Compare commits
No commits in common. 'c9' and 'c8-stream-client' have entirely different histories.
c9
...
c8-stream-
@ -0,0 +1,29 @@
|
|||||||
|
From 0f485a0921a39c08e7259f9b38f0b10e425384a5 Mon Sep 17 00:00:00 2001
|
||||||
|
From: root <root@ipa.example.test>
|
||||||
|
Date: Mon, 5 Dec 2022 16:17:17 -0500
|
||||||
|
Subject: [PATCH] Fix logging issue related to dtype
|
||||||
|
|
||||||
|
It is an integer in earlier versions of python3-dns and a class
|
||||||
|
in later versions. Log the integer value.
|
||||||
|
|
||||||
|
Related: #2099484
|
||||||
|
---
|
||||||
|
src/ipahealthcheck/ipa/idns.py | 2 +-
|
||||||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/ipa/idns.py b/ipa/idns.py
|
||||||
|
index e294db2..1adb69d 100644
|
||||||
|
--- a/src/ipahealthcheck/ipa/idns.py
|
||||||
|
+++ b/src/ipahealthcheck/ipa/idns.py
|
||||||
|
@@ -176,7 +176,7 @@ class IPADNSSystemRecordsCheck(IPAPlugin):
|
||||||
|
qname = "ipa-ca." + api.env.domain + "."
|
||||||
|
ipa_ca_records = []
|
||||||
|
for dtype in (rdatatype.A, rdatatype.AAAA):
|
||||||
|
- logger.debug("Search DNS for %s records of %s", dtype.name, qname)
|
||||||
|
+ logger.debug("Search DNS for %s records of %s", dtype, qname)
|
||||||
|
try:
|
||||||
|
answers = resolve(qname, dtype)
|
||||||
|
except DNSException as e:
|
||||||
|
--
|
||||||
|
2.31.1
|
||||||
|
|
||||||
@ -1,142 +0,0 @@
|
|||||||
From 4906c52b629bfce275558d4701c083f4c020ef32 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Rob Crittenden <rcritten@redhat.com>
|
|
||||||
Date: Fri, 30 Jun 2023 14:35:40 -0400
|
|
||||||
Subject: [PATCH] Catch exceptions during user/group name lookup in FileCheck
|
|
||||||
|
|
||||||
It's possible that one or more of the allowed users/groups
|
|
||||||
in a file check do not exist on the system. Catch this
|
|
||||||
exception and try to proceed as best as possible.
|
|
||||||
|
|
||||||
https://github.com/freeipa/freeipa-healthcheck/issues/296
|
|
||||||
|
|
||||||
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
|
|
||||||
---
|
|
||||||
src/ipahealthcheck/core/files.py | 33 +++++++++++++++++++++++----
|
|
||||||
tests/test_core_files.py | 38 ++++++++++++++++++++++++++++++++
|
|
||||||
2 files changed, 67 insertions(+), 4 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/src/ipahealthcheck/core/files.py b/src/ipahealthcheck/core/files.py
|
|
||||||
index 59e8b76..85d42bc 100644
|
|
||||||
--- a/src/ipahealthcheck/core/files.py
|
|
||||||
+++ b/src/ipahealthcheck/core/files.py
|
|
||||||
@@ -3,12 +3,15 @@
|
|
||||||
#
|
|
||||||
|
|
||||||
import grp
|
|
||||||
+import logging
|
|
||||||
import os
|
|
||||||
import pwd
|
|
||||||
|
|
||||||
from ipahealthcheck.core import constants
|
|
||||||
from ipahealthcheck.core.plugin import Result, duration
|
|
||||||
|
|
||||||
+logger = logging.getLogger()
|
|
||||||
+
|
|
||||||
|
|
||||||
class FileCheck:
|
|
||||||
"""Generic check to validate permission and ownership of files
|
|
||||||
@@ -77,14 +80,25 @@ class FileCheck:
|
|
||||||
|
|
||||||
found = False
|
|
||||||
for o in owner:
|
|
||||||
- fowner = pwd.getpwnam(o)
|
|
||||||
+ try:
|
|
||||||
+ fowner = pwd.getpwnam(o)
|
|
||||||
+ except Exception as e:
|
|
||||||
+ logging.debug('user lookup "%s" for "%s" failed: %s',
|
|
||||||
+ o, path, e)
|
|
||||||
+ continue
|
|
||||||
if fowner.pw_uid == stat.st_uid:
|
|
||||||
found = True
|
|
||||||
break
|
|
||||||
|
|
||||||
if not found:
|
|
||||||
- actual = pwd.getpwuid(stat.st_uid)
|
|
||||||
key = '%s_owner' % path.replace('/', '_')
|
|
||||||
+ try:
|
|
||||||
+ actual = pwd.getpwuid(stat.st_uid)
|
|
||||||
+ except Exception:
|
|
||||||
+ yield Result(self, constants.WARNING, key=key,
|
|
||||||
+ path=path, type='owner', expected=owner,
|
|
||||||
+ got='Unknown uid %s' % stat.st_uid)
|
|
||||||
+ continue
|
|
||||||
if len(owner) == 1:
|
|
||||||
msg = 'Ownership of %s is %s and should ' \
|
|
||||||
'be %s' % \
|
|
||||||
@@ -104,14 +118,25 @@ class FileCheck:
|
|
||||||
|
|
||||||
found = False
|
|
||||||
for g in group:
|
|
||||||
- fgroup = grp.getgrnam(g)
|
|
||||||
+ try:
|
|
||||||
+ fgroup = grp.getgrnam(g)
|
|
||||||
+ except Exception as e:
|
|
||||||
+ logging.debug('group lookup "%s" for "%s" failed: %s',
|
|
||||||
+ g, path, e)
|
|
||||||
+ continue
|
|
||||||
if fgroup.gr_gid == stat.st_gid:
|
|
||||||
found = True
|
|
||||||
break
|
|
||||||
|
|
||||||
if not found:
|
|
||||||
key = '%s_group' % path.replace('/', '_')
|
|
||||||
- actual = grp.getgrgid(stat.st_gid)
|
|
||||||
+ try:
|
|
||||||
+ actual = grp.getgrgid(stat.st_gid)
|
|
||||||
+ except Exception:
|
|
||||||
+ yield Result(self, constants.WARNING, key=key,
|
|
||||||
+ path=path, type='group', expected=group,
|
|
||||||
+ got='Unknown gid %s' % stat.st_gid)
|
|
||||||
+ continue
|
|
||||||
if len(group) == 1:
|
|
||||||
msg = 'Group of %s is %s and should ' \
|
|
||||||
'be %s' % \
|
|
||||||
