diff options
Diffstat (limited to 'net-analyzer/sguil-server/sguil-server-0.6.0_p1.ebuild')
| -rw-r--r-- | net-analyzer/sguil-server/sguil-server-0.6.0_p1.ebuild | 105 |
1 files changed, 105 insertions, 0 deletions
diff --git a/net-analyzer/sguil-server/sguil-server-0.6.0_p1.ebuild b/net-analyzer/sguil-server/sguil-server-0.6.0_p1.ebuild new file mode 100644 index 000000000000..dd5199a4a24e --- /dev/null +++ b/net-analyzer/sguil-server/sguil-server-0.6.0_p1.ebuild @@ -0,0 +1,105 @@ +# Copyright 1999-2005 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/sguil-server/sguil-server-0.6.0_p1.ebuild,v 1.1 2005/12/24 23:28:04 strerror Exp $ + +inherit eutils ssl-cert + +MY_PV="${PV/_p/p}" +DESCRIPTION="Daemon for Sguil Network Security Monitoring" +HOMEPAGE="http://sguil.sourceforge.net" +SRC_URI="mirror://sourceforge/sguil/sguil-server-${MY_PV}.tar.gz" +LICENSE="QPL" +SLOT="0" +KEYWORDS="~x86" +IUSE="ssl" + +DEPEND=">=dev-lang/tcl-8.3 + >=dev-tcltk/tclx-8.3 + dev-tcltk/tcllib + dev-tcltk/mysqltcl + ssl? ( >=dev-tcltk/tls-1.4.1 )" +RDEPEND="${DEPEND} + net-analyzer/p0f + net-analyzer/tcpflow + net-misc/openssh" + +S="${WORKDIR}/sguil-${MY_PV}" + +pkg_setup() { + if built_with_use dev-lang/tcl threads ; then + eerror + eerror "Sguil does not run when tcl was built with threading enabled." + eerror "Please rebuild tcl without threads and reemerge this ebuild." + eerror + die + fi + enewgroup sguil + enewuser sguil -1 -1 /var/lib/sguil sguil +} + +src_unpack(){ + unpack ${A} + cd ${S}/server + sed -i -e 's:DEBUG 2:DEBUG 1:' -e 's:DAEMON 0:DAEMON 1:' \ + -e 's:SGUILD_LIB_PATH ./lib:SGUILD_LIB_PATH /usr/lib/sguild:g' \ + -e 's:/sguild_data/rules:/var/lib/sguil/rules:g' \ + -e 's:/sguild_data/archive:/var/lib/sguil/archive:g' \ + sguild.conf || die "sed failed" + sed -i -e 's:set VERSION "SGUIL-0.6.0":set VERSION "SGUIL-0.6.0p1":' \ + sguild || die "sed failed" +} + +src_install(){ + dodoc server/sql_scripts/* + dodoc doc/CHANGES doc/OPENSSL.README doc/USAGE doc/INSTALL \ + doc/TODO doc/sguildb.dia + + insopts -m640 + insinto /etc/sguil + doins server/{sguild.email,sguild.users,sguild.conf,sguild.queries,sguild.access,autocat.conf} + + insinto /usr/lib/sguild + doins server/lib/* + dobin server/sguild + newinitd "${FILESDIR}/sguild.initd" sguild + newconfd "${FILESDIR}/sguild.confd" sguild + + if use ssl + then + sed -i -e "s/#OPENSSL/OPENSSL/" "${D}/etc/conf.d/sguild" + + if ! [ -f ${ROOT}/etc/sguil/sguild.key ]; then + insinto /etc/sguil + docert sguild + fi + fi + + diropts -g sguil -o sguil + keepdir /var/run/sguil \ + /var/lib/sguil \ + /var/lib/sguil/archive \ + /var/lib/sguil/rules + +} + +pkg_postinst(){ + + if [ -d ${ROOT}/etc/snort/rules ] ; then + ln -s /etc/snort/rules ${ROOT}/var/lib/sguil/rules/${HOSTNAME} + fi + + einfo + einfo "Please customize the sguild configuration files in /etc/sguild before" + einfo "trying to run the daemon. Additionally you will need to setup the" + einfo "mysql database. See /usr/share/doc/${PF}/INSTALL.gz for information." + einfo "Please note that it is STRONGLY recommended to mount a separate" + einfo "filesystem at /var/lib/sguil for both space and performance reasons" + einfo "as a large amount of data will be kept in the directory structure" + einfo "underneath that top directory." + einfo + einfo "You should create the sguild db as per the instructions in" + einfo "/usr/share/doc/${PF}/INSTALL.gz and use the appropriate" + einfo "database setup script located in the same directory." + + einfo +} |