PREIN

/bin/sh

getent group pesign >/dev/null || groupadd -r pesign
getent passwd pesign >/dev/null || \
	useradd -r -g pesign -d /var/run/pesign -s /sbin/nologin \
		-c "Group for the pesign signing daemon" pesign
exit 0

PREUN

/bin/sh

%systemd_preun pesign.service

POSTIN

/bin/sh

%systemd_post pesign.service
modutil -force -dbdir /etc/pki/pesign -add opensc \
	-libfile /usr/lib64/pkcs11/opensc-pkcs11.so >/dev/null
#modutil -force -dbdir /etc/pki/pesign -add coolkey \
#	-libfile %{_libdir}/pkcs11/libcoolkeypk11.so

POSTUN

/bin/sh

%systemd_postun_with_restart pesign.service