Initial Samhain ebuild.

(Portage version: 2.0.53)

5 files changed, 223 insertions, 0 deletions

diff --git a/app-forensics/samhain/ChangeLog b/app-forensics/samhain/ChangeLog
new file mode 100644
index 000000000000..5971dca0ceb5
--- /dev/null
+++ b/app-forensics/samhain/ChangeLog
@@ -0,0 +1,11 @@
+# ChangeLog for app-forensics/samhain
+# Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/ChangeLog,v 1.1 2005/12/25 14:35:37 chtekk Exp $
+
+*samhain-2.1.1a (25 Dec 2005)
+
+  25 Dec 2005; Luca Longinotti <chtekk@gentoo.org> +metadata.xml,
+  +samhain-2.1.1a.ebuild:
+  Samhain ebuild, fix bug #34243. Thanks to Andrea Barisani and Jared Breland
+  for the initial ebuild in Bugzilla.
+
diff --git a/app-forensics/samhain/Manifest b/app-forensics/samhain/Manifest
new file mode 100644
index 000000000000..6ee3f82ee1b8
--- /dev/null
+++ b/app-forensics/samhain/Manifest
@@ -0,0 +1,4 @@
+MD5 fed0a3e2bc6b047a7d6eb9523c976f48 ChangeLog 362
+MD5 12e07a6eab2f91df8fa03f448ed57312 files/digest-samhain-2.1.1a 74
+MD5 b1bcc1a84490adeeaff207fb5578fa44 metadata.xml 230
+MD5 a79de782d2c796d92abfe025b908363e samhain-2.1.1a.ebuild 6705
diff --git a/app-forensics/samhain/files/digest-samhain-2.1.1a b/app-forensics/samhain/files/digest-samhain-2.1.1a
new file mode 100644
index 000000000000..13def3fae04a
--- /dev/null
+++ b/app-forensics/samhain/files/digest-samhain-2.1.1a
@@ -0,0 +1 @@
+MD5 08c4bb97072ff46f2e6df485e164878d samhain_signed-2.1.1a.tar.gz 1325523
diff --git a/app-forensics/samhain/metadata.xml b/app-forensics/samhain/metadata.xml
new file mode 100644
index 000000000000..c9a807a76004
--- /dev/null
+++ b/app-forensics/samhain/metadata.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+<maintainer>
+	<email>chtekk@gentoo.org</email>
+	<name>Luca Longinotti</name>
+</maintainer>
+</pkgmetadata>
diff --git a/app-forensics/samhain/samhain-2.1.1a.ebuild b/app-forensics/samhain/samhain-2.1.1a.ebuild
new file mode 100644
index 000000000000..dd244ebe3bb1
--- /dev/null
+++ b/app-forensics/samhain/samhain-2.1.1a.ebuild
@@ -0,0 +1,199 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/samhain-2.1.1a.ebuild,v 1.1 2005/12/25 14:35:37 chtekk Exp $
+
+KEYWORDS="~x86"
+DESCRIPTION="Advanced file integrity and intrusion detection tool."
+HOMEPAGE="http://la-samhna.de/samhain/"
+SRC_URI="http://la-samhna.de/archive/samhain_signed-${PV}.tar.gz"
+LICENSE="GPL-2"
+SLOT="0"
+IUSE="crypt debug login-watch mounts-check mysql netclient netserver postgres prelude static suidcheck userfiles xml"
+
+RESTRICT="nostrip"
+
+DEPEND="crypt? ( >=app-crypt/gnupg-1.2 )
+		mysql? ( >=dev-db/mysql-3.23.26 )
+		postgres? ( >=dev-db/postgresql-7.2 )
+		prelude? ( >=dev-libs/libprelude-0.8.10 )
+		>=sys-apps/sed-4
+		app-arch/tar
+		app-arch/gzip"
+
+# Samhain stealth mode options
+#
+# If you would like to enable stealth mode, please set and uncomment the 
+# following options or pass them as enviroment variables when emerging
+# the package (like INSTALL_NAME="asd" emerge samhain).
+# If you set the variables here, don't forget to redigest the ebuild by
+# issuing 'ebuild samhain-2.1.1a.ebuild digest', also remember that with
+# your next emerge sync, the changes to the ebuild will be lost!
+#
+# Read the Samhain manual for additional information.
+#
+# STEALTH should be set to either 'full' or 'micro' (mandatory)
+#STEALTH=""
+#
+# XOR_VALUE should be a whole number from 128 to 255 (mandatory)
+#XOR_VALUE=""
+#
+# INSTALL_NAME can be set to change the name of the Samhain binaries
+# to the name you specify (optional)
+#INSTALL_NAME=""
+
+if [[ "${STEALTH}" == "full" ]] ; then
+	RDEPEND="media-gfx/imagemagick"
+fi
+
+pkg_setup() {
+	if use static ; then
+		if use postgres || use prelude ; then
+			ewarn "At the moment it isn't possible to build a static Samhain with"
+			ewarn "Prelude and/or PostgreSQL support on Gentoo, the compilation"
+			ewarn "fails during the linking process."
+			echo
+			ewarn "This will be looked at and fixed in the future, in the meantime,"
+			ewarn "patches to fix this are always welcome and appreciated! ;)"
+			ewarn "(Open a bug on bugs.gentoo.org for them or send them to"
+			ewarn "the maintainer directly, thanks!)"
+			die "Please turn the 'postgres' and/or 'prelude' USE flags off when building with 'static'"
+		fi
+	fi
+}
+
+src_unpack() {
+	unpack ${A}
+	tar -xzf "samhain-${PV}.tar.gz"
+}
+
+src_compile() {
+	local myconf
+
+	if use crypt ; then
+		myconf="${myconf} --with-gpg=/usr/bin/gpg --with-checksum=no"
