From 7336b11bd5bd8f1cc6d445b150a6c466736c3d9d Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Sun, 7 Apr 2024 06:30:50 +0100 Subject: gentoo auto-resync : 07:04:2024 - 06:30:49 --- net-analyzer/Manifest.gz | Bin 43605 -> 43620 bytes net-analyzer/nessus-agent-bin/Manifest | 6 +- .../nessus-agent-bin-10.5.1.ebuild | 64 ------ .../nessus-agent-bin-10.6.1.ebuild | 64 ++++++ net-analyzer/nessus-bin/Manifest | 6 +- net-analyzer/nessus-bin/nessus-bin-10.7.1.ebuild | 59 ------ net-analyzer/nessus-bin/nessus-bin-10.7.2.ebuild | 59 ++++++ net-analyzer/suricata/Manifest | 6 +- net-analyzer/suricata/suricata-7.0.3.ebuild | 222 --------------------- net-analyzer/suricata/suricata-7.0.4.ebuild | 222 +++++++++++++++++++++ 10 files changed, 354 insertions(+), 354 deletions(-) delete mode 100644 net-analyzer/nessus-agent-bin/nessus-agent-bin-10.5.1.ebuild create mode 100644 net-analyzer/nessus-agent-bin/nessus-agent-bin-10.6.1.ebuild delete mode 100644 net-analyzer/nessus-bin/nessus-bin-10.7.1.ebuild create mode 100644 net-analyzer/nessus-bin/nessus-bin-10.7.2.ebuild delete mode 100644 net-analyzer/suricata/suricata-7.0.3.ebuild create mode 100644 net-analyzer/suricata/suricata-7.0.4.ebuild (limited to 'net-analyzer') diff --git a/net-analyzer/Manifest.gz b/net-analyzer/Manifest.gz index e9a01860116a..d3c127bc1eda 100644 Binary files a/net-analyzer/Manifest.gz and b/net-analyzer/Manifest.gz differ diff --git a/net-analyzer/nessus-agent-bin/Manifest b/net-analyzer/nessus-agent-bin/Manifest index 12b9bfd2c35f..520131874d48 100644 --- a/net-analyzer/nessus-agent-bin/Manifest +++ b/net-analyzer/nessus-agent-bin/Manifest @@ -1,5 +1,5 @@ AUX nessusagent.initd 563 BLAKE2B 63820368c95dc2358ff73843e239a084e21cea48bd4dfd170e486f0c702e7ec6be1581478f7c37dd12868dd3648dfd8f44b8ff47c85fdab0276a0c84b78eb7d1 SHA512 acc9a64e1cbff1119876f186aa6c40d6f5772c55a919914c410fed9e0974d2ce8fe5b965248aeae590ae5dd551ab530c59dad42c6f793d995193f9b8f9d89718 -DIST NessusAgent-10.5.1-el8.aarch64.rpm 18803400 BLAKE2B e30b4a2a43924095fb705e1eff138f8ee01a1bcbdfd16dc02074f6e3846a2de4e14136d29b2cd243f5de303755f99f21b00645a4110a56e668d97be696fae076 SHA512 437d5eb3261cd3fb7b5ed8631628975bc3ef24434c63f3d4fd8b2ac95104e3323b0b0517d58594ea2b53eb3797e80fef27268e50b0009f0d63ba9837ec5d4402 -DIST NessusAgent-10.5.1-el8.x86_64.rpm 20253868 BLAKE2B 01bb1a16ae9c4245035e209fabb89f5f6b22f72260a6691fc3ebacf7671511cb73bede95dfa1d48ef38972806dca9a4cbe27e677edf6ec4b109b6a57e3c250d2 SHA512 4ce62683b40f2ec599216176839226012834654a632c3d164d27df6a0402bc08e6cbe208ebee61f135f8b17d7cebc835f5940513d1ba4c930b2de07ef7f1ce4e -EBUILD nessus-agent-bin-10.5.1.ebuild 2212 BLAKE2B a36d73ed7493d8d2c3e670985fd747481ec18321c438843f7ecd5bef21d998a885ed45c2776fa4b320b8531c67afb434a5462c06cbfcbc15f95787e1a64e35c5 SHA512 453814257fd837cab884850329b68fd36e7e1a270b50051e36558247c811bfef5e0845333ecd97001fe3d1c94842e94156001c37d84ae544ee89ebb14746a04e +DIST NessusAgent-10.6.1-el8.aarch64.rpm 18910012 BLAKE2B 810d8aed4391ef9782d19a9963ee0f3582b4aced89ccf7a12950e286eb42b1e314a0cba480982a681b413da73f060cdd909dd675702c2261d1406b2866617673 SHA512 81e91d0cc9bfe89a65ad1b83acad8512dcfbafa68a4f9b6311b31475c5b36ae44be4a82c32e359f60842d97b3e65c5ba75e1211de9d8025c194bf41464659c73 +DIST NessusAgent-10.6.1-el8.x86_64.rpm 20397988 BLAKE2B 5d75a5b21ed9ec4c4d4b4142cd37000e304c765a334118dd149f69b0c8dd2b729e08bd3a40ad5df5ed02ed43b336baed3edf3103b455aeb7f45dce4ca2a8f591 SHA512 51edba9a836b80a2ece40ff3b4995b2b8351e3cd8e637d04c3a55f5b90814cea453ee836ba71d691a6076032fd0d9b95c694c1ebed66c4fe75f821e23b2bd757 +EBUILD nessus-agent-bin-10.6.1.ebuild 2212 BLAKE2B a36d73ed7493d8d2c3e670985fd747481ec18321c438843f7ecd5bef21d998a885ed45c2776fa4b320b8531c67afb434a5462c06cbfcbc15f95787e1a64e35c5 SHA512 453814257fd837cab884850329b68fd36e7e1a270b50051e36558247c811bfef5e0845333ecd97001fe3d1c94842e94156001c37d84ae544ee89ebb14746a04e MISC metadata.xml 354 BLAKE2B f3d046b6610423bd40c2cdbe29c8aa35d8111c56f6565d5b84aea31e03a8612b3a173965496833ec2ad2a38412b68d39f09d389e41797a0cda399758c85034a5 SHA512 1f4021d2781ddbccbbf0bf91492b50af18f142200bfc959a36b527941b9e8452a7814e12a1f720fcc62f6d069158cdb5093ae3760bc1b3b09d2cb73e4ab7f715 diff --git a/net-analyzer/nessus-agent-bin/nessus-agent-bin-10.5.1.ebuild