1 |
commit: 0d7e04faf5b1c641c4cc783fd4f156fee1bde66b |
2 |
Author: Marek Szuba <marecki <AT> gentoo <DOT> org> |
3 |
AuthorDate: Wed Aug 31 15:31:52 2022 +0000 |
4 |
Commit: Marek Szuba <marecki <AT> gentoo <DOT> org> |
5 |
CommitDate: Wed Aug 31 15:33:40 2022 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0d7e04fa |
7 |
|
8 |
net-analyzer/suricata: drop EOLed major version 5 |
9 |
|
10 |
Closes: https://bugs.gentoo.org/862813 |
11 |
Signed-off-by: Marek Szuba <marecki <AT> gentoo.org> |
12 |
|
13 |
net-analyzer/suricata/Manifest | 1 - |
14 |
net-analyzer/suricata/files/suricata-5.0.1-conf | 62 ------ |
15 |
net-analyzer/suricata/files/suricata-5.0.1-init | 147 -------------- |
16 |
.../files/suricata-5.0.1_default-config.patch | 27 --- |
17 |
net-analyzer/suricata/suricata-5.0.10.ebuild | 211 --------------------- |
18 |
profiles/package.mask | 5 - |
19 |
6 files changed, 453 deletions(-) |
20 |
|
21 |
diff --git a/net-analyzer/suricata/Manifest b/net-analyzer/suricata/Manifest |
22 |
index 4c10e0066966..0d0da5219528 100644 |
23 |
--- a/net-analyzer/suricata/Manifest |
24 |
+++ b/net-analyzer/suricata/Manifest |
25 |
@@ -1,3 +1,2 @@ |
26 |
-DIST suricata-5.0.10.tar.gz 29391642 BLAKE2B b5c83b9882e89894c3dedb7f536d584a20bbeab24236752e528171db6589a6308422c8b0be4f433fc63b8cfc227aa0b67935a4aece943b10f4577398ea9ed467 SHA512 c59719d42a236ac7421e0bcf6894f113c8f7518e2b5dde558cbe57c12b68b86ef700bae3f4047c6b2677a784061951fc9d058e9f59b11846279da06e9649ac56 |
27 |
DIST suricata-6.0.6.tar.gz 32651139 BLAKE2B de0a73c618c1e2777019de6b29be5224db1885840cba8d05ad4a83fc082408e5d8b16d2c6055701f5d279852a99bea5dea01bed58ad0148afd76c1158e693f16 SHA512 184e5a2f3a68de33198f6f0e681710b3f04ed083081ef989dba77d1afb78922c5afdcdaa18ca92c6ed79b98134a3c42b13e1f3e91d20ea10ca74a692f93c5101 |
28 |
DIST suricata-6.0.6.tar.gz.sig 566 BLAKE2B 07a1d3ccf434eb0bff36009d36b449ed3295e78ca217efc3bfb722169f80e513621878077e5d2e6a5085db6dff3dfcb0d37ca3d125b590b4ba56a6135293377b SHA512 8dc242af8d176699c710c27ec4ebc37c1363ebed1601de9a6f5a81a393079eff4680e6912674872861d905cfe85dfa610c2a66a9a79980603868bb9d515ffe29 |
29 |
|
30 |
diff --git a/net-analyzer/suricata/files/suricata-5.0.1-conf b/net-analyzer/suricata/files/suricata-5.0.1-conf |
31 |
deleted file mode 100644 |
32 |
index 7f22113dbf0d..000000000000 |
33 |
--- a/net-analyzer/suricata/files/suricata-5.0.1-conf |
34 |
+++ /dev/null |
35 |
@@ -1,62 +0,0 @@ |
36 |
-# Config file for /etc/init.d/suricata* |
37 |
- |
38 |
-# Where config files are stored. Default: |
39 |
- |
40 |
-# SURICATA_DIR="/etc/suricata" |
41 |
- |
42 |
-# Pass options to each suricata service. |
43 |
-# |
44 |
-# You can launch more than one service at the same time with different options. |
45 |
-# This can be useful in a multi-queue gateway, for example. |
46 |
-# You can expand on the Suricata inline example found at: |
47 |
-# http://suricata.readthedocs.io/en/latest/setting-up-ipsinline-for-linux.html |
