File sshguard.spec of Package sshguard

Overview Repositories Revisions Requests Users Attributes Meta

File sshguard.spec of Package sshguard (Revision e2c70518719954bce8e0de8ae5b3f6f9)

Currently displaying revision e2c70518719954bce8e0de8ae5b3f6f9 , Show latest

%define _name	 %(echo %{_project} | perl -F: -ane 'print @F[-1]')

Name:		%{_name}
Version:	1
Release:	1%{?dist}
Summary:	SSHGUARD protects hosts from brute-force attacks against SSH and other services.

Group:		System/Utils
License:	GNU
Source0:	%{name}-%{version}.tar.xz

BuildRequires:  autoconf
BuildRequires:	byacc
BuildRequires:	flex
BuildRequires:	gcc
BuildRequires:	make
BuildRequires:  systemd

%description
SSHGUARD can read log messages from standard input (suitable for piping from syslog) or monitor one or more log files.
Log messages are parsed, line-by-line, for recognized patterns. If an attack, such as several login failures within 
a few seconds, is detected, the offending IP is blocked. Offenders are unblocked after a set interval, but can be 
semi-permanently banned using the blacklist option.

%prep
%setup -q

%build
autoreconf -i
%configure
make %{?_smp_mflags}

%install
make install DESTDIR=%{buildroot}
mkdir -p %{buildroot}%{_unitdir}
mkdir -p %{buildroot}%{_sysconfdir}/sshguard.d
install -m 644 examples/whitelistfile.example %{buildroot}%{_sysconfdir}/sshguard.d/whitelist.example
install -m 644 examples/sshguard.service %{buildroot}%{_unitdir}/sshguard.service
#perl -pe 's|^(ExecStart)=.*|$1=%{_sbindir}/sshguard|' examples/sshguard.service |\
#           tee %{buildroot}%{_sysconfdir}/systemd/system/sshguard.service
perl -pe 's|^(#BACKEND=.*)|$1\nBACKEND="%{_libexecdir}/sshg-fw-firewalld"|;
          s|^(#LOGREADER=.*)|$1\nLOGREADER="LANG=C /usr/bin/journalctl -afb -p info -n -t sshd -o cat"|;
          s|^(#PID_FILE=.*)|$1\nPID_FILE=%{_localstatedir}/run/sshguard.pid|;
          s|^(#WHITELIST_FILE=.*)|$1\nWHITELIST_FILE=%{_sysconfdir}/sshguard.d/whitelist|' \
          examples/sshguard.conf.sample | tee %{buildroot}%{_sysconfdir}/sshguard.conf

%post

if [ ! -f %{_sysconfdir}/sshguard.d/whitelist ]; then
   touch %{_sysconfdir}/sshguard.d/whitelist
fi

%files
%defattr(-,root,root)
%{_libexecdir}/sshg-*
%{_sbindir}/sshguard
%{_unitdir}/*
%dir %{_sysconfdir}/sshguard.d
%config(noreplace) %{_sysconfdir}/sshguard.conf

%doc
%{_sysconfdir}/sshguard.d/*example
%{_mandir}/man7/*
%{_mandir}/man8/*

%changelog

Places

File sshguard.spec of Package sshguard (Revision e2c70518719954bce8e0de8ae5b3f6f9)

Places