Date: 30 Aug 2004 22:00:29 -0000 From: David Thiel <lx@redundancy.redundancy.org> To: FreeBSD-gnats-submit@FreeBSD.org Cc: krion@FreeBSD.org Subject: ports/71169: Update: security/samhain 1.8.10b -> 1.8.11 Message-ID: <20040830220029.33944.qmail@redundancy.redundancy.org> Resent-Message-ID: <200408302200.i7UM0hN1022578@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 71169 >Category: ports >Synopsis: Update: security/samhain 1.8.10b -> 1.8.11 >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Mon Aug 30 22:00:43 GMT 2004 >Closed-Date: >Last-Modified: >Originator: David Thiel >Release: FreeBSD 4.9-STABLE i386 >Organization: >Environment: System: FreeBSD redundancy.redundancy.org 4.9-STABLE FreeBSD 4.9-STABLE #15: Wed Nov 19 21:41:32 PST 2003 lx@redundancy.redundancy.org:/usr/obj/usr/src/sys/REDUNDANCY i386 >Description: Updating the Samhain integrity checking system from 1.8.10b to 1.8.11. Code changes include: o for files in the IgnoreAll policy, there are no warnings (anymore) about 'no such user/group' and/or non-printable filenames o there is a new option HardlinkOffset=... to specify an offset from the canonical hardlink count for a directory o ... and a new option AddOKChars=... to modify the set of characters in a filename for which a warning (about obscure/non-printable) filename is issued. Port changes: Turn off kernel integrity checking by default - building this into packages wouldn't work anyhow, since it would only work with an identical kernel as on the build cluster. >How-To-Repeat: >Fix: diff -ruN samhain/Makefile samhain.new/Makefile --- samhain/Makefile Thu Aug 12 04:20:28 2004 +++ samhain.new/Makefile Mon Aug 30 14:51:38 2004 @@ -5,7 +5,7 @@ # $FreeBSD: ports/security/samhain/Makefile,v 1.17 2004/08/11 23:00:12 pav Exp $ # # -# This port recognizes the following non-binary tunables: +# This port recognizes the following non-boolean tunables: # # WITH_RUNAS_USER: # Whe building with "WITH_SERVER" defined, the username of the @@ -17,7 +17,7 @@ # PORTNAME= samhain -PORTVERSION= 1.8.10b +PORTVERSION= 1.8.11 CATEGORIES= security MASTER_SITES= http://la-samhna.de/archive/ \ http://cold.darkambient.net/ @@ -26,7 +26,7 @@ MAINTAINER= lx@redundancy.redundancy.org COMMENT= The Samhain Intrusion Detection System -OPTIONS= KCHECK "Enable rogue KLD detection" on \ +OPTIONS= KCHECK "Enable rogue KLD detection" off \ GPG "Enable GnuPG support" off \ MYSQL "Enable MySQL logging" off \ POSTGRESQL "Enable PostgreSQL logging" off \ @@ -111,9 +111,9 @@ .if !defined(WITHOUT_KCHECK) @${ECHO_MSG} - @${ECHO_MSG} "Building with kernel checking requires reading /dev/kmem." - @${ECHO_MSG} "If you're not building as root, please hit Control-C and" - @${ECHO_MSG} "restart the build as root." + @${ECHO_MSG} "Building with kernel checking requires reading /dev/kmem" + @${ECHO_MSG} "and /dev/mem. If you're not building as root, please hit + @${ECHO_MSG} "Control-C and restart the build as root." @${ECHO_MSG} .endif diff -ruN samhain/distinfo samhain.new/distinfo --- samhain/distinfo Thu Aug 12 04:20:28 2004 +++ samhain.new/distinfo Mon Aug 30 14:45:54 2004 @@ -1,2 +1,2 @@ -MD5 (samhain_signed-1.8.10b.tar.gz) = f7c638e6989cb44287e814cf008877cd -SIZE (samhain_signed-1.8.10b.tar.gz) = 972170 +MD5 (samhain_signed-1.8.11.tar.gz) = b07d557a4fd598d9406b8338204e20f9 +SIZE (samhain_signed-1.8.11.tar.gz) = 956426 >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040830220029.33944.qmail>