PR: 53012

Submitted by:	Clement Laforet <sheepkiller@cultdeadsheep.org>

Add prelude-lml 0.8.3, Log Monitoring Lackey for prelude Network
Intrusion Detection System.

6 files changed, 102 insertions, 0 deletions

diff --git a/security/Makefile b/security/Makefile
index 916f50bc5b79..b10294c6b88a 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -265,6 +265,7 @@
     SUBDIR += portscanner
     SUBDIR += portsentry
     SUBDIR += ppgen
+    SUBDIR += prelude-lml
     SUBDIR += proxycheck
     SUBDIR += proxytunnel
     SUBDIR += pscan
diff --git a/security/prelude-lml/Makefile b/security/prelude-lml/Makefile
new file mode 100644
index 000000000000..d09a7c23c11e
--- /dev/null
+++ b/security/prelude-lml/Makefile
@@ -0,0 +1,23 @@
+# New ports collection makefile for:	prelude-lml
+# Date created:			Sun Aug 4 19:31:17 CEST 2002
+# Whom:				Clement Laforet <sheepkiller@cultdeadsheep.org>
+#
+# $FreeBSD$
+
+PORTNAME=	prelude-lml
+PORTVERSION=	0.8.3
+CATEGORIES=	security
+MASTER_SITES=   http://www.prelude-ids.org/download/releases/
+
+MAINTAINER=	sheepkiller@cultdeadsheep.org
+COMMENT=	Prelude Network Intrusion Detection System Log Monitoring Lackey
+
+LIB_DEPENDS+=	prelude.0:${PORTSDIR}/security/libprelude \
+		pcre.0:${PORTSDIR}/devel/pcre
+
+GNU_MAKE=		yes
+GNU_CONFIGURE=		yes
+CONFIGURE_ARGS+=	--with-html-dir=${PREFIX}/share/doc \
+			--program-prefix=""
+
+.include <bsd.port.mk>
diff --git a/security/prelude-lml/distinfo b/security/prelude-lml/distinfo
new file mode 100644
index 000000000000..2eda314cb74d
--- /dev/null
+++ b/security/prelude-lml/distinfo
@@ -0,0 +1 @@
+MD5 (prelude-lml-0.8.3.tar.gz) = 2dd22a105da2c93a529202d2621e9c1c
diff --git a/security/prelude-lml/files/patch-Makefile.in b/security/prelude-lml/files/patch-Makefile.in
new file mode 100644
index 000000000000..b500e3127f12
--- /dev/null
+++ b/security/prelude-lml/files/patch-Makefile.in
@@ -0,0 +1,37 @@
+--- Makefile.in.orig	Sat Apr 26 16:39:13 2003
++++ Makefile.in	Sat Jun  7 10:38:05 2003
+@@ -172,11 +172,11 @@
+ 	$(mkinstalldirs) $(DESTDIR)$(preludeconfdir)
+ 	@list='$(preludeconf_DATA)'; for p in $$list; do \
+ 	  if test -f $(srcdir)/$$p; then \
+-	    echo " $(INSTALL_DATA) $(srcdir)/$$p $(DESTDIR)$(preludeconfdir)/$$p"; \
+-	    $(INSTALL_DATA) $(srcdir)/$$p $(DESTDIR)$(preludeconfdir)/$$p; \
++	    echo " $(INSTALL_DATA) $(srcdir)/$$p $(DESTDIR)$(preludeconfdir)/$$p-dist"; \
++	    $(INSTALL_DATA) $(srcdir)/$$p $(DESTDIR)$(preludeconfdir)/$$p-dist; \
+ 	  else if test -f $$p; then \
+-	    echo " $(INSTALL_DATA) $$p $(DESTDIR)$(preludeconfdir)/$$p"; \
+-	    $(INSTALL_DATA) $$p $(DESTDIR)$(preludeconfdir)/$$p; \
++	    echo " $(INSTALL_DATA) $$p $(DESTDIR)$(preludeconfdir)/$$p-dist"; \
++	    $(INSTALL_DATA) $$p $(DESTDIR)$(preludeconfdir)/$$p-dist; \
+ 	  fi; fi; \
+ 	done
+ 
+@@ -413,17 +413,7 @@
+ 
+ install-data-local:
+ 	$(INSTALL) -m 700 -d $(DESTDIR)/$(configdir)/metadata;							
+-	@if test -f $(DESTDIR)/$(configdir)/prelude-lml.conf; then         					\
+-		echo "********************************************************************************"; 	\
+-                echo;                                                                                    	\
