Move to /sbin for early boot running, and install sample rules. Also more secure perms as recommended by upstream.

(Portage version: 2.0.51.20-r5)

7 files changed, 115 insertions, 16 deletions

diff --git a/sys-process/audit/ChangeLog b/sys-process/audit/ChangeLog
index 1e6950ce819a..2e36f22eb933 100644
--- a/sys-process/audit/ChangeLog
+++ b/sys-process/audit/ChangeLog
@@ -1,6 +1,14 @@
 # ChangeLog for sys-process/audit
 # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-process/audit/ChangeLog,v 1.2 2005/05/01 02:40:15 beu Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-process/audit/ChangeLog,v 1.3 2005/05/01 03:20:47 robbat2 Exp $
+
+*audit-0.7.2-r1 (30 Apr 2005)
+
+  30 Apr 2005; Robin H. Johnson <robbat2@gentoo.org> metadata.xml,
+  +files/auditd.confd-0.7.2-r1, +files/auditd.initd-0.7.2-r1,
+  +audit-0.7.2-r1.ebuild:
+  Move to /sbin for early boot running, and install sample rules. Also more
+  secure perms as recommended by upstream.
 
 *audit-0.7.2 (01 May 2005)
 
diff --git a/sys-process/audit/Manifest b/sys-process/audit/Manifest
index f35e5cff6792..129c062cba75 100644
--- a/sys-process/audit/Manifest
+++ b/sys-process/audit/Manifest
@@ -1,20 +1,15 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
+MD5 7ebd55762c36ef60780e1553f2eee200 audit-0.7.2.ebuild 1116
+MD5 9b3fb1a0822bc822c584ccbf77f3a424 audit-0.7.2-r1.ebuild 1167
 MD5 72f1c8a16118107f7f189d9640c4315a audit-0.7.1.ebuild 1120
+MD5 769d841caef7656424720f266b56123e ChangeLog 512
 MD5 84124fe920f0d72eac925d160de3bde3 audit-0.7.ebuild 1036
 MD5 4028de99a5b2e8ae083e2b2da72a4ce6 metadata.xml 227
-MD5 769d841caef7656424720f266b56123e ChangeLog 512
-MD5 7ebd55762c36ef60780e1553f2eee200 audit-0.7.2.ebuild 1116
-MD5 bf5a8a780a21b8072984968db475969e files/digest-audit-0.7.1 62
-MD5 7c1f1f14a4750e7d8bbc1de62b3fcf59 files/auditd.initd 708
+MD5 57026811a9ae14e0a09f8471cde966b0 audit.spec 7846
 MD5 55e18ec35f409c781ee0b974f0006239 files/digest-audit-0.7 60
-MD5 d0c04da868c3fe0dff941187f054ecf6 files/auditd.confd 474
+MD5 bf5a8a780a21b8072984968db475969e files/digest-audit-0.7.1 62
 MD5 acc06693c8205b28388a54f7812a5738 files/digest-audit-0.7.2 62
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.1 (GNU/Linux)
-
-iD8DBQFCdEGujUHll2nfF60RAnGfAKDG3l1UOGsFrVzO7CGjaYnr2qPuJgCeIbup
-kYgQ2s50PBQl8EorYjryaIs=
-=loQV
------END PGP SIGNATURE-----
+MD5 3af0742d57a8008011434ac9e764527b files/auditd.initd-0.7.2-r1 700
+MD5 d0c04da868c3fe0dff941187f054ecf6 files/auditd.confd-0.7.2-r1 474
+MD5 acc06693c8205b28388a54f7812a5738 files/digest-audit-0.7.2-r1 62
+MD5 d0c04da868c3fe0dff941187f054ecf6 files/auditd.confd 474
+MD5 7c1f1f14a4750e7d8bbc1de62b3fcf59 files/auditd.initd 708
diff --git a/sys-process/audit/audit-0.7.2-r1.ebuild b/sys-process/audit/audit-0.7.2-r1.ebuild
new file mode 100644
index 000000000000..649855b3eb41
--- /dev/null
+++ b/sys-process/audit/audit-0.7.2-r1.ebuild
@@ -0,0 +1,54 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-process/audit/audit-0.7.2-r1.ebuild,v 1.1 2005/05/01 03:20:47 robbat2 Exp $
+
+DESCRIPTION="Userspace utilities for storing and processing auditing records."
+HOMEPAGE="http://people.redhat.com/sgrubb/audit/"
+SRC_URI="${HOMEPAGE}${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~x86"
+IUSE=""
+
+DEPEND="sys-devel/libtool
+	virtual/os-headers
