summaryrefslogtreecommitdiff
path: root/app-forensics
diff options
context:
space:
mode:
authorV3n3RiX <venerix@koprulu.sector>2023-09-18 11:05:42 +0100
committerV3n3RiX <venerix@koprulu.sector>2023-09-18 11:05:42 +0100
commit1426dfeb15e4d49cb4238c6cf37455a6130cd83f (patch)
tree9f9734bcdc280108e52d753b3c57234371772c3c /app-forensics
parent836586553c510ee2dd91e2ecd7676fe432c1f1a4 (diff)
gentoo auto-resync : 18:09:2023 - 11:05:42
Diffstat (limited to 'app-forensics')
-rw-r--r--app-forensics/Manifest.gzbin4721 -> 4716 bytes
-rw-r--r--app-forensics/volatility3/Manifest4
-rw-r--r--app-forensics/volatility3/volatility3-2.0.1.ebuild31
-rw-r--r--app-forensics/volatility3/volatility3-2.4.0-r1.ebuild57
-rw-r--r--app-forensics/yara/Manifest4
-rw-r--r--app-forensics/yara/yara-4.4.0.ebuild60
-rw-r--r--app-forensics/yara/yara-9999.ebuild1
7 files changed, 64 insertions, 93 deletions
diff --git a/app-forensics/Manifest.gz b/app-forensics/Manifest.gz
index c02193c563c1..80ae1be9b835 100644
--- a/app-forensics/Manifest.gz
+++ b/app-forensics/Manifest.gz
Binary files differ
diff --git a/app-forensics/volatility3/Manifest b/app-forensics/volatility3/Manifest
index 13684c16c3f9..627b74ac065e 100644
--- a/app-forensics/volatility3/Manifest
+++ b/app-forensics/volatility3/Manifest
@@ -1,11 +1,7 @@
AUX volatility3-2.4.0-dont-install-tests.patch 638 BLAKE2B 2af222dbec4b33a9f612bf6da65ae65746260294ea27e985715f3f6e5c4ea3a19a4e80159db5e9c62af6f90a8a1d92436d11303590735e27bfc6fd8cf3a29224 SHA512 f5672e938ec146cabbc249301dabd5c736ce20e52e090b254c22dc35f6358ef2b920c249cfde1c7c498945bf838a1df3faef2e4beec0d1d0799f8403f091ec9e
AUX volatility3-2.4.1-dont-install-tests.patch 468 BLAKE2B 33afeedc66569b5e1ec26751e6b036ca8e985df74c98f9b4674bb9911e7852b69b20e8b5ee68392d0cc8ae163dfc3d6ec5807e77b7d7e658ade97033cfe5192b SHA512 1369ee81b481eccbf65e520528c46b63b8c7850d476362fe8398cfb2ade6ceb6494695790b1b31a587de5b80f3b53ea9f73822cec712ef1ff21b58f312a64195
-DIST volatility3-2.0.1.tar.gz 427679 BLAKE2B eb9b4ebb885a8dd4de2769c666b503da4bef792389efbf487815808fd514cf84f7f10b5a12926cf398a4028e7b72a5b78892c4c92d3709fea37fe13a6f32af7d SHA512 752b3fc23b3668df4329f6dbefa2ff8eb2dd63bc6e22e18774096cebae93053567727e3dc6e5ecbf7a0731459c829c37cea8ac735564c62f96a4f652ad2b6cb9
-DIST volatility3-2.4.0.gh.tar.gz 464123 BLAKE2B 436f0996b7c1d997727885949941fdaff3d801dbd5182ec9332d6f8182fc9bb56b91b50aad11f901e84bf4f3399f7ac0a61d484cd57fc36d7baf106ffcdb8fbd SHA512 03d74ff1c34a583dfc6a43fdb94947e4bd691e92a7f6a52d7323388edb47e955c06db523c21d9969012a4c607896daa8f20d82393d4ec457ebbf8c09b6537d25
