summaryrefslogtreecommitdiff
path: root/configure.ac
AgeCommit message (Collapse)AuthorFilesLines
2014-11-05Fixed incorrect writting host_os to platform/macros for uClibcNataliia Koval1-0/+3
Change-Id: I107f04237037daffbc0d972ad9fed84a42836392 Signed-off-by: Nataliia Koval <nataliia.koval@globallogic.com>
2013-11-15msm: check libxml/{xmlreader,tree}.hAdrian Negreanu1-0/+10
msmconfig.c:29:25: fatal error: libxml/tree.h: No such file or directory msmmanifest.c:37:30: fatal error: libxml/xmlreader.h: No such file or directory Bug-Id: https://bugs.tizen.org/jira/browse/PTREL-397 Change-Id: If287d79f343ca6f6f4be9392f09e17387305fb8a Signed-off-by: Adrian Negreanu <adrian.m.negreanu@intel.com>
2013-08-07Security plugin: removing disable-dchecks optionElena Reshetova1-8/+0
2013-05-31Security plugin: Adding configuration option --disable-dchecksElena Reshetova1-0/+7
2013-02-02Adding security msm pluginElena Reshetova1-0/+55
2013-02-02Prefer sys/vfs.h, as statvfs stats all filesystems againAnas Nashif1-7/+7
2013-01-30Bump version to dot-paperbag aka 4.11.0.1Panu Matilainen1-1/+1
2013-01-29Preparing for 4.11.0 finalrpm-4.11.0-releasePanu Matilainen1-1/+1
2013-01-29Acommodate to glibc 2.17 __secure_getenv() renamingPanu Matilainen1-1/+1
- glibc 2.17 renames __secure_getenv() to secure_getenv() so now we need to test for both. Meh. (cherry picked from commit 49519f2564777fdcfb801088fb3025b3d6f5783a)
2012-12-10Preparing for 4.11.0-beta1upstream/4.10.91rpm-4.11.0-beta1Panu Matilainen1-1/+1
2012-11-30Get rid of long since deprecated VFY_VerifyDigest() usesPanu Matilainen1-2/+2
- VFY_VerifyDigest() has been deprecated since NSS >= 3.12 and for a good reason too: with VFY_VerifyDigest() caller needs to painfully enumerate every possible supported enc + hash combination, only for NSS to revert the process. Use the saner VFY_VerifyDigestDirect() interface instead and test for its presence in configure. - This means we now require NSS >= 3.12 but as that's already 4.5 years old and included in ancient beasts like RHEL-4, this doesn't seem exactly unreasonable requirement. And then there's always beecrypt... (cherry picked from commit 9b995a7674adba08248fac79ae8b23ecbecc13de)
2012-11-30Remove extra ',' in NSS configure checks, whoopsPanu Matilainen1-1/+1
(cherry picked from commit e1c67173d38016a88989f5b09e0934f90094fe85)
2012-10-31Use private NSS context if NSS supports it (RhBug:871485)Panu Matilainen1-0/+4
- Older NSS versions operate on global context, which can cause all sorts of trouble when an API user tries to use NSS for their own purposes: eg they might want to use NSS databases which is not possible once we've initialized NSS with NSS_NoDB_Init(). Further background on the subject at https://wiki.mozilla.org/NSS_Library_Init - Use private private NSS context when possible (NSS >= 3.12.5) to avoid such clashes, but keep support for older versions for now.
