automatic version update by autodist [release 4.1.1-1mamba;Fri Aug 01 2025]

audit.spec

@@ -1,40 +1,22 @@
 Name:          audit
-Version:       2.8.3
+Version:       4.1.1
 Release:       1mamba
 Summary:       User space tools for kernel auditing
 Group:         System/Tools
 Vendor:        openmamba
 Distribution:  openmamba
 Packager:      Silvan Calarco <silvan.calarco@mambasoft.it>
-URL:           http://people.redhat.com/sgrubb/audit
+URL:           https://people.redhat.com/sgrubb/audit/
-Source:        http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
+Source:        https://github.com/linux-audit/audit-userspace.git/v%{version}/audit-userspace-%{version}.tar.bz2
-Patch0:        libaudit-2.6.6-usrsbin.patch
 License:       GPL, LGPL
 ## AUTOBUILDREQ-BEGIN
 BuildRequires: glibc-devel
 BuildRequires: libcap-ng-devel
-BuildRequires: libe2fs-devel
-BuildRequires: libffi-devel
-BuildRequires: libgcrypt-devel
-BuildRequires: libgmp-devel
-BuildRequires: libgnutls-devel
-BuildRequires: libgpg-error-devel
-BuildRequires: libidn-devel
 BuildRequires: libkrb5-devel
-BuildRequires: libltdl-devel
-BuildRequires: libnettle-devel
 BuildRequires: libnsl-devel
 BuildRequires: libopenldap-devel
-BuildRequires: libopenssl-devel
+BuildRequires: libpython311-devel
-BuildRequires: libp11-kit-devel
-BuildRequires: libprelude-devel
-BuildRequires: libpython-devel
-BuildRequires: libsasl2-devel
-BuildRequires: libtasn1-devel
-BuildRequires: libtirpc-devel
-BuildRequires: libunistring-devel
 BuildRequires: libwrap-devel
-BuildRequires: libz-devel
 ## AUTOBUILDREQ-END
 BuildRequires: gcc-go
 BuildRequires: libgo-devel
@@ -43,7 +25,9 @@ BuildRequires: automake
 BuildRequires: libtool
 BuildRequires: swig
 %systemd_requires
-BuildRoot:     %{_tmppath}/%{name}-%{version}-root
+Requires:      lib%{name} = %{?epoch:%epoch:}%{version}-%{release}
+Provides:      audit-plugins
+Obsoletes:     audit-plugins < 3.0
 
 %description
 The audit package contains the user space utilities for storing and searching the audit records generate by the audit subsystem in the Linux 2.6+ kernel.
@@ -84,40 +68,30 @@ Group:         Development/Libraries
 Summary:       Python3 bindings to %{name}
 Requires:      python3
 Requires:      lib%{name} = %{?epoch:%epoch:}%{version}-%{release}
+Obsoletes:     python-audit < 3.0.8
 
 %description -n python-audit-py3
 The python-audit package containts Python 3 bindings to %{name}.
 The libaudit-devel package contains the header files needed for developing applications that need to use the audit framework libraries.
 
-%package plugins
-Group:        System/Tools
-Summary:      Plugins for the audit event dispatcher
-Requires:     %{name} = %{?epoch:%epoch:}%{version}-%{release}
-Requires:     libaudit = %{?epoch:%epoch:}%{version}-%{release}
-#Requires:     openldap
-
-%description plugins
-The audispd-plugins package provides plugins for the real-time interface to the audit system, audispd. These plugins can do things like relay events to remote machines or analyze events for suspicious behavior.
-
 %prep
-%setup -q
+%setup -q -n audit-userspace-%{version}
-#%patch0 -p1
+autoreconf -fi
-
-# Fix auditctl path in augenrules
-sed -i "s|[[:space:]]/sbin/auditctl | %{_sbindir}/auditctl |" init.d/augenrules
 
