# Contributor: IT Offshore <developer@it-offshore.co.uk>
# Maintainer:
pkgname=psad
pkgver=2.4.0
pkgrel=0
pkgdesc="3 lightweight system daemons that analyze iptables log messages to detect port scans and other suspicious traffic"
url="http://cipherdyne.org/psad/"
arch="all"
license="GPL"
depends="perl iptables ip6tables ssmtp mailx psmisc perl-bit-vector perl-date-calc perl-iptables-chainmgr perl-iptables-parse perl-net-ipv4addr perl-unix-syslog net-tools"
subpackages="$pkgname-doc"
source="http://cipherdyne.org/psad/download/$pkgname-nodeps-$pkgver.tar.gz
	psad.initd
	psad.confd
	"

_builddir="$srcdir"/$pkgname-$pkgver

build() {
	cd "$_builddir"

	#Set the config dirs
  sed -e "s|'/usr/sbin'|'$pkgdir/usr/sbin'|" \
      -e "s|'/usr/bin'|'$pkgdir/usr/bin'|" \
      -e "s|my \$mpath = \"/usr/share/man/man\$section\";|my \$mpath = \"$pkgdir/usr/share/man/man\$section\";|" \
          ./install.pl -i
       #/usr/sbin/psadwatchd set with last cmd
  sed -e "s|/var/log/psad|$pkgdir&|" \
      -e "s|/var/run/psad|$pkgdir&|" \
      -e "s|/var/lib/psad|$pkgdir&|" \
      -e "s|/usr/lib/psad|$pkgdir&|" \
      -e "s|/etc/psad|$pkgdir&|" \
      -e "s|/usr/bin/whois_psad|$pkgdir/usr/bin/whois|" \
      -e "s|/usr/sbin/fwcheck_psad|$pkgdir&|" \
      -e "s|/usr/sbin/kmsgsd|$pkgdir&|" \
      -e "s|/usr/sbin/psad|$pkgdir&|" \
        ./psad.conf -i

       # set mail command to mailx
  sed -e 's|/bin/mail;|/usr/bin/mail;|g' -i ./psad.conf

	#Disable install of generic init script & setting numeric run level
	START=$(sed -n '/if ($init_dir and &is_root()) {/=' ./install.pl)
	END=$(expr $START + 7)
        #Busybox sed does not support +7d
	sed -e ''$START','$END'd' ./install.pl -i

	#populate install.answers so build does not wait for them
	echo -e "Would you like to merge the config from the existing psad installation:\t n;" > ./install.answers
        echo -e "Preserve any user modfications in etc psad signatures:\t y;" >> ./install.answers
        echo -e "Preserve any user modfications in etc psad icmp_types:\t y;" >> ./install.answers
        echo -e "Preserve any user modfications in etc psad icmp6_types:\t y;" >> ./install.answers
        echo -e "Preserve any user modfications in etc psad posf:\t y;" >> ./install.answers
        echo -e "Preserve any user modfications in etc psad auto_dl:\t y;" >> ./install.answers
        echo -e "Preserve any user modfications in etc psad snort_rule_dl:\t y;" >> ./install.answers
        echo -e "Preserve any user modfications in etc psad pf os:\t y;" >> ./install.answers
        echo -e "Preserve any user modfications in etc psad ip_options:\t y;" >> ./install.answers
        echo -e "Would you like alerts sent to a different address:\t y;" >> ./install.answers
        echo -e "Email addresses:\t root@localhost;" >> ./install.answers
        echo -e "Would you like psad to only parse specific strings in iptables messages:\t n;" >> ./install.answers
        echo -e "First is it ok to leave the HOME_NET setting as any:\t y;" >> ./install.answers
        echo -e "Would you like to enable DShield alerts:\t n;" >> ./install.answers
        echo -e "Would you like to install the latest signatures from http www cipherdyne org psad signatures:\t n;" >> ./install.answers
        echo -e "Enable psad at boot time:\t n;" >> ./install.answers
}

package() {
	cd "$_builddir"

	mkdir -p $pkgdir/etc/psad \
                 $pkgdir/usr/bin \
                 $pkgdir/usr/sbin \
                 $pkgdir/usr/share/man/man8 \
                 $pkgdir/var/lib/psad \
                 $pkgdir/var/log/psad \
                 $pkgdir/var/run/psad
	# add dummy whois so build completes
	ln -s /bin/busybox $pkgdir/usr/bin/whois
	# dummy runlevel 1 / skip perl module installation
	./install.pl --runlevel 1 --Use-answers --Skip-mod-install

        #Set correct permissions
	chmod -R o+r $pkgdir/etc/psad
	chmod -R o+r $pkgdir/usr/sbin/*
	chmod 0700 $pkgdir/var/lib/psad
	#remove whois symbolic link
	rm -rf $pkgdir/usr/bin/whois

	# Fix the config
	sed -e "s|$pkgdir||" $pkgdir/etc/psad/psad.conf -i
	sed -e "s|$pkgdir||" $pkgdir/var/log/psad/install.log -i

	#install init script & config defaults
	install -m755 -D "$srcdir"/$pkgname.initd \
		"$pkgdir"/etc/init.d/$pkgname || return 1
	install -m644 -D "$srcdir"/$pkgname.confd \
		"$pkgdir"/etc/conf.d/$pkgname || return 1
}

md5sums="d6a51be8882f2d8bda590720c4b5d082  psad-nodeps-2.4.0.tar.gz
b7d0fa3ee0b711a92f25ff8188dbf75b  psad.initd
bc07efebb41cc23c4be129bbbacc874b  psad.confd"
sha256sums="0b42a53539be604a326016e41db6b77ca66ccdb2ed0401148b60dc1c3aee86d7  psad-nodeps-2.4.0.tar.gz
1a5b8f1b014a9f78b43cd6e4e1006d6901a654fc51dcbe2c405d509b4a950a78  psad.initd
74c72225fa37c367a458321b737050cacaf262f32b0cc13babc54468ff1988b9  psad.confd"
sha512sums="74e0adc73951ef1acdbc0d9a289f52b88bcb2425fd36cf1d9f7e7b7546b336c1eb6748d5847fe8d512442d0cc5ea525fd4f100ecc922c7fcf04a212893b070ee  psad-nodeps-2.4.0.tar.gz
f9f7e5e9da9de2f2258ae1b36e22e59faf950c7110de869c3581f7a89cd6dfdc96aa4db06a4ceca0ac016e8adbeb1e3bca3da66a565aec8a1ddf2808e93897c2  psad.initd
a80666f59356cc6157a9f5dca132991d4f1e0afda8f673d602de2557219d5521bec9ae148330e98d9483175d14d96e4cc2ccd11541d8b187b0e47f44ba4ada54  psad.confd"