rkhunter-vl.spec 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388
  1. Name: rkhunter
  2. Version: 1.4.2
  3. Release: 1%{?_dist_release}
  4. Summary: A host-based tool to scan for rootkits, backdoors and local exploits
  5. Group: Applications/System
  6. License: GPLv2+
  7. URL: http://rkhunter.sourceforge.net/
  8. Source0: http://downloads.sourceforge.net/rkhunter/rkhunter-%{version}.tar.gz
  9. Source2: 01-rkhunter
  10. Source3: rkhunter.sysconfig
  11. Patch0: rkhunter-1.4.2-vineconfig.patch
  12. BuildArch: noarch
  13. BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
  14. Requires: coreutils, binutils, findutils, grep
  15. Requires: e2fsprogs, procps, lsof, iproute, wget
  16. Requires: perl, perl(strict), perl(IO::Socket), mailx, logrotate
  17. %if "%{_dist_release}" >= "vl7"
  18. Requires: kmod
  19. %else
  20. Requires: module-init-tools
  21. %endif
  22. %description
  23. Rootkit Hunter (RKH) is an easy-to-use tool which checks
  24. computers running UNIX (clones) for the presence of rootkits
  25. and other unwanted tools.
  26. %prep
  27. %setup -q
  28. %patch0 -p1 -b .vine
  29. %{__cat} <<'EOF' >%{name}.logrotate
  30. %{_localstatedir}/log/%{name}/%{name}.log {
  31. weekly
  32. notifempty
  33. create 640 root root
  34. }
  35. EOF
  36. %build
  37. # Nothing to be built
  38. %install
  39. %{__rm} -rf $RPM_BUILD_ROOT
  40. %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_bindir}
  41. %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_sysconfdir}/{cron.daily,sysconfig,logrotate.d}
  42. %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts
  43. %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}
  44. %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_mandir}/man8
  45. %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db
  46. %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/log/%{name}
  47. %{__mkdir} -m755 -p ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n
  48. %{__install} -m755 -p files/%{name} ${RPM_BUILD_ROOT}%{_bindir}/
  49. %{__install} -m644 -p files/backdoorports.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/
  50. %{__install} -m644 -p files/mirrors.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/
  51. %{__install} -m644 -p files/programs_bad.dat ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/
  52. %{__install} -m644 -p files/i18n/cn ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/
  53. %{__install} -m644 -p files/i18n/en ${RPM_BUILD_ROOT}%{_var}/lib/%{name}/db/i18n/
  54. %{__install} -m644 -p files/CHANGELOG ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/
  55. %{__install} -m644 -p files/LICENSE ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/
  56. %{__install} -m644 -p files/README ${RPM_BUILD_ROOT}%{_docdir}/%{name}-%{version}/
  57. %{__install} -m755 -p files/check_modules.pl ${RPM_BUILD_ROOT}%{_datadir}/%{name}/scripts/
  58. %{__install} -m644 -p files/*.8 ${RPM_BUILD_ROOT}%{_mandir}/man8/
  59. # Don't ship these unless we want to Require the perl modules
  60. #%{__install} -m750 -p files/filehashmd5.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/
  61. #%{__install} -m750 -p files/filehashsha1.pl ${RPM_BUILD_ROOT}%{_prefix}/lib/%{name}/scripts/
  62. %{__install} -m755 -p %{SOURCE2} ${RPM_BUILD_ROOT}%{_sysconfdir}/cron.daily/%{name}
  63. %{__install} -m644 -p %{name}.logrotate ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d/%{name}
  64. %{__install} -m640 -p files/%{name}.conf ${RPM_BUILD_ROOT}%{_sysconfdir}/
