kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/security/samhain/pkg-plist

33 lines
1.1 KiB
Text
Raw Normal View History

security/samhain: housekeeping - The port comes in three flavors, standalone, -server, and -client. All three use one or more files under /var/lib. Remove the logic that only includes that dir in plist for some of those flavors, and include it for all. - Get rid of .sh extensions on rc scripts. - Use INSTALL_SCRIPT instead of CP to ensure the rc scripts have useful permissions. - Patch the rc script source so they properly respect settings in rc.conf. - Use @postunexec in plist instead of the deprecated @unexec. PR: 249433 Submitted by: Greg Veldman <freebsd@gregv.net> (maintainer)
2020-09-26 11:02:13 +02:00
@dir /var/lib
add ports for Samhain Intrusion Detection System Samhain is an open source file integrity and host-based intrusion detection system for Linux and Unix. It can run as a daemon process, and and thus can remember file changes - contrary to a tool that runs from cron, if a file is modified you will get only one report, while subsequent checks of that file will ignore the modification as it is already reported (unless the file is modified again). Samhain can optionally be used as client/server system to provide centralized monitoring for multiple host. Logging to a (MySQL or PostgreSQL) database is supported. PR: 214623 Submitted by: Nikola Kolev <koue@chaosophia.net>
2017-03-12 18:07:23 +01:00
%%PORTDOCS%%%%DOCSDIR%%/BUGS
%%PORTDOCS%%%%DOCSDIR%%/FAQ.html
%%PORTDOCS%%%%DOCSDIR%%/HOWTO-client+server-troubleshooting.html
%%PORTDOCS%%%%DOCSDIR%%/HOWTO-client+server.html
%%PORTDOCS%%%%DOCSDIR%%/HOWTO-samhain+GnuPG.html
%%PORTDOCS%%%%DOCSDIR%%/HOWTO-write-modules.html
%%PORTDOCS%%%%DOCSDIR%%/MANUAL-2_4.pdf
%%PORTDOCS%%%%DOCSDIR%%/README
%%PORTDOCS%%%%DOCSDIR%%/README.UPGRADE
%%PORTDOCS%%%%DOCSDIR%%/sh_mounts.txt
%%PORTDOCS%%%%DOCSDIR%%/sh_userfiles.txt
%%PORTDOCS%%@dir %%DOCSDIR%%
%%SAMHAIN%%@dir /var/lib/samhain
%%SAMHAIN%%@sample etc/samhainrc.sample
security/samhain: housekeeping - The port comes in three flavors, standalone, -server, and -client. All three use one or more files under /var/lib. Remove the logic that only includes that dir in plist for some of those flavors, and include it for all. - Get rid of .sh extensions on rc scripts. - Use INSTALL_SCRIPT instead of CP to ensure the rc scripts have useful permissions. - Patch the rc script source so they properly respect settings in rc.conf. - Use @postunexec in plist instead of the deprecated @unexec. PR: 249433 Submitted by: Greg Veldman <freebsd@gregv.net> (maintainer)
2020-09-26 11:02:13 +02:00
%%SAMHAIN%%etc/rc.d/samhain
add ports for Samhain Intrusion Detection System Samhain is an open source file integrity and host-based intrusion detection system for Linux and Unix. It can run as a daemon process, and and thus can remember file changes - contrary to a tool that runs from cron, if a file is modified you will get only one report, while subsequent checks of that file will ignore the modification as it is already reported (unless the file is modified again). Samhain can optionally be used as client/server system to provide centralized monitoring for multiple host. Logging to a (MySQL or PostgreSQL) database is supported. PR: 214623 Submitted by: Nikola Kolev <koue@chaosophia.net>
2017-03-12 18:07:23 +01:00
%%SAMHAIN%%man/man5/samhainrc.5.gz
%%SAMHAIN%%man/man8/samhain.8.gz
%%SAMHAIN%%sbin/samhain
%%SETPWD%%sbin/samhain_setpwd
%%YULE%%@dir /var/lib/yule
%%YULE%%@dir /var/log/yule
%%YULE%%@sample etc/yulerc.sample
security/samhain: housekeeping - The port comes in three flavors, standalone, -server, and -client. All three use one or more files under /var/lib. Remove the logic that only includes that dir in plist for some of those flavors, and include it for all. - Get rid of .sh extensions on rc scripts. - Use INSTALL_SCRIPT instead of CP to ensure the rc scripts have useful permissions. - Patch the rc script source so they properly respect settings in rc.conf. - Use @postunexec in plist instead of the deprecated @unexec. PR: 249433 Submitted by: Greg Veldman <freebsd@gregv.net> (maintainer)
2020-09-26 11:02:13 +02:00
%%YULE%%@postunexec echo "To delete the yule user permanently, use 'pw userdel yule'"
%%YULE%%etc/rc.d/yule
add ports for Samhain Intrusion Detection System Samhain is an open source file integrity and host-based intrusion detection system for Linux and Unix. It can run as a daemon process, and and thus can remember file changes - contrary to a tool that runs from cron, if a file is modified you will get only one report, while subsequent checks of that file will ignore the modification as it is already reported (unless the file is modified again). Samhain can optionally be used as client/server system to provide centralized monitoring for multiple host. Logging to a (MySQL or PostgreSQL) database is supported. PR: 214623 Submitted by: Nikola Kolev <koue@chaosophia.net>
2017-03-12 18:07:23 +01:00
%%YULE%%man/man5/yulerc.5.gz
%%YULE%%man/man8/yule.8.gz
%%YULE%%sbin/yule
%%YULE%%sbin/yule_setpwd
security/samhain: update to 4.4.2 PR: 249113 Submitted by: Greg Veldman <freebsd@gregv.net> (maintainer)
2020-09-04 19:23:29 +02:00
%%YULE%%sbin/yuleadmin-gpg.pl
%%YULE%%sbin/yuleadmin-sig.pl
add ports for Samhain Intrusion Detection System Samhain is an open source file integrity and host-based intrusion detection system for Linux and Unix. It can run as a daemon process, and and thus can remember file changes - contrary to a tool that runs from cron, if a file is modified you will get only one report, while subsequent checks of that file will ignore the modification as it is already reported (unless the file is modified again). Samhain can optionally be used as client/server system to provide centralized monitoring for multiple host. Logging to a (MySQL or PostgreSQL) database is supported. PR: 214623 Submitted by: Nikola Kolev <koue@chaosophia.net>
2017-03-12 18:07:23 +01:00
%%YULE%%sbin/yulectl
Reference in a new issue Copy permalink