b/net-analyzer/nessus-agent-bin/nessus-agent-bin-10.5.1.ebuild deleted file mode 100644 index fcc153bf0cb4..000000000000 --- a/net-analyzer/nessus-agent-bin/nessus-agent-bin-10.5.1.ebuild +++ /dev/null @@ -1,64 +0,0 @@ -# Copyright 1999-2024 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -inherit rpm systemd - -MY_P="NessusAgent-${PV}-el8" - -DESCRIPTION="A remote security scanner for Linux - agent component" -HOMEPAGE="https://www.tenable.com/" -SRC_URI=" - amd64? ( https://www.tenable.com/downloads/api/v2/pages/${PN/-bin/s}/files/${MY_P}.x86_64.rpm ) - arm64? ( https://www.tenable.com/downloads/api/v2/pages/${PN/-bin/s}/files/${MY_P}.aarch64.rpm ) -" - -LICENSE="GPL-2 Tenable-Master-Agreement" -SLOT="0" -KEYWORDS="-* ~amd64 ~arm64" - -RESTRICT="mirror strip" - -QA_PREBUILT="opt/nessus_agent/bin/* - opt/nessus_agent/lib/nessus/*.so - opt/nessus_agent/lib/nessus/iconv/*.so - opt/nessus_agent/lib/nessus/libjemalloc.so.* - opt/nessus_agent/sbin/*" - -S="${WORKDIR}" - -src_install() { - # Using doins -r would strip executable bits from all binaries - cp -pPR "${S}"/opt "${D}"/ || die "Failed to copy files" - - # Make sure these originally empty directories do not vanish, - # Nessus will not run properly without them - keepdir /opt/nessus_agent/com/nessus/CA - keepdir /opt/nessus_agent/etc/nessus - keepdir /opt/nessus_agent/var/nessus/logs - keepdir /opt/nessus_agent/var/nessus/tmp - keepdir /opt/nessus_agent/var/nessus/users - - newinitd "${FILESDIR}"/nessusagent.initd nessusagent - systemd_dounit usr/lib/systemd/system/nessusagent.service -} - -pkg_postinst() { - # Actually update Nessus core components. According to upstream packages, - # harmless to invoke on fresh installations too - and it may make life easier - # for people who had restored Nessus state from backups, had it lying around - # from older installations and so on. - "${EROOT}"/opt/nessus_agent/sbin/nessuscli install "${EROOT}"/opt/nessus_agent/var/nessus/plugins-core.tar.gz - - if [[ -z "${REPLACING_VERSIONS}" ]]; then - elog "In order to link the agent to Tenable.io or an instance of Nessus Manager," - elog "obtain an appropriate linking key and run" - elog "" - elog " /opt/nessus_agent/sbin/nessuscli agent link --key= --host= --port= [optional parameters]" - elog "" - elog "This can be done before the agent is started." - else - elog "Please restart the nessusagent service to complete the update process" - fi -} diff --git a/net-analyzer/nessus-agent-bin/nessus-agent-bin-10.6.1.ebuild b/net-analyzer/nessus-agent-bin/nessus-agent-bin-10.6.1.ebuild new file mode 100644 index 000000000000..fcc153bf0cb4 --- /dev/null +++ b/net-analyzer/nessus-agent-bin/nessus-agent-bin-10.6.1.ebuild @@ -0,0 +1,64 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit rpm systemd + +MY_P="NessusAgent-${PV}-el8" + +DESCRIPTION="A remote security scanner for Linux - agent component" +HOMEPAGE="https://www.tenable.com/" +SRC_URI=" + amd64? ( https://www.tenable.com/downloads/api/v2/pages/${PN/-bin/s}/files/${MY_P}.x86_64.rpm ) + arm64? ( https://www.tenable.com/downloads/api/v2/pages/${PN/-bin/s}/files/${MY_P}.aarch64.rpm ) +" + +LICENSE="GPL-2 Tenable-Master-Agreement" +SLOT="0" +KEYWORDS="-* ~amd64 ~arm64" + +RESTRICT="mirror strip" + +QA_PREBUILT="opt/nessus_agent/bin/* + opt/nessus_agent/lib/nessus/*.so + opt/nessus_agent/lib/nessus/iconv/*.so + opt/nessus_agent/lib/nessus/libjemalloc.so.* + opt/nessus_agent/sbin/*" + +S="${WORKDIR}" + +src_install() { + # Using doins -r would strip executable bits from all binaries + cp -pPR "${S}"/opt "${D}"/ || die "Failed to copy files" + + # Make sure these originally empty directories do not vanish, + # Nessus will not run properly without them + keepdir /opt/nessus_agent/com/nessus/CA + keepdir /opt/nessus_agent/etc/nessus + keepdir /opt/nessus_agent/var/nessus/logs + keepdir /opt/nessus_agent/var/nessus/tmp + keepdir /opt/nessus_agent/var/nessus/users + + newinitd "${FILESDIR}"/nessusagent.initd nessusagent + systemd_dounit usr/lib/systemd/system/nessusagent.service +} + +pkg_postinst() { + # Actually update Nessus core components. According to upstream packages, + # harmless to invoke on fresh installations too - and it may make life easier + # for people who had restored Nessus state from backups, had