From 0f0a2f6cec33e560288e07e78a85d5262c1f395e Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Thu, 19 Nov 2009 14:41:36 +0000 Subject: [PATCH 01/27] - change policy file path - removed usermod requirement --- sectool-0.9.4-pk1.patch | 21 +++++++++++++++++++++ sectool.spec | 14 +++++++++----- 2 files changed, 30 insertions(+), 5 deletions(-) create mode 100644 sectool-0.9.4-pk1.patch diff --git a/sectool-0.9.4-pk1.patch b/sectool-0.9.4-pk1.patch new file mode 100644 index 0000000..016efee --- /dev/null +++ b/sectool-0.9.4-pk1.patch @@ -0,0 +1,21 @@ +diff -up sectool-0.9.4/Makefile.old sectool-0.9.4/Makefile +--- sectool-0.9.4/Makefile.old 2009-11-19 13:36:45.680545213 +0100 ++++ sectool-0.9.4/Makefile 2009-11-19 13:37:05.108513565 +0100 +@@ -25,7 +25,7 @@ install: + mkdir -p $(DESTDIR)$(PKGDATADIR) + mkdir -p $(DESTDIR)$(PKGDATADIR)/scheduler + #mkdir -p $(DESTDIR)$(PKGDATADIR)/tests +- mkdir -p $(DESTDIR)$(DATADIR)/PolicyKit/policy/ ++ mkdir -p $(DESTDIR)$(DATADIR)/polkit-1/actions/ + mkdir -p $(DESTDIR)$(SYSCONFDIR)/dbus-1/system.d/ + mkdir -p $(DESTDIR)$(DATADIR)/dbus-1/system-services/ + mkdir -p $(DESTDIR)$(LIBEXECDIR)/sectool/tests +@@ -78,7 +78,7 @@ install: + done && test -z "$$fail" + chmod a+x $(DESTDIR)$(PKGDATADIR)/sectool-mechanism.py + # PolicyKit +- install -p -m644 org.fedoraproject.sectool.policy $(DESTDIR)$(DATADIR)/PolicyKit/policy/ ++ install -p -m644 org.fedoraproject.sectool.policy $(DESTDIR)$(DATADIR)/polkit-1/actions/ + install -p -m644 org.fedoraproject.sectool.mechanism.conf $(DESTDIR)$(SYSCONFDIR)/dbus-1/system.d/ + install -p -m644 org.fedoraproject.sectool.mechanism.service $(DESTDIR)$(DATADIR)/dbus-1/system-services/ + diff --git a/sectool.spec b/sectool.spec index 1f88b50..c3ed898 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,12 +1,12 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 1%{?dist} +Release: 3%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.2-optflags.patch -#Patch2: sectool-0.9.3-ext4.patch +Patch2: sectool-0.9.4-pk1.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus @@ -26,7 +26,7 @@ Summary: GUI for sectool - security audit system and intrusion detection system License: GPLv2+ Group: Applications/System Requires: sectool = %{version}-%{release} -Requires: pygtk2 usermode +Requires: pygtk2 %description sectool is a security tool that can be used both as a security audit @@ -42,7 +42,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .optflags -#%patch2 -p1 -b .ext4 +%patch2 -p1 -b .pk1 %build make %{?_smp_mflags} @@ -95,7 +95,7 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man8/sectool.8.gz # PolicyKit %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf -%{_datadir}/PolicyKit/policy/org.fedoraproject.sectool.policy +%{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy %{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service %files gui @@ -112,6 +112,10 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Thu Nov 19 2009 Maros Barabas - 0.9.4-3 +- change policy file path +- removed usermod requirement + * Wed Sep 09 2009 Maros Barabas - 0.9.4-2 - upgrade with PolicyKit integration - dbus update From 76f5e4861aad283fdfc761a30905f6b7753cd912 Mon Sep 17 00:00:00 2001 From: Bill Nottingham Date: Wed, 25 Nov 2009 23:15:28 +0000 Subject: [PATCH 02/27] Fix typo that causes a failure to update the common directory. (releng #2781) --- Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index 460a38b..0ab0e08 100644 --- a/Makefile +++ b/Makefile @@ -1,10 +1,10 @@ # Makefile for source rpm: sectool -# $Id$ +# $Id: Makefile,v 1.1 2008/01/21 17:15:20 kevin Exp $ NAME := sectool SPECFILE = $(firstword $(wildcard *.spec)) define find-makefile-common -for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done +for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$d/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done endef MAKEFILE_COMMON := $(shell $(find-makefile-common)) From 5a4b774ca49027c2daf13bbde72227dbfd3064f2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Mr=C3=A1z?= Date: Sat, 2 Jan 2010 20:46:55 +0000 Subject: [PATCH 03/27] - rebuilt with new librpm --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index c3ed898..ade5d8f 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 3%{?dist} +Release: 4%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log @@ -112,6 +112,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Sat Jan 2 2010 Tomas Mraz - 0.9.4-4 +- rebuilt with new librpm + * Thu Nov 19 2009 Maros Barabas - 0.9.4-3 - change policy file path - removed usermod requirement From 0cb3edfcd2640ea69fc895906fd02dc0dd956838 Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Wed, 10 Mar 2010 15:43:52 +0000 Subject: [PATCH 04/27] Added patches for PolicyKit and dBus --- sectool-0.9.4-dbus-fix.patch | 156 ++++++++++++++++++++++++++++++ sectool-0.9.4-policykit-fix.patch | 84 ++++++++++++++++ sectool.spec | 9 +- 3 files changed, 248 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.4-dbus-fix.patch create mode 100644 sectool-0.9.4-policykit-fix.patch diff --git a/sectool-0.9.4-dbus-fix.patch b/sectool-0.9.4-dbus-fix.patch new file mode 100644 index 0000000..de4da67 --- /dev/null +++ b/sectool-0.9.4-dbus-fix.patch @@ -0,0 +1,156 @@ +diff -up sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf.old sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf +--- sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf.old 2009-09-01 10:20:23.000000000 +0200 ++++ sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf 2010-03-10 14:51:48.564326918 +0100 +@@ -9,7 +9,7 @@ + + + +- ++ + + + +diff -up sectool-0.9.4/org.fedoraproject.sectool.policy.old sectool-0.9.4/org.fedoraproject.sectool.policy +--- sectool-0.9.4/org.fedoraproject.sectool.policy.old 2009-08-24 16:43:10.000000000 +0200 ++++ sectool-0.9.4/org.fedoraproject.sectool.policy 2010-03-10 14:51:51.858326825 +0100 +@@ -20,8 +20,9 @@ + Run level + System policy prevents run level + +- no +- auth_admin ++ no ++ auth_admin_keep ++ auth_admin_keep + + + +@@ -29,9 +30,9 @@ + Run tests + System policy prevents run tests + +- no +- no +- auth_admin ++ auth_admin_keep ++ auth_admin_keep ++ auth_admin_keep + + + +diff -up sectool-0.9.4/src/sectool-gui.py.old sectool-0.9.4/src/sectool-gui.py +--- sectool-0.9.4/src/sectool-gui.py.old 2010-03-10 14:50:07.111201828 +0100 ++++ sectool-0.9.4/src/sectool-gui.py 2010-03-10 14:52:01.219201762 +0100 +@@ -712,10 +712,14 @@ class DBusCaller(object): + + def __init__(self): + ++ #print "DBusCaller::init::start" + self.timeout = -1 ++ self.auth = 0 ++ #print "DBusCaller::init::SystemBus()" + self.bus = dbus.SystemBus () + #self.bus_name = dbus.service.BusName('org.fedoraproject.sectool.mechanism', self.bus) +- self.dbus_action_object = self.bus.get_object ("org.fedoraproject.sectool.mechanism", "/org/fedoraproject/sectool/object") ++ #self.dbus_action_object = self.bus.get_object ("org.fedoraproject.sectool.mechanism", "/org/fedoraproject/sectool/object") ++ #print "DBusCaller::init::end" + + def get_action(self, action): + """ Get action from dbus sectool mechanism """ +@@ -723,7 +727,7 @@ class DBusCaller(object): + + @staticmethod + def error_handler(error): +- #print "ERROR: ", error ++ print "[ASYNC ERROR]: ", error + pass # We will recieve an error that timeout has expired + + @staticmethod +@@ -736,12 +740,16 @@ class DBusCaller(object): + + def close(self): + self.bus.flush() +- self.bus.close() ++ #self.bus.close() # can't close this, cause it will close main loop + + def run( self, args, file ): + +- auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) ++ #print "DBusCaller::run::start" ++ #if (self.auth != 1): ++ self.auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) ++ #print "DBusCaller::run::auth: \"",self.auth,"\" end" + self.runtests(args, file) ++ #print "DBusCaller::run::end" + + @slip.dbus.polkit.enable_proxy + def runtests( self, args, file ): +@@ -754,7 +762,7 @@ class DBusCaller(object): + [args, file], + reply_handler=self.reply_handler, + error_handler=self.error_handler, +- timeout=0.00) ++ timeout=10) + + + class ThreadHandler(threading.Thread, Handler): +@@ -845,6 +853,9 @@ class ThreadHandler(threading.Thread, Ha + """ + + self.readers = [] ++ # get action from dbus ++ #print "start dbus" ++ self.bus = DBusCaller() + for test in self.