DIST volatility3-2.4.1.gh.tar.gz 486648 BLAKE2B 7f00ec6b57eb9ef6420f4c1aa735203fbd51fca39aa13200eb821d13842f879c8743f63da7c5bbcf7d84a2850709a15c0aadc2b0311edbdf34dfa026f2a3dcd6 SHA512 5f785a778654b76fc85b7b82b2e9ba9e6315a99169d4d956a9af84ae91086e7a38cac343b7df0f00d6830361c77d377408bf8eab3679c161c8a02212c696389c
DIST volatility3-linux-sample-1.bin.gz 143967523 BLAKE2B 3321e991a50b6e4ccf19e0ee48d779664f43f4cdbdb950ca31a5d08c8ee9de0018e2d4f69f42206f7e8f1c6ea735c47f8aa42806ed0f85e9a837b611f07b3289 SHA512 82a34aa1d4e7d7deb9ea12e892f14ba0a28908b2da2e31ca76efd1e9e59d87769064a1ffffe8979a58b992cea7005fa20954df50984dbe1dd186513ad95168d7
DIST volatility3-win-xp-laptop-2005-06-25.img.gz 180343409 BLAKE2B 9fc10ddb9208d7023854e9619f6cf5ce140f2a2aa5772ccd8bcd852dd50c6f77e36298dbf7df1512334e7976b6ab35dd77f4c49505e531c3a289dd0f26cfc01e SHA512 a1f758cc1b4febcf11f64bc01b872c7528d19c686d81f8e03d742424fa0600254914e656cdf35c3752b406354f769a8aa256622b2f2afe2d691c4bb6d3be3f52
-EBUILD volatility3-2.0.1.ebuild 1075 BLAKE2B ac2c0c43b7d1a34402f02a6e6081c66af2a4ab77085a5664edde6a32113f5ee8c01376979ee8e3ed6d18da58866d07ce151f78060ff05a2386b4d712348badf3 SHA512 f20c054f84810af6b340dc429bfd64259a9e2fc7212edc367eafc0a308c236245ce98978982a00022d28dee9cec3048867ba450d628ba1e2a7ebff96d3b036dd
-EBUILD volatility3-2.4.0-r1.ebuild 1914 BLAKE2B 40ec32e377ac2b4fa49a9a4a7d77375e80556ee2d15a56ebb5981e8df9cf24db7da99c8840fd9d9b65bcd6af80400ac95ea8c615d9996fa5e8e47d6518daed76 SHA512 9f095fc3467c61c951bddfe6a658d545c3965fdce5afa2bbf21cccabaeec3b7117d3973363f73fafdec3ed9905bdfa85d861f34d0cb438838be2304025a3f55f
EBUILD volatility3-2.4.1-r1.ebuild 2088 BLAKE2B c90cca9db24874829cb076321dcecec9bf27c41a055a0c40fb87214ff090f3dde22aa322f97635142f7d870bf806611d1a70d01f3afe82b5bcab47f95cd87875 SHA512 d4794ff4f6dfac41d7833fd3f54c5ce472db574fb67b67d3f477e436447900ae0ebe19e072691787e88c8df613e34b69165923aaa170b002171bbae07d76ece9
MISC metadata.xml 1353 BLAKE2B 6646bfc20fcabe361b50e05b55aa5f16d2b551706bb16d34477409611d10bd3ca398f487435bcc95e2f6c7eb2b2cf6b4104bae6bb6e5e603bc17c366631895d0 SHA512 b52a0032a4b6d5b9ba46dccf4cc7c4dc0f25afb9cb9051815366eda62de29fc67b78aea16b2835994ee5885f206868bf7311b7a1cf1646108441cee90c01bf3e
diff --git a/app-forensics/volatility3/volatility3-2.0.1.ebuild b/app-forensics/volatility3/volatility3-2.0.1.ebuild
deleted file mode 100644
index 1e78c0d472f9..000000000000
--- a/app-forensics/volatility3/volatility3-2.0.1.ebuild
+++ /dev/null
@@ -1,31 +0,0 @@
-# Copyright 1999-2023 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{9..10} )
-inherit distutils-r1
-
-MY_PV=${PV//_beta/-beta.}
-
-DESCRIPTION="Framework for analyzing volatile memory"
