1 files changed, 35 insertions, 0 deletions
diff --git a/app-forensics/volatility/volatility-2.6.ebuild b/app-forensics/volatility/volatility-2.6.ebuild
new file mode 100644
index 000000000000..74668be64645
--- /dev/null
+++ b/app-forensics/volatility/volatility-2.6.ebuild
@@ -0,0 +1,35 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=5
+
+PYTHON_COMPAT=( python2_7 )
+inherit distutils-r1
+
+DESCRIPTION="Framework for analyzing volatile memory"
+HOMEPAGE="http://www.volatilityfoundation.org/"
+SRC_URI="http://downloads.volatilityfoundation.org/releases/${PV}/${P}.zip"
+
+LICENSE="GPL-2+"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE=""
+
+S=${WORKDIR}/${PN}-master
+
+DEPEND="app-arch/unzip"
+RDEPEND=">=dev-libs/distorm64-3[${PYTHON_USEDEP}]
+	dev-libs/libpcre
+	|| (
+		dev-python/pycryptodome[${PYTHON_USEDEP}]
+		dev-python/pycrypto[${PYTHON_USEDEP}]
+	)"
+
+src_install() {
+	distutils-r1_src_install
+	mkdir "${D}/usr/share/${PN}"
+	mv "${D}/usr/contrib/plugins" "${D}/usr/share/${PN}/"
+	rmdir "${D}/usr/contrib"
+	mv "${D}/usr/tools" "${D}/usr/share/${PN}/"
+	dosym vol.py /usr/bin/volatility
+}