Name	audit
Description	Userspace components of the audit framework
Version	4.1.2-2
Package Base	audit
Homepage	https://github.com/linux-audit/audit-userspace
Maintainers	['David Runge <dvzrv@archlinux.org>', 'Jelle van der Waa <jelle@archlinux.org>', 'Levente Polyak <anthraxx[at]archlinux[dot]org>']
Contributors	['<kang@insecure.ws>', 'Christian Rebischke <Chris.Rebischke@archlinux.org>', 'Connor Behan <connor.behan@gmail.com>', 'Daniel Micay <danielmicay@gmail.com>', 'Massimiliano Torromeo <massimiliano.torromeo@gmail.com>', 'drzee99 <info@drzee.net>', 'henning mueller <henning@orgizm.net>']
Distro-repo	https://gitlab.archlinux.org/archlinux/packaging/packages/audit
Sources	['audispd-plugins-zos.tmpfiles', 'audispd-plugins.tmpfiles', 'audit-4.1.2-executable_paths.patch', 'audit.tmpfiles', 'https://github.com/linux-audit/audit-userspace/archive/v4.1.3/audit-userspace-v4.1.3.tar.gz']
Dependencies	['bash', 'glibc', 'krb5', 'libcap-ng', 'libcap-ng.so', 'libgssapi_krb5.so', 'libkrb5.so']
Optional-Dependencies	['audispd-plugins', 'audispd-plugins-zos']
Build-Dependencies	['apparmor', 'glibc', 'krb5', 'libcap-ng', 'libldap', 'linux-api-headers', 'python', 'swig']
Provides	['libaudit.so', 'libauparse.so']
Builddate	28-12-2025 20:16:24
Architecture	x86_64
Distro-Version
Licenses	['GPL-2.0-or-later', 'LGPL-2.0-or-later']
Hash	35de9cc69d96911aa36269552407cdb48f2679a4b8a0d3edba177a2ecd8546ae

# Maintainer: Levente Polyak <anthraxx[at]archlinux[dot]org>
# Maintainer: David Runge <dvzrv@archlinux.org>
# Contributor: Christian Rebischke <Chris.Rebischke@archlinux.org>
# Contributor: Daniel Micay <danielmicay@gmail.com>
# Contributor: <kang@insecure.ws>
# Contributor: Massimiliano Torromeo <massimiliano.torromeo@gmail.com>
# Contributor: Connor Behan <connor.behan@gmail.com>
# Contributor: henning mueller <henning@orgizm.net>
# Contributor: drzee99 <info@drzee.net>

pkgbase=audit
_name=audit-userspace
pkgname=(
  audit
  audispd-plugins
  audispd-plugins-zos
  python-audit
)
pkgver=4.1.3
pkgrel=1
pkgdesc='Userspace components of the audit framework'
url="https://github.com/linux-audit/audit-userspace"
arch=(x86_64)
license=(
  GPL-2.0-or-later
  LGPL-2.0-or-later
)
makedepends=(
  apparmor
  glibc
  krb5
  libcap-ng
  libldap
  linux-api-headers
  python
  swig
)
options=(emptydirs)
source=(
  $url/archive/v$pkgver/$_name-v$pkgver.tar.gz
  $pkgbase.tmpfiles
  audispd-plugins.tmpfiles
  audispd-plugins-zos.tmpfiles
  $pkgbase-4.1.2-executable_paths.patch
)
sha512sums=('4ebdfaebb89440bd76d1f715aa9f2f261b453f51c66ae9c4c7ad650cd361268fe2415c33fe7913ec4986d98ccbd457e15734d0aae606b5dccf316b66276a13cb'
            'b9738cd89710e8cc7a3a2104bbd586f3643a66b3b4f0bbe323a3d20f7c7352ca074ca1018e872589309a7dd80503a9a33372387ef6e8af42185934f073114b78'
            '2e4d545855aa3a029e54099a9a615d37d58413534d6d2091a810e7931a48d0cf35d61d491d9238ea59218f3bf0cba6f739e379e763949d6c12fab43f076f48ee'
            'e85a182fa619a576d398506f911f3e0a0f7689daeb6f475da215e9c4220b0328bf91ef7c810e51a48c8e1fc06a6cdf57d0af3c59364e9db057909a0fb7bc5760'
            'e61c7aa747eeb6ea996c051304ae898f3d107e7988cf05adbeff436b39d090395de52fdcf013a2c315d85a83ceff57ceaa403b573c9986771c95f6222cc58f13')
b2sums=('ef3492ab991434ca378d351964f07e2698e8ad3e75fb2fc8fc9c925edc82b2645e2bd8e6298646fb47b8eb6dfa1a255191e211c19dfaabe0a822346181c1b2a2'
        'b9b688027c837973c5e0639e8cf22292209af25b60f53de1031edbad4dda2005a4032a8697966e6f23eda26973cdb629eb82ea63ff5ca92e5b3bb52ad9215f6c'
        '2ec484207e5fa262ee74fadba4cb8cbf23fbcb4a678671f37d332f7fdace56191189e0c8ff9e0de1084f16f8a8df8d7e56e34d8857d74737d16890399cbea6f7'
        '11408cb4ffb8a9933fa67a0c2f51aab288007ba3e95c7ff2323866b90c4290bb660481730e65b4ea5c600525b11b3ea92284d196824a94f45189487b35fe949c'
        'ce17316485e197e277997f9b3e61fd73be45fff3c911eb439ee90c68436fc79ba49b62f5fa0ebc93036f03b8e8e84dcd6b8658a9bc63481f031b8a6be5415965')

