net/snort3/Makefile

   1 #
   2 # This is free software, licensed under the GNU General Public License v2.
   3 # See /LICENSE for more information.
   4 #
   5
   6 include $(TOPDIR)/rules.mk
   7
   8 PKG_NAME:=snort3
   9 PKG_VERSION:=3.1.84.0
  10 PKG_RELEASE:=1
  11
  12 PKG_SOURCE_PROTO:=git
  13 PKG_SOURCE_VERSION:=$(PKG_VERSION)
  14 PKG_SOURCE_URL:=https://github.com/snort3/snort3
  15 PKG_MIRROR_HASH:=ffa69fdd95c55a943ab4dd782923caf31937dd8ad29e202d7fe781373ed84444
  16
  17 PKG_MAINTAINER:=W. Michael Petullo <mike@flyn.org>, John Audia <therealgraysky@proton.me>
  18 PKG_LICENSE:=GPL-2.0-only
  19 PKG_LICENSE_FILES:=COPYING
  20 PKG_CPE_ID:=cpe:/a:snort:snort
  21
  22 include $(INCLUDE_DIR)/package.mk
  23 include $(INCLUDE_DIR)/cmake.mk
  24
  25 define Package/snort3
  26   SUBMENU:=Firewall
  27   SECTION:=net
  28   CATEGORY:=Network
  29   DEPENDS:= \
  30             +(TARGET_x86||TARGET_x86_64):hyperscan-runtime \
  31             +(TARGET_x86||TARGET_x86_64):gperftools-runtime \
  32             +libstdcpp +libdaq3 +libdnet +libopenssl +libpcap +libpcre +libpthread \
  33             +libuuid +zlib +libhwloc +libtirpc @HAS_LUAJIT_ARCH +luajit +libatomic \
  34             +kmod-nft-queue +liblzma +ucode +ucode-mod-fs +ucode-mod-uci
  35   TITLE:=Lightweight Network Intrusion Detection System
  36   URL:=http://www.snort.org/
  37   MENU:=1
  38 endef
  39
  40 define Package/snort3/description
  41   Snort is an open source network intrusion detection and prevention system.
  42   It is capable of performing real-time traffic analysis, alerting, blocking
  43   and packet logging on IP networks.  It utilizes a combination of protocol
  44   analysis and pattern matching in order to detect anomalies, misuse and
  45   attacks.
  46 endef
  47
  48 # Hyperscan and gperftools only builds for x86
  49 ifdef CONFIG_TARGET_x86_64
  50         CMAKE_OPTIONS += -DHS_INCLUDE_DIRS=$(STAGING_DIR)/usr/include/hs \
  51                          -DENABLE_TCMALLOC=ON \
  52                          -DTCMALLOC_LIBRARIES=$(STAGING_DIR)/usr/lib/libtcmalloc.so
  53 endif
  54
  55 CMAKE_OPTIONS += \
  56         -DUSE_TIRPC:BOOL=YES \
  57         -DENABLE_STATIC_DAQ:BOOL=NO \
  58         -DDAQ_INCLUDE_DIR=$(STAGING_DIR)/usr/include/daq3 \
  59         -DDAQ_LIBRARIES_DIR_HINT:PATH=$(STAGING_DIR)/usr/lib/daq3 \
  60         -DFLEX_INCLUDES:PATH=$(STAGING_DIR_HOST)/include \
  61         -DENABLE_COREFILES:BOOL=NO \
  62         -DENABLE_GDB:BOOL=NO \
  63         -DMAKE_DOC:BOOL=NO \
  64         -DMAKE_HTML_DOC:BOOL=NO \
  65         -DMAKE_PDF_DOC:BOOL=NO \
  66         -DMAKE_TEXT_DOC:BOOL=NO \
  67         -DHAVE_LIBUNWIND=OFF \
  68         -DHAVE_LZMA=ON
  69
  70 TARGET_CFLAGS  += -I$(STAGING_DIR)/usr/include/daq3 -I$(STAGING_DIR)/usr/include/tirpc
  71 TARGET_LDFLAGS += -L$(STAGING_DIR)/usr/lib/daq3 -ltirpc
  72
  73 define Package/snort3/conffiles
  74 /etc/config/snort
  75 /etc/snort/
  76 endef
  77
  78 define Package/snort3/install
  79         $(INSTALL_DIR) $(1)/usr/bin
  80         $(INSTALL_BIN) \
  81                 $(PKG_INSTALL_DIR)/usr/bin/snort  \
  82                 $(1)/usr/bin/
