On Thursday 15 May 2008 11:53:29 Dennis Gilmore wrote:
> I'm the maintainer of snort the packaging of it is better than when i
> started but is nasty and painful.
Agreed
> so far no one has stepped up and submitted patches.
below.
thanks,
-Steve
Only in devel: snort-2.4.3-configure64.patch
Only in devel: snort-2.4.4-demarc-patch.diff
diff -ur devel/snortd snort/snortd
--- devel/snortd 2007-11-17 18:46:17.000000000 -0500
+++ snort/snortd 2008-04-26 14:27:28.000000000 -0400
@@ -22,12 +22,20 @@
# source the interface to listen on
. /etc/sysconfig/snort
+if [ "$USER"x != "x" ] ; then
+ USER="-u $USER"
+fi
+
+if [ "$GROUP"x != "x" ] ; then
+ GROUP="-g $GROUP"
+fi
+
# See how we were called.
case "$1" in
start)
echo -n "Starting snort: "
cd /var/log/snort
- daemon /usr/sbin/snort -A fast -b -l /var/log/snort -d -D \
+ daemon /usr/sbin/snort -D $SNORT_OPTIONS $USER $GROUP \
-i $INTERFACE -c /etc/snort/snort.conf
touch /var/lock/subsys/snort
echo
diff -ur devel/snort.spec snort/snort.spec
--- devel/snort.spec 2008-02-18 15:16:11.000000000 -0500
+++ snort/snort.spec 2008-04-26 14:32:31.000000000 -0400
@@ -1,7 +1,7 @@
Summary: Intrusion detection system
Name: snort
-Version: 2.7.0.1
-Release: 6%{?dist}
+Version: 2.8.1
+Release: 1%{?dist}
License: GPLv2
Group: Applications/Internet
Source0: http://www.snort.org/dl/current/snort-%{version}.tar.gz
@@ -16,6 +16,7 @@
BuildRequires: perl
BuildRequires: pcre-devel
BuildRequires: sed
+BuildRequires: libprelude-devel
%package plain+flexresp
Summary: Snort with Flexible Response
@@ -152,7 +153,7 @@
%build
SNORT_BASE_CONFIG="--with-libpcap-includes=/usr/include/pcap \
- --enable-dynamicplugin"
+ --enable-dynamicplugin --enable-prelude"
export LDFLAGS=-L/usr/lib64/mysql
# there are some strange configure errors
# when not doing a distclean between major builds.
@@ -316,7 +317,7 @@
}
install snort.8 %{buildroot}%{_mandir}/man8
-install etc/generators etc/gen-msg.map etc/sid etc/sid-msg.map etc/threshold.conf etc/unicode.map etc/reference.config etc/classification.config etc/snort.conf %{buildroot}%{_sysconfdir}/snort
+install etc/gen-msg.map etc/sid-msg.map etc/threshold.conf etc/unicode.map etc/reference.config etc/classification.config etc/snort.conf %{buildroot}%{_sysconfdir}/snort
install -p -m 755 %{SOURCE1} %{buildroot}/etc/rc.d/init.d
mkdir -p %{buildroot}/etc/sysconfig/
install -p -m 644 %{SOURCE3} %{buildroot}/etc/sysconfig/snort
@@ -452,6 +453,7 @@
# handle compressed man pages.
%attr(755,root,root) %{_mandir}/man8/snort.8*
%attr(755,root,root) %dir /var/log/snort
+%attr(755,root,root) %dir %{_sysconfdir}/snort/rules
%attr(644,root,root) %config %{_sysconfdir}/snort
%attr(755,root,root) /etc/rc.d/init.d/snortd
%{_libdir}/snort
@@ -483,6 +485,9 @@
%changelog
+* Fri Apr 25 2008 Steve Grubb <sgrubb@xxxxxxxxxx> - 2.8.1-1
+- update to 2.8.1
+
* Mon Feb 18 2008 Fedora Release Engineering <rel-eng@xxxxxxxxxxxxxxxxx> - 2.7.0.1-6
- Autorebuild for GCC 4.3
diff -ur devel/sysconfig.snort snort/sysconfig.snort
--- devel/sysconfig.snort 2007-11-17 18:46:17.000000000 -0500
+++ snort/sysconfig.snort 2008-04-26 14:19:43.000000000 -0400
@@ -1,2 +1,11 @@
+# What user account should we run under. Empty means root
+USER=""
+
+# What group account should we run under. Empty means root
+GROUP=""
+
# define the interface we listen on
-INTERFACE=eth0
+INTERFACE="eth0"
+
+# If you are using prelude, delete the '-A fast' option
+SNORT_OPTIONS="-A fast -b -l /var/log/snort -d"
--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list