48 |
-# Instead of configuring iptables to send traffic to just one queue, you can configure it to "load balance" |
49 |
-# on several queues. You can then have a Suricata instance processing traffic for each queue. |
50 |
-# This should help improve performance on the gateway/firewall. |
51 |
-# |
52 |
-# Suppose you configured iptables to use queues 0 and 1 named q0 and q1. You can now do the following: |
53 |
-# ln -s /etc/init.d/suricata /etc/init.d/suricata.q0 |
54 |
-# ln -s /etc/init.d/suricata /etc/init.d/suricata.q1 |
55 |
-# cp /etc/suricata/suricata.yaml /etc/suricata/suricata-q0.yaml |
56 |
-# cp /etc/suricata/suricata.yaml /etc/suricata/suricata-q1.yaml |
57 |
-# |
58 |
-# Edit both suricata-q{0,1}.yaml files and set values accordingly. |
59 |
-# You can override these yaml config file names with SURICATA_CONF* below (optional). |
60 |
-# This allows you to use the same yaml config file for multiple instances as long as you override |
61 |
-# sensible options such as the log file paths. |
62 |
-# SURICATA_CONF_q0="suricata-queues.yaml" |
63 |
-# SURICATA_CONF_q1="suricata-queues.yaml" |
64 |
-# SURICATA_CONF="suricata.yaml" |
65 |
- |
66 |
-# You can define the options here: |
67 |
-# NB: avoid using -l, -c, --user, --group and setting logging.outputs.1.file.filename as the init script will try to set them for you. |
68 |
- |
69 |
-# SURICATA_OPTS_q0="-q 0" |
70 |
-# SURICATA_OPTS_q1="-q 1" |
71 |
- |
72 |
-# If you want to use ${SURICATA_DIR}/suricata.yaml and start the service with /etc/init.d/suricata |
73 |
-# then you can set: |
74 |
- |
75 |
-SURICATA_OPTS="--af-packet" |
76 |
- |
77 |
-# Log paths listed here will be created by the init script and will override the log path |
78 |
-# set in the yaml file, if present. |
79 |
-# SURICATA_LOG_FILE_q0="/var/log/suricata/q0/suricata.log" |
80 |
-# SURICATA_LOG_FILE_q1="/var/log/suricata/q1/suricata.log" |
81 |
-# SURICATA_LOG_FILE="/var/log/suricata/suricata.log" |
82 |
- |
83 |
-# Run as user/group. |
84 |
-# Do not define if you want to run as root or as the user defined in the yaml config file (run-as). |
85 |
-# The ebuild should have created the dedicated user/group suricata:suricata for you to specify here below. |
86 |
-# SURICATA_USER_q0="suricata" |
87 |
-# SURICATA_GROUP_q0="suricata" |
88 |
-# SURICATA_USER_q1="suricata" |
89 |
-# SURICATA_GROUP_q1="suricata" |
90 |
-# SURICATA_USER="suricata" |
91 |
-# SURICATA_GROUP="suricata" |
92 |
- |
93 |
-# Suricata processes can take a long time to shut down. |
94 |
-# If necessary, adjust timeout in seconds to be used when calling stop from the init script. |
95 |
-# Examples: |
96 |
-# SURICATA_MAX_WAIT_ON_STOP="300" |
97 |
-# SURICATA_MAX_WAIT_ON_STOP="SIGTERM/30" |
98 |
|
99 |
diff --git a/net-analyzer/suricata/files/suricata-5.0.1-init b/net-analyzer/suricata/files/suricata-5.0.1-init |
100 |
deleted file mode 100644 |
101 |
index 89f92803cedf..000000000000 |
