aboutsummaryrefslogtreecommitdiffstats
path: root/main/snort/APKBUILD
diff options
context:
space:
mode:
Diffstat (limited to 'main/snort/APKBUILD')
-rw-r--r--main/snort/APKBUILD106
1 files changed, 56 insertions, 50 deletions
diff --git a/main/snort/APKBUILD b/main/snort/APKBUILD
index 13afbb45201..2b6cdb69e2f 100644
--- a/main/snort/APKBUILD
+++ b/main/snort/APKBUILD
@@ -1,80 +1,86 @@
+# Contributor: Steve McMaster <code@mcmaster.io>
# Contributor: Karim Kanso <kaz.kanso@gmail.com>
# Contributor: Michael Mason <ms13sp@gmail.com>
# Contributor: Leonardo Arena <rnalrd@alpinelinux.org>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=snort
-pkgver=2.9.19
+# pair with snort-extra
+pkgver=3.1.82.0
pkgrel=0
-pkgdesc="An open source network intrusion prevention and detection system"
+pkgdesc="Open source network intrusion prevention and detection system"
url="https://www.snort.org/"
-arch="all"
+# luajit
+arch="all !ppc64le !riscv64 !loongarch64"
license="GPL-2.0-only"
-makedepends="pcre-dev libpcap-dev libnet-dev libdnet-dev daq-dev daq-static
- bison flex zlib-dev libtirpc-dev xz-dev
- libnfnetlink-dev libnetfilter_queue-dev"
+depends="bash"
+makedepends="
+ bison
+ cmake
+ daq-dev
+ daq-static
+ flex-dev
+ hwloc-dev
+ libdnet-dev
+ libmnl-dev
+ libnet-dev
+ libnetfilter_queue-dev
+ libnfnetlink-dev
+ libpcap-dev
+ libtirpc-dev
+ luajit-dev
+ openssl-dev
+ pcre-dev
+ samurai
+ xz-dev
+ zlib-dev
+ "
install="$pkgname.pre-install"
+pkgusers="snort"
+pkggroups="snort"
subpackages="$pkgname-doc $pkgname-dev $pkgname-openrc"
-source="https://www.snort.org/downloads/archive/snort/snort-$pkgver.tar.gz
+source="https://www.snort.org/downloads/snortplus/snort3-$pkgver.tar.gz
+ gcc13.patch
+ no-libunwind.patch
+ logrotate
snort.initd
snort.confd
"
-pkgusers="snort"
-pkggroups="snort"
+builddir="$srcdir/snort3-$pkgver"
+options="!check" # needs cpputest from community
# secfixes:
# 2.9.18-r0:
# - CVE-2021-40114
-prepare() {
- default_prepare
- # correct paths in default config file
- sed -i -e 's|/usr/local|/usr|' etc/snort.conf
- sed -i -e 's|\.\./|/var/lib/snort/|' etc/snort.conf
-}
-
build() {
- export CFLAGS="$CFLAGS $(pkgconf --cflags libtirpc)"
- export LDFLAGS="$LDFLAGS $(pkgconf --libs libtirpc)"
- ./configure \
- --build=$CBUILD \
- --host=$CHOST \
- --prefix=/usr \
- --sysconfdir=/etc \
- --mandir=/usr/share/man \
- --infodir=/usr/share/info \
- --enable-ipv6 \
- --enable-gre \
- --enable-non-ether-decoders \
- --disable-open-appid
- make
+ CXXFLAGS="$CXXFLAGS -flto=auto" \
+ cmake -B build -G Ninja -Wno-dev \
+ -DCMAKE_BUILD_TYPE=None \
+ -DCMAKE_INSTALL_PREFIX=/usr \
+ -DCMAKE_INSTALL_SYSCONFDIR=/etc \
