diff --git a/security/suricata/Makefile b/security/suricata/Makefile index 6e04db32788d..1d2fd517c424 100644 --- a/security/suricata/Makefile +++ b/security/suricata/Makefile @@ -1,124 +1,122 @@ PORTNAME= suricata -DISTVERSION= 8.0.5 -PORTREVISION= 1 +DISTVERSION= 8.0.6 CATEGORIES= security MASTER_SITES= https://www.openinfosecfoundation.org/download/ MAINTAINER= bofh@FreeBSD.org COMMENT= High Performance Network IDS, IPS and Security Monitoring engine WWW= https://suricata.io LICENSE= GPLv2 LICENSE_FILE= ${WRKSRC}/LICENSE BUILD_DEPENDS= rustc:lang/${RUST_DEFAULT} LIB_DEPENDS= libjansson.so:devel/jansson \ liblz4.so:archivers/liblz4 \ libnet.so:net/libnet \ libpcre2-8.so:devel/pcre2 \ libyaml.so:textproc/libyaml USES= autoreconf cpe gmake iconv:translit libtool localbase pathfix \ pkgconfig - CPE_VENDOR= openinfosecfoundation USE_LDCONFIG= yes USE_RC_SUBR= ${PORTNAME} GNU_CONFIGURE= yes CONFIGURE_ARGS+= --disable-gccmarch-native \ --enable-bundled-htp \ --enable-gccprotect -MAKE_ENV= RUSTFLAGS="${RUSTFLAGS} -C linker=${CC:Q} ${LDFLAGS:C/.+/-C link-arg=&/}" +MAKE_ENV= RUSTFLAGS="${RUSTFLAGS} -C linker=${CC:Q} ${LDFLAGS:C/.+/-C link-arg=&/}" INSTALL_TARGET= install-strip TEST_TARGET= check SUB_FILES= pkg-message OPTIONS_DEFINE= GEOIP IPFW NETMAP NSS PORTS_PCAP PYTHON REDIS TESTS OPTIONS_DEFINE_amd64= HYPERSCAN OPTIONS_DEFAULT= IPFW NETMAP PYTHON OPTIONS_RADIO= SCRIPTS OPTIONS_RADIO_SCRIPTS= LUA LUAJIT OPTIONS_SUB= yes GEOIP_DESC= GeoIP support HYPERSCAN_DESC= Hyperscan support IPFW_DESC= IPFW and IP Divert support for inline IDP LUAJIT_DESC= LuaJIT scripting support LUA_DESC= LUA scripting support NETMAP_DESC= Netmap support for inline IDP NSS_DESC= File checksums and SSL/TLS fingerprinting PORTS_PCAP_DESC= Use libpcap from ports PYTHON_DESC= Python-based update and control utilities REDIS_DESC= Redis output support SCRIPTS_DESC= Scripting TESTS_DESC= Unit tests in suricata binary GEOIP_LIB_DEPENDS= libmaxminddb.so:net/libmaxminddb GEOIP_CONFIGURE_ON= --enable-geoip HYPERSCAN_LIB_DEPENDS= libhs.so:devel/hyperscan IPFW_CONFIGURE_ON= --enable-ipfw LUAJIT_USES= luajit LUAJIT_CONFIGURE_ON= --enable-luajit LUA_USES= lua:51 LUA_CONFIGURE_ON= --enable-lua NETMAP_CONFIGURE_ENABLE= netmap NSS_LIB_DEPENDS= libnspr4.so:devel/nspr \ libnss3.so:security/nss NSS_CONFIGURE_OFF= --disable-nspr \ --disable-nss PORTS_PCAP_LIB_DEPENDS= libpcap.so.1:net/libpcap PYTHON_BUILD_DEPENDS= ${PYTHON_RUN_DEPENDS} PYTHON_RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}pyyaml>=0:devel/py-pyyaml@${PY_FLAVOR} PYTHON_USES= python PYTHON_CONFIGURE_ENABLE= python REDIS_LIB_DEPENDS= libevent_pthreads.so:devel/libevent \ libhiredis.so:databases/hiredis REDIS_CONFIGURE_ON= --enable-hiredis TESTS_CONFIGURE_ENABLE= unittests pre-patch: @${CP} ${FILESDIR}/ax_check_compile_flag.m4 ${WRKSRC}/m4 post-patch: # Disable vendor checksums @${REINPLACE_CMD} 's,"files":{[^}]*},"files":{},' \ ${WRKSRC}/rust/vendor/*/.cargo-checksum.json post-patch-PYTHON-on: @${REINPLACE_CMD} -e "/AC_PATH_PROGS.