diff options
author | Sam James <sam@gentoo.org> | 2020-07-17 21:01:45 +0000 |
---|---|---|
committer | Sam James <sam@gentoo.org> | 2020-07-17 23:59:48 +0000 |
commit | 96587d39bdb2cdbd29a66ec50af93b2b82510f9e (patch) | |
tree | 49d4a91dd020c009b624566649fc0a6990f4d966 /net-analyzer | |
parent | www-misc/awstats: security cleanup (diff) | |
download | gentoo-96587d39bdb2cdbd29a66ec50af93b2b82510f9e.tar.gz gentoo-96587d39bdb2cdbd29a66ec50af93b2b82510f9e.tar.bz2 gentoo-96587d39bdb2cdbd29a66ec50af93b2b82510f9e.zip |
net-analyzer/ossec-hids: security cleanup
Bug: https://bugs.gentoo.org/707826
Package-Manager: Portage-2.3.103, Repoman-2.3.23
Signed-off-by: Sam James <sam@gentoo.org>
Diffstat (limited to 'net-analyzer')
-rw-r--r-- | net-analyzer/ossec-hids/Manifest | 3 | ||||
-rw-r--r-- | net-analyzer/ossec-hids/files/makefile-3.2.0.patch | 28 | ||||
-rw-r--r-- | net-analyzer/ossec-hids/files/makefile-3.3.0.patch | 28 | ||||
-rw-r--r-- | net-analyzer/ossec-hids/files/makefile.patch | 28 | ||||
-rw-r--r-- | net-analyzer/ossec-hids/ossec-hids-3.1.0.ebuild | 68 | ||||
-rw-r--r-- | net-analyzer/ossec-hids/ossec-hids-3.2.0-r1.ebuild | 64 | ||||
-rw-r--r-- | net-analyzer/ossec-hids/ossec-hids-3.2.0.ebuild | 63 | ||||
-rw-r--r-- | net-analyzer/ossec-hids/ossec-hids-3.3.0.ebuild | 67 |
8 files changed, 0 insertions, 349 deletions
diff --git a/net-analyzer/ossec-hids/Manifest b/net-analyzer/ossec-hids/Manifest index 993d4d047a7e..a88003bb41c7 100644 --- a/net-analyzer/ossec-hids/Manifest +++ b/net-analyzer/ossec-hids/Manifest @@ -1,4 +1 @@ -DIST ossec-hids-3.1.0.tar.gz 1886469 BLAKE2B c175c8659a8b5d0d269a5cb6bf142276f29e6f676afc6029accf854d68299d71147ba65a667601e77c6db8ca49a29afa49534e5683369f420f6389059ae61fc3 SHA512 fe55f82ac354d9fcd767d8379a492279644308788535780bb029d46688c93f259771686462570137555b40082c6756daad44bbdd1ddc953ed0bb22b65c6cb566 -DIST ossec-hids-3.2.0.tar.gz 1896977 BLAKE2B d77cff3a3a72287ad2235f346c7d07cfdad83872d956f57877ed44ad21bb717e4b4ddcfd0e8b2ce45cb90160bb63a28a7d06bc6225b53cc5ed42f7a97c5a1765 SHA512 40b25b97c43a66b8a145914ab0badd9d4f7de7d2168aa7a49abdf778c620a4b533ce3de0883d26c4c39816cf78674a053788a57c5f9c38fbea7cd8b13a35d18f -DIST ossec-hids-3.3.0.tar.gz 1900070 BLAKE2B a18a1e55ba44450c634b59099f10b674d27b2079ff456a034dc7bb4bbaf3c89b96f197515f3fb7aa54c248643f333e830a519b04cd4a9402cec2c32597fd96b2 SHA512 97c7e7b21ce88a3f1c89b79ff74b0c13804ba313cf3f30b98bcb4011f422ca050876e780c30624812d399d6b5c59629e52f6772b9ee0cd7cead1d66044dca627 DIST ossec-hids-3.6.0.tar.gz 1921753 BLAKE2B ca33a94d09265c94dbdb99e2b9637d1e062f39ab88837a5c8f089d64a6369c1bef1e010b18ac4713cd4965dcf189bb1c2866fd33813cd94ae34ac04182070580 SHA512 1f5e897de757df264dfb56def74b7d8f886b6b9d772b5b3d0197c9cd00a32fd7fd8a7b53566851fea3cd74d433b5594cbd074e50b7dbe36305fb3c243e8ddcf5 