mirror of
https://git.FreeBSD.org/ports.git
synced 2024-11-21 00:25:50 +00:00
177 lines
5.0 KiB
Makefile
177 lines
5.0 KiB
Makefile
# Created by: lx
|
|
# $FreeBSD$
|
|
|
|
PORTNAME= samhain
|
|
PORTVERSION= 3.0.13
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://la-samhna.de/archive/ \
|
|
http://redundancy.redundancy.org/mirror/
|
|
DISTNAME= samhain_signed-${PORTVERSION}
|
|
|
|
MAINTAINER= ports@FreeBSD.org
|
|
COMMENT= The Samhain Intrusion Detection System
|
|
|
|
LICENSE= GPLv2
|
|
|
|
OPTIONS_DEFINE= KCHECK GPG MYSQL PGSQL XML_LOGS LIBWRAP PRELUDE
|
|
OPTIONS_DEFAULT= XML_LOGS LIBWRAP
|
|
KCHECK_DESC= Enable rogue KLD detection
|
|
GPG_DESC= Enable GnuPG support
|
|
MYSQL_DESC= Enable MySQL logging
|
|
PGSQL_DESC= Enable PostgreSQL logging
|
|
XML_LOGS_DESC= Enable XML-formatted logs
|
|
LIBWRAP_DESC= Enable TCP wrapper support
|
|
PRELUDE_DESC= Enable Prelude Framework support
|
|
|
|
SUB_FILES+= pkg-install
|
|
|
|
WRKSRC= ${WRKDIR}/${PORTNAME}-${PORTVERSION}
|
|
|
|
CONFLICTS= samhain-client-2*
|
|
|
|
NO_STAGE= yes
|
|
.include <bsd.port.pre.mk>
|
|
|
|
.if ${ARCH} == "amd64"
|
|
CFLAGS+= -fPIC
|
|
.endif
|
|
|
|
.if ${OSVERSION} > 800000 && ${ARCH} == "amd64"
|
|
MANUAL_PACKAGE_BUILD= fails to link on pointyhat
|
|
.endif
|
|
|
|
.if ${OSVERSION} > 900007
|
|
EXTRA_PATCHES+= ${PATCHDIR}/extra-patch-config-h-in
|
|
.endif
|
|
|
|
.if ${PORT_OPTIONS:MGPG}
|
|
BUILD_DEPENDS+= gpg:${PORTSDIR}/security/gnupg
|
|
.endif
|
|
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS= --enable-login-watch --localstatedir=/var \
|
|
--enable-suidcheck
|
|
|
|
.if ${PORT_OPTIONS:MXML_LOGS}
|
|
CONFIGURE_ARGS+= --enable-xml-log
|
|
.endif
|
|
.if defined(WITH_RUNAS_USER)
|
|
CONFIGURE_ARGS+= --enable-identity=${WITH_RUNAS_USER}
|
|
.else
|
|
CONFIGURE_ARGS+= --enable-identity=yule
|
|
.endif
|
|
.if ${PORT_OPTIONS:MKCHECK}
|
|
CONFIGURE_ARGS+= --with-kcheck
|
|
.endif
|
|
.if ${PORT_OPTIONS:MGPG}
|
|
CONFIGURE_ARGS+= --with-gpg=${PREFIX}/bin/gpg
|
|
.endif
|
|
.if ${PORT_OPTIONS:MMYSQL}
|
|
CONFIGURE_ARGS+= --with-database=mysql \
|
|
--with-cflags=-I${LOCALBASE}/include/mysql \
|
|
--with-libs=-L${LOCALBASE}/lib/mysql
|
|
.endif
|
|
.if ${PORT_OPTIONS:MPGSQL}
|
|
CONFIGURE_ARGS+= --with-database=postgresql
|
|
.endif
|
|
.if ${PORT_OPTIONS:MLIBWRAP}
|
|
CONFIGURE_ARGS+= --with-libwrap
|
|
.endif
|
|
.if ${PORT_OPTIONS:MCLIENT}
|
|
CONFIGURE_ARGS+= --enable-network=client \
|
|
--with-data-file=REQ_FROM_SERVER/var/lib/samhain/data.samhain \
|
|
--with-config-file=REQ_FROM_SERVER
|
|
PLIST_SUB+= SAMHAIN="" SETPWD="" YULE="@comment "
|
|
EXTRA_PATCHES+= ${FILESDIR}/fixsamhainrc.patch
|
|
MAN5+= samhainrc.5
|
|
MAN8+= samhain.8
|
|
.elif ${PORT_OPTIONS:MSERVER}
|
|
CONFIGURE_ARGS+= --enable-network=server
|
|
SUB_LIST+= WITH_YULE="yes"
|
|
PLIST_SUB+= YULE="" SAMHAIN="@comment " SETPWD="@comment "
|
|
EXTRA_PATCHES+= ${FILESDIR}/fixyulerc.patch
|
|
MAN5+= yulerc.5
|
|
MAN8+= yule.8
|
|
.else
|
|
SUB_LIST+= WITH_YULE=""
|
|
PLIST_SUB+= SAMHAIN="" YULE="@comment " SETPWD="@comment "
