1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
|
# Copyright 1999-2004 Gentoo Technologies, Inc.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-mail/qmail-scanner/qmail-scanner-1.20.ebuild,v 1.3 2004/02/06 20:26:19 vapier Exp $
inherit fixheadtails gcc eutils
DESCRIPTION="E-Mail virus scanner for qmail."
HOMEPAGE="http://qmail-scanner.sourceforge.net/"
SRC_URI="mirror://sourceforge/qmail-scanner/${P}.tgz"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~x86 ~sparc"
DEPEND=">=dev-lang/perl-5.6.1-r1
>=dev-perl/Time-HiRes-01.20-r2
>=net-mail/tnef-1.1.1
>=dev-perl/DB_File-1.803-r2
>=net-mail/ripmime-1.3.0.4
>=net-mail/qmail-1.03-r8
>=app-arch/unzip-5.42-r1
virtual/antivirus"
pkg_setup() {
enewgroup qscand 210
enewuser qscand 210 /bin/false /var/spool/qmailscan qscand
}
pkg_preinst() {
local oldname="/var/qmail/bin/qmail-scanner-queue.pl"
if [ -f ${oldname} ]; then
newname=${oldname}.`date +%Y%m%d%H%M%S`
einfo "Backing up old qmail-scanner as $newname in case of modifications."
cp ${oldname} ${newname}
chmod 600 ${newname}
fi
}
src_unpack() {
unpack ${A}
cd ${S}
ht_fix_file autoupdaters/* configure
EXTRA_VIRII="bagle,beagle,mydoom,sco,maldal,mimail,novarg,shimg"
einfo "Adding items to the SILENT_VIRUSES list (${EXTRA_VIRII})"
sed -e "/^SILENT_VIRUSES/s/\"$/,${EXTRA_VIRII}\"/g" -i configure
einfo "Forcing use of clamscan instead of clamuko due to detection bug"
sed -e '788,804 d' -i configure
}
src_compile () {
PATH=${PATH}:/opt/f-prot:/opt/vlnx ./configure \
--domain localhost \
--batch \
--log-details yes \
--mime-unpacker "ripmime" \
|| die "./configure failed!"
#patch for suidperl -> perl
EPATCH_SINGLE_MSG="Changing suidperl to plain perl" \
epatch ${FILESDIR}/qmail-scanner-queue.pl.patch
# build for qmail-scanner-queue wrapper, so we don't need suidperl
cd contrib
`gcc-getCC` ${CFLAGS} -o qmail-scanner-queue qmail-scanner-queue.c || die
}
src_install () {
# Create Directory Structure
diropts -m 755 -o qscand -g qscand
dodir /var/spool/qmailscan
keepdir /var/spool/qmailscan
for i in quarantine working archive; do
for j in tmp new cur; do
dodir /var/spool/qmailscan/${i}/${j}
keepdir /var/spool/qmailscan/${i}/${j}
done
done
dodir /var/spool/qmailscan/tmp
keepdir /var/spool/qmailscan/tmp
# Install standard quarantine attachments file
insinto /var/spool/qmailscan
insopts -m 644 -o qscand -g qscand
doins quarantine-attachments.txt
# create quarantine.log and viruses.log
touch quarantine.log
insinto /var/spool/qmailscan
insopts -m 644 -o qscand -g qscand
doins quarantine.log
dosym quarantine.log ${DESTDIR}/var/spool/qmailscan/viruses.log
# Install qmail-scanner wrapper
insinto /var/qmail/bin
insopts -m 4755 -o qscand -g qscand
doins contrib/qmail-scanner-queue
# Install qmail-scanner script
insinto /var/qmail/bin
insopts -m 4755 -o qscand -g qscand
doins qmail-scanner-queue.pl
insinto /etc/logrotate.d/
insopts -m 644 -o root -g root
newins ${FILESDIR}/qmailscanner.logrotate qmail-scanner
exeinto /etc/cron.daily/
newexe ${FILESDIR}/qmailscanner.cronjob qmail-scanner
# Install documentation
dodoc README CHANGES COPYING
dohtml README.html FAQ.php TODO.php configure-options.php manual-install.php perlscanner.php
docinto contrib
cd contrib
dodoc qs2mrtg.pl mrtg-qmail-scanner.cfg
}
pkg_postinst () {
einfo "Fixing ownerships"
chown -R qscand:qscand /var/spool/qmailscan/tmp /var/spool/qmailscan/working /var/spool/qmailscan/quarantine* /var/spool/qmailscan/archive /var/spool/qmailscan/qmail*
touch /var/qmail/bin/qmail-scanner-queue.pl
# Setup perlscanner + Version Info
#/var/qmail/bin/qmail-scanner-queue.pl -z
#/var/qmail/bin/qmail-scanner-queue.pl -g
chmod -s ${ROOT}/var/qmail/bin/qmail-scanner-queue.pl
${ROOT}/var/qmail/bin/qmail-scanner-queue -z
${ROOT}/var/qmail/bin/qmail-scanner-queue -g
einfo "To activate qmail-scanner, please edit your"
einfo "/var/qmail/control/conf-common file and set:"
einfo "export QMAILQUEUE=/var/qmail/bin/qmail-scanner-queue"
einfo "Or place it in your tcprules file."
ewarn "Please note that it was a call to qmail-scanner-queue.pl before,"
ewarn "but this is now changed to use a wrapper to improve security!"
ewarn "Once you have changed to the wrapper, you can remove the setuid "
ewarn "bit on qmail-scanner-queue.pl"
}
|
GitWeb