Unhide .spec (20100201 release)
Posted 02-27-2010 at 05:50 PM by unSpawn
security-projects.com released version 2010/02/01 of Unhide, a forensic tool to find hidden processes and TCP/UDP ports by rootkits / LKMs or by another hidden technique. Here's a minimal spec if you want one:
Code:
# No debuginfo: %define debug_packages %{nil} %define debug_package %{nil} %define name unhide # Version %define ver 0.2 # Release %define rel 1 %define _prefix /usr/local %define _mandir /usr/local/share/man %define _bindir /usr/local/bin Name: %{name} Summary: %{name}, check hidden processes and ports Version: %{ver} Release: %{rel} License: GPLv3 Group: Utilities/System Source: %{name}-20100201.tgz Provides: %{name} Vendor: yjesus@security-projects.com URL: http://security-projects.com BuildRoot: %{_tmppath}/%{name}-%{version}-%{release} %description Unhide is a forensic tool to find hidden processes and TCP/UDP ports by rootkits / LKMs or by another hidden technique. %prep %setup -n %{name}-20100201 %build gcc --static unhide.c -o unhide gcc --static unhide-tcp.c -o unhide-tcp gcc -Wall --static -pthread unhide-linux26.c -o unhide-linux26 %install if [ "$RPM_BUILD_ROOT" = "%{_tmppath}/%{name}-%{version}-%{release}" ]; then rm -rf $RPM_BUILD_ROOT install -d $RPM_BUILD_ROOT/%{_bindir} for bin in %{name} %{name}-tcp %{name}-linux26; do install -m 750 "${bin}" $RPM_BUILD_ROOT/%{_bindir} done install -d $RPM_BUILD_ROOT/%{_mandir}/man8/ for man in %{name}.8 %{name}-tcp.8; do install -m 640 man/"${man}" $RPM_BUILD_ROOT/%{_mandir}/man8/ done else echo Invalid Build root \'"$RPM_BUILD_ROOT"\' exit 1 fi %clean if [ "$RPM_BUILD_ROOT" = "%{_tmppath}/%{name}-%{version}-%{release}" ]; then rm -rf $RPM_BUILD_ROOT else echo Invalid Build root \'"$RPM_BUILD_ROOT"\' exit 1 fi %files %defattr(-,root,root) %doc LEEME.txt README.txt COPYING %attr(750,root,root) %{_bindir}/%{name} %attr(750,root,root) %{_bindir}/%{name}-tcp %attr(750,root,root) %{_bindir}/%{name}-linux26 %attr(640,root,root) %{_mandir}/man8/unhide.8 %attr(640,root,root) %{_mandir}/man8/unhide-tcp.8 %changelog * Sat Feb 28 2010 YourName <Your@Email.Address> - New version unhide-20100201.tgz