mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 16:35:02 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/utils/apparmor-utils.spec.in

315 lines
14 KiB
RPMSpec
Raw Normal View History

Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
# ----------------------------------------------------------------------
# Copyright (c) 2004, 2005 NOVELL (All rights reserved)
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, contact Novell, Inc.
# ----------------------------------------------------------------------
# norootforbuild
%if ! %{?distro:1}0
%define distro suse
%endif
Summary: AppArmor userlevel utilities that are useful in creating AppArmor profiles.
Name: apparmor-utils
Version: @@immunix_version@@
Convert the rest of the packages to symlinking in the common directory so that 'make dist' will work.
2006-11-04 21:34:47 +00:00
Release: @@repo_version@@
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
Group: Productivity/Security
Source0: %{name}-%{version}-@@repo_version@@.tar.gz
License: GPL
BuildRoot: %{?_tmppath:}%{!?_tmppath:/var/tmp}/%{name}-%{version}-build
BuildArch: noarch
Url: http://forge.novell.com/modules/xfmod/project/?apparmor
%if %{distro} == "rhel4"
# Bleah, on RHEL4, individual requirements on perl modules are
# calculated, even if the modules are conditionally used.
Requires: perl
Requires: /bin/sh
AutoReqProv: no
This patch modifies the aa-eventd daemon to use the Date::Parse module (TimeDate) package for parsing dates and fall back to using Date::Manip if Date::Parse isn't available -- Date::Manip is more commonly available, but is written solely in perl and is more general-purpose and heavyweight than Date::Parse. The DateTime package (datetime.perl.org) doesn't suffice as it it either uses Date::Manip internally and DateTime::Format::Strptime also isn't commonly available. Given that our regex for identifying dates in syslog is pretty static; POSIX::strptime (implementing strptime(3)) functionality would probably be the best way to go -- except that perl's POSIX doesn't include strptime and POSIX::strptime is another not commonly available package. Sigh.
2007-01-17 12:22:31 +00:00
Requires: perl-DateManip
%else
Requires: perl-TimeDate
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
%endif
Updated requirements for changes to libapparmor.
2007-08-20 15:07:43 +00:00
Requires: perl-DBI perl-DBD-SQLite perl-File-Tail perl-gettext perl-RPC-XML perl-TermReadKey perl-libapparmor
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
Obsoletes: subdomain-utils
Provides: subdomain-utils
update RPM spec, thanks to Christian Boltz. See https://bugzilla.novell.com/show_bug.cgi?id=619893
2010-12-20 12:01:23 -08:00
%if 0%{?suse_version} > 1120
# openSUSE 11.3 no longer has /usr/lib/perl5/vendor_perl in @INC
BuildRequires: perl-macros
Requires: perl = %{perl_version}
%define aa_perl_vendorlib %{perl_vendorlib}
%else
%define aa_perl_vendorlib %{_prefix}/lib/perl5/vendor_perl
%endif
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
%description
This provides some useful programs to help create and manage AppArmor
profiles. This package is part of a suite of tools that used to be
named SubDomain.
%prep
%setup -q
%build
[ "${RPM_BUILD_ROOT}" != "/" ] && rm -rf ${RPM_BUILD_ROOT}
%install
[ "${RPM_BUILD_ROOT}" != "/" ] && rm -rf ${RPM_BUILD_ROOT}
make install DESTDIR=${RPM_BUILD_ROOT} DISTRO=%{distro} \
BINDIR=${RPM_BUILD_ROOT}%{_prefix}/sbin/ \
update RPM spec, thanks to Christian Boltz. See https://bugzilla.novell.com/show_bug.cgi?id=619893
2010-12-20 12:01:23 -08:00
PERLDIR=${RPM_BUILD_ROOT}%{aa_perl_vendorlib}/Immunix \
Subject: Add manpages to utils package. Move the autodep(8), complain(8), enforce(8), logprof(8), genprof(8), unconfined(8), logprof.conf(5), and apparmor_status(8) manpages, along with their aa- form symlinks, to the utils package.
