rpms/rkhunter/F-13 rkhunter.spec, 1.32, 1.33 rkhunter-1.3.6-fedoraconfig.patch, 1.5, 1.6

Kevin Fenzi kevin at fedoraproject.org
Sat Jun 5 19:47:38 UTC 2010


Author: kevin

Update of /cvs/pkgs/rpms/rkhunter/F-13
In directory cvs01.phx2.fedoraproject.org:/tmp/cvs-serv30764

Modified Files:
	rkhunter.spec rkhunter-1.3.6-fedoraconfig.patch 
Log Message:
Add ipsec.hmac file to exclude



Index: rkhunter.spec
===================================================================
RCS file: /cvs/pkgs/rpms/rkhunter/F-13/rkhunter.spec,v
retrieving revision 1.32
retrieving revision 1.33
diff -u -p -r1.32 -r1.33
--- rkhunter.spec	28 May 2010 23:51:39 -0000	1.32
+++ rkhunter.spec	5 Jun 2010 19:47:38 -0000	1.33
@@ -1,6 +1,6 @@
 Name:           rkhunter
 Version:        1.3.6
-Release:        6%{?dist}
+Release:        7%{?dist}
 Summary:        A host-based tool to scan for rootkits, backdoors and local exploits
 
 Group:          Applications/System
@@ -95,6 +95,9 @@ EOF
 %{_mandir}/man8/*
 
 %changelog
+* Sat Jun 05 2010 Kevin Fenzi <kevin at tummy.com> - 1.3.6-7
+- Add ipsec.hmac exclude - bug #560594
+
 * Fri May 28 2010 Kevin Fenzi <kevin at tummy.com> - 1.3.6-6
 - Add exclude for md-device-map - bug #596731
 - Supress ssh version check - bug #596775

rkhunter-1.3.6-fedoraconfig.patch:
 rkhunter.conf |   89 ++++++++++++++++++++++++++++++++--------------------------
 1 file changed, 50 insertions(+), 39 deletions(-)

Index: rkhunter-1.3.6-fedoraconfig.patch
===================================================================
RCS file: /cvs/pkgs/rpms/rkhunter/F-13/rkhunter-1.3.6-fedoraconfig.patch,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -p -r1.5 -r1.6
--- rkhunter-1.3.6-fedoraconfig.patch	28 May 2010 23:51:39 -0000	1.5
+++ rkhunter-1.3.6-fedoraconfig.patch	5 Jun 2010 19:47:38 -0000	1.6
@@ -1,6 +1,6 @@
 diff -Nur rkhunter-1.3.6.orig/files/rkhunter.conf rkhunter-1.3.6/files/rkhunter.conf
 --- rkhunter-1.3.6.orig/files/rkhunter.conf	2009-11-28 15:13:19.000000000 -0700
-+++ rkhunter-1.3.6/files/rkhunter.conf	2010-05-28 16:57:08.000000000 -0600
++++ rkhunter-1.3.6/files/rkhunter.conf	2010-06-05 12:07:58.000000000 -0600
 @@ -71,7 +71,7 @@
  # NOTE: This option should be present in the configuration file.
  #
@@ -108,7 +108,7 @@ diff -Nur rkhunter-1.3.6.orig/files/rkhu
  
  #
  # Allow the specified commands to have the immutable attribute set.
-@@ -406,37 +409,41 @@
+@@ -406,37 +409,42 @@
  # Allow the specified hidden directories.
  # One directory per line (use multiple ALLOWHIDDENDIR lines).
  #
@@ -171,10 +171,11 @@ diff -Nur rkhunter-1.3.6.orig/files/rkhu
 +ALLOWHIDDENFILE=/usr/sbin/.sshd.hmac
 +ALLOWHIDDENFILE=/dev/.mdadm.map
 +ALLOWHIDDENFILE=/usr/share/man/man5/.k5login.5.gz
++ALLOWHIDDENFILE=/usr/sbin/.ipsec.hmac
  
  #
  # Allow the specified processes to use deleted files.
-@@ -495,10 +502,11 @@
+@@ -495,10 +503,11 @@
  # ALLOWDEVFILE lines).
  #
  #ALLOWDEVFILE=/dev/abc
@@ -187,7 +188,7 @@ diff -Nur rkhunter-1.3.6.orig/files/rkhu
  
  #
  # This setting tells rkhunter where the inetd configuration
-@@ -822,3 +830,5 @@
+@@ -822,3 +831,5 @@
  # Enabling this feature implies you have the knowledge to interprete results properly. 
  #
  #SCANROOTKITMODE=THOROUGH



More information about the scm-commits mailing list