blob: eee0ae6948e994470082be653ba714e154c5fa76 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
# Copyright 1999-2004 Gentoo Technologies, Inc.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-analyzer/snort/snort-2.1.1.ebuild,v 1.4 2004/04/06 11:00:31 method Exp $
inherit eutils
DESCRIPTION="Libpcap-based packet sniffer/logger/lightweight IDS"
HOMEPAGE="http://www.snort.org/"
SRC_URI="http://www.snort.org/dl/${P}.tar.gz"
# prelude? ( http://www.prelude-ids.org/download/releases/snort-prelude-reporting-patch-0.2.5.tar.gz )"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="x86 ~sparc -alpha ~amd64"
IUSE="ssl postgres mysql flexresp selinux"
# snort 2.1.x does not have prelude patches yet
# IUSE="${IUSE} prelude"
# snort 2.1.x has discontinued smb alert output, and no 3rd party have done them yet
# IUSE="${IUSE} samba"
# snort 2.0.x does not support snmp yet Bug #26310 (2.1.x doesn't have SNMP either)
# IUSE="${IUSE} snmp"
DEPEND="virtual/glibc
>=dev-libs/libpcre-4.2-r1
>=net-libs/libpcap-0.6.2-r1
flexresp? ( <net-libs/libnet-1.1
>=net-libs/libnet-1.0.2a-r3 )
postgres? ( >=dev-db/postgresql-7.2 )
mysql? ( >=dev-db/mysql-3.23.26 )
ssl? ( >=dev-libs/openssl-0.9.6b )"
# prelude? ( >=dev-libs/libprelude-0.8 )
# snmp? ( >=net-analyzer/net-snmp-5.0 )
RDEPEND="virtual/glibc
>=dev-libs/libpcre-4.2-r1
dev-lang/perl
>=net-libs/libpcap-0.6.2-r1
postgres? ( >=dev-db/postgresql-7.2 )
mysql? ( >=dev-db/mysql-3.23.26 )
ssl? ( >=dev-libs/openssl-0.9.6b )
selinux? ( sec-policy/selinux-snort )"
# samba? ( net-fs/samba )
# prelude? ( >=dev-libs/libprelude-0.8 )
src_unpack() {
unpack ${A}
cd ${S}
#is this needed in 2.0? -Method
#epatch ${FILESDIR}/${P}-configure.patch
use flexresp && epatch ${FILESDIR}/${PV}-libnet-1.0.patch
epatch ${FILESDIR}/${P}-gcc3.patch
epatch ${FILESDIR}/snort-drop-calculation.diff
sed -i "s:var RULE_PATH ../rules:var RULE_PATH /etc/snort:" etc/snort.conf
# Prelude patch currently not compatible with 2.1.0
#use prelude && (
# epatch ../${P/.1.0/.0.2}-prelude.diff
# sh ./autogen.sh
#)
}
src_compile() {
local myconf
use flexresp && myconf="$myconf --enable-flexresp" # There is no --diable-flexresp, can't use use_enable
# use samba && myconf="$myconf --enable-smbalerts" # There is no --diable-smbalerts, can't use use_enable
# `use_with snmp` \
# --enable-pthreads \ # Not supported, never was, and now also removed
# `use_with prelude` \
econf \
`use_with postgres postgresql` \
`use_with mysql` \
`use_with ssl openssl` \
--without-odbc \
--without-oracle \
$myconf || die "bad ./configure"
emake || die "compile problem"
}
src_install() {
make DESTDIR=${D} install || die
dodir /var/log/snort
keepdir /var/log/snort/
insinto /usr/lib/snort/bin
doins contrib/{create_mysql,snortlog,*.pl}
dodoc COPYING LICENSE doc/*
docinto contrib ; dodoc contrib/*
insinto /etc/snort
doins etc/reference.config etc/classification.config rules/*.rules etc/*.map etc/threshold.conf
#use prelude && doins etc/prelude-classification.config
newins etc/snort.conf snort.conf.distrib
exeinto /etc/init.d ; newexe ${FILESDIR}/snort.rc6 snort
insinto /etc/conf.d ; newins ${FILESDIR}/snort.confd snort
}
pkg_postinst() {
enewgroup snort
enewuser snort -1 /dev/null /var/log/snort snort
usermod -d "/var/log/snort" snort || die "usermod problem"
usermod -g "snort" snort || die "usermod problem"
usermod -s "/dev/null" snort || die "usermod problem"
echo "ignore any message about CREATE_HOME above..."
chown snort:snort /var/log/snort
chmod 0770 /var/log/snort
}
|
GitWeb