summaryrefslogtreecommitdiff
path: root/app-forensics
diff options
context:
space:
mode:
Diffstat (limited to 'app-forensics')
-rw-r--r--app-forensics/Manifest.gzbin4547 -> 4544 bytes
-rw-r--r--app-forensics/volatility3/Manifest6
-rw-r--r--app-forensics/volatility3/volatility3-2.11.0-r1.ebuild (renamed from app-forensics/volatility3/volatility3-2.7.0-r1.ebuild)39
-rw-r--r--app-forensics/volatility3/volatility3-2.8.0-r2.ebuild (renamed from app-forensics/volatility3/volatility3-2.8.0.ebuild)8
4 files changed, 41 insertions, 12 deletions
diff --git a/app-forensics/Manifest.gz b/app-forensics/Manifest.gz
index 405767c96b09..b1e1cd97d82e 100644
--- a/app-forensics/Manifest.gz
+++ b/app-forensics/Manifest.gz
Binary files differ
diff --git a/app-forensics/volatility3/Manifest b/app-forensics/volatility3/Manifest
index b8e33ab3a345..07678f4d81f7 100644
--- a/app-forensics/volatility3/Manifest
+++ b/app-forensics/volatility3/Manifest
@@ -1,7 +1,7 @@
-DIST volatility3-2.7.0.gh.tar.gz 523445 BLAKE2B aa7209be5a3cb33b2f5b9fac52e3098407926b8135d2d5566746e0156d3873195ce9161e5652c2abf80e9bfd2955e7d02985ce75ac7fca3559d821866d0302cf SHA512 bb9f79604ce2e647d42a1003941802a69ecdf845c1400b1d3f67e13494a228c99269478d635fbcdcde8ae67b792b73e07e7e26ce9a8e2e7b80185af7cc7ac3c0
+DIST volatility3-2.11.0.gh.tar.gz 629201 BLAKE2B e32a7b804e0cec74d093e56ce5b448ad8f51d268880c103e68a6ab24341492d4acd66eab98bc9afd70ec8df4bb3191620f27f0d71be06cf70669bca114e6d1c1 SHA512 6cb02e2db34a64e26115883c7ac545c25effcc5600ec075c7d115c4ec825350788957bc8798370753fb5872467d4438cc45d11f40e8b772dac9ded3ac0148831
DIST volatility3-2.8.0.gh.tar.gz 562563 BLAKE2B bb33fc0085e87c84a92c45feb1ae8e2cf95f12a23333d6476698a778513b13f119b1c0150df85f316e03b16ef285da8052be00a84ab430fded4af069724ef2e5 SHA512 802c266c42891a76500414d07ec340a5917b0ebc89113c634196ead7bddc79f71787d9c20f0e912ee8686b8a3c0067615647c99cda01c9d8dffb5ac2647b728e
DIST volatility3-linux-sample-1.bin.gz 143967523 BLAKE2B 3321e991a50b6e4ccf19e0ee48d779664f43f4cdbdb950ca31a5d08c8ee9de0018e2d4f69f42206f7e8f1c6ea735c47f8aa42806ed0f85e9a837b611f07b3289 SHA512 82a34aa1d4e7d7deb9ea12e892f14ba0a28908b2da2e31ca76efd1e9e59d87769064a1ffffe8979a58b992cea7005fa20954df50984dbe1dd186513ad95168d7
DIST volatility3-win-xp-laptop-2005-06-25.img.gz 180343409 BLAKE2B 9fc10ddb9208d7023854e9619f6cf5ce140f2a2aa5772ccd8bcd852dd50c6f77e36298dbf7df1512334e7976b6ab35dd77f4c49505e531c3a289dd0f26cfc01e SHA512 a1f758cc1b4febcf11f64bc01b872c7528d19c686d81f8e03d742424fa0600254914e656cdf35c3752b406354f769a8aa256622b2f2afe2d691c4bb6d3be3f52
