From 33cbcbfe6317b588e4fb18225ea7f93a5f3751ea Mon Sep 17 00:00:00 2001 From: shannonjr Date: Sun, 29 Jan 2006 15:54:04 +0000 Subject: Prelude is a hybrid IDS consisting of multiple sensors, managers, and a display console. LibPrelude is the glue that binds all aspects of Prelude together. LibPrelude is a library which enables Prelude components to communicate in a standard IDMEF method. This is one of several new packages in the Prelude family. --- security/libprelude/DESCR | 5 ++ security/libprelude/Makefile | 45 +++++++++++++++ security/libprelude/PLIST | 106 +++++++++++++++++++++++++++++++++++ security/libprelude/PLIST.py | 3 + security/libprelude/buildlink3.mk | 20 +++++++ security/libprelude/distinfo | 8 +++ security/libprelude/options.mk | 29 ++++++++++ security/libprelude/patches/patch-aa | 80 ++++++++++++++++++++++++++ security/libprelude/patches/patch-ab | 21 +++++++ security/libprelude/patches/patch-ac | 104 ++++++++++++++++++++++++++++++++++ 10 files changed, 421 insertions(+) create mode 100644 security/libprelude/DESCR create mode 100644 security/libprelude/Makefile create mode 100644 security/libprelude/PLIST create mode 100644 security/libprelude/PLIST.py create mode 100644 security/libprelude/buildlink3.mk create mode 100644 security/libprelude/distinfo create mode 100644 security/libprelude/options.mk create mode 100644 security/libprelude/patches/patch-aa create mode 100644 security/libprelude/patches/patch-ab create mode 100644 security/libprelude/patches/patch-ac (limited to 'security/libprelude') diff --git a/security/libprelude/DESCR b/security/libprelude/DESCR new file mode 100644 index 00000000000..71bebdbaad3 --- /dev/null +++ b/security/libprelude/DESCR @@ -0,0 +1,5 @@ +Prelude is a hybrid IDS consisting of multiple +sensors, managers, and a display console. LibPrelude +is the glue that binds all aspects of Prelude together. +LibPrelude is a library which enables Prelude +components to communicate in a standard IDMEF method. diff --git a/security/libprelude/Makefile b/security/libprelude/Makefile new file mode 100644 index 00000000000..53957319868 --- /dev/null +++ b/security/libprelude/Makefile @@ -0,0 +1,45 @@ +# $NetBSD: Makefile,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ +# +DISTNAME= libprelude-0.9.3 +CATEGORIES= security +MASTER_SITES= http://www.prelude-ids.org/download/releases/ + +MAINTAINER= shannonjr@NetBSD.org +HOMEPAGE= http://www.prelude-ids.org/download/releases/ +COMMENT= Provides the framework for using the Prelude system + +.include "../../mk/bsd.prefs.mk" +.include "options.mk" + +PRELUDE_USER?= _prelude +PRELUDE_GROUP?= _prelude + +USE_PKGLOCALEDIR= yes +USE_LIBTOOL= yes +GNU_CONFIGURE= yes +USE_GNU_TOOLS+= make +USE_TOOLS+= bison gawk +CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q} +CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q} +CONFIGURE_ARGS+= --with-html-dir=${PREFIX}/share/doc +PRELUDE_USER?= _prelude +PRELUDE_GROUP?= _prelude +PRELUDE_HOME?