Date: Sun, 2 Feb 2003 17:54:13 -0600 (CST) From: Stephen Cravey <cravey@gotbrains.org> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/47828: ports/security/acid upgrade to 0.9.6b23 with deinstall fix Message-ID: <200302022354.h12NsD1v043704@www.gotbrains.org>
next in thread | raw e-mail | index | archive | help
>Number: 47828 >Category: ports >Synopsis: ports/security/acid upgrade to 0.9.6b23 with deinstall fix >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sun Feb 02 16:00:16 PST 2003 >Closed-Date: >Last-Modified: >Originator: Stephen Cravey >Release: FreeBSD 4.7-RELEASE-p3 i386 >Organization: >Environment: System: FreeBSD www.gotbrains.org 4.7-RELEASE-p3 FreeBSD 4.7-RELEASE-p3 #0: Thu Jan 9 07:40:57 CST 2003 cravey@*******:/usr/obj/usr/src/sys/****** i386 >Description: The current acid port version does not properly delete its install directory with the deinstall target or pkg_delete (improper plist). It has numerous bugs and does not work properly with PHP 4.3.0. ( Or 4.2.3 I think ) or during the year 2003. >How-To-Repeat: Install the current port >Fix: Apply this patch to the current acid port. This patch does not fix the make package problem. This patch DOES fix the Chartlib problem in ports/41763. This patch DOES NOT fix the apache2 problem in ports/41577. I will fix this at a later date if nobody else does. Since apache2/php4 isn't really supported now, I don't really see the problem just yet. This patch OBSOLETES the patch in ports/47277 which does not take into account the install directory removal bug or the revised plist. This patch DOES NOT make me the maintainer of the port unless some nice ports committer would like to answer some hairy questions for me. :) hint hint Basically, this gets us to at LEAST where we were before but with a new version and fixes a tidyness problem on removal. The reason i marked it as serious is because as a intrusion detection frontend, I think it should work with the current php port to ovoid unintended behavior. If someone can give me a hint about getting make package to build something that will install with apache13-modssl without harfing, I'll submit that too. Same with any of the other valid acid PRs I listed. -Stephen Patch and uuencoded patch follows: Only in .: 1patch diff -cr ./Makefile /usr/home/cravey/src/acid/newport/Makefile *** ./Makefile Sun Nov 10 10:47:48 2002 --- /usr/home/cravey/src/acid/newport/Makefile Sun Feb 2 17:06:19 2003 *************** *** 6,12 **** # PORTNAME= acid ! PORTVERSION= 0.9.6b21 CATEGORIES= security MASTER_SITES= http://www.andrew.cmu.edu/~rdanyliw/snort/ --- 6,12 ---- # PORTNAME= acid ! PORTVERSION= 0.9.6b23 CATEGORIES= security MASTER_SITES= http://www.andrew.cmu.edu/~rdanyliw/snort/ *************** *** 15,21 **** RUN_DEPENDS= ${LOCALBASE}/libexec/apache/libphp4.so:${PORTSDIR}/www/mod_php4 \ ${LOCALBASE}/libexec/mysqld:${PORTSDIR}/databases/mysql323-server \ ${LOCALBASE}/bin/snort:${PORTSDIR}/security/snort \ ! ${LOCALBASE}/www/data.default/php/adodb:${PORTSDIR}/databases/adodb WRKSRC= ${WRKDIR}/${PORTNAME} NO_BUILD= yes --- 15,23 ---- RUN_DEPENDS= ${LOCALBASE}/libexec/apache/libphp4.so:${PORTSDIR}/www/mod_php4 \ ${LOCALBASE}/libexec/mysqld:${PORTSDIR}/databases/mysql323-server \ ${LOCALBASE}/bin/snort:${PORTSDIR}/security/snort \ ! ${LOCALBASE}/www/data.default/php/adodb:${PORTSDIR}/databases/adodb \ ! ${LOCALBASE}/lib/php/phplot:${PORTSDIR}/graphics/phplot ! WRKSRC= ${WRKDIR}/${PORTNAME} NO_BUILD= yes diff -cr ./distinfo /usr/home/cravey/src/acid/newport/distinfo *** ./distinfo Fri Aug 30 22:17:23 2002 --- /usr/home/cravey/src/acid/newport/distinfo Sun Feb 2 17:06:19 2003 *************** *** 1 **** ! MD5 (acid-0.9.6b21.tar.gz) = a0e2ccfa072dc96832dc54cb3c834d82 --- 1 ---- ! MD5 (acid-0.9.6b23.tar.gz) = d8c49614393fa05ac140de349f57e438 diff -cr ./files/patch-aa /usr/home/cravey/src/acid/newport/files/patch-aa *** ./files/patch-aa Fri Aug 30 22:17:23 2002 --- /usr/home/cravey/src/acid/newport/files/patch-aa Sun Feb 2 17:06:19 2003 *************** *** 1,11 **** ! --- acid_conf.php Mon Mar 4 00:02:44 2002 ! +++ /usr/local/www/acid/acid_conf.php Wed Apr 10 00:22:38 2002 ! @@ -9,7 +9,7 @@ ! * $foo = "c:\tmp" [OK] ! * $foo = "c:\tmp\" [WRONG] ! */ ! -$DBlib_path = ""; ! +$DBlib_path = "/usr/local/www/data.default/php/adodb"; ! ! /* The type of underlying alert database ! * --- 1,36 ---- ! *** /usr/ports/security/acid/work/acid/acid_conf.php.orig Wed Jan 8 19:04:07 2003 ! --- acid_conf.php Sun Feb 2 16:58:09 2003 ! *************** ! *** 9,15 **** ! * $foo = "c:\tmp" [OK] ! * $foo = "c:\tmp\" [WRONG] ! */ ! ! $DBlib_path = ""; ! ! /* The type of underlying alert database ! * ! --- 