mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-19 03:52:17 +00:00
Code Issues Releases Activity
1e331193d5
freebsd-ports/security/zeek/Makefile

157 lines
5.1 KiB
Makefile
Raw Normal View History

security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
# Created by: David O'Brien <obrien@FreeBSD.org>
PORTNAME= zeek
security/zeek: Update to 4.0.4 https://github.com/zeek/zeek/releases/tag/v4.0.4 This release fixes two vulnerabilities: - Paths from log stream make it into system() unchecked, potentially leading to commands being run on the system unintentionally. This requires either bad scripting or a malicious package to be installed, and is considered low severity. - Fix potential unbounded state growth in the PIA analyzer when receiving a connection with either a large number of zero-length packets, or one which continues ack-ing unseen segments. It is possible to run Zeek out of memory in these instances and cause it to crash. Due to the possibility of this happening with packets received from the network, this is a potential DoS vulnerability. Other fixes: - The highwayhash submodule was updated to fix a build failure on FreeBSD 14. - Packet sources that don't have a selectable file descriptor could potentially prevent the network time from ever updating, which would have adverse effects on the primary run loop such as preventing timers from executing. - Specific conditions in the run loop could lead RotationTimers to get into an infinite loop. - Specially crafted HTTP packets could avoid the HTTP analyzer. - Zeekctl crashes using the zeekctl status command if the StatusCmdShowAll option is set to 1 in zeekctl.cfg. - The ignore_checksum_nets option does not work correctly if configured with multiple subnets. Reported by: Tim Wojtulewicz Security: d4d21998-bdc4-4a09-9849-2898d9b41459
2021-09-22 22:15:09 +00:00
PORTVERSION= 4.0.4
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
CATEGORIES= security
security/zeek: Update to 4.0.2 https://github.com/zeek/zeek/releases/tag/v4.0.2 This release fixes several potential DoS vulnerabilities: - Fix potential Undefined Behavior in decode_netbios_name() and decode_netbios_name_type() BIFs. The latter has a possibility of a remote heap-buffer-overread, making this a potential DoS vulnerability. - Add some extra length checking when parsing mobile ipv6 packets. Due to the possibility of reading invalid headers from remote sources, this is a potential DoS vulnerability. Other fixes: - Fix heap-use-after-free after clear_table() on a table that uses expiration attributes. - Add fatal error for if table/Dictionary state ever becomes invalid since the behavior becomes unexpected/unclear at that point (e.g. when table bucket positions become large enough to overflow their 16-bit storage due to aggressive expiration-check settings preventing the re-positioning items) - Add missing "zeek/" to header includes, which can prevent external plugins from compiling against Zeek source-tree (e.g. via ./configure --zeek-dist=) - Fix reading empty set[enum] values and any vector of enum values from config files - Fix type-checks related to list-type equality Reported by: Tim Wojtulewicz MFH: 2021Q2 Security: a550d62c-f78d-4407-97d9-93876b6741b9
2021-06-03 00:14:47 +00:00
MASTER_SITES= https://download.zeek.org/
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
MAINTAINER= leres@FreeBSD.org
COMMENT= System for detecting network intruders in real-time
LICENSE= BSD3CLAUSE
security/zeek: fix build on powerpc64 elfv2 -mpowerp8-vector is now necessary due to use of highwayhash. Fix typo on sysctlbyname. Also correct typo in BROKEN entries.
2021-03-23 18:43:26 +00:00
BROKEN_FreeBSD_12_powerpc64= Does not build: error: zero-size array 'names'
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
security/zeek: Add CPE information Approved by: portmgr (blanket)
2021-09-02 09:03:25 +00:00
USES= bison cmake compiler:c++11-lang cpe gettext-runtime ninja perl5 \
security/zeek: Add fine grained DEBUG options Allow the user to pick from DEBUG, MINSIZEREL, RELEASE, and RELWITHDEBINFO options instead of just DEBUG. Don't STRIP with DEBUG or RELWITHDEBINFO. Make some minor whitespace changes suggested by portfmt.