__suite: + + self.test = test +@@ -869,12 +880,10 @@ class ThreadHandler(threading.Thread, Ha + + # Block for dbus exceptions handling, here should be all code that manipulate with dBus + try: +- # get action from dbus +- bus = DBusCaller() +- + # Start new thread - reader to listen on socket and update GUI if something from dBus comes up + # We need to call reader here, because of passing bus to close connection and save processes +- reader = Reader( file, test.dsc['HEADER']['NAME'], self.fill_form, self.test_done, iter, bus ) ++ #print "start reader" ++ reader = Reader( file, test.dsc['HEADER']['NAME'], self.fill_form, self.test_done, iter, self.bus ) + reader.start() + # Add reader to readers pool + self.readers.append( reader ) +@@ -886,12 +895,15 @@ class ThreadHandler(threading.Thread, Ha + TODO: Look for async call, this is workaround using 0-timeout + If you use timeout=-1, it will be sequencial, all positives numbers are seconds in float + """ +- +- bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) ++ #print "run start" ++ self.bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) ++ #print "run end" + #bus.call( test.dsc["HEADER"]["NAME"], file ) + except dbus.DBusException, e: + # This should always happend. We need to be stopped by dBus to start new test in separate thread ++ raise e + if 'org.freedesktop.DBus.Error.NoReply' in e.get_dbus_name(): ++ print >>sys.stderr, "Not reply from DBus" + pass # maybe continue ? + # catch Authorization exception + elif 'NotAuthorizedException' in e.get_dbus_name(): +@@ -939,6 +951,7 @@ class ThreadHandler(threading.Thread, Ha + The testing process is going to die .. we have a little time to stop all tests correctly + """ + self.__stopthread.set( ) ++ self.bus.close() + for reader in self.readers: + reader.stop_thread() + +@@ -1056,7 +1069,7 @@ class Reader(threading.Thread): + def stop_thread(self): + + self.stop = True +- self.bus.close() ++ #self.bus.close() + + + diff --git a/sectool-0.9.4-policykit-fix.patch b/sectool-0.9.4-policykit-fix.patch new file mode 100644 index 0000000..5c46c4a --- /dev/null +++ b/sectool-0.9.4-policykit-fix.patch @@ -0,0 +1,84 @@ +diff -up sectool-0.9.4/src/sectool-gui.py.old sectool-0.9.4/src/sectool-gui.py +--- sectool-0.9.4/src/sectool-gui.py.old 2009-12-08 17:11:31.417357216 +0100 ++++ sectool-0.9.4/src/sectool-gui.py 2010-01-13 14:37:49.817461379 +0100 +@@ -645,7 +645,7 @@ class TestHandler( Handler ): + """ Stop button has been pressed """ + + self.threadHandler.stop() #: give a short amount of time to stop the test by itself +- self.__signalHandler.kill_thread() #: kill the test by unix-style kill through os library ++ #self.__signalHandler.kill_thread() #: kill the test by unix-style kill through os library + + def show_message_hint( self, test, msg_id ): + """ Show info message in hintWindow """ +@@ -721,6 +721,16 @@ class DBusCaller(object): + """ Get action from dbus sectool mechanism """ + return self.dbus_action_object.get_dbus_method( action, "org.fedoraproject.sectool.mechanism" ) + ++ @staticmethod ++ def error_handler(error): ++ #print "ERROR: ", error ++ pass # We will recieve an error that timeout has expired ++ ++ @staticmethod ++ def reply_handler(): ++ #print "REPLY done." ++ pass ++ + def call(self, *p, **k): + self.bus.call_async(*p, **k) + +@@ -728,13 +738,23 @@ class DBusCaller(object): + self.bus.flush() + self.bus.close() + ++ def run( self, args, file ): ++ ++ auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) ++ self.runtests(args, file) ++ + @slip.dbus.polkit.enable_proxy + def runtests( self, args, file ): + +- auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) +- if auth == "yes": self.timeout = 0.00 +- self.dbus_action_object.runtests( args, file, timeout=self.timeout, dbus_interface = "org.fedoraproject.sectool.mechanism" ) +- #dbus_action( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file, timeout=0.00 ) ++ self.bus.call_async("org.fedoraproject.sectool.mechanism", ++ "/org/fedoraproject/sectool/object", ++ "org.fedoraproject.sectool.mechanism", ++ "runtests", ++ "ass", ++ [args, file], ++ reply_handler=self.reply_handler, ++ error_handler=self.error_handler, ++ timeout=0.00) + + + class ThreadHandler(threading.Thread, Handler): +@@ -867,7 +887,7 @@ class ThreadHandler(threading.Thread, Ha + If you use timeout=-1, it will be sequencial, all positives numbers are seconds in float + """ + +- bus.runtests( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) ++ bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) + #bus.call( test.dsc["HEADER"]["NAME"], file ) + except dbus.DBusException, e: + # This should always happend. We need to be stopped by dBus to start new test in separate thread +@@ -889,8 +909,6 @@ class ThreadHandler(threading.Thread, Ha + + while self.done < count: + if self.__stopthread.isSet(): +- for reader in self.readers: +- reader.stop_thread() + #self.__formatter.stopProgressBar() + break + time.sleep(2) +@@ -921,6 +939,8 @@ class ThreadHandler(threading.Thread, Ha + The testing process is going to die .. we have a little time to stop all tests correctly + """ + self.__stopthread.set( ) ++ for reader in self.readers: ++ reader.stop_thread() + + def __make_tmp_file( self ): + """ diff --git a/sectool.spec b/sectool.spec index ade5d8f..4a40cb6 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,12 +1,14 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 4%{?dist} +Release: 5%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.2-optflags.patch Patch2: sectool-0.9.4-pk1.patch +Patch3: sectool-0.9.4-policykit-fix.patch +Patch4: sectool-0.9.4-dbus-fix.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus @@ -43,6 +45,8 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %setup -q %patch1 -p1 -b .optflags %patch2 -p1 -b .pk1 +%patch3 -p1 -b .policykit +%patch4 -p1 -b .dbus %build make %{?_smp_mflags} @@ -112,6 +116,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Mar 10 2010 Maros Barabas - 0.9.4-5 +- added patches for PolicyKit and dBus bugs + * Sat Jan 2 2010 Tomas Mraz - 0.9.4-4 - rebuilt with new librpm From 6f8e626dac688f9b3602fa01ad707c7a2bdbb65d Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Tue, 20 Apr 2010 12:28:33 +0000 Subject: [PATCH 05/27] Added -lrpmio (#564705) --- sectool-0.9.4-rpmio.patch | 12 ++++++++++++ sectool.spec | 7 ++++++- 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.4-rpmio.patch diff --git a/sectool-0.9.4-rpmio.patch b/sectool-0.9.4-rpmio.patch new file mode 100644 index 0000000..a3a6c68 --- /dev/null +++ b/sectool-0.9.4-rpmio.patch @@ -0,0 +1,12 @@ +diff -up sectool-0.9.4/src/Makefile.rpmio sectool-0.9.4/src/Makefile +--- sectool-0.9.4/src/Makefile.rpmio 2010-04-19 12:01:28.502222085 +0200 ++++ sectool-0.9.4/src/Makefile 2010-04-19 12:01:35.076221727 +0200 +@@ -2,7 +2,7 @@ include ../sectool.mk + + CC= gcc + CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm +-LDFLAGS= -lrpm -lselinux ++LDFLAGS= -lrpm -lselinux -lrpmio + + SRCS_sectool=sectool.c + OBJS_sectool=$(SRCS_sectool:.c=.o) diff --git a/sectool.spec b/sectool.spec index 4a40cb6..00c1ba1 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 5%{?dist} +Release: 6%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log @@ -9,6 +9,7 @@ Patch1: sectool-0.9.2-optflags.patch Patch2: sectool-0.9.4-pk1.patch Patch3: sectool-0.9.4-policykit-fix.patch Patch4: sectool-0.9.4-dbus-fix.patch +Patch5: sectool-0.9.4-rpmio.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus @@ -47,6 +48,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %patch2 -p1 -b .pk1 %patch3 -p1 -b .policykit %patch4 -p1 -b .dbus +%patch5 -p1 -b .rpmio %build make %{?_smp_mflags} @@ -116,6 +118,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Mon Apr 19 2010 Maros Barabas - 0.9.4-6 +- Added -lrpmio (#564705) + * Wed Mar 10 2010 Maros Barabas - 0.9.4-5 - added patches for PolicyKit and dBus bugs From e217d61ba65cc7da9438405720ba4553e6098b91 Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Fri, 23 Apr 2010 14:00:52 +0000 Subject: [PATCH 06/27] Permissions test: changed permissions of directories in root --- sectool-0.9.4-permissions.patch | 38 +++++++++++++++++++++++++++++++++ sectool.spec | 7 +++++- 2 files changed, 44 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.4-permissions.patch diff --git a/sectool-0.9.4-permissions.patch b/sectool-0.9.4-permissions.patch new file mode 100644 index 0000000..c4b4423 --- /dev/null +++ b/sectool-0.9.4-permissions.patch @@ -0,0 +1,38 @@ +diff -up sectool-0.9.4/tests/permissions.sh.old sectool-0.9.4/tests/permissions.sh +--- sectool-0.9.4/tests/permissions.sh.old 2010-04-23 14:11:21.809668140 +0200 ++++ sectool-0.9.4/tests/permissions.sh 2010-04-23 14:09:11.761669009 +0200 +@@ -25,25 +25,25 @@ E_DOESNT_EXIST=1 + E_WRONG_OWNER=2 + E_WRONG_PERM=3 + +-dirs="/ 755 +-/bin 755 +-/boot 755 ++dirs="/ 555 ++/bin 555 ++/boot 555 + /dev 755 + /etc 755 + /home 755 +-/lib 755 ++/lib 555 + /media 755 + /mnt 755 + /opt 755 +-/root 750 +-/sbin 755 ++/root 550 ++/sbin 555 + /srv 755 + /tmp 1777 + /usr 755 +- /usr/bin 755 +- /usr/sbin 755 ++ /usr/bin 555 ++ /usr/sbin 555 + /usr/include 755 +- /usr/lib 755 ++ /usr/lib 555 + /usr/share 755 + /usr/src 755 + /usr/local 755 diff --git a/sectool.spec b/sectool.spec index 00c1ba1..d3ca7a7 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 6%{?dist} +Release: 7%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log @@ -10,6 +10,7 @@ Patch2: sectool-0.9.4-pk1.patch Patch3: sectool-0.9.4-policykit-fix.patch Patch4: sectool-0.9.4-dbus-fix.patch Patch5: sectool-0.9.4-rpmio.patch +Patch6: sectool-0.9.4-permissions.