2007-04-03 19:13:35 +00:00
MANDIR=%{_mandir}
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
%clean
[ "${RPM_BUILD_ROOT}" != "/" ] && rm -rf ${RPM_BUILD_ROOT}
%files
%defattr(-,root,root)
%config /etc/apparmor/*
%{_prefix}/sbin/*
update RPM spec, thanks to Christian Boltz. See https://bugzilla.novell.com/show_bug.cgi?id=619893
2010-12-20 12:01:23 -08:00
%{aa_perl_vendorlib}/*
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
%{_prefix}/share/locale/*/*/apparmor-utils.mo
%dir /var/log/apparmor
%dir /etc/apparmor
Subject: Add manpages to utils package. Move the autodep(8), complain(8), enforce(8), logprof(8), genprof(8), unconfined(8), logprof.conf(5), and apparmor_status(8) manpages, along with their aa- form symlinks, to the utils package.
2007-04-03 19:13:35 +00:00
%{_mandir}/man*/*
%doc *.[0-9].html
%doc common/apparmor.css
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
%preun
if [ -x "/usr/sbin/sd-event-dispatch.pl" -a -e "/var/run/sd-event-dispatch.init.pid" ] ; then
echo "Shutting down SubDomain Event daemon" ;
/sbin/killproc -p /var/run/sd-event-disptach.init.pid -TERM /usr/sbin/sd-event-dispatch.pl >& /dev/null ;
fi
# only do the following when uninstalling
if [ "$1" = 0 ] ; then
if [ -x "/usr/sbin/aa-eventd" -a -e "/var/run/aa-eventd.pid" ] ; then
echo "Shutting down AppArmor Event daemon" ;
/sbin/killproc -p /var/run/aa-eventd.pid -TERM /usr/sbin/aa-eventd >& /dev/null;
fi
fi
%changelog
update RPM spec, thanks to Christian Boltz. See https://bugzilla.novell.com/show_bug.cgi?id=619893
2010-12-20 12:01:23 -08:00
* Wed Jul 7 22:18:14 UTC 2010 - opensuse@cboltz.de
- change perl module path to perl_vendorlib macro (hardcoded path broke,
bnc#619893)
merge over update of .spec %changes from r1083
2008-02-19 18:49:35 +00:00
* Tue Nov 6 2007 - dominic_r@mercenarylinux.com
- (Merged from trunk -r1015)
Added handling to correctly check the result of the profile development
run and reset the profile mode to enforce when the profile development
run exits without an error.
Addresses novell bug: https://bugzilla.novell.com/show_bug.cgi?id=328045
* Tue Nov 6 2007 - dominic_r@mercenarylinux.com
- (Merged from trunk -r1014)
Ignore complain flags when up|down loading profiles to|from the
repository. This makes the repository agnostic to profile mode
(complain/enforce) - users must manage this locally via
aa-complain/aa-enforce.
Addresses novell bug: https://bugzilla.novell.com/show_bug.cgi?id=328033
* Tue Nov 6 2007 - dominic_r@mercenarylinux.com
- (Merged from trunk -r 1013)
Modified code to check the repository for new profile when:
- processing an unknown hat/execute rejection if its not already in
the profile
- at the start of processing all the remain events for the profile
Addresses novell bug: https://bugzilla.novell.com/show_bug.cgi?id=328707
* Tue Nov 6 2007 - dominic_r@mercenarylinux.com
- (Merged from trunk)
Updated regex used to detect syslog messages (from bug reported against
Ubuntu gutsy)
* Wed Oct 17 2007 - dominic_r@mercenarylinux.com
- Maintenance branch for AppArmor 2.1
* Fri Sep 28 2007 - ddrewelow@suse.de
- Fix for bug #329476. The mode validation regexp has been updated to
support additional values.
* Fri Sep 28 2007 - dreynolds@suse.de
- Don't try to read inactive profile directory if it doesn't exist. Fix
based on feedback from mathiaz@ubuntu.com and from bug report:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/141128.
* Sun Sep 16 2007 - dreynolds@suse.de
- Change the default repository to
http://apparmor.opensuse.org/backend/api - the host for the production
repository.
* Sun Sep 16 2007 - dreynolds@suse.de
- Update to log parsing to correctly unpack the hex encoded values passed
from the module: name, name2, and profile. (fix from jmichael@suse.de)
* Sun Sep 16 2007 - dreynolds@suse.de
- Remove the confirmation prompt for confirm_and_finish - this was a
duplicate prompt after the repository changes to save_profiles.
