1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
|
#!/usr/bin/make -f
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
include /usr/share/dpkg/architecture.mk
LDFLAGS += -Wl,--as-needed
DH_ADDONS = --with autoreconf --with systemd
CONFIGURE_FLAGS =
ifeq ($(filter nopython,$(DEB_BUILD_PROFILES)),)
include /usr/share/python/python.mk
# For building bindings/swig/ and bindings/python/ for all Python version, these directories are cloned and build in addition to the main library
PYDEFAULTVER := $(shell pyversions --default --version)
PYVERS := $(shell pyversions --requested --version debian/control)
PYVERS := $(filter-out $(PYDEFAULTVER), $(PYVERS)) # $(PYDEFAULTVER)
PY3DEFAULTVER := $(shell py3versions --default --version)
PY3VERS := $(shell py3versions --requested --version debian/control)
PY3VERS := $(filter-out $(PY3DEFAULTVER), $(PY3VERS))
CONFIGURE_FLAGS += --with-python --with-python3
DH_ADDONS += --with python2 --with python3
else
CONFIGURE_FLAGS += --without-python --without-python3
endif
ifeq ($(DEB_HOST_ARCH),alpha)
EXTRA_ARCH_TABLE := --with-alpha
endif
ifeq ($(DEB_HOST_ARCH),hppa)
EXTRA_ARCH_TABLE := --with-hppa
endif
ifneq ($(filter pkg.audit.noldap,$(DEB_BUILD_PROFILES)),)
CONFIGURE_FLAGS += --disable-zos-remote
endif
%:
dh $@ --builddirectory=debian/build --buildsystem=autoconf $(DH_ADDONS)
override_dh_auto_configure: debian/config-python-stamp $(PYVERS:%=debian/config-python%-stamp) $(PY3VERS:%=debian/config-python3-%-stamp)
debian/config-python-stamp:
dh_testdir
# We should also have "--with-golang" but it's not available in all arch and
# the golang binding package is arch:all anyway.
dh_auto_configure -- \
--sbindir=/sbin \
--libdir=/lib/${DEB_HOST_MULTIARCH} \
--enable-shared=audit \
--enable-gssapi-krb5 \
--with-apparmor \
--with-prelude \
--with-libwrap \
--with-libcap-ng \
$(CONFIGURE_FLAGS) \
--with-arm --with-aarch64 ${EXTRA_ARCH_TABLE}
touch $@
debian/config-python%-stamp: debian/config-python-stamp
cp -lpr debian/build/bindings/swig debian/build/bindings/swig.$*
cp -lpr debian/build/bindings/python debian/build/bindings/python.$*
touch $@
debian/config-python3-%-stamp: debian/config-python-stamp
cp -lpr debian/build/bindings/swig debian/build/bindings/swig3.$*
cp -lpr debian/build/bindings/python debian/build/bindings/python3.$*
touch $@
override_dh_auto_clean:
$(RM) debian/*-stamp
dh_auto_clean
override_dh_auto_build: debian/build-python-stamp $(PYVERS:%=debian/build-python%-stamp) $(PY3VERS:%=debian/build-python3-%-stamp)
debian/build-python-stamp: debian/config-python-stamp
dh_testdir
dh_auto_build
touch $@
debian/build-python%-stamp: debian/config-python%-stamp debian/build-python-stamp
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/swig.$*/python pyexecdir=$(call py_libdir_sh, $*)
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/python.$*/python2 pyexecdir=$(call py_libdir_sh, $*)
touch $@
debian/build-python3-%-stamp: debian/config-python3-%-stamp debian/build-python-stamp
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/swig3.$*/python3 py3execdir=/usr/lib/python$*/dist-packages \
PYTHON3_CFLAGS="$(shell python$*-config --cflags 2> /dev/null)" PYTHON3_LIBS="$(shell python$*-config --libs 2> /dev/null)" PYTHON3_INCLUDES="$(shell python$*-config --includes 2> /dev/null)"
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/python3.$*/python3 py3execdir=/usr/lib/python$*/dist-packages \
PYTHON3_CFLAGS="$(shell python$*-config --cflags 2> /dev/null)" PYTHON3_LIBS="$(shell python$*-config --libs 2> /dev/null)" PYTHON3_INCLUDES="$(shell python$*-config --includes 2> /dev/null)"
touch $@
