From b49088575eb777ced2551f484da86317332d6087 Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Sat, 24 Jul 2021 02:11:45 +0100 Subject: gentoo resync : 24.07.2021 --- app-admin/sagan/sagan-2.0.1-r5.ebuild | 132 ++++++++++++++++++++++++++++++++++ 1 file changed, 132 insertions(+) create mode 100644 app-admin/sagan/sagan-2.0.1-r5.ebuild (limited to 'app-admin/sagan/sagan-2.0.1-r5.ebuild') diff --git a/app-admin/sagan/sagan-2.0.1-r5.ebuild b/app-admin/sagan/sagan-2.0.1-r5.ebuild new file mode 100644 index 000000000000..77ee263296c7 --- /dev/null +++ b/app-admin/sagan/sagan-2.0.1-r5.ebuild @@ -0,0 +1,132 @@ +# Copyright 1999-2021 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +inherit autotools flag-o-matic tmpfiles systemd + +DESCRIPTION="Sagan is a multi-threaded, real time system and event log monitoring system" +HOMEPAGE="https://sagan.quadrantsec.com/" +SRC_URI="https://sagan.quadrantsec.com/download/${P}.tar.gz" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="amd64 x86" +IUSE="geoip +libdnet mysql redis +pcap smtp" + +BDEPEND="virtual/pkgconfig" +DEPEND=" + acct-group/sagan + acct-user/sagan + app-admin/sagan-rules + dev-libs/libestr + dev-libs/libfastjson:= + dev-libs/liblognorm + dev-libs/libpcre + dev-libs/libyaml + geoip? ( dev-libs/geoip ) + redis? ( dev-libs/hiredis ) + pcap? ( net-libs/libpcap ) + smtp? ( net-libs/libesmtp ) +" + +# Package no longer logs directly to a database +# and relies on Unified2 format to accomplish it +RDEPEND=" + ${DEPEND} + mysql? ( net-analyzer/barnyard2[mysql] ) +" + +REQUIRED_USE="mysql? ( libdnet )" + +DOCS=( AUTHORS ChangeLog FAQ INSTALL README NEWS TODO ) + +src_prepare() { + default + + eautoreconf +} + +src_configure() { + append-flags -fcommon + + # TODO: poke at strstr logic and enable/disable CPU_FLAGS_X86_* + # accordingly? + # Note that not all of these are used: + # https://github.com/quadrantsec/sagan/blob/main/m4/ax_ext.m4 + local myeconfargs=( + --enable-lognorm + $(use_enable smtp esmtp) + $(use_enable redis) + $(use_enable pcap libpcap) + $(use_enable geoip) + ) + + econf "${myeconfargs[@]}" +} + +src_install() { + default + + # No need to create this at build/install time + rm -r "${ED}"/var/run/ || die + + # Fix paths in config file + sed -i \ + -e "s:/usr/local/:${EPREFIX}/:" \ + -e "s:/var/run/sagan:${EPREFIX}/run/sagan:" \ + "${ED}"/etc/sagan.yaml || die + + diropts -g sagan -o sagan -m 750 + # bug #775902 + keepdir /var/sagan/{,fifo} + keepdir /var/log/sagan/{,stats} + + fowners sagan:sagan /var/log/sagan/{,stats} + + touch "${ED}"/var/log/sagan/sagan.log || die + fowners sagan:sagan /var/log/sagan/sagan.log || die + + newinitd "${FILESDIR}"/sagan.init-r1 sagan + newconfd "${FILESDIR}"/sagan.confd sagan + + systemd_dounit "${FILESDIR}"/sagan.service + newtmpfiles "${FILESDIR}"/sagan.tmpfiles sagan.conf + + insinto /etc/logrotate.d + newins "${FILESDIR}"/sagan.logrotate sagan + + docinto examples + dodoc -r extra/* +} + +pkg_preinst() { + # bug #775902 revealed that we need 750 on /var/log/sagan or e.g. + # logrotate will fail. Let's inform the user to fix up permissions + # in such a case. + # (fperms won't modify the live filesystem.) + HAD_BROKEN_PERMS=0 + + if has_version "