 %build
-#autoreconf -v --install
 %configure \
-  --with-prelude \
   --with-libwrap \
   --enable-gssapi-krb5=yes \
   --with-libcap-ng=yes \
-  --with-python=yes \
+  --with-python3=yes \
-  --enable-systemd=yes \
+  CFLAGS="%{optflags} -fcommon" \
-  --bindir=/bin \
+%ifarch arm
-  --sbindir=/sbin
+  --with-arm \
-  
+%endif   
+%ifarch aarch64
+  --with-aarch64 \
+%endif   
+
 %make
 
 %install
@@ -127,27 +101,21 @@ mkdir -p %{buildroot}%{_localstatedir}/log/audit
 %makeinstall \
    initdir=%{_unitdir}
 
-rm -f %{buildroot}%{python_sitearch}/_audit.a
-rm -f %{buildroot}%{python_sitearch}/_audit.la
-rm -f %{buildroot}%{python_sitearch}/_auparse.a
-rm -f %{buildroot}%{python_sitearch}/_auparse.la
-rm -f %{buildroot}%{python_sitearch}/auparse.a
-rm -f %{buildroot}%{python_sitearch}/auparse.la
-
 install -d -m 0755 %{buildroot}%{_sysconfdir}/audit/rules.d
 
 %check
-make check
+#make check
 
 %clean
 [ "%{buildroot}" != / ] && rm -rf "%{buildroot}"
 
 %post
-%systemd_post auditd
+if [ $1 -gt 1 ]; then
-if [ $1 -eq 1 -o -e /etc/rc5.d/S11auditd ]; then
+   # fix /sbin -> /usr/sbin paths on upgrade
-   systemctl -q daemon-reload
+   sed -i "s|path = /sbin/|path = /usr/sbin/|" %{_sysconfdir}/audit/plugins.d/*.conf
-   systemctl -q enable auditd
 fi
+%tmpfiles_create audit.conf
+%systemd_post auditd
 :
 
 %preun
@@ -158,47 +126,48 @@ fi
 %systemd_postun auditd
 :
 