+
+		if [[ -n "${KEY_FPR}" ]] ; then
+			einfo "Setting built-in key fingerprint to ${KEY_FPR}"
+			FPR=`echo ${KEY_FPR} | sed "s/ //g"`
+			myconf="${myconf} --with-fp=${FPR}"
+		fi
+	fi
+
+	if [[ -n "${STEALTH}" ]] ; then
+		[[ -z "${XOR_VALUE}" ]] && die "Variable XOR_VALUE must be set for stealth mode"
+		echo
+		einfo "Enabling stealth mode '${STEALTH}', setting XOR_VALUE to ${XOR_VALUE}"
+
+		if [[ "${STEALTH}" == "full" ]] ; then
+			myconf="${myconf} --enable-stealth=${XOR_VALUE}"
+			sed -e "s:STEGIN=@stegin_prg@:STEGIN=:g" -i samhain-install.sh.in
+		elif [[ "${STEALTH}" == "micro" ]] ; then
+			myconf="${myconf} --enable-micro-stealth=${XOR_VALUE}"
+		else
+			die "STEALTH must be set to either 'full' or 'micro'"
+		fi
+
+		if [[ -n "${INSTALL_NAME}" ]] ; then
+			echo
+			einfo "Setting alternative samhain name to ${INSTALL_NAME}"
+			echo
+			myconf="${myconf} --enable-install-name=${INSTALL_NAME}"
+		fi
+	fi
+
+	use mysql && myconf="${myconf} --with-database=mysql --enable-xml-log"
+	use postgres && myconf="${myconf} --with-database=postgresql --enable-xml-log"
+	use prelude && myconf="${myconf} --with-prelude --with-libprelude-prefix=/usr"
+	use xml && myconf="${myconf} --enable-xml-log"
+	use static && myconf="${myconf} --enable-static"
+	use debug && myconf="${myconf} --enable-debug"
+
+	use netclient && myconf="${myconf} --enable-network=client"
+	use netserver && myconf="${myconf} --enable-network=server"
+
+	use login-watch && myconf="${myconf} --enable-login-watch"
+	use mounts-check && myconf="${myconf} --enable-mounts-check"
+	use suidcheck && myconf="${myconf} --enable-suidcheck"
+	use userfiles && myconf="${myconf} --enable-userfiles"
+
+	myconf="${myconf} --localstatedir=/var"
+
+	econf ${myconf} || die "configure failed"
+	make || die "compile failed"
+}
+
+src_install() {
+	make DESTDIR="${D}" install || die "make install failed"
+
+	rm -Rf "${D}/var/log"
+	rm -Rf "${D}/var/run"
+	rm -Rf "${D}/var/state"
+
+	if [[ -n "${STEALTH}" ]] ; then
+		rm -Rf "${D}/usr/share"
+	else
+		dodoc COPYING LICENSE docs/BUGS docs/MANUAL* docs/README* docs/TODO docs/*.txt
+		dohtml docs/*.html
+		docinto scripts
+		dodoc scripts/*
+		insinto /etc
+		insopts -m0600
+		newins samhainrc.linux samhainrc
+		exeinto /etc/init.d
+		newexe init/samhain.startGentoo samhain
+	fi
+
+	if use netserver ; then
+		chown daemon:daemon "${D}/var/lib/yule"
+		chown daemon:daemon "${D}/var/log/yule"
+	fi
+}
+
+pkg_postinst() {
+	if [[ -n "${STEALTH}" ]] ; then
+		echo
+		einfo "Manual pages, documentation, and init script were NOT installed in order to"
+		einfo "obscure Samhain's presence. You should also remove samhain's installation"
+		einfo "traces from /var/cache/edb/world and /var/db/pkg."
+	fi
+
+	if [[ "${STEALTH}" == "full" ]] ; then
+		echo
+		einfo "In stealth mode, the configuration file must be steganographically hidden"
+		einfo "in a postscript image file. The sample config has been created this way by"
+		einfo "the installation process. Use the samhain_stealth utility to modify or"
+		einfo "create your own configuration file."
+	fi
+
+	if [[ -z "${KEY_FPR}" ]] ; then
+		echo
+		ewarn "GnuPG support has been enabled, but fingerprint verification will be"
+		ewarn "ignored. To enable fingerprint verification (strongly recommended),"
+		ewarn "you must re-emerge this package with the KEY_FPR variable set to"
+		ewarn "your default signing key fingerprint."
+		ewarn "Please read the Samhain manual for more details."
+		echo
+		einfo "Enabling GnuPG support in Samhain requires that you sign your configuration"
+		einfo "and and database files. Please run the following commands as root:"
+		einfo
+		einfo "    gpg -a --clearsign --not-dash-escaped /etc/samhainrc"
+		einfo "    mv /etc/samhainrc.asc /etc/samhainrc"
+		einfo "    chmod 600 /etc/samhainrc"
+		einfo
+		einfo "Run the same commands on /var/lib/samhain/samhain_file after initialization."
+	fi
+
+	echo
+	einfo "Be sure to check your settings in /etc/samhainrc. When ready, run:"
+	einfo "    samhain -t init"
+	einfo "to initialize Samhain."
+
+	echo
+	einfo "Samhain stealth-mode options are also available. Please view the comments"
+	einfo "in the Samhain ebuild for further configuration instructions."
+
+	echo
+	ewarn "Please be sure to read the Samhain manual to understand and correctly"
+	ewarn "configure the Samhain utility."
+	ewarn "HTML version available for viewing at http://la-samhna.de/samhain/manual/ ."
+}