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus @@ -49,6 +50,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %patch3 -p1 -b .policykit %patch4 -p1 -b .dbus %patch5 -p1 -b .rpmio +%patch6 -p1 -b .perm %build make %{?_smp_mflags} @@ -118,6 +120,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Fri Apr 23 2010 Maros Barabas - 0.9.4-7 +- Permissions test: changed permissions of directories in root + * Mon Apr 19 2010 Maros Barabas - 0.9.4-6 - Added -lrpmio (#564705) From 9767469642880d68efdb426bdebe0860f9288283 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Thu, 27 May 2010 10:24:05 +0000 Subject: [PATCH 07/27] - filter (deleted) files in netserv - create empty log file after installation - fix expected permissions on shadow/gshadow --- sectool-0.9.4-deleted.patch | 15 +++++++++++++++ sectool-0.9.4-permissions.patch | 20 +++++++++++++++++--- sectool.spec | 23 +++++++++++++++++------ 3 files changed, 49 insertions(+), 9 deletions(-) create mode 100644 sectool-0.9.4-deleted.patch diff --git a/sectool-0.9.4-deleted.patch b/sectool-0.9.4-deleted.patch new file mode 100644 index 0000000..5258e56 --- /dev/null +++ b/sectool-0.9.4-deleted.patch @@ -0,0 +1,15 @@ +diff -up sectool-0.9.4/tests/netserv.sh.deleted sectool-0.9.4/tests/netserv.sh +--- sectool-0.9.4/tests/netserv.sh.deleted 2010-05-25 11:13:10.847410598 +0200 ++++ sectool-0.9.4/tests/netserv.sh 2010-05-25 11:14:25.615296772 +0200 +@@ -285,7 +285,10 @@ for p in ${PID[@]}; do + case "${FILE}" in + *.#prelink#.*) + FILE="`echo ${FILE} | sed -n 's|^\(.*\)\.#prelink#\..*$|\1|p'`" +- ;; ++ ;; ++ *\(deleted\)) ++ FILE="`echo ${FILE} | sed -n 's|^\(.*\)[[:space:]](deleted)$|\1|p'`" ++ ;; + esac + + case "`basename \"${FILE}\"`" in diff --git a/sectool-0.9.4-permissions.patch b/sectool-0.9.4-permissions.patch index c4b4423..9a7b31f 100644 --- a/sectool-0.9.4-permissions.patch +++ b/sectool-0.9.4-permissions.patch @@ -1,6 +1,6 @@ -diff -up sectool-0.9.4/tests/permissions.sh.old sectool-0.9.4/tests/permissions.sh ---- sectool-0.9.4/tests/permissions.sh.old 2010-04-23 14:11:21.809668140 +0200 -+++ sectool-0.9.4/tests/permissions.sh 2010-04-23 14:09:11.761669009 +0200 +diff -up sectool-0.9.4/tests/permissions.sh.perm sectool-0.9.4/tests/permissions.sh +--- sectool-0.9.4/tests/permissions.sh.perm 2009-08-24 15:34:48.000000000 +0200 ++++ sectool-0.9.4/tests/permissions.sh 2010-05-25 13:33:14.724541772 +0200 @@ -25,25 +25,25 @@ E_DOESNT_EXIST=1 E_WRONG_OWNER=2 E_WRONG_PERM=3 @@ -36,3 +36,17 @@ diff -up sectool-0.9.4/tests/permissions.sh.old sectool-0.9.4/tests/permissions. /usr/share 755 /usr/src 755 /usr/local 755 +diff -up sectool-0.9.4/tests/shadow.sh.perm sectool-0.9.4/tests/shadow.sh +--- sectool-0.9.4/tests/shadow.sh.perm 2010-05-25 13:35:48.966534888 +0200 ++++ sectool-0.9.4/tests/shadow.sh 2010-05-25 13:36:02.557293905 +0200 +@@ -54,8 +54,8 @@ then + fi + + # permissions on /etc/shadow and /etc/gshadow should be 400, should be owned by root:root +-check_file_perm $shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "User shadow database" +-check_file_perm $group_shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group shadow database" ++check_file_perm $shadow 000 root:root 1 $E_BAD_PERMISSIONS_SHADOW "User shadow database" ++check_file_perm $group_shadow 000 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group shadow database" + + + { diff --git a/sectool.spec b/sectool.spec index d3ca7a7..ff4bbed 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,9 +1,9 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 7%{?dist} +Release: 8%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart -Source0: %{name}-%{version}.tar.bz2 +Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.2-optflags.patch Patch2: sectool-0.9.4-pk1.patch @@ -11,13 +11,14 @@ Patch3: sectool-0.9.4-policykit-fix.patch Patch4: sectool-0.9.4-dbus-fix.patch Patch5: sectool-0.9.4-rpmio.patch Patch6: sectool-0.9.4-permissions.patch +Patch7: sectool-0.9.4-deleted.patch License: GPLv2+ Group: Applications/System -Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus -Requires: python2 rpm-python libselinux-python glibc-headers +Requires: gettext coreutils python-slip-dbus PolicyKit dbus +Requires: python2 rpm-python BuildRequires: desktop-file-utils gettext intltool asciidoc BuildRequires: rpm-devel >= 4.6.0 -BuildRequires: libselinux-devel glibc-headers +BuildRequires: libselinux-devel libselinux-python glibc-headers BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) # Temporarily disable check-buildroot @@ -51,6 +52,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %patch4 -p1 -b .dbus %patch5 -p1 -b .rpmio %patch6 -p1 -b .perm +%patch7 -p1 -b .deleted %build make %{?_smp_mflags} @@ -74,6 +76,8 @@ sed -i 's,TDATA_DIR_BASE=\(.*\),TDATA_DIR_BASE=%{_localstatedir}/lib/sectool,' $ sed -i 's,__ico_path = \(.*\),__ico_path = "%{_datadir}/pixmaps/sectool/",' $RPM_BUILD_ROOT%{_datadir}/sectool/guiOutput.py #this file is just for development rm $RPM_BUILD_ROOT/%{_datadir}/sectool/scheduler/selftest.py +mkdir -p $RPM_BUILD_ROOT/var/log/ +touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %find_lang %{name} @@ -101,8 +105,10 @@ rm -rf $RPM_BUILD_ROOT %{_libexecdir}/sectool-mechanism.py* %{_datadir}/sectool/sectool-mechanism.py* %{_mandir}/man8/sectool.8.gz +%{_localstatedir}/log/sectool.log + # PolicyKit -%{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf +%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf %{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy %{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service @@ -120,6 +126,11 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Tue May 25 2010 Peter Vrabec - 0.9.4-8 +- filter (deleted) files in netserv +- create empty log file after installation +- fix expected permissions on shadow/gshadow + * Fri Apr 23 2010 Maros Barabas - 0.9.4-7 - Permissions test: changed permissions of directories in root From 705e0161c3633d50f5541935ae63fb0517676094 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Wed, 2 Jun 2010 11:55:35 +0000 Subject: [PATCH 08/27] skip a numeric check in debug mode --- sectool-0.9.4-numcheck.patch | 26 ++++++++++++++++++++++++++ sectool.spec | 7 ++++++- 2 files changed, 32 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.4-numcheck.patch diff --git a/sectool-0.9.4-numcheck.patch b/sectool-0.9.4-numcheck.patch new file mode 100644 index 0000000..46a041b --- /dev/null +++ b/sectool-0.9.4-numcheck.patch @@ -0,0 +1,26 @@ +diff -up sectool-0.9.4/tests/bash_defs_debug.sh.numcheck sectool-0.9.4/tests/bash_defs_debug.sh +--- sectool-0.9.4/tests/bash_defs_debug.sh.numcheck 2010-06-02 13:33:14.224631406 +0200 ++++ sectool-0.9.4/tests/bash_defs_debug.sh 2010-06-02 13:33:37.983572856 +0200 +@@ -232,14 +232,14 @@ function check_file_perm () { + + if [[ -z "$2" ]]; then + test_exit ${E_FAIL} "check_file_perm: missing argument \$2" +- else +- if [[ "$2" != "0" ]]; then +- l_int numtest=$2 +- +- if (( numtest == 0 )); then +- test_exit ${E_FAIL} "check_file_perm: expected numeric value in \$2" +- fi +- fi ++# else ++# if [[ "$2" != "0" ]]; then ++# l_int numtest=$2 ++# ++# if (( numtest == 0 )); then ++# test_exit ${E_FAIL} "check_file_perm: expected numeric value in \$2" ++# fi ++# fi + fi + + if [[ -z "$3" ]]; then diff --git a/sectool.spec b/sectool.spec index ff4bbed..df1df45 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 8%{?dist} +Release: 9%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -12,6 +12,7 @@ Patch4: sectool-0.9.4-dbus-fix.patch Patch5: sectool-0.9.4-rpmio.patch Patch6: sectool-0.9.4-permissions.patch Patch7: sectool-0.9.4-deleted.patch +Patch8: sectool-0.9.4-numcheck.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils python-slip-dbus PolicyKit dbus @@ -53,6 +54,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %patch5 -p1 -b .rpmio %patch6 -p1 -b .perm %patch7 -p1 -b .deleted +%patch8 -p1 -b .numcheck %build make %{?_smp_mflags} @@ -126,6 +128,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Jun 02 2010 Peter Vrabec - 0.9.4-9 +- skip a numeric check in debug mode + * Tue May 25 2010 Peter Vrabec - 0.9.4-8 - filter (deleted) files in netserv - create empty log file after installation From 39db2db04c98e601410ea35991d938afeba61196 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Fri, 4 Jun 2010 12:53:40 +0000 Subject: [PATCH 09/27] upgrade --- .cvsignore | 2 +- sectool-0.9.3-ext4.patch | 12 -- sectool-0.9.4-dbus-fix.patch | 156 ------------------ sectool-0.9.4-deleted.patch | 15 -- sectool-0.9.4-numcheck.patch | 26 --- sectool-0.9.4-permissions.patch | 52 ------ sectool-0.9.4-pk1.patch | 21 --- sectool-0.9.4-policykit-fix.patch | 84 ---------- sectool-0.9.4-rpmio.patch | 12 -- ...lags.patch => sectool-0.9.5-optflags.patch | 8 +- sectool.spec | 27 +-- sources | 2 +- 12 files changed, 14 insertions(+), 403 deletions(-) delete mode 100644 sectool-0.9.3-ext4.patch delete mode 100644 sectool-0.9.4-dbus-fix.patch delete mode 100644 sectool-0.9.4-deleted.patch delete mode 100644 sectool-0.9.4-numcheck.patch delete mode 100644 sectool-0.9.4-permissions.patch delete mode 100644 sectool-0.9.4-pk1.patch delete mode 100644 sectool-0.9.4-policykit-fix.patch delete mode 100644 sectool-0.9.4-rpmio.patch rename sectool-0.9.2-optflags.patch => sectool-0.9.5-optflags.patch (53%) diff --git a/.cvsignore b/.cvsignore index 9462162..e8bbf4c 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -sectool-0.9.4.tar.bz2 +sectool-0.9.5.tar.bz2 diff --git a/sectool-0.9.3-ext4.patch b/sectool-0.9.3-ext4.patch deleted file mode 100644 index b06d0b8..0000000 --- a/sectool-0.9.3-ext4.