initial import of aide-0.7:
-- AIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire. It does the same things as the semi-free Tripwire and more. What does it do? It creates a database from the regular expression rules that it finds from the config file. Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms (md5,sha1,rmd160,tiger,haval,etc.) that are used to check the integrity of the file. More algorithms can be added with relative ease. All of the usual file attributes can also be checked for inconsistencies. It can read databases from older or newer versions. See the manual pages within the distribution for further info. There is also a beginning of a manual. WWW: http://www.cs.tut.fi/~rammer/aide.html
This commit is contained in:
lebel
parent
34c784c165
commit
e3f7b12896
33
security/aide/Makefile
Normal file
33
security/aide/Makefile
Normal file
@ -0,0 +1,33 @@
|
||||
# $OpenBSD: Makefile,v 1.1.1.1 2001/06/07 14:26:22 lebel Exp $
|
||||
|
||||
COMMENT= "Advanced Intrusion Detection Environment"
|
||||
|
||||
V= 0.7
|
||||
DISTNAME= aide-${V}
|
||||
CATEGORIES= security
|
||||
NEED_VERSION= 1.402
|
||||
|
||||
MAINTAINER= David Lebel <lebel@openbsd.org>
|
||||
|
||||
BUILD_DEPENDS= bison::devel/bison
|
||||
|
||||
HOMEPAGE= http://www.cs.tut.fi/~rammer/aide.html
|
||||
|
||||
PERMIT_PACKAGE_CDROM= Yes
|
||||
PERMIT_PACKAGE_FTP= Yes
|
||||
PERMIT_DISTFILES_CDROM= Yes
|
||||
PERMIT_DISTFILES_FTP= Yes
|
||||
|
||||
MASTER_SITES= http://www.cs.tut.fi/~rammer/ \
|
||||
ftp://ftp.linux.hr/pub/aide/
|
||||
|
||||
CONFIGURE_STYLE= gnu
|
||||
CONFIGURE_ENV= YACC="bison -y" \
|
||||
CPPFLAGS="-I${LOCALBASE}/include/" \
|
||||
LDFLAGS="-L${LOCALBASE}/lib/"
|
||||
|
||||
post-install:
|
||||
${INSTALL_DATA_DIR} ${PREFIX}/share/examples/aide
|
||||
${INSTALL_DATA} ${WRKSRC}/doc/aide.conf ${PREFIX}/share/examples/aide
|
||||
|
||||
.include <bsd.port.mk>
|
||||
3
security/aide/files/md5
Normal file
3
security/aide/files/md5
Normal file
@ -0,0 +1,3 @@
|
||||
MD5 (aide-0.7.tar.gz) = 0b2ed9eb3b608a19418800b87f5be848
|
||||
RMD160 (aide-0.7.tar.gz) = 113fe64c6ed74502917b337ba18185b8cc3ca484
|
||||
SHA1 (aide-0.7.tar.gz) = b9b5021e22244cfe28d3a32d6f6b598cf53f0868
|
||||
29
security/aide/patches/patch-configure
Normal file
29
security/aide/patches/patch-configure
Normal file
@ -0,0 +1,29 @@
|
||||
$OpenBSD: patch-configure,v 1.1.1.1 2001/06/07 14:26:22 lebel Exp $
|
||||
--- configure.orig Tue Apr 25 10:02:59 2000
|
||||
+++ configure Wed Jun 6 11:13:57 2001
|
||||
@@ -53,7 +53,7 @@ libexecdir='${exec_prefix}/libexec'
|
||||
datadir='${prefix}/share'
|
||||
sysconfdir='${prefix}/etc'
|
||||
sharedstatedir='${prefix}/com'
|
||||
-localstatedir='${prefix}/var'
|
||||
+localstatedir='/var'
|
||||
libdir='${exec_prefix}/lib'
|
||||
includedir='${prefix}/include'
|
||||
oldincludedir='/usr/include'
|
||||
@@ -2360,13 +2360,13 @@ EOF
|
||||
fi
|
||||
|
||||
|
||||
-if test "x$sysconfdir" != xNONE; then
|
||||
+if test "x$localstatedir" != xNONE; then
|
||||
cat >> confdefs.h <<EOF
|
||||
-#define DEFAULT_DB "$sysconfdir/aide.db"
|
||||
+#define DEFAULT_DB "$localstatedir/db/aide.db"
|
||||
EOF
|
||||
|
||||
cat >> confdefs.h <<EOF
|
||||
-#define DEFAULT_DB_OUT "$sysconfdir/aide.db.new"
|
||||
+#define DEFAULT_DB_OUT "$localstatedir/db/aide.db.new"
|
||||
EOF
|
||||
|
||||
elif test "x$prefix" != xNONE; then
|
||||
18
security/aide/patches/patch-doc_aide_1
Normal file
18
security/aide/patches/patch-doc_aide_1
Normal file
@ -0,0 +1,18 @@
|
||||
$OpenBSD: patch-doc_aide_1,v 1.1.1.1 2001/06/07 14:26:22 lebel Exp $
|
||||
--- doc/aide.1.orig Wed Jan 19 06:11:14 2000
|
||||
+++ doc/aide.1 Wed Jun 6 11:04:52 2001
|
||||
@@ -45,11 +45,11 @@ output. See aide.conf (5) section URLS f
|
||||
Prints out the standard help message.
