rkhunter/sme8/rkhunter.spec

# $Id$

# No debuginfo:
%define debug_package %{nil}

# If you want to debug, uncomment the next line and remove
# the duplicate percent sign (due to macro expansion)
#%%dump

%define name rkhunter
%define ver 1.3.2
%define rel 2
%define epoch 0

# Don't change this define or also:
# 1. installer.sh --layout custom /temporary/dir/usr --striproot /temporary/dir --install
# 2. rewrite the files section below.
%define _prefix /usr

# We can't let RPM do the dependencies automatic because it'll then pick up
# a correct but undesirable perl dependency, which rkhunter does not require
# in order to function properly.
AutoReqProv: no

Name: %{name}
Summary: %{name} scans for rootkits, backdoors and local exploits
Version: %{ver}
Release: %{rel}%{dist}
Epoch: %{epoch}
License: GPL
Group: Applications/System
Source0: %{name}-%{version}.tar.gz
Patch0: rkhunter-installer.patch
Patch1: rkhunter-nolib.patch
BuildArch: noarch
Requires: filesystem, bash, grep, findutils, net-tools, coreutils, e2fsprogs, modutils, procps, binutils, wget, perl
Provides: %{name}
URL: http://rkhunter.sourceforge.net/
BuildRoot: %{_tmppath}/%{name}-%{version}

%description
Rootkit Hunter is a scanning tool to ensure you are about 99.9%%
clean of nasty tools. It scans for rootkits, backdoors and local
exploits by running tests like:
        - File hash check
        - Look for default files used by rootkits
        - Wrong file permissions for binaries
        - Look for suspected strings in LKM and KLD modules
        - Look for hidden files
        - Optional scan within plaintext and binary files
        - Software version checks
        - Application tests

Rootkit Hunter is released as a GPL licensed project and free for everyone to use.


%prep
%setup -q
%patch0 -p1
%patch1 -p1

%build

%install
MANPATH=""
export MANPATH

sh ./installer.sh --layout RPM --install

sed -i 's_#ALLOWPROCLISTEN=/sbin/dhclient_ALLOWPROCLISTEN=/sbin/dhclient_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
sed -i 's_#ALLOWPROCLISTEN=/usr/sbin/pppoe_ALLOWPROCLISTEN=/sbin/pppoe_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
sed -i 's_#ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz_ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
sed -i '/#ALLOWPROCLISTEN=\/usr\/bin\/dhcpcd/iALLOWPROCLISTEN=\/usr\/sbin\/dhcpd' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
sed -i '/#ALLOWPROCDELFILE=\/usr\/sbin\/mysqld/aALLOWPROCDELFILE=\/usr\/sbin\/httpd' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
sed -i '/ALLOWPROCDELFILE=\/usr\/sbin\/httpd/aALLOWPROCDELFILE=\/usr\/sbin\/asterisk' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
sed -i '/ALLOWPROCDELFILE=\/usr\/sbin\/httpd/aALLOWPROCDELFILE=\/usr\/bin\/freshclam' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf

# Make a cron.daily file to mail us the reports
%{__mkdir} -p "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily"
%{__cat} > "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily/01-rkhunter" <<EOF
#!/bin/sh
%{_bindir}/rkhunter --cronjob --update --disable apps,suspscan,system_commands --rwo
exit 0
EOF
%{__chmod} a+rwx,g-w,o-rwx ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/01-rkhunter


%post
# Only do this on an initial install
if [ $1 -eq 1 ]; then
        %{__cp} -p /etc/passwd /var/rkhunter/tmp >/dev/null 2>&1 || :
        %{__cp} -p /etc/group /var/rkhunter/tmp >/dev/null 2>&1 || :
fi


%preun
# Only do this when removing the RPM
if [ $1 -eq 0 ]; then
        %{__rm} -f /var/log/rkhunter.log /var/log/rkhunter.log.old >/dev/null 2>&1
        %{__rm} -rf /var/rkhunter/* >/dev/null 2>&1
fi


