You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
smeserver-clamav/smeserver-clamav.spec

497 lines
18 KiB
Plaintext

# $Id: smeserver-clamav.spec,v 1.20 2022/11/22 20:23:59 jpp Exp $
Summary: SME Server module to configure clamav
%define name smeserver-clamav
Name: %{name}
%define version 11.0.0
%define release 4
Version: %{version}
Release: %{release}%{?dist}
License: GPL
Group: System Environment/Base
Source: %{name}-%{version}.tar.xz
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
BuildArchitectures: noarch
Requires: smeserver-lib
Requires: smeserver-base >= 5.8.0-63
Requires: clamav >= 0.103
Requires: clamd >= 0.103
Requires: clamav-data
Requires: clamav-update
Requires: smeserver-formmagick >= 1.4.0-12
Requires: smeserver-spamassassin >= 2.7.0
Provides: e-smith-clamav
Obsoletes: e-smith-clamav
Obsoletes: e-smith-antivirus
Obsoletes: clamav-es
Obsoletes: clamav-es-libs
BuildRequires: smeserver-devtools
%description
SME Server enhancement to configure and run clamd and freshclam
%changelog
* Sat Apr 13 2024 Jean-Philippe Pialasse <jpp@koozali.org> 11.0.0-4.sme
- move post-transaction-actions script [SME: 12533]
* Thu Apr 04 2024 Brian Read <brianr@koozali.org> 11.0.0-3.sme
- Set license file to GPL2.0 [SME: 12577]
* Sat Mar 23 2024 Brian Read <brianr@koozali.org>11.0.0-2.sme
- Change Requires: e-smith- to Requires:smeserver-
* Sat Mar 23 2024 Brian Read <brianr@koozali.org>11.0.0-1.sme
- Update Release and Version to base version and 1st release for SME11 [SME: 12518]
* Mon Jul 10 2023 cvs2git.sh aka Brian Read <brianr@koozali.org> 2.7.0-17.sme
- Roll up patches and move to git repo [SME: 12338]
* Mon Jul 10 2023 BogusDateBot
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
by assuming the date is correct and changing the weekday.
* Tue Nov 22 2022 Jean-Philippe Pialasse <tests@pialasse.com> 2.7.0-16.sme
- review post-actions [SME: 12184]
* Wed May 04 2022 Zsolt Vasarhelyi <vasarhelyizsolt@hotmail.com> 2.7.0-15.sme
- logrotate clamd keeps logging to old log [SME: 11963]
* Mon Mar 14 2022 Jean-Philippe Pialasse <tests@pialasse.com> 2.7.0-14.sme
- remove default property ArchiveBlockEncrypted [SME: 11695]
* Sat Jan 01 2022 Terry Fage <tfage@yahoo.com.au> 2.7.0-13.sme
- fix property name error 2.7.0-12.sme [SME: 11695]
* Mon Dec 20 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.7.0-12.sme
- fix spec file error 2.7.0-11.sme [SME: 11474]
* Mon Dec 20 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.7.0-11.sme
- rename property ArchiveBlockEncrypted to AlertEncrypted as per upstream [SME: 11695]
added properties AlertBrokenExecutables AlertExceedsMax AlertOLE2Macros
AlertPartitionIntersection AlertPhishingCloak and AlertPhishingSSLMismatch
with default no
added property HeuristicAlerts with default yes
- fix noise on centos2sme [SME: 11474]
* Mon Nov 15 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.7.0-10.sme
- identify from which server is freshclam error [SME: 11755]
fix from Graeme Fleming
* Wed Jun 09 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.7.0-9.sme
- fix typo in logrotate [SME: 11608]
* Sun Apr 18 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.7.0-8.sme
- fix typo and missing +x [SME: 11520]
* Wed Apr 07 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.7.0-6.sme