|
||||
.PP
|
||||
.SH FILES
|
||||
-.B <prefix>/etc/aide.conf
|
||||
+.B /etc/aide.conf
|
||||
Default aide configuration file.
|
||||
-.B <prefix>/etc/aide.db
|
||||
+.B /var/db/aide.db
|
||||
Default aide database.
|
||||
-.B <prefix>/etc/aide.db.new
|
||||
+.B /var/db/aide.db.new
|
||||
Default aide output database.
|
||||
.SH SEE ALSO
|
||||
.BR aide.conf (5)
|
||||
98
security/aide/patches/patch-doc_aide_conf_in
Normal file
98
security/aide/patches/patch-doc_aide_conf_in
Normal file
@ -0,0 +1,98 @@
|
||||
$OpenBSD: patch-doc_aide_conf_in,v 1.1.1.1 2001/06/07 14:26:22 lebel Exp $
|
||||
--- doc/aide.conf.in.orig Tue Jun 5 10:50:51 2001
|
||||
+++ doc/aide.conf.in Tue Jun 5 10:51:44 2001
|
||||
@@ -2,15 +2,6 @@
|
||||
# AIDE @VERSION@
|
||||
#
|
||||
# example configuration file
|
||||
-#
|
||||
-# This configuration file checks the integrity of the
|
||||
-# AIDE package
|
||||
-#
|
||||
-# Default values for the parameters are in comments before the
|
||||
-# corresponding line.
|
||||
-#
|
||||
-
|
||||
-@@define TOPDIR @top_srcdir@
|
||||
|
||||
@@ifndef TOPDIR
|
||||
@@define TOPDIR /
|
||||
@@ -34,12 +25,11 @@
|
||||
|
||||
# The location of the database to be read.
|
||||
#database=file:aide.db
|
||||
-database=file:@@{TOPDIR}/doc/aide.db
|
||||
+database=file:/var/db/aide.db
|
||||
|
||||
# The location of the database to be written.
|
||||
#database_out=sql:host:port:database:login_name:passwd:table
|
||||
-#database_out=file:aide.db.new
|
||||
-database_out=file:aide.db.new
|
||||
+database_out=file:/var/db/aide.db.new
|
||||
|
||||
# Whether to gzip the output to database
|
||||
# gzip_dbout=no
|
||||
@@ -55,8 +45,6 @@ verbose=20
|
||||
#NOT IMPLEMENTED report_url=syslog:LOG_AUTH
|
||||
report_url=stdout
|
||||
|
||||
-# @@{TOPDIR} is replaced with @top_srcdir@ when
|
||||
-# read by aide.
