freebsd-ports/security/sguil/Makefile

# Created by: Muhammad Moinur Rahman <5u623l20@gmail.com>
# $FreeBSD$

PORTNAME=	sguil
PORTVERSION=	0.9.0
REVISION=	1
CATEGORIES=	security

MAINTAINER=	5u623l20@gmail.com
COMMENT=	Sguil is a network security monitoring program

LICENSE=	GPLv3

RUN_DEPENDS=	tcltls>=0:${PORTSDIR}/devel/tcltls \
		${LOCALBASE}/lib/tclx8.4/tclx.tcl:${PORTSDIR}/lang/tclX

USE_GITHUB=	yes
GH_ACCOUNT=	bammv
GH_PROJECT=	${USERS}
GH_TAGNAME=	${GH_COMMIT}
GH_COMMIT=	0b16167

OPTIONS_DEFINE=		DOCS
OPTIONS_DEFAULT=	SERVER CLIENT SENSOR
OPTIONS_MULTI=		INSTANCE
OPTIONS_MULTI_INSTANCE=	SERVER CLIENT SENSOR
OPTIONS_GROUP=		SERVER CLIENT SENSOR
OPTIONS_GROUP_SERVER=	MYSQL
OPTIONS_GROUP_CLIENT=	AUDIO SANCP WIRESHARK
OPTIONS_GROUP_SENSOR=	PADS_SENSOR SANCP_SENSOR
OPTIONS_SUB=		yes

SERVER_DESC=		Install Sguil Server
CLIENT_DESC=		Install Sguil Client
SENSOR_DESC=		Install Sguil SENSOR
MYSQL_DESC=		Depend on databases/mysqltcl
AUDIO_DESC=		Install Festival Speech Synthesis
SANCP_DESC=		Use sancp
PADS_SENSOR_DESC=	Include pads sensor
SANCP_SENSOR_DESC=	Include sancp sensor
WIRESHARK_DESC=		Install wireshark

CLIENT_USES=		tk:wrapper
SERVER_RUN_DEPENDS=	p0f:${PORTSDIR}/net-mgmt/p0f \
	                tcpflow:${PORTSDIR}/net/tcpflow \
	                dtplite:${PORTSDIR}/devel/tcllib
CLIENT_RUN_DEPENDS=	dtplite:${PORTSDIR}/devel/tcllib \
			${LOCALBASE}/lib/iwidgets/iwidgets.tcl:${PORTSDIR}/x11-toolkits/iwidgets \
			gpg2:${PORTSDIR}/security/gnupg
SENSOR_RUN_DEPENDS=	barnyard2:${PORTSDIR}/security/barnyard2-sguil
MYSQL_LIB_DEPENDS=	libmysqltcl3.052.so:${PORTSDIR}/databases/mysqltcl
AUDIO_RUN_DEPENDS=	festival:${PORTSDIR}/audio/festival
SANCP_RUN_DEPENDS=	sancp:${PORTSDIR}/security/sancp
WIRESHARK_RUN_DEPENDS=	wireshark:${PORTSDIR}/net/wireshark
PADS_SENSOR_RUN_DEPENDS=	pads:${PORTSDIR}/net-mgmt/pads
SANCP_SENSOR_RUN_DEPENDS=	sancp:${PORTSDIR}/security/sancp