diff --git a/net-analyzer/ossec-hids/files/makefile-3.2.0.patch b/net-analyzer/ossec-hids/files/makefile-3.2.0.patch deleted file mode 100644 index 810bc077d438..000000000000 --- a/net-analyzer/ossec-hids/files/makefile-3.2.0.patch +++ /dev/null @@ -1,28 +0,0 @@ ---- a/Makefile 2019-03-09 16:33:13.465947636 +0100 -+++ b/Makefile 2019-03-09 16:32:57.105946856 +0100 -@@ -370,7 +370,6 @@ - install-server: install-server-generic - - install-common: build -- ./init/adduser.sh ${OSSEC_USER} ${OSSEC_USER_MAIL} ${OSSEC_USER_REM} ${OSSEC_GROUP} ${PREFIX} - $(call INSTALL_CMD,0550,root,${OSSEC_GROUP}) -d ${PREFIX}/ - $(call INSTALL_CMD,0750,${OSSEC_USER},${OSSEC_GROUP}) -d ${PREFIX}/logs - $(call INSTALL_CMD,0660,${OSSEC_USER},${OSSEC_GROUP}) /dev/null ${PREFIX}/logs/ossec.log -@@ -1160,7 +1159,7 @@ - #### test ########## - #################### - --CFLAGS_TEST = -g -O0 --coverage -+CFLAGS_TEST = -g -O0 - - LDFLAGS_TEST = -lcheck -lm -pthread -lrt - -@@ -1171,7 +1170,7 @@ - - test_programs = test_os_zlib test_os_xml test_os_regex test_os_crypto test_shared - --.PHONY: test run_tests build_tests test_valgrind test_coverage -+.PHONY: test run_tests build_tests test_valgrind - - test: build_tests - ${MAKE} run_tests diff --git a/net-analyzer/ossec-hids/files/makefile-3.3.0.patch b/net-analyzer/ossec-hids/files/makefile-3.3.0.patch deleted file mode 100644 index 810bc077d438..000000000000 --- a/net-analyzer/ossec-hids/files/makefile-3.3.0.patch +++ /dev/null @@ -1,28 +0,0 @@ ---- a/Makefile 2019-03-09 16:33:13.465947636 +0100 -+++ b/Makefile 2019-03-09 16:32:57.105946856 +0100 -@@ -370,7 +370,6 @@ - install-server: install-server-generic - - install-common: build -- ./init/adduser.sh ${OSSEC_USER} ${OSSEC_USER_MAIL} ${OSSEC_USER_REM} ${OSSEC_GROUP} ${PREFIX} - $(call INSTALL_CMD,0550,root,${OSSEC_GROUP}) -d ${PREFIX}/ - $(call INSTALL_CMD,0750,${OSSEC_USER},${OSSEC_GROUP}) -d ${PREFIX}/logs - $(call INSTALL_CMD,0660,${OSSEC_USER},${OSSEC_GROUP}) /dev/null ${PREFIX}/logs/ossec.log -@@ -1160,7 +1159,7 @@ - #### test ########## - #################### - --CFLAGS_TEST = -g -O0 --coverage -+CFLAGS_TEST = -g -O0 - - LDFLAGS_TEST = -lcheck -lm -pthread -lrt - -@@ -1171,7 +1170,7 @@ - - test_programs = test_os_zlib test_os_xml test_os_regex test_os_crypto test_shared - --.PHONY: test run_tests build_tests test_valgrind test_coverage -+.PHONY: test run_tests build_tests test_valgrind - - test: build_tests - ${MAKE} run_tests diff --git a/net-analyzer/ossec-hids/files/makefile.patch b/net-analyzer/ossec-hids/files/makefile.patch deleted file mode 100644 index 2169b5287fd7..000000000000 --- a/net-analyzer/ossec-hids/files/makefile.patch +++ /dev/null @@ -1,28 +0,0 @@ ---- a/Makefile 2018-10-12 00:25:16.000000000 +0200 -+++ b/Makefile 2018-10-26 