aboutsummaryrefslogtreecommitdiff
path: root/security/bsmtrace
Commit message (Collapse)AuthorAgeFilesLines
* Cleanup plistAntoine Brodin2014-11-131-1/+0
| | | | Notes: svn path=/head/; revision=372514
* Support LIBS like LDFLAGS.Tijl Coosemans2014-06-111-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV. - Add an option helper for LIBS. - Adjust all ports that already use LIBS. Also remove references to PTHREAD_CFLAGS and PTHREAD_LIBS while here. - Some ports did not support having a LIBS environment variable and required additional patches. Somewhat simplified a linker command line looks like: ${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS} where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and LIBS can be controlled by us. If possible -L and -l flags need to be added to LIBS to make sure they appear after any -L and -l flags set by upstream. Many ports currently add -L${LOCALBASE}/lib to LDFLAGS but this may appear too early on the command line causing installed libraries to be linked in instead of freshly built ones. Additional changes: benchmarks/netio: Replace WITH_IPV6 with an IPV6 option. comms/gnokii: Replace some patches with USES=pathfix. Also remove -fPIC. graphics/gimageview: USES=libtool and install desktop file in DESKTOPDIR. graphics/visionworkbench: Remove FreeBSD 7 support. multimedia/libmovtar: New LIB_DEPENDS syntax. multimedia/opencinematools: Use standard do-build. net/siproxd: USES=libtool:keepla (port actually needs .la files for plugins) net-mgmt/nagios: Remove -fPIC. net-mgmt/nagios4: Remove -fPIC. print/cups-base: Only add -lssp_nonshared on i386 and OSVERSION < 1000036. security/p11-kit: Replace PTHREAD_LIBS in CONFIGURE_ENV with ac_cv_func_pthread_mutexattr_init=no in CONFIGURE_ARGS. This skips a test in configure that falsely detects pthread_mutexattr_init in our libc. sysutils/dar: Fix iconv detection. x11/rxvt-unicode: Remove -lstdc++ and patch configure to remove a FreeBSD hack and use $CXX as linker as on other platforms. PR: 190592 Exp-run by: antoine Approved by: portmgr (antoine) Notes: svn path=/head/; revision=357486
* Update to 1.4Lars Engels2014-02-093-13/+8
| | | | | | | | | PR: ports/186595 Submitted by: maintainer Approved by: maintainer Notes: svn path=/head/; revision=343540
* - Support stagingEmanuel Haupt2014-02-083-15/+33
| | | | | | | | | | - Respect CC - Respect CFLAGS - Fix build with PCRE option - Convert to OPTIONSng Notes: svn path=/head/; revision=343385
* Add NO_STAGE all over the place in preparation for the staging support (cat: ↵Baptiste Daroussin2013-09-201-5/+2
| | | | | | | security) Notes: svn path=/head/; revision=327769
* Update PCRE to 8.32Martin Matuska2012-12-101-2/+2
| | | | | | | | Introduces the UTF-32 library pcre32 Bump PORTREVISION in dependent ports Notes: svn path=/head/; revision=308630
* Set MAKE_JOBS_UNSAFE-- does not build with FORCE_MAKE_JOBSChris Rees2012-05-251-5/+2
| | | | | | | | | | | | | | | | PR: ports/167599 Submitted by: Bryan Drewery <bryan@shatow.net> Reviewed by: Approved by: alm (maintainer) Remove compatibility for FreeBSD <7; obsolete versions PR: ports/168280 Submitted by: crees Approved by: alm (maintainer) Notes: svn path=/head/; revision=297451
* Bump pcre library dependency due to 8.30 updateMartin Matuska2012-02-141-1/+2
| | | | Notes: svn path=/head/; revision=291338
* Update bsmtrace port to version 1.3Christian S.J. Peron2011-06-062-4/+3
| | | | | | | | | | | | | | | | | | | -Add support for larger set sizes (for group/user specifications) -Add the ability to pass the effective uid to a trigger -Fixed bug which resulted in "status" being ignored for single state sequences -Added support for logging channels. -Added support for state triggers. -Fixed bug where alerts were being produced for state machines that have been expired. (Alerts have already been generated). -Fixed two memory leaks which could really impact systems with high volumes audit records. Approved by: wxs Reviewed by: alm (maintainer) Notes: svn path=/head/; revision=275142
* Update bsmtrace to 1.1.0.Christian S.J. Peron2007-10-242-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1.1.0 fixes a pretty serious bug which resulted in BSM records without pathname tokens being processed in some cases. Additionally, timeout-window and timeout-probability features were added to allow people defining sequences with timeouts to add an element of randomness to the timeout, in theory making it more difficult for people to attack. timeout 60; timeout-window 10; timeout-probability 65; Basically equates to: "This sequence should timeout in a random amount of time, where the probability of the timeout being from 60-70 is 65%" It should be noted that there is a probability of 35% that the value will be completely random. So naturally, the lower the timeout-probability, the more random the timeout will be. Approved by: tmclaugh Notes: svn path=/head/; revision=201873
* Add the bsmtrace port.Christian S.J. Peron2007-07-155-0/+64
bsmtrace is a audit driven host based intrusion detection system which operates on finite state machine principles. Since it's audit driven, it requires that operating system security auditing be enabled. This requires FreeBSD 6.2 at a minimum. By default it provides real-time analysis through the use of an audit pipe, however it can operate on regular audit trail files as well. Approved by: Pav Reviewed by: Pav (and others) Notes: svn path=/head/; revision=195670