rpms/audit
5
0
Fork 0
Code Issues Pull Requests Releases Activity

- New message types

Browse Source 
- Support new rule format found in 2.6.17 and later kernels
- Add support for audit by role, clearance, type, sensitivity
This commit is contained in:
Steve Grubb 2006-04-07 01:33:11 +00:00
parent 364ae9db02
commit 42d612f4c7
3 changed files with 17 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.cvsignore
View File

@ -55,3 +55,4 @@ audit-1.1.2.tar.gz
audit-1.1.3.tar.gz audit-1.1.3.tar.gz
audit-1.1.4.tar.gz audit-1.1.4.tar.gz
audit-1.1.5.tar.gz audit-1.1.5.tar.gz
audit-1.1.6.tar.gz

17
audit.spec
View File

@ -1,6 +1,6 @@
Summary: User space tools for 2.6 kernel auditing. Summary: User space tools for 2.6 kernel auditing.
Name: audit Name: audit
Version: 1.1.5 Version: 1.1.6
Release: 1 Release: 1
License: GPL License: GPL
Group: System Environment/Daemons Group: System Environment/Daemons
@ -8,7 +8,7 @@ URL: http://people.redhat.com/sgrubb/audit/
Source0: %{name}-%{version}.tar.gz Source0: %{name}-%{version}.tar.gz
Patch1: audit-1.1.3-initscript-disabled.patch Patch1: audit-1.1.3-initscript-disabled.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-root BuildRoot: %{_tmppath}/%{name}-%{version}-root
BuildRequires: libtool swig BuildRequires: libtool swig python-devel
BuildRequires: glibc-kernheaders >= 2.4-9.1.95 BuildRequires: glibc-kernheaders >= 2.4-9.1.95
BuildRequires: automake >= 1.9 BuildRequires: automake >= 1.9
BuildRequires: autoconf >= 2.59 BuildRequires: autoconf >= 2.59
@ -77,14 +77,19 @@ mkdir -p $RPM_BUILD_ROOT/%{_libdir}
install -m 0644 lib/libaudit.h $RPM_BUILD_ROOT/%{_includedir} install -m 0644 lib/libaudit.h $RPM_BUILD_ROOT/%{_includedir}
# This winds up in the wrong place when libtool is involved # This winds up in the wrong place when libtool is involved
mv $RPM_BUILD_ROOT/%{_lib}/libaudit.a $RPM_BUILD_ROOT%{_libdir} mv $RPM_BUILD_ROOT/%{_lib}/libaudit.a $RPM_BUILD_ROOT%{_libdir}
mv $RPM_BUILD_ROOT/%{_lib}/libauparse.a $RPM_BUILD_ROOT%{_libdir}
curdir=`pwd` curdir=`pwd`
cd $RPM_BUILD_ROOT/%{_libdir} cd $RPM_BUILD_ROOT/%{_libdir}
LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libaudit.so.*.*.*\`` LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libaudit.so.*.*.*\``
ln -s ../../%{_lib}/$LIBNAME libaudit.so ln -s ../../%{_lib}/$LIBNAME libaudit.so
LIBNAME=`basename \`ls $RPM_BUILD_ROOT/%{_lib}/libauparse.so.*.*.*\``
ln -s ../../%{_lib}/$LIBNAME libauparse.so
cd $curdir cd $curdir
# Remove these items so they don't get picked up. # Remove these items so they don't get picked up.
rm -f $RPM_BUILD_ROOT/%{_lib}/libaudit.so rm -f $RPM_BUILD_ROOT/%{_lib}/libaudit.so
rm -f $RPM_BUILD_ROOT/%{_lib}/libauparse.so
rm -f $RPM_BUILD_ROOT/%{_lib}/libaudit.la rm -f $RPM_BUILD_ROOT/%{_lib}/libaudit.la
rm -f $RPM_BUILD_ROOT/%{_lib}/libauparse.la
rm -f $RPM_BUILD_ROOT/%{_libdir}/python2.4/site-packages/_audit.a rm -f $RPM_BUILD_ROOT/%{_libdir}/python2.4/site-packages/_audit.a
rm -f $RPM_BUILD_ROOT/%{_libdir}/python2.4/site-packages/_audit.la rm -f $RPM_BUILD_ROOT/%{_libdir}/python2.4/site-packages/_audit.la
# Temp remove this file # Temp remove this file
@ -115,11 +120,14 @@ fi
%files libs %files libs
%defattr(-,root,root) %defattr(-,root,root)
%attr(755,root,root) /%{_lib}/libaudit.* %attr(755,root,root) /%{_lib}/libaudit.*
%attr(755,root,root) /%{_lib}/libauparse.*
%files libs-devel %files libs-devel
%defattr(-,root,root) %defattr(-,root,root)
%{_libdir}/libaudit.a %{_libdir}/libaudit.a
%{_libdir}/libauparse.a
%{_libdir}/libaudit.so %{_libdir}/libaudit.so
%{_libdir}/libauparse.so
%{_includedir}/libaudit.h %{_includedir}/libaudit.h
%{_mandir}/man3/* %{_mandir}/man3/*
@ -146,6 +154,11 @@ fi
%changelog %changelog
* Thu Apr 6 2006 Steve Grubb <sgrubb@redhat.com> 1.1.6-1
- New message types
- Support new rule format found in 2.6.17 and later kernels
- Add support for audit by role, clearance, type, sensitivity
* Wed Mar 6 2006 Steve Grubb <sgrubb@redhat.com> 1.1.5-1 * Wed Mar 6 2006 Steve Grubb <sgrubb@redhat.com> 1.1.5-1
- Changed audit_log_semanage_message to take new params - Changed audit_log_semanage_message to take new params
- In aureport, add class between syscall and permission in avc report - In aureport, add class between syscall and permission in avc report

2
sources
View File

@ -1 +1 @@
78d71a75ac2677cb77be3dc788119d2c audit-1.1.5.tar.gz 19d208c284d6f6ae830f1943a74bbd7f audit-1.1.6.tar.gz