| 1 |
slords |
1.2 |
# No debuginfo: |
| 2 |
|
|
%define debug_package %{nil} |
| 3 |
|
|
|
| 4 |
|
|
# If you want to debug, uncomment the next line and remove |
| 5 |
|
|
# the duplicate percent sign (due to macro expansion) |
| 6 |
|
|
#%%dump |
| 7 |
|
|
|
| 8 |
|
|
%define name rkhunter |
| 9 |
|
|
%define ver 1.3.0 |
| 10 |
bytegw |
1.7 |
%define rel 5 |
| 11 |
slords |
1.2 |
%define epoch 0 |
| 12 |
|
|
|
| 13 |
|
|
# Don't change this define or also: |
| 14 |
|
|
# 1. installer.sh --layout custom /temporary/dir/usr --striproot /temporary/dir --install |
| 15 |
|
|
# 2. rewrite the files section below. |
| 16 |
|
|
%define _prefix /usr |
| 17 |
|
|
|
| 18 |
slords |
1.1 |
# We can't let RPM do the dependencies automatic because it'll then pick up |
| 19 |
|
|
# a correct but undesirable perl dependency, which rkhunter does not require |
| 20 |
|
|
# in order to function properly. |
| 21 |
|
|
AutoReqProv: no |
| 22 |
|
|
|
| 23 |
slords |
1.2 |
Name: %{name} |
| 24 |
|
|
Summary: %{name} scans for rootkits, backdoors and local exploits |
| 25 |
|
|
Version: %{ver} |
| 26 |
|
|
Release: %{rel}%{dist} |
| 27 |
|
|
Epoch: %{epoch} |
| 28 |
|
|
License: GPL |
| 29 |
|
|
Group: Applications/System |
| 30 |
|
|
Source0: %{name}-%{version}.tar.gz |
| 31 |
|
|
Patch0: rkhunter-installer.patch |
| 32 |
bytegw |
1.5 |
Patch1: rkhunter-nolib.patch |
| 33 |
slords |
1.2 |
BuildArch: noarch |
| 34 |
|
|
Requires: filesystem, bash, grep, findutils, net-tools, coreutils, e2fsprogs, modutils, procps, binutils, wget, perl |
| 35 |
|
|
Provides: %{name} |
| 36 |
|
|
URL: http://rkhunter.sourceforge.net/ |
| 37 |
|
|
BuildRoot: %{_tmppath}/%{name}-%{version} |
| 38 |
slords |
1.1 |
|
| 39 |
|
|
%description |
| 40 |
slords |
1.2 |
Rootkit Hunter is a scanning tool to ensure you are about 99.9%% |
| 41 |
|
|
clean of nasty tools. It scans for rootkits, backdoors and local |
| 42 |
slords |
1.1 |
exploits by running tests like: |
| 43 |
slords |
1.2 |
- File hash check |
| 44 |
slords |
1.1 |
- Look for default files used by rootkits |
| 45 |
|
|
- Wrong file permissions for binaries |
| 46 |
|
|
- Look for suspected strings in LKM and KLD modules |
| 47 |
|
|
- Look for hidden files |
| 48 |
|
|
- Optional scan within plaintext and binary files |
| 49 |
|
|
- Software version checks |
| 50 |
|
|
- Application tests |
| 51 |
|
|
|
| 52 |
|
|
Rootkit Hunter is released as a GPL licensed project and free for everyone to use. |
| 53 |
|
|
|
| 54 |
|
|
|
| 55 |
|
|
%prep |
| 56 |
slords |
1.2 |
%setup -q |
| 57 |
|
|
%patch0 -p1 |
| 58 |
bytegw |
1.5 |
%patch1 -p1 |
| 59 |
slords |
1.1 |
|
| 60 |
|
|
%build |
| 61 |
|
|
|
| 62 |
|
|
%install |
| 63 |
slords |
1.2 |
sh ./installer.sh --layout RPM --install |
| 64 |
slords |
1.1 |
|
| 65 |
slords |
1.3 |
sed -i 's_#ALLOWPROCLISTEN=/sbin/dhclient_ALLOWPROCLISTEN=/sbin/dhclient_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
| 66 |
bytegw |
1.7 |
sed -i 's_#ALLOWPROCLISTEN=/usr/sbin/pppoe_ALLOWPROCLISTEN=/sbin/pppoe_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
| 67 |
slords |
1.3 |
sed -i 's_#ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz_ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
| 68 |
bytegw |
1.4 |
sed -i '/#ALLOWPROCLISTEN=\/usr\/bin\/dhcpcd/iALLOWPROCLISTEN=\/usr\/sbin\/dhcpd' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
| 69 |
slords |
1.3 |