-HOMEPAGE="https://github.com/volatilityfoundation/volatility3/ https://www.volatilityfoundation.org/"
-SRC_URI="https://github.com/volatilityfoundation/volatility3/archive/v${MY_PV}.tar.gz -> ${P}.tar.gz"
-S="${WORKDIR}"/${PN}-${MY_PV}
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 x86"
-IUSE="crypt disasm jsonschema leechcore snappy yara"
-
-RDEPEND="
- >=dev-python/pefile-2017.8.1[${PYTHON_USEDEP}]
- crypt? ( >=dev-python/pycryptodome-3[${PYTHON_USEDEP}] )
- disasm? ( >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}] )
- jsonschema? ( >=dev-python/jsonschema-2.3.0[${PYTHON_USEDEP}] )
- leechcore? ( >=dev-python/leechcorepyc-2.4.0[${PYTHON_USEDEP}] )
- snappy? ( >=dev-python/python-snappy-0.6.0[${PYTHON_USEDEP}] )
- yara? ( >=dev-python/yara-python-3.8.0[${PYTHON_USEDEP}] )
-"
-DEPEND="${RDEPEND}"
diff --git a/app-forensics/volatility3/volatility3-2.4.0-r1.ebuild b/app-forensics/volatility3/volatility3-2.4.0-r1.ebuild
deleted file mode 100644
index 730afe82d72f..000000000000
--- a/app-forensics/volatility3/volatility3-2.4.0-r1.ebuild
+++ /dev/null
@@ -1,57 +0,0 @@
-# Copyright 1999-2023 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{9..11} )
-inherit distutils-r1
-
-MY_PV=${PV//_beta/-beta.}
-
-DESCRIPTION="Framework for analyzing volatile memory"
-HOMEPAGE="https://github.com/volatilityfoundation/volatility3/ https://www.volatilityfoundation.org/"
-SRC_URI="
- https://github.com/volatilityfoundation/volatility3/archive/v${MY_PV}.tar.gz -> ${P}.gh.tar.gz
- test?
- (
- https://downloads.volatilityfoundation.org/volatility3/images/win-xp-laptop-2005-06-25.img.gz -> ${PN}-win-xp-laptop-2005-06-25.img.gz
- https://downloads.volatilityfoundation.org/volatility3/images/linux-sample-1.bin.gz -> ${PN}-linux-sample-1.bin.gz
- )
-"
-S="${WORKDIR}"/${PN}-${MY_PV}
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 x86"
-IUSE="crypt disasm jsonschema leechcore snappy test yara"
-
-RDEPEND="
- >=dev-python/pefile-2017.8.1[${PYTHON_USEDEP}]
- crypt? ( >=dev-python/pycryptodome-3[${PYTHON_USEDEP}] )
- disasm? ( >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}] )
- jsonschema? ( >=dev-python/jsonschema-2.3.0[${PYTHON_USEDEP}] )
- leechcore? ( >=dev-python/leechcorepyc-2.4.0[${PYTHON_USEDEP}] )
- snappy? ( >=dev-python/python-snappy-0.6.0[${PYTHON_USEDEP}] )
- yara? ( >=dev-python/yara-python-3.8.0[${PYTHON_USEDEP}] )
-"
-DEPEND="${RDEPEND}"
-
-PATCHES=(
- "${FILESDIR}/${P}-dont-install-tests.patch"
-)
-
-# Tests require optional features
-REQUIRED_USE="test? ( yara )"
-
-RESTRICT="!test? ( test )"
-
-python_test() {
