Summary: A security audit system and intrusion detection system
Name: sectool
Version: 0.9.5
Release: 16%{?dist}
URL: https://fedorahosted.org/sectool
License: GPLv2+
Group: Applications/System

Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2
Source1: sectool.log
Patch1: sectool-0.9.5-optflags.patch
Patch2: sectool-0.9.5-dbus.patch

Requires: gettext coreutils python-slip-dbus polkit dbus
Requires: python2 rpm-python
BuildRequires: desktop-file-utils gettext intltool asciidoc
BuildRequires: rpm-devel >= 4.6.0
BuildRequires: libselinux-devel libselinux-python glibc-headers 

# Temporarily disable check-buildroot
#%define __arch_install_post %{nil}
# Disable debuginfo building
%define debug_package %{nil}

%package gui
Summary: GUI for sectool - security audit system and intrusion detection system
License: GPLv2+
Group: Applications/System
Requires: sectool = %{version}-%{release}
Requires: pygtk2

%description
sectool is a security tool that can be used both as a security audit 
and intrusion detection system. It consists of set of tests, library 
and command line interface tool. Tests are sorted into groups and security 
levels. Admins can run certain tests, groups or whole security levels. 
The library and the tools are implemented in python and tests are 
language independent.

%description gui
sectool-gui provides a GTK-based graphical user interface to sectool.

%prep
%setup -q
%patch1 -p1 -b .optflags
%patch2 -p1 -b .dbus

%build
make %{?_smp_mflags}

%install
make DESTDIR=$RPM_BUILD_ROOT install
desktop-file-install --delete-original      \
  --dir $RPM_BUILD_ROOT%{_datadir}/applications             \
%if 0%{?fedora} && 0%{?fedora} < 19
  --vendor=fedora \
%endif
   $RPM_BUILD_ROOT%{_datadir}/applications/sectool.desktop

#logrotate
install -d -m 755 $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d
install -p -m 644 %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sectool
#adjust paths in sectool.conf
sed -i 's,DSC_DIR=\(.*\),DSC_DIR=%{_sysconfdir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf
sed -i 's,TESTS_DIRS=\(.*\),TESTS_DIRS=%{_libexecdir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf
sed -i 's,TDATA_DIR_BASE=\(.*\),TDATA_DIR_BASE=%{_localstatedir}/lib/sectool,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf
#adjust icons path in guiOutput.py
sed -i 's,__ico_path = \(.*\),__ico_path = "%{_datadir}/pixmaps/sectool/",' $RPM_BUILD_ROOT%{_datadir}/sectool/guiOutput.py
#this file is just for development
rm $RPM_BUILD_ROOT/%{_datadir}/sectool/scheduler/selftest.py
mkdir -p  $RPM_BUILD_ROOT/var/log/
touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log

%find_lang %{name}

%files -f %{name}.lang
%defattr(-,root,root)
%doc COPYING AUTHORS README doc/tests_documentation.html
%config(noreplace) %{_sysconfdir}/sectool/
%config(noreplace) %{_sysconfdir}/logrotate.d/sectool
%dir %{_localstatedir}/lib/sectool
%dir %{_datadir}/sectool
%{_sbindir}/sectool
#library with tests
%{_datadir}/sectool/scheduler
%{_libexecdir}/sectool/tests
# command line tool
%{_datadir}/sectool/actions.py*
%{_datadir}/sectool/__init__.py*
%{_datadir}/sectool/output.py*
%{_datadir}/sectool/mailoutput.py*
%{_datadir}/sectool/sectool.py*
%{_datadir}/sectool/tuierrors.py*
%{_libexecdir}/sectool-mechanism.py*
%{_datadir}/sectool/sectool-mechanism.py*
%{_mandir}/man8/sectool.8.gz
%{_localstatedir}/log/sectool.log

# polkit
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf
%{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy
%{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service

