Accepting request 950798 from home:jeff_mahoney:branches:security:sensor
- Resolved some rpmlint warnings and added client config placeholder. - Update to version 0.6.3~git0.69e0fffa: * Prepare for 0.6.3 release (#1515) * add limitations to description and key path to query (#1514) * Retry remote datastore connections (#1513) * Write minion log files and autocert in its own dir. (#1512) * Synced KapeFiles artifacts (#1511) * Added data retention server artifacts (#1510) * Set an upper limit for ttl in memcache (#1508) * Add updates to Windows.System.Services (#15) (#1509) * Ensure collector container is properly closed when interrupted. (#1507) * Continually rebuild the index at runtime. (#1506) * Harder vacuum - directly move client task directories to the attic. (#1505) * add limitation disclaimer (#1504) * Reduce critial section to avoid deadlock in repository manager (#1503) * Implemented a vacuum command to remove old tasks from client queues. (#1501) * Better format profile metrics output. (#1495) * Cap size of directories and report large directories. (#1493) * Set ACE completers per editor to avoid global state. (#1492) * Add HttpOnly flag to all cookies. (#1491) * Refactor completion routine calls (#1490) * fix: upgrade react-bootstrap from 1.3.0 to 1.6.4 (#1486) * fix: upgrade http-proxy-middleware from 1.0.5 to 1.3.1 (#1485) * fix: upgrade react-ace from 9.1.3 to 9.5.0 (#1487) * fix: upgrade recharts from 2.0.9 to 2.1.8 (#1488) * fix: upgrade react-datetime-picker from 3.0.4 to 3.4.3 (#1489) * Limit size of cached directories. (#1483) * Add more instrumentation to memory caches. (#1482) * Fixed chart resizing bug (#1481) OBS-URL: https://build.opensuse.org/request/show/950798 OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=3
This commit is contained in:
Git OBS Bridge
parent
5288159631
commit
0365dcf377
5
_service
5
_service
@ -1,10 +1,11 @@
|
||||
<services>
|
||||
<service mode="manual" name="obs_scm">
|
||||
<param name="url">https://github.com/jeffmahoney/velociraptor</param>
|
||||
<param name="url">https://github.com/SUSE/linux-security-sensor</param>
|
||||
<param name="filename">velociraptor</param>
|
||||
<param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param>
|
||||
<param name="revision">v0.6.3</param>
|
||||
<param name="scm">git</param>
|
||||
<param name="parent-tag">v0.6.2</param>
|
||||
<param name="parent-tag">v0.6.3</param>
|
||||
<param name="versionrewrite-pattern">v(.*)</param>
|
||||
<param name="changesgenerate">enable</param>
|
||||
</service>
|
||||
|
||||
4
_servicedata
Normal file
4
_servicedata
Normal file
@ -0,0 +1,4 @@
|
||||
<servicedata>
|
||||
<service name="tar_scm">
|
||||
<param name="url">https://github.com/SUSE/linux-security-sensor</param>
|
||||
<param name="changesrevision">69e0fffa28e2dc22bfaa7961d31b667c9f4388cd</param></service></servicedata>
|
||||
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:f84140992149c016b693a8b03ed53caf47e94188810529aa6f68e1f64d9c9274
|
||||
size 19303437
|
||||
3
velociraptor-0.6.3~git0.69e0fffa.obscpio
Normal file
3
velociraptor-0.6.3~git0.69e0fffa.obscpio
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:9cd66625e5dde3ace77aaf6a5b2936ba62440806a4d807ca2a7e0fea66f0158f
|
||||
size 19361293
|
||||
@ -1,8 +1,147 @@
|
||||
-------------------------------------------------------------------
|
||||
Wed Feb 2 18:24:32 UTC 2022 - Jeff Mahoney <jeffm@suse.com>
|
||||
|
||||
- Resolved some rpmlint warnings and added client config placeholder.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Feb 2 04:44:49 UTC 2022 - William Brown <william.brown@suse.com>