diff --git a/tests/test_core_files.py b/tests/test_core_files.py
|
|
||||||
index 6e3ec38..924d7fa 100644
|
|
||||||
--- a/tests/test_core_files.py
|
|
||||||
+++ b/tests/test_core_files.py
|
|
||||||
@@ -197,3 +197,41 @@ def test_files_not_found(mock_exists):
|
|
||||||
for result in my_results.results:
|
|
||||||
assert result.result == constants.SUCCESS
|
|
||||||
assert result.kw.get('msg') == 'File does not exist'
|
|
||||||
+
|
|
||||||
+
|
|
||||||
+@patch('os.stat')
|
|
||||||
+@patch('pwd.getpwnam')
|
|
||||||
+@patch('pwd.getpwuid')
|
|
||||||
+def test_files_owner_not_found(mock_pwuid, mock_pwnam, mock_stat):
|
|
||||||
+ mock_pwuid.side_effect = KeyError('getpwnam(): name not found')
|
|
||||||
+ mock_pwnam.side_effect = KeyError('getpwuid(): uid not found')
|
|
||||||
+ mock_stat.return_value = make_stat()
|
|
||||||
+
|
|
||||||
+ f = FileCheck()
|
|
||||||
+ f.files = files
|
|
||||||
+
|
|
||||||
+ results = capture_results(f)
|
|
||||||
+
|
|
||||||
+ my_results = get_results(results, 'owner')
|
|
||||||
+ for result in my_results.results:
|
|
||||||
+ assert result.result == constants.WARNING
|
|
||||||
+ assert result.kw.get('got') == 'Unknown uid 0'
|
|
||||||
+
|
|
||||||
+
|
|
||||||
+@patch('os.stat')
|
|
||||||
+@patch('grp.getgrnam')
|
|
||||||
+@patch('grp.getgrgid')
|
|
||||||
+def test_files_group_not_found(mock_grgid, mock_grnam, mock_stat):
|
|
||||||
+ mock_grgid.side_effect = KeyError('getgrnam(): name not found')
|
|
||||||
+ mock_grnam.side_effect = KeyError('getgruid(): gid not found')
|
|
||||||
+ mock_stat.return_value = make_stat()
|
|
||||||
+
|
|
||||||
+ f = FileCheck()
|
|
||||||
+ f.files = files
|
|
||||||
+
|
|
||||||
+ results = capture_results(f)
|
|
||||||
+
|
|
||||||
+ my_results = get_results(results, 'group')
|
|
||||||
+ for result in my_results.results:
|
|
||||||
+ assert result.result == constants.WARNING
|
|
||||||
+ assert result.kw.get('got') == 'Unknown gid 0'
|
|
||||||
--
|
|
||||||
2.41.0
|
|
||||||
|
|
||||||
@ -0,0 +1,47 @@
|
|||||||
|
From e0c09f9f1388bbce43775f40a39266e692e231da Mon Sep 17 00:00:00 2001
|
||||||
|
From: Thorsten Scherf <tscherf@redhat.com>
|
||||||
|
Date: Wed, 13 Mar 2024 12:57:34 +0100
|
||||||
|
Subject: [PATCH 1/4] Fixes log file permissions as per CIS benchmark
|
||||||
|
|
||||||
|
As per CIS benchmark the log file permissions should be 640 for some log
|
||||||
|
files but if we change /var/log/ipa-custodia.audit.log permissions to
|
||||||
|
640 then "ipa-healthcheck" reports a permission issue.
|
||||||
|
|
||||||
|
Fixes: https://github.com/freeipa/freeipa-healthcheck/issues/325
|
||||||
|
Signed-off-by: Thorsten Scherf <tscherf@redhat.com>
|
||||||
|
---
|
||||||
|
src/ipahealthcheck/ipa/files.py | 8 +++++---
|
||||||
|
1 file changed, 5 insertions(+), 3 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/src/ipahealthcheck/ipa/files.py b/src/ipahealthcheck/ipa/files.py
|
||||||
|
index b7ca116..d914014 100644
|
||||||
|
--- a/src/ipahealthcheck/ipa/files.py
|
||||||
|
+++ b/src/ipahealthcheck/ipa/files.py
|
||||||
|
@@ -121,7 +121,7 @@ class IPAFileCheck(IPAPlugin, FileCheck):
|
||||||
|
self.files.append((filename, 'root', 'root', '0600'))
|
||||||
|
|
||||||
|
self.files.append((paths.IPA_CUSTODIA_AUDIT_LOG,
|
||||||
|
- 'root', 'root', '0644'))
|
||||||
|
+ 'root', 'root', '0644', '0640'))
|
||||||
|
|
||||||
|
self.files.append((paths.KADMIND_LOG, 'root', 'root',
|
||||||
|
('0600', '0640')))
|
||||||
|
@@ -133,11 +133,13 @@ class IPAFileCheck(IPAPlugin, FileCheck):
|
||||||
|
self.files.append((paths.SLAPD_INSTANCE_ERROR_LOG_TEMPLATE % inst,
|
||||||
|
constants.DS_USER, constants.DS_GROUP, '0600'))
|
||||||
|
|
||||||
|
- self.files.append((paths.VAR_LOG_HTTPD_ERROR, 'root', 'root', '0644'))
|
||||||
|
+ self.files.append((paths.VAR_LOG_HTTPD_ERROR, 'root', 'root',
|
||||||
|
+ '0644', '0640'))
|
||||||
|
|
||||||
|
for globpath in glob.glob("%s/debug*.log" % paths.TOMCAT_CA_DIR):
|
||||||
|
self.files.append(
|
||||||
|
- (globpath, constants.PKI_USER, constants.PKI_GROUP, "0644")
|
||||||
|
+ (globpath, constants.PKI_USER, constants.PKI_GROUP,
|
||||||
|
+ "0644", "0640")
|
||||||
|
)
|
||||||
|
|
||||||
|
for globpath in glob.glob(
|
||||||
|
--
|
||||||
|
2.45.0
|
||||||
|
|
||||||
@ -0,0 +1,189 @@
|
|||||||
|
From 54e2e9b8bff0bc84b6179eac44993b460f02ad02 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Rob Crittenden <rcritten@redhat.com>
|
||||||
|
Date: Fri, 21 Jun 2024 15:15:36 -0400
|
||||||
|
Subject: [PATCH 1/2] Fix some file mode format issues
|
||||||
|
|
||||||
|
When specifying multiple possible modes for a file the values must
|
||||||
|
be a tuple. There were two occurances where they were listed
|
||||||
|
separately.
|
||||||
|
|
||||||
|
Add in a pre-check on the formatting to raise an error for badly
|
||||||
|
formatted files. This may be annoying for users if one sneaks in
|
||||||
|
again but the CI should catch it.