  83
  84         $(INSTALL_BIN) \
  85                 $(PKG_INSTALL_DIR)/usr/bin/snort2lua  \
  86                 $(1)/usr/bin/
  87
  88         $(INSTALL_BIN) \
  89                 $(PKG_INSTALL_DIR)/usr/bin/u2{boat,spewfoo} \
  90                 $(1)/usr/bin/
  91
  92         $(INSTALL_BIN) \
  93                 ./files/snort-{mgr,rules} \
  94                 $(1)/usr/bin/
  95
  96         $(INSTALL_DIR) $(1)/usr/lib/snort
  97         $(CP) \
  98                 $(PKG_INSTALL_DIR)/usr/lib/snort/daq/daq_hext.so \
  99                 $(1)/usr/lib/snort/
 100
 101         $(CP) \
 102                 $(PKG_INSTALL_DIR)/usr/lib/snort/daq/daq_file.so \
 103                 $(1)/usr/lib/snort/
 104
 105         $(INSTALL_DIR) $(1)/usr/share/lua
 106         $(CP) \
 107                 $(PKG_INSTALL_DIR)/usr/include/snort/lua/snort_plugin.lua \
 108                 $(1)/usr/share/lua/
 109
 110         $(INSTALL_DIR) $(1)/usr/share/snort
 111         $(INSTALL_CONF) \
 112                 ./files/main.uc \
 113                 $(1)/usr/share/snort/
 114
 115         $(INSTALL_DIR) $(1)/usr/share/snort/templates
 116         $(INSTALL_CONF) \
 117                 ./files/nftables.uc \
 118                 $(1)/usr/share/snort/templates/
 119         $(INSTALL_CONF) \
 120                 ./files/snort.uc \
 121                 $(1)/usr/share/snort/templates/
 122
 123         $(INSTALL_DIR) $(1)/etc/snort/{rules,lists,builtin_rules,so_rules}
 124
 125         $(INSTALL_CONF) \
 126                 $(PKG_INSTALL_DIR)/usr/etc/snort/*.lua \
 127                 $(1)/etc/snort
 128         $(INSTALL_CONF) \
 129                 $(PKG_INSTALL_DIR)/usr/etc/snort/file_magic.rules \
 130                 $(1)/etc/snort
 131
 132         $(INSTALL_DIR) $(1)/etc/init.d
 133         $(INSTALL_BIN) \
 134                 ./files/snort.init \
 135                 $(1)/etc/init.d/snort
 136
 137         $(INSTALL_DIR) $(1)/etc/config
 138         $(INSTALL_CONF) \
 139                 ./files/snort.config \
 140                 $(1)/etc/config/snort
 141
 142         sed \
 143                 -i \
 144                 -e "/^-- HOME_NET and EXTERNAL_NET/ i -- The values for the two variables HOME_NET and EXTERNAL_NET have been" \
 145                 -e "/^-- HOME_NET and EXTERNAL_NET/ i -- moved to /etc/config/snort, so do not modify them here without good" \
 146                 -e "/^-- HOME_NET and EXTERNAL_NET/ i -- reason.\n" \
 147                 -e 's/^\(HOME_NET\s\+=\)/--\1/g' \
 148                 -e 's/^\(EXTERNAL_NET\s\+=\)/--\1/g' \
 149                 $(1)/etc/snort/snort.lua
 150         sed \
 151                 -i -e "s/^\\(RULE_PATH\\s\\+=\\).*/\\1 'rules'/g" \
 152                 -e "s/^\\(BUILTIN_RULE_PATH\\s\\+=\\).*/\\1 'builtin_rules'/g" \
 153                 -e "s/^\\(PLUGIN_RULE_PATH\\s\\+=\\).*/\\1 'so_rules'/g" \
 154                 -e "s/^\\(WHITE_LIST_PATH\\s\\+=\\).*/\\1 'lists'/g" \
 155                 -e "s/^\\(BLACK_LIST_PATH\\s\\+=\\).*/\\1 'lists'/g" \
 156                 $(1)/etc/snort/snort_defaults.lua
 157 endef
 158
 159 $(eval $(call BuildPackage,snort3))