  65. %{__install} -m640 -p %{SOURCE3} ${RPM_BUILD_ROOT}%{_sysconfdir}/sysconfig/%{name}
  66. %clean
  67. %{__rm} -rf $RPM_BUILD_ROOT
  68. %files
  69. %defattr(-,root,root,-)
  70. %doc %{_docdir}/%{name}-%{version}/*
  71. %{_bindir}/%{name}
  72. %dir %{_datadir}/%{name}
  73. %{_datadir}/%{name}/scripts
  74. %{_sysconfdir}/cron.daily/%{name}
  75. %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
  76. %dir %{_var}/lib/%{name}
  77. %{_var}/lib/%{name}/db
  78. %ghost %{_var}/lib/%{name}/db/mirrors.dat
  79. %ghost %{_var}/lib/%{name}/db/programs_bad.dat
  80. %{_var}/lib/%{name}/db/i18n
  81. %dir %{_var}/log/%{name}
  82. %config(noreplace) %{_sysconfdir}/%{name}.conf
  83. %config(noreplace) %{_sysconfdir}/sysconfig/%{name}
  84. %dir %{_docdir}/%{name}-%{version}
  85. %{_mandir}/man8/*
  86. %changelog
  87. * Wed Nov 12 2014 Daisuke SUZUKI <daisuke@vinelinux.org> 1.4.2-1
  88. - update to 1.4.2
  89. * Thu Feb 28 2013 Daisuke SUZUKI <daisuke@linux.or.jp> 1.4.0-1
  90. - initial build for Vine Linux
  91. * Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.0-6
  92. - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
  93. * Sat Oct 06 2012 Kevin Fenzi <kevin@scrye.com> 1.4.0-5
  94. - Add /dev/md/autorebuild.pid to whitelist. Fixes bug #857315
  95. * Sat Aug 18 2012 Kevin Fenzi <kevin@scrye.com> 1.4.0-4
  96. - Add /var/log/pki-ca/system to whitelist for FreeIPA. Fixes bug #849251
  97. * Wed Aug 15 2012 Kevin Fenzi <kevin@scrye.com> 1.4.0-3
  98. - Fix /bin/ad false positive. Fixes bug #831989
  99. * Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.0-2
  100. - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
  101. * Tue May 08 2012 Kevin Fenzi <kevin@scrye.com> - 1.4.0-1
  102. - Update to 1.4.0
  103. * Sun Apr 15 2012 Kevin Fenzi <kevin@scrye.com> - 1.3.8-15
  104. - Add workaround for /lib/java false positive. Fixes bug #806972
  105. * Wed Feb 8 2012 Kay Sievers <kay@redhat.com> - 1.3.8-14
  106. - modutils are for Linux 2.4 and no longer provided; depend on kmod
  107. * Fri Jan 27 2012 Kevin Fenzi <kevin@scrye.com> 1.3.8-13
  108. - Drop net-tools, no longer needed. Fixes bug #784803
  109. - Add /dev/shm/spice.* to whitelist. Fixes bug #784882
  110. * Fri Jan 06 2012 Kevin Fenzi <kevin@scrye.com> 1.3.8-12
  111. - Add /etc/.java to whitelist. Fixes bug #770972
  112. * Fri Nov 25 2011 Kevin Fenzi <kevin@scrye.com> - 1.3.8-11
  113. - Add /usr/share/man/man5/.k5identity.5.gz to whitelisted hidden files.
  114. * Wed Oct 12 2011 Jim Pirzyk <jim+rpm@pirzyk.org> - 1.3.8-10
  115. - Update %files section so that some .dat files are marked %ghost
  116. * Fri Aug 05 2011 Kevin Fenzi <kevin@scrye.com> - 1.3.8-9
  117. - Add patch to fix ALLOWPROCDELFILE config option. fixes bug #727524
  118. * Fri Jul 08 2011 Kevin Fenzi <kevin@scrye.com> - 1.3.8-8
  119. - Fix typo
  120. * Fri Jul 08 2011 Kevin Fenzi <kevin@scrye.com> - 1.3.8-7
  121. - Add patch to fix out of the box warning on rkhunter script.
  122. - Fixes bug #719270
  123. - Add etckeeper and tomboy files. Fixes bug #719265 and #719259
  124. * Tue Jun 21 2011 Kevin Fenzi <kevin@scrye.com> - 1.3.8-6
  125. - Change ssh check back to 2 - bug #596775
  126. - Drop hard Requires on prelink. It will be used if present - bug #714067
  127. * Thu Apr 21 2011 Kevin Fenzi <kevin@scrye.com> - 1.3.8-5
  128. - Add /dev/.mount to ALLOW_HIDDENDIR - bug #697599
  129. * Wed Apr 13 2011 Kevin Fenzi <kevin@scrye.com> - 1.3.8-4
  130. - Don't send warning emails anymore. They cause selinux issues and are not very helpful.
