Name:           hound
Version:        0.1.0
Release:        1%{?dist}
Summary:        Hound Antivirus for Linux
License:        Apache-2.0
URL:            https://houndav.com
Source0:        %{name}-%{version}.tar.gz
BuildRequires:  rust >= 1.91, cargo, systemd-rpm-macros
Requires:       systemd
Suggests:       clamd

%description
Endpoint and supply-chain protection built for the distributions people
actually run. Scanning is yara-x in process; real-time protection uses
fanotify, so a binary can be refused at execve rather than reported after
it has already run.

The execution gate is installed switched OFF. It needs CAP_SYS_ADMIN and
covers the whole root filesystem, so enabling it is the operator's call:
hound settings exec-gate on

%prep
%autosetup

%build
cargo build --release -p houndd -p hound

%install
install -Dm755 target/release/houndd %{buildroot}%{_bindir}/houndd
install -Dm755 target/release/hound  %{buildroot}%{_bindir}/hound
install -Dm644 packaging/systemd/houndd.service \
               %{buildroot}%{_unitdir}/houndd.service
install -Dm644 crates/houndd/rules/hound-builtin.yar \
               %{buildroot}%{_datadir}/hound/rules/hound-builtin.yar
install -dm755 %{buildroot}%{_sharedstatedir}/hound/rules
install -dm700 %{buildroot}%{_sharedstatedir}/hound/vault
for s in 16 22 24 32 48 64 128 256 512; do
  install -Dm644 assets/icons/app-${s}.png \
    %{buildroot}%{_datadir}/icons/hicolor/${s}x${s}/apps/hound.png
done
install -Dm644 assets/icons/hound-app.svg \
  %{buildroot}%{_datadir}/icons/hicolor/scalable/apps/hound.svg

%post
# The built-in rules are compiled into the binary; %{_sharedstatedir}/hound/rules
# is for additional packs only. Seeding it there compiles them twice.
%systemd_post houndd.service

%preun
%systemd_preun houndd.service

%postun
%systemd_postun_with_restart houndd.service

%files
%{_bindir}/houndd
%{_bindir}/hound
%{_unitdir}/houndd.service
%{_datadir}/hound/rules/hound-builtin.yar
%{_datadir}/icons/hicolor/*/apps/hound.png
%{_datadir}/icons/hicolor/scalable/apps/hound.svg
%dir %{_sharedstatedir}/hound
%dir %{_sharedstatedir}/hound/rules
# The vault holds live malware: root-only, never world-readable.
%attr(0700,root,root) %dir %{_sharedstatedir}/hound/vault

%changelog
* Fri Aug 21 2026 Hound <support@houndav.com> - 0.1.0-1
- yara-x engine in process; fanotify execution gate