-%post -n lib%{name} -p /sbin/ldconfig
-%postun -n lib%{name} -p /sbin/ldconfig
-
-%posttrans -n lib%{name}
-# clean broken old sysv links
-find /etc/rc[0-6].d/ -type l -xtype l -exec rm -f {} \;
-:
-
 %files
 %defattr(-,root,root)
-%attr(750,root,root) %dir %{_sysconfdir}/audisp
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/audispd.conf
-%attr(750,root,root) %dir %{_sysconfdir}/audisp/plugins.d
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/plugins.d/af_unix.conf
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/plugins.d/syslog.conf
 %attr(750,root,root) %dir %{_sysconfdir}/audit
+%config(noreplace) %{_sysconfdir}/audit/audisp-remote.conf
+%config(noreplace) %{_sysconfdir}/audit/audisp-filter.conf
 %config(noreplace) %attr(640,root,root) %{_sysconfdir}/audit/audit-stop.rules
-%dir %{_sysconfdir}/audit/rules.d
-#%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audit/rules.d/audit.rules
 %config(noreplace) %attr(640,root,root) %{_sysconfdir}/audit/auditd.conf
+%dir %{_sysconfdir}/audit/plugins.d
+%config(noreplace) %{_sysconfdir}/audit/plugins.d/filter.conf
+%config(noreplace) %{_sysconfdir}/audit/plugins.d/af_unix.conf
+%config(noreplace) %{_sysconfdir}/audit/plugins.d/au-remote.conf
+%config(noreplace) %{_sysconfdir}/audit/plugins.d/audispd-zos-remote.conf
+%config(noreplace) %{_sysconfdir}/audit/plugins.d/syslog.conf
+%config(noreplace) %{_sysconfdir}/audit/zos-remote.conf
+%dir %{_sysconfdir}/audit/rules.d
+%{_sysconfdir}/bash_completion.d/audit.bash_completion
+%attr(750,root,root) %{_sbindir}/audispd-zos-remote
+%attr(750,root,root) %{_sbindir}/audisp-*
+%attr(750,root,root) %{_sbindir}/auditctl
+%attr(750,root,root) %{_sbindir}/auditd
+%attr(750,root,root) %{_sbindir}/augenrules
+%attr(750,root,root) %{_sbindir}/aureport
+%attr(750,root,root) %{_sbindir}/ausearch
+%attr(755,root,root) %{_bindir}/aulast
+%attr(755,root,root) %{_bindir}/aulastlog
+%attr(755,root,root) %{_bindir}/ausyscall
 %attr(644,root,root) %{_unitdir}/auditd.service
-%dir %{_libexecdir}/initscripts/legacy-actions/auditd
+%{_unitdir}/audit-rules.service
-%{_libexecdir}/initscripts/legacy-actions/auditd/*
+%{_tmpfilesdir}/audit.conf
+%dir %{_datadir}/audit-rules
+%{_datadir}/audit-rules/*
 %attr(750,root,root) %dir %{_localstatedir}/log/audit
-%attr(750,root,root) /sbin/audispd
-%attr(750,root,root) /sbin/auditctl
-%attr(750,root,root) /sbin/auditd
-%attr(750,root,root) /sbin/augenrules
-%attr(750,root,root) /sbin/aureport
-%attr(750,root,root) /sbin/ausearch
-%attr(750,root,root) /sbin/autrace
-%attr(755,root,root) /bin/aulast
-%attr(755,root,root) /bin/aulastlog
-%attr(755,root,root) /bin/ausyscall
-%attr(750,root,root) /bin/auvirt
-%dir %{_prefix}/lib/golang/src/pkg/redhat.com/audit
-%{_mandir}/man5/audispd.conf.5*
 %{_mandir}/man5/auditd.conf.5*
+%{_mandir}/man5/auditd.cron.5*
 %{_mandir}/man5/ausearch-expression.5*
+%{_mandir}/man5/auditd-plugins.5*
+%{_mandir}/man5/zos-remote.conf.5*
 %{_mandir}/man7/*.7*
-%{_mandir}/man8/audispd.8*
+%{_mandir}/man5/audisp-remote.conf.5*
+%{_mandir}/man5/libaudit.conf.5*
+%{_mandir}/man8/audispd-zos-remote.8*
+%{_mandir}/man8/audisp-*.8*
 %{_mandir}/man8/auditctl.8*
 %{_mandir}/man8/auditd.8*
 %{_mandir}/man8/augenrules.8*
@@ -207,72 +176,130 @@ find /etc/rc[0-6].d/ -type l -xtype l -exec rm -f {} \;
 %{_mandir}/man8/aureport.8*
 %{_mandir}/man8/ausearch.8*
 %{_mandir}/man8/ausyscall.8*
-%{_mandir}/man8/autrace.8*
-%{_mandir}/man8/auvirt.8*
 
 %files -n lib%{name}
 %defattr(-,root,root)
 %config(noreplace) %attr(640,root,root) %{_sysconfdir}/libaudit.conf
 %{_libdir}/libaudit.so.*
 %{_libdir}/libauparse.so.*
-%{_mandir}/man5/libaudit.conf.5*
+%{_libdir}/libauplugin.so.*
-#%doc AUTHORS COPYING
+%dir %{_libexecdir}/initscripts/legacy-actions/auditd
+%{_libexecdir}/initscripts/legacy-actions/auditd/*
+%doc AUTHORS COPYING
 
 %files -n lib%{name}-devel
 %defattr(-,root,root)
 %{_includedir}/auparse-defs.h
 %{_includedir}/auparse.h
+%{_includedir}/auplugin.h
+%{_includedir}/audit-records.h
+%{_includedir}/audit_logging.h
 %{_includedir}/libaudit.h
+%{_libdir}/libauplugin.a
 %{_libdir}/libaudit.so
+%{_libdir}/libauplugin.so
 %{_libdir}/libauparse.so
-%{_libdir}/libaudit.la
-%{_libdir}/libauparse.la
 %{_libdir}/pkgconfig/auparse.pc
 %{_libdir}/pkgconfig/audit.pc
+%dir %{_prefix}/lib/golang/src/pkg/redhat.com/audit
 %{_prefix}/lib/golang/src/pkg/redhat.com/audit/audit.go
 %{_datadir}/aclocal/audit.m4
-%{_mandir}/man3/*.3.gz
+%{_mandir}/man3/*.3*
-#%doc contrib/skeleton.c contrib/plugin
-#%doc ChangeLog README THANKS TODO
 
