+++ /dev/null
-# ChangeLog for app-forensics/samhain
-# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/ChangeLog,v 1.17 2010/06/02 06:27:39 tove Exp $
-
- 02 Jun 2010; Torsten Veller <tove@gentoo.org> metadata.xml:
- Remove chtekk from metadata.xml (#103720)
-
- 27 Feb 2010; Patrick Lauer <patrick@gentoo.org> samhain-2.6.2.ebuild:
- Fixing silly RESTRICT and patching Makefile
-
-*samhain-2.6.2 (26 Feb 2010)
-
- 26 Feb 2010; Patrick Lauer <patrick@gentoo.org> +samhain-2.6.2.ebuild:
- Bump
-
-*samhain-2.6.0 (08 Nov 2009)
-
- 08 Nov 2009; Patrick Lauer <patrick@gentoo.org> -samhain-2.1.3.ebuild,
- -samhain-2.5.1.ebuild, +samhain-2.6.0.ebuild:
- Bump, remove old
-
-*samhain-2.5.4 (29 Mar 2009)
-
- 29 Mar 2009; Patrick Lauer <patrick@gentoo.org> +samhain-2.5.4.ebuild:
- Bump to 2.5.4, adding ~amd64 keywords. Needs more testing/cleanup. Needed
- for #261506
-
-*samhain-2.5.1 (05 Jan 2009)
-
- 05 Jan 2009; Patrick Lauer <patrick@gentoo.org> +samhain-2.5.1.ebuild:
- Bump to 2.5.1. Seems to fail less than previous versions, but ebuild still
- needs lots of love
-
- 31 Jul 2008; Ulrich Mueller <ulm@gentoo.org> metadata.xml:
- Add USE flag description to metadata wrt GLEP 56.
-
- 21 May 2008; Tiziano Müller <dev-zero@gentoo.org> samhain-2.1.3.ebuild,
- samhain-2.2.0.ebuild:
- Changed dependency for postgresql from dev-db/postgresql to
- virtual/postgresql-server
-
- 02 Jul 2007; Piotr Jaroszyński <peper@gentoo.org> samhain-2.1.3.ebuild,
- samhain-2.2.0.ebuild:
- (QA) RESTRICT clean up.
-
- 13 May 2007; Thilo Bangert <bangert@gentoo.org> metadata.xml:
- add <herd>no-herd</herd>
-
- 28 Apr 2007; Torsten Veller <tove@gentoo.org> samhain-2.2.0.ebuild:
- Use newinitd
-
- 24 Jan 2007; Marius Mauch <genone@gentoo.org> samhain-2.1.3.ebuild,
- samhain-2.2.0.ebuild:
- Replacing einfo with elog
-
- 23 Nov 2006; Francesco Riosa <vivo@gentoo.org> samhain-2.1.3.ebuild,
- samhain-2.2.0.ebuild:
- dev-db/mysql => virtual/mysql
-
- 14 Jul 2006; Luca Longinotti <chtekk@gentoo.org> samhain-2.1.3.ebuild,
- samhain-2.2.0.ebuild:
- Fix bug #140385.
-
-*samhain-2.2.0 (24 May 2006)
-*samhain-2.1.3 (24 May 2006)
-
- 24 May 2006; Luca Longinotti <chtekk@gentoo.org> -samhain-2.1.1a.ebuild,
- +samhain-2.1.3.ebuild, +samhain-2.2.0.ebuild:
- Fix bug #125035 by adding both 2.1.3 and 2.2.0 to the tree, remove 2.1.1a.
- Fix bug #130988, the libdir is now created if not emerged in stealth mode.
-
- 26 Dec 2005; Luca Longinotti <chtekk@gentoo.org> samhain-2.1.1a.ebuild:
- Fix bug #116739.
-
-*samhain-2.1.1a (25 Dec 2005)
-
- 25 Dec 2005; Luca Longinotti <chtekk@gentoo.org> +metadata.xml,
- +samhain-2.1.1a.ebuild:
- Samhain ebuild, fix bug #34243. Thanks to Andrea Barisani and Jared Breland
- for the initial ebuild in Bugzilla.