|
||||
|
||||
- Add client service file
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 27 17:33:45 UTC 2022 - jeffm@suse.com
|
||||
|
||||
- Update to version 0.6.3~git0.69e0fffa:
|
||||
* Prepare for 0.6.3 release (#1515)
|
||||
* add limitations to description and key path to query (#1514)
|
||||
* Retry remote datastore connections (#1513)
|
||||
* Write minion log files and autocert in its own dir. (#1512)
|
||||
* Synced KapeFiles artifacts (#1511)
|
||||
* Added data retention server artifacts (#1510)
|
||||
* Set an upper limit for ttl in memcache (#1508)
|
||||
* Add updates to Windows.System.Services (#15) (#1509)
|
||||
* Ensure collector container is properly closed when interrupted. (#1507)
|
||||
* Continually rebuild the index at runtime. (#1506)
|
||||
* Harder vacuum - directly move client task directories to the attic. (#1505)
|
||||
* add limitation disclaimer (#1504)
|
||||
* Reduce critial section to avoid deadlock in repository manager (#1503)
|
||||
* Implemented a vacuum command to remove old tasks from client queues. (#1501)
|
||||
* Better format profile metrics output. (#1495)
|
||||
* Cap size of directories and report large directories. (#1493)
|
||||
* Set ACE completers per editor to avoid global state. (#1492)
|
||||
* Add HttpOnly flag to all cookies. (#1491)
|
||||
* Refactor completion routine calls (#1490)
|
||||
* fix: upgrade react-bootstrap from 1.3.0 to 1.6.4 (#1486)
|
||||
* fix: upgrade http-proxy-middleware from 1.0.5 to 1.3.1 (#1485)
|
||||
* fix: upgrade react-ace from 9.1.3 to 9.5.0 (#1487)
|
||||
* fix: upgrade recharts from 2.0.9 to 2.1.8 (#1488)
|
||||
* fix: upgrade react-datetime-picker from 3.0.4 to 3.4.3 (#1489)
|
||||
* Limit size of cached directories. (#1483)
|
||||
* Add more instrumentation to memory caches. (#1482)
|
||||
* Fixed chart resizing bug (#1481)
|
||||
* Removed the old queries: list from artifacts. (#1480)
|
||||
* [Snyk] Fix for 9 vulnerabilities (#1479)
|
||||
* Remove lock around critical section. (#1478)
|
||||
* Added MacOS.Forensics.AppleDoubleZip (#1476)
|
||||
* Update Windows.Persistence.PermanentWMIEvents to add blind custom namespace detection (#13) (#1475)
|
||||
* Make index snapshot frequency configurable
|
||||
* fix APIConfigLoader not applying command line args (#1463)
|
||||
* Flush index from memory to disk (#1470)
|
||||
* Prepare RC2 (#1473)
|
||||
* Bugfix: Setting notebook index did not escape username (#1471)
|
||||
* Fixed 2 bugs with the memcache file store (#1469)
|
||||
* Update flow active time when the result set is completed (#1468)
|
||||
* Tag artifacts as built ins (#1467)
|
||||
* Fixed bug in the pathspec() VQL function. (#1465)
|
||||
* Update PrivateKeys.yaml (#1459)
|
||||
* Added recursion_callback option to the glob plugin (#1461)
|
||||
* Added config wizard for multi-frontend configuration (#1460)
|
||||
* Calculate the sha256 hash of the offline container. (#1458)
|
||||
* Artifact inspection GUI now allows pivot. (#1457)
|
||||
* Client certs can now be specified in the config file. (#1456)
|
||||
* New Upload File Form element (#1455)
|
||||
* Added a sparse accessor (#1453)
|
||||
* Hunt wizard estimates clients affected (#1452)
|
||||
* Make the interrogation process customizable. (#1451)
|
||||
* Update Info.yaml (#1427)
|
||||
* Improved Lnk parser to include additional fields. (#1449)
|
||||
* Added a Yara GUI element editor. (#1447)
|
||||
* Added patch and merge to `config show` and `config generate` (#1445)
|
||||
* Remove usage of FatalIfError from main module (#1443)
|
||||
* Introduced a dedicated pathspec object (#1440)