%clean
if [ "$RPM_BUILD_ROOT" = "/" ]; then
        echo Invalid Build root \'"$RPM_BUILD_ROOT"\'
        exit 1
else
        rm -rf $RPM_BUILD_ROOT
fi


%define docdir %{_prefix}/share/doc/%{name}-%{version}
%files
%defattr(-,root,root)
%attr(640,root,root) %config(noreplace) %{_sysconfdir}/%{name}.conf
%attr(750,root,root) %{_prefix}/bin/%{name}
%attr(750,root,root) %dir %{_libdir}/%{name}
%attr(750,root,root) %dir %{_libdir}/%{name}/scripts
%attr(750,root,root) %{_libdir}/%{name}/scripts/*.pl
%attr(750,root,root) %{_libdir}/%{name}/scripts/*.sh
%attr(644,root,root) %doc %{_prefix}/share/man/man8/%{name}.8.gz
%attr(755,root,root) %dir %{docdir}
%attr(644,root,root) %doc %{docdir}/*
%attr(750,root,root) %dir %{_var}/%{name}
%attr(750,root,root) %dir %{_var}/%{name}/db
%attr(640,root,root) %{_var}/%{name}/db/*.dat
%attr(750,root,root) %dir %{_var}/%{name}/db/i18n
%attr(640,root,root) %{_var}/%{name}/db/i18n/*
%attr(750,root,root) %dir %{_var}/%{name}/tmp
%{_sysconfdir}/cron.daily/01-rkhunter


%changelog
* Sun Mar 2 2008 Shad L. Lords <slords@mail.com> 1.3.2-2
- Allow freshclam to use deleted files. [SME: 3876]

* Fri Feb 29 2008 Shad L. Lords <slords@mail.com> 1.3.2-1
- Update to rkhunter v1.3.2 [SME: 4000]

* Wed Jan 30 2008 Shad L. Lords <slords@mail.com> 1.3.0-6
- Fix asterisk to allow deleted files. [SME: 3795]

* Tue Jan 29 2008 Shad L. Lords <slords@mail.com> 1.3.0-5
- Correct pppoe binary location.
- Add asterisk binary to allow deleted files. [SME: 3795]

* Mon Jan 7 2008 Shad L. Lords <slords@mail.com> 1.3.0-4
- Disable scan for suspicious files until fixed [SME: 3713]

* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-3
- Change /var/lib to /var to be consistent with previous versions

* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-2
- Add a few more services for sme tests

* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-1
- Fix installer to not install in local
- Set parameters for sme specific tests

* Sun Feb 11 2007 unSpawn - pre-1.3.0
- Sync spec with fixes, installer and CVS

* Sun Nov 12 2006 unSpawn - 1.2.9
- Re-spec, new installer

* Fri Sep 29 2006 unSpawn - 1.2.9
- Updated for release 1.2.9

* Tue Aug 10 2004 Michael Boelen - 1.1.5
- Added update script
- Extended description

* Sun Aug 08 2004 Greg Houlette - 1.1.5
- Changed the install procedure eliminating the specification of
  destination filenames (only needed if you are renaming during install)
- Changed the permissions for documentation files (root only overkill)
- Added the installation of the rkhunter Man Page
- Added the installation of the programs_{bad, good}.dat database files
- Added the installation of the LICENSE documentation file
- Added the chmod for root only to the /var/rkhunter/db directory

* Sun May 23 2004 Craig Orsinger (cjo) <cjorsinger@earthlink.net>
- version 1.1.0-1.cjo
- changed installation in accordance with new rootkit installation
  procedure
- changed installation root to conform to LSB. Use standard macros.
- added recursive remove of old build root as prep for install phase

* Wed Apr 28 2004 Doncho N. Gunchev - 1.0.9-0.mr700
- dropped Requires: perl - rkhunter works without it 
- dropped the bash alignpatch (check the source or contact me)
- various file mode fixes (.../tmp/, *.db)
- optimized the %%files section - any new files in the
  current dirs will be fine - just %%{__install} them.

