mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-24 04:33:24 +00:00
Code Issues Releases Activity
931d63ac9e
freebsd-ports/security/zeek/Makefile

142 lines
4.7 KiB
Makefile
Raw Normal View History

security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
# Created by: David O'Brien <obrien@FreeBSD.org>
# $FreeBSD$
PORTNAME= zeek
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
PORTVERSION= 4.0.0
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
CATEGORIES= security
security/bro: Update to 3.0.3 and address a number of potential denial of service issues: https://github.com/zeek/zeek/releases/tag/v3.0.2 https://github.com/zeek/zeek/releases/tag/v3.0.3 - Potential Denial of Service due to memory leak in DNS TSIG message parsing. - Potential Denial of Service due to memory leak (or assertion when compiling with assertions enabled) when receiving a second SSH KEX message after a first. - Potential Denial of Service due to buffer read overflow and/or memory leaks in Kerberos analyzer. The buffer read overflow could occur when the Kerberos message indicates it contains an IPv6 address, but does not send enough data to parse out a full IPv6 address. A memory leak could occur when processing KRB_KDC_REQ KRB_KDC_REP messages for message types that do not match a known/expected type. - Potential Denial of Service when sending many zero-length SSL/TLS certificate data. Such messages underwent the full Zeek file analysis treatment which is expensive (and meaninguless here) compared to how cheaply one can "create" or otherwise indicate many zero-length contained in an SSL message. - Potential Denial of Service due to buffer read overflow in SMB transaction data string handling. The length of strings being parsed from SMB messages was trusted to be whatever the message claimed instead of the actual length of data found in the message. - Potential Denial of Service due to null pointer dereference in FTP ADAT Base64 decoding. - Potential Denial of Service due buffer read overflow in FTP analyzer word/whitespace handling. This typically won't be a problem in most default deployments of Zeek since the FTP analyzer receives data from a ContentLine (NVT) support analyzer which first null-terminates the buffer used for further FTP parsing. Approved by: ler (mentor, implicit) MFH: 2020Q1 Security: 4ae135f7-85cd-4c32-ad94-358271b31f7f
2020-03-15 22:44:26 +00:00
MASTER_SITES= https://old.zeek.org/downloads/
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}
MAINTAINER= leres@FreeBSD.org
COMMENT= System for detecting network intruders in real-time
LICENSE= BSD3CLAUSE
security/zeek: enable on powerpc64 head
2020-12-22 17:02:54 +00:00
BROKEN_FreeBSD_11_powerpc64== Does not build: error: zero-size array 'names'
BROKEN_FreeBSD_12_powerpc64== Does not build: error: zero-size array 'names'
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
USES= bison cmake compiler:c++11-lang gettext-runtime ninja perl5 python shebangfix ssl
security/zeek: Fix typo in the rc.d script (From the PR) "bro_stop" should say "zeek_stop" instead. PR: 245612 Reported by: bugs@codejammer.se MFH: 2020Q2
2020-04-14 18:10:15 +00:00
USE_LDCONFIG= yes
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
security/zeek: Limit portscout to even long term support release versions https://github.com/zeek/zeek/releases Zeek 3.0.x is the Long-Term Support release, receiving bug fixes until at least October 2020 while Zeek 3.1.x is the current feature release, receiving bug fixes until approximately July 2020 when the 3.2.x release series begins. Approved by: matthew (mentor, implicit)
2020-03-18 00:34:19 +00:00
PORTSCOUT= limit:0,even
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
CMAKE_ARGS+= -DPYTHON_EXECUTABLE:PATH=${PYTHON_CMD}
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
SHEBANG_FILES= auxil/zeekctl/auxil/trace-summary/trace-summary
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
SUB_FILES= pkg-message
NO_MTREE= yes
CMAKE_ARGS+= -GNinja \
-D CMAKE_INSTALL_PREFIX:PATH=${PREFIX} \
-D ZEEK_ROOT_DIR:PATH=${PREFIX} \
-D PY_MOD_INSTALL_DIR:PATH=${PREFIX}/lib/zeekctl \
-D ZEEK_SCRIPT_INSTALL_PATH:PATH=${PREFIX}/share/zeek \
-D ZEEK_ETC_INSTALL_DIR:PATH=${PREFIX}/etc \
-D ZEEK_MAN_INSTALL_PATH=${MANPREFIX}/man \
-D ENABLE_PERFTOOLS_DEBUG:BOOL=false \
-D BinPAC_SKIP_INSTALL:BOOL=true \
-D INSTALL_AUX_TOOLS:BOOL=true \
-D BUILD_SHARED_LIBS:BOOL=true \
-D BUILD_STATIC_BROKER:BOOL=true \
-D CMAKE_EXE_LINKER_FLAGS="${OPENSSL_LDFLAGS}"
ZEEKUSER?= zeek
ZEEKGROUP?= zeek
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
PLIST_SUB+= ARCH=${UNAME_M} \
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
ZEEKUSER=${ZEEKUSER} \
ZEEKGROUP=${ZEEKGROUP} \
LCASE_OPSYS=${OPSYS:tl}
USERS= ${ZEEKUSER}
GROUPS= ${ZEEKGROUP}
security/zeek: Remove deprecated security/broccoli option Upstream confirms that support for the broccoli protocol will be removed in a future version of zeek. And given that security/broccoli requires python2 which will be deprecated at the end of December, lets remove broccoli support from zeek now.
