ChangeLog

# ChangeLog for app-admin/bastille
# Copyright 2000-2007 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/app-admin/bastille/ChangeLog,v 1.21 2007/10/28 12:46:02 phreak Exp $

28 Oct 2007; Christian Heim bastille-2.1.1-r1.ebuild,
bastille-2.1.1-r2.ebuild, bastille-2.1.1-r3.ebuild, bastille-3.0.2.ebuild:
Include virtual/logger in RDEPEND, as the initscript already specifies 'need
logger'.

28 Apr 2007; Torsten Veller bastille-3.0.2.ebuild:
Fix *initd, *confd and *envd calls (#17388, #174266)

24 Jan 2007; Marius Mauch bastille-2.1.1-r1.ebuild,
bastille-2.1.1-r2.ebuild, bastille-2.1.1-r3.ebuild, bastille-3.0.2.ebuild:
Replacing einfo with elog

28 Nov 2005; bastille-2.1.1-r1.ebuild,
bastille-2.1.1-r2.ebuild, bastille-2.1.1-r3.ebuild:
Switched from perl-module to perl-app eclass

19 Aug 2005; Bryan Stine bastille-3.0.2.ebuild:
Fix keywords.

*bastille-3.0.2 (31 Jul 2005)

31 Jul 2005; Bryan Stine
+files/bastille-3.0.2-firewall.init, +bastille-3.0.2.ebuild:
Bump to 3.0.2. Major patch updates. Also added new preset configuration
files, based on the retrofitted configs from the original distribution.

21 Apr 2005; Simon Stelling bastille-2.1.1-r3.ebuild:
stable on amd64

*bastille-2.1.1-r3 (05 Apr 2005)

05 Apr 2005; Bryan Stine
+files/bastille-2.1.1-hlist-fix.patch, bastille-2.1.1-r1.ebuild,
bastille-2.1.1-r2.ebuild, +bastille-2.1.1-r3.ebuild:
Added a patch to hopefully fix the left-panel click bug that I've finally
been able to track down. This is a one-liner based on Bastille CVS. This
hopefully fixes bug #62965.

05 Oct 2004; Pieter Van den Abeele
bastille-2.1.1-r1.ebuild, bastille-2.1.1-r2.ebuild:
Masked bastille-2.1.1-r2.ebuild stable for ppc

05 Oct 2004; Pieter Van den Abeele
bastille-2.1.1-r1.ebuild:
Masked bastille-2.1.1-r1.ebuild stable for ppc

10 Jul 2004; Tom Martin bastille-2.1.1-r2.ebuild:
Marked ~amd64, closes #56483.

16 Jun 2004; Bryan Østergaard bastille-2.1.1-r2.ebuild:
Stable on alpha.

23 Mar 2004; Bryan Stine ; bastille-2.1.1-r1.ebuild:
Changing back to x86-only stable. How repoman and myself missed this
disgusting mistake is beyond me.

22 Mar 2004; Bryan Stine bastille-2.1.1-r1.ebuild,
bastille-2.1.1-r2.ebuild, files/bastille-firewall-imap.patch:
Bumped 2.1.1-r1 to stable. Added a patch to replace all 'imap' service
references to 'imap2' for compatibility with /etc/services.

*bastille-2.1.1-r2 (13 Jan 2004)

13 Jan 2004; Bryan Stine bastille-2.1.1-r1.ebuild,
bastille-2.1.1-r2.ebuild: Install the PSAD.pm perl interface module as well.
This fixes bug 36750. Also, removed hppa and mips architectures becuase some
runtime dependencies are not available.

22 Oct 2003; Seemant Kulleen bastille-2.1.1-r1.ebuild,
files/bastille-2.1.1-firewall.init: The 'bastille-firewall' init script has
been 'gentoofied' by Battoussai.

*bastille-2.1.1-r1 (17 Sep 2003)

17 Sep 2003; Seemant Kulleen bastille-2.1.1.ebuild,
metadata.xml: Moved from net-firewall to app-admin.

05 Sep 2003; Seemant Kulleen bastille-2.1.1.ebuild:
Now using the 'X' flag instead of 'tcltk'.

26 Aug 2003; Seemant Kulleen bastille-2.1.1.ebuild:
An updated patch from Battousai. Fixes for the program and config
file locations.

03 Aug 2003; Seemant Kulleen :
Added iptables and logrotate to RDEPEND. Thanks to Wingedone.

02 Aug 2003; bastille-2.1.1.ebuild:
Added support for console only building. Server installs are a place
that I think most admins/users would want the functionality of something
like bastille without having to install X.