*HAVE_PYTHON/ s/python[^,]*,/${PYTHON_VERSION},/g" \ ${WRKSRC}/configure.ac post-install: @${MKDIR} ${STAGEDIR}${ETCDIR} ${STAGEDIR}/var/log/suricata .for f in classification.config reference.config @${MV} ${STAGEDIR}${DATADIR}/${f} ${STAGEDIR}${ETCDIR}/${f}.sample .endfor .for f in suricata.yaml threshold.config ${INSTALL_DATA} ${WRKSRC}/${f} ${STAGEDIR}${ETCDIR}/${f}.sample .endfor post-install-PYTHON-on: (cd ${STAGEDIR}${PREFIX} \ && ${PYTHON_CMD} ${PYTHON_LIBDIR}/compileall.py \ -d /usr/local/lib/suricata/python -f lib/suricata/python) .for f in disable.conf drop.conf enable.conf modify.conf threshold.in update.yaml ${INSTALL_DATA} ${WRKSRC}/suricata-update/suricata/update/configs/${f} \ ${STAGEDIR}${PREFIX}/lib/suricata/python/suricata/update/configs .endfor .include diff --git a/security/suricata/distinfo b/security/suricata/distinfo index 4c6662c101bd..b37dc22ee1e6 100644 --- a/security/suricata/distinfo +++ b/security/suricata/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1779639445 -SHA256 (suricata-8.0.5.tar.gz) = 04cad79a2a91499a729e41bfb570060c3cedb94cd5a5584d79582ebd18574ee0 -SIZE (suricata-8.0.5.tar.gz) = 44372362 +TIMESTAMP = 1783539696 +SHA256 (suricata-8.0.6.tar.gz) = b264584edda4a3b2b462050099c7c54f4f35ac0c7164e41084be9b216c090f8c +SIZE (suricata-8.0.6.tar.gz) = 44411503 diff --git a/security/suricata/files/suricata.in b/security/suricata/files/suricata.in index a3bed3557e60..2c7ab9f07506 100644 --- a/security/suricata/files/suricata.in +++ b/security/suricata/files/suricata.in @@ -1,67 +1,68 @@ #!/bin/sh # PROVIDE: suricata # REQUIRE: DAEMON # BEFORE: LOGIN # KEYWORD: shutdown # Add the following lines to /etc/rc.conf to enable suricata: # suricata_enable (bool): Set to YES to enable suricata # Default: NO # suricata_flags (str): Extra flags passed to suricata # Default: -D # suricata_interface (str): Network interface(s) to sniff -# Default: "" +# Default: "" # suricata_conf (str): Suricata configuration file # Default: ${PREFIX}/etc/suricata/suricata.yaml # suricata_divertport (int): Port to create divert socket (Inline Mode) # Default: 8000 # suricata_netmap (str): Set to YES to enable netmap (Inline Mode) # Default: NO # suricata_user (str): Set the user to run suricata as # Default: root # suricata_pidfile (str): Pidfile to store pid of suricata process # Default: /var/run/suricata.pid . /etc/rc.subr name="suricata" rcvar=suricata_enable start_precmd="suricata_prestart" command="%%PREFIX%%/bin/suricata" load_rc_config $name -[ -z "$suricata_enable" ] && suricata_enable="NO" -[ -z "$suricata_conf" ] && suricata_conf="%%PREFIX%%/etc/suricata/suricata.yaml" -[ -z "$suricata_flags" ] && suricata_flags="-D" -[ -z "$suricata_divertport" ] && suricata_divertport="8000" -[ -z "$suricata_netmap" ] && suricata_netmap="NO" -[ -z "$suricata_user" ] && suricata_user="root" -[ -z "$suricata_pidfile" ] && suricata_pidfile="/var/run/suricata.pid" +suricata_enable=${suricata_enable:-"NO"} +suricata_conf=${suricata_conf:-"%%PREFIX%%/etc/suricata/suricata.yaml"} +suricata_flags=${suricata_flags:-"-D"} +suricata_divertport=${suricata_divertport:-"8000"} +suricata_netmap=${suricata_netmap:-"NO"} +: ${suricata_svcj_options:="net_all"} +$suricata_user=${suricata_user:-"root"} +suricata_pidfile=${suricata_pidfile:-"/var/run/suricata.pid"} if [ -n "$suricata_interface" ]; then for interface in $suricata_interface; do suricata_flags="$suricata_flags --pcap=$interface" done elif [ "$suricata_netmap" != "NO" ]; then suricata_flags="$suricata_flags --netmap" else suricata_flags="$suricata_flags -d $suricata_divertport" info "Inline Mode on divert port $suricata_divertport (suricata_interface not defined)" fi pidfile=$suricata_pidfile suricata_flags="$suricata_flags --pidfile $pidfile" [ -n "$suricata_conf" ] && suricata_flags="$suricata_flags -c $suricata_conf" suricata_prestart() { if ! run_rc_command status > /dev/null; then rm -f "$pidfile" fi } run_rc_command "$1"