########################################################### # # snort # ########################################################### # # SNORT_VERSION, SNORT_SITE and SNORT_SOURCE define # the upstream location of the source code for the package. # SNORT_DIR is the directory which is created when the source # archive is unpacked. # SNORT_UNZIP is the command used to unzip the source. # It is usually "zcat" (for .gz) or "bzcat" (for .bz2) # # You should change all these variables to suit your package. # Please make sure that you add a description, and that you # list all your packages' dependencies, seperated by commas. # # If you list yourself as MAINTAINER, please give a valid email # address, and indicate your irc nick if it cannot be easily deduced # from your name or email address. If you leave MAINTAINER set to # "NSLU2 Linux" other developers will feel free to edit. # SNORT_SITE=http://dl.snort.org/snort-current SNORT_SITE2=http://www.snort.org/dl/old SNORT_VERSION=2.8.6.1 SNORT_SOURCE=snort-$(SNORT_VERSION).tar.gz SNORT_DIR=snort-$(SNORT_VERSION) SNORT_UNZIP=zcat SNORT_MAINTAINER=NSLU2 Linux SNORT_DESCRIPTION=A lightweight network intrusion detection system. SNORT_SECTION=net SNORT_PRIORITY=optional SNORT_DEPENDS=libpcap, pcre SNORT_SUGGESTS= SNORT_CONFLICTS= # # SNORT_IPK_VERSION should be incremented when the ipk changes. # SNORT_IPK_VERSION=2 # # SNORT_CONFFILES should be a list of user-editable files #SNORT_CONFFILES=/opt/etc/snort.conf /opt/etc/init.d/SXXsnort # # SNORT_PATCHES should list any patches, in the the order in # which they should be applied to the source code. # SNORT_PATCHES=$(SNORT_SOURCE_DIR)/configure.patch # # If the compilation of the package requires additional # compilation or linking flags, then list them here. # SNORT_CPPFLAGS= SNORT_LDFLAGS= # # SNORT_BUILD_DIR is the directory in which the build is done. # SNORT_SOURCE_DIR is the directory which holds all the # patches and ipkg control files. # SNORT_IPK_DIR is the directory in which the ipk is built. # SNORT_IPK is the name of the resulting ipk files. # # You should not change any of these variables. # SNORT_BUILD_DIR=$(BUILD_DIR)/snort SNORT_SOURCE_DIR=$(SOURCE_DIR)/snort SNORT_IPK_DIR=$(BUILD_DIR)/snort-$(SNORT_VERSION)-ipk SNORT_IPK=$(BUILD_DIR)/snort_$(SNORT_VERSION)-$(SNORT_IPK_VERSION)_$(TARGET_ARCH).ipk .PHONY: snort-source snort-unpack snort snort-stage snort-ipk snort-clean snort-dirclean snort-check # # This is the dependency on the source code. If the source is missing, # then it will be fetched from the site using wget. # $(DL_DIR)/$(SNORT_SOURCE): $(WGET) -P $(@D) $(SNORT_SITE)/$(@F) || \ $(WGET) -P $(@D) $(SNORT_SITE2)/$(@F) || \ $(WGET) -P $(@D) $(SOURCES_NLO_SITE)/$(@F) # # The source code depends on it existing within the download directory. # This target will be called by the top level Makefile to download the # source code's archive (.tar.gz, .bz2, etc.) # snort-source: $(DL_DIR)/$(SNORT_SOURCE) $(SNORT_PATCHES) # # This target unpacks the source code in the build directory. # If the source archive is not .tar.gz or .tar.bz2, then you will need # to change the commands here. Patches to the source code are also # applied in this target as required. # # This target also configures the build within the build directory. # Flags such as LDFLAGS and CPPFLAGS should be passed into configure # and NOT $(MAKE) below. Passing it to configure causes configure to # correctly BUILD the Makefile with the right paths, where passing it # to Make causes it to override the default search paths of the compiler. # # If the compilation of the package requires other packages to be staged # first, then do that first (e.g. "$(MAKE) -stage -stage"). # # If the package uses GNU libtool, you should invoke $(PATCH_LIBTOOL) as # shown below to make various patches to it. # $(SNORT_BUILD_DIR)/.configured: $(DL_DIR)/$(SNORT_SOURCE) $(SNORT_PATCHES) make/snort.mk $(MAKE) libpcap-stage pcre-stage rm -rf $(BUILD_DIR)/$(SNORT_DIR) $(@D) $(SNORT_UNZIP) $(DL_DIR)/$(SNORT_SOURCE) | tar -C $(BUILD_DIR) -xvf - if test -n "$(SNORT_PATCHES)" ; \ then cat $(SNORT_PATCHES) | \ patch -bd $(BUILD_DIR)/$(SNORT_DIR) -p0 ; \ fi if test "$(BUILD_DIR)/$(SNORT_DIR)" != "$(@D)" ; \ then mv $(BUILD_DIR)/$(SNORT_DIR) $(@D) ; \ fi cp -f $(SOURCE_DIR)/common/config.