-EBUILD volatility3-2.7.0-r1.ebuild 1993 BLAKE2B a158a9a50127a7e6fa185a5cd154fd2c0869752ef32e2be5ddf0275479b308e9d47e7e1dcdf471794367ccfe795d7337dc9a2f6458c8a288edb401c3f8417158 SHA512 b46460640306efbe8de1721b0ce9e920e4b4be206572962883a29a63d394fc767a0f87591106a0d0f8b8266f20fb8feba98d7979c865127d44fcdc39e65fe49b
-EBUILD volatility3-2.8.0.ebuild 1993 BLAKE2B 906c7f0c9246dd1f58720ec0670c6745ce3e87d49ee0329a43f85fb99ba4096aa95ff02e84c92616be5b634607e2c2f2bb437601802634b66e4d9613372e88f4 SHA512 bc5b3b4793f4d2f8ff641e9b46b6aa350cb434528ce028d677d13afc041ec50f3ab3d22b4a5b49034d00c656afec3ad3a8e993bb1b0cfdc69ee00584161a78dd
+EBUILD volatility3-2.11.0-r1.ebuild 2767 BLAKE2B c0d6e277041938cf138409f9cb7a60f38fa299717401d22125103c8bb9bd3269a23f4ed5e4756f58fe1e0fc95cd20b1d1da8e44cf05d040f1b7ed6368b795f4a SHA512 35f03db23344d05a9dcdf1d18fc593ce5541e2970cf59fc35d92a374f0ee2afc1d60ed6957e07fc0a38bf3a1ebc3deaaaf8b21f7801027f11f11b51dae447355
+EBUILD volatility3-2.8.0-r2.ebuild 2053 BLAKE2B 0285c6cd188a87451bc1d91482c9c3f568787fe5f5bb019b5449637b5dfc01d8837c2e01ec413a17ef2ab2238896e97e3e21ae6255656c550aa2f03a03ad15bc SHA512 d307bc79354ae177a8a1d6952d369589c1df43202776addc52b1343064474b0333ba42c821511433fed35ae48d95d043c86624dbccd51b5dd6e071d0ab9f1c33
MISC metadata.xml 1353 BLAKE2B 6646bfc20fcabe361b50e05b55aa5f16d2b551706bb16d34477409611d10bd3ca398f487435bcc95e2f6c7eb2b2cf6b4104bae6bb6e5e603bc17c366631895d0 SHA512 b52a0032a4b6d5b9ba46dccf4cc7c4dc0f25afb9cb9051815366eda62de29fc67b78aea16b2835994ee5885f206868bf7311b7a1cf1646108441cee90c01bf3e
diff --git a/app-forensics/volatility3/volatility3-2.7.0-r1.ebuild b/app-forensics/volatility3/volatility3-2.11.0-r1.ebuild
index 3a14c7d8990c..20606c779d62 100644
--- a/app-forensics/volatility3/volatility3-2.7.0-r1.ebuild
+++ b/app-forensics/volatility3/volatility3-2.11.0-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2024 Gentoo Authors
+# Copyright 1999-2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
@@ -21,9 +21,9 @@ SRC_URI="
"
S="${WORKDIR}"/${PN}-${MY_PV}
-LICENSE="GPL-2+"
+LICENSE="Volatility-1.0"
SLOT="0"
-KEYWORDS="amd64 x86"
+KEYWORDS="~amd64 ~x86"
IUSE="crypt disasm jsonschema leechcore snappy test yara"
# We need to select *all* subslots of app-arch/snappy which select
@@ -31,11 +31,19 @@ IUSE="crypt disasm jsonschema leechcore snappy test yara"
RDEPEND="
>=dev-python/pefile-2023.2.7[${PYTHON_USEDEP}]
crypt? ( >=dev-python/pycryptodome-3[${PYTHON_USEDEP}] )
- disasm? ( >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}] )
+ disasm? (
+ >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}]
+ <dev-libs/capstone-6[python,${PYTHON_USEDEP}]
+ )
jsonschema? ( >=dev-python/jsonschema-2.3.0[${PYTHON_USEDEP}] )