|
||||||
|
|
||||||
|
Related: https://github.com/freeipa/freeipa-healthcheck/issues/325
|
||||||
|
|
||||||
|
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
|
||||||
|
---
|
||||||
|
src/ipahealthcheck/core/files.py | 12 +++++-
|
||||||
|
src/ipahealthcheck/ipa/files.py | 6 +--
|
||||||
|
tests/test_core_files.py | 71 +++++++++++++++++++++++++++++++-
|
||||||
|
tests/util.py | 1 +
|
||||||
|
4 files changed, 85 insertions(+), 5 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/src/ipahealthcheck/core/files.py b/src/ipahealthcheck/core/files.py
|
||||||
|
index 59e8b76..58dd74a 100644
|
||||||
|
--- a/src/ipahealthcheck/core/files.py
|
||||||
|
+++ b/src/ipahealthcheck/core/files.py
|
||||||
|
@@ -28,7 +28,17 @@ class FileCheck:
|
||||||
|
|
||||||
|
@duration
|
||||||
|
def check(self):
|
||||||
|
- for (path, owner, group, mode) in self.files:
|
||||||
|
+ # first validate that the list of files to check is in the correct
|
||||||
|
+ # format
|
||||||
|
+ process_files = []
|
||||||
|
+ for file in self.files:
|
||||||
|
+ if len(file) == 4:
|
||||||
|
+ process_files.append(file)
|
||||||
|
+ else:
|
||||||
|
+ yield Result(self, constants.ERROR, key=file,
|
||||||
|
+ msg='Code format is incorrect for file')
|
||||||
|
+
|
||||||
|
+ for (path, owner, group, mode) in process_files:
|
||||||
|
if not isinstance(owner, tuple):
|
||||||
|
owner = tuple((owner,))
|
||||||
|
if not isinstance(group, tuple):
|
||||||
|
diff --git a/src/ipahealthcheck/ipa/files.py b/src/ipahealthcheck/ipa/files.py
|
||||||
|
index d914014..c80fd5b 100644
|
||||||
|
--- a/src/ipahealthcheck/ipa/files.py
|
||||||
|
+++ b/src/ipahealthcheck/ipa/files.py
|
||||||
|
@@ -121,7 +121,7 @@ class IPAFileCheck(IPAPlugin, FileCheck):
|
||||||
|
self.files.append((filename, 'root', 'root', '0600'))
|
||||||
|
|
||||||
|
self.files.append((paths.IPA_CUSTODIA_AUDIT_LOG,
|
||||||
|
- 'root', 'root', '0644', '0640'))
|
||||||
|
+ 'root', 'root', ('0644', '0640')))
|
||||||
|
|
||||||
|
self.files.append((paths.KADMIND_LOG, 'root', 'root',
|
||||||
|
('0600', '0640')))
|
||||||
|
@@ -134,12 +134,12 @@ class IPAFileCheck(IPAPlugin, FileCheck):
|
||||||
|
constants.DS_USER, constants.DS_GROUP, '0600'))
|
||||||
|
|
||||||
|
self.files.append((paths.VAR_LOG_HTTPD_ERROR, 'root', 'root',
|
||||||
|
- '0644', '0640'))
|
||||||
|
+ ('0644', '0640')))
|
||||||
|
|
||||||
|
for globpath in glob.glob("%s/debug*.log" % paths.TOMCAT_CA_DIR):
|
||||||
|
self.files.append(
|
||||||
|
(globpath, constants.PKI_USER, constants.PKI_GROUP,
|
||||||
|
- "0644", "0640")
|
||||||
|
+ ("0644", "0640"))
|
||||||
|
)
|
||||||
|
|
||||||
|
for globpath in glob.glob(
|
||||||
|
diff --git a/tests/test_core_files.py b/tests/test_core_files.py
|
||||||
|
index 6e3ec38..09fc216 100644
|
||||||
|
--- a/tests/test_core_files.py
|
||||||
|
+++ b/tests/test_core_files.py
|
||||||
|
@@ -2,14 +2,22 @@
|
||||||
|
# Copyright (C) 2019 FreeIPA Contributors see COPYING for license
|
||||||
|
#
|
||||||
|
|
||||||
|
+from ldap import OPT_X_SASL_SSF_MIN
|
||||||
|
import pwd
|
||||||
|
import posix
|
||||||
|
+from util import m_api
|
||||||
|
+from util import capture_results
|
||||||
|
+
|
||||||
|
+from ipahealthcheck.core import config
|
||||||
|
from ipahealthcheck.core.files import FileCheck
|
||||||
|
from ipahealthcheck.core import constants
|
||||||
|
from ipahealthcheck.core.plugin import Results
|
||||||
|
+from ipahealthcheck.ipa.files import IPAFileCheck
|
||||||
|
+from ipahealthcheck.system.plugin import registry
|
||||||
|
from unittest.mock import patch
|
||||||
|
+from ipapython.dn import DN
|
||||||
|
+from ipapython.ipaldap import LDAPClient, LDAPEntry
|
||||||
|
|
||||||
|
-from util import capture_results
|
||||||
|
|
||||||
|
nobody = pwd.getpwnam('nobody')
|
||||||
|
|
||||||
|
@@ -20,6 +28,37 @@ files = (('foo', 'root', 'root', '0660'),
|
||||||
|
('fiz', ('root', 'bin'), ('root', 'bin'), '0664'),
|
||||||
|
('zap', ('root', 'bin'), ('root', 'bin'), ('0664', '0640'),))
|
||||||
|
|
||||||
|
+bad_modes = (('biz', ('root', 'bin'), ('root', 'bin'), '0664', '0640'),)
|
||||||
|
+
|
||||||
|
+
|
||||||
|
+class mock_ldap:
|
||||||
|
+ SCOPE_BASE = 1
|
||||||
|
+ SCOPE_ONELEVEL = 2
|
||||||
|
+ SCOPE_SUBTREE = 4
|
||||||
|
+
|
||||||
|
+ def __init__(self, ldapentry):
|
||||||
|
+ """Initialize the results that we will return from get_entries"""
|
||||||
|
+ self.results = ldapentry
|
||||||
|
+
|
||||||
|
+ def get_entry(self, dn, attrs_list=None, time_limit=None,
|
||||||
|
+ size_limit=None, get_effective_rights=False):
|
||||||
|
+ return [] # the call doesn't check the value
|
||||||
|
+
|
||||||
|
+
|
||||||
|
+class mock_ldap_conn:
|
||||||
|
+ def set_option(self, option, invalue):
|
||||||
|
+ pass
|
||||||
|
+
|
||||||
|
+ def get_option(self, option):
|
||||||
|
+ if option == OPT_X_SASL_SSF_MIN:
|
||||||
|
+ return 256
|
||||||
|
+
|
||||||
|
+ return None
|
||||||
|
+
|
||||||
|
+ def search_s(self, base, scope, filterstr=None,
|
||||||
|
+ attrlist=None, attrsonly=0):
|
||||||
|
+ return tuple()
|
||||||
|
+
|
||||||
|
|
||||||
|
def make_stat(mode=33200, uid=0, gid=0):
|
||||||
|
"""Return a mocked-up stat.
