Summary: Intrusion detection environment Name: aide Version: 0.16 Release: 14%{?dist}.1 URL: http://sourceforge.net/projects/aide License: GPLv2+ Source0: %{url}/files/aide/%{version}/%{name}-%{version}.tar.gz Source1: aide.conf Source2: README.quickstart Source3: aide.logrotate BuildRequires: gcc BuildRequires: make BuildRequires: bison flex BuildRequires: pcre-devel BuildRequires: libgpg-error-devel libgcrypt-devel BuildRequires: zlib-devel BuildRequires: libcurl-devel BuildRequires: libacl-devel BuildRequires: pkgconfig(libselinux) BuildRequires: libattr-devel BuildRequires: e2fsprogs-devel Buildrequires: audit-libs-devel Requires: libgcrypt >= 1.8.5 # Customize the database file location in the man page. Patch1: aide-0.16rc1-man.patch # fix aide in FIPS mode Patch2: aide-0.16b1-fipsfix.patch Patch3: aide-0.15-syslog-format.patch Patch4: aide-0.16-crypto-disable-haval-and-others.patch Patch5: coverity.patch Patch6: aide-0.16-crash-elf.patch # 1676487 - Null pointer dereference fix spotted by coverity Patch7: coverity2.patch # 2041956 - CVE-2021-45417 aide: heap-based buffer overflow on outputs larger than B64_BUF Patch8: aide-0.16-CVE-2021-45417.patch %description AIDE (Advanced Intrusion Detection Environment) is a file integrity checker and intrusion detection program. %prep %autosetup -p1 cp -a %{S:2} . %build %configure \ --disable-static \ --with-config_file=%{_sysconfdir}/aide.conf \ --with-gcrypt \ --with-zlib \ --with-curl \ --with-posix-acl \ --with-selinux \ --with-xattr \ --with-e2fsattrs \ --with-audit %make_build %install %make_install bindir=%{_sbindir} install -Dpm0644 -t %{buildroot}%{_sysconfdir} %{S:1} install -Dpm0644 %{S:3} %{buildroot}%{_sysconfdir}/logrotate.d/aide mkdir -p %{buildroot}%{_localstatedir}/log/aide mkdir -p -m0700 %{buildroot}%{_localstatedir}/lib/aide %files %license COPYING %doc AUTHORS ChangeLog NEWS README doc/manual.html contrib/ %doc README.quickstart %{_sbindir}/aide %{_mandir}/man1/*.1* %{_mandir}/man5/*.5* %config(noreplace) %attr(0600,root,root) %{_sysconfdir}/aide.conf %config(noreplace) %{_sysconfdir}/logrotate.d/aide %dir %attr(0700,root,root) %{_localstatedir}/lib/aide %dir %attr(0700,root,root) %{_localstatedir}/log/aide %changelog * Tue Jan 25 2022 Radovan Sroka - 0.16.14.1 - backported fix for CVE-2021-45417 resolves: rhbz#2041956 * Tue Jun 30 2020 Radovan Sroka = 0.16.14 - strict require for libgcrypt resolves: rhbz#1852407 * Tue May 19 2020 Attila Lakatos - 0.16-13 - RHEL 8.3 - minor edit of aide.conf to make it consistent resolves: rhbz#1740754 * Mon Apr 06 2020 Attila Lakatos - 0.16-12 - RHEL 8.3 - minor edit of aide.conf resolves: rhbz#1740754 - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf resolves: rhbz#1806323 * Wed Jul 24 2019 Radovan Sroka - 0.16-11 - rebuild - minor edit of aide.conf * Tue Jul 23 2019 Radovan Sroka - 0.16-10 - respin - minor edit of aide.conf * Tue Jul 23 2019 Radovan Sroka - 0.16-9 - Null pointer dereference fix spotted by coverity resolves: rhbz#1676487 - aide.conf needs updates for RHEL 8 resolves: rhbz#1708015 * Tue Oct 09 2018 Radovan Sroka - 0.16-8 - fixed wrong line wrapping of messages in the syslog format resolves: rhbz#1628153 - fixed coverity issues resolves: rhbz#1602441 - fixed crash when processing .dynamic section