9,15 ---- ! * $foo = "c:\tmp" [OK] ! * $foo = "c:\tmp\" [WRONG] ! */ ! ! $DBlib_path = "/usr/local/www/data.default/php/adodb"; ! ! /* The type of underlying alert database ! * ! *************** ! *** 66,72 **** ! /* Path to the graphing library ! * (Note: DO NOT include a trailing backslash after the directory) ! */ ! ! $ChartLib_path = ""; ! ! /* File format of charts ('png', 'jpeg', 'gif') */ ! $chart_file_format = "png"; ! --- 66,72 ---- ! /* Path to the graphing library ! * (Note: DO NOT include a trailing backslash after the directory) ! */ ! ! $ChartLib_path = "/usr/local/lib/php/phplot/"; ! ! /* File format of charts ('png', 'jpeg', 'gif') */ ! $chart_file_format = "png"; diff -cr ./pkg-plist /usr/home/cravey/src/acid/newport/pkg-plist *** ./pkg-plist Fri Aug 30 22:17:23 2002 --- /usr/home/cravey/src/acid/newport/pkg-plist Sun Feb 2 17:06:19 2003 *************** *** 11,16 **** --- 11,17 ---- www/acid/acid_db_setup.php www/acid/acid_graph_common.php www/acid/acid_graph_display.php + www/acid/acid_graph_form.php www/acid/acid_graph_main.php www/acid/acid_main.php www/acid/acid_maintenance.php *************** *** 29,41 **** www/acid/acid_stat_time.php www/acid/acid_stat_uaddr.php www/acid/create_acid_tbls_mssql.sql www/acid/create_acid_tbls_mysql.sql www/acid/create_acid_tbls_pgsql.sql www/acid/acid_style.css - www/acid/acid_db.inc www/acid/acid_action.inc www/acid/acid_cache.inc www/acid/acid_constants.inc www/acid/acid_include.inc www/acid/acid_log_error.inc www/acid/acid_log_timing.inc --- 30,44 ---- www/acid/acid_stat_time.php www/acid/acid_stat_uaddr.php www/acid/create_acid_tbls_mssql.sql + www/acid/create_acid_tbls_mssql_extra.sql www/acid/create_acid_tbls_mysql.sql www/acid/create_acid_tbls_pgsql.sql + www/acid/create_acid_tbls_pgsql_extra.sql www/acid/acid_style.css www/acid/acid_action.inc www/acid/acid_cache.inc www/acid/acid_constants.inc + www/acid/acid_db.inc www/acid/acid_include.inc www/acid/acid_log_error.inc www/acid/acid_log_timing.inc *************** *** 43,50 **** --- 46,55 ---- www/acid/acid_output_html.inc www/acid/acid_output_query.inc www/acid/acid_signature.inc + www/acid/acid_state_citems.inc www/acid/acid_state_common.inc www/acid/acid_state_criteria.inc www/acid/acid_state_query.inc www/acid/README www/acid/README.mssql + @dirrm www/acid begin 644 test M3VYL>2!I;B`N.B`Q<&%T8V@*9&EF9B`M8W(@+B]-86ME9FEL92`O=7-R+VAO M;64O8W)A=F5Y+W-R8R]A8VED+VYE=W!O<G0O36%K969I;&4**BHJ("XO36%K M969I;&4)4W5N($YO=B`Q,"`Q,#HT-SHT."`R,#`R"BTM+2`O=7-R+VAO;64O M8W)A=F5Y+W-R8R]A8VED+VYE=W!O<G0O36%K969I;&4)4W5N($9E8B`@,B`Q M-SHP-CHQ.2`R,#`S"BHJ*BHJ*BHJ*BHJ*BHJ*@HJ*BH@-BPQ,B`J*BHJ"B`@ M(PH@(`H@(%!/4E1.04U%/0EA8VED"B$@4$]25%9%4E-)3TX]"3`N.2XV8C(Q M"B`@0T%414=/4DE%4ST)<V5C=7)I='D*("!-05-415)?4TE415,]"6AT='`Z M+R]W=W<N86YD<F5W+F-M=2YE9'4O?G)D86YY;&EW+W-N;W)T+PH@(`HM+2T@ M-BPQ,B`M+2TM"B`@(PH@(`H@(%!/4E1.04U%/0EA8VED"B$@4$]25%9%4E-) M3TX]"3`N.2XV8C(S"B`@0T%414=/4DE%4ST)<V5C=7)I='D*("!-05-415)? M4TE415,]"6AT='`Z+R]W=W<N86YD<F5W+F-M=2YE9'4O?G)D86YY;&EW+W-N M;W)T+PH@(`HJ*BHJ*BHJ*BHJ*BHJ*BH**BHJ(#$U+#(Q("HJ*BH*("!254Y? M1$5014Y$4ST))'M,3T-!3$)!4T5]+VQI8F5X96,O87!A8VAE+VQI8G!H<#0N M<V\Z)'M03U)44T1)4GTO=W=W+VUO9%]P:'`T(%P*("`)"21[3$]#04Q"05-% M?2]L:6)E>&5C+VUY<W%L9#HD>U!/4E131$E2?2]D871A8F%S97,O;7ES<6PS M,C,M<V5R=F5R(%P*("`)"21[3$]#04Q"05-%?2]B:6XO<VYO<G0Z)'M03U)4 M4T1)4GTO<V5C=7)I='DO<VYO<G0@7`HA(`D))'M,3T-!3$)!4T5]+W=W=R]D M871A+F1E9F%U;'0O<&AP+V%D;V1B.B1[4$]25%-$25)]+V1A=&%B87-E<R]A M9&]D8@H@(`H@(%=22U-20ST)"21[5U)+1$E2?2\D>U!/4E1.04U%?0H@($Y/ M7T)524Q$/0EY97,*+2TM(#$U+#(S("TM+2T*("!254Y?1$5014Y$4ST))'M, M3T-!3$)!4T5]+VQI8F5X96,O87!A8VAE+VQI8G!H<#0N<V\Z)'M03U)44T1) M4GTO=W=W+VUO9%]P:'`T(%P*("`)"21[3$]#04Q"05-%?2]L:6)E>&5C+VUY M<W%L9#HD>U!/4E131$E2?2]D871A8F%S97,O;7ES<6PS,C,M<V5R=F5R(%P* M("`)"21[3$]#04Q"05-%?2]B:6XO<VYO<G0Z)'M03U)44T1)4GTO<V5C=7)I M='DO<VYO<G0@7`HA(`D))'M,3T-!3$)!4T5]+W=W=R]D871A+F1E9F%U;'0O M<&AP+V%D;V1B.B1[4$]25%-$25)]+V1A=&%B87-E<R]A9&]D8B!<"B$@"0DD M>TQ/0T%,0D%317TO;&EB+W!H<"]P:'!L;W0Z)'M03U)44T1)4GTO9W)A<&AI M8W,O<&AP;&]T"B$@"B`@"B`@5U)+4U)#/0D))'M74DM$25)]+R1[4$]25$Y! M345]"B`@3D]?0E5)3$0]"7EE<PID:69F("UC<B`N+V1I<W1I;F9O("]U<W(O M:&]M92]C<F%V97DO<W)C+V%C:60O;F5W<&]R="]D:7-T:6YF;PHJ*BH@+B]D M:7-T:6YF;PE&<FD@075G(#,P(#(R.C$W.C(S(#(P,#(*+2TM("]U<W(O:&]M M92]C<F%V97DO<W)C+V%C:60O;F5W<&]R="]D:7-T:6YF;PE3=6X@1F5B("`R M(#$W.C`V.C$Y(#(P,#,**BHJ*BHJ*BHJ*BHJ*BHJ"BHJ*B`Q("HJ*BH*(2!- M1#4@*&%C:60M,"XY+C9B,C$N=&%R+F=Z*2`](&$P93)C8V9A,#<R9&,Y-C@S M,F1C-31C8C-C.#,T9#@R"BTM+2`Q("TM+2T*(2!-1#4@*&%C:60M,"XY+C9B M,C,N=&%R+F=Z*2`](&0X8S0Y-C$T,SDS9F$P-6%C,30P9&4S-#EF-3=E-#,X M"F1I9F8@+6-R("XO9FEL97,O<&%T8V@M86$@+W5S<B]H;VUE+V-R879E>2]S M<F,O86-I9"]N97=P;W)T+V9I;&5S+W!A=&-H+6%A"BHJ*B`N+V9I;&5S+W!A M=&-H+6%A"49R:2!!