NO_BUILD=	yes
TCL_VER=	8.5
TCLSH=		tclsh${TCL_VER}
SERVER_SGUILDIR?=	sguild
CLIENT_SGUILDIR?=	sguil-client
SENSOR_SGUILDIR?=	sguil-sensor
PLIST_SUB=	SERVER_SGUILDIR=${SERVER_SGUILDIR} \
		CLIENT_SGUILDIR=${CLIENT_SGUILDIR} \
		SENSOR_SGUILDIR=${SENSOR_SGUILDIR}
SUB_LIST=	SERVER_SGUILDIR=${SERVER_SGUILDIR} TCLSH=${TCLSH} \
		CLIENT_SGUILDIR=${CLIENT_SGUILDIR} \
		SENSOR_SGUILDIR=${SENSOR_SGUILDIR}
SERVER_CONFS=	autocat.conf sguild.access sguild.email	sguild.reports \
		sguild.conf sguild.queries sguild.users
CLIENT_LIBFILES=SguilUtil.tcl dkffont.tcl email17.tcl extdata.tcl \
		sellib.tcl sancp.tcl sound.tcl guilib.tcl qrybuild.tcl \
		qrylib.tcl report.tcl stdquery.tcl whois.tcl
SENSOR_AGENTS=	pcap_agent.tcl snort_agent.tcl
SENSOR_CONFS=	pcap_agent.conf snort_agent.conf
LOG_SCRIPTS=	log_packets-daemonlogger.sh log_packets.sh
USERS=		sguil
GROUPS=		sguil

PORTDOCS=	${COMMON_DOCS:S|^doc/||}
COMMON_DOCS=	doc/CHANGES doc/FAQ doc/INSTALL doc/INSTALL.openbsd \
	       	doc/OPENSSL.README doc/TODO doc/UPGRADE doc/USAGE \
	       	doc/sguildb.dia

.include <bsd.port.options.mk>

.if ${PORT_OPTIONS:MCLIENT}
SUB_FILES=	pkg-message-client
.endif

.if ${PORT_OPTIONS:MSERVER}
USE_RC_SUBR+=	sguild
SUB_FILES=	pkg-message-server
.endif

.if ${PORT_OPTIONS:MSENSOR}
USE_RC_SUBR+=	pcap_agent snort_agent
SUB_FILES=	pkg-message-sensor
WITH_PCRE=	true
PORTDOCS+=	README.daemonlogger
.  if ${PORT_OPTIONS:MSANCP_SENSOR}
SENSOR_AGENTS+=	sancp_agent.tcl pcap_agent-sancp.tcl
SENSOR_CONFS+=	sancp_agent.conf sancp-indexed.conf pcap_agent-sancp.conf
USE_RC_SUBR+=	sancp_agent pcap_agent-sancp
PORTDOCS+=	README.sancp_indexed_pcap
.  endif
.  if ${PORT_OPTIONS:MPADS_SENSOR}
SENSOR_AGENTS+=	pads_agent.tcl
SENSOR_CONFS+=	pads_agent.conf
USE_RC_SUBR+=	pads_agent
.  endif
.endif

post-patch:
.if ${PORT_OPTIONS:MSERVER}
	@${REINPLACE_CMD} 's|/bin/sh|${TCLSH}|' \
		${WRKSRC}/server/sguild
	@${MKDIR} ${STAGEDIR}${PREFIX}/etc/${SERVER_SGUILDIR} \
		${STAGEDIR}${PREFIX}/lib/${SERVER_SGUILDIR} \
		${STAGEDIR}${PREFIX}/share/${SERVER_SGUILDIR} \
		${STAGEDIR}${PREFIX}/share/${SERVER_SGUILDIR}/contrib
.endif
.if ${PORT_OPTIONS:MCLIENT}
	@${MKDIR} ${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR} \
		${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/lib \
		${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/images
.endif
.if ${PORT_OPTIONS:MSENSOR}
.  for f in ${SENSOR_AGENTS}
	@${REINPLACE_CMD} 's|/bin/sh|${PREFIX}/bin/${TCLSH}|' \
		${WRKSRC}/sensor/${f}
.  endfor
.endif

do-install:
.if ${PORT_OPTIONS:MSERVER}
	(cd ${WRKSRC}/server/lib && \
		${COPYTREE_BIN} \* ${STAGEDIR}${PREFIX}/lib/${SERVER_SGUILDIR})
	(cd ${WRKSRC}/server/sql_scripts && \
		${COPYTREE_SHARE} \* \
		${STAGEDIR}${PREFIX}/share/${SERVER_SGUILDIR})
	(cd ${WRKSRC}/server/contrib && \
		${COPYTREE_SHARE} \* \
		${STAGEDIR}${PREFIX}/share/${SERVER_SGUILDIR}/contrib)
	${INSTALL_SCRIPT} ${WRKSRC}/server/sguild ${STAGEDIR}${PREFIX}/bin
.  for f in ${SERVER_CONFS}
	${INSTALL_DATA} ${WRKSRC}/server/${f} \
		${STAGEDIR}${PREFIX}/etc/${SERVER_SGUILDIR}/${f}-sample
.  endfor
.endif

