11423e
Summary:        Intrusion detection environment
11423e
Name:           aide
11423e
Version:        0.16
f8b687
Release:        14%{?dist}.1
11423e
URL:            http://sourceforge.net/projects/aide
11423e
License:        GPLv2+
11423e
Source0:        %{url}/files/aide/%{version}/%{name}-%{version}.tar.gz
11423e
Source1:        aide.conf
11423e
Source2:        README.quickstart
11423e
Source3:        aide.logrotate
11423e
11423e
BuildRequires:  gcc
11423e
BuildRequires:  make
11423e
BuildRequires:  bison flex
11423e
BuildRequires:  pcre-devel
11423e
BuildRequires:  libgpg-error-devel libgcrypt-devel
11423e
BuildRequires:  zlib-devel
11423e
BuildRequires:  libcurl-devel
11423e
BuildRequires:  libacl-devel
11423e
BuildRequires:  pkgconfig(libselinux)
11423e
BuildRequires:  libattr-devel
11423e
BuildRequires:  e2fsprogs-devel
11423e
Buildrequires:  audit-libs-devel
11423e
9f71bc
Requires: libgcrypt >= 1.8.5
9f71bc
11423e
# Customize the database file location in the man page.
11423e
Patch1: aide-0.16rc1-man.patch
11423e
# fix aide in FIPS mode
11423e
Patch2: aide-0.16b1-fipsfix.patch
11423e
11423e
Patch3: aide-0.15-syslog-format.patch
11423e
Patch4: aide-0.16-crypto-disable-haval-and-others.patch
11423e
Patch5: coverity.patch
11423e
Patch6: aide-0.16-crash-elf.patch
11423e
11423e
# 1676487 - Null pointer dereference fix spotted by coverity
11423e
Patch7: coverity2.patch
11423e
f8b687
# 2041956 - CVE-2021-45417 aide: heap-based buffer overflow on outputs larger than B64_BUF
f8b687
Patch8: aide-0.16-CVE-2021-45417.patch
f8b687
11423e
%description
11423e
AIDE (Advanced Intrusion Detection Environment) is a file integrity
11423e
checker and intrusion detection program.
11423e
11423e
%prep
11423e
%autosetup -p1
11423e
11423e
cp -a %{S:2} .
11423e
11423e
%build
11423e
%configure  \
11423e
  --disable-static \
11423e
  --with-config_file=%{_sysconfdir}/aide.conf \
11423e
  --with-gcrypt \
11423e
  --with-zlib \
11423e
  --with-curl \
11423e
  --with-posix-acl \
11423e
  --with-selinux \
11423e
  --with-xattr \
11423e
  --with-e2fsattrs \
11423e
  --with-audit
11423e
11423e
%make_build
11423e
11423e
%install
11423e
%make_install bindir=%{_sbindir}
11423e
install -Dpm0644 -t %{buildroot}%{_sysconfdir} %{S:1}
11423e
install -Dpm0644 %{S:3} %{buildroot}%{_sysconfdir}/logrotate.d/aide
11423e
mkdir -p %{buildroot}%{_localstatedir}/log/aide
11423e
mkdir -p -m0700 %{buildroot}%{_localstatedir}/lib/aide
11423e
11423e
%files
11423e
%license COPYING
11423e
%doc AUTHORS ChangeLog NEWS README doc/manual.html contrib/
11423e
%doc README.quickstart
11423e
%{_sbindir}/aide
11423e
%{_mandir}/man1/*.1*
11423e
%{_mandir}/man5/*.5*
11423e
%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/aide.conf
11423e
%config(noreplace) %{_sysconfdir}/logrotate.d/aide
11423e
%dir %attr(0700,root,root) %{_localstatedir}/lib/aide
11423e
%dir %attr(0700,root,root) %{_localstatedir}/log/aide
11423e
11423e
%changelog
f8b687
* Tue Jan 25 2022 Radovan Sroka <rsroka@redhat.com> - 0.16.14.1
f8b687
- backported fix for CVE-2021-45417
f8b687
  resolves: rhbz#2041956
f8b687
9f71bc
* Tue Jun 30 2020 Radovan Sroka <rsroka@redhat.com> = 0.16.14
9f71bc
- strict require for libgcrypt
9f71bc
  resolves: rhbz#1852407
9f71bc
1fe35b
* Tue May 19 2020 Attila Lakatos <alakatos@redhat.com> - 0.16-13
1fe35b
- RHEL 8.3
1fe35b
- minor edit of aide.conf to make it consistent
1fe35b
  resolves: rhbz#1740754
1fe35b
11423e
* Mon Apr 06 2020 Attila Lakatos <alakatos@redhat.com> - 0.16-12
11423e
- RHEL 8.3
11423e
- minor edit of aide.conf
11423e
  resolves: rhbz#1740754
11423e
- do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
11423e
  resolves: rhbz#1806323
11423e
11423e
* Wed Jul 24 2019 Radovan Sroka <rsroka@redhat.com> - 0.16-11
11423e
- rebuild
11423e
- minor edit of aide.conf
11423e
11423e
* Tue Jul 23 2019 Radovan Sroka <rsroka@redhat.com> - 0.16-10
11423e
- respin
11423e
- minor edit of aide.conf
11423e
11423e
* Tue Jul 23 2019 Radovan Sroka <rsroka@redhat.com> - 0.16-9
11423e
- Null pointer dereference fix spotted by coverity
11423e
  resolves: rhbz#1676487
11423e
- aide.conf needs updates for RHEL 8
11423e
  resolves: rhbz#1708015
11423e
11423e
* Tue Oct 09 2018 Radovan Sroka <rsroka@redhat.com> - 0.16-8
11423e
- fixed wrong line wrapping of messages in the syslog format
11423e
  resolves: rhbz#1628153
11423e
- fixed coverity issues
11423e
  resolves: rhbz#1602441
11423e
- fixed crash when processing .dynamic section
11423e
  resolves: rhbz#1597250
11423e
11423e
* Wed Aug 29 2018 Radovan Sroka <rsroka@redhat.com> - 0.16-7
11423e