|
|
EXTRA_PATCHES+= ${FILESDIR}/fixsamhainrc.patch
|
|
MAN5+= samhainrc.5
|
|
MAN8+= samhain.8
|
|
.endif
|
|
.if ${PORT_OPTIONS:MLOG_SERVER}
|
|
CONFIGURE_ARGS+= --with-logserver=true
|
|
.endif
|
|
.if ${PORT_OPTIONS:MALT_LOG_SERVER}
|
|
CONFIGURE_ARGS+= --with-altlogserver=true
|
|
.endif
|
|
.if ${PORT_OPTIONS:MPRELUDE}
|
|
LIB_DEPENDS+= libprelude.so:${PORTSDIR}/security/libprelude
|
|
CONFIGURE_ARGS+= --with-prelude
|
|
.endif
|
|
|
|
pre-everything::
|
|
|
|
.if !defined(WITH_CLIENT) && !defined(WITH_SERVER)
|
|
@${ECHO_MSG}
|
|
@${ECHO_MSG} "Building Samhain in standalone mode."
|
|
@${ECHO_MSG} "If you wish to enable networked mode, please hit CTRL-C"
|
|
@${ECHO_MSG} "now, and build samhain from the samhain-client and"
|
|
@${ECHO_MSG} "samhain-server ports."
|
|
@${ECHO_MSG}
|
|
.endif
|
|
|
|
.if defined(WITH_CLIENT) && defined(WITH_SERVER)
|
|
IGNORE= can't build client and server at once
|
|
.endif
|
|
|
|
.if ${PORT_OPTIONS:MKCHECK}
|
|
@${ECHO_MSG}
|
|
@${ECHO_MSG} "Building with kernel checking requires reading /dev/kmem"
|
|
@${ECHO_MSG} "and /dev/mem. If you're not building as root, please hit"
|
|
@${ECHO_MSG} "Control-C and restart the build as root."
|
|
@${ECHO_MSG}
|
|
.endif
|
|
|
|
.if ${PORT_OPTIONS:MMYSQL} && ! ${PORT_OPTIONS:MXML_LOGS}
|
|
IGNORE= XML logging is required to log to MySQL
|
|
.endif
|
|
|
|
.if ${PORT_OPTIONS:MPGSQL} && ! ${PORT_OPTIONS:MXML_LOGS}
|
|
IGNORE= XML logging is required to log to Postgres
|
|
.endif
|
|
|
|
post-extract:
|
|
@${TAR} -C ${WRKDIR} -xzf ${WRKSRC}.tar.gz
|
|
@${RM} ${WRKSRC}.tar.gz ${WRKSRC}.tar.gz.asc
|
|
|
|
pre-install:
|
|
@PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} PRE-INSTALL
|
|
|
|
post-install:
|
|
.if !defined(WITH_SERVER)
|
|
@${CP} ${WRKSRC}/init/samhain.startFreeBSD ${PREFIX}/etc/rc.d/samhain.sh
|
|
@${CP} ${WRKSRC}/samhainrc ${PREFIX}/etc/samhainrc.sample
|
|
@${CHGRP} wheel ${PREFIX}/etc/samhainrc.sample
|
|
.else
|
|
@${CP} ${WRKSRC}/init/samhain.startFreeBSD ${PREFIX}/etc/rc.d/yule.sh
|
|
@${CP} ${WRKSRC}/yulerc ${PREFIX}/etc/yulerc.sample
|
|
.endif
|
|
.if ${PORT_OPTIONS:MDOCS}
|
|
${MKDIR} ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/MANUAL-2_3.pdf ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/HOWTO-client+server.html ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/HOWTO-client+server-troubleshooting.html ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/HOWTO-samhain+GnuPG.html ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/HOWTO-write-modules.html ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/FAQ.html ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/README.UPGRADE ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/README ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/BUGS ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/sh_mounts.txt ${DOCSDIR}
|
|
${INSTALL_MAN} ${WRKSRC}/docs/sh_userfiles.txt ${DOCSDIR}
|
|
.endif
|
|
|
|
@${CAT} ${PKGMESSAGE}
|
|
.include <bsd.port.post.mk>
|