%files gui
%defattr(-,root,root)
%config(noreplace) %{_sysconfdir}/pam.d/sectool-gui
#%config(noreplace) %{_sysconfdir}/security/console.apps/sectool-gui
%{_bindir}/sectool-gui
%{_datadir}/sectool/gui*.py*
%{_datadir}/sectool/sectool-gui.py*
%{_datadir}/pixmaps/sectool-gui.png
%{_datadir}/pixmaps/sectool-min.png
%if 0%{?fedora} && 0%{?fedora} < 19
%{_datadir}/applications/fedora-sectool.desktop
%else
%{_datadir}/applications/sectool.desktop
%endif
%{_datadir}/pixmaps/sectool/*.png


%changelog
* Wed Jul 29 2015 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.5-16
- Rebuilt for rpm 4.12.90

* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-15
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Thu May 09 2013 Luke Macken <lmacken@redhat.com> - 0.9.5-11
- Fix the URL

* Mon Feb 25 2013 Toshio Kuratomi <toshio@fedoraproject.org> - 0.9.5-10
- Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077

* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Tue Apr 03 2012 Peter Vrabec <pvrabec@redhat.com> - 0.9.5-7
- fixing dbus config privilege escalation (#809437)

* Sun Mar  4 2012 Peter Robinson <pbrobinson@fedoraproject.org> - 0.9.5-6
- PolicyKit -> polkit since F-11

* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Thu Jan 20 2011 Peter Vrabec <pvrabec@redhat.com> - 0.9.5-3
- rebuild

* Wed Aug 11 2010 David Malcolm <dmalcolm@redhat.com> - 0.9.5-2
- recompiling .py files against Python 2.7 (rhbz#623358)

* Fri Jun 04 2010 Peter Vrabec <pvrabec@redhat.com> - 0.9.5-1
- upgrade

* Wed Jun 02 2010 Peter Vrabec <pvrabec@redhat.com> - 0.9.4-9
- skip a numeric check in debug mode

* Tue May 25 2010 Peter Vrabec <pvrabec@redhat.com> - 0.9.4-8
- filter (deleted) files in netserv
- create empty log file after installation
- fix expected permissions on shadow/gshadow

* Fri Apr 23 2010 Maros Barabas <mbarabas@redhat.com> - 0.9.4-7
- Permissions test: changed permissions of directories in root

* Mon Apr 19 2010 Maros Barabas <mbarabas@redhat.com> - 0.9.4-6
- Added -lrpmio (#564705)

* Wed Mar 10 2010 Maros Barabas <mbarabas@redhat.com> - 0.9.4-5
- added patches for PolicyKit and dBus bugs

* Sat Jan  2 2010 Tomas Mraz <tmraz@redhat.com> - 0.9.4-4
- rebuilt with new librpm

* Thu Nov 19 2009 Maros Barabas <mbarabas@redhat.com> - 0.9.4-3
- change policy file path
- removed usermod requirement

* Wed Sep 09 2009 Maros Barabas <mbarabas@redhat.com> - 0.9.4-2
- upgrade with PolicyKit integration
- dbus update
- fedora test day bugfixes

* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Tue Jul 14 2009 Peter Vrabec  <pvrabec@redhat.com> - 0.9.3-2
- handle ext4 fs in filesystem test (#510646)

* Wed Jun 03 2009 Peter Vrabec  <pvrabec@redhat.com> - 0.9.3-1
- upgrade, bugfix release

* Thu May 21 2009 Ville Skyttä <ville.skytta at iki.fi> - 0.9.2-5
- Build with $RPM_OPT_FLAGS (#497231).

* Mon Jan 26 2009 Daniel Kopecek <dkopecek@redhat.com> - 0.9.2-4
- removed showvars.dsc

* Fri Jan 23 2009 Daniel Kopecek <dkopecek@redhat.com> - 0.9.2-3
- removed showvars.sh
- added dist macro to Release:

* Tue Dec 02 2008 Daniel Kopecek <dkopecek@redhat.com> - 0.9.2-2
- bugfix release

* Mon Nov 24 2008 Daniel Kopecek <dkopecek@redhat.com> - 0.9.2-1
- upgrade, see changelog for changes

* Mon Nov 03 2008 Peter Vrabec <pvrabec@redhat.com> - 0.9.1-4
- checking zsh home files (#469913)
- fix selinux test failure (#469910)

