# Created by: Muhammad Moinur Rahman <5u623l20@gmail.com>
# $FreeBSD: head/security/sguil/Makefile 412349 2016-04-01 14:25:16Z mat $
PORTNAME= sguil
PORTVERSION= 0.9.0
PORTREVISION= 1
CATEGORIES= security
MAINTAINER= bofh@FreeBSD.org
COMMENT= Sguil is a network security monitoring program
LICENSE= GPLv3
RUN_DEPENDS= tcltls>=0:devel/tcltls \
${LOCALBASE}/lib/tclx8.4/tclx.tcl:lang/tclX
USE_GITHUB= yes
GH_ACCOUNT= bammv
GH_TAGNAME= 0b16167
OPTIONS_DEFINE= DOCS
OPTIONS_DEFAULT= SERVER CLIENT SENSOR
OPTIONS_MULTI= INSTANCE
OPTIONS_MULTI_INSTANCE= SERVER CLIENT SENSOR
OPTIONS_GROUP= SERVER CLIENT SENSOR
OPTIONS_GROUP_SERVER= MYSQL
OPTIONS_GROUP_CLIENT= AUDIO SANCP WIRESHARK
OPTIONS_GROUP_SENSOR= PADS_SENSOR SANCP_SENSOR
OPTIONS_SUB= yes
SERVER_DESC= Install Sguil Server
CLIENT_DESC= Install Sguil Client
SENSOR_DESC= Install Sguil SENSOR
MYSQL_DESC= Depend on databases/mysqltcl
AUDIO_DESC= Install Festival Speech Synthesis
SANCP_DESC= Use sancp
PADS_SENSOR_DESC= Include pads sensor
SANCP_SENSOR_DESC= Include sancp sensor
WIRESHARK_DESC= Install wireshark
CLIENT_USES= tk:wrapper
SERVER_RUN_DEPENDS= p0f:net-mgmt/p0f \
tcpflow:net/tcpflow \
dtplite:devel/tcllib
CLIENT_RUN_DEPENDS= dtplite:devel/tcllib \
iwidgets>0:x11-toolkits/iwidgets \
gpg2:security/gnupg
SENSOR_RUN_DEPENDS= barnyard2:security/barnyard2-sguil
MYSQL_LIB_DEPENDS= mysqltcl>=3.052:databases/mysqltcl
AUDIO_RUN_DEPENDS= festival:audio/festival
SANCP_RUN_DEPENDS= sancp:security/sancp
WIRESHARK_RUN_DEPENDS= wireshark:net/wireshark
PADS_SENSOR_RUN_DEPENDS= pads:net-mgmt/pads
SANCP_SENSOR_RUN_DEPENDS= sancp:security/sancp
NO_BUILD= yes
TCL_VER= 8.5
TCLSH= tclsh${TCL_VER}
SERVER_SGUILDIR?= sguild
CLIENT_SGUILDIR?= sguil-client
SENSOR_SGUILDIR?= sguil-sensor
PLIST_SUB= SERVER_SGUILDIR=${SERVER_SGUILDIR} \
CLIENT_SGUILDIR=${CLIENT_SGUILDIR} \
SENSOR_SGUILDIR=${SENSOR_SGUILDIR}
SUB_LIST= SERVER_SGUILDIR=${SERVER_SGUILDIR} TCLSH=${TCLSH} \
CLIENT_SGUILDIR=${CLIENT_SGUILDIR} \
SENSOR_SGUILDIR=${SENSOR_SGUILDIR}
SERVER_CONFS= autocat.conf sguild.access sguild.email sguild.reports \
sguild.conf sguild.queries sguild.users
CLIENT_LIBFILES=SguilUtil.tcl dkffont.tcl email17.tcl extdata.tcl \
sellib.tcl sancp.tcl sound.tcl guilib.tcl qrybuild.tcl \
qrylib.tcl report.tcl stdquery.tcl whois.tcl
SENSOR_AGENTS= pcap_agent.tcl snort_agent.tcl
SENSOR_CONFS= pcap_agent.conf snort_agent.conf
LOG_SCRIPTS= log_packets-daemonlogger.sh log_packets.sh
USERS= sguil
GROUPS= sguil
PORTDOCS= ${COMMON_DOCS:S|^doc/||}
COMMON_DOCS= doc/CHANGES doc/FAQ doc/INSTALL doc/INSTALL.openbsd \
doc/OPENSSL.README doc/TODO doc/UPGRADE doc/USAGE \
doc/sguildb.dia
.include <bsd.port.options.mk>
.if ${PORT_OPTIONS:MCLIENT}
SUB_FILES= pkg-message-client
.endif
.if ${PORT_OPTIONS:MSERVER}
USE_RC_SUBR+= sguild
SUB_FILES= pkg-message-server
.endif
.if ${PORT_OPTIONS:MSENSOR}
USE_RC_SUBR+= pcap_agent snort_agent
SUB_FILES= pkg-message-sensor
WITH_PCRE= true
PORTDOCS+= README.daemonlogger
. if ${PORT_OPTIONS:MSANCP_SENSOR}
SENSOR_AGENTS+= sancp_agent.tcl pcap_agent-sancp.tcl
SENSOR_CONFS+= sancp_agent.conf sancp-indexed.conf pcap_agent-sancp.conf
USE_RC_SUBR+= sancp_agent pcap_agent-sancp
PORTDOCS+= README.sancp_indexed_pcap
. endif
. if ${PORT_OPTIONS:MPADS_SENSOR}
SENSOR_AGENTS+= pads_agent.tcl
SENSOR_CONFS+= pads_agent.conf
USE_RC_SUBR+= pads_agent
. endif
.endif
post-patch:
.if ${PORT_OPTIONS:MSERVER}
@${REINPLACE_CMD} 's|/bin/sh|${TCLSH}|' \
