system/tiger: Removed (unmaintained)
Reference: http://lists.slackbuilds.org/pipermail/slackbuilds-users/2010-October/006570.html Signed-off-by: Heinz Wiesinger <pprkut@slackbuilds.org> Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
This commit is contained in:
Robby Workman
parent
a57d9d2998
commit
75c5ce1390
|
|
@ -1,10 +0,0 @@
|
||||||
TIGER, or the 'tiger' scripts, is a set of Bourne shell scripts,
|
|
||||||
C programs and data files which are used to perform a security audit
|
|
||||||
of UNIX systems. It is designed to hopefully be easy to use, easy to
|
|
||||||
understand and easy to enhance.
|
|
||||||
|
|
||||||
'tiger' incorporates checks primarily oriented towards Linux integrity
|
|
||||||
including: md5sums checks installed files, (and it can call AIDE or
|
|
||||||
Intergrit aswell), analysis of local listening processes, and then some.
|
|
||||||
|
|
||||||
Tiger uses 'chkrootkit' for rootkit scanning if it's present.
|
|
||||||
|
|
@ -1,9 +0,0 @@
|
||||||
#
|
|
||||||
# Regular cron jobs for the tiger package
|
|
||||||
#
|
|
||||||
# Configuration file
|
|
||||||
DEFAULT=/etc/default/tiger
|
|
||||||
# default setting, overriden in the above file
|
|
||||||
NICETIGER=10
|
|
||||||
#
|
|
||||||
0 * * * * root test -x /usr/sbin/tigercron && { [ -r "$DEFAULT" ] && . "$DEFAULT" ; nice -n$NICETIGER /usr/sbin/tigercron -q ; }
|
|
||||||
|
|
@ -1,31 +0,0 @@
|
||||||
Login ID nobody is disabled, but still has a valid shell \(/bin/sh\)
|
|
||||||
Login ID mail's home directory \(/var/mail\) has group `mail' write access.
|
|
||||||
Login ID \w+'s parent directory \(/home\) has group `staff' write access.
|
|
||||||
Log file /var/log/wtmp permission should be 644
|
|
||||||
Log file /var/log/btmp does not exist
|
|
||||||
Log file /var/run/utmp permission should be 644
|
|
||||||
Log file /var/log/loginlog does not exist
|
|
||||||
Log file /var/log/messages permission should be 640
|
|
||||||
The owner of /var/log/wtmp should be root (owned by utmp).
|
|
||||||
/var/log/wtmp should not have group write.
|
|
||||||
The owner of /var/run/utmp should be root (owned by utmp).
|
|
||||||
/var/run/utmp should not have group write.
|
|
||||||
/var/log/XFree86.0.log should not have world read.
|
|
||||||
/etc/fstab should not have group read.
|
|
||||||
/etc/fstab should not have world read.
|
|
||||||
/etc/inetd.conf should not have group read.
|
|
||||||
/etc/inetd.conf should not have world read.
|
|
||||||
/etc/pam.d/sudo should not have world read.
|
|
||||||
The directory /dev/ataraid resides in a device directory.
|
|
||||||
The directory /dev/cciss resides in a device directory.
|
|
||||||
The directory /dev/fd resides in a device directory.
|
|
||||||
The directory /dev/input resides in a device directory.
|
|
||||||
The directory /dev/pts resides in a device directory.
|
|
||||||
The directory /dev/rd resides in a device directory.
|
|
||||||
The directory /dev/usb resides in a device directory.
|
|
||||||
The directory /dev/ida resides in a device directory.
|
|
||||||
/dev/null has world permissions
|
|
||||||
/dev/ptmx has world permissions
|
|
||||||
/dev/gpmctl has world permissions
|
|
||||||
/dev/gpmdata has world permissions
|
|
||||||
File ".fetchmail-UIDL-cache" in the mail spool, owned by "fetchmail".
