lfs/suricata

   1 ###############################################################################
   2 #                                                                             #
   3 # IPFire.org - A linux based firewall                                         #
   4 # Copyright (C) 2007-2021  IPFire Team  <info@ipfire.org>                     #
   5 #                                                                             #
   6 # This program is free software: you can redistribute it and/or modify        #
   7 # it under the terms of the GNU General Public License as published by        #
   8 # the Free Software Foundation, either version 3 of the License, or           #
   9 # (at your option) any later version.                                         #
  10 #                                                                             #
  11 # This program is distributed in the hope that it will be useful,             #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of              #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
  14 # GNU General Public License for more details.                                #
  15 #                                                                             #
  16 # You should have received a copy of the GNU General Public License           #
  17 # along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
  18 #                                                                             #
  19 ###############################################################################
  20
  21 ###############################################################################
  22 # Definitions
  23 ###############################################################################
  24
  25 include Config
  26
  27 VER        = 5.0.8
  28
  29 THISAPP    = suricata-$(VER)
  30 DL_FILE    = $(THISAPP).tar.gz
  31 DL_FROM    = $(URL_IPFIRE)
  32 DIR_APP    = $(DIR_SRC)/$(THISAPP)
  33 TARGET     = $(DIR_INFO)/$(THISAPP)
  34
  35 ###############################################################################
  36 # Top-level Rules
  37 ###############################################################################
  38
  39 objects = $(DL_FILE)
  40
  41 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
  42
  43 $(DL_FILE)_MD5 = d48387c2e0b5e502852b077369d947c5
  44
  45 install : $(TARGET)
  46
  47 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
  48
  49 download :$(patsubst %,$(DIR_DL)/%,$(objects))
  50
  51 md5 : $(subst %,%_MD5,$(objects))
  52
  53 ###############################################################################
  54 # Downloading, checking, md5sum
  55 ###############################################################################
  56
  57 $(patsubst %,$(DIR_CHK)/%,$(objects)) :
  58         @$(CHECK)
  59
  60 $(patsubst %,$(DIR_DL)/%,$(objects)) :
  61         @$(LOAD)
  62
  63 $(subst %,%_MD5,$(objects)) :
  64         @$(MD5)
  65
  66 ###############################################################################
  67 # Installation Details
  68 ###############################################################################
  69
  70 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
  71         @$(PREBUILD)
  72         @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
  73         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-5.0-stream-tcp-Handle-retransmitted-SYN-with-TSval.patch
  74         cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-disable-sid-2210059.patch
  75         cd $(DIR_APP) && LDFLAGS="$(LDFLAGS)" ./configure \
  76                 --prefix=/usr \
  77                 --sysconfdir=/etc \
  78                 --localstatedir=/var \
  79                 --enable-gccprotect \
  80                 --disable-gccmarch-native \
  81                 --enable-non-bundled-htp \
  82                 --enable-nfqueue \
  83                 --disable-static \
  84                 --disable-python \
  85                 --with-libjansson-libraries=/usr/lib \
  86                 --with-libjansson-includes=/usr/include \
  87                 --disable-suricata-update \
  88                 --enable-rust
  89
  90         cd $(DIR_APP) && make $(MAKETUNING)
  91         cd $(DIR_APP) && make install
  92         cd $(DIR_APP) && make install-conf
  93
  94         # Remove default suricata config file.
  95         rm -rvf /etc/suricata/suricata.yaml
  96
  97         # Install IPFire related config file.
  98         install -m 0644 $(DIR_SRC)/config/suricata/suricata.yaml /etc/suricata
  99
 100         # Install yaml file for loading default rules.
 101         install -m 0664 $(DIR_SRC)/config/suricata/suricata-default-rules.yaml /var/ipfire/suricata
 102
 103         # Create emtpy rules directory.
 104         -mkdir -p /var/lib/suricata
 105
 106         # Move config files for references, threshold and classification
 107         # to the rules directory.
 108         mv /etc/suricata/*.config /var/lib/suricata
 109
 110         # Set correct permissions for the files.
 111         chmod 644 /var/lib/suricata/*.config
 112
 113         # Set correct ownership for /var/lib/suricata and the
 114         # contained files
 115         chown -R nobody:nobody /var/lib/suricata
 116
 117         # Create logging directory.
 118         -mkdir -p /var/log/suricata
 119
 120         # Set correct ownership for /var/log/suricata.
 121         chown suricata:suricata /var/log/suricata
 122
 123         @rm -rf $(DIR_APP)
 124         @$(POSTBUILD)