102 |
--- a/net-analyzer/suricata/files/suricata-5.0.1-init |
103 |
+++ /dev/null |
104 |
@@ -1,147 +0,0 @@ |
105 |
-#!/sbin/openrc-run |
106 |
-# Copyright 1999-2019 Gentoo Authors |
107 |
-# Distributed under the terms of the GNU General Public License v2 |
108 |
- |
109 |
-SURICATA_BIN=/usr/bin/suricata |
110 |
-SURICATA_DIR=${SURICATA_DIR:-/etc/suricata} |
111 |
-SURICATA=${SVCNAME#*.} |
112 |
-SURICATAID=$(shell_var "${SURICATA}") |
113 |
-if [ -n "${SURICATA}" ] && [ ${SVCNAME} != "suricata" ]; then |
114 |
- eval SURICATACONF=\$SURICATA_CONF_${SURICATAID} |
115 |
- [ ${#SURICATACONF} -eq 0 ] && SURICATACONF="${SURICATA_DIR}/suricata-${SURICATA}.yaml" || SURICATACONF="${SURICATA_DIR}/${SURICATACONF}" |
116 |
- SURICATAPID="/run/suricata/suricata.${SURICATA}.pid" |
117 |
- eval SURICATAOPTS=\$SURICATA_OPTS_${SURICATAID} |
118 |
- eval SURICATALOGPATH=\$SURICATA_LOG_FILE_${SURICATAID} |
119 |
- eval SURICATAUSER=\$SURICATA_USER_${SURICATAID} |
120 |
- eval SURICATAGROUP=\$SURICATA_GROUP_${SURICATAID} |
121 |
-else |
122 |
- SURICATACONF=${SURICATA_CONF} |
123 |
- [ ${#SURICATACONF} -eq 0 ] && SURICATACONF="${SURICATA_DIR}/suricata.yaml" || SURICATACONF="${SURICATA_DIR}/${SURICATACONF}" |
124 |
- SURICATAPID="/run/suricata/suricata.pid" |
125 |
- SURICATAOPTS=${SURICATA_OPTS} |
126 |
- SURICATALOGPATH=${SURICATA_LOG_FILE} |
127 |
- SURICATAUSER=${SURICATA_USER} |
128 |
- SURICATAGROUP=${SURICATA_GROUP} |
129 |
-fi |
130 |
-SURICATAUSER=${SURICATAUSER:-${SURICATA_USER}} |
131 |
-SURICATAGROUP=${SURICATAGROUP:-${SURICATA_GROUP}} |
132 |
-[ -e ${SURICATACONF} ] && SURICATAOPTS="-c ${SURICATACONF} ${SURICATAOPTS}" |
133 |
-[[ -z "${SURICATA_MAX_WAIT_ON_STOP// }" ]] || SURICATA_RETRY="--retry ${SURICATA_MAX_WAIT_ON_STOP}" |
134 |
- |
135 |
-description="Suricata IDS/IPS" |
136 |
-extra_commands="checkconfig dump" |
137 |
-description_checkconfig="Check config for ${SVCNAME}" |
138 |
-description_dump="List all config values that can be used with --set" |
139 |
-extra_started_commands="reload relog" |
140 |
-description_reload="Live rule and config reload" |
141 |
-description_relog="Close and re-open all log files" |
142 |
- |
143 |
-depend() { |
144 |
- need net |
145 |
- after mysql |
146 |
- after postgresql |
147 |
-} |
148 |
- |
149 |
-checkconfig() { |
150 |
- if [ ! -d "/run/suricata" ] ; then |
151 |
- checkpath -d /run/suricata |
152 |
- fi |
153 |
- if [ ${#SURICATALOGPATH} -gt 0 ]; then |
154 |
- SURICATALOGFILE=$( basename ${SURICATALOGPATH} ) |
155 |
- SURICATALOGFILE=${SURICATALOGFILE:-suricata.log} |
156 |
- SURICATALOGPATH=$( dirname ${SURICATALOGPATH} ) |
157 |
- if [ ! -d "${SURICATALOGPATH}" ] ; then |
158 |
- checkpath -d "${SURICATALOGPATH}" |
159 |
- fi |
160 |
- if [ ${#SURICATAUSER} -gt 0 ] && [ ${#SURICATAGROUP} -gt 0 ] && [ -e "${SURICATALOGPATH}" ]; then |
161 |
- chown ${SURICATAUSER}:${SURICATAGROUP} "${SURICATALOGPATH}" || return 1 |
162 |