-
+++ /dev/null
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
-DIST samhain_signed-2.5.4.tar.gz 1867558 RMD160 419d932c3f3a4ea8c759235d9a984a69abef835c SHA1 048184d1f3b19ad82c1dec46a897cdde5b6e5d9b SHA256 b4954c03fffdaba84359918cd750200d6423cf25913682784ab5172b9fb350cf
-DIST samhain_signed-2.6.0.tar.gz 1875364 RMD160 badf113592f991f88db2ee8f2643e4eeff31563d SHA1 dc3933621b184af3da1f86eb16eed2f6519b5450 SHA256 007d2f798ecf5bc7ad0b45ba78d5ec3a8a646e633a819678ca26ff0b05a8e81d
-DIST samhain_signed-2.6.2.tar.gz 1903364 RMD160 a9ee460975c7d5bd809621331a34fef9c73dfb2d SHA1 c056424ba97246f512c5acb12a3b4bb47f981b47 SHA256 c3aea1de81d4114a8b89a8cabdbfb1db80e4f3f6f26d947c4af7b94c4c27fa33
-EBUILD samhain-2.5.4.ebuild 7189 RMD160 763e21533d5b37f71a78fd12918ad84386c708d8 SHA1 6b5afd8f1b1ac9753704a21a8e83c9c4173a8d3d SHA256 ea5c790056284f309ddf6fb5cbbe54829e380be8baf94c5c56205079b2a0bb84
-EBUILD samhain-2.6.0.ebuild 7189 RMD160 0b25485fdbf9af5be526da2c9b30dd69f706dbc3 SHA1 c3af701a37edc6a1749c6d825d3a0e0e524e8835 SHA256 78d3bd737b2c6112f9025096bd5062979f91a6142decc13eb2109e254ce82b80
-EBUILD samhain-2.6.2.ebuild 7301 RMD160 1b082414046cb1ec0fb9618f0af6363660762c5c SHA1 82cc3596d233b7b6448bb70b27c8517a739948e4 SHA256 1d890d096461b24976ae0665ce469164b1123f2db1a7087dc0962e0ea2815fec
-MISC ChangeLog 2765 RMD160 7a6f92a4d125b6b90c408256738118b178a28460 SHA1 bcbbe94f377aace9f00a0d3647459df6dbab8a37 SHA256 d07446d1978665ad8cd335b77634fc59bd86191067f44dbf0489add6b67ce035
-MISC metadata.xml 814 RMD160 7054543367ec55e7321bd9f97781e67b7cd586ed SHA1 544f12802af22cec928985a123047e5eafffd783 SHA256 7434fac5a89e23968d71f9d63880e470097008f7185eb966ec49abba0182b3b4
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.15 (GNU/Linux)
-
-iEYEARECAAYFAkwF+eMACgkQV3J2n04EauyqcQCffbH2ULBNJHn3XCDeko3rG8FO
-+3kAnRpkhx+E9Wywd/otiyy71XFTvYay
-=iltj
------END PGP SIGNATURE-----
+++ /dev/null
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
-<pkgmetadata>
-<herd>no-herd</herd>
-<maintainer>
- <email>maintainer-needed@gentoo.org</email>
-</maintainer>
-<use>
- <flag name='login-watch'>Compile in the module to watch for login/logout
- events</flag>
- <flag name='mounts-check'>Compile in the module to check for correct mount
- options</flag>
- <flag name='netclient'>Compile a client, rather than a standalone version
- </flag>
- <flag name='netserver'>Compile a server, rather than a standalone version
- </flag>
- <flag name='suidcheck'>Compile in the module to check file system for
- SUID/SGID binaries</flag>
- <flag name='userfiles'>Compile in the module to check for files in user home
- directories</flag>
-</use>
-</pkgmetadata>
+++ /dev/null
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/samhain-2.5.4.ebuild,v 1.1 2009/03/29 09:27:47 patrick Exp $
-
-KEYWORDS="~amd64 ~x86"
-DESCRIPTION="Advanced file integrity and intrusion detection tool."