|
||||
* Bump is-svg from 4.2.2 to 4.3.0 in /gui/velociraptor (#1437)
|
||||
* Only pass client config in the client VQL scope. (#1436)
|
||||
* rework protobuf message generator (#1435)
|
||||
* Update Autoruns.yaml
|
||||
* Added test for filefinder (#1431)
|
||||
* fix filters in filefinder artifact (#1430)
|
||||
* Add Artifact to collect KapeFile targets on Linux (#1426)
|
||||
* Enabled lazy quotes on csv parser (#1424)
|
||||
* Fixed bug in client comms. (#1423)
|
||||
* Add document filter for better usability (#1421)
|
||||
* Added resource information to the output of parse_pe() (#1420)
|
||||
* Low latency client connectivity discovery (#1419)
|
||||
* Add RecentDocs collection (#1416)
|
||||
* Update Amcache artifact for clarity (#1415)
|
||||
* Added extra parameters to parse_csv() (#1413)
|
||||
* Added netcat plugin to read from socket (#1412)
|
||||
* Updated SRUM with Network Usage and Upload option (#1408)
|
||||
* Synced darwin and freebsd file accessor with the linux one. (#1409)
|
||||
* Added Windows.Forensics.SAM artifact (#1404)
|
||||
* Initial artifacts can be specified in config (#1403)
|
||||
* Add conhost.exe to binary rename (#1402)
|
||||
* Add update Prefetch Btime execution fix (#1398)
|
||||
* Update Prefetch timeline (#1397)
|
||||
* Cleanup search API (#1396)
|
||||
* Update protobuf dependencies. (#1394)
|
||||
* More multi-frontend optimizations (#1393)
|
||||
* Client info manager now keeps track of scheduled tasks. (#1392)
|
||||
* add sid and lookupsid plugin (#1388)
|
||||
* Add Mutant whitelist (#1387)
|
||||
* Notify currently connected clients on new hunts (#1386)
|
||||
* Index rebuild command loads new index service. (#1385)
|
||||
* Changes to support distributed architecture. (#1384)
|
||||
* Added procdump and procdump64 (#1382)
|
||||
* Fixed heavy mutex contention in the labeler. (#1375)
|
||||
* Add shellcode to CobaltStrike carver (#10) (#1373)
|
||||
* Added an index rebuild command. (#1369)
|
||||
* GUI artifact form was ignoring the friendly name attribute (#1368)
|
||||
* Added a specialized form element for regex parameters. (#1367)
|
||||
* Added a gRPC based remote datastore (#1366)
|
||||
* Display all subauthorities for GUID in SRUM (#1365)
|
||||
* Verify all gRPC peer certificates were signed by the Velociraptor CA (#1362)
|
||||
* Implemented MemcacheFileDatastore - memory caching with file backend (#1361)
|
||||
* Added new plugins to manipulate event tables easier. (#1355)
|
||||
* Refactored in memory datastore to be more efficient. (#1353)
|
||||
* Sync vfilter (#1351)
|
||||
* Add both fqdn and hostname to the client search table (#1350)
|
||||
* BUGFIX: Datastore on windows is unable to represent files with . (#1348)
|
||||
* Added buffer_size parameter to parse_records_with_regex() (#1347)
|
||||
* Propagate column types from artifact to flow notebook. (#1346)
|
||||
* Cobalt parser update (#1345)
|
||||
* Allow listener to not use file buffer. (#1344)
|
||||
* Fix Deployment documentation link in README (#1343)
|
||||
* Preserve uint64 types across Listener (#1341)
|
||||
* Fix spelling (#1339)
|
||||
* Refactored queue listener to preserve order. (#1340)
|
||||
* Added a magic() VQL function (#1338)
|
||||
* Fixed bug in CSS (#1337)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 27 17:27:42 UTC 2022 - jeffm@suse.com
|
||||
|
||||
- Update to version 0.6.2~git0.8dd598b2:
|
||||
* Update ese parser to fix timestamp bug
|
||||
* Prepare final 0.6.2 release (#1363)
|
||||
* Verify all gRPC peer certificates were signed by the Velociraptor CA
|
||||
* Removed search index parallelism (#1358)