|
||||
#p: permissions
|
||||
#i: inode
|
||||
#n: number of links
|
||||
@@ -91,22 +79,37 @@ All=R+a+sha1+rmd160+tiger
|
||||
# Attributes that can be used to verify that aide in intact
|
||||
# by people that have downloaded it from the web.
|
||||
# Let's be paranoid
|
||||
-Norm=s+n+b+md5+sha1+rmd160+tiger
|
||||
-
|
||||
-# The commented rules are just examples the rest are used by
|
||||
-# make check
|
||||
+#Norm=s+n+b+md5+sha1+rmd160+tiger
|
||||
|
||||
-#Selection regexp rule
|
||||
-@@{TOPDIR}/.* Norm
|
||||
-#Equals selection only the directory doc is checked and not it's children
|
||||
-#=@@{TOPDIR}/doc L
|
||||
-#Negative selection no rule is necessary but ignored if there
|
||||
-!@@{TOPDIR}/.*~
|
||||
-!@@{TOPDIR}/src/.*\.o
|
||||
-!@@{TOPDIR}/src/(aide|core) L
|
||||
-!@@{TOPDIR}/.*RCS
|
||||
-!@@{TOPDIR}/.*CVS
|
||||
-!@@{TOPDIR}/.*aide\.db.*
|
||||
-!@@{TOPDIR}/.*\.cvsignore.*
|
||||
-# @@{TOPDIR}/doc/.* All
|
||||
+=/$ R
|
||||
+/bsd$ L+s+sha1
|
||||
+/etc$ L+s+sha1
|
||||
+
|
||||
+# my passwd database should be static at time of system build. yours may
|
||||
+# not be, if not, uncomment the lines below.
|
||||
+
|
||||
+#/etc/passwd L
|
||||
+#/etc/master.passwd L
|
||||
+#/etc/pwd.db L
|
||||
+#/etc/spwd.db L
|
||||
+
|
||||
+# /home
|
||||
+=/home$ R
|
||||
+
|
||||
+# /usr
|
||||
+# /usr/bin
|
||||
+/usr/bin R
|
||||
+/usr/include R
|
||||
+/usr/lib R
|
||||
+/usr/libdata R
|
||||
+/usr/libexec R
|
||||
+/usr/local/bin R
|
||||
+/usr/local/etc L+s+sha1
|
||||
+/usr/local/lib R
|
||||
+/usr/local/libexec R
|
||||
+/usr/local/sbin R
|
||||
+/usr/local/share R
|
||||
+/usr/sbin R
|
||||
+/usr/share R
|
||||
|
||||
+=/tmp$ L
|
||||
16
security/aide/patches/patch-include_db_config_h
Normal file
16
security/aide/patches/patch-include_db_config_h
Normal file
@ -0,0 +1,16 @@
|
||||
$OpenBSD: patch-include_db_config_h,v 1.1.1.1 2001/06/07 14:26:22 lebel Exp $
|
||||
--- include/db_config.h.orig Tue Jun 5 09:36:49 2001
|
||||
+++ include/db_config.h Tue Jun 5 09:37:03 2001
|
||||
@@ -101,10 +101,10 @@ typedef enum { db_filename, db_linkname,
|
||||
|
||||
typedef struct db_config {
|
||||
url_t* db_in_url;
|
||||
- void* db_in;
|
||||
+ FILE* db_in;
|
||||
|
||||
url_t* db_out_url;
|
||||
- void* db_out;
|
||||
+ FILE* db_out;
|
||||
|
||||
#ifdef WITH_ZLIB
|
||||
gzFile db_gzin;
|
||||
25
security/aide/pkg/DEINSTALL
Normal file
25
security/aide/pkg/DEINSTALL
Normal file
@ -0,0 +1,25 @@
|
||||
#!/bin/sh
|
||||
# $OpenBSD: DEINSTALL,v 1.1.1.1 2001/06/07 14:26:22 lebel Exp $
|
||||
#
|
||||
# aide de-installation
|
||||
|
||||
set -e
|
||||
PATH=/bin:/usr/bin:/sbin:/usr/sbin
|
||||
PREFIX=${PKG_PREFIX:-/usr/local}
|
||||
CONFIG_FILE=${SYSCONFDIR}/aide.conf
|
||||
|
||||
if [ -d $CONFIG_DIR ]; then
|
||||
echo
|
||||
echo "+---------------"
|
||||
echo "| To completely deinstall the $1 package you need to perform"
|
||||
echo "| this step as root:"
|
||||
echo "|"
|
||||
echo "| rm -f $CONFIG_FILE"
|
||||
echo "|"
|
||||
echo "| Do not do this if you plan on re-installing $1"
|
||||
echo "| at some future time."
