Attachment 227018 Details for Bug 257685 – patch for security_status_baseaudit_jails_ignore

[patch] patch for security_status_baseaudit_jails_ignore

base-audit-0.5.diff (text/plain), 1.46 KB, created by Dan Langille on 2021-08-08 16:16:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Dan Langille

Created: 2021-08-08 16:16:38 UTC

Size: 1.46 KB

patch

obsolete

>diff --git a/security/base-audit/Makefile b/security/base-audit/Makefile
>index 0911dc27d3fe..f6233a937f9e 100644
>--- a/security/base-audit/Makefile
>+++ b/security/base-audit/Makefile
>@@ -1,7 +1,7 @@
> # Created by: Miroslav Lachman
> 
> PORTNAME=	base-audit
>-PORTVERSION=	0.4
>+PORTVERSION=	0.5
> CATEGORIES=	security
> MASTER_SITES=	# none
> DISTFILES=	# none
>diff --git a/security/base-audit/files/405.pkg-base-audit.in b/security/base-audit/files/405.pkg-base-audit.in
>old mode 100644
>new mode 100755
>index f8664346d590..f607a5929fc7
>--- a/security/base-audit/files/405.pkg-base-audit.in
>+++ b/security/base-audit/files/405.pkg-base-audit.in
>@@ -40,6 +40,7 @@ fi
> : ${security_status_baseaudit_quiet:=NO}
> : ${security_status_baseaudit_chroots=$pkg_chroots}
> : ${security_status_baseaudit_jails=$pkg_jails}
>+: ${security_status_baseaudit_jails_ignore=""}
> : ${security_status_baseaudit_expiry:=2}
> 
> # Compute PKG_DBDIR from the config file.
>@@ -166,6 +167,19 @@ audit_base_all() {
> 	esac
> 
> 	for j in $jails ; do
>+		# ignore some jails
>+		if [ -n "$security_status_baseaudit_jails_ignore" ]; then
>+			# we iterate to get exact matches because we want substring matches
>+			# foo should not match foo.bar
>+			for ignore in $security_status_baseaudit_jails_ignore ; do
>+				if [ "${j%|*}" == "$ignore" ]; then
>+					echo
>+					echo "ignoring jail: ${j%|*}"
>+					# continue with the main loop
>+					continue 2
>+				fi
>+			done
>+		fi
> 		echo
> 		echo "jail: ${j%|*}"
> 		audit_base "-j ${j%|*}" ${j##*|}

Actions: View | Diff

Attachments on bug 257685: 227018