Security bump wrt bug #167730
authorMarkus Ullmann <jokey@gentoo.org>
Tue, 20 Feb 2007 10:56:40 +0000 (10:56 +0000)
committerMarkus Ullmann <jokey@gentoo.org>
Tue, 20 Feb 2007 10:56:40 +0000 (10:56 +0000)
Package-Manager: portage-2.1.2-r10

net-analyzer/snort/ChangeLog
net-analyzer/snort/Manifest
net-analyzer/snort/files/digest-snort-2.6.1.3 [new file with mode: 0644]
net-analyzer/snort/snort-2.6.1.3.ebuild [new file with mode: 0644]

index e77cb70f8b5cc50fadd54e7bed0001e39e7b55e2..ed7c587153572984657fa2c805d003aa294b276f 100644 (file)
@@ -1,6 +1,11 @@
 # ChangeLog for net-analyzer/snort
 # Copyright 2002-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/ChangeLog,v 1.117 2007/02/11 12:44:17 blubb Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/ChangeLog,v 1.118 2007/02/20 10:56:40 jokey Exp $
+
+*snort-2.6.1.3 (20 Feb 2007)
+
+  20 Feb 2007; Markus Ullmann <jokey@gentoo.org> +snort-2.6.1.3.ebuild:
+  Security bump wrt bug #167730
 
   11 Feb 2007; Simon Stelling <blubb@gentoo.org>
   +files/snort-2.6.1.2-libdir.patch, snort-2.6.1.2.ebuild:
index c7a4ad7fdb4121821f1f92dca1491aa13c241412..d384ba33cc591dd71daacea5bdf44ba0f5c81659 100644 (file)
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX snort-2.6.1.1-gre.patch 1164 RMD160 c80be0a6286ad7f79bb22fa94148e2f77ce25a34 SHA1 f0b3e80f05a433a9182d038fe4a28bc37260337a SHA256 72df4c81f615a72a3d305ac236b38aee5a2c953ff1e5fa39e075a7ef2e6b82ef
 MD5 e83ddd6b75669ad58e2ce6cafedc0aaf files/snort-2.6.1.1-gre.patch 1164
 RMD160 c80be0a6286ad7f79bb22fa94148e2f77ce25a34 files/snort-2.6.1.1-gre.patch 1164
@@ -31,6 +34,7 @@ DIST Community-Rules.tar.gz 11678 RMD160 a65b656e4dbf29f1c807622e865e945f509fe0c
 DIST snort-2.4.0-genpatches.tar.bz2 6475 RMD160 9ea99c71892a2cbf409ead3514ae792210bdf3d0 SHA1 23d7ac5fb3e3fca5340a4f45ff6d64c4a4214e42 SHA256 8bf51a47b2a0db9ccad83a27105994befd9be381b41aeb02561882308f4c6dff
 DIST snort-2.4.5.tar.gz 2817837 RMD160 1b697ccd84e1c10406ac20ccc0c46f79ea661e11 SHA1 3ba7dae8058aecf4e4eb1c7a816a7c8a4fb7c550 SHA256 84eb84da542d23e9f1c29b8eb319614c509fb19a745f1fa2a88d07c740645184
 DIST snort-2.6.1.2.tar.gz 3511538 RMD160 bd0ce3a4629a6e594a5f24723254e85d36597d04 SHA1 745f56806a0bae128a5c93c93c5eda9a4b80f593 SHA256 ca8bf1b1aa2fe23c9e8f8cb23482da123aac4b5842950b3cc2a40ba13da96b51
+DIST snort-2.6.1.3.tar.gz 3700149 RMD160 0c390bd7cdbe705ba43ce8c8894bfec53c3179f6 SHA1 cb944d74ab6c254f88d356d45e4492ba560dfc3c SHA256 8cc112d6e0a55b0a7e0802428abbd1b7815e0d01a1240c84a726ecc563629a79
 DIST snortrules-pr-2.4.tar.gz 789097 RMD160 dd2179b3ce8a55699d2e1b857426e5489191a121 SHA1 b8b59754ccb59b1dcf324d2faa399326117a60e9 SHA256 19d2545a2a150dff8b4dbcbd0def389b6865c4c70f5084172d08a7b151e1a504
 DIST snortsam-20050110.tar.gz 29395 RMD160 ec80ce024ed7a013da35444ef1098ba3faa6cfc3 SHA1 46a274abeeea4e808849c65b9d510a5b5a221ba6 SHA256 dc428458f3c47684aabb89036ca7e601a6aa92864dbf23b31f33732b76c2a01e
 EBUILD snort-2.4.5.ebuild 4425 RMD160 e0df6b4511ecd8ea5447d49963b32279981a2aa8 SHA1 730c173bfdf4a5b0cbc659e48f994844470a2e03 SHA256 8fcef1aae9797a4c5bd51f4810c17d4de69cfa6d351bb131f3f8fa1cfdc873c7
@@ -41,10 +45,14 @@ EBUILD snort-2.6.1.2.ebuild 5795 RMD160 d45d0f9a356e17d59c855797aabfe7f395692a41
