%define name aide %define version 0.9 %define release 5 Summary: Advanced Intrusion Detection Environment Name: %{name} Version: %{version} Release: %{release} Source0: %{name}-%{version}.tar.bz2 Source1: %{name}.extra-0.7.tar.bz2 Patch0: %name-useless_includes.patch.bz2 BuildRoot: %{_tmppath}/%{name}-buildroot License: GPL URL: http://www.cs.tut.fi/~rammer/aide.html Group: Networking/Other #Requires: libmhash2 zlib Buildrequires: flex glibc-devel BuildPreReq: libmhash2-devel zlib-devel bison Packager: William Stearns %description AIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire. It does the same things as the semi-free Tripwire and more. There are other free replacements available so why build a new one? All the other replacements do not achieve the level of Tripwire. And I wanted a program that would exceed the limitations of Tripwire. The idea is that for an intruder to get in, certain files on the system must change - configuration files, for example. And once an intruder is in, in order to do much useful, the intruder must gain root access - something else that requires changing files. aide ensures that you (root) can be notified of ANY changes to a configurable list of properties (modification date, size, various hash-values) of a configurable list files. Aide should be installed right after the OS installation, and before you have connected your system to a network (i.e., before any possibility exists that someone could alter files on your system). This package contains a statically linked binary. %prep [ -n "${RPM_BUILD_ROOT}" -a "${RPM_BUILD_ROOT}" != / ] \ && rm -rf ${RPM_BUILD_ROOT}/ %setup -T -b 0 %setup -T -D -a 1 %patch -p1 %configure --prefix=%{_prefix} \ --sysconfdir=/etc \ --with-config_file=/etc/aide.conf \ --with-zlib \ --with-mhash \ --enable-mhash grep -v "#define DEFAULT_DB" config.h > config.h.tmp echo '#define DEFAULT_DB "/var/lib/aide/aide.db"' >> config.h.tmp echo '#define DEFAULT_DB_OUT "/var/lib/aide/aide.db.new"' >> config.h.tmp mv -f config.h.tmp config.h %build make CFLAGS="$RPM_OPT_FLAGS -static" %install mkdir -p ${RPM_BUILD_ROOT}/etc/cron.daily mkdir -p ${RPM_BUILD_ROOT}%{_prefix}/sbin mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man1 mkdir -p ${RPM_BUILD_ROOT}%{_mandir}/man5 make prefix=$RPM_BUILD_ROOT%{_prefix} \ bindir=${RPM_BUILD_ROOT}%{_sbindir} \ mandir=${RPM_BUILD_ROOT}%{_mandir} \ install-strip mkdir -p -m 700 ${RPM_BUILD_ROOT}/var/lib/aide install -m 600 ./extra/aide.conf $RPM_BUILD_ROOT/etc/aide.conf install -m 700 ./extra/aide.check $RPM_BUILD_ROOT/etc/cron.daily chmod 700 $RPM_BUILD_ROOT/var/lib/aide chmod 700 $RPM_BUILD_ROOT/usr/sbin/* %post echo "***************************************************" echo "* You should now customize /etc/aide.conf to your *" echo "* system and run '%{_prefix}/sbin/aide --init' *" echo "* *" echo "* Then copy /etc/aide.conf, %{_prefix}/sbin/aide, *" echo "* and aide.db.new to a secure location *" echo "* (preferably read-only media) *" echo "***************************************************" %clean [ -n "${RPM_BUILD_ROOT}" -a "${RPM_BUILD_ROOT}" != / ] \ && rm -rf ${RPM_BUILD_ROOT}/ %files %defattr(-,root,root) %doc AUTHORS COPYING ChangeLog NEWS README ./doc/manual.html ./extra/aide.html %{_sbindir}/aide %{_mandir}/man1/* %{_mandir}/man5/* /var/lib/aide %defattr(0644,root,root,755) %config(noreplace) /etc/aide.conf %config(noreplace) /etc/cron.daily/aide.check %changelog * Sat Jan 25 2003 William Stearns - Rebuild with static binary * Sun Dec 29 2002 Olivier Thauvin 0.9-4mdk - rebuild for rpm and glibc * Wed Jul 10 2002 Lenny Cartier 0.9-3mdk - update buildrequires * Fri Jul 05 2002 Lenny Cartier 0.9-2mdk - buildrequires flex * Thu Jun 06 2002 Lenny Cartier 0.9-1mdk - 0.9 - remove useless includes (gcc3.1 saga) * Wed Nov 14 2001 Lenny Cartier 0.7-5mdk - rebuild to be sure from where sources are coming from - fix files permission * Mon Jun 11 2001 Lenny Cartier 0.7-4mdk - fix requires & buildrequires ( thanks to Stephane Lentz ) * Thu Jan 04 2001 Lenny Cartier 0.7-3mdk - rebuild * Thu Jul 27 2000 Lenny Cartier 0.7-2mdk - BM - macros * Mon Jul 17 2000 Max Heijndijk 0.7-1mdk - Integrated tripwire.spec from Michael Maher - Integrated spec from Kyle Wheeler - Added cron job - Added sample aide.conf file with comments written by Jay Beale - Added manual.html to %doc - Removed aide* from %doc - Made relocatable - Added aide.html * Wed Jan 26 2000 Matthew Kirkwood - Fixes for RH 6.1 and sysconfdir changed to /etc and /var/lib/aide added * Sun Sep 12 1999 Rami Lehti - Some small changes to make this autogeneratable by configure. * Sat Sep 11 1999 Zach Brown - First go