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up sectool-0.9.3/tests/03_filesystem.dsc.ext4 sectool-0.9.3/tests/03_filesystem.dsc ---- sectool-0.9.3/tests/03_filesystem.dsc.ext4 2009-07-14 15:18:11.472860778 +0200 -+++ sectool-0.9.3/tests/03_filesystem.dsc 2009-07-14 15:18:32.558798787 +0200 -@@ -15,7 +15,7 @@ GROUPS="filesystem packages selinux" - AUTHOR="Dan Kopecek " - - [DEFAULT] --FSTYPES="ext2 ext3 reiserfs xfs" -+FSTYPES="ext2 ext3 ext4 reiserfs xfs" - EXCLUDE="/var/lib/misc - /var/lib/mock" - INCLUDE="/bin diff --git a/sectool-0.9.4-dbus-fix.patch b/sectool-0.9.4-dbus-fix.patch deleted file mode 100644 index de4da67..0000000 --- a/sectool-0.9.4-dbus-fix.patch +++ /dev/null @@ -1,156 +0,0 @@ -diff -up sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf.old sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf ---- sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf.old 2009-09-01 10:20:23.000000000 +0200 -+++ sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf 2010-03-10 14:51:48.564326918 +0100 -@@ -9,7 +9,7 @@ - - - -- -+ - - - -diff -up sectool-0.9.4/org.fedoraproject.sectool.policy.old sectool-0.9.4/org.fedoraproject.sectool.policy ---- sectool-0.9.4/org.fedoraproject.sectool.policy.old 2009-08-24 16:43:10.000000000 +0200 -+++ sectool-0.9.4/org.fedoraproject.sectool.policy 2010-03-10 14:51:51.858326825 +0100 -@@ -20,8 +20,9 @@ - Run level - System policy prevents run level - -- no -- auth_admin -+ no -+ auth_admin_keep -+ auth_admin_keep - - - -@@ -29,9 +30,9 @@ - Run tests - System policy prevents run tests - -- no -- no -- auth_admin -+ auth_admin_keep -+ auth_admin_keep -+ auth_admin_keep - - - -diff -up sectool-0.9.4/src/sectool-gui.py.old sectool-0.9.4/src/sectool-gui.py ---- sectool-0.9.4/src/sectool-gui.py.old 2010-03-10 14:50:07.111201828 +0100 -+++ sectool-0.9.4/src/sectool-gui.py 2010-03-10 14:52:01.219201762 +0100 -@@ -712,10 +712,14 @@ class DBusCaller(object): - - def __init__(self): - -+ #print "DBusCaller::init::start" - self.timeout = -1 -+ self.auth = 0 -+ #print "DBusCaller::init::SystemBus()" - self.bus = dbus.SystemBus () - #self.bus_name = dbus.service.BusName('org.fedoraproject.sectool.mechanism', self.bus) -- self.dbus_action_object = self.bus.get_object ("org.fedoraproject.sectool.mechanism", "/org/fedoraproject/sectool/object") -+ #self.dbus_action_object = self.bus.get_object ("org.fedoraproject.sectool.mechanism", "/org/fedoraproject/sectool/object") -+ #print "DBusCaller::init::end" - - def get_action(self, action): - """ Get action from dbus sectool mechanism """ -@@ -723,7 +727,7 @@ class DBusCaller(object): - - @staticmethod - def error_handler(error): -- #print "ERROR: ", error -+ print "[ASYNC ERROR]: ", error - pass # We will recieve an error that timeout has expired - - @staticmethod -@@ -736,12 +740,16 @@ class DBusCaller(object): - - def close(self): - self.bus.flush() -- self.bus.close() -+ #self.bus.close() # can't close this, cause it will close main loop - - def run( self, args, file ): - -- auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) -+ #print "DBusCaller::run::start" -+ #if (self.auth != 1): -+ self.auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) -+ #print "DBusCaller::run::auth: \"",self.auth,"\" end" - self.runtests(args, file) -+ #print "DBusCaller::run::end" - - @slip.dbus.polkit.enable_proxy - def runtests( self, args, file ): -@@ -754,7 +762,7 @@ class DBusCaller(object): - [args, file], - reply_handler=self.reply_handler, - error_handler=self.error_handler, -- timeout=0.00) -+ timeout=10) - - - class ThreadHandler(threading.Thread, Handler): -@@ -845,6 +853,9 @@ class ThreadHandler(threading.Thread, Ha - """ - - self.readers = [] -+ # get action from dbus -+ #print "start dbus" -+ self.bus = DBusCaller() - for test in self.__suite: - - self.test = test -@@ -869,12 +880,10 @@ class ThreadHandler(threading.Thread, Ha - - # Block for dbus exceptions handling, here should be all code that manipulate with dBus - try: -- # get action from dbus -- bus = DBusCaller() -- - # Start new thread - reader to listen on socket and update GUI if something from dBus comes up - # We need to call reader here, because of passing bus to close connection and save processes -- reader = Reader( file, test.dsc['HEADER']['NAME'], self.fill_form, self.test_done, iter, bus ) -+ #print "start reader" -+ reader = Reader( file, test.dsc['HEADER']['NAME'], self.fill_form, self.test_done, iter, self.bus ) - reader.start() - # Add reader to readers pool - self.readers.append( reader ) -@@ -886,12 +895,15 @@ class ThreadHandler(threading.Thread, Ha - TODO: Look for async call, this is workaround using 0-timeout - If you use timeout=-1, it will be sequencial, all positives numbers are seconds in float - """ -- -- bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) -+ #print "run start" -+ self.bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) -+ #print "run end" - #bus.call( test.dsc["HEADER"]["NAME"], file ) - except dbus.DBusException, e: - # This should always happend. We need to be stopped by dBus to start new test in separate thread -+ raise e - if 'org.freedesktop.DBus.Error.NoReply' in e.get_dbus_name(): -+ print >>sys.stderr, "Not reply from DBus" - pass # maybe continue ? - # catch Authorization exception - elif 'NotAuthorizedException' in e.get_dbus_name(): -@@ -939,6 +951,7 @@ class ThreadHandler(threading.Thread, Ha - The testing process is going to die .. we have a little time to stop all tests correctly - """ - self.__stopthread.set( ) -+ self.bus.close() - for reader in self.readers: - reader.stop_thread() - -@@ -1056,7 +1069,7 @@ class Reader(threading.Thread): - def stop_thread(self): - - self.stop = True -- self.bus.close() -+ #self.bus.close() - - - diff --git a/sectool-0.9.4-deleted.patch b/sectool-0.9.4-deleted.patch deleted file mode 100644 index 5258e56..0000000 --- a/sectool-0.9.4-deleted.patch +++ /dev/null @@ -1,15 +0,0 @@ -diff -up sectool-0.9.4/tests/netserv.sh.deleted sectool-0.9.4/tests/netserv.sh ---- sectool-0.9.4/tests/netserv.sh.deleted 2010-05-25 11:13:10.847410598 +0200 -+++ sectool-0.9.4/tests/netserv.sh 2010-05-25 11:14:25.615296772 +0200 -@@ -285,7 +285,10 @@ for p in ${PID[@]}; do - case "${FILE}" in - *.#prelink#.*) - FILE="`echo ${FILE} | sed -n 's|^\(.*\)\.#prelink#\..*$|\1|p'`" -- ;; -+ ;; -+ *\(deleted\)) -+ FILE="`echo ${FILE} | sed -n 's|^\(.*\)[[:space:]](deleted)$|\1|p'`" -+ ;; - esac - - case "`basename \"${FILE}\"`" in diff --git a/sectool-0.9.4-numcheck.patch b/sectool-0.9.4-numcheck.patch deleted file mode 100644 index 46a041b..0000000 --- a/sectool-0.9.4-numcheck.patch +++ /dev/null @@ -1,26 +0,0 @@ -diff -up sectool-0.9.4/tests/bash_defs_debug.sh.numcheck sectool-0.9.4/tests/bash_defs_debug.sh ---- sectool-0.9.4/tests/bash_defs_debug.sh.numcheck 2010-06-02 13:33:14.224631406 +0200 -+++ sectool-0.9.4/tests/bash_defs_debug.sh 2010-06-02 13:33:37.983572856 +0200 -@@ -232,14 +232,14 @@ function check_file_perm () { - - if [[ -z "$2" ]]; then - test_exit ${E_FAIL} "check_file_perm: missing argument \$2" -- else -- if [[ "$2" != "0" ]]; then -- l_int numtest=$2 -- -- if (( numtest == 0 )); then -- test_exit ${E_FAIL} "check_file_perm: expected numeric value in \$2" -- fi -- fi -+# else -+# if [[ "$2" != "0" ]]; then -+# l_int numtest=$2 -+# -+# if (( numtest == 0 )); then -+# test_exit ${E_FAIL} "check_file_perm: expected numeric value in \$2" -+# fi -+# fi - fi - - if [[ -z "$3" ]]; then diff --git a/sectool-0.9.4-permissions.patch b/sectool-0.9.4-permissions.patch deleted file mode 100644 index 9a7b31f..0000000 --- a/sectool-0.9.4-permissions.patch +++ /dev/null @@ -1,52 +0,0 @@ -diff -up sectool-0.9.4/tests/permissions.sh.perm sectool-0.9.4/tests/permissions.sh ---- sectool-0.9.4/tests/permissions.sh.perm 2009-08-24 15:34:48.000000000 +0200 -+++ sectool-0.9.4/tests/permissions.sh 2010-05-25 13:33:14.724541772 +0200 -@@ -25,25 +25,25 @@ E_DOESNT_EXIST=1 - E_WRONG_OWNER=2 - E_WRONG_PERM=3 - --dirs="/ 755 --/bin 755 --/boot 755 -+dirs="/ 555 -+/bin 555 -+/boot 555 - /dev 755 - /etc 755 - /home 755 --/lib 755 -+/lib 555 - /media 755 - /mnt 755 - /opt 755 --/root 750 --/sbin 755 -+/root 550 -+/sbin 555 - /srv 755 - /tmp 1777 - /usr 755 -- /usr/bin 755 -- /usr/sbin 755 -+ /usr/bin 555 -+ /usr/sbin 555 - /usr/include 755 -- /usr/lib 755 -+ /usr/lib 555 - /usr/share 755 - /usr/src 755 - /usr/local 755 -diff -up sectool-0.9.4/tests/shadow.sh.perm sectool-0.9.4/tests/shadow.sh ---- sectool-0.9.4/tests/shadow.sh.perm 2010-05-25 13:35:48.966534888 +0200 -+++ sectool-0.9.4/tests/shadow.sh 2010-05-25 13:36:02.557293905 +0200 -@@ -54,8 +54,8 @@ then - fi - - # permissions on /etc/shadow and /etc/gshadow should be 400, should be owned by root:root --check_file_perm $shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "User shadow database" --check_file_perm $group_shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group shadow database" -+check_file_perm $shadow 000 root:root 1 $E_BAD_PERMISSIONS_SHADOW "User shadow database" -+check_file_perm $group_shadow 000 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group shadow database" - - - { diff --git a/sectool-0.9.4-pk1.patch b/sectool-0.9.4-pk1.patch deleted file mode 100644 index 016efee..0000000 --- a/sectool-0.9.4-pk1.patch +++ /dev/null @@ -1,21 +0,0 @@ -diff -up sectool-0.9.4/Makefile.old sectool-0.9.4/Makefile ---- sectool-0.9.4/Makefile.old 2009-11-19 13:36:45.680545213 +0100 -+++ sectool-0.9.4/Makefile 2009-11-19 13:37:05.108513565 +0100 -@@ -25,7 +25,7 @@ install: - mkdir -p $(DESTDIR)$(PKGDATADIR) - mkdir -p $(DESTDIR)$(PKGDATADIR)/scheduler - #mkdir -p $(DESTDIR)$(PKGDATADIR)/tests -- mkdir -p $(DESTDIR)$(DATADIR)/PolicyKit/policy/ -+ mkdir -p $(DESTDIR)$(DATADIR)/polkit-1/actions/ - mkdir -p $(DESTDIR)$(SYSCONFDIR)/dbus-1/system.d/ - mkdir -p $(DESTDIR)$(DATADIR)/dbus-1/system-services/ - mkdir -p $(DESTDIR)$(LIBEXECDIR)/sectool/tests -@@ -78,7 +78,7 @@ install: - done && test -z "$$fail" - chmod a+x $(DESTDIR)$(PKGDATADIR)/sectool-mechanism.py - # PolicyKit -- install -p -m644 org.fedoraproject.sectool.policy $(DESTDIR)$(DATADIR)/PolicyKit/policy/ -+ install -p -m644 org.fedoraproject.sectool.policy $(DESTDIR)$(DATADIR)/polkit-1/actions/ - install -p -m644 org.fedoraproject.sectool.mechanism.conf $(DESTDIR)$(SYSCONFDIR)/dbus-1/system.d/ - install -p -m644 org.fedoraproject.sectool.mechanism.service $(DESTDIR)$(DATADIR)/dbus-1/system-services/ - diff --git a/sectool-0.9.4-policykit-fix.patch b/sectool-0.9.4-policykit-fix.patch deleted file mode 100644 index 5c46c4a..0000000 --- a/sectool-0.9.4-policykit-fix.patch +++ /dev/null @@ -1,84 +0,0 @@ -diff -up sectool-0.9.4/src/sectool-gui.py.old sectool-0.9.4/src/sectool-gui.py ---- sectool-0.9.4/src/sectool-gui.py.old 2009-12-08 17:11:31.417357216 +0100 -+++ sectool-0.9.4/src/sectool-gui.py 2010-01-13 14:37:49.817461379 +0100 -@@ -645,7 +645,7 @@ class TestHandler( Handler ): - """ Stop button has been pressed """ - - self.threadHandler.stop() #: give a short amount of time to stop the test by itself -- self.__signalHandler.kill_thread() #: kill the test by unix-style kill through os library -+ #self.__signalHandler.kill_thread() #: kill the test by unix-style kill through os library - - def show_message_hint( self, test, msg_id ): - """ Show info message in hintWindow """ -@@ -721,6 +721,16 @@ class DBusCaller(object): - """ Get action from dbus sectool mechanism """ - return self.dbus_action_object.get_dbus_method( action, "org.fedoraproject.sectool.mechanism" ) - -+ @staticmethod -+ def error_handler(error): -+ #print "ERROR: ", error -+ pass # We will recieve an error that timeout has expired -+ -+ @staticmethod -+ def reply_handler(): -+ #print "REPLY done." -+ pass -+ - def call(self, *p, **k): - self.bus.call_async(*p, **k) - -@@ -728,13 +738,23 @@ class DBusCaller(object): - self.bus.flush() - self.bus.close() - -+ def run( self, args, file ): -+ -+ auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) -+ self.runtests(args, file) -+ - @slip.dbus.polkit.enable_proxy - def runtests( self, args, file ): - -- auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) -- if auth == "yes": self.timeout = 0.00 -- self.dbus_action_object.runtests( args, file, timeout=self.timeout, dbus_interface = "org.fedoraproject.sectool.mechanism" ) -- #dbus_action( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file, timeout=0.00 ) -+ self.bus.call_async("org.fedoraproject.sectool.mechanism", -+ "/org/fedoraproject/sectool/object", -+ "org.fedoraproject.sectool.mechanism", -+ "runtests", -+ "ass", -+ [args, file], -+ reply_handler=self.reply_handler, -+ error_handler=self.error_handler, -+ timeout=0.00) - - - class ThreadHandler(threading.Thread, Handler): -@@ -867,7 +887,7 @@ class ThreadHandler(threading.Thread, Ha - If you use timeout=-1, it will be sequencial, all positives numbers are seconds in float - """ - -- bus.runtests( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) -+ bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) - #bus.call( test.dsc["HEADER"]["NAME"], file ) - except dbus.DBusException, e: - # This should always happend. We need to be stopped by dBus to start new test in separate thread -@@ -889,8 +909,6 @@ class ThreadHandler(threading.Thread, Ha - - while self.done < count: - if self.__stopthread.isSet(): -- for reader in self.readers: -- reader.stop_thread() - #self.__formatter.stopProgressBar() - break - time.sleep(2) -@@ -921,6 +939,8 @@ class ThreadHandler(threading.Thread, Ha - The testing process is going to die .. we have a little time to stop all tests correctly - """ - self.__stopthread.set( ) -+ for reader in self.readers: -+ reader.stop_thread() - - def __make_tmp_file( self ): - """ diff --git a/sectool-0.9.4-rpmio.patch b/sectool-0.9.4-rpmio.patch deleted file mode 100644 index a3a6c68..0000000 --- a/sectool-0.9.4-rpmio.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up sectool-0.9.4/src/Makefile.rpmio sectool-0.9.4/src/Makefile ---- sectool-0.9.4/src/Makefile.rpmio 2010-04-19 12:01:28.502222085 +0200 -+++ sectool-0.9.4/src/Makefile 2010-04-19 12:01:35.076221727 +0200 -@@ -2,7 +2,7 @@ include ../sectool.mk - - CC= gcc - CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm --LDFLAGS= -lrpm -lselinux -+LDFLAGS= -lrpm -lselinux -lrpmio - - SRCS_sectool=sectool.c - OBJS_sectool=$(SRCS_sectool:.c=.o) diff --git a/sectool-0.9.2-optflags.patch b/sectool-0.9.5-optflags.patch similarity index 53% rename from sectool-0.9.2-optflags.patch rename to sectool-0.9.5-optflags.patch index 9779cf7..c47a3a9 100644 --- a/sectool-0.9.2-optflags.patch +++ b/sectool-0.9.5-optflags.patch @@ -1,12 +1,12 @@ -diff -up sectool-0.9.2/src/Makefile~ sectool-0.9.2/src/Makefile ---- sectool-0.9.2/src/Makefile~ 2008-11-13 11:08:40.000000000 +0200 -+++ sectool-0.9.2/src/Makefile 2009-04-23 00:19:30.000000000 +0300 +diff -up sectool-0.9.5/src/Makefile.optflags sectool-0.9.5/src/Makefile +--- sectool-0.9.5/src/Makefile.optflags 2010-06-04 11:35:47.000000000 +0200 ++++ sectool-0.9.5/src/Makefile 2010-06-04 11:51:19.428092050 +0200 @@ -1,7 +1,7 @@ include ../sectool.mk CC= gcc -CFLAGS= -Wall -O2 -ffast-math -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm +CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm - LDFLAGS= -lrpm -lselinux + LDFLAGS= -lrpm -lselinux -lrpmio SRCS_sectool=sectool.c diff --git a/sectool.spec b/sectool.spec index df1df45..bf8de21 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,18 +1,11 @@ Summary: A security audit system and intrusion detection system Name: sectool -Version: 0.9.4 -Release: 9%{?dist} +Version: 0.9.5 +Release: 1%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log -Patch1: sectool-0.9.2-optflags.patch -Patch2: sectool-0.9.4-pk1.patch -Patch3: sectool-0.9.4-policykit-fix.patch -Patch4: sectool-0.9.4-dbus-fix.patch -Patch5: sectool-0.9.4-rpmio.patch -Patch6: sectool-0.9.4-permissions.patch -Patch7: sectool-0.9.4-deleted.patch -Patch8: sectool-0.9.4-numcheck.patch +Patch1: sectool-0.9.5-optflags.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils python-slip-dbus PolicyKit dbus @@ -48,13 +41,6 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .optflags -%patch2 -p1 -b .pk1 -%patch3 -p1 -b .policykit -%patch4 -p1 -b .dbus -%patch5 -p1 -b .rpmio -%patch6 -p1 -b .perm -%patch7 -p1 -b .deleted -%patch8 -p1 -b .numcheck %build make %{?