[Bug 165311] Review Request: Tiger, security auditing on UNIX systems

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: Tiger, security auditing on UNIX systems


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=165311





------- Additional Comments From gauret at free.fr  2006-04-22 17:23 EST -------
> Hope this is helpfull

Extremely useful, thanks a lot.

* Sat Apr 22 2006 Aurelien Bompard <gauret[AT]free.fr> 3.2.1-3
- don't backup some patches, or the files will be copied in the buildroot
- set conf files to noreplace
- fix manpage encoding

Spec : http://gauret.free.fr/fichiers/rpms/fedora/tiger.spec
SRPM : http://gauret.free.fr/fichiers/rpms/fedora/tiger-3.2.1-3.src.rpm

(1) and (3) are fixed by not making backups for some patches

(2) is fixed by removing the files in %prep

(4) rpmlint :
>  W: tiger conffile-without-noreplace-flag /etc/cron.d/tiger
>  W: tiger conffile-without-noreplace-flag /etc/tiger/tiger.ignore
>  W: tiger conffile-without-noreplace-flag /etc/tiger/tigerrc

Fixed.

>  W: tiger conffile-without-noreplace-flag /etc/tiger/cronrc

This one is not supposed to be customized, so I leave it as %config only.

>  E: tiger non-readable /etc/tiger/tigerrc 0640
>  E: tiger non-readable /etc/tiger/tiger.ignore 0600
>  E: tiger non-standard-dir-perm /var/log/tiger 0700
>  E: tiger non-readable /etc/tiger/cronrc 0640
>  E: tiger non-standard-dir-perm /etc/tiger 0700
>  E: tiger non-standard-dir-perm /var/run/tiger/work 0700
>  E: tiger zero-length /usr/lib/tiger/systems/default/suid_list
>  E: tiger zero-length /usr/lib/tiger/systems/default/rel_file_exp_list
>  E: tiger zero-length /usr/lib/tiger/systems/Linux/2/rel_file_exp_list

Intended.

>  W: tiger file-not-utf8 /usr/share/man/man8/tiger.8.gz

Fixed.

>  W: tiger symlink-should-be-relative /usr/lib/tiger/tigexp /usr/sbin/tigexp
>  W: tiger devel-file-in-non-devel-package /usr/lib/tiger/version.h

Harmless.

>  E: tiger zero-length /usr/lib/tiger/systems/Linux/2/check_xinetd.scripts
>  E: tiger script-without-shellbang /usr/[...]/Linux/2/check_xinetd.scripts

Fixed by not backuping this patch

>  W: tiger log-files-without-logrotate /var/log/tiger

Tiger takes care of rotation by itself.

Thanks for your input.


-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.