=6<@,S`@,C(Z,3<Z,C,@,C`P,@HM+2T@+W5S<B]H;VUE M+V-R879E>2]S<F,O86-I9"]N97=P;W)T+V9I;&5S+W!A=&-H+6%A"5-U;B!& M96(@(#(@,3<Z,#8Z,3D@,C`P,PHJ*BHJ*BHJ*BHJ*BHJ*BH**BHJ(#$L,3$@ M*BHJ*@HA("TM+2!A8VED7V-O;F8N<&AP"4UO;B!-87(@(#0@,#`Z,#(Z-#0@ M,C`P,@HA("LK*R`O=7-R+VQO8V%L+W=W=R]A8VED+V%C:61?8V]N9BYP:'`) M5V5D($%P<B`Q,"`P,#HR,CHS."`R,#`R"B$@0$`@+3DL-R`K.2PW($!`"B$@ M("`J("`@("`@("`D9F]O(#T@(F,Z7'1M<"(@("`@6T]+70HA("`@*B`@("`@ M("`@)&9O;R`](")C.EQT;7!<(B`@(%M74D].1UT*(2`@("HO"B$@+21$0FQI M8E]P871H(#T@(B(["B$@*R1$0FQI8E]P871H(#T@(B]U<W(O;&]C86PO=W=W M+V1A=&$N9&5F875L="]P:'`O861O9&(B.PHA("`*(2`@+RH@5&AE('1Y<&4@ M;V8@=6YD97)L>6EN9R!A;&5R="!D871A8F%S90HA("`@*B`*+2TM(#$L,S8@ M+2TM+0HA("HJ*B`O=7-R+W!O<G1S+W-E8W5R:71Y+V%C:60O=V]R:R]A8VED M+V%C:61?8V]N9BYP:'`N;W)I9PE7960@2F%N("`X(#$Y.C`T.C`W(#(P,#,* M(2`M+2T@86-I9%]C;VYF+G!H<`E3=6X@1F5B("`R(#$V.C4X.C`Y(#(P,#,* M(2`J*BHJ*BHJ*BHJ*BHJ*BH*(2`J*BH@.2PQ-2`J*BHJ"B$@("`@*B`@("`@ M("`@)&9O;R`](")C.EQT;7`B("`@(%M/2UT*(2`@("`J("`@("`@("`D9F]O M(#T@(F,Z7'1M<%PB("`@6U=23TY'70HA("`@("HO"B$@(2`D1$)L:6)?<&%T M:"`]("(B.PHA("`@"B$@("`O*B!4:&4@='EP92!O9B!U;F1E<FQY:6YG(&%L M97)T(&1A=&%B87-E"B$@("`@*B`*(2`M+2T@.2PQ-2`M+2TM"B$@("`@*B`@ M("`@("`@)&9O;R`](")C.EQT;7`B("`@(%M/2UT*(2`@("`J("`@("`@("`D M9F]O(#T@(F,Z7'1M<%PB("`@6U=23TY'70HA("`@("HO"B$@(2`D1$)L:6)? M<&%T:"`]("(O=7-R+VQO8V%L+W=W=R]D871A+F1E9F%U;'0O<&AP+V%D;V1B M(CL*(2`@(`HA("`@+RH@5&AE('1Y<&4@;V8@=6YD97)L>6EN9R!A;&5R="!D M871A8F%S90HA("`@("H@"B$@*BHJ*BHJ*BHJ*BHJ*BHJ"B$@*BHJ(#8V+#<R M("HJ*BH*(2`@("\J(%!A=&@@=&\@=&AE(&=R87!H:6YG(&QI8G)A<GD@"B$@ M("`@*B`@*$YO=&4Z($1/($Y/5"!I;F-L=61E(&$@=')A:6QI;F<@8F%C:W-L M87-H(&%F=&5R('1H92!D:7)E8W1O<GDI"B$@("`@*B\*(2`A("1#:&%R=$QI M8E]P871H(#T@(B(["B$@("`*(2`@("\J($9I;&4@9F]R;6%T(&]F(&-H87)T M<R`H)W!N9R<L("=J<&5G)RP@)V=I9B<I("HO"B$@("`D8VAA<G1?9FEL95]F M;W)M870@/2`B<&YG(CL*(2`M+2T@-C8L-S(@+2TM+0HA("`@+RH@4&%T:"!T M;R!T:&4@9W)A<&AI;F<@;&EB<F%R>2`*(2`@("`J("`H3F]T93H@1$\@3D]4 M(&EN8VQU9&4@82!T<F%I;&EN9R!B86-K<VQA<V@@869T97(@=&AE(&1I<F5C M=&]R>2D*(2`@("`J+PHA("$@)$-H87)T3&EB7W!A=&@@/2`B+W5S<B]L;V-A M;"]L:6(O<&AP+W!H<&QO="\B.PHA("`@"B$@("`O*B!&:6QE(&9O<FUA="!O M9B!C:&%R=',@*"=P;F<G+"`G:G!E9R<L("=G:68G*2`J+PHA("`@)&-H87)T M7V9I;&5?9F]R;6%T(#T@(G!N9R(["F1I9F8@+6-R("XO<&MG+7!L:7-T("]U M<W(O:&]M92]C<F%V97DO<W)C+V%C:60O;F5W<&]R="]P:V<M<&QI<W0**BHJ M("XO<&MG+7!L:7-T"49R:2!!