X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=debian%2Frules;h=924bd44aabc76eacea811cfc85e1f2e9aeb3682a;hb=f7c79dbc75bfe66dd77247e219ff57c088e451e2;hp=61508810ebd4ed4b90ff9f08d7e7651bfddcad33;hpb=a4a3f9220d3e22c2dc07396619b97f8134c09788;p=ossec-hids.git diff --git a/debian/rules b/debian/rules index 6150881..924bd44 100755 --- a/debian/rules +++ b/debian/rules @@ -11,6 +11,10 @@ DESTDIR = $(PKGDIR)/var/ossec # OSSEC INSTALL SUBDIRS SUBDIRS = .ssh active-response active-response/bin agentless bin etc etc/shared logs logs/alerts logs/archives logs/firewall queue queue/agent-info queue/agentless queue/alerts queue/diff queue/fts queue/ossec queue/rids queue/rootcheck queue/syscheck rules stats tmp var var/run +###################### hardening ################# + +export DEB_BUILD_HARDENING=1 + ###################### main ###################### build: build-stamp @@ -22,6 +26,9 @@ build-stamp: touch build-stamp +build-arch: build +build-indep: build + clean: dh_testdir dh_testroot @@ -44,7 +51,7 @@ clean: install: build dh_testdir dh_testroot - dh_clean -k + dh_prep dh_installdirs # ugly directory creation @@ -94,7 +101,7 @@ install: build chmod 550 $(DESTDIR)/bin/* chmod 440 $(DESTDIR)/etc/ossec.conf - # fixups: no need for execute bits on files there + # fixups: no need for execute bits on files there find $(DESTDIR)/rules -type f -exec chmod ugo-x '{}' ';' find $(DESTDIR)/etc -type f -exec chmod ugo-x '{}' ';' @@ -116,6 +123,10 @@ install: build # Build architecture-independent files here. binary-indep: build install +# We have nothing to do by default. + +# Build architecture-dependent files here. +binary-arch: build install dh_testdir dh_testroot dh_installchangelogs @@ -132,6 +143,7 @@ binary-indep: build install # dh_installcron # dh_installinfo # dh_undocumented + dh_lintian dh_installman dh_link dh_compress @@ -139,13 +151,10 @@ binary-indep: build install # dh_perl # dh_python dh_installdeb + dh_shlibdeps dh_gencontrol dh_md5sums dh_builddeb -# Build architecture-dependent files here. -binary-arch: build install -# We have nothing to do by default. - binary: binary-indep binary-arch .PHONY: build clean binary-indep binary-arch binary install