diff options
Diffstat (limited to 'mandi.spec')
| -rw-r--r-- | mandi.spec | 152 |
1 files changed, 152 insertions, 0 deletions
diff --git a/mandi.spec b/mandi.spec new file mode 100644 index 0000000..a96815b --- /dev/null +++ b/mandi.spec @@ -0,0 +1,152 @@ +%define name mandi +%define version 0.7.2 +%define release 2mdk + +Summary: Monitoring daemon bridge +Name: %{name} +Version: %{version} +Release: %{release} +Source0: %{name}-%{version}.tar.bz2 +License: GPL +Group: Networking/Other +Url: http://cvs.mandriva.com/cgi-bin/cvsweb.cgi/soft/ +BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot +BuildRequires: dbus-devel +Requires(post): rpm-helper +Requires: dbus + +%description +Mandi is a monitoring daemon which acts as a bridge from root +monitoring libraries to user applications, using D-Bus. +Its plugin system allows to monitor different kind of events. +A built-in plugin forwards wireless scan results from wpa_supplicant +to user applications. + +Mandi ain't no daemon, idiot! (c) rgs + +%package ifw +Summary: Firewall rules for Interactive Firewall +Group: Networking/Other +Requires(post): shorewall +Requires: mandi = %{version} +Requires: ipset + +%description ifw +This package contains the iptables rules used to forward intrusion +detections to the mandi daemon. +It is a component of Interactive Firewall. + +%prep +%setup -q + +%build +%make + +%install +rm -rf $RPM_BUILD_ROOT +install -D -m755 src/%{name} $RPM_BUILD_ROOT%{_sbindir}/%{name} +install -D -m644 conf/%{name}.conf $RPM_BUILD_ROOT%{_sysconfdir}/dbus-1/system.d/%{name}.conf +install -D -m755 scripts/%{name}.init %buildroot%{_initrddir}/%{name} +install -d -m755 %buildroot%{_sysconfdir}/ifw/rules.d/ +install -m644 rules.d/* %buildroot%{_sysconfdir}/ifw/rules.d/ +install -m644 scripts/{start,stop} $RPM_BUILD_ROOT%{_sysconfdir}/ifw + +%clean +rm -rf $RPM_BUILD_ROOT + +%post +%_post_service mandi + +%preun +%_preun_service mandi + +%triggerpostun ifw -- mandi-ifw < 0.7.2-2mdk +STARTFILE=%{_sysconfdir}/shorewall/start +if [ -f $STARTFILE ]; then + grep -v -E "^INCLUDE ifw$" $STARTFILE > $STARTFILE.new + mv -f $STARTFILE.new $STARTFILE +fi + +%files +%defattr(-,root,root) +%{_sbindir}/%{name} +%config %{_sysconfdir}/dbus-1/system.d/%{name}.conf +%{_initrddir}/mandi + +%files ifw +%dir %{_sysconfdir}/ifw/ +%{_sysconfdir}/ifw/start +%{_sysconfdir}/ifw/stop +%{_sysconfdir}/ifw/rules.d/* + +%changelog +* Sun Sep 4 2005 Olivier Blin <oblin@mandriva.com> 0.7.2-2mdk +- remove "INCLUDE ifw" in shorewall start file on upgrade + +* Thu Sep 1 2005 Olivier Blin <oblin@mandriva.com> 0.7.2-1mdk +- mandi: save white list right after adding/modifying entries + +* Thu Sep 1 2005 Olivier Blin <oblin@mandriva.com> 0.7.1-1mdk +- 0.7.1: + o add start/stop scripts + o add rules.d directorty, with a sample psd rule + o shorewall isn't required by the package anymore + o remove shorewall workarounds, it'is better done by drakfirewall now + o notify attacks even if attacker is already present in log + o don't create ipsets in the daemon + +* Thu Aug 25 2005 Olivier Blin <oblin@mandriva.com> 0.7-2mdk +- use clean tarball (fix build on 64 bits, thanks couriousous) + +* Wed Aug 24 2005 Olivier Blin <oblin@mandriva.com> 0.7-1mdk +- 0.7, IFW plugin improvements: + o keep logs and allow to clear them + o allow applications to notify themselves when the user has + checked reports or asked to manage the lists + o send notifications in automatic mode too + +* Mon Aug 22 2005 Olivier Blin <oblin@mandriva.com> 0.6-4mdk +- do not match for ESTABLISHED,RELATED connections (Samir), + this should avoid DNS blacklist + +* Mon Aug 22 2005 Olivier Blin <oblin@mandriva.com> 0.6-3mdk +- remove ifw inclusion in shorewall on full removal only + +* Sat Aug 20 2005 Olivier Blin <oblin@mandriva.com> 0.6-2mdk +- really fix dbus permissions + +* Fri Aug 19 2005 Olivier Blin <oblin@mandriva.com> 0.6-1mdk +- 0.6 + o create ipsets in shorewall start script + o start mandi service after messagebus + o allow console users to use Interactive Firewall + +* Thu Aug 18 2005 Olivier Blin <oblin@mandriva.com> 0.5-1mdk +- 0.5 + o use an Ifw chain in shorewall/iptables + o handle blacklist and whitelist in the Ifw chain + +* Thu Aug 18 2005 Olivier Blin <oblin@mandriva.com> 0.4-1mdk +- 0.4 (ignore notifications from the loopback interface) +- start mandi daemon as a service +- add a mandi-ifw subpackage to insert Interactive Firewall in + shorewall start rules +- use psd to detect port scans + +* Thu Aug 11 2005 Olivier Blin <oblin@mandriva.com> 0.3-1mdk +- 0.3, Interactive Firewall improvements: + o really support ipset (using iptrees) + o use correct byte order to add IP addresses in iptrees + o send only one attack report per IP address + o fix description (thanks to Mathieu Geli) + +* Fri Jul 29 2005 Olivier Blin <oblin@mandriva.com> 0.2-1mdk +- 0.2 (small bugfix) +- Requires ipset + +* Thu Jul 28 2005 Olivier Blin <oblin@mandriva.com> 0.1-1mdk +- allow to select a wireless network +- enable fake Active Firewall mode + +* Fri Jul 15 2005 Olivier Blin <oblin@mandriva.com> 0.1-0.1mdk +- initial release |