1 |
commit: 241b67a4b002630e65fad02cae4503d4029a2162 |
2 |
Author: Thomas Andrejak <thomas.andrejak <AT> gmail <DOT> com> |
3 |
AuthorDate: Sun Jul 17 13:14:12 2016 +0000 |
4 |
Commit: Göktürk Yüksek <gokturk <AT> gentoo <DOT> org> |
5 |
CommitDate: Fri Aug 5 01:10:12 2016 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=241b67a4 |
7 |
|
8 |
net-analyzer/prelude-correlator: New package |
9 |
|
10 |
Prelude-Correlator allows conducting multi-stream correlations thanks |
11 |
to a powerful programming language for writing correlation rules. |
12 |
|
13 |
net-analyzer/prelude-correlator/Manifest | 1 + |
14 |
.../files/prelude-correlator.initd | 27 +++++++++++++++++++ |
15 |
.../files/prelude-correlator.run | 4 +++ |
16 |
.../files/prelude-correlator.service | 13 +++++++++ |
17 |
net-analyzer/prelude-correlator/metadata.xml | 21 +++++++++++++++ |
18 |
.../prelude-correlator-3.0.1.ebuild | 31 ++++++++++++++++++++++ |
19 |
6 files changed, 97 insertions(+) |
20 |
|
21 |
diff --git a/net-analyzer/prelude-correlator/Manifest b/net-analyzer/prelude-correlator/Manifest |
22 |
new file mode 100644 |
23 |
index 0000000..63e53ea |
24 |
--- /dev/null |
25 |
+++ b/net-analyzer/prelude-correlator/Manifest |
26 |
@@ -0,0 +1 @@ |
27 |
+DIST prelude-correlator-3.0.1.tar.gz 181019 SHA256 8e19a2c90dfe0a5715062c3f0e3399439a7ba914e1c19e3b3fd24a69f4a98fac SHA512 2aa159251cf7f9fead117737f67cc01e7cb2012c4fd9db77454c7d639cf477888d5ea6476661bf501c2da7aaef58ea7101b7780669f025af1480acd9480ce8d3 WHIRLPOOL b7538e1e6e4f7504c4dbb0044e74c667d8edd49f4b8a52f03eb7620b3213e9de44a6b5beef02316c7c722989286c8f7fc1204822bcdbb3f320ee30aaacd60aa7 |
28 |
|
29 |
diff --git a/net-analyzer/prelude-correlator/files/prelude-correlator.initd b/net-analyzer/prelude-correlator/files/prelude-correlator.initd |
30 |
new file mode 100755 |
31 |
index 0000000..26e18d5 |
32 |
--- /dev/null |
33 |
+++ b/net-analyzer/prelude-correlator/files/prelude-correlator.initd |
34 |
@@ -0,0 +1,27 @@ |
35 |
+#!/sbin/runscript |
36 |
+# Copyright 1999-2016 Gentoo Foundation |
37 |
+# Distributed under the terms of the GNU General Public License v2 |
38 |
+# $Id$ |
39 |
+ |
40 |
+BIN_CORRELATOR=/usr/bin/prelude-correlator |
41 |
+PID_CORRELATOR=/run/prelude-correlator/prelude-correlator.pid |
42 |
+ |
43 |
+depend() { |
44 |
+ need net |
45 |
+ after prelude-manager |
46 |
+} |
47 |
+ |
48 |
+start() { |
49 |
+ ebegin "Starting prelude-correlator" |
50 |
+ checkpath -d -m 0755 -o root:root /run/prelude-correlator |
51 |
+ start-stop-daemon --start --exec $BIN_CORRELATOR \ |
52 |
+ --pidfile $PID_CORRELATOR -- -d -P $PID_CORRELATOR |
53 |
+ eend $? |
54 |
+} |
55 |
+ |
56 |
+stop() { |
57 |
+ ebegin "Stopping prelude-correlator" |
58 |
+ start-stop-daemon --stop --exec $BIN_CORRELATOR \ |
59 |
+ --pidfile $PID_CORRELATOR |
60 |
+ eend $? |
61 |
+} |
62 |
|
63 |
diff --git a/net-analyzer/prelude-correlator/files/prelude-correlator.run b/net-analyzer/prelude-correlator/files/prelude-correlator.run |
64 |
new file mode 100644 |
65 |
index 0000000..8bec03f |
66 |
--- /dev/null |
67 |
+++ b/net-analyzer/prelude-correlator/files/prelude-correlator.run |
68 |
@@ -0,0 +1,4 @@ |
69 |
+# Configuration to create /run/prelude-correlator directory |
70 |
+# Used as part of systemd's tmpfiles |
71 |
+ |
72 |
+d /run/prelude-correlator 0755 root root |
73 |
|
74 |