* Sun Sep 16 2007 - dreynolds@suse.de
- Add support for network toggles, append, and locking to the YaST2
EditProfile wizard.
* Fri Sep 14 2007 - ddrewelow@suse.de
- Fixes (#310454) to support new audit log format and new libapparmor1.
* Mon Sep 10 2007 - dreynolds@suse.de
- Update the logfile parsing in the tools to support syslog (in addition
to LAF) as a source of AppArmor module messages.
* Mon Sep 10 2007 - dreynolds@suse.de
- Very basic user feedback when connections are made to a remote
repository. For genprof/logprof just report "Connecting to the
repository". For yast display a dialog.
* Mon Sep 10 2007 - dreynolds@suse.de
- Update the eventd schema to support the mode_deny mode_req types
reported by the latest apparmor module in its rejection/permitting
messages.
* Mon Aug 20 2007 - ddrewelow@suse.de
- Updated requirements for changes to libapparmor.
* Mon Aug 20 2007 - ddrewelow@suse.de
- Updated sqlite db and related functions to support new parser and
libapparmor.
* Fri Aug 17 2007 - dreynolds@suse.de
- Missing shortcut fixes for german.
* Fri Aug 17 2007 - dreynolds@suse.de
- Minor changes to ensure that removal of the repository section in
logprof.conf disables repository integration.
* Fri Aug 17 2007 - dreynolds@suse.de
- Remove default/required hats for ssh in logprof.conf
* Thu Aug 16 2007 - dreynolds@suse.de
- Fixes for "mandatory profile not found" profiling bug, empty configs in
logprof.conf generating undefined value errors, repository code
prompting user even if no configuration is present that specifies a
default repository.
* Thu Aug 16 2007 - dreynolds@suse.de
- Updated translations for missing shortcuts in msgstr fields.
* Wed Aug 15 2007 - seth_arnold@suse.de
- new audit manpage from Mathias Gug
* Wed Aug 15 2007 - dreynolds@suse.de
- utitlity to look for problems in the po files.
* Wed Aug 15 2007 - dreynolds@suse.de
- Fix problems with missing hotkey for "(S)can for SubDomain Events" in
genprof. Replace occurances of SubDomain in msgstr with AppArmor.
* Wed Aug 15 2007 - dreynolds@suse.de
- Added support for capablities and network toggles in #includes.
Make the location of logger configurable via /etc/apparmor/logprof.conf
2007-08-14 22:07:40 +00:00
* Tue Aug 14 2007 - sbeattie@suse.de
- Support configurable locations of logger
Subject: Add manpages to utils package. Move the autodep(8), complain(8), enforce(8), logprof(8), genprof(8), unconfined(8), logprof.conf(5), and apparmor_status(8) manpages, along with their aa- form symlinks, to the utils package.
2007-04-03 19:13:35 +00:00
* Tue Apr 3 2007 - sbeattie@suse.de
- Add manpages to package
This patch makes the utils tools consistent with the initscript as to which sets of files they ignore (rpm backups, dotfiles, and emacs backups). It moves the tests into a common function so that modifications only need to occur in one location.
2007-03-23 18:52:22 +00:00
* Fri Mar 23 2007 - sbeattie@suse.de
- ignore emacs backup files, make consistent with initscript
The audit user space daemon has to be configured specially to include the apparmor defined event numbers. genprof, logprof, and aa-eventd should all still function correctly even when the audit daemon is not configured correctly. This commit addresses that as well as adding the needed dependency on perl-gettext.
2007-01-17 12:00:43 +00:00
* Wed Jan 17 2007 - sbeattie@suse.de
This patch modifies the aa-eventd daemon to use the Date::Parse module (TimeDate) package for parsing dates and fall back to using Date::Manip if Date::Parse isn't available -- Date::Manip is more commonly available, but is written solely in perl and is more general-purpose and heavyweight than Date::Parse. The DateTime package (datetime.perl.org) doesn't suffice as it it either uses Date::Manip internally and DateTime::Format::Strptime also isn't commonly available. Given that our regex for identifying dates in syslog is pretty static; POSIX::strptime (implementing strptime(3)) functionality would probably be the best way to go -- except that perl's POSIX doesn't include strptime and POSIX::strptime is another not commonly available package. Sigh.