|
||||
* Added new plugins to manipulate event tables easier. (#1355)
|
||||
* Sync vfilter (#1351)
|
||||
* Add both fqdn and hostname to the client search table (#1350)
|
||||
* BUGFIX: Datastore on windows is unable to represent files with . (#1348)
|
||||
* Added buffer_size parameter to parse_records_with_regex() (#1347)
|
||||
* Propagate column types from artifact to flow notebook. (#1346)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 6 21:50:43 UTC 2022 - Jeff Mahoney <jeffm@suse.com>
|
||||
|
||||
|
||||
2
velociraptor-client.config.placeholder
Normal file
2
velociraptor-client.config.placeholder
Normal file
@ -0,0 +1,2 @@
|
||||
# This configuration file can be generated by using
|
||||
# velociraptor-client config client --config /path/to/server.conf
|
||||
@ -18,7 +18,7 @@
|
||||
%define projname velociraptor
|
||||
|
||||
Name: velociraptor-client
|
||||
Version: 0.6.2~git73.dc02b45e
|
||||
Version: 0.6.3~git0.69e0fffa
|
||||
Release: 0
|
||||
Summary: Endpoint visibility and collection tool (endpoint only)
|
||||
|
||||
@ -27,6 +27,8 @@ License: AGPL-3.0-only
|
||||
URL: https://github.com/Velocidex/velociraptor
|
||||
Source: %{projname}-%{version}.tar.xz
|
||||
Source1: vendor-golang-%{version}.tar.xz
|
||||
Source2: %{name}.service
|
||||
Source3: %{name}.config.placeholder
|
||||
Patch1: velociraptor-golang-mage-vendoring.diff
|
||||
BuildRequires: golang-packaging
|
||||
BuildRequires: systemd-rpm-macros
|
||||
@ -63,14 +65,31 @@ make linux_bare
|
||||
|
||||
%install
|
||||
mkdir -p %buildroot/%{_bindir}
|
||||
mkdir -p %buildroot/%{_sysconfdir}/velociraptor
|
||||
mkdir -p %buildroot/%{_unitdir}
|
||||
install -m 0755 output/velociraptor-v%{version}-linux-* %buildroot/%{_bindir}/velociraptor
|
||||
install -m 0644 %{SOURCE2} %{buildroot}%{_unitdir}/velociraptor-client.service
|
||||
install -m 0644 %{SOURCE2} %{buildroot}%{_unitdir}/%{name}.service
|
||||
install -m 0600 %{SOURCE3} %{buildroot}%{_sysconfdir}/velociraptor/client.config
|
||||
|
||||
%files
|
||||
%defattr(-,root,root)
|
||||
%license LICENSE
|
||||
%doc README.md
|
||||
%dir %{_sysconfdir}/velociraptor
|
||||
%{_bindir}/velociraptor
|
||||
%{_unitdir}/velociraptor-client.service
|
||||
%config(noreplace) %{_sysconfdir}/velociraptor/client.config
|
||||
%{_unitdir}/%{name}.service
|
||||
|
||||
%pre
|
||||
%service_add_pre %{name}.service
|
||||
|
||||
%post
|
||||
%service_add_post %{name}.service
|
||||
|
||||
%preun
|
||||
%service_del_preun %{name}.service
|
||||
|
||||
%postun
|
||||
%service_del_postun %{name}.service
|
||||
|
||||
%changelog
|
||||
|
||||
2
velociraptor-server.config.placeholder
Normal file
2
velociraptor-server.config.placeholder
Normal file
@ -0,0 +1,2 @@
|
||||
# This configuration file can be generated by using
|
||||
# velociraptor config generate
|
||||
@ -1,3 +1,142 @@
|
||||
-------------------------------------------------------------------
|
||||
Wed Feb 2 18:10:19 UTC 2022 - Jeff Mahoney <jeffm@suse.com>
|
||||
|
||||
- Added systemd unit file and placeholder config file.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 27 17:33:45 UTC 2022 - jeffm@suse.com
|
||||
|
||||
- Update to version 0.6.3~git0.69e0fffa:
|
||||
* Prepare for 0.6.3 release (#1515)
|
||||
* add limitations to description and key path to query (#1514)
|
||||
* Retry remote datastore connections (#1513)
|
||||
* Write minion log files and autocert in its own dir. (#1512)
|
||||
* Synced KapeFiles artifacts (#1511)
|
||||
* Added data retention server artifacts (#1510)
|
||||
* Set an upper limit for ttl in memcache (#1508)
|
||||