-HOMEPAGE="http://la-samhna.de/samhain/"
-SRC_URI="http://la-samhna.de/archive/samhain_signed-${PV}.tar.gz"
-LICENSE="GPL-2"
-SLOT="0"
-IUSE="crypt debug login-watch mounts-check mysql netclient netserver postgres prelude static suidcheck userfiles xml"
-
-RESTRICT="strip"
-
-DEPEND="crypt? ( >=app-crypt/gnupg-1.2 )
- mysql? ( virtual/mysql )
- postgres? ( >=virtual/postgresql-server-7.2 )
- prelude? ( >=dev-libs/libprelude-0.8.10 )
- >=sys-apps/sed-4
- app-arch/tar
- app-arch/gzip"
-
-# Samhain stealth mode options
-#
-# If you would like to enable stealth mode, please set and uncomment the
-# following options or pass them as enviroment variables when emerging
-# the package (like INSTALL_NAME="asd" emerge samhain).
-# If you set the variables here, don't forget to redigest the ebuild by
-# issuing 'ebuild samhain-<thisversion>.ebuild digest', also remember that with
-# your next emerge sync, the changes to the ebuild will be lost!
-#
-# Read the Samhain manual for additional information.
-#
-# STEALTH should be set to either 'full' or 'micro' (mandatory)
-#STEALTH=""
-#
-# XOR_VALUE should be a whole number from 128 to 255 (mandatory)
-#XOR_VALUE=""
-#
-# INSTALL_NAME can be set to change the name of the Samhain binaries
-# to the name you specify (optional)
-#INSTALL_NAME=""
-
-if [[ "${STEALTH}" == "full" ]] ; then
- RDEPEND="media-gfx/imagemagick"
-fi
-
-pkg_setup() {
- if use static ; then
- if use postgres || use prelude ; then
- ewarn "At the moment it isn't possible to build a static Samhain with"
- ewarn "Prelude and/or PostgreSQL support on Gentoo, the compilation"
- ewarn "fails during the linking process."
- echo
- ewarn "This will be looked at and fixed in the future, in the meantime,"
- ewarn "patches to fix this are always welcome and appreciated! ;)"
- ewarn "(Open a bug on bugs.gentoo.org for them or send them to"
- ewarn "the maintainer directly, thanks!)"
- die "Please turn the 'postgres' and/or 'prelude' USE flags off when building with 'static'"
- fi
- fi
-
- if use mysql && use postgres ; then
- ewarn "You cannot compile both database backends into Samhain at once,"
- ewarn "you need to choose between MySQL or PostgreSQL and disable the"
- ewarn "one you don't want to use."
- die "Please choose between 'mysql' or 'postgres' USE flags"
- fi
-}
-
-src_unpack() {
- unpack ${A}
- tar -xzf "samhain-${PV}.tar.gz"
-}
-
-src_compile() {
- local myconf
-
- if use crypt ; then
- myconf="${myconf} --with-gpg=/usr/bin/gpg --with-checksum=no"
-
- if [[ -n "${KEY_FPR}" ]] ; then
- einfo "Setting built-in key fingerprint to ${KEY_FPR}"
- FPR=`echo ${KEY_FPR} | sed "s/ //g"`
- myconf="${myconf} --with-fp=${FPR}"
- fi
- fi
-
- if [[ -n "${STEALTH}" ]] ; then
- [[ -z "${XOR_VALUE}" ]] && die "Variable XOR_VALUE must be set for stealth mode"
- echo
- einfo "Enabling stealth mode '${STEALTH}', setting XOR_VALUE to ${XOR_VALUE}"
-
- if [[ "${STEALTH}" == "full" ]] ; then
- myconf="${myconf} --enable-stealth=${XOR_VALUE}"
- sed -e "s:STEGIN=@stegin_prg@:STEGIN=:g" -i samhain-install.sh.in
- elif [[ "${STEALTH}" == "micro" ]] ; then
- myconf="${myconf} --enable-micro-stealth=${XOR_VALUE}"
- else
- die "STEALTH must be set to either 'full' or 'micro'"
- fi
-
- if [[ -n "${INSTALL_NAME}" ]] ; then
- echo
- einfo "Setting alternative samhain name to ${INSTALL_NAME}"
- echo
- myconf="${myconf} --enable-install-name=${INSTALL_NAME}"
- fi
- fi
-
- use mysql && myconf="${myconf} --with-database=mysql --enable-xml-log"
- use postgres && myconf="${myconf} --with-database=postgresql --enable-xml-log"
