lfs/suricata

   1 ###############################################################################
   2 #                                                                             #
   3 # IPFire.org - A linux based firewall                                         #
   4 # Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
   5 #                                                                             #
   6 # This program is free software: you can redistribute it and/or modify        #
   7 # it under the terms of the GNU General Public License as published by        #
   8 # the Free Software Foundation, either version 3 of the License, or           #
   9 # (at your option) any later version.                                         #
  10 #                                                                             #
  11 # This program is distributed in the hope that it will be useful,             #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  14 # GNU General Public License for more details.                                #
  15 #                                                                             #
  16 # You should have received a copy of the GNU General Public License           #
  17 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  18 #                                                                             #
  19 ###############################################################################
  20
  21 ###############################################################################
  22 # Definitions
  23 ###############################################################################
  24
  25 include Config
  26
  27 VER        = 7.0.4
  28
  29 THISAPP    = suricata-$(VER)
  30 DL_FILE    = $(THISAPP).tar.gz
  31 DL_FROM    = $(URL_IPFIRE)
  32 DIR_APP    = $(DIR_SRC)/$(THISAPP)
  33 TARGET     = $(DIR_INFO)/$(THISAPP)
  34
  35 ###############################################################################
  36 # Top-level Rules
  37 ###############################################################################
  38
  39 objects = $(DL_FILE)
  40
  41 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
  42
  43 $(DL_FILE)_BLAKE2 = 6c85ee7134548261a5a766ee3e7c0ce095ef478e9323342f17bb48eb0abc74035a66212c7f7e6ba45bd2efd552d82ad6d218d4b09279877f60526f8f79de9764
  44
  45 install : $(TARGET)
  46
  47 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
  48
  49 download :$(patsubst %,$(DIR_DL)/%,$(objects))
  50
  51 b2 : $(subst %,%_BLAKE2,$(objects))
  52
  53 ###############################################################################
  54 # Downloading, checking, b2sum
  55 ###############################################################################
  56
  57 $(patsubst %,$(DIR_CHK)/%,$(objects)) :
  58         @$(CHECK)
  59
  60 $(patsubst %,$(DIR_DL)/%,$(objects)) :
  61         @$(LOAD)
  62
  63 $(subst %,%_BLAKE2,$(objects)) :
  64         @$(B2SUM)
  65
  66 ###############################################################################
  67 # Installation Details
  68 ###############################################################################
  69
  70 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
  71         @$(PREBUILD)
  72         @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
  73         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata/suricata-disable-sid-2210059.patch
  74         cd $(DIR_APP) && LDFLAGS="$(LDFLAGS)" ./configure \
  75                 --prefix=/usr \
  76                 --sysconfdir=/etc \
  77                 --localstatedir=/var \
  78                 --enable-gccprotect \
  79                 --disable-gccmarch-native \
  80                 --enable-non-bundled-htp \
  81                 --enable-nfqueue \
  82                 --disable-static \
  83                 --disable-python \
  84                 --with-libjansson-libraries=/usr/lib \
  85                 --with-libjansson-includes=/usr/include \
  86                 --disable-suricata-update \
  87                 --enable-rust
  88
  89         cd $(DIR_APP) && make $(MAKETUNING)
  90         cd $(DIR_APP) && make install
  91         cd $(DIR_APP) && make install-conf
  92
  93         # Remove default suricata config file.
  94         rm -rvf /etc/suricata/suricata.yaml
  95
  96         # Install IPFire related config file.
  97         install -m 0644 $(DIR_SRC)/config/suricata/suricata.yaml /etc/suricata
  98
  99         # Create emtpy rules directory.
 100         -mkdir -p /var/lib/suricata
 101
 102         # Create empty cache directory.
 103         -mkdir -p /var/cache/suricata
 104
 105         # Move config files for references, threshold and classification
 106         # to the rules directory.
 107         rm -rfv /etc/suricata/*.config
 108
 109         # Set correct ownership for the classifiction config file.
 110         # (File has to be writeable for the nobody user)
 111         chown nobody:nobody /usr/share/suricata/classification.config
 112
 113         # Create empty threshold config file.
 114         touch /usr/share/suricata/threshold.config
 115
 116         # Set correct ownership for the threshold.config file.
 117         chown nobody:nobody /usr/share/suricata/threshold.config
 118
 119         # Set correct ownership for /var/lib/suricata and the
 120         # contained files
 121         chown -R nobody:nobody /var/lib/suricata
 122
 123         # Set correct ownership for the cache directory.
 124         chown nobody:nobody /var/cache/suricata
 125
 126         # Create logging directory.
 127         -mkdir -p /var/log/suricata
 128
 129         # Set correct ownership for /var/log/suricata.
 130         chown suricata:suricata /var/log/suricata
 131
 132         # Install converter script needed for Core Update 167
 133         install -m 0755 $(DIR_SRC)/config/suricata/convert-ids-backend-files /usr/sbin/convert-ids-backend-files
 134
 135         @rm -rf $(DIR_APP)
 136         @$(POSTBUILD)