_pick() {
  local p="$1" f d; shift
  for f; do
    d="$srcdir/$p/${f#$pkgdir/}"
    mkdir -p "$(dirname "$d")"
    mv "$f" "$d"
    rmdir -p --ignore-fail-on-non-empty "$(dirname "$f")"
  done
}

prepare() {
  # use /usr and /bin merge compatible paths in configs
  patch -Np1 -d $pkgbase-userspace-$pkgver -i ../$pkgbase-4.1.2-executable_paths.patch

  cd $_name-$pkgver
  autoreconf -fiv
}

build() {
  local configure_options=(
    --enable-experimental
    --enable-gssapi-krb5=yes
    --enable-systemd=yes
    --enable-zos-remote
    --libexecdir=/usr/lib/audit
    --prefix=/usr
    --runstatedir=/run
    --sbindir=/usr/bin
    --sysconfdir=/etc
    --with-aarch64
    --with-apparmor=yes
    --with-arm
    --with-io_uring=yes
    --with-libcap-ng=yes
    --with-nftables
    --with-python3=yes
  )

  cd $_name-$pkgver
  ./configure "${configure_options[@]}"
  # prevent excessive overlinking due to libtool
  sed -i -e 's/ -shared / -Wl,-O1,--as-needed\0/g' libtool
  make
}

package_audit() {
  depends=(
    bash
    glibc
    krb5 libkrb5.so libgssapi_krb5.so
    libcap-ng libcap-ng.so
  )
  optdepends=(
    'audispd-plugins: for audit event dispatcher plugins'
    'audispd-plugins-zos: for z/OS audit event dispatcher plugin'
  )
  provides=(
    libaudit.so
    libauparse.so
  )
  backup=(
    etc/libaudit.conf
    etc/audit/audit-stop.rules
    etc/audit/auditd.conf
  )

  make DESTDIR="$pkgdir" install -C $_name-$pkgver

  install -vDm 644 $_name-$pkgver/{{README,SECURITY}.md,ChangeLog} -t "$pkgdir/usr/share/doc/$pkgname/"

  # add tmpfiles.d integration for factory files and file permissions
  install -vDm 644 $pkgbase.tmpfiles "$pkgdir/usr/lib/tmpfiles.d/$pkgbase.conf"

  # remove legacy files
  rm -frv "$pkgdir/usr/lib/audit"

  (
    cd "$pkgdir"
    _pick python-audit usr/lib/python*

    _pick audispd-plugins etc/audit/{audisp-{filter,remote,statsd},ids}.conf
    _pick audispd-plugins etc/audit/plugins.d/{af_unix,au-{remote,statsd},audisp-ids,filter,syslog}.conf
    _pick audispd-plugins usr/bin/audisp-{af_unix,filter,ids,remote,statsd,syslog}
    _pick audispd-plugins usr/share/man/man5/audisp-remote.conf.5
    _pick audispd-plugins usr/share/man/man8/audisp-{af_unix,filter,remote,statsd,syslog}.8

    _pick audispd-plugins-zos etc/audit/zos-remote.conf
    _pick audispd-plugins-zos etc/audit/plugins.d/audispd-zos-remote.conf
    _pick audispd-plugins-zos usr/bin/audispd-zos-remote
    _pick audispd-plugins-zos usr/share/man/man5/zos-remote.conf.5
    _pick audispd-plugins-zos usr/share/man/man8/audispd-zos-remote.8
  )

  # add factory files
  install -vdm 755 "$pkgdir/usr/share/factory/"
  cp -av "$pkgdir/etc" "$pkgdir/usr/share/factory/"
}

package_audispd-plugins() {
  pkgdesc='Plugins for the audit event dispatcher'
  depends=(
    audit libaudit.so libauparse.so
    glibc
    krb5 libkrb5.so libgssapi_krb5.so
    libcap-ng libcap-ng.so
  )
  backup=(
    etc/audit/audisp-{filter,remote,statsd}.conf
    etc/audit/plugins.d/{af_unix,au-{remote,statsd},filter,syslog}.conf
  )

  mv -v $pkgname/* "$pkgdir"

  install -vDm 644 $pkgname.tmpfiles "$pkgdir/usr/lib/tmpfiles.d/$pkgname.conf"

  # add factory files
  install -vdm 755 "$pkgdir/usr/share/factory/"
  cp -av "$pkgdir/etc" "$pkgdir/usr/share/factory/"
}

package_audispd-plugins-zos() {
  pkgdesc='z/OS plugin for the audit event dispatcher'
  depends=(
    audit libauparse.so
    glibc
    libcap-ng libcap-ng.so
    libldap
  )
  backup=(
    etc/audit/zos-remote.conf
    etc/audit/plugins.d/audispd-zos-remote.conf
  )

  mv -v $pkgname/* "$pkgdir"

  install -vDm 644 $pkgname.tmpfiles "$pkgdir/usr/lib/tmpfiles.d/$pkgname.conf"

  # add factory files
  install -vdm 755 "$pkgdir/usr/share/factory/"
  cp -av "$pkgdir/etc" "$pkgdir/usr/share/factory/"
}

package_python-audit() {
  pkgdesc+=' - Python bindings'
  depends=(
    audit libaudit.so libauparse.so
    glibc
    python
  )

  mv -v $pkgname/* "$pkgdir"
}

# vim: ts=2 sw=2 et: