File lynis-audit-opensuse.spec of Package lynis-audit-opensuse

Overview Repositories Revisions Requests Users Attributes Meta

File lynis-audit-opensuse.spec of Package lynis-audit-opensuse

#
# spec file for package lynis-audit-opensuse
#
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#

%if ! %{defined _fillupdir}
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name:           lynis-audit-opensuse
Version:        0.0+git20231213.83b61ea
Release:        0
Summary:        These config files make Lynis audit tool happier
License:        MIT
Group:          Development/Tools/Other
URL:            https://github.com/illuusio/lynis-audit-opensuse
Source0:        %{name}-%{version}.tar.xz
Source1:        sysconfig.%{name}
Requires:       acct
Requires:       audit
Requires:       dialog
Requires:       fail2ban
Requires:       lynis
Requires:       net-tools-deprecated
Requires:       rkhunter
Requires:       sysstat
Requires:       tripwire
BuildArch:      noarch
%{?systemd_requires}

%description
These config files make Lynis (https://cisofy.com/lynis/) auditing tool happier.

If you study or install these files and tools down there you should
get something like ~80% in Lynis audit.

These file are for openSUSE but it you find them useful to you in some
other Linux distribution be most welcome.

WARNING!! YOU SHOULD REALLY READ THIS
Beware that this will alter you sshd_config. Root login which
is default in openSUSE will be disabled, Compress and X11 forwarding disabled also.

This package also makes changes to sysctl and you can read dmesg with
you user anymore. Also Martian logging is turned on which means lot of
noise in firewall config.
WARNING!! YOU SHOULD REALLY READ THIS

%prep
%setup -q

%build

%install
install -d -m 0755 %{buildroot}%{_sysconfdir}
install -d -m 0755 %{buildroot}%{_bindir}

install -d -m 0755 %{buildroot}%{_fillupdir}
install -m 0644 %{SOURCE1} %{buildroot}%{_fillupdir}

mv etc/issue etc/motd etc/ssh/sshd_config etc/tripwire/twcfg.txt .
rm -rf etc/ssh

cp -a etc/* %{buildroot}%{_sysconfdir}

rm %{buildroot}%{_sysconfdir}/README.md
rm %{buildroot}%{_sysconfdir}/audit/rules.d/README.md
rm %{buildroot}%{_sysconfdir}/modprobe.d/README.md
rm %{buildroot}%{_sysconfdir}/rkhunter.d/README.md
rm %{buildroot}%{_sysconfdir}/sysctl.d/README.md
rm %{buildroot}%{_sysconfdir}/tripwire/README.md

%post
%fillup_only

%files
%doc README.md motd twcfg.txt sshd_config issue
%license LICENSE

%dir %{_sysconfdir}/audit
%dir %{_sysconfdir}/audit/rules.d
%dir %{_sysconfdir}/rkhunter.d
%dir %{_sysconfdir}/tripwire

%config %attr(0640, root, root) %{_sysconfdir}/audit/rules.d/50-audit-lynis.rules
%config %attr(0640, root, root) %{_sysconfdir}/rkhunter.d/99-rkhunter-lynis.conf
%config %attr(0640, root, root) %{_sysconfdir}/modprobe.d/50-lynis-blacklist.conf
%config %attr(0640, root, root) %{_sysconfdir}/sysctl.d/99-sysctl-lynis.conf
%config %attr(0640, root, root) %{_sysconfdir}/tripwire/twpol.txt

%{_fillupdir}/sysconfig.%{name}

%changelog

Places

File lynis-audit-opensuse.spec of Package lynis-audit-opensuse

Places