it lying around + # from older installations and so on. + "${EROOT}"/opt/nessus_agent/sbin/nessuscli install "${EROOT}"/opt/nessus_agent/var/nessus/plugins-core.tar.gz + + if [[ -z "${REPLACING_VERSIONS}" ]]; then + elog "In order to link the agent to Tenable.io or an instance of Nessus Manager," + elog "obtain an appropriate linking key and run" + elog "" + elog " /opt/nessus_agent/sbin/nessuscli agent link --key= --host= --port= [optional parameters]" + elog "" + elog "This can be done before the agent is started." + else + elog "Please restart the nessusagent service to complete the update process" + fi +} diff --git a/net-analyzer/nessus-bin/Manifest b/net-analyzer/nessus-bin/Manifest index fac8de1f3652..63ed7b98066d 100644 --- a/net-analyzer/nessus-bin/Manifest +++ b/net-analyzer/nessus-bin/Manifest @@ -1,5 +1,5 @@ AUX nessusd-initd 582 BLAKE2B 67c5e73262512c590b5b4fc0668297a504677aa3d771fdeee2809c921d988faef19cbf10a7fb26d52114e1a67d33ef197e32c561cd5b2003c8abbde2dfe5cb4f SHA512 f825fad89564303aeff423f3c32a1544ee4b063ef57702cd54220aebed8e01e7b178ff5bd10b48b654ebdee78657a9bc41caf779a23968d008916fd51e88b2f4 -DIST Nessus-10.7.1-el8.aarch64.rpm 61886616 BLAKE2B e3bcf6f8c8648e2ef4af130e099975789da962b47364ca955537fd53f99a29470680dddc4a547dca1c32d1a6e5292bded31a092524f237e09963c901c7c76bec SHA512 bf3a0c33a37886bab111e724c915c299052c2ee0133af035ea6d30a420f5bac1696444b85c2e3859f3524c9f63da8e6f6a8ec0bce1a543e0437e1d6a7f2ea6da -DIST Nessus-10.7.1-el8.x86_64.rpm 63319848 BLAKE2B 51fa834f202281af4df93b6350fe00318d03afd051b9ef363572523e2b311c22875bb728cd1fec57c669cb35f35acdcc3186afd309fbb671ffb9349d13538fd1 SHA512 b68c214613f18f8951d14f5824d3ba76f3c56689f5e7abce83cf168f8617725ce7a0283e175e720b082d16ea1fb5dd4cd8c6c1f5aaf806c34e08bfeb659315d3 -EBUILD nessus-bin-10.7.1.ebuild 1886 BLAKE2B abb347acc96565eb28078844cbc89e6b51dd2b1de070152fd1d94b70420c02b431ff1639f26fe8951cd0fa881602fd5ad8fe9a9536797db2d75c4947a3719a63 SHA512 8c724a190c3cf0c9d0d36289a888d395ef902ab0f76e06b1fa5d9a95fc4fd248d940ac21b42bf8c4d95e13c890e94e28c66cd4ad68bd06814864b09d0f3f606c +DIST Nessus-10.7.2-el8.aarch64.rpm 62540368 BLAKE2B 6f8ce0cdbf4c4805da666ba954fc717296e325dc693b1301e2586e9bbb880e85edf6f65a246d782663d6964d1f8c508bd57cc797801853163a39309b399d2e86 SHA512 10896aedd260cdb3cecdbf3fe2cbd9ea904c880935969f44d776be8e5326abbb7e31ea177afff2bfb65589bbb03d92f4b99a59c3c714a9671cc40589e2e22bf1 +DIST Nessus-10.7.2-el8.x86_64.rpm 63974168 BLAKE2B 34e765cbda0484d67e8c119661dde82c27056a383eef7eca019fd570905988cd76776b2ab2c90c1b25c4effa026b59b501a4d133f038aeba6978a758ff3f0aab SHA512 0caa0c28189560cee6058d309f821d9a287c72c9dcb177d1686dbc61173bc44a462b22c714a9e34989cfa579009e87722249e5314326ccd398c99a0fc07c9acb +EBUILD nessus-bin-10.7.2.ebuild 1886 BLAKE2B abb347acc96565eb28078844cbc89e6b51dd2b1de070152fd1d94b70420c02b431ff1639f26fe8951cd0fa881602fd5ad8fe9a9536797db2d75c4947a3719a63 SHA512 8c724a190c3cf0c9d0d36289a888d395ef902ab0f76e06b1fa5d9a95fc4fd248d940ac21b42bf8c4d95e13c890e94e28c66cd4ad68bd06814864b09d0f3f606c MISC metadata.xml 346 BLAKE2B 5e72f68ab557c56cc09cedcaaa9760f3619723bd6fc58b8ecc921526b1b42b6b65e971876ec569c1e68a26e55def24767c5d896fd9eb6a706041b485a8885023 SHA512 ab7e122c344a3f5078b2d497ed36a63f6af74fcfa7f2b98d6299ec7c82e7cbaf427da8fa595e6445e49ee041114ac581fb5b1d703f16fc70a54ee98375062e82 diff --git a/net-analyzer/nessus-bin/nessus-bin-10.7.1.ebuild b/net-analyzer/nessus-bin/nessus-bin-10.7.1.ebuild deleted file mode 100644 index 3fe24e9b4ae0..000000000000 --- a/net-analyzer/nessus-bin/nessus-bin-10.7.1.ebuild +++ /dev/null @@ -1,59 +0,0 @@ -# Copyright 1999-2024 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -inherit rpm systemd - -MY_P="Nessus-${PV}-el8" - -DESCRIPTION="A remote security scanner for Linux" -HOMEPAGE="https://www.tenable.com/" -SRC_URI=" - amd64? ( https://www.tenable.com/downloads/api/v2/pages/${PN%-bin}/files/${MY_P}.x86_64.rpm ) - arm64? ( https://www.tenable.com/downloads/api/v2/pages/${PN%-bin}/files/${MY_P}.aarch64.rpm ) -" - -LICENSE="GPL-2 Tenable-Master-Agreement" -SLOT="0" -KEYWORDS="-* ~amd64 ~arm64" - -RESTRICT="mirror strip" - -QA_PREBUILT="opt/nessus/bin/* - opt/nessus/lib/nessus/*.so - opt/nessus/lib/nessus/iconv/*.so - opt/nessus/lib/nessus/libjemalloc.so.