blob: 2fdec86e4b25dabb35f7b471816b568c6a97cf7a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
# Copyright 1999-2004 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.2.0.ebuild,v 1.1 2004/08/15 12:06:50 eldad Exp $
inherit eutils gnuconfig
DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS"
HOMEPAGE="http://www.snort.org/"
SRC_URI="http://www.snort.org/dl/${P}.tar.gz
snortsam? ( http://www.snortsam.net/files/snort-plugin/snortsam-patch.tar.gz )"
# prelude? ( http://www.prelude-ids.org/download/releases/snort-prelude-reporting-patch-0.2.5.tar.gz )"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~x86 ~sparc -alpha ~amd64"
IUSE="ssl postgres mysql flexresp selinux snortsam"
# Local useflag snortsam: patch snort for use with snortsam package.
# snort 2.1.x does not have prelude patches yet
# IUSE="${IUSE} prelude"
# snort 2.1.x has discontinued smb alert output, and no 3rd party have done them yet
# IUSE="${IUSE} samba"
# snort 2.0.x does not support snmp yet Bug #26310 (2.1.x doesn't have SNMP either)
# IUSE="${IUSE} snmp"
DEPEND="virtual/libc
>=dev-libs/libpcre-4.2-r1
>=net-libs/libpcap-0.6.2-r1
flexresp? ( <net-libs/libnet-1.1
>=net-libs/libnet-1.0.2a-r3 )
postgres? ( >=dev-db/postgresql-7.2 )
mysql? ( >=dev-db/mysql-3.23.26 )
ssl? ( >=dev-libs/openssl-0.9.6b )"
# prelude? ( >=dev-libs/libprelude-0.8 )
# snmp? ( >=net-analyzer/net-snmp-5.0 )
RDEPEND="virtual/libc
>=dev-libs/libpcre-4.2-r1
dev-lang/perl
>=net-libs/libpcap-0.6.2-r1
postgres? ( >=dev-db/postgresql-7.2 )
mysql? ( >=dev-db/mysql-3.23.26 )
ssl? ( >=dev-libs/openssl-0.9.6b )
selinux? ( sec-policy/selinux-snort )
snortsam? ( net-analyzer/snortsam )"
# samba? ( net-fs/samba )
# prelude? ( >=dev-libs/libprelude-0.8 )
src_unpack() {
unpack ${A}
cd ${S}
gnuconfig_update
#is this needed in 2.0? -Method
#epatch ${FILESDIR}/${P}-configure.patch
use flexresp && epatch ${FILESDIR}/2.1.2-libnet-1.0.patch
epatch ${FILESDIR}/snort-2.1.3-gcc3.patch
#epatch ${FILESDIR}/snort-drop-calculation.diff
sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort:" etc/snort.conf
# Prelude patch currently not compatible with 2.1.0
#use prelude && (
# epatch ../${P/.1.0/.0.2}-prelude.diff
# sh ./autogen.sh
#)
use snortsam && (
cd ..
./patchsnort.sh ${S}
cd ${S}
)
}
src_compile() {
local myconf
use flexresp && myconf="$myconf --enable-flexresp" # There is no --diable-flexresp, can't use use_enable
# use samba && myconf="$myconf --enable-smbalerts" # There is no --diable-smbalerts, can't use use_enable
# `use_with snmp` \
# --enable-pthreads \ # Not supported, never was, and now also removed
# `use_with prelude` \
econf \
`use_with postgres postgresql` \
`use_with mysql` \
`use_with ssl openssl` \
--without-odbc \
--without-oracle \
$myconf || die "bad ./configure"
emake || die "compile problem"
}
src_install() {
make DESTDIR=${D} install || die
dodir /var/log/snort
keepdir /var/log/snort/
insinto /usr/lib/snort/bin
doins contrib/{create_mysql,snortlog,*.pl}
dodoc COPYING LICENSE doc/*
docinto contrib ; dodoc contrib/*
insinto /etc/snort
doins etc/reference.config etc/classification.config rules/*.rules etc/*.map etc/threshold.conf
#use prelude && doins etc/prelude-classification.config
newins etc/snort.conf snort.conf.distrib
exeinto /etc/init.d ; newexe ${FILESDIR}/snort.rc6 snort
insinto /etc/conf.d ; newins ${FILESDIR}/snort.confd snort
}
pkg_postinst() {
enewgroup snort
enewuser snort -1 /dev/null /var/log/snort snort
usermod -d "/var/log/snort" snort || die "usermod problem"
usermod -g "snort" snort || die "usermod problem"
usermod -s "/dev/null" snort || die "usermod problem"
echo "ignore any message about CREATE_HOME above..."
chown snort:snort /var/log/snort
chmod 0770 /var/log/snort
}
|
GitWeb