- use prelude && myconf="${myconf} --with-prelude --with-libprelude-prefix=/usr"
- use xml && myconf="${myconf} --enable-xml-log"
- use static && myconf="${myconf} --enable-static"
- use debug && myconf="${myconf} --enable-debug"
-
- use netclient && myconf="${myconf} --enable-network=client"
- use netserver && myconf="${myconf} --enable-network=server"
-
- use login-watch && myconf="${myconf} --enable-login-watch"
- use mounts-check && myconf="${myconf} --enable-mounts-check"
- use suidcheck && myconf="${myconf} --enable-suidcheck"
- use userfiles && myconf="${myconf} --enable-userfiles"
-
- myconf="${myconf} --localstatedir=/var"
-
- econf ${myconf} || die "configure failed"
- make || die "compile failed"
-}
-
-src_install() {
- make DESTDIR="${D}" install || die "make install failed"
-
- rm -Rf "${D}/var/log"
- rm -Rf "${D}/var/run"
- rm -Rf "${D}/var/state"
-
- if [[ -n "${STEALTH}" ]] ; then
- rm -Rf "${D}/usr/share"
- else
- dodoc docs/BUGS docs/MANUAL* docs/README* docs/TODO docs/*.txt
- dohtml docs/*.html
- docinto scripts
- dodoc scripts/*
- insinto /etc
- insopts -m0600
- newins samhainrc.linux samhainrc
- newinitd init/samhain.startGentoo samhain
- keepdir "/var/lib/samhain"
- fi
-
- if use netserver ; then
- keepdir "/var/lib/yule"
- chown daemon:daemon "${D}/var/lib/yule"
- keepdir "/var/log/yule"
- chown daemon:daemon "${D}/var/log/yule"
- fi
-}
-
-pkg_postinst() {
- if [[ -n "${STEALTH}" ]] ; then
- elog
- elog "Manual pages, documentation, and init script were NOT installed in order to"
- elog "obscure Samhain's presence. You should also remove samhain's installation"
- elog "traces from ${ROOT}/var/cache/edb/world and ${ROOT}/var/db/pkg."
- fi
-
- if [[ "${STEALTH}" == "full" ]] ; then
- elog
- elog "In stealth mode, the configuration file must be steganographically hidden"
- elog "in a postscript image file. The sample config has been created this way by"
- elog "the installation process. Use the samhain_stealth utility to modify or"
- elog "create your own configuration file."
- fi
-
- if [[ -z "${KEY_FPR}" ]] ; then
- elog
- ewarn "GnuPG support has been enabled, but fingerprint verification will be"
- ewarn "ignored. To enable fingerprint verification (strongly recommended),"
- ewarn "you must re-emerge this package with the KEY_FPR variable set to"
- ewarn "your default signing key fingerprint."
- ewarn "Please read the Samhain manual for more details."
- elog
- elog "Enabling GnuPG support in Samhain requires that you sign your configuration"
- elog "and and database files. Please run the following commands as root:"
- elog
- elog " gpg -a --clearsign --not-dash-escaped ${ROOT}/etc/samhainrc"
- elog " mv ${ROOT}/etc/samhainrc.asc ${ROOT}/etc/samhainrc"
- elog " chmod 600 ${ROOT}/etc/samhainrc"
- elog
- elog "Run the same commands on ${ROOT}/var/lib/samhain/samhain_file after initialization."
- fi
-
- elog
- elog "Be sure to check your settings in ${ROOT}/etc/samhainrc. When ready, run:"
- elog " samhain -t init"
- elog "to initialize Samhain."
-
- elog
- elog "Samhain stealth-mode options are also available. Please view the comments"
- elog "in the Samhain ebuild for further configuration instructions."
-
- elog
- ewarn "Please be sure to read the Samhain manual to understand and correctly"
- ewarn "configure the Samhain utility."
- ewarn "HTML version available for viewing at http://la-samhna.de/samhain/manual/ ."
-}
+++ /dev/null
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/samhain-2.6.0.ebuild,v 1.1 2009/11/08 12:11:22 patrick Exp $
-
-KEYWORDS="~amd64 ~x86"
-DESCRIPTION="Advanced file integrity and intrusion detection tool."