_smp_mflags} @@ -128,10 +114,13 @@ rm -rf $RPM_BUILD_ROOT %changelog -* Wed Jun 02 2010 Peter Vrabec - 0.9.4-9 +* Fri Jun 04 2010 Peter Vrabec - 0.9.5-1 +- upgrade + +* Wed Jun 02 2010 Peter Vrabec - 0.9.4-9 - skip a numeric check in debug mode -* Tue May 25 2010 Peter Vrabec - 0.9.4-8 +* Tue May 25 2010 Peter Vrabec - 0.9.4-8 - filter (deleted) files in netserv - create empty log file after installation - fix expected permissions on shadow/gshadow diff --git a/sources b/sources index 469a20f..3c19455 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -fbd348268a8c5a5cf3004fb96a47e393 sectool-0.9.4.tar.bz2 +3f2496eaf10d690e899a0f8b3edb9853 sectool-0.9.5.tar.bz2 From 6ddc23b1231deb12e78c5840b8439498ae52ec30 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 29 Jul 2010 12:20:01 +0000 Subject: [PATCH 10/27] dist-git conversion --- .cvsignore => .gitignore | 0 Makefile | 21 --------------------- 2 files changed, 21 deletions(-) rename .cvsignore => .gitignore (100%) delete mode 100644 Makefile diff --git a/.cvsignore b/.gitignore similarity index 100% rename from .cvsignore rename to .gitignore diff --git a/Makefile b/Makefile deleted file mode 100644 index 0ab0e08..0000000 --- a/Makefile +++ /dev/null @@ -1,21 +0,0 @@ -# Makefile for source rpm: sectool -# $Id: Makefile,v 1.1 2008/01/21 17:15:20 kevin Exp $ -NAME := sectool -SPECFILE = $(firstword $(wildcard *.spec)) - -define find-makefile-common -for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$d/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done -endef - -MAKEFILE_COMMON := $(shell $(find-makefile-common)) - -ifeq ($(MAKEFILE_COMMON),) -# attept a checkout -define checkout-makefile-common -test -f CVS/Root && { cvs -Q -d $$(cat CVS/Root) checkout common && echo "common/Makefile.common" ; } || { echo "ERROR: I can't figure out how to checkout the 'common' module." ; exit -1 ; } >&2 -endef - -MAKEFILE_COMMON := $(shell $(checkout-makefile-common)) -endif - -include $(MAKEFILE_COMMON) From f472186992d1b8e800e5f9022d5f73471355500d Mon Sep 17 00:00:00 2001 From: David Malcolm Date: Wed, 11 Aug 2010 18:00:36 -0400 Subject: [PATCH 11/27] recompiling .py files against Python 2.7 (rhbz#623358) --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index bf8de21..9a168f3 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 1%{?dist} +Release: 2%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -114,6 +114,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Aug 11 2010 David Malcolm - 0.9.5-2 +- recompiling .py files against Python 2.7 (rhbz#623358) + * Fri Jun 04 2010 Peter Vrabec - 0.9.5-1 - upgrade From a368be5c8fc88606b43ee8626964da2a0d65a815 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Thu, 20 Jan 2011 15:11:11 +0100 Subject: [PATCH 12/27] rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 9a168f3..830cbed 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 2%{?dist} +Release: 3%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -114,6 +114,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Thu Jan 20 2011 Peter Vrabec - 0.9.5-3 +- rebuild + * Wed Aug 11 2010 David Malcolm - 0.9.5-2 - recompiling .py files against Python 2.7 (rhbz#623358) From 292d2720f5e95fa22803f500dc7e28ab41d8cc24 Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Wed, 9 Feb 2011 07:01:56 -0600 Subject: [PATCH 13/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 830cbed..ab14a37 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 3%{?dist} +Release: 4%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -114,6 +114,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Feb 09 2011 Fedora Release Engineering - 0.9.5-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + * Thu Jan 20 2011 Peter Vrabec - 0.9.5-3 - rebuild From ceac501d29855d5ca2ab01c581348df48da8e80d Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Fri, 13 Jan 2012 21:44:09 -0600 Subject: [PATCH 14/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index ab14a37..1a1305a 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 4%{?dist} +Release: 5%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -114,6 +114,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Sat Jan 14 2012 Fedora Release Engineering - 0.9.5-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + * Wed Feb 09 2011 Fedora Release Engineering - 0.9.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild From a6a489926470a87efb415a8014da464aa30ca34e Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Sun, 4 Mar 2012 18:16:19 +0000 Subject: [PATCH 15/27] PolicyKit -> polkit since F-11 --- sectool.spec | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/sectool.spec b/sectool.spec index 1a1305a..34df4dc 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,19 +1,20 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 5%{?dist} +Release: 6%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart +License: GPLv2+ +Group: Applications/System + Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.5-optflags.patch -License: GPLv2+ -Group: Applications/System -Requires: gettext coreutils python-slip-dbus PolicyKit dbus + +Requires: gettext coreutils python-slip-dbus polkit dbus Requires: python2 rpm-python BuildRequires: desktop-file-utils gettext intltool asciidoc BuildRequires: rpm-devel >= 4.6.0 BuildRequires: libselinux-devel libselinux-python glibc-headers -BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) # Temporarily disable check-buildroot #%define __arch_install_post %{nil} @@ -46,7 +47,6 @@ sectool-gui provides a GTK-based graphical user interface to sectool. make %{?_smp_mflags} %install -rm -rf $RPM_BUILD_ROOT make DESTDIR=$RPM_BUILD_ROOT install desktop-file-install --delete-original \ --dir $RPM_BUILD_ROOT%{_datadir}/applications \ @@ -69,9 +69,6 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %find_lang %{name} -%clean -rm -rf $RPM_BUILD_ROOT - %files -f %{name}.lang %defattr(-,root,root) %doc COPYING AUTHORS README doc/tests_documentation.html @@ -95,7 +92,7 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man8/sectool.8.gz %{_localstatedir}/log/sectool.log -# PolicyKit +# polkit %config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf %{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy %{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service @@ -114,6 +111,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Sun Mar 4 2012 Peter Robinson - 0.9.5-6 +- PolicyKit -> polkit since F-11 + * Sat Jan 14 2012 Fedora Release Engineering - 0.9.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild From 4859832281f0e08c6fbe48fc252c4199a0e9e322 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Tue, 3 Apr 2012 16:15:06 +0200 Subject: [PATCH 16/27] fixing dbus config privilege escalation (#809437) --- sectool-0.9.5-dbus.patch | 12 ++++++++++++ sectool.spec | 7 ++++++- 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.5-dbus.patch diff --git a/sectool-0.9.5-dbus.patch b/sectool-0.9.5-dbus.patch new file mode 100644 index 0000000..aedb3ef --- /dev/null +++ b/sectool-0.9.5-dbus.patch @@ -0,0 +1,12 @@ +diff -up sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf +--- sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus 2012-04-03 15:21:05.521186717 +0200 ++++ sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf 2012-04-03 15:23:57.602490428 +0200 +@@ -9,7 +9,6 @@ + + + +- +- ++ + + diff --git a/sectool.spec b/sectool.spec index 34df4dc..8740814 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 6%{?dist} +Release: 7%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart License: GPLv2+ Group: Applications/System @@ -9,6 +9,7 @@ Group: Applications/System Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.5-optflags.patch +Patch2: sectool-0.9.5-dbus.patch Requires: gettext coreutils python-slip-dbus polkit dbus Requires: python2 rpm-python @@ -42,6 +43,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .optflags +%patch2 -p1 -b .dbus %build make %{?_smp_mflags} @@ -111,6 +113,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Tue Apr 03 2012 Peter Vrabec - 0.9.5-7 +- fixing dbus config privilege escalation (#809437) + * Sun Mar 4 2012 Peter Robinson - 0.9.5-6 - PolicyKit -> polkit since F-11 From be59cae3036f40c3db6c3a4c1b804d8eae04462b Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Sat, 21 Jul 2012 14:17:01 -0500 Subject: [PATCH 17/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 8740814..c1d60b5 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 7%{?dist} +Release: 8%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart License: GPLv2+ Group: Applications/System @@ -113,6 +113,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Sat Jul 21 2012 Fedora Release Engineering - 0.9.5-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + * Tue Apr 03 2012 Peter Vrabec - 0.9.5-7 - fixing dbus config privilege escalation (#809437) From fb378303509e9a4cbf7dea2e739057715013de14 Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Thu, 14 Feb 2013 17:44:41 -0600 Subject: [PATCH 18/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index c1d60b5..1c48af0 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 8%{?dist} +Release: 9%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart License: GPLv2+ Group: Applications/System @@ -113,6 +113,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Thu Feb 14 2013 Fedora Release Engineering - 0.9.5-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + * Sat Jul 21 2012 Fedora Release Engineering - 0.9.5-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild From b8e2d6f09f22f796984c2fc19c1e1683d6866983 Mon Sep 17 00:00:00 2001 From: Toshio Kuratomi Date: Mon, 25 Feb 2013 17:15:28 -0800 Subject: [PATCH 19/27] Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077 --- sectool.spec | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 1c48af0..3b4f128 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 9%{?dist} +Release: 10%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart License: GPLv2+ Group: Applications/System @@ -52,7 +52,9 @@ make %{?