2007-01-17 12:22:31 +00:00
- Fall back to Date::Manip if Date::Parse is not available
* Wed Jan 17 2007 - sbeattie@suse.de
The audit user space daemon has to be configured specially to include the apparmor defined event numbers. genprof, logprof, and aa-eventd should all still function correctly even when the audit daemon is not configured correctly. This commit addresses that as well as adding the needed dependency on perl-gettext.
2007-01-17 12:00:43 +00:00
- Add perl-gettext to list of dependencies
Fix from PLD/Arkadiusz Miskiewicz <arekm@maven.pl> to mark ksh to not be profiled.
2006-12-12 11:05:46 +00:00
* Tue Dec 12 2006 - sbeattie@suse.de
- Add ksh to list of shells that should not be profiled
Added checks for profile syntax and error dialogs in the yastui.
2006-10-05 21:29:22 +00:00
* Thu Oct 5 2006 - <dreynolds@suse.de> 2.0-7
- add support syntax checking for profiles.
Changes to support new language features - exec modifiers Ux|Px and m bit for mmap PROT_EXEC.
2006-08-04 16:38:22 +00:00
* Thu Jun 01 2006 - jmichael@suse.de
- add support for the new m mode (#175388)
- add support for the new Px/Ux modes (#172061)
- make aaeventd process all of the events in the log file, not
just those that occur after it's already running. (#154239)
- look for the changing_profile hint on the next AppArmor or audit
line in the log file, not strictly the very next in the file.
(#175421)
Set svn:keywords attributes on files, modify makefiles to point at new common/ location after converting to novell forge svn repo.
2006-04-12 19:31:08 +00:00
* Wed Apr 12 2006 Steve Beattie <sbeattie@suse.de>
- Move to novell forge svn; fixup build issues due to new svn layout
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
* Mon Apr 10 2006 Steve Beattie <sbeattie@suse.de>
- Get rid of obsolete license files
* Sun Mar 26 2006 Jesse Michael <jmichael@suse.de>
- Move vim syntax file to the vim package
* Fri Mar 3 2006 Steve Beattie <sbeattie@suse.de> 2.0-4
- switch to use perl-File-Tail and monitor both syslog and audit.log
* Fri Mar 3 2006 Seth Arnold <seth.arnold@suse.de> 2.0-4.1
- Add /srv to severity.db #153313
* Fri Feb 10 2006 Dominic Reynolds <dreynolds@suse.de> 2.0-3.11
- Ignore vsdo lib output from ldd for autodep
- Include counter (and time) in genprof logmark
* Sun Feb 5 2006 Steve Beattie <sbeattie@suse.de> 2.0-3.10
- Only kill aa-eventd on uninstall, not for upgrades
- (jmichael) in reporting, enable/start aaeventd if not already
- Fix signal handling problems when being shutdown
* Mon Jan 30 2006 Seth Arnold <seth.arnold@suse.de> 2.0-3.7
- aa-audit, aa-autodep, aa-status symlinks
* Fri Jan 27 2006 Dominic Reynolds <dreynolds@suse.de> 2.0-3.6
- Changes to work with profiles located under /etc/apparmor.d.
