forked from pool/python-evtx
a2c8d4586c
- version update to 0.6.1 * unit tests! also, travis integration with github project. * remove hacky python string templating solution to dealing with substitutions. * add .xml() and .lxml() to records. * lots of fixes to bring code in-line with pep8 and style guide. * fix a bunch of bugs due to bad data/encodings. * add support for CharacterReferenceNode * demonstrate unicode handling issue submitted by @stephensheridan in #37 * fix hex32/64 node types, identified by @nbareil in #38 * fix systemtime timestamp parsing, identified by @patatetom in #39 OBS-URL: https://build.opensuse.org/request/show/707847 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-evtx?expand=0&rev=12
74 lines
2.4 KiB
RPMSpec
74 lines
2.4 KiB
RPMSpec
#
|
|
# spec file for package python-evtx
|
|
#
|
|
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
|
|
Name: python-evtx
|
|
Version: 0.6.1
|
|
Release: 0
|
|
Summary: Windows Event Log files parser
|
|
License: Apache-2.0
|
|
Group: Development/Libraries/Python
|
|
URL: https://github.com/williballenthin/python-evtx
|
|
Source: https://github.com/williballenthin/python-evtx/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
|
BuildRequires: %{python_module hexdump}
|
|
BuildRequires: %{python_module lxml}
|
|
BuildRequires: %{python_module pytest}
|
|
BuildRequires: %{python_module setuptools}
|
|
BuildRequires: dos2unix
|
|
BuildRequires: fdupes
|
|
BuildRequires: python-rpm-macros
|
|
Requires: python-hexdump
|
|
Requires: python-lxml
|
|
BuildArch: noarch
|
|
%python_subpackages
|
|
|
|
%description
|
|
python-evtx is a pure Python parser for recent Windows Event Log files (those
|
|
with the file extension ".evtx"). The module provides programmatic access to the
|
|
File and Chunk headers, record templates, and event entries. For example, you
|
|
can use python-evtx to review the event logs of Windows 7 systems from a Mac or
|
|
Linux workstation. The structure definitions and parsing strategies were heavily
|
|
inspired by the work of Andreas Schuster and his Perl implementation
|
|
"Parse-Evtx".
|
|
|
|
%prep
|
|
%setup -q
|
|
find Evtx -name "*.py" | xargs sed -i '1 { /^#!/ d }'
|
|
|
|
%build
|
|
%python_build
|
|
|
|
%install
|
|
%python_install
|
|
for script in scripts/evtx_*.py; do
|
|
sed -i -e 's:^#!%{_bindir}/env python:#!%{_bindir}/python3:' $script
|
|
dos2unix $script
|
|
done
|
|
%python_expand %fdupes %{buildroot}%{$python_sitelib}
|
|
|
|
%check
|
|
%pytest
|
|
|
|
%files %{python_files}
|
|
%license LICENSE.TXT
|
|
%doc README.md
|
|
%{python_sitelib}/*
|
|
%python3_only %{_bindir}/evtx_*.py
|
|
|
|
%changelog
|