From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 31 Oct 2026 21:38:55 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xNFqo-005gQ0-2y for lore@lore.pengutronix.de; Sat, 31 Oct 2026 21:38:55 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqn-0002q9-HE; Sat, 31 Oct 2026 21:38:53 +0100 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqN-0001wg-Pe for ptxdist@pengutronix.de; Sat, 31 Oct 2026 21:38:27 +0100 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id A15C3202882 for ; Sat, 31 Oct 2026 21:38:27 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1793479107; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=tiEm9D/vlqvlfAk8mxaOlvUZmD9tQvWP1gqVnE633d4=; b=CwYOToZwSvirJ0DsooUTSPhr8JZAPpILIGS74yXDZAZC3E817PN8G3/qwKR1YHXJLrzPvF ZpHLTm2UL6MssoZrImzR9czt/JSzLLt5XiyxQTOmilhAQGZw07v0VIMAI53zY3qyIfe8Yi FWhAQRAoCjHGKiiV/TMduXkB2GFwhVuLlX+bN0X+BOWJk9U7sWIFtKTOqbGD8RVQ05ljh3 KFR8Irj/smzZUVz15Ugd+gC/pLsiy+BaWayLmH5VU4dYryskkneQLv8o+XXsyCHIfK6ri0 6BDzi1tpsimASm+mU1Xx0C3w144OaEU//r5vlmvnlLeilZ/2ClaJBLDnz9zYtg== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=Og7qAELf; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1793479107; a=rsa-sha256; cv=none; b=G4F7ixPrezXhEAPpBZUGw/0sWoNS9meciNY10WvWBKvjv42prJVXm/IQnilnqHkqd9BhZK DGoLzPbbidurC4cTzCcz8atNV6UN+DbQoZ0t1/5ER3tKEs8jyrneJiNuNJZ2TsEsdB+LBn xyZT53Dyynyyk7yvFvIcriiQDgluy4YhGSinHRcRDhaWrOzX8qWnElI8hxhlbikQ2YNmO+ nVBxURjEWD6Jq1jCp2alylBwtx7wZJb2dQ4wce5ZS8pkmbJK3m0u17YOIhmfiWwS1hknZ5 doAPg7TT8erYjUw7LVTfkYvzmq0WzsdNgn3Q7EQnGRuVN2mRhbLQ/VL34c8oWw== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id NFqKxUpN38HlqNFqNxK73Z; Sat, 31 Oct 2026 21:38:27 +0100 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Sat, 31 Oct 2026 21:38:09 +0100 Message-ID: <20261031203823.357406-9-oss-lists@triops.cz> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261031203823.357406-1-oss-lists@triops.cz> References: <20261031203823.357406-1-oss-lists@triops.cz> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfOUL+NQ2rVoubYeLoGE32BRgRKNm0ZyaYYZiOYd7Z1ds3Fx2+kxuLOXnJIH5hCJxnQICL7unBaq45f0sV82UWStZHYPZarUjfV30Q9wXJFJnZBIFEiP4 zH9H1rcJGWTWwKUnBEnLEIiZU06F56zVUdum5zsiN8uxJf5sP6KUoGd4I9u8fLY0kGxDwpkBCZ9HIh2DUAomxzXUdh9RkKu0EwY= X-Spamd-Result: default: False [-1.60 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_ALL(0.00)[]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; DMARC_NA(0.00)[triops.cz]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_SPAM(0.00)[0.523]; FROM_EQ_ENVFROM(0.00)[]; TO_DN_NONE(0.00)[]; R_SPF_NA(0.00)[no SPF record]; DKIM_TRACE(0.00)[triops.cz:+] X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: xqcu7mqxdnc9iiuyju8trmpeboxyqx74 X-Rspamd-Queue-Id: A15C3202882 Subject: [ptxdist] [PATCH v2 08/17] audit: new package X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl Linux audit userspace, needed by libsemanage for libaudit. Signed-off-by: Ladislav Michl --- CHANGES: - v2: install /etc/libaudit.conf and tmpfiles.d snippet with 0640 permissions, as upstream does. patches/audit-userspace-4.2.1/autogen.sh | 1 + rules/audit.in | 19 +++++ rules/audit.make | 102 +++++++++++++++++++++++ 3 files changed, 122 insertions(+) create mode 120000 patches/audit-userspace-4.2.1/autogen.sh create mode 100644 rules/audit.in create mode 100644 rules/audit.make diff --git a/patches/audit-userspace-4.2.1/autogen.sh b/patches/audit-userspace-4.2.1/autogen.sh new file mode 120000 index 000000000..9f8a4cb7d --- /dev/null +++ b/patches/audit-userspace-4.2.1/autogen.sh @@ -0,0 +1 @@ +../autogen.sh \ No newline at end of file diff --git a/rules/audit.in b/rules/audit.in new file mode 100644 index 000000000..2c2582d8e --- /dev/null +++ b/rules/audit.in @@ -0,0 +1,19 @@ +## SECTION=security + +menuconfig AUDIT + tristate + prompt "audit " + select LIBCAP_NG + help + Linux audit userspace: libaudit, libauparse and the auditd + daemon with its tools. + +if AUDIT + +config AUDIT_TOOLS + bool + prompt "install auditd and tools" + help + Install auditd, auditctl, augenrules, ausearch and aureport. + +endif diff --git a/rules/audit.make b/rules/audit.make new file mode 100644 index 000000000..0353efd94 --- /dev/null +++ b/rules/audit.make @@ -0,0 +1,102 @@ +# -*-makefile-*- +# +# Copyright (C) 2026 by Ladislav Michl +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +# +# We provide this package +# +PACKAGES-$(PTXCONF_AUDIT) += audit + +# +# Paths and names +# +AUDIT_VERSION := 4.2.1 +AUDIT_SHA256 := 42876d195ee2ded19e5f72d7664096eee314928aa36ad346719ba5b25818fc84 +AUDIT := audit-userspace-$(AUDIT_VERSION) +AUDIT_SUFFIX := tar.gz +AUDIT_URL := https://github.com/linux-audit/audit-userspace/archive/refs/tags/v$(AUDIT_VERSION).$(AUDIT_SUFFIX) +AUDIT_SOURCE := $(SRCDIR)/$(AUDIT).$(AUDIT_SUFFIX) +AUDIT_DIR := $(BUILDDIR)/$(AUDIT) +AUDIT_LICENSE := GPL-2.0-or-later AND LGPL-2.1-or-later +AUDIT_LICENSE_FILES := \ + file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f \ + file://COPYING.LIB;md5=e3eda01d9815f8d24aae2dbd89b68b06 +AUDIT_CVE_PRODUCT := audit-userspace_project:audit-userspace + +# ---------------------------------------------------------------------------- +# Prepare +# ---------------------------------------------------------------------------- + +# +# autoconf +# +AUDIT_CONF_TOOL := autoconf +AUDIT_CONF_OPT := \ + $(CROSS_AUTOCONF_USR) \ + --runstatedir=/run \ + --disable-listener \ + --disable-zos-remote \ + --disable-legacy-actions \ + --disable-gssapi-krb5 \ + --disable-tls \ + --disable-experimental \ + --without-python3 \ + --without-golang \ + --without-asan \ + --$(call ptx/wwo, PTXCONF_ARCH_ARM)-arm \ + --$(call ptx/wwo, PTXCONF_ARCH_ARM64)-aarch64 \ + --$(call ptx/wwo, PTXCONF_ARCH_RISCV)-riscv \ + --without-apparmor \ + --without-libwrap \ + --without-io_uring \ + --without-nftables \ + --with-libcap-ng + +# ---------------------------------------------------------------------------- +# Target-Install +# ---------------------------------------------------------------------------- + +$(STATEDIR)/audit.targetinstall: + @$(call targetinfo) + + @$(call install_init, audit) + @$(call install_fixup, audit,PRIORITY,optional) + @$(call install_fixup, audit,SECTION,base) + @$(call install_fixup, audit,AUTHOR,"Ladislav Michl ") + @$(call install_fixup, audit,DESCRIPTION,missing) + + @$(call install_lib, audit, 0, 0, 0644, libaudit) + @$(call install_lib, audit, 0, 0, 0644, libauparse) + @$(call install_alternative, audit, 0, 0, 0640, /etc/libaudit.conf) + +ifdef PTXCONF_AUDIT_TOOLS + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/auditd) + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/auditctl) + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/augenrules) + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/aureport) + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/ausearch) + @$(call install_alternative, audit, 0, 0, 0640, /etc/audit/auditd.conf) + @$(call install_alternative, audit, 0, 0, 0640, /etc/audit/audit-stop.rules) + @$(call install_copy, audit, 0, 0, 0750, /etc/audit/rules.d) + @$(call install_copy, audit, 0, 0, 0700, /var/log/audit) + +ifdef PTXCONF_INITMETHOD_SYSTEMD + @$(call install_alternative, audit, 0, 0, 0644, /usr/lib/systemd/system/auditd.service) + @$(call install_link, audit, ../auditd.service, \ + /usr/lib/systemd/system/multi-user.target.wants/auditd.service) + @$(call install_alternative, audit, 0, 0, 0644, /usr/lib/systemd/system/audit-rules.service) + @$(call install_link, audit, ../audit-rules.service, \ + /usr/lib/systemd/system/multi-user.target.wants/audit-rules.service) + @$(call install_alternative, audit, 0, 0, 0640, /usr/lib/tmpfiles.d/audit.conf) +endif +endif + + @$(call install_finish, audit) + + @$(call touch) + +# vim: syntax=make -- 2.47.3