 MD5 4d9eb32731c5778ea6745a7f8d89a67c snort-2.6.1.2.ebuild 5795
 RMD160 d45d0f9a356e17d59c855797aabfe7f395692a41 snort-2.6.1.2.ebuild 5795
 SHA256 7bf4f501d887c23d588b7721c45ec670298d078a16a5b4a5abbfeb80a3a36fee snort-2.6.1.2.ebuild 5795
-MISC ChangeLog 21291 RMD160 781772c924e4aaa132c59ce362fe68fd0d2546be SHA1 3e35dc01e6ec6cff7b955deecab70c300872fbbb SHA256 2d55bdaa08d3fded6048f56d2ab2595c3dcc2373d002ff5e44b3bd6e526e0e9b
-MD5 c90d2d000f3bda71bab46b1711c63c3c ChangeLog 21291
-RMD160 781772c924e4aaa132c59ce362fe68fd0d2546be ChangeLog 21291
-SHA256 2d55bdaa08d3fded6048f56d2ab2595c3dcc2373d002ff5e44b3bd6e526e0e9b ChangeLog 21291
+EBUILD snort-2.6.1.3.ebuild 5817 RMD160 c6980d061cb58342531c8a386522122660162630 SHA1 2507ccfbcbd93e861898df256847841296057727 SHA256 eadd00dee178edd23001e920deac03aa204f118ee5e1241531e449c0c7f2c3c0
+MD5 7ba38c875366cf4da8bcb360c9421d59 snort-2.6.1.3.ebuild 5817
+RMD160 c6980d061cb58342531c8a386522122660162630 snort-2.6.1.3.ebuild 5817
+SHA256 eadd00dee178edd23001e920deac03aa204f118ee5e1241531e449c0c7f2c3c0 snort-2.6.1.3.ebuild 5817
+MISC ChangeLog 21426 RMD160 337adf71b39dd4be9cf8eb15386bdf68ac46d0be SHA1 1a91754dc03eafa6ac36a0c2386f43c75ee2d14d SHA256 011caad117274e398772952d53d4cf551fa047788e9b5ba74843334000d89efb
+MD5 21e451450abc37271fd6bdb4170840f1 ChangeLog 21426
+RMD160 337adf71b39dd4be9cf8eb15386bdf68ac46d0be ChangeLog 21426
+SHA256 011caad117274e398772952d53d4cf551fa047788e9b5ba74843334000d89efb ChangeLog 21426
 MISC metadata.xml 246 RMD160 427cf3e9767d777650d905a7b4fcad57259908bb SHA1 470a19ab011412f7f219d654304b7a43876082ae SHA256 843ac8d26d6f2f01b254d963268d1b4dc7ec515e5ce16daf47f7c68f2c47584e
 MD5 53edc4328d9adeaf087c65ea94b1594b metadata.xml 246
 RMD160 427cf3e9767d777650d905a7b4fcad57259908bb metadata.xml 246
@@ -55,3 +63,13 @@ SHA256 eca549eac2e372a4307f224ffb2150f9fd940540134ecae1c73621c81f61d826 files/di
 MD5 815d00c6b73946345b8c4860388db41d files/digest-snort-2.6.1.2 1006
 RMD160 a5a63f7a2ddef96a836bb966b98d7d71431965e0 files/digest-snort-2.6.1.2 1006
 SHA256 c776d126ad4060bf4566a1457d753418cf16c4014207e82aa3b34d7c834cefb0 files/digest-snort-2.6.1.2 1006
+MD5 e7cdd3d5ed52e8d17a5f3f284439d5aa files/digest-snort-2.6.1.3 1006
+RMD160 05f6c24285518a6fb48e50b7d1b4314c9693cc75 files/digest-snort-2.6.1.3 1006
+SHA256 4bd85630e9420e683d70be000370bcc0c5cf927c25c4ed1406c585d6481f1f9e files/digest-snort-2.6.1.3 1006
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.1 (GNU/Linux)
+
+iD8DBQFF2tPsz974XjDVpbkRAhdnAJ4+jddZ2XIfLlYd7qh4jGlTGe53TACePuE7
+HHOAeuDQxMvJ0szHvevpkvY=
+=Simn
+-----END PGP SIGNATURE-----
diff --git a/net-analyzer/snort/files/digest-snort-2.6.1.3 b/net-analyzer/snort/files/digest-snort-2.6.1.3
new file mode 100644 (file)
index 0000000..17093d2
--- /dev/null
@@ -0,0 +1,12 @@
+MD5 52c0c6bc60d7123cb048e562d25bc34a Community-Rules-2.4.tar.gz 110044
+RMD160 ecfb4444cb0152545d823692eb6e5e2347151b54 Community-Rules-2.4.tar.gz 110044
+SHA256 4c82f90c960626aae5804c2375540f2d7241524c31ae3c7ab69df6c46e295c4c Community-Rules-2.4.tar.gz 110044
+MD5 8b46997afd728fbdaafdc9b1d0278b07 snort-2.6.1.3.tar.gz 3700149
+RMD160 0c390bd7cdbe705ba43ce8c8894bfec53c3179f6 snort-2.6.1.3.tar.gz 3700149
+SHA256 8cc112d6e0a55b0a7e0802428abbd1b7815e0d01a1240c84a726ecc563629a79 snort-2.6.1.3.tar.gz 3700149