|
||||||
|
@@ -197,3 +236,33 @@ def test_files_not_found(mock_exists):
|
||||||
|
for result in my_results.results:
|
||||||
|
assert result.result == constants.SUCCESS
|
||||||
|
assert result.kw.get('msg') == 'File does not exist'
|
||||||
|
+
|
||||||
|
+
|
||||||
|
+def test_bad_modes():
|
||||||
|
+ f = FileCheck()
|
||||||
|
+ f.files = bad_modes
|
||||||
|
+
|
||||||
|
+ results = capture_results(f)
|
||||||
|
+
|
||||||
|
+ for result in results.results:
|
||||||
|
+ assert result.result == constants.ERROR
|
||||||
|
+ assert result.kw.get('msg') == 'Code format is incorrect for file'
|
||||||
|
+
|
||||||
|
+
|
||||||
|
+@patch('ipaserver.install.krbinstance.is_pkinit_enabled')
|
||||||
|
+def test_ipa_files_format(mock_pkinit):
|
||||||
|
+ mock_pkinit.return_value = True
|
||||||
|
+
|
||||||
|
+ fake_conn = LDAPClient('ldap://localhost', no_schema=True)
|
||||||
|
+ ldapentry = LDAPEntry(fake_conn, DN(m_api.env.container_dns,
|
||||||
|
+ m_api.env.basedn))
|
||||||
|
+ framework = object()
|
||||||
|
+ registry.initialize(framework, config.Config)
|
||||||
|
+ f = IPAFileCheck(registry)
|
||||||
|
+
|
||||||
|
+ f.conn = mock_ldap(ldapentry)
|
||||||
|
+
|
||||||
|
+ results = capture_results(f)
|
||||||
|
+
|
||||||
|
+ for result in results.results:
|
||||||
|
+ assert result.result == constants.SUCCESS
|
||||||
|
diff --git a/tests/util.py b/tests/util.py
|
||||||
|
index 8081595..5dcb0cd 100644
|
||||||
|
--- a/tests/util.py
|
||||||
|
+++ b/tests/util.py
|
||||||
|
@@ -140,6 +140,7 @@ m_api.env.container_host = DN(('cn', 'computers'), ('cn', 'accounts'))
|
||||||
|
m_api.env.container_sysaccounts = DN(('cn', 'sysaccounts'), ('cn', 'etc'))
|
||||||
|
m_api.env.container_service = DN(('cn', 'services'), ('cn', 'accounts'))
|
||||||
|
m_api.env.container_masters = DN(('cn', 'masters'))
|
||||||
|
+m_api.env.container_dns = DN(('cn', 'dns'))
|
||||||
|
m_api.Backend = Mock()
|
||||||
|
m_api.Command = Mock()
|
||||||
|
m_api.Command.ping.return_value = {
|
||||||
|
--
|
||||||
|
2.45.0
|
||||||
|
|
||||||
@ -0,0 +1,28 @@
|
|||||||
|
From 79cca342b3c440a045cadbff871ff977e35222c6 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Rob Crittenden <rcritten@redhat.com>
|
||||||
|
Date: Thu, 20 Jun 2024 14:27:16 -0400
|
||||||
|
Subject: [PATCH] Allow WARNING in the files test
|
||||||
|
|
||||||
|
We are only validating the format and don't need to actually
|
||||||
|
enforce the results in CI. The validation raises ERROR.
|
||||||
|
|
||||||
|
Related: https://github.com/freeipa/freeipa-healthcheck/issues/325
|
||||||
|
|
||||||
|
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
|
||||||
|
---
|
||||||
|
tests/test_core_files.py | 2 +-
|
||||||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/tests/test_core_files.py b/tests/test_core_files.py
|
||||||
|
index e7010a9..d308410 100644
|
||||||
|
--- a/tests/test_core_files.py
|
||||||
|
+++ b/tests/test_core_files.py
|
||||||
|
@@ -302,4 +302,4 @@ def test_ipa_files_format(mock_pkinit):
|
||||||
|
results = capture_results(f)
|
||||||
|
|
||||||
|
for result in results.results:
|
||||||
|
- assert result.result == constants.SUCCESS
|
||||||
|
+ assert result.result in (constants.SUCCESS, constants.WARNING)
|
||||||
|
--
|
||||||
|
2.45.0
|
||||||
|
|
||||||
@ -1,324 +0,0 @@
|
|||||||
%if 0%{?rhel}
|
|
||||||
%global prefix ipa
|
|
||||||
%global productname IPA
|
|
||||||
%global alt_prefix freeipa
|
|
||||||
%else
|
|
||||||
# Fedora
|
|
||||||
%global prefix freeipa
|
|
||||||
%global productname FreeIPA
|
|
||||||
%global alt_prefix ipa
|
|
||||||
%endif
|
|
||||||
%global debug_package %{nil}
|
|
||||||
%global python3dir %{_builddir}/python3-%{name}-%{version}-%{release}
|
|
||||||
%{!?python3_sitelib: %global python3_sitelib %(%{__python3} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
|
|
||||||
%global alt_name %{alt_prefix}-healthcheck
|
|
||||||
|
|
||||||
%bcond_without tests
|
|
||||||
|
|
||||||
Name: %{prefix}-healthcheck
|
|
||||||
Version: 0.12
|
|
||||||
Release: 4%{?dist}
|
|
||||||
Summary: Health check tool for %{productname}
|
|
||||||
BuildArch: noarch
|
|
||||||
License: GPLv3
|
|
||||||
URL: https://github.com/freeipa/freeipa-healthcheck
|
|
||||||
Source0: https://github.com/freeipa/freeipa-healthcheck/archive/%{version}.tar.gz
|
|
||||||
Source1: ipahealthcheck.conf
|
|
||||||
|
|
||||||
Patch0001: 0001-Remove-ipaclustercheck.patch
|
|
||||||
Patch0002: 0002-Disable-two-failing-tests.patch
|
|
||||||
Patch0003: 0003-Skip-AD-domains-with-posix-ranges-in-the-catalog-che.patch
|
|
||||||
Patch0004: 0004-Catch-exceptions-during-user-group-name-lookup-in-Fi.patch
|
|
||||||
Patch0005: 0005-Don-t-error-in-DogtagCertsConnectivityCheck-with-ext.patch
|
|
||||||
|
|
||||||
Requires: %{name}-core = %{version}-%{release}
|
|
||||||
Requires: %{prefix}-server
|
|
||||||
Requires: python3-ipalib
|
|
||||||
Requires: python3-ipaserver
|
|
||||||
Requires: python3-lib389 >= 1.4.2.14-1
|
|
||||||
# cronie-anacron provides anacron
|
|
||||||
Requires: anacron
|
|
||||||
Requires: logrotate
|
|
||||||
Requires(post): systemd-units
|
|
||||||
Requires: %{name}-core = %{version}-%{release}
|
|
||||||
BuildRequires: python3-devel
|
|
||||||
BuildRequires: python3-setuptools
|
|
||||||
BuildRequires: systemd-devel
|
|
||||||
%{?systemd_requires}
|
|
||||||
# packages for make check
|
|
||||||
%if %{with tests}
|
|
||||||
BuildRequires: python3-pytest
|
|
||||||
BuildRequires: python3-ipalib
|
|
||||||
BuildRequires: python3-ipaserver
|
|
||||||
%endif
|
|
||||||
BuildRequires: python3-lib389
|
|
||||||
BuildRequires: python3-libsss_nss_idmap
|
|
||||||
|
|
||||||
# Cross-provides for sibling OS
|
|
||||||
Provides: %{alt_name} = %{version}
|
|
||||||
Conflicts: %{alt_name}
|
|
||||||
Obsoletes: %{alt_name} < %{version}
|
|
||||||
|
|
||||||
%description
|
|
||||||
The %{productname} health check tool provides a set of checks to
|
|
||||||
proactively detect defects in a FreeIPA cluster.
|
|
||||||
|
|
||||||
|
|
||||||
%package -n %{name}-core
|
|
||||||
Summary: Core plugin system for healthcheck
|
|
||||||
|
|
||||||
# Cross-provides for sibling OS
|
|
||||||
Provides: %{alt_name}-core = %{version}
|
|
||||||
Conflicts: %{alt_name}-core
|
|
||||||
Obsoletes: %{alt_name}-core < %{version}
|
|
||||||
|
|
||||||
|
|
||||||
%description -n %{name}-core
|
|
||||||
Core plugin system for healthcheck, usable standalone with other
|
|
||||||
packages.
