comparison: nessus-tool/nessus-tool.spec
nessus-tool/nessus-tool.spec
- changeset 102
- 8db7071256b6
- child 103
- 35f0b90c0457
equal
deleted
inserted
replaced
| -1:000000000000 | 0:b3618b2fea18 |
|---|---|
| 1 ## | |
| 2 ## nessus-tool.spec -- OpenPKG RPM Package Specification | |
| 3 ## Copyright (c) 2000-2008 OpenPKG Foundation e.V. <http://openpkg.net/> | |
| 4 ## | |
| 5 ## Permission to use, copy, modify, and distribute this software for | |
| 6 ## any purpose with or without fee is hereby granted, provided that | |
| 7 ## the above copyright notice and this permission notice appear in all | |
| 8 ## copies. | |
| 9 ## | |
| 10 ## THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED | |
| 11 ## WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | |
| 12 ## MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. | |
| 13 ## IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR | |
| 14 ## CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
| 15 ## SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | |
| 16 ## LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF | |
| 17 ## USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND | |
| 18 ## ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, | |
| 19 ## OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT | |
| 20 ## OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
| 21 ## SUCH DAMAGE. | |
| 22 ## | |
| 23 | |
| 24 # package information | |
| 25 Name: nessus-tool | |
| 26 Summary: Nessus Security Scanner (Tool) | |
| 27 URL: http://www.nessus.org/ | |
| 28 Vendor: Renaud Deraison | |
| 29 Packager: OpenPKG Foundation e.V. | |
| 30 Distribution: OpenPKG Community | |
| 31 Class: EVAL | |
| 32 Group: Monitoring | |
| 33 License: GPL | |
| 34 Version: 2.2.11 | |
| 35 Release: 20081120 | |
| 36 | |
| 37 # package options | |
| 38 %option with_fsl yes | |
| 39 | |
| 40 # list of sources | |
| 41 Source0: ftp://ftp.nessus.org/pub/nessus/nessus-%{version}/src/nessus-core-%{version}.tar.gz | |
| 42 Source1: ftp://ftp.nessus.org/pub/nessus/nessus-%{version}/src/nessus-plugins-GPL-%{version}.tar.gz | |
| 43 Source2: nessusd.conf | |
| 44 Source3: nessusd.rules | |
| 45 Source4: nessusd.users | |
| 46 Source5: rc.nessus | |
| 47 Source6: fsl.nessus | |
| 48 Patch0: nessus-tool.patch | |
| 49 | |
| 50 # build information | |
| 51 Prefix: %{l_prefix} | |
| 52 BuildRoot: %{l_buildroot} | |
| 53 BuildPreReq: OpenPKG, openpkg >= 20060823, X11, gcc, make | |
| 54 PreReq: OpenPKG, openpkg >= 20060823, X11 | |
| 55 BuildPreReq: nessus-libs, glib2, gtk2, openssl | |
| 56 PreReq: nessus-libs, glib2, gtk2, openssl | |
| 57 %if "%{with_fsl}" == "yes" | |
| 58 BuildPreReq: fsl >= 1.3.0 | |
| 59 PreReq: fsl >= 1.3.0 | |
| 60 %endif | |
| 61 AutoReq: no | |
| 62 AutoReqProv: no | |
| 63 | |
| 64 %description | |
| 65 This is the Tool package of the Nessus Security Scanner, a security | |
| 66 scanner which will audit remotely a given network and determine | |
