Bump to 2.5.1. Seems to fail less than previous versions, but ebuild still needs lots of love

Package-Manager: portage-2.2_rc20/cvs/Linux 2.6.28 x86_64

3 files changed, 219 insertions, 13 deletions

diff --git a/app-forensics/samhain/ChangeLog b/app-forensics/samhain/ChangeLog
index 1591e1e85cb5..7199f13ec37c 100644
--- a/app-forensics/samhain/ChangeLog
+++ b/app-forensics/samhain/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for app-forensics/samhain
-# Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/ChangeLog,v 1.11 2008/07/31 09:46:44 ulm Exp $
+# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/ChangeLog,v 1.12 2009/01/05 07:00:37 patrick Exp $
+
+*samhain-2.5.1 (05 Jan 2009)
+
+  05 Jan 2009; Patrick Lauer <patrick@gentoo.org> +samhain-2.5.1.ebuild:
+  Bump to 2.5.1. Seems to fail less than previous versions, but ebuild still
+  needs lots of love
 
   31 Jul 2008; Ulrich Mueller <ulm@gentoo.org> metadata.xml:
   Add USE flag description to metadata wrt GLEP 56.
diff --git a/app-forensics/samhain/Manifest b/app-forensics/samhain/Manifest
index a604ee5e99aa..9b2dd041e075 100644
--- a/app-forensics/samhain/Manifest
+++ b/app-forensics/samhain/Manifest
@@ -1,16 +1,8 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
 DIST samhain_signed-2.1.3.tar.gz 1326778 RMD160 26d3b2519d33a814d122e214a1b35a2f82534112 SHA1 73596c07764b7926e7e623b8d9922472daf19ec8 SHA256 351efd78f0f07a9d3eb128c7f1bb8959e32c0a783632890ab850365e9dfd1a5f
 DIST samhain_signed-2.2.0.tar.gz 1520179 RMD160 c61e9b1bd71ff3e2a8592badef788a4aba26f22b SHA1 8c245dfa95eeeecbdf1b443265f77e19052b95bf SHA256 6b02ccae95a46c831569026d43da517440213f6d407cd1bd19a287114167554a
+DIST samhain_signed-2.5.1.tar.gz 1839172 RMD160 961c4565a40df18b1e68f850c70227ac733711eb SHA1 b3ef437de910eb2493006ae0ac72f7c2d4690f64 SHA256 11e2b08891dec43e4d549ea8144dab21d76ff22697d5caa04e0d79471d4ae15f
 EBUILD samhain-2.1.3.ebuild 7192 RMD160 0e15ad0dad8cb966247f8d4d5d0dd1aab467be8c SHA1 fcfb09ddc84f4db41aaeb856da3539897cd92d6b SHA256 e3f2370634bd04a62023e1e0834776333b5e05be3057e4fe43d552b53b1fe9fd
 EBUILD samhain-2.2.0.ebuild 7192 RMD160 02ac2ded13340a361db782135b79c3cbb4482ea1 SHA1 d639e46a9a91fb0a1101d4398045fe80e35a89f7 SHA256 bb42df44e87e146707f9e178eb0206bf916b4cd56a524a8fc5f8eed2873f6ecb
-MISC ChangeLog 1860 RMD160 091bf031c30de3b5bb64e8c43305e1708963f78e SHA1 30bed551b80609600e40752421d9af9b694f33a2 SHA256 f0aee27fecf607a143e35b60020002d4b0af421b71431dd5577e205e5d9bb583
+EBUILD samhain-2.5.1.ebuild 7198 RMD160 7d654822353dc4ab1dc45ece8dcd076e673552b7 SHA1 5c4b42feab84f055b17de9a9dd70455c8a9526da SHA256 7c133e681f5ebda3cda879246821c29a7e0058848563dfb1a4db3aad67f58d5a
+MISC ChangeLog 2066 RMD160 f46b24c75f22c267e059c0cb2dea62b00771a701 SHA1 2d17ce83164ef659fcc01cdd861a0df6dfd32771 SHA256 151fe01a3225762c82cfe6478f973044762fcc7ca653bae39205e40486d4588b
 MISC metadata.xml 833 RMD160 427124bc05ede9e9ab903e483ad3270c9e02d04f SHA1 3d6ab25b56064256b76452a2d47bb12c2a89467e SHA256 fad71014665037e20db697300974e827cade6710158ca9299b66e7dbd3babfcc
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.9 (GNU/Linux)
-
-iEYEARECAAYFAkiRihIACgkQOeoy/oIi7uyV4gCeNQ6Kzh5rJzULvUUm9qZBkXA9
-eGsAnAzswUg3HEGD3/A8UaBvYlWwkHxS
-=1j4Z
------END PGP SIGNATURE-----
diff --git a/app-forensics/samhain/samhain-2.5.1.ebuild b/app-forensics/samhain/samhain-2.5.1.ebuild
new file mode 100644
index 000000000000..59355e5915e6
--- /dev/null
+++ b/app-forensics/samhain/samhain-2.5.1.ebuild
@@ -0,0 +1,208 @@
+# Copyright 1999-2009 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-forensics/samhain/samhain-2.5.1.ebuild,v 1.1 2009/01/05 07:00:37 patrick Exp $
+
+KEYWORDS="~x86"
+DESCRIPTION="Advanced file integrity and intrusion detection tool."