2021-05-11 02:09:19 +00:00
python shebangfix ssl
security/zeek: Fix typo in the rc.d script (From the PR) "bro_stop" should say "zeek_stop" instead. PR: 245612 Reported by: bugs@codejammer.se MFH: 2020Q2
2020-04-14 18:10:15 +00:00
USE_LDCONFIG= yes
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
security/zeek: Limit portscout to even long term support release versions https://github.com/zeek/zeek/releases Zeek 3.0.x is the Long-Term Support release, receiving bug fixes until at least October 2020 while Zeek 3.1.x is the current feature release, receiving bug fixes until approximately July 2020 when the 3.2.x release series begins. Approved by: matthew (mentor, implicit)
2020-03-18 00:34:19 +00:00
PORTSCOUT= limit:0,even
security/zeek: fix build on powerpc64 elfv2 -mpowerp8-vector is now necessary due to use of highwayhash. Fix typo on sysctlbyname. Also correct typo in BROKEN entries.
2021-03-23 18:43:26 +00:00
CXXFLAGS_powerpc64= -mpower8-vector
security/zeek: Add fine grained DEBUG options Allow the user to pick from DEBUG, MINSIZEREL, RELEASE, and RELWITHDEBINFO options instead of just DEBUG. Don't STRIP with DEBUG or RELWITHDEBINFO. Make some minor whitespace changes suggested by portfmt.
2021-05-11 02:09:19 +00:00
CMAKE_ARGS+= -DPYTHON_EXECUTABLE:PATH=${PYTHON_CMD}
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
SHEBANG_FILES= auxil/zeekctl/auxil/trace-summary/trace-summary
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
SUB_FILES= pkg-message
NO_MTREE= yes
CMAKE_ARGS+= -GNinja \
-D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \
-D ZEEK_ROOT_DIR:PATH=${PREFIX} \
-D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/zeekctl \
-D ZEEK_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/zeek \
-D ZEEK_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \
-D ZEEK_MAN_INSTALL_PATH=${MANPREFIX}/man \
-D ENABLE_PERFTOOLS_DEBUG:BOOL=false \
-D BinPAC_SKIP_INSTALL:BOOL=true \
-D INSTALL_AUX_TOOLS:BOOL=true \
-D BUILD_SHARED_LIBS:BOOL=true \
-D BUILD_STATIC_BROKER:BOOL=true \
-D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}"
ZEEKUSER?= zeek
ZEEKGROUP?= zeek
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
PLIST_SUB+= ARCH=${UNAME_M} \
security/zeek: Add a ZKG option to pull in py-zkg
2021-06-24 02:05:45 +00:00
LCASE_OPSYS=${OPSYS:tl} \
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
ZEEKGROUP=${ZEEKGROUP} \
security/zeek: Add a ZKG option to pull in py-zkg
2021-06-24 02:05:45 +00:00
ZEEKUSER=${ZEEKUSER}
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
USERS= ${ZEEKUSER}
GROUPS= ${ZEEKGROUP}
*: fix tab vs. space issues, and comments according to the guide.
2021-10-16 09:51:03 +00:00
OPTIONS_DEFINE= BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP PERFTOOLS \
security/zeek: Add a ZKG option to pull in py-zkg
2021-06-24 02:05:45 +00:00
ZEEKCTL ZKG
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
security/zeek: Add fine grained DEBUG options Allow the user to pick from DEBUG, MINSIZEREL, RELEASE, and RELWITHDEBINFO options instead of just DEBUG. Don't STRIP with DEBUG or RELWITHDEBINFO. Make some minor whitespace changes suggested by portfmt.
