/[smeserver]/rpms/rkhunter/sme8/rkhunter.spec
ViewVC logotype

Annotation of /rpms/rkhunter/sme8/rkhunter.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.16 - (hide annotations) (download)
Wed Apr 27 15:19:44 2011 UTC (13 years, 7 months ago) by slords
Branch: MAIN
Changes since 1.15: +51 -30 lines
Import of rkhunter-1.3.8-3.el5

1 slords 1.13 Name: rkhunter
2 slords 1.16 Version: 1.3.8
3     Release: 3%{?dist}
4 slords 1.13 Summary: A host-based tool to scan for rootkits, backdoors and local exploits
5    
6     Group: Applications/System
7     License: GPLv2+
8     URL: http://rkhunter.sourceforge.net/
9     Source0: http://downloads.sourceforge.net/rkhunter/rkhunter-%{version}.tar.gz
10     Source2: 01-rkhunter
11     Source3: rkhunter.sysconfig
12 slords 1.16 Patch0: rkhunter-1.3.8-fedoraconfig.patch
13 slords 1.13 BuildArch: noarch
14     BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
15    
16     Requires: coreutils, binutils, modutils, findutils, grep, mktemp
17     Requires: e2fsprogs, procps, lsof, prelink, iproute, net-tools, wget
18     Requires: perl, perl(strict), perl(IO::Socket), mailx, logrotate
19 slords 1.1
20     %description
21 slords 1.13 Rootkit Hunter (RKH) is an easy-to-use tool which checks
22     computers running UNIX (clones) for the presence of rootkits
23     and other unwanted tools.
24 slords 1.1
25 slords 1.13 %prep
26 slords 1.1
27 slords 1.13 %setup -q
28 slords 1.1
29 slords 1.2 %patch0 -p1
30 slords 1.13
31     %{__cat} <<'EOF' >%{name}.logrotate
32     %{_localstatedir}/log/%{name}/%{name}.log {
33     weekly
34     notifempty
35     create 640 root root
36     }
37     EOF
38 slords 1.1
39     %build
40 slords 1.13 # Nothing to be built
41 slords 1.1
42     %install
43 slords 1.13 %{__rm} -rf $RPM_BUILD_ROOT
44 slords 1.9
45 slords 1.13 %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_bindir}
46     %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_sysconfdir}/{cron.daily,sysconfig,logrotate.d}
47     %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts
48     %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}
49     %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_mandir}/man8
50     %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db
51     %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/log/%{name}
52     %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n
53    
54     %{__install} -m755 -p files/%{name} ${RPM_BUILD_ROOT}%{_bindir}/
55    
56     %{__install} -m644 -p files/backdoorports.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/
57     %{__install} -m644 -p files/mirrors.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/
58     %{__install} -m644 -p files/programs_bad.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/
59     %{__install} -m644 -p files/i18n/cn ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/
60     %{__install} -m644 -p files/i18n/en ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/
61    
62     %{__install} -m644 -p files/CHANGELOG ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/
63     %{__install} -m644 -p files/LICENSE ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/
64     %{__install} -m644 -p files/README ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/
65     %{__install} -m755 -p files/check_modules.pl ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts/
66     %{__install} -m644 -p files/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/
67     # Don't ship these unless we want to Require the perl modules
68     #%{__install} -m750 -p files/filehashmd5.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/
69     #%{__install} -m750 -p files/filehashsha1.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/
70     %{__install} -m755 -p %{SOURCE2} ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/%{name}
71     %{__install} -m644 -p %{name}.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name}
72     %{__install} -m640 -p files/%{name}.conf ${RPM_BUILD_ROOT}%{_sysconfdir}/
73     %{__install} -m640 -p %{SOURCE3} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/%{name}
74 slords 1.1
75 slords 1.13 %clean
76     %{__rm} -rf $RPM_BUILD_ROOT
77 slords 1.1
78 slords 1.2 %files
79 slords 1.13 %defattr(-,root,root,-)
80     %doc %{_docdir}/%{name}-%{version}/*
81     %{_bindir}/%{name}
82     %dir %{_datadir}/%{name}
83     %{_datadir}/%{name}/scripts
84     %{_sysconfdir}/cron.daily/%{name}
85     %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
86     %dir %{_var}/lib/%{name}
87     %{_var}/lib/%{name}/db
88     %{_var}/lib/%{name}/db/i18n
89     %dir %{_var}/log/%{name}
90     %config(noreplace) %{_sysconfdir}/%{name}.conf
91     %config(noreplace) %{_sysconfdir}/sysconfig/%{name}
92     %dir %{_docdir}/%{name}-%{version}
93     %{_mandir}/man8/*
94 slords 1.1
95 slords 1.2 %changelog
96 slords 1.16 * Wed Dec 08 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-3
97     - Adjust ssh config to the right default.