 %files -n lib%{name}-static
 %defattr(-,root,root)
 %{_libdir}/libaudit.a
 %{_libdir}/libauparse.a
 
-%files -n python-audit
-%defattr(-,root,root)
-%{python_sitearch}/_audit.*
-%{python_sitearch}/audit.py*
-%{python_sitearch}/auparse.*
-
 %files -n python-audit-py3
 %defattr(-,root,root)
 %{python3_sitearch}/_audit.*
 %{python3_sitearch}/audit.py
-%{python3_sitearch}/__pycache__/audit.cpython-33.pyc
+%{python3_sitearch}/__pycache__/audit.cpython-*.pyc
-%{python3_sitearch}/__pycache__/audit.cpython-33.pyo
 %{python3_sitearch}/auparse.*
 
-%files plugins
-%defattr(-,root,root)
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/plugins.d/audispd-zos-remote.conf
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/zos-remote.conf
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/audisp-prelude.conf
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/plugins.d/au-prelude.conf
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/audisp-remote.conf
-%config(noreplace) %attr(640,root,root) %{_sysconfdir}/audisp/plugins.d/au-remote.conf
-%attr(750,root,root) /sbin/audispd-zos-remote
-%attr(750,root,root) /sbin/audisp-prelude
-%attr(750,root,root) /sbin/audisp-remote
-%{_mandir}/man5/zos-remote.conf.5*
-%{_mandir}/man8/audispd-zos-remote.8*
-%{_mandir}/man5/audisp-prelude.conf.5*
-%{_mandir}/man8/audisp-prelude.8*
-%{_mandir}/man5/audisp-remote.conf.5*
-%{_mandir}/man8/audisp-remote.8*
-
 %changelog
+* Fri Aug 01 2025 Automatic Build System <autodist@openmamba.org> 4.1.1-1mamba
+- automatic version update by autodist
+
+* Sat Jul 12 2025 Automatic Build System <autodist@openmamba.org> 4.1.0-1mamba
+- automatic version update by autodist
+
+* Wed Jun 04 2025 Automatic Build System <autodist@openmamba.org> 4.0.5-1mamba
+- automatic version update by autodist
+
+* Sat May 31 2025 Automatic Build System <autodist@openmamba.org> 4.0.4-1mamba
+- automatic version update by autodist
+
+* Sun Jan 12 2025 Silvan Calarco <silvan.calarco@mambasoft.it> 4.0.3-1mamba
+- update to 4.0.3
+
+* Sat Dec 28 2024 Silvan Calarco <silvan.calarco@mambasoft.it> 4.0.2-2mamba
+- removed build requirement for libprelude
+
+* Fri Aug 09 2024 Automatic Build System <autodist@openmamba.org> 4.0.2-1mamba
+- automatic version update by autodist
+
+* Tue Mar 12 2024 Automatic Build System <autodist@openmamba.org> 4.0.1-1mamba
+- automatic version update by autodist
+
+* Wed Feb 07 2024 Automatic Build System <autodist@openmamba.org> 4.0-1mamba
+- automatic version update by autodist
+
+* Mon Aug 07 2023 Automatic Build System <autodist@mambasoft.it> 3.1.2-1mamba
+- automatic version update by autodist
+
+* Sat Apr 29 2023 Automatic Build System <autodist@mambasoft.it> 3.1.1-1mamba
+- automatic version update by autodist
+
+* Sun Feb 12 2023 Automatic Build System <autodist@mambasoft.it> 3.1-1mamba
+- automatic version update by autodist
+
+* Tue Aug 30 2022 Automatic Build System <autodist@mambasoft.it> 3.0.9-1mamba
+- automatic version update by autodist
+
+* Sat Apr 02 2022 Silvan Calarco <silvan.calarco@mambasoft.it> 3.0.8-1mamba
+- update to 3.0.8
+
+* Tue Jan 25 2022 Automatic Build System <autodist@mambasoft.it> 3.0.7-1mamba
+- automatic version update by autodist
+
+* Mon Nov 01 2021 Silvan Calarco <silvan.calarco@mambasoft.it> 3.0.6-2mamba
+- audit: added versioned requirement for libaudit
+
+* Sun Oct 03 2021 Automatic Build System <autodist@mambasoft.it> 3.0.6-1mamba
+- automatic version update by autodist
+
+* Tue Aug 24 2021 Automatic Build System <autodist@mambasoft.it> 3.0.5-1mamba
+- automatic version update by autodist
+
+* Sun Feb 14 2021 Automatic Build System <autodist@mambasoft.it> 3.0.1-1mamba
+- automatic version update by autodist
+
+* Sat Feb 13 2021 Silvan Calarco <silvan.calarco@mambasoft.it> 3.0-2mamba
+- reapply /usr/sbin patch
+
+* Tue Feb 09 2021 Automatic Build System <autodist@mambasoft.it> 3.0-1mamba
+- automatic version update by autodist
+
+* Sun Dec 20 2020 Silvan Calarco <silvan.calarco@mambasoft.it> 2.8.5-2mamba
+- rebuilt with debug package and libprelude 5.2.0
+
+* Mon May 27 2019 Automatic Build System <autodist@mambasoft.it> 2.8.5-1mamba
+- automatic version update by autodist
+
+* Sat Jan 05 2019 Silvan Calarco <silvan.calarco@mambasoft.it> 2.8.4-4mamba
+- apply path for /usr/sbin and rundir under /run
+
+* Fri Jan 04 2019 Silvan Calarco <silvan.calarco@mambasoft.it> 2.8.4-3mamba
+- other fix for auditd.service /usr/sbin path instead of /sbin
+
+* Sun Dec 30 2018 Silvan Calarco <silvan.calarco@mambasoft.it> 2.8.4-2mamba
+- install binaries under /usr/sbin and /usr/bin
+
+* Wed Sep 12 2018 Automatic Build System <autodist@mambasoft.it> 2.8.4-1mamba
+- automatic version update by autodist
+
 * Thu Mar 15 2018 Silvan Calarco <silvan.calarco@mambasoft.it> 2.8.3-1mamba
 - update to 2.8.3
 