-HOMEPAGE="http://la-samhna.de/samhain/"
-SRC_URI="http://la-samhna.de/archive/samhain_signed-${PV}.tar.gz"
-LICENSE="GPL-2"
-SLOT="0"
-IUSE="crypt debug login-watch mounts-check mysql netclient netserver postgres prelude static suidcheck userfiles xml"
-
-RESTRICT="strip"
-
-DEPEND="crypt? ( >=app-crypt/gnupg-1.2 )
- mysql? ( virtual/mysql )
- postgres? ( >=virtual/postgresql-server-7.2 )
- prelude? ( >=dev-libs/libprelude-0.8.10 )
- >=sys-apps/sed-4
- app-arch/tar
- app-arch/gzip"
-
-# Samhain stealth mode options
-#
-# If you would like to enable stealth mode, please set and uncomment the
-# following options or pass them as enviroment variables when emerging
-# the package (like INSTALL_NAME="asd" emerge samhain).
-# If you set the variables here, don't forget to redigest the ebuild by
-# issuing 'ebuild samhain-<thisversion>.ebuild digest', also remember that with
-# your next emerge sync, the changes to the ebuild will be lost!
-#
-# Read the Samhain manual for additional information.
-#
-# STEALTH should be set to either 'full' or 'micro' (mandatory)
-#STEALTH=""
-#
-# XOR_VALUE should be a whole number from 128 to 255 (mandatory)
-#XOR_VALUE=""
-#
-# INSTALL_NAME can be set to change the name of the Samhain binaries
-# to the name you specify (optional)
-#INSTALL_NAME=""
-
-if [[ "${STEALTH}" == "full" ]] ; then
- RDEPEND="media-gfx/imagemagick"
-fi
-
-pkg_setup() {
- if use static ; then
- if use postgres || use prelude ; then
- ewarn "At the moment it isn't possible to build a static Samhain with"
- ewarn "Prelude and/or PostgreSQL support on Gentoo, the compilation"
- ewarn "fails during the linking process."
- echo
- ewarn "This will be looked at and fixed in the future, in the meantime,"
- ewarn "patches to fix this are always welcome and appreciated! ;)"
- ewarn "(Open a bug on bugs.gentoo.org for them or send them to"
- ewarn "the maintainer directly, thanks!)"
- die "Please turn the 'postgres' and/or 'prelude' USE flags off when building with 'static'"
- fi
- fi
-
- if use mysql && use postgres ; then
- ewarn "You cannot compile both database backends into Samhain at once,"
- ewarn "you need to choose between MySQL or PostgreSQL and disable the"
- ewarn "one you don't want to use."
- die "Please choose between 'mysql' or 'postgres' USE flags"
- fi
-}
-
-src_unpack() {
- unpack ${A}
- tar -xzf "samhain-${PV}.tar.gz"
-}
-
-src_compile() {
- local myconf
-
- if use crypt ; then
- myconf="${myconf} --with-gpg=/usr/bin/gpg --with-checksum=no"
-
- if [[ -n "${KEY_FPR}" ]] ; then
- einfo "Setting built-in key fingerprint to ${KEY_FPR}"
- FPR=`echo ${KEY_FPR} | sed "s/ //g"`
- myconf="${myconf} --with-fp=${FPR}"
- fi
- fi
-
- if [[ -n "${STEALTH}" ]] ; then
- [[ -z "${XOR_VALUE}" ]] && die "Variable XOR_VALUE must be set for stealth mode"
- echo
- einfo "Enabling stealth mode '${STEALTH}', setting XOR_VALUE to ${XOR_VALUE}"
-
- if [[ "${STEALTH}" == "full" ]] ; then
- myconf="${myconf} --enable-stealth=${XOR_VALUE}"
- sed -e "s:STEGIN=@stegin_prg@:STEGIN=:g" -i samhain-install.sh.in
- elif [[ "${STEALTH}" == "micro" ]] ; then
- myconf="${myconf} --enable-micro-stealth=${XOR_VALUE}"
- else
- die "STEALTH must be set to either 'full' or 'micro'"
- fi
-
- if [[ -n "${INSTALL_NAME}" ]] ; then
- echo
- einfo "Setting alternative samhain name to ${INSTALL_NAME}"
- echo
- myconf="${myconf} --enable-install-name=${INSTALL_NAME}"
- fi
- fi
-
- use mysql && myconf="${myconf} --with-database=mysql --enable-xml-log"
- use postgres && myconf="${myconf} --with-database=postgresql --enable-xml-log"
- use prelude && myconf="${myconf} --with-prelude --with-libprelude-prefix=/usr"