17:59:44.458689842 +0200 -@@ -378,7 +378,6 @@ - install-server: install-server-generic - - install-common: build -- ./init/adduser.sh ${OSSEC_USER} ${OSSEC_USER_MAIL} ${OSSEC_USER_REM} ${OSSEC_GROUP} ${PREFIX} - install -d -m 0550 -o root -g ${OSSEC_GROUP} ${PREFIX}/ - install -d -m 0750 -o ${OSSEC_USER} -g ${OSSEC_GROUP} ${PREFIX}/logs - install -m 0660 -o ${OSSEC_USER} -g ${OSSEC_GROUP} /dev/null ${PREFIX}/logs/ossec.log -@@ -1166,7 +1165,7 @@ - #### test ########## - #################### - --CFLAGS_TEST = -g -O0 --coverage -+CFLAGS_TEST = -g -O0 - - LDFLAGS_TEST = -lcheck -lm -pthread -lrt - -@@ -1177,7 +1176,7 @@ - - test_programs = test_os_zlib test_os_xml test_os_regex test_os_crypto test_shared - --.PHONY: test run_tests build_tests test_valgrind test_coverage -+.PHONY: test run_tests build_tests test_valgrind - - test: build_tests - ${MAKE} run_tests diff --git a/net-analyzer/ossec-hids/ossec-hids-3.1.0.ebuild b/net-analyzer/ossec-hids/ossec-hids-3.1.0.ebuild deleted file mode 100644 index 9df4ea46973f..000000000000 --- a/net-analyzer/ossec-hids/ossec-hids-3.1.0.ebuild +++ /dev/null @@ -1,68 +0,0 @@ -# Copyright 1999-2018 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -inherit user - -DESCRIPTION="Open Source Host-based Intrusion Detection System" -HOMEPAGE="https://www.ossec.net/" -SRC_URI="https://github.com/ossec/ossec-hids/archive/${PV}.tar.gz -> ${P}.tar.gz" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~amd64" -IUSE="agent hybrid local mysql postgres server sqlite" -REQUIRED_USE="^^ ( agent hybrid local server ) - ?? ( mysql postgres )" - -DEPEND="mysql? ( virtual/mysql ) - sqlite? ( dev-db/sqlite:3 ) - postgres? ( dev-db/postgresql:= ) - sys-libs/zlib:=" -RDEPEND="${DEPEND}" -S="${WORKDIR}/${P}/src" - -declare -a MY_OPT - -pkg_setup() { - enewuser ossec -1 -1 /var/ossec - enewuser ossecm -1 -1 -1 ossec - enewuser ossecr -1 -1 -1 ossec -} - -src_prepare() { - default - eapply "${FILESDIR}/makefile.patch" -} - -src_configure() { - local target="local" - use agent && target="agent" - use hybrid && target="hybrid" - use server && target="server" - MY_OPT=( - TARGET=${target} - USE_SQLITE=$(usex sqlite) - V=0 - ZLIB_SYSTEM=yes - ) - use mysql && MY_OPT+=( DATABASE=mysql ) - use postgres && MY_OPT+=( DATABASE=pgsql ) -} - -src_compile() { - emake "${MY_OPT[@]}" PREFIX=/var/ossec -} - -src_test() { - emake "${MY_OPT[@]}" PREFIX=/var/ossec test -} - -src_install() { - keepdir /var/ossec/logs/{alerts,archives,firewall} - keepdir /var/ossec/lua/{compiled,native} - keepdir /var/ossec/queue/{agent-info,agentless,alerts,diff,fts,ossec,rids,rootcheck,syscheck} - keepdir /var/ossec/{.ssh,stats,tmp,var/run} - emake "${MY_OPT[@]}" PREFIX="${D}/var/ossec" install -} diff --git a/net-analyzer/ossec-hids/ossec-hids-3.2.0-r1.ebuild