Prelude is a new innovative hybrid Intrusion Detection system designed
to be very modular, distributed, rock solid and fast.
The Prelude Log Monitoring Lackey monitors local logfiles and sends
alerts to the manager if something suspicious is found. It is also a sensor
WWW: http://www.prelude-ids.org/
===> The following configuration options are available for prelude-lml-1.0.1_8:
FAM=off: File Alteration Monitor support
===> Use 'make config' to modify these settings
security/libprelude: Take MAINTAINER'ship, STAGE & Modernize
- Take Maintainership
- Enable STAGE support
- Tweak MASTER_SITES https -> http (portlint)
- Add LICENSE and LICENSE_FILE
- Deprecate USE_AUTOTOOLS for libtool (-> USES)
- Sort USES and OPTIONS
- Use OPTIONS helpers as much as possible for now [1]
- Add --enable-static to CONFIGURE_ARGS to retain the static lib
- Assign and Use ETCDIR rather than hardcoding
- Use the install-strip install target
- Update pkg-plist, use @sample and other goodies
While I'm here, bump dependent ports since our SHLIB major version has
changed
[1] https://reviews.freebsd.org/D665
Approved by: portmgr (implicit, bump unstaged port)
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
Update Prelude-IDS ports to 1.0.1 release
security/libprelude:
- Remove BROKEN, update to version 1.0.1 [1]
- Add missing deps, port requires pkg-config during build
security/libpreludedb:
- Update to version 1.0.1p1
- Add missing deps
- Make options deterministic and not dependent on what's installed
security/prelude-lml:
- Update to version 1.0.1
- Add missing deps, port requires pkg-config during build
- Convert to OptionsNG
(Only the first 15 lines of the commit message are shown above )
The submitter points out that this service doesn't start because it relies
on the database to be up first, which given the previous REQUIRE line could
only have happened by accident. So change the REQUIRE to LOGIN, which matches
how we like ports scripts to run generally, and add postgresql mysql.
While I'm here:
1. Add a $FreeBSD$
2. Add KEYWORD: shutdown
3. Sort the structure to be more standard
4. Move the obviously non-optional flags to command_args
Bump PORTREVISION to reflect these changes.
Submitted by: ÐаÑнаков ÐиÑилл
<kiril@varnakov.net>
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk
(Only the first 15 lines of the commit message are shown above )
Bump portrevision due to upgrade of devel/gettext.
The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).
PR: ports/124340
Submitted by: edwin@
Approved by: portmgr (pav)
- Update to 0.9.10
Changelog prelude-lml:
- Ability to use regular expressions in plugins.rules to define
monitored sources, this can be very useful when combined to file
globing.
- [SPEEDUP] When the "*" keyword is used, the data is passed to the
upper layer without trying to match anything.
- Fix NULL pointer dereference when a rule reference an existing,
but empty context (fix #226).
- Remove deprecated use of prelude_client_print_setup_error(),
directly handled via prelude_perror().
- Make the log parser more robust.
PR: 112835
Submitted by: Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)
Remove USE_GPG from all effected ports. This knob is a no-op and the way it
was supposed to work is useless, because if we can't trust the distfile from
the remote machine, we can't trust the signature from the same machine either.
Our MD5 and SHA256 are good for checking both the sanity and the
trustiness of distfiles.
Approved by: portmgr (erwin), erwin (mentor)
- Update to 0.9.8.1
Changelog prelude-lml-0.9.8.1:
- Compile and run under OS X.
- Various portability fixes.
PR: ports/107011
Submitted by: Robin Gruyters <r.gruyters@yirdis.nl> (maintainer)
- Update to 0.9.11
- library version update of related ports
Changelog libprelude:
- Hook class comparison function. Accept NULL, equal, not equal operator.
- Introduce better error checking in the idmef-class API, which is now
considered public and might be used by external application. Rename
error code to reflect the API.
- Change to the way IDMEF listed element are handled. Specifying negative
number as the position of the element from the low level API now allow
to position the element at the specified (reversed) index. Using the
high level API a negative index permit to address a list of element
backward (replace an element).
- Build fixes for SWIG > 1.3.27.
- Modify idmef_value_match() so that it always unroll listed value
(do it for both val1 and val2. Remove assertion, and let
idmef_value_type_compare() return an error code in case there is an issue.
- Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as
path using an undefined list index on idmef_path_get() call.
- Make criteria parser accept (*) list index.
- Implement comparison function for all IDMEF object.
PR: ports/104328
Submitted by: maintainer (Robin Gruyters)
Approved by: portmgr (pav)
- Update to 0.9.6
Prelude-LML Changes:
- Fix a bug where some rules marked silent would trigger an alert.
- Load Sonicwall and Spamassassin ruleset by default.
- Fix rule syntax problem in Sonicwall ruleset.
- Fix rule indexing problem in Squid ruleset.
- Postfix rule consistency fix.
PR: ports/100063
Submitted by: maintainer (Robin Gruyters)
- Update to 0.9.3 (unbreaks fething)
- Add .../old/ subdir to MASTER_SITES so the port is still fetchable even
when the Prelude project releases a new version
PR: ports/93710
Submitted by: Robin Gruyters (maintainer)
Approved by: portmgr (krion)
- Transfer maintainership of the Prelude ports to the submitter,
who has kindly agreed to adopt them
PR: ports/93386
Submitted by: Robin Gruyters <r dot gruyters at yirdis dot nl>
- Update to 0.9.1
- Move log metadata dir from ${PREFIX}/etc/prelude-lml/metadata to
/var/spool/prelude-lml (upstream changed to ${PREFIX}/var/lib/prelude-lml,
use slightly modified location to better adhere to hier(7))
Prompted by: edwin's script
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
