Index: head/security/tripwire12/Makefile =================================================================== --- head/security/tripwire12/Makefile (revision 332586) +++ head/security/tripwire12/Makefile (revision 332587) @@ -1,61 +1,62 @@ # Created by: Joe Greco # $FreeBSD$ PORTNAME= tripwire PORTVERSION= 1.2 PORTREVISION= 1 CATEGORIES= security MASTER_SITES= ${MASTER_SITE_NETBSD} MAINTAINER= jgreco@ns.sol.net COMMENT= File system security and verification program LATEST_LINK= tripwire12 MAN5= tw.config.5 MAN8= siggen.8 tripwire.8 NO_CDROM= cannot be redistributed for more than the cost of duplication NO_PACKAGE= requires local database to be built USES= perl5 USE_PERL5= build +MAKE_JOBS_UNSAFE=yes TWCONFIG?= ${FILESDIR}/tw.conf.freebsd8 NO_STAGE= yes post-extract: @ (cd ${WRKDIR}; tar xpf T1.2.tar) post-patch: @${REINPLACE_CMD} -i '' -e 's|/secureplace/bin|${PREFIX}/bin|' \ -e 's|/usr/man|${PREFIX}/man|' ${WRKSRC}/Makefile ${FIND} ${WRKSRC} -type f | ${XARGS} ${REINPLACE_CMD} -e \ 's|bs_ntohl|ntohl|g;s|bs_htonl|htonl|g' pre-configure: - @ ${CP} ${FILESDIR}/conf-freebsd2.h ${WRKSRC}/configs + @ ${CP} ${FILESDIR}/conf-freebsd8.h ${WRKSRC}/configs @ ${CP} ${TWCONFIG} ${WRKSRC}/configs/tw.conf.freebsd8 post-install: @ ${MKDIR} /var/adm/tcheck @ ${CP} ${TWCONFIG} /var/adm/tcheck/tw.config # Creating tripwire database .ifndef NO_DB_BUILD @ (cd /var/adm/tcheck; tripwire -initialize) .if defined(TRIPWIRE_FLOPPY) && ${TRIPWIRE_FLOPPY} == YES # preparing the floppy @ disklabel -w -B /dev/rfd0c fd1440 @ newfs -u 0 -t 0 -i 196608 -m 0 -T minimum -o space /dev/rfd0c mount /dev/fd0c /mnt # transferring things to the floppy @ ${CP} -p /var/adm/tcheck/tw.config /mnt/tw.config @ ${GZIP_CMD} < /var/adm/tcheck/databases/tw.db_`hostname` \ > /mnt/tw.db_`hostname`.gz @ ${CP} -p ${FILESDIR}/twcheck /usr/bin/gunzip \ ${PREFIX}/bin/tripwire \ /mnt/ @ ${CHMOD} 555 /mnt/tripwire /mnt/gunzip /mnt/twcheck @ umount /mnt # Do not forget to remove and write-protect the floppy. .endif .endif .include Index: head/security/tripwire12/files/conf-freebsd8.h =================================================================== --- head/security/tripwire12/files/conf-freebsd8.h (nonexistent) +++ head/security/tripwire12/files/conf-freebsd8.h (revision 332587) @@ -0,0 +1,57 @@ +/* $FreeBSD$ */ + +/* + * conf-freebsd8.h + * + * Tripwire configuration file + * + * Joe Greco + * sol.net Network Services + * Derived from the other BSD config.h's + */ + +/*** + *** Operating System specifics + *** + *** If the answer to a question in the comment is "Yes", then + *** change the corresponding "#undef" to a "#define" + ***/ + +/* + * is your OS a System V derivitive? if so, what version? + * (e.g., define SYSV 4) + */ + +#undef SYSV + +/* + * does your system have a like System V? + */ + +#undef MALLOCH + +/* + * does your system have a like POSIX says you should? + */ + +#define STDLIBH + +/* + * does your system use readdir(3) that returns (struct dirent *)? + */ + +#define DIRENT + +/* + * is #include ok? (as opposed to ) + */ + +#define STRINGH + +/* + * does your system have gethostname(2) (instead of uname(2))? + */ + +#define GETHOSTNAME + +#define TW_TYPE32 int Property changes on: head/security/tripwire12/files/conf-freebsd8.h ___________________________________________________________________ Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:keywords ## -0,0 +1 ## +FreeBSD=%H \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/tripwire12/files/patch-aa =================================================================== --- head/security/tripwire12/files/patch-aa (revision 332586) +++ head/security/tripwire12/files/patch-aa (revision 332587) @@ -1,38 +1,38 @@ *** include/config.h.orig Fri Jul 15 06:02:52 1994 --- include/config.h Sun Dec 31 18:56:20 1989 *************** *** 17,23 **** *** file that corresponds with your operating system. ***/ ! #include "../configs/conf-svr4.h" #ifdef TW_TYPE32 typedef TW_TYPE32 int32; --- 17,23 ---- *** file that corresponds with your operating system. ***/ -! #include "../configs/conf-freebsd2.h" +! #include "../configs/conf-freebsd8.h" #ifdef TW_TYPE32 typedef TW_TYPE32 int32; *************** *** 103,110 **** #endif */ ! #define CONFIG_PATH "/tmp/genek" ! #define DATABASE_PATH "/tmp/genek" /******* name of Tripwire files ************************************** * --- 103,110 ---- #endif */ ! # define CONFIG_PATH "/var/adm/tcheck" ! # define