]>
Commit | Line | Data |
---|---|---|
ce81aec7 AM |
1 | # TODO: |
2 | # - resurrect ipv6 support | |
465f8f11 | 3 | Summary: Ban IPs that make too many password failures |
f4d4d197 | 4 | Summary(pl.UTF-8): Blokowanie IP powodujących zbyt dużo prób logowań z błędnym hasłem |
465f8f11 | 5 | Name: fail2ban |
d379a004 | 6 | Version: 0.9.4 |
179323c4 | 7 | Release: 2 |
465f8f11 | 8 | License: GPL |
9 | Group: Daemons | |
ef99c638 | 10 | Source0: https://github.com/fail2ban/fail2ban/archive/%{version}.tar.gz |
d379a004 | 11 | # Source0-md5: 2dc93dff03c4da9fb95d4695e07b65d8 |
8a5385b5 | 12 | Source1: %{name}.init |
06aca71d | 13 | Source2: %{name}.logrotate |
ce81aec7 | 14 | Source3: paths-pld.conf |
896749cf | 15 | Patch0: ipv6.patch |
ce81aec7 | 16 | Patch1: logifiles.patch |
823ffa17 | 17 | URL: http://fail2ban.sourceforge.net/ |
80cab974 | 18 | BuildRequires: python-devel |
4e631b74 | 19 | BuildRequires: python-modules |
823ffa17 | 20 | BuildRequires: rpm-pythonprov |
e50e7043 | 21 | BuildRequires: rpmbuild(macros) >= 1.710 |
56c86c91 | 22 | Requires(post,preun): /sbin/chkconfig |
40211b80 | 23 | Requires(post,preun,postun): systemd-units >= 38 |
465f8f11 | 24 | Requires: python-log4py |
179323c4 | 25 | Requires: python-modules-sqlite |
56c86c91 | 26 | Requires: rc-scripts |
40211b80 | 27 | Requires: systemd-units >= 38 |
465f8f11 | 28 | BuildArch: noarch |
80cab974 | 29 | BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) |
465f8f11 | 30 | |
31 | %description | |
32 | Fail2Ban scans log files like /var/log/secure and bans IP that makes | |
33 | too many password failures. It updates firewall rules to reject the IP | |
34 | address. These rules can be defined by the user. Fail2Ban can read | |
35 | multiple log files including sshd or Apache web server logs. | |
36 | ||
2312737e JR |
37 | %description -l pl.UTF-8 |
38 | Fail2Ban skanuje pliki logów takie jak /var/log/secure i blokuje IP | |
39 | powodujące zbyt dużo prób logowań z błędnym hasłem. Uaktualnia regułki | |
40 | firewalla, aby odrzucić adres IP. Regułki te mogą być definiowane | |
41 | przez użytkownika. Fail2Ban potrafi czytać wiele plików logów włącznie | |
42 | z sshd czy plikami logów serwera WWW Apache. | |
cac37698 | 43 | |
465f8f11 | 44 | %prep |
45 | %setup -q | |
ce81aec7 | 46 | #%patch0 -p1 |
5d66b381 | 47 | %patch1 -p1 |
ddeb0306 | 48 | rm setup.cfg |
465f8f11 | 49 | |
50 | %build | |
f7c0846c | 51 | %py_build |
465f8f11 | 52 | |
53 | %install | |
54 | rm -rf $RPM_BUILD_ROOT | |
06aca71d | 55 | install -d $RPM_BUILD_ROOT/etc/{rc.d/init.d,logrotate.d} \ |
ce81aec7 | 56 | $RPM_BUILD_ROOT{%{_mandir}/man1,/var/{log,run/fail2ban}} \ |
40211b80 | 57 | $RPM_BUILD_ROOT{%{systemdunitdir},%{systemdtmpfilesdir}} |
3f2a7d0f | 58 | |
f7c0846c | 59 | %py_install \ |
ef99c638 | 60 | --install-lib=%{py_sitescriptdir} \ |
465f8f11 | 61 | --root=$RPM_BUILD_ROOT |
62 | ||
06aca71d JR |
63 | install -p man/*.1 $RPM_BUILD_ROOT%{_mandir}/man1 |