- fix issues with non epel standard scan.conf [SME: 11520]
move clamd.conf to scan.conf
remove alias for clamtop
add a wrapper for clamdscan to force --fdpass
* Fri Jan 08 2021 Jean-Philipe Pialasse <tests@pialasse.com> 2.7.0-5.sme
- ease use of clamdtop [SME: 11313]
* Wed Jan 06 2021 Jean-Philipe Pialasse <tests@pialasse.com> 2.7.0-4.sme
- fix Transaction check error [SME: 11311]
* Sat Jan 02 2021 Jean-Philipe Pialasse <tests@pialasse.com> 2.7.0-2.sme
- add pid folder /run/clamd/ [SME: 11103]
few improvements
- create update event [SME: 11162]
* Wed Dec 16 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 2.7.0-1
- Updated to use 0.103+ from EPEL [SME: 11194]
- Updated to use systemd for clamd [SME: 11103]
- Updated to use systemd for freshclam [SME: 11104]
* Tue Nov 26 2019 Jean-Philipe Pialasse <tests@pialasse.com> 2.6.0-4.sme
- increase lower memory limit to 1GB [SME: 10833]
* Thu Oct 24 2019 Jean-Philipe Pialasse <tests@pialasse.com> 2.6.0-3.sme
- fix for AllowSupplementaryGroups warning [SME: 10813]
thanks to bunkobugsy
* Thu May 12 2016 Daniel Berteaud <daniel@firewall-services.com> 2.6.0-2.sme
- Rebuild for [SME: 9393]
* Sat Feb 06 2016 stephane de Labrusse <stephdl@de-labrusse.fr> 2.6.0-1.sme
- Initial release to sme10
* Tue Dec 1 2015 Daniel Berteaud <daniel@firewall-services.com> 2.4.0-5.sme
- Disable unofficial sigs for filesystem scans [SME: 9142]
* Tue Sep 8 2015 Daniel Berteaud <daniel@firewall-services.com> 2.4.0-4.sme
- Double the memory limit as we do not have enough room [SME: 8933]
* Thu Jul 3 2014 Ian Wells <esmith@wellsi.com> 2.4.0-3.sme
- Increase MemLimit to 700M for clamav-0.98 [SME: 8483]
* Mon Jul 8 2013 Chris Burnat <devlist@burnat.com> 2.4.0-2.sme
- Move clamscan scheduling to complete before 99-raid-check [SME: 7758]
* Thu Jan 31 2013 Shad L. Lords <slords@mail.com> 2.4.0-1.sme
- Roll new stream for sme9
* Mon Jun 14 2010 Ian Wells <esmith@wellsi.com> 2.2.0-12.sme
- Re-work patch to improve and document template [SME: 6011]
* Sat Jun 5 2010 Ian Wells <esmith@wellsi.com> 2.2.0-11.sme
- template /etc/cron.daily/freshclam, and make it a NO-OP [SME: 6011]
* Sun Apr 18 2010 Jonathan Martens <smeserver-contribs@snetram.nl> 2.2.0-10.sme
- Increase MemLimit to 600M for clamav-0.96 [SME: 5868]
* Fri Apr 02 2010 Filippo Carletti <filippo.carletti@gmail.com> 2.2.0-9.sme
- Increase MemLimit to 300M for clamav-0.96 [SME: 5868]
* Sat Feb 6 2010 Stephen Noble <support@dungog.net> 2.2.0-8.sme
- Setup logrotate for /var/log/clamd/clamscan.log [SME: 5570]
* Fri Nov 6 2009 Jonathan Martens <smeserver-contribs@snetram.nl> 2.2.0-7.sme
- Remove create option from logrotate configuration [SME: 5570]
- Fix version number in previous changelog entry
* Fri Nov 6 2009 Jonathan Martens <smeserver-contribs@snetram.nl> 2.2.0-6.sme
- Setup logrotate for /var/log/clamd/smeserver-clamscan.log [SME: 5570]
- Minor changelog fixes in version number
* Wed Nov 4 2009 Jonathan Martens <smeserver-contribs@snetram.nl> 2.2.0-5.sme
- Change default value for HeuristicScanPrecedence to yes [SME: 5204]
* Tue Jun 2 2009 Shad L. Lords <slords@mail.com> 2.2.0-4.sme
- Fix permissions on freshclam.conf file [SME: 5319]
* Mon Apr 13 2009 Jonathan Martens <smeserver-contribs@snetram.nl> 2.2.0-3.sme