b/net-analyzer/ossec-hids/ossec-hids-3.2.0-r1.ebuild deleted file mode 100644 index 61c466015956..000000000000 --- a/net-analyzer/ossec-hids/ossec-hids-3.2.0-r1.ebuild +++ /dev/null @@ -1,64 +0,0 @@ -# Copyright 1999-2019 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -inherit user - -DESCRIPTION="Open Source Host-based Intrusion Detection System" -HOMEPAGE="https://www.ossec.net/" -SRC_URI="https://github.com/ossec/ossec-hids/archive/${PV}.tar.gz -> ${P}.tar.gz" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="amd64" -IUSE="agent hybrid local mysql postgres server sqlite" -REQUIRED_USE="^^ ( agent hybrid local server ) - ?? ( mysql postgres )" - -DEPEND="mysql? ( virtual/mysql ) - sqlite? ( dev-db/sqlite:3 ) - postgres? ( dev-db/postgresql:= )" -RDEPEND="${DEPEND}" -S="${WORKDIR}/${P}/src" -PATCHES=( "${FILESDIR}/makefile-${PV}.patch" ) - -declare -a MY_OPT - -pkg_setup() { - enewuser ossec -1 -1 /var/ossec - enewuser ossecm -1 -1 -1 ossec - enewuser ossecr -1 -1 -1 ossec -} - -src_configure() { - local target="local" - use agent && target="agent" - use hybrid && target="hybrid" - use server && target="server" - MY_OPT=( - TARGET=${target} - USE_SQLITE=$(usex sqlite) - V=0 - ZLIB_SYSTEM=yes - ) - use mysql && MY_OPT+=( DATABASE=mysql ) - use postgres && MY_OPT+=( DATABASE=pgsql ) -} - -src_compile() { - emake "${MY_OPT[@]}" PREFIX=/var/ossec -} - -src_test() { - emake "${MY_OPT[@]}" PREFIX=/var/ossec test -} - -src_install() { - keepdir /var/ossec/logs/{alerts,archives,firewall} - keepdir /var/ossec/lua/{compiled,native} - keepdir /var/ossec/queue/{agent-info,agentless,alerts,diff,fts,ossec,rids,rootcheck,syscheck} - keepdir /var/ossec/{.ssh,stats,tmp,var/run} - newenvd - 50ossec-hids <<<'CONFIG_PROTECT="/var/ossec/etc"' - emake "${MY_OPT[@]}" PREFIX="${D}/var/ossec" install -} diff --git a/net-analyzer/ossec-hids/ossec-hids-3.2.0.ebuild b/net-analyzer/ossec-hids/ossec-hids-3.2.0.ebuild deleted file mode 100644 index 417ebde460d4..000000000000 --- a/net-analyzer/ossec-hids/ossec-hids-3.2.0.ebuild +++ /dev/null @@ -1,63 +0,0 @@ -# Copyright 1999-2019 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -inherit user - -DESCRIPTION="Open Source Host-based Intrusion Detection System" -HOMEPAGE="https://www.ossec.net/" -SRC_URI="https://github.com/ossec/ossec-hids/archive/${PV}.tar.gz -> ${P}.tar.gz" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~amd64" -IUSE="agent hybrid local mysql postgres server sqlite" -REQUIRED_USE="^^ ( agent hybrid local server ) - ?? ( mysql postgres )" - -DEPEND="mysql? ( virtual/mysql ) - sqlite? ( dev-db/sqlite:3 ) - postgres? ( dev-db/postgresql:= )" -RDEPEND="${DEPEND}" -S="${WORKDIR}/${P}/src" -PATCHES=( "${FILESDIR}/makefile-${PV}.patch" ) - -declare -a MY_OPT - -pkg_setup() { - enewuser