ae43e7
# segfaults
ae43e7
%{!?_with_curl: %{!?_without_curl: %global _without_curl --without-curl}}
ae43e7
ae43e7
Summary: Intrusion detection environment
ae43e7
Name: aide
ae43e7
Version: 0.15.1
122c0b
Release: 8%{?dist}
ae43e7
URL: http://sourceforge.net/projects/aide
ae43e7
License: GPLv2+
ae43e7
Group: Applications/System
ae43e7
Source0: http://downloads.sourceforge.net/aide/aide-%{version}.tar.gz
ae43e7
Source1: aide.conf
ae43e7
Source2: README.quickstart
ae43e7
Source3: aide.logrotate
ae43e7
# Customize the database file location in the man page.
ae43e7
Patch1: aide-0.14-man.patch
ae43e7
# fix aide in FIPS mode
ae43e7
Patch2: aide-0.15.1-fipsfix.patch
ae43e7
# warn if processing prelinked binary objects and the prelink binary is not available
ae43e7
Patch3: aide-0.15.1-prelinkwarn.patch
ae43e7
ae43e7
Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot-%(%{__id_u} -n)
ae43e7
BuildRequires: mktemp
ae43e7
BuildRequires: prelink elfutils-libelf-devel
ae43e7
%if 0%{?rhel} == 0
ae43e7
Buildrequires: mhash-devel
ae43e7
%endif
ae43e7
Buildrequires: zlib-devel libgcrypt-devel
ae43e7
Buildrequires: flex bison
ae43e7
Buildrequires: libattr-devel e2fsprogs-devel
ae43e7
Buildrequires: libacl-devel libselinux-devel
ae43e7
Buildrequires: audit-libs-devel >= 1.2.8-2
ae43e7
%if "%{?_with_curl}x" != "x"
ae43e7
Buildrequires: curl-devel
ae43e7
%endif
ae43e7
ae43e7
%description
ae43e7
AIDE (Advanced Intrusion Detection Environment) is a file integrity
ae43e7
checker and intrusion detection program.
ae43e7
ae43e7
ae43e7
%prep
ae43e7
%setup -q
ae43e7
%patch1 -p1 -b .man
ae43e7
%patch2 -p1 -b .fipsfix
ae43e7
%patch3 -p1 -b .prelinkwarn
ae43e7
ae43e7
%build
ae43e7
%configure --with-config_file=%{_sysconfdir}/aide.conf \
ae43e7
           --with-zlib \
ae43e7
           --disable-static \
ae43e7
%if 0%{?rhel} == 0
ae43e7
           --with-mhash \
ae43e7
%endif
ae43e7
           %{?_with_curl} %{?_without_curl} \
ae43e7
           --with-posix-acl \
ae43e7
           --with-selinux \
ae43e7
           --with-prelink \
ae43e7
           --with-xattr \
ae43e7
           --with-e2fsattrs \
ae43e7
           --with-audit
ae43e7
ae43e7
make
ae43e7
ae43e7
ae43e7
%install
ae43e7
rm -rf $RPM_BUILD_ROOT
ae43e7
make DESTDIR=$RPM_BUILD_ROOT bindir=%{_sbindir} install
ae43e7
mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/log/aide
ae43e7
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}
ae43e7
install -p %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}
ae43e7
mkdir -p -m0700 $RPM_BUILD_ROOT%{_localstatedir}/lib/aide
ae43e7
install -p %{SOURCE2} README.quickstart
ae43e7
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d
ae43e7
install -c -m 644 %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/aide
ae43e7
ae43e7
%clean
ae43e7
rm -rf $RPM_BUILD_ROOT
ae43e7
ae43e7
ae43e7
%files
ae43e7
%defattr(0644,root,root,0755)
ae43e7
%doc AUTHORS COPYING ChangeLog NEWS README doc/manual.html contrib/
ae43e7
%doc README.quickstart
ae43e7
%attr(0700,root,root) %{_sbindir}/aide
ae43e7
%{_mandir}/man1/*
ae43e7
%{_mandir}/man5/*
ae43e7
%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/aide.conf
ae43e7
%config(noreplace) %{_sysconfdir}/logrotate.d/aide
ae43e7
%dir %attr(0700,root,root) %{_localstatedir}/lib/aide
ae43e7
%dir %attr(0700,root,root) %{_localstatedir}/log/aide
ae43e7
ae43e7
ae43e7
%changelog
122c0b
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 0.15.1-8
122c0b
- Mass rebuild 2014-01-24
122c0b
122c0b
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 0.15.1-7
122c0b
- Mass rebuild 2013-12-27
122c0b
ae43e7
* Fri Nov 08 2013 Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6
ae43e7
- warn if processing prelinked binary objects and the prelink binary
ae43e7
  is not available
ae43e7
  Resolves: rbhz#1004826
ae43e7
ae43e7
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-5