*bastille-2.1.1 (02 Aug 2003)

02 Aug 2003; Seemant Kulleen bastille-2.1.1.ebuild,
files/bastille-2.1.1.patch: Initial import.

This was patched heavily to work with Gentoo (gentooficated) by the
venerable: Bryan Stine

Manifest

AUX bastille-2.1.1-firewall.init 1340 RMD160 8cbf5f84f7579b0fab349a6502ef88cfeadd5d1a SHA1 6863a444897e91f2f0c791561dd077faedbfaccd SHA256 26c30596854d42889296c1ffca6d301574e1525d0d2e9096590e1a77dfc1f498
AUX bastille-2.1.1-hlist-fix.patch 463 RMD160 70d37c6b4e0d217cafe0ca84682567f6a80fd039 SHA1 8503ad759c3116893d7b797ee401bb414362a245 SHA256 abea73ee720e040d94fffde09478dc46d0774d2cfe5c2078521ce906167a95b3
AUX bastille-3.0.2-firewall.init 1450 RMD160 0e884c26c33bfdb033d24246bbfc370da3f3d43a SHA1 47561c1ef337edca90c44ec36038128e8aedbb0c SHA256 d4026621bfb3105a03bdbf46d692e18cc203bb4362c86fbe303ca7e9ed2c6002
AUX bastille-firewall-imap.patch 8660 RMD160 d65c3babd5289f4526ebf9b2214b5e55337a3dd8 SHA1 74566c5ddd6bbb0aa11a4731b318244a13f459c1 SHA256 8f26646dbdff1e0ed08cddaf9cc2d28bab7628d6d77db63eec18f0d00f8a6e3e
DIST Bastille-2.1.1.tar.bz2 338227 RMD160 4592c2b88f32fe85bf1e9e7984359fba0abb9693 SHA1 4e040442970912590d953fe0f69340b4194526cb SHA256 70cb45f7eddf7ce46c535952e888e50c2423e9beed1549db74ddebc24ed28127
DIST Bastille-3.0.2.tar.bz2 328161 RMD160 8602b6c5abc3d35c1fe2a956580a22b1147c3592 SHA1 26a47a9e344781a844cfa36cc98890e15589eb5a SHA256 4c916f294fa2168405a475ce0c7197a60bf0e3f814edc3ae95dc42b732c87436
DIST bastille-2.1.1-gentoo-0.1.patch.bz2 15312 RMD160 02986c3430a628fe32ec93ad1dec539a5a9cb345 SHA1 a502b6717971564481151d36e6aeca9271c44c40 SHA256 df5e3381282592a7587622925b77b43660814a2c4eacda77931ca0cd4ef113fb
DIST bastille-3.0.2-gentoo-0.1.patch.bz2 16334 RMD160 64fb3c4801eccf1af1100571813668acb12ae3d6 SHA1 201ce08b5707ed3b73553c51fa50080df3270cd1 SHA256 d9cd942f9c3fdf9489a20005e490380577935729c3cf409155bb3253d51d7277
EBUILD bastille-2.1.1-r3.ebuild 2664 RMD160 fb6e5e7a4bffa76d5761ff4066083ea193285b0b SHA1 825518ff610ed01dafa875f1e714adf3afb62386 SHA256 9c21d7bf26800631ce9b43f0efdeec4da8cfb2fe35fcc6beed71a3d7b8f0f2ca
EBUILD bastille-3.0.2.ebuild 1506 RMD160 d15b015c71e950084d88d6e3cc63b5c69014081c SHA1 5d1923a8e5b59c8c284405d8a9c13b2e5c04dd6a SHA256 00d90d7ca35b7f1f7dfd6d9c059240f47da5db9ebcbcc11e91d562ce7a04dc91
MISC ChangeLog 4349 RMD160 c0f19a228a5f191a680b1bdd56594a1118afd91f SHA1 42599b118ef211d4678b011dbb60ea6b36fefd3b SHA256 fe95ad91e2c2d44ffd1b5d7008006fa7b4af212055570c43bbd2b4088a6f3036
MISC metadata.xml 353 RMD160 6fa2f9e9b45804b19212538831af1d2ac58590ac SHA1 f16c6d969a3d810f1cffac6860453b0324a84bee SHA256 d5c8da8d2eceeb617bd143924f19d893c87ceef621a562c14108c97d81bf433a

bastille-2.1.1-r3.ebuild

# Copyright 1999-2008 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/app-admin/bastille/bastille-2.1.1-r3.ebuild,v 1.6 2008/06/16 15:40:49 drac Exp $

inherit perl-app eutils

PATCHVER=0.1
MY_PN=${PN/b/B}
MY_P=${MY_PN}-${PV}
S=${WORKDIR}/${MY_PN}
DESCRIPTION="Bastille-Linux is a security hardening tool"
HOMEPAGE="http://bastille-linux.org/"
SRC_URI="mirror://sourceforge/${PN}-linux/${MY_P}.tar.bz2
mirror://gentoo/${P}-gentoo-${PATCHVER}.patch.bz2"

LICENSE="GPL-2"
SLOT="0"
KEYWORDS="x86 ppc ~sparc alpha amd64"
IUSE="X"

