diff --git a/Makefile b/Makefile index 13c5d0b..496942c 100644 --- a/Makefile +++ b/Makefile @@ -9,6 +9,7 @@ install: install -m0755 front_auditd_cli.sh $(DESTDIR)/usr/sbin/linux-infosec-setupper-auditd-cli install -m0755 front_pwquality_cli.sh $(DESTDIR)/usr/sbin/linux-infosec-setupper-pwquality-cli install -m0755 front_pwquality.sh $(DESTDIR)/usr/sbin/linux-infosec-setupper-pwquality-gui + install -m0755 front_auditd.sh $(DESTDIR)/usr/sbin/linux-infosec-setupper-auditd-gui mkdir -p $(DESTDIR)/usr/share/linux-infosec-setupper mkdir -p $(DESTDIR)/usr/share/linux-infosec-setupper/audit mkdir -p $(DESTDIR)/usr/share/linux-infosec-setupper/pwquality @@ -18,7 +19,7 @@ install: install -m0644 back_pwquality.sh $(DESTDIR)/usr/share/linux-infosec-setupper/pwquality/back_pwquality.sh mkdir -p $(DESTDIR)/var/lib/linux-infosec-setupper mkdir -p $(DESTDIR)/var/lib/linux-infosec-setupper/audit - #mkdir -p $(DESTDIR)/var/lib/linux-infosec-setupper/pwquality + mkdir -p $(DESTDIR)/var/lib/linux-infosec-setupper/pwquality chmod -R 0700 $(DESTDIR)/var/lib/linux-infosec-setupper mkdir -p $(DESTDIR)/usr/share/locale/ru/LC_MESSAGES @@ -26,7 +27,9 @@ install: mkdir -p $(DESTDIR)/usr/share/polkit-1/actions install -m0644 polkit/org.nixtux.pkexec.linux-infosec-setupper-pwquality-gui.policy $(DESTDIR)/usr/share/polkit-1/actions/ + install -m0644 polkit/org.nixtux.pkexec.linux-infosec-setupper-auditd-gui.policy $(DESTDIR)/usr/share/polkit-1/actions/ install -m0755 polkit/linux-infosec-setupper-pwquality-gui.sh $(DESTDIR)/usr/bin/linux-infosec-setupper-pwquality-gui + install -m0755 polkit/linux-infosec-setupper-auditd-gui.sh $(DESTDIR)/usr/bin/linux-infosec-setupper-auditd-gui rpm: # https://stackoverflow.com/a/1909390 diff --git a/linux-infosec-setupper.spec b/linux-infosec-setupper.spec index 57df01d..d1d5036 100644 --- a/linux-infosec-setupper.spec +++ b/linux-infosec-setupper.spec @@ -3,7 +3,7 @@ Summary: CLI and GUI utilities to setup information security-related parts of Li License: GPLv3 Group: System/Configuration/Other Version: 0.1 -Release: 1 +Release: 2 Source0: %{name}-%{version}.tar.gz BuildArch: noarch BuildRequires: bash @@ -53,6 +53,23 @@ CLI and backend to setup auditd configs #----------------------------------------------------------------------------------- +%package auditd-gui +Summary: GUI to setup auditd configs +Group: System/Configuration/Other +Requires: %{name}-auditd-cli = %{version}-%{release} +Requires: yad +Recommends: polkit + +%description auditd-gui +GUI to setup auditd configs + +%files auditd-gui +%{_sbindir}/linux-infosec-setupper-auditd-gui +%{_bindir}/linux-infosec-setupper-auditd-gui +%{_datadir}/polkit-1/actions/org.nixtux.pkexec.linux-infosec-setupper-auditd-gui.policy + +#----------------------------------------------------------------------------------- + %package pwquality-cli Summary: CLI and backend to setup pwquality configs Group: System/Configuration/Other diff --git a/test_back_auditd.sh b/test_back_auditd.sh index c8b4332..e180597 100755 --- a/test_back_auditd.sh +++ b/test_back_auditd.sh @@ -29,9 +29,9 @@ _main(){ [ "$(md5sum "${DESTDIR}"/etc/systemd/system/auditd.service.d/90-linux-infosec-setupper-auditd-firewall.conf | awk '{print $1}')" = 27f8c93280d21e8b0d4b399ac234b663 ] ;} || \ { echo failed test 2; failed="$((++failed))"; } _mk_auditd_config --log_group root || { echo failed test 3; failed="$((++failed))"; } - [ "$(md5sum "${VAR_DIR_AUDIT}/auditd-conf.sh" | awk '{print $1}')" = 83a7bb6d8d24378e398d597430e27f0e ] || { echo failed test 4; failed="$((++failed))"; } + [ "$(md5sum "${VAR_DIR_AUDIT}/auditd-conf.sh" | awk '{print $1}')" = 86564ff0e5e2137f49415186487f0152 ] || { echo failed test 4; failed="$((++failed))"; } _mk_auditd_config || { echo failed test 5; failed="$((++failed))"; } - [ "$(md5sum "${VAR_DIR_AUDIT}/auditd-conf.sh" | awk '{print $1}')" = 83a7bb6d8d24378e398d597430e27f0e ] || { echo failed test 6; failed="$((++failed))"; } + [ "$(md5sum "${VAR_DIR_AUDIT}/auditd-conf.sh" | awk '{print $1}')" = 86564ff0e5e2137f49415186487f0152 ] || { echo failed test 6; failed="$((++failed))"; } ! _mk_auditd_config --local_events xuy || { echo failed test 7; failed="$((++failed))"; } _mk_auditd_config --systemd-firewalling-params "--IPAddressDeny any --IPAddressAllow 192.168.10.1/24 --IPAddressAllow 192.168.20.1" || { echo failed test 8; failed="$((++failed))"; } [ "$(md5sum "${DESTDIR}"/etc/systemd/system/auditd.service.d/90-linux-infosec-setupper-auditd-firewall.conf | awk '{print $1}')" = 27f8c93280d21e8b0d4b399ac234b663 ] || { echo failed test 9; failed="$((++failed))"; }