  131. - Fixes bug #660544
  132. * Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.8-3
  133. - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
  134. * Tue Dec 07 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-2
  135. - Adjust config some - bug #596775
  136. * Fri Nov 26 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.8-1
  137. - Update to 1.3.8
  138. * Wed Nov 24 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-9
  139. - Drop /var/run as it's not used anymore - bug #656684
  140. * Wed Oct 06 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-8
  141. - Add patch to make rkhunter use unhide if installed - bug #636396
  142. * Sat Jun 05 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-7
  143. - Add ipsec.hmac exclude - bug #560594
  144. * Fri May 28 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-6
  145. - Add exclude for md-device-map - bug #596731
  146. - Supress ssh version check - bug #596775
  147. * Sat Mar 06 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-5
  148. - Change config to not specify XINETD_PATH - bug #560562
  149. * Sat Jan 23 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-4
  150. - Change email to just root instead of root@localhost - bug #553179
  151. - Add .k5login.5.gz to files whitelist - bug #553134
  152. * Tue Jan 05 2010 Kevin Fenzi <kevin@tummy.com> - 1.3.6-3
  153. - Add some more ssh hmac files to whitelist - bug #552621
  154. - Re-add /dev/.mdadm.map to whitelisted files - bug #539405
  155. * Tue Dec 01 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.6-2
  156. - Disable apps check by default - bug #543065
  157. * Sun Nov 29 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.6-1
  158. - Update to 1.3.6
  159. * Thu Nov 26 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-9
  160. - Add exception for /dev/.mdadm file - bug #539405
  161. * Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-8
  162. - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
  163. * Fri Jul 03 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-7
  164. - Add exception for software raid udev file - bug #509253
  165. * Sat Jun 06 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-6
  166. - Add /usr/bin/.fipscheck.hmac to ok files - bug #494096
  167. * Sun Mar 08 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-5
  168. - Fix typo in patch file
  169. * Wed Mar 04 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-4
  170. - Rework spec file
  171. - Add check for the new hmac ssh files
  172. * Thu Feb 26 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-3
  173. - Update cron job to include hostname (thanks Manuel Wolfshant)
  174. * Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.4-2
  175. - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
  176. * Fri Jan 02 2009 Kevin Fenzi <kevin@tummy.com> - 1.3.4-1
  177. - Update to 1.3.4
  178. - Use libdir as tmp dir - bug #456340
  179. * Sat Dec 13 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-6
  180. - Fix cron job sending as attachment - bug #472679
  181. - Fix cron job trying to send with colors - bug #475916
  182. * Wed Sep 03 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-5
  183. - Patch debug tmp file issue - bug #460628
  184. * Mon Jun 16 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-4
  185. - Fix cron script to only mail on warn/error - bug #450703
  186. - Fix conditional to account for fc10 rsyslog
  187. * Mon Apr 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-3
  188. - Change cron to run after prelink - bug #438622
  189. * Wed Mar 26 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-2
  190. - Move things to more standard locations for selinux - bug #438184
  191. - Add exception for pulseaudio file - bug #438622
  192. * Thu Feb 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.2-1
  193. - Update to 1.3.2
  194. - Fix cron script
  195. * Thu Feb 28 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.0-2
  196. - Use /etc/redhat-release for EPEL and /etc/fedora release for Fedora.
  197. - Add conditionals to support EPEL
  198. - Fix man page warning.
  199. * Sun Feb 03 2008 Kevin Fenzi <kevin@tummy.com> - 1.3.0-1
  200. - Revive package, clean up spec
  201. - Update to 1.3.0
  202. * Sat Mar 18 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-3
  203. - Made an RPM transparent change to move the sha1 canary check
  204. file out of CVS and into the external lookaside cache (whose
  205. filename changes with every new package release anyway...)
  206. * Fri Mar 17 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-2
  207. - Fixed architectural dependency during package creation eliminating
  208. use of _libdir configure macro (x86_64 /usr/lib64 mis-targeting)
  209. * Tue Mar 7 2006 Greg Houlette <tamaster@pobox.com> - 1.2.8-1
  210. - New package version release
  211. - reworked the .spec file to support optional dist tag
  212. - Updated the application check default patchfile (chunk failure)
  213. - Changed to SHA1 for optional message digest (canary check)
  214. - Added a couple of suggested skip entries to rkhunter.conf
  215. * Sat Jun 11 2005 Greg Houlette <tamaster@pobox.com> - 1.2.7-1
  216. - Added signature auto-updating to CRON scan (new script)
  217. - Removed BOOTSCAN pending rewrite to full SysV Init scan in background
  218. - Added the --append-log command line option
  219. - Added Date Stamping to output
  220. - Fixed bug in /etc/group missing report
  221. - New package version release
  222. * Sun Jan 2 2005 Greg Houlette <tamaster@tekarmory.com> - 0:1.1.9-1
  223. - New package version release
  224. - Added the --run-application-check command line option
  225. to listing in command help
  226. - Replaced 'Here' Doc editing of rkhunter.conf file
  227. with in-place Perl edit
  228. - tweaked rpmbuild -bb Autoclean
  229. * Fri Oct 15 2004 Greg Houlette - 0:1.1.8-0.fdr.1 (revisited)
  230. - Removed redundant buildrequires /bin/sh, coreutils and perl
  231. - Revise postun scriptlet
  232. - Added /usr/share/doc/rkhunter-1.1.8/ to files list
  233. * Mon Oct 11 2004 Greg Houlette - 0:1.1.8-0.fdr.1
  234. - Changed Release Tag to 0.fdr.1 (testing) for QA
  235. - Removed wget from dependencies
  236. - Hid (temporarily) the --skip-application-check command
  237. line option from being listed in help
  238. - Fixed the spec files list, again!
