From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 20 Oct 2026 13:49:41 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xJ8Ld-0010yV-0h for lore@lore.pengutronix.de; Tue, 20 Oct 2026 13:49:41 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJ8Lc-0001T9-A0; Tue, 20 Oct 2026 13:49:40 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJ8LD-0000SF-7G for ptxdist@pengutronix.de; Tue, 20 Oct 2026 13:49:15 +0200 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 0AC46201EC5 for ; Tue, 20 Oct 2026 13:49:15 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1792496955; a=rsa-sha256; cv=none; b=GcyzJfd5wLtT7kVQfDSGm7+QXcnot10VUeEX3UPJwdtv5ndBSCJyz3v1vvK2XEhQQ2RXUd KGbjL5xfsd+wIQWk4reIkAb9Z1RcvKkCTNiIg9VtJwaOW9bJD2+oqs9GYb3o7WGMntdKc2 ntAeYBJuDD9v5wOIQG7Dxl938kUBBfHFQQIjuz7qAOf3vJyP1BvSu1VEnt8W8ELOnnbeyD BHV6g+ezD3vt37fnI/mNK9W9uHAc0PYdIEzYjajMcUrI60a5nlgb7rah8/U+cSsNGp5RLG wRRUlcO+0sP3oCWwmzCuFQ7Y41Q8DswZoE6lvHPh2dye1FItQQ6BdBKoxVlDYQ== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=lhZz0D9H; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1792496955; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=7vLtDQumN/4z+DaulC5Z7Xg4LXaULKef4PZEG34SOmg=; b=BxcjUDAKNoEoRDU+shx19WPHjEx9Qp5d5u7rloDbDu4J/3JRsUmjPgCcFGabEdEw+r8yO9 acjFN83FIf2bo16IQLHGF6MNDxhv60EoZ6RDMRr6XhYEPRzAUc4Pa/IMDGTPn/7eAOLR35 3NK7awIeQCgZ49PcnJF9owx+dy7NDf9mTHzYxCBxIZz/4/fKVbH9ZnXmBhviZZH+3XSAIX O/FkkZtrYFoWlgvKZiaV4dNViwTMNGsWzroOcGO/ZAcsOVHUAylShBU9viPaMOwkRK8x2q tSAFQREy/Obfa86ji4ReRty9wznFoMFduGRVGPgVsZO1jOBePyacspkp9zy5tg== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id J8LAx5Bd8NbEUJ8LCxFQAB; Tue, 20 Oct 2026 13:49:14 +0200 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Tue, 20 Oct 2026 13:49:01 +0200 Message-ID: <5baa51070afe989786c092af8918ffabf3ba8808.1792491301.git.ladis@triops.cz> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfNnJ6+ZVcqAEF/DHvGnf7IZcqWQWmRMTQ7zrouOb6fSM28LM6dUEMVjyXjGWj3GchAqWm+Fhyb4tPPTJTI34mHB8HG6saxqNzeTXJR6Zhble+zXbUIr/ OmpnTkvcqtTszmspCIv5pasrIqR2Qu5Uy0ZB09aGJEuJlXlPoDD2BfgIlVG/3YXID94aavspooloMEPxaPPNltqNXF7No4TudNY= X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: 0AC46201EC5 X-Spamd-Result: default: False [-2.60 / 15.00]; BAYES_HAM(-3.00)[100.00%]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; ARC_NA(0.00)[]; RCVD_TLS_ALL(0.00)[]; DMARC_NA(0.00)[triops.cz]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; R_SPF_NA(0.00)[no SPF record]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; NEURAL_HAM(-0.00)[-0.990]; DKIM_TRACE(0.00)[triops.cz:+] X-Rspamd-Action: no action X-Stat-Signature: iyujidr9ew5xe9go9tkb53h47tptix17 Subject: [ptxdist] [PATCH v1 08/17] audit: new package X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl Linux audit userspace, needed by libsemanage for libaudit. Signed-off-by: Ladislav Michl --- patches/audit-userspace-4.2.1/autogen.sh | 1 + rules/audit.in | 19 +++++ rules/audit.make | 102 +++++++++++++++++++++++ 3 files changed, 122 insertions(+) create mode 120000 patches/audit-userspace-4.2.1/autogen.sh create mode 100644 rules/audit.in create mode 100644 rules/audit.make diff --git a/patches/audit-userspace-4.2.1/autogen.sh b/patches/audit-userspace-4.2.1/autogen.sh new file mode 120000 index 000000000..9f8a4cb7d --- /dev/null +++ b/patches/audit-userspace-4.2.1/autogen.sh @@ -0,0 +1 @@ +../autogen.sh \ No newline at end of file diff --git a/rules/audit.in b/rules/audit.in new file mode 100644 index 000000000..2c2582d8e --- /dev/null +++ b/rules/audit.in @@ -0,0 +1,19 @@ +## SECTION=security + +menuconfig AUDIT + tristate + prompt "audit " + select LIBCAP_NG + help + Linux audit userspace: libaudit, libauparse and the auditd + daemon with its tools. + +if AUDIT + +config AUDIT_TOOLS + bool + prompt "install auditd