- # see .github/workflows/test.yaml
- "${EPYTHON}" "${S}/test/test_volatility.py" --volatility=vol.py \
- --image "${WORKDIR}/${PN}-win-xp-laptop-2005-06-25.img" -k test_windows -v || \
- die "Tests fail with ${EPYTHON}"
- "${EPYTHON}" "${S}/test/test_volatility.py" --volatility=vol.py \
- --image "${WORKDIR}/${PN}-linux-sample-1.bin" -k test_linux -v || \
- die "Tests fail with ${EPYTHON}"
-}
diff --git a/app-forensics/yara/Manifest b/app-forensics/yara/Manifest
index fda45f750d05..d8c406bbb295 100644
--- a/app-forensics/yara/Manifest
+++ b/app-forensics/yara/Manifest
@@ -1,6 +1,8 @@
DIST yara-4.3.1.tar.gz 2179177 BLAKE2B 071bd2201653b094f828a5ea1ca2dd08fb0e3e8ea0439784bd949fc9ebfeb3c1aa9408581c8808d2d648d988c3aaab676d61605b53446efa12d838898b7ffe16 SHA512 93a2243d54397e76175fa0106451965b7f3a1f1918307c2bae6193f3725b69f60f70c3901a12c1690368f5b37e973a65c63a299624a521d204b12b48d5efe496
DIST yara-4.3.2.tar.gz 2179265 BLAKE2B cfcc18dbd4c69f5f640ef755a8d4efe5f7ec8e313153955644fbd2adc03d1c73cddc042e95c0c0629fd58780922eb3dc1c72a5ca1bd9ff767a9e3f41f1652c98 SHA512 dc77ec46a30ca2fff33b639166fc554c9c6d9e955642774e23da3ea7dbb25fe154cfd4ef83c9808920193028b9099258a63b3f1b9a66864a1f3905f0a8e8053f
+DIST yara-4.4.0.tar.gz 2220068 BLAKE2B f9654592f3dbe493dc31bcda80c9f0e31a2a8998f47d1172afe7456a9d4ead8f475e3f0999140c952343cdeca1cedc8060a3b42c1bbe57ce617fd5b5a86dbfb3 SHA512 705db57b73e5165a26e0aaea728521f372b9f7f613665860dd22066c30e75a614815fb17ee8654780fcfc157f0137cbeda015ec088a698f31adcf071e233205f
EBUILD yara-4.3.1.ebuild 1269 BLAKE2B 3b9f001bb80ec39e7b3a77f270add2dfb6c339c53223bb14cabc1c5289787e5eee11c6b7347ec3098de72f1fc02a180e4ba22c6f80f00c46988c408cea5a2f2f SHA512 df58e0bd84dfcbfa2f74f1c647f510be06994d6dd3bd33f1ddf3952f285710d91dd0f90fd011f43ae51dea9df03f8254efc1e70380f30bd40d207c978f16bc06
EBUILD yara-4.3.2.ebuild 1297 BLAKE2B b039bc6e8343b87edbd06fbfc16b1eae05dcd497ae0835cac3aa5940fe6479ec19bae1c5ab9d6792d9e33158f6f361d7e8cdb4135a766d5a87a68c3dbbe9bb5e SHA512 38cb38145ebb4c6eea9665f8ce8d4c701ce03fc3f4a3f8e626a2b8e7198a91f2a05e189fabbf3d65321d09f743c00b4ce10c4cbb84199619e33a43f145b5b781
-EBUILD yara-9999.ebuild 1271 BLAKE2B d96bc8732c7d227cbb42d34aa1fc0ec2fdd59eb0cf9e86034aae210e883591f8c5b3953217c5919c731515136754bbb0a3670887cb7bfbb6c2bad45140622f8d SHA512 60ed8c97271d032384048663f12575f80ab8a3ecbc75ac37b021ed9122162c1e964d2e2847d48eb37c8d8e0590db6ecfdb4e4b31deaa2030766370c715ef33a4
+EBUILD yara-4.4.0.ebuild 1299 BLAKE2B 1bfd0ff1ce1aa183bc0b605d3bbde4660fa8b97c3502426bc76335e9b74a9528232556c82fcf1fb1bc77f1c22711ae4af042585834567211e429474496d03b24 SHA512 56cf978196ec23ca63fa5846bd928ade3dfc607dc9f91c7e8a5471936bbd9086bef5da8fc3f32ee376116dab92ed5cb959c97752b891f997b46b478fec046d1a
