]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - lfs/suricata
suricata: Change midstream policy to "pass-flow"
[people/pmueller/ipfire-2.x.git] / lfs / suricata
1 ###############################################################################
2 # #
3 # IPFire.org - A linux based firewall #
4 # Copyright (C) 2007-2021 IPFire Team <info@ipfire.org> #
5 # #
6 # This program is free software: you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation, either version 3 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # This program is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
18 # #
19 ###############################################################################
20
21 ###############################################################################
22 # Definitions
23 ###############################################################################
24
25 include Config
26
27 VER = 5.0.6
28
29 THISAPP = suricata-$(VER)
30 DL_FILE = $(THISAPP).tar.gz
31 DL_FROM = $(URL_IPFIRE)
32 DIR_APP = $(DIR_SRC)/$(THISAPP)
33 TARGET = $(DIR_INFO)/$(THISAPP)
34 SUP_ARCH = x86_64 i586 aarch64 armv5tel
35
36 ifeq "$(BUILD_ARCH)" "armv5tel"
37 LDFLAGS += -latomic
38 endif
39
40 ###############################################################################
41 # Top-level Rules
42 ###############################################################################
43
44 objects = $(DL_FILE)
45
46 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
47
48 $(DL_FILE)_MD5 = 82d80b4b3179315bf6f5695c6437ee1f
49
50 install : $(TARGET)
51
52 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
53
54 download :$(patsubst %,$(DIR_DL)/%,$(objects))
55
56 md5 : $(subst %,%_MD5,$(objects))
57
58 ###############################################################################
59 # Downloading, checking, md5sum
60 ###############################################################################
61
62 $(patsubst %,$(DIR_CHK)/%,$(objects)) :
63 @$(CHECK)
64
65 $(patsubst %,$(DIR_DL)/%,$(objects)) :
66 @$(LOAD)
67
68 $(subst %,%_MD5,$(objects)) :
69 @$(MD5)
70
71 ###############################################################################
72 # Installation Details
73 ###############################################################################
74
75 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
76 @$(PREBUILD)
77 @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
78 cd $(DIR_APP) && LDFLAGS="$(LDFLAGS)" ./configure \
79 --prefix=/usr \
80 --sysconfdir=/etc \
81 --localstatedir=/var \
82 --enable-gccprotect \
83 --disable-gccmarch-native \
84 --enable-non-bundled-htp \
85 --enable-nfqueue \
86 --disable-static \
87 --disable-python \
88 --with-libjansson-libraries=/usr/lib \
89 --with-libjansson-includes=/usr/include \
90 --disable-suricata-update \
91 --enable-rust
92
93 cd $(DIR_APP) && make $(MAKETUNING)
94 cd $(DIR_APP) && make install
95 cd $(DIR_APP) && make install-conf
96
97 # Remove default suricata config file.
98 rm -rvf /etc/suricata/suricata.yaml
99
100 # Install IPFire related config file.
101 install -m 0644 $(DIR_SRC)/config/suricata/suricata.yaml /etc/suricata
102
103 # Remove shipped rules.
104 rm -rvf /usr/share/suricata
105
106 # Create emtpy rules directory.
107 -mkdir -p /var/lib/suricata
108
109 # Move config files for references, threshold and classification
110 # to the rules directory.
111 mv /etc/suricata/*.config /var/lib/suricata
112
113 # Set correct permissions for the files.
114 chmod 644 /var/lib/suricata/*.config
115
116 # Set correct ownership for /var/lib/suricata and the
117 # contained files
118 chown -R nobody:nobody /var/lib/suricata
119
120 # Create logging directory.
121 -mkdir -p /var/log/suricata
122
123 # Set correct ownership for /var/log/suricata.
124 chown suricata:suricata /var/log/suricata
125
126 @rm -rf $(DIR_APP)
127 @$(POSTBUILD)