Ticket #42535: Portfile

# -*- coding: utf-8; mode: tcl; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- vim:fenc=utf-8:ft=tcl:et:sw=4:ts=4:sts=4
# $Id$

PortSystem          1.0

name                samhain
version             3.1.2
categories          security
platforms           darwin
maintainers         nomaintainer
license             GPL

description         host-based intrusion detection system

long_description    The Samhain host-based intrusion detection system \
                    (HIDS) provides file integrity checking and log \
                    file monitoring/analysis, as well as rootkit \
                    detection, port monitoring, detection of rogue \
                    SUID executables, and hidden processes. \
                    Samhain been designed to monitor multiple hosts \
                    with potentially different operating systems, \
                    providing centralized logging and maintenance, \
                    although it can also be used as standalone \
                    application on a single host. \
                    Samhain is an open-source multiplatform \
                    application for POSIX systems (Unix, Linux, \
                    Cygwin/Windows).

homepage            http://www.la-samhna.de/samhain/
master_sites        ${homepage}/
distname            ${name}-current
set worksrcpath     ${workpath}/${name}-${version}

checksums           rmd160  04ca91282fd3cbf0f7f291c6ba7e46a1c119d772 \
                    sha256  840218137a4c77970fa9f61c5f79d05de4bb2b287736a55d771125c94f9a51fc

depends_lib         port:pcre port:zlib

## http://devloop.users.sourceforge.net/index.php?article68/initiation-au-systeme-de-detection-d-intrusion-samhain

## Not using '--enable-login-watch' as wtmp/utmp is deprecated on macosx (or /private/var/run/utmpx ?)
## --enable-process-check: Undefined symbols for architecture x86_64: "_sched_getparam", referenced from:
configure.args      --mandir=${prefix}/share/man \
                    --enable-userfiles \
                    --enable-port-check \
                    --enable-logfile-monitor

# apple clang-500.2.79: "error: ran out of registers during register allocation" => OK w gcc 4.9
configure.compiler  macports-gcc-4.9
## FIXME! need review to adjust blacklist
#compiler.blacklist {clang < 501}
## clang: "error: inline assembly requires more registers than available"
#compiler.blacklist clang macports-clang
## llvm-gcc42: "cc1: error in backend: Ran out of registers during register allocation!"
compiler.blacklist clang macports-clang llvm-gcc-4.2
# FIXME! => still selecting llvm-gcc-4.2 ???

post-extract {
    ## double tar (for pgp signature)
    system "cd ${workpath} && tar xzf ${workpath}/${name}-${version}${extract.suffix}"

    copy ${filespath}/org.macports.samhain.plist.example ${worksrcpath}/
}
post-patch {
    reinplace "s|%%PREFIX%%|${prefix}|g" ${worksrcpath}/org.macports.samhain.plist.example
}

post-destroot {
    xinstall -d ${destroot}${prefix}/share/${name}
    ## Note: no installing test suite as it need source directory
    #copy ${worksrcpath}/test ${destroot}${prefix}/share/${name}/
    copy ${worksrcpath}/scripts ${destroot}${prefix}/share/${name}/
    copy ${worksrcpath}/sql_init ${destroot}${prefix}/share/${name}/
    
    xinstall -d ${destroot}${prefix}/share/doc/${name}
    foreach file [glob -directory ${worksrcpath}/docs *] {
        copy ${file} ${destroot}${prefix}/share/doc/${name}/
    }

    xinstall -d ${destroot}${prefix}/var/lib/${name}

## FIXME! fails w variant +server
    move ${destroot}${prefix}/etc/samhainrc ${destroot}${prefix}/share/${name}/samhainrc.sample
    copy ${worksrcpath}/org.macports.samhain.plist.example ${destroot}${prefix}/share/${name}/org.macports.samhain.plist.example

    if {[getuid] == 0} {

        xinstall -d ${destroot}${prefix}/etc/LaunchDaemons/org.macports.samhain
        xinstall -d ${destroot}/Library/LaunchDaemons
        xinstall -m 644 ${destroot}${prefix}/share/${name}/org.macports.samhain.plist.example \
        ${destroot}${prefix}/etc/LaunchDaemons/org.macports.samhain/org.macports.samhain.plist
        ln -sf "${prefix}/etc/LaunchDaemons/org.macports.samhain/org.macports.samhain.plist" "${destroot}/Library/LaunchDaemons/org.macports.samhain.plist"
    }
}

destroot.keepdirs  ${destroot}${prefix}/var/lib/${name}

notes "
If not existing, a default config file has been created in
  ${prefix}/etc/samhainrc

Initialize database with
  # samhain -t init -p info

A default scheduled task has been set up once a day in
  ${prefix}/Library/LaunchDaemons/org.macports.${name}.plist
Check if it fit you and start it like
  # ln -s ${prefix}/Library/LaunchDaemons/org.macports.${name}.plist /Library/LaunchDaemons/
  # launchctl load -w /Library/LaunchDaemons/org.macports.${name}.plist
It only checks against database. You have to do the update yourself.

"

post-activate {
    if ![file exists ${prefix}/etc/samhainrc] {
        copy ${prefix}/share/${name}/samhainrc.sample ${prefix}/etc/samhainrc
    }
}

livecheck.type      regex
livecheck.url       ${homepage}/s_download.html
livecheck.regex     "<td>Version (\\d+\\.\\d+\\.\\d+)</td>"

variant client description { build network client } {
    configure.args-append --enable-network=client
}

variant server description { build yule server to centralize databases } {
    configure.args-append --enable-network=server

    startupitem.create      yes
    #startupitem.logfile     ${prefix}/var/log/yule.log
    startupitem.executable  ${prefix}/sbin/yule

}

variant suidcheck description { add suid files checking } {
    ## Attention! very I/O expensive
    configure.args-append --enable-suidcheck
}

variant prelude description { add prelude bindings } {
    depends_lib-append port:libprelude
    configure.args-append --with-prelude
}

variant nagios description { add nagios script to monitor samhain } {
    depends_build-append port:nagios
    post-destroot {
        xinstall -d ${destroot}${prefix}/libexec/nagios/
        copy ${worksrcpath}/scripts/check_samhain.pl ${destroot}${prefix}/libexec/nagios/
    }
}

variant mysql description { use mysql as backend } {
    depends_lib           port:mysql5
    configure.args-append --with-database=mysql --enable-xml-log
}

variant postgresql description { use postgresql as backend } {
    depends_lib           port:postgresql93
    configure.args-append --with-database=postgresql --enable-xml-log
}

variant oracle description { use oracle as backend } {
    depends_lib           port:oracle-instantclient
    configure.args-append --with-database=oracle --enable-xml-log
}

variant odbc description { use odbc as backend } {
    depends_lib           port:unixODBC
    configure.args-append --with-database=odbc --enable-xml-log
}