rocklinux/package/misc/snort/snort.conf

# --- ROCK-COPYRIGHT-NOTE-BEGIN ---
# 
# This copyright note is auto-generated by ./scripts/Create-CopyPatch.
# Please add additional copyright information _after_ the line containing
# the ROCK-COPYRIGHT-NOTE-END tag. Otherwise it might get removed by
# the ./scripts/Create-CopyPatch script. Do not edit this copyright text!
# 
# ROCK Linux: rock-src/package/misc/snort/snort.conf
# ROCK Linux is Copyright (C) 1998 - 2003 Clifford Wolf
# 
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version. A copy of the GNU General Public
# License can be found at Documentation/COPYING.
# 
# Many people helped and are helping developing ROCK Linux. Please
# have a look at http://www.rocklinux.org/ and the Documentation/TEAM
# file for details.
# 
# --- ROCK-COPYRIGHT-NOTE-END ---
 
if [ $prefix_auto = 1 ] ; then
	prefix=opt/snort
	set_confopt
fi

# postgresql support
if [ -n "$pkg_postgresql_prefix" ] ; then
	var_append extraconfopt " " "--with-postgresql=$pkg_postgrsql_prefix"
fi
		
# mysql support
if [ -n "$pkg_mysql_prefix" ] ; then
	var_append extraconfopt " " "--with-mysql=$pkg_mysql_prefix"
fi

# openSSL support
ssldir=""
if [ -r /opt/openssl/include/crypto.h ] ; then
	ssldir=/opt/openssl
elif [ -r /usr/include/openssl/crypto.h ]; then
	ssldir=/usr/
elif [ -r /usr/local/include/openssl/crypto.h ]; then
	ssldir=/usr/local/
fi
if [ "$ssldir" != "" ] ; then
	var_append extraconfopt " " "--with-openssl=$ssldir"
fi

# FlexResp feature
# NOTE: At time of writing, FlexResp:
# (a) is considered in Alpha stage and "to be used with caution" 
# (b) requires libnet, which is an unmaintained package in ROCK
# (c) does not work with libnet 1.1 (the latest stable release)
# (d) works only with libnet 1.02a, which is deprecated
# For these reasons, FlexResp is not enabled.
# var_append extraconfopt " " "--enable-flexresp"

snort_premake()
{	
	# Comply with FHS for /var/opt/
	sed 's/\/var\/log\/snort/\/var\/opt\/snort\/log/' src/snort.h > \
	  src/snort.h.new
	mv -f src/snort.h{.new,}
}	

snort_postmake()
{
	# 'make install' sadly doesn't copy a lot of useful stuff
	# so we have to do it ourselves
	
	# The contrib directory contains helper scripts and tars
	# of plugins.  This directory is just copied over.
	cp -fr contrib $docdir
	
	# The etc directory includes snort.conf, sigs, maps and rules.
	# Technically the maps should not be here but snort convention
	# places them in etc.
	# For security reasons this directory should not be world-readable
	mkdir -p $root/$prefix/var
	mkdir -p $root/$prefix/etc
	cp -r etc/* $root/$prefix/etc/
	cp -r rules $root/$prefix/etc/

	# THIS IS DANGEROUS - IT MIGHT AFFECT OTHER PACKAFES FILES !!!
	# FIS THIS PROPERLY!
	# mv /opt/snort/etc/etc/* /opt/snort/etc/
	# rm -rf /opt/snort/etc/etc/	
	sed 's/\.\.\/rules/.\/rules/' $root/$prefix/etc/snort.conf > \
		$root/$prefix/etc/snort.conf.new
	mv -f $root/$prefix/etc/snort.conf{.new,}

	# THIS IS DANGEROUS - IT MIGHT AFFECT OTHER PACKAGES FILES !!!
	# Remove Makefiles (left from build)
	# rm -f $root/$prefix/*/Makefile*
	# rm -f $root/$prefix/*/*/Makefile*

	# Create a SysV init script for snort
	install_init snort $confdir/snort.init
}

hook_add premake 3 snort_premake	
hook_add postmake 3 snort_postmake