update to latest upstream

This commit is contained in:
John Dennis 2007-09-08 19:51:52 +00:00
parent d6778f1502
commit b512ba990e
4 changed files with 152 additions and 26 deletions

View File

@ -1 +1 @@
setroubleshoot-1.9.7.tar.gz setroubleshoot-1.10.3.tar.gz

View File

@ -9,22 +9,50 @@
# config: /etc/setroubleshoot/setroubleshoot.cfg # config: /etc/setroubleshoot/setroubleshoot.cfg
# pidfile: /var/run/setroubleshoot.pid # pidfile: /var/run/setroubleshoot.pid
# #
### BEGIN INIT INFO
# Provides: lsb-setroubleshootd
# Required-Start: $local_fs $syslog $network $named
# Required-Stop: $local_fs $syslog $network $named
# Default-Start: 3 4 5
# Default-Stop: 0 1 6
# Short-Description: start and stop SELinux Troubleshooting Daemon
# Description: controls operation of the SELinux Troubleshooting Daemon
# (setroubleshootd) which listens for SELinux AVC denial messages
# analyzes it and provides a friendly interpretation.
### END INIT INFO
# Return values according to LSB for all commands but status: # Return values according to LSB for all commands but status:
# 0 - success # 0 success
# 1 - generic or unspecified error # 1 generic or unspecified error (current practice)
# 2 - invalid or excess argument(s) # 2 invalid or excess argument(s)
# 3 - unimplemented feature (e.g. "reload") # 3 unimplemented feature (for example, "reload")
# 4 - insufficient privilege # 4 user had insufficient privilege
# 5 - program is not installed # 5 program is not installed
# 6 - program is not configured # 6 program is not configured
# 7 - program is not running # 7 program is not running
# Command argument
# start start the service
# stop stop the service
# restart stop and restart the service if the service is already running, otherwise start the service
# try-restart restart the service if the service is already running
# reload cause the configuration of the service to be reloaded without actually stopping and restarting the service
# force-reload cause the configuration to be reloaded if the service supports this, otherwise restart the service if it is running
# status print the current status of the service
# start, stop, restart, force-reload, and status actions must be supported
# reload and the try-restart actions are optional.
# the init script.
PATH=/sbin:/bin:/usr/bin:/usr/sbin PATH=/sbin:/bin:/usr/bin:/usr/sbin
# Source function library. # Source function library.
# /lib/lsb/init-functions
. /etc/init.d/functions . /etc/init.d/functions
# Silently exit is SELinux is not enabled # Silently exit is SELinux is not enabled
[ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled || exit 1 [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled || exit 1
@ -99,17 +127,17 @@ case "$1" in
restart) restart)
restart restart
;; ;;
reload) force-reload|reload)
reload reload
;; ;;
condrestart) try-restart|condrestart)
condrestart condrestart
;; ;;
cleardb) cleardb)
cleardb cleardb
;; ;;
*) *)
echo $"Usage: $0 {start|stop|status|restart|condrestart|reload|cleardb}" echo $"Usage: $0 {start|stop|status|restart|try-restart|condrestart|reload|force-reload|cleardb}"
RETVAL=3 RETVAL=3
esac esac