2020-11-19 00:34:21 +00:00
OPTIONS_DEFINE= BROKER DEBUG GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP \
PERFTOOLS ZEEKCTL
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
OPTIONS_DEFAULT=BROKER GEOIP2 IPSUMDUMP LBL_CF LBL_HF NETMAP ZEEKCTL
OPTIONS_SUB= yes
BROKER_DESC= Enable the Broker communication library
GEOIP2_DESC= Build with GeoIP2 (MaxMindDB) support
IPSUMDUMP_DESC= Enables traffic summaries
LBL_CF_DESC= Unix time to formated time/date filter support
LBL_HF_DESC= Address to hostname filter support
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
NETMAP_DESC= Native Netmap Packet IOSource for Zeek
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
PERFTOOLS_DESC= Use Perftools to improve memory & CPU usage
ZEEKCTL_DESC= ZeekControl support (implies BROKER and IPSUMDUMP)
ZEEKCTL_IMPLIES= BROKER IPSUMDUMP
Move devel/swig30 to devel/swig and update to 4.0.1 - Do not silence installation message - Update dependent ports: - Fix build with swig 4.0.1 - Update *_DEPENDS - Remove BINARY_ALIAS Changes: http://www.swig.org/news.php PR: 246613 Exp-run by: antoine
2020-06-17 18:17:45 +00:00
BROKER_BUILD_DEPENDS= swig:devel/swig
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
BROKER_CMAKE_BOOL= ENABLE_BROKER
DEBUG_CMAKE_BOOL= ENABLE_DEBUG
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
GEOIP2_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb
IPSUMDUMP_BUILD_DEPENDS=ipsumdump:net/ipsumdump
IPSUMDUMP_RUN_DEPENDS= ipsumdump:net/ipsumdump
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
LBL_CF_RUN_DEPENDS= ${LOCALBASE}/bin/cf:sysutils/lbl-cf
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
LBL_HF_RUN_DEPENDS= ${LOCALBASE}/bin/hf:sysutils/lbl-hf
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
NETMAP_GH_TUPLE= zeek:zeek-netmap:v2.0.0:zeek_netmap
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
NETMAP_USE= GITHUB=nodefault
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
PERFTOOLS_BUILD_DEPENDS=${LOCALBASE}/bin/perftools-pprof:devel/google-perftools
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
PERFTOOLS_CMAKE_BOOL= ENABLE_PERFTOOLS
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
PERFTOOLS_RUN_DEPENDS=${LOCALBASE}/bin/perftools-pprof:devel/google-perftools
Move devel/swig30 to devel/swig and update to 4.0.1 - Do not silence installation message - Update dependent ports: - Fix build with swig 4.0.1 - Update *_DEPENDS - Remove BINARY_ALIAS Changes: http://www.swig.org/news.php PR: 246613 Exp-run by: antoine
2020-06-17 18:17:45 +00:00
PYTHON_BUILD_DEPENDS= swig:devel/swig
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
ZEEKCTL_BUILD_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \
${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR} \
Move devel/swig30 to devel/swig and update to 4.0.1 - Do not silence installation message - Update dependent ports: - Fix build with swig 4.0.1 - Update *_DEPENDS - Remove BINARY_ALIAS Changes: http://www.swig.org/news.php PR: 246613 Exp-run by: antoine
2020-06-17 18:17:45 +00:00
swig:devel/swig
security/zeek: Fix build with PERFTOOLS which needed BUILD_DEPENDS. While we're here sort options related. Reported by: James Welcher
2020-05-08 20:51:23 +00:00
ZEEKCTL_CMAKE_BOOL= INSTALL_ZEEKCTL
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
ZEEKCTL_RUN_DEPENDS= ${LOCALBASE}/bin/bash:shells/bash \
${PYTHON_PKGNAMEPREFIX}sqlite3>0:databases/py-sqlite3@${PY_FLAVOR}
.include <bsd.port.options.mk>
.if ${PORT_OPTIONS:MZEEKCTL}
USE_RC_SUBR= zeek
.endif
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
post-patch:
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
${REINPLACE_CMD} -e '\|/usr/local/|s|$$| ${STAGEDIR}${PREFIX}/|' \
${WRKSRC_zeek_netmap}/cmake/FindNetmap.cmake
# # Silence the "use ZeekControl.plugin instead of BroControl.plugin" nag
# @${REINPLACE_CMD} -e 's/^print/#&/' \
# ${WRKSRC}/auxil/zeekctl/BroControl/__init__.py
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
post-install-ZEEKCTL-on:
${MKDIR} ${STAGEDIR}${PREFIX}/logs
${MKDIR} ${STAGEDIR}${PREFIX}/spool/tmp
${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/auto
${MKDIR} ${STAGEDIR}${PREFIX}/spool/installed-scripts-do-not-touch/site
.for F in zeekctl.cfg networks.cfg node.cfg
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
${MV} ${STAGEDIR}${PREFIX}/etc/${F} ${STAGEDIR}${PREFIX}/etc/${F}.sample
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
.endfor
${RM} ${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh
${LN} -s ../../../spool/zeekctl-config.sh \
${STAGEDIR}${PREFIX}/share/zeekctl/scripts/zeekctl-config.sh
post-install:
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
${MV} ${STAGEDIR}${DATADIR}/site/local.zeek \
${STAGEDIR}${DATADIR}/site/local.zeek.sample
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
pre-install-ZEEKCTL-on:
${MKDIR} ${STAGEDIR}${PREFIX}/etc/rc.d
security/zeek: Update to 4.0.0 This is the next Long-Term Support (LTS) major version: https://github.com/zeek/zeek/releases/tag/v4.0.0 https://zeek.org/2020/12/15/zeek-4-0-release-candidate/ Support for the previous LTS (3.0.x) will end in about two months. Reported by: Jon Siwek
2021-03-20 01:16:38 +00:00
post-install-NETMAP-on:
${MKDIR} ${WRKDIR}/zeek-bin
${CP} ${STAGEDIR}${PREFIX}/bin/zeek-config ${WRKDIR}/zeek-bin
${REINPLACE_CMD} -e 's|=/usr/local|=${STAGEDIR}${PREFIX}|' \
-e '/^include_dir=/s|:/usr/local|:${STAGEDIR}${PREFIX}|' \
${WRKDIR}/zeek-bin/zeek-config
cd ${WRKSRC_zeek_netmap} && env PATH=${WRKDIR}/zeek-bin:${PATH} \
./configure --with-netmap=/usr \
--install-root=${STAGEDIR}${PREFIX}/lib/zeek/plugins
cd ${WRKSRC_zeek_netmap}/build && make && make install
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
.include <bsd.port.pre.mk>
UNAME_M!= ${UNAME} -m
security/zeek: This adds security/zeek, the new version of security/bro. This is being done as svn copy instead of rename so that users of security/bro can have some time to migrate. It also allows for possible security updates to the old bro port which upstream has indicated is possible for at least a few months. Reviewed by: ler (mentor) Approved by: ler (mentor) Differential Revision: https://reviews.freebsd.org/D22376
2019-11-17 01:03:04 +00:00
security/zeek: Fix build on armv7 and allow running as non-root user Apply Renato Botelho's fix for the ARCH used in PLIST_SUB (with some changes). Essentially use uname -m instead of trying to fix up the ARCH defined by bsd.port.mk (uname -p). While we're here: - Convert networks.cfg, node.cfg, and zeekctl.cfg to use @sample - Use @sample to avoid clobbering site.zeek (oops). - Remove unnecessary subshell for the post-build-NETMAP-on target. - Silence the annoying "use ZeekControl.plugin instead of BroControl.plugin" nag. - Reformat the rc.d script. - Update the rc.d script to honor the zeek_user rc.d variable and update pkg-message.in with hints on how to run as user zeek. - Explain how to configure zeek to ignore checksum errors when NIC checksum offloading is in use. - Make share/zeekctl/scripts owned by user zeek to allow "zeekctl install" when running as user zeek. PR: 250886 Reported by: garga
2020-11-06 18:38:46 +00:00
.include <bsd.port.post.mk>
Reference in New Issue Copy Permalink