- chown ${SURICATAUSER}:${SURICATAGROUP} "${SURICATALOGPATH}"/* >/dev/null 2>&1 3>&1 |
163 |
- fi |
164 |
- SURICATAOPTS="${SURICATAOPTS} --set logging.outputs.1.file.filename=${SURICATALOGPATH}/${SURICATALOGFILE}" |
165 |
- SURICATALOGPATH="-l ${SURICATALOGPATH}" |
166 |
- fi |
167 |
- if [ ! -e ${SURICATACONF} ] ; then |
168 |
- einfo "The configuration file ${SURICATACONF} was not found." |
169 |
- einfo "If this is OK then make sure you set enough options for ${SVCNAME} in /etc/conf.d/suricata." |
170 |
- einfo "Take a look at the suricata arguments --set and --dump-config." |
171 |
- fi |
172 |
- if [ ${#SURICATAUSER} -gt 0 ] && [ ${#SURICATAGROUP} -gt 0 ]; then |
173 |
- einfo "${SVCNAME} will run as user ${SURICATAUSER}:${SURICATAGROUP}." |
174 |
- SURICATAOPTS="${SURICATAOPTS} --user=${SURICATAUSER} --group=${SURICATAGROUP}" |
175 |
- fi |
176 |
-} |
177 |
- |
178 |
-initpidinfo() { |
179 |
- [ -e ${SURICATAPID} ] && SUR_PID="$(cat ${SURICATAPID})" |
180 |
- if [ ${#SUR_PID} -gt 0 ]; then |
181 |
- SUR_PID_CHECK="$(ps -eo pid | grep -c ${SUR_PID})" |
182 |
- SUR_USER="$(ps -p ${SUR_PID} --no-headers -o user)" |
183 |
- fi |
184 |
-} |
185 |
- |
186 |
-checkpidinfo() { |
187 |
- initpidinfo |
188 |
- if [ ! -e ${SURICATAPID} ]; then |
189 |
- eerror "${SVCNAME} isn't running" |
190 |
- return 1 |
191 |
- elif [ ${#SUR_PID} -eq 0 ] || [ $((SUR_PID_CHECK)) -ne 1 ]; then |
192 |
- eerror "Could not determine PID of ${SVCNAME}! Did the service crash?" |
193 |
- return 1 |
194 |
- elif [ ${#SUR_USER} -eq 0 ]; then |
195 |
- eerror "Unable to determine user running ${SVCNAME}!" |
196 |
- return 1 |
197 |
- elif [ "x${SUR_USER}" != "xroot" ]; then |
198 |
- ewarn "${SVCNAME} may need to be running as root or as a priviledged user for the extra commands reload and relog to work." |
199 |
- fi |
200 |
-} |
201 |
- |
202 |
-start() { |
203 |
- checkconfig || return 1 |
204 |
- ebegin "Starting ${SVCNAME}" |
205 |
- start-stop-daemon --start --quiet --exec ${SURICATA_BIN} \ |
206 |
- -- --pidfile ${SURICATAPID} -D ${SURICATAOPTS} ${SURICATALOGPATH} >/dev/null 2>&1 |
207 |
- local SUR_EXIT=$? |
208 |
- if [ $((SUR_EXIT)) -ne 0 ]; then |
209 |
- einfo "Could not start ${SURICATA_BIN} with:" |
210 |
- einfo "--pidfile ${SURICATAPID} -D ${SURICATAOPTS} ${SURICATALOGPATH}" |
211 |
- einfo "Exit code ${SUR_EXIT}" |
212 |
- fi |
213 |
- eend ${SUR_EXIT} |
214 |
-} |
215 |
- |
216 |
-stop() { |
217 |
- ebegin "Stopping ${SVCNAME}" |
218 |
- start-stop-daemon --stop ${SURICATA_RETRY} --quiet --pidfile ${SURICATAPID} >/dev/null 2>&1 |
219 |
- eend $? |
220 |
-} |
221 |
- |
222 |
-reload() { |
223 |
- checkpidinfo || return 1 |
224 |
- checkconfig || return 1 |
225 |
- ebegin "Sending USR2 signal to ${SVCNAME} to perform a live rule and config reload." |
226 |
- if [ ${#SURICATAUSER} -gt 0 ] && [ ${#SURICATAGROUP} -gt 0 ]; then |
227 |
- start-stop-daemon --user ${SURICATAUSER} --group ${SURICATAGROUP} --signal USR2 --pidfile ${SURICATAPID} |
