93 lines
4.0 KiB
RPMSpec
93 lines
4.0 KiB
RPMSpec
|
|
# IMPORTANT NOTE: This spec file is solely dedicated to make changes to the
|
|
# Fedora's scap-security-guide package. If you want to apply changes against
|
|
# the main RHEL-6 scap-security-guide RPM content, use scap-security-guide.spec
|
|
# file one level up - in the main scap-security-guide directory (instead of
|
|
# this one).
|
|
|
|
%global fedorassgrelease 4
|
|
|
|
Name: scap-security-guide
|
|
Version: 0.1
|
|
Release: %{fedorassgrelease}%{?dist}
|
|
Summary: Security guidance and baselines in SCAP formats
|
|
Group: Applications/System
|
|
License: Public Domain
|
|
URL: https://fedorahosted.org/scap-security-guide/
|
|
Source0: http://fedorapeople.org/~jlieskov/%{name}-%{version}-%{fedorassgrelease}.tar.gz
|
|
BuildArch: noarch
|
|
BuildRequires: libxslt, expat, python, openscap-utils >= 0.9.1, python-lxml
|
|
Requires: xml-common, openscap-utils >= 0.9.1
|
|
Obsoletes: openscap-content < 0:0.9.13
|
|
|
|
%description
|
|
The scap-security-guide project provides a guide for configuration of the
|
|
system from the final system's security point of view. The guidance is specified
|
|
in the Security Content Automation Protocol (SCAP) format and constitutes
|
|
a catalog of practical hardening advice, linked to government requirements
|
|
where applicable. The project bridges the gap between generalized policy
|
|
requirements and specific implementation guidelines. The Fedora system
|
|
administrator can use the oscap CLI tool from openscap-utils package, or the
|
|
scap-workbench GUI tool from scap-workbench package to verify that the system
|
|
conforms to provided guideline. Refer to scap-security-guide(8) manual page for
|
|
further information.
|
|
|
|
%prep
|
|
%setup -q -n %{name}-%{version}-%{fedorassgrelease}
|
|
|
|
%build
|
|
cd Fedora && make dist
|
|
|
|
%install
|
|
mkdir -p %{buildroot}%{_datadir}/xml/scap/ssg/fedora
|
|
mkdir -p %{buildroot}%{_mandir}/en/man8/
|
|
|
|
# Add in core content (SCAP XCCDF and OVAL content)
|
|
cp -a Fedora/dist/content/* %{buildroot}%{_datadir}/xml/scap/ssg/fedora
|
|
|
|
# Add in manpage
|
|
cp -a Fedora/input/auxiliary/scap-security-guide.8 %{buildroot}%{_mandir}/en/man8/scap-security-guide.8
|
|
|
|
%files
|
|
%{_datadir}/xml/scap
|
|
%lang(en) %{_mandir}/en/man8/scap-security-guide.8.*
|
|
%doc Fedora/LICENSE Fedora/output/ssg-fedora-guide.html
|
|
|
|
%changelog
|
|
* Fri Nov 15 2013 Šimon Lukašík <slukasik@redhat.com> - 0.1-4
|
|
- Rebuild to obsolete openscap-content package (#1028706)
|
|
|
|
* Tue Oct 22 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
|
|
- Add .gitignore for Fedora output directory
|
|
- Set up Fedora release name and CPE based on build system properties
|
|
- Use correct file paths in scap-security-guide(8) manual page
|
|
(RH BZ#1018905, c#10)
|
|
- Apply further changes motivated by scap-security-guide Fedora RPM review
|
|
request (RH BZ#1018905, c#8):
|
|
* update package description,
|
|
* make content files to be owned by the scap-security-guide package,
|
|
* remove Fedora release number from generated content files,
|
|
* move HTML form of the guide under the doc directory (together
|
|
with that drop fedora/content subdir and place the content
|
|
directly under fedora/ subdir).
|
|
- Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
|
|
* drop Fedora release from package provided files' final path (c#5),
|
|
* drop BuildRoot, selected Requires:, clean section, drop chcon for
|
|
manual page, don't gzip man page (c#4),
|
|
* change package's description (c#4),
|
|
* include PD license text (#c4).
|
|
|
|
* Mon Oct 14 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-2
|
|
- Provide manual page for scap-security-guide
|
|
- Remove percent sign from spec's changelog to silence rpmlint warning
|
|
- Convert RHEL6 'Restrict Root Logins' section's rules to Fedora
|
|
- Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora
|
|
- Introduce 'Account and Access Control' section
|
|
- Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's
|
|
rules to Fedora
|
|
- Set proper name of the build directory in the spec's setup macro.
|
|
- Replace hard-coded paths with macros. Preserve attributes when copying files.
|
|
|
|
* Tue Sep 17 2013 Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-1
|
|
- Initial Fedora SSG RPM.
|