RDEPEND="net-firewall/iptables
app-admin/logrotate
dev-perl/Curses
net-firewall/psad
X? ( dev-perl/perl-tk )
virtual/logger"

src_unpack() {
unpack ${A}
epatch "${WORKDIR}"/${P}-gentoo-${PATCHVER}.patch
epatch "${FILESDIR}"/bastille-firewall-imap.patch
epatch "${FILESDIR}"/${P}-hlist-fix.patch
}

src_compile() {
cp "${FILESDIR}"/bastille-${PV}-firewall.init ./bastille-firewall

cd "${S}"/psad/Psad.pm
perl-module_src_compile
}

src_install() {
keepdir /var/lock/subsys/${PN}
dodir /etc/Bastille

into /usr
dosbin bastille AutomatedBastille InteractiveBastille \
BastilleBackEnd RevertBastille *.pl

dosym RevertBastille /usr/sbin/UndoBastille

insinto /usr/share/Bastille
doins Questions* Credits bastille-* *.xbm *.config

insinto /usr/share/Bastille
doins Questions.txt Credits complete.xbm incomplete.xbm \
ifup-local hosts.allow

exeinto /usr/share/Bastille
doexe bastille-firewall* bastille-tmpdir* \
bastille-ipchains bastille-netfilter \
firewall/*.sh

perlinfo
insinto ${SITE_LIB}
doins Bastille_Curses.pm
use X && doins Bastille_Tk.pm
insinto ${SITE_LIB}/Curses
doins Curses/Widgets.pm

doman docs/bastille.1m
dodoc docs/* firewall/*.txt

cd "${S}"/Bastille

insinto /usr/lib/Bastille
doins AccountSecurity.pm Apache.pm API.pm OSX_API.pm BootSecurity.pm \
ConfigureMiscPAM.pm DisableUserTools.pm DNS.pm \
FilePermissions.pm FTP.pm Firewall.pm HP_API.pm HP_UX.pm \
IOLoader.pm Patches.pm Logging.pm \
MiscellaneousDaemons.pm PatchDownload.pm Printing.pm \
RemoteAccess.pm SecureInetd.pm Sendmail.pm TMPDIR.pm \
test_AccountSecurity.pm test_Apache.pm test_DNS.pm \
test_FTP.pm test_HP_UX.pm test_MiscellaneousDaemons.pm \
test_SecureInetd.pm test_Sendmail.pm TestAPI.pm IPFilter.pm

# psad interface module
cd "${S}"/psad/Psad.pm
newins Psad.pm PSAD.pm

# Documentation
cd "${S}"
dodoc *.txt BUGS Change* README*
}

pkg_postinst() {
use X || elog "When not using the Tk interface you will need to start use the -c flag when calling ${PN} from command line. example ${PN} -c --os GE1.4"
}

bastille-3.0.2.ebuild

# Copyright 1999-2007 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/app-admin/bastille/bastille-3.0.2.ebuild,v 1.5 2007/10/28 12:46:02 phreak Exp $

inherit eutils

PATCHVER=0.1
MY_PN=${PN/b/B}
MY_P=${MY_PN}-${PV}
S=${WORKDIR}/${MY_PN}
DESCRIPTION="Bastille-Linux is a security hardening tool"
HOMEPAGE="http://bastille-linux.org/"
SRC_URI="mirror://sourceforge/${PN}-linux/${MY_P}.tar.bz2
mirror://gentoo/${P}-gentoo-${PATCHVER}.patch.bz2"

LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~x86 ~ppc ~sparc ~alpha ~amd64"
IUSE="X"

RDEPEND="net-firewall/iptables
app-admin/logrotate
dev-perl/Curses
net-firewall/psad
X? ( dev-perl/perl-tk )
virtual/logger"

src_unpack() {
unpack ${A}
epatch "${WORKDIR}"/${P}-gentoo-${PATCHVER}.patch

cd "${S}"
cp "${FILESDIR}"/bastille-${PV}-firewall.init ./bastille-firewall
chmod a+x Install.sh bastille-ipchains bastille-netfilter
}

src_install() {

cd "${S}"
DESTDIR="${D}" ./Install.sh

# Example configs
cd "${S}"
insinto /usr/share/Bastille
doins *.config

newinitd "${FILESDIR}"/${P}-firewall.init ${PN}-firewall

# Documentation
cd "${S}"
dodoc *.txt BUGS Change* README*
}

pkg_postinst() {
elog "Please be aware that when using the Server Lax, Server Moderate, or"
elog "Server Paranoia configurations, you may need to use InteractiveBastille"
elog "to set any advanced network information, such as masquerading and"
elog "internal interfaces, if you plan to use them."
}

files

metadata.xml




hardened

battousai@gentoo.org

The Bastille Hardening System attempts to "harden" or "tighten" Unix operating systems.