resolves: rhbz#1597250 * Wed Aug 29 2018 Radovan Sroka - 0.16-7 - fixed crypto problem with libgcrypt (fips) - resolves: rhbz#1623045 * Wed Aug 22 2018 Radovan Sroka - 0.16-6 - ported syslog format from rhel7 resolves: rhbz#1584136 - fixed crypto problem with libgcrypt resolves: rhbz#1584120 * Wed Feb 07 2018 Fedora Release Engineering - 0.16-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Wed Aug 02 2017 Fedora Release Engineering - 0.16-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild * Wed Jul 26 2017 Fedora Release Engineering - 0.16-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild * Wed Apr 05 2017 Radovan Sroka - 0.16-2 - fixed upstream link * Tue Apr 04 2017 Radovan Sroka - 0.16-1 - rebase to stable v0.16 - specfile cleanup - make doc readable resolves: #1421355 - make aide binary runable for any user resolves: #1421351 * Fri Feb 10 2017 Fedora Release Engineering - 0.16-0.3.rc1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Tue Jul 12 2016 Tomas Sykora - 0.16-0.2.rc1 - New upstream devel version * Mon Jun 20 2016 Tomas Sykora - 0.16-0.1.b1 - New upstream devel version * Wed Feb 03 2016 Fedora Release Engineering - 0.15.1-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Sat Jul 25 2015 Till Maas - 0.15.1-11 - Remove prelink dependency because prelink was retired * Tue Jun 16 2015 Fedora Release Engineering - 0.15.1-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri Aug 15 2014 Fedora Release Engineering - 0.15.1-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Fri Jul 18 2014 Yaakov Selkowitz - 0.15.1-8 - Fix FTBFS with -Werror=format-security (#1036983, #1105942) - Avoid prelink BR on aarch64, ppc64le (#924977, #1078476) * Sat Jun 07 2014 Fedora Release Engineering - 0.15.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat Aug 03 2013 Fedora Release Engineering - 0.15.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Wed Feb 13 2013 Fedora Release Engineering - 0.15.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild * Thu Nov 22 2012 Daniel Kopecek - 0.15.1-4 - added patch to fix aide in FIPS mode - use only FIPS approved digest algorithms in aide.conf so that aide works by default in FIPS mode * Wed Jul 18 2012 Fedora Release Engineering - 0.15.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Thu Jan 12 2012 Fedora Release Engineering - 0.15.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild * Thu Nov 11 2010 Steve Grubb - 0.15.1-1 - New upstream release * Tue May 18 2010 Steve Grubb - 0.14-5 - Apply 2 upstream bug fixes * Tue May 18 2010 Steve Grubb - 0.14-4 - Use upstream's patch to fix bz 590566 * Sat May 15 2010 Steve Grubb - 0.14-3 - Fix bz 590561 aide does not detect the change of SElinux context - Fix bz 590566 aide reports a changed file when it has not been changed * Wed Apr 28 2010 Steve Grubb - 0.14-2 - Fix bz 574764 by replacing abort calls with exit - Apply libgcrypt init patch * Tue Mar 16 2010 Steve Grubb - 0.14-1 - New upstream release final 0.14 * Thu Feb 25 2010 Steve Grubb - 0.14-0.4.rc3 - New upstream release * Thu Feb 25 2010 Steve Grubb - 0.14-0.3.rc2 - New upstream release * Tue Feb 23 2010 Steve Grubb - 0.14-0.2.rc1 - Fix dirent detection on 64bit systems * Mon Feb 22 2010 Steve Grubb - 0.14-0.1.rc1 - New upstream release * Fri Feb 