* - opt/nessus/sbin/*" - -S="${WORKDIR}" - -src_install() { - # Using doins -r would strip executable bits from all binaries - cp -pPR "${S}"/opt "${D}"/ || die "Failed to copy files" - - # Make sure these originally empty directories do not vanish, - # Nessus will not run properly without them - keepdir /opt/nessus/com/nessus/CA - keepdir /opt/nessus/etc/nessus - keepdir /opt/nessus/var/nessus/logs - keepdir /opt/nessus/var/nessus/tmp - - newinitd "${FILESDIR}"/nessusd-initd nessusd-bin - systemd_newunit usr/lib/systemd/system/nessusd.service nessusd-bin.service -} - -pkg_postinst() { - # Actually update Nessus core components. According to upstream packages, - # harmless to invoke on fresh installations too - and it may make life easier - # for people who had restored Nessus state from backups, had it lying around - # from older installations and so on. - "${EROOT}"/opt/nessus/sbin/nessuscli install "${EROOT}"/opt/nessus/var/nessus/plugins-core.tar.gz - - if [[ -z "${REPLACING_VERSIONS}" ]]; then - elog "To get started launch the nessusd-bin service, then point your Web browser to" - elog " https://:8834/" - else - elog "Please restart the nessusd-bin service to use the new version of Nessus" - fi -} diff --git a/net-analyzer/nessus-bin/nessus-bin-10.7.2.ebuild b/net-analyzer/nessus-bin/nessus-bin-10.7.2.ebuild new file mode 100644 index 000000000000..3fe24e9b4ae0 --- /dev/null +++ b/net-analyzer/nessus-bin/nessus-bin-10.7.2.ebuild @@ -0,0 +1,59 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit rpm systemd + +MY_P="Nessus-${PV}-el8" + +DESCRIPTION="A remote security scanner for Linux" +HOMEPAGE="https://www.tenable.com/" +SRC_URI=" + amd64? ( https://www.tenable.com/downloads/api/v2/pages/${PN%-bin}/files/${MY_P}.x86_64.rpm ) + arm64? ( https://www.tenable.com/downloads/api/v2/pages/${PN%-bin}/files/${MY_P}.aarch64.rpm ) +" + +LICENSE="GPL-2 Tenable-Master-Agreement" +SLOT="0" +KEYWORDS="-* ~amd64 ~arm64" + +RESTRICT="mirror strip" + +QA_PREBUILT="opt/nessus/bin/* + opt/nessus/lib/nessus/*.so + opt/nessus/lib/nessus/iconv/*.so + opt/nessus/lib/nessus/libjemalloc.so.* + opt/nessus/sbin/*" + +S="${WORKDIR}" + +src_install() { + # Using doins -r would strip executable bits from all binaries + cp -pPR "${S}"/opt "${D}"/ || die "Failed to copy files" + + # Make sure these originally empty directories do not vanish, + # Nessus will not run properly without them + keepdir /opt/nessus/com/nessus/CA + keepdir /opt/nessus/etc/nessus + keepdir /opt/nessus/var/nessus/logs + keepdir /opt/nessus/var/nessus/tmp + + newinitd "${FILESDIR}"/nessusd-initd nessusd-bin + systemd_newunit usr/lib/systemd/system/nessusd.service nessusd-bin.service +} + +pkg_postinst() { + # Actually update Nessus core components. According to upstream packages, + # harmless to invoke on fresh installations too - and it may make life easier + # for people who had restored Nessus state from backups, had it lying around + # from older installations and so on. + "${EROOT}"/opt/nessus/sbin/nessuscli install "${EROOT}"/opt/nessus/var/nessus/plugins-core.tar.gz + + if [[ -z "${REPLACING_VERSIONS}" ]]; then + elog "To get started launch the nessusd-bin service, then point your Web browser to" + elog " https://:8834/" + else + elog "Please restart the nessusd-bin service to use the new version of Nessus" + fi +} diff --git a/net-analyzer/suricata/Manifest b/net-analyzer/suricata/Manifest index 2bd99b7ceadf..3aed2ad75a4a 100644 --- a/net-analyzer/suricata/Manifest +++ b/net-analyzer/suricata/Manifest @@ -7,7 +7,7 @@ AUX suricata.confd 2771 BLAKE2B c9f9ac6707f71ace993bcf730df5aab11a6e59fcbb636140 AUX suricata.initd 5475 BLAKE2B 6f824b26d87d1519ac16bdb78bb2f3391040341ee709663b102ea8989d7ca3f38a475efc2796d7e78da35dbb54d327bb2e18e463fdc19880af1ed20e42a38a14 SHA512 0006e34f24f2cf967cc1e44ec626b53aaeee535a3810aa5ad71175f28b5649b2dbaadd2a97f10b8f4adb37d45b9e5fb0991aa92276183869531cb79887d742df AUX suricata.service 501 BLAKE2B 00631ada0d2993eae97a028ef950b031b91bb3af346ee3538bd7f0deb9d76bb8552761b4666a3ac80673fe31ffd95424f2ff71e35db0f5fe6667b32478fab4c4 SHA512 4e4e87735731fd0e18ab26e536e7904833a19ce8785ffdd15b22d494673c73044137908feee74800486960f9efd09d1ddc2c75a490a2e35ef06caf23c7439a0c AUX suricata.tmpfiles 24 BLAKE2B 