|
|
||||||
|
|
||||||
|
|
||||||
%prep
|
|
||||||
%autosetup -p1 -n freeipa-healthcheck-%{version}
|
|
||||||
|
|
||||||
|
|
||||||
%build
|
|
||||||
%py3_build
|
|
||||||
|
|
||||||
|
|
||||||
%install
|
|
||||||
%py3_install
|
|
||||||
|
|
||||||
mkdir -p %{buildroot}%{_sysconfdir}/ipahealthcheck
|
|
||||||
install -m644 %{SOURCE1} %{buildroot}%{_sysconfdir}/ipahealthcheck
|
|
||||||
|
|
||||||
mkdir -p %{buildroot}/%{_unitdir}
|
|
||||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/systemd/ipa-healthcheck.service %{buildroot}%{_unitdir}
|
|
||||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/systemd/ipa-healthcheck.timer %{buildroot}%{_unitdir}
|
|
||||||
|
|
||||||
mkdir -p %{buildroot}/%{_libexecdir}/ipa
|
|
||||||
install -p -m755 %{_builddir}/freeipa-healthcheck-%{version}/systemd/ipa-healthcheck.sh %{buildroot}%{_libexecdir}/ipa/
|
|
||||||
|
|
||||||
mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
|
|
||||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/logrotate/ipahealthcheck %{buildroot}%{_sysconfdir}/logrotate.d
|
|
||||||
|
|
||||||
mkdir -p %{buildroot}/%{_localstatedir}/log/ipa/healthcheck
|
|
||||||
|
|
||||||
mkdir -p %{buildroot}/%{_mandir}/man8
|
|
||||||
mkdir -p %{buildroot}/%{_mandir}/man5
|
|
||||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/man/man8/ipa-healthcheck.8 %{buildroot}%{_mandir}/man8/
|
|
||||||
install -p -m644 %{_builddir}/freeipa-healthcheck-%{version}/man/man5/ipahealthcheck.conf.5 %{buildroot}%{_mandir}/man5/
|
|
||||||
|
|
||||||
(cd %{buildroot}/%{python3_sitelib}/ipahealthcheck && find . -type f | \
|
|
||||||
grep -v '^./core' | \
|
|
||||||
grep -v 'opt-1' | \
|
|
||||||
sed -e 's,\.py.*$,.*,g' | sort -u | \
|
|
||||||
sed -e 's,\./,%%{python3_sitelib}/ipahealthcheck/,g' ) >healthcheck.list
|
|
||||||
|
|
||||||
|
|
||||||
%if %{with tests}
|
|
||||||
%check
|
|
||||||
PYTHONPATH=src PATH=$PATH:$RPM_BUILD_ROOT/usr/bin pytest-3 tests/test_*
|
|
||||||
%endif
|
|
||||||
|
|
||||||
|
|
||||||
%post
|
|
||||||
%systemd_post ipa-healthcheck.service
|
|
||||||
|
|
||||||
|
|
||||||
%preun
|
|
||||||
%systemd_preun ipa-healthcheck.service
|
|
||||||
|
|
||||||
|
|
||||||
%postun
|
|
||||||
%systemd_postun_with_restart ipa-healthcheck.service
|
|
||||||
|
|
||||||
|
|
||||||
%files -f healthcheck.list
|
|
||||||
%{!?_licensedir:%global license %%doc}
|
|
||||||
%license COPYING
|
|
||||||
%doc README.md
|
|
||||||
%{_bindir}/ipa-healthcheck
|
|
||||||
%dir %{_sysconfdir}/ipahealthcheck
|
|
||||||
%dir %{_localstatedir}/log/ipa/healthcheck
|
|
||||||
%config(noreplace) %{_sysconfdir}/ipahealthcheck/ipahealthcheck.conf
|
|
||||||
%config(noreplace) %{_sysconfdir}/logrotate.d/ipahealthcheck
|
|
||||||
%{python3_sitelib}/ipahealthcheck-%{version}-*.egg-info/
|
|
||||||
%{python3_sitelib}/ipahealthcheck-%{version}-*-nspkg.pth
|
|
||||||
%{_unitdir}/*
|
|
||||||
%{_libexecdir}/*
|
|
||||||
%{_mandir}/man8/*
|
|
||||||
%{_mandir}/man5/*
|
|
||||||
|
|
||||||
|
|
||||||
%files -n %{name}-core
|
|
||||||
%{!?_licensedir:%global license %%doc}
|
|
||||||
%license COPYING
|
|
||||||
%doc README.md
|
|
||||||
%{python3_sitelib}/ipahealthcheck/core/
|
|
||||||
|
|
||||||
|
|
||||||
%changelog
|
|
||||||
* Mon Jul 24 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-4
|
|
||||||
- Error in DogtagCertsConnectivityCheckCA with external CA (#2224595)
|
|
||||||
|
|
||||||
* Thu Jul 06 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-3
|
|
||||||
- Catch exceptions during user/group name lookup in FileCheck (#2218912)
|
|
||||||
|
|
||||||
* Tue Apr 25 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-2
|
|
||||||
- Skip AD domains with posix ranges in the catalog check (#2188135)
|
|
||||||
|
|
||||||
* Thu Dec 01 2022 Rob Crittenden <rcritten@redhat.com> - 0.12-1
|
|
||||||
- Update to upstream 0.12 (#2139531)
|
|
||||||
|
|
||||||
* Wed Jul 06 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-9
|
|
||||||
- Add support for the DNS URI type (#2104495)
|
|
||||||
|
|
||||||
* Wed May 18 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-8
|
|
||||||
- Validate that a known output type has been selected (#2079698)
|
|
||||||
|
|
||||||
* Wed May 04 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-7
|
|
||||||
- debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
|
|
||||||
- Validate value formats in the ipahealthcheck.conf file (#2079739)
|
|
||||||
- Validate output_type options from ipahealthcheck.conf file (#2079698)
|
|
||||||
|
|
||||||
* Thu Apr 28 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-6
|
|
||||||
- Allow multiple file modes in the FileChecker (#2072708)
|
|
||||||
|
|
||||||
* Wed Apr 06 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-5
|
|
||||||
- Add CLI options to healthcheck configuration file (#2070981)
|
|
||||||
|
|
||||||
* Wed Mar 30 2022 Rob Crittenden <rcritten@redhat.com> - 0.9-4
|
|
||||||
- Use the subject base from the IPA configuration, not REALM (#2067213)
|
|
||||||
|
|
||||||
* Tue Oct 12 2021 Rob Crittenden <rcritten@redhat.com> - 0.9-3
|
|
||||||
- IPATrustControllerServiceCheck doesn't handle HIDDEN_SERVICE (#1976878)
|
|
||||||
|
|
||||||
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 0.9-2
|
|
||||||
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
||||||
Related: rhbz#1991688
|
|
||||||
|
|
||||||
* Thu Jun 17 2021 Rob Crittenden <rcritten@redhat.com> - 0.9-1
|
|
||||||
- Rebase to upstream 0.9 (#1969539)
|
|
||||||
|
|
||||||
* Thu Apr 22 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-7.2
|
|
||||||
- rpminspect: specname match on suffix to allow for differing
|
|
||||||
spec/package naming (#1951733)
|
|
||||||
|
|
||||||
* Mon Apr 19 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-7.1
|
|
||||||
- Switch from tox to pytest as the test runner. tox is being deprecated
|
|
||||||
in some distros. (#1942157)
|
|
||||||
|
|
||||||
* Mon Apr 19 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-7
|
|
||||||
- Add check to validate the KRA Agent is correct (#1894781)
|
|
||||||
|
|
||||||
* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 0.8-6.1
|
|
||||||
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
||||||
|
|
||||||
* Fri Mar 12 2021 Alexander Bokovoy <abokovoy@redhat.com> - 0.8-5.1
|
|
||||||
- Re-enable package self-tests after bootstrap
|
|
||||||
|
|
||||||
* Mon Mar 8 2021 François Cami <fcami@redhat.com> - 0.8-5
|
|
||||||
- Make the spec file distribution-agnostic (rhbz#1935773).
