diff --git a/system/tiger/README b/system/tiger/README deleted file mode 100644 index 7987151eb2..0000000000 --- a/system/tiger/README +++ /dev/null @@ -1,10 +0,0 @@ -TIGER, or the 'tiger' scripts, is a set of Bourne shell scripts, -C programs and data files which are used to perform a security audit -of UNIX systems. It is designed to hopefully be easy to use, easy to -understand and easy to enhance. - -'tiger' incorporates checks primarily oriented towards Linux integrity -including: md5sums checks installed files, (and it can call AIDE or -Intergrit aswell), analysis of local listening processes, and then some. - -Tiger uses 'chkrootkit' for rootkit scanning if it's present. diff --git a/system/tiger/config/tiger.cron b/system/tiger/config/tiger.cron deleted file mode 100644 index 1e1c2d0c0a..0000000000 --- a/system/tiger/config/tiger.cron +++ /dev/null @@ -1,9 +0,0 @@ -# -# Regular cron jobs for the tiger package -# -# Configuration file -DEFAULT=/etc/default/tiger -# default setting, overriden in the above file -NICETIGER=10 -# -0 * * * * root test -x /usr/sbin/tigercron && { [ -r "$DEFAULT" ] && . "$DEFAULT" ; nice -n$NICETIGER /usr/sbin/tigercron -q ; } diff --git a/system/tiger/config/tiger.ignore b/system/tiger/config/tiger.ignore deleted file mode 100644 index 1f7906789e..0000000000 --- a/system/tiger/config/tiger.ignore +++ /dev/null @@ -1,31 +0,0 @@ -Login ID nobody is disabled, but still has a valid shell \(/bin/sh\) -Login ID mail's home directory \(/var/mail\) has group `mail' write access. -Login ID \w+'s parent directory \(/home\) has group `staff' write access. -Log file /var/log/wtmp permission should be 644 -Log file /var/log/btmp does not exist -Log file /var/run/utmp permission should be 644 -Log file /var/log/loginlog does not exist -Log file /var/log/messages permission should be 640 -The owner of /var/log/wtmp should be root (owned by utmp). -/var/log/wtmp should not have group write. -The owner of /var/run/utmp should be root (owned by utmp). -/var/run/utmp should not have group write. -/var/log/XFree86.0.log should not have world read. -/etc/fstab should not have group read. -/etc/fstab should not have world read. -/etc/inetd.conf should not have group read. -/etc/inetd.conf should not have world read. -/etc/pam.d/sudo should not have world read. -The directory /dev/ataraid resides in a device directory. -The directory /dev/cciss resides in a device directory. -The directory /dev/fd resides in a device directory. -The directory /dev/input resides in a device directory. -The directory /dev/pts resides in a device directory. -The directory /dev/rd resides in a device directory. -The directory /dev/usb resides in a device directory. -The directory /dev/ida resides in a device directory. -/dev/null has world permissions -/dev/ptmx has world permissions -/dev/gpmctl has world permissions -/dev/gpmdata has world permissions -File ".fetchmail-UIDL-cache" in the mail spool, owned by "fetchmail". diff --git a/system/tiger/doinst.sh b/system/tiger/doinst.sh deleted file mode 100644 index ffea98c3ba..0000000000 --- a/system/tiger/doinst.sh +++ /dev/null @@ -1,17 +0,0 @@ -config() { - NEW="$1" - OLD="$(dirname $NEW)/$(basename $NEW .new)" - # If there's no config file by that name, mv it over: - if [ ! -r $OLD ]; then - mv $NEW $OLD - elif [ "$(cat $OLD | md5sum)" = "$(cat $NEW | md5sum)" ]; then - # toss the redundant copy - rm $NEW - fi - # Otherwise, we leave the .new copy for the admin to consider... -} -config etc/tiger/cronrc.new -config etc/tiger/tigerrc.new -config etc/tiger/tiger.ignore.new -config etc/cron.d/tiger.new - diff --git a/system/tiger/patches/tiger-3.2.3-build-fix.diff b/system/tiger/patches/tiger-3.2.3-build-fix.diff deleted file mode 100644 index 28b6985360..0000000000 --- a/system/tiger/patches/tiger-3.2.3-build-fix.diff +++ /dev/null @@ -1,18 +0,0 @@ -diff -ur tiger-3.2.3/util/genmsgidx tiger-3.2.3.new/util/genmsgidx ---- tiger-3.2.3/util/genmsgidx 2008-11-27 23:34:21.000000000 +0100 -+++ tiger-3.2.3.new/util/genmsgidx 2010-09-01 12:43:22.000000000 +0200 -@@ -96,10 +96,10 @@ - haveallof variables BASEDIR || exit 1 - - # Clear idx file and detect error --> $BASEDIR/doc/explain.idx && { -- echo "Error: Cannot write over the index file $BASEDIR/doc/explain.idx. Aborting" -- exit 1 --} -+#> $BASEDIR/doc/explain.idx && { -+# echo "Error: Cannot write over the index file $BASEDIR/doc/explain.idx. Aborting" -+# exit 1 -+#} - - $LS $BASEDIR/doc/*.txt | - while read infile diff --git a/system/tiger/slack-desc b/system/tiger/slack-desc deleted file mode 100644 index e1c51f7e84..0000000000 --- a/system/tiger/slack-desc +++ /dev/null @@ -1,19 +0,0 @@ -# HOW TO EDIT THIS FILE: -# The "handy ruler" below makes it easier to edit a package description. Line -# up the first '|' above the ':' following the base package name, and the '|' -# on the right side marks the last column you can put a character in. You must -# make exactly 11 lines for the formatting to be correct. It's also -# customary to leave one space after the ':'. - - |-----handy-ruler------------------------------------------------------| -tiger: tiger (Report system security vulnerabilities) -tiger: -tiger: TIGER, or the 'tiger' scripts, is a set of Bourne shell scripts, -tiger: C programs and data files which are used to perform a security -tiger: audit of UNIX systems. TIGER has one primary goal: report ways -tiger: 'root' can be compromised. -tiger: -tiger: Originally developed by the A&M campus of the Texas University. -tiger: Currently it is maintained by: Javier Fernandez-Sanguino -tiger: -tiger: diff --git a/system/tiger/tiger.SlackBuild b/system/tiger/tiger.SlackBuild deleted file mode 100644 index 6f4f566ab2..0000000000 --- a/system/tiger/tiger.SlackBuild +++ /dev/null @@ -1,124 +0,0 @@ -#!/bin/sh - -# Slackware build script for Tiger - -# Written by Menno Duursma - -# This program is free software. It comes without any warranty. -# Granted WTFPL, Version 2, as published by Sam Hocevar. See -# http://sam.zoy.org/wtfpl/COPYING for more details. - -PRGNAM=tiger -VERSION=${VERSION:-3.2.3} -BUILD=${BUILD:-2} -TAG=${TAG:-_SBo} - -# Automatically determine the architecture we're building on: -if [ -z "$ARCH" ]; then - case "$( uname -m )" in - i?86) ARCH=i486 ;; - arm*) ARCH=arm ;; - # Unless $ARCH is already set, use uname -m for all other archs: - *) ARCH=$( uname -m ) ;; - esac -fi - -CWD=$(pwd) -TMP=${TMP:-/tmp/SBo} -PKG=$TMP/package-$PRGNAM -OUTPUT=${OUTPUT:-/tmp} - -if [ "$ARCH" = "i486" ]; then - SLKCFLAGS="-O2 -march=i486 -mtune=i686" - LIBDIRSUFFIX="" -elif [ "$ARCH" = "i686" ]; then - SLKCFLAGS="-O2 -march=i686 -mtune=i686" - LIBDIRSUFFIX="" -elif [ "$ARCH" = "x86_64" ]; then - SLKCFLAGS="-O2 -fPIC" - LIBDIRSUFFIX="64" -else - SLKCFLAGS="-O2" - LIBDIRSUFFIX="" -fi - -set -e # Exit on most errors - -rm -rf $PKG -mkdir -p $TMP $PKG $OUTPUT -cd $TMP -rm -rf $PRGNAM-$VERSION -tar xvf $CWD/$PRGNAM-$VERSION.tar.gz -cd $PRGNAM-$VERSION -chown -R root:root . -find . \ - \( -perm 777 -o -perm 775 -o -perm 711 -o -perm 555 -o -perm 511 \) \ - -exec chmod 755 {} \; -o \ - \( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \ - -exec chmod 644 {} \; - -# The build errs on this -patch --verbose -p1 < $CWD/patches/tiger-3.2.3-build-fix.diff - -CFLAGS="$SLKCFLAGS" \ -CXXFLAGS="$SLKCFLAGS" -export CFLAGS CXXFLAGS -./configure \ - --prefix=/usr \ - --libdir=/usr/lib${LIBDIRSUFFIX} \ - --mandir=/usr/man \ - --with-tigerhome=/usr/libexec/tiger \ - --with-tigerbin=/usr/sbin \ - --with-tigerconfig=/etc/tiger \ - --with-tigerwork=/var/lib/tiger/work \ - --with-tigerlog=/var/log/tiger - -make -make install DESTDIR=$PKG - -find $PKG | xargs file | grep -e "executable" -e "shared object" | grep ELF \ - | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true - -install -D -m 0644 $CWD/config/tiger.cron $PKG/etc/cron.d/tiger.new -install -D -m 0640 $CWD/config/tiger.ignore $PKG/etc/tiger/tiger.ignore.new - -# From the .spec: 3.- This should be done by the Makefile, grumble... -install -D -m 0644 version.h $PKG/usr/lib/tiger/version.h - -# Remove unnecesary stuff -( cd $PKG - for system in AIX HPUX IRIX NeXT SunOS UNICOS UNICOSMK Tru64 MacOSX ; do - rm -rf ./usr/libexec/tiger/systems/$system - done - find . -type d -name CVS | xargs -iX rm -rf "X" -) - -( cd $PKG/etc/tiger - mv -v cronrc cronrc.new - mv -v tigerrc tigerrc.new -) - -find $PKG/usr/man -type f -exec gzip -9 {} \; -for i in $( find $PKG/usr/man -type l ) ; do ln -s $( readlink $i ).gz $i.gz ; rm $i ; done - -mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION -cp -a [A-Z][A-Z]* site-* tigerrc* \ - $PKG/usr/doc/$PRGNAM-$VERSION -cp -a other/cert-usc20.txt contrib/fix_tiger_GROUPS.sh \ - $PKG/usr/doc/$PRGNAM-$VERSION - -mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION/txt -cp $PKG/usr/libexec/tiger/doc/*.txt $PKG/usr/doc/$PRGNAM-$VERSION/txt -mkdir -p $PKG/usr/doc/$PRGNAM-$VERSION/html -cp $PKG/usr/libexec/tiger/html/*.html $PKG/usr/doc/$PRGNAM-$VERSION/html - -# Delete the redundant stuff -rm -rf $PKG/usr/libexec/tiger/doc $PKG/usr/libexec/tiger/html -cat $CWD/$PRGNAM.SlackBuild > $PKG/usr/doc/$PRGNAM-$VERSION/$PRGNAM.SlackBuild - -mkdir -p $PKG/install -cat $CWD/slack-desc > $PKG/install/slack-desc -cat $CWD/doinst.sh > $PKG/install/doinst.sh - -cd $PKG -/sbin/makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-$ARCH-$BUILD$TAG.${PKGTYPE:-tgz} diff --git a/system/tiger/tiger.info b/system/tiger/tiger.info deleted file mode 100644 index 9e654314e3..0000000000 --- a/system/tiger/tiger.info +++ /dev/null @@ -1,10 +0,0 @@ -PRGNAM="tiger" -VERSION="3.2.3" -HOMEPAGE="http://www.nongnu.org/tiger" -DOWNLOAD="http://download.savannah.nongnu.org/releases/tiger/tiger-3.2.3.tar.gz" -MD5SUM="f41076f645da9de937819bf6d516e546" -DOWNLOAD_x86_64="" -MD5SUM_x86_64="" -MAINTAINER="Menno Duursma" -EMAIL="druiloor@zonnet.nl" -APPROVED="dsomero"