1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
|
# Copyright 1999-2010 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-analyzer/base/base-1.4.1-r1.ebuild,v 1.2 2010/09/16 11:21:06 mabi Exp $
EAPI="2"
inherit webapp versionator eutils depend.apache depend.php
CONF_DIR="/etc/${PN}"
CONF_OLD="base_conf.php.dist"
CONF_NEW="base_conf.php"
MIDDLEMAN="base_path.php"
DBTYPES="mssql mysql oracle postgres"
DESCRIPTION="A web-based front-end to the Snort IDS."
HOMEPAGE="http://base.secureideas.net"
SRC_URI="mirror://sourceforge/secureideas/${P}.tar.gz
signatures? ( http://www.snort.org/pub-bin/downloads.cgi/Download/vrt_pr/snortrules-pr-2.4.tar.gz )"
LICENSE="GPL-2"
KEYWORDS="~amd64 ~ppc ~x86"
# SLOT is intentionally omitted because this package uses webapp-config
IUSE="gd signatures ${DBTYPES}"
# BASE *should* work with any php-driven web server, so only require Apache
# when the user has an apache use-flag set.
want_apache
DEPEND=">=sys-libs/zlib-1.2.1-r3"
RDEPEND="${DEPEND}
dev-lang/php:5[session,mssql?,mysql?,postgres?]
gd? ( || ( dev-lang/php[gd] dev-lang/php[gd-external] ) )
dev-lang/php
dev-php/adodb
dev-php/PEAR-Mail
dev-php/PEAR-Mail_Mime
gd? ( >=dev-php/PEAR-PEAR-1.3.6-r1
>=dev-php/PEAR-Image_Color-1.0.2
>=dev-php/PEAR-Log-1.9.3
>=dev-php/PEAR-Numbers_Roman-0.2.0
>=dev-php/PEAR-Numbers_Words-0.14.0
>=dev-php/PEAR-Image_Canvas-0.2.4
>=dev-php/PEAR-Image_Graph-0.7.1 )"
# A local database isn't necessary, so only require one when the user
# has use-flags set for one of the supported DBs.
# Snort can also be installed on a remote system, so don't require it.
# Require PHP.
need_php5
S="${WORKDIR}/${PN}-php4"
pkg_setup() {
depend.apache_pkg_setup
webapp_pkg_setup
# Set the group ownership for /etc/base/base_conf.php so it can be read by
# the user's web server.
if use apache2 ; then
HTTPD_GROUP="apache"
else
# Set a safe default group.
HTTPD_GROUP="root"
fi
# Check and setup selected DB type
dbtypecnt=0
for db in ${DBTYPES}; do
if use ${db}; then
if [ ${dbtypecnt} -eq 0 ]; then
BASE_DBTYPE=${db}
let dbtypecnt++
elif [ ${dbtypecnt} -ge 1 ]; then
ewarn "You set multiple database types in your USE flags."
ewarn "You will have to setup DBtype configuration manually."
fi
fi
done
if [ ${dbtypecnt} -eq 0 ]; then
ewarn "No database type selected in your USE flags."
ewarn "You will have to setup DBtype manually."
fi
if use oracle && ! has_version dev-lang/php[oci8-instant-client] ; then
ewarn "PHP with oci8-instant-client support not found!"
ewarn "It is your responsibility to ensure that PHP will work"
ewarn "with commercial Oracle implementation."
fi
}
src_unpack() {
unpack ${A}
cd "${S}"
