NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
52286188ca
kumquat-buildroot/package/audit/audit.mk

72 lines
1.9 KiB
Makefile
Raw Normal View History

audit: new package [Thomas: - remove S01audit, which isn't completely compliant with the Buildroot style. - make the package available only on architectures for which the system call tables are available, and add some comments about this in the .mk file.] Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-06-02 15:28:20 +02:00
################################################################################
#
# audit
#
################################################################################
package/audit: bump to version 3.0.1 Drop all upstream patches as they no longer are applicable. Signed-off-by: Adam Duskett <aduskett@gmail.com> Tested-by: Matthew Weber <matthew.weber@collins.com> Tested-by: Yann E. MORIN <yann.morin.1998@free.fr> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-05-20 19:46:49 +02:00
AUDIT_VERSION = 3.0.1
package: Remove trailing slash from all package site URLs The recommended form is without the trailing slash, and will become mandatory in a coming commit. This avoids the need for the $$($(2)_SITE:/=) magic in package/pkg-generic.mk to avoid double slashes in download URLs, like "https://mosh.mit.edu//mosh-1.2.5.tar.gz". ^^ Note: this work has already been done in b0b9606530dfc6de4030 a few months ago and earlier in c7f4b964718bc5a3329b and 4a9eb20de817fa64, but no check has been added at that time to avoid new slashes to slip in, and so they did. This time a patch will follow immediately to prevent future mistakes from being unnoticed. Mass-replaced with the following command: git grep -l '_SITE.*/$' | xargs sed -i '/_SITE.*=/s|/$||' Signed-off-by: Luca Ceresoli <luca@lucaceresoli.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-09-28 18:10:31 +02:00
AUDIT_SITE = http://people.redhat.com/sgrubb/audit
audit: bump to version 2.7.8 Commit d1011f89a18 (audit: update legal info) set the libraries license to "unclear" because of GPL license text in a few libraries source files. Upstream audit package commit 239765162fa494 (Correct the licensing description in lib/ and auparse/ to be LGPL as was always intended) clarified the license in these files. Add license files hashes. Cc: Rahul Bedarkar <rahulbedarkar89@gmail.com> Cc: Adam Duskett <aduskett@gmail.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Reviewed-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-10-10 13:54:14 +02:00
AUDIT_LICENSE = GPL-2.0+ (programs), LGPL-2.1+ (libraries)
AUDIT_LICENSE_FILES = COPYING COPYING.LIB
package/audit: re-enable on musl Backport an upstream patch (which will be part of the next 3.0 release) that provides replacement functions for functions not implemented in musl. This allows to re-enable audit on musl. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2019-09-22 11:06:29 +02:00
# 0002-Add-substitue-functions-for-strndupa-rawmemchr.patch
AUDIT_AUTORECONF = YES
package: provide CPE ID details for numerous packages This patch adds CPE ID information for a significant number of packages. Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-12-04 16:46:01 +01:00
AUDIT_CPE_ID_VENDOR = linux_audit_project
Replace LIBFOO_CPE_ID_NAME by LIBFOO_CPE_ID_PRODUCT Replace LIBFOO_CPE_ID_NAME by LIBFOO_CPE_ID_PRODUCT to better "comply" with the official "Well-Formed CPE Name Data Model" parameters: - https://csrc.nist.gov/publications/detail/nistir/7695/final - https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7695.pdf Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2021-01-18 18:41:51 +01:00
AUDIT_CPE_ID_PRODUCT = linux_audit
audit: new package [Thomas: - remove S01audit, which isn't completely compliant with the Buildroot style. - make the package available only on architectures for which the system call tables are available, and add some comments about this in the .mk file.] Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-06-02 15:28:20 +02:00
AUDIT_INSTALL_STAGING = YES
audit: disable python3 support With the version bump to 2.4.3, python3 support was added for libaudit. With host machines that have python3 installed, this will cause build issues such as: make[5]: Entering directory `/tmp/ryan/buildroot/output/build/audit-2.4.3/bindings/swig/python3' swig -o audit_wrap.c -python -py3 -modern -I. -I../../.. -I../../../lib -I/usr/include/python3.4m -I/usr/include/python3.4m ./../src/auditswig.i make[5]: swig: Command not found Solution is to disable python3 support such as we do with python2.7. Signed-off-by: Ryan Barnett <ryan.barnett@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-22 23:06:40 +02:00
AUDIT_CONF_OPTS = --without-python --without-python3 --disable-zos-remote
audit: new package [Thomas: - remove S01audit, which isn't completely compliant with the Buildroot style. - make the package available only on architectures for which the system call tables are available, and add some comments about this in the .mk file.] Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-06-02 15:28:20 +02:00
ifeq ($(BR2_PACKAGE_LIBCAP_NG),y)
