summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGaming4JC <g4jc@openmailbox.org>2015-07-21 17:19:09 -0400
committerGaming4JC <g4jc@openmailbox.org>2015-07-21 17:19:09 -0400
commit86523d80f47586b83b2fa78b69e423152dfd4103 (patch)
tree03b86c605f0522fd52aafc02c8944275da121f4c
parent389c6903627ad8718ad87b541e8baff282de0dba (diff)
Adding initial release of Samhain v4.0.0
-rw-r--r--pcr/samhain/PKGBUILD44
-rw-r--r--pcr/samhain/PKGBUILD.sigbin0 -> 543 bytes
2 files changed, 44 insertions, 0 deletions
diff --git a/pcr/samhain/PKGBUILD b/pcr/samhain/PKGBUILD
new file mode 100644
index 000000000..57de39912
--- /dev/null
+++ b/pcr/samhain/PKGBUILD
@@ -0,0 +1,44 @@
+# Maintainer: Luke R. <g4jc@openmailbox.org> GPG: rsa4096/3EAE8697
+# Contributor: Brad Arrington
+
+pkgname=samhain
+pkgver=4.0.0
+pkgrel=1
+pkgdesc="file integrity / intrusion detection system"
+arch=(i686 x86_64)
+url="http://www.la-samhna.de/"
+license=('GPL')
+makedepends=('gcc' 'openssl' 'procps-ng')
+source=("http://www.la-samhna.de/samhain/${pkgname}-current.tar.gz"
+'PKGBUILD.sig'
+'PKGBUILD')
+validpgpkeys=('CB6E213A349B8DF9E96B622AC3F4FFCF3EAE8697' # PKGBUILD Maintainer's key
+'EF6CEF54701A0AFDB86AF4C31AAD26C80F571F6C') # Rainer Wichmann
+sha512sums=('500c989990ac432bc8428b14b44e7ad282a890b8ac715f6827afaf262f638705aa4ce4a96c5348a66694479d3a3a306dbad3eb43e6a89e085d7c4b04b16c180a'
+'SKIP'
+'SKIP')
+
+pkgver() {
+tar -ztvf samhain-current.tar.gz | head -n1 | awk '{print $6}' | sed "s/samhain-//" | sed "s/.tar.gz//" # get latest version number
+}
+
+build() {
+ gpg --verify PKGBUILD.sig PKGBUILD
+ echo "Note: If the GPG verification fails, import the PKGBUILD maintainer's GPG key. See: https://wiki.parabola.nu/GnuPG#Import_key"
+ whirlpoolsum=('b7ed961c77e41779f09d8107d39ef2614d4985b52c4a4aa9db641791bf4ef986d5d428903d9d069a14ca37a226013ea3cff192e7a1ac160c05d12e9d9cc07e5e')
+ [[ "$(openssl dgst -r -whirlpool samhain-current.tar.gz | awk '{print $1}')" = ${whirlpoolsum} ]] && echo "Whirlpool checksum passed." || { echo "Whirlpool checksum failed!!" ; exit 1; } # This is an added security layer. If SHA512 for some unlikely reason fails, whirlpool will check and abort if it too fails to match.
+ gpg --verify samhain-${pkgver}.tar.gz.asc samhain-${pkgver}.tar.gz
+ echo "Note: If the GPG verification fails, import the Samhain GPG key: http://www.la-samhna.de/samhain/s_rkey.html"
+ tar -zxvf "${srcdir}/${pkgname}-current.tar.gz" -C "${srcdir}"/.
+ cd "${srcdir}"
+ tar -zxvf ${pkgname}-${pkgver}.tar.gz
+ cd "${pkgname}-${pkgver}"
+ ./configure --prefix=/usr --localstatedir=/var --sysconfdir=/etc --with-trusted=0 --sbindir=/usr/bin
+ # see samhain documentation, lots of other options available. e.g. use --enable-network=server to run in server mode.
+}
+
+package() {
+ cd "${pkgname}-${pkgver}"
+ make || return 1
+ make DESTDIR="$pkgdir/" install
+}
diff --git a/pcr/samhain/PKGBUILD.sig b/pcr/samhain/PKGBUILD.sig
new file mode 100644
index 000000000..e8e64f639
--- /dev/null
+++ b/pcr/samhain/PKGBUILD.sig
Binary files differ