diff --git a/net-analyzer/prelude-correlator/files/prelude-correlator.service b/net-analyzer/prelude-correlator/files/prelude-correlator.service |
75 |
new file mode 100644 |
76 |
index 0000000..7b763c3 |
77 |
--- /dev/null |
78 |
+++ b/net-analyzer/prelude-correlator/files/prelude-correlator.service |
79 |
@@ -0,0 +1,13 @@ |
80 |
+[Unit] |
81 |
+Description=Prelude-Correlator service |
82 |
+DefaultDependencies=no |
83 |
+After=remote_fs.target prelude-manager.service |
84 |
+ |
85 |
+[Service] |
86 |
+ExecStart=/usr/bin/prelude-correlator -d -P /run/prelude-correlator/prelude-correlator.pid |
87 |
+Type=forking |
88 |
+PIDFile=/run/prelude-correlator/prelude-correlator.pid |
89 |
+Restart=always |
90 |
+ |
91 |
+[Install] |
92 |
+WantedBy=multi-user.target |
93 |
|
94 |
diff --git a/net-analyzer/prelude-correlator/metadata.xml b/net-analyzer/prelude-correlator/metadata.xml |
95 |
new file mode 100644 |
96 |
index 0000000..fa977ec |
97 |
--- /dev/null |
98 |
+++ b/net-analyzer/prelude-correlator/metadata.xml |
99 |
@@ -0,0 +1,21 @@ |
100 |
+<?xml version="1.0" encoding="UTF-8"?> |
101 |
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd"> |
102 |
+<pkgmetadata> |
103 |
+ <maintainer type="person"> |
104 |
+ <email>thomas.andrejak@×××××.com</email> |
105 |
+ <name>Thomas Andrejak</name> |
106 |
+ </maintainer> |
107 |
+ <maintainer type="project"> |
108 |
+ <email>proxy-maint@g.o</email> |
109 |
+ <name>Proxy Maintainers</name> |
110 |
+ </maintainer> |
111 |
+ <longdescription lang="en"> |
112 |
+ Prelude-Correlator allows conducting multi-stream correlations |
113 |
+ thanks to a powerful programming language for writing correlation |
114 |
+ rules. With any type of alert able to be correlated, event |
115 |
+ analysis becomes simpler, quicker and more incisive. This |
116 |
+ correlation alert then appears within the Prewikka interface |
117 |
+ and indicates the potential target information via the set of |
118 |
+ correlation rules. |
119 |
+ </longdescription> |
120 |
+</pkgmetadata> |
121 |
|
122 |
diff --git a/net-analyzer/prelude-correlator/prelude-correlator-3.0.1.ebuild b/net-analyzer/prelude-correlator/prelude-correlator-3.0.1.ebuild |
123 |
new file mode 100644 |
124 |
index 0000000..59a0341 |
125 |
--- /dev/null |
126 |
+++ b/net-analyzer/prelude-correlator/prelude-correlator-3.0.1.ebuild |
127 |
@@ -0,0 +1,31 @@ |
128 |
+# Copyright 1999-2016 Gentoo Foundation |
129 |
+# Distributed under the terms of the GNU General Public License v2 |
130 |
+# $Id$ |
131 |
+ |
132 |
+EAPI=6 |
133 |
+ |
134 |
+PYTHON_COMPAT=( python2_7 ) |
135 |
+ |
136 |
+inherit systemd distutils-r1 |
137 |
+ |
138 |
+DESCRIPTION="Real time correlator of events received by Prelude Manager" |
139 |
+HOMEPAGE="https://www.prelude-siem.org" |
140 |
+SRC_URI="https://www.prelude-siem.org/pkg/src/3.0.0/${P}.tar.gz" |
141 |
+ |
142 |
+LICENSE="GPL-2+" |
143 |
+SLOT="0" |
144 |
+KEYWORDS="~amd64 ~x86" |
145 |
+ |
146 |
+DEPEND="dev-python/setuptools" |
147 |
+ |
148 |
+RDEPEND="dev-python/netaddr[${PYTHON_USEDEP}] |
149 |
+ dev-libs/libprelude[${PYTHON_USEDEP}]" |
150 |
+ |
151 |
+src_install() { |
152 |
+ distutils-r1_src_install |
153 |
+ |
154 |
+ systemd_dounit "${FILESDIR}/${PN}.service" |
155 |
+ systemd_newtmpfilesd "${FILESDIR}/${PN}.run" "${PN}.conf" |
156 |
+ |
157 |
+ newinitd "${FILESDIR}/${PN}.initd" "${PN}" |
158 |
+} |