150b74a6775137704915015871ab4455b8d0b9204a75c398ea746e9194b0c0a787904f9015b98f36a685fac0dbb0fcb43746096dd403bf882afa5dfef12af94d SHA512 1530aed4efb35f988e2f0134388ea11ffc3ba1f217845a2c5dd47f947983ed4d343126e49d66a86ca7894ff60b5134464ddbe07509dcc80c001131f09cb7e2dd -DIST suricata-7.0.3.tar.gz 23599903 BLAKE2B b42044428ae5ac4ecd6b41d083f0f3ac5839bf9a0734c3a64bb5e9a6f1a0ffe0c1f5da262f4e167461836bd26ebf9238ec9c0c213ba61f6419b6af1314f3becb SHA512 5a19a00118b86cd9c9b8a4b8399d8deda23beb19a6a6ed49e82240a1a5d4549490f3ce72743f5990c200850e8a64e3a51f45b8c1b8088bdd16aa12341dbf64aa -DIST suricata-7.0.3.tar.gz.sig 566 BLAKE2B 3befe75463a26493b660dc21721e2628a4889d5397d0ada6aa51bd9c748487130dfb56f3fa25b5514411adeaf0b385ee7e9d664ab0af9b6b0a2bef719bdc904f SHA512 a08274708f3aee891b018da613fa60cf66ca09b41f70ed1e89b57d5e778bf97058d71c6ad8c529926783287ddd0f20337957e03ff59b3500c207a4ef7936bfdf -EBUILD suricata-7.0.3.ebuild 7053 BLAKE2B 70780ba6ae53308c7c860de1b0007771eb1502c07ed546ceab62e9291b37c8a1ea324410968537786d8a090d227f27564bbfabc772aa45c0bb8132b7b1f5cab3 SHA512 1be37a7813e9c8953b9a8510bf522f3e784b63dfef714c56f93e9d36efb2a94632dae2575a8797c547e96e55cd7145bc80169072761705913e45a020fea25b5d +DIST suricata-7.0.4.tar.gz 23610769 BLAKE2B 6c85ee7134548261a5a766ee3e7c0ce095ef478e9323342f17bb48eb0abc74035a66212c7f7e6ba45bd2efd552d82ad6d218d4b09279877f60526f8f79de9764 SHA512 098364a5f0b2c14bf3a0c8895ec9c94a23edd990468f618fa35181c54405be6db012a6e97981e0024140864342764df97101be73308c835d6fabf6cd98a7ffc3 +DIST suricata-7.0.4.tar.gz.sig 566 BLAKE2B 56a8d3ba556a233b0f27a992c20e2654a44f5205bfd731662e96f1a6cf5e925d00014f2d379458c917527415c5c3020f897528fb35e6681bcbddde670567e6f0 SHA512 f2694f9a6cc4d644bb629ae49deef22517a970a78fa500384b51b3ed9119fdfa4ff4a4524de55d3b02bf16dc36c52419bc0424f65dd02b0b56349c5d2fc00a52 +EBUILD suricata-7.0.4.ebuild 7053 BLAKE2B f84cb624da0d57eed3476daf95d9b89ad8bb4a215cff94cd75fbac127a39b53bbf093e463dcf855a398f6f0b6b1adb924af6882a55e9a982a02570ede1d5b1db SHA512 e6331451ea2ad768942c8919e78d8cf3650f1fa5ab38c5793473fdee0d1c8685d9e8879ddb7b489512e961c0f3e06f6cbf0894a4d24ade5915989418b5917ce9 MISC metadata.xml 1031 BLAKE2B d4a226d079d33e081412301c792d94a7b94e35f5948748ed61e8ef1b9f7e9ee2bca8825c737ad5dc51f538042a4f343d09b8722cc0afcfc67ab02194899979de SHA512 5b44e21b4ae9ca9e3880ffb39643934b87a229e8f57c1f75e28eb7daa16d8b611a66ceee215d3d41d60ea700116744fdf3ed36033c86af308be2385fbd107ff9 diff --git a/net-analyzer/suricata/suricata-7.0.3.ebuild b/net-analyzer/suricata/suricata-7.0.3.ebuild deleted file mode 100644 index 31a877d45e4f..000000000000 --- a/net-analyzer/suricata/suricata-7.0.3.ebuild +++ /dev/null @@ -1,222 +0,0 @@ -# Copyright 1999-2024 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -LUA_COMPAT=( lua5-1 luajit ) -PYTHON_COMPAT=( python3_{10..12} ) - -inherit autotools flag-o-matic linux-info lua-single python-single-r1 systemd tmpfiles verify-sig - -DESCRIPTION="High performance Network IDS, IPS and Network Security Monitoring engine" -HOMEPAGE="https://suricata.io/" -SRC_URI="https://www.openinfosecfoundation.org/download/${P}.tar.gz - verify-sig? ( https://www.openinfosecfoundation.org/download/${P}.tar.gz.sig )" - -LICENSE="GPL-2" -SLOT="0/7" -KEYWORDS="~amd64 ~riscv ~x86" -IUSE="+af-packet af-xdp bpf control-socket cuda debug +detection geoip hardened hyperscan lua lz4 nflog +nfqueue redis systemd test" -VERIFY_SIG_OPENPGP_KEY_PATH="/usr/share/openpgp-keys/openinfosecfoundation.org.asc" - -RESTRICT="!test? ( test )" - -REQUIRED_USE="${PYTHON_REQUIRED_USE} - af-xdp? ( bpf ) - bpf? ( af-packet ) - lua? ( ${LUA_REQUIRED_USE} )" - -RDEPEND="${PYTHON_DEPS} - acct-group/suricata - acct-user/suricata - dev-libs/jansson:= - dev-libs/libpcre2 - dev-libs/libyaml - net-libs/libnet:* - net-libs/libnfnetlink - dev-libs/nspr - dev-libs/nss - $(python_gen_cond_dep ' - dev-python/pyyaml[${PYTHON_USEDEP}] - ') - >=net-libs/libhtp-0.5.46 - net-libs/libpcap - sys-apps/file - sys-libs/libcap-ng - af-xdp? ( net-libs/xdp-tools ) - bpf? ( dev-libs/libbpf ) - cuda? ( dev-util/nvidia-cuda-toolkit ) - geoip? ( dev-libs/libmaxminddb:= ) - hyperscan? ( dev-libs/vectorscan:= ) - lua? ( ${LUA_DEPS} ) - lz4? ( app-arch/lz4 ) - nflog? ( net-libs/libnetfilter_log ) - nfqueue? ( net-libs/libnetfilter_queue ) - redis? ( dev-libs/hiredis:= )" -DEPEND="${RDEPEND} - >=dev-build/autoconf-2.69-r5 - virtual/rust" -BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-oisf-20200807 )" - -PATCHES=( - "${FILESDIR}/${PN}-5.0.1_configure-no-lz4-automagic.patch" - "${FILESDIR}/${PN}-5.0.7_configure-no-hyperscan-automagic.patch" - "${FILESDIR}/${PN}-6.0.0_default-config.patch" - "${FILESDIR}/${PN}-7.0.2_configure-no-sphinx-pdflatex-automagic.patch" - "${FILESDIR}/${PN}-7.0.3_fix-build-with-gcc14.patch" -) - -pkg_pretend() { - if use af-xdp && use kernel_linux; then - if kernel_is -lt 4 18; then - ewarn "Kernel 4.18 or newer is required for AF_XDP" - fi - fi - - if use bpf && use kernel_linux; then - if kernel_is -lt 4 15; then - ewarn "Kernel 4.15 or newer is necessary to use all XDP features like the CPU redirect map" - fi - - CONFIG_CHECK="~XDP_SOCKETS" - ERROR_XDP_SOCKETS="CONFIG_XDP_SOCKETS is not set, making it impossible for Suricata to load XDP programs. " - ERROR_XDP_SOCKETS+="Other eBPF features should work normally." - check_extra_config - fi -} - -src_prepare() { - default - sed -ie 's/docdir =.*/docdir = ${datarootdir}\/doc\/'${PF}'\//' "${S}/doc/Makefile.am" || die - eautoreconf -} - -src_configure() { - # Bug #861242 - filter-lto - - local myeconfargs=( - "--localstatedir=/var" \ - "--runstatedir=/run" \ - "--enable-non-bundled-htp" \ - "--enable-gccmarch-native=no" \ - "--enable-python" \ - $(use_enable af-packet) \ - $(use_enable af-xdp) \ - $(use_enable bpf ebpf) \ - $(use_enable control-socket unix-socket) \ - $(use_enable cuda) \ - $(use_enable detection) \ - $(use_enable geoip) \ - $(use_enable hardened gccprotect) \ - $(use_enable hardened pie) \ - $(use_enable hyperscan) \ - $(use_enable lz4) \ - $(use_enable nflog) \ - $(use_enable nfqueue) \ - $(use_enable redis hiredis) \ - $(use_enable test unittests) \ - "--disable-coccinelle" - ) - if use lua; then - if use lua_single_target_luajit; then - myeconfargs+=( --enable-luajit ) - else - myeconfargs+=( --enable-lua ) - fi - fi - - if use debug; then - myeconfargs+=( $(use_enable debug) ) - # so we can get a backtrace according to "reporting bugs" on upstream web site - QA_FLAGS_IGNORED="usr/bin/${PN}" - CFLAGS="-ggdb -O0" econf ${myeconfargs[@]} - else - econf ${myeconfargs[@]} - fi -} - -src_install() { - emake DESTDIR="${D}" install - python_optimize - # Bug #878855 - python_fix_shebang "${ED}"/usr/bin/ - - if use bpf; then - rm -f ebpf/Makefile.{am,in} || die - dodoc -r ebpf/ - keepdir /usr/libexec/suricata/ebpf - fi - - insinto "/etc/${PN}" - doins etc/{classification,reference}.config threshold.config suricata.yaml - - keepdir "/var/lib/${PN}/rules" "/var/lib/${PN}/update" - keepdir "/var/log/${PN}" - - fowners -R ${PN}: "/var/lib/${PN}" "/var/log/${PN}" "/etc/${PN}" - fperms 750 "/var/lib/${PN}" "/var/log/${PN}" "/etc/${PN}" - fperms 6750 "/var/lib/${PN}/rules" "/var/lib/${PN}/update" - - newinitd "${FILESDIR}/${PN}.initd" ${PN} - newconfd "${FILESDIR}/${PN}.confd" ${PN} - systemd_dounit "${FILESDIR}"/${PN}.service - newtmpfiles "${FILESDIR}"/${PN}.tmpfiles ${PN}.conf - - insopts -m0644 - insinto /etc/logrotate.d - newins etc/${PN}.logrotate ${PN} -} - -pkg_postinst() { - tmpfiles_process ${PN}.conf - - elog - if use systemd; then - elog "Suricata requires either the mode of operation (e.g. --af-packet) or the interface to listen on (e.g. -i eth0)" - elog "to be specified on the command line. The provided systemd unit launches Suricata in af-packet mode and relies" - elog "on file configuration to specify interfaces, should you prefer to run it differently you will have to customise" - elog "said unit. The simplest way of doing it is to override the Environment=OPTIONS='...' line using a .conf file" - elog "placed in the directory ${EPREFIX}/etc/systemd/system/suricata.service.d/ ." - elog "For details, see the section on drop-in directories in systemd.unit(5)." - else - elog "The ${PN} init script expects to find the path to the configuration" - elog "file as well as extra options in /etc/conf.d." - elog - elog "To create more than one ${PN} service, simply create a new .yaml file for it" - elog "then create a symlink to the init script from a link called" - elog "${PN}.foo - like so" - elog " cd /etc/${PN}" - elog " ${EDITOR##*/} suricata-foo.yaml" - elog " cd /etc/init.d" - elog " ln -s ${PN} ${PN}.foo" - elog "Then edit /etc/conf.d/${PN} and make sure you specify sensible options for foo." - elog - elog "You can create as many ${PN}.foo* services as you wish." - fi - - if use bpf; then - elog - elog "eBPF/XDP files must be compiled (using sys-devel/clang[llvm_targets_BPF]) before use" - elog "because their configuration is hard-coded. You can find the default ones in" - elog " ${EPREFIX}/usr/share/doc/${PF}/ebpf" - elog "and the common location for eBPF bytecode is" - elog " ${EPREFIX}/usr/libexec/${PN}" - elog "For more information, see https://${PN}.readthedocs.io/en/${P}/capture-hardware/ebpf-xdp.html" - fi - - if use debug; then - elog - elog "You have enabled the debug USE flag. Please read this link to report bugs upstream:" - elog "https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Reporting_Bugs" - elog "You need to also ensure the FEATURES variable in make.conf contains the" - elog "'nostrip' option to produce useful core dumps or back traces." - fi - - elog - if [[ -z "${REPLACING_VERSIONS}" ]]; then - elog "To download and install an initial set of rules, run:" - elog " suricata-update" - fi - elog -} diff --git a/net-analyzer/suricata/suricata-7.0.4.ebuild b/net-analyzer/suricata/suricata-7.0.4.ebuild new file mode 100644 index 000000000000..60817c7c0306 --- /dev/null +++ b/net-analyzer/suricata/suricata-7.0.4.ebuild @@ -0,0 +1,222 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +LUA_COMPAT=( lua5-1 luajit ) +PYTHON_COMPAT=( python3_{10..12} ) + +inherit autotools flag-o-matic linux-info lua-single python-single-r1 systemd tmpfiles verify-sig + +DESCRIPTION="High performance Network IDS, IPS and Network Security Monitoring engine" +HOMEPAGE="https://suricata.io/" +SRC_URI="https://www.openinfosecfoundation.org/download/${P}.tar.gz + verify-sig? ( https://www.openinfosecfoundation.org/download/${P}.tar.gz.sig )" + +LICENSE="GPL-2" +SLOT="0/7" +KEYWORDS="~amd64 ~riscv ~x86" +IUSE="+af-packet af-xdp bpf control-socket cuda debug +detection geoip hardened hyperscan lua lz4 nflog +nfqueue redis systemd test" +VERIFY_SIG_OPENPGP_KEY_PATH="/usr/share/openpgp-keys/openinfosecfoundation.org.asc" + +RESTRICT="!test? ( test )" + +REQUIRED_USE="${PYTHON_REQUIRED_USE} + af-xdp? ( bpf ) + bpf? ( af-packet ) + lua? ( ${LUA_REQUIRED_USE} )" + +RDEPEND="${PYTHON_DEPS} + acct-group/suricata + acct-user/suricata + dev-libs/jansson:= + dev-libs/libpcre2 + dev-libs/libyaml + net-libs/libnet:* + net-libs/libnfnetlink + dev-libs/nspr + dev-libs/nss + $(python_gen_cond_dep ' + dev-python/pyyaml[${PYTHON_USEDEP}] + ') + >=net-libs/libhtp-0.5.47 + net-libs/libpcap + sys-apps/file + sys-libs/libcap-ng + af-xdp? ( net-libs/xdp-tools ) + bpf? ( dev-libs/libbpf ) + cuda? ( dev-util/nvidia-cuda-toolkit ) + geoip? ( dev-libs/libmaxminddb:= ) + hyperscan? ( dev-libs/vectorscan:= ) + lua? ( ${LUA_DEPS} ) + lz4? ( app-arch/lz4 ) + nflog? ( net-libs/libnetfilter_log ) + nfqueue? ( net-libs/libnetfilter_queue ) + redis? ( dev-libs/hiredis:= )" +DEPEND="${RDEPEND} + >=dev-build/autoconf-2.69-r5 + virtual/rust" +BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-oisf-20200807 )" + +PATCHES=( + "${FILESDIR}/${PN}-5.0.1_configure-no-lz4-automagic.patch" + "${FILESDIR}/${PN}-5.0.7_configure-no-hyperscan-automagic.patch" + "${FILESDIR}/${PN}-6.0.0_default-config.patch" + "${FILESDIR}/${PN}-7.0.2_configure-no-sphinx-pdflatex-automagic.patch" + "${FILESDIR}/${PN}-7.0.3_fix-build-with-gcc14.patch" +) + +pkg_pretend() { + if use af-xdp && use kernel_linux; then + if kernel_is -lt 4 18; then + ewarn "Kernel 4.18 or newer is required for AF_XDP" + fi + fi + + if use bpf && use kernel_linux; then + if kernel_is -lt 4 15; then + ewarn "Kernel 4.15 or newer is necessary to use all XDP features like the CPU redirect map" + fi + + CONFIG_CHECK="~XDP_SOCKETS" + ERROR_XDP_SOCKETS="CONFIG_XDP_SOCKETS is not set, making it impossible for Suricata to load XDP programs. " + ERROR_XDP_SOCKETS+="Other eBPF features should work normally." + check_extra_config + fi +} + +src_prepare() { + default + sed -ie 's/docdir =.