View File

@ -1,10 +1,10 @@
Summary: Helps troubleshoot SELinux problems Summary: Helps troubleshoot SELinux problems
Name: setroubleshoot Name: setroubleshoot
Version: 1.9.7 Version: 1.10.3
Release: 1%{?dist} Release: 1%{?dist}
License: GPL License: GPLv2+
Group: Applications/System Group: Applications/System
URL: http://www.redhat.com/ URL: https://hosted.fedoraproject.org/projects/setroubleshoot
Source0: %{name}-%{version}.tar.gz Source0: %{name}-%{version}.tar.gz
Source1: setroubleshoot.init Source1: setroubleshoot.init
Source2: setroubleshoot.logrotate Source2: setroubleshoot.logrotate
@ -12,25 +12,32 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildArch: noarch BuildArch: noarch
BuildRequires: perl-XML-Parser BuildRequires: perl-XML-Parser
Requires: %{name}-server = %{version}-%{release} Requires: %{name}-server = %{version}-%{release}
Requires: %{name}-plugins
Requires: pygtk2 >= 2.9.2 Requires: pygtk2 >= 2.9.2
Requires: gnome-python2, gnome-python2-canvas Requires: gnome-python2, gnome-python2-canvas
Requires: usermode, rhpl
BuildRequires: desktop-file-utils BuildRequires: desktop-file-utils
Requires: gnome-python2-gtkhtml2 Requires: gnome-python2-gtkhtml2
Requires: dbus
Requires: dbus-python
Requires: libxml2-python
Requires(post): /usr/bin/update-desktop-database Requires(post): /usr/bin/update-desktop-database
Requires(post): dbus
Requires(postun): /usr/bin/update-desktop-database Requires(postun): /usr/bin/update-desktop-database
Requires(postun): dbus
Requires: notify-python Requires: notify-python
%{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
%define pkgpythondir %{python_sitelib}/%{name} %define pkgpythondir %{python_sitelib}/%{name}
%define pkgdocdir %{_datadir}/doc/%{name}-%{version} %define pkgdocdir %{_datadir}/doc/%{name}-%{version}
%define pkgguidir %{_datadir}/%{name}/gui
%define pkgdatadir %{_datadir}/%{name} %define pkgdatadir %{_datadir}/%{name}
%define pkglibexecdir %{_prefix}/libexec/%{name} %define pkglibexecdir %{_prefix}/libexec/%{name}
%define pkgvardatadir %{_localstatedir}/lib/%{name} %define pkgvardatadir %{_localstatedir}/lib/%{name}
%define pkgrundir %{_localstatedir}/run/%{name} %define pkgrundir %{_localstatedir}/run/%{name}
%define pkgconfigdir %{_sysconfdir}/%{name} %define pkgconfigdir %{_sysconfdir}/%{name}
%define pkglogdir %{_localstatedir}/log/%{name} %define pkglogdir %{_localstatedir}/log/%{name}
%define pkgdatabase %{pkgvardatadir}/audit_listener_database.xml
%description %description
setroubleshoot gui. Application that allows you to view setroubleshoot-server setroubleshoot gui. Application that allows you to view setroubleshoot-server
@ -41,19 +48,21 @@ about the problem and help track its resolution. Alerts can be configured
to user preference. The same tools can be run on existing log files. to user preference. The same tools can be run on existing log files.
%files %files
%{pkgguidir}
%{_sysconfdir}/xdg/autostart/* %{_sysconfdir}/xdg/autostart/*
%{_datadir}/applications/*.desktop %{_datadir}/applications/*.desktop
%{_datadir}/dbus-1/services/sealert.service %{_datadir}/dbus-1/services/sealert.service
%{_datadir}/icons/hicolor %{_datadir}/icons/hicolor
%dir %attr(0755,root,root) %{pkgpythondir} %dir %attr(0755,root,root) %{pkgpythondir}
%{pkgpythondir}/browser.py* %{pkgpythondir}/browser.py*
%{pkgpythondir}/gui_utils.py*
%{pkgpythondir}/email_dialog.py* %{pkgpythondir}/email_dialog.py*
%{pkgpythondir}/gui_utils.py*
%post %post
/usr/bin/update-desktop-database %{_datadir}/applications /usr/bin/update-desktop-database %{_datadir}/applications
touch --no-create %{_datadir}/icons/hicolor || : touch --no-create %{_datadir}/icons/hicolor || :
%{_bindir}/gtk-update-icon-cache --quiet %{_datadir}/icons/hicolor || : %{_bindir}/gtk-update-icon-cache --quiet %{_datadir}/icons/hicolor || :
dbus-send --system /com/redhat/setroubleshootd com.redhat.SEtroubleshootdIface.restart string:'rpm install' >/dev/null 2>&1 || :
%postun %postun
/usr/bin/update-desktop-database %{_datadir}/applications /usr/bin/update-desktop-database %{_datadir}/applications