ossec -1 -1 /var/ossec - enewuser ossecm -1 -1 -1 ossec - enewuser ossecr -1 -1 -1 ossec -} - -src_configure() { - local target="local" - use agent && target="agent" - use hybrid && target="hybrid" - use server && target="server" - MY_OPT=( - TARGET=${target} - USE_SQLITE=$(usex sqlite) - V=0 - ZLIB_SYSTEM=yes - ) - use mysql && MY_OPT+=( DATABASE=mysql ) - use postgres && MY_OPT+=( DATABASE=pgsql ) -} - -src_compile() { - emake "${MY_OPT[@]}" PREFIX=/var/ossec -} - -src_test() { - emake "${MY_OPT[@]}" PREFIX=/var/ossec test -} - -src_install() { - keepdir /var/ossec/logs/{alerts,archives,firewall} - keepdir /var/ossec/lua/{compiled,native} - keepdir /var/ossec/queue/{agent-info,agentless,alerts,diff,fts,ossec,rids,rootcheck,syscheck} - keepdir /var/ossec/{.ssh,stats,tmp,var/run} - emake "${MY_OPT[@]}" PREFIX="${D}/var/ossec" install -} diff --git a/net-analyzer/ossec-hids/ossec-hids-3.3.0.ebuild b/net-analyzer/ossec-hids/ossec-hids-3.3.0.ebuild deleted file mode 100644 index c9b83c7daa34..000000000000 --- a/net-analyzer/ossec-hids/ossec-hids-3.3.0.ebuild +++ /dev/null @@ -1,67 +0,0 @@ -# Copyright 1999-2019 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=7 - -inherit user - -DESCRIPTION="Open Source Host-based Intrusion Detection System" -HOMEPAGE="https://www.ossec.net/" -SRC_URI="https://github.com/ossec/ossec-hids/archive/${PV}.tar.gz -> ${P}.tar.gz" - -LICENSE="GPL-2" -SLOT="0" -KEYWORDS="~amd64" -IUSE="agent hybrid local mysql postgres server sqlite" -REQUIRED_USE="^^ ( agent hybrid local server ) - ?? ( mysql postgres )" - -DEPEND="dev-libs/libpcre2 - mysql? ( virtual/mysql ) - sqlite? ( dev-db/sqlite:3 ) - postgres? ( dev-db/postgresql:= )" -RDEPEND="${DEPEND}" -S="${WORKDIR}/${P}/src" -PATCHES=( "${FILESDIR}/makefile-${PV}.patch" ) - -declare -a MY_OPT - -pkg_setup() { - enewgroup ossec - enewuser ossec -1 -1 /var/ossec ossec - enewuser ossecm -1 -1 -1 ossec - enewuser ossecr -1 -1 -1 ossec -} - -src_configure() { - local target="local" - use agent && target="agent" - use hybrid && target="hybrid" - use server && target="server" - MY_OPT=( - PCRE2_SYSTEM=yes - TARGET=${target} - USE_SQLITE=$(usex sqlite) - V=0 - ZLIB_SYSTEM=yes - ) - use mysql && MY_OPT+=( DATABASE=mysql ) - use postgres && MY_OPT+=( DATABASE=pgsql ) -} - -src_compile() { - emake "${MY_OPT[@]}" PREFIX=/var/ossec -} - -src_test() { - emake "${MY_OPT[@]}" PREFIX=/var/ossec test -} - -src_install() { - keepdir /var/ossec/logs/{alerts,archives,firewall} - keepdir /var/ossec/lua/{compiled,native} - keepdir /var/ossec/queue/{agent-info,agentless,alerts,diff,fts,ossec,rids,rootcheck,syscheck} - keepdir /var/ossec/{.ssh,stats,tmp,var/run} - newenvd - 50ossec-hids <<<'CONFIG_PROTECT="/var/ossec/etc"' - emake "${MY_OPT[@]}" PREFIX="${D}/var/ossec" install -} |