Accepting request 307078 from home:gregfreemyer:Tools-for-forensic-boot-cd

OBS-URL: https://build.opensuse.org/request/show/307078
OBS-URL: https://build.opensuse.org/package/show/security:forensics/artifacts?expand=0&rev=1

.gitattributes

@@ -0,0 +1,23 @@
+## Default LFS
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.bsp filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.gem filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.jar filter=lfs diff=lfs merge=lfs -text
+*.lz filter=lfs diff=lfs merge=lfs -text
+*.lzma filter=lfs diff=lfs merge=lfs -text
+*.obscpio filter=lfs diff=lfs merge=lfs -text
+*.oxt filter=lfs diff=lfs merge=lfs -text
+*.pdf filter=lfs diff=lfs merge=lfs -text
+*.png filter=lfs diff=lfs merge=lfs -text
+*.rpm filter=lfs diff=lfs merge=lfs -text
+*.tbz filter=lfs diff=lfs merge=lfs -text
+*.tbz2 filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.ttf filter=lfs diff=lfs merge=lfs -text
+*.txz filter=lfs diff=lfs merge=lfs -text
+*.whl filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -0,0 +1 @@
+.osc

artifacts-20150409.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:28a4d26aa90e2ba5631c2bcd8d7b9f9a901d626366958116c5b47ca8fd9d7905
+size 24937

artifacts.changes

@@ -0,0 +1,5 @@
+-------------------------------------------------------------------
+Fri May  8 22:57:40 UTC 2015 - Greg.Freemyer@gmail.com
+
+- initial version 20150409 in OBS
+

artifacts.spec

@@ -0,0 +1,71 @@
+#
+# spec file for package artifacts
+#
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via http://bugs.opensuse.org/
+#
+
+
+%define timestamp 20150409
+Name:           artifacts
+Version:        %{timestamp}
+Release:        0
+Summary:        Digital Forensics Artifact Repository
+License:        Apache-2.0
+Group:          Productivity/Security
+Url:            https://github.com/ForensicArtifacts/artifacts/wiki
+Source:         https://github.com/ForensicArtifacts/artifacts/releases/download/%timestamp/artifacts-%timestamp.tar.gz
+BuildRoot:      %{_tmppath}/%{name}-%{version}-build
+BuildArch:      noarch
+
+%description
+A free, community-sourced, machine-readable knowledge base of forensic artifacts that the world can use both as an information source and within other tools.
+
+If you'd like to use the artifacts in your own tools, all you need to be able to do is read YAML. That's it. No other dependencies. The python code in this project is just used to validate all the artifacts to make sure they follow the spec.
+
+The ForensicArtifacts.com artifact repository was forked from the GRR project artifact collection into a stand-alone repository that is not tool-specific. The GRR developers will migrate to using this repository and make contributions here. In addition the ForensicArtifact team will begin backfilling artifacts in the new format from the ForensicArtifacts.com website.
+
+For some background on the artifacts system and how we expect it to be used see this blackhat presentation and youtube video from the GRR team.
+
+%package validator
+Summary:        Digital Forensics Artifact Repository Validator
+Group:          Productivity/Security
+BuildRequires:  python-setuptools
+Requires:	artifacts
+
+%description validator
+Python modules and app to validate the artifact data.  It is possible some apps directly call these python modules 
+but by design they should work directly with the YAML files themselves and not use these python modules.
+
+%prep
+%setup -q -n artifacts-%{timestamp}
+
+%build
+python setup.py build
+
+%install
+python setup.py install --root=%{buildroot} --prefix=%{_prefix}
+
+%files
+%defattr(-,root,root)
+%doc ACKNOWLEDGEMENTS AUTHORS LICENSE README
+/usr/share/artifacts
+
+%files validator
+%defattr(-,root,root)
+%doc ACKNOWLEDGEMENTS AUTHORS LICENSE README
+%{python_sitelib}/artifacts-%{timestamp}-py2.7.egg-info
+%{python_sitelib}/artifacts
+/usr/bin/validator.py
+
+%changelog