# This spec file is not synchronized to the Fedora downstream.

# It serves as Fedora CI configuration and as support for downstream updates.

Name:           openscap

Version:        1.3.4

Release:        0%{?dist}

Epoch:          1

Summary:        Set of open source libraries enabling integration of the SCAP line of standards

License:        LGPLv2+

URL:            http://www.open-scap.org/

Source0:        https://github.com/OpenSCAP/%{name}/releases/download/%{version}/%{name}-%{version}.tar.gz

BuildRequires:  make

BuildRequires:  cmake >= 2.6

BuildRequires:  gcc

BuildRequires:  gcc-c++

BuildRequires:  swig libxml2-devel libxslt-devel perl-generators perl-XML-Parser

BuildRequires:  rpm-devel

BuildRequires:  libgcrypt-devel

BuildRequires:  pcre-devel

BuildRequires:  libacl-devel

BuildRequires:  libselinux-devel

BuildRequires:  libcap-devel

BuildRequires:  libblkid-devel

BuildRequires:  bzip2-devel

BuildRequires:  asciidoc

BuildRequires:  openldap-devel

BuildRequires:  glib2-devel

BuildRequires:  dbus-devel

BuildRequires:  libyaml-devel

BuildRequires:  xmlsec1-devel xmlsec1-openssl-devel

%if %{?_with_check:1}%{!?_with_check:0}

BuildRequires:  perl-XML-XPath

BuildRequires:  bzip2

%endif

Requires:       bash

Requires:       bzip2-libs

Requires:       dbus

Requires:       glib2

Requires:       libacl

Requires:       libblkid

Requires:       libcap

Requires:       libselinux

Requires:       openldap

Requires:       popt

# Fedora has procps-ng, which provides procps

Requires:       procps

Requires:       xmlsec1 xmlsec1-openssl

%description

OpenSCAP is a set of open source libraries providing an easier path

for integration of the SCAP line of standards. SCAP is a line of standards

managed by NIST with the goal of providing a standard language

for the expression of Computer Network Defense related information.

%package        devel

Summary:        Development files for %{name}

Requires:       %{name}%{?_isa} = %{epoch}:%{version}-%{release}

Requires:       libxml2-devel

Requires:       pkgconfig

BuildRequires:  doxygen

%description    devel

The %{name}-devel package contains libraries and header files for

developing applications that use %{name}.

%package        python3

Summary:        Python 3 bindings for %{name}

Requires:       %{name}%{?_isa} = %{epoch}:%{version}-%{release}

BuildRequires:  python3-devel

%description    python3

The %{name}-python3 package contains the bindings so that %{name}

libraries can be used by python3.

%package        scanner

Summary:        OpenSCAP Scanner Tool (oscap)

Requires:       %{name}%{?_isa} = %{epoch}:%{version}-%{release}

Requires:       libcurl >= 7.12.0

BuildRequires:  libcurl-devel >= 7.12.0

%description    scanner

The %{name}-scanner package contains oscap command-line tool. The oscap

is configuration and vulnerability scanner, capable of performing

compliance checking using SCAP content.

%package        utils

Summary:        OpenSCAP Utilities

Requires:       %{name}%{?_isa} = %{epoch}:%{version}-%{release}

Requires:       rpmdevtools rpm-build

Requires:       %{name}-scanner%{?_isa} = %{epoch}:%{version}-%{release}

%description    utils

The %{name}-utils package contains command-line tools build on top

of OpenSCAP library. Historically, openscap-utils included oscap

tool which is now separated to %{name}-scanner sub-package.

%package        engine-sce

Summary:        Script Check Engine plug-in for OpenSCAP

Requires:       %{name}%{?_isa} = %{epoch}:%{version}-%{release}

%description    engine-sce

The Script Check Engine is non-standard extension to SCAP protocol. This

engine allows content authors to avoid OVAL language and write their assessment

commands using a scripting language (Bash, Perl, Python, Ruby, ...).

%package        engine-sce-devel

Summary:        Development files for %{name}-engine-sce

Requires:       %{name}-devel%{?_isa} = %{epoch}:%{version}-%{release}

Requires:       %{name}-engine-sce%{?_isa} = %{epoch}:%{version}-%{release}

Requires:       pkgconfig

%description    engine-sce-devel

The %{name}-engine-sce-devel package contains libraries and header files

for developing applications that use %{name}-engine-sce.

%package        containers

Summary:        Utils for scanning containers

Requires:       %{name} = %{epoch}:%{version}-%{release}

Requires:       %{name}-scanner

BuildArch:      noarch

%description    containers

Tool for scanning Atomic containers.

%prep

%autosetup -p1

%build

%undefine __cmake_in_source_build

# gconf is a legacy system not used any more, and it blocks testing of oscap-anaconda-addon

# as gconf is no longer part of the installation medium

%cmake \

    -DENABLE_PERL=OFF \

    -DENABLE_DOCS=ON \

    -DOPENSCAP_PROBE_UNIX_GCONF=OFF \

    -DGCONF_LIBRARY=

%cmake_build

make docs

%check

%if %{?_with_check:1}%{!?_with_check:0}

ctest -V %{?_smp_mflags}

%endif

%install

%cmake_install

find $RPM_BUILD_ROOT -name '*.la' -exec rm -f {} ';'

# fix python shebangs

pathfix.py -i %{__python3} -p -n $RPM_BUILD_ROOT%{_bindir}/scap-as-rpm

%ldconfig_scriptlets

%files

%doc AUTHORS NEWS README.md

%license COPYING

%doc %{_pkgdocdir}/manual/

%dir %{_datadir}/openscap

%dir %{_datadir}/openscap/schemas

%dir %{_datadir}/openscap/xsl

%dir %{_datadir}/openscap/cpe

%{_libdir}/libopenscap.so.*

%{_datadir}/openscap/schemas/*

%{_datadir}/openscap/xsl/*

%{_datadir}/openscap/cpe/*

%files python3

%{python3_sitearch}/*

%files devel

%doc %{_pkgdocdir}/html/

%{_libdir}/libopenscap.so

%{_libdir}/pkgconfig/*.pc

%{_includedir}/openscap

%exclude %{_includedir}/openscap/sce_engine_api.h

%files engine-sce-devel

%{_libdir}/libopenscap_sce.so

%{_includedir}/openscap/sce_engine_api.h

%files scanner

%{_mandir}/man8/oscap.8*

%{_bindir}/oscap

%{_bindir}/oscap-chroot

%{_sysconfdir}/bash_completion.d

%files utils

%doc docs/oscap-scan.cron

%{_mandir}/man8/*

%exclude %{_mandir}/man8/oscap.8*

%exclude %{_mandir}/man8/oscap-docker.8*

%{_bindir}/*

%exclude %{_bindir}/oscap

%exclude %{_bindir}/oscap-docker

%exclude %{_bindir}/oscap-chroot

%files engine-sce

%{_libdir}/libopenscap_sce.so.*

%files containers

%{_bindir}/oscap-docker

%{_mandir}/man8/oscap-docker.8*

%{python3_sitelib}/oscap_docker_python/*

%{_bindir}/oscap-podman

%{_mandir}/man8/oscap-podman.8*