sed -i '/#ALLOWPROCDELFILE=\/usr\/sbin\/mysqld/aALLOWPROCDELFILE=\/usr\/sbin\/httpd' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
| 70 |
bytegw |
1.7 |
sed -i '/#ALLOWPROCLISTEN=\/usr\/local\/bin\/wpa_supplicant/aALLOWPROCLISTEN=\/usr\/sbin\/asterisk' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
| 71 |
slords |
1.1 |
|
| 72 |
slords |
1.2 |
# Make a cron.daily file to mail us the reports |
| 73 |
slords |
1.1 |
%{__mkdir} -p "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily" |
| 74 |
|
|
%{__cat} > "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily/01-rkhunter" <<EOF |
| 75 |
|
|
#!/bin/sh |
| 76 |
slords |
1.6 |
%{_bindir}/rkhunter --cronjob --update --disable apps,suspscan,system_commands --rwo |
| 77 |
slords |
1.2 |
exit 0 |
| 78 |
slords |
1.1 |
EOF |
| 79 |
|
|
%{__chmod} a+rwx,g-w,o-rwx ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/01-rkhunter |
| 80 |
|
|
|
| 81 |
|
|
|
| 82 |
slords |
1.2 |
%post |
| 83 |
|
|
# Only do this on an initial install |
| 84 |
|
|
if [ $1 -eq 1 ]; then |
| 85 |
bytegw |
1.5 |
%{__cp} -p /etc/passwd /var/rkhunter/tmp >/dev/null 2>&1 || : |
| 86 |
|
|
%{__cp} -p /etc/group /var/rkhunter/tmp >/dev/null 2>&1 || : |
| 87 |
slords |
1.2 |
fi |
| 88 |
slords |
1.1 |
|
| 89 |
|
|
|
| 90 |
slords |
1.2 |
%preun |
| 91 |
|
|
# Only do this when removing the RPM |
| 92 |
|
|
if [ $1 -eq 0 ]; then |
| 93 |
|
|
%{__rm} -f /var/log/rkhunter.log /var/log/rkhunter.log.old >/dev/null 2>&1 |
| 94 |
bytegw |
1.5 |
%{__rm} -rf /var/rkhunter/* >/dev/null 2>&1 |
| 95 |
slords |
1.2 |
fi |
| 96 |
slords |
1.1 |
|
| 97 |
|
|
|
| 98 |
slords |
1.2 |
%clean |
| 99 |
|
|
if [ "$RPM_BUILD_ROOT" = "/" ]; then |
| 100 |
|
|
echo Invalid Build root \'"$RPM_BUILD_ROOT"\' |
| 101 |
|
|
exit 1 |
| 102 |
|
|
else |
| 103 |
|
|
rm -rf $RPM_BUILD_ROOT |
| 104 |
|
|
fi |
| 105 |
slords |
1.1 |
|
| 106 |
|
|
|
| 107 |
slords |
1.2 |
%define docdir %{_prefix}/share/doc/%{name}-%{version} |
| 108 |
|
|
%files |
| 109 |
|
|
%defattr(-,root,root) |
| 110 |
|
|
%attr(640,root,root) %config(noreplace) %{_sysconfdir}/%{name}.conf |
| 111 |
|
|
%attr(750,root,root) %{_prefix}/bin/%{name} |
| 112 |
|
|
%attr(750,root,root) %dir %{_libdir}/%{name} |
| 113 |
|
|
%attr(750,root,root) %dir %{_libdir}/%{name}/scripts |
| 114 |
|
|
%attr(750,root,root) %{_libdir}/%{name}/scripts/*.pl |
| 115 |
|
|
%attr(750,root,root) %{_libdir}/%{name}/scripts/*.sh |
| 116 |
|
|
%attr(644,root,root) %doc %{_prefix}/share/man/man8/%{name}.8.gz |
| 117 |
|
|
%attr(755,root,root) %dir %{docdir} |
| 118 |
|
|
%attr(644,root,root) %doc %{docdir}/* |
| 119 |
bytegw |
1.5 |
%attr(750,root,root) %dir %{_var}/%{name} |
| 120 |
|
|
%attr(750,root,root) %dir %{_var}/%{name}/db |
| 121 |
|
|
%attr(640,root,root) %{_var}/%{name}/db/*.dat |
| 122 |
|
|
%attr(750,root,root) %dir %{_var}/%{name}/db/i18n |
| 123 |
|
|
%attr(640,root,root) %{_var}/%{name}/db/i18n/* |
| 124 |
|
|
%attr(750,root,root) %dir %{_var}/%{name}/tmp |
| 125 |
slords |
1.2 |
%{_sysconfdir}/cron.daily/01-rkhunter |
| 126 |
slords |
1.1 |
|
| 127 |
|
|
|
| 128 |
slords |
1.2 |
%changelog |
| 129 |
bytegw |
1.7 |
* Tue Jan 29 2008 Shad L. Lords <slords@mail.com> 1.3.0-5 |
| 130 |
|
|
- Correct pppoe binary location. |
| 131 |
|
|
- Add asterisk binary to allow deleted files. [SME: 3795] |
| 132 |
|
|
|
| 133 |
slords |
1.6 |
* Mon Jan 7 2008 Shad L. Lords <slords@mail.com> 1.3.0-4 |
| 134 |
|
|
