1 |
# We can't let RPM do the dependencies automatic because it'll then pick up |
Name: rkhunter |
2 |
# a correct but undesirable perl dependency, which rkhunter does not require |
Version: 1.3.8 |
3 |
# in order to function properly. |
Release: 3%{?dist} |
4 |
AutoReqProv: no |
Summary: A host-based tool to scan for rootkits, backdoors and local exploits |
5 |
|
|
|
Summary: Rootkit scans for rootkits, backdoors and local exploits. |
|
|
Name: rkhunter |
|
|
Version: 1.2.9 |
|
|
Release: 3%{?dist} |
|
|
Epoch: 0 |
|
|
License: GPL |
|
6 |
Group: Applications/System |
Group: Applications/System |
7 |
URL: http://rkhunter.sourceforge.net/ |
License: GPLv2+ |
8 |
Source0: %{name}-%{version}.tar.gz |
URL: http://rkhunter.sourceforge.net/ |
9 |
Patch0: rkhunter-sme7.patch |
Source0: http://downloads.sourceforge.net/rkhunter/rkhunter-%{version}.tar.gz |
10 |
BuildArch: noarch |
Source2: 01-rkhunter |
11 |
Requires: /bin/sh, /bin/ps, /bin/ls, /bin/cat, /bin/egrep, /usr/bin/strings |
Source3: rkhunter.sysconfig |
12 |
|
Patch0: rkhunter-1.3.8-smeconfig.patch |
13 |
|
BuildArch: noarch |
14 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
15 |
|
|
16 |
%description |
Requires: coreutils, binutils, modutils, findutils, grep, mktemp |
17 |
Rootkit scanner is scanning tool to ensure you for about 99.9%% you're |
Requires: e2fsprogs, procps, lsof, prelink, iproute, net-tools, wget |
18 |
clean of nasty tools. This tool scans for rootkits, backdoors and local |
Requires: perl, perl(strict), perl(IO::Socket), mailx, logrotate |
|
exploits by running tests like: |
|
|
- MD5 hash compare |
|
|
- Look for default files used by rootkits |
|
|
- Wrong file permissions for binaries |
|
|
- Look for suspected strings in LKM and KLD modules |
|
|
- Look for hidden files |
|
|
- Optional scan within plaintext and binary files |
|
|
- Software version checks |
|
|
- Application tests |
|
|
|
|
|
Rootkit Hunter is released as a GPL licensed project and free for everyone to use. |
|
19 |
|
|
20 |
|
%description |
21 |
|
Rootkit Hunter (RKH) is an easy-to-use tool which checks |
22 |
|
computers running UNIX (clones) for the presence of rootkits |
23 |
|
and other unwanted tools. |
24 |
|
|
25 |
%prep |
%prep |
|
%setup |
|
|
%patch -p1 |
|
|
|
|
|
%build |
|
|
#%%configure ... |
|
|
# We have nothing to configure... yet... |
|
|
|
|
|
%install |
|
|
# Well... This could be a bit smaller if the install |
|
|
# script was able to handle DSTDIR for example... |
|
26 |
|
|
27 |
# (cjo) remove old version of build root, if it exists |
%setup -q |
|
%{__rm} -rf ${RPM_BUILD_ROOT} |
|
28 |
|
|
29 |
%{__mkdir} -p ${RPM_BUILD_ROOT}%{_bindir} |
#%patch0 -p1 |
|
%{__mkdir} -p ${RPM_BUILD_ROOT}%{_sysconfdir} |
|
|
%{__mkdir} -p ${RPM_BUILD_ROOT}%{_libdir} |
|
|
%{__mkdir} -p ${RPM_BUILD_ROOT}%{_libdir}/rkhunter/scripts |
|
|
%{__mkdir} -p ${RPM_BUILD_ROOT}%{_docdir}/rkhunter-%{version} |
|
|
%{__mkdir} -p ${RPM_BUILD_ROOT}%{_mandir}/man8 |
|
|
%{__mkdir} -p ${RPM_BUILD_ROOT}%{_var}/rkhunter/{db,tmp} |
|
|
%{__chmod} ug+rwx,o-rwx ${RPM_BUILD_ROOT}%{_var}/rkhunter/tmp |
|
|
|
|
|
%{__install} -m750 -p files/rkhunter ${RPM_BUILD_ROOT}%{_bindir}/ |
|
|
|
|
|
%{__install} -m640 -p files/backdoorports.dat ${RPM_BUILD_ROOT}%{_var}/rkhunter/db/ |
|
|
%{__install} -m640 -p files/defaulthashes.dat ${RPM_BUILD_ROOT}%{_var}/rkhunter/db/ |
|
|
%{__install} -m640 -p files/mirrors.dat ${RPM_BUILD_ROOT}%{_var}/rkhunter/db/ |
|
|
%{__install} -m640 -p files/os.dat ${RPM_BUILD_ROOT}%{_var}/rkhunter/db/ |
|
|