ae43e7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
ae43e7
ae43e7
* Thu Nov 22 2012 Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-4
ae43e7
- added patch to fix aide in FIPS mode
ae43e7
- use only FIPS approved digest algorithms in aide.conf so that
ae43e7
  aide works by default in FIPS mode
ae43e7
ae43e7
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-3
ae43e7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
ae43e7
ae43e7
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-2
ae43e7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
ae43e7
ae43e7
* Thu Nov 11 2010 Steve Grubb <sgrubb@redhat.com> - 0.15.1-1
ae43e7
- New upstream release
ae43e7
ae43e7
* Tue May 18 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-5
ae43e7
- Apply 2 upstream bug fixes
ae43e7
ae43e7
* Tue May 18 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-4
ae43e7
- Use upstream's patch to fix bz 590566
ae43e7
ae43e7
* Sat May 15 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-3
ae43e7
- Fix bz 590561 aide does not detect the change of SElinux context
ae43e7
- Fix bz 590566 aide reports a changed file when it has not been changed
ae43e7
ae43e7
* Wed Apr 28 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-2
ae43e7
- Fix bz 574764 by replacing abort calls with exit
ae43e7
- Apply libgcrypt init patch
ae43e7
ae43e7
* Tue Mar 16 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-1
ae43e7
- New upstream release final 0.14
ae43e7
ae43e7
* Thu Feb 25 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-0.4.rc3
ae43e7
- New upstream release
ae43e7
ae43e7
* Thu Feb 25 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-0.3.rc2
ae43e7
- New upstream release
ae43e7
ae43e7
* Tue Feb 23 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-0.2.rc1
ae43e7
- Fix dirent detection on 64bit systems
ae43e7
ae43e7
* Mon Feb 22 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-0.1.rc1
ae43e7
- New upstream release
ae43e7
ae43e7
* Fri Feb 19 2010 Steve Grubb <sgrubb@redhat.com> - 0.13.1-16
ae43e7
- Add logrotate script and spec file cleanups
ae43e7
ae43e7
* Fri Dec 11 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-15
ae43e7
- Get rid of .dedosify files
ae43e7
ae43e7
* Wed Dec 09 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-14
ae43e7
- Revise patch for Initialize libgcrypt correctly (#530485)
ae43e7
ae43e7
* Sat Nov 07 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-13
ae43e7
- Initialize libgcrypt correctly (#530485)
ae43e7
ae43e7
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 0.13.1-12
ae43e7
- rebuilt with new audit
ae43e7
ae43e7
* Wed Aug 19 2009 Steve Grubb <sgrubb@redhat.com> 0.13.1-11
ae43e7
- rebuild for new audit-libs
ae43e7
- Correct regex for root's dot files (#509370)
ae43e7
ae43e7
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.13.1-10
ae43e7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
ae43e7
ae43e7
* Mon Jun 08 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-9
ae43e7
- Make aide smarter about prelinked files (Peter Vrabec)
ae43e7
- Add /lib64 to default config
ae43e7
ae43e7
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.13.1-7
ae43e7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
ae43e7
ae43e7
* Fri Jan 30 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-6
ae43e7
- enable xattr support and update config file
ae43e7
ae43e7
* Fri Sep 26 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 0.13.1-5
ae43e7
- fix selcon patch to apply without fuzz
ae43e7
ae43e7
* Fri Feb 15 2008 Steve Conklin <sconklin@redhat.com>
ae43e7
- rebuild for gcc4.3
ae43e7
ae43e7
* Tue Aug 21 2007 Michael Schwendt <mschwendt[AT]users.sf.net>
ae43e7
- rebuilt
ae43e7
ae43e7
* Sun Jul 22 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13.1-2
ae43e7
- Apply Steve Conklin's patch to increase displayed portion of
ae43e7
  selinux context.