64 | ||
65 | install -p %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/fail2ban | |
66 | install -p %{SOURCE2} $RPM_BUILD_ROOT/etc/logrotate.d/fail2ban | |
ef99c638 | 67 | install -p %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}/fail2ban/paths-pld.conf |
ef189e0e | 68 | |
40211b80 JR |
69 | install -p files/fail2ban-tmpfiles.conf $RPM_BUILD_ROOT%{systemdtmpfilesdir}/fail2ban.conf |
70 | install -p files/fail2ban.service $RPM_BUILD_ROOT%{systemdunitdir}/fail2ban.service | |
fad935ea | 71 | |
06aca71d JR |
72 | :> $RPM_BUILD_ROOT/var/log/fail2ban.log |
73 | ||
823ffa17 | 74 | %py_postclean |
465f8f11 | 75 | |
76 | %clean | |
77 | rm -rf $RPM_BUILD_ROOT | |
78 | ||
79 | %post | |
80 | /sbin/chkconfig --add %{name} | |
81 | %service %{name} restart | |
40211b80 | 82 | %systemd_post fail2ban.service |
465f8f11 | 83 | |
84 | %preun | |
85 | if [ "$1" = "0" ]; then | |
86 | %service -q %{name} stop | |
87 | /sbin/chkconfig --del %{name} | |
88 | fi | |
40211b80 JR |
89 | %systemd_preun fail2ban.service |
90 | ||
91 | %postun | |
92 | %systemd_reload | |
93 | ||
94 | %triggerpostun -- fail2ban < 0.8.11-3 | |
95 | %systemd_trigger fail2ban.service | |
465f8f11 | 96 | |
97 | %files | |
465f8f11 | 98 | %defattr(644,root,root,755) |
ce81aec7 | 99 | %doc CONTRIBUTING.md ChangeLog DEVELOP FILTERS README.md RELEASE THANKS TODO COPYING |
40211b80 JR |
100 | %attr(754,root,root) /etc/rc.d/init.d/fail2ban |
101 | %attr(755,root,root) %{_bindir}/fail2ban-client | |
40211b80 JR |
102 | %attr(755,root,root) %{_bindir}/fail2ban-regex |
103 | %attr(755,root,root) %{_bindir}/fail2ban-server | |
ce81aec7 | 104 | %attr(755,root,root) %{_bindir}/fail2ban-testcases |
40211b80 JR |
105 | %{systemdunitdir}/fail2ban.service |
106 | %{systemdtmpfilesdir}/fail2ban.conf | |
107 | %dir /var/run/fail2ban | |
108 | %dir %{_sysconfdir}/fail2ban | |
109 | %dir %{_sysconfdir}/fail2ban/action.d | |
ce81aec7 AM |
110 | %attr(755,root,root) %{_sysconfdir}/fail2ban/action.d/badips.py |
111 | %attr(755,root,root) %{_sysconfdir}/fail2ban/action.d/smtp.py | |
40211b80 JR |
112 | %dir %{_sysconfdir}/fail2ban/fail2ban.d |
113 | %dir %{_sysconfdir}/fail2ban/filter.d | |
114 | %dir %{_sysconfdir}/fail2ban/jail.d | |
115 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/fail2ban/*.conf | |
116 | %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/fail2ban/*/*.conf | |
06aca71d | 117 | %attr(640,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/logrotate.d/fail2ban |
5d66b381 | 118 | %{py_sitescriptdir}/%{name} |
50db387a | 119 | %{py_sitescriptdir}/%{name}-%{version}-py*.egg-info |
40211b80 JR |
120 | %{_mandir}/man1/fail2ban-client.1* |
121 | %{_mandir}/man1/fail2ban-regex.1* | |
122 | %{_mandir}/man1/fail2ban-server.1* | |
123 | %{_mandir}/man1/fail2ban.1* | |
179323c4 | 124 | %attr(750,root,root) %dir /var/lib/%{name} |
06aca71d | 125 | %attr(640,root,logs) %ghost /var/log/fail2ban.log |
179323c4 | 126 |