.if ${PORT_OPTIONS:MCLIENT}
	${INSTALL_SCRIPT} ${WRKSRC}/client/sguil.tk \
		${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/sguil.tk
	${INSTALL_DATA} ${WRKSRC}/client/sguil.conf \
		${STAGEDIR}${PREFIX}/etc/sguil.conf-sample
	(cd ${WRKSRC}/client/lib && ${INSTALL_DATA} ${CLIENT_LIBFILES} \
		${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/lib)
	(cd ${WRKSRC}/client/lib/images && \
		${INSTALL_DATA} sguil_logo_h.gif checked.gif unchecked.gif \
		${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/images)
	(cd ${WRKSRC}/client/lib/tablelist5.11 && ${COPYTREE_SHARE} \* \
		${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/lib/tablelist5.11)
.endif

.if ${PORT_OPTIONS:MSENSOR}
	@${MKDIR} ${STAGEDIR}${PREFIX}/bin/${SENSOR_SGUILDIR} \
		${STAGEDIR}${PREFIX}/etc/${SENSOR_SGUILDIR} \
		${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR} \
		${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR}/contrib \
		${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR}/init
	(cd ${WRKSRC}/sensor/contrib && \
		${COPYTREE_SHARE} \* \
		${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR}/contrib \
		"! -name ossec_agent.tcl.orig")
	(cd ${WRKSRC}/sensor/init && \
		${COPYTREE_SHARE} \* \
		${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR}/init)
	(cd ${WRKSRC}/sensor/ && \
		${INSTALL_SCRIPT} ${SENSOR_AGENTS} \
		${STAGEDIR}${PREFIX}/bin/${SENSOR_SGUILDIR})
	(cd ${WRKSRC}/sensor && \
		${INSTALL_SCRIPT} ${LOG_SCRIPTS} \
		${STAGEDIR}${PREFIX}/bin/${SENSOR_SGUILDIR})
.  for f in ${SENSOR_CONFS}
	${INSTALL_DATA} ${WRKSRC}/sensor/${f} \
		${STAGEDIR}${PREFIX}/etc/${SENSOR_SGUILDIR}/${f}-sample
.  endfor

.  if ${PORT_OPTIONS:MSANCP_SENSOR}
	${INSTALL_SCRIPT} ${WRKSRC}/sensor/log_packets-sancp.sh \
		${STAGEDIR}${PREFIX}/bin/${SENSOR_SGUILDIR}
	${INSTALL_DATA} ${WRKSRC}/sensor/sancp/sancp.conf \
		${STAGEDIR}${PREFIX}/etc/${SENSOR_SGUILDIR}/sancp.conf-sample
.  endif
.endif

.if ${PORT_OPTIONS:MDOCS}
	@${MKDIR} ${STAGEDIR}${DOCSDIR}
	${INSTALL_DATA} ${COMMON_DOCS:S|^|${WRKSRC}/|} ${STAGEDIR}${DOCSDIR}
.  if ${PORT_OPTIONS:MSENSOR}
	${INSTALL_DATA} ${WRKSRC}/sensor/README.daemonlogger \
		${STAGEDIR}${DOCSDIR}
.    if ${PORT_OPTIONS:MSANCP_SENSOR}
	${INSTALL_DATA} ${WRKSRC}/sensor/README.sancp_indexed_pcap \
		${STAGEDIR}${DOCSDIR}
.    endif
.  endif
.endif

.include <bsd.port.mk>