+-                echo "$(DESTDIR)/$(configdir)/prelude-lml.conf already exist...";				\
+-                echo "Installing default configuration in $(DESTDIR)/$(configdir)/prelude-lml.conf-dist";       \
+-                echo;                                                                                    	\
+-                echo "********************************************************************************"; 	\
+-		$(INSTALL) -m 600 $(top_srcdir)/prelude-lml.conf $(DESTDIR)/$(configdir)/prelude-lml.conf-dist; \
+-        else                                                                                             	\
+-                $(INSTALL) -m 600 $(top_srcdir)/prelude-lml.conf $(DESTDIR)/$(configdir)/;                      \
+-        fi
++	$(INSTALL) -m 600 $(top_srcdir)/prelude-lml.conf $(DESTDIR)/$(configdir)/prelude-lml.conf-dist;
+ 
+ nickel: distclean
+ 	@find . -type f -name Makefile.in | xargs rm
diff --git a/security/prelude-lml/pkg-descr b/security/prelude-lml/pkg-descr
new file mode 100644
index 000000000000..b2a852c4ee46
--- /dev/null
+++ b/security/prelude-lml/pkg-descr
@@ -0,0 +1,7 @@
+Prelude is a new innovative hybrid Intrusion Detection system designed 
+to be very modular, distributed, rock solid and fast. 
+
+The Prelude Log Monitoring Lackey monitors local logfiles and sends 
+alerts to the manager if something suspicious is found. It is also a sensor
+
+WWW: http://www.prelude-ids.org/
diff --git a/security/prelude-lml/pkg-plist b/security/prelude-lml/pkg-plist
new file mode 100644
index 000000000000..c3ca441bb924
--- /dev/null
+++ b/security/prelude-lml/pkg-plist
@@ -0,0 +1,33 @@
+bin/prelude-lml
+etc/prelude-lml/ruleset/checkpoint.rules
+etc/prelude-lml/ruleset/cisco.rules
+etc/prelude-lml/ruleset/exim.rules
+etc/prelude-lml/ruleset/grsecurity.rules
+etc/prelude-lml/ruleset/ipfw.rules
+etc/prelude-lml/ruleset/ipso.rules
+etc/prelude-lml/ruleset/netfilter.rules
+etc/prelude-lml/ruleset/ntsyslog.rules
+etc/prelude-lml/ruleset/proftpd.rules
+etc/prelude-lml/ruleset/qpopper.rules
+etc/prelude-lml/ruleset/simple.rules
+etc/prelude-lml/ruleset/squid.rules
+etc/prelude-lml/ruleset/ssh.rules
+etc/prelude-lml/ruleset/vpopmail.rules
+etc/prelude-lml/ruleset/zywall.rules
+etc/prelude-lml/ruleset/zyxel.rules
+@unexec [ -f %D/etc/prelude-lml/plugins.rules-dist ] && rm %D/etc/prelude-lml/plugins.rules-dist || true
+@unexec [ -f %D/etc/prelude-lml/prelude-lml.conf-dist ] && rm %D/etc/prelude-lml/prelude-lml.conf-dist || true
+include/prelude-lml/lml-alert.h
+include/prelude-lml/log-common.h
+include/prelude-lml/plugin-log.h
+lib/prelude-lml/debug.so
+lib/prelude-lml/debug.la
+lib/prelude-lml/simple.so
+lib/prelude-lml/simple.la
+lib/prelude-lml/pax.so
+lib/prelude-lml/pax.la
+@unexec rmdir %D/etc/prelude-lml/ruleset 2>/dev/null || true
+@unexec rmdir %D/etc/prelude-lml/metadata 2>/dev/null || true
+@unexec rmdir %D/etc/prelude-lml 2>/dev/null || echo "If you are permanently removing this port, you should do a ``rm -rf ${PKG_PREFIX}/etc/prelude-lml`` to remove any configuration files left." | fmt
+@dirrm include/prelude-lml
+@dirrm lib/prelude-lml