[arch-commits] Commit in beats/trunk (PKGBUILD auditbeat.install)

[Massimiliano Torromeo]

    Date: Wednesday, July 11, 2018 @ 11:38:50
  Author: mtorromeo
Revision: 357300

upgpkg: beats 6.3.1-1

Updated to 6.3.1 and added post_install warning to auditbeat

Added:
  beats/trunk/auditbeat.install
Modified:
  beats/trunk/PKGBUILD

-------------------+
 PKGBUILD          |    5 +++--
 auditbeat.install |    6 ++++++
 2 files changed, 9 insertions(+), 2 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2018-07-11 11:38:45 UTC (rev 357299)
+++ PKGBUILD	2018-07-11 11:38:50 UTC (rev 357300)
@@ -3,7 +3,7 @@
 
 pkgbase=beats
 pkgname=(filebeat packetbeat metricbeat heartbeat-elastic auditbeat)
-pkgver=6.3.0
+pkgver=6.3.1
 pkgrel=1
 pkgdesc='Data shippers for Elasticsearch'
 arch=('x86_64')
@@ -26,7 +26,7 @@
         "metricbeat-tmpfile.conf"
         "heartbeat-tmpfile.conf"
         "auditbeat-tmpfile.conf")
-sha256sums=('9297c41ad6d03cd27913f11d12a9c3b74b2a7433f2fe52a1fa9104bd461a8825'
+sha256sums=('0d4286d8a04abf7be520412d38bb7148b53797a22f6ec8064a54bb43d8d00657'
             '33feb3690f8b31563cc1e2da557c2aa326501ce9ccd7e0a142036902bfdb05ff'
             '4d5394cfe3299c9a6af5ac34c1ad4bcdc2e79162379cccbf00fb414eb28253c0'
             '9f4e33fc768d3500fa3428dcbfda241c6473a2cae8cc4dbadf8f61ca9f2bbec5'
@@ -156,6 +156,7 @@
 package_auditbeat() {
     pkgdesc='Audit the activities of users and processes on your system'
     depends=('audit')
+    install='auditbeat.install'
 
     _do_package_beat
 }

Added: auditbeat.install
===================================================================
--- auditbeat.install	                        (rev 0)
+++ auditbeat.install	2018-07-11 11:38:50 UTC (rev 357300)
@@ -0,0 +1,6 @@
+post_install() {
+    echo "CONFIG_AUDIT is disabled in the Arch kernel packages so a custom kernel"
+    echo "is required for the Auditbeat auditd module to work. However, some features"
+    echo "like the the file integrity module will work fine without kernel audit support."
+    echo "The package linux-hardened has full support for audit."
+}