Summary: Process patterns intrusion detection Name: forrest Version: REV Release: 1 license: GPL Vendor: Solucorp Group: Networking/util Source0: forrest-REV.src.tar.gz BuildRoot: /var/tmp/forrest BuildRequires: linuxconf-devel %description Forrest is a host based intrusion detection using enhanced bsd accounting files to spot unusual process trees (ex: httpd calling something it never called before). It works in combination with the vserver project. %prep %setup %build make BUILD_SVNVER=REV %install if [ "$RPM_BUILD_ROOT" != "" ] ; then rm -rf $RPM_BUILD_ROOT fi mkdir -p $RPM_BUILD_ROOT/usr/sbin export RPM_BUILD_ROOT make install %files %defattr(-,root,root) /usr/sbin/forrest /usr/sbin/forrest-init /usr/sbin/forrest-monitor %clean if [ "$RPM_BUILD_ROOT" != "" ] ; then rm -rf $RPM_BUILD_ROOT fi %post %postun %pre %preun