Osiris is a Host Integrity Management System that periodically monitors
one or more hosts for change. It maintains detailed logs of changes to
the file system, user and group lists, resident kernel modules, and
more. Osiris can be configured to email these logs to the administrator.
Hosts are periodically scanned and, if desired, the records can be
maintained for forensic purposes. Osiris keeps an administrator apprised
of possible attacks and/or nasty little trojans. The purpose here is
to isolate changes that indicate a break-in or a compromised system.
Osiris makes use of OpenSSL for encryption and authentication in all
components.
WWW: http://osiris.shmoo.com/
===> The following configuration options are available for osiris-4.2.3_4:
CLI=off: Management CLI
OSIRISD=on: Scan agent
OSIRISMD=off: Management daemon
PRINTDB=off: Database print tool
===> Use 'make config' to modify these settings
Update maintainer address.
Trim headers where applicable and in the cases where the maintainer
is the original author remove the headers entirely.
Update mirror to point to the newer location (old one redirected).
Submitted by: Nicolas Jombart <ecu@200ok.org> (maintainer, private mail)
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
(Only the first 15 lines of the commit message are shown above )
- Add readline as dependency when it was already installed. The program
will be linked against it anyway, not against a system one.
PR: ports/101439
Submitted by: Stanislav Sedov <ssedov at mbsd.msk.ru>
Approved by: David Thiel <lx at redundancy.redundancy.org> (maintainer)
- Updating the Osiris integrity checking system to 4.2.1. This version includes
the format string exploit fixes that were also in the patch in 4.2.0_1 (hence
removed).
- Also updating master site to the new official one.
PR: ports/100952
Submitted by: David Thiel (maintainer)
Patching osiris in response to CVE-2006-3120.
"Ulf Harnhammar and Max Vozeler from the Debian Security Audit Project
have found several format string security bugs in osiris, a network-wide
system integrity monitor control interface. A remote attacker could
exploit them and cause a denial of service or execute arbitrary code."
PR: ports/100793
Submitted by: David Thiel (maintainer)
Security: CVE-2006-3120
Update to 4.2.0
scan command now pushes baseline database to host.
added import-filters command (developer submission).
auth.db passwords are now encrypted (hashed).
mod_ports has new params to ignore certain port numbers.
added -q option to console, to not log to system log.
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
Update to 4.1.2:
- fixed notification email bug with url not being added to email.
- fixed http_host field not being used for log reports URLs.
PR: ports/77522
Submitted by: David Thiel (maintainer)
- There was a bug that caused osirisd not to start if built without osirismd
because of the lack of a ${PREFIX}/osiris directory. This is now created no
matter what options are set.
PR: ports/77221
Submitted by: David Thiel <lx@redundancy.redundancy.org> (maintainer)
Update: security/osiris 4.0.6 -> 4.0.8
Updating the Osiris integrity checker to 4.0.8. From changelog:
FIXED:
: updated copyrights.
: cli stat of editor incorrect.
: utilities.c, escape filename bug in octal handling.
: fixed memory leak in regex file filter hs_regfree missing.
FEATURES:
: port of host.conf config keyword from the 4.1 branch.
PR: ports/76481
Submitted by: David Thiel <lx@redundancy.redundancy.org>
Update: security/osiris 4.0.5 -> 4.0.6
Updating the Osiris integrity checking system to 4.0.6. PDF
and RTF docs were removed from the plist and makefile, as
they were removed from the distribution. They are available
in HTML format on the Osiris homepage.
Code changes:
FIXED:
: typo in generic osirismd rc script.
: changed verify cert depth to 10, from 4.
: moved 'continue' prompt to beginning of installer, where it should be.
: fixed regular expression filter value bug with parens.
FEATURES:
: added default config for Linksys WRT54G(S).
: changed notification subject lines for easier parsing.
PR: ports/74336
Submitted by: David Thiel <lx@redundancy.redundancy.org>
Updating the Osiris integrity checker to 4.0.3. Many changes from the
(now unsupported) 2.x.x series, including a more modular design, support
for monitoring user/group databases and kernel extensions, more flexible
configuration syntax, and improved logging.
PR: ports/68790
Submitted by: maintainer
- Update to 2.4.4, a more recent stable version
- Pass maintainership to the submitter
PR: ports/63077
Submitted by: David Thiel <lx@redundancy.redundancy.org>
Approved by: Nicolas Jombart (current maintainer)
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
