File pam-ussh.spec of Package pam-ussh

#
# spec file for package pam-ussh
#
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#


Name:           pam-ussh
Version:        0
Release:        0
Summary:        Uber's ssh certificate pam module
License:        MIT
Group:          Productivity/Security
Url:            https://github.com/uber/pam-ussh
Source:         %{name}-%{version}.tar.xz
Source1:        vendor.tar.xz
Patch:          mod.patch
BuildRequires:  golang-packaging
BuildRequires:  golang(API) >= 1.17
BuildRequires:  pam-devel
%go_nostrip
%description
This is a pam module that will authenticate a user based on them having an ssh
certificate in their ssh-agent signed by a specified ssh CA.

This is primarily intended as an authentication module for sudo. Using it for
something else may be unsafe (we haven't tested it anyway). We'd be happy to
learn of other potential uses though.

An example usage would be you ssh to a remote machine and sshd authenticates
you (probably using your ssh cert, because if you're using it for this, you're
probably using it for sshd as well). At that point when you want to run a
command that requires authentication (eg. sudo), you can use pam-ussh for
authentication.

%prep
%autosetup -a 1

%build
make

%install
install -D -m 0755 pam_ussh.so %{buildroot}/%{_lib}/security/pam_ussh.so

%files
%doc README.md
%license LICENSE
/%{_lib}/security/pam_ussh.so

%changelog
openSUSE Build Service is sponsored by