|
# $Id: rkhunter.spec,v 1.14 2009/04/07 07:30:35 snetram Exp $ |
|
|
|
|
1 |
Name: rkhunter |
Name: rkhunter |
2 |
Version: 1.3.4 |
Version: 1.3.8 |
3 |
Release: 8%{?dist} |
Release: 3%{?dist} |
4 |
Summary: A host-based tool to scan for rootkits, backdoors and local exploits |
Summary: A host-based tool to scan for rootkits, backdoors and local exploits |
5 |
|
|
6 |
Group: Applications/System |
Group: Applications/System |
7 |
License: GPLv2+ |
License: GPLv2+ |
8 |
URL: http://rkhunter.sourceforge.net/ |
URL: http://rkhunter.sourceforge.net/ |
9 |
Source0: http://downloads.sourceforge.net/rkhunter/rkhunter-%{version}.tar.gz |
Source0: http://downloads.sourceforge.net/rkhunter/rkhunter-%{version}.tar.gz |
|
Source1: http://downloads.sourceforge.net/rkhunter/rkhunter-%{version}.tar.gz.sha1.txt |
|
10 |
Source2: 01-rkhunter |
Source2: 01-rkhunter |
11 |
Source3: rkhunter.sysconfig |
Source3: rkhunter.sysconfig |
12 |
Patch0: rkhunter-1.3.4-smeconfig.patch |
Patch0: rkhunter-1.3.8-smeconfig.patch |
13 |
BuildArch: noarch |
BuildArch: noarch |
14 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) |
15 |
|
|
26 |
|
|
27 |
%setup -q |
%setup -q |
28 |
|
|
29 |
%patch0 -p1 |
#%patch0 -p1 |
30 |
|
|
31 |
%{__cat} <<'EOF' >%{name}.logrotate |
%{__cat} <<'EOF' >%{name}.logrotate |
32 |
%{_localstatedir}/log/%{name}/%{name}.log { |
%{_localstatedir}/log/%{name}/%{name}.log { |
48 |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version} |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version} |
49 |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_mandir}/man8 |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_mandir}/man8 |
50 |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db |
|
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/run/%{name} |
|
51 |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/log/%{name} |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/log/%{name} |
52 |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n |
%{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n |
53 |
|
|
54 |
%{__install} -m755 -p files/%{name} ${RPM_BUILD_ROOT}%{_bindir}/ |
%{__install} -m755 -p files/%{name} ${RPM_BUILD_ROOT}%{_bindir}/ |
55 |
|
|
56 |
%{__install} -m644 -p files/backdoorports.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
%{__install} -m644 -p files/backdoorports.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
|
%{__install} -m644 -p files/defaulthashes.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
|
|
%{__install} -m644 -p files/md5blacklist.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
|
57 |
%{__install} -m644 -p files/mirrors.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
%{__install} -m644 -p files/mirrors.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
|
%{__install} -m644 -p files/os.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
|
58 |
%{__install} -m644 -p files/programs_bad.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
%{__install} -m644 -p files/programs_bad.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
|
%{__install} -m644 -p files/programs_good.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/ |
|
59 |
%{__install} -m644 -p files/i18n/cn ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/ |
%{__install} -m644 -p files/i18n/cn ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/ |
60 |
%{__install} -m644 -p files/i18n/en ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/ |
%{__install} -m644 -p files/i18n/en ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/ |
61 |
|
|
62 |
%{__install} -m644 -p files/CHANGELOG ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
%{__install} -m644 -p files/CHANGELOG ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
63 |
%{__install} -m644 -p files/LICENSE ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
%{__install} -m644 -p files/LICENSE ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
64 |
%{__install} -m644 -p files/README ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
%{__install} -m644 -p files/README ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
|
%{__install} -m644 -p files/WISHLIST ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/ |
|
65 |
%{__install} -m755 -p files/check_modules.pl ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts/ |
%{__install} -m755 -p files/check_modules.pl ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts/ |
|
%{__install} -m755 -p files/check_port.pl ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts/ |
|
|
%{__install} -m755 -p files/check_update.sh ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts/ |
|
66 |
%{__install} -m644 -p files/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/ |
%{__install} -m644 -p files/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/ |
67 |
# Don't ship these unless we want to Require the perl modules |
# Don't ship these unless we want to Require the perl modules |
68 |
#%{__install} -m750 -p files/filehashmd5.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/ |
#%{__install} -m750 -p files/filehashmd5.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/ |
69 |