|
||||
echo "+---------------"
|
||||
echo
|
||||
fi
|
||||
|
||||
exit 0
|
||||
17
security/aide/pkg/DESCR
Normal file
17
security/aide/pkg/DESCR
Normal file
@ -0,0 +1,17 @@
|
||||
AIDE (Advanced Intrusion Detection Environment) is a free replacement
|
||||
for Tripwire. It does the same things as the semi-free Tripwire and
|
||||
more.
|
||||
|
||||
What does it do?
|
||||
|
||||
It creates a database from the regular expression rules that it
|
||||
finds from the config file. Once this database is initialized it
|
||||
can be used to verify the integrity of the files. It has several
|
||||
message digest algorithms (md5,sha1,rmd160,tiger,haval,etc.) that
|
||||
are used to check the integrity of the file. More algorithms can
|
||||
be added with relative ease. All of the usual file attributes can
|
||||
also be checked for inconsistencies. It can read databases from
|
||||
older or newer versions. See the manual pages within the distribution
|
||||
for further info. There is also a beginning of a manual.
|
||||
|
||||
WWW: ${HOMEPAGE}
|
||||
67
security/aide/pkg/INSTALL
Normal file
67
security/aide/pkg/INSTALL
Normal file
@ -0,0 +1,67 @@
|
||||
#!/bin/sh
|
||||
# $OpenBSD: INSTALL,v 1.1.1.1 2001/06/07 14:26:22 lebel Exp $
|
||||
#
|
||||
# Pre/post-installation setup of aide
|
||||
|
||||
# exit on errors, use a sane path and install prefix
|
||||
|
||||
set -e
|
||||
PATH=/bin:/usr/bin:/sbin:/usr/sbin
|
||||
PREFIX=${PKG_PREFIX:-/usr/local}
|
||||
CONFIG_FILE=${SYSCONFDIR}/aide.conf
|
||||
SAMPLE_CONFIG_DIR=$PREFIX/share/examples/aide
|
||||
|
||||
do_notice()
|
||||
{
|
||||
echo
|
||||
echo "+---------------"
|
||||
echo "| The existing $1 configuration file in $CONFIG_FILE,"
|
||||
echo "| have NOT been changed. You may want to compare them to the"
|
||||
echo "| current sample file in $SAMPLE_CONFIG_DIR,"
|
||||
echo "| and update your configuration as needed."
|
||||
echo "+---------------"
|
||||
echo
|
||||
}
|
||||
|
||||
do_install()
|
||||
{
|
||||
install -o root -g wheel -m 644 $SAMPLE_CONFIG_DIR/aide.conf \
|
||||
$CONFIG_FILE
|
||||
echo
|
||||
echo "+---------------"
|
||||
echo "| The $1 configuration file have been installed into"
|
||||
echo "| $CONFIG_FILE. Please view this file and change the configuration"
|
||||
echo "| to meet your needs."
|
||||
echo "+---------------"
|
||||
echo
|
||||
}
|
||||
|
||||
# verify proper execution
|
||||
#
|
||||
if [ $# -ne 2 ]; then
|
||||
echo "usage: $0 distname { PRE-INSTALL | POST-INSTALL }" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Verify/process the command
|
||||
#
|
||||
case $2 in
|
||||
PRE-INSTALL)
|
||||
: nothing to pre-install for this port
|
||||
;;
|
||||
POST-INSTALL)
|
||||
if [ ! -d $CONFIG_DIR ]; then
|
||||
do_install $1
|
||||
elif [ ! -f $CONFIG_DIR/Muttrc ]; then
|
||||
do_install $1
|
||||
else
|
||||
do_notice $1
|
||||
fi
|
||||
;;
|
||||
*)
|
||||
echo "usage: $0 distname { PRE-INSTALL | POST-INSTALL }" >&2
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
|
||||
exit 0
|
||||
6
security/aide/pkg/PLIST
Normal file
6
security/aide/pkg/PLIST
Normal file
@ -0,0 +1,6 @@
|
||||
@comment $OpenBSD: PLIST,v 1.1.1.1 2001/06/07 14:26:22 lebel Exp $
|
||||
bin/aide
|
||||
man/man1/aide.1
|
||||
man/man5/aide.conf.5
|
||||
share/examples/aide/aide.conf
|
||||
@dirrm share/examples/aide
|
||||
Loading…
Reference in New Issue
Block a user