+MD5 35d9a2486f8c0280bb493aa03c011927 snortrules-pr-2.4.tar.gz 789097
+RMD160 dd2179b3ce8a55699d2e1b857426e5489191a121 snortrules-pr-2.4.tar.gz 789097
+SHA256 19d2545a2a150dff8b4dbcbd0def389b6865c4c70f5084172d08a7b151e1a504 snortrules-pr-2.4.tar.gz 789097
+MD5 2eeef1a7a040d67c3afaf9d749905e47 snortsam-20050110.tar.gz 29395
+RMD160 ec80ce024ed7a013da35444ef1098ba3faa6cfc3 snortsam-20050110.tar.gz 29395
+SHA256 dc428458f3c47684aabb89036ca7e601a6aa92864dbf23b31f33732b76c2a01e snortsam-20050110.tar.gz 29395
diff --git a/net-analyzer/snort/snort-2.6.1.3.ebuild b/net-analyzer/snort/snort-2.6.1.3.ebuild
new file mode 100644 (file)
index 0000000..207b195
--- /dev/null
@@ -0,0 +1,190 @@
+# Copyright 1999-2007 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.6.1.3.ebuild,v 1.1 2007/02/20 10:56:40 jokey Exp $
+
+WANT_AUTOCONF="latest"
+WANT_AUTOMAKE="latest"
+AT_M4DIR=m4
+
+inherit eutils autotools
+
+DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS"
+HOMEPAGE="http://www.snort.org/"
+SRC_URI="http://www.snort.org/dl/current/${P}.tar.gz
+       http://www.snort.org/pub-bin/downloads.cgi/Download/comm_rules/Community-Rules-2.4.tar.gz
+       http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz
+       snortsam? ( mirror://gentoo/snortsam-20050110.tar.gz )"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~ppc ~ppc64 -sparc ~x86"
+IUSE="postgres mysql flexresp selinux snortsam odbc prelude inline dynamicplugin
+timestats perfprofiling linux-smp-stats flexresp2 react sguil gre"
+
+DEPEND="virtual/libc
+       >=dev-libs/libpcre-4.2-r1
+       virtual/libpcap
+       flexresp? ( ~net-libs/libnet-1.0.2a )
+       flexresp2? ( dev-libs/libdnet )
+       react? ( ~net-libs/libnet-1.0.2a )
+       postgres? ( || ( dev-db/postgresql dev-db/libpq ) )
+       mysql? ( virtual/mysql )
+       prelude? ( >=dev-libs/libprelude-0.9.0 )
+       odbc? ( dev-db/unixODBC )
+       >=sys-devel/libtool-1.4
+       inline? (
+               ~net-libs/libnet-1.0.2a
+               net-firewall/iptables
+               )"
+
+RDEPEND="${DEPEND}
+       dev-lang/perl
+       selinux? ( sec-policy/selinux-snort )
+       snortsam? ( net-analyzer/snortsam )"
+
+pkg_setup() {
+       enewgroup snort
+       enewuser snort -1 -1 /dev/null snort
+
+       if use flexresp && use flexresp2 ; then
+               ewarn
+               ewarn "You have both the 'flexresp' and 'flexresp2' USE"
+               ewarn "flags set. You can use 'flexresp' or 'flexresp2'"
+               ewarn "but not both."
+               ewarn
+               ewarn "Defaulting to flexresp2..."
+       fi
+}
+
+src_unpack() {
+       unpack ${A}
+       cd "${S}"
+
+       epatch "${FILESDIR}/${PN}-2.6.1.2-libdir.patch"
+       epatch "${FILESDIR}/${PN}-2.6.1.1-libnet.patch"
+       use gre && epatch "${FILESDIR}/${PN}-2.6.1.1-gre.patch"
+       use react && epatch "${FILESDIR}/${PN}-2.6.1.2-react.patch"
+       sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort/rules:" \
+               etc/snort.conf
+
+       if use prelude ; then
+               sed -i -e "s:AC_PROG_RANLIB:AC_PROG_LIBTOOL:" configure.in
+       fi
+
+       if use snortsam ; then
+               cd ..