- fixed crypto problem with libgcrypt (fips)
11423e
- resolves: rhbz#1623045
11423e
11423e
* Wed Aug 22 2018 Radovan Sroka <rsroka@redhat.com> - 0.16-6
11423e
- ported syslog format from rhel7
11423e
  resolves: rhbz#1584136
11423e
- fixed crypto problem with libgcrypt
11423e
  resolves: rhbz#1584120
11423e
11423e
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.16-5
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
11423e
11423e
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.16-4
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
11423e
11423e
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.16-3
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
11423e
11423e
* Wed Apr 05 2017 Radovan Sroka <rsroka@redhat.com> - 0.16-2
11423e
- fixed upstream link
11423e
11423e
* Tue Apr 04 2017 Radovan Sroka <rsroka@redhat.com> - 0.16-1
11423e
- rebase to stable v0.16
11423e
- specfile cleanup
11423e
- make doc readable
11423e
  resolves: #1421355
11423e
- make aide binary runable for any user
11423e
  resolves: #1421351
11423e
11423e
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.16-0.3.rc1
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
11423e
11423e
* Tue Jul 12 2016 Tomas Sykora <tosykora@redhat.com> - 0.16-0.2.rc1
11423e
- New upstream devel version
11423e
11423e
* Mon Jun 20 2016 Tomas Sykora <tosykora@redhat.com> - 0.16-0.1.b1
11423e
- New upstream devel version
11423e
11423e
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.15.1-12
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
11423e
11423e
* Sat Jul 25 2015 Till Maas <opensource@till.name> - 0.15.1-11
11423e
- Remove prelink dependency because prelink was retired
11423e
11423e
* Tue Jun 16 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-10
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
11423e
11423e
* Fri Aug 15 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-9
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
11423e
11423e
* Fri Jul 18 2014 Yaakov Selkowitz <yselkowi@redhat.com> - 0.15.1-8
11423e
- Fix FTBFS with -Werror=format-security (#1036983, #1105942)
11423e
- Avoid prelink BR on aarch64, ppc64le (#924977, #1078476)
11423e
11423e
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-7
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
11423e
11423e
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-6
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
11423e
11423e
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-5
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
11423e
11423e
* Thu Nov 22 2012 Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-4
11423e
- added patch to fix aide in FIPS mode
11423e
- use only FIPS approved digest algorithms in aide.conf so that
11423e
  aide works by default in FIPS mode
11423e
11423e
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-3
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
11423e
11423e
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.15.1-2
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
11423e
11423e
* Thu Nov 11 2010 Steve Grubb <sgrubb@redhat.com> - 0.15.1-1
11423e
- New upstream release
11423e
11423e
* Tue May 18 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-5
11423e
- Apply 2 upstream bug fixes
11423e
11423e
* Tue May 18 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-4
11423e
- Use upstream's patch to fix bz 590566
11423e
11423e
* Sat May 15 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-3
11423e
- Fix bz 590561 aide does not detect the change of SElinux context
11423e
- Fix bz 590566 aide reports a changed file when it has not been changed
11423e
11423e
* Wed Apr 28 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-2
11423e
- Fix bz 574764 by replacing abort calls with exit
11423e
- Apply libgcrypt init patch
11423e
11423e
* Tue Mar 16 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-1
11423e
- New upstream release final 0.14
11423e
11423e
* Thu Feb 25 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-0.4.rc3
11423e
- New upstream release
11423e
11423e
* Thu Feb 25 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-0.3.rc2
11423e
- New upstream release
11423e
11423e
* Tue Feb 23 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-0.2.rc1
11423e
- Fix dirent detection on 64bit systems
11423e
11423e
* Mon Feb 22 2010 Steve Grubb <sgrubb@redhat.com> - 0.14-0.1.rc1
11423e
- New upstream release
11423e
11423e
* Fri Feb 19 2010 Steve Grubb <sgrubb@redhat.com> - 0.13.1-16
11423e
- Add logrotate script and spec file cleanups
11423e
11423e
