Initial import (#1544468)
This commit is contained in:
parent
9e002344ce
commit
c6fc94a305
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
||||
/fapolicyd-0.8.5.tar.gz
|
||||
60
fapolicyd.spec
Normal file
60
fapolicyd.spec
Normal file
@ -0,0 +1,60 @@
|
||||
Summary: Application Whitelisting Daemon
|
||||
Name: fapolicyd
|
||||
Version: 0.8.5
|
||||
Release: 1
|
||||
License: GPLv3+
|
||||
URL: http://people.redhat.com/sgrubb/fapolicyd
|
||||
Source0: https://people.redhat.com/sgrubb/fapolicyd/%{name}-%{version}.tar.gz
|
||||
BuildRequires: kernel-headers
|
||||
BuildRequires: systemd-devel libgcrypt-devel rpm-devel file-devel
|
||||
BuildRequires: libcap-ng-devel libseccomp-devel
|
||||
Requires(pre): shadow-utils
|
||||
Requires(post): systemd-units
|
||||
Requires(preun): systemd-units
|
||||
Requires(postun): systemd-units
|
||||
|
||||
%description
|
||||
Fapolicyd (File Access Policy Daemon) implements application whitelisting
|
||||
to decide file access rights. Applications that are known via a reputation
|
||||
source are allowed access while unknown applications are not. The daemon
|
||||
makes use of the kernel's fanotify interface to determine file access rights.
|
||||
|
||||
%prep
|
||||
%setup -q
|
||||
|
||||
%build
|
||||
%configure --with-audit
|
||||
make CFLAGS="%{optflags}" %{?_smp_mflags}
|
||||
|
||||
%install
|
||||
make DESTDIR="%{buildroot}" INSTALL='install -p' install
|
||||
|
||||
%pre
|
||||
getent passwd fapolicyd >/dev/null || useradd -r -M -s /sbin/nologin -c "Application Whitelisting Daemon" fapolicyd
|
||||
|
||||
%post
|
||||
%systemd_post fapolicyd.service
|
||||
|
||||
%preun
|
||||
%systemd_preun fapolicyd.service
|
||||
|
||||
%postun
|
||||
%systemd_postun_with_restart fapolicyd.service
|
||||
|
||||
%files
|
||||
%doc README
|
||||
%{!?_licensedir:%global license %%doc}
|
||||
%license COPYING
|
||||
%attr(750,root,fapolicyd) %dir %{_sysconfdir}/%{name}
|
||||
%config(noreplace) %attr(644,root,fapolicyd) %{_sysconfdir}/%{name}/fapolicyd.rules
|
||||
%config(noreplace) %attr(644,root,fapolicyd) %{_sysconfdir}/%{name}/fapolicyd.mounts
|
||||
%attr(644,root,root) %{_unitdir}/fapolicyd.service
|
||||
%attr(755,root,root) %{_sbindir}/fapolicyd
|
||||
%attr(644,root,root) %{_mandir}/man8/*
|
||||
%attr(644,root,root) %{_mandir}/man5/*
|
||||
%ghost %{_localstatedir}/log/fapolicyd-access.log
|
||||
|
||||
%changelog
|
||||
* Fri Feb 16 2018 Steve Grubb <sgrubb@redhat.com> 0.8.5-1
|
||||
- New release
|
||||
|
||||
Loading…
Reference in New Issue
Block a user