Thu Oct 27 23:14:53 UTC 2011

3 files changed, 125 insertions, 0 deletions

diff --git a/community/audit/PKGBUILD b/community/audit/PKGBUILD
new file mode 100644
index 000000000..d5ee232b4
--- /dev/null
+++ b/community/audit/PKGBUILD
@@ -0,0 +1,59 @@
+# $Id: PKGBUILD 57389 2011-10-26 20:55:52Z mtorromeo $
+# Maintainer: Massimiliano Torromeo <massimiliano.torromeo@gmail.com>
+# Contributor: Connor Behan <connor.behan@gmail.com>
+# Contributor: henning mueller <henning@orgizm.net>
+
+pkgname=audit
+pkgver=2.1.3
+pkgrel=1
+pkgdesc='User space utilities for storing and searching the audit records generated by the audit subsystem in the Linux kernel.'
+url=http://people.redhat.com/sgrubb/$pkgname
+arch=(i686 x86_64)
+depends=(linux-headers python2 libldap)
+makedepends=(libldap swig)
+license=(GPL)
+options=(!libtool emptydirs)
+backup=(
+	etc/libaudit.conf
+	etc/audit/audit.rules
+	etc/audit/auditd.conf
+	etc/audisp/audispd.conf
+	etc/audisp/audisp-remote.conf
+	etc/audisp/zos-remote.conf
+	etc/audisp/plugins.d/af_unix.conf
+	etc/audisp/plugins.d/audispd-zos-remote.conf
+	etc/audisp/plugins.d/au-remote.conf
+	etc/audisp/plugins.d/syslog.conf
+)
+source=(
+	$url/$pkgname-$pkgver.tar.gz
+	auditd.rc
+	python2.patch
+)
+md5sums=(
+	abf26e3ac09f666905c5636dd24611fa
+	bd5574064e0c88748aebf0cd92ebcf0c
+	45a33c6bef84f8e1701cb0b5e187336b
+)
+
+build() {
+	cd "$srcdir/$pkgname-$pkgver"
+	patch -p0 -i "$srcdir/python2.patch"
+	./configure \
+		--prefix=/usr \
+		--sysconfdir=/etc \
+		--libexecdir=/usr/lib/audit \
+		--with-apparmor
+	make
+}
+
+package() {
+	cd "$srcdir/$pkgname-$pkgver"
+	make DESTDIR="$pkgdir" install
+
+	cd "$pkgdir"
+	install -m755 "$srcdir/auditd.rc" etc/rc.d/auditd
+	install -d var/log/audit
+	rm -rf etc/rc.d/init.d etc/sysconfig
+	mv usr/sbin sbin
+}
diff --git a/community/audit/auditd.rc b/community/audit/auditd.rc
new file mode 100755
index 000000000..ea2e305ba
--- /dev/null
+++ b/community/audit/auditd.rc
@@ -0,0 +1,55 @@
+#!/bin/bash
+
+. /etc/rc.conf
+. /etc/rc.d/functions
+
+PID=`pidof -o %PPID auditd`
+
+case "$1" in
+	start)
+		stat_busy "Starting auditd"
+		[ -z "$PID" ] && {
+			/sbin/auditctl -R /etc/audit/audit.rules >/dev/null
+			/sbin/auditd
+		}
+		if [ $? -ne 0 ]; then
+			stat_fail
+		else
+			add_daemon auditd
+			stat_done
+		fi
+		;;
+
+	stop)
+		stat_busy "Stopping auditd"
+		[ ! -z "$PID" ] && kill $PID &> /dev/null
+		if [ $? -gt 0 ]; then
+			stat_fail
+		else
+			rm_daemon auditd
+			stat_done
+		fi
+		;;
+
+	restart)
+		$0 stop
+		sleep 1
+		$0 start
+		;;
+
+	reload)
+		stat_busy "Reloading auditd"
+		[ ! -z "$PID" ] && kill -HUP $PID &> /dev/null
+		if [ $? -gt 0 ]; then
+			stat_fail
+		else
+			rm_daemon auditd
+			stat_done
+		fi
+		;;
+
+	*)
+		echo "usage: $0 {start|stop|restart|reload}"  
+esac
+
+exit 0
diff --git a/community/audit/python2.patch b/community/audit/python2.patch
new file mode 100644
index 000000000..b5f6cbc25
--- /dev/null
+++ b/community/audit/python2.patch
@@ -0,0 +1,11 @@
+--- configure.old	2010-10-22 15:54:13.193333452 +0200
++++ configure	2010-10-22 15:54:52.546667020 +0200
+@@ -10662,7 +10662,7 @@
+ 
+         # Find any Python interpreter.
+     if test -z "$PYTHON"; then
+-      for ac_prog in python python2 python3 python3.0 python2.5 python2.4 python2.3 python2.2 python2.1 python2.0
++      for ac_prog in python2
+ do
+   # Extract the first word of "$ac_prog", so it can be a program name with args.
+ set dummy $ac_prog; ac_word=$2