%{__install} -m640 -p files/md5blacklist.dat ${RPM_BUILD_ROOT}%{_var}/rkhunter/db/ |
|
|
%{__install} -m640 -p files/programs_bad.dat ${RPM_BUILD_ROOT}%{_var}/rkhunter/db/ |
|
|
%{__install} -m640 -p files/programs_good.dat ${RPM_BUILD_ROOT}%{_var}/rkhunter/db/ |
|
|
|
|
|
%{__install} -m644 -p files/CHANGELOG ${RPM_BUILD_ROOT}%{_docdir}/rkhunter-%{version}/ |
|
|
%{__install} -m644 -p files/LICENSE ${RPM_BUILD_ROOT}%{_docdir}/rkhunter-%{version}/ |
|
|
%{__install} -m644 -p files/README ${RPM_BUILD_ROOT}%{_docdir}/rkhunter-%{version}/ |
|
|
%{__install} -m644 -p files/WISHLIST ${RPM_BUILD_ROOT}%{_docdir}/rkhunter-%{version}/ |
|
|
%{__install} -m644 -p files/development/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/ |
|
|
|
|
|
%{__install} -m750 -p files/check_modules.pl ${RPM_BUILD_ROOT}%{_libdir}/rkhunter/scripts/ |
|
|
%{__install} -m750 -p files/check_port.pl ${RPM_BUILD_ROOT}%{_libdir}/rkhunter/scripts/ |
|
|
%{__install} -m750 -p files/filehashmd5.pl ${RPM_BUILD_ROOT}%{_libdir}/rkhunter/scripts/ |
|
|
%{__install} -m750 -p files/filehashsha1.pl ${RPM_BUILD_ROOT}%{_libdir}/rkhunter/scripts/ |
|
|
%{__install} -m750 -p files/showfiles.pl ${RPM_BUILD_ROOT}%{_libdir}/rkhunter/scripts/ |
|
|
%{__install} -m750 -p files/check_update.sh ${RPM_BUILD_ROOT}%{_libdir}/rkhunter/scripts/ |
|
|
|
|
|
# (cjo) Put installation root in configuration file, then copy the rest |
|
|
# of the file from the original. |
|
|
cat >> ${RPM_BUILD_ROOT}%{_sysconfdir}/rkhunter.conf << EOF |
|
|
## Next three lines installed automatically by RPM. Do not change |
|
|
## unless you know what you're doing... |
|
|
INSTALLDIR=%{_prefix} |
|
|
DBDIR=%{_var}/rkhunter/db |
|
|
TMPDIR=%{_var}/rkhunter/tmp |
|
30 |
|
|
31 |
|
%{__cat} <<'EOF' >%{name}.logrotate |
32 |
|
%{_localstatedir}/log/%{name}/%{name}.log { |
33 |
|
weekly |
34 |
|
notifempty |
35 |
|
create 640 root root |
36 |
|
} |
37 |
EOF |
EOF |
38 |
|
|
39 |
cat files/rkhunter.conf >> ${RPM_BUILD_ROOT}%{_sysconfdir}/rkhunter.conf |
%build |
40 |
%{__chmod} 640 ${RPM_BUILD_ROOT}%{_sysconfdir}/rkhunter.conf |
# Nothing to be built |
41 |
|
|
42 |
# Only root should use rkhunter (at least for now) |
%install |
43 |
%{__chmod} o-rwx -R ${RPM_BUILD_ROOT}%{_libdir}/rkhunter |
%{__rm} -rf $RPM_BUILD_ROOT |
44 |
%{__chmod} o-rwx -R ${RPM_BUILD_ROOT}%{_var}/rkhunter/db |
|
45 |
|
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_bindir} |
46 |
# make a cron.daily file to mail us the reports |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_sysconfdir}/{cron.daily,sysconfig,logrotate.d} |
47 |
%{__mkdir} -p "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily" |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts |
48 |
%{__cat} > "${RPM_BUILD_ROOT}/%{_sysconfdir}/cron.daily/01-rkhunter" <<EOF |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version} |
49 |
#!/bin/sh |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_mandir}/man8 |
50 |
%{_bindir}/rkhunter --cronjob --skip-application-check --report-warnings-only --createlogfile /var/log/rkhunter.log |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db |
51 |
EOF |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/log/%{name} |
52 |
%{__chmod} a+rwx,g-w,o-rwx ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/01-rkhunter |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n |
53 |
|
|
54 |
|
%{__install} -m755 -p files/%{name} ${RPM_BUILD_ROOT}%{_bindir}/ |
55 |
|
|
56 |
|
%{__install} -m644 -p files/backdoorports.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
57 |
|