* Mon Apr 26 2004 Michael Boelen - 1.0.8-0
- Fixed missing md5blacklist.dat

* Mon Apr 19 2004 Doncho N. Gunchev - 1.0.6-1.mr700
- added missing /usr/local/rkhunter/db/md5blacklist.dat
- patched to align results in --cronjob, I think rpm based
  distros have symlink /bin/sh -> /bin/bash
- added --with/--without alignpatch for conditional builds
  (in case previous patch breaks something)

* Sat Apr 03 2004 Michael Boelen / Joe Klemmer - 1.0.6-0
- Update to 1.0.6

* Mon Mar 29 2004 Doncho N. Gunchev - 1.0.0-0
- initial .spec file


1	slords	1.12	# $Id$
2
3	slords	1.2	# No debuginfo:
4			%define debug_package %{nil}
5
6			# If you want to debug, uncomment the next line and remove
7			# the duplicate percent sign (due to macro expansion)
8			#%%dump
9
10			%define name rkhunter
11	slords	1.9	%define ver 1.3.2
12	slords	1.11	%define rel 2
13	slords	1.2	%define epoch 0
14
15			# Don't change this define or also:
16			# 1. installer.sh --layout custom /temporary/dir/usr --striproot /temporary/dir --install
17			# 2. rewrite the files section below.
18			%define _prefix /usr
19
20	slords	1.1	# We can't let RPM do the dependencies automatic because it'll then pick up
21			# a correct but undesirable perl dependency, which rkhunter does not require
22			# in order to function properly.
23			AutoReqProv: no
24
25	slords	1.2	Name: %{name}
26			Summary: %{name} scans for rootkits, backdoors and local exploits
27			Version: %{ver}
28			Release: %{rel}%{dist}
29			Epoch: %{epoch}
30			License: GPL
31			Group: Applications/System
32			Source0: %{name}-%{version}.tar.gz
33			Patch0: rkhunter-installer.patch
34	bytegw	1.5	Patch1: rkhunter-nolib.patch
35	slords	1.2	BuildArch: noarch
36			Requires: filesystem, bash, grep, findutils, net-tools, coreutils, e2fsprogs, modutils, procps, binutils, wget, perl
37			Provides: %{name}
38			URL: http://rkhunter.sourceforge.net/
39			BuildRoot: %{_tmppath}/%{name}-%{version}
40	slords	1.1
41			%description
42	slords	1.2	Rootkit Hunter is a scanning tool to ensure you are about 99.9%%
43			clean of nasty tools. It scans for rootkits, backdoors and local
44	slords	1.1	exploits by running tests like:
45	slords	1.2	- File hash check
46	slords	1.1	- Look for default files used by rootkits
47			- Wrong file permissions for binaries
48			- Look for suspected strings in LKM and KLD modules
49			- Look for hidden files
50			- Optional scan within plaintext and binary files
51			- Software version checks
52			- Application tests
53
54			Rootkit Hunter is released as a GPL licensed project and free for everyone to use.
55
56
57			%prep
58	slords	1.2	%setup -q
59			%patch0 -p1
60	bytegw	1.5	%patch1 -p1
61	slords	1.1
62			%build
63
64			%install
65	slords	1.9	MANPATH=""
66			export MANPATH
67
68	slords	1.2	sh ./installer.sh --layout RPM --install
69	slords	1.1
70	slords	1.3	sed -i 's_#ALLOWPROCLISTEN=/sbin/dhclient_ALLOWPROCLISTEN=/sbin/dhclient_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
71	bytegw	1.7	sed -i 's_#ALLOWPROCLISTEN=/usr/sbin/pppoe_ALLOWPROCLISTEN=/sbin/pppoe_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
72	slords	1.3	sed -i 's_#ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz_ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz_' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
