aboutsummaryrefslogtreecommitdiff
path: root/app/forensics/rkhunter/rkhunter.SlackBuild
blob: ae5a5ff3738a2900f411c0e11a096ba9cbd27e78 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
#!/bin/bash
#
#  rkhunter.SlackBuild is free software; you can redistribute
#  it and/or modify it under the terms of the GNU General Public
#  License as published by the Free Software Foundation; either
#  version 2 of the License, or any later version.
#
#  rkhunter.SlackBuild is distributed in the hope that it
#  will be useful, but WITHOUT ANY WARRANTY; without even the
#  implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
#  PURPOSE.  See the GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public
#  License along with this program; if not, write to the Free
#  Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
#  MA 02111-1307, USA
#
# SlackBuild for Rootkit Hunter
# http://rkhunter.sourceforge.net/
#
# Author: Luis ( luis at riseup d0t net )
#

# Look for slackbuildrc
if [ -f ~/.slackbuildrc ]; then
  source ~/.slackbuildrc
elif [ -f /etc/slackbuildrc ]; then
  source /etc/slackbuildrc
fi

# Set variables
CWD="$(pwd)"
SRC_NAME="rkhunter"
PKG_NAME="rkhunter"
ARCH="noarch"
SRC_VERSION=${VERSION:=1.3.4}
PKG_VERSION="$(echo "$SRC_VERSION" | tr '[[:blank:]-]' '_')"
BUILD=${BUILD:=1ls}
SRC_DIR=${SRC_DIR:=$CWD}/$PKG_NAME
TMP=${TMP:=/tmp}
PKG=${PKG:=$TMP/package-$PKG_NAME}
REPOS=${REPOS:=$TMP}
PREFIX=${PREFIX:=}
PKG_WORK="$TMP/$SRC_NAME"
CONF_OPTIONS=${CONF_OPTIONS:=}
NUMJOBS=${NUMJOBS:=}

# Set system libraries' path based on $ARCH
if [ "$ARCH" = "x86_64" ]; then
  LIBDIR="$PREFIX/lib64"
else
  LIBDIR="$PREFIX/lib"
fi

# Set error codes (used by createpkg)
ERROR_WGET=31;      ERROR_MAKE=32;      ERROR_INSTALL=33
ERROR_MD5=34;       ERROR_CONF=35;      ERROR_HELP=36
ERROR_TAR=37;       ERROR_MKPKG=38;     ERROR_GPG=39
ERROR_PATCH=40;     ERROR_VCS=41;       ERROR_MKDIR=42

# Clean up any leftovers of previous builds
rm -rf "$PKG_WORK" 2> /dev/null
rm -rf "$PKG" 2> /dev/null

# Create directories if necessary
mkdir -p "$SRC_DIR" || exit $ERROR_MKDIR
mkdir -p "$PKG" || exit $ERROR_MKDIR
mkdir -p "$REPOS" || exit $ERROR_MKDIR
mkdir -p "$PKG_WORK" || exit $ERROR_MKDIR

# Dowload source if necessary
SRC="$SRC_NAME-$SRC_VERSION.tar.gz"
URL="http://downloads.sourceforge.net/rkhunter/$SRC"

if [ ! -s "$SRC_DIR/$SRC" ] || ! gzip -t "$SRC_DIR/$SRC" 2> /dev/null; then
  wget "$URL" -O "$SRC_DIR/$SRC" || exit $ERROR_WGET
fi

# Import minimized signing key from
# http://keyserver.noreply.org/pks/lookup?op=get&search=0xEA5F4CD3A65F5E17
gpg --import << EOKEY || exit $ERROR_GPG
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=o6DW
-----END PGP PUBLIC KEY BLOCK-----
EOKEY

# Dowload source's signature if necessary and check it
if [ ! -s "$SRC_DIR/$SRC.asc" ]; then
  wget "$URL.asc" -O "$SRC_DIR/$SRC.asc" || exit $ERROR_WGET
fi

gpg --verify "$SRC_DIR/$SRC.asc" "$SRC_DIR/$SRC" || exit $ERROR_GPG


# Untar
cd "$PKG_WORK"
tar --no-same-owner --no-same-permissions -xvf "$SRC_DIR/$SRC" || exit $ERROR_TAR
PKG_SRC=`ls -l | awk '/^d/ { print $8 }'`
cd "$PKG_SRC"