- use xml && myconf="${myconf} --enable-xml-log"
- use static && myconf="${myconf} --enable-static"
- use debug && myconf="${myconf} --enable-debug"
-
- use netclient && myconf="${myconf} --enable-network=client"
- use netserver && myconf="${myconf} --enable-network=server"
-
- use login-watch && myconf="${myconf} --enable-login-watch"
- use mounts-check && myconf="${myconf} --enable-mounts-check"
- use suidcheck && myconf="${myconf} --enable-suidcheck"
- use userfiles && myconf="${myconf} --enable-userfiles"
-
- myconf="${myconf} --localstatedir=/var"
-
- econf ${myconf} || die "configure failed"
- make || die "compile failed"
-}
-
-src_install() {
- make DESTDIR="${D}" install || die "make install failed"
-
- rm -Rf "${D}/var/log"
- rm -Rf "${D}/var/run"
- rm -Rf "${D}/var/state"
-
- if [[ -n "${STEALTH}" ]] ; then
- rm -Rf "${D}/usr/share"
- else
- dodoc docs/BUGS docs/MANUAL* docs/README* docs/TODO docs/*.txt
- dohtml docs/*.html
- docinto scripts
- dodoc scripts/*
- insinto /etc
- insopts -m0600
- newins samhainrc.linux samhainrc
- newinitd init/samhain.startGentoo samhain
- keepdir "/var/lib/samhain"
- fi
-
- if use netserver ; then
- keepdir "/var/lib/yule"
- chown daemon:daemon "${D}/var/lib/yule"
- keepdir "/var/log/yule"
- chown daemon:daemon "${D}/var/log/yule"
- fi
-}
-
-pkg_postinst() {
- if [[ -n "${STEALTH}" ]] ; then
- elog
- elog "Manual pages, documentation, and init script were NOT installed in order to"
- elog "obscure Samhain's presence. You should also remove samhain's installation"
- elog "traces from ${ROOT}/var/cache/edb/world and ${ROOT}/var/db/pkg."
- fi
-
- if [[ "${STEALTH}" == "full" ]] ; then
- elog
- elog "In stealth mode, the configuration file must be steganographically hidden"
- elog "in a postscript image file. The sample config has been created this way by"
- elog "the installation process. Use the samhain_stealth utility to modify or"
- elog "create your own configuration file."
- fi
-
- if [[ -z "${KEY_FPR}" ]] ; then
- elog
- ewarn "GnuPG support has been enabled, but fingerprint verification will be"
- ewarn "ignored. To enable fingerprint verification (strongly recommended),"
- ewarn "you must re-emerge this package with the KEY_FPR variable set to"
- ewarn "your default signing key fingerprint."
- ewarn "Please read the Samhain manual for more details."
- elog
- elog "Enabling GnuPG support in Samhain requires that you sign your configuration"
- elog "and and database files. Please run the following commands as root:"
- elog
- elog " gpg -a --clearsign --not-dash-escaped ${ROOT}/etc/samhainrc"
- elog " mv ${ROOT}/etc/samhainrc.asc ${ROOT}/etc/samhainrc"
- elog " chmod 600 ${ROOT}/etc/samhainrc"
- elog
- elog "Run the same commands on ${ROOT}/var/lib/samhain/samhain_file after initialization."
- fi
-
- elog
- elog "Be sure to check your settings in ${ROOT}/etc/samhainrc. When ready, run:"
- elog " samhain -t init"
- elog "to initialize Samhain."
-
- elog
- elog "Samhain stealth-mode options are also available. Please view the comments"
- elog "in the Samhain ebuild for further configuration instructions."
-
- elog
- ewarn "Please be sure to read the Samhain manual to understand and correctly"
- ewarn "configure the Samhain utility."
- ewarn "HTML version available for viewing at http://la-samhna.de/samhain/manual/ ."
-}
+++ /dev/null
-# Copyright 1999-2010 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/samhain-2.6.2.ebuild,v 1.2 2010/02/27 00:34:00 patrick Exp $
-
-KEYWORDS="~amd64 ~x86"
-DESCRIPTION="Advanced file integrity and intrusion detection tool."