* $(@D)/ ACLOCAL="aclocal -Im4" autoreconf -vif $(@D) sed -i -e '/extra_incl/s|-I/usr/include/pcap||' $(@D)/configure (cd $(@D); \ $(TARGET_CONFIGURE_OPTS) \ CPPFLAGS="$(STAGING_CPPFLAGS) $(SNORT_CPPFLAGS)" \ LDFLAGS="$(STAGING_LDFLAGS) $(SNORT_LDFLAGS)" \ ./configure \ --build=$(GNU_HOST_NAME) \ --host=$(GNU_TARGET_NAME) \ --target=$(GNU_TARGET_NAME) \ --prefix=/opt \ --with-libpcap-includes=$(STAGING_INCLUDE_DIR) \ --with-libpcap-libraries=$(STAGING_LIB_DIR) \ --with-libpcre-includes=$(STAGING_INCLUDE_DIR) \ --with-libpcre-libraries=$(STAGING_LIB_DIR) \ --disable-nls \ --disable-static \ ) $(PATCH_LIBTOOL) $(@D)/libtool touch $@ snort-unpack: $(SNORT_BUILD_DIR)/.configured # # This builds the actual binary. # $(SNORT_BUILD_DIR)/.built: $(SNORT_BUILD_DIR)/.configured rm -f $@ $(MAKE) -C $(@D) touch $@ # # This is the build convenience target. # snort: $(SNORT_BUILD_DIR)/.built # # If you are building a library, then you need to stage it too. # #$(SNORT_BUILD_DIR)/.staged: $(SNORT_BUILD_DIR)/.built # rm -f $@ # $(MAKE) -C $(@D) DESTDIR=$(STAGING_DIR) install # touch $@ # #snort-stage: $(SNORT_BUILD_DIR)/.staged # # This rule creates a control file for ipkg. It is no longer # necessary to create a seperate control file under sources/snort # $(SNORT_IPK_DIR)/CONTROL/control: @install -d $(@D) @rm -f $@ @echo "Package: snort" >>$@ @echo "Architecture: $(TARGET_ARCH)" >>$@ @echo "Priority: $(SNORT_PRIORITY)" >>$@ @echo "Section: $(SNORT_SECTION)" >>$@ @echo "Version: $(SNORT_VERSION)-$(SNORT_IPK_VERSION)" >>$@ @echo "Maintainer: $(SNORT_MAINTAINER)" >>$@ @echo "Source: $(SNORT_SITE)/$(SNORT_SOURCE)" >>$@ @echo "Description: $(SNORT_DESCRIPTION)" >>$@ @echo "Depends: $(SNORT_DEPENDS)" >>$@ @echo "Suggests: $(SNORT_SUGGESTS)" >>$@ @echo "Conflicts: $(SNORT_CONFLICTS)" >>$@ # # This builds the IPK file. # # Binaries should be installed into $(SNORT_IPK_DIR)/opt/sbin or $(SNORT_IPK_DIR)/opt/bin # (use the location in a well-known Linux distro as a guide for choosing sbin or bin). # Libraries and include files should be installed into $(SNORT_IPK_DIR)/opt/{lib,include} # Configuration files should be installed in $(SNORT_IPK_DIR)/opt/etc/snort/... # Documentation files should be installed in $(SNORT_IPK_DIR)/opt/doc/snort/... # Daemon startup scripts should be installed in $(SNORT_IPK_DIR)/opt/etc/init.d/S??snort # # You may need to patch your application to make it use these locations. # $(SNORT_IPK): $(SNORT_BUILD_DIR)/.built rm -rf $(SNORT_IPK_DIR) $(BUILD_DIR)/snort_*_$(TARGET_ARCH).ipk $(MAKE) -C $(SNORT_BUILD_DIR) DESTDIR=$(SNORT_IPK_DIR) install-strip # install -d $(SNORT_IPK_DIR)/opt/etc/ # install -m 644 $(SNORT_SOURCE_DIR)/snort.conf $(SNORT_IPK_DIR)/opt/etc/snort.conf # install -d $(SNORT_IPK_DIR)/opt/etc/init.d # install -m 755 $(SNORT_SOURCE_DIR)/rc.snort $(SNORT_IPK_DIR)/opt/etc/init.d/SXXsnort # sed -i -e '/^#!/aOPTWARE_TARGET=${OPTWARE_TARGET}' $(SNORT_IPK_DIR)/opt/etc/init.d/SXXsnort $(MAKE) $(SNORT_IPK_DIR)/CONTROL/control # install -m 755 $(SNORT_SOURCE_DIR)/postinst $(SNORT_IPK_DIR)/CONTROL/postinst # sed -i -e '/^#!/aOPTWARE_TARGET=${OPTWARE_TARGET}' $(SNORT_IPK_DIR)/CONTROL/postinst # install -m 755 $(SNORT_SOURCE_DIR)/prerm $(SNORT_IPK_DIR)/CONTROL/prerm # sed -i -e '/^#!/aOPTWARE_TARGET=${OPTWARE_TARGET}' $(SNORT_IPK_DIR)/CONTROL/prerm echo $(SNORT_CONFFILES) | sed -e 's/ /\n/g' > $(SNORT_IPK_DIR)/CONTROL/conffiles cd $(BUILD_DIR); $(IPKG_BUILD) $(SNORT_IPK_DIR) # # This is called from the top level makefile to create the IPK file. # snort-ipk: $(SNORT_IPK) # # This is called from the top level makefile to clean all of the built files. # snort-clean: rm -f $(SNORT_BUILD_DIR)/.built -$(MAKE) -C $(SNORT_BUILD_DIR) clean # # This is called from the top level makefile to clean all dynamically created # directories. # snort-dirclean: rm -rf $(BUILD_DIR)/$(SNORT_DIR) $(SNORT_BUILD_DIR) $(SNORT_IPK_DIR) $(SNORT_IPK) # # # Some sanity check for the package. # snort-check: $(SNORT_IPK) perl scripts/optware-check-package.pl --target=$(OPTWARE_TARGET) $^