and tools" + help + Install auditd, auditctl, augenrules, ausearch and aureport. + +endif diff --git a/rules/audit.make b/rules/audit.make new file mode 100644 index 000000000..248e08f23 --- /dev/null +++ b/rules/audit.make @@ -0,0 +1,102 @@ +# -*-makefile-*- +# +# Copyright (C) 2026 by Ladislav Michl +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +# +# We provide this package +# +PACKAGES-$(PTXCONF_AUDIT) += audit + +# +# Paths and names +# +AUDIT_VERSION := 4.2.1 +AUDIT_SHA256 := 42876d195ee2ded19e5f72d7664096eee314928aa36ad346719ba5b25818fc84 +AUDIT := audit-userspace-$(AUDIT_VERSION) +AUDIT_SUFFIX := tar.gz +AUDIT_URL := https://github.com/linux-audit/audit-userspace/archive/refs/tags/v$(AUDIT_VERSION).$(AUDIT_SUFFIX) +AUDIT_SOURCE := $(SRCDIR)/$(AUDIT).$(AUDIT_SUFFIX) +AUDIT_DIR := $(BUILDDIR)/$(AUDIT) +AUDIT_LICENSE := GPL-2.0-or-later AND LGPL-2.1-or-later +AUDIT_LICENSE_FILES := \ + file://COPYING;md5=94d55d512a9ba36caa9b7df079bae19f \ + file://COPYING.LIB;md5=e3eda01d9815f8d24aae2dbd89b68b06 +AUDIT_CVE_PRODUCT := audit-userspace_project:audit-userspace + +# ---------------------------------------------------------------------------- +# Prepare +# ---------------------------------------------------------------------------- + +# +# autoconf +# +AUDIT_CONF_TOOL := autoconf +AUDIT_CONF_OPT := \ + $(CROSS_AUTOCONF_USR) \ + --runstatedir=/run \ + --disable-listener \ + --disable-zos-remote \ + --disable-legacy-actions \ + --disable-gssapi-krb5 \ + --disable-tls \ + --disable-experimental \ + --without-python3 \ + --without-golang \ + --without-asan \ + --$(call ptx/wwo, PTXCONF_ARCH_ARM)-arm \ + --$(call ptx/wwo, PTXCONF_ARCH_ARM64)-aarch64 \ + --$(call ptx/wwo, PTXCONF_ARCH_RISCV)-riscv \ + --without-apparmor \ + --without-libwrap \ + --without-io_uring \ + --without-nftables \ + --with-libcap-ng + +# ---------------------------------------------------------------------------- +# Target-Install +# ---------------------------------------------------------------------------- + +$(STATEDIR)/audit.targetinstall: + @$(call targetinfo) + + @$(call install_init, audit) + @$(call install_fixup, audit,PRIORITY,optional) + @$(call install_fixup, audit,SECTION,base) + @$(call install_fixup, audit,AUTHOR,"Ladislav Michl ") + @$(call install_fixup, audit,DESCRIPTION,missing) + + @$(call install_lib, audit, 0, 0, 0644, libaudit) + @$(call install_lib, audit, 0, 0, 0644, libauparse) + @$(call install_alternative, audit, 0, 0, 0644, /etc/libaudit.conf) + +ifdef PTXCONF_AUDIT_TOOLS + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/auditd) + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/auditctl) + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/augenrules) + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/aureport) + @$(call install_copy, audit, 0, 0, 0755, -, /usr/sbin/ausearch) + @$(call install_alternative, audit, 0, 0, 0640, /etc/audit/auditd.conf) + @$(call install_alternative, audit, 0, 0, 0640, /etc/audit/audit-stop.rules) + @$(call install_copy, audit, 0, 0, 0750, /etc/audit/rules.d) + @$(call install_copy, audit, 0, 0, 0700, /var/log/audit) + +ifdef PTXCONF_INITMETHOD_SYSTEMD + @$(call install_alternative, audit, 0, 0, 0644, /usr/lib/systemd/system/auditd.service) + @$(call install_link, audit, ../auditd.service, \ + /usr/lib/systemd/system/multi-user.target.wants/auditd.service) + @$(call install_alternative, audit, 0, 0, 0644, /usr/lib/systemd/system/audit-rules.service) + @$(call install_link, audit, ../audit-rules.service, \ + /usr/lib/systemd/system/multi-user.target.wants/audit-rules.service) + @$(call install_alternative, audit, 0, 0, 0644, /usr/lib/tmpfiles.d/audit.conf) +endif +endif + + @$(call install_finish, audit) + + @$(call touch) + +# vim: syntax=make -- 2.47.3