19 2010 Steve Grubb - 0.13.1-16 - Add logrotate script and spec file cleanups * Fri Dec 11 2009 Steve Grubb - 0.13.1-15 - Get rid of .dedosify files * Wed Dec 09 2009 Steve Grubb - 0.13.1-14 - Revise patch for Initialize libgcrypt correctly (#530485) * Sat Nov 07 2009 Steve Grubb - 0.13.1-13 - Initialize libgcrypt correctly (#530485) * Fri Aug 21 2009 Tomas Mraz - 0.13.1-12 - rebuilt with new audit * Wed Aug 19 2009 Steve Grubb 0.13.1-11 - rebuild for new audit-libs - Correct regex for root's dot files (#509370) * Fri Jul 24 2009 Fedora Release Engineering - 0.13.1-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Mon Jun 08 2009 Steve Grubb - 0.13.1-9 - Make aide smarter about prelinked files (Peter Vrabec) - Add /lib64 to default config * Mon Feb 23 2009 Fedora Release Engineering - 0.13.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild * Fri Jan 30 2009 Steve Grubb - 0.13.1-6 - enable xattr support and update config file * Fri Sep 26 2008 Tom "spot" Callaway - 0.13.1-5 - fix selcon patch to apply without fuzz * Fri Feb 15 2008 Steve Conklin - rebuild for gcc4.3 * Tue Aug 21 2007 Michael Schwendt - rebuilt * Sun Jul 22 2007 Michael Schwendt - 0.13.1-2 - Apply Steve Conklin's patch to increase displayed portion of selinux context. * Sun Dec 17 2006 Michael Schwendt - 0.13.1-1 - Update to 0.13.1 release. * Sun Dec 10 2006 Michael Schwendt - 0.13-1 - Update to 0.13 release. - Include default aide.conf from RHEL5 as doc example file. * Sun Oct 29 2006 Michael Schwendt - 0.12-3.20061027cvs - CAUTION! This changes the database format and results in a report of false inconsistencies until an old database file is updated. - Check out CVS 20061027 which now contains Red Hat's acl/xattr/selinux/audit patches. - Patches merged upstream. - Update manual page substitutions. * Mon Oct 23 2006 Michael Schwendt - 0.12-2 - Add "memory leaks and performance updates" patch as posted to aide-devel by Steve Grubb. * Sat Oct 07 2006 Michael Schwendt - 0.12-1 - Update to 0.12 release. - now offers --disable-static, so -no-static patch is obsolete - fill last element of getopt struct array with zeroes * Mon Oct 02 2006 Michael Schwendt - 0.11-3 - rebuilt * Mon Sep 11 2006 Michael Schwendt - 0.11-2 - rebuilt * Sun Feb 19 2006 Michael Schwendt - 0.11-1 - Update to 0.11 release. - useless-includes patch merged upstream. - old Russian man pages not available anymore. - disable static linking. * Thu Apr 7 2005 Michael Schwendt - rebuilt * Fri Nov 28 2003 Michael Schwendt - 0:0.10-0.fdr.1 - Update to 0.10 release. - memleaks patch merged upstream. - rootpath patch merged upstream. - fstat patch not needed anymore. - Updated URL. * Thu Nov 13 2003 Michael Schwendt - 0:0.10-0.fdr.0.2.cvs20031104 - Added buildreq m4 to work around incomplete deps of bison package. * Tue Nov 04 2003 Michael Schwendt - 0:0.10-0.fdr.0.1.cvs20031104 - Only tar.gz available upstream. - byacc not needed when bison -y is available. - Installed Russian manual pages. - Updated with changes from CVS (2003-11-04). - getopt patch merged upstream. - bison-1.35 patch incorporated upstream. * Tue Sep 09 2003 Michael Schwendt - 0:0.9-0.fdr.0.2.20030902 - Added fixes for further memleaks. * Sun Sep 07 2003 Michael Schwendt - 0:0.9-0.fdr.0.1.20030902 - Initial package version.