| 67 whether attackers may break into it, or misuse it in some way. | |
| 68 | |
| 69 %track | |
| 70 prog nessus-tool:nessus-core = { | |
| 71 version = %{version} | |
| 72 url = ftp://ftp.nessus.org/pub/nessus/ | |
| 73 regex = (nessus-\d+\.\d+\.\d+[a-z]?) | |
| 74 url = ftp://ftp.nessus.org/pub/nessus/__NEWVER__/src/ | |
| 75 regex = nessus-core-(__VER__)\.tar\.gz | |
| 76 } | |
| 77 prog nessus-tool:nessus-plugins = { | |
| 78 version = %{version} | |
| 79 url = ftp://ftp.nessus.org/pub/nessus/ | |
| 80 regex = (nessus-\d+\.\d+\.\d+[a-z]?) | |
| 81 url = ftp://ftp.nessus.org/pub/nessus/__NEWVER__/src/ | |
| 82 regex = nessus-core-(__VER__)\.tar\.gz | |
| 83 } | |
| 84 | |
| 85 %prep | |
| 86 %setup -q -c | |
| 87 %setup -q -T -D -a 1 | |
| 88 %patch -p0 | |
| 89 | |
| 90 %build | |
| 91 # build nessus-core part | |
| 92 ( cd nessus-core | |
| 93 CC="%{l_cc}" \ | |
| 94 CFLAGS="%{l_cflags -O}" \ | |
| 95 CPPFLAGS="%{l_cppflags}" \ | |
| 96 LDFLAGS="%{l_fsl_ldflags}" \ | |
| 97 LIBS="%{l_fsl_libs}" \ | |
| 98 ./configure \ | |
| 99 --prefix=%{l_prefix} \ | |
| 100 --localstatedir=%{l_prefix}/var \ | |
| 101 --sharedstatedir=%{l_prefix}/var \ | |
| 102 --enable-unix-socket=%{l_prefix}/var/nessus/nessusd.socket \ | |
| 103 --disable-syslog \ | |
| 104 --with-x \ | |
| 105 --x-includes=`%{l_rc} --query x11_incdir` \ | |
| 106 --x-libraries=`%{l_rc} --query x11_libdir` \ | |
| 107 --enable-save-sessions \ | |
| 108 --enable-save-kb \ | |
| 109 --enable-release | |
| 110 %{l_make} %{l_mflags} | |
| 111 ) || exit $? | |
| 112 | |
| 113 # temporarily install nessus-core for nessus-plugins building | |
| 114 nessus_core=`pwd`/nessus-core | |
| 115 ( cd nessus-core | |
| 116 %{l_make} %{l_mflags} \ | |
| 117 install DESTDIR=${nessus_core}/tmp | |
| 118 ) || exit $? | |
| 119 | |
| 120 # build nessus-plugins part | |
| 121 ( cd nessus-plugins | |
| 122 CC="%{l_cc}" \ | |
| 123 CFLAGS="-I${nessus_core}/tmp%{l_prefix}/include/nessus %{l_cflags -O}" \ | |
| 124 CPPFLAGS="-I${nessus_core}/tmp%{l_prefix}/include/nessus %{l_cppflags}" \ | |
| 125 LDFLAGS="%{l_fsl_ldflags}" \ | |
| 126 LIBS="%{l_fsl_libs}" \ | |
| 127 ./configure \ | |
| 128 --prefix=%{l_prefix} \ | |
| 129 --enable-install="`%{l_shtool} echo -e %u`" \ | |
| 130 --enable-shared | |
| 131 %{l_shtool} subst \ | |
| 132 -e 's;getinterfaces;local_getinterfaces;g' \ | |
| 133 -e 's;routethrough;local_routethrough;g' \ | |
| 134 -e 's;ipaddr2devname;local_ipaddr2devname;g' \ | |
| 135 -e 's;islocalhost;local_islocalhost;g' \ | |
| 136 -e 's;get_random_bytes;local_get_random_bytes;g' \ | |
| 137 -e 's;getsourceip;local_getsourceip;g' \ | |
| 138 plugins/nmap_osfingerprint/*.[ch] | |
| 139 %{l_make} %{l_mflags} | |
| 140 ) || exit $? | |
| 141 | |
| 142 %install | |
| 143 rm -rf $RPM_BUILD_ROOT | |
| 144 | |
| 145 %{l_shtool} mkdir -f -p -m 755 \ | |
| 146 $RPM_BUILD_ROOT%{l_prefix}/bin | |
| 147 | |
| 148 # install nessus-core part | |
| 149 ( cd nessus-core | |