@ -72,7 +81,8 @@ rm -rf %{buildroot}
make DESTDIR=%{buildroot} install make DESTDIR=%{buildroot} install
%{__install} -D -m755 %{SOURCE1} %{buildroot}/etc/rc.d/init.d/%{name} %{__install} -D -m755 %{SOURCE1} %{buildroot}/etc/rc.d/init.d/%{name}
%{__install} -D -m644 %{SOURCE2} %{buildroot}%{_sysconfdir}/logrotate.d/%{name} %{__install} -D -m644 %{SOURCE2} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
touch %{buildroot}%{pkgvardatadir}/audit_listener_database.xml desktop-file-install --vendor="" --dir=%{buildroot}%{_datadir}/applications %{buildroot}/%{_datadir}/applications/%{name}.desktop
touch %{buildroot}%{pkgdatabase}
touch %{buildroot}%{pkgvardatadir}/email_alert_recipients touch %{buildroot}%{pkgvardatadir}/email_alert_recipients
%find_lang %{name} %find_lang %{name}
@ -80,9 +90,16 @@ touch %{buildroot}%{pkgvardatadir}/email_alert_recipients
Summary: SELinux troubleshoot server Summary: SELinux troubleshoot server
Group: Applications/System Group: Applications/System
Requires: %{name}-plugins
Requires: audit >= 1.2.6-3 Requires: audit >= 1.2.6-3
Requires: audit-libs-python >= 1.2.6-3 Requires: audit-libs-python >= 1.2.6-3
Requires: libselinux >= 1.30.15-1 Requires: libselinux >= 1.30.15-1
Requires: pygobject2
Requires: dbus-python
Requires: libxml2-python
Requires: libselinux-python
Requires: audit-libs-python
Requires: libuser
BuildRequires: intltool gettext python BuildRequires: intltool gettext python
@ -99,7 +116,10 @@ about the problem and help track its resolution. Alerts can be configured
to user preference. The same tools can be run on existing log files. to user preference. The same tools can be run on existing log files.
%post server %post server
[ -f %{pkgvardatadir}/database.xml ] && chmod 644 %{pkgvardatadir}/database.xml if [ -f %{pkgdatabase} ]; then
chown root:root %{pkgdatabase} >/dev/null 2>&1 || :
chmod 600 %{pkgdatabase} >/dev/null 2>&1 || :
fi
/sbin/chkconfig --add %{name} /sbin/chkconfig --add %{name}
/sbin/service %{name} condrestart >/dev/null 2>&1 || : /sbin/service %{name} condrestart >/dev/null 2>&1 || :
@ -126,8 +146,8 @@ rm -rf %{buildroot}
%{pkgpythondir}/__init__.py* %{pkgpythondir}/__init__.py*
%{pkgpythondir}/access_control.py* %{pkgpythondir}/access_control.py*
%{pkgpythondir}/analyze.py* %{pkgpythondir}/analyze.py*
%{pkgpythondir}/audit_data.py*
%{pkgpythondir}/avc_audit.py* %{pkgpythondir}/avc_audit.py*
%{pkgpythondir}/avc_auparse.py*
%{pkgpythondir}/config.py* %{pkgpythondir}/config.py*
%{pkgpythondir}/email_alert.py* %{pkgpythondir}/email_alert.py*
%{pkgpythondir}/errcode.py* %{pkgpythondir}/errcode.py*
@ -142,15 +162,93 @@ rm -rf %{buildroot}
%config %{pkgconfigdir}/%{name}.cfg %config %{pkgconfigdir}/%{name}.cfg
%dir %{pkglogdir} %dir %{pkglogdir}
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name} %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
%config %{_sysconfdir}/dbus-1/system.d/setroubleshootd.conf
%dir %{pkgrundir} %dir %{pkgrundir}
%dir %{pkgvardatadir} %dir %{pkgvardatadir}
%ghost %attr(0644,root,root) %{pkgvardatadir}/audit_listener_database.xml %ghost %attr(0600,root,root) %{pkgdatabase}
%ghost %attr(0644,root,root) %{pkgvardatadir}/email_alert_recipients %ghost %attr(0644,root,root) %{pkgvardatadir}/email_alert_recipients
%{_mandir}/man8/sealert.8.gz %{_mandir}/man8/sealert.8.gz
%attr(0755,root,root) /etc/rc.d/init.d/%{name}
/etc/rc.d/init.d/%{name}
%changelog %changelog
* Sat Sep 8 2007 John Dennis <jdennis@redhat.com> - 1.10.3-1
- modify avc_audit.py to use new audit_data.py implementation
- can listen for audit events on either /var/run/audit_events
in bindary protocol mode or /var/run/audisp_events in
text protocol mode
* Thu Sep 6 2007 John Dennis <jdennis@redhat.com> - 1.10.2-1
- remove all copied code from test_setroubleshootd, now we import
from setroubleshoot
- export ClientConnectionHandler from rpc.py as a base class.
Derive SetroubleshootdClientConnectionHandler and
AuditClientConnectionHandler from ClientConnectionHandler.
- add audisp_listen as test program