debian/install-python-stamp: debian/build-python-stamp
dh_testdir
dh_auto_install --sourcedir=debian/build --destdir=debian/tmp
touch $@
debian/install-python%-stamp: debian/build-python%-stamp debian/install-python-stamp
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/swig.$* pyexecdir=$(call py_libdir_sh, $*) DESTDIR=$(CURDIR)/debian/tmp install
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/python.$* pyexecdir=$(call py_libdir_sh, $*) DESTDIR=$(CURDIR)/debian/tmp install
touch $@
debian/install-python3-%-stamp: debian/build-python3-%-stamp debian/install-python-stamp
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/swig3.$*/python3 py3execdir=/usr/lib/python$*/dist-packages DESTDIR=$(CURDIR)/debian/tmp install \
PYTHON3_CFLAGS="$(shell python$*-config --cflags 2> /dev/null)" PYTHON3_LIBS="$(shell python$*-config --libs 2> /dev/null)" PYTHON3_INCLUDES="$(shell python$*-config --includes 2> /dev/null)"
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/python3.$*/python3 py3execdir=/usr/lib/python$*/dist-packages DESTDIR=$(CURDIR)/debian/tmp install \
PYTHON3_CFLAGS="$(shell python$*-config --cflags 2> /dev/null)" PYTHON3_LIBS="$(shell python$*-config --libs 2> /dev/null)" PYTHON3_INCLUDES="$(shell python$*-config --includes 2> /dev/null)"
touch $@
override_dh_auto_install: debian/install-python-stamp $(PYVERS:%=debian/install-python%-stamp) $(PY3VERS:%=debian/install-python3-%-stamp)
# Remove some RedHat specific files
$(RM) debian/tmp/etc/rc.d/init.d/auditd
$(RM) debian/tmp/etc/sysconfig/auditd
# Move the development library to /usr/lib
$(RM) debian/tmp/lib/${DEB_HOST_MULTIARCH}/libaudit.so
$(RM) debian/tmp/lib/${DEB_HOST_MULTIARCH}/libauparse.so
# Install the default configuration
install -o root -g root -m 0750 -d debian/tmp/etc/audit/rules.d/
install -o root -g root -m 0640 rules/10-base-config.rules debian/tmp/etc/audit/rules.d/audit.rules
mkdir -p debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/
ln -s /lib/${DEB_HOST_MULTIARCH}/libaudit.so.1.0.0 \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/libaudit.so
ln -s /lib/${DEB_HOST_MULTIARCH}/libauparse.so.0.0.0 \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/libauparse.so
mv debian/tmp/lib/${DEB_HOST_MULTIARCH}/libaudit.a \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/libaudit.a
mv debian/tmp/lib/${DEB_HOST_MULTIARCH}/libauparse.a \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/libauparse.a
mkdir -p debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/pkgconfig/
mv debian/tmp/lib/${DEB_HOST_MULTIARCH}/pkgconfig/audit.pc \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/pkgconfig/audit.pc
mv debian/tmp/lib/${DEB_HOST_MULTIARCH}/pkgconfig/auparse.pc \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/pkgconfig/auparse.pc
override_dh_missing:
dh_missing --list-missing
override_dh_installexamples:
dh_installexamples -XMakefile
override_dh_installlogrotate:
# auditd has a equivalent built-in feature
override_dh_installinit:
dh_installinit --restart-after-upgrade
override_dh_fixperms-arch:
dh_fixperms -a
#chmod o-wx debian/auditd/usr/bin/aulastlog
#chmod o-wx debian/auditd/sbin/auditctl
#chmod o-wx debian/auditd/sbin/auditd
#chmod o-wx debian/auditd/sbin/autrace
#chmod 750 debian/auditd/sbin/audispd
chmod -R o-rwx debian/auditd/var/log/audit
chgrp adm debian/auditd/var/log/audit
chmod -R o-rwx debian/auditd/etc/audit debian/auditd/etc/audisp debian/auditd/etc/audisp/plugins.d
get-orig-source:
-uscan --upstream-version 0
my-check:
find debian/*aud*/ -mindepth 0 -name DEBIAN -prune -o -not -type d -print|sed -e 's,debian/[^/]*/,,' -e 's/\.gz$$//'
|