98    
99     * Tue Dec 07 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-2
100     - Adjust config some - bug #596775
101    
102     * Fri Nov 26 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-1
103     - Update to 1.3.8
104    
105     * Wed Nov 24 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-9
106     - Drop /var/run as it's not used anymore - bug #656684
107    
108     * Wed Oct 06 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-8
109     - Add patch to make rkhunter use unhide if installed - bug #636396
110    
111     * Sat Jun 05 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-7
112     - Add ipsec.hmac exclude - bug #560594
113    
114     * Fri May 28 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-6
115     - Add exclude for md-device-map - bug #596731
116     - Supress ssh version check - bug #596775
117    
118     * Sat Mar 06 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-5
119     - Change config to not specify XINETD_PATH - bug #560562
120    
121     * Sat Jan 23 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-4
122     - Change email to just root instead of root@localhost - bug #553179
123     - Add .k5login.5.gz to files whitelist - bug #553134
124    
125     * Tue Jan 05 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-3
126     - Add some more ssh hmac files to whitelist - bug #552621
127     - Re-add /dev/.mdadm.map to whitelisted files - bug #539405
128    
129     * Tue Dec 01 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.6-2
130     - Disable apps check by default - bug #543065
131    
132     * Sun Nov 29 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.6-1
133     - Update to 1.3.6
134    
135     * Thu Nov 26 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-9
136     - Add exception for /dev/.mdadm file - bug #539405
137    
138     * Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-8
139     - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
140 snetram 1.15
141 slords 1.16 * Fri Jul 03 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-7
142     - Add exception for software raid udev file - bug #509253
143 snetram 1.14
144 slords 1.16 * Sat Jun 06 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-6
145     - Add /usr/bin/.fipscheck.hmac to ok files - bug #494096
146 slords 1.1
147 slords 1.13 * Sun Mar 08 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-5
148     - Fix typo in patch file
149 slords 1.1
150 slords 1.13 * Wed Mar 04 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-4
151     - Rework spec file
152     - Add check for the new hmac ssh files
153    
154     * Thu Feb 26 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-3
155     - Update cron job to include hostname (thanks Manuel Wolfshant)
156    
157     * Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-2
158     - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
159    
160     * Fri Jan 02 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-1
161     - Update to 1.3.4
162     - Use libdir as tmp dir - bug #456340
163    
164     * Sat Dec 13 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-6
165     - Fix cron job sending as attachment - bug #472679
166     - Fix cron job trying to send with colors - bug #475916
167    
168     * Wed Sep 03 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-5
169     - Patch debug tmp file issue - bug #460628
170    
171     * Mon Jun 16 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-4
172     - Fix cron script to only mail on warn/error - bug #450703
173     - Fix conditional to account for fc10 rsyslog
174    
175     * Mon Apr 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-3
176     - Change cron to run after prelink - bug #438622
177    
178     * Wed Mar 26 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-2
179     - Move things to more standard locations for selinux - bug #438184
180     - Add exception for pulseaudio file - bug #438622
181    
182     * Thu Feb 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-1
183     - Update to 1.3.2
184     - Fix cron script
185    
186     * Thu Feb 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.0-2
187     - Use /etc/redhat-release for EPEL and /etc/fedora release for Fedora.
188     - Add conditionals to support EPEL
189     - Fix man page warning.
190    
191     * Sun Feb 03 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.0-1
192     - Revive package, clean up spec
193     - Update to 1.3.0
194    
195     * Sat Mar 18 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-3
196     - Made an RPM transparent change to move the sha1 canary check
197     file out of CVS and into the external lookaside cache (whose
198     filename changes with every new package release anyway...)
199    
200     * Fri Mar 17 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-2
201     - Fixed architectural dependency during package creation eliminating
202     use of _libdir configure macro (x86_64 /usr/lib64 mis-targeting)
203    
204     * Tue Mar 7 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-1
205     - New package version release
206     - reworked the .spec file to support optional dist tag
207     - Updated the application check default patchfile (chunk failure)
208     - Changed to SHA1 for optional message digest (canary check)
209     - Added a couple of suggested skip entries to rkhunter.conf
210    
211     * Mon Jun 11 2005 Greg Houlette <tamaster@pobox.com> - 1.2.7-1
212     - Added signature auto-updating to CRON scan (new script)
213     - Removed BOOTSCAN pending rewrite to full SysV Init scan in background
214     - Added the --append-log command line option
215     - Added Date Stamping to output
216     - Fixed bug in /etc/group missing report
217     - New package version release
218    
219     * Sun Jan 2 2005 Greg Houlette <tamaster@tekarmory.com> - 0:1.1.9-1
220     - New package version release
221     - Added the --run-application-check command line option
222     to listing in command help
223     - Replaced 'Here' Doc editing of rkhunter.conf file
224     with in-place Perl edit
225     - tweaked rpmbuild -bb Autoclean
226    
227     * Fri Oct 15 2004 Greg Houlette - 0:1.1.8-0.fdr.1 (revisited)
228     - Removed redundant buildrequires /bin/sh, coreutils and perl
229     - Revise postun scriptlet
230     - Added /usr/share/doc/rkhunter-1.1.8/ to files list
231    
232     * Mon Oct 11 2004 Greg Houlette - 0:1.1.8-0.fdr.1
233     - Changed Release Tag to 0.fdr.1 (testing) for QA
234     - Removed wget from dependencies
235     - Hid (temporarily) the --skip-application-check command
236     line option from being listed in help
237     - Fixed the spec files list, again!
