From mboxrd@z Thu Jan 1 00:00:00 1970 From: salgak@comcast.net Subject: Re: Audit: audisp-remote plugin: why is OpenLDAP a dependency ?? Date: Tue, 10 Feb 2015 19:01:27 +0000 (UTC) Message-ID: <285615815.3363270.1423594887279.JavaMail.zimbra@comcast.net> References: <924112195.2223087.1423489490422.JavaMail.zimbra@comcast.net> <473290240.2225092.1423489656934.JavaMail.zimbra@comcast.net> <20150209180058.54f930bd@ivy-bridge> <1286467080.2438459.1423502775408.JavaMail.zimbra@comcast.net> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7327281000775502108==" Return-path: Received: from mx1.redhat.com (ext-mx11.extmail.prod.ext.phx2.redhat.com [10.5.110.16]) by int-mx10.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id t1AJ1VcI028420 for ; Tue, 10 Feb 2015 14:01:31 -0500 Received: from resqmta-ch2-02v.sys.comcast.net (resqmta-ch2-02v.sys.comcast.net [69.252.207.34]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id t1AJ1RmJ029344 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=FAIL) for ; Tue, 10 Feb 2015 14:01:28 -0500 In-Reply-To: <1286467080.2438459.1423502775408.JavaMail.zimbra@comcast.net> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Steve Grubb Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com --===============7327281000775502108== Content-Type: multipart/alternative; boundary="----=_Part_3363269_347687786.1423594887278" ------=_Part_3363269_347687786.1423594887278 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit So, respin a new RPM using rpmrebuild, dropping the zos plugins ? i.e. the appropriate section of the SPEC would now look like this: Provides: audit-audispd-plugins = 1.8-0.28.1 #Requires: openldap2 #Requires: rpmlib(PayloadFilesHavePrefix) <= 4.0-1 #Requires: rpmlib(CompressedFileNames) <= 3.0.4-1 Requires: libaudit.so.0()(64bit) Requires: libauparse.so.0()(64bit) Requires: libc.so.6()(64bit) Requires: libc.so.6(GLIBC_2.2.5)(64bit) Requires: libc.so.6(GLIBC_2.3)(64bit) Requires: libc.so.6(GLIBC_2.3.4)(64bit) Requires: libc.so.6(GLIBC_2.4)(64bit) Requires: libc.so.6(GLIBC_2.8)(64bit) #Requires: liblber-2.4.so.2()(64bit) #Requires: libldap-2.4.so.2()(64bit) Requires: libpthread.so.0()(64bit) Requires: libpthread.so.0(GLIBC_2.2.5)(64bit) Requires: libpthread.so.0(GLIBC_2.3.2)(64bit) #Requires: rpmlib(PayloadIsLzma) <= 4.4.6-1 #suggest #enhance %description The audit-audispd-plugins package contains plugin components for the audit dispatcher (audispd). Authors: -------- Steve Grubb %files %config(noreplace) %attr(0640, root, root) "/etc/audisp/audisp-remote.conf" %config(noreplace) %attr(0640, root, root) "/etc/audisp/plugins.d/au-remote.conf" #%config(noreplace) %attr(0640, root, root) "/etc/audisp/plugins.d/audispd-zos-remote.conf" #%config(noreplace) %attr(0640, root, root) "/etc/audisp/zos-remote.conf" %attr(0750, root, root) "/usr/sbin/audisp-remote" #%attr(0750, root, root) "/usr/sbin/audispd-zos-remote" %doc %attr(0644, root, root) "/usr/share/man/man5/audisp-remote.conf.5.gz" #%doc %attr(0644, root, root) "/usr/share/man/man5/zos-remote.conf.5.gz" %doc %attr(0644, root, root) "/usr/share/man/man8/audisp-remote.8.gz" #%doc %attr(0644, root, root) "/usr/share/man/man8/audispd-zos-remote.8.gz" ----- Original Message ----- From: salgak@comcast.net To: "Steve Grubb" Cc: linux-audit@redhat.com Sent: Monday, February 9, 2015 12:26:15 PM Subject: Re: Audit: audisp-remote plugin: why is OpenLDAP a dependency ?? Yeah, just crawled into the rpm and saw that. Going to try to re-spin a smaller RPM without the zos and see if that works. ----- Original Message ----- From: "Steve Grubb" To: salgak@comcast.net Cc: linux-audit@redhat.com Sent: Monday, February 9, 2015 12:00:58 PM Subject: Re: Audit: audisp-remote plugin: why is OpenLDAP a dependency ?? On Mon, 9 Feb 2015 13:47:36 +0000 (UTC) salgak@comcast.net wrote: > I'm currently dealing with a VMware appliance, and need to export my > audit logs. Despite VMware telling me to use the audisp-remote plugin > with auditd, I get a dependency check for OpenLDAP, and the install > fails. > > I'm pointing to my audit server (a Splunk box) via IP address. Is > there any workaround, or am I stuck adding even MORE software to the > appliance ?? The package the plugin is included in contains all of them. The zos-remote plugin is the one that wants openldap. -Steve ------=_Part_3363269_347687786.1423594887278 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
So, respin a new RPM using rpmrebuild,= dropping the zos plugins ?

