FC5 tripwire RPM & possible maintainer available.

Thu Oct 12 21:21:12 UTC 2006

On Tue, Aug 01, 2006 at 11:50:49AM +0100, Kyrian wrote:

 > The FC5 tripwire RPM seems to be in an 'orphaned' or unknown state
 > at the moment, as I'm sure you're all aware.

Hello Kev. I was the previous maintainer, but gave up for various
reasons; including time constraints, and the fact that Tripwire is a bit 
archaic and out of sync with modern Linux security methods.

 > Anyways, I've built an FC5 tripwire RPM, although at this stage only
 > using the backward-compatible gcc 3.2.x RPMS supplied with FC5 to
 > build it, and requiring the backward compatible accompanying
 > libraries, which I can contribute back somehow to FC5 extras or
 > whatever if anyone wants.
 >
 > I'm aware that in the longer term it needs some GCC4 patches
 > applying to the source tree to make it compile and run under native
 > GCC4, which I can probably do (never done exactly that before
 > though), and probably needs a version update too if "Tripwire
 > Software" have provided one under the GPL or other appropriate
 > license.

There has been a new upstream build (2.4.0.1) available since December 
last year:

http://prdownloads.sourceforge.net/tripwire/tripwire-2.4.0.1-src.tar.bz2?download

And a patch to enable building against gcc4:

http://sourceforge.net/tracker/index.php?func=detail&aid=1450721&group_id=3130&atid=103130

I've also rebuilt the RPMs here:

http://slated.org/files/tripwire-2.4.0.1-1.src.rpm
http://slated.org/files/tripwire-2.4.0.1-1.i386.rpm
http://slated.org/files/tripwire-2.4.0.1-1.x86_64.rpm
http://slated.org/files/tripwire-2.4.0.1-1.spec
http://slated.org/files/tripwire-2.4.0.1-1.sha1
http://slated.org/files/RPM-GPG-KEY.slated

Note, this is *not* a package submission, and I am *not* looking to 
resume maintainer-ship:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

75ac05e3da040ee21246957069bdb2969d43d608  RPM-GPG-KEY.slated
8c37e5e15818d29b04427ba2916b4176cfda118a  tripwire-2.4.0.1-1.i386.rpm
f03e6b3277ccb21f73b722b921480168cec0f0db  tripwire-2.4.0.1-1.src.rpm
d7542728edad4d464688e9cb121b9bc9daf66232  tripwire-2.4.0.1-1.x86_64.rpm
863b3394465977dd38fb61c51997fbe075fd7211  tripwire.spec
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFLqlgCuO//5UhIKMRAnmhAJ4oWT8XSMwTvel9GMPw5HXBahHH9wCfYJD1
JV+gRqG16wcA650aNEQtgdU=
=L3qN
-----END PGP SIGNATURE-----

 > I use tripwire among other stuff regularly on a number of servers,
 > so it's in my best interests that it remains maintained, and since I
 > already do a fair bit of opensource stuff variously detailed here:
 >
 > http://www.orenet.co.uk/opensource/
 >
 > I guess i'm fairly well placed to become its maintainer, if there's
 > a vacancy, etc.

To be honest, it's a big debatable how useful Tripwire is on a modern 
Linux system (SELinux et al), especially since it doesn't tie in with 
RPM, and you can probably achieve the same result with just "rpm -Vva" 
... but good luck anyway.

-- 
K.
http://slated.org - Slated, Rated & Blogged

.----
| Gates' Law: Every 18 months, the speed of software halves.
`----

Fedora Core release 5 (Bordeaux) on sky, running kernel 2.6.16-1.2133_FC5
  22:18:32 up 116 days, 22:35,  3 users,  load average: 0.35, 0.92, 0.83