- Add HeuristicScanPrecedence option, default disabled [SME: 4598]
* Thu Nov 27 2008 Stephen Noble <support@dungog.net> 2.2.0-2.sme
- Obsolete e-smith-antivirus [SME: 4786]
* Tue Oct 7 2008 Shad L. Lords <slords@mail.com> 2.2.0-1.sme
- Roll new stream to separate sme7/sme8 trees [SME: 4633]
* Mon Sep 22 2008 Stephen Noble <support@dungog.net> 1.2.0-26
- Remove obsolete locale tags [SME: 4235]
* Sun Aug 10 2008 Shad L. Lords <slords@mail.com> 1.2.0-25
- Remove links to crontab in all but clamav-update [SME: 4494]
* Wed Apr 30 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 1.2.0-24
- Remove any /etc/cron.d/clamav file. We moved the content to /etc/crontab
[SME: 1047], but we need to remove any leftover file from earlier template
expansion, which, if present, could cause the nightly file scanning to be
run twice. [SME: 4266]
* Sun Apr 27 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 1.2.0-23
- Add common <base> tags to e-smith-formmagick's general [SME: 4288]
* Fri Apr 25 2008 Charlie Brady <charlie_brady@mitel.com> 1.2.0-22
- Add Obsoletes headers to force removal of clamav-es and
clamav-es-libs. [SME 4167]
* Fri Apr 18 2008 Shad L. Lords <slords@mail.com> 1.2.0-21
- Update defaults for clamav 0.93 [SME: 4223]
* Fri Apr 18 2008 Jonathan Martens <smeserver-contribs@snetram.nl> 1.2.0-20
- Move cron template from cron.d to crontab [SME: 1047]
* Tue Mar 18 2008 Shad L. Lords <slords@mail.com> 1.2.0-19
- Fix clamav version string [SME: 4060]
* Wed Feb 13 2008 Stephen Noble <support@dungog.net> 1.2.0-18
- Remove <base> tags now in general [SME: 3915]
* Sun Feb 10 2008 Stephen Noble <support@dungog.net> 1.2.0-17
- Remove duplicate <base> entries [SME: 3890]
* Mon Jan 07 2008 Stephen Noble <support@dungog.net> 1.2.0-16
- Cosmetic removal of word entire on panel [SME: 3483]
* Thu Sep 06 2007 Filippo Carletti <filippo.carletti@gmail.com> 1.2.0-15
- Fix freshclam.conf permissions [SME: 3375]
* Fri Jun 08 2007 Charlie Brady <charlie_brady@mitel.com> 1.2.0-14
- Use full paths in update-failed script - tai64nlocal was not
being found in $PATH. [SME: 1686]
* Sun Apr 29 2007 Shad L. Lords <slords@mail.com>
- Clean up spec so package can be built by koji/plague
* Wed Apr 18 2007 Shad L. Lords <slords@mail.com> 1.2.0-13
- Up memory limit for clamd again [SME: 2743]
* Wed Feb 21 2007 Shad L. Lords <slords@mail.com> 1.2.0-12
- Up memory limit for clamd [SME: 2528]
* Wed Feb 14 2007 Shad L. Lords <slords@mail.com> 1.2.0-11
- Update for clamav v0.90 [SME: 2508]
* Tue Feb 13 2007 Shad L. Lords <slords@mail.com> 1.2.0-10
- Improve algorithm for displaying errors [SME: 1686]
* Mon Feb 12 2007 Shad L. Lords <slords@mail.com> 1.2.0-9
- Improve sed expression for freshclam failures [SME: 1686]
* Mon Feb 12 2007 Shad L. Lords <slords@mail.com> 1.2.0-8
- Allow clamav to read freshclam update log [SME: 1686]
* Fri Jan 26 2007 Shad L. Lords <slords@mail.com> 1.2.0-7
- Provide more feedback on freshclam events [SME: 1686]
* Wed Dec 13 2006 Federico Simoncelli <federico.simoncelli@gmail.com> 1.2.0-6
- Added support for options: max-ratio, no-html, no-mail. [SME: 2024]
- Redirected the stderr output to /var/log/clamd/smeserver-clamscan.log.
[SME: 2004]
* Thu Dec 07 2006 Shad L. Lords <slords@mail.com>
- Update to new release naming. No functional changes.
- Make Packager generic
* Wed Nov 29 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.0-04
- Restrict filesystem scan to /home/e-smith/files by default [SME: 2082]
* Sun Aug 27 2006 Charlie Brady <charlieb@e-smith.com> 1.2.0-03
- Fix --exclude arg syntax. [SME: 1889]
* Fri Jun 16 2006 Gordon Rowell <gordonr@gormand.com.au> 1.2.0-02
- Fix typo in ArchiveBlockEntrypted [SME: 1584]
* Wed Mar 15 2006 Charlie Brady <charlie_brady@mitel.com> 1.2.0-01
- Roll stable stream version. [SME: 1016]
* Tue Mar 14 2006 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-10
- Restart crond in clamav-update so cron notices cron.d/clamav [SME: 966]
* Wed Feb 8 2006 Gavin Weight <gweight@gmail.com> 1.1.2-09
- Added migrate fragment for clamav DatabaseMirror. [SME: 83]
* Fri Jan 27 2006 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-08
- Bump release number to ensure patch is in CVS
* Wed Jan 18 2006 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-07
- Expand MEMLIMIT in bootstrap-console-save (and don't attempt to
restart the service there)
* Wed Jan 18 2006 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-06
- Change back to softlimit -a [SME: 426]
* Wed Jan 18 2006 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-05
- Set db default for clamd{MemLimit}==80M and use it in the run script
- Expand templates in events rather than run file [SME: 426]
* Mon Oct 17 2005 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-04
- Fix typos in smeserver-clamscan [SF: 1304217]
* Fri Oct 14 2005 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-03
- Move all L10Ns to smeserver-locale [SF: 1309520]
* Mon Sep 26 2005 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-02
- Added Italian L10N - Thanks Filippo Carletti [SF: 1309266]
* Mon Sep 26 2005 Gordon Rowell <gordonr@gormand.com.au> 1.1.2-01
- Roll patches to 1.1.1-06
- Add German L10N
* Mon Sep 26 2005 Gordon Rowell <gordonr@gormand.com.au> 1.1.1-06
- Exclude /var and all of /usr/share (not just /usr/share/doc) from
filesystem scan [SF: 1304217]
* Fri Sep 23 2005 Gordon Rowell <gordonr@gormand.com.au> 1.1.1-05
- French L10N fixes [SF: 1242586]
* Sat Aug 20 2005 Gordon Rowell <gordonr@gormand.com.au> 1.1.1-04
- French L10N - Merci Didier Rambeau [SF: 1242586]
* Sat Aug 20 2005 Gordon Rowell <gordonr@gormand.com.au> 1.1.1-03
- Don't scan quarantine area, even if quarantining is disabled [SF: 1245655]
* Fri Aug 19 2005 Charlie Brady <charlieb@e-smith.com> 1.1.1-02
- Add Provides: header, to satisfy any package which requires defunct
e-smith-clamav.
* Thu Aug 18 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.1-01]
- Package renamed to smeserver-clamav [SF: 1263460]
* Thu Aug 18 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-08sme02]
- Rename /sbin/e-smith/clamscan to smeserver-clamscan [SF: 1263460]
* Thu Aug 18 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-08sme01]
- Disable quarantining by default, add panel toggle [SF: 1245655]
* Tue Aug 9 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-08]
- Add --move=$clamav{QuarantineDirectory} to clamscan,
exclude directory from being scanned, add database default
and set permissions in spec file [SF: 1245655]
* Thu Aug 4 2005 Charlie Brady <charlieb@e-smith.com>
- [1.1.0-07]
- Remove freshclam runs from clamav crontab template - we
now run supervised freshclam instance. [SF: 1251944]
* Thu Aug 4 2005 Shad Lords <slords@mail.com>
- [1.1.0-06]
- Include db entry to exclude /proc, /sys and
/usr/share/doc from scans [SF: 1243741, 1243831]
* Wed Jul 27 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-05]
- Exclude /proc, /sys and /usr/share/doc from scans
[SF: 1243741, 1243831]
- Run freshclam with --quiet instead of --verbose [SF: 1245602]
* Fri Jul 22 2005 Charlie Brady <charlieb@e-smith.com>
- [1.1.0-04]
- Fix typo in en-us lexicon. [SF: 1242585]
* Mon May 30 2005 Charlie Brady <charlieb@e-smith.com>
- [1.1.0-03]
- Fix last-updated section and labels [Gordon: SF-1200428]
* Tue May 17 2005 Charlie Brady <charlieb@e-smith.com>
- [1.1.0-02]
- Add clamav-update event directory.
- Modify some of the panel code to avoid logging of multiple db property
transactions.
* Fri May 13 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-01gr06]
- Read the timestamp of the clamav database files in the panel
to show the last updated time [SF:1200428]
- Change /sbin/e-smith/freshclam-update-ok to /bin/sh, with no
content.
- TODO: make the update mails configurable
* Fri May 6 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-01gr05]
- And hide the sections
* Fri May 6 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-01gr04]
- Fix up section bars
* Fri May 6 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-01gr03]
- Removed the qmailscan_integration part of the panel
- Removed the database mirror select box. Anyone who isn't
satisfied with using db.local.clamav.net can set the hostname
in the database directly.
- Hid the updates and proxy sections, based on
$clamav{ShowProxySection} and $clamav{ShowUpdatesSection}
- Panel looks rather bare now
- Read the last updated date from $clamav{SignaturesUpdated}
- Modified /sbin/e-smith/freshclam-update-ok to set the above value
- Morphed /etc/clamscan template into /sbin/e-smith/clamscan,
which can read the db directly.
* Fri May 6 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-01gr02]
- Use db.local.clamav.net by default (rather than db.us).
* Fri May 6 2005 Gordon Rowell <gordonr@gormand.com.au>
- [1.1.0-01gr01]
- Bump version to 1.1.0-01gr01 to upgrade over Shad's 1.0.0
- Roll new tarball after major merge of Shad's work.
* Fri May 6 2005 Gordon Rowell <gordonr@gormand.com.au>
- [0.0.1-06gr02]
- Cleaned up patch and startup symlinks
* Fri May 6 2005 Gordon Rowell <gordonr@gormand.com.au>
- [0.0.1-06gr01]
- Merge in Shad Lords' e-smith-spamassassin work (based in part
on work from Damien Curtain) and panel
- Moved freshclam run script options to database defaults
- Created /sbin/e-smith/freshclam-update-{failed,ok}
* Tue Apr 19 2005 Charlie Brady <charlieb@e-smith.com>
- [0.0.1-06]
- Add missing log directories.
* Tue Apr 19 2005 Charlie Brady <charlieb@e-smith.com>
- [0.0.1-05]
- Don't start freshclam or clamd until after bootstrap-console.
- Move all symlink creation into createlinks script.
* Mon Mar 21 2005 Charlie Brady <charlieb@e-smith.com>
- [0.0.1-04]
- Fix data directory in freshclam configuration.
* Fri Feb 18 2005 Charlie Brady <charlieb@e-smith.com> 0.0.1-03
- Config fixes for clamav-0.83
* Wed Feb 09 2005 Charlie Brady <charlieb@e-smith.com>
- [0.0.1-02]
- Add Requires headers for clamd and clamav-db.
* Wed Feb 09 2005 Charlie Brady <charlieb@e-smith.com>
- [0.0.1-01]
- Initial
%prep
%setup
mkdir -p root/run/clamd
rm -rf root/etc/e-smith/templates/usr/lib/systemd/system/freshclam.service.d
rm -rf root/usr/lib/systemd/system/freshclam.service.d
%build
perl createlinks
%pre
if [ $1 -gt 1 ] ; then
if [ -e /var/service/clamd/run ] ; then
/usr/bin/sv d clamd
/usr/bin/sv d clamd/log
fi
fi
if [ $1 -gt 1 ] ; then
if [ -e /var/service/freshclam/run ] ; then
/usr/bin/sv d freshclam
/usr/bin/sv d freshclam/log
fi
fi
%post
# removing old conf file
if [[ -f /etc/clamd.d/clamd.conf ]]; then
rm -f /etc/clamd.d/clamd.conf
fi
#echo "Changing freshclam log owners"
if [[ -d /var/log/freshclam ]]; then
chown -R clamupdate:clamupdate /var/log/freshclam;
fi
#echo "Changing clamd log owners"
if [[ -d /var/log/clamd ]]; then
chown -R clamscan:clamscan /var/log/clamd;
fi
%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
--dir /run/clamd 'attr(2775,clamscan,virusgroup)' \
--dir /var/log/freshclam 'attr(2755,clamupdate,clamupdate)' \
--dir /var/log/clamd 'attr(2755,clamscan,clamscan)' \
--dir /var/spool/clamav/quarantine 'attr(2750,clamscan,clamscan)' \
--file /sbin/clamdscan 'attr(0755,root,root)' \
--file /sbin/e-smith/freshclam-update-failed 'attr(0755,root,root)' \
--file /sbin/e-smith/freshclam-update-ok 'attr(0755,root,root)' \
--file /sbin/e-smith/smeserver-clamscan 'attr(0755,root,root)' \
--file /usr/lib/systemd/system/clamd.service 'attr(0644,root,root)' \
--file /usr/lib/systemd/system/freshclam.service 'attr(0644,root,root)' \
--dir /usr/lib/systemd/system/clamd.service.d 'attr(0755,root,root)' \
--dir /usr/lib/systemd/system/freshclam.service.d 'attr(0755,root,root)' \
> %{name}-%{version}-%{release}-filelist
%clean
rm -rf $RPM_BUILD_ROOT
%files -f %{name}-%{version}-%{release}-filelist
%defattr(-,root,root)