+EBUILD yara-9999.ebuild 1299 BLAKE2B 1bfd0ff1ce1aa183bc0b605d3bbde4660fa8b97c3502426bc76335e9b74a9528232556c82fcf1fb1bc77f1c22711ae4af042585834567211e429474496d03b24 SHA512 56cf978196ec23ca63fa5846bd928ade3dfc607dc9f91c7e8a5471936bbd9086bef5da8fc3f32ee376116dab92ed5cb959c97752b891f997b46b478fec046d1a
MISC metadata.xml 1284 BLAKE2B 5e8b7f95170b97d4d55fda012f1108acfb0cae362d4da0f3559375d529194b5e4f9644d8ca3d0fc7e438b873f3827aec307dc664808a56561153679fc0bd5729 SHA512 64048379eb1d51afeee050ea906a8fa7bda9d5bdc78807d04c1f5f5b5a425b512de5facb6b79f23ed8d5517caf779ef327d7eb148ae2a32407904db05efb337f
diff --git a/app-forensics/yara/yara-4.4.0.ebuild b/app-forensics/yara/yara-4.4.0.ebuild
new file mode 100644
index 000000000000..389b8493c70f
--- /dev/null
+++ b/app-forensics/yara/yara-4.4.0.ebuild
@@ -0,0 +1,60 @@
+# Copyright 1999-2023 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit autotools
+
+DESCRIPTION="A malware identification and classification tool"
+HOMEPAGE="https://virustotal.github.io/yara/"
+
+if [[ ${PV} == "9999" ]]; then
+ inherit git-r3
+ EGIT_REPO_URI="https://github.com/VirusTotal/yara.git"
+else
+ SRC_URI="https://github.com/virustotal/yara/archive/v${PV/_/-}.tar.gz -> ${P}.tar.gz"
+ S="${WORKDIR}/${PN}-${PV/_/-}"
+ KEYWORDS="~amd64 ~arm64 ~ppc64 ~x86"
+fi
+
+LICENSE="Apache-2.0"
+SLOT="0/8"
+IUSE="+dex +dotnet +cuckoo +macho +magic profiling python test"
+RESTRICT="!test? ( test )"
+
+DEPEND="
+ dev-libs/openssl:=
+ cuckoo? ( dev-libs/jansson:= )
+ magic? ( sys-apps/file:= )
+"
+RDEPEND="${DEPEND}"
+BDEPEND="virtual/pkgconfig"
+PDEPEND="python? ( =dev-python/yara-python-$(ver_cut 1)* )"
+
+src_prepare() {
+ default
+ eautoreconf
+}
+
+src_configure() {
+ econf \
+ $(use_enable profiling) \
+ $(use_enable cuckoo) \
+ $(use_enable magic) \
+ $(use_enable dotnet) \
+ $(use_enable macho) \
+ $(use_enable dex) \
+ $(use_enable test static)
+}
+
+src_test() {
+ emake check
+}
+
+src_install() {
+ default
+
+ # TODO: Allow tests to work against dyn. lib rather than building
+ # statically just for tests.
+ find "${ED}" \( -name '*.a' -o -name '*.la' \) -delete || die
+}
diff --git a/app-forensics/yara/yara-9999.ebuild b/app-forensics/yara/yara-9999.ebuild
index 3862dff1c51a..389b8493c70f 100644
--- a/app-forensics/yara/yara-9999.ebuild
+++ b/app-forensics/yara/yara-9999.ebuild
@@ -28,6 +28,7 @@ DEPEND="
magic? ( sys-apps/file:= )
"
RDEPEND="${DEPEND}"
+BDEPEND="virtual/pkgconfig"
PDEPEND="python? ( =dev-python/yara-python-$(ver_cut 1)* )"
src_prepare() {