Attachment 155099 Details for Bug 198643 – scanlogd periodic script and use port OPTIONS

[patch] scanlogd periodic script and use port OPTIONS

scanlogd.patch (text/plain), 3.30 KB, created by TEUBEL György on 2015-04-01 18:11:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: TEUBEL György

Created: 2015-04-01 18:11:02 UTC

Size: 3.30 KB

patch

obsolete

>Index: Makefile
>===================================================================
>--- Makefile	(revision 381435)
>+++ Makefile	(working copy)
>@@ -3,7 +3,7 @@
> 
> PORTNAME=	scanlogd
> PORTVERSION=	2.2.7
>-PORTREVISION=	1
>+PORTREVISION=	2
> CATEGORIES=	security
> MASTER_SITES=	http://openwall.com/scanlogd/ \
> 		ftp://ftp.openwall.com/pub/projects/scanlogd/ \
>@@ -14,21 +14,34 @@
> 
> USE_RC_SUBR=	${PORTNAME}
> 
>-.if defined(WITH_LIBNIDS)
>-BUILD_DEPENDS+=	${LOCALBASE}/lib/libnids.a:${PORTSDIR}/net/libnids
>-ALL_TARGET=	libnids
>-.else
>-ALL_TARGET=	libpcap
>-.endif
>-
> USERS=		scanlogd
> GROUPS=		scanlogd
>-MAKE_ARGS=	CC="${CC}" CFLAGS="${CFLAGS} -c" LD="${CC}"
>+MAKE_ARGS=	CC="${CC}" CFLAGS="${CFLAGS}" LD="${CC}" LDFLAGS="${LDFLAGS}"
> 
>-PLIST_FILES=	bin/scanlogd man/man8/scanlogd.8.gz
>+PLIST_FILES=	bin/scanlogd man/man8/scanlogd.8.gz \
>+		etc/periodic/security/850.scanlogd
> 
>+OPTIONS_SINGLE=	PCAP
>+OPTIONS_SINGLE_PCAP=	PCAP_BASE NIDS
>+
>+OPTIONS_DEFAULT=	PCAP_BASE
>+
>+PCAP_BASE_DESC=	Use pcap from base for packet capture
>+NIDS_DESC=	Use net/libnet for packet capture
>+
>+PCAP_BASE_ALL_TARGET=	libpcap
>+
>+NIDS_ALL_TARGET=	libnids
>+NIDS_BUILD_DEPENDS=	${LOCALBASE}/lib/libnids.a:${PORTSDIR}/net/libnids
>+NIDS_LIB_DEPENDS=	libnet.so:${PORTSDIR}/net/libnet
>+NIDS_CFLAGS=		-I${LOCALBASE}/include/libnet11
>+NIDS_LDFLAGS=		-L${LOCALBASE}/lib/libnet11
>+
> do-install:
> 	${INSTALL_PROGRAM} ${WRKSRC}/scanlogd ${STAGEDIR}${PREFIX}/bin
> 	${INSTALL_MAN} ${WRKSRC}/scanlogd.8 ${STAGEDIR}${MANPREFIX}/man/man8
>+	${MKDIR} ${STAGEDIR}${PREFIX}/etc/periodic/security
>+	${INSTALL_SCRIPT} ${FILESDIR}/850.scanlogd \
>+		${STAGEDIR}${PREFIX}/etc/periodic/security
> 
> .include <bsd.port.mk>
>Index: files/850.scanlogd
>===================================================================
>--- files/850.scanlogd	(revision 0)
>+++ files/850.scanlogd	(working copy)
>@@ -0,0 +1,54 @@
>+#!/bin/sh -
>+#
>+# Show possible port scans detected by scanlogd.
>+#
>+# If you want to enable this script, place the following
>+# into /etc/periodic.conf:
>+#
>+# security_status_scanlogd_enable="YES"
>+# security_status_scanlogd_period="daily"
>+#
>+
>+# If there is a global system configuration file, suck it in.
>+#
>+if [ -r /etc/defaults/periodic.conf ]; then
>+	. /etc/defaults/periodic.conf
>+	source_periodic_confs
>+fi
>+
>+: ${security_status_scanlogd_period="daily"}
>+
>+security_daily_compat_var security_status_logdir
>+security_daily_compat_var security_status_scanlogd_enable
>+
>+logdir="${security_status_logdir}"
>+
>+yesterday=`env LC_TIME=C date -v-1d "+%b %e "`
>+
>+catmsgs() {
>+	local logdir logfile mtime
>+	logdir="$1"
>+	logfile="$2"
>+	mtime="$3"
>+
>+	find "$logdir" $ -name "$logfile" -o -name "$logfile.*" $ -mtime "$mtime" -print0 |
>+		xargs -0 ls -1tr |
>+		while read f; do
>+			case "$f" in
>+				*.gz)   zcat -f "$f" ;;
>+				*.bz2)  bzcat -f "$f" ;;
>+				*)      cat "$f" ;;
>+			esac
>+		done
>+}
>+
>+rc=0
>+
>+if check_yesno_period security_status_scanlogd_enable; then
>+	echo ""
>+	echo "${host} possible port scans:"
>+	n=$(catmsgs "$logdir" messages "-2" | egrep -ia "^$yesterday.*scanlogd:" | tee /dev/stderr | wc -l)
>+	[ $n -gt 0 ] && rc=1 || rc=0
>+fi
>+
>+exit $rc
>
>Property changes on: files/850.scanlogd
>___________________________________________________________________
>Added: svn:eol-style
>## -0,0 +1 ##
>+native
>\ No newline at end of property
>Added: svn:mime-type
>## -0,0 +1 ##
>+text/plain
>\ No newline at end of property

Actions: View | Diff

Attachments on bug 198643: 154438 | 154952 | 155099