[gentoo-commits] repo/gentoo:master commit in: app-forensics/lynis/

["Mike Pagano" <mpagano@gentoo.org>]

commit:     f41552a26f6c2a1dccbddc5c47ed5a7a00445287
Author:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
AuthorDate: Thu Jan 30 23:10:21 2025 +0000
Commit:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
CommitDate: Thu Jan 30 23:10:21 2025 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f41552a2

app-forensics/lynis: add 3.1.4

Signed-off-by: Mike Pagano <mpagano <AT> gentoo.org>

 app-forensics/lynis/Manifest           |  1 +
 app-forensics/lynis/lynis-3.1.4.ebuild | 69 ++++++++++++++++++++++++++++++++++
 2 files changed, 70 insertions(+)

diff --git a/app-forensics/lynis/Manifest b/app-forensics/lynis/Manifest
index ecd8f1ca8626..27c043632192 100644
--- a/app-forensics/lynis/Manifest
+++ b/app-forensics/lynis/Manifest
@@ -1 +1,2 @@
 DIST lynis-3.1.3.tar.gz 358461 BLAKE2B 9d955ffd066f8203c9617242a2256a1561b9f99b874486a7d45666871406caf4b3ac3d5f22740171822f6dcbf2ca956d573362dbbd76936fc029df6b376bd1ec SHA512 fb4ad230c3b9d7d47d878da6abda9516d24a02b93235e42044aee2acc0890926028ce0eb947fe47e1705aed4d71080ed08e872c8b6b8592c7128eb80a8f0f002
+DIST lynis-3.1.4.tar.gz 358478 BLAKE2B 643448a989be26f563c06292bca25da7b8df63ddbc54595e915ab84d6a466d6b431a060132957ad074e53239fe476d91b2a4528563802b315f31c89a674600a7 SHA512 13e31bc95a1af43a2e429a8b44dd88b7c1b99941a2aa6c59cece39fe12d9b308969ca14510274d510e09ed48f21f68ecf1e161a1631190e302277089ee40ec82

diff --git a/app-forensics/lynis/lynis-3.1.4.ebuild b/app-forensics/lynis/lynis-3.1.4.ebuild
new file mode 100644
index 000000000000..b74aea68257b
--- /dev/null
+++ b/app-forensics/lynis/lynis-3.1.4.ebuild
@@ -0,0 +1,69 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+
+inherit bash-completion-r1 systemd
+
+DESCRIPTION="Security and system auditing tool"
+HOMEPAGE="https://cisofy.com/lynis/"
+SRC_URI="https://github.com/CISOfy/${PN}/archive/refs/tags/${PV}.tar.gz -> ${P}.tar.gz"
+
+LICENSE="GPL-3"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="+cron systemd"
+
+RDEPEND="
+	app-shells/bash
+	cron? ( !systemd? ( virtual/cron ) )"
+
+src_install() {
+	doman lynis.8
+	dodoc FAQ README
+	newdoc CHANGELOG.md CHANGELOG
+
+	# Remove the old one during the next stabilize progress
+	exeinto /etc/cron.daily
+	newexe "${FILESDIR}"/lynis.cron-new lynis
+
+	dobashcomp extras/bash_completion.d/lynis
+
+	# stricter default perms - bug 507436
+	diropts -m0700
+	insopts -m0600
+
+	insinto /usr/share/${PN}
+	doins -r db/ include/ plugins/
+
+	dosbin lynis
+
+	insinto /etc/${PN}
+	doins default.prf
+	sed -i -e 's/\/path\/to\///' "${S}/extras/systemd/${PN}.service" || die "Sed Failed!"
+	systemd_dounit "${S}/extras/systemd/${PN}.service" || die "Sed Failed!"
+	systemd_dounit "${S}/extras/systemd/${PN}.timer"
+
+	if ! use cron; then
+		ebegin "removing cron files from installation image"
+		rm -rfv "${ED}/etc/cron.daily" || die
+		eend "$?"
+	fi
+}
+
+pkg_postinst() {
+	if use cron; then
+		if systemd_is_booted || has_version sys-apps/systemd; then
+			echo
+			ewarn "Both 'cron' and 'systemd' flags are enabled."
+			ewarn "So both ${PN}.target and cron files were installed."
+			ewarn "Please don't use 2 implementations at the same time."
+			ewarn "Cronjobs are usually enabled by default via /etc/cron.* jobs"
+			ewarn "If you want to use systemd ${PN}.target timers"
+			ewarn "disable 'cron' flag and reinstall ${PN}"
+			echo
+		else
+			einfo "A cron script has been installed to ${ROOT}/etc/cron.daily/lynis."
+		fi
+	fi
+}