* Mon Nov 03 2008 Peter Vrabec <pvrabec@redhat.com> - 0.9.1-3
- fix getValueFromH() (#469368)
- fix GUI: set REFRESH, DEBUG, LEVEL

* Thu Oct 23 2008 Peter Vrabec <pvrabec@redhat.com> - 0.9.1-2
- add missing requirement (468033)
- fix deps of cron test (468033)

* Wed Oct 22 2008 Peter Vrabec <pvrabec@redhat.com> - 0.9.1-1
- upgrade, bugfix release

* Thu Oct 09 2008 Peter Vrabec <pvrabec@redhat.com> - 0.9.0-1
- upgrade, see changelog for changes

* Sat Sep 06 2008 Peter Vrabec <pvrabec@redhat.com> - 0.8.6-2
- fix selinux DEPS, quick workaround

* Fri Sep 05 2008 Peter Vrabec <pvrabec@redhat.com> - 0.8.6-1
- upgrade, see changelog

* Thu Jul 03 2008 Peter Vrabec <pvrabec@redhat.com> - 0.8.0-1
- upgrade

* Fri Jun 06 2008 Peter Vrabec <pvrabec@redhat.com> - 0.7.6-1
- upgrade

* Mon May 26 2008 Peter Vrabec <pvrabec@redhat.com> - 0.7.5-1
- upgrade

* Wed May 21 2008 Peter Vrabec <pvrabec@redhat.com> - 0.7.4-1
- new upstream release, lots of fixes and improvements,
  see changelog

* Mon Apr 28 2008 Peter Vrabec <pvrabec@redhat.com> - 0.7.3-1
- new upstream release
- better test integration

* Fri Apr 25 2008 Peter Vrabec <pvrabec@redhat.com> - 0.7.2-1
- new upstream release
- Support overriding level configuration in ~/.sectoolrc
- Add saving level configuration in GUI:

* Mon Apr 21 2008 Peter Vrabec <pvrabec@redhat.com> - 0.7.1-1
- new upstream release

* Tue Apr 08 2008 Peter Vrabec <pvrabec@redhat.com> - 0.7.0-1
- new upstream release

* Mon Mar 31 2008 Maros Barabas <mbarabas@redhat.com> - 0.6.0-4
- improved killing system in gui

* Fri Mar 28 2008 Maros Barabas <mbarabas@redhat.com> - 0.6.0-3
- code review: cleaning code in OuputFormatter
               adding comments
               migrating public formatter  methods to private

* Tue Mar 25 2008 Maros Barabas <mbarabas@redhat.com> - 0.6.0-2
- repaired sensitivity of popup buttons 
- code review: migrating public methods to private
               more comments

* Fri Mar 21 2008 Peter Vrabec <pvrabec@redhat.com> - 0.6.0-1
- gui improvements
- new feature include/exclude tests
- new sectool.conf

* Mon Mar 18 2008 Jakub Hrozek <jhrozek@redhat.com> - 0.5.1-1
- Fix mail output

* Wed Mar 05 2008 Peter Vrabec <pvrabec@redhat.com> - 0.5.0-1
- email sending support

* Wed Mar 05 2008 Peter Vrabec <pvrabec@redhat.com> - 0.4.0-1
- new tests
- bugfixes
- support diff results
- improved GUI

* Wed Jan 23 2008 Peter Vrabec <pvrabec@redhat.com> - 0.2.0-1
- stable demo release

* Fri Jan 18 2008 Peter Vrabec <pvrabec@redhat.com> - 0.1.0-4
- fix rpmbuild on fc8

* Wed Jan 16 2008 Peter Vrabec <pvrabec@redhat.com> - 0.1.0-3
- fix license issues 
- some macros clean up in makefile and spec

* Wed Jan 16 2008 Peter Vrabec <pvrabec@redhat.com> - 0.1.0-2
- make rpmlint happy, very important cleanup

* Tue Jan 15 2008 Peter Vrabec <pvrabec@redhat.com> - 0.1.0-1
- initial packaging