1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
|
#!/usr/bin/make -f
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
include /usr/share/dpkg/architecture.mk
LDFLAGS += -Wl,--as-needed
DH_ADDONS =
CONFIGURE_FLAGS =
ifeq ($(filter nopython,$(DEB_BUILD_PROFILES)),)
# For building bindings/swig/ and bindings/python/ for all Python version, these directories are cloned and build in addition to the main library
PY3DEFAULTVER := $(shell py3versions --default --version)
PY3VERS := $(shell py3versions --requested --version debian/control)
PY3VERS := $(filter-out $(PY3DEFAULTVER), $(PY3VERS))
CONFIGURE_FLAGS += --without-python --with-python3
DH_ADDONS += --with python3
else
CONFIGURE_FLAGS += --without-python --without-python3
endif
ifneq ($(filter pkg.audit.noldap,$(DEB_BUILD_PROFILES)),)
CONFIGURE_FLAGS += --disable-zos-remote
endif
# Merge the last remaining Ubuntu specific change in Debian:
# Disable auditd network listener to reduce the risk of a remote attack on
# auditd, which runs as root
ifeq ($(shell dpkg-vendor --derives-from Ubuntu && echo yes), yes)
CONFIGURE_FLAGS += --disable-listener
endif
%:
dh $@ --builddirectory=debian/build --buildsystem=autoconf $(DH_ADDONS)
override_dh_auto_configure: debian/config-python-stamp $(PY3VERS:%=debian/config-python3-%-stamp)
debian/config-python-stamp:
dh_testdir
# We should also have "--with-golang" but it's not available in all arch and
# the golang binding package is arch:all anyway.
dh_auto_configure -- \
--sbindir=/sbin \
--libdir=/lib/${DEB_HOST_MULTIARCH} \
--enable-shared=audit \
--enable-gssapi-krb5 \
--with-apparmor \
--with-libwrap \
--with-libcap-ng \
$(CONFIGURE_FLAGS) \
--with-arm --with-aarch64 ${EXTRA_ARCH_TABLE}
touch $@
debian/config-python3-%-stamp: debian/config-python-stamp
cp -lpr debian/build/bindings/swig debian/build/bindings/swig3.$*
cp -lpr debian/build/bindings/python debian/build/bindings/python3.$*
touch $@
override_dh_auto_clean:
$(RM) debian/*-stamp
dh_auto_clean
override_dh_auto_build: debian/build-python-stamp $(PY3VERS:%=debian/build-python3-%-stamp)
debian/build-python-stamp: debian/config-python-stamp
dh_testdir
dh_auto_build
touch $@
debian/build-python3-%-stamp: debian/config-python3-%-stamp debian/build-python-stamp
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/swig3.$*/python3 py3execdir=/usr/lib/python$*/dist-packages \
PYTHON3_CFLAGS="$(shell python$*-config --cflags 2> /dev/null)" PYTHON3_LIBS="$(shell python$*-config --libs 2> /dev/null)" PYTHON3_INCLUDES="$(shell python$*-config --includes 2> /dev/null)"
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/python3.$*/python3 py3execdir=/usr/lib/python$*/dist-packages \
PYTHON3_CFLAGS="$(shell python$*-config --cflags 2> /dev/null)" PYTHON3_LIBS="$(shell python$*-config --libs 2> /dev/null)" PYTHON3_INCLUDES="$(shell python$*-config --includes 2> /dev/null)"
touch $@
debian/install-python-stamp: debian/build-python-stamp
dh_testdir
dh_auto_install --sourcedir=debian/build --destdir=debian/tmp
touch $@
debian/install-python3-%-stamp: debian/build-python3-%-stamp debian/install-python-stamp
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/swig3.$*/python3 py3execdir=/usr/lib/python$*/dist-packages DESTDIR=$(CURDIR)/debian/tmp install \
PYTHON3_CFLAGS="$(shell python$*-config --cflags 2> /dev/null)" PYTHON3_LIBS="$(shell python$*-config --libs 2> /dev/null)" PYTHON3_INCLUDES="$(shell python$*-config --includes 2> /dev/null)"
PYTHON=/usr/bin/python$* $(MAKE) -C debian/build/bindings/python3.$*/python3 py3execdir=/usr/lib/python$*/dist-packages DESTDIR=$(CURDIR)/debian/tmp install \
PYTHON3_CFLAGS="$(shell python$*-config --cflags 2> /dev/null)" PYTHON3_LIBS="$(shell python$*-config --libs 2> /dev/null)" PYTHON3_INCLUDES="$(shell python$*-config --includes 2> /dev/null)"
touch $@
override_dh_auto_install: debian/install-python-stamp $(PY3VERS:%=debian/install-python3-%-stamp)
# Remove some RedHat specific files
$(RM) debian/tmp/etc/rc.d/init.d/auditd
$(RM) debian/tmp/etc/sysconfig/auditd
# Move the development library to /usr/lib
$(RM) debian/tmp/lib/${DEB_HOST_MULTIARCH}/libaudit.so
$(RM) debian/tmp/lib/${DEB_HOST_MULTIARCH}/libauparse.so
# Install the default configuration
install -o root -g root -m 0750 -d debian/tmp/etc/audit/rules.d/
install -o root -g root -m 0640 rules/10-base-config.rules debian/tmp/etc/audit/rules.d/audit.rules
mkdir -p debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/
ln -s /lib/${DEB_HOST_MULTIARCH}/libaudit.so.1.0.0 \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/libaudit.so
ln -s /lib/${DEB_HOST_MULTIARCH}/libauparse.so.0.0.0 \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/libauparse.so
mv debian/tmp/lib/${DEB_HOST_MULTIARCH}/libaudit.a \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/libaudit.a
mv debian/tmp/lib/${DEB_HOST_MULTIARCH}/libauparse.a \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/libauparse.a
mkdir -p debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/pkgconfig/
mv debian/tmp/lib/${DEB_HOST_MULTIARCH}/pkgconfig/audit.pc \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/pkgconfig/audit.pc
mv debian/tmp/lib/${DEB_HOST_MULTIARCH}/pkgconfig/auparse.pc \
debian/tmp/usr/lib/${DEB_HOST_MULTIARCH}/pkgconfig/auparse.pc
override_dh_installexamples:
dh_installexamples -XMakefile
override_dh_installlogrotate:
# auditd has a equivalent built-in feature
override_dh_installinit:
dh_installinit --restart-after-upgrade
override_dh_fixperms-arch:
dh_fixperms -a
#chmod o-wx debian/auditd/usr/bin/aulastlog
#chmod o-wx debian/auditd/sbin/auditctl
#chmod o-wx debian/auditd/sbin/auditd
#chmod o-wx debian/auditd/sbin/autrace
#chmod 750 debian/auditd/sbin/audispd
chmod -R o-rwx debian/auditd/var/log/audit
chgrp adm debian/auditd/var/log/audit
chmod -R o-rwx debian/auditd/etc/audit debian/audispd-plugins/etc/audit
get-orig-source:
-uscan --upstream-version 0
my-check:
find debian/*aud*/ -mindepth 0 -name DEBIAN -prune -o -not -type d -print|sed -e 's,debian/[^/]*/,,' -e 's/\.gz$$//'
|