${WRKSRC}/server/sguild
@${MKDIR} ${STAGEDIR}${PREFIX}/etc/${SERVER_SGUILDIR} \
${STAGEDIR}${PREFIX}/lib/${SERVER_SGUILDIR} \
${STAGEDIR}${PREFIX}/share/${SERVER_SGUILDIR} \
${STAGEDIR}${PREFIX}/share/${SERVER_SGUILDIR}/contrib
.endif
.if ${PORT_OPTIONS:MCLIENT}
@${MKDIR} ${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR} \
${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/lib \
${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/images
.endif
.if ${PORT_OPTIONS:MSENSOR}
. for f in ${SENSOR_AGENTS}
@${REINPLACE_CMD} 's|/bin/sh|${PREFIX}/bin/${TCLSH}|' \
${WRKSRC}/sensor/${f}
. endfor
.endif
do-install:
.if ${PORT_OPTIONS:MSERVER}
(cd ${WRKSRC}/server/lib && \
${COPYTREE_BIN} \* ${STAGEDIR}${PREFIX}/lib/${SERVER_SGUILDIR})
(cd ${WRKSRC}/server/sql_scripts && \
${COPYTREE_SHARE} \* \
${STAGEDIR}${PREFIX}/share/${SERVER_SGUILDIR})
(cd ${WRKSRC}/server/contrib && \
${COPYTREE_SHARE} \* \
${STAGEDIR}${PREFIX}/share/${SERVER_SGUILDIR}/contrib)
${INSTALL_SCRIPT} ${WRKSRC}/server/sguild ${STAGEDIR}${PREFIX}/bin
. for f in ${SERVER_CONFS}
${INSTALL_DATA} ${WRKSRC}/server/${f} \
${STAGEDIR}${PREFIX}/etc/${SERVER_SGUILDIR}/${f}-sample
. endfor
.endif
.if ${PORT_OPTIONS:MCLIENT}
${INSTALL_SCRIPT} ${WRKSRC}/client/sguil.tk \
${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/sguil.tk
${INSTALL_DATA} ${WRKSRC}/client/sguil.conf \
${STAGEDIR}${PREFIX}/etc/sguil.conf-sample
(cd ${WRKSRC}/client/lib && ${INSTALL_DATA} ${CLIENT_LIBFILES} \
${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/lib)
(cd ${WRKSRC}/client/lib/images && \
${INSTALL_DATA} sguil_logo_h.gif checked.gif unchecked.gif \
${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/images)
(cd ${WRKSRC}/client/lib/tablelist5.11 && ${COPYTREE_SHARE} \* \
${STAGEDIR}${PREFIX}/bin/${CLIENT_SGUILDIR}/lib/tablelist5.11)
.endif
.if ${PORT_OPTIONS:MSENSOR}
@${MKDIR} ${STAGEDIR}${PREFIX}/bin/${SENSOR_SGUILDIR} \
${STAGEDIR}${PREFIX}/etc/${SENSOR_SGUILDIR} \
${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR} \
${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR}/contrib \
${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR}/init
(cd ${WRKSRC}/sensor/contrib && \
${COPYTREE_SHARE} \* \
${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR}/contrib \
"! -name ossec_agent.tcl.orig")
(cd ${WRKSRC}/sensor/init && \
${COPYTREE_SHARE} \* \
${STAGEDIR}${PREFIX}/share/${SENSOR_SGUILDIR}/init)
(cd ${WRKSRC}/sensor/ && \
${INSTALL_SCRIPT} ${SENSOR_AGENTS} \
${STAGEDIR}${PREFIX}/bin/${SENSOR_SGUILDIR})
(cd ${WRKSRC}/sensor && \
${INSTALL_SCRIPT} ${LOG_SCRIPTS} \
${STAGEDIR}${PREFIX}/bin/${SENSOR_SGUILDIR})
. for f in ${SENSOR_CONFS}
${INSTALL_DATA} ${WRKSRC}/sensor/${f} \
${STAGEDIR}${PREFIX}/etc/${SENSOR_SGUILDIR}/${f}-sample
. endfor
. if ${PORT_OPTIONS:MSANCP_SENSOR}
${INSTALL_SCRIPT} ${WRKSRC}/sensor/log_packets-sancp.sh \
${STAGEDIR}${PREFIX}/bin/${SENSOR_SGUILDIR}
${INSTALL_DATA} ${WRKSRC}/sensor/sancp/sancp.conf \
${STAGEDIR}${PREFIX}/etc/${SENSOR_SGUILDIR}/sancp.conf-sample
. endif
.endif
.if ${PORT_OPTIONS:MDOCS}
@${MKDIR} ${STAGEDIR}${DOCSDIR}
${INSTALL_DATA} ${COMMON_DOCS:S|^|${WRKSRC}/|} ${STAGEDIR}${DOCSDIR}
. if ${PORT_OPTIONS:MSENSOR}
${INSTALL_DATA} ${WRKSRC}/sensor/README.daemonlogger \
${STAGEDIR}${DOCSDIR}
. if ${PORT_OPTIONS:MSANCP_SENSOR}
${INSTALL_DATA} ${WRKSRC}/sensor/README.sancp_indexed_pcap \
${STAGEDIR}${DOCSDIR}
. endif
. endif
.endif
.include <bsd.port.mk>