-HOMEPAGE="http://la-samhna.de/samhain/"
-SRC_URI="http://la-samhna.de/archive/samhain_signed-${PV}.tar.gz"
-LICENSE="GPL-2"
-SLOT="0"
-IUSE="crypt debug login-watch mounts-check mysql netclient netserver postgres prelude static suidcheck userfiles xml"
-
-DEPEND="crypt? ( >=app-crypt/gnupg-1.2 )
- mysql? ( virtual/mysql )
- postgres? ( >=virtual/postgresql-server-7.2 )
- prelude? ( >=dev-libs/libprelude-0.8.10 )
- >=sys-apps/sed-4
- app-arch/tar
- app-arch/gzip"
-
-# Samhain stealth mode options
-#
-# If you would like to enable stealth mode, please set and uncomment the
-# following options or pass them as enviroment variables when emerging
-# the package (like INSTALL_NAME="asd" emerge samhain).
-# If you set the variables here, don't forget to redigest the ebuild by
-# issuing 'ebuild samhain-<thisversion>.ebuild digest', also remember that with
-# your next emerge sync, the changes to the ebuild will be lost!
-#
-# Read the Samhain manual for additional information.
-#
-# STEALTH should be set to either 'full' or 'micro' (mandatory)
-#STEALTH=""
-#
-# XOR_VALUE should be a whole number from 128 to 255 (mandatory)
-#XOR_VALUE=""
-#
-# INSTALL_NAME can be set to change the name of the Samhain binaries
-# to the name you specify (optional)
-#INSTALL_NAME=""
-
-if [[ "${STEALTH}" == "full" ]] ; then
- RDEPEND="media-gfx/imagemagick"
-fi
-
-pkg_setup() {
- if use static ; then
- if use postgres || use prelude ; then
- ewarn "At the moment it isn't possible to build a static Samhain with"
- ewarn "Prelude and/or PostgreSQL support on Gentoo, the compilation"
- ewarn "fails during the linking process."
- echo
- ewarn "This will be looked at and fixed in the future, in the meantime,"
- ewarn "patches to fix this are always welcome and appreciated! ;)"
- ewarn "(Open a bug on bugs.gentoo.org for them or send them to"
- ewarn "the maintainer directly, thanks!)"
- die "Please turn the 'postgres' and/or 'prelude' USE flags off when building with 'static'"
- fi
- fi
-
- if use mysql && use postgres ; then
- ewarn "You cannot compile both database backends into Samhain at once,"
- ewarn "you need to choose between MySQL or PostgreSQL and disable the"
- ewarn "one you don't want to use."
- die "Please choose between 'mysql' or 'postgres' USE flags"
- fi
-}
-
-src_unpack() {
- unpack ${A}
- tar -xzf "samhain-${PV}.tar.gz"
- cd ${S}
- sed -i -e 's/INSTALL_PROGRAM = @INSTALL@ -s/INSTALL_PROGRAM = @INSTALL@/' Makefile.in || die "Failed to patch Makefile"
-}
-
-src_compile() {
- local myconf
-
- if use crypt ; then
- myconf="${myconf} --with-gpg=/usr/bin/gpg --with-checksum=no"
-
- if [[ -n "${KEY_FPR}" ]] ; then
- einfo "Setting built-in key fingerprint to ${KEY_FPR}"
- FPR=`echo ${KEY_FPR} | sed "s/ //g"`
- myconf="${myconf} --with-fp=${FPR}"
- fi
- fi
-
- if [[ -n "${STEALTH}" ]] ; then
- [[ -z "${XOR_VALUE}" ]] && die "Variable XOR_VALUE must be set for stealth mode"
- echo
- einfo "Enabling stealth mode '${STEALTH}', setting XOR_VALUE to ${XOR_VALUE}"
-
- if [[ "${STEALTH}" == "full" ]] ; then
- myconf="${myconf} --enable-stealth=${XOR_VALUE}"
- sed -e "s:STEGIN=@stegin_prg@:STEGIN=:g" -i samhain-install.sh.in
- elif [[ "${STEALTH}" == "micro" ]] ; then
- myconf="${myconf} --enable-micro-stealth=${XOR_VALUE}"
- else
- die "STEALTH must be set to either 'full' or 'micro'"
- fi
-
- if [[ -n "${INSTALL_NAME}" ]] ; then
- echo
- einfo "Setting alternative samhain name to ${INSTALL_NAME}"
- echo
- myconf="${myconf} --enable-install-name=${INSTALL_NAME}"
- fi
- fi
-
- use mysql && myconf="${myconf} --with-database=mysql --enable-xml-log"