|
|
||||||
|
|
||||||
* Tue Mar 2 2021 Alexander Scheel <ascheel@redhat.com> - 0.8-4
|
|
||||||
- Make the spec file more distribution-agnostic
|
|
||||||
- Use tox as the test runner when tests are enabled
|
|
||||||
|
|
||||||
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.8-3
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
||||||
|
|
||||||
* Mon Jan 18 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-2
|
|
||||||
- A bad file group was reported as a python list, not a string
|
|
||||||
|
|
||||||
* Wed Jan 13 2021 Rob Crittenden <rcritten@redhat.com> - 0.8-1
|
|
||||||
- Update to upstream 0.8
|
|
||||||
- Fix FTBFS in F34/rawhide (#1915256)
|
|
||||||
|
|
||||||
* Wed Dec 16 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-3
|
|
||||||
- Include upstream patch to fix parsing input from json files
|
|
||||||
|
|
||||||
* Tue Nov 17 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-2
|
|
||||||
- Include upstream patch to fix collection of AD trust domains
|
|
||||||
- Include upstream patch to fix failing not-valid-after test
|
|
||||||
|
|
||||||
* Thu Oct 29 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-1
|
|
||||||
- Update to upstream 0.7
|
|
||||||
|
|
||||||
* Wed Jul 29 2020 Rob Crittenden <rcritten@redhat.com> - 0.6-4
|
|
||||||
- Set minimum Requires on python3-lib389
|
|
||||||
- Don't assume that all users of healthcheck-core provide the same
|
|
||||||
set of options.
|
|
||||||
|
|
||||||
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.6-3
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
||||||
|
|
||||||
* Fri Jul 24 2020 Rob Crittenden <rcritten@redhat.com> - 0.6-2
|
|
||||||
- Don't collect IPA servers in MetaCheck
|
|
||||||
- Skip if dirsrv not available in IPAMetaCheck
|
|
||||||
|
|
||||||
* Wed Jul 1 2020 Rob Crittenden <rcritten@redhat.com> - 0.6-1
|
|
||||||
- Update to upstream 0.6
|
|
||||||
- Don't include cluster checking yet
|
|
||||||
|
|
||||||
* Tue Jun 23 2020 Rob Crittenden <rcritten@redhat.com> - 0.5-5
|
|
||||||
- Add BuildRequires on python3-setuptools
|
|
||||||
|
|
||||||
* Tue May 26 2020 Miro Hrončok <mhroncok@redhat.com> - 0.5-4
|
|
||||||
- Rebuilt for Python 3.9
|
|
||||||
|
|
||||||
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.5-3
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
||||||
|
|
||||||
* Mon Jan 27 2020 Rob Crittenden <rcritten@redhat.com> - 0.5-2
|
|
||||||
- Rebuild
|
|
||||||
|
|
||||||
* Thu Jan 2 2020 Rob Crittenden <rcritten@redhat.com> - 0.5-1
|
|
||||||
- Update to upstream 0.5
|
|
||||||
|
|
||||||
* Mon Dec 2 2019 François Cami <fcami@redhat.com> - 0.4-2
|
|
||||||
- Create subpackage to split out core processing (#1771710)
|
|
||||||
|
|
||||||
* Mon Dec 2 2019 François Cami <fcami@redhat.com> - 0.4-1
|
|
||||||
- Update to upstream 0.4
|
|
||||||
- Change Source0 to something "spectool -g" can use.
|
|
||||||
- Correct URL (#1773512)
|
|
||||||
- Errors not translated to strings (#1752849)
|
|
||||||
- JSON output not indented by default (#1729043)
|
|
||||||
- Add dependencies to checks to avoid false-positives (#1727900)
|
|
||||||
- Verify expected DNS records (#1695125
|
|
||||||
|
|
||||||
* Thu Oct 03 2019 Miro Hrončok <mhroncok@redhat.com> - 0.3-3
|
|
||||||
- Rebuilt for Python 3.8.0rc1 (#1748018)
|
|
||||||
|
|
||||||
* Mon Aug 19 2019 Miro Hrončok <mhroncok@redhat.com> - 0.3-2
|
|
||||||
- Rebuilt for Python 3.8
|
|
||||||
|
|
||||||
* Thu Jul 25 2019 François Cami <fcami@redhat.com> - 0.3-1
|
|
||||||
- Update to upstream 0.3
|
|
||||||
- Add logrotate configs + depend on anacron and logrotate
|
|
||||||
|
|
||||||
* Thu Jul 25 2019 François Cami <fcami@redhat.com> - 0.2-6
|
|
||||||
- Fix permissions
|
|
||||||
|
|
||||||
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 0.2-5
|
|
||||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
||||||
|
|
||||||
* Thu Jul 11 2019 François Cami <fcami@redhat.com> - 0.2-4
|
|
||||||
- Fix ipa-healthcheck.sh installation path (rhbz#1729188)
|
|
||||||
- Create and own log directory (rhbz#1729188)
|
|
||||||
|
|
||||||
* Tue Apr 30 2019 François Cami <fcami@redhat.com> - 0.2-3
|
|
||||||
- Add python3-lib389 to BRs
|
|
||||||
|
|
||||||
* Tue Apr 30 2019 François Cami <fcami@redhat.com> - 0.2-2
|
|
||||||
- Fix changelog
|
|
||||||
|
|
||||||
* Thu Apr 25 2019 Rob Crittenden <rcritten@redhat.com> - 0.2-1
|
|
||||||
- Update to upstream 0.2
|
|
||||||
|
|
||||||
* Thu Apr 4 2019 François Cami <fcami@redhat.com> - 0.1-2
|
|
||||||
- Explicitly list dependencies
|
|
||||||
|
|
||||||
* Tue Apr 2 2019 François Cami <fcami@redhat.com> - 0.1-1
|
|
||||||
- Initial package import
|
|
||||||
@ -0,0 +1,261 @@
|
|||||||
|
%global project freeipa
|
||||||
|
%global shortname healthcheck
|
||||||
|
%global longname ipa%{shortname}
|
||||||
|
%global debug_package %{nil}
|
||||||
|
%global python3dir %{_builddir}/python3-%{name}-%{version}-%{release}
|
||||||
|
%{!?python3_sitelib: %global python3_sitelib %(%{__python3} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
|
||||||
|
|
||||||
|
|
||||||
|
Name: ipa-healthcheck
|
||||||
|
Version: 0.12
|
||||||
|
Release: 4%{?dist}
|
||||||
|
Summary: Health check tool for IdM
|
||||||
|
BuildArch: noarch
|
||||||
|
License: GPLv3
|
||||||
|
URL: https://github.com/%{project}/freeipa-healthcheck
|
||||||
|
Source0: https://github.com/%{project}/%{name}/archive/%{version}.tar.gz#/%{version}.tar.gz
|
||||||
|
Source1: %{longname}.conf
|
||||||
|
|
||||||
|
Patch0001: 0001-Remove-ipaclustercheck.patch
|
||||||
|
Patch0002: 0002-Disable-two-failing-tests.patch
|
||||||
|
Patch0003: 0003-Fix-logging-issue-related-to-dtype.patch
|
||||||
|
Patch0004: 0004-Skip-AD-domains-with-posix-ranges-in-the-catalog-che.patch
|
||||||
|
Patch0005: 0005-Don-t-error-in-DogtagCertsConnectivityCheck-with-ext.patch
|
||||||
|
Patch0006: 0006-Fixes-log-file-permissions-as-per-CIS-benchmark.patch
|
||||||
|
Patch0007: 0007-Fix-some-file-mode-format-issues.patch
|
||||||
|
Patch0008: 0008-Allow-WARNING-in-the-files-test.patch
|
||||||
|
|
||||||
|
Requires: %{name}-core = %{version}-%{release}
|
||||||
|
Requires: ipa-server
|
||||||
|
Requires: python3-ipalib
|
||||||
|
Requires: python3-ipaserver
|
||||||
|
Requires: python3-lib389
|
||||||
|
# cronie-anacron provides anacron
|
||||||
|
Requires: anacron
|
||||||
|
Requires: logrotate
|
||||||
|
Requires(post): systemd-units
|
||||||
|
Requires: %{name}-core = %{version}-%{release}
|
||||||
|
BuildRequires: python3-devel
|
||||||
|
BuildRequires: systemd-devel
|
||||||
|
%{?systemd_requires}
|
||||||
|
|
||||||
|
|
||||||
|
%description
|
||||||
|
The FreeIPA health check tool provides a set of checks to
|
||||||
|
proactively detect defects in a FreeIPA cluster.
