File lynis-audit-opensuse.spec of Package lynis-audit-opensuse

Overview Repositories Revisions Requests Users Attributes Meta

File lynis-audit-opensuse.spec of Package lynis-audit-opensuse (Revision 00cb4ea75ecf04232fab118618423824)

Currently displaying revision 00cb4ea75ecf04232fab118618423824 , Show latest

#
# spec file for package lynis-audit-opensuse
#
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#

%if ! %{defined _fillupdir}
%define _fillupdir /var/adm/fillup-templates
%endif

Name:           lynis-audit-opensuse
Version:        0.0+git20190529.01f2d26
Release:        0
Summary:        These config files make Lynis audit tool happier
License:        MIT
Group:          Development/Tools/Other
URL:            https://github.com/illuusio/lynis-audit-opensuse
Source0:        %{name}-%{version}.tar.xz
Source1:        sysconfig.%{name}
Requires:       acct
Requires:       audit
Requires:       dialog
Requires:       fail2ban
Requires:       lynis
Requires:       net-tools-deprecated
Requires:       rkhunter
Requires:       sysstat
Requires:       tripwire
BuildArch:      noarch
%{?systemd_requires}

%description
These config files make Lynis (https://cisofy.com/lynis/) auditing tool happier.

If you study or install these files and tools down there you should
get something like ~80% in Lynis audit.

These file are for openSUSE but it you find them useful to you in some
other Linux distribution be most welcome.

WARNING!! YOU SHOULD REALLY READ THIS
Beware that this will alter you sshd_config. Root login which
is default in openSUSE will be disabled, Compress and X11 forwarding disabled also.

This package also makes changes to sysctl and you can read dmesg with
you user anymore. Also Martian loging is turned on which means lot of 
noise in firewall config.
WARNING!! YOU SHOULD REALLY READ THIS

%prep
%setup -q

%build

%install
install -d -m 0755 %{buildroot}%{_sysconfdir}
install -d -m 0755 %{buildroot}%{_datadir}/lynis-audit-opensuse/ssh
install -d -m 0755 %{buildroot}%{_datadir}/lynis-audit-opensuse/tripwire

install -d -m 0755 %{buildroot}%{_fillupdir}
install -m 0644 %{S:1} %{buildroot}%{_fillupdir}

mv etc/motd etc/issue %{buildroot}%{_datadir}/lynis-audit-opensuse/
mv etc/tripwire/twcfg.txt %{buildroot}%{_datadir}/lynis-audit-opensuse/tripwire
mv etc/ssh/sshd_config %{buildroot}%{_datadir}/lynis-audit-opensuse/ssh

cp -a etc/* %{buildroot}%{_sysconfdir}

rm %{buildroot}%{_sysconfdir}/README.md
rm %{buildroot}%{_sysconfdir}/audit/rules.d/README.md
rm %{buildroot}%{_sysconfdir}/modprobe.d/README.md
rm %{buildroot}%{_sysconfdir}/rkhunter.d/README.md
rm %{buildroot}%{_sysconfdir}/ssh/README.md
rm %{buildroot}%{_sysconfdir}/sysctl.d/README.md
rm %{buildroot}%{_sysconfdir}/tripwire/README.md

%post
%{fillup_only}

%files
%doc README.md
%license LICENSE
%dir %{_sysconfdir}/audit
%dir %{_sysconfdir}/audit/rules.d
%dir %{_sysconfdir}/modprobe.d
%dir %{_sysconfdir}/rkhunter.d
%dir %{_sysconfdir}/ssh
%dir %{_sysconfdir}/sysctl.d
%dir %{_sysconfdir}/tripwire

%dir %{_datadir}/lynis-audit-opensuse/
%dir %{_datadir}/lynis-audit-opensuse/ssh
%dir %{_datadir}/lynis-audit-opensuse/tripwire

%attr(640, root, root) %{_datadir}/lynis-audit-opensuse/motd
%attr(640, root, root) %{_datadir}/lynis-audit-opensuse/issue
%attr(640, root, root) %{_datadir}/lynis-audit-opensuse/ssh/sshd_config
%attr(640, root, root) %{_datadir}/lynis-audit-opensuse/tripwire/twcfg.txt

%config %attr(0640, root, root) %{_sysconfdir}/audit/rules.d/lynis.rules

%attr(0640, root, root) %{_sysconfdir}/rkhunter.d/01-lynis-audit-opensuse.conf
%attr(0640, root, root) %{_sysconfdir}/modprobe.d/50-lynis-audit-opensuse-blacklist.conf
%attr(0640, root, root) %{_sysconfdir}/sysctl.d/lynis-audit-opensuse.conf
%attr(0640, root, root) %{_sysconfdir}/tripwire/twpol.txt

%{_fillupdir}/sysconfig.%{name}

%changelog

Places

File lynis-audit-opensuse.spec of Package lynis-audit-opensuse (Revision 00cb4ea75ecf04232fab118618423824)

Places