* Fri Dec 11 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-15
11423e
- Get rid of .dedosify files
11423e
11423e
* Wed Dec 09 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-14
11423e
- Revise patch for Initialize libgcrypt correctly (#530485)
11423e
11423e
* Sat Nov 07 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-13
11423e
- Initialize libgcrypt correctly (#530485)
11423e
11423e
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 0.13.1-12
11423e
- rebuilt with new audit
11423e
11423e
* Wed Aug 19 2009 Steve Grubb <sgrubb@redhat.com> 0.13.1-11
11423e
- rebuild for new audit-libs
11423e
- Correct regex for root's dot files (#509370)
11423e
11423e
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.13.1-10
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
11423e
11423e
* Mon Jun 08 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-9
11423e
- Make aide smarter about prelinked files (Peter Vrabec)
11423e
- Add /lib64 to default config
11423e
11423e
* Mon Feb 23 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.13.1-7
11423e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
11423e
11423e
* Fri Jan 30 2009 Steve Grubb <sgrubb@redhat.com> - 0.13.1-6
11423e
- enable xattr support and update config file
11423e
11423e
* Fri Sep 26 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 0.13.1-5
11423e
- fix selcon patch to apply without fuzz
11423e
11423e
* Fri Feb 15 2008 Steve Conklin <sconklin@redhat.com>
11423e
- rebuild for gcc4.3
11423e
11423e
* Tue Aug 21 2007 Michael Schwendt <mschwendt[AT]users.sf.net>
11423e
- rebuilt
11423e
11423e
* Sun Jul 22 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13.1-2
11423e
- Apply Steve Conklin's patch to increase displayed portion of
11423e
  selinux context.
11423e
11423e
* Sun Dec 17 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13.1-1
11423e
- Update to 0.13.1 release.
11423e
11423e
* Sun Dec 10 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13-1
11423e
- Update to 0.13 release.
11423e
- Include default aide.conf from RHEL5 as doc example file.
11423e
11423e
* Sun Oct 29 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-3.20061027cvs
11423e
- CAUTION! This changes the database format and results in a report of
11423e
  false inconsistencies until an old database file is updated.
11423e
- Check out CVS 20061027 which now contains Red Hat's
11423e
  acl/xattr/selinux/audit patches.
11423e
- Patches merged upstream.
11423e
- Update manual page substitutions.
11423e
11423e
* Mon Oct 23 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-2
11423e
- Add "memory leaks and performance updates" patch as posted
11423e
  to aide-devel by Steve Grubb.
11423e
11423e
* Sat Oct 07 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-1
11423e
- Update to 0.12 release.
11423e
- now offers --disable-static, so -no-static patch is obsolete
11423e
- fill last element of getopt struct array with zeroes
11423e
11423e
* Mon Oct 02 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-3
11423e
- rebuilt
11423e
11423e
* Mon Sep 11 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-2
11423e
- rebuilt
11423e
11423e
* Sun Feb 19 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-1
11423e
- Update to 0.11 release.
11423e
- useless-includes patch merged upstream.
11423e
- old Russian man pages not available anymore.
11423e
- disable static linking.
11423e
11423e
* Thu Apr  7 2005 Michael Schwendt <mschwendt[AT]users.sf.net>
11423e
- rebuilt
11423e
11423e
* Fri Nov 28 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.1
11423e
- Update to 0.10 release.
11423e
- memleaks patch merged upstream.
11423e
- rootpath patch merged upstream.
11423e
- fstat patch not needed anymore.
11423e
- Updated URL.
11423e
11423e
* Thu Nov 13 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.0.2.cvs20031104
11423e
- Added buildreq m4 to work around incomplete deps of bison package.
11423e
11423e
* Tue Nov 04 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.0.1.cvs20031104
11423e
- Only tar.gz available upstream.
11423e
- byacc not needed when bison -y is available.
11423e
- Installed Russian manual pages.
11423e
- Updated with changes from CVS (2003-11-04).
11423e
- getopt patch merged upstream.
11423e
- bison-1.35 patch incorporated upstream.
11423e
11423e
* Tue Sep 09 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.9-0.fdr.0.2.20030902
11423e
- Added fixes for further memleaks.
11423e
11423e
* Sun Sep 07 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.9-0.fdr.0.1.20030902
11423e
- Initial package version.