lynis Security and system auditing tool to harden Unix/Linux systems

2 files changed, 55 insertions, 0 deletions

diff --git a/pcr/lynis/PKGBUILD b/pcr/lynis/PKGBUILD
new file mode 100644
index 000000000..24be95c25
--- /dev/null
+++ b/pcr/lynis/PKGBUILD
@@ -0,0 +1,47 @@
+# Contributor (Arch)     : Levente Polyak <levente[at]leventepolyak[dot]net>
+# Contributor (Arch)     : Sébastien Luttringer <seblu@aur.archlinux.org>
+# Maintainer  (Parabola) : Aurélien DESBRIÈRES <aurelien@hackers.camp>
+
+pkgname=lynis
+pkgver=1.5.6
+pkgrel=1
+pkgdesc='Security and system auditing tool to harden Unix/Linux systems'
+url='http://cisofy.com/lynis/'
+license=('GPL3')
+arch=('any')
+backup=('etc/lynis/default.prf')
+depends=('sh')
+optdepends=('net-tools: networking tests')
+install=lynis.install
+source=(http://cisofy.com/files/${pkgname}-${pkgver}.tar.gz)
+
+prepare() {
+  cd ${pkgname}-${pkgver}
+  # fix non-test includes to let lynis run as user but complain gracefully
+  chmod o+rx include
+  chmod o+r include/*
+  chmod o-r include/tests_*
+}
+
+package() {
+  cd ${pkgname}-${pkgver}
+
+  # install profile
+  install -Dm 644 default.prf "${pkgdir}/etc/${pkgname}/default.prf"
+
+  # install binary
+  install -Dm 755 "${pkgname}" "${pkgdir}/usr/bin/${pkgname}"
+
+  # install plugins, include, db
+  install -d "${pkgdir}/usr/share/${pkgname}"
+  cp -a db include plugins "${pkgdir}/usr/share/${pkgname}"
+
+  # install doc files
+  install -d "${pkgdir}/usr/share/doc/${pkgname}"
+  install -m 644 -t "${pkgdir}/usr/share/doc/${pkgname}" README INSTALL CHANGELOG FAQ
+
+  # install manpage
+  install -Dm 644 "${pkgname}.8" "${pkgdir}/usr/share/man/man8/${pkgname}.8"
+}
+
+# vim:set ts=2 sw=2 ft=sh et:
diff --git a/pcr/lynis/lynis.install b/pcr/lynis/lynis.install
new file mode 100644
index 000000000..abdb081f1
--- /dev/null
+++ b/pcr/lynis/lynis.install
@@ -0,0 +1,8 @@
+pre_upgrade() {
+  chmod -R o= /usr/share/lynis
+  chmod 0755 /usr/share/lynis
+  # fix non-test includes to let lynis run as user but complain gracefully
+  chmod o+rx /usr/share/lynis/include
+  chmod o+r /usr/share/lynis/include/*
+  chmod o-r /usr/share/lynis/include/tests_*
+}