From 91a639c48e7ad04446bf2e01b1895a658e383365 Mon Sep 17 00:00:00 2001
From: EnumDev <enumdev@enumerated.dev>
Date: Tue, 7 Apr 2026 16:37:46 +0300
Subject: [PATCH] Initial commit

---
 .gitignore       |  3 +++
 check-version.sh | 12 ++++++++++
 pkg.info         | 27 +++++++++++++++++++++++
 source.sh        | 57 ++++++++++++++++++++++++++++++++++++++++++++++++
 4 files changed, 99 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 check-version.sh
 create mode 100644 pkg.info
 create mode 100644 source.sh

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..9d96df7
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,3 @@
+# Ignore BPM archives and signatures
+*.bpm
+*.bpm.sig
diff --git a/check-version.sh b/check-version.sh
new file mode 100644
index 0000000..3a2b4ad
--- /dev/null
+++ b/check-version.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+# Github repository
+REPO="linux-audit/audit-userspace"
+
+# Get tag name using Github Rest API
+TAG_NAME=$(curl -s -L -H "X-GitHub-Api-Version: 2022-11-28" -H "Authorization: token ${GITHUB_API_TOKEN}" https://api.github.com/repos/"$REPO"/releases/latest | jq -r '.tag_name')
+
+# Trim 'v' character in TAG_NAME variable
+VERSION=$(echo "$TAG_NAME" | tr -d 'v')
+
+echo "$VERSION"
diff --git a/pkg.info b/pkg.info
new file mode 100644
index 0000000..9d27a7d
--- /dev/null
+++ b/pkg.info
@@ -0,0 +1,27 @@
+name: audit
+description: Userspace components of the audit framework
+version: 4.1.4
+revision: 1
+url: https://github.com/linux-audit/audit-userspace
+license: GPL2-or-later,LGPL2-or-later
+maintainers:
+  - enumdev@enumerated.dev
+architecture: any
+type: source
+depends:
+  - bash
+  - glibc
+  - krb5
+  - libcap
+make_depends:
+  - apparmor
+  - bash-completion
+  - openldap
+  - linux-api-headers
+  - python3
+  - swig
+downloads:
+  - url: https://github.com/linux-audit/audit-userspace/archive/refs/tags/v${BPM_PKG_VERSION}.tar.gz
+    extract_to: ${BPM_SOURCE}
+    extract_strip_components: 1
+    checksum: 8396544ea08c69b39f5c00027549394f2149b31c4a9e693097d6ce134f3ffe3d
diff --git a/source.sh b/source.sh
new file mode 100644
index 0000000..a99d1ac
--- /dev/null
+++ b/source.sh
@@ -0,0 +1,57 @@
+# This is the source.sh script. It is executed by BPM in a temporary directory when compiling a source package
+# BPM Expects the source code to be extracted into the automatically created 'source' directory which can be accessed using $BPM_SOURCE
+# BPM Expects the output files to be present in the automatically created 'output' directory which can be accessed using $BPM_OUTPUT
+
+# The prepare function is executed in the root of the temp directory
+# This function is used for putting downloaded files to the correct location or applying patches
+prepare() {
+  cd "$BPM_SOURCE"
+  autoreconf -fi
+}
+
+# The build function is executed in the source directory
+# This function is used to compile the source code
+build() {
+  ./configure --prefix=/usr \
+              --sysconfdir=/etc \
+              --libexecdir=/usr/libexec/audit \
+              --runstatedir=/run \
+              --enable-experimental \
+              --enable-gssapi-krb5=yes \
+              --enable-zos-remote \
+              --with-apparmor \
+              --with-io_uring \
+              --with-nftables \
+              --with-python3
+
+  # prevent excessive overlinking due to libtool
+  sed -i -e 's/ -shared / -Wl,-O1,--as-needed\0/g' libtool
+
+  make
+}
+
+# The check function is executed in the source directory
+# This function is used to run tests to verify the package has been compiled correctly
+check() {
+  make check
+}
+
+# The package function is executed in the source directory
+# This function is used to move the compiled files into the output directory
+package() {
+  make DESTDIR="$BPM_OUTPUT" install
+
+  # Move bash-completion to the correct location
+  install -d "$BPM_OUTPUT"/usr/share/bash-completion/completions
+  mv "$BPM_OUTPUT"/etc/bash_completion.d/audit.bash_completion "$BPM_OUTPUT"/usr/share/bash-completion/completions/audit
+
+  # Add factory files
+  install -d "$BPM_OUTPUT"/usr/share/factory
+  cp -a "$BPM_OUTPUT"/etc -t "$BPM_OUTPUT"/usr/share/factory
+
+  # Remove legacy file
+  rm -f "$BPM_OUTPUT"/usr/lib/audit
+
+  # Install package license
+  install -Dm644 "$BPM_SOURCE"/COPYING* -t "$BPM_OUTPUT"/usr/share/licenses/audit
+}