diff --git a/CMakeLists.txt b/CMakeLists.txt index dc84d5c..766a001 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -15,7 +15,7 @@ if(NOT CMAKE_BUILD_TYPE) endif() if (CMAKE_INSTALL_PREFIX_INITIALIZED_TO_DEFAULT) - set (CMAKE_INSTALL_PREFIX "/home/tsg/verify-policy" CACHE PATH "default install path" FORCE ) + set (CMAKE_INSTALL_PREFIX "/opt/tsg/verify-policy" CACHE PATH "default install path" FORCE ) endif() # Global compile options @@ -45,7 +45,7 @@ endif() add_custom_target("install-program" COMMAND ${CMAKE_COMMAND} ARGS -DCOMPONENT=Program -P cmake_install.cmake) add_custom_target("install-profile" COMMAND ${CMAKE_COMMAND} ARGS -DCOMPONENT=Profile -P cmake_install.cmake) -add_custom_target("tarball" COMMAND sh ${CMAKE_SCRIPT_PATH}/tarball.sh ${TARGET_VERSION} ${TARGET_DESCRIBE}) +add_custom_target("tarball" COMMAND sh ${CMAKE_SCRIPT_PATH}/tarball/tarball.sh ${TARGET_VERSION} ${TARGET_DESCRIBE}) enable_testing() #add_subdirectory(conf) diff --git a/cmake/Package.cmake b/cmake/Package.cmake index c5022b4..5bb224b 100644 --- a/cmake/Package.cmake +++ b/cmake/Package.cmake @@ -22,14 +22,15 @@ set(CPACK_RPM_PRE_INSTALL_SCRIPT_FILE ${CMAKE_SOURCE_DIR}/cmake/PreInstall.in) #set(CPACK_RPM_POST_UNINSTALL_SCRIPT_FILE ${CMAKE_SOURCE_DIR}/cmake/PostUninstall.in) #set(CPACK_RPM_PRE_UNINSTALL_SCRIPT_FILE ${CMAKE_SOURCE_DIR}/cmake/PreUninstall.in) -set(CMAKE_INSTALL_PREFIX "/home/tsg/verify-policy") -set(CPACK_RPM_BUILD_SOURCE_DIRS_PREFIX /home/tsg) +set(CMAKE_INSTALL_PREFIX "/opt/tsg/verify-policy") +set(CPACK_RPM_BUILD_SOURCE_DIRS_PREFIX /opt/tsg) install(PROGRAMS build/platform/verify-policy DESTINATION ./bin) install(DIRECTORY ./conf DESTINATION ./) install(DIRECTORY ./resource DESTINATION ./) -install(FILES script/verify-policy.service DESTINATION /usr/lib/systemd/system/) +install(FILES script/service/verify-policy.service DESTINATION /usr/lib/systemd/system/) +install(FILES script/tmpfiles/verify_policy.conf DESTINATION /usr/lib/tmpfiles.d/) # Must uninstall the debug package before install release package if(CMAKE_BUILD_TYPE STREQUAL "Debug") diff --git a/platform/src/verify_policy.cpp b/platform/src/verify_policy.cpp index fa07442..13de274 100644 --- a/platform/src/verify_policy.cpp +++ b/platform/src/verify_policy.cpp @@ -320,7 +320,8 @@ cJSON *get_query_from_request(const char *data, int thread_id) goto free; } hit_cnt = http_policy_scan(verify_policy->type, &verify_policy->verify_object[i], data_obj, ctx); - if(0 == strcasecmp(verify_policy->verify_object[i].attri_name, "ip")) + if(0 == strcasecmp(verify_policy->verify_object[i].attri_name, "source") || + 0 == strcasecmp(verify_policy->verify_object[i].attri_name, "destination")) { ipaddr_free(verify_policy->verify_object[i].ip_addr); } diff --git a/script/verify-policy.service b/script/service/verify-policy.service similarity index 100% rename from script/verify-policy.service rename to script/service/verify-policy.service diff --git a/script/tarball.sh b/script/tarball/tarball.sh similarity index 100% rename from script/tarball.sh rename to script/tarball/tarball.sh diff --git a/script/tmpfiles/verify_policy.conf b/script/tmpfiles/verify_policy.conf new file mode 100644 index 0000000..f7fe4cc --- /dev/null +++ b/script/tmpfiles/verify_policy.conf @@ -0,0 +1,7 @@ +#Type Path Mode User Group Age Argument +d /var/log/verify-policy/ 0755 - - 7d - +d /run/verify-policy/pangu_files 0755 - - - - +d /run/verify-policy/rulescan_tmp 0755 - - - - +L /opt/tsg/verify-policy/logs - - - - /var/log/verify-policy +L /opt/tsg/verify-policy/pangu_files - - - - /run/verify-policy/pangu_files +L /opt/tsg/verify-policy/rulescan_tmp - - - - /run/verify-policy/rulescan_tmp