2021-05-11 02:09:19 +00:00
OPTIONS_SINGLE= BUILD_TYPE
OPTIONS_SINGLE_BUILD_TYPE= DEBUG MINSIZEREL RELEASE RELWITHDEBINFO
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
security/zeek: Add fine grained DEBUG options Allow the user to pick from DEBUG, MINSIZEREL, RELEASE, and RELWITHDEBINFO options instead of just DEBUG. Don't STRIP with DEBUG or RELWITHDEBINFO. Make some minor whitespace changes suggested by portfmt.
2021-05-11 02:09:19 +00:00
OPTIONS_DEFAULT= BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP RELEASE \
security/zeek: Add a ZKG option to pull in py-zkg
2021-06-24 02:05:45 +00:00
ZEEKCTL ZKG
security/zeek: Add fine grained DEBUG options Allow the user to pick from DEBUG, MINSIZEREL, RELEASE, and RELWITHDEBINFO options instead of just DEBUG. Don't STRIP with DEBUG or RELWITHDEBINFO. Make some minor whitespace changes suggested by portfmt.
2021-05-11 02:09:19 +00:00
OPTIONS_SUB= yes
BROKER_DESC= Enable the Broker communication library
DEBUG_DESC= Optimizations off, debug symbols/flags on
GEOIP2_DESC= Build with GeoIP2 (MaxMindDB) support
IPSUMDUMP_DESC= Enables traffic summaries
LBL_CF_DESC= Unix time to formated time/date filter support
LBL_HF_DESC= Address to hostname filter support
MINSIZEREL_DESC= Optimizations on, debug symbols/flags off
NETMAP_DESC= Native Netmap Packet IOSource for Zeek
PERFTOOLS_DESC= Use Perftools to improve memory & CPU usage
RELEASE_DESC= Optimizations on, debug symbols/flags off
RELWITHDEBINFO_DESC= Optimizations/debug symbols on, debug flags off
ZEEKCTL_DESC= ZeekControl support (implies BROKER and IPSUMDUMP)
security/zeek: Add a ZKG option to pull in py-zkg
2021-06-24 02:05:45 +00:00
ZKG_DESC= Zeek package manager support
security/zeek: Add fine grained DEBUG options Allow the user to pick from DEBUG, MINSIZEREL, RELEASE, and RELWITHDEBINFO options instead of just DEBUG. Don't STRIP with DEBUG or RELWITHDEBINFO. Make some minor whitespace changes suggested by portfmt.
2021-05-11 02:09:19 +00:00
ZEEKCTL_IMPLIES= BROKER IPSUMDUMP
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
Move devel/swig30 to devel/swig and update to 4.0.1 - Do not silence installation message - Update dependent ports: - Fix build with swig 4.0.1 - Update *_DEPENDS - Remove BINARY_ALIAS Changes: http://www.swig.org/news.php PR: 246613 Exp-run by: antoine
2020-06-17 18:17:45 +00:00
BROKER_BUILD_DEPENDS= swig:devel/swig
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
BROKER_CMAKE_BOOL= ENABLE_BROKER
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump
IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
NETMAP_GH_TUPLE= zeek:zeek-netmap:v2.0.0:zeek_netmap
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
NETMAP_USE= GITHUB=nodefault
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
PERFTOOLS_BUILD_DEPENDS=${LOCALBASE}/bin/perftools-pprof:devel/google-perftools
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
PERFTOOLS_RUN_DEPENDS=${LOCALBASE}/bin/perftools-pprof:devel/google-perftools
Move devel/swig30 to devel/swig and update to 4.0.1 - Do not silence installation message - Update dependent ports: - Fix build with swig 4.0.1 - Update *_DEPENDS - Remove BINARY_ALIAS Changes: http://www.swig.org/news.php PR: 246613 Exp-run by: antoine
2020-06-17 18:17:45 +00:00
PYTHON_BUILD_DEPENDS= swig:devel/swig
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
ZEEKCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \
${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \
Move devel/swig30 to devel/swig and update to 4.0.1 - Do not silence installation message - Update dependent ports: - Fix build with swig 4.0.1 - Update *_DEPENDS - Remove BINARY_ALIAS Changes: http://www.swig.org/news.php PR: 246613 Exp-run by: antoine
2020-06-17 18:17:45 +00:00
swig:devel/swig
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
ZEEKCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \
${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR}
security/zeek: Add a ZKG option to pull in py-zkg
2021-06-24 02:05:45 +00:00
ZKG_RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}zkg>=2.7.1:security/py-zkg@${PY_FLAVOR} \
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
.include <bsd.port.options.mk>
security/zeek: Add fine grained DEBUG options Allow the user to pick from DEBUG, MINSIZEREL, RELEASE, and RELWITHDEBINFO options instead of just DEBUG. Don't STRIP with DEBUG or RELWITHDEBINFO. Make some minor whitespace changes suggested by portfmt.