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
config() {
|
|
||||||
NEW="$1"
|
|
||||||
OLD="$(dirname $NEW)/$(basename $NEW .new)"
|
|
||||||
# If there's no config file by that name, mv it over:
|
|
||||||
if [ ! -r $OLD ]; then
|
|
||||||
mv $NEW $OLD
|
|
||||||
elif [ "$(cat $OLD | md5sum)" = "$(cat $NEW | md5sum)" ]; then
|
|
||||||
# toss the redundant copy
|
|
||||||
rm $NEW
|
|
||||||
fi
|
|
||||||
# Otherwise, we leave the .new copy for the admin to consider...
|
|
||||||
}
|
|
||||||
config etc/tiger/cronrc.new
|
|
||||||
config etc/tiger/tigerrc.new
|
|
||||||
config etc/tiger/tiger.ignore.new
|
|
||||||
config etc/cron.d/tiger.new
|
|
||||||
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
diff -ur tiger-3.2.3/util/genmsgidx tiger-3.2.3.new/util/genmsgidx
|
|
||||||
--- tiger-3.2.3/util/genmsgidx 2008-11-27 23:34:21.000000000 +0100
|
|
||||||
+++ tiger-3.2.3.new/util/genmsgidx 2010-09-01 12:43:22.000000000 +0200
|
|
||||||
@@ -96,10 +96,10 @@
|
|
||||||
haveallof variables BASEDIR || exit 1
|
|
||||||
|
|
||||||
# Clear idx file and detect error
|
|
||||||
-> $BASEDIR/doc/explain.idx && {
|
|
||||||
- echo "Error: Cannot write over the index file $BASEDIR/doc/explain.idx. Aborting"
|
|
||||||
- exit 1
|
|
||||||
-}
|
|
||||||
+#> $BASEDIR/doc/explain.idx && {
|
|
||||||
+# echo "Error: Cannot write over the index file $BASEDIR/doc/explain.idx. Aborting"
|
|
||||||
+# exit 1
|
|
||||||
+#}
|
|
||||||
|
|
||||||
$LS $BASEDIR/doc/*.txt |
|
|
||||||
while read infile
|
|
||||||
|
|
@ -1,19 +0,0 @@
|
||||||
# HOW TO EDIT THIS FILE:
|
|
||||||
# The "handy ruler" below makes it easier to edit a package description. Line
|
|
||||||
# up the first '|' above the ':' following the base package name, and the '|'
|
|
||||||
# on the right side marks the last column you can put a character in. You must
|
|
||||||
# make exactly 11 lines for the formatting to be correct. It's also
|
|
||||||
# customary to leave one space after the ':'.
|
|
||||||
|
|
||||||
|-----handy-ruler------------------------------------------------------|
|
|
||||||
tiger: tiger (Report system security vulnerabilities)
|
|
||||||
tiger:
|
|
||||||
tiger: TIGER, or the 'tiger' scripts, is a set of Bourne shell scripts,
|
|
||||||
tiger: C programs and data files which are used to perform a security
|
|
||||||
tiger: audit of UNIX systems. TIGER has one primary goal: report ways
|
|
||||||
tiger: 'root' can be compromised.
|
|
||||||
tiger:
|
|
||||||
tiger: Originally developed by the A&M campus of the Texas University.
|
|
||||||
tiger: Currently it is maintained by: Javier Fernandez-Sanguino
|
|
||||||
tiger:
|
|
||||||
tiger:
|
|
||||||
|
|
@ -1,124 +0,0 @@
|
||||||
#!/bin/sh
|
|
||||||
|
|
||||||
# Slackware build script for Tiger
|
|
||||||
|
|
||||||
# Written by Menno Duursma <druiloor@zonnet.nl>
|
|
||||||
|
|
||||||
# This program is free software. It comes without any warranty.
|
|
||||||
# Granted WTFPL, Version 2, as published by Sam Hocevar. See
|
|
||||||
# http://sam.zoy.org/wtfpl/COPYING for more details.
|
|
||||||
|
|
||||||
PRGNAM=tiger
|
|
||||||
VERSION=${VERSION:-3.2.3}
|
|
||||||
BUILD=${BUILD:-2}
|
|
||||||
TAG=${TAG:-_SBo}
|
|
||||||
|
|
||||||
# Automatically determine the architecture we're building on:
|
|
||||||
if [ -z "$ARCH" ]; then
|
|
||||||
case "$( uname -m )" in
|
|
||||||
i?86) ARCH=i486 ;;
|
|
||||||
arm*) ARCH=arm ;;
|
|
||||||
# Unless $ARCH is already set, use uname -m for all other archs:
|
|
||||||
*) ARCH=$( uname -m ) ;;
|
|
||||||
esac
|
|
||||||
fi
|
|
||||||
|
|
||||||
CWD=$(pwd)
|
|
||||||
TMP=${TMP:-/tmp/SBo}
|
|
||||||
PKG=$TMP/package-$PRGNAM
|
|
||||||
OUTPUT=${OUTPUT:-/tmp}
|
|
||||||
|
|
||||||
if [ "$ARCH" = "i486" ]; then
|
|
||||||
SLKCFLAGS="-O2 -march=i486 -mtune=i686"
|
|
||||||
LIBDIRSUFFIX=""
|
|
||||||
elif [ "$ARCH" = "i686" ]; then
|
|
||||||
SLKCFLAGS="-O2 -march=i686 -mtune=i686"
|
|
||||||
LIBDIRSUFFIX=""
|
|
||||||
elif [ "$ARCH" = "x86_64" ]; then
|
|
||||||
SLKCFLAGS="-O2 -fPIC"
|
|
||||||
LIBDIRSUFFIX="64"
|
|
||||||
else
|
|
||||||
SLKCFLAGS="-O2"
|
|
||||||
LIBDIRSUFFIX=""
|
|
||||||
fi
|
|
||||||
|
|
||||||
set -e # Exit on most errors
|
|
||||||
|
|
||||||
rm -rf $PKG
|
|
||||||
mkdir -p $TMP $PKG $OUTPUT
|
|
||||||
cd $TMP
|
|
||||||
rm -rf $PRGNAM-$VERSION
|
|
||||||
tar xvf $CWD/$PRGNAM-$VERSION.tar.gz
|
|
||||||
cd $PRGNAM-$VERSION
|
|
||||||
chown -R root:root .
|
|
||||||
find . \
|
|
||||||
\( -perm 777 -o -perm 775 -o -perm 711 -o -perm 555 -o -perm 511 \) \
|
|
||||||
-exec chmod 755 {} \; -o \
|
|
||||||
\( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \
|
|
||||||
-exec chmod 644 {} \;
|
|
||||||
|
|
||||||
# The build errs on this
|
|
||||||
patch --verbose -p1 < $CWD/patches/tiger-3.2.3-build-fix.diff
|
|
||||||
|
|
||||||
CFLAGS="$SLKCFLAGS" \
|
|
||||||
CXXFLAGS="$SLKCFLAGS"