_smp_mflags} make DESTDIR=$RPM_BUILD_ROOT install desktop-file-install --delete-original \ --dir $RPM_BUILD_ROOT%{_datadir}/applications \ +%if 0%{?fedora} && 0%{?fedora} < 19 --vendor=fedora \ +%endif $RPM_BUILD_ROOT%{_datadir}/applications/sectool.desktop #logrotate @@ -108,11 +110,18 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %{_datadir}/sectool/sectool-gui.py* %{_datadir}/pixmaps/sectool-gui.png %{_datadir}/pixmaps/sectool-min.png +%if 0%{?fedora} && 0%{?fedora} < 19 %{_datadir}/applications/fedora-sectool.desktop +%else +%{_datadir}/applications/sectool.desktop +%endif %{_datadir}/pixmaps/sectool/*.png %changelog +* Mon Feb 25 2013 Toshio Kuratomi - 0.9.5-10 +- Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077 + * Thu Feb 14 2013 Fedora Release Engineering - 0.9.5-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild From 229b34069f5444a73838bae86b438322ff7887b4 Mon Sep 17 00:00:00 2001 From: Luke Macken Date: Thu, 9 May 2013 19:23:53 -0400 Subject: [PATCH 20/27] Fix the URL --- sectool.spec | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/sectool.spec b/sectool.spec index 3b4f128..7221c4c 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,8 +1,8 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 10%{?dist} -URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart +Release: 11%{?dist} +URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Thu May 09 2013 Luke Macken - 0.9.5-11 +- Fix the URL + * Mon Feb 25 2013 Toshio Kuratomi - 0.9.5-10 - Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077 From 40e158d4f78949ae5ed88726ef147dbe7bcd8b5f Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Sun, 4 Aug 2013 09:04:49 -0500 Subject: [PATCH 21/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 7221c4c..347dc21 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 11%{?dist} +Release: 12%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Sun Aug 04 2013 Fedora Release Engineering - 0.9.5-12 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + * Thu May 09 2013 Luke Macken - 0.9.5-11 - Fix the URL From d1d1954478e0a0af3f97885b399016ffceeaa07a Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Sun, 8 Jun 2014 01:05:13 -0500 Subject: [PATCH 22/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 347dc21..3cb6378 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 12%{?dist} +Release: 13%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Sun Jun 08 2014 Fedora Release Engineering - 0.9.5-13 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + * Sun Aug 04 2013 Fedora Release Engineering - 0.9.5-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild From 2ce72a12d60787560ebc118dc99fec46b7d00613 Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Mon, 18 Aug 2014 01:56:15 +0000 Subject: [PATCH 23/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 3cb6378..6922a7e 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 13%{?dist} +Release: 14%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Mon Aug 18 2014 Fedora Release Engineering - 0.9.5-14 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + * Sun Jun 08 2014 Fedora Release Engineering - 0.9.5-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild From 4311a77181e39bc2d3a35d68b806cada77cec1d3 Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Fri, 19 Jun 2015 00:36:15 +0000 Subject: [PATCH 24/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 6922a7e..a77c24d 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 14%{?dist} +Release: 15%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Fri Jun 19 2015 Fedora Release Engineering - 0.9.5-15 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + * Mon Aug 18 2014 Fedora Release Engineering - 0.9.5-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild From 3743dd08a6f63d90d0c32071d48f08117199c434 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= Date: Wed, 29 Jul 2015 09:52:49 -0400 Subject: [PATCH 25/27] Rebuild for rpm 4.12.90 --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index a77c24d..45dc526 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 15%{?dist} +Release: 16%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Wed Jul 29 2015 Zbigniew Jędrzejewski-Szmek - 0.9.5-16 +- Rebuilt for rpm 4.12.90 + * Fri Jun 19 2015 Fedora Release Engineering - 0.9.5-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild From d4ff109281579f07ad07ce8780ee8ef8de3391d8 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 4 Feb 2016 23:49:50 +0000 Subject: [PATCH 26/27] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 45dc526..d674677 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 16%{?dist} +Release: 17%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Thu Feb 04 2016 Fedora Release Engineering - 0.9.5-17 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + * Wed Jul 29 2015 Zbigniew Jędrzejewski-Szmek - 0.9.5-16 - Rebuilt for rpm 4.12.90 From 8b3d8ab75be0c058f142d9b218126faf9059cf56 Mon Sep 17 00:00:00 2001 From: Daniel Kopecek Date: Mon, 13 Jun 2016 15:09:46 +0200 Subject: [PATCH 27/27] The sectool project is no longer developed nor maintained upstream. As a replacement, try the OpenSCAP project (https://www.open-scap.org) and its sectool SCL content (openscap-content-sectool package). --- .gitignore | 1 - dead.package | 1 + sectool-0.9.5-dbus.patch | 12 -- sectool-0.9.5-optflags.patch | 12 -- sectool.log | 7 - sectool.spec | 323 ----------------------------------- sources | 1 - 7 files changed, 1 insertion(+), 356 deletions(-) delete mode 100644 .gitignore create mode 100644 dead.package delete mode 100644 sectool-0.9.5-dbus.patch delete mode 100644 sectool-0.9.5-optflags.patch delete mode 100644 sectool.log delete mode 100644 sectool.spec delete mode 100644 sources diff --git a/.gitignore b/.gitignore deleted file mode 100644 index e8bbf4c..0000000 --- a/.gitignore +++ /dev/null @@ -1 +0,0 @@ -sectool-0.9.5.tar.bz2 diff --git a/dead.package b/dead.package new file mode 100644 index 0000000..0e76cf2 --- /dev/null +++ b/dead.package @@ -0,0 +1 @@ +The sectool project is no longer developed nor maintained upstream. As a replacement, try the OpenSCAP project (https://www.open-scap.org) and its sectool SCL content (openscap-content-sectool package). diff --git a/sectool-0.9.5-dbus.patch b/sectool-0.9.5-dbus.patch deleted file mode 100644 index aedb3ef..0000000 --- a/sectool-0.9.5-dbus.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf ---- sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus 2012-04-03 15:21:05.521186717 +0200 -+++ sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf 2012-04-03 15:23:57.602490428 +0200 -@@ -9,7 +9,6 @@ - - - -- -- -+ - - diff --git a/sectool-0.9.5-optflags.patch b/sectool-0.9.5-optflags.patch deleted file mode 100644 index c47a3a9..0000000 --- a/sectool-0.9.5-optflags.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up sectool-0.9.5/src/Makefile.optflags sectool-0.9.5/src/Makefile ---- sectool-0.9.5/src/Makefile.optflags 2010-06-04 11:35:47.000000000 +0200 -+++ sectool-0.9.5/src/Makefile 2010-06-04 11:51:19.428092050 +0200 -@@ -1,7 +1,7 @@ - include ../sectool.mk - - CC= gcc --CFLAGS= -Wall -O2 -ffast-math -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm -+CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm - LDFLAGS= -lrpm -lselinux -lrpmio - - SRCS_sectool=sectool.c diff --git a/sectool.log b/sectool.log deleted file mode 100644 index b8c5f70..0000000 --- a/sectool.log +++ /dev/null @@ -1,7 +0,0 @@ -/var/log/sectool.log { - missingok - notifempty - size 250k - create 0644 root root -} - diff --git a/sectool.spec b/sectool.spec deleted file mode 100644 index d674677..0000000 --- a/sectool.spec +++ /dev/null @@ -1,323 +0,0 @@ -Summary: A security audit system and intrusion detection system -Name: sectool -Version: 0.9.5 -Release: 17%{?dist} -URL: https://fedorahosted.org/sectool -License: GPLv2+ -Group: Applications/System - -Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 -Source1: sectool.log -Patch1: sectool-0.9.5-optflags.patch -Patch2: sectool-0.9.5-dbus.patch - -Requires: gettext coreutils python-slip-dbus polkit dbus -Requires: python2 rpm-python -BuildRequires: desktop-file-utils gettext intltool asciidoc -BuildRequires: rpm-devel >= 4.6.0 -BuildRequires: libselinux-devel libselinux-python glibc-headers - -# Temporarily disable check-buildroot -#%define __arch_install_post %{nil} -# Disable debuginfo building -%define debug_package %{nil} - -%package gui -Summary: GUI for sectool - security audit system and intrusion detection system -License: GPLv2+ -Group: Applications/System -Requires: sectool = %{version}-%{release} -Requires: pygtk2 - -%description -sectool is a security tool that can be used both as a security audit -and intrusion detection system. It consists of set of tests, library -and command line interface tool. Tests are sorted into groups and security -levels. Admins can run certain tests, groups or whole security levels. -The library and the tools are implemented in python and tests are -language independent. - -%description gui -sectool-gui provides a GTK-based graphical user interface to sectool. - -%prep -%setup -q -%patch1 -p1 -b .optflags -%patch2 -p1 -b .dbus - -%build -make %{?