|
||||||
|
|
||||||
|
%package -n %{name}-core
|
||||||
|
Summary: Core plugin system for healthcheck
|
||||||
|
# No Requires on %%{name} = %%{version}-%%{release} since this can be
|
||||||
|
# installed standalone
|
||||||
|
Conflicts: %{name} < 0.4
|
||||||
|
|
||||||
|
%description -n %{name}-core
|
||||||
|
Core files
|
||||||
|
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%autosetup -p1 -n %{project}-%{shortname}-%{version}
|
||||||
|
|
||||||
|
|
||||||
|
%build
|
||||||
|
%py3_build
|
||||||
|
|
||||||
|
|
||||||
|
%install
|
||||||
|
%py3_install
|
||||||
|
|
||||||
|
mkdir -p %{buildroot}%{_sysconfdir}/%{longname}
|
||||||
|
install -m644 %{SOURCE1} %{buildroot}%{_sysconfdir}/%{longname}
|
||||||
|
|
||||||
|
mkdir -p %{buildroot}/%{_unitdir}
|
||||||
|
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/systemd/ipa-%{shortname}.service %{buildroot}%{_unitdir}
|
||||||
|
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/systemd/ipa-%{shortname}.timer %{buildroot}%{_unitdir}
|
||||||
|
|
||||||
|
mkdir -p %{buildroot}/%{_libexecdir}/ipa
|
||||||
|
install -p -m755 %{_builddir}/%{project}-%{shortname}-%{version}/systemd/ipa-%{shortname}.sh %{buildroot}%{_libexecdir}/ipa/
|
||||||
|
|
||||||
|
mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
|
||||||
|
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/logrotate/%{longname} %{buildroot}%{_sysconfdir}/logrotate.d
|
||||||
|
|
||||||
|
mkdir -p %{buildroot}/%{_localstatedir}/log/ipa/%{shortname}
|
||||||
|
|
||||||
|
mkdir -p %{buildroot}/%{_mandir}/man8
|
||||||
|
mkdir -p %{buildroot}/%{_mandir}/man5
|
||||||
|
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/man/man8/ipa-%{shortname}.8 %{buildroot}%{_mandir}/man8/
|
||||||
|
install -p -m644 %{_builddir}/%{project}-%{shortname}-%{version}/man/man5/%{longname}.conf.5 %{buildroot}%{_mandir}/man5/
|
||||||
|
|
||||||
|
(cd %{buildroot}/%{python3_sitelib}/ipahealthcheck && find . -type f | \
|
||||||
|
grep -v '^./core' | \
|
||||||
|
grep -v 'opt-1' | \
|
||||||
|
sed -e 's,\.py.*$,.*,g' | sort -u | \
|
||||||
|
sed -e 's,\./,%%{python3_sitelib}/ipahealthcheck/,g' ) >healthcheck.list
|
||||||
|
|
||||||
|
%post
|
||||||
|
%systemd_post ipa-%{shortname}.service
|
||||||
|
|
||||||
|
|
||||||
|
%preun
|
||||||
|
%systemd_preun ipa-%{shortname}.service
|
||||||
|
|
||||||
|
|
||||||
|
%postun
|
||||||
|
%systemd_postun_with_restart ipa-%{shortname}.service
|
||||||
|
|
||||||
|
|
||||||
|
%files -f healthcheck.list
|
||||||
|
%{!?_licensedir:%global license %%doc}
|
||||||
|
%license COPYING
|
||||||
|
%doc README.md
|
||||||
|
%{_bindir}/ipa-%{shortname}
|
||||||
|
%dir %{_sysconfdir}/%{longname}
|
||||||
|
%dir %{_localstatedir}/log/ipa/%{shortname}
|
||||||
|
%config(noreplace) %{_sysconfdir}/%{longname}/%{longname}.conf
|
||||||
|
%config(noreplace) %{_sysconfdir}/logrotate.d/%{longname}
|
||||||
|
%{python3_sitelib}/%{longname}-%{version}-*.egg-info/
|
||||||
|
%{python3_sitelib}/%{longname}-%{version}-*-nspkg.pth
|
||||||
|
%{_unitdir}/*
|
||||||
|
%{_libexecdir}/*
|
||||||
|
%{_mandir}/man8/*
|
||||||
|
%{_mandir}/man5/*
|
||||||
|
|
||||||
|
%files -n %{name}-core
|
||||||
|
%{!?_licensedir:%global license %%doc}
|
||||||
|
%license COPYING
|
||||||
|
%doc README.md
|
||||||
|
%{python3_sitelib}/%{longname}/core/
|
||||||
|
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Fri Jun 21 2024 Rob Crittenden <rcritten@redhat.com> - 0.12-4
|
||||||
|
- Change log file permissions of IPA as per CIS benchmark (RHEL-38929)
|
||||||
|
|
||||||
|
* Mon Jul 24 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-3
|
||||||
|
- Error in DogtagCertsConnectivityCheckCA with external CA (#2223942)
|
||||||
|
|
||||||
|
* Wed May 03 2023 Rob Crittenden <rcritten@redhat.com> - 0.12-2
|
||||||
|
- Skip AD domains with posix ranges in the catalog check (#1775199)
|
||||||
|
|
||||||
|
* Thu Dec 01 2022 Rob Crittenden <rcritten@redhat.com> - 0.12-1
|
||||||
|
- Update to upstream 0.12 (#2139529)
|
||||||
|
- Verify that the number of krb5kdc worker processes is aligned to the
|
||||||
|
number of configured CPUs (#2052930)
|
||||||
|
- IPADNSSystemRecordsCheck displays warning message for 2 expected
|
||||||
|
ipa-ca AAAA records (#2099484)
|
||||||
|
|
||||||
|
* Wed May 25 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-14
|
||||||
|
- Add CLI options to healthcheck configuration file (#1872467)
|
||||||
|
|
||||||
|
* Fri Apr 29 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-13
|
||||||
|
- Allow multiple file modes in the FileChecker (#2058239)
|
||||||
|
|
||||||
|
* Thu Mar 31 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-12
|
||||||
|
- Use the subject base from the IPA configuration, not REALM (#2066308)
|
||||||
|
|
||||||
|
* Fri Mar 18 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-11
|
||||||
|
- Add support for the DNS URI type (#2037847)
|
||||||
|
|
||||||
|
* Thu Feb 17 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-10
|
||||||
|
- Don't depend on IPA status when suppressing pki checks (#2055316)
|
||||||
|
|
||||||
|
* Mon Jan 17 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-9
|
||||||
|
- Don't assume the entry_point order when determining if there is a
|
||||||
|
CA installed (#2041995)
|
||||||
|
|
||||||
|
* Thu Jan 06 2022 Rob Crittenden <rcritten@redhat.com> - 0.7-8
|
||||||
|
- Suppress the CRLManager check false positive when a CA is not
|
||||||
|
configured (#1983060)
|
||||||
|
- Fix the backport of the pki.server.healthcheck suppression (#1983060)
|
||||||
|
|
||||||
|
* Thu Oct 07 2021 Rob Crittenden <rcritten@redhat.com> - 0.7-7
|
||||||
|
- ipa-healthcheck command takes some extra time to complete when dirsrv
|
||||||
|
instance is stopped (#1776687)
|
||||||
|
- ipa-healthcheck complains about pki.server.healthcheck errors even CA
|
||||||
|
is not configured on the replica (#1983060)
|
||||||
|
|
||||||
|
* Mon Jun 14 2021 Rob Crittenden <rcritten@redhat.com> - 0.7-6
|
||||||
|
- Fix patch fuzz issues, apply add'l upstream for log files (#1780020)
|
||||||
|
|
||||||
|
* Wed Jun 2 2021 Rob Crittenden <rcritten@redhat.com> - 0.7-5
|
||||||
|
- Return a user-friendly message when no issues are found (#1780062)
|
||||||
|
- Report on FIPS status (#1781107)
|
||||||
|
- Detect mismatches beteween certificates in LDAP and filesystem (#1886770)
|
||||||
|
- Verify owner/perms for important log files (#1780020)
|
||||||
|
|
||||||
|
* Tue Apr 6 2021 Rob Crittenden <rcritten@redhat.com> - 0.7-4
|
||||||
|
- Add check to validate the KRA Agent is correct (#1894781)
|
||||||
|
|
||||||
|
* Fri Dec 4 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-3
|
||||||
|
- Translate result names when reading input from a json file (#1866558)
|
||||||
|
|
||||||
|
* Tue Nov 3 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-2
|
||||||
|
- Fix collection of AD trust domains (#1891505)
|
||||||
|
|
||||||
|
* Tue Nov 3 2020 Rob Crittenden <rcritten@redhat.com> - 0.7-1
|
||||||
|
- Update to upstream 0.7 (#1891850)
|
||||||
|
- Include Directory Server healthchecks (#1824193)
|
||||||
|
- Document that default output format is JSON (#1780328)
|
||||||
|
- Fix return value on exit with --input-file (#1866558)
|
||||||
|
- Fix examples in man page (#1809215)
|
||||||
|
- Replace man page reference to output-format with output-type (#1780303)
|
||||||
|
- Add dependencies on services to avoid false positives (#1780510)
|
||||||
|
|
||||||
|
* Wed Aug 19 2020 Rob Crittenden <rcritten@redhat.com> - 0.4-6
|
||||||
|
- The core subpackage can be installed standalone, drop the Requires
|
||||||
|
on the base package. (#1852244)
|
||||||
|
- Add Conflicts < 0.4 to to core to allow downgrading with
|
||||||
|
--allowerasing (#1852244)
|
||||||
|
|
||||||
|
* Tue Aug 4 2020 Rob Crittenden <rcritten@redhat.com> - 0.4-5
|
||||||
|
- Remove the Obsoletes < 0.4 and add same-version Requires to each
|
||||||
|
subpackage so that upgrades from 0.3 will work (#1852244)
|
||||||
|
|
||||||
|
* Thu Jan 16 2020 Rob Crittenden <rcritten@redhat.com> - 0.4-4
|
||||||
|
- Allow plugins to read contents from config during initialization (#1784037)
|
||||||
|
|
||||||
|
* Thu Dec 5 2019 Rob Crittenden <rcritten@redhat.com> - 0.4-3
|
||||||
|
- Add Obsoletes to core subpackage (#1780121)
|
||||||
|
|
||||||
|
* Mon Dec 2 2019 Rob Crittenden <rcritten@redhat.com> - 0.4-2
|
||||||
|
- Abstract processing so core package is standalone (#1771710)
|
||||||
|
|
||||||
|
* Mon Dec 2 2019 Rob Crittenden <rcritten@redhat.com> - 0.4-1
|
||||||
|
- Rebase to upstream 0.4 (#1770346)
|
||||||
|
- Create subpackage to split out core processing (#1771710)
|
||||||
|
- Correct URL (#1773512)
|
||||||
|
- Errors not translated to strings (#1752849)
|
||||||
|
- JSON output not indented by default (#1729043)
|
||||||
|
- Add dependencies to checks to avoid false-positives (#1727900)
|
||||||
|
- Verify expected DNS records (#1695125)
|
||||||
|
|
||||||
|
* Mon Aug 12 2019 Rob Crittenden <rcritten@redhat.com> - 0.3-4
|
||||||
|
- Lookup AD user by SID and not by hardcoded username (#1739500)
|
||||||
|
|
||||||
|
* Thu Aug 8 2019 Rob Crittenden <rcritten@redhat.com> - 0.3-3
|
||||||
|
- The AD trust agent and controller are not being initialized (#1738314)
|
||||||
|
|
||||||
|
* Mon Aug 5 2019 Rob Crittenden <rcritten@redhat.com> - 0.3-2
|
||||||
|
- Change DNA plugin to return WARNING if no range is set (#1737492)
|
||||||
|
|
||||||
|
* Mon Jul 29 2019 François Cami <fcami@redhat.com> - 0.3-1
|
||||||
|
- Update to upstream 0.3 (#1701351)
|
||||||
|
- Add logrotate configs + depend on anacron and logrotate (#1729207)
|
||||||
|
|
||||||
|
* Thu Jul 11 2019 François Cami <fcami@redhat.com> - 0.2-4
|
||||||
|
- Fix ipa-healthcheck.sh installation path (rhbz#1729188)
|
||||||
|
- Create and own log directory (rhbz#1729188)
|
||||||
|
|
||||||
|
* Tue Apr 30 2019 François Cami <fcami@redhat.com> - 0.2-3
|
||||||
|
- Add python3-lib389 to BRs
|
||||||
|
|
||||||
|
* Tue Apr 30 2019 François Cami <fcami@redhat.com> - 0.2-2
|
||||||
|
- Fix changelog
|
||||||
|
|
||||||
|
* Thu Apr 25 2019 Rob Crittenden <rcritten@redhat.com> - 0.2-1
|
||||||
|
- Update to upstream 0.2
|
||||||
|
|
||||||
|
* Thu Apr 4 2019 François Cami <fcami@redhat.com> - 0.1-2
|
||||||
|
- Explicitly list dependencies
|
||||||
|
|
||||||
|
* Tue Apr 2 2019 François Cami <fcami@redhat.com> - 0.1-1
|
||||||
|
- Initial package import
|
||||||
Loading…
Reference in new issue