diff --git a/prelude-manager-5.1.0.tar.gz b/prelude-manager-5.1.0.tar.gz deleted file mode 100644 index 5346988..0000000 --- a/prelude-manager-5.1.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a0f3888862403817bbb8e5fb67ba6460070b28d3010ce452e33c1555e0880a1d -size 1510054 diff --git a/prelude-manager-5.2.0.tar.gz b/prelude-manager-5.2.0.tar.gz new file mode 100644 index 0000000..f23743d --- /dev/null +++ b/prelude-manager-5.2.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:91f7f7d736f4e29a9a9a345f8eb5f7a72ee5487c3b4a0284abd2e40f58943db0 +size 1564874 diff --git a/prelude-manager-5.2.0.tar.gz.sig b/prelude-manager-5.2.0.tar.gz.sig new file mode 100644 index 0000000..0a9ff9c Binary files /dev/null and b/prelude-manager-5.2.0.tar.gz.sig differ diff --git a/prelude-manager.changes b/prelude-manager.changes index 3cf85b2..d94866e 100644 --- a/prelude-manager.changes +++ b/prelude-manager.changes @@ -1,3 +1,17 @@ +------------------------------------------------------------------- +Sun Oct 25 21:22:20 UTC 2020 - Andreas Stieger + +- prelude-manager 5.2.0: + * Fix script execution plugin + * Add relaying and reverse relaying plugin + * Add script execution plugin + * Use a bufpool for reverse relaying + * Properly restore buffer pool state + * Fix possible deadlock with multiple thread evicting + * Add SNMP traps plugin +- build with libmaxminddb for GeoIP support +- add upstream signing key and verify source signature + ------------------------------------------------------------------- Mon Feb 3 15:46:37 UTC 2020 - Dominique Leuenberger diff --git a/prelude-manager.keyring b/prelude-manager.keyring new file mode 100644 index 0000000..596dbe5 --- /dev/null +++ b/prelude-manager.keyring @@ -0,0 +1,25 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Version: GnuPG v2.0.14 (GNU/Linux) + +mQGiBE/R25ERBADEyDMws7lO01nlE+eefOWrCtezQu1yBx+UuM1m4jOZZVrmanDS +zjK1gPqfthopUr8u7YZb3F71iGchMwFZFL4BGCoXjTvB76KVmcqppUQjDfRMW2d1 +F0CazairAM2POYiYGzAqD1ZjVxtyayhXV/gXDLQdrWIJC7NOqIKeL+zlzwCg+AES +j9o4QLqEiWURtiFpqJ1d4CsD/1jffzqynSUHQvkNW7JmFVYdayp4VZ9PC+GP9UBH +d59IASh6tvqNUuC6Z9bwQaIeWGM51SAUE4bZJOubrL0pJuCUs5lYMU3o6Ry8Kya2 +VFr0+p/7UGqCHjtHNO0TjIO0hA/KEGyeZ5xoW6/1dOZImoyT2AkSXg2iqCoQQ9IE +Gz2JA/0cBFrJ81YdkohtZS8f+qZ2b1QPXGM6ohCgA+wtWbqq/Y65AgMu74LVs5cU +vGGrugZJKhzmOMfJlUVVtlbCR2DpdR40vLu+6hywg18sGkalRRUlNzXMk8/9EwGB +tfNTTvsmhs5lKtcxS+zTXKNpWZyVBUtUHTCN872J6Z6/Euhe47QzUFJFTFVERSAo +UmVsZWFzZSBNYW5hZ2VyKSA8Y29udGFjdEBwcmVsdWRlLWlkcy5vcmc+iGIEExEC +ACIFAk/R25ECGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEDXowMOzZRiY +qm8AoK7pz7qvV9b1YVh4sOEzUEx2tTjbAJ906X+AN1qF48WPyFE+JmkyqKLm0LkB +DQRP0duREAQA5REDx5bx6asyYTXGL6VjSDa9DwIhDwXvmyE6zO/I8i8EGrdFb6zn +XGzT06lVnMoH94OK8aOwgzDOBCtNSfc7+XyAj69VV08sEnr3U7BSN6TKts6SFVaI +5j6dnnquDVmiF0S8KFODHQyxE0NKP9y4uR7EtX9swZv9gVPvVlyBxQ8AAwUD/A2I +d5YDihKz62FBEGVIgz3ZN+I1ZXtDhfoVVRXa89DTDsXXCSd3IUyXxGDM1mYwj7Dm +KpG2Z5ZrULovoQsmdTkdfB3g+oDh3HoKjPiSEAM7tiDo37W5iYkBBiUdw9xCLG2X +POuGRKfP2cpgp8ACvHQkcrRJwdUwK0B+7Oih8vbFiEkEGBECAAkFAk/R25ECGwwA +CgkQNejAw7NlGJjDsgCg93tK1pZ0wvaGvpzTnazp4aDGFQcAn1LaS086WZRZgDRZ +RvZrLThRCzMo +=3ML2 +-----END PGP PUBLIC KEY BLOCK----- diff --git a/prelude-manager.spec b/prelude-manager.spec index ac6ba7e..7e2730e 100644 --- a/prelude-manager.spec +++ b/prelude-manager.spec @@ -17,7 +17,7 @@ Name: prelude-manager -Version: 5.1.0 +Version: 5.2.0 Release: 0 Summary: Bus communication for all Prelude modules # Prelude is GPL-2.0+ @@ -29,16 +29,19 @@ URL: https://www.prelude-siem.org Source0: https://www.prelude-siem.org/pkg/src/%{version}/%{name}-%{version}.tar.gz Source1: prelude-manager.service Source2: prelude-manager-tmpfiles.conf +Source3: https://www.prelude-siem.org/pkg/src/%{version}/%{name}-%{version}.tar.gz.sig +Source4: https://www.prelude-siem.org/attachments/download/233/RPM-GPG-KEY-Prelude-IDS#/%{name}.keyring # Fix run dir for Systemd Patch0: prelude-manager-run-dir.patch # Fix dirs permissions Patch1: prelude-manager-fix_dir_perms.patch -BuildRequires: libgnutls-devel -BuildRequires: libprelude-devel -BuildRequires: libpreludedb-devel -BuildRequires: libxml2-devel +BuildRequires: libprelude-devel >= 5.2.0 +BuildRequires: libpreludedb-devel >= 5.2.0 +BuildRequires: net-snmp-devel >= 5.4 BuildRequires: pkgconfig -BuildRequires: tcpd-devel +BuildRequires: pkgconfig(gnutls) >= 1.0.17 +BuildRequires: pkgconfig(libmaxminddb) +BuildRequires: pkgconfig(libxml-2.0) >= 2.0.0 BuildRequires: pkgconfig(systemd) %{?systemd_ordering} @@ -83,6 +86,14 @@ Requires: %{name} = %{version}-%{release} %description smtp-plugin This plugin adds alerting by email capabilities to prelude-manager +%package snmp-plugin +Summary: SNMP traps plugin for Prelude Manager +Group: Productivity/Networking/Security +Requires: %{name} = %{version}-%{release} + +%description snmp-plugin +This plugin adds SNMP traps capabilities to prelude-manager + %prep %setup -q %patch0 @@ -90,9 +101,11 @@ This plugin adds alerting by email capabilities to prelude-manager %build %configure \ - --disable-static \ - --enable-shared -make %{?_smp_mflags} + --disable-static \ + --enable-shared \ + --enable-libmaxminddb \ + --enable-snmp +%make_build %install mkdir -p %{buildroot}%{_defaultdocdir}/%{name}-%{version} @@ -106,6 +119,7 @@ mkdir -p %{buildroot}%{_localstatedir}/lib/%{name} mkdir -p %{buildroot}%{_sysconfdir}/prelude/profile/%{name} rm -f %{buildroot}/%{_defaultdocdir}/../%{name}/smtp/template.example +rm -f %{buildroot}/%{_defaultdocdir}/../%{name}/snmp/PRELUDE-SIEM-MIB.mib mkdir -p %{buildroot}/%{_sbindir} # Empty dir but kept by debuginfo @@ -136,8 +150,7 @@ rm -rf %{buildroot}/%{_localstatedir}/run/%{name} %service_del_postun %{name}.service %files -%defattr(-,root,root,-) -%doc COPYING +%license COPYING %{_unitdir}/%{name}.service %{_sbindir}/rc%{name} %{_bindir}/%{name} @@ -147,9 +160,11 @@ rm -rf %{buildroot}/%{_localstatedir}/run/%{name} %dir %{_libdir}/%{name}/reports %{_libdir}/%{name}/filters/idmef-criteria.so %{_libdir}/%{name}/filters/thresholding.so -%{_libdir}/%{name}/reports/debug.so -%{_libdir}/%{name}/reports/textmod.so %{_libdir}/%{name}/decodes/normalize.so +%{_libdir}/%{name}/reports/debug.so +%{_libdir}/%{name}/reports/relaying.so +%{_libdir}/%{name}/reports/script.so +%{_libdir}/%{name}/reports/textmod.so %attr(0750,-,-) %dir %{_localstatedir}/spool/%{name} %attr(0750,-,-) %dir %{_localstatedir}/spool/%{name}/scheduler %attr(0750,-,-) %dir %{_localstatedir}/spool/%{name}/failover @@ -162,13 +177,13 @@ rm -rf %{buildroot}/%{_localstatedir}/run/%{name} %attr(0644,-,-) %{_mandir}/man1/%{name}.1%{ext_man} %files db-plugin -%defattr(-,root,root,-) +%license COPYING %dir %{_libdir}/%{name} %dir %{_libdir}/%{name}/reports %{_libdir}/%{name}/reports/db.so %files xml-plugin -%defattr(-,root,root,-) +%license COPYING %dir %{_libdir}/%{name} %dir %{_libdir}/%{name}/reports %{_libdir}/%{name}/reports/xmlmod.so @@ -176,14 +191,21 @@ rm -rf %{buildroot}/%{_localstatedir}/run/%{name} %{_datadir}/%{name}/xmlmod/* %files smtp-plugin -%defattr(-,root,root,-) +%license COPYING %doc %attr(0644,root,root) plugins/reports/smtp/template.example %dir %{_libdir}/%{name} %dir %{_libdir}/%{name}/reports %{_libdir}/%{name}/reports/smtp.so +%files snmp-plugin +%license COPYING +%doc %attr(0644,root,root) plugins/reports/snmp/PRELUDE-SIEM-MIB.mib +%dir %{_libdir}/%{name} +%dir %{_libdir}/%{name}/reports +%{_libdir}/%{name}/reports/snmp.so + %files devel -%defattr(-,root,root,-) +%license COPYING %{_includedir}/%{name}/ %changelog