  239. * Fri Oct 8 2004 Greg Houlette - 0:1.1.8-0.fdr.0.2.beta2
  240. - Unified and disabled the md5 canary check in prep
  241. (check is now optional) removing the sha1 cross-check
  242. - Fixed the spec files list, adding the /var/rkhunter
  243. directory and the /usr/bin/rkhunter executable
  244. - Fixed missing dependencies (rkh uses runtime checks)
  245. - Disabled "auto-clean" for rpmbuild -bb
  246. - Changed Application version scan default to
  247. disabled awaiting backport fix in upstream sources
  248. - Fixed shared_man_search.patch, configuration files
  249. verify and added postun(install) cleanup
  250. * Fri Oct 1 2004 Greg Houlette - 0:1.1.8-0.fdr.0.1.beta1
  251. - More cosmetic patchwork
  252. - Changed Release Tag to beta1 (pre-release) for QA submit
  253. * Tue Sep 28 2004 Greg Houlette - 0:1.1.8-0.fdr.1
  254. - Removed hidden_search.patch (1.1.7) after it was
  255. merged into upstream source by Michael Boelen
  256. - Removed .spec file from md5 and sha1 file checks
  257. (it must be modifiable by Fedora QA release build)
  258. - Added BOOTSCAN description file to documentation
  259. - Restructured dynamic file creation ('Here' Docs)
  260. moving them to the "prep" stage so that *_ALL_*
  261. files are available prior to the "build" stage
  262. (for inspection purposes)
  263. - Added a /etc/sysconfig/rkhunter parameters file
  264. * Sun Aug 29 2004 Greg Houlette - 0:1.1.7-0.fdr.1
  265. - Cosmetic patchwork
  266. * Sat Aug 21 2004 Greg Houlette - 0:1.1.6-0.fdr.1
  267. - Moderate reworking of .spec file for packaging standards
  268. - Added md5 and sha1 file checks to prep procedure for source .rpm
  269. - Included an optional rc.local replacement for scan on boot (with full logging)
  270. * Tue Aug 10 2004 Michael Boelen - 1.1.5
  271. - Added update script
  272. - Extended description
  273. * Sun Aug 08 2004 Greg Houlette - 1.1.5
  274. - Changed the install procedure eliminating the specification of
  275. destination filenames (only needed if you are renaming during install)
  276. - Changed the permissions for documentation files (root only overkill)
  277. - Added the installation of the rkhunter Man Page
  278. - Added the installation of the programs_{bad, good}.dat database files
  279. - Added the installation of the LICENSE documentation file
  280. - Added the chmod for root only to the /var/rkhunter/db directory
  281. * Sun May 23 2004 Craig Orsinger (cjo) <cjorsinger@earthlink.net>
  282. - version 1.1.0-1.cjo
  283. - changed installation in accordance with new rootkit installation
  284. procedure
  285. - changed installation root to conform to LSB. Use standard macros.
  286. - added recursive remove of old build root as prep for install phase
  287. * Wed Apr 28 2004 Doncho N. Gunchev - 1.0.9-0.mr700
  288. - dropped Requires: perl - rkhunter works without it
  289. - dropped the bash alignpatch (check the source or contact me)
  290. - various file mode fixes (.../tmp/, *.db)
  291. - optimized the %%files section - any new files in the
  292. current dirs will be fine - just %%{__install} them.
  293. * Mon Apr 26 2004 Michael Boelen - 1.0.8-0
  294. - Fixed missing md5blacklist.dat
  295. * Mon Apr 19 2004 Doncho N. Gunchev - 1.0.6-1.mr700
  296. - added missing /usr/local/rkhunter/db/md5blacklist.dat
  297. - patched to align results in --cronjob, I think rpm based
  298. distros have symlink /bin/sh -> /bin/bash
  299. - added --with/--without alignpatch for conditional builds
  300. (in case previous patch breaks something)
  301. * Sat Apr 03 2004 Michael Boelen / Joe Klemmer - 1.0.6-0
  302. - Update to 1.0.6
  303. * Mon Mar 29 2004 Doncho N. Gunchev - 1.0.0-0
  304. - initial .spec file