From c1158882321ad9a71bbf06c4485f50190249fbfa36dd9c1a4eb7605a26eb0d3d Mon Sep 17 00:00:00 2001 From: Stephan Kulow Date: Mon, 25 Aug 2014 09:05:02 +0000 Subject: [PATCH] Accepting request 246116 from security New package to parse Microsoft EDB files. Used during computer forensic analysis. OBS-URL: https://build.opensuse.org/request/show/246116 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libesedb?expand=0&rev=1 --- .gitattributes | 23 +++ .gitignore | 1 + Exchange.pdf | 3 + ...ngine_(ESE)_Database_File_(EDB)_format.pdf | 3 + ...nalysis_of_the_Windows_Search_database.pdf | 3 + Windows_Search.pdf | 3 + libesedb-experimental-20140803.tar.gz | 3 + libesedb-libfdata.pdf | 3 + libesedb.changes | 5 + libesedb.spec | 166 ++++++++++++++++++ 10 files changed, 213 insertions(+) create mode 100644 .gitattributes create mode 100644 .gitignore create mode 100644 Exchange.pdf create mode 100644 Extensible_Storage_Engine_(ESE)_Database_File_(EDB)_format.pdf create mode 100644 Forensic_analysis_of_the_Windows_Search_database.pdf create mode 100644 Windows_Search.pdf create mode 100644 libesedb-experimental-20140803.tar.gz create mode 100644 libesedb-libfdata.pdf create mode 100644 libesedb.changes create mode 100644 libesedb.spec diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/Exchange.pdf b/Exchange.pdf new file mode 100644 index 0000000..e9787c6 --- /dev/null +++ b/Exchange.pdf @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:e67cd94b422d29879d38724d507153bc194f17ccd0d2f4bb56fdca0d4ca32470 +size 510407 diff --git a/Extensible_Storage_Engine_(ESE)_Database_File_(EDB)_format.pdf b/Extensible_Storage_Engine_(ESE)_Database_File_(EDB)_format.pdf new file mode 100644 index 0000000..4ad5819 --- /dev/null +++ b/Extensible_Storage_Engine_(ESE)_Database_File_(EDB)_format.pdf @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a0ed54b7640f8f221037700e9d57f502b4f53d4e213697e1511bd03b526c617a +size 331409 diff --git a/Forensic_analysis_of_the_Windows_Search_database.pdf b/Forensic_analysis_of_the_Windows_Search_database.pdf new file mode 100644 index 0000000..1a762fe --- /dev/null +++ b/Forensic_analysis_of_the_Windows_Search_database.pdf @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c0e1439adafc382cbab4bceb88519a0cad90482d5d55cae3d9458a17f7a3964a +size 190853 diff --git a/Windows_Search.pdf b/Windows_Search.pdf new file mode 100644 index 0000000..fae7a5d --- /dev/null +++ b/Windows_Search.pdf @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8ad8ef3a30271493785de31df8114a5be8b1ca22a98043ff73bca9f5a86b9fd7 +size 365543 diff --git a/libesedb-experimental-20140803.tar.gz b/libesedb-experimental-20140803.tar.gz new file mode 100644 index 0000000..eaebba4 --- /dev/null +++ b/libesedb-experimental-20140803.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d55d406821333aba8f90fab422baa88c98c91647122091082a3d14ebb01e21e5 +size 1642721 diff --git a/libesedb-libfdata.pdf b/libesedb-libfdata.pdf new file mode 100644 index 0000000..435c2d0 --- /dev/null +++ b/libesedb-libfdata.pdf @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:d07689d2cda7034f6207795254b78fc0f47856060345b4b0f8108549f6420ba6 +size 14401 diff --git a/libesedb.changes b/libesedb.changes new file mode 100644 index 0000000..2e7188f --- /dev/null +++ b/libesedb.changes @@ -0,0 +1,5 @@ +------------------------------------------------------------------- +Fri Aug 22 21:33:49 UTC 2014 - Greg.Freemyer@gmail.com + +- initial package in OBS (v0~20140803) + diff --git a/libesedb.spec b/libesedb.spec new file mode 100644 index 0000000..0cad0ab --- /dev/null +++ b/libesedb.spec @@ -0,0 +1,166 @@ +# +# spec file for package libesedb +# +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# + + +%define lname libesedb1 +%define timestamp 20140803 +Name: libesedb +Version: 0~%{timestamp} +Release: 0 +Summary: Library and tools to access the ESE Database File (EDB) format +License: LGPL-3.0+ and GFDL-1.1+ and GFDL-1.3+ +Group: Productivity/File utilities +Url: http://code.google.com/p/libesedb/ +#DL-URL: https://255adcba056b7d59fd55a94f0ea02de0cf110bfb.googledrive.com/host/0B3fBvzttpiiSN082cmxsbHB0anc/libesedb-experimental-20140803.tar.gz +Source: %{name}-experimental-%{timestamp}.tar.gz +Source2: Exchange.pdf +Source3: Extensible_Storage_Engine_(ESE)_Database_File_(EDB)_format.pdf +Source4: Forensic_analysis_of_the_Windows_Search_database.pdf +Source5: Windows_Search.pdf +Source6: libesedb-libfdata.pdf +BuildRequires: pkg-config +BuildRequires: python-devel +#use factory versions if available +%if 0%{?suse_version} > 1230 +BuildRequires: pkgconfig(libbfio) >= 20130721 +BuildRequires: pkgconfig(libcfile) >= 20130609 +BuildRequires: pkgconfig(libclocale) >= 20130609 +BuildRequires: pkgconfig(libcnotify) >= 20120425 +BuildRequires: pkgconfig(libcpath) >= 20130609 +BuildRequires: pkgconfig(libcsplit) >= 20130609 +BuildRequires: pkgconfig(libuna) >= 20120425 +%endif +%if 0%{?suse_version} > 1310 +BuildRequires: pkgconfig(libcdata) >= 20140105 +BuildRequires: pkgconfig(libcthreads) >= 20130723 +BuildRequires: pkgconfig(libfdatetime) >= 20140105 +BuildRequires: pkgconfig(libfguid) >= 20140105 +%endif +# fails to build with factory package, use internal +# verified 8/22/2014 +#BuildRequires: pkgconfig(libcerror) >= 20140105 +# not (yet) released as packages by upstream +#BuildRequires: pkgconfig(libcstring) >= 20120425 +#BuildRequires: pkgconfig(libcsystem) >= 20120425 +#BuildRequires: pkgconfig(libfcache) >= 20120405 +#BuildRequires: pkgconfig(libfdata) >= 20120405 +#BuildRequires: pkgconfig(libfmapi) +#BuildRequires: pkgconfig(libfvalue) +#BuildRequires: pkgconfig(libfwnt) +#BuildRequires: pkgconfig(libmapidb) +BuildRoot: %{_tmppath}/%{name}-%{version}-build + +%description +Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format. ESEDB is used in may different applications like Windows Search, Windows Mail, Exchange, Active Directory, etc. + +%package -n %{lname} +Summary: Library to access the EDB format +License: LGPL-3.0+ +Group: System/Libraries + +%description -n %{lname} +Library to access the Extensible Storage Engine (ESE) Database File (EDB) format. ESEDB is used in may different applications like Windows Search, Windows Mail, Exchange, Active Directory, etc. + +%package tools +Summary: Tools to access the EDB format +License: LGPL-3.0+ +Group: Productivity/File utilities +Requires: %{lname} = %{version} + +%description tools +Tools to access the Extensible Storage Engine (ESE) Database File (EDB) format. ESEDB is used in may different applications like Windows Search, Windows Mail, Exchange, Active Directory, etc. + +%package devel +Summary: Development files for libesedb, a EDB file format library +License: LGPL-3.0+ and GFDL-1.1+ and GFDL-1.3+ +Group: Development/Libraries/C and C++ +Requires: %{lname} = %{version} + +%description devel +libesedb is a library to access EDB files. ESEDB is used in many different +applications like Windows Search, Windows Mail, Exchange, Active Directory, etc. + +This subpackage contains libraries and header files for developing +applications that want to make use of libesedb. + +%package -n python-%{name} +Summary: Python bindings for libesedb, a EDB file format parser +License: LGPL-3.0+ +Group: Development/Libraries/Python +Requires: python +Requires: %{lname} = %{version} +Provides: pyesedb + +%description -n python-%{name} +libesedb is a library to access EDB files. ESEDB is used in many different +applications like Windows Search, Windows Mail, Exchange, Active Directory, etc. + +Python bindings for libesedb, which can read EDB files. ESEDB is used in many +different applications like Windows Search, Windows Mail, Exchange, Active +Directory, etc. + +%prep +%setup -q -n libesedb-%{timestamp} +cp "%{SOURCE2}" . +cp "%{SOURCE3}" . +cp "%{SOURCE4}" . +cp "%{SOURCE5}" . +cp "%{SOURCE6}" . + +%build +%configure --disable-static --enable-wide-character-type --enable-python +make %{?_smp_mflags} + +%install +make DESTDIR=%{buildroot} install %{?_smp_mflags} +find %{buildroot} -type f -name "*.la" -delete -print + +%post -n %{lname} -p /sbin/ldconfig + +%postun -n %{lname} -p /sbin/ldconfig + +%files -n %{lname} +%defattr(-,root,root) +%doc AUTHORS COPYING ChangeLog +%{_libdir}/libesedb.so.* + +%files tools +%defattr(-,root,root) +%doc AUTHORS COPYING ChangeLog +%{_bindir}/esedb* +%{_mandir}/man1/esedb*.1* + +%files devel +%defattr(-,root,root) +%doc AUTHORS COPYING README ChangeLog +%doc Exchange.pdf +%doc Extensible_Storage_Engine_* +%doc Forensic_analysis_of_the_Windows_Search_database.pdf +%doc Windows_Search.pdf +%doc libesedb-libfdata.pdf +%{_includedir}/libesedb.h +%{_includedir}/libesedb/ +%{_libdir}/libesedb.so +%{_libdir}/pkgconfig/libesedb.pc +%{_mandir}/man3/libesedb.3* + +%files -n python-%{name} +%defattr(-,root,root) +%doc AUTHORS COPYING README ChangeLog +%{python_sitearch}/pyesedb.so + +%changelog