2012-10-19Default to NSS crypto though...Panu Matilainen1-2/+2
- NSS is a big and quirky monster for our needs but that's what we've been defaulting to for the last years, and then there are those certifications... - Also default to external beecrypt even if --with-beecrypt is used
2012-10-19Add support for beecrypt as an alternative crypto implementationMichael Schroeder1-0/+32
Signed-off-by: Panu Matilainen <pmatilai@redhat.com>
2012-08-14Run gcc supported flags test without our stricter warning flagsPanu Matilainen1-2/+1
- Fixes fallout from commit f9c69f803f74bd458269c7a06def494ea63387e6: running these tests with -Wstrict-prototypes causes all these tests to fail as AC_LANG_PROGRAM() uses an incomplete prototype for main() :(
2012-07-12Run gcc supported flags test with -WerrorPanu Matilainen1-1/+1
- On gcc versions supporting -fstack-protector, not all platforms support this feature, causing gcc to emit only a warning instead of an error. Which then causes warning-spew on every compiled file. Run all the supported flag tests with -Werror to turn the warnings into errors, there could be other similar cases besides stack protector. - Patch originally from Arnaud Patard according to this Mandriva commit: http://svn.mandriva.com/cgi-bin/viewvc.cgi/packages?view=revision&revision=448632
2012-07-02Dont use mmap() for anything, axe the code insteadPanu Matilainen1-2/+0
- Commit 4cb02aa928d3e41f636d0e01356c7a3cb51018ee asked to see what breaks when mmap() is used, now we know: large package support broke when enabling it. Could be fixed of course by eg adding a size cap to the fsm part as well, but just doesn't seem worth it: I fail to measure any meaningful performance improvement from mmap usage in either case, and added complexity for what is close to zero benefit just doesn't make sense... and various sources in fact note the rpm usage (read through the entire file sequentially) as one of the cases where mmap() is NOT beneficial due to mmap() high setup + teardown cost + page fault speed (or lack of thereof).
2012-06-25Add support for quilt (ticket #54) and bzr to %autosetup/patchPanu Matilainen1-0/+2
- These are both "appears to have roughly the intended effect" level tested, but I'm not really familiar with either bzr or quilt so any further refinements need to come from people actually familiar with these tools.
2012-06-21Add a set of macros to further automate spec %prep tasksPanu Matilainen1-0/+3
- This adds two main macros (+ bunch of helpers) to automate the common case tasks in %prep: 1) %autopatch which automatically applies all patches from a spec 2) %autosetup which (optionally) takes care of it all, and (also optionally) sets up a git/hg repository of the unpacked source + applied patches as it goes. - This should be considered a starting point only, there are various things to improve. Eg we'd like to be able to make backups with plain patch (based on patch number maybe) and at least with git, we'd like to be able be (optionally) use 'git am' patching style to preserve original authors + commit messages etc. - A noteworthy point here is that as these are fully implemented as macros, they are compatible with several older rpm versions as well.
2012-06-21Fall back to using fsync() on systems without fdatasync()Panu Matilainen1-0/+1
- While fdatasync() is widely available on modernish systems, OS X doesn't have it
2012-05-31Only use local mempcpy() if system libraries dont provide onePanu Matilainen1-0/+1
- Obvious yes, but how come this didn't barf on my other rather identical system? Meh.
2012-05-31Bury our glob() implementation entirely inside rpmglob.c (RhBug:819680)Panu Matilainen1-11/+0
- Lump glob.h and glob.c into rpmglob.c in all their g(l)ory libc decorations and make everything static to stop overriding system library symbols with our own glob().
2012-05-22Add support for 7zip compressed tarballsChristophe Fergeau1-0/+1
Teach %prep and %uncompress how to handle 7zip tarballs, with the mingw toolchain landing in fedora, this may be useful when crossbuilding Windows sources compressed using 7zip (CxImage is one such project).
2012-03-20Bump version to appear newer than 4.10.x branchPanu Matilainen1-1/+1
2012-03-09Allow silent build on automake versions that support itPanu Matilainen1-0/+2
2011-09-01GCC warning option tweaksPanu Matilainen1-3/+1
- WTH are we compiling with -Wno-char-subscripts? This appears to have been there since the dawn of times, and at least nowadays removing it causes no new warnings. - Re-enable -Wstrict-prototypes, either NSS headers have gotten fixed or GCC has gotten smarter and no longer whines about broken system headers.
2011-08-19Remove support for ancient bzip2 library versionsPanu Matilainen1-7/+1
- bzip2 1.0 is over ten years old by now, anybody still using versions older than that get what they deserve...
2011-07-08zlib is mandatory, fail at configure if missing + remove conditionalsPanu Matilainen1-0/+2
- Unlike bz2 and xz/lz, zlib compression is not tracked by any rpmlib feature and is part of the original package format really, zlib simply must be always present.