%{__install} -m644 -p files/mirrors.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
58 |
|
%{__install} -m644 -p files/programs_bad.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
59 |
|
%{__install} -m644 -p files/i18n/cn ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/ |
60 |
|
%{__install} -m644 -p files/i18n/en ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/ |
61 |
|
|
62 |
|
%{__install} -m644 -p files/CHANGELOG ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
63 |
|
%{__install} -m644 -p files/LICENSE ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
64 |
|
%{__install} -m644 -p files/README ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
65 |
|
%{__install} -m755 -p files/check_modules.pl ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts/ |
66 |
|
%{__install} -m644 -p files/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/ |
67 |
|
# Don't ship these unless we want to Require the perl modules |
68 |
|
#%{__install} -m750 -p files/filehashmd5.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/ |
69 |
|
#%{__install} -m750 -p files/filehashsha1.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/ |
70 |
|
%{__install} -m755 -p %{SOURCE2} ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/%{name} |
71 |
|
%{__install} -m644 -p %{name}.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name} |
72 |
|
%{__install} -m640 -p files/%{name}.conf ${RPM_BUILD_ROOT}%{_sysconfdir}/ |
73 |
|
%{__install} -m640 -p %{SOURCE3} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/%{name} |
74 |
|
|
75 |
%clean |
%clean |
76 |
%{__rm} -rf "$RPM_BUILD_ROOT" |
%{__rm} -rf $RPM_BUILD_ROOT |
77 |
|
|
78 |
%files |
%files |
79 |
%defattr(-,root,root,-) |
%defattr(-,root,root,-) |
80 |
%{_bindir}/rkhunter |
%doc %{_docdir}/%{name}-%{version}/* |
81 |
%dir %{_libdir}/rkhunter |
%{_bindir}/%{name} |
82 |
%doc %{_docdir}/rkhunter-%{version} |
%dir %{_datadir}/%{name} |
83 |
|
%{_datadir}/%{name}/scripts |
84 |
|
%{_sysconfdir}/cron.daily/%{name} |
85 |
|
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name} |
86 |
|
%dir %{_var}/lib/%{name} |
87 |
|
%{_var}/lib/%{name}/db |
88 |
|
%{_var}/lib/%{name}/db/i18n |
89 |
|
%dir %{_var}/log/%{name} |
90 |
|
%config(noreplace) %{_sysconfdir}/%{name}.conf |
91 |
|
%config(noreplace) %{_sysconfdir}/sysconfig/%{name} |
92 |
|
%dir %{_docdir}/%{name}-%{version} |
93 |
%{_mandir}/man8/* |
%{_mandir}/man8/* |
|
%{_libdir}/rkhunter/scripts |
|
|
%dir %{_var}/rkhunter/tmp |
|
|
%{_var}/rkhunter/db |
|
|
%config(noreplace) %verify(not mtime) %{_sysconfdir}/rkhunter.conf |
|
|
%{_sysconfdir}/cron.daily/01-rkhunter |
|
|
|
|
94 |
|
|
95 |
%changelog |
%changelog |
96 |
* Sun Apr 29 2007 Shad L. Lords <slords@mail.com> |
* Wed Apr 27 2011 Shad L. Lords <slords@mail.com> 1.3.8-3.sme |
97 |
- Clean up spec so package can be built by koji/plague |
- Set parameters for sme specific tests |
|
|
|
|
* Wed Mar 07 2007 Shad L. Lords <slords@mail.com> 1.2.9-3 |
|
|
- Add sigs for 7.1.2 and 7.1.3 |
|
|
|
|
|
* Sun Jan 28 2007 Shad L. Lords <slords@mail.com> 1.2.9-2 |
|
|
- Run updates as part of build process |
|
98 |
|
|
99 |
* Sun Jan 28 2007 Shad L. Lords <slords@mail.com> 1.2.9-1 |
* Wed Dec 08 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-3 |
100 |
- Update to latest 1.2.9 |
- Adjust ssh config to the right default. |
101 |
|
|
102 |
* Tue Dec 12 2006 Shad L. Lords <slords@mail.com> 1.2.8-4 |
* Tue Dec 07 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-2 |
103 |
- Add strings as a requirement. [SME: 2267] |
- Adjust config some - bug #596775 |
