%define major 1 %define libname %mklibname audit %{major} %define develname %mklibname -d audit %define auparsemajor 0 %define auparselibname %mklibname auparse %{auparsemajor} %define auparsedevelname %mklibname -d auparse Summary: User-space tools for Linux 2.6 kernel auditing Name: audit Version: 2.4.4 Release: %mkrel 1 License: LGPLv2+ Group: System/Base URL: http://people.redhat.com/sgrubb/audit/ Source0: http://people.redhat.com/sgrubb/audit/audit-%{version}.tar.gz Source1: %{name}-tmpfiles.conf BuildRequires: gettext-devel BuildRequires: glibc-devel >= 2.6 BuildRequires: intltool BuildRequires: libcap-ng-devel BuildRequires: libtool BuildRequires: openldap-devel BuildRequires: prelude-devel >= 0.9.16 BuildRequires: python-devel BuildRequires: swig BuildRequires: tcp_wrappers-devel Requires(preun): rpm-helper Requires(post): rpm-helper Requires(postun):rpm-helper Requires: tcp_wrappers %description The audit package contains the user space utilities for storing and searching the audit records generate by the audit subsystem in the Linux 2.6 kernel. %package -n %{libname} Summary: Main libraries for %{name} Group: System/Libraries %description -n %{libname} This package contains the main libraries for %{name}. %package -n %{develname} Summary: Development files for %{name} Group: Development/C Requires: %{libname} = %{version}-%{release} Provides: libaudit-devel = %{version}-%{release} Provides: audit-devel = %{version}-%{release} Provides: audit-libs-devel = %{version}-%{release} %description -n %{develname} This package contains development files for %{name}. %package -n %{auparselibname} Summary: Main libraries for %{name} Group: System/Libraries %description -n %{auparselibname} This package contains the main auparse libraries for %{name}. %package -n %{auparsedevelname} Summary: Development files for %{name} Group: Development/C Requires: %{auparselibname} = %{version}-%{release} Provides: auparse-devel = %{version}-%{release} %description -n %{auparsedevelname} This package contains development files for %{name}. %package -n python-audit Summary: Python bindings for %{name} Group: Development/Python %description -n python-audit This package contains python bindings for %{name}. %package -n audispd-plugins Summary: Plugins for the audit event dispatcher Group: System/Base Requires: %{name} = %{version} Requires: openldap %description -n audispd-plugins The audispd-plugins package provides plugins for the real-time interface to the audit system, audispd. These plugins can do things like relay events to remote machines or analyze events for suspicious behavior. %prep %setup -q find -type d -name ".libs" | xargs rm -rf #fix build with new automake sed -i -e 's,AM_CONFIG_HEADER,AC_CONFIG_HEADERS,g' configure.* %build %serverbuild autoreconf -f -v --install %configure2_5x \ --disable-static \ --with-prelude \ --with-libwrap \ --enable-gssapi-krb5=no \ --with-libcap-ng=yes \ --enable-systemd %make %install %{__install} -d %{buildroot}%{_var}/log/audit %{__install} -d %{buildroot}%{_libdir}/audit %{__install} -d %{buildroot}%{_var}/spool/audit %{__install} -D -p -m 644 %{SOURCE1} %{buildroot}%{_tmpfilesdir}/%{name}.conf %makeinstall_std # uneeded files find %{buildroot} -name "*.la" -delete %post # Copy default rules into place on new installation if [ ! -e /etc/audit/audit.rules ] ; then cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules fi %_tmpfilescreate %{name} ## This hack is because the audid.service needs to be started before sysinit.target. So let's just enable and start ## the service manually after installation. This needs to be revisited after our %_post_service has been adjusted systemctl enable -q auditd.service systemctl start -q auditd.service # %_post_service auditd.service %postun systemctl disable -q auditd.service systemctl stop -q auditd.service %files %doc README contrib/capp.rules contrib/nispom.rules contrib/lspp.rules contrib/stig.rules init.d/auditd.cron %attr(640,root,root) %{_unitdir}/auditd.service %attr(750,root,root) %dir %{_libexecdir}/initscripts/legacy-actions/auditd %attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/resume %attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/rotate %attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/stop %attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/restart %attr(750,root,root) %{_libexecdir}/initscripts/legacy-actions/auditd/condrestart %attr(0750,root,root) %dir %{_sysconfdir}/audit %attr(0750,root,root) %dir %{_sysconfdir}/audisp %attr(0750,root,root) %dir %{_sysconfdir}/audisp/plugins.d %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audit/auditd.conf %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audit/rules.d/audit.rules %ghost %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audit/audit.rules %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/audispd.conf %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/plugins.d/af_unix.conf %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/plugins.d/syslog.conf %attr(0750,root,root) %{_sbindir}/audispd %attr(0750,root,root) %{_sbindir}/auditctl %attr(0750,root,root) %{_sbindir}/auditd %attr(0750,root,root) %{_sbindir}/autrace %attr(0755,root,root) %{_sbindir}/aureport %attr(0755,root,root) %{_sbindir}/ausearch %attr(0755,root,root) %{_sbindir}/augenrules %attr(0755,root,root) %{_bindir}/aulastlog %attr(0755,root,root) %{_bindir}/aulast %attr(0755,root,root) %{_bindir}/ausyscall %attr(7555,root,root) %{_bindir}/auvirt %attr(0644,root,root) %{_mandir}/man5/audispd.conf.5* %attr(0644,root,root) %{_mandir}/man5/auditd.conf.5* %attr(0644,root,root) %{_mandir}/man5/ausearch-expression.5* %attr(0644,root,root) %{_mandir}/man7/audit.rules.7* %attr(0644,root,root) %{_mandir}/man8/audispd.8* %attr(0644,root,root) %{_mandir}/man8/auditctl.8* %attr(0644,root,root) %{_mandir}/man8/auditd.8* %attr(0644,root,root) %{_mandir}/man8/aulast.8* %attr(0644,root,root) %{_mandir}/man8/aulastlog.8* %attr(6444,root,root) %{_mandir}/man8/auvirt.8.* %attr(6444,root,root) %{_mandir}/man8/augenrules.8* %attr(0644,root,root) %{_mandir}/man8/aureport.8* %attr(0644,root,root) %{_mandir}/man8/ausearch.8* %attr(0644,root,root) %{_mandir}/man8/ausyscall.8* %attr(0644,root,root) %{_mandir}/man8/autrace.8* %attr(0700,root,root) %dir %{_var}/log/audit %{_tmpfilesdir}/%{name}.conf %files -n %{libname} %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/libaudit.conf %{_libdir}/libaudit.so.%{major}* %attr(0644,root,root) %{_mandir}/man5/libaudit.conf.5* %files -n %{develname} %doc ChangeLog contrib/skeleton.c contrib/plugin %{_libdir}/libaudit.so %{_includedir}/libaudit.h %{_libdir}/pkgconfig/audit.pc %{_libdir}/pkgconfig/auparse.pc %{_mandir}/man3/audit_* %{_mandir}/man3/ausearch_* %{_mandir}/man3/get_auditfail_action.3* %{_mandir}/man3/set_aumessage_mode.3* %files -n %{auparselibname} %{_libdir}/libauparse.so.%{auparsemajor}* %files -n %{auparsedevelname} %doc ChangeLog contrib/skeleton.c contrib/plugin %{_libdir}/libauparse.so %{_includedir}/auparse-defs.h %{_includedir}/auparse.h %{_mandir}/man3/auparse_* %files -n python-audit %{py_platsitedir}/*.so %{py_platsitedir}/audit.p* %files -n audispd-plugins %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/audisp-prelude.conf %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/audisp-remote.conf %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/plugins.d/audispd-zos-remote.conf %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/plugins.d/au-prelude.conf %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/plugins.d/au-remote.conf %config(noreplace) %attr(0640,root,root) %{_sysconfdir}/audisp/zos-remote.conf %attr(0750,root,root) %{_sbindir}/audispd-zos-remote %attr(0750,root,root) %{_sbindir}/audisp-prelude %attr(0750,root,root) %{_sbindir}/audisp-remote %attr(0644,root,root) %{_mandir}/man5/audisp-prelude.conf.5* %attr(0644,root,root) %{_mandir}/man5/audisp-remote.conf.5* %attr(0644,root,root) %{_mandir}/man5/zos-remote.conf.5* %attr(0644,root,root) %{_mandir}/man8/audispd-zos-remote.8* %attr(0644,root,root) %{_mandir}/man8/audisp-prelude.8* %attr(0644,root,root) %{_mandir}/man8/audisp-remote.8* %attr(0750,root,root) %dir %{_var}/spool/audit %changelog * Fri Aug 14 2015 shlomif <shlomif> 2.4.4-1.mga5 + Revision: 864677 - Fix MGA#16584 by upgrading ver * Sat Feb 21 2015 ennael <ennael> 2.4.1-1.mga5 + Revision: 816206 - 2.4.1 * Wed Oct 15 2014 umeabot <umeabot> 2.4-4.mga5 + Revision: 739252 - Second Mageia 5 Mass Rebuild * Sat Sep 27 2014 tv <tv> 2.4-3.mga5 + Revision: 725970 - rebuild for missing pythoneggs deps * Tue Sep 16 2014 umeabot <umeabot> 2.4-2.mga5 + Revision: 678047 - Mageia 5 Mass Rebuild * Sun Aug 31 2014 luigiwalser <luigiwalser> 2.4-1.mga5 + Revision: 670098 - 2.4 - ghost audit rules file so the package will own it - add pkgconfig file to files list * Sat May 31 2014 pterjan <pterjan> 2.3.6-2.mga5 + Revision: 628108 - Rebuild for new Python * Mon Apr 28 2014 shlomif <shlomif> 2.3.6-1.mga5 + Revision: 618558 - New version 2.3.6 * Thu Apr 03 2014 spuhler <spuhler> 2.3.5-1.mga5 + Revision: 611443 - upgrade to ver. 2.3.5 * Wed Apr 02 2014 spuhler <spuhler> 2.3.4-6.mga5 + Revision: 611342 + rebuild (emptylog) * Wed Apr 02 2014 spuhler <spuhler> 2.3.4-5.mga5 + Revision: 611242 - removed the cp rules script * Wed Apr 02 2014 spuhler <spuhler> 2.3.4-4.mga5 + Revision: 611232 - added the system start auditd.service and stop command at post and preun lines * The macros don't work for this. * Mon Mar 17 2014 spuhler <spuhler> 2.3.4-3.mga5 + Revision: 604479 - added systemctl enable -q auditd.service * because the macro %%_post_service auditd doesn't work * service needs to be started before sysinit.target - similar in the %%preun section, systemctl disable -q auditd.service * Thu Mar 13 2014 spuhler <spuhler> 2.3.4-2.mga5 + Revision: 602753 - added audit-tmpfiles.conf - added in %%post %%_tmpfilescreate %%{name} - added in %%files section %%{_tmpfilesdir}/%%{name}.conf * Tue Mar 11 2014 spuhler <spuhler> 2.3.4-1.mga5 + Revision: 602496 - upgrade to ver. 2.3.4 * Tue Mar 11 2014 colin <colin> 2.3.2-3.mga5 + Revision: 602436 - Remove /-vs-/usr complexity now that usrmove is completed - Switch to systemd units (sysvinit script was broken due to LSB patch removal mga#12977) * Sat Oct 19 2013 umeabot <umeabot> 2.3.2-2.mga4 + Revision: 532572 - Mageia 4 Mass Rebuild * Wed Aug 21 2013 spuhler <spuhler> 2.3.2-1.mga4 + Revision: 468634 - removed un-needed mkdir m4 line in spec - upgrade to ver 2.3.2 - removed autdated patches * Wed Jun 26 2013 wally <wally> 2.2.3-2.mga4 + Revision: 447289 - drop old conflicts/obsoletes - drop unneeded requires - disable static build - clean .spec a bit * Sun Mar 31 2013 luigiwalser <luigiwalser> 2.2.3-1.mga3 + Revision: 406904 - 2.2.3 - fix clone syscall interpretation (patch1 from fedora) * Fri Jan 11 2013 umeabot <umeabot> 2.2.2-5.mga3 + Revision: 346586 - Mass Rebuild - https://wiki.mageia.org/en/Feature:Mageia3MassRebuild * Wed Jan 09 2013 tmb <tmb> 2.2.2-4.mga3 + Revision: 344010 - dont own _libdir/audit, it belongs to glibc * Sat Jan 05 2013 spuhler <spuhler> 2.2.2-3.mga3 + Revision: 339175 - bumped rel to get it rebuilt against new glibc * Fri Jan 04 2013 spuhler <spuhler> 2.2.2-2.mga3 + Revision: 338517 - bumped rel to make it rebuild - did some cleaning on spec file * Fri Jan 04 2013 spuhler <spuhler> 2.2.2-1.mga3 + Revision: 338501 - upgrade to 2.2.2 * Mon Dec 31 2012 wally <wally> 2.2.1-2.mga3 + Revision: 336503 - fix build with new automake 1.13 * Fri Sep 07 2012 spuhler <spuhler> 2.2.1-1.mga3 + Revision: 289145 - upgrade to 2.2.1 * Thu Nov 24 2011 pterjan <pterjan> 2.1.3-1.mga2 + Revision: 171751 - Update to 2.1.3 * Thu Sep 08 2011 tv <tv> 2.1.2-1.mga2 + Revision: 141589 - fix LSB end tag - new release * Wed Apr 13 2011 tv <tv> 2.0.6-1.mga1 + Revision: 84099 - new release * Mon Jan 17 2011 pterjan <pterjan> 2.0.5-3.mga1 + Revision: 21346 - Rebuild for python 2.7 * Sun Jan 09 2011 pterjan <pterjan> 2.0.5-2.mga1 + Revision: 4524 - Drop obsolete requires - Get the 2.0.5 update - Get the 2.0.5 update - Drop obsolete stuff - imported package audit * Wed Mar 17 2010 Oden Eriksson <oeriksson@mandriva.com> 2.0.4-5mdv2010.1 + Revision: 523828 - more split and deps fixes * Tue Mar 16 2010 Oden Eriksson <oeriksson@mandriva.com> 2.0.4-4mdv2010.1 + Revision: 521483 - fix deps * Mon Mar 15 2010 Oden Eriksson <oeriksson@mandriva.com> 2.0.4-3mdv2010.1 + Revision: 519924 - refine the split * Mon Mar 15 2010 Oden Eriksson <oeriksson@mandriva.com> 2.0.4-2mdv2010.1 + Revision: 519883 - fix build - revert the lib split * Sun Mar 14 2010 Oden Eriksson <oeriksson@mandriva.com> 2.0.4-1mdv2010.1 + Revision: 519090 - 2.0.4 (sync with audit-2.0.4-3.fc13.src.rpm) - rebuild - bump release - disable gssapi support (bogdano) * Mon Jul 27 2009 Emmanuel Andry <eandry@mandriva.org> 1.7.13-1mdv2010.0 + Revision: 400832 - New version 1.7.13 - drop p101 and p103 (merged upstream) - check major * Mon Apr 06 2009 Frederik Himpe <fhimpe@mandriva.org> 1.7.12-3mdv2009.1 + Revision: 364560 - Add LSB headers to init script (bug #49587) - Add Fedora patches: * Handle audit=0 boot option for 2.6.29 kernel (RH Bug 487541) * Drop some debug code in libev * Move audit.py file to arch specific python dir * Thu Feb 26 2009 Oden Eriksson <oeriksson@mandriva.com> 1.7.12-1mdv2009.1 + Revision: 345019 - 1.7.12 - sync with the bundled spec file * Sun Jan 11 2009 Oden Eriksson <oeriksson@mandriva.com> 1.7.11-1mdv2009.1 + Revision: 328322 - 1.7.11 - drop P2, it's fixed upstream * Fri Dec 26 2008 Funda Wang <fwang@mandriva.org> 1.7.10-2mdv2009.1 + Revision: 319212 - rebuild for new python * Sat Dec 20 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.10-1mdv2009.1 + Revision: 316500 - 1.7.10 - drop one redundant patch - fix build with -Werror=format-security (P2) * Thu Nov 06 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.9-1mdv2009.1 + Revision: 300182 - 1.7.9 * Thu Oct 23 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.8-1mdv2009.1 + Revision: 296652 - 1.7.8 * Thu Sep 18 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.7-1mdv2009.0 + Revision: 285646 - 1.7.7 (Major bugfixes) - drop upstream implemented patches * Sat Sep 13 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.6-2mdv2009.0 + Revision: 284587 - remove the _disable_ld_as_needed workaround, it's fixed in P5 * Sat Sep 13 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.6-1mdv2009.0 + Revision: 284451 - use _disable_ld_as_needed because auditd won't link against -lwrap otherwise - added one security fix from svn (P4) * Fri Sep 12 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.6-0.1mdv2009.0 + Revision: 284213 - 1.7.6, enables tcp_wrappers support but don't link it in for some reason... - misc spec file fixes * Tue Aug 26 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.5-1mdv2009.0 + Revision: 276119 - 1.7.5 * Fri Aug 08 2008 Thierry Vignaud <tv@mandriva.org> 1.7.3-3mdv2009.0 + Revision: 267862 - rebuild early 2009.0 package (before pixel changes) + Pixel <pixel@mandriva.com> - do not call ldconfig in %%post/%%postun, it is now handled by filetriggers * Mon May 19 2008 Oden Eriksson <oeriksson@mandriva.com> 1.7.3-1mdv2009.0 + Revision: 209147 - 1.7.3 - drop upstream applied patches - 1.7.2 - sync with fedora (audit-1.7.2-6.fc9.src.rpm) * Sat Apr 12 2008 Oden Eriksson <oeriksson@mandriva.com> 1.6.8-1mdv2009.0 + Revision: 192614 - P2: security fix for CVE-2008-1628 * Thu Feb 14 2008 Oden Eriksson <oeriksson@mandriva.com> 1.6.8-1mdv2008.1 + Revision: 168666 - 1.6.8 * Fri Feb 01 2008 Oden Eriksson <oeriksson@mandriva.com> 1.6.7-1mdv2008.1 + Revision: 161092 - 1.6.7 - dropped P2, it's implemented upstream - added the prelude support (plugins should be broken out) * Fri Jan 11 2008 Andreas Hasenack <andreas@mandriva.com> 1.6.5-2mdv2008.1 + Revision: 148491 - rebuild to force re-upload * Tue Jan 08 2008 Andreas Hasenack <andreas@mandriva.com> 1.6.5-1mdv2008.1 + Revision: 146739 - updated to version 1.6.5 * Thu Jan 03 2008 Andreas Hasenack <andreas@mandriva.com> 2mdv2008.1-current + Revision: 142635 - fix log file permissions check * Thu Jan 03 2008 Andreas Hasenack <andreas@mandriva.com> 1.6.4-1mdv2008.1 + Revision: 142477 - updated to version 1.6.4 - imported Oden's changes: - new plugin package - am_cflags patch - spec cleanup - openldap-devel buildrequires + Olivier Blin <oblin@mandriva.com> - restore BuildRoot + Thierry Vignaud <tv@mandriva.org> - kill re-definition of %%buildroot on Pixel's request * Tue Sep 25 2007 Andreas Hasenack <andreas@mandriva.com> 1.6.1-5mdv2008.0 + Revision: 92698 - fixed "config file too large" on x86_64 (#33891) - added some missing requires for system-config-audit * Mon Sep 24 2007 Andreas Hasenack <andreas@mandriva.com> 1.6.1-4mdv2008.0 + Revision: 92509 - change menu icon (#33920) - fix sendmail check (#33891) * Fri Sep 21 2007 Andreas Hasenack <andreas@mandriva.com> 1.6.1-3mdv2008.0 + Revision: 92101 - fixed menu (#33868) - fixed duplicated lang entry (#33874) * Fri Sep 21 2007 David Walluck <walluck@mandriva.org> 1.6.1-2mdv2008.0 + Revision: 92084 - add some devel provides for fc compat - use %%{configure2_5x} and %%{makeinstall_std} * Tue Sep 18 2007 Andreas Hasenack <andreas@mandriva.com> 1.6.1-1mdv2008.0 + Revision: 89849 - updated to version 1.6.1 - obey new library policy (unversioned devel) - properly package system-config-audit GUI * Sun Sep 16 2007 Thierry Vignaud <tv@mandriva.org> 1.5.6-4mdv2008.0 + Revision: 87792 - fix system-config-audit starting (#33354) * Mon Aug 13 2007 Thierry Vignaud <tv@mandriva.org> 1.5.6-3mdv2008.0 + Revision: 62632 - add missing requires for python module (#32503) * Fri Aug 10 2007 Thierry Vignaud <tv@mandriva.org> 1.5.6-2mdv2008.0 + Revision: 61460 - run %%find_lang in %%install - package missing files - create libaudit-common sub package - add missing buildrequires - new release - fix build - new devel policy + Andreas Hasenack <andreas@mandriva.com> - buildrequires glibc-devel which has the needed headers - updated to version 1.5.4 - fixed group - fixed requires - fixer provides - Import audit