Skip to content

Commit

Permalink
fix permissions on installed binary
Browse files Browse the repository at this point in the history
  • Loading branch information
tobiasb-ms committed Oct 14, 2024
1 parent 1ec9e7e commit 7c46c54
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions SPECS/SymCrypt/SymCrypt.spec
Original file line number Diff line number Diff line change
Expand Up @@ -72,12 +72,15 @@ cmake --build bin
%define _find_debuginfo_opts --keep-symbol SymCryptVolatileFipsHmacKey --keep-symbol SymCryptVolatileFipsHmacKeyRva --keep-symbol SymCryptVolatileFipsBoundaryOffset --keep-symbol SymCryptVolatileFipsHmacDigest

# Override the default to allow us to do custom fips post-processing after debug info/stripping is done.
# The post-processing script writes the modified file to the same location as the original file, which
# is subject to default permissions, so we need to set permissions manually after the script.
%define __spec_install_post \
%{?__debug_package:%{__debug_install_post}} \
%{__arch_install_post} \
%{__os_install_post} \
mkdir -p "bin/module/generic/processing" \
python3 "scripts/process_fips_module.py" "%{buildroot}%{_libdir}/libsymcrypt.so.%{version}" --processing-dir "bin/module/generic/processing" --debug \
chmod 755 "%{buildroot}%{_libdir}/libsymcrypt.so.%{version}" \
%{nil}

%install
Expand Down

0 comments on commit 7c46c54

Please sign in to comment.