+	>=sys-devel/automake-1.9
+	>=sys-devel/autoconf-2.59"
+RDEPEND=""
+
+src_unpack() {
+	unpack ${A} || die "unpack failed"
+	cd ${S} || die "cd '${S}' failed"
+	WANT_AUTOMAKE="1.9" \
+		autoreconf -fv --install || die "autoreconf failed"
+}
+
+src_compile() {
+	econf --sbindir=/sbin --libdir=/lib || die "econf failed"
+	emake || die "emake failed"
+}
+
+src_install() {
+	emake DESTDIR=${D} install || die "emake install failed"
+	dodir /usr/lib
+	mv ${D}/lib/*.a ${D}/usr/lib
+	# remove RH garbage
+	rm -rf ${D}/etc/rc.d ${D}/etc/sysconfig
+	# docs
+	dodoc AUTHORS ChangeLog README* THANKS TODO sample.rules
+	# scripts
+	newinitd ${FILESDIR}/auditd.initd-0.7.2-r1 auditd
+	newconfd ${FILESDIR}/auditd.confd-0.7.2-r1 auditd
+	# audit logs go here
+	keepdir /var/log/audit/
+	# restrictive perms for security
+	chmod 0750 ${D}/sbin/{auditctl,auditd,ausearch,autrace} ${D}/var/log/audit/
+	chmod 0640 ${D}/etc/{auditd.conf,audit.rules}
+}
+
+pkg_postinst() {
+	# upstream wants these to have restrictive perms
+	chmod 0750 /sbin/{auditctl,auditd,ausearch,autrace} /var/log/audit/
+	chmod 0640 /etc/{auditd.conf,audit.rules}
+}
diff --git a/sys-process/audit/files/auditd.confd-0.7.2-r1 b/sys-process/audit/files/auditd.confd-0.7.2-r1
new file mode 100644
index 000000000000..6a2f9d1da7be
--- /dev/null
+++ b/sys-process/audit/files/auditd.confd-0.7.2-r1
@@ -0,0 +1,12 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-process/audit/files/auditd.confd-0.7.2-r1,v 1.1 2005/05/01 03:20:48 robbat2 Exp $
+
+# Configuration options for auditd
+# -f for foreground mode
+# There are some other options as well, but you'll have to look in the source
+# code to find them As they aren't ready for use yet.
+extraoptions=''
+
+# Audit rules file
+rulefile=/etc/audit.rules
diff --git a/sys-process/audit/files/auditd.initd-0.7.2-r1 b/sys-process/audit/files/auditd.initd-0.7.2-r1
new file mode 100644
index 000000000000..db705c6aa780
--- /dev/null
+++ b/sys-process/audit/files/auditd.initd-0.7.2-r1
@@ -0,0 +1,26 @@
+#!/sbin/runscript
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-process/audit/files/auditd.initd-0.7.2-r1,v 1.1 2005/05/01 03:20:48 robbat2 Exp $
+
+start() {
+	ebegin "Starting auditd"
+	start-stop-daemon \
+		--start --quiet --pidfile /var/run/auditd.pid \
+		--exec /sbin/auditd -- ${extraoptions}
+	local ret=$?
+	eend $ret
+	if [ $ret -eq 0 -a -n "${rulefile}" -a -f "${rulefile}" ]; then
+		einfo "Loading audit rules from ${rulefile}"
+		/sbin/auditctl -R "${rulefile}"
+		ret=$?
+	fi
+	return $ret
+}
+
+stop() {
+	ebegin "Stopping auditd"
+	start-stop-daemon \
+		--stop --quiet --pidfile /var/run/auditd.pid
+	eend $?
+}
diff --git a/sys-process/audit/files/digest-audit-0.7.2-r1 b/sys-process/audit/files/digest-audit-0.7.2-r1
new file mode 100644
index 000000000000..73d71d6b692a
--- /dev/null
+++ b/sys-process/audit/files/digest-audit-0.7.2-r1
@@ -0,0 +1 @@
+MD5 56c82cfe0d5af98a3313a8a76a08ed43 audit-0.7.2.tar.gz 70184
diff --git a/sys-process/audit/metadata.xml b/sys-process/audit/metadata.xml
index d5f0a66b8ccc..d07e58a5235b 100644
--- a/sys-process/audit/metadata.xml
+++ b/sys-process/audit/metadata.xml
@@ -5,4 +5,7 @@
   <maintainer>
     <email>beu@gentoo.org</email>
   </maintainer>
+  <maintainer>
+    <email>robbat2@gentoo.org</email>
+  </maintainer>
 </pkgmetadata>