Changeset 102

Timestamp:

10/31/07 14:38:32 (1 year ago)

Author:

jjarrett

Message:

added STIG modification scripts into clip rpm

Files:

• trunk/RHEL5/RPM/clip.spec (modified) (1 diff)
• trunk/RHEL5/rpmify (modified) (1 diff)
• trunk/RHEL5/scripts/Makefile (modified) (2 diffs)
• trunk/RHEL5/scripts/installer.in (modified) (2 diffs)

trunk/RHEL5/RPM/clip.spec

@@ -48 +48 @@
-/usr/share/clip/wrappers/scripts
-/usr/share/clip/man/man8/xar.8
+/usr/share/clip/scripts/stig-fix
-/etc/security/pam_env.conf
-/%{_lib}/security/pam_tally3.so

trunk/RHEL5/rpmify

@@ -9 +9 @@
-cp /usr/src/redhat/RPMS/$ARCH/clip-$VERSION-$RELEASE.$ARCH.rpm RPM/
-cp /usr/src/redhat/SRPMS/clip-$VERSION-$RELEASE.src.rpm RPM/
+
+sha1sum RPM/*.rpm > SHA1_$ARCH.txt
+

trunk/RHEL5/scripts/Makefile

@@ -11 +11 @@
-        test -d $(DESTDIR)$(SHAREDIR)/wrappers || install -m 755 -d \
-                $(DESTDIR)$(SHAREDIR)/wrappers
-
+
+
+
+
+
+
+
+
+
+
+
+
-
-        # Install scripts and data directories
@@ -22 +33 @@
-        install -m 644 wrappers/wrapper.c $(DESTDIR)$(SHAREDIR)/wrappers
-
+        # Install scripts
+        install -m 700 stig-fix/run-fixes.sh $(DESTDIR)$(SHAREDIR)/scripts/stig-fix 
+        install -m 700 stig-fix/cat1/*.sh $(DESTDIR)$(SHAREDIR)/scripts/stig-fix/cat1 
+        install -m 700 stig-fix/cat2/*.sh $(DESTDIR)$(SHAREDIR)/scripts/stig-fix/cat2 
+        install -m 700 stig-fix/cat3/*.sh $(DESTDIR)$(SHAREDIR)/scripts/stig-fix/cat3 
+
-        # Patch installer 
-        perl -pe s!--BASE--!$(PREFIX)/share! < $(INSTALLER).in > \

trunk/RHEL5/scripts/installer.in

@@ -55 +55 @@
-}
-
+# Install a collection of scripts to make CLIP 
+# STIG-compliant. 
+# Since these scripts are not likely to be found on the system,
+# cp and not Copy() is used to install these files. 
+InstallStig() {
+        for d in $(ls -R STIGFIXDIR); do
+                cp -r $d /usr/share/clip/scripts/stig-fix &2>/dev/null
+        done
+}
+
+# Run the scripts installed in InstallStig.
+# This function assumes that a file named run-fixes.sh has been installed
+# in STIGFIXDIR, and is executable by root; this happens in InstallStig.
+# run-fixes.sh is used to launch the individual scripts.
+RunStigFixes() {
+        if [ -x $STIGFIXDIR/run-fixes.sh ]; then
+                echo "Running STIG fix script."
+                $STIGFIXDIR/run-fixes.sh
+        else
+                echo "Could not locate STIG fix script."
+        fi
+}
+
+
-cat <<EOM
-Certifiable Linux Integration Platform Installation Log
@@ -67 +91 @@
-InstallPam
-InstallMan
+InstallStig
+RunStigFixes