228 |
- else |
229 |
- start-stop-daemon --signal USR2 --pidfile ${SURICATAPID} |
230 |
- fi |
231 |
- eend $? |
232 |
-} |
233 |
- |
234 |
-relog() { |
235 |
- checkpidinfo || return 1 |
236 |
- checkconfig || return 1 |
237 |
- ebegin "Sending HUP signal to ${SVCNAME} to close and re-open all log files." |
238 |
- if [ ${#SURICATAUSER} -gt 0 ] && [ ${#SURICATAGROUP} -gt 0 ]; then |
239 |
- start-stop-daemon --user ${SURICATAUSER} --group ${SURICATAGROUP} --signal HUP --pidfile ${SURICATAPID} |
240 |
- else |
241 |
- start-stop-daemon --signal HUP --pidfile ${SURICATAPID} |
242 |
- fi |
243 |
- eend $? |
244 |
-} |
245 |
- |
246 |
-dump() { |
247 |
- checkconfig || return 1 |
248 |
- ebegin "Dumping ${SVCNAME} config values and quitting." |
249 |
- ${SURICATA_BIN} --dump-config --pidfile ${SURICATAPID} ${SURICATAOPTS} ${SURICATALOGPATH} |
250 |
- eend $? |
251 |
-} |
252 |
|
253 |
diff --git a/net-analyzer/suricata/files/suricata-5.0.1_default-config.patch b/net-analyzer/suricata/files/suricata-5.0.1_default-config.patch |
254 |
deleted file mode 100644 |
255 |
index ef1b1f63ad4f..000000000000 |
256 |
--- a/net-analyzer/suricata/files/suricata-5.0.1_default-config.patch |
257 |
+++ /dev/null |
258 |
@@ -1,27 +0,0 @@ |
259 |
---- a/suricata.yaml.in |
260 |
-+++ b/suricata.yaml.in |
261 |
-@@ -203,8 +203,9 @@ |
262 |
- # https://suricata.readthedocs.io/en/latest/output/eve/eve-json-output.html#dns-v1-format |
263 |
- |
264 |
- # As of Suricata 5.0, version 2 of the eve dns output |
265 |
-- # format is the default. |
266 |
-- #version: 2 |
267 |
-+ # format is the default - but the daemon produces a warning to that effect |
268 |
-+ # at start-up if this isn't explicitly set. |
269 |
-+ version: 2 |
270 |
- |
271 |
- # Enable/disable this logger. Default: enabled. |
272 |
- #enabled: yes |
273 |
-@@ -978,9 +979,9 @@ |
274 |
- ## |
275 |
- |
276 |
- # Run suricata as user and group. |
277 |
--#run-as: |
278 |
--# user: suri |
279 |
--# group: suri |
280 |
-+run-as: |
281 |
-+ user: suricata |
282 |
-+ group: suricata |
283 |
- |
284 |
- # Some logging module will use that name in event as identifier. The default |
285 |
- # value is the hostname |
286 |
|
287 |
diff --git a/net-analyzer/suricata/suricata-5.0.10.ebuild b/net-analyzer/suricata/suricata-5.0.10.ebuild |
288 |
deleted file mode 100644 |
289 |
index bcc45a9635c7..000000000000 |
290 |
--- a/net-analyzer/suricata/suricata-5.0.10.ebuild |
291 |
+++ /dev/null |
292 |
@@ -1,211 +0,0 @@ |
293 |
-# Copyright 1999-2022 Gentoo Authors |
294 |
-# Distributed under the terms of the GNU General Public License v2 |
295 |
- |
296 |
-EAPI=8 |
297 |
- |
298 |
-LUA_COMPAT=( lua5-1 luajit ) |
299 |
-PYTHON_COMPAT=( python3_{8..10} ) |
300 |
- |
301 |
-inherit autotools linux-info lua-single python-single-r1 systemd tmpfiles |
302 |
- |
303 |
-DESCRIPTION="High performance Network IDS, IPS and Network Security Monitoring engine" |
