blob: 75b04d85844b2e8f49d2c7e00bfdb0df2e9a05a7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
# Copyright 1999-2003 Gentoo Technologies, Inc.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-firewall/psad/psad-1.2.3.ebuild,v 1.1 2003/09/18 23:55:15 seemant Exp $
inherit eutils
inherit perl-module
IUSE=""
LICENSE="GPL-2"
S=${WORKDIR}/${P}
DESCRIPTION="Port Scannning Attack Detection daemon"
SRC_URI="http://www.cipherdyne.org/psad/download/psad-${PV}.tar.gz"
HOMEPAGE="http://www.cipherdyne.org/psad"
SLOT="0"
KEYWORDS="~x86 ~amd64 ~ppc ~alpha ~sparc"
DEPEND="${DEPEND}
dev-lang/perl"
#"( app-admin/metalog || (app-admin/sysklogd || app-admin/msyslog || app-admin/syslog-ng )
RDEPEND="dev-perl/Unix-Syslog
dev-perl/Date-Calc
net-mail/mailx
net-firewall/iptables"
src_compile() {
cd ${S}/Psad
SRC_PREP="no" perl-module_src_compile
emake test
cd ${S}/Net-IPv4Addr
SRC_PREP="no" perl-module_src_compile
emake test
cd ${S}/IPTables/Parse
SRC_PREP="no" perl-module_src_compile
emake test
cd ${S}/whois
emake || die
cd ${S}
# We'll use the C binaries until we see them break
emake || die
}
src_install() {
keepdir /var/lib/psad /var/log/psad /var/run/psad /var/lock/subsys/${PN}
dodir /etc/psad
cd ${S}/Psad
perl-module_src_install
cd ${S}/Net-IPv4Addr
perl-module_src_install
cd ${S}/IPTables/Parse
perl-module_src_install
cd ${S}/whois
# Makefile seems borken, do install by hand...
insinto /usr
newbin whois whois_psad
newman whois.1 whois_psad.1
cd ${S}
insinto /usr
dosbin diskmond kmsgsd psad psadwatchd
dobin pscan
cd ${S}
insinto /etc/psad
doins *.conf
cd ${S}/snort_rules
dodir /etc/psad/snort_rules
insinto /etc/psad/snort_rules
doins *.rules
dodoc BENCHMARK CREDITS Change* FW_EXAMPLE_RULES README LICENSE SCAN_LOG
}
pkg_postinst() {
if [ ! -p ${ROOT}/var/lib/psad/psadfifo ]
then
ebegin "Creating syslog FIFO for PSAD"
mknod -m 600 ${ROOT}/var/lib/psad/psadfifo p
eend $?
fi
echo
einfo "Several programs in the PSAD package are in the process of being converted to"
einfo "compiled C from PERL. If you have any problems, please notify the PSAD"
einfo "maintainers. Please do not take PSAD issues to the Bastille-Linux team."
echo
ewarn "Please be sure to edit /etc/psad/psad.conf to reflect your system's configuration"
ewarn "or it may not work correctly or start up."
}
|