* Add updates to Windows.System.Services (#15) (#1509)
|
||||
* Ensure collector container is properly closed when interrupted. (#1507)
|
||||
* Continually rebuild the index at runtime. (#1506)
|
||||
* Harder vacuum - directly move client task directories to the attic. (#1505)
|
||||
* add limitation disclaimer (#1504)
|
||||
* Reduce critial section to avoid deadlock in repository manager (#1503)
|
||||
* Implemented a vacuum command to remove old tasks from client queues. (#1501)
|
||||
* Better format profile metrics output. (#1495)
|
||||
* Cap size of directories and report large directories. (#1493)
|
||||
* Set ACE completers per editor to avoid global state. (#1492)
|
||||
* Add HttpOnly flag to all cookies. (#1491)
|
||||
* Refactor completion routine calls (#1490)
|
||||
* fix: upgrade react-bootstrap from 1.3.0 to 1.6.4 (#1486)
|
||||
* fix: upgrade http-proxy-middleware from 1.0.5 to 1.3.1 (#1485)
|
||||
* fix: upgrade react-ace from 9.1.3 to 9.5.0 (#1487)
|
||||
* fix: upgrade recharts from 2.0.9 to 2.1.8 (#1488)
|
||||
* fix: upgrade react-datetime-picker from 3.0.4 to 3.4.3 (#1489)
|
||||
* Limit size of cached directories. (#1483)
|
||||
* Add more instrumentation to memory caches. (#1482)
|
||||
* Fixed chart resizing bug (#1481)
|
||||
* Removed the old queries: list from artifacts. (#1480)
|
||||
* [Snyk] Fix for 9 vulnerabilities (#1479)
|
||||
* Remove lock around critical section. (#1478)
|
||||
* Added MacOS.Forensics.AppleDoubleZip (#1476)
|
||||
* Update Windows.Persistence.PermanentWMIEvents to add blind custom namespace detection (#13) (#1475)
|
||||
* Make index snapshot frequency configurable
|
||||
* fix APIConfigLoader not applying command line args (#1463)
|
||||
* Flush index from memory to disk (#1470)
|
||||
* Prepare RC2 (#1473)
|
||||
* Bugfix: Setting notebook index did not escape username (#1471)
|
||||
* Fixed 2 bugs with the memcache file store (#1469)
|
||||
* Update flow active time when the result set is completed (#1468)
|
||||
* Tag artifacts as built ins (#1467)
|
||||
* Fixed bug in the pathspec() VQL function. (#1465)
|
||||
* Update PrivateKeys.yaml (#1459)
|
||||
* Added recursion_callback option to the glob plugin (#1461)
|
||||
* Added config wizard for multi-frontend configuration (#1460)
|
||||
* Calculate the sha256 hash of the offline container. (#1458)
|
||||
* Artifact inspection GUI now allows pivot. (#1457)
|
||||
* Client certs can now be specified in the config file. (#1456)
|
||||
* New Upload File Form element (#1455)
|
||||
* Added a sparse accessor (#1453)
|
||||
* Hunt wizard estimates clients affected (#1452)
|
||||
* Make the interrogation process customizable. (#1451)
|
||||
* Update Info.yaml (#1427)
|
||||
* Improved Lnk parser to include additional fields. (#1449)
|
||||
* Added a Yara GUI element editor. (#1447)
|
||||
* Added patch and merge to `config show` and `config generate` (#1445)
|
||||
* Remove usage of FatalIfError from main module (#1443)
|
||||
* Introduced a dedicated pathspec object (#1440)
|
||||
* Bump is-svg from 4.2.2 to 4.3.0 in /gui/velociraptor (#1437)
|
||||
* Only pass client config in the client VQL scope. (#1436)
|
||||
* rework protobuf message generator (#1435)
|
||||
* Update Autoruns.yaml
|
||||
* Added test for filefinder (#1431)
|
||||
* fix filters in filefinder artifact (#1430)
|
||||
* Add Artifact to collect KapeFile targets on Linux (#1426)
|
||||
* Enabled lazy quotes on csv parser (#1424)
|
||||
* Fixed bug in client comms. (#1423)
|
||||
* Add document filter for better usability (#1421)
|
||||
* Added resource information to the output of parse_pe() (#1420)