# Install
if [ -z "$PREFIX" ]; then
  RPM_BUILD_ROOT="$PKG" \
    ./installer.sh --layout RPM --striproot "$PKG" --install || exit $ERROR_INSTALL
  mv -f "$PKG"/etc/rkhunter.conf "$PKG"/etc/rkhunter.conf.new
  mv -f "$PKG"/usr/local/share/* "$PKG"/usr
  rm -rf "$PKG"/usr/local/share
else
  mkdir -p "$PKG/$PREFIX" || exit $ERROR_MKDIR
  ./installer.sh --layout custom "$PKG/$PREFIX" --striproot "$PKG" --install || exit $ERROR_INSTALL
  mv -f "$PKG/$PREFIX"/etc/rkhunter.conf "$PKG/$PREFIX"/etc/rkhunter.conf.new
  mv -f "$PKG/$PREFIX"/share/* "$PKG"/usr
  rm -rf "$PKG/$PREFIX"/share
  if ! echo "$PATH" | grep -q "$PREFIX"/bin; then
    mkdir -p "$PKG"/usr/local/bin || exit $ERROR_MKDIR
    ln -sf "$PREFIX"/bin/rkhunter "$PKG"/usr/local/bin/rkhunter
  fi
fi

# Compress and link manpages
if [ -d "$PKG"/usr/man ]; then
  ( cd "$PKG"/usr/man
    for manpagedir in $(find . -type d -name "man*") ; do
      ( cd $manpagedir
        for eachpage in $( find . -type l -maxdepth 1) ; do
          ln -s $( readlink $eachpage ).gz $eachpage.gz
          rm $eachpage
        done
        gzip -9 *.?
      )
    done
  )
fi

# Add package description (slack-desc)
mkdir -p "$PKG/install" || exit $ERROR_MKDIR
cat << EODESC > "$PKG/install/slack-desc"
# HOW TO EDIT THIS FILE:
# The "handy ruler" below makes it easier to edit a package description.  Line
# up the first '|' above the ':' following the base package name, and the '|'
# on the right side marks the last column you can put a character in.  You must
# make exactly 11 lines for the formatting to be correct.  It's also
# customary to leave one space after the ':'.

        |-----handy-ruler------------------------------------------------------|
rkhunter: Rootkit Hunter
rkhunter: 
rkhunter: Rootkit Hunter (RKH) is a security monitoring and analyzing tool for
rkhunter: POSIX compliant systems. It checks your computer for the presence of
rkhunter: rootkits and other unwanted tools.
rkhunter: 
rkhunter: For more information, http://rkhunter.sourceforge.net/
rkhunter: 
rkhunter: 
rkhunter: 
rkhunter: 
EODESC

# Add a post-installation script (doinst.sh)
cat << EOSCRIPT > "$PKG/install/doinst.sh"
config() {
  NEW="\$1"
  OLD="\$(dirname \$NEW)/\$(basename \$NEW .new)"
  # If there's no config file by that name, mv it over:
  if [ ! -r \$OLD ]; then
    mv \$NEW \$OLD
  elif [ "\$(cat \$OLD | md5sum)" = "\$(cat \$NEW | md5sum)" ]; then
    # toss the redundant copy
    rm \$NEW
  fi
  # Otherwise, we leave the .new copy for the admin to consider...
}

config $PREFIX/etc/rkhunter.conf.new
EOSCRIPT

# Build the package
cd "$PKG"
makepkg -l y -c n "$REPOS/$PKG_NAME-$PKG_VERSION-$ARCH-$BUILD.tgz" || exit $ERROR_MKPKG

# Delete source and build directories if requested
if [ "$CLEANUP" == "yes" ]; then
  rm -rf "$PKG_WORK" "$PKG"
fi