304 |
-HOMEPAGE="https://suricata.io/" |
305 |
-SRC_URI="https://www.openinfosecfoundation.org/download/${P}.tar.gz" |
306 |
- |
307 |
-LICENSE="GPL-2" |
308 |
-SLOT="0/5" |
309 |
-KEYWORDS="~amd64 ~x86" |
310 |
-IUSE="+af-packet bpf control-socket cuda debug +detection geoip hardened hyperscan lua lz4 nflog +nfqueue redis systemd test" |
311 |
- |
312 |
-RESTRICT="!test? ( test )" |
313 |
- |
314 |
-REQUIRED_USE="${PYTHON_REQUIRED_USE} |
315 |
- bpf? ( af-packet ) |
316 |
- lua? ( ${LUA_REQUIRED_USE} )" |
317 |
- |
318 |
-RDEPEND="${PYTHON_DEPS} |
319 |
- acct-group/suricata |
320 |
- acct-user/suricata |
321 |
- dev-libs/jansson:= |
322 |
- dev-libs/libpcre |
323 |
- dev-libs/libyaml |
324 |
- net-libs/libnet:* |
325 |
- net-libs/libnfnetlink |
326 |
- dev-libs/nspr |
327 |
- dev-libs/nss |
328 |
- $(python_gen_cond_dep ' |
329 |
- dev-python/pyyaml[${PYTHON_USEDEP}] |
330 |
- ') |
331 |
- >=net-libs/libhtp-0.5.40 |
332 |
- net-libs/libpcap |
333 |
- sys-apps/file |
334 |
- sys-libs/libcap-ng |
335 |
- bpf? ( >=dev-libs/libbpf-0.1.0 ) |
336 |
- cuda? ( dev-util/nvidia-cuda-toolkit ) |
337 |
- geoip? ( dev-libs/libmaxminddb ) |
338 |
- hyperscan? ( dev-libs/hyperscan ) |
339 |
- lua? ( ${LUA_DEPS} ) |
340 |
- lz4? ( app-arch/lz4 ) |
341 |
- nflog? ( net-libs/libnetfilter_log ) |
342 |
- nfqueue? ( net-libs/libnetfilter_queue ) |
343 |
- redis? ( dev-libs/hiredis:= )" |
344 |
-DEPEND="${RDEPEND} |
345 |
- >=sys-devel/autoconf-2.69-r5 |
346 |
- virtual/rust" |
347 |
- |
348 |
-PATCHES=( |
349 |
- "${FILESDIR}/${PN}-5.0.1_configure-no-lz4-automagic.patch" |
350 |
- "${FILESDIR}/${PN}-5.0.1_default-config.patch" |
351 |
- "${FILESDIR}/${PN}-5.0.6_configure-no-sphinx-pdflatex-automagic.patch" |
352 |
- "${FILESDIR}/${PN}-5.0.7_configure-no-hyperscan-automagic.patch" |
353 |
-) |
354 |
- |
355 |
-pkg_pretend() { |
356 |
- if use bpf && use kernel_linux; then |
357 |
- if kernel_is -lt 4 15; then |
358 |
- ewarn "Kernel 4.15 or newer is necessary to use all XDP features like the CPU redirect map" |
359 |
- fi |
360 |
- |
361 |
- CONFIG_CHECK="~XDP_SOCKETS" |
362 |
- ERROR_XDP_SOCKETS="CONFIG_XDP_SOCKETS is not set, making it impossible for Suricata to load XDP programs. " |
363 |
- ERROR_XDP_SOCKETS+="Other eBPF features should work normally." |
364 |
- check_extra_config |
365 |
- fi |
366 |
-} |
367 |
- |
368 |
-src_prepare() { |
369 |
- default |
370 |
- sed -ie 's/docdir =.*/docdir = ${datarootdir}\/doc\/'${PF}'\//' "${S}/doc/Makefile.am" || die |
371 |
- eautoreconf |
372 |
-} |
373 |
- |
374 |
-src_configure() { |
375 |
- local myeconfargs=( |
376 |
- "--localstatedir=/var" \ |
377 |
- "--runstatedir=/run" \ |
378 |
- "--enable-non-bundled-htp" \ |
379 |
- "--enable-gccmarch-native=no" \ |
380 |
- "--enable-python" \ |
381 |
- $(use_enable af-packet) \ |
382 |
- $(use_enable bpf ebpf) \ |
383 |
- $(use_enable control-socket unix-socket) \ |
384 |
- $(use_enable cuda) \ |