# Help the user configure /etc/base/base_conf.php so BASE works out of the
# box in most environments. The user will still be warned to edit the
# file manually at the pkg_postinst() stage.
sed -i -e 's:$BASE_urlpath.*:$BASE_urlpath = "/base";:g' \
${CONF_OLD}
sed -i -e 's:$DBlib_path.*:$DBlib_path = "/usr/share/php5/adodb";:g' \
${CONF_OLD}
if [[ "${BASE_DBTYPE}" == "postgres" ]]; then
sed -i -e 's:$DBtype.*:$DBtype = "postgres";:g' \
${CONF_OLD}
fi
if [[ "${BASE_DBTYPE}" == "mssql" ]]; then
sed -i -e 's:$DBtype.*:$DBtype = "mssql";:g' \
${CONF_OLD}
fi
if [[ "${BASE_DBTYPE}" == "oracle" ]]; then
sed -i -e 's:$DBtype.*:$DBtype = "oci8";:g' \
${CONF_OLD}
fi
# Install the configuration files in the usual /etc/${PN} location so that
# etc-update functions properly (it also improves security somewhat, since
# the config file contains plain-text passwords and should not be located
# inside the web-root). This requires changing the BASE source a tad to
# recognize the new location for base_conf.php.
for PHP in *.php */*.php; do
sed -i -e "s:${CONF_NEW}:${MIDDLEMAN}:g" \
${CONF_OLD} "${PHP}"
done
# Create the file ${MIDDLEMAN} to determine the web-root and to change
# the location of "include" to /etc/base/base_conf.php.
echo "<?php" > ${MIDDLEMAN}
echo ' $BASE_path = dirname(__FILE__);' >> ${MIDDLEMAN}
echo " include(\"${CONF_DIR}/${CONF_NEW}\");" >> ${MIDDLEMAN}
echo "?>" >> ${MIDDLEMAN}
# Delete the $BASE_path variable from the config file because we
# now handle it with ${MIDDLEMAN} created above.
sed -i -e 's:$BASE_path =.*::g' ${CONF_OLD}
# Modify the HTML headers so search engines don't index BASE.
sed -i -e \
's:<HEAD>:<HEAD>\n <META name="robots" content="noindex,nofollow">:g' \
index.php
sed -i -e \
's:<HEAD>:<HEAD>\n <META name="robots" content="noindex,nofollow">:g' \
base_main.php
}
src_install() {
webapp_src_preinst
# Install the docs once in the standard /usr/share/doc/${PF}/DOCDESTREE
# location instead of installing them in every virtual host directory.
cd docs
dodoc *
if use signatures ; then
cd "${WORKDIR}"
insinto ${MY_HTDOCSDIR}/signatures
doins doc/signatures/*
fi
cd "${S}"
rm -rf docs
# Install the config files in the normal location (/etc/${PN}).
insinto ${CONF_DIR} || die "Unable to insinto ${CONF_DIR}"
doins ${CONF_OLD} || die "Unable to doins ${CONF_OLD}"
newins ${CONF_OLD} ${CONF_NEW} || die "Unable to create ${CONF_NEW}"
# Install BASE for webapp-config
insinto ${MY_HTDOCSDIR} || die "Unable to insinto ${MY_HTDOCSDIR}"
doins -r *
webapp_src_install
}
pkg_postinst() {
webapp_pkg_postinst
# Set the proper permissions on /etc/base/base_conf.php
chmod 640 ${CONF_DIR}/${CONF_NEW} || FPERMS="FALSE"
chown root:${HTTPD_GROUP} ${CONF_DIR}/${CONF_NEW} || FOWNERS="FALSE"
# Notify the user of any problems at the very end.
if [ "${HTTPD_GROUP}" == "root" ]; then
ewarn ""
ewarn "It looks like you are not using Apache"
ewarn "as your web server. For BASE to work properly, you will"
ewarn "need to change the ownership of ${CONF_DIR}/${CONF_NEW} to"
ewarn "root:[www user] To use Apache, add \"apache2\" to"
ewarn "your USE flags and re-emerge BASE."
fi
if [ "${FPERMS}" == "FALSE" ]; then
ewarn ""
ewarn "Unable to change the permissions on ${CONF_DIR}/${CONF_NEW}".
ewarn "Please change them manually by issuing:"
ewarn "chmod 640 ${CONF_DIR}/${CONF_NEW}"
fi
if [ "${FOWNERS}" == "FALSE" ]; then
ewarn ""
ewarn "Unable to change the group ownership of the file:"
ewarn "${CONF_DIR}/${CONF_NEW}"
ewarn "Please change this manually by issuing:"
ewarn "chown root:${HTTPD_GROUP} ${CONF_DIR}/${CONF_NEW}"
fi
elog ""
elog "You should edit \"${CONF_DIR}/${CONF_NEW}\" before using BASE."
elog ""
elog "To setup your initial database, direct your web browser to the"
elog "location you installed BASE/base_db_setup.php"
elog "You can find instructions in /usr/share/doc/${PF}/README"
elog "There is a guide at http://gentoo-wiki.com/HOWTO_Apache2_with_BASE"
elog ""
}
|
GitWeb