ae43e7
ae43e7
* Sun Dec 17 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13.1-1
ae43e7
- Update to 0.13.1 release.
ae43e7
ae43e7
* Sun Dec 10 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13-1
ae43e7
- Update to 0.13 release.
ae43e7
- Include default aide.conf from RHEL5 as doc example file.
ae43e7
ae43e7
* Sun Oct 29 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-3.20061027cvs
ae43e7
- CAUTION! This changes the database format and results in a report of
ae43e7
  false inconsistencies until an old database file is updated.
ae43e7
- Check out CVS 20061027 which now contains Red Hat's
ae43e7
  acl/xattr/selinux/audit patches.
ae43e7
- Patches merged upstream.
ae43e7
- Update manual page substitutions.
ae43e7
ae43e7
* Mon Oct 23 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-2
ae43e7
- Add "memory leaks and performance updates" patch as posted
ae43e7
  to aide-devel by Steve Grubb.
ae43e7
ae43e7
* Sat Oct 07 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-1
ae43e7
- Update to 0.12 release.
ae43e7
- now offers --disable-static, so -no-static patch is obsolete
ae43e7
- fill last element of getopt struct array with zeroes
ae43e7
ae43e7
* Mon Oct 02 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-3
ae43e7
- rebuilt
ae43e7
ae43e7
* Mon Sep 11 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-2
ae43e7
- rebuilt
ae43e7
ae43e7
* Sun Feb 19 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-1
ae43e7
- Update to 0.11 release.
ae43e7
- useless-includes patch merged upstream.
ae43e7
- old Russian man pages not available anymore.
ae43e7
- disable static linking.
ae43e7
ae43e7
* Fri Apr  7 2005 Michael Schwendt <mschwendt[AT]users.sf.net>
ae43e7
- rebuilt
ae43e7
ae43e7
* Fri Nov 28 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.1
ae43e7
- Update to 0.10 release.
ae43e7
- memleaks patch merged upstream.
ae43e7
- rootpath patch merged upstream.
ae43e7
- fstat patch not needed anymore.
ae43e7
- Updated URL.
ae43e7
ae43e7
* Thu Nov 13 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.0.2.cvs20031104
ae43e7
- Added buildreq m4 to work around incomplete deps of bison package.
ae43e7
ae43e7
* Tue Nov 04 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.0.1.cvs20031104
ae43e7
- Only tar.gz available upstream.
ae43e7
- byacc not needed when bison -y is available.
ae43e7
- Installed Russian manual pages.
ae43e7
- Updated with changes from CVS (2003-11-04).
ae43e7
- getopt patch merged upstream.
ae43e7
- bison-1.35 patch incorporated upstream.
ae43e7
ae43e7
* Tue Sep 09 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.9-0.fdr.0.2.20030902
ae43e7
- Added fixes for further memleaks.
ae43e7
ae43e7
* Sun Sep 07 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.9-0.fdr.0.1.20030902
ae43e7
- Initial package version.
ae43e7