- disable AALite check
- srarnold: don't drop variables
* Thu Jan 26 2006 Steve Beattie <sbeattie@suse.de> 2.0-3.3
- Fix SubDomain.pm and apparmor_status to deal with module/parser
renaming
* Wed Jan 25 2006 Dominic Reynolds <dreynolds@suse.de> 2.0-3.2
- Renaming changes: apparmor_status, apparmor.vim, aa-eventd, and
aa- prefix for profile utils
* Sun Jan 22 2006 Dominic Reynolds <dreynolds@suse.de> 2.0-3.1
- Added support for read events from the audit system to:
genprof/logprof and sd-event-dispatch.pl
* Wed Jan 4 2006 Steve Beattie <sbeattie@suse.de> 2.0-3
- Add svn repo to tarball
* Thu Dec 8 2005 Steve Beattie <sbeattie@suse.de> 2.0-2
- drewelow: fix parsing/sql errors in reports bug #137742
- dreynolds: fix unconfined to support securityfs
- jmichael: fix for xattr handling in genprof/logprof
- jmichael: fix genprof/logprof to support securityfs
- fix textdomain() calls to reflect new package name
- fix references to old package name within .po files
* Wed Dec 7 2005 Steve Beattie <sbeattie@suse.de> 2.0-1
- Reset version for SUSE autobuild inclusion
* Wed Nov 30 2005 Steve Beattie <sbeattie@suse.de> 1.2-26
- Rename package to apparmor-utils
* Wed Nov 30 2005 Jesse Michael <jmichael@suse.de> 1.2-25_imnx
- Change license to GPL
* Tue Nov 29 2005 Steve Beattie <sbeattie@suse.de> 1.2-24_imnx
- Add subdomain_status script
* Wed Nov 2 2005 Jesse Michael <jmichael@suse.de> 1.2-23_imnx
- make autodep, logprof, and genprof ignore any user specified $PATH settings
* Wed Oct 19 2005 Jesse Michael <jmichael@suse.de> 1.2-22_imnx
- sd-event-dispatch.pl now under rcsubdomain control
* Thu Sep 8 2005 Steve Beattie <sbeattie@suse.de> 1.2-21_imnx
- sd-event-dispatch.pl now under rcsubdomain control
* Wed Sep 2 2005 Jesse Michael <jmichael@suse.de> 1.2-20_imnx
- handle access(directory, X_OK) correctly again
- stop event dispatcher if we uninstall the rpm
- fix bug where event dispatcher wasn't inserting events in db sometimes
* Wed Sep 1 2005 Jesse Michael <jmichael@suse.de> 1.2-19_imnx
- fork/exec tracking and localization fixes
* Wed Aug 17 2005 Jesse Michael <jmichael@suse.de> 1.2-18_imnx
- move perl modules from site_perl to vendor_perl
* Fri Aug 5 2005 Dominic Reynolds <dreynolds@suse.de> 1.2-17_imnx
- buildcache path change
* Mon May 23 2005 Steve beattie <sbeattie@novell.com> 1.2-12_imnx
- "Fix" the perl module dependencies for RHEL4
* Mon May 16 2005 David Drewelow <davidd@immunix.com> 1.2-9_imnx
- Changed /etc/immunix to /etc/apparmor
* Sun Apr 10 2005 Seth Arnold <sarnold@immunix.com> 1.2-9_imnx
- Merge i18n support from 1.1
* Wed Mar 9 2005 Steve Beattie <steve@immunix.com> 1.2-3_imnx
- Fix some internal handling around % distro
* Mon Feb 14 2005 Steve Beattie <steve@immunix.com> 1.2-2_imnx
- Add support for FC3/RHEL4 era redhat distros
* Fri Feb 4 2005 Seth Arnold <sarnold@immunix.com> 1.2-1_imnx
- Reversion to 1.2
* Thu Nov 11 2004 Steve Beattie <steve@immunix.com> 1.1-4_imnx
- Support different toolsets on a per distro basis
* Wed Nov 10 2004 Steve Beattie <steve@immunix.com> 1.1-3_imnx
- Merge in new-style build support.
* Tue Oct 12 2004 Steve Beattie <steve@immunix.com> 1.1-1_imnx
- re-version package for shass-1.1 release
* Mon Aug 30 2004 Steve Beattie <steve@immunix.com> 7.3-30_imnx
- Fix up various copyright notices.
* Fri Jul 23 2004 Steve Beattie <steve@immunix.com> 7.3-25_imnx
- Red Hat 9 still uses vim 6.1
* Wed Jul 21 2004 Steve Beattie <steve@immunix.com> 7.3-24_imnx
- Added the dependency on perl-TermReadKey
* Wed Jul 21 2004 Steve Beattie <steve@immunix.com> 7.3-23_imnx
- first attempt to make rpm cross-distro
* Thu May 6 2004 Steve Beattie <steve@immunix.com> 7.3-14.SUSE_imnx
- Fix to unconfined due to different ls output
* Thu May 6 2004 Steve Beattie <steve@immunix.com> 7.3-11.SUSE_imnx
- updates to autodep, logprof, and unconfined.
* Mon May 3 2004 Seth Arnold <sarnold@immunix.com> 7.3-10.SUSE_imnx
- Fix up the description text to no longer mention /usr/libexec/subdomain
* Mon Apr 26 2004 Steve Beattie <steve@wirex.com> 7.3-9.SUSE_imnx
- Added logprof.pl
Reference in a new issue Copy permalink