|
||||
* Low latency client connectivity discovery (#1419)
|
||||
* Add RecentDocs collection (#1416)
|
||||
* Update Amcache artifact for clarity (#1415)
|
||||
* Added extra parameters to parse_csv() (#1413)
|
||||
* Added netcat plugin to read from socket (#1412)
|
||||
* Updated SRUM with Network Usage and Upload option (#1408)
|
||||
* Synced darwin and freebsd file accessor with the linux one. (#1409)
|
||||
* Added Windows.Forensics.SAM artifact (#1404)
|
||||
* Initial artifacts can be specified in config (#1403)
|
||||
* Add conhost.exe to binary rename (#1402)
|
||||
* Add update Prefetch Btime execution fix (#1398)
|
||||
* Update Prefetch timeline (#1397)
|
||||
* Cleanup search API (#1396)
|
||||
* Update protobuf dependencies. (#1394)
|
||||
* More multi-frontend optimizations (#1393)
|
||||
* Client info manager now keeps track of scheduled tasks. (#1392)
|
||||
* add sid and lookupsid plugin (#1388)
|
||||
* Add Mutant whitelist (#1387)
|
||||
* Notify currently connected clients on new hunts (#1386)
|
||||
* Index rebuild command loads new index service. (#1385)
|
||||
* Changes to support distributed architecture. (#1384)
|
||||
* Added procdump and procdump64 (#1382)
|
||||
* Fixed heavy mutex contention in the labeler. (#1375)
|
||||
* Add shellcode to CobaltStrike carver (#10) (#1373)
|
||||
* Added an index rebuild command. (#1369)
|
||||
* GUI artifact form was ignoring the friendly name attribute (#1368)
|
||||
* Added a specialized form element for regex parameters. (#1367)
|
||||
* Added a gRPC based remote datastore (#1366)
|
||||
* Display all subauthorities for GUID in SRUM (#1365)
|
||||
* Verify all gRPC peer certificates were signed by the Velociraptor CA (#1362)
|
||||
* Implemented MemcacheFileDatastore - memory caching with file backend (#1361)
|
||||
* Added new plugins to manipulate event tables easier. (#1355)
|
||||
* Refactored in memory datastore to be more efficient. (#1353)
|
||||
* Sync vfilter (#1351)
|
||||
* Add both fqdn and hostname to the client search table (#1350)
|
||||
* BUGFIX: Datastore on windows is unable to represent files with . (#1348)
|
||||
* Added buffer_size parameter to parse_records_with_regex() (#1347)
|
||||
* Propagate column types from artifact to flow notebook. (#1346)
|
||||
* Cobalt parser update (#1345)
|
||||
* Allow listener to not use file buffer. (#1344)
|
||||
* Fix Deployment documentation link in README (#1343)
|
||||
* Preserve uint64 types across Listener (#1341)
|
||||
* Fix spelling (#1339)
|
||||
* Refactored queue listener to preserve order. (#1340)
|
||||
* Added a magic() VQL function (#1338)
|
||||
* Fixed bug in CSS (#1337)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 27 17:27:42 UTC 2022 - jeffm@suse.com
|
||||
|
||||
- Update to version 0.6.2~git0.8dd598b2:
|
||||
* Update ese parser to fix timestamp bug
|
||||
* Prepare final 0.6.2 release (#1363)
|
||||
* Verify all gRPC peer certificates were signed by the Velociraptor CA
|
||||
* Removed search index parallelism (#1358)
|
||||
* Added new plugins to manipulate event tables easier. (#1355)
|
||||
* Sync vfilter (#1351)
|
||||
* Add both fqdn and hostname to the client search table (#1350)
|
||||
* BUGFIX: Datastore on windows is unable to represent files with . (#1348)
|
||||
* Added buffer_size parameter to parse_records_with_regex() (#1347)
|
||||
* Propagate column types from artifact to flow notebook. (#1346)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jan 06 20:14:39 UTC 2022 - jeffm@suse.com
|
||||
|
||||
|
||||
@ -1,5 +1,4 @@
|
||||
name: velociraptor
|
||||
version: 0.6.2~git73.dc02b45e