=6<@,S`@,C(Z,3<Z,C,@,C`P,@HM+2T@+W5S M<B]H;VUE+V-R879E>2]S<F,O86-I9"]N97=P;W)T+W!K9RUP;&ES=`E3=6X@ M1F5B("`R(#$W.C`V.C$Y(#(P,#,**BHJ*BHJ*BHJ*BHJ*BHJ"BHJ*B`Q,2PQ M-B`J*BHJ"BTM+2`Q,2PQ-R`M+2TM"B`@=W=W+V%C:60O86-I9%]D8E]S971U M<"YP:'`*("!W=W<O86-I9"]A8VED7V=R87!H7V-O;6UO;BYP:'`*("!W=W<O M86-I9"]A8VED7V=R87!H7V1I<W!L87DN<&AP"BL@=W=W+V%C:60O86-I9%]G M<F%P:%]F;W)M+G!H<`H@('=W=R]A8VED+V%C:61?9W)A<&A?;6%I;BYP:'`* M("!W=W<O86-I9"]A8VED7VUA:6XN<&AP"B`@=W=W+V%C:60O86-I9%]M86EN M=&5N86YC92YP:'`**BHJ*BHJ*BHJ*BHJ*BHJ"BHJ*B`R.2PT,2`J*BHJ"B`@ M=W=W+V%C:60O86-I9%]S=&%T7W1I;64N<&AP"B`@=W=W+V%C:60O86-I9%]S M=&%T7W5A9&1R+G!H<`H@('=W=R]A8VED+V-R96%T95]A8VED7W1B;'-?;7-S M<6PN<W%L"B`@=W=W+V%C:60O8W)E871E7V%C:61?=&)L<U]M>7-Q;"YS<6P* M("!W=W<O86-I9"]C<F5A=&5?86-I9%]T8FQS7W!G<W%L+G-Q;`H@('=W=R]A M8VED+V%C:61?<W1Y;&4N8W-S"BT@=W=W+V%C:60O86-I9%]D8BYI;F,*("!W M=W<O86-I9"]A8VED7V%C=&EO;BYI;F,*("!W=W<O86-I9"]A8VED7V-A8VAE M+FEN8PH@('=W=R]A8VED+V%C:61?8V]N<W1A;G1S+FEN8PH@('=W=R]A8VED M+V%C:61?:6YC;'5D92YI;F,*("!W=W<O86-I9"]A8VED7VQO9U]E<G)O<BYI M;F,*("!W=W<O86-I9"]A8VED7VQO9U]T:6UI;F<N:6YC"BTM+2`S,"PT-"`M M+2TM"B`@=W=W+V%C:60O86-I9%]S=&%T7W1I;64N<&AP"B`@=W=W+V%C:60O M86-I9%]S=&%T7W5A9&1R+G!H<`H@('=W=R]A8VED+V-R96%T95]A8VED7W1B M;'-?;7-S<6PN<W%L"BL@=W=W+V%C:60O8W)E871E7V%C:61?=&)L<U]M<W-Q M;%]E>'1R82YS<6P*("!W=W<O86-I9"]C<F5A=&5?86-I9%]T8FQS7VUY<W%L M+G-Q;`H@('=W=R]A8VED+V-R96%T95]A8VED7W1B;'-?<&=S<6PN<W%L"BL@ M=W=W+V%C:60O8W)E871E7V%C:61?=&)L<U]P9W-Q;%]E>'1R82YS<6P*("!W M=W<O86-I9"]A8VED7W-T>6QE+F-S<PH@('=W=R]A8VED+V%C:61?86-T:6]N M+FEN8PH@('=W=R]A8VED+V%C:61?8V%C:&4N:6YC"B`@=W=W+V%C:60O86-I M9%]C;VYS=&%N=',N:6YC"BL@=W=W+V%C:60O86-I9%]D8BYI;F,*("!W=W<O M86-I9"]A8VED7VEN8VQU9&4N:6YC"B`@=W=W+V%C:60O86-I9%]L;V=?97)R M;W(N:6YC"B`@=W=W+V%C:60O86-I9%]L;V=?=&EM:6YG+FEN8PHJ*BHJ*BHJ M*BHJ*BHJ*BH**BHJ(#0S+#4P("HJ*BH*+2TM(#0V+#4U("TM+2T*("!W=W<O M86-I9"]A8VED7V]U='!U=%]H=&UL+FEN8PH@('=W=R]A8VED+V%C:61?;W5T M<'5T7W%U97)Y+FEN8PH@('=W=R]A8VED+V%C:61?<VEG;F%T=7)E+FEN8PHK M('=W=R]A8VED+V%C:61?<W1A=&5?8VET96US+FEN8PH@('=W=R]A8VED+V%C M:61?<W1A=&5?8V]M;6]N+FEN8PH@('=W=R]A8VED+V%C:61?<W1A=&5?8W)I M=&5R:6$N:6YC"B`@=W=W+V%C:60O86-I9%]S=&%T95]Q=65R>2YI;F,*("!W M=W<O86-I9"]214%$344*("!W=W<O86-I9"]214%$344N;7-S<6P**R!`9&ER ,<FT@=W=W+V%C:60* ` end >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200302022354.h12NsD1v043704>