1 |
|
# $Id$ |
2 |
|
|
3 |
# No debuginfo: |
# No debuginfo: |
4 |
%define debug_package %{nil} |
%define debug_package %{nil} |
5 |
|
|
8 |
#%%dump |
#%%dump |
9 |
|
|
10 |
%define name rkhunter |
%define name rkhunter |
11 |
%define ver 1.3.0 |
%define ver 1.3.2 |
12 |
%define rel 1 |
%define rel 2 |
13 |
%define epoch 0 |
%define epoch 0 |
14 |
|
|
15 |
# Don't change this define or also: |
# Don't change this define or also: |
31 |
Group: Applications/System |
Group: Applications/System |
32 |
Source0: %{name}-%{version}.tar.gz |
Source0: %{name}-%{version}.tar.gz |
33 |
Patch0: rkhunter-installer.patch |
Patch0: rkhunter-installer.patch |
34 |
Patch1: rkhunter-sme7.patch |
Patch1: rkhunter-nolib.patch |
35 |
BuildArch: noarch |
BuildArch: noarch |
36 |
Requires: filesystem, bash, grep, findutils, net-tools, coreutils, e2fsprogs, modutils, procps, binutils, wget, perl |
Requires: filesystem, bash, grep, findutils, net-tools, coreutils, e2fsprogs, modutils, procps, binutils, wget, perl |
37 |
Provides: %{name} |
Provides: %{name} |
62 |
%build |
%build |
63 |
|
|
64 |
%install |
%install |
65 |
|
MANPATH="" |
66 |
|
export MANPATH |
67 |
|
|
68 |
sh ./installer.sh --layout RPM --install |
sh ./installer.sh --layout RPM --install |
69 |
|
|
70 |
|
sed -i 's_#ALLOWPROCLISTEN=/sbin/dhclient_ALLOWPROCLISTEN=/sbin/dhclient_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
71 |
|
sed -i 's_#ALLOWPROCLISTEN=/usr/sbin/pppoe_ALLOWPROCLISTEN=/sbin/pppoe_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
72 |
|
sed -i 's_#ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz_ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
73 |
|
sed -i '/#ALLOWPROCLISTEN=\/usr\/bin\/dhcpcd/iALLOWPROCLISTEN=\/usr\/sbin\/dhcpd' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
74 |
|
sed -i '/#ALLOWPROCDELFILE=\/usr\/sbin\/mysqld/aALLOWPROCDELFILE=\/usr\/sbin\/httpd' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
75 |
|
sed -i '/ALLOWPROCDELFILE=\/usr\/sbin\/httpd/aALLOWPROCDELFILE=\/usr\/sbin\/asterisk' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
76 |
|
sed -i '/ALLOWPROCDELFILE=\/usr\/sbin\/httpd/aALLOWPROCDELFILE=\/usr\/bin\/freshclam' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf |
77 |
|
|
78 |
# Make a cron.daily file to mail us the reports |
# Make a cron.daily file to mail us the reports |
79 |
%{__mkdir} -p "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily" |
%{__mkdir} -p "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily" |
80 |
%{__cat} > "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily/01-rkhunter" <<EOF |
%{__cat} > "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily/01-rkhunter" <<EOF |
81 |
#!/bin/sh |
#!/bin/sh |
82 |
( %{_bindir}/rkhunter --cronjob --update --rwo && echo "" ) | /bin/mail -s "Rkhunter daily run on `uname -n`" root |
%{_bindir}/rkhunter --cronjob --update --disable apps,suspscan,system_commands --rwo |
83 |
exit 0 |
exit 0 |
84 |
EOF |
EOF |
85 |
%{__chmod} a+rwx,g-w,o-rwx ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/01-rkhunter |
%{__chmod} a+rwx,g-w,o-rwx ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/01-rkhunter |
88 |
%post |
%post |
89 |
# Only do this on an initial install |
# Only do this on an initial install |
90 |
if [ $1 -eq 1 ]; then |
if [ $1 -eq 1 ]; then |
91 |
