31 Commits

Author SHA1 Message Date
gonzalo
dad38fc64d Update for Suricata to 5.0.3
https://suricata-ids.org/2020/04/28/suricata-5-0-3-released/

OK jasper@
2020-05-15 09:17:39 +00:00
ajacoutot
2fbd5e1e51 We have everything we need not to be forced to hardcode ,python3.
Use MODPY_FLAVOR instead.

ok sthen@
2020-04-25 10:07:41 +00:00
gonzalo
85cf515342 Update for Suricata to 5.0.2.
OK jasper@
2020-02-18 08:05:16 +00:00
sthen
b6f656d580 Remove share/doc/suricata, the files it contains are all just a couple of
lines redirecting readers to the website. ok gonzalo@
2020-01-22 10:21:47 +00:00
jasper
05c5e605ac update to suricata-5.0.1
ok gonzalo@ (MAINTAINER)
2019-12-16 15:33:27 +00:00
jasper
d208e72984 fix hardcoded 'sphinx-build' which is for python2-only.
broken since the switch to python3

noticed by sthen@
2019-11-26 10:44:33 +00:00
jasper
7e3a636d39 - update to suricata-5.0.0
- switch to python3

from gonzalo@ with some small tweaks by me
2019-10-30 12:41:46 +00:00
jasper
6c1da4b64b update to suricata-4.1.5
ok gonzalo@
2019-10-02 17:42:24 +00:00
semarie
8d8ee0b131 update libc-rs for sparc64
maintainers timeout
2019-09-02 07:03:39 +00:00
sthen
77f7cc9c61 replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes 2019-07-12 20:49:33 +00:00
semarie
0a384d1f0d explicitly set CARGO_HOME in environment: permit to have a writeable
directory for cargo to create a package cache lock.

required for upcoming lang/rust 1.36.0

ok landry@ jca@ tb@ aja@
2019-07-04 06:52:03 +00:00
gonzalo
fd3931c24b Update for Suricata to 4.1.4 and suricata-update to 1.0.5.
While here we prepare Suricata for version 5 with rust included,
some patches already applied upstream thanks to bluhm@.

OK bluhm@ jasper@
2019-05-03 06:22:34 +00:00
cwen
e9e5cced4f suricata: Change COMPILER to unbreak on !clang archs
Use ports-gcc on !clang archs, because suricata needs thread local storage.
While here, make spacing consistent in the Makefile.
Tested on macppc with gcc-4.9 and gcc-8.3.

ok jasper@ (maintainer)
2019-04-21 15:34:02 +00:00
bluhm
a1d9dd6b9e Implement pledge support for suricata.
from Emmanuel Roullit; OK gonzalo@
2019-04-19 12:22:27 +00:00
bluhm
74d368dadf Reopen log files was broken since we switched to user privileges.
Files are created as root, user _suricata cannot open them.  Use
filemode 664 in the default config where possible.  Use syslog for
general logging.  Fix possible NULL dereference found by Emmanuel
Roullit.
OK sthen@ gonzalo@
2019-04-05 12:24:00 +00:00
sthen
ffb990d9f8 missing RDEP, ok gonzalo 2019-04-01 10:01:05 +00:00
sthen
e170a45661 typo in README suritcata->suricata 2019-03-29 16:53:20 +00:00
bluhm
e4f86710dc Avoid use-after-free during pid file cleanup. This replaces my
previous fix with the version commited upstream.
OK jasper@ gonzalo@
2019-03-26 13:46:24 +00:00
jasper
5fd0d08dbf update to suricata-4.1.3
ok gonzalo@
2019-03-18 17:54:33 +00:00
bluhm
7a96ae8a80 If rust is installed, suricata's configure picks it up and the build
fails.  Disable rust for now.
OK sthen@ jasper@ gonzalo@
2019-03-07 12:16:20 +00:00
bluhm
d8362b89f5 Use setresuid/gid() directly to change user and group. Otherwise
Suricata uses libcap-ng on Linux and runs as root elsewhere.
Switch to _suricata user and group in config to avoid running as root.
To remove pid file its directory must be writable by suricata user.
Fix pid file removal if it is specified in config file.
setresuid()/gid() patch from Emmanuel Roullit
OK gonzalo@
2019-03-05 12:38:23 +00:00
bluhm
b13dc5b00e Suricata's configure script picks additional libraries if they are
available at build time.  Add them to lib depends and wantlib
to create a package that always depends on all it needs.
Portcheck complained about an unknown VARBASE, add it to subst vars.
OK gonzalo@
2019-02-28 13:13:09 +00:00
gonzalo
c1c4769833 Update for Suricata to 4.1.2
Now include suricata-update

https://github.com/OISF/suricata/releases

OK jasper@
2019-02-12 09:27:16 +00:00
espie
f4b7f81318 convert to PKGSTEM 2018-09-04 12:46:09 +00:00
gonzalo
7500954d67 Update to Suricata to 4.0.5
https://github.com/OISF/suricata/releases

OK jasper@
2018-07-25 12:52:12 +00:00
jasper
81def4be93 enable ipfw mode which allows divert(4)'ing traffic to suricata in IPS mode
ok gonzalo@
2018-04-26 10:44:44 +00:00
chris
a8c43e41e9 The configure script tries to use -march=native automatically. This is
not appropriate for package building.

ok sthen@
2018-04-02 15:33:32 +00:00
jasper
ce7b1805d5 describe suricata-update usage
ok gonzalo@
2018-03-17 13:03:14 +00:00
jasper
618cb9e629 tweak README formatting
ok gonzalo@
2018-03-17 09:57:20 +00:00
ajacoutot
ab621c088c Missing BDEP on textproc/py-sphinx
Drop uneeded CONFIGURE_ENV and make sure we don't pick up git nor pdflatex
Simplify post-install
Fix rc.d script

ok gonzalo@ (maintainer)
2018-02-15 16:19:41 +00:00
gonzalo
52fa9f298c high performance network IDS, IPS and security monitoring OK jasper@ 2018-02-15 08:30:08 +00:00