From 623f5ed92277f23a7aba56ec847a9c8b291c05be Mon Sep 17 00:00:00 2001 From: Armin Kuster Date: Tue, 22 Dec 2015 16:16:20 -0800 Subject: Samhain: package update to 4.1.2 4.1.1 Changes: - Fix for broken libwrap support. - Fix for broken baseline update (-t update) on FreeBSD and maybe other non GNU/Linux systems. - Fix for ungraceful handling of rotated logiles if logfile content is always zero or constant. - Fix for timezone offset calculation on month rollover for timezones west of GMT. 4.1.2 Changes: - Fix for broken rpm / rpm-light makefile targets. - Fix for the failure to detect open UDP ports sometimes. - Fix for reporting file changes with the wrong policy if both inotify is used and the file change occurs during a configuration reload. - New configure options --enable-posix-acl and --enable-selinux to turn the soft failure (no support for checking compiled in) into a hard failure if required headers/libraries are missing for this feature. Signed-off-by: Armin Kuster --- recipes-security/samhain/samhain-server_4.1.0.bb | 50 ----------------------- recipes-security/samhain/samhain-server_4.1.2.bb | 52 ++++++++++++++++++++++++ recipes-security/samhain/samhain.inc | 4 +- 3 files changed, 54 insertions(+), 52 deletions(-) delete mode 100644 recipes-security/samhain/samhain-server_4.1.0.bb create mode 100644 recipes-security/samhain/samhain-server_4.1.2.bb diff --git a/recipes-security/samhain/samhain-server_4.1.0.bb b/recipes-security/samhain/samhain-server_4.1.0.bb deleted file mode 100644 index 41646e6..0000000 --- a/recipes-security/samhain/samhain-server_4.1.0.bb +++ /dev/null @@ -1,50 +0,0 @@ -SAMHAIN_MODE="server" -INITSCRIPT_PARAMS = "defaults 14 86" - -require samhain.inc - -DEPENDS = "gmp" - -EXTRA_OECONF += "--enable-network=${SAMHAIN_MODE} " - -# supports mysql|postgresql|oracle|odbc but postgresql is the only one available - -PACKAGECONFG ??= "postgresql" -PACKAGECONFIG[postgres] = "--with-database=postgresql --enable-xml-log, "", postgresql" -PACKAGECONFIG[suidcheck] = "--enable-suidcheck","" , " -PACKAGECONFIG[logwatch] = "--enable-login-watch,"" , " -PACKAGECONFIG[mounts] = "--enable-mounts-check","" , " -PACKAGECONFIG[userfiles] = "--enable-userfiles","" , " -PACKAGECONFIG[ipv6] = "--enable-ipv6,"--disable-ipv6"," - -SRC_URI += "file://samhain-server-volatiles" - -EXTRA_OECONF += " \ - --with-config-file=REQ_FROM_SERVER/etc/samhainrc \ - --with-data-file=REQ_FROM_SERVER/var/lib/samhain/samhain_file \ - " - -do_install_append() { - cd ${S} - install -d ${D}${sysconfdir}/default/volatiles - install -m 0644 ${WORKDIR}/samhain-server-volatiles \ - ${D}${sysconfdir}/default/volatiles/samhain-server - - install -m 700 samhain-install.sh init/samhain.startLinux \ - init/samhain.startLSB ${D}/var/lib/samhain -} - -INSANE_SKIP_${PN} = "already-stripped" - -PACKAGES = "${PN} ${PN}-doc ${PN}-dbg" - -FILES_${PN} += " \ - ${sbindir}/* \ - /run \ - " - -FILES_${PN}-dbg += " \ - ${sbindir}/.debug/* \ - " - -RDEPENDS_${PN} += "gmp bash perl" diff --git a/recipes-security/samhain/samhain-server_4.1.2.bb b/recipes-security/samhain/samhain-server_4.1.2.bb new file mode 100644 index 0000000..df78f63 --- /dev/null +++ b/recipes-security/samhain/samhain-server_4.1.2.bb @@ -0,0 +1,52 @@ +SAMHAIN_MODE="server" +INITSCRIPT_PARAMS = "defaults 14 86" + +require samhain.inc + +DEPENDS = "gmp" + +EXTRA_OECONF += "--enable-network=${SAMHAIN_MODE} " + +# supports mysql|postgresql|oracle|odbc but postgresql is the only one available + +PACKAGECONFG ??= "postgresql" +PACKAGECONFIG[postgres] = "--with-database=postgresql --enable-xml-log, "", postgresql" +PACKAGECONFIG[suidcheck] = "--enable-suidcheck","" , " +PACKAGECONFIG[logwatch] = "--enable-login-watch,"" , " +PACKAGECONFIG[mounts] = "--enable-mounts-check","" , " +PACKAGECONFIG[userfiles] = "--enable-userfiles","" , " +PACKAGECONFIG[ipv6] = "--enable-ipv6,"--disable-ipv6"," +PACKAGECONFIG[selinux] = "--enable-selinux, --disable-selinux" +PACKAGECONFIG[acl] = " --enable-posix-acl , --disable-posix-acl" + +SRC_URI += "file://samhain-server-volatiles" + +EXTRA_OECONF += " \ + --with-config-file=REQ_FROM_SERVER/etc/samhainrc \ + --with-data-file=REQ_FROM_SERVER/var/lib/samhain/samhain_file \ + " + +do_install_append() { + cd ${S} + install -d ${D}${sysconfdir}/default/volatiles + install -m 0644 ${WORKDIR}/samhain-server-volatiles \ + ${D}${sysconfdir}/default/volatiles/samhain-server + + install -m 700 samhain-install.sh init/samhain.startLinux \ + init/samhain.startLSB ${D}/var/lib/samhain +} + +INSANE_SKIP_${PN} = "already-stripped" + +PACKAGES = "${PN} ${PN}-doc ${PN}-dbg" + +FILES_${PN} += " \ + ${sbindir}/* \ + /run \ + " + +FILES_${PN}-dbg += " \ + ${sbindir}/.debug/* \ + " + +RDEPENDS_${PN} += "gmp bash perl" diff --git a/recipes-security/samhain/samhain.inc b/recipes-security/samhain/samhain.inc index 8114f42..9525229 100644 --- a/recipes-security/samhain/samhain.inc +++ b/recipes-security/samhain/samhain.inc @@ -9,8 +9,8 @@ SRC_URI = "http://la-samhna.de/archive/samhain_signed-${PV}.tar.gz \ file://${INITSCRIPT_NAME}.default \ " -SRC_URI[md5sum] = "fcb59c6c8a1d30cc6ffc21557a0046d3" -SRC_URI[sha256sum] = "a8e10454782a7f3bb5f709dd05cee695ffbd052afc709668a3e7c4b629771189" +SRC_URI[md5sum] = "9112612fe569a0c92c7479ed2ef3b6f0" +SRC_URI[sha256sum] = "bb32321b3dc8450351d99e90d25182a029bef1e46b9a0439ade1ca0a744eadb8" S = "${WORKDIR}/samhain-${PV}" -- cgit v1.2.3-54-g00ecf