DATABASE_PATH "/var/adm/tcheck/databases" /******* name of Tripwire files ************************************** * Property changes on: head/security/tripwire12/files/patch-aa ___________________________________________________________________ Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property Index: head/security/tripwire12/files/tw.conf.freebsd8 =================================================================== --- head/security/tripwire12/files/tw.conf.freebsd8 (revision 332586) +++ head/security/tripwire12/files/tw.conf.freebsd8 (revision 332587) @@ -1,165 +1,160 @@ # $FreeBSD$ # # tripwire.config # Generic version for FreeBSD # Will need editing...see comments below # # This file contains a list of files and directories that System # Preener will scan. Information collected from these files will be # stored in the tripwire.database file. # # Format: [!|=] entry [ignore-flags] # # where: '!' signifies the entry is to be pruned (inclusive) from # the list of files to be scanned. # '=' signifies the entry is to be added, but if it is # a directory, then all its contents are pruned # (useful for /tmp). # # where: entry is the absolute pathname of a file or a directory # # where ignore-flags are in the format: # [template][ [+|-][pinugsam12] ... ] # # - : ignore the following atributes # + : do not ignore the following attributes # # p : permission and file mode bits a: access timestamp # i : inode number m: modification timestamp # n : number of links (ref count) c: inode creation timestamp # u : user id of owner 1: signature 1 # g : group id of owner 2: signature 2 # s : size of file # # # Ex: The following entry will scan all the files in /etc, and report # any changes in mode bits, inode number, reference count, uid, # gid, modification and creation timestamp, and the signatures. # However, it will ignore any changes in the access timestamp. # # /etc +pinugsm12-a # # The following templates have been pre-defined to make these long ignore # mask descriptions unecessary. # # Templates: (default) R : [R]ead-only (+pinugsm12-a) # L : [L]og file (+pinug-sam12) # N : ignore [N]othing (+pinusgsamc12) # E : ignore [E]verything (-pinusgsamc12) # # By default, Tripwire uses the R template -- it ignores # only the access timestamp. # # You can use templates with modifiers, like: # Ex: /etc/lp E+ug # # Example configuration file: # /etc R # all system files # !/etc/lp R # ...but not those logs # =/tmp N # just the directory, not its files # # Note the difference between pruning (via "!") and ignoring everything # (via "E" template): Ignoring everything in a directory still monitors # for added and deleted files. Pruning a directory will prevent Tripwire # from even looking in the specified directory. # # # Tripwire running slowly? Modify your tripwire.config entries to # ignore the (signature 2) attribute when this computationally-exorbitant # protection is not needed. (See README and design document for further # details.) # # First, root's traditional "home". Note that FreeBSD's root's home (/root) # is protected by R-2 protections in the default config file. =/ L /.rhosts R # may not exist /.profile R # may not exist /.cshrc R # may not exist /.login R # may not exist /.exrc R # may not exist /.logout R # may not exist /.forward R # may not exist # Unix itself -/kernel R /boot R /boot.config R # /bin /bin R-2 # /dev =/dev L # /etc /etc R-2 /etc/aliases L /etc/dumpdates L /etc/motd L # my passwd database should be static at time of system build. yours may # not be, if not, uncomment the lines below. # /etc/passwd L # /etc/master.passwd L # /etc/pwd.db L # /etc/spwd.db L # /home =/home # /lib /lib R-2 # /libexec /libexec R-2 - -# /lkm and /modules -/lkm R-2 -/modules R-2 # /boot /boot R-2 # /rescue /rescue R-2 # /root /root R-2 /root/.history L # /sbin /sbin R-2 # /stand /stand R-2 # /usr/bin /usr/bin R-2 /usr/include R-12 /usr/lib R-2 /usr/libdata R-2 /usr/libexec R-2 /usr/local/bin R-2 /usr/local/etc L /usr/local/lib R-2 /usr/local/libexec R-2 /usr/local/sbin R-2 /usr/local/share R-2 /usr/sbin R-2 /usr/share R-2 ########################################### Property changes on: head/security/tripwire12/files/tw.conf.freebsd8 ___________________________________________________________________ Added: svn:eol-style ## -0,0 +1 ## +native \ No newline at end of property Added: svn:mime-type ## -0,0 +1 ## +text/plain \ No newline at end of property