| 150 %{l_make} %{l_mflags} install DESTDIR=$RPM_BUILD_ROOT | |
| 151 ) || exit $? | |
| 152 | |
| 153 # install nessus-plugins part | |
| 154 ( cd nessus-plugins | |
| 155 %{l_make} %{l_mflags} install DESTDIR=$RPM_BUILD_ROOT | |
| 156 ) || exit $? | |
| 157 | |
| 158 # strip down installation | |
| 159 strip $RPM_BUILD_ROOT%{l_prefix}/bin/* >/dev/null 2>&1 || true | |
| 160 | |
| 161 # install default configuration | |
| 162 %{l_shtool} install -c -m 644 %{l_value -s -a} \ | |
| 163 %{SOURCE nessusd.conf} \ | |
| 164 %{SOURCE nessusd.rules} \ | |
| 165 %{SOURCE nessusd.users} \ | |
| 166 $RPM_BUILD_ROOT%{l_prefix}/etc/nessus/ | |
| 167 | |
| 168 # install run-command script | |
| 169 %{l_shtool} mkdir -f -p -m 755 \ | |
| 170 $RPM_BUILD_ROOT%{l_prefix}/etc/fsl \ | |
| 171 $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d | |
| 172 %{l_shtool} install -c -m 755 %{l_value -s -a} \ | |
| 173 %{SOURCE rc.nessus} $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d/ | |
| 174 %{l_shtool} install -c -m 644 %{l_value -s -a} \ | |
| 175 %{SOURCE fsl.nessus} $RPM_BUILD_ROOT%{l_prefix}/etc/fsl/ | |
| 176 | |
| 177 # determine installation files | |
| 178 %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \ | |
| 179 %{l_files_std} \ | |
| 180 '%config %{l_prefix}/etc/fsl/fsl.nessus' \ | |
| 181 '%config %{l_prefix}/etc/nessus/*' \ | |
| 182 '%config %attr(0600,%{l_musr},%{l_mgrp}) %{l_prefix}/etc/nessus/nessusd.conf' | |
| 183 | |
| 184 %files -f files | |
| 185 | |
| 186 %clean | |
| 187 rm -rf $RPM_BUILD_ROOT | |
| 188 | |
| 189 %post | |
| 190 # after upgrade, restart service | |
| 191 if [ $1 -eq 2 ]; then | |
| 192 eval `%{l_rc} nessus status 2>/dev/null` | |
| 193 [ ".$nessus_active" = .yes ] && %{l_rc} nessus restart | |
| 194 fi | |
| 195 | |
| 196 # on every install, announce certificate | |
| 197 if [ $1 -le 2 ]; then | |
| 198 if [ ! -f $RPM_INSTALL_PREFIX/var/nessus/CA/servercert.pem ]; then | |
| 199 ( echo "For the SSL/TLS based remote client/server connections" | |
| 200 echo "between the Nessus server and the Nessus clients, an" | |
| 201 echo "X.509 server certificate/key pair is needed. Run the" | |
| 202 echo "following command to create it once:" | |
| 203 echo " \$ $RPM_INSTALL_PREFIX/sbin/nessus-mkcert" | |
| 204 ) | %{l_rpmtool} msg -b -t info | |
| 205 fi | |
| 206 fi | |
| 207 | |
| 208 # on initial install, announce useradd | |
| 209 if [ $1 -eq 1 ]; then | |
| 210 ( echo "Each Nessus user has to be created on the Nessus server" | |
| 211 echo "Run the following command to create an individual user:" | |
| 212 echo " \$ $RPM_INSTALL_PREFIX/sbin/nessus-adduser" | |
| 213 ) | %{l_rpmtool} msg -b -t info | |
| 214 fi | |
| 215 exit 0 | |
| 216 | |
| 217 %preun | |
| 218 # before erase, stop service and remove log files | |
| 219 if [ $1 -eq 0 ]; then | |
| 220 %{l_rc} nessus stop 2>/dev/null | |
| 221 rm -f $RPM_INSTALL_PREFIX/var/nessus/logs/*.log* >/dev/null 2>&1 || true | |
| 222 fi | |
| 223 exit 0 | |
| 224 |