+ -DENABLE_UNIT_TESTS="$(want_check && echo ON || echo OFF)" \
+ -DENABLE_BENCHMARK_TESTS=OFF
+ cmake --build build
}
check() {
- ./src/snort --version > /dev/null
+ ctest --test-dir build --output-on-failure
}
package() {
- make -j1 DESTDIR="$pkgdir" install
+ DESTDIR="$pkgdir" cmake --install build
- install -D -m 755 ../snort.initd "$pkgdir"/etc/init.d/snort
- install -D -m 644 ../snort.confd "$pkgdir"/etc/conf.d/snort
- install -D -m 644 etc/snort.conf "$pkgdir"/etc/snort/snort.conf
- install -D -m 644 etc/gen-msg.map "$pkgdir"/etc/snort/gen-msg.map
- install -D -m 644 rpm/snort.logrotate "$pkgdir"/etc/logrotate.d/snort
- mkdir -p "$pkgdir"/usr/lib/snort_dynamicrules
- mkdir -p "$pkgdir"/var/lib/snort/rules
- mkdir -m 770 -p "$pkgdir"/var/log/snort && chown snort.snort "$pkgdir"/var/log/snort
- for file in classification.config reference.config threshold.conf \
- unicode.map sid-msg.map
- do
- ln -s /var/lib/snort/etc/$file "$pkgdir"/etc/snort/$file
- done
- touch "$pkgdir"/var/lib/snort/rules/white_list.rules
- touch "$pkgdir"/var/lib/snort/rules/black_list.rules
+ install -Dm 755 "$srcdir"/snort.initd "$pkgdir"/etc/init.d/snort
+ install -Dm 644 "$srcdir"/snort.confd "$pkgdir"/etc/conf.d/snort
+ install -Dm644 "$srcdir"/logrotate "$pkgdir"/etc/logrotate.d/snort
+ install -d -o snort -g snort -m 770 "$pkgdir"/var/log/snort "$pkgdir"/var/lib/snort
}
sha512sums="
-2c93193c0e90b9ec6f4cdde8af2311b10234aab3fd10679731c7091a8719bd71a59e8dccfbceeff4c2152a3c05d150e8924639ff8ce3b345382746687f14611c snort-2.9.19.tar.gz
-c71d11f4cde4aba432641d3915faec8070e9fea5b33c71f6b2872b2208871180b3c7dbbadd2ddaebe5f3280adf7c5c9daf1585afd331fe552486a675ff676e52 snort.initd
-b21491ba5798a5ce3a03a61ada391a667f1684aaf86e7536abb9dd975f6acefe75688c60b8ce28cbfb0c4e66ec19078e468792289d26f1f2e2d401609fd22771 snort.confd
+b7ed9e67946d857a9545e3a4616de11668d4f9f64d1d3b58d9c7218b105f8b7d6b2ce195239a1506d5a86fe80faa097860e35216d686bd3e5e495dd659d0324e snort3-3.1.82.0.tar.gz
+741c1d30a19f18ec33c9f10a696e510d5edc35969e12121920c2a05e6de18d3d74bda42ef7e9d01f60124c08b1e8f3f47e06b6baaa52f4fb7f6834a0d1ad77e6 gcc13.patch
+9fdf8bdf17fa84326fc1f04ee3bf0d14ce4df60c62f7ed3e6303644ae674316f6d6e4c5318791a01921a9bb64dd0de2304688eb98243e0f313ed3f2d93e1d33e no-libunwind.patch
+2d845baa9cd02237a6e60dc280ede896bf1facf7906d7d08e8dfa99d596a9fbe3de4227e6bedbd95375598b6940b9d874ccdd12d3f2c1ede282bac3a8e26b47e logrotate
+769840c6e8a7e353a2b2866b7b161195ce780fb3d5dda747325a95fcaf964c9aad29c5aba8c8ea48aa26ef810d81e82c1321104dd3e7374319e8176635e9b7d8 snort.initd
+8a1139cdd07a03a96c7f5f75164bf95cae4dbc24f637d8b4008b0cf41e4a7f97148621fe4a1c867e956e16dbe226eaf2284a50b73547d1afaacbd32ca9befae5 snort.confd
"