From: AnInternetTroll <AnInternetTroll@users.noreply.github.com>
To: ml@inbox.vuxu.org
Subject: Re: [PR PATCH] [Updated] [WIP] fail2ban: update to 1.1.0.
Date: Sat, 20 Jul 2024 13:21:29 +0200 [thread overview]
Message-ID: <20240720112129.1476420241@inbox.vuxu.org> (raw)
In-Reply-To: <gh-mailinglist-notifications-41a7ca26-5023-4802-975b-f1789d68868e-void-packages-48297@inbox.vuxu.org>
[-- Attachment #1: Type: text/plain, Size: 522 bytes --]
There is an updated pull request by AnInternetTroll against master on the void-packages repository
https://github.com/AnInternetTroll/void-packages user/luca/fail2ban-man
https://github.com/void-linux/void-packages/pull/48297
[WIP] fail2ban: update to 1.1.0.
#### Testing the changes
- I tested the changes in this PR: **NO**
#### Local build testing
- I built this PR locally for my native architecture, (x86\_64-glibc)
A patch file from https://github.com/void-linux/void-packages/pull/48297.patch is attached
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: github-pr-user/luca/fail2ban-man-48297.patch --]
[-- Type: text/x-diff, Size: 5938 bytes --]
From 71af9820a588a8bf992fbe9358ea5a146ed8c0a3 Mon Sep 17 00:00:00 2001
From: Luca Matei Pintilie <luca@lucamatei.com>
Date: Sat, 20 Jan 2024 10:00:13 +0100
Subject: [PATCH] fail2ban: update to 1.1.0.
---
.../fail2ban/patches/filter-sshd-9.8.patch | 93 +++++++++++++++++++
srcpkgs/fail2ban/template | 17 ++--
2 files changed, 104 insertions(+), 6 deletions(-)
create mode 100644 srcpkgs/fail2ban/patches/filter-sshd-9.8.patch
diff --git a/srcpkgs/fail2ban/patches/filter-sshd-9.8.patch b/srcpkgs/fail2ban/patches/filter-sshd-9.8.patch
new file mode 100644
index 00000000000000..2864c01e6b0636
--- /dev/null
+++ b/srcpkgs/fail2ban/patches/filter-sshd-9.8.patch
@@ -0,0 +1,93 @@
+From 2fed408c05ac5206b490368d94599869bd6a056d Mon Sep 17 00:00:00 2001
+From: Fabian Dellwing <fabian.dellwing@mbconnectline.de>
+Date: Tue, 2 Jul 2024 07:54:15 +0200
+Subject: [PATCH 1/5] Adjust sshd filter for OpenSSH 9.8 new daemon name
+
+---
+ config/filter.d/sshd.conf | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/config/filter.d/sshd.conf b/config/filter.d/sshd.conf
+index 1c8a02deb5..a1fd749aed 100644
+--- a/config/filter.d/sshd.conf
++++ b/config/filter.d/sshd.conf
+@@ -16,7 +16,7 @@ before = common.conf
+
+ [DEFAULT]
+
+-_daemon = sshd
++_daemon = (?:sshd(?:-session)?)
+
+ # optional prefix (logged from several ssh versions) like "error: ", "error: PAM: " or "fatal: "
+ __pref = (?:(?:error|fatal): (?:PAM: )?)?
+
+From 7b335f47ea112e2a36e59287582e613aef2fa0a3 Mon Sep 17 00:00:00 2001
+From: "Sergey G. Brester" <serg.brester@sebres.de>
+Date: Wed, 3 Jul 2024 19:09:28 +0200
+Subject: [PATCH 2/5] sshd: add test coverage for new format, gh-3782
+
+---
+ fail2ban/tests/files/logs/sshd | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/fail2ban/tests/files/logs/sshd b/fail2ban/tests/files/logs/sshd
+index ed54ded4d4..7d3948ed80 100644
+--- a/fail2ban/tests/files/logs/sshd
++++ b/fail2ban/tests/files/logs/sshd
+@@ -20,6 +20,9 @@ Feb 25 14:34:10 belka sshd[31603]: Failed password for invalid user ROOT from aa
+ # failJSON: { "time": "2005-02-25T14:34:11", "match": true , "host": "aaaa:bbbb:cccc:1234::1:1" }
+ Feb 25 14:34:11 belka sshd[31603]: Failed password for invalid user ROOT from aaaa:bbbb:cccc:1234::1:1
+
++# failJSON: { "time": "2005-07-03T14:59:17", "match": true , "host": "192.0.2.1", "desc": "new log with session in daemon prefix, gh-3782" }
++Jul 3 14:59:17 host sshd-session[1571]: Failed password for root from 192.0.2.1 port 56502 ssh2
++
+ #3
+ # failJSON: { "time": "2005-01-05T01:31:41", "match": true , "host": "1.2.3.4" }
+ Jan 5 01:31:41 www sshd[1643]: ROOT LOGIN REFUSED FROM 1.2.3.4
+
+From 8360776ce1b119d519a842069c73bec7f5e24fad Mon Sep 17 00:00:00 2001
+From: "Sergey G. Brester" <serg.brester@sebres.de>
+Date: Wed, 3 Jul 2024 19:33:39 +0200
+Subject: [PATCH 3/5] zzz-sshd-obsolete-multiline.conf: adjusted to new
+ sshd-session log format
+
+---
+ fail2ban/tests/config/filter.d/zzz-sshd-obsolete-multiline.conf | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/fail2ban/tests/config/filter.d/zzz-sshd-obsolete-multiline.conf b/fail2ban/tests/config/filter.d/zzz-sshd-obsolete-multiline.conf
+index ad8adeb69f..14256ba68c 100644
+--- a/fail2ban/tests/config/filter.d/zzz-sshd-obsolete-multiline.conf
++++ b/fail2ban/tests/config/filter.d/zzz-sshd-obsolete-multiline.conf
+@@ -9,7 +9,7 @@ before = ../../../../config/filter.d/common.conf
+
+ [DEFAULT]
+
+-_daemon = sshd
++_daemon = sshd(?:-session)?
+
+ # optional prefix (logged from several ssh versions) like "error: ", "error: PAM: " or "fatal: "
+ __pref = (?:(?:error|fatal): (?:PAM: )?)?
+
+From 50ff131a0fd8f54fdeb14b48353f842ee8ae8c1a Mon Sep 17 00:00:00 2001
+From: "Sergey G. Brester" <serg.brester@sebres.de>
+Date: Wed, 3 Jul 2024 19:35:28 +0200
+Subject: [PATCH 4/5] filter.d/sshd.conf: ungroup (unneeded for _daemon)
+
+---
+ config/filter.d/sshd.conf | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/config/filter.d/sshd.conf b/config/filter.d/sshd.conf
+index a1fd749aed..3a84b1ba52 100644
+--- a/config/filter.d/sshd.conf
++++ b/config/filter.d/sshd.conf
+@@ -16,7 +16,7 @@ before = common.conf
+
+ [DEFAULT]
+
+-_daemon = (?:sshd(?:-session)?)
++_daemon = sshd(?:-session)?
+
+ # optional prefix (logged from several ssh versions) like "error: ", "error: PAM: " or "fatal: "
+ __pref = (?:(?:error|fatal): (?:PAM: )?)?
diff --git a/srcpkgs/fail2ban/template b/srcpkgs/fail2ban/template
index d0842770dc1f0a..7c0e3cd3dd70cb 100644
--- a/srcpkgs/fail2ban/template
+++ b/srcpkgs/fail2ban/template
@@ -1,17 +1,18 @@
# Template file for 'fail2ban'
pkgname=fail2ban
-version=1.0.2
-revision=3
+version=1.1.0
+revision=1
build_style=python3-module
hostmakedepends="pkg-config python3-setuptools"
-depends="python3-pyasynchat"
+depends="python3-pyasynchat python3-pyasyncore"
+checkdepends="python3-utils ${depends}"
short_desc="Authentication failure monitor system"
maintainer="Orphaned <orphan@voidlinux.org>"
license="GPL-2.0-only"
homepage="https://www.fail2ban.org/"
changelog="https://raw.githubusercontent.com/fail2ban/fail2ban/master/ChangeLog"
distfiles="https://github.com/fail2ban/fail2ban/archive/${version}.tar.gz"
-checksum=ae8b0b41f27a7be12d40488789d6c258029b23a01168e3c0d347ee80b325ac23
+checksum=474fcc25afdaf929c74329d1e4d24420caabeea1ef2e041a267ce19269570bae
conf_files="
/etc/fail2ban/fail2ban.conf
/etc/fail2ban/jail.conf
@@ -19,11 +20,15 @@ conf_files="
/etc/fail2ban/filter.d/*.conf"
make_dirs="/var/lib/fail2ban 0700 root root"
-pre_build() {
- ./fail2ban-2to3
+do_check() {
+ # testExecuteTimeoutWithNastyChildren and testKillAfterStart fail on CI
+ python3 bin/fail2ban-testcases -i "testExecuteTimeoutWithNastyChildren|testKillAfterStart"
}
post_install() {
rm -rf ${DESTDIR}/${py3_sitelib}/fail2ban/tests
vsv fail2ban
+ for f in man/*.{1,5}; do
+ vman "$f"
+ done
}
next prev parent reply other threads:[~2024-07-20 11:21 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-01-20 9:01 [PR PATCH] fail2ban: add man pages AnInternetTroll
2024-01-20 15:41 ` dkwo
2024-01-20 21:44 ` [PR PATCH] [Updated] " AnInternetTroll
2024-01-20 21:46 ` AnInternetTroll
2024-01-26 19:08 ` [PR PATCH] [Updated] " AnInternetTroll
2024-02-07 21:20 ` AnInternetTroll
2024-03-21 19:03 ` AnInternetTroll
2024-03-21 19:19 ` AnInternetTroll
2024-03-21 21:13 ` AnInternetTroll
2024-05-31 19:00 ` [PR REVIEW] " classabbyamp
2024-05-31 19:37 ` [PR PATCH] [Updated] " AnInternetTroll
2024-05-31 21:45 ` AnInternetTroll
2024-05-31 21:58 ` AnInternetTroll
2024-05-31 22:00 ` AnInternetTroll
2024-05-31 22:03 ` [PR PATCH] [Updated] [WIP] fail2ban: update to 1.1.0 AnInternetTroll
2024-07-15 11:16 ` AnInternetTroll
2024-07-20 11:01 ` leahneukirchen
2024-07-20 11:21 ` AnInternetTroll [this message]
2024-09-26 18:31 ` classabbyamp
2024-09-26 18:43 ` [PR PATCH] [Updated] " AnInternetTroll
2024-09-26 18:44 ` AnInternetTroll
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20240720112129.1476420241@inbox.vuxu.org \
--to=aninternettroll@users.noreply.github.com \
--cc=ml@inbox.vuxu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).