2021-05-11 02:09:19 +00:00
.if ${PORT_OPTIONS:MDEBUG}
CMAKE_BUILD_TYPE= Debug
STRIP=
.elif ${PORT_OPTIONS:MMINSIZEREL}
CMAKE_BUILD_TYPE= MinSizeRel
.elif ${PORT_OPTIONS:MRELEASE}
CMAKE_BUILD_TYPE= Release
.elif ${PORT_OPTIONS:MRELWITHDEBINFO}
CMAKE_BUILD_TYPE= RelWithDebInfo
STRIP=
.endif
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
.if ${PORT_OPTIONS:MZEEKCTL}
USE_RC_SUBR= zeek
.endif
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
post-patch:
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
${REINPLACE_CMD} -e '\|/usr/local/|s|$$| ${STAGEDIR}${PREFIX}/|' \
${WRKSRC_zeek_netmap}/cmake/FindNetmap.cmake
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
post-install-ZEEKCTL-on:
${MKDIR} ${STAGEDIR}${PREFIX}/logs
${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp
${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto
${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site
.for F in zeekctl.cfg networks.cfg node.cfg
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.sample
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
.endfor
${RM} ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh
${LN} -s ../../../spool/zeekctl-config.sh \
${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh
post-install:
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
${MV} ${STAGEDIR}${DATADIR}/site/local.zeek \
${STAGEDIR}${DATADIR}/site/local.zeek.sample
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
pre-install-ZEEKCTL-on:
${MKDIR} ${STAGEDIR}${PREFIX}/etc/rc.d
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
post-install-NETMAP-on:
${MKDIR} ${WRKDIR}/zeek-bin
${CP} ${STAGEDIR}${PREFIX}/bin/zeek-config ${WRKDIR}/zeek-bin
security/zeek: Unbreak build when PREFIX is not /usr/local
2021-05-12 23:47:01 +00:00
${REINPLACE_CMD} -e 's|${PREFIX}|${STAGEDIR}${PREFIX}|g' \
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
${WRKDIR}/zeek-bin/zeek-config
security/zeek: Unbreak armv7 build and fix testport issue Add a patch from upstream to fix building on armv7 (used by pfsense): https://github.com/zeek/zeek/issues/1496 Thanks to @garga for the pointer. Fix a testport "left over" file @adridg reported. When zeek is run as part of package installation, it copies some config files to spool/installed-scripts-do-not-touch/site and local.zeek.sample hitches a ride and needs to be removed on uninstall. But it is not really a @sample candidate. While we're here fix some minor portlint (env -> ${SETENV}) and clean up some commented out directives. Reported by: garga adridg
2021-04-14 05:13:29 +00:00
cd ${WRKSRC_zeek_netmap} && ${SETENV} PATH=${WRKDIR}/zeek-bin:${PATH} \
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
./configure --with-netmap=/usr \
--install-root=${STAGEDIR}${PREFIX}/lib/zeek/plugins
cd ${WRKSRC_zeek_netmap}/build && make && make install
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
.include <bsd.port.pre.mk>
UNAME_M!= ${UNAME} -m
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
.include <bsd.port.post.mk>
Reference in New Issue Copy Permalink