+               einfo "Applying snortsam patch"
+               sed -i "s/PLUGIN_FWSAM/PLUGIN_FWSAM,/" snortpatch9 || die "sed failed"
+               ./patchsnort.sh "${S}" || die "snortsam patch failed"
+               cd "${S}"
+       fi
+
+       einfo "Regenerating autoconf/automake files"
+       eautoreconf
+}
+
+src_compile() {
+       local myconf
+
+       if use flexresp2; then
+               myconf="${myconf} --enable-flexresp2"
+       elif use flexresp; then
+               myconf="${myconf} --enable-flexresp"
+       fi
+
+       if use react && ! use flexresp; then
+               myconf="${myconf} --enable-react"
+       fi
+
+       use gre && --enable-gre
+
+       myconf="${myconf} --with-libipq-includes=/usr/include/libipq"
+
+       econf \
+               --without-oracle \
+               $(use_with postgres postgresql) \
+               $(use_with mysql) \
+               $(use_with odbc) \
+               $(use_enable prelude) \
+               $(use_enable inline) \
+               $(use_enable dynamicplugin) \
+               $(use_enable timestats) \
+               $(use_enable perfprofiling) \
+               $(use_enable linux-smp-stats) \
+               ${myconf} || die "econf failed"
+
+       # limit to single as reported by jforman on irc
+       emake -j1 || die "emake failed"
+}
+
+src_install() {
+       emake DESTDIR="${D}" install || die "make install failed"
+
+       keepdir /var/log/snort/
+
+       dodoc doc/*
+       dodoc ./RELEASE.NOTES
+       docinto schemas ; dodoc schemas/*
+
+       insinto /etc/snort
+       doins etc/reference.config etc/classification.config \
+               etc/*.map etc/threshold.conf
+       newins etc/snort.conf snort.conf
+
+       newinitd "${FILESDIR}/snort.rc8" snort
+       newconfd "${FILESDIR}/snort.confd" snort
+
+       fowners snort:snort /var/log/snort
+       fperms 0770 /var/log/snort
+
+       # install rules
+       insinto /etc/snort/rules
+       doins -r "${WORKDIR}"/rules/*
+}
+
+pkg_postinst() {
+       ewarn
+       ewarn "Users upgrading from snort 2.4.x should take care when updating"
+       ewarn "their snort.conf. A number of significant changes have been"
+       ewarn "have been added to snort 2.6 including the addition of"
+       ewarn "dynamically loadable preprocessors, detection engine and rules."
+       ewarn "Snort 2.6 also includes the addition of performance profiling"
+       ewarn "for rules & preprocessors and uses a new default pattern matcher"
+       ewarn "which provides faster matching at the expense of being very"
+       ewarn "memory intensive."
+       ewarn
+       ewarn "If you find that snort is using too much memory, your system"
+       ewarn "freezes, or snort crashes after a few minutes try adding the"
+       ewarn "following to your snort.conf..."
+       ewarn
+       ewarn "'config detection: search-method ac-sparsebands'"
+       ewarn
+       ewarn "This will provide high pattern matching performance at a much"
+       ewarn "lower cost to memory. For more information on the new features"
+       ewarn "in snort 2.6, please take a look at the release notes located in..."
+       ewarn
+       ewarn "  /usr/share/doc/${PF}/RELEASE.NOTES.gz"
+       ewarn
+       einfo "To use a database as a backend for snort you will have to"
+       einfo "import the correct tables to the database."
+       einfo "You will have to setup a database called snort before doing the"
+       einfo "following..."
+       einfo
+       einfo "  MySQL: zcat /usr/share/doc/${PF}/schemas/create_mysql.gz | mysql -p snort"
+       einfo
+       einfo "  PostgreSQL: import /usr/share/doc/${PF}/schemas/create_postgresql.gz"
+       einfo
+       einfo "  ODBC: look at /usr/share/doc/${PF}/schemas/"
+       einfo
+       einfo "Users using the unified output plugin and barnyard do not need to"
+       einfo "compile database support into snort, but still need to set up their"
+       einfo "database as shown above."
+       einfo
+       ewarn "Only a basic set of rules was installed."
+       ewarn "Please add your other sets of rules to /etc/snort/rules."
+       ewarn "For more information on rules, visit ${HOMEPAGE}."
+       if use sguil ; then
+               elog "SGUIL needs to catch up with snort 2.6.x. If you plan on using SGUIL"
+               elog "you should unmerge ${P} and emerge snort-2.4.x"
+       fi
+}