel Drake (1):
dlo#7302, dlo#7294: Make the audio and video device nodes have mode 0666.
- Michael Stone (1):
Begin building in the OLPC-3 buildroot.
* Mon May 26 2008 Michael Stone <michael@laptop.org> - 0.7.13-1.olpc2
- Fix dlo#6989 - beware of contract violations induced by CONSTANT_UID +
instance==home.
* Mon May 05 2008 Michael Stone <michael@laptop.org> - 0.7.12-1.olpc2
- Hack around a failing gtk import by trying to lose the race with X. (bsetlow)
- Detect, log, and work around errors that occur during module preloading. (mstone)
- Make $SAR/instance <- $HOME. (mstone)
* Thu Mar 24 2008 Michael Stone <michael@laptop.org> - 0.7.11-1.olpc2
- Merge tomeu's common module preloading patch.
- Merge patchvonbraun's group-permissions work.
- Make rainbow daemonize faster.
* Tue Feb 13 2008 Michael Stone <michael@laptop.org> - 0.7.10-1.olpc2
- Symlink ~/{.macromedia,.adobe} -> ~/.instance to ease
http://dev.laptop.org/ticket/6411
* Thu Jan 31 2008 Michael Stone <michael@laptop.org> - 0.7.9-1.olpc2
- Relax the size restrictions on the tmpfsen that Rainbow mounts for
activities.
- Symlink ~/.fontconfig -> ~/.instance to ease
http://dev.laptop.org/ticket/6046
- Rework build scripts to use mock for snapshot builds.
- Normalize the package name to lower case everywhere.
* Fri Jan 11 2008 Michael Stone <michael@laptop.org> - 0.7.8-1.olpc2
- Teach rainbow to respond to Sugar requests to use a fixed uid for the bundle
being launched.
* Wed Jan 09 2008 Michael Stone <michael@laptop.org> - 0.7.7-1.olpc2
- Provide a spool-gc library for boot-time resource reclamation. (may be racy).
Addresses http://dev.laptop.org/ticket/{5637,2527}
- Close unblessed file descriptors before activity launch.
- Turn on logrotate for /var/log/rainbow.
- Remove bitrotted configuration file.
* Fri Jan 04 2008 Michael Stone <michael@laptop.org> - 0.7.6-1.olpc2
- Move Rainbow's spool-dir from /activities to $HOME/isolation/1/; works
around http://dev.laptop.org/ticket/5033
- Provide a spool-replay script for use by olpc-configure.
- Construct spools at run-time rather than via rpm.
- Remove our runtime-dependency on python-setuptools.
* Wed Dec 19 2007 Michael Stone <michael@laptop.org> - 0.7.5-1.olpc2
- Install /etc/olpc-security by default.
- Improve installation-scripts to handle updates. (thanks, Mako).
- Cause rainbow-daemon to request utf8 strings, fixes http://dev.laptop.org/ticket/5011.
* Sat Nov 10 2007 Michael Stone <michael@laptop.org> - 0.7.4-1.olpc2
- Explicitly specify the working directory of launched activities.
- Reduce permissions on activity home dirs.
- Fix the strace option.
- Add ipython dependency so we get detailed tracebacks on failure.
- Make owner.key.pub available to activities.
* Wed Nov 07 2007 Michael Stone <michael@laptop.org> - 0.7.3-1.olpc2
- Replace Rainbow's log dir with a log file.
- Put Rainbow's spool into /activities since we're making /var/run and /var/tmp
into tmpfsen.
* Mon Nov 05 2007 Michael Stone <michael@laptop.org> - 0.7.2-1.olpc2
- Tell Sugar when we think we've successfully launched activities.
* Mon Nov 05 2007 Michael Stone <michael@laptop.org> - 0.7.1-1.olpc2
- Add rainbow-inject hook for console tests.
- Improve error-detection.
- Explicitly take ownership for all the dirs in Rainbow's spool.
- Reap zombie children.
- Add explicit dependency on an appropriate sugar version.
* Thu Nov 01 2007 Michael Stone <michael@laptop.org> - 0.7.0-1.olpc2
- Remove olpc-update
- Remove dependency on pyvserver
* Thu Sep 27 2007 Michael Stone <michael@laptop.org> - 0.6.7-1
- Add /etc/init.d/rainbow-daemon
* Thu Sep 27 2007 Michael Stone <michael@laptop.org> - 0.6.6-1
- Bump revision number.
* Mon Sep 24 2007 Michael Stone <michael@laptop.org> - 0.6.5-1
- Bump revision number.
* Mon Sep 24 2007 Michael Stone <michael@laptop.org> - 0.6.4-1
- Bump revision number.
- Add dependency on olpccontents
* Wed Sep 19 2007 Michael Stone <michael@laptop.org> - 0.6.3-1
- Fix version/release numbering.
- Correct source line.
* Wed Sep 19 2007 Michael Stone <michael@laptop.org> - 1.0-0.6.2
- Bump revision number.
- Fix installation permissions on executable scripts.
- Add a olpc-update and olpc-update-rsync scripts for performing incremental OS
updates.
* Mon Sep 10 2007 Michael Stone <michael@laptop.org> - 1.0-0.6.1
- Bump revision number.
* Fri Sep 07 2007 Michael Stone <michael@laptop.org> - 1.0-0.6
- Correct ChangeLog formatting.
* Thu Aug 31 2007 Michael Stone <michael@laptop.org> - 1.0-0.4.4.20070831gita7c737
- Record run-time dependencies on python-sqlalchemy and pyvserver.
- Add a build-number field to the release identifier.
* Thu Aug 30 2007 Michael Stone <michael@laptop.org> - 1.0-0.2.20070830git014607
- Add a new installed binary for runninng updaters.
* Mon Aug 13 2007 Noah Kantrowitz <noah@laptop.org> - 1.0-0.2.20070731gitde262e
- Add dist tag to Release.
* Mon Aug 13 2007 Noah Kantrowitz <noah@laptop.org> - 1.0-0.1.20070731gitde262e
- Remove arch-specific variables.
- Package only needed folders from site-pacakges.
- Use macros in a few more places.
* Tue Jul 31 2007 Noah Kantrowitz <noah@laptop.org> - 1.0-0.0.20070731gitde262e
- Bump to latest version of Rainbow.
* Mon Jul 30 2007 Noah Kantrowitz <noah@laptop.org> - 1.0-0.0.20070730git9a7744
- Adding DBus session bus config and bumping to new snapshop of Rainbow.
* Tue Jul 24 2007 Noah Kantrowitz <noah@laptop.org> - 1.0-0.0.20070723git639686
- Initial version of this spec.
|
