From 426d6a0cba0f0abf9117ec1e174880ae0a471386 Mon Sep 17 00:00:00 2001 From: Jan Lieskovsky Date: Tue, 22 Oct 2013 16:09:50 +0200 Subject: [PATCH] Initial import (#1018905). --- .gitignore | 1 + scap-security-guide.spec | 88 ++++++++++++++++++++++++++++++++++++++++ sources | 1 + 3 files changed, 90 insertions(+) create mode 100644 scap-security-guide.spec diff --git a/.gitignore b/.gitignore index e69de29..49960ed 100644 --- a/.gitignore +++ b/.gitignore @@ -0,0 +1 @@ +/scap-security-guide-0.1-3.tar.gz diff --git a/scap-security-guide.spec b/scap-security-guide.spec new file mode 100644 index 0000000..dc21c7d --- /dev/null +++ b/scap-security-guide.spec @@ -0,0 +1,88 @@ + +# IMPORTANT NOTE: This spec file is solely dedicated to make changes to the +# Fedora's scap-security-guide package. If you want to apply changes against +# the main RHEL-6 scap-security-guide RPM content, use scap-security-guide.spec +# file one level up - in the main scap-security-guide directory (instead of +# this one). + +%global fedorassgrelease 3 + +Name: scap-security-guide +Version: 0.1 +Release: %{fedorassgrelease}%{?dist} +Summary: Security guidance and baselines in SCAP formats +Group: Applications/System +License: Public Domain +URL: https://fedorahosted.org/scap-security-guide/ +Source0: http://fedorapeople.org/~jlieskov/%{name}-%{version}-%{fedorassgrelease}.tar.gz +BuildArch: noarch +BuildRequires: libxslt, expat, python, openscap-utils >= 0.9.1, python-lxml +Requires: xml-common, openscap-utils >= 0.9.1 + +%description +The scap-security-guide project provides a guide for configuration of the +system from the final system's security point of view. The guidance is specified +in the Security Content Automation Protocol (SCAP) format and constitutes +a catalog of practical hardening advice, linked to government requirements +where applicable. The project bridges the gap between generalized policy +requirements and specific implementation guidelines. The Fedora system +administrator can use the oscap CLI tool from openscap-utils package, or the +scap-workbench GUI tool from scap-workbench package to verify that the system +conforms to provided guideline. Refer to scap-security-guide(8) manual page for +further information. + +%prep +%setup -q -n %{name}-%{version}-%{fedorassgrelease} + +%build +cd Fedora && make dist + +%install +mkdir -p %{buildroot}%{_datadir}/xml/scap/ssg/fedora +mkdir -p %{buildroot}%{_mandir}/en/man8/ + +# Add in core content (SCAP XCCDF and OVAL content) +cp -a Fedora/dist/content/* %{buildroot}%{_datadir}/xml/scap/ssg/fedora + +# Add in manpage +cp -a Fedora/input/auxiliary/scap-security-guide.8 %{buildroot}%{_mandir}/en/man8/scap-security-guide.8 + +%files +%{_datadir}/xml/scap +%lang(en) %{_mandir}/en/man8/scap-security-guide.8.* +%doc Fedora/LICENSE Fedora/output/ssg-fedora-guide.html + +%changelog +* Tue Oct 22 2013 Jan iankko Lieskovsky 0.1-3 +- Add .gitignore for Fedora output directory +- Set up Fedora release name and CPE based on build system properties +- Use correct file paths in scap-security-guide(8) manual page + (RH BZ#1018905, c#10) +- Apply further changes motivated by scap-security-guide Fedora RPM review + request (RH BZ#1018905, c#8): + * update package description, + * make content files to be owned by the scap-security-guide package, + * remove Fedora release number from generated content files, + * move HTML form of the guide under the doc directory (together + with that drop fedora/content subdir and place the content + directly under fedora/ subdir). +- Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905): + * drop Fedora release from package provided files' final path (c#5), + * drop BuildRoot, selected Requires:, clean section, drop chcon for + manual page, don't gzip man page (c#4), + * change package's description (c#4), + * include PD license text (#c4). + +* Mon Oct 14 2013 Jan iankko Lieskovsky 0.1-2 +- Provide manual page for scap-security-guide +- Remove percent sign from spec's changelog to silence rpmlint warning +- Convert RHEL6 'Restrict Root Logins' section's rules to Fedora +- Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora +- Introduce 'Account and Access Control' section +- Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's + rules to Fedora +- Set proper name of the build directory in the spec's setup macro. +- Replace hard-coded paths with macros. Preserve attributes when copying files. + +* Tue Sep 17 2013 Jan iankko Lieskovsky 0.1-1 +- Initial Fedora SSG RPM. diff --git a/sources b/sources index e69de29..101d26c 100644 --- a/sources +++ b/sources @@ -0,0 +1 @@ +93e71669058b2cb6958dc4946042552d scap-security-guide-0.1-3.tar.gz