velociraptor/_service
Jeff Mahoney ac85413735 Accepting request 1133905 from home:jeff_mahoney:branches:security:sensor
- Temporarily use the NODE_MODULES BEGIN/END form of the node_modules
  service due to a bug in debbuild preventing Debian builds from succeeding.
- Update to version 0.7.0.4.git4.c1b68a5b:
  * hash: fix nil pointer dereference panic
  * velociraptor: add dummy main function for mage
- Removed patch:
  * velociraptor-golang-mage-vendoring.diff
- Switched to using go_modules and node_modules source services
  - Eliminated bespoke vendoring scripts.
- Pulled sysuser definition into the velociraptor package.

- Remove PrivateTmp and PrivateDevices settings in velociraptor-client.service (SENS-70)

- Update to version 0.7.0.4.git0.e09a0df8:
  * Add additional sanitization to HTML templates on JS side. (#2) (#3077) (CVE-2023-5950)
  * vql/linux/sdjournal: Fix open/close lifetimes
  * vql/linux/audit: fix shutdown races
  * vql/linux/audit: fix goroutine lifetimes
  * vql/linux/audit: limit messageQueue to within runService
  * vql/linux/audit: add auditService.Log()
  * vql/linux/audit: pull parts of shutdown into shutdown watcher
  * vql/linux/audit: remove unnecessary error handling for reassembler
  * vql/linux/audit: remove unused waitgroup from main event loop
  * vql/linux/audit: handle top-level cancelation properly
  * vql/linux/audit: make explicit that goroutines in the main errgroup don't return errors
  * vql/linux/audit: make stats reporting separate from debug prints
  * vql/linux/audit: simplify polling in listener
  * vql/linux/audit: tests, check various rule scenarios
  * vql/linux/audit: Add more client failure test cases
  * vql/linux/audit: Fix audit client lifecycle

OBS-URL: https://build.opensuse.org/request/show/1133905
OBS-URL: https://build.opensuse.org/package/show/security:sensor/velociraptor?expand=0&rev=55
2023-12-18 18:44:23 +00:00

38 lines
1.6 KiB
Plaintext

<services>
<service mode="manual" name="obs_scm">
<param name="url">https://github.com/SUSE/linux-security-sensor</param>
<param name="filename">velociraptor</param>
<param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param>
<param name="revision">sensor-base-0.7.0</param>
<param name="scm">git</param>
<param name="parent-tag">sensor-base-0.7.0-4</param>
<param name="versionrewrite-pattern">sensor-base-([0-9\.]*)-([0-9]*)~(.*)</param>
<param name="versionrewrite-replacement">\1.\2.\3</param>
<param name="changesgenerate">enable</param>
<param name="submodules">enable</param>
</service>
<service name="set_version" mode="manual" />
<service name="extract_file" mode="manual">
<param name="files">velociraptor-*/gui/velociraptor/package-lock.json</param>
<param name="archive">velociraptor-[0-9]*.obscpio</param>
<param name="outfilename">package-lock.json</param>
</service>
<service mode="manual" name="go_modules">
<param name="compression">tar</param>
<param name="archive">velociraptor-0*.obscpio</param>
<param name="vendorname">velociraptor-go_modules</param>
</service>
<service mode="manual" name="node_modules">
<param name="cpio">velociraptor-node_modules.obscpio</param>
<param name="source-offset">10000</param>
<param name="output">velociraptor-nodejs.spec.inc</param>
<param name="spec">velociraptor.spec</param>
</service>
<service mode="buildtime" name="tar"/>
<service mode="buildtime" name="recompress">
<param name="file">velociraptor-[0-9]*.tar</param>
<param name="compression">gz</param>
</service>
</services>