Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 7 Nov 2010 10:24:31 GMT
From:      Trond Endrestøl <Trond.Endrestol@ximalas.info>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/152009: security/snort should give the user a choice of enabling IPv6 support or not
Message-ID:  <201011071024.oA7AOVOL044385@www.freebsd.org>
Resent-Message-ID: <201011071030.oA7AUAVj053883@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         152009
>Category:       ports
>Synopsis:       security/snort should give the user a choice of enabling IPv6 support or not
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sun Nov 07 10:30:10 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Trond Endrestøl
>Release:        8.1-STABLE
>Organization:
Private
>Environment:
>Description:
snort has had IPv6 support since 2.8.4. IPv6 is not enabled by default nor is it available unless you manually tweek the Makefile or build snort yourself.

security/snort/Makefile should be amended with the necessary logic to let the user choose to enable IPv6 if indeed snort IPv6 support is wanted.

The attached patch can be used as a starting point.
>How-To-Repeat:
Build security/snort using the current Makefile (CVS rev 1.124).
>Fix:


Patch attached with submission follows:

--- Makefile.orig	2010-09-24 18:51:56.000000000 +0200
+++ Makefile	2010-11-07 11:10:54.000000000 +0100
@@ -26,7 +26,8 @@
 		POSTGRESQL "Enable PostgreSQL support" off \
 		PRELUDE "Enable Prelude NIDS integration" off \
 		PERPROFILE "Enable Performance Profiling" off \
-		SNORTSAM "Enable output plugin to SnortSam" off
+		SNORTSAM "Enable output plugin to SnortSam" off \
+		IPV6 "Enable IPv6 support" off
 
 USE_RC_SUBR=	snort.sh
 SUB_FILES=	pkg-message
@@ -131,6 +132,10 @@
 PATCHFILES+=snortsam-2.8.6.diff.gz:snortsam
 .endif
 
+.if defined(WITH_IPV6)
+CONFIGURE_ARGS+=	--enable-ipv6
+.endif
+
 post-patch:
 .if defined(NOPORTDOCS)
 	@${REINPLACE_CMD} '/SUBDIRS = /s/doc//' ${WRKSRC}/Makefile.in


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201011071024.oA7AOVOL044385>