*/docdir = ${datarootdir}\/doc\/'${PF}'\//' "${S}/doc/Makefile.am" || die + eautoreconf +} + +src_configure() { + # Bug #861242 + filter-lto + + local myeconfargs=( + "--localstatedir=/var" \ + "--runstatedir=/run" \ + "--enable-non-bundled-htp" \ + "--enable-gccmarch-native=no" \ + "--enable-python" \ + $(use_enable af-packet) \ + $(use_enable af-xdp) \ + $(use_enable bpf ebpf) \ + $(use_enable control-socket unix-socket) \ + $(use_enable cuda) \ + $(use_enable detection) \ + $(use_enable geoip) \ + $(use_enable hardened gccprotect) \ + $(use_enable hardened pie) \ + $(use_enable hyperscan) \ + $(use_enable lz4) \ + $(use_enable nflog) \ + $(use_enable nfqueue) \ + $(use_enable redis hiredis) \ + $(use_enable test unittests) \ + "--disable-coccinelle" + ) + if use lua; then + if use lua_single_target_luajit; then + myeconfargs+=( --enable-luajit ) + else + myeconfargs+=( --enable-lua ) + fi + fi + + if use debug; then + myeconfargs+=( $(use_enable debug) ) + # so we can get a backtrace according to "reporting bugs" on upstream web site + QA_FLAGS_IGNORED="usr/bin/${PN}" + CFLAGS="-ggdb -O0" econf ${myeconfargs[@]} + else + econf ${myeconfargs[@]} + fi +} + +src_install() { + emake DESTDIR="${D}" install + python_optimize + # Bug #878855 + python_fix_shebang "${ED}"/usr/bin/ + + if use bpf; then + rm -f ebpf/Makefile.{am,in} || die + dodoc -r ebpf/ + keepdir /usr/libexec/suricata/ebpf + fi + + insinto "/etc/${PN}" + doins etc/{classification,reference}.config threshold.config suricata.yaml + + keepdir "/var/lib/${PN}/rules" "/var/lib/${PN}/update" + keepdir "/var/log/${PN}" + + fowners -R ${PN}: "/var/lib/${PN}" "/var/log/${PN}" "/etc/${PN}" + fperms 750 "/var/lib/${PN}" "/var/log/${PN}" "/etc/${PN}" + fperms 6750 "/var/lib/${PN}/rules" "/var/lib/${PN}/update" + + newinitd "${FILESDIR}/${PN}.initd" ${PN} + newconfd "${FILESDIR}/${PN}.confd" ${PN} + systemd_dounit "${FILESDIR}"/${PN}.service + newtmpfiles "${FILESDIR}"/${PN}.tmpfiles ${PN}.conf + + insopts -m0644 + insinto /etc/logrotate.d + newins etc/${PN}.logrotate ${PN} +} + +pkg_postinst() { + tmpfiles_process ${PN}.conf + + elog + if use systemd; then + elog "Suricata requires either the mode of operation (e.g. --af-packet) or the interface to listen on (e.g. -i eth0)" + elog "to be specified on the command line. The provided systemd unit launches Suricata in af-packet mode and relies" + elog "on file configuration to specify interfaces, should you prefer to run it differently you will have to customise" + elog "said unit. The simplest way of doing it is to override the Environment=OPTIONS='...' line using a .conf file" + elog "placed in the directory ${EPREFIX}/etc/systemd/system/suricata.service.d/ ." + elog "For details, see the section on drop-in directories in systemd.unit(5)." + else + elog "The ${PN} init script expects to find the path to the configuration" + elog "file as well as extra options in /etc/conf.d." + elog + elog "To create more than one ${PN} service, simply create a new .yaml file for it" + elog "then create a symlink to the init script from a link called" + elog "${PN}.foo - like so" + elog " cd /etc/${PN}" + elog " ${EDITOR##*/} suricata-foo.yaml" + elog " cd /etc/init.d" + elog " ln -s ${PN} ${PN}.foo" + elog "Then edit /etc/conf.d/${PN} and make sure you specify sensible options for foo." + elog + elog "You can create as many ${PN}.foo* services as you wish." + fi + + if use bpf; then + elog + elog "eBPF/XDP files must be compiled (using sys-devel/clang[llvm_targets_BPF]) before use" + elog "because their configuration is hard-coded. You can find the default ones in" + elog " ${EPREFIX}/usr/share/doc/${PF}/ebpf" + elog "and the common location for eBPF bytecode is" + elog " ${EPREFIX}/usr/libexec/${PN}" + elog "For more information, see https://${PN}.readthedocs.io/en/${P}/capture-hardware/ebpf-xdp.html" + fi + + if use debug; then + elog + elog "You have enabled the debug USE flag. Please read this link to report bugs upstream:" + elog "https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Reporting_Bugs" + elog "You need to also ensure the FEATURES variable in make.conf contains the" + elog "'nostrip' option to produce useful core dumps or back traces." + fi + + elog + if [[ -z "${REPLACING_VERSIONS}" ]]; then + elog "To download and install an initial set of rules, run:" + elog " suricata-update" + fi + elog +} -- cgit v1.2.3