diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..0b696f7 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +/fapolicyd-0.8.5.tar.gz diff --git a/README.md b/README.md deleted file mode 100644 index 8643177..0000000 --- a/README.md +++ /dev/null @@ -1,3 +0,0 @@ -# fapolicyd - -The fapolicyd package \ No newline at end of file diff --git a/fapolicyd.spec b/fapolicyd.spec new file mode 100644 index 0000000..4463ee5 --- /dev/null +++ b/fapolicyd.spec @@ -0,0 +1,60 @@ +Summary: Application Whitelisting Daemon +Name: fapolicyd +Version: 0.8.5 +Release: 1 +License: GPLv3+ +URL: http://people.redhat.com/sgrubb/fapolicyd +Source0: https://people.redhat.com/sgrubb/fapolicyd/%{name}-%{version}.tar.gz +BuildRequires: kernel-headers +BuildRequires: systemd-devel libgcrypt-devel rpm-devel file-devel +BuildRequires: libcap-ng-devel libseccomp-devel +Requires(pre): shadow-utils +Requires(post): systemd-units +Requires(preun): systemd-units +Requires(postun): systemd-units + +%description +Fapolicyd (File Access Policy Daemon) implements application whitelisting +to decide file access rights. Applications that are known via a reputation +source are allowed access while unknown applications are not. The daemon +makes use of the kernel's fanotify interface to determine file access rights. + +%prep +%setup -q + +%build +%configure --with-audit +make CFLAGS="%{optflags}" %{?_smp_mflags} + +%install +make DESTDIR="%{buildroot}" INSTALL='install -p' install + +%pre +getent passwd fapolicyd >/dev/null || useradd -r -M -s /sbin/nologin -c "Application Whitelisting Daemon" fapolicyd + +%post +%systemd_post fapolicyd.service + +%preun +%systemd_preun fapolicyd.service + +%postun +%systemd_postun_with_restart fapolicyd.service + +%files +%doc README +%{!?_licensedir:%global license %%doc} +%license COPYING +%attr(750,root,fapolicyd) %dir %{_sysconfdir}/%{name} +%config(noreplace) %attr(644,root,fapolicyd) %{_sysconfdir}/%{name}/fapolicyd.rules +%config(noreplace) %attr(644,root,fapolicyd) %{_sysconfdir}/%{name}/fapolicyd.mounts +%attr(644,root,root) %{_unitdir}/fapolicyd.service +%attr(755,root,root) %{_sbindir}/fapolicyd +%attr(644,root,root) %{_mandir}/man8/* +%attr(644,root,root) %{_mandir}/man5/* +%ghost %{_localstatedir}/log/fapolicyd-access.log + +%changelog +* Fri Feb 16 2018 Steve Grubb 0.8.5-1 +- New release + diff --git a/sources b/sources new file mode 100644 index 0000000..947ef6d --- /dev/null +++ b/sources @@ -0,0 +1 @@ +SHA512 (fapolicyd-0.8.5.tar.gz) = 050258c47c9b37b377809fc681e68090928aa9aa8b3fad9b47a96cd1c06bae41fa8d7aa34e7110695262c5fd1cfc3f49faddecd47db6ef65b82e918eddc8f26e