= ${VARBASE:Q}/spool/prelude +PKG_USERS= ${PRELUDE_USER}:${PRELUDE_GROUP}::Prelude\ IDS:${PRELUDE_HOME}:${NOLOGIN} +PKG_GROUPS= ${PRELUDE_GROUP} + +post-install: + ${INSTALL_DATA_DIR} ${PREFIX}/share/examples/libprelude/ + ${INSTALL_DATA} ${WRKSRC}/client.conf \ + ${PREFIX}/share/examples/libprelude/client.conf-dist + ${INSTALL_DATA} ${WRKSRC}/global.conf \ + ${PREFIX}/share/examples/libprelude/global.conf-dist + ${INSTALL_DATA} ${WRKSRC}/idmef-client.conf \ + ${PREFIX}/share/examples/libprelude/idmef-client.conf-dist + ${INSTALL_DATA} ${WRKSRC}/tls.conf \ + ${PREFIX}/share/examples/libprelude/tls.conf-dist + ${CHOWN} -R ${PRELUDE_USER}:${PRELUDE_GROUP} ${PRELUDE_HOME} + +.include "../../security/gnutls/buildlink3.mk" +.include "../../mk/pthread.buildlink3.mk" +.include "../../mk/bsd.pkg.mk" diff --git a/security/libprelude/PLIST b/security/libprelude/PLIST new file mode 100644 index 00000000000..f10cf98c42a --- /dev/null +++ b/security/libprelude/PLIST @@ -0,0 +1,106 @@ +@comment $NetBSD: PLIST,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ +bin/libprelude-config +bin/prelude-adduser +include/libprelude/common.h +include/libprelude/daemonize.h +include/libprelude/idmef-additional-data.h +include/libprelude/idmef-class.h +include/libprelude/idmef-criteria.h +include/libprelude/idmef-criterion-value.h +include/libprelude/idmef-data.h +include/libprelude/idmef-message-id.h +include/libprelude/idmef-message-print.h +include/libprelude/idmef-message-read.h +include/libprelude/idmef-message-write.h +include/libprelude/idmef-path.h +include/libprelude/idmef-time.h +include/libprelude/idmef-tree-data.h +include/libprelude/idmef-tree-wrap.h +include/libprelude/idmef-value-type.h +include/libprelude/idmef-value.h +include/libprelude/idmef.h +include/libprelude/prelude-async.h +include/libprelude/prelude-client-profile.h +include/libprelude/prelude-client.h +include/libprelude/prelude-config.h +include/libprelude/prelude-connection-pool.h +include/libprelude/prelude-connection.h +include/libprelude/prelude-error.h +include/libprelude/prelude-extract.h +include/libprelude/prelude-failover.h +include/libprelude/prelude-hash.h +include/libprelude/prelude-ident.h +include/libprelude/prelude-inttypes.h +include/libprelude/prelude-io.h +include/libprelude/prelude-linked-object.h +include/libprelude/prelude-list.h +include/libprelude/prelude-log.h +include/libprelude/prelude-message-id.h +include/libprelude/prelude-msg.h +include/libprelude/prelude-msgbuf.h +include/libprelude/prelude-option-wide.h +include/libprelude/prelude-option.h +include/libprelude/prelude-plugin.h +include/libprelude/prelude-string.h +include/libprelude/prelude-timer.h +include/libprelude/prelude.h +include/libprelude/variable.h +lib/libprelude.la +share/aclocal/libprelude.m4 +share/doc/libprelude/ch01.html +share/doc/libprelude/ch02.html +share/doc/libprelude/ch03.html +share/doc/libprelude/ch04.html +share/doc/libprelude/home.png +share/doc/libprelude/index.html +share/doc/libprelude/index.sgml +share/doc/libprelude/left.png +share/doc/libprelude/libprelude-idmef-additional-data.html +share/doc/libprelude/libprelude-idmef-criteria.html +share/doc/libprelude/libprelude-idmef-criterion-value.html +share/doc/libprelude/libprelude-idmef-data.html +share/doc/libprelude/libprelude-idmef-message-print.html +share/doc/libprelude/libprelude-idmef-message-read.html +share/doc/libprelude/libprelude-idmef-message-write.html +share/doc/libprelude/libprelude-idmef-path.html +share/doc/libprelude/libprelude-idmef-time.html +share/doc/libprelude/libprelude-idmef-tree-wrap.html +share/doc/libprelude/libprelude-idmef-value.html +share/doc/libprelude/libprelude-prelude-async.html +share/doc/libprelude/libprelude-prelude-client-profile.html +share/doc/libprelude/libprelude-prelude-client.html +share/doc/libprelude/libprelude-prelude-connection-pool.html +share/doc/libprelude/libprelude-prelude-connection.html +share/doc/libprelude/libprelude-prelude-error.html +share/doc/libprelude/libprelude-prelude-extract.html +share/doc/libprelude/libprelude-prelude-failover.html +share/doc/libprelude/libprelude-prelude-hash.html +share/doc/libprelude/libprelude-prelude-ident.html +share/doc/libprelude/libprelude-prelude-inttypes.html +share/doc/libprelude/libprelude-prelude-io.html +share/doc/libprelude/libprelude-prelude-linked-object.html +share/doc/libprelude/libprelude-prelude-list.html +share/doc/libprelude/libprelude-prelude-log.html +share/doc/libprelude/libprelude-prelude-msg.html +share/doc/libprelude/libprelude-prelude-msgbuf.html +share/doc/libprelude/libprelude-prelude-option-wide.html +share/doc/libprelude/libprelude-prelude-option.html +share/doc/libprelude/libprelude-prelude-plugin.html +share/doc/libprelude/libprelude-prelude-string.html +share/doc/libprelude/libprelude-prelude-timer.html +share/doc/libprelude/libprelude-prelude.html +share/doc/libprelude/libprelude.devhelp +share/doc/libprelude/pt01.html +share/doc/libprelude/pt02.html +share/doc/libprelude/pt03.html +share/doc/libprelude/pt04.html +share/doc/libprelude/right.png +share/doc/libprelude/style.css +share/doc/libprelude/up.png +share/examples/libprelude/client.conf-dist +share/examples/libprelude/global.conf-dist +share/examples/libprelude/idmef-client.conf-dist +share/examples/libprelude/tls.conf-dist +@dirrm share/examples/libprelude +@dirrm share/doc/libprelude +@dirrm include/libprelude diff --git a/security/libprelude/PLIST.py b/security/libprelude/PLIST.py new file mode 100644 index 00000000000..72366dd1b1a --- /dev/null +++ b/security/libprelude/PLIST.py @@ -0,0 +1,3 @@ +@comment $NetBSD: PLIST.py,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ +${PYSITELIB}/_prelude.so +${PYSITELIB}/prelude.pyc diff --git a/security/libprelude/buildlink3.mk b/security/libprelude/buildlink3.mk new file mode 100644 index 00000000000..a927749c72b --- /dev/null +++ b/security/libprelude/buildlink3.mk @@ -0,0 +1,20 @@ +# $NetBSD: buildlink3.mk,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ + +BUILDLINK_DEPTH:= ${BUILDLINK_DEPTH}+ +LIBPRELUDE_BUILDLINK3_MK:= ${LIBPRELUDE_BUILDLINK3_MK}+ + +.if !empty(BUILDLINK_DEPTH:M+) +BUILDLINK_DEPENDS+= libprelude +.endif + +BUILDLINK_PACKAGES:= ${BUILDLINK_PACKAGES:Nlibprelude} +BUILDLINK_PACKAGES+= libprelude + +.if !empty(LIBPRELUDE_BUILDLINK3_MK:M+) +BUILDLINK_DEPENDS.libprelude+= libprelude>=0.9.0 +BUILDLINK_PKGSRCDIR.libprelude?= ../../security/libprelude +.endif # LIBPRELUDE_BUILDLINK3_MK + +.include "../../security/gnutls/buildlink3.mk" + +BUILDLINK_DEPTH:= ${BUILDLINK_DEPTH:S/+$//} diff --git a/security/libprelude/distinfo b/security/libprelude/distinfo new file mode 100644 index 00000000000..4da9949aba2 --- /dev/null +++ b/security/libprelude/distinfo @@ -0,0 +1,8 @@ +$NetBSD: distinfo,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ + +SHA1 (libprelude-0.9.3.tar.gz) = 38bc3bd102d21b164ed7da6586ada38b55fbe46a +RMD160 (libprelude-0.9.3.tar.gz) = 40b520978a71fd7dbcce4dd84e5fc16b75632543 +Size (libprelude-0.9.3.tar.gz) = 1704602 bytes +SHA1 (patch-aa) = 1d788517feb2ef687777ae6640033d9f177b07f8 +SHA1 (patch-ab) = 592f42a6d9217c502eb49e8fb0ba7d17a49f2ada +SHA1 (patch-ac) = 34f11cdf22cbdc843ed0db6ea017a56b2ec780ca diff --git a/security/libprelude/options.mk b/security/libprelude/options.mk new file mode 100644 index 00000000000..40041ac1366 --- /dev/null +++ b/security/libprelude/options.mk @@ -0,0 +1,29 @@ +# $NetBSD: options.mk,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ + +PKG_OPTIONS_VAR= PKG_OPTIONS.libprelude +PKG_SUPPORTED_OPTIONS= perl python + +.include "../../mk/bsd.options.mk" + +### +### Whether to build with the perl and python plugins +### +### python is needed for prewikka +### + +.if !empty(PKG_OPTIONS:Mperl) +USE_PERL= run +CONFIGURE_ARGS+= --enable-perl +REPLACE_PERL+= bindings/perl/Makefile.PL +.else +CONFIGURE_ARGS+= --disable-perl +.endif +.if !empty(PKG_OPTIONS:Mpython) +CONFIGURE_ARGS+= --enable-python +CONFIGURE_ENV+= PYTHON=${PYTHONBIN:Q} +PY_PATCHPLIST= yes +.include "../../lang/python/application.mk" +.include "../../lang/python/extension.mk" +.else +CONFIGURE_ARGS+= --disable-python +.endif diff --git a/security/libprelude/patches/patch-aa b/security/libprelude/patches/patch-aa new file mode 100644 index 00000000000..8c9a6fd5807 --- /dev/null +++ b/security/libprelude/patches/patch-aa @@ -0,0 +1,80 @@ +$NetBSD: patch-aa,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ + +--- prelude-adduser/prelude-adduser.c.orig 2005-06-26 05:41:44.000000000 -0600 ++++ prelude-adduser/prelude-adduser.c +@@ -43,6 +43,8 @@ + #include + #include + ++#include ++ + #include "common.h" + #include "config-engine.h" + #include "prelude-error.h" +@@ -886,6 +888,66 @@ static int del_cb(const char *filename, + } + + ++int ++ftw(const char *path, int (*fn)(const char *, const struct stat *, int), ++ int nfds) ++{ ++ char * const paths[2] = { (char *)path, NULL }; ++ FTSENT *cur; ++ FTS *ftsp; ++ int error = 0, fnflag, sverrno; ++ ++ /* XXX - nfds is currently unused */ ++ if (nfds < 1 || nfds > OPEN_MAX) { ++ errno = EINVAL; ++ return (-1); ++ } ++ ++ ftsp = fts_open(paths, FTS_LOGICAL | FTS_COMFOLLOW | FTS_NOCHDIR, NULL); ++ if (ftsp == NULL) ++ return (-1); ++ while ((cur = fts_read(ftsp)) != NULL) { ++ switch (cur->fts_info) { ++ case FTS_D: ++ fnflag = FTW_D; ++ break; ++ case FTS_DNR: ++ fnflag = FTW_DNR; ++ break; ++ case FTS_DP: ++ /* we only visit in preorder */ ++ continue; ++ case FTS_F: ++ case FTS_DEFAULT: ++ fnflag = FTW_F; ++ break; ++ case FTS_NS: ++ case FTS_NSOK: ++ case FTS_SLNONE: ++ fnflag = FTW_NS; ++ break; ++ case FTS_SL: ++ fnflag = FTW_SL; ++ break; ++ case FTS_DC: ++ errno = ELOOP; ++ /* FALLTHROUGH */ ++ default: ++ error = -1; ++ goto done; ++ } ++ error = fn(cur->fts_path, cur->fts_statp, fnflag); ++ if (error != 0) ++ break; ++ } ++done: ++ sverrno = errno; ++ if (fts_close(ftsp) != 0 && error == 0) ++ error = -1; ++ else ++ errno = sverrno; ++ return (error); ++} + + static void delete_dir(const char *dirname) + { diff --git a/security/libprelude/patches/patch-ab b/security/libprelude/patches/patch-ab new file mode 100644 index 00000000000..9325f98abf3 --- /dev/null +++ b/security/libprelude/patches/patch-ab @@ -0,0 +1,21 @@ +$NetBSD: patch-ab,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ +--- src/tls-auth.c.orig Mon Jul 25 15:58:08 2005 ++++ src/tls-auth.c