- Disable scan for suspicious files until fixed [SME: 3713] |
| 135 |
|
|
|
| 136 |
bytegw |
1.5 |
* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-3 |
| 137 |
|
|
- Change /var/lib to /var to be consistent with previous versions |
| 138 |
|
|
|
| 139 |
bytegw |
1.4 |
* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-2 |
| 140 |
|
|
- Add a few more services for sme tests |
| 141 |
|
|
|
| 142 |
slords |
1.2 |
* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-1 |
| 143 |
|
|
- Fix installer to not install in local |
| 144 |
slords |
1.3 |
- Set parameters for sme specific tests |
| 145 |
slords |
1.1 |
|
| 146 |
slords |
1.2 |
* Sun Feb 11 2007 unSpawn - pre-1.3.0 |
| 147 |
|
|
- Sync spec with fixes, installer and CVS |
| 148 |
slords |
1.1 |
|
| 149 |
slords |
1.2 |
* Sun Nov 12 2006 unSpawn - 1.2.9 |
| 150 |
|
|
- Re-spec, new installer |
| 151 |
slords |
1.1 |
|
| 152 |
slords |
1.2 |
* Fri Sep 29 2006 unSpawn - 1.2.9 |
| 153 |
|
|
- Updated for release 1.2.9 |
| 154 |
slords |
1.1 |
|
| 155 |
|
|
* Tue Aug 10 2004 Michael Boelen - 1.1.5 |
| 156 |
|
|
- Added update script |
| 157 |
|
|
- Extended description |
| 158 |
|
|
|
| 159 |
|
|
* Sun Aug 08 2004 Greg Houlette - 1.1.5 |
| 160 |
|
|
- Changed the install procedure eliminating the specification of |
| 161 |
|
|
destination filenames (only needed if you are renaming during install) |
| 162 |
|
|
- Changed the permissions for documentation files (root only overkill) |
| 163 |
|
|
- Added the installation of the rkhunter Man Page |
| 164 |
|
|
- Added the installation of the programs_{bad, good}.dat database files |
| 165 |
|
|
- Added the installation of the LICENSE documentation file |
| 166 |
|
|
- Added the chmod for root only to the /var/rkhunter/db directory |
| 167 |
|
|
|
| 168 |
|
|
* Sun May 23 2004 Craig Orsinger (cjo) <cjorsinger@earthlink.net> |
| 169 |
|
|
- version 1.1.0-1.cjo |
| 170 |
|
|
- changed installation in accordance with new rootkit installation |
| 171 |
|
|
procedure |
| 172 |
|
|
- changed installation root to conform to LSB. Use standard macros. |
| 173 |
|
|
- added recursive remove of old build root as prep for install phase |
| 174 |
|
|
|
| 175 |
|
|
* Wed Apr 28 2004 Doncho N. Gunchev - 1.0.9-0.mr700 |
| 176 |
|
|
- dropped Requires: perl - rkhunter works without it |
| 177 |
|
|
- dropped the bash alignpatch (check the source or contact me) |
| 178 |
|
|
- various file mode fixes (.../tmp/, *.db) |
| 179 |
|
|
- optimized the %%files section - any new files in the |
| 180 |
|
|
current dirs will be fine - just %%{__install} them. |
| 181 |
|
|
|
| 182 |
|
|
* Mon Apr 26 2004 Michael Boelen - 1.0.8-0 |
| 183 |
|
|
- Fixed missing md5blacklist.dat |
| 184 |
|
|
|
| 185 |
|
|
* Mon Apr 19 2004 Doncho N. Gunchev - 1.0.6-1.mr700 |
| 186 |
|
|
- added missing /usr/local/rkhunter/db/md5blacklist.dat |
| 187 |
|
|
- patched to align results in --cronjob, I think rpm based |
| 188 |
|
|
distros have symlink /bin/sh -> /bin/bash |
| 189 |
|
|
- added --with/--without alignpatch for conditional builds |
| 190 |
|
|
(in case previous patch breaks something) |
| 191 |
|
|
|
| 192 |
|
|
* Sat Apr 03 2004 Michael Boelen / Joe Klemmer - 1.0.6-0 |
| 193 |
|
|
- Update to 1.0.6 |
| 194 |
|
|
|
| 195 |
|
|
* Mon Mar 29 2004 Doncho N. Gunchev - 1.0.0-0 |
| 196 |
|
|
- initial .spec file |
| 197 |
|
|
|
| 198 |
slords |
1.2 |
|
Parent Directory
| 
Revision Log
| 
Revision Graph
