aide/aide.spec

%bcond_without have_check

Name:       aide
Version:    0.18.6
Release:    3
Summary:    Advanced Intrusion Detection Environment
License:    GPLv2+
URL:        https://sourceforge.net/projects/aide
Source0:    https://github.com/aide/aide/releases/download/v%{version}/%{name}-%{version}.tar.gz
Source1:    aide.conf
Source2:    aide.logrotate

BuildRequires:  gcc make bison flex pcre2-devel libgpg-error-devel libgcrypt-devel zlib-devel libcurl-devel
BuildRequires:  libacl-devel libselinux-devel libattr-devel e2fsprogs-devel audit-libs-devel
# for make check
%if %{with have_check}
BuildRequires:  check-devel
%endif

# for sm3 support
Requires:  libgcrypt-sm3

Patch0:    Add-sm3-algorithm-for-aide.patch 
Patch1:    backport-Fix-condition-for-error-message-of-failing-to-open-g.patch
Patch2:    backport-Fix-parsing-of-lowercase-group-names.patch

%description
AIDE (Advanced Intrusion Detection Environment, [eyd]) is a file and directory integrity checker.
It creates a database from the regular expression rules that it finds from the config file(s).
Once this database is initialized it can be used to verify the integrity of the files.

%package_help

%prep
%autosetup -n %{name}-%{version} -p1

%build
%configure  --disable-static --with-config_file=%{_sysconfdir}/aide.conf --with-gcrypt --with-zlib \
            --with-curl --with-posix-acl --with-selinux  --with-xattr --with-e2fsattrs --with-audit
make %{?_smp_mflags}

%install
%make_install bindir=%{_sbindir}
install -Dpm0644 -t %{buildroot}%{_sysconfdir} %{S:1}
install -Dpm0644 %{S:2} %{buildroot}%{_sysconfdir}/logrotate.d/aide 
mkdir -p %{buildroot}%{_localstatedir}/log/aide
mkdir -p -m0700 %{buildroot}%{_localstatedir}/lib/aide

%check
%if %{with have_check}
make check
%endif

%pre

%preun

%post

%postun

%files
%defattr(-,root,root)
%license COPYING AUTHORS
%doc ChangeLog contrib/
%{_sbindir}/*
%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/aide.conf
%config(noreplace) %{_sysconfdir}/logrotate.d/aide
%dir %attr(0700,root,root) %{_localstatedir}/lib/aide
%dir %attr(0700,root,root) %{_localstatedir}/log/aide

%files help
%defattr(-,root,root)
%doc NEWS README
%{_mandir}/*/*

%changelog
* Wed Sep 4 2024 yixiangzhike <yixiangzhike007@163.com> - 0.18.6-3
- Type: bugfix
- ID: NA
- SUG: NA
- DESC: backport upstream patch to fix parsing of lowercase group names

* Thu Jul 4 2024 yixiangzhike <yixiangzhike007@163.com> - 0.18.6-2
- Type: bugfix
- ID: NA
- SUG: NA
- DESC: backport upstream patch to fix error condition checking

* Fri Dec 15 2023 Paul Thomas <paulthomas100199@gmail.com> - 0.18.6-1
- Type: enhancement
- ID: NA
- SUG: NA
- DESC: update to version 0.18.6

* Wed Jul 12 2023 yixiangzhike <yixiangzhike007@163.com> - 0.18.5-1
- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 0.18.5

* Tue Apr 25 2023 yixiangzhike <yixiangzhike007@163.com> - 0.17.4-3
- Type:bugfix
- ID:NA
- SUG:NA
- DESC: add Requires:libgcrypt-sm3 to support sm3

* Tue Mar 28 2023 yixiangzhike <yixiangzhike007@163.com> - 0.17.4-2
- Type:bugfix
- ID:NA
- SUG:NA
- DESC: enable make chck

* Mon Jun 27 2022 yixiangzhike <yixiangzhike007@163.com> - 0.17.4-1
- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 0.17.4

* Thu Mar 31 2022 yixiangzhike <yixiangzhike007@163.com> - 0.17.3-6
- Type:bugfix
- ID:NA
- SUG:NA
- DESC: switch from PCRE to PCRE2

* Tue Feb 22 2022 yixiangzhike <yixiangzhike007@163.com> - 0.17.3-5
- Type:bugfix
- ID:NA
- SUG:NA
- DESC: handle malformed path and duplicate database entries

* Tue Feb 8 2022 yixiangzhike <yixiangzhike007@163.com> - 0.17.3-4
- Type:CVE
- ID:CVE-2021-45417
- SUG:NA
- DESC: fix CVE-2021-45417

* Fri Dec 31 2021 wangcheng <wangcheng156@huawei.com> - 0.17.3-3
- Type:enhancement
- ID:NA
- SUG:NA
- DESC: add the sm3 crypt support

* Thu Aug 19 2021 yixiangzhike <zhangxingliang3@huawei.com> - 0.17.3-2
- Type:bugfix
- ID:NA
- SUG:NA
- DESC: fix wrong config options in aide.conf

* Sat Jul 31 2021 zoulin <zoulin13@huawei.com> - 0.17.3-1
- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 0.17.3;
        delete -Sgit from %autosetup, and delete BuildRequires git

* Wed Jul 29 2020 wangchen <wangchen137@huawei.com> - 0.16.2-1
- Type:enhancement
- ID:NA
- SUG:NA
- DESC: update to 0.16.2

* Tue Mar 17 2020 openEuler Buildteam <buildteam@openeuler.org> - 0.16-16
- Type:bugfix
- ID:NA
- SUG:NA
- DESC: change file from /etc/logrotate.d/aide/aide.logrotate to /etc/logrotate.d/aide

* Fri Jan 10 2020 openEuler Buildteam <buildteam@openeuler.org> - 0.16-15
- Type:enhancement
- ID:NA
- SUG:NA
- DESC: clean code

* Wed Oct 9 2019 openEuler Buildteam <buildteam@openeuler.org> - 0.16-14
- Type:enhancement
- ID:NA
- SUG:NA
- DESC: change the directory of AUTHORS

* Sat Sep 21 2019 openEuler Buildteam <buildteam@openeuler.org> - 0.16-13
- Type:enhancement
- ID:NA
- SUG:NA
- DESC:revise description

* Fri Aug 23 2019 openEuler Buildteam <buildteam@openeuler.org> - 0.16-12
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:strengthen spec

* Tue Aug 20 2019 guoxiaoqi<guoxiaoqi2@huawei.com> - 0.16-11
- Type:bugfix
- ID:NA
- SUG:NA
- DESC:rename patches

* Tue Apr 9 2019 wangxiao<wangxiao65@huawei.com> - 0.16-10
- Type:bugfix
- ID:NA
- SUG:restart
- DESC:Fix short form of --limit parameter
       Fix root_prefix option
       Add missing include in src/db.c
       Fix memory leak in is_prelinked
       Skip reading section data if the section doesn't contain any table.

* Sun Apr 7 2019 zoujing<zoujing13@huawei.com> - 0.16-9
- Type:enhancement
- ID:NA
- SUG:restart
- DESC: backport patch for fixing "DBG: md_enable: algorithm 7 not available"

* Tue Jul 31 2018 openEuler Buildteam <buildteam@openeuler.org> - 0.16-8
- Package init