AUDIT_DEPENDENCIES += libcap-ng
AUDIT_CONF_OPTS += --with-libcap-ng=yes
else
AUDIT_CONF_OPTS += --with-libcap-ng=no
endif
# For i386, x86-64 and PowerPC, the system call tables are
# unconditionally included. However, for ARM(eb) and AArch64, then
# need to be explicitly enabled.
ifeq ($(BR2_arm)$(BR2_armeb),y)
AUDIT_CONF_OPTS += --with-arm
endif
ifeq ($(BR2_aarch64),y)
AUDIT_CONF_OPTS += --with-aarch64
endif
audit: Add systemd support The main .service file is installed by audit. We are using tmpfiles mechanisms to create the log directory, which would not exists otherwise since /var/log points to /tmp [Thomas: add explicit --disable-systemd when systemd is not used.] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-10-04 19:29:34 +02:00
ifeq ($(BR2_INIT_SYSTEMD),y)
AUDIT_CONF_OPTS += --enable-systemd
else
AUDIT_CONF_OPTS += --disable-systemd
endif
audit: Add startup script The startup script for the audit package did not meet the buildroot standards when the package was initially merged. Adding a compliant startup script for starting the audit daemon along with rotating the logs and other features. [Thomas: - Replace "Failed" by "FAIL" to be consistent with the rest of the init script and other packages - Use $(INSTALL) -D with a complete destination path to avoid having to create /etc/init.d before installing the init script.] Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-14 22:20:27 +02:00
define AUDIT_INSTALL_INIT_SYSV
package/audit: ensure that it starts after the logging daemon audit uses syslog(). Rename its init script to S02auditd to ensure that it will start after syslogd. Otherwise the initial log messages will be sent to the console (and probably lost, since almost nobody watches the system console on embedded systems). Signed-off-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-11-03 17:42:42 +01:00
$(INSTALL) -D -m 755 package/audit/S02auditd $(TARGET_DIR)/etc/init.d/S02auditd
audit: Add startup script The startup script for the audit package did not meet the buildroot standards when the package was initially merged. Adding a compliant startup script for starting the audit daemon along with rotating the logs and other features. [Thomas: - Replace "Failed" by "FAIL" to be consistent with the rest of the init script and other packages - Use $(INSTALL) -D with a complete destination path to avoid having to create /etc/init.d before installing the init script.] Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-07-14 22:20:27 +02:00
endef
audit: Add systemd support The main .service file is installed by audit. We are using tmpfiles mechanisms to create the log directory, which would not exists otherwise since /var/log points to /tmp [Thomas: add explicit --disable-systemd when systemd is not used.] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-10-04 19:29:34 +02:00
define AUDIT_INSTALL_INIT_SYSTEMD
$(INSTALL) -D -m 644 package/audit/audit_tmpfiles.conf \
$(TARGET_DIR)/usr/lib/tmpfiles.d/audit.conf
endef
audit: new package [Thomas: - remove S01audit, which isn't completely compliant with the Buildroot style. - make the package available only on architectures for which the system call tables are available, and add some comments about this in the .mk file.] Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-06-02 15:28:20 +02:00
define AUDIT_INSTALL_CLEANUP
audit: do not remove file installed by netplug The package recipe uses a post-install hook to remove useless files from $(TARGET_DIR)/etc/rc.d/init.d and $(TARGET_DIR)/etc/sysconfig. This may damage packages that install useful files on those directories (such as netplug, which installs $(TARGET_DIR)/etc/rc.d/init.d/netplugd). In the future[1] we will reorganize the init scripts and possibly get rid of /etc/rc.d and /etc/sysconfig but for the moment let's restrict the file removal to those installed by audit. 1. http://lists.busybox.net/pipermail/buildroot/2018-May/221549.html Signed-off-by: Carlos Santos <casantos@datacom.com.br> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-06-05 04:08:42 +02:00
$(RM) $(TARGET_DIR)/etc/rc.d/init.d/auditd
$(RM) $(TARGET_DIR)/etc/sysconfig/auditd
audit: new package [Thomas: - remove S01audit, which isn't completely compliant with the Buildroot style. - make the package available only on architectures for which the system call tables are available, and add some comments about this in the .mk file.] Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-06-02 15:28:20 +02:00
endef
AUDIT_POST_INSTALL_TARGET_HOOKS += AUDIT_INSTALL_CLEANUP
package/audit: bear the kernel options munging Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Adam Duskett <aduskett@gmail.com> Cc: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-04-04 14:10:22 +02:00
define AUDIT_LINUX_CONFIG_FIXUPS
$(call KCONFIG_ENABLE_OPT,CONFIG_NET)
$(call KCONFIG_ENABLE_OPT,CONFIG_AUDIT)
endef
package/audit: add support for host variant host-libsemanage requires host-audit to compile, therefore this patch adds a host variant for the audit package. Signed-off-by: Adam Duskett <Aduskett@gmail.com> [Thomas: remove libcap-ng usage for now, rework commit log.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-16 22:06:26 +02:00
HOST_AUDIT_CONF_OPTS = \
--without-python \
--without-python3 \
--disable-zos-remote \
--without-libcap-ng
audit: new package [Thomas: - remove S01audit, which isn't completely compliant with the Buildroot style. - make the package available only on architectures for which the system call tables are available, and add some comments about this in the .mk file.] Signed-off-by: Clayton Shotwell <clayton.shotwell@rockwellcollins.com> Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-06-02 15:28:20 +02:00
$(eval $(autotools-package))
package/audit: add support for host variant host-libsemanage requires host-audit to compile, therefore this patch adds a host variant for the audit package. Signed-off-by: Adam Duskett <Aduskett@gmail.com> [Thomas: remove libcap-ng usage for now, rework commit log.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-16 22:06:26 +02:00
$(eval $(host-autotools-package))
Reference in New Issue Copy Permalink