73	bytegw	1.4	sed -i '/#ALLOWPROCLISTEN=\/usr\/bin\/dhcpcd/iALLOWPROCLISTEN=\/usr\/sbin\/dhcpd' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
74	slords	1.3	sed -i '/#ALLOWPROCDELFILE=\/usr\/sbin\/mysqld/aALLOWPROCDELFILE=\/usr\/sbin\/httpd' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
75	slords	1.8	sed -i '/ALLOWPROCDELFILE=\/usr\/sbin\/httpd/aALLOWPROCDELFILE=\/usr\/sbin\/asterisk' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
76	slords	1.11	sed -i '/ALLOWPROCDELFILE=\/usr\/sbin\/httpd/aALLOWPROCDELFILE=\/usr\/bin\/freshclam' ${RPM_BUILD_ROOT}%{_sysconfdir}/%{name}.conf
77	slords	1.1
78	slords	1.2	# Make a cron.daily file to mail us the reports
79	slords	1.1	%{__mkdir} -p "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily"
80			%{__cat} > "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily/01-rkhunter" <<EOF
81			#!/bin/sh
82	slords	1.6	%{_bindir}/rkhunter --cronjob --update --disable apps,suspscan,system_commands --rwo
83	slords	1.2	exit 0
84	slords	1.1	EOF
85			%{__chmod} a+rwx,g-w,o-rwx ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/01-rkhunter
86
87
88	slords	1.2	%post
89			# Only do this on an initial install
90			if [ $1 -eq 1 ]; then
91	bytegw	1.5	%{__cp} -p /etc/passwd /var/rkhunter/tmp >/dev/null 2>&1 \|\| :
92			%{__cp} -p /etc/group /var/rkhunter/tmp >/dev/null 2>&1 \|\| :
93	slords	1.2	fi
94	slords	1.1
95
96	slords	1.2	%preun
97			# Only do this when removing the RPM
98			if [ $1 -eq 0 ]; then
99			%{__rm} -f /var/log/rkhunter.log /var/log/rkhunter.log.old >/dev/null 2>&1
100	bytegw	1.5	%{__rm} -rf /var/rkhunter/* >/dev/null 2>&1
101	slords	1.2	fi
102	slords	1.1
103
104	slords	1.2	%clean
105			if [ "$RPM_BUILD_ROOT" = "/" ]; then
106			echo Invalid Build root \'"$RPM_BUILD_ROOT"\'
107			exit 1
108			else
109			rm -rf $RPM_BUILD_ROOT
110			fi
111	slords	1.1
112
113	slords	1.2	%define docdir %{_prefix}/share/doc/%{name}-%{version}
114			%files
115			%defattr(-,root,root)
116			%attr(640,root,root) %config(noreplace) %{_sysconfdir}/%{name}.conf
117			%attr(750,root,root) %{_prefix}/bin/%{name}
118			%attr(750,root,root) %dir %{_libdir}/%{name}
119			%attr(750,root,root) %dir %{_libdir}/%{name}/scripts
120			%attr(750,root,root) %{_libdir}/%{name}/scripts/*.pl
121			%attr(750,root,root) %{_libdir}/%{name}/scripts/*.sh
122			%attr(644,root,root) %doc %{_prefix}/share/man/man8/%{name}.8.gz
123			%attr(755,root,root) %dir %{docdir}
124			%attr(644,root,root) %doc %{docdir}/*
125	bytegw	1.5	%attr(750,root,root) %dir %{_var}/%{name}
126			%attr(750,root,root) %dir %{_var}/%{name}/db
127			%attr(640,root,root) %{_var}/%{name}/db/*.dat
128			%attr(750,root,root) %dir %{_var}/%{name}/db/i18n
129			%attr(640,root,root) %{_var}/%{name}/db/i18n/*
130			%attr(750,root,root) %dir %{_var}/%{name}/tmp
131	slords	1.2	%{_sysconfdir}/cron.daily/01-rkhunter
132	slords	1.1
133
134	slords	1.2	%changelog
135	slords	1.11	* Sun Mar 2 2008 Shad L. Lords <slords@mail.com> 1.3.2-2
136			- Allow freshclam to use deleted files. [SME: 3876]
137
138	slords	1.9	* Fri Feb 29 2008 Shad L. Lords <slords@mail.com> 1.3.2-1
139	bytegw	1.10	- Update to rkhunter v1.3.2 [SME: 4000]
