1 ###############################################################################
3 # IPFire.org - A linux based firewall #
4 # Copyright (C) 2007-2021 IPFire Team <info@ipfire.org> #
6 # This program is free software: you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation, either version 3 of the License, or #
9 # (at your option) any later version. #
11 # This program is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
16 # You should have received a copy of the GNU General Public License #
17 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
19 ###############################################################################
21 ###############################################################################
23 ###############################################################################
29 THISAPP = suricata-$(VER)
30 DL_FILE = $(THISAPP).tar.gz
31 DL_FROM = $(URL_IPFIRE)
32 DIR_APP = $(DIR_SRC)/$(THISAPP)
33 TARGET = $(DIR_INFO)/$(THISAPP)
35 ###############################################################################
37 ###############################################################################
41 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
43 $(DL_FILE)_MD5 = d48387c2e0b5e502852b077369d947c5
47 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
49 download :$(patsubst %,$(DIR_DL)/%,$(objects))
51 md5 : $(subst %,%_MD5,$(objects))
53 ###############################################################################
54 # Downloading, checking, md5sum
55 ###############################################################################
57 $(patsubst %,$(DIR_CHK)/%,$(objects)) :
60 $(patsubst %,$(DIR_DL)/%,$(objects)) :
63 $(subst %,%_MD5,$(objects)) :
66 ###############################################################################
67 # Installation Details
68 ###############################################################################
70 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
72 @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
73 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-5.0-stream-tcp-Handle-retransmitted-SYN-with-TSval.patch
74 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-disable-sid-2210059.patch
75 cd $(DIR_APP) && LDFLAGS="$(LDFLAGS)" ./configure \
78 --localstatedir=/var \
80 --disable-gccmarch-native \
81 --enable-non-bundled-htp \
85 --with-libjansson-libraries=/usr/lib \
86 --with-libjansson-includes=/usr/include \
87 --disable-suricata-update \
90 cd $(DIR_APP) && make $(MAKETUNING)
91 cd $(DIR_APP) && make install
92 cd $(DIR_APP) && make install-conf
94 # Remove default suricata config file.
95 rm -rvf /etc/suricata/suricata.yaml
97 # Install IPFire related config file.
98 install -m 0644 $(DIR_SRC)/config/suricata/suricata.yaml /etc/suricata
100 # Install yaml file for loading default rules.
101 install -m 0664 $(DIR_SRC)/config/suricata/suricata-default-rules.yaml /var/ipfire/suricata
103 # Set correct ownership for the default rules file.
104 chown nobody:nobody /var/ipfire/suricata/suricata-default-rules.yaml
106 # Create emtpy rules directory.
107 -mkdir -p /var/lib/suricata
109 # Move config files for references, threshold and classification
110 # to the rules directory.
111 rm -rfv /etc/suricata/*.config
113 # Set correct ownership for the classifiction config file.
114 # (File has to be writeable for the nobody user)
115 chown nobody:nobody /usr/share/suricata/classification.config
117 # Set correct ownership for /var/lib/suricata and the
119 chown -R nobody:nobody /var/lib/suricata
121 # Create logging directory.
122 -mkdir -p /var/log/suricata
124 # Set correct ownership for /var/log/suricata.
125 chown suricata:suricata /var/log/suricata