Mon Aug 15 12:38:00 2005 +@@ -165,6 +165,7 @@ int tls_auth_connection(prelude_client_p + int ret, fd; + void *cred; + gnutls_session session; ++ int cipher_list[2]; + + ret = prelude_client_profile_get_credentials(cp, &cred); + if ( ret < 0 ) +@@ -172,6 +173,9 @@ int tls_auth_connection(prelude_client_p + + gnutls_init(&session, GNUTLS_CLIENT); + gnutls_set_default_priority(session); ++ cipher_list[0] = GNUTLS_CIPHER_AES_128_CBC; ++ cipher_list[1] = 0; ++ gnutls_cipher_set_priority (session, cipher_list); + gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, cred); + + fd = prelude_io_get_fd(io); diff --git a/security/libprelude/patches/patch-ac b/security/libprelude/patches/patch-ac new file mode 100644 index 00000000000..46d1d5fb241 --- /dev/null +++ b/security/libprelude/patches/patch-ac @@ -0,0 +1,104 @@ +$NetBSD: patch-ac,v 1.1.1.1 2006/01/29 15:54:04 shannonjr Exp $ + +--- Makefile.in.orig 2005-12-13 12:36:41.000000000 -0700 ++++ Makefile.in +@@ -827,71 +827,71 @@ prelude-config.h: $(top_builddir)/config + # Spool directory for report saving is mode + + install-data-local: +- $(INSTALL) -d -m 755 $(DESTDIR)$(prelude_spool_dir); +- $(INSTALL) -d -m 755 $(DESTDIR)$(prelude_config_dir); +- $(INSTALL) -d -m 755 $(DESTDIR)$(prelude_config_dir)/default; +- $(INSTALL) -d -m 755 $(DESTDIR)$(prelude_config_dir)/profile; +- @if test -f $(DESTDIR)$(prelude_config_dir)/default/client.conf; then \ ++ $(INSTALL) -d -m 755 $(prelude_spool_dir); ++ $(INSTALL) -d -m 755 $(prelude_config_dir); ++ $(INSTALL) -d -m 755 $(prelude_config_dir)/default; ++ $(INSTALL) -d -m 755 $(prelude_config_dir)/profile; ++ @if test -f $(prelude_config_dir)/default/client.conf; then \ + echo; \ + echo "********************************************************************************"; \ + echo; \ +- echo "$(DESTDIR)$(prelude_config_dir)/default/client.conf already exist..."; \ +- echo "Installing default configuration in $(DESTDIR)$(prelude_config_dir)/default/client.conf-dist"; \ ++ echo "$(prelude_config_dir)/default/client.conf already exist..."; \ ++ echo "Installing default configuration in $(prelude_config_dir)/default/client.conf-dist"; \ + echo; \ + echo "********************************************************************************"; \ + echo; \ +- $(INSTALL) -m 644 $(top_srcdir)/client.conf $(DESTDIR)$(prelude_config_dir)/default/client.conf-dist; \ ++ $(INSTALL) -m 644 $(top_srcdir)/client.conf $(prelude_config_dir)/default/client.conf-dist; \ + else \ +- $(INSTALL) -m 644 $(top_srcdir)/client.conf $(DESTDIR)$(prelude_config_dir)/default; \ ++ $(INSTALL) -m 644 $(top_srcdir)/client.conf $(prelude_config_dir)/default; \ + fi + +- @if test -f $(DESTDIR)$(prelude_config_dir)/default/global.conf; then \ ++ @if test -f $(prelude_config_dir)/default/global.conf; then \ + echo; \ + echo "********************************************************************************"; \ + echo; \ +- echo "$(DESTDIR)$(prelude_config_dir)/default/global.conf already exist..."; \ +- echo "Installing default configuration in $(DESTDIR)$(prelude_config_dir)/default/global.conf-dist"; \ ++ echo "$(prelude_config_dir)/default/global.conf already exist..."; \ ++ echo "Installing default configuration in $(prelude_config_dir)/default/global.conf-dist"; \ + echo; \ + echo "********************************************************************************"; \ + echo; \ +- $(INSTALL) -m 644 $(top_srcdir)/global.conf $(DESTDIR)$(prelude_config_dir)/default/global.conf-dist; \ ++ $(INSTALL) -m 644 $(top_srcdir)/global.conf $(prelude_config_dir)/default/global.conf-dist; \ + else \ +- $(INSTALL) -m 644 $(top_srcdir)/global.conf $(DESTDIR)$(prelude_config_dir)/default; \ ++ $(INSTALL) -m 644 $(top_srcdir)/global.conf $(prelude_config_dir)/default; \ + fi + +- @if test -f $(DESTDIR)$(prelude_config_dir)/default/idmef-client.conf; then \ ++ @if test -f $(prelude_config_dir)/default/idmef-client.conf; then \ + echo; \ + echo "********************************************************************************"; \ + echo; \ +- echo "$(DESTDIR)$(prelude_config_dir)/default/idmef-client.conf already exist..."; \ +- echo "Installing default configuration in $(DESTDIR)$(prelude_config_dir)/default/idmef-client.conf-dist"; \ ++ echo "$(prelude_config_dir)/default/idmef-client.conf already exist..."; \ ++ echo "Installing default configuration in $(prelude_config_dir)/default/idmef-client.conf-dist"; \ + echo; \ + echo "********************************************************************************"; \ + echo; \ +- $(INSTALL) -m 644 $(top_srcdir)/idmef-client.conf $(DESTDIR)$(prelude_config_dir)/default/idmef-client.conf-dist; \ ++ $(INSTALL) -m 644 $(top_srcdir)/idmef-client.conf $(prelude_config_dir)/default/idmef-client.conf-dist; \ + else \ +- $(INSTALL) -m 644 $(top_srcdir)/idmef-client.conf $(DESTDIR)$(prelude_config_dir)/default; \ ++ $(INSTALL) -m 644 $(top_srcdir)/idmef-client.conf $(prelude_config_dir)/default; \ + fi + +- @if test -f $(DESTDIR)$(prelude_config_dir)/default/tls.conf; then \ ++ @if test -f $(prelude_config_dir)/default/tls.conf; then \ + echo; \ + echo "********************************************************************************"; \ + echo; \ +- echo "$(DESTDIR)$(prelude_config_dir)/default/tls.conf already exist..."; \ +- echo "Installing default configuration in $(DESTDIR)$(prelude_config_dir)/default/tls.conf-dist"; \ ++ echo "$(prelude_config_dir)/default/tls.conf already exist..."; \ ++ echo "Installing default configuration in $(prelude_config_dir)/default/tls.conf-dist"; \ + echo; \ + echo "********************************************************************************"; \ + echo; \ +- $(INSTALL) -m 644 $(top_srcdir)/tls.conf $(DESTDIR)$(prelude_config_dir)/default/tls.conf-dist; \ ++ $(INSTALL) -m 644 $(top_srcdir)/tls.conf $(prelude_config_dir)/default/tls.conf-dist; \ + else \ +- $(INSTALL) -m 644 $(top_srcdir)/tls.conf $(DESTDIR)$(prelude_config_dir)/default; \ ++ $(INSTALL) -m 644 $(top_srcdir)/tls.conf $(prelude_config_dir)/default; \ + fi + + uninstall-local: +- rm -f $(DESTDIR)$(prelude_config_dir)/default/client.conf +- rm -f $(DESTDIR)$(prelude_config_dir)/default/global.conf +- rm -f $(DESTDIR)$(prelude_config_dir)/default/idmef-client.conf +- rm -f $(DESTDIR)$(prelude_config_dir)/default/tls.conf ++ rm -f $(prelude_config_dir)/default/client.conf ++ rm -f $(prelude_config_dir)/default/global.conf ++ rm -f $(prelude_config_dir)/default/idmef-client.conf ++ rm -f $(prelude_config_dir)/default/tls.conf + # Tell versions [3.59,3.63) of GNU make to not export all variables. + # Otherwise a system limit (for SysV at least) may be exceeded. + .NOEXPORT: -- cgit v1.2.3