238    
239     * Fri Oct 8 2004 Greg Houlette - 0:1.1.8-0.fdr.0.2.beta2
240     - Unified and disabled the md5 canary check in prep
241     (check is now optional) removing the sha1 cross-check
242     - Fixed the spec files list, adding the /var/rkhunter
243     directory and the /usr/bin/rkhunter executable
244     - Fixed missing dependencies (rkh uses runtime checks)
245     - Disabled "auto-clean" for rpmbuild -bb
246     - Changed Application version scan default to
247     disabled awaiting backport fix in upstream sources
248     - Fixed shared_man_search.patch, configuration files
249     verify and added postun(install) cleanup
250    
251     * Fri Oct 1 2004 Greg Houlette - 0:1.1.8-0.fdr.0.1.beta1
252     - More cosmetic patchwork
253     - Changed Release Tag to beta1 (pre-release) for QA submit
254    
255     * Tue Sep 28 2004 Greg Houlette - 0:1.1.8-0.fdr.1
256     - Removed hidden_search.patch (1.1.7) after it was
257     merged into upstream source by Michael Boelen
258     - Removed .spec file from md5 and sha1 file checks
259     (it must be modifiable by Fedora QA release build)
260     - Added BOOTSCAN description file to documentation
261     - Restructured dynamic file creation ('Here' Docs)
262     moving them to the "prep" stage so that *_ALL_*
263     files are available prior to the "build" stage
264     (for inspection purposes)
265     - Added a /etc/sysconfig/rkhunter parameters file
266    
267     * Sun Aug 29 2004 Greg Houlette - 0:1.1.7-0.fdr.1
268     - Cosmetic patchwork
269    
270     * Sat Aug 21 2004 Greg Houlette - 0:1.1.6-0.fdr.1
271     - Moderate reworking of .spec file for packaging standards
272     - Added md5 and sha1 file checks to prep procedure for source .rpm
273     - Included an optional rc.local replacement for scan on boot (with full logging)
274 slords 1.1
275     * Tue Aug 10 2004 Michael Boelen - 1.1.5
276     - Added update script
277     - Extended description
278    
279     * Sun Aug 08 2004 Greg Houlette - 1.1.5
280     - Changed the install procedure eliminating the specification of
281     destination filenames (only needed if you are renaming during install)
282     - Changed the permissions for documentation files (root only overkill)
283     - Added the installation of the rkhunter Man Page
284     - Added the installation of the programs_{bad, good}.dat database files
285     - Added the installation of the LICENSE documentation file
286     - Added the chmod for root only to the /var/rkhunter/db directory
287    
288     * Sun May 23 2004 Craig Orsinger (cjo) <cjorsinger@earthlink.net>
289     - version 1.1.0-1.cjo
290     - changed installation in accordance with new rootkit installation
291     procedure
292     - changed installation root to conform to LSB. Use standard macros.
293     - added recursive remove of old build root as prep for install phase
294    
295     * Wed Apr 28 2004 Doncho N. Gunchev - 1.0.9-0.mr700
296     - dropped Requires: perl - rkhunter works without it
297     - dropped the bash alignpatch (check the source or contact me)
298     - various file mode fixes (.../tmp/, *.db)
299     - optimized the %%files section - any new files in the
300     current dirs will be fine - just %%{__install} them.
301    
302     * Mon Apr 26 2004 Michael Boelen - 1.0.8-0
303     - Fixed missing md5blacklist.dat
304    
305     * Mon Apr 19 2004 Doncho N. Gunchev - 1.0.6-1.mr700
306     - added missing /usr/local/rkhunter/db/md5blacklist.dat
307     - patched to align results in --cronjob, I think rpm based
308     distros have symlink /bin/sh -> /bin/bash
309     - added --with/--without alignpatch for conditional builds
310     (in case previous patch breaks something)
311    
312     * Sat Apr 03 2004 Michael Boelen / Joe Klemmer - 1.0.6-0
313     - Update to 1.0.6
314    
315     * Mon Mar 29 2004 Doncho N. Gunchev - 1.0.0-0
316     - initial .spec file

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed