PREIN
/bin/sh
/usr/share/rpm-helper/add-group msec $1 xgrp
/usr/share/rpm-helper/add-group msec $1 ntools
/usr/share/rpm-helper/add-group msec $1 ctools
POSTIN
/bin/sh
touch /var/log/security.log
if [ $1 != 1 ]; then
# manage spelling change
for i in /etc/security/msec/level.local /etc/security/msec/security.conf /var/lib/msec/security.conf; do
if [ -f $i ]; then
perl -pi -e 's/CHECK_WRITEABLE/CHECK_WRITABLE/g;s/CHECK_SUID_GROUP/CHECK_SGID/g' $i
fi
done
for ext in today yesterday diff; do
if [ -f /var/log/security/writeable.$ext ]; then
mv -f /var/log/security/writeable.$ext /var/log/security/writable.$ext
fi
if [ -f /var/log/security/suid_group.$ext ]; then
mv -f /var/log/security/suid_group.$ext /var/log/security/sgid.$ext
fi
done
# find secure level
SL=$SECURE_LEVEL
[ ! -r /etc/sysconfig/msec ] || SL=`sed -n 's/SECURE_LEVEL=//p' < /etc/sysconfig/msec` || :
# upgrade from old style msec or rerun the new msec
if grep -q "# Mandrake-Security : if you remove this comment" /etc/profile; then
[ -z "$SL" -a -r /etc/profile.d/msec.sh ] && SL=`sed -n 's/.*SECURE_LEVEL=//p' < /etc/profile.d/msec.sh` || :
/usr/share/msec/cleanold.sh || :
[ -n "$SL" ] && msec $SL < /dev/null || :
else
[ -n "$SL" ] && msec < /dev/null || :
fi
# remove the old way of doing the daily cron
rm -f /etc/cron.d/msec
fi
POSTUN
/bin/sh
if [ $1 = 0 ]; then
# cleanup crontabs on package removal
rm -f /etc/cron.d/msec /etc/cron.hourly/msec /etc/cron.daily/msec
fi
/usr/share/rpm-helper/del-group msec $1 xgrp
/usr/share/rpm-helper/del-group msec $1 ntools
/usr/share/rpm-helper/del-group msec $1 ctools