+HOMEPAGE="http://la-samhna.de/samhain/"
+SRC_URI="http://la-samhna.de/archive/samhain_signed-${PV}.tar.gz"
+LICENSE="GPL-2"
+SLOT="0"
+IUSE="crypt debug login-watch mounts-check mysql netclient netserver postgres prelude static suidcheck userfiles xml"
+
+RESTRICT="strip"
+
+DEPEND="crypt? ( >=app-crypt/gnupg-1.2 )
+		mysql? ( virtual/mysql )
+		postgres? ( >=virtual/postgresql-server-7.2 )
+		prelude? ( >=dev-libs/libprelude-0.8.10 )
+		>=sys-apps/sed-4
+		app-arch/tar
+		app-arch/gzip"
+
+# Samhain stealth mode options
+#
+# If you would like to enable stealth mode, please set and uncomment the
+# following options or pass them as enviroment variables when emerging
+# the package (like INSTALL_NAME="asd" emerge samhain).
+# If you set the variables here, don't forget to redigest the ebuild by
+# issuing 'ebuild samhain-<thisversion>.ebuild digest', also remember that with
+# your next emerge sync, the changes to the ebuild will be lost!
+#
+# Read the Samhain manual for additional information.
+#
+# STEALTH should be set to either 'full' or 'micro' (mandatory)
+#STEALTH=""
+#
+# XOR_VALUE should be a whole number from 128 to 255 (mandatory)
+#XOR_VALUE=""
+#
+# INSTALL_NAME can be set to change the name of the Samhain binaries
+# to the name you specify (optional)
+#INSTALL_NAME=""
+
+if [[ "${STEALTH}" == "full" ]] ; then
+	RDEPEND="media-gfx/imagemagick"
+fi
+
+pkg_setup() {
+	if use static ; then
+		if use postgres || use prelude ; then
+			ewarn "At the moment it isn't possible to build a static Samhain with"
+			ewarn "Prelude and/or PostgreSQL support on Gentoo, the compilation"
+			ewarn "fails during the linking process."
+			echo
+			ewarn "This will be looked at and fixed in the future, in the meantime,"
+			ewarn "patches to fix this are always welcome and appreciated! ;)"
+			ewarn "(Open a bug on bugs.gentoo.org for them or send them to"
+			ewarn "the maintainer directly, thanks!)"
+			die "Please turn the 'postgres' and/or 'prelude' USE flags off when building with 'static'"
+		fi
+	fi
+
+	if use mysql && use postgres ; then
+		ewarn "You cannot compile both database backends into Samhain at once,"
+		ewarn "you need to choose between MySQL or PostgreSQL and disable the"
+		ewarn "one you don't want to use."
