Name:           sudo-rs
Version:        0.2.15
Release:        %autorelease
Summary:        Memory safe implementation of sudo and su
License:        Apache-2.0 OR MIT
URL:            https://github.com/trifectatechfoundation/sudo-rs
Source:         %{url}/archive/v%{version}/sudo-rs-%{version}.tar.gz

Provides:       sudo = %{version}-%{release}
Obsoletes:      sudo < %{version}-%{release}

BuildRequires:  cargo-rpm-macros >= 26
BuildRequires:  pam-devel


%description
A memory safe implementation of sudo and su.


%prep
%autosetup -n sudo-rs-%{version}
%cargo_prep


%generate_buildrequires
%cargo_generate_buildrequires -t -f pam-login


%build
%cargo_build -f pam-login

%install
install -Dpm 0755 target/rpm/su \
    %{buildroot}%{_bindir}/su
install -Dpm 0755 target/rpm/sudo \
    %{buildroot}%{_bindir}/sudo
install -Dpm 0755 target/rpm/visudo \
    %{buildroot}%{_bindir}/visudo

install -Dpm 0644 /dev/stdin \
    %{buildroot}%{_sysconfdir}/pam.d/sudo <<'EOF'
#%PAM-1.0
auth       include      system-auth
account    include      system-auth
password   include      system-auth
session    optional     pam_keyinit.so revoke
session    required     pam_limits.so
EOF

install -Dpm 0644 /dev/stdin \
    %{buildroot}%{_sysconfdir}/pam.d/sudo-i <<'EOF'
#%PAM-1.0
auth       include      sudo
account    include      sudo
password   include      sudo
session    optional     pam_keyinit.so force revoke
session    required     pam_limits.so
EOF


%files
%attr(4755, root, root) %{_bindir}/su
%attr(4111, root, root) %{_bindir}/sudo
%attr(0755, root, root) %{_bindir}/visudo
%config(noreplace) %{_sysconfdir}/pam.d/sudo
%config(noreplace) %{_sysconfdir}/pam.d/sudo-i


%changelog
%autochangelog