104 |
|
|
105 |
* Tue Dec 12 2006 Shad L. Lords <slords@mail.com> 1.2.8-3 |
* Fri Nov 26 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-1 |
106 |
- Added 7.1 |
- Update to 1.3.8 |
107 |
|
|
108 |
* Thu Dec 07 2006 Shad L. Lords <slords@mail.com> 1.2.8-2 |
* Wed Nov 24 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-9 |
109 |
- Update to new release naming. No functional changes. |
- Drop /var/run as it's not used anymore - bug #656684 |
110 |
- Make Packager generic |
|
111 |
|
* Wed Oct 06 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-8 |
112 |
* Sun Nov 12 2006 Shad L. Lords <slords@lordsfam.net> 1.2.8-1sme01 |
- Add patch to make rkhunter use unhide if installed - bug #636396 |
113 |
- Updated to latest 1.2.8 |
|
114 |
|
* Sat Jun 05 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-7 |
115 |
* Wed Feb 22 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.7-1sme07 |
- Add ipsec.hmac exclude - bug #560594 |
116 |
- Added 7.0pre[45] and 7.0prc3 [SME: 860 |
|
117 |
|
* Fri May 28 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-6 |
118 |
* Mon Feb 20 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.7-1sme06 |
- Add exclude for md-device-map - bug #596731 |
119 |
- Added 7.0pre3 [SME: 845] |
- Supress ssh version check - bug #596775 |
120 |
|
|
121 |
* Sat Feb 4 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.7-1sme05 |
* Sat Mar 06 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-5 |
122 |
- Added 7.0pre2 [SME: 653] |
- Change config to not specify XINETD_PATH - bug #560562 |
123 |
|
|
124 |
* Mon Jan 9 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.7-1sme04 |
* Sat Jan 23 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-4 |
125 |
- Remove explicit call to /bin/mail from rkhunter daily cron job. If |
- Change email to just root instead of root@localhost - bug #553179 |
126 |
there's no output, we don't want any mail either [SME: 421] |
- Add .k5login.5.gz to files whitelist - bug #553134 |
127 |
|
|
128 |
* Mon Jan 9 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.7-1sme03 |
* Tue Jan 05 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-3 |
129 |
- Fix up format of os.dat entries. rkhunter knows about |
- Add some more ssh hmac files to whitelist - bug #552621 |
130 |
/etc/e-smith-release [SME: 384] |
- Re-add /dev/.mdadm.map to whitelisted files - bug #539405 |
131 |
|
|
132 |
* Mon Jan 9 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.7-1sme02 |
* Tue Dec 01 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.6-2 |
133 |
- And add support for 7.0pre1 [SME: 384] |
- Disable apps check by default - bug #543065 |
134 |
|
|
135 |
* Mon Jan 9 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.7-1sme01 |
* Sun Nov 29 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.6-1 |
136 |
- Add support for 7.0beta9, rc[12] and final [SME: 384] |
- Update to 1.3.6 |
137 |
|
|
138 |
* Wed Nov 09 2005 Charlie Brady <charlieb@e-smith.com> 1.2.7-1es2 |
* Thu Nov 26 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-9 |
139 |
- Add support for CentOS 4.{1,2,3} |
- Add exception for /dev/.mdadm file - bug #539405 |
140 |
|
|
141 |
* Fri Jul 15 2005 Charlie Brady - 1.2.7-1es |
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-8 |
142 |
- Upgrade to 1.2.7 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild |
143 |
|
|
144 |
* Sun Jun 05 2005 Charlie Brady - 1.2.6-2es |
* Fri Jul 03 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-7 |
145 |
- Make cron job quieter |