385 |
- $(use_enable detection) \ |
386 |
- $(use_enable geoip) \ |
387 |
- $(use_enable hardened gccprotect) \ |
388 |
- $(use_enable hardened pie) \ |
389 |
- $(use_enable hyperscan) \ |
390 |
- $(use_enable lz4) \ |
391 |
- $(use_enable nflog) \ |
392 |
- $(use_enable nfqueue) \ |
393 |
- $(use_enable redis hiredis) \ |
394 |
- $(use_enable test unittests) \ |
395 |
- "--disable-coccinelle" |
396 |
- ) |
397 |
- if use lua; then |
398 |
- if use lua_single_target_luajit; then |
399 |
- myeconfargs+=( --enable-luajit ) |
400 |
- else |
401 |
- myeconfargs+=( --enable-lua ) |
402 |
- fi |
403 |
- fi |
404 |
- |
405 |
- if use debug; then |
406 |
- myeconfargs+=( $(use_enable debug) ) |
407 |
- # so we can get a backtrace according to "reporting bugs" on upstream web site |
408 |
- CFLAGS="-ggdb -O0" econf ${myeconfargs[@]} |
409 |
- else |
410 |
- econf ${myeconfargs[@]} |
411 |
- fi |
412 |
-} |
413 |
- |
414 |
-src_install() { |
415 |
- emake DESTDIR="${D}" install |
416 |
- python_optimize |
417 |
- |
418 |
- if use bpf; then |
419 |
- rm -f ebpf/Makefile.{am,in} || die |
420 |
- dodoc -r ebpf/ |
421 |
- keepdir /usr/libexec/suricata/ebpf |
422 |
- fi |
423 |
- |
424 |
- insinto "/etc/${PN}" |
425 |
- doins etc/{classification,reference}.config threshold.config suricata.yaml |
426 |
- |
427 |
- keepdir "/var/lib/${PN}/rules" "/var/lib/${PN}/update" |
428 |
- keepdir "/var/log/${PN}" |
429 |
- |
430 |
- fowners -R ${PN}: "/var/lib/${PN}" "/var/log/${PN}" "/etc/${PN}" |
431 |
- fperms 750 "/var/lib/${PN}" "/var/log/${PN}" "/etc/${PN}" |
432 |
- fperms 2750 "/var/lib/${PN}/rules" "/var/lib/${PN}/update" |
433 |
- |
434 |
- newinitd "${FILESDIR}/${PN}-5.0.1-init" ${PN} |
435 |
- newconfd "${FILESDIR}/${PN}-5.0.1-conf" ${PN} |
436 |
- systemd_dounit "${FILESDIR}"/${PN}.service |
437 |
- newtmpfiles "${FILESDIR}"/${PN}.tmpfiles ${PN}.conf |
438 |
- |
439 |
- insopts -m0644 |
440 |
- insinto /etc/logrotate.d |
441 |
- newins etc/${PN}.logrotate ${PN} |
442 |
-} |
443 |
- |
444 |
-pkg_postinst() { |
445 |
- tmpfiles_process ${PN}.conf |
446 |
- |
447 |
- ewarn |
448 |
- ewarn "The 5.0 branch of ${PN} will reach the end of life (EOL) on 2022-08-01, after which date upstream will no longer produce or release fixes for this branch." |
449 |
- ewarn |
450 |
- |
451 |
- elog |
452 |
- if use systemd; then |
453 |
- elog "Suricata requires either the mode of operation (e.g. --af-packet) or the interface to listen on (e.g. -i eth0)" |
454 |
- elog "to be specified on the command line. The provided systemd unit launches Suricata in af-packet mode and relies" |
455 |
- elog "on file configuration to specify interfaces, should you prefer to run it differently you will have to customise" |
456 |
- elog "said unit. The simplest way of doing it is to override the Environment=OPTIONS='...' line using a .conf file" |
457 |
- elog "placed in the directory ${EPREFIX}/etc/systemd/system/suricata.service.d/ ." |