+		die "Please choose between 'mysql' or 'postgres' USE flags"
+	fi
+}
+
+src_unpack() {
+	unpack ${A}
+	tar -xzf "samhain-${PV}.tar.gz"
+}
+
+src_compile() {
+	local myconf
+
+	if use crypt ; then
+		myconf="${myconf} --with-gpg=/usr/bin/gpg --with-checksum=no"
+
+		if [[ -n "${KEY_FPR}" ]] ; then
+			einfo "Setting built-in key fingerprint to ${KEY_FPR}"
+			FPR=`echo ${KEY_FPR} | sed "s/ //g"`
+			myconf="${myconf} --with-fp=${FPR}"
+		fi
+	fi
+
+	if [[ -n "${STEALTH}" ]] ; then
+		[[ -z "${XOR_VALUE}" ]] && die "Variable XOR_VALUE must be set for stealth mode"
+		echo
+		einfo "Enabling stealth mode '${STEALTH}', setting XOR_VALUE to ${XOR_VALUE}"
+
+		if [[ "${STEALTH}" == "full" ]] ; then
+			myconf="${myconf} --enable-stealth=${XOR_VALUE}"
+			sed -e "s:STEGIN=@stegin_prg@:STEGIN=:g" -i samhain-install.sh.in
+		elif [[ "${STEALTH}" == "micro" ]] ; then
+			myconf="${myconf} --enable-micro-stealth=${XOR_VALUE}"
+		else
+			die "STEALTH must be set to either 'full' or 'micro'"
+		fi
+
+		if [[ -n "${INSTALL_NAME}" ]] ; then
+			echo
+			einfo "Setting alternative samhain name to ${INSTALL_NAME}"
+			echo
+			myconf="${myconf} --enable-install-name=${INSTALL_NAME}"
+		fi
+	fi
+
+	use mysql && myconf="${myconf} --with-database=mysql --enable-xml-log"
+	use postgres && myconf="${myconf} --with-database=postgresql --enable-xml-log"
+	use prelude && myconf="${myconf} --with-prelude --with-libprelude-prefix=/usr"
+	use xml && myconf="${myconf} --enable-xml-log"
+	use static && myconf="${myconf} --enable-static"
+	use debug && myconf="${myconf} --enable-debug"
+
+	use netclient && myconf="${myconf} --enable-network=client"
+	use netserver && myconf="${myconf} --enable-network=server"
+
+	use login-watch && myconf="${myconf} --enable-login-watch"
+	use mounts-check && myconf="${myconf} --enable-mounts-check"
+	use suidcheck && myconf="${myconf} --enable-suidcheck"
+	use userfiles && myconf="${myconf} --enable-userfiles"
+
+	myconf="${myconf} --localstatedir=/var"
+
+	econf ${myconf} || die "configure failed"
+	make || die "compile failed"
+}
+
+src_install() {
+	make DESTDIR="${D}" install || die "make install failed"
+
+	rm -Rf "${D}/var/log"
+	rm -Rf "${D}/var/run"
+	rm -Rf "${D}/var/state"
+
+	if [[ -n "${STEALTH}" ]] ; then
+		rm -Rf "${D}/usr/share"
+	else
+		dodoc COPYING LICENSE docs/BUGS docs/MANUAL* docs/README* docs/TODO docs/*.txt
+		dohtml docs/*.html
+		docinto scripts
+		dodoc scripts/*
+		insinto /etc
+		insopts -m0600
+		newins samhainrc.linux samhainrc
+		newinitd init/samhain.startGentoo samhain
+		keepdir "/var/lib/samhain"
+	fi
+
+	if use netserver ; then
+		keepdir "/var/lib/yule"
+		chown daemon:daemon "${D}/var/lib/yule"
+		keepdir "/var/log/yule"
+		chown daemon:daemon "${D}/var/log/yule"
+	fi
+}
+
+pkg_postinst() {
+	if [[ -n "${STEALTH}" ]] ; then
+		elog
+		elog "Manual pages, documentation, and init script were NOT installed in order to"
+		elog "obscure Samhain's presence. You should also remove samhain's installation"
+		elog "traces from ${ROOT}/var/cache/edb/world and ${ROOT}/var/db/pkg."
+	fi
+
+	if [[ "${STEALTH}" == "full" ]] ; then
+		elog
+		elog "In stealth mode, the configuration file must be steganographically hidden"
+		elog "in a postscript image file. The sample config has been created this way by"
+		elog "the installation process. Use the samhain_stealth utility to modify or"
+		elog "create your own configuration file."
+	fi
+
+	if [[ -z "${KEY_FPR}" ]] ; then
+		elog
+		ewarn "GnuPG support has been enabled, but fingerprint verification will be"
+		ewarn "ignored. To enable fingerprint verification (strongly recommended),"
+		ewarn "you must re-emerge this package with the KEY_FPR variable set to"
+		ewarn "your default signing key fingerprint."
+		ewarn "Please read the Samhain manual for more details."
+		elog
+		elog "Enabling GnuPG support in Samhain requires that you sign your configuration"
+		elog "and and database files. Please run the following commands as root:"
+		elog
+		elog "    gpg -a --clearsign --not-dash-escaped ${ROOT}/etc/samhainrc"
+		elog "    mv ${ROOT}/etc/samhainrc.asc ${ROOT}/etc/samhainrc"
+		elog "    chmod 600 ${ROOT}/etc/samhainrc"
+		elog
+		elog "Run the same commands on ${ROOT}/var/lib/samhain/samhain_file after initialization."
+	fi
+
+	elog
+	elog "Be sure to check your settings in ${ROOT}/etc/samhainrc. When ready, run:"
+	elog "    samhain -t init"
+	elog "to initialize Samhain."
+
+	elog
+	elog "Samhain stealth-mode options are also available. Please view the comments"
+	elog "in the Samhain ebuild for further configuration instructions."
+
+	elog
+	ewarn "Please be sure to read the Samhain manual to understand and correctly"
+	ewarn "configure the Samhain utility."
+	ewarn "HTML version available for viewing at http://la-samhna.de/samhain/manual/ ."
+}