- Add exception for software raid udev file - bug #509253 |
146 |
- Add SME6.1 and SME7 as recognised OSes. |
|
147 |
|
* Sat Jun 06 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-6 |
148 |
* Tue May 10 2005 Charlie Brady - 1.2.6 |
- Add /usr/bin/.fipscheck.hmac to ok files - bug #494096 |
149 |
- Update to 1.2.6 |
|
150 |
|
* Sun Mar 08 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-5 |
151 |
|
- Fix typo in patch file |
152 |
|
|
153 |
|
* Wed Mar 04 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-4 |
154 |
|
- Rework spec file |
155 |
|
- Add check for the new hmac ssh files |
156 |
|
|
157 |
|
* Thu Feb 26 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-3 |
158 |
|
- Update cron job to include hostname (thanks Manuel Wolfshant) |
159 |
|
|
160 |
|
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-2 |
161 |
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild |
162 |
|
|
163 |
|
* Fri Jan 02 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-1 |
164 |
|
- Update to 1.3.4 |
165 |
|
- Use libdir as tmp dir - bug #456340 |
166 |
|
|
167 |
|
* Sat Dec 13 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-6 |
168 |
|
- Fix cron job sending as attachment - bug #472679 |
169 |
|
- Fix cron job trying to send with colors - bug #475916 |
170 |
|
|
171 |
|
* Wed Sep 03 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-5 |
172 |
|
- Patch debug tmp file issue - bug #460628 |
173 |
|
|
174 |
|
* Mon Jun 16 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-4 |
175 |
|
- Fix cron script to only mail on warn/error - bug #450703 |
176 |
|
- Fix conditional to account for fc10 rsyslog |
177 |
|
|
178 |
|
* Mon Apr 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-3 |
179 |
|
- Change cron to run after prelink - bug #438622 |
180 |
|
|
181 |
|
* Wed Mar 26 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-2 |
182 |
|
- Move things to more standard locations for selinux - bug #438184 |
183 |
|
- Add exception for pulseaudio file - bug #438622 |
184 |
|
|
185 |
|
* Thu Feb 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-1 |
186 |
|
- Update to 1.3.2 |
187 |
|
- Fix cron script |
188 |
|
|
189 |
|
* Thu Feb 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.0-2 |
190 |
|
- Use /etc/redhat-release for EPEL and /etc/fedora release for Fedora. |
191 |
|
- Add conditionals to support EPEL |
192 |
|
- Fix man page warning. |
193 |
|
|
194 |
|
* Sun Feb 03 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.0-1 |
195 |
|
- Revive package, clean up spec |
196 |
|
- Update to 1.3.0 |
197 |
|
|
198 |
|
* Sat Mar 18 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-3 |
199 |
|
- Made an RPM transparent change to move the sha1 canary check |
200 |
|
file out of CVS and into the external lookaside cache (whose |
201 |
|
filename changes with every new package release anyway...) |
202 |
|
|
203 |
|
* Fri Mar 17 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-2 |
204 |
|
- Fixed architectural dependency during package creation eliminating |
205 |
|
use of _libdir configure macro (x86_64 /usr/lib64 mis-targeting) |
206 |
|
|
207 |
|
* Tue Mar 7 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-1 |
208 |
|
- New package version release |
209 |
|
- reworked the .spec file to support optional dist tag |
210 |
|
- Updated the application check default patchfile (chunk failure) |
211 |
|
- Changed to SHA1 for optional message digest (canary check) |
212 |
|
- Added a couple of suggested skip entries to rkhunter.conf |
213 |
|
|
214 |
|
* Mon Jun 11 2005 Greg Houlette <tamaster@pobox.com> - 1.2.7-1 |