|
|
||||||
export CFLAGS CXXFLAGS
|
|
||||||
./configure \
|
|
||||||
--prefix=/usr \
|
|
||||||
--libdir=/usr/lib${LIBDIRSUFFIX} \
|
|
||||||
--mandir=/usr/man \
|
|
||||||
--with-tigerhome=/usr/libexec/tiger \
|
|
||||||
--with-tigerbin=/usr/sbin \
|
|
||||||
--with-tigerconfig=/etc/tiger \
|
|
||||||
--with-tigerwork=/var/lib/tiger/work \
|
|
||||||
--with-tigerlog=/var/log/tiger
|
|
||||||
|
|
||||||
make
|
|
||||||
make install DESTDIR=$PKG
|
|
||||||
|
|
||||||
find $PKG | xargs file | grep -e "executable" -e "shared object" | grep ELF \
|
|
||||||
| cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true
|
|
||||||
|
|
||||||
install -D -m 0644 $CWD/config/tiger.cron $PKG/etc/cron.d/tiger.new
|
|
||||||
install -D -m 0640 $CWD/config/tiger.ignore $PKG/etc/tiger/tiger.ignore.new
|
|
||||||
|
|
||||||
# From the .spec: 3.- This should be done by the Makefile, grumble...
|
|
||||||
install -D -m 0644 version.h $PKG/usr/lib/tiger/version.h
|
|
||||||
|
|
||||||
# Remove unnecesary stuff
|
|
||||||
( cd $PKG
|
|
||||||
for system in AIX HPUX IRIX NeXT SunOS UNICOS UNICOSMK Tru64 MacOSX ; do
|
|
||||||
rm -rf ./usr/libexec/tiger/systems/$system
|
|
||||||
done
|
|
||||||
find . -type d -name CVS | xargs -iX rm -rf "X"
|
|
||||||
)
|
|
||||||
|
|
||||||
( cd $PKG/etc/tiger
|
|
||||||
mv -v cronrc cronrc.new
|
|
||||||
mv -v tigerrc tigerrc.new
|
|
||||||
)
|
|
||||||
|
|
||||||
find $PKG/usr/man -type f -exec gzip -9 {} \;
|
|
||||||
for i in $( find $PKG/usr/man -type l ) ; do ln -s $( readlink $i ).gz $i.gz ; rm $i ; done
|
|
||||||
|
|
||||||
mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION
|
|
||||||
cp -a [A-Z][A-Z]* site-* tigerrc* \
|
|
||||||
$PKG/usr/doc/$PRGNAM-$VERSION
|
|
||||||
cp -a other/cert-usc20.txt contrib/fix_tiger_GROUPS.sh \
|
|
||||||
$PKG/usr/doc/$PRGNAM-$VERSION
|
|
||||||
|
|
||||||
mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION/txt
|
|
||||||
cp $PKG/usr/libexec/tiger/doc/*.txt $PKG/usr/doc/$PRGNAM-$VERSION/txt
|
|
||||||
mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION/html
|
|
||||||
cp $PKG/usr/libexec/tiger/html/*.html $PKG/usr/doc/$PRGNAM-$VERSION/html
|
|
||||||
|
|
||||||
# Delete the redundant stuff
|
|
||||||
rm -rf $PKG/usr/libexec/tiger/doc $PKG/usr/libexec/tiger/html
|
|
||||||
cat $CWD/$PRGNAM.SlackBuild > $PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild
|
|
||||||
|
|
||||||
mkdir -p $PKG/install
|
|
||||||
cat $CWD/slack-desc > $PKG/install/slack-desc
|
|
||||||
cat $CWD/doinst.sh > $PKG/install/doinst.sh
|
|
||||||
|
|
||||||
cd $PKG
|
|
||||||
/sbin/makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.${PKGTYPE:-tgz}
|
|
||||||
|
|
@ -1,10 +0,0 @@
|
||||||
PRGNAM="tiger"
|
|
||||||
VERSION="3.2.3"
|
|
||||||
HOMEPAGE="http://www.nongnu.org/tiger"
|
|
||||||
DOWNLOAD="http://download.savannah.nongnu.org/releases/tiger/tiger-3.2.3.tar.gz"
|
|
||||||
MD5SUM="f41076f645da9de937819bf6d516e546"
|
|
||||||
DOWNLOAD_x86_64=""
|
|
||||||
MD5SUM_x86_64=""
|
|
||||||
MAINTAINER="Menno Duursma"
|
|
||||||
EMAIL="druiloor@zonnet.nl"
|
|
||||||
APPROVED="dsomero"
|
|
||||||
Loading…
Reference in New Issue