_smp_mflags} - -%install -make DESTDIR=$RPM_BUILD_ROOT install -desktop-file-install --delete-original \ - --dir $RPM_BUILD_ROOT%{_datadir}/applications \ -%if 0%{?fedora} && 0%{?fedora} < 19 - --vendor=fedora \ -%endif - $RPM_BUILD_ROOT%{_datadir}/applications/sectool.desktop - -#logrotate -install -d -m 755 $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d -install -p -m 644 %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sectool -#adjust paths in sectool.conf -sed -i 's,DSC_DIR=\(.*\),DSC_DIR=%{_sysconfdir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf -sed -i 's,TESTS_DIRS=\(.*\),TESTS_DIRS=%{_libexecdir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf -sed -i 's,TDATA_DIR_BASE=\(.*\),TDATA_DIR_BASE=%{_localstatedir}/lib/sectool,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf -#adjust icons path in guiOutput.py -sed -i 's,__ico_path = \(.*\),__ico_path = "%{_datadir}/pixmaps/sectool/",' $RPM_BUILD_ROOT%{_datadir}/sectool/guiOutput.py -#this file is just for development -rm $RPM_BUILD_ROOT/%{_datadir}/sectool/scheduler/selftest.py -mkdir -p $RPM_BUILD_ROOT/var/log/ -touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log - -%find_lang %{name} - -%files -f %{name}.lang -%defattr(-,root,root) -%doc COPYING AUTHORS README doc/tests_documentation.html -%config(noreplace) %{_sysconfdir}/sectool/ -%config(noreplace) %{_sysconfdir}/logrotate.d/sectool -%dir %{_localstatedir}/lib/sectool -%dir %{_datadir}/sectool -%{_sbindir}/sectool -#library with tests -%{_datadir}/sectool/scheduler -%{_libexecdir}/sectool/tests -# command line tool -%{_datadir}/sectool/actions.py* -%{_datadir}/sectool/__init__.py* -%{_datadir}/sectool/output.py* -%{_datadir}/sectool/mailoutput.py* -%{_datadir}/sectool/sectool.py* -%{_datadir}/sectool/tuierrors.py* -%{_libexecdir}/sectool-mechanism.py* -%{_datadir}/sectool/sectool-mechanism.py* -%{_mandir}/man8/sectool.8.gz -%{_localstatedir}/log/sectool.log - -# polkit -%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf -%{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy -%{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service - -%files gui -%defattr(-,root,root) -%config(noreplace) %{_sysconfdir}/pam.d/sectool-gui -#%config(noreplace) %{_sysconfdir}/security/console.apps/sectool-gui -%{_bindir}/sectool-gui -%{_datadir}/sectool/gui*.py* -%{_datadir}/sectool/sectool-gui.py* -%{_datadir}/pixmaps/sectool-gui.png -%{_datadir}/pixmaps/sectool-min.png -%if 0%{?fedora} && 0%{?fedora} < 19 -%{_datadir}/applications/fedora-sectool.desktop -%else -%{_datadir}/applications/sectool.desktop -%endif -%{_datadir}/pixmaps/sectool/*.png - - -%changelog -* Thu Feb 04 2016 Fedora Release Engineering - 0.9.5-17 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - -* Wed Jul 29 2015 Zbigniew Jędrzejewski-Szmek - 0.9.5-16 -- Rebuilt for rpm 4.12.90 - -* Fri Jun 19 2015 Fedora Release Engineering - 0.9.5-15 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - -* Mon Aug 18 2014 Fedora Release Engineering - 0.9.5-14 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - -* Sun Jun 08 2014 Fedora Release Engineering - 0.9.5-13 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - -* Sun Aug 04 2013 Fedora Release Engineering - 0.9.5-12 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - -* Thu May 09 2013 Luke Macken - 0.9.5-11 -- Fix the URL - -* Mon Feb 25 2013 Toshio Kuratomi - 0.9.5-10 -- Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077 - -* Thu Feb 14 2013 Fedora Release Engineering - 0.9.5-9 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - -* Sat Jul 21 2012 Fedora Release Engineering - 0.9.5-8 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - -* Tue Apr 03 2012 Peter Vrabec - 0.9.5-7 -- fixing dbus config privilege escalation (#809437) - -* Sun Mar 4 2012 Peter Robinson - 0.9.5-6 -- PolicyKit -> polkit since F-11 - -* Sat Jan 14 2012 Fedora Release Engineering - 0.9.5-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - -* Wed Feb 09 2011 Fedora Release Engineering - 0.9.5-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - -* Thu Jan 20 2011 Peter Vrabec - 0.9.5-3 -- rebuild - -* Wed Aug 11 2010 David Malcolm - 0.9.5-2 -- recompiling .py files against Python 2.7 (rhbz#623358) - -* Fri Jun 04 2010 Peter Vrabec - 0.9.5-1 -- upgrade - -* Wed Jun 02 2010 Peter Vrabec - 0.9.4-9 -- skip a numeric check in debug mode - -* Tue May 25 2010 Peter Vrabec - 0.9.4-8 -- filter (deleted) files in netserv -- create empty log file after installation -- fix expected permissions on shadow/gshadow - -* Fri Apr 23 2010 Maros Barabas - 0.9.4-7 -- Permissions test: changed permissions of directories in root - -* Mon Apr 19 2010 Maros Barabas - 0.9.4-6 -- Added -lrpmio (#564705) - -* Wed Mar 10 2010 Maros Barabas - 0.9.4-5 -- added patches for PolicyKit and dBus bugs - -* Sat Jan 2 2010 Tomas Mraz - 0.9.4-4 -- rebuilt with new librpm - -* Thu Nov 19 2009 Maros Barabas - 0.9.4-3 -- change policy file path -- removed usermod requirement - -* Wed Sep 09 2009 Maros Barabas - 0.9.4-2 -- upgrade with PolicyKit integration -- dbus update -- fedora test day bugfixes - -* Sun Jul 26 2009 Fedora Release Engineering - 0.9.3-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - -* Tue Jul 14 2009 Peter Vrabec - 0.9.3-2 -- handle ext4 fs in filesystem test (#510646) - -* Wed Jun 03 2009 Peter Vrabec - 0.9.3-1 -- upgrade, bugfix release - -* Thu May 21 2009 Ville Skyttä - 0.9.2-5 -- Build with $RPM_OPT_FLAGS (#497231). - -* Mon Jan 26 2009 Daniel Kopecek - 0.9.2-4 -- removed showvars.dsc - -* Fri Jan 23 2009 Daniel Kopecek - 0.9.2-3 -- removed showvars.sh -- added dist macro to Release: - -* Tue Dec 02 2008 Daniel Kopecek - 0.9.2-2 -- bugfix release - -* Mon Nov 24 2008 Daniel Kopecek - 0.9.2-1 -- upgrade, see changelog for changes - -* Mon Nov 03 2008 Peter Vrabec - 0.9.1-4 -- checking zsh home files (#469913) -- fix selinux test failure (#469910) - -* Mon Nov 03 2008 Peter Vrabec - 0.9.1-3 -- fix getValueFromH() (#469368) -- fix GUI: set REFRESH, DEBUG, LEVEL - -* Thu Oct 23 2008 Peter Vrabec - 0.9.1-2 -- add missing requirement (468033) -- fix deps of cron test (468033) - -* Wed Oct 22 2008 Peter Vrabec - 0.9.1-1 -- upgrade, bugfix release - -* Thu Oct 09 2008 Peter Vrabec - 0.9.0-1 -- upgrade, see changelog for changes - -* Sat Sep 06 2008 Peter Vrabec - 0.8.6-2 -- fix selinux DEPS, quick workaround - -* Fri Sep 05 2008 Peter Vrabec - 0.8.6-1 -- upgrade, see changelog - -* Thu Jul 03 2008 Peter Vrabec - 0.8.0-1 -- upgrade - -* Fri Jun 06 2008 Peter Vrabec - 0.7.6-1 -- upgrade - -* Mon May 26 2008 Peter Vrabec - 0.7.5-1 -- upgrade - -* Wed May 21 2008 Peter Vrabec - 0.7.4-1 -- new upstream release, lots of fixes and improvements, - see changelog - -* Mon Apr 28 2008 Peter Vrabec - 0.7.3-1 -- new upstream release -- better test integration - -* Fri Apr 25 2008 Peter Vrabec - 0.7.2-1 -- new upstream release -- Support overriding level configuration in ~/.sectoolrc -- Add saving level configuration in GUI: - -* Mon Apr 21 2008 Peter Vrabec - 0.7.1-1 -- new upstream release - -* Tue Apr 08 2008 Peter Vrabec - 0.7.0-1 -- new upstream release - -* Mon Mar 31 2008 Maros Barabas - 0.6.0-4 -- improved killing system in gui - -* Fri Mar 28 2008 Maros Barabas - 0.6.0-3 -- code review: cleaning code in OuputFormatter - adding comments - migrating public formatter methods to private - -* Tue Mar 25 2008 Maros Barabas - 0.6.0-2 -- repaired sensitivity of popup buttons -- code review: migrating public methods to private - more comments - -* Fri Mar 21 2008 Peter Vrabec - 0.6.0-1 -- gui improvements -- new feature include/exclude tests -- new sectool.conf - -* Mon Mar 18 2008 Jakub Hrozek - 0.5.1-1 -- Fix mail output - -* Wed Mar 05 2008 Peter Vrabec - 0.5.0-1 -- email sending support - -* Wed Mar 05 2008 Peter Vrabec - 0.4.0-1 -- new tests -- bugfixes -- support diff results -- improved GUI - -* Wed Jan 23 2008 Peter Vrabec - 0.2.0-1 -- stable demo release - -* Fri Jan 18 2008 Peter Vrabec - 0.1.0-4 -- fix rpmbuild on fc8 - -* Wed Jan 16 2008 Peter Vrabec - 0.1.0-3 -- fix license issues -- some macros clean up in makefile and spec - -* Wed Jan 16 2008 Peter Vrabec - 0.1.0-2 -- make rpmlint happy, very important cleanup - -* Tue Jan 15 2008 Peter Vrabec - 0.1.0-1 -- initial packaging diff --git a/sources b/sources deleted file mode 100644 index 3c19455..0000000 --- a/sources +++ /dev/null @@ -1 +0,0 @@ -3f2496eaf10d690e899a0f8b3edb9853 sectool-0.9.5.tar.bz2