i.e. the appropriate section of the SPEC= would now look like this:


Provides:   &n= bsp;  audit-audispd-plugins =3D 1.8-0.28.1
#Requir= es:      openldap2
#Requires:&= nbsp;     rpmlib(PayloadFilesHavePrefix) <=3D 4.0-1<= /strong>
#Requires:      rpmlib(Compres= sedFileNames) <=3D 3.0.4-1
Requires:  &nbs= p;   libaudit.so.0()(64bit)
Requires: &n= bsp;    libauparse.so.0()(64bit)
Require= s:      libc.so.6()(64bit)
Req= uires:      libc.so.6(GLIBC_2.2.5)(64bit)=
Requires:      libc.so.6(GLIBC_2.3)(64= bit)
Requires:      libc.so.6(= GLIBC_2.3.4)(64bit)
Requires:    &n= bsp; libc.so.6(GLIBC_2.4)(64bit)
Requires:  &= nbsp;   libc.so.6(GLIBC_2.8)(64bit)
#Requires= :      liblber-2.4.so.2()(64bit)
#Requires:      libldap-2.4.so.2()(64bit)
Requires:      libpthread.so.0()(64= bit)
Requires:      libpthread= .so.0(GLIBC_2.2.5)(64bit)
Requires:   &n= bsp;  libpthread.so.0(GLIBC_2.3.2)(64bit)
#Require= s:      rpmlib(PayloadIsLzma) <=3D 4.4.6-1
#suggest
#enhance
%= description
The audit-audispd-plugins package contains = plugin components for the
audit dispatcher (audispd).



Authors:
--------
    Steve Grubb <sgrubb@redhat.com>
%files
%config(noreplace) %attr(0640, r= oot, root) "/etc/audisp/audisp-remote.conf"
%config(nor= eplace) %attr(0640, root, root) "/etc/audisp/plugins.d/au-remote.conf"
#%config(noreplace) %attr(0640, root, root) "/etc/audisp/pl= ugins.d/audispd-zos-remote.conf"
#%config(noreplace) %a= ttr(0640, root, root) "/etc/audisp/zos-remote.conf"
%at= tr(0750, root, root) "/usr/sbin/audisp-remote"
#%attr(0= 750, root, root) "/usr/sbin/audispd-zos-remote"
%doc %a= ttr(0644, root, root) "/usr/share/man/man5/audisp-remote.conf.5.gz"
#%doc %attr(0644, root, root) "/usr/share/man/man5/zos-remote.= conf.5.gz"
%doc %attr(0644, root, root) "/usr/share/man= /man8/audisp-remote.8.gz"
#%doc %attr(0644, root, root)= "/usr/share/man/man8/audispd-zos-remote.8.gz"

<= /div>
From: salgak@comcast.net
To: "Steve Grubb" = <sgrubb@redhat.com>
Cc: linux-audit@redhat.com
Sent: = Monday, February 9, 2015 12:26:15 PM
Subject: Re: Audit: audi= sp-remote plugin: why is OpenLDAP a dependency ??

Yeah, just c= rawled into the rpm and saw that.  Going to try to re-spin a smaller R= PM without the zos and see if that works.

From: "Steve Grubb" <sgrubb@redhat.com>
To: salg= ak@comcast.net
Cc: linux-audit@redhat.com
Sent: Monday,= February 9, 2015 12:00:58 PM
Subject: Re: Audit: audisp-remote p= lugin: why is OpenLDAP a dependency ??

On Mon, 9 Feb 2015= 13:47:36 +0000 (UTC)
salgak@comcast.net wrote:

> I= 'm currently dealing with a VMware appliance, and need to export my
>= audit logs. Despite VMware telling me to use the audisp-remote plugin
&= gt; with auditd, I get a dependency check for OpenLDAP, and the install
= > fails.
>
> I'm pointing to my audit server (a Splunk box= ) via IP address. Is
> there any workaround, or am I stuck adding eve= n MORE software to the
> appliance ??

The package = the plugin is included in contains all of them. The
zos-remote plugin is= the one that wants openldap.

-Steve


------=_Part_3363269_347687786.1423594887278-- --===============7327281000775502108== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============7327281000775502108==--