140	slords	1.9
141	slords	1.8	* Wed Jan 30 2008 Shad L. Lords <slords@mail.com> 1.3.0-6
142			- Fix asterisk to allow deleted files. [SME: 3795]
143
144	bytegw	1.7	* Tue Jan 29 2008 Shad L. Lords <slords@mail.com> 1.3.0-5
145			- Correct pppoe binary location.
146			- Add asterisk binary to allow deleted files. [SME: 3795]
147
148	slords	1.6	* Mon Jan 7 2008 Shad L. Lords <slords@mail.com> 1.3.0-4
149			- Disable scan for suspicious files until fixed [SME: 3713]
150
151	bytegw	1.5	* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-3
152			- Change /var/lib to /var to be consistent with previous versions
153
154	bytegw	1.4	* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-2
155			- Add a few more services for sme tests
156
157	slords	1.2	* Mon Dec 17 2007 Shad L. Lords <slords@mail.com> 1.3.0-1
158			- Fix installer to not install in local
159	slords	1.3	- Set parameters for sme specific tests
160	slords	1.1
161	slords	1.2	* Sun Feb 11 2007 unSpawn - pre-1.3.0
162			- Sync spec with fixes, installer and CVS
163	slords	1.1
164	slords	1.2	* Sun Nov 12 2006 unSpawn - 1.2.9
165			- Re-spec, new installer
166	slords	1.1
167	slords	1.2	* Fri Sep 29 2006 unSpawn - 1.2.9
168			- Updated for release 1.2.9
169	slords	1.1
170			* Tue Aug 10 2004 Michael Boelen - 1.1.5
171			- Added update script
172			- Extended description
173
174			* Sun Aug 08 2004 Greg Houlette - 1.1.5
175			- Changed the install procedure eliminating the specification of
176			destination filenames (only needed if you are renaming during install)
177			- Changed the permissions for documentation files (root only overkill)
178			- Added the installation of the rkhunter Man Page
179			- Added the installation of the programs_{bad, good}.dat database files
180			- Added the installation of the LICENSE documentation file
181			- Added the chmod for root only to the /var/rkhunter/db directory
182
183			* Sun May 23 2004 Craig Orsinger (cjo) <cjorsinger@earthlink.net>
184			- version 1.1.0-1.cjo
185			- changed installation in accordance with new rootkit installation
186			procedure
187			- changed installation root to conform to LSB. Use standard macros.
188			- added recursive remove of old build root as prep for install phase
189
190			* Wed Apr 28 2004 Doncho N. Gunchev - 1.0.9-0.mr700
191			- dropped Requires: perl - rkhunter works without it
192			- dropped the bash alignpatch (check the source or contact me)
193			- various file mode fixes (.../tmp/, *.db)
194			- optimized the %%files section - any new files in the
195			current dirs will be fine - just %%{__install} them.
196
197			* Mon Apr 26 2004 Michael Boelen - 1.0.8-0
198			- Fixed missing md5blacklist.dat
199
200			* Mon Apr 19 2004 Doncho N. Gunchev - 1.0.6-1.mr700
201			- added missing /usr/local/rkhunter/db/md5blacklist.dat
202			- patched to align results in --cronjob, I think rpm based
203			distros have symlink /bin/sh -> /bin/bash
204			- added --with/--without alignpatch for conditional builds
205			(in case previous patch breaks something)
206
207			* Sat Apr 03 2004 Michael Boelen / Joe Klemmer - 1.0.6-0
208			- Update to 1.0.6
209
210			* Mon Mar 29 2004 Doncho N. Gunchev - 1.0.0-0
211			- initial .spec file
212
213	slords	1.2