%{?_with_static: %define nostatic %nil }

%{!?_with_static: %define nostatic --disable-static }

# segfaults

%{!?_with_curl: %{!?_without_curl: %define _without_curl --without-curl}}

Summary: Intrusion detection environment

Name: aide

Version: 0.13.1

Release: 2

URL: http://sourceforge.net/projects/aide

License: GPL

Group: Applications/System

Source0: http://download.sourceforge.net/aide/aide-%{version}.tar.gz

Source1: aide.conf

Source2: README.quickstart

Source3: aide.conf.rhel

Patch0: aide-0.13.1-manuals.patch

Patch1: aide-0.12-selcon.patch

Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot-%(%{__id_u} -n)

Buildrequires: mhash-devel zlib-devel

Buildrequires: flex bison

%if "%{?_with_curl}x" != "x"

Buildrequires: curl-devel

%endif

Buildrequires: pkgconfig

Buildrequires: libattr-devel libacl-devel libselinux-devel

Buildrequires: audit-libs-devel >= 1.2.8-2

#Buildrequires: postgresql-devel libgcrypt-devel

#(needs --with-psql and -lgcrypt in src/Makefile.in)

%description

AIDE (Advanced Intrusion Detection Environment) is a file integrity

checker and intrusion detection program.

%prep

%setup -q

%patch0 -p1 -b .manuals

# Adjust default paths in manual (not as safe as the patch).

#sed -i -e 's!@sysconfdir@/aide.db\(.new\)\?!%{_localstatedir}/lib/aide/aide.db\1.gz!' doc/aide.1.in

#sed -i -e 's!@sysconfdir@/aide.conf!%{_sysconfdir}/aide.conf!' doc/aide.1.in

%patch1 -p1 -b .selcon

%build

%configure --with-config_file=%{_sysconfdir}/aide.conf \

           --with-zlib \

           --with-mhash --enable-mhash \

           %{?_with_curl} %{?_without_curl} \

           --with-selinux --with-posix-acl --with-configmactype=sha256 \

           --with-audit \

           %{?nostatic}

make %{?_smp_mflags}

%install

rm -rf $RPM_BUILD_ROOT

%makeinstall bindir=$RPM_BUILD_ROOT%{_sbindir}

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}

install -p %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}

mkdir -p -m0700 $RPM_BUILD_ROOT%{_localstatedir}/lib/aide

install -p %{SOURCE2} README.quickstart

install -p %{SOURCE3} aide.conf.rhel

%clean

rm -rf $RPM_BUILD_ROOT

%files

%defattr(0644,root,root,0755)

%doc AUTHORS COPYING ChangeLog NEWS README doc/manual.html contrib/

%doc README.quickstart aide.conf.rhel

%attr(0700,root,root) %{_sbindir}/aide

%{_mandir}/man1/*

%{_mandir}/man5/*

%config(noreplace) %attr(0600,root,root) %{_sysconfdir}/aide.conf

%dir %attr(0700,root,root) %{_localstatedir}/lib/aide

%changelog

* Sun Jul 22 2007 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13.1-2

- Apply Steve Conklin's patch to increase displayed portion of

  selinux context.

* Sun Dec 17 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13.1-1

- Update to 0.13.1 release.

* Sun Dec 10 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.13-1

- Update to 0.13 release.

- Include default aide.conf from RHEL5 as doc example file.

* Sun Oct 29 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-3.20061027cvs

- CAUTION! This changes the database format and results in a report of

  false inconsistencies until an old database file is updated.

- Check out CVS 20061027 which now contains Red Hat's

  acl/xattr/selinux/audit patches.

- Patches merged upstream.

- Update manual page substitutions.

* Mon Oct 23 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-2

- Add "memory leaks and performance updates" patch as posted

  to aide-devel by Steve Grubb.

* Sat Oct 07 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.12-1

- Update to 0.12 release.

- now offers --disable-static, so -no-static patch is obsolete

- fill last element of getopt struct array with zeroes

* Mon Oct 02 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-3

- rebuilt

* Mon Sep 11 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-2

- rebuilt

* Sun Feb 19 2006 Michael Schwendt <mschwendt[AT]users.sf.net> - 0.11-1

- Update to 0.11 release.

- useless-includes patch merged upstream.

- old Russian man pages not available anymore.

- disable static linking.

* Fri Apr  7 2005 Michael Schwendt <mschwendt[AT]users.sf.net>

- rebuilt

* Fri Nov 28 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.1

- Update to 0.10 release.

- memleaks patch merged upstream.

- rootpath patch merged upstream.

- fstat patch not needed anymore.

- Updated URL.

* Thu Nov 13 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.0.2.cvs20031104

- Added buildreq m4 to work around incomplete deps of bison package.

* Tue Nov 04 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.10-0.fdr.0.1.cvs20031104

- Only tar.gz available upstream.

- byacc not needed when bison -y is available.

- Installed Russian manual pages.

- Updated with changes from CVS (2003-11-04).

- getopt patch merged upstream.

- bison-1.35 patch incorporated upstream.

* Tue Sep 09 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.9-0.fdr.0.2.20030902

- Added fixes for further memleaks.

* Sun Sep 07 2003 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:0.9-0.fdr.0.1.20030902

- Initial package version.