215 |
|
- Added signature auto-updating to CRON scan (new script) |
216 |
|
- Removed BOOTSCAN pending rewrite to full SysV Init scan in background |
217 |
|
- Added the --append-log command line option |
218 |
|
- Added Date Stamping to output |
219 |
|
- Fixed bug in /etc/group missing report |
220 |
|
- New package version release |
221 |
|
|
222 |
|
* Sun Jan 2 2005 Greg Houlette <tamaster@tekarmory.com> - 0:1.1.9-1 |
223 |
|
- New package version release |
224 |
|
- Added the --run-application-check command line option |
225 |
|
to listing in command help |
226 |
|
- Replaced 'Here' Doc editing of rkhunter.conf file |
227 |
|
with in-place Perl edit |
228 |
|
- tweaked rpmbuild -bb Autoclean |
229 |
|
|
230 |
|
* Fri Oct 15 2004 Greg Houlette - 0:1.1.8-0.fdr.1 (revisited) |
231 |
|
- Removed redundant buildrequires /bin/sh, coreutils and perl |
232 |
|
- Revise postun scriptlet |
233 |
|
- Added /usr/share/doc/rkhunter-1.1.8/ to files list |
234 |
|
|
235 |
|
* Mon Oct 11 2004 Greg Houlette - 0:1.1.8-0.fdr.1 |
236 |
|
- Changed Release Tag to 0.fdr.1 (testing) for QA |
237 |
|
- Removed wget from dependencies |
238 |
|
- Hid (temporarily) the --skip-application-check command |
239 |
|
line option from being listed in help |
240 |
|
- Fixed the spec files list, again! |
241 |
|
|
242 |
|
* Fri Oct 8 2004 Greg Houlette - 0:1.1.8-0.fdr.0.2.beta2 |
243 |
|
- Unified and disabled the md5 canary check in prep |
244 |
|
(check is now optional) removing the sha1 cross-check |
245 |
|
- Fixed the spec files list, adding the /var/rkhunter |
246 |
|
directory and the /usr/bin/rkhunter executable |
247 |
|
- Fixed missing dependencies (rkh uses runtime checks) |
248 |
|
- Disabled "auto-clean" for rpmbuild -bb |
249 |
|
- Changed Application version scan default to |
250 |
|
disabled awaiting backport fix in upstream sources |
251 |
|
- Fixed shared_man_search.patch, configuration files |
252 |
|
verify and added postun(install) cleanup |
253 |
|
|
254 |
|
* Fri Oct 1 2004 Greg Houlette - 0:1.1.8-0.fdr.0.1.beta1 |
255 |
|
- More cosmetic patchwork |
256 |
|
- Changed Release Tag to beta1 (pre-release) for QA submit |
257 |
|
|
258 |
|
* Tue Sep 28 2004 Greg Houlette - 0:1.1.8-0.fdr.1 |
259 |
|
- Removed hidden_search.patch (1.1.7) after it was |
260 |
|
merged into upstream source by Michael Boelen |
261 |
|
- Removed .spec file from md5 and sha1 file checks |
262 |
|
(it must be modifiable by Fedora QA release build) |
263 |
|
- Added BOOTSCAN description file to documentation |
264 |
|
- Restructured dynamic file creation ('Here' Docs) |
265 |
|
moving them to the "prep" stage so that *_ALL_* |
266 |
|
files are available prior to the "build" stage |
267 |
|
(for inspection purposes) |
268 |
|
- Added a /etc/sysconfig/rkhunter parameters file |
269 |
|
|
270 |
|
* Sun Aug 29 2004 Greg Houlette - 0:1.1.7-0.fdr.1 |
271 |
|
- Cosmetic patchwork |
272 |
|
|
273 |
|
* Sat Aug 21 2004 Greg Houlette - 0:1.1.6-0.fdr.1 |
274 |
|
- Moderate reworking of .spec file for packaging standards |
275 |
|
- Added md5 and sha1 file checks to prep procedure for source .rpm |
276 |
|
- Included an optional rc.local replacement for scan on boot (with full logging) |
277 |
|
|
278 |
* Tue Aug 10 2004 Michael Boelen - 1.1.5 |
* Tue Aug 10 2004 Michael Boelen - 1.1.5 |
279 |
- Added update script |
- Added update script |
317 |
|
|
318 |
* Mon Mar 29 2004 Doncho N. Gunchev - 1.0.0-0 |
* Mon Mar 29 2004 Doncho N. Gunchev - 1.0.0-0 |
319 |
- initial .spec file |
- initial .spec file |
|
|
|