|
||||
mtime: 1641209811
|
||||
commit: dc02b45e1ca5c75f7e5d9d5d2e35a3addac26c84
|
||||
|
||||
version: 0.6.3~git0.69e0fffa
|
||||
mtime: 1643193558
|
||||
commit: 69e0fffa28e2dc22bfaa7961d31b667c9f4388cd
|
||||
|
||||
21
velociraptor.service
Normal file
21
velociraptor.service
Normal file
@ -0,0 +1,21 @@
|
||||
[Unit]
|
||||
Description=Velociraptor Server Service
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=root
|
||||
Group=root
|
||||
UMask=0027
|
||||
ExecStart=/usr/bin/velociraptor frontend --verbose --config /etc/velociraptor/server.config
|
||||
|
||||
PrivateTmp=true
|
||||
PrivateDevices=true
|
||||
ProtectHostname=true
|
||||
ProtectClock=true
|
||||
ProtectKernelTunables=true
|
||||
ProtectKernelModules=true
|
||||
ProtectControlGroups=true
|
||||
MemoryDenyWriteExecute=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@ -18,7 +18,7 @@
|
||||
%define projname velociraptor
|
||||
|
||||
Name: velociraptor
|
||||
Version: 0.6.2~git73.dc02b45e
|
||||
Version: 0.6.3~git0.69e0fffa
|
||||
Release: 0
|
||||
Summary: Endpoint visibility and collection tool
|
||||
|
||||
@ -28,6 +28,8 @@ URL: https://github.com/Velocidex/velociraptor
|
||||
Source: %{projname}-%{version}.tar.xz
|
||||
Source1: vendor-golang-%{version}.tar.xz
|
||||
Source2: vendor-nodejs-%{version}.tar.xz
|
||||
Source3: %{name}.service
|
||||
Source4: %{name}-server.config.placeholder
|
||||
Patch1: velociraptor-golang-mage-vendoring.diff
|
||||
BuildRequires: golang-packaging
|
||||
BuildRequires: systemd-rpm-macros
|
||||
@ -38,7 +40,6 @@ BuildRequires: libtsan0
|
||||
BuildRequires: nodejs16
|
||||
BuildRequires: npm16
|
||||
Conflicts: velociraptor-client
|
||||
Obsoletes: velociraptor-console
|
||||
|
||||
%description
|
||||
Velociraptor is a tool for collecting host based state information
|
||||
@ -68,11 +69,31 @@ make linux
|
||||
|
||||
%install
|
||||
mkdir -p %buildroot/%{_bindir}
|
||||
mkdir -p %buildroot/%{_sysconfdir}/velociraptor
|
||||
mkdir -p %buildroot/%{_unitdir}
|
||||
install -m 755 output/velociraptor-v%{version}-linux-* %buildroot/%{_bindir}/velociraptor
|
||||
install -m 0644 %{SOURCE3} %{buildroot}%{_unitdir}/%{name}.service
|
||||
install -m 0600 %{SOURCE4} %{buildroot}%{_sysconfdir}/velociraptor/server.config
|
||||
|
||||
%files
|
||||
%license LICENSE
|
||||
%doc README.md
|
||||
%dir %{_sysconfdir}/velociraptor
|
||||
%{_bindir}/velociraptor
|
||||
%config(noreplace) %{_sysconfdir}/velociraptor/server.config
|
||||
%{_unitdir}/%{name}.service
|
||||
|
||||
%pre
|
||||
%service_add_pre %{name}.service
|
||||
|
||||
%post
|
||||
%service_add_post %{name}.service
|
||||
|
||||
%preun
|
||||
%service_del_preun %{name}.service
|
||||
|
||||
%postun
|
||||
%service_del_postun %{name}.service
|
||||
|
||||
|
||||
%changelog
|
||||
|
||||
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:eb73a988803b463c2e81d855e704f56ce532bb8369446f777f9c2c1e8c130c98
|
||||
size 7357072
|
||||
3
vendor-golang-0.6.3~git0.69e0fffa.tar.xz
Normal file
3
vendor-golang-0.6.3~git0.69e0fffa.tar.xz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:63e346ac6404fd7a25731d4db843480544de084efada296e9eccc2b211ee20a7
|
||||
size 7369496
|
||||
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:31aecd0eabb2859a5daa73a654fa935ce1ccdf7c9ce6dba84bcaa8c89c278d65
|
||||
size 30936988
|
||||
3
vendor-nodejs-0.6.3~git0.69e0fffa.tar.xz
Normal file
3
vendor-nodejs-0.6.3~git0.69e0fffa.tar.xz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:f1966103e475c8b7ad46aab3a960f89269644c2a460e3fa5ad20d5b73d57363c
|
||||
size 56218924
|
||||
Loading…
Reference in New Issue
Block a user