- create setroubleshoot sym link in top devel directory pointing
to src so import setroubleshoot.foo if PYTHONPATH=topdir
- add get_option, convert_cfg_type to config.py.in so that one
can pass optional dict to override config file settings
- rewrite log_init() so it's easier for other programs to use it,
fix the import logic concering log & config
- remove log code from test_setroubleshoot, now just does import
from setroubleshoot.
- test_setroubleshootd can now handle audit records in both text
and binary formats, can be selected by command line arg. It can now
either output to clients connecting on a socket or to stdout. Can
now optionally exit after N socket client connections.
- remove non audit record lines from test data
- remove config_init() and log_init() from package __init__.py
It was the wrong place to call them, now call them when the
process initializes before the first setroubleshoot imports
- add parse_config_setting() and set_config() to config module
- setroubleshootd now accepts -c --config command line arg
- test_sectroubleshoot: add err defines & program_error exception
add is_valid() tests to assure we read a valid audit record
log the unrecognized line if not valid, clean up socket close()
- Relates Bug #247056, update initscript to LSB standards
Note: LSB initscripts in Fedora is not yet a resolved issue,
the changes implemented were to add an LSB block and support
the new LSB try-restart and force-reload commands. However
the new /lib/lsb/init-functions are NOT currently used as this
is the unstable part.
* Thu Aug 23 2007 John Dennis <jdennis@redhat.com> - 1.10.1-1
- add BuildRequires perl-XML-Parser
* Thu Aug 23 2007 John Dennis <jdennis@redhat.com> - 1.10.0-1
- move all plugins and their translations to independent package
- wrap XML generation inside try/except
- correct how access list is obtained in avc_auparse.py
- add try/except around top level of AnalyzeThread.run so exceptions
in the thread get reported and the analysis thread does not just die.
- also add try/except around LogfileThread.process_logfile
- add new function assure_file_ownership_permissions()
- server now forces it's database file permissions/ownership to be 0600 root:root
- rpm now forces the server's database file permissions/ownership to be 0600 root:root
- Resolves Bug #251545: Review Request: setroubleshoot-plugins - analysis plugins for setroubleshoot
- clean up some other rpmlint warnings in setroubleshoot.spec
- fix missing install of setroubleshoot icon and sym link to it
- Resolves Bug #251551, setroubleshoot shows up in in wrong desktop menu
also run desktop-file-install in rpm install
- add /etc/dbus-1/system.d/setroubleshootd.conf dbus configuration file
- Resolves Bug #250979, Bug #250932 Missing dependencies
- Restore plugins/Makefile.am which got nuked somehow
- remove dus.dbus_bindings.bus_name_has_owner(), deprecated as of F7
- wrap rpm transactions in try/except
* Tue Jun 12 2007 John Dennis <jdennis@redhat.com> - 1.9.7-1 * Tue Jun 12 2007 John Dennis <jdennis@redhat.com> - 1.9.7-1
- Resolves Bug# 241739, this bug is the lead bug for several bug reports, - Resolves Bug# 241739, this bug is the lead bug for several bug reports,
all consequences of the same problem, setroubleshootd/sealert when run all consequences of the same problem, setroubleshootd/sealert when run
@ -709,7 +807,7 @@ it has already been seen
- fix allow_execmod plugin to report better data. - fix allow_execmod plugin to report better data.
* Mon Jun 26 2006 John Dennis <jdennis@redhat.com> - 0.3-1 * Mon Jun 26 2006 John Dennis <jdennis@redhat.com> - 0.3-1
- add missing /var/log directory %files section in spec file, - add missing /var/log directory files section in spec file,
and add logrotate script and add logrotate script
* Mon Jun 26 2006 John Dennis <jdennis@redhat.com> - 0.2-1 * Mon Jun 26 2006 John Dennis <jdennis@redhat.com> - 0.2-1

View File

@ -1 +1 @@
cb39cb419aa3f3709811e721ef1bde41 setroubleshoot-1.9.7.tar.gz 6e5b7395364c637854d069c5cf2a45ba setroubleshoot-1.10.3.tar.gz