- use postgres && myconf="${myconf} --with-database=postgresql --enable-xml-log"
- use prelude && myconf="${myconf} --with-prelude --with-libprelude-prefix=/usr"
- use xml && myconf="${myconf} --enable-xml-log"
- use static && myconf="${myconf} --enable-static"
- use debug && myconf="${myconf} --enable-debug"
-
- use netclient && myconf="${myconf} --enable-network=client"
- use netserver && myconf="${myconf} --enable-network=server"
-
- use login-watch && myconf="${myconf} --enable-login-watch"
- use mounts-check && myconf="${myconf} --enable-mounts-check"
- use suidcheck && myconf="${myconf} --enable-suidcheck"
- use userfiles && myconf="${myconf} --enable-userfiles"
-
- myconf="${myconf} --localstatedir=/var"
-
- econf ${myconf} || die "configure failed"
- make || die "compile failed"
-}
-
-src_install() {
- make DESTDIR="${D}" install || die "make install failed"
-
- rm -Rf "${D}/var/log"
- rm -Rf "${D}/var/run"
- rm -Rf "${D}/var/state"
-
- if [[ -n "${STEALTH}" ]] ; then
- rm -Rf "${D}/usr/share"
- else
- dodoc docs/BUGS docs/MANUAL* docs/README* docs/TODO docs/*.txt
- dohtml docs/*.html
- docinto scripts
- dodoc scripts/*
- insinto /etc
- insopts -m0600
- newins samhainrc.linux samhainrc
- newinitd init/samhain.startGentoo samhain
- keepdir "/var/lib/samhain"
- fi
-
- if use netserver ; then
- keepdir "/var/lib/yule"
- chown daemon:daemon "${D}/var/lib/yule"
- keepdir "/var/log/yule"
- chown daemon:daemon "${D}/var/log/yule"
- fi
-}
-
-pkg_postinst() {
- if [[ -n "${STEALTH}" ]] ; then
- elog
- elog "Manual pages, documentation, and init script were NOT installed in order to"
- elog "obscure Samhain's presence. You should also remove samhain's installation"
- elog "traces from ${ROOT}/var/cache/edb/world and ${ROOT}/var/db/pkg."
- fi
-
- if [[ "${STEALTH}" == "full" ]] ; then
- elog
- elog "In stealth mode, the configuration file must be steganographically hidden"
- elog "in a postscript image file. The sample config has been created this way by"
- elog "the installation process. Use the samhain_stealth utility to modify or"
- elog "create your own configuration file."
- fi
-
- if [[ -z "${KEY_FPR}" ]] ; then
- elog
- ewarn "GnuPG support has been enabled, but fingerprint verification will be"
- ewarn "ignored. To enable fingerprint verification (strongly recommended),"
- ewarn "you must re-emerge this package with the KEY_FPR variable set to"
- ewarn "your default signing key fingerprint."
- ewarn "Please read the Samhain manual for more details."
- elog
- elog "Enabling GnuPG support in Samhain requires that you sign your configuration"
- elog "and and database files. Please run the following commands as root:"
- elog
- elog " gpg -a --clearsign --not-dash-escaped ${ROOT}/etc/samhainrc"
- elog " mv ${ROOT}/etc/samhainrc.asc ${ROOT}/etc/samhainrc"
- elog " chmod 600 ${ROOT}/etc/samhainrc"
- elog
- elog "Run the same commands on ${ROOT}/var/lib/samhain/samhain_file after initialization."
- fi
-
- elog
- elog "Be sure to check your settings in ${ROOT}/etc/samhainrc. When ready, run:"
- elog " samhain -t init"
- elog "to initialize Samhain."
-
- elog
- elog "Samhain stealth-mode options are also available. Please view the comments"
- elog "in the Samhain ebuild for further configuration instructions."
-
- elog
- ewarn "Please be sure to read the Samhain manual to understand and correctly"
- ewarn "configure the Samhain utility."
- ewarn "HTML version available for viewing at http://la-samhna.de/samhain/manual/ ."
-}
projects / gentoo.git / commitdiff