libaudit-2.6.6-usrsbin.patch

@@ -1,30 +0,0 @@
-diff -Nru audit-2.4.4.orig/init.d/auditd.conf audit-2.4.4/init.d/auditd.conf
---- audit-2.4.4.orig/init.d/auditd.conf	2015-08-13 22:56:25.000000000 +0200
-+++ audit-2.4.4/init.d/auditd.conf	2015-12-01 19:54:24.403584662 +0100
-@@ -10,7 +10,7 @@
- freq = 20
- num_logs = 5
- disp_qos = lossy
--dispatcher = /sbin/audispd
-+dispatcher = /usr/sbin/audispd
- name_format = NONE
- ##name = mydomain
- max_log_file = 6 
---- audit-2.6.6/init.d/auditd.service.orig	2016-08-11 19:51:33.493168550 +0200
-+++ audit-2.6.6/init.d/auditd.service	2016-08-12 00:43:16.758055860 +0200
-@@ -9,12 +9,12 @@
- Documentation=man:auditd(8) https://people.redhat.com/sgrubb/audit/
- 
- [Service]
--ExecStart=/sbin/auditd -n
-+ExecStart=/usr/sbin/auditd -n
- ## To not use augenrules, copy this file to /etc/systemd/system/auditd.service
- ## and comment/delete the next line and uncomment the auditctl line.
- ## NOTE: augenrules expect any rules to be added to /etc/audit/rules.d/
--ExecStartPost=-/sbin/augenrules --load
--#ExecStartPost=-/sbin/auditctl -R /etc/audit/audit.rules
-+ExecStartPost=-/usr/sbin/augenrules --load
-+#ExecStartPost=-/usr/sbin/auditctl -R /etc/audit/audit.rules
- ExecReload=/bin/kill -HUP $MAINPID
- # By default we don't clear the rules on exit. To enable this, uncomment
- # the next line after copying the file to /etc/systemd/system/auditd.service