2011-06-28Enable GLOB_ONLYDIR of the bundled glob() on platforms that support itPanu Matilainen1-1/+1
2011-04-29Add lrzip support.Ville Skyttä1-0/+1
Signed-off-by: Panu Matilainen <pmatilai@redhat.com>
2011-04-29Add lzip support.Ville Skyttä1-0/+1
Signed-off-by: Panu Matilainen <pmatilai@redhat.com>
2011-04-04Only enable test-suite if fakechroot is availablePanu Matilainen1-1/+3
2011-03-28Use pkg-config to find Lua + determine flags (ticket #88)Panu Matilainen1-21/+14
- Additionally clean up the logic a bit and dont bother building any lua-related bits if disabled
2011-03-25Push platform config out of main rpm macros filePanu Matilainen1-28/+0
- canon arch & color stuff is now calculated per each known arch in installplatform, and just a single place where arch name mangling is done
2011-03-25Replace distro/vendor autodetection with a configure switchPanu Matilainen1-13/+7
- it's not rpm's job, not is it possible for rpm to know about distribution/vendor names and preferences - use build_vendor as the canonical vendor (affecting %{_vendor} default and macro + rpmrc paths) unless overridden by --with-vendor=name
2011-03-25Move find-provides and find-requires link to autodeps/Florian Festi1-35/+24
Implement link reaction with less copied code
2011-03-23Remove checks of unused things from configure.acJindrich Novy1-12/+1
2011-03-23Don't use mtrace(3), muntrace(3) and don't check for mcheck.hJindrich Novy1-2/+0
- valgrind is good for these things without touching the code
2011-03-23Remove libio support to suppress timedRead()Jindrich Novy1-1/+0
2011-03-09Preliminary distutils support for the python bindingsPanu Matilainen1-0/+1
- Steps towards separating rpm-python from the main rpm tarball even though developed within the rpm repository. - Having the bindings in a separate tarball makes it simpler to build them for different python versions, notably python 3 (RhBug:531543)
2011-03-04Make peace with autoconf-2.68Panu Matilainen1-0/+2
2010-12-22Only sepolicy-plugin needs linking to libsemanagePanu Matilainen1-1/+4
2010-12-03Bump HEAD version at branch-pointPanu Matilainen1-1/+1
2010-10-26Fix BDB version check in configure to work with >= 5 tooPanu Matilainen1-1/+1
2010-10-22Move librpmsign to its own subdirectory in the sourcesPanu Matilainen1-1/+1
2010-10-01Add configure switch to disable plugins buildPanu Matilainen1-0/+7
- For now this is really just to allow building statically while hacking, for "real world" use this has implications on collections support etc which is not handled by this patch.
2010-10-01Handle enable/disable python to configure.ac more sanelyPanu Matilainen1-1/+1
- Conditionalize the python subdir on toplevel make instead of python subdir makefile.
2010-09-01Add SELinux policy pluginSteve Lawrence1-3/+46
This adds a new plugin specifically for a collection to load SELinux policy. This implements the post_add and pre_remove plugin hooks. The only time anything happens during the pre_remove hook is if post_add was not called (i.e. if the transaction only removes policies). This plugin extracts all the policy information from packages in the sepolicy collection during the open te hook. It then determines which policies should be installed/removed based on if the package is being installed/removed and the type of the policy and the system policy. It then executes semodule (or uses libsemanage if semodule cannot be executed or installing in a chroot) to remove and install the necessary policies. It then reloads the selinux state, reloads the file contexts, and if necessary, relabels the file system.
2010-09-01Use selabel interfaces instead of matchpathconSteve Lawrence1-0/+13
This replaces the old matchpathcon interfaces with the new selabel interfaces for relabeling files, storing an selabel handle in the transaction set. With this change, also comes an added distinction between --nocontexts being specified and a failure to read the load file contexts. Previously, there was no distinction, and both cases used the RPMTRANS_FLAG_NOCONTEXTS flag. However, with the new policy plugin, it is necessary to make such a distinction. This is because matchpathcon_init (now selabel interfaces) can fail at the beginning of the transaction, but succeed later after new policy is installed. Because of this, we may need to enable/disable RPMTRANS_FLAG_NOCONTEXTS multiple times. However, because this flag could also mean --nocontexts, we cannot do that. By storing the selabel handle in the rpmts, we can easily keep track if the handle has been successfully created, rather than overloading RPMTRANS_FLAG_NOCONTEXTS with two meanings.