%{__cp} -p /etc/passwd /var/lib/rkhunter/tmp >/dev/null 2>&1 || : |
%{__cp} -p /etc/passwd /var/rkhunter/tmp >/dev/null 2>&1 || : |
92 |
%{__cp} -p /etc/group /var/lib/rkhunter/tmp >/dev/null 2>&1 || : |
%{__cp} -p /etc/group /var/rkhunter/tmp >/dev/null 2>&1 || : |
93 |
fi |
fi |
94 |
|
|
95 |
|
|
97 |
# Only do this when removing the RPM |
# Only do this when removing the RPM |
98 |
if [ $1 -eq 0 ]; then |
if [ $1 -eq 0 ]; then |
99 |
%{__rm} -f /var/log/rkhunter.log /var/log/rkhunter.log.old >/dev/null 2>&1 |
%{__rm} -f /var/log/rkhunter.log /var/log/rkhunter.log.old >/dev/null 2>&1 |
100 |
%{__rm} -rf /var/lib/rkhunter/* >/dev/null 2>&1 |
%{__rm} -rf /var/rkhunter/* >/dev/null 2>&1 |
101 |
fi |
fi |
102 |
|
|
103 |
|
|
122 |
%attr(644,root,root) %doc %{_prefix}/share/man/man8/%{name}.8.gz |
%attr(644,root,root) %doc %{_prefix}/share/man/man8/%{name}.8.gz |
123 |
%attr(755,root,root) %dir %{docdir} |
%attr(755,root,root) %dir %{docdir} |
124 |
%attr(644,root,root) %doc %{docdir}/* |
%attr(644,root,root) %doc %{docdir}/* |
125 |
%attr(750,root,root) %dir %{_var}/lib/%{name} |
%attr(750,root,root) %dir %{_var}/%{name} |
126 |
%attr(750,root,root) %dir %{_var}/lib/%{name}/db |
%attr(750,root,root) %dir %{_var}/%{name}/db |
127 |
%attr(640,root,root) %{_var}/lib/%{name}/db/*.dat |
%attr(640,root,root) %{_var}/%{name}/db/*.dat |
128 |
%attr(750,root,root) %dir %{_var}/lib/%{name}/db/i18n |
%attr(750,root,root) %dir %{_var}/%{name}/db/i18n |
129 |
%attr(640,root,root) %{_var}/lib/%{name}/db/i18n/* |
%attr(640,root,root) %{_var}/%{name}/db/i18n/* |
130 |
%attr(750,root,root) %dir %{_var}/lib/%{name}/tmp |
%attr(750,root,root) %dir %{_var}/%{name}/tmp |
131 |
%{_sysconfdir}/cron.daily/01-rkhunter |
%{_sysconfdir}/cron.daily/01-rkhunter |
132 |
|
|
133 |
|
|
134 |
%changelog |
%changelog |
135 |
|
* Sun Mar 2 2008 Shad L. Lords <slords@mail.com> 1.3.2-2 |
136 |
|
- Allow freshclam to use deleted files. [SME: 3876] |
137 |
|
|
138 |
|
* Fri Feb 29 2008 Shad L. Lords <slords@mail.com> 1.3.2-1 |
139 |
|
- Update to rkhunter v1.3.2 [SME: 4000] |
140 |
|
|
141 |
|
* Wed Jan 30 2008 Shad L. Lords <slords@mail.com> 1.3.0-6 |
142 |
|
- Fix asterisk to allow deleted files. [SME: 3795] |
143 |
|
|
144 |
|
* Tue Jan 29 2008 Shad L. Lords <slords@mail.com> 1.3.0-5 |
145 |
|
- Correct pppoe binary location. |
146 |
|
- Add asterisk binary to allow deleted files. [SME: 3795] |
147 |
|
|
148 |
|
* Mon Jan 7 2008 Shad L. Lords <slords@mail.com> 1.3.0-4 |
149 |
|
- Disable scan for suspicious files until fixed [SME: 3713] |
150 |
|
|
151 |
|
* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-3 |
152 |
|
- Change /var/lib to /var to be consistent with previous versions |
153 |
|
|
154 |
|
* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-2 |
155 |
|
- Add a few more services for sme tests |
156 |
|
|
157 |
* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-1 |
* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-1 |
|
- Add sigs for 7.2, 7.3 and 8.0 |
|
158 |
- Fix installer to not install in local |
- Fix installer to not install in local |
159 |
|
- Set parameters for sme specific tests |
160 |
|
|
161 |
* Sun Feb 11 2007 unSpawn - pre-1.3.0 |
* Sun Feb 11 2007 unSpawn - pre-1.3.0 |
162 |
- Sync spec with fixes, installer and CVS |
- Sync spec with fixes, installer and CVS |