#%{__install} -m750 -p files/filehashsha1.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/ |
#%{__install} -m750 -p files/filehashsha1.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/ |
|
%{__install} -m755 -p files/showfiles.pl ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts/ |
|
70 |
%{__install} -m755 -p %{SOURCE2} ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/%{name} |
%{__install} -m755 -p %{SOURCE2} ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/%{name} |
71 |
%{__install} -m644 -p %{name}.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name} |
%{__install} -m644 -p %{name}.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name} |
72 |
%{__install} -m640 -p files/%{name}.conf ${RPM_BUILD_ROOT}%{_sysconfdir}/ |
%{__install} -m640 -p files/%{name}.conf ${RPM_BUILD_ROOT}%{_sysconfdir}/ |
75 |
%clean |
%clean |
76 |
%{__rm} -rf $RPM_BUILD_ROOT |
%{__rm} -rf $RPM_BUILD_ROOT |
77 |
|
|
|
%post |
|
|
# Only do this on an initial install |
|
|
if [ $1 -eq 1 ]; then |
|
|
%{__cp} -p /etc/passwd /var/lib/rkhunter/ >/dev/null 2>&1 || : |
|
|
%{__cp} -p /etc/group /var/lib/rkhunter/ >/dev/null 2>&1 || : |
|
|
fi |
|
|
|
|
78 |
%files |
%files |
79 |
%defattr(-,root,root,-) |
%defattr(-,root,root,-) |
80 |
%doc %{_docdir}/%{name}-%{version}/* |
%doc %{_docdir}/%{name}-%{version}/* |
86 |
%dir %{_var}/lib/%{name} |
%dir %{_var}/lib/%{name} |
87 |
%{_var}/lib/%{name}/db |
%{_var}/lib/%{name}/db |
88 |
%{_var}/lib/%{name}/db/i18n |
%{_var}/lib/%{name}/db/i18n |
|
%dir %{_var}/run/%{name} |
|
89 |
%dir %{_var}/log/%{name} |
%dir %{_var}/log/%{name} |
90 |
%config(noreplace) %{_sysconfdir}/%{name}.conf |
%config(noreplace) %{_sysconfdir}/%{name}.conf |
91 |
%config(noreplace) %{_sysconfdir}/sysconfig/%{name} |
%config(noreplace) %{_sysconfdir}/sysconfig/%{name} |
93 |
%{_mandir}/man8/* |
%{_mandir}/man8/* |
94 |
|
|
95 |
%changelog |
%changelog |
96 |
* Thu May 14 2009 Jonathan Martens <smeserver-contribs@snetram.nl> 1.3.4-8 |
* Wed Apr 27 2011 Shad L. Lords <slords@mail.com> 1.3.8-3.sme |
97 |
- Bump version number in order to move package to SME Contribs [SME: 5172] |
- Set parameters for sme specific tests |
98 |
|
|
99 |
* Tue Apr 7 2009 Jonathan Martens <smeserver-contribs@snetram.nl> 1.3.4-7 |
* Wed Dec 08 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-3 |
100 |
- Remove quotes in DISABLE_TESTS setting [SME: 5149] |
- Adjust ssh config to the right default. |
101 |
|
|
102 |
* Thu Apr 2 2009 Shad L. Lords <slords@mail.com> 1.3.4-6 |
* Tue Dec 07 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-2 |
103 |
- Update to epel version of rkhunter |
- Adjust config some - bug #596775 |
104 |
- Set parameters for sme specific tests |
|
105 |
|
* Fri Nov 26 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-1 |
106 |
|
- Update to 1.3.8 |
107 |
|
|
108 |
|
* Wed Nov 24 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-9 |
109 |
|
- Drop /var/run as it's not used anymore - bug #656684 |
110 |
|
|
111 |
|
* Wed Oct 06 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-8 |
112 |
|
- Add patch to make rkhunter use unhide if installed - bug #636396 |
113 |
|
|
114 |
|
* Sat Jun 05 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-7 |
115 |
|
- Add ipsec.hmac exclude - bug #560594 |
116 |
|
|
117 |
|
* Fri May 28 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-6 |
118 |
|
- Add exclude for md-device-map - bug #596731 |
119 |
|
- Supress ssh version check - bug #596775 |
120 |
|
|
121 |
|
* Sat Mar 06 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-5 |
122 |
|
- Change config to not specify XINETD_PATH - bug #560562 |
123 |
|
|
124 |
|
* Sat Jan 23 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-4 |
125 |
|
- Change email to just root instead of root@localhost - bug #553179 |
126 |
|
- Add .k5login.5.gz to files whitelist - bug #553134 |
127 |
|
|
128 |
|
* Tue Jan 05 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-3 |
129 |
|
- Add some more ssh hmac files to whitelist - bug #552621 |
130 |
|
- Re-add /dev/.mdadm.map to whitelisted files - bug #539405 |
131 |
|
|
132 |
|
* Tue Dec 01 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.6-2 |
133 |
|
- Disable apps check by default - bug #543065 |
134 |
|
|
135 |
|
* Sun Nov 29 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.6-1 |
136 |
|
- Update to 1.3.6 |
137 |
|
|
138 |
|
* Thu Nov 26 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-9 |
139 |
|
- Add exception for /dev/.mdadm file - bug #539405 |
140 |
|
|
141 |
|
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-8 |
142 |
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild |
143 |
|
|
144 |
|
* Fri Jul 03 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-7 |
145 |
|
- Add exception for software raid udev file - bug #509253 |
146 |
|
|
147 |
|
* Sat Jun 06 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-6 |
148 |
|
- Add /usr/bin/.fipscheck.hmac to ok files - bug #494096 |
149 |
|
|
150 |
* Sun Mar 08 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-5 |
* Sun Mar 08 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-5 |
151 |
- Fix typo in patch file |
- Fix typo in patch file |