leechcore? ( >=dev-python/leechcorepyc-2.4.0[${PYTHON_USEDEP}] )
snappy? ( app-arch/snappy:0/1.1 )
- yara? ( >=dev-python/yara-python-3.8.0[${PYTHON_USEDEP}] )
+ yara? (
+ || (
+ >=app-forensics/yara-x-0.5.0[${PYTHON_USEDEP}]
+ >=dev-python/yara-python-3.8.0[${PYTHON_USEDEP}]
+ )
+ )
"
DEPEND="${RDEPEND}"
@@ -44,12 +52,29 @@ REQUIRED_USE="test? ( yara )"
RESTRICT="!test? ( test )"
+src_prepare() {
+ default
+
+ if use test; then
+ # tests want the images in a common directory
+ mkdir "${T}/test_images" || die
+ mv "${WORKDIR}/${PN}-win-xp-laptop-2005-06-25.img" "${T}/test_images" || die
+ mv "${WORKDIR}/${PN}-linux-sample-1.bin" "${T}/test_images" || die
+ fi
+}
+
python_test() {
# see .github/workflows/test.yaml
+ "${EPYTHON}" "${S}/test/test_volatility.py" --volatility=volshell.py \
+ --image-dir "${T}/test_images" -k test_windows_volshell -v || \
+ die "Tests fail with ${EPYTHON}"
+ "${EPYTHON}" "${S}/test/test_volatility.py" --volatility=volshell.py \
+ --image-dir "${T}/test_images" -k test_linux_volshell -v || \
+ die "Tests fail with ${EPYTHON}"
"${EPYTHON}" "${S}/test/test_volatility.py" --volatility=vol.py \
- --image "${WORKDIR}/${PN}-win-xp-laptop-2005-06-25.img" -k test_windows -v || \
+ --image-dir "${T}/test_images" -k "test_windows and not test_windows_volshell" -v || \
die "Tests fail with ${EPYTHON}"
"${EPYTHON}" "${S}/test/test_volatility.py" --volatility=vol.py \
- --image "${WORKDIR}/${PN}-linux-sample-1.bin" -k test_linux -v || \
+ --image-dir "${T}/test_images" -k "test_linux and not test_linux_volshell" -v || \
die "Tests fail with ${EPYTHON}"
}
diff --git a/app-forensics/volatility3/volatility3-2.8.0.ebuild b/app-forensics/volatility3/volatility3-2.8.0-r2.ebuild
index f0db988c8286..e43f98faedb8 100644
--- a/app-forensics/volatility3/volatility3-2.8.0.ebuild
+++ b/app-forensics/volatility3/volatility3-2.8.0-r2.ebuild
@@ -21,7 +21,7 @@ SRC_URI="
"
S="${WORKDIR}"/${PN}-${MY_PV}
-LICENSE="GPL-2+"
+LICENSE="Volatility-1.0"
SLOT="0"
KEYWORDS="amd64 x86"
IUSE="crypt disasm jsonschema leechcore snappy test yara"
@@ -31,7 +31,11 @@ IUSE="crypt disasm jsonschema leechcore snappy test yara"
RDEPEND="
>=dev-python/pefile-2023.2.7[${PYTHON_USEDEP}]
crypt? ( >=dev-python/pycryptodome-3[${PYTHON_USEDEP}] )
- disasm? ( >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}] )
+ disasm?
+ (
+ >=dev-libs/capstone-3.0.5[python,${PYTHON_USEDEP}]
+ <dev-libs/capstone-6[python,${PYTHON_USEDEP}]
+ )
jsonschema? ( >=dev-python/jsonschema-2.3.0[${PYTHON_USEDEP}] )
leechcore? ( >=dev-python/leechcorepyc-2.4.0[${PYTHON_USEDEP}] )
snappy? ( app-arch/snappy:0/1.1 )