458 |
- elog "For details, see the section on drop-in directories in systemd.unit(5)." |
459 |
- else |
460 |
- elog "The ${PN} init script expects to find the path to the configuration" |
461 |
- elog "file as well as extra options in /etc/conf.d." |
462 |
- elog |
463 |
- elog "To create more than one ${PN} service, simply create a new .yaml file for it" |
464 |
- elog "then create a symlink to the init script from a link called" |
465 |
- elog "${PN}.foo - like so" |
466 |
- elog " cd /etc/${PN}" |
467 |
- elog " ${EDITOR##*/} suricata-foo.yaml" |
468 |
- elog " cd /etc/init.d" |
469 |
- elog " ln -s ${PN} ${PN}.foo" |
470 |
- elog "Then edit /etc/conf.d/${PN} and make sure you specify sensible options for foo." |
471 |
- elog |
472 |
- elog "You can create as many ${PN}.foo* services as you wish." |
473 |
- fi |
474 |
- |
475 |
- if use bpf; then |
476 |
- elog |
477 |
- elog "eBPF/XDP files must be compiled (using sys-devel/clang[llvm_targets_BPF]) before use" |
478 |
- elog "because their configuration is hard-coded. You can find the default ones in" |
479 |
- elog " ${EPREFIX}/usr/share/doc/${PF}/ebpf" |
480 |
- elog "and the common location for eBPF bytecode is" |
481 |
- elog " ${EPREFIX}/usr/libexec/${PN}" |
482 |
- elog "For more information, see https://${PN}.readthedocs.io/en/${P}/capture-hardware/ebpf-xdp.html" |
483 |
- fi |
484 |
- |
485 |
- if use debug; then |
486 |
- elog |
487 |
- elog "You have enabled the debug USE flag. Please read this link to report bugs upstream:" |
488 |
- elog "https://redmine.openinfosecfoundation.org/projects/suricata/wiki/Reporting_Bugs" |
489 |
- elog "You need to also ensure the FEATURES variable in make.conf contains the" |
490 |
- elog "'nostrip' option to produce useful core dumps or back traces." |
491 |
- fi |
492 |
- |
493 |
- elog |
494 |
- if [[ -z "${REPLACING_VERSIONS}" ]]; then |
495 |
- elog "To download and install an initial set of rules, run:" |
496 |
- elog " emerge --config =${CATEGORY}/${PF}" |
497 |
- fi |
498 |
- elog |
499 |
-} |
500 |
- |
501 |
-pkg_config() { |
502 |
- suricata-update |
503 |
-} |
504 |
|
505 |
diff --git a/profiles/package.mask b/profiles/package.mask |
506 |
index b9fd4ceb4196..25aefda66525 100644 |
507 |
--- a/profiles/package.mask |
508 |
+++ b/profiles/package.mask |
509 |
@@ -314,11 +314,6 @@ dev-qt/qtwebsockets:6 |
510 |
# Multiple rendering/font issues reported: bug #844115, bug #851141. |
511 |
=app-text/ghostscript-gpl-9.56.1 |
512 |
|
513 |
-# Marek Szuba <marecki@g.o> (2022-08-01) |
514 |
-# Suricata-5 has reached end of life upstream. Please switch to major version 6. |
515 |
-# Removal in 30 days (Bug #) |
516 |
-<net-analyzer/suricata-6.0.0 |
517 |
- |
518 |
# Marek Szuba <marecki@g.o> (2022-07-13) |
519 |
# Upstream has switched from CMake to hand-crafted Makefiles (yes, TO them), |
520 |
# which have seriously messed up dependency handling and trigger several |