Package settings-s: Specfile
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 | Name: settings-s Version: 0.4.1 Release: alt0.M90P.1 Summary: settings for custom distro License: GPLv2 Group: Other Url: http://git.altlinux.org/people/nbr/packages/settings-s.git Packager: Denis Medvedev <nbr@altlinux.org> Source: %name-%version.tar BuildArch: noarch Requires: checker %description These are settings for custom distro. %package -n integ Summary: integrity checker script and settings Group: System/Configuration/Other Requires: systemd Requires: osec-controls Requires: osec-cronjob >= 1.3.1-alt1.M90P.1 %description -n integ Integrity check setup only %package -n installer-integ-stage2 Summary: Run integrity check after install Group: System/Configuration/Other %description -n installer-integ-stage2 Run integrity check after install (installer files). %package -n installer-integ-stage3 Summary: Run integrity check after install Group: System/Configuration/Other Requires: integ = %version-%release Requires: osec-controls %description -n installer-integ-stage3 Run integrity check after install (chroot files). %prep %setup %install mkdir -p %buildroot%_datadir/install2/postinstall.d mkdir -p %buildroot/sbin mkdir -p %buildroot%_unitdir mkdir -p %buildroot/%_sysconfdir/firsttime.d mkdir -p %buildroot/lib/systemd/system-preset install -Dm 0644 65-integrity.preset %buildroot/lib/systemd/system-preset/ install -Dm 0755 65-settings.sh %buildroot%_datadir/install2/postinstall.d/ install -Dm 0755 90-integrity-init.sh %buildroot%_datadir/install2/postinstall.d/ install -Dm 0644 integalert.service %buildroot%_unitdir/ install -Dm 0700 integalert %buildroot/sbin/ %post -n integ if [ $1 -ge 2 ]; then if systemctl -q is-enabled integalert.service; then systemctl daemon-reload systemctl -q preset integalert.service fi fi %files %_datadir/install2/postinstall.d/65-settings.sh %files -n installer-integ-stage2 %_datadir/install2/postinstall.d/90-integrity-init.sh %files -n installer-integ-stage3 %files -n integ %_unitdir/integalert.service /lib/systemd/system-preset/65-integrity.preset /sbin/integalert %changelog * Mon Oct 05 2020 Paul Wolneykien <manowar@altlinux.org> 0.4.1-alt0.M90P.1 - Build version 0.4.1-alt1 for the p9 branch. * Fri Oct 02 2020 Paul Wolneykien <manowar@altlinux.org> 0.4.1-alt1 - Set integalert service state from its preset after system installation. * Thu Oct 01 2020 Paul Wolneykien <manowar@altlinux.org> 0.4-alt0.M90P.1 - Build version 0.4-alt1 for the p9 branch. - Require p9 osec-cronjob version: >= 1.3.1-alt1.M90P.1. * Thu Oct 01 2020 Paul Wolneykien <manowar@altlinux.org> 0.4-alt1 - Use "IMMUTABLE_DATABASE" configuration option for read-only osec runs. This requires osec-cronjob >= 1.3.1-alt2. * Mon Sep 14 2020 Paul Wolneykien <manowar@altlinux.org> 0.3-alt0.M90P.2 - Setup OSEC for full journal output after integrity database initialization after install. - Update: Make integ inself require osec-controls. - Moved postinstall.d/90-integrity-init.sh to the new stage2 package. - Require osec-cronjob >= 1.3.0-alt0.M90P.2 (for READ_ONLY option). - Don't modify the main pipe.conf file after 'integ' package installation. - Always create /var/log/lastosec_logs. - Don't display a warning in "fix" mode. - Run osec using 'integalert' and 'integalert_fix' sub-configs. - Initialize OSEC after install, don't initialize it at first boot. - Setup osec.cron for read-only use and full journal output after install. * Mon Sep 07 2020 Denis Medvedev <nbr@altlinux.org> 0.3-alt3 - added missing requires, set control of osec to journal (essential). * Mon Sep 07 2020 Denis Medvedev <nbr@altlinux.org> 0.3-alt2 - revert direct execution of osec from integalert, lastosec data is needed too. * Sat Sep 05 2020 Alexey Shabalin <shaba@altlinux.org> 0.3-alt1 - update systemd unit - not requires plymouth - improve failure output - direct execute osec for check integrity in integalert * Mon Oct 28 2019 Denis Medvedev <nbr@altlinux.org> 0.2-alt5 - reenable service (to switch from required to wanted from sysinit) only when it is an upgrade, not on initial install. * Fri Oct 11 2019 Denis Medvedev <nbr@altlinux.org> 0.2-alt4 - force systemd reconfigure dependencies, fix archiving of osec messages * Wed Oct 09 2019 Denis Medvedev <nbr@altlinux.org> 0.2-alt3 - force plymouth quit on integrity error * Wed Oct 09 2019 Denis Medvedev <nbr@altlinux.org> 0.2-alt2 - integalert wanted, not required for sysinit by default * Wed Oct 09 2019 Denis Medvedev <nbr@altlinux.org> 0.2-alt1 - fix integalert behavour, see nagwad package for modified osec.pipe. Also disabled interruption of boot by default * Mon Oct 07 2019 Denis Medvedev <nbr@altlinux.org> 0.1-alt4 - Fixed wrong separator in Conflicts line. Also fixed permissions on a unit. * Wed Sep 25 2019 Denis Medvedev <nbr@altlinux.org> 0.1-alt3 - latest update to sisyphus * Thu Aug 22 2019 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.18 - fixed dependencies for integalert service, avoiding loops. * Wed Mar 20 2019 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.17 - do not start service, it is needed only on boot. * Mon Mar 18 2019 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.16 - fixes on integ integalert service * Wed Mar 28 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.15 - grub is modified adding option in some other place. Removed addition of duplicated entry * Mon Mar 26 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.14 - fixed delimiters * Mon Mar 26 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.13 - removed perl parts of settings * Thu Mar 22 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.12 - fixed place of postinstall.d * Wed Mar 21 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.11 - moved to postinstall.d, added features from branding * Thu Mar 01 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.10 - separated to two packets: general settings and integrity service Removed rhosts from skel: it harms selinux settings. * Thu Jan 18 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.9 - integrity check strictly before user login now * Wed Jan 17 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.8 - added "Before" to unit to make it start before DM * Wed Jan 17 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.7 - changed wanted to required in unit * Wed Jan 17 2018 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.6 - added alerting on integrity checks on boot * Wed Dec 13 2017 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.5 - added fixed rhosts, added dependency to custom settings checker * Mon Dec 11 2017 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.3 - Updated settings * Fri Dec 01 2017 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.2 - fixed permissions * Wed Nov 29 2017 Denis Medvedev <nbr@altlinux.org> 0.1-alt0.M80C.1 - backport to c8 * Wed Nov 29 2017 Denis Medvedev <nbr@altlinux.org> 0.1-alt1 Initial release |