File suricata.spec of Package suricata

Overview Repositories Revisions Requests Users Attributes Meta

File suricata.spec of Package suricata

#
# spec file for package suricata
#
# Copyright (c) 2022 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via https://bugs.opensuse.org/
#

%if 0%{?suse_version} >= 1500
%ifarch %{ix86} x86_64
%bcond_without hyperscan
%endif
%endif
%bcond_without luajit
Name:           suricata
Version:        7.0.3
Release:        0
Summary:        Open Source Next Generation Intrusion Detection and Prevention Engine
License:        GPL-2.0-only
URL:            https://www.openinfosecfoundation.org/
Source0:        https://www.openinfosecfoundation.org/download/suricata-%{version}.tar.gz
Source1:        https://www.openinfosecfoundation.org/download/suricata-%{version}.tar.gz.sig
Source2:        suricata.service
Source3:        suricata.sysconfig
Source4:        suricata.logrotate
BuildRequires:  cargo
BuildRequires:  coccinelle
BuildRequires:  file-devel
BuildRequires:  libnet-devel
BuildRequires:  libpcap-devel
BuildRequires:  pkgconfig
BuildRequires:  python3
BuildRequires:  python3-PyYAML
BuildRequires:  python3-setuptools
BuildRequires:  rust >= 1.63.0
BuildRequires:  systemd-rpm-macros
BuildRequires:  pkgconfig(hiredis)
BuildRequires:  pkgconfig(htp) >= 0.5.46
BuildRequires:  pkgconfig(jansson)
BuildRequires:  pkgconfig(libcap-ng)
BuildRequires:  pkgconfig(libevent)
BuildRequires:  pkgconfig(liblz4)
BuildRequires:  pkgconfig(liblzma)
BuildRequires:  pkgconfig(libmaxminddb)
BuildRequires:  pkgconfig(libnetfilter_log)
BuildRequires:  pkgconfig(libnetfilter_queue)
BuildRequires:  pkgconfig(libnfnetlink)
BuildRequires:  pkgconfig(libpcre2-8)
BuildRequires:  pkgconfig(nspr)
BuildRequires:  pkgconfig(nss)
BuildRequires:  pkgconfig(yaml-0.1)
BuildRequires:  pkgconfig(zlib)
Requires:       python3-PyYAML
Requires:       pkgconfig(htp) >= 0.5.46
Requires(pre):  %fillup_prereq
Recommends:     jq
Recommends:     logrotate
%{?systemd_requires}
%if %{with luajit}
BuildRequires:  pkgconfig(luajit)
%else
BuildRequires:  pkgconfig(lua)
%endif
%if 0%{with hyperscan}
BuildRequires:  hyperscan-devel
%endif

%description
The Suricata Engine is an Open Source Next Generation Intrusion Detection and
Prevention Engine. This engine is not intended to just replace or emulate the
existing tools in the industry, but will bring new ideas and technologies to
the field.

OISF is part of and funded by the Department of Homeland Security's Directorate
for Science and Technology HOST program (Homeland Open Security Technology), by
the the Navy's Space and Naval Warfare Systems Command (SPAWAR), as well as
through the very generous support of the members of the OISF Consortium. More
information about the Consortium is available, as well as a list of our current
Consortium Members.

%prep
%setup -q
# Fix path in manpage
sed -i 's|%{_prefix}/local||g' doc/userguide/suricata.1
sed -i '/^#!\//, 1d' python/suricata/sc/suricatasc.py

%build
export HAVE_PYTHON=%{_bindir}/python3

%configure \
    --enable-gccmarch-native=no \
    --enable-nflog \
    --with-libnetfilter_log-includes=`pkg-config libnetfilter_log --variable=includedir` \
    --enable-nfqueue \
    --enable-gccprotect \
    --enable-old-barnyard2 \
    --enable-non-bundled-htp \
    --enable-geoip \
%if %{with luajit}
    --enable-luajit \
%else
    --enable-lua \
%endif
%if 0%{with hyperscan}
    --enable-hyperscan \
%endif
    --enable-hiredis
%make_build

%install
%make_install
mkdir -p %{buildroot}%{_localstatedir}/log/suricata
mkdir -p %{buildroot}%{_localstatedir}/lib/suricata
mkdir -p %{buildroot}%{_sysconfdir}/suricata
mkdir -p %{buildroot}%{_sbindir}
cp *.config %{buildroot}%{_sysconfdir}/suricata/
cp etc/*.config %{buildroot}%{_sysconfdir}/suricata/
cp suricata.yaml %{buildroot}%{_sysconfdir}/suricata/
cp -R rules %{buildroot}%{_sysconfdir}/suricata/
rm -rf %{buildroot}/%{_datadir}/doc/suricata
rm -rf %{buildroot}%{python3_sitelib}/suricata/__pycache__
install -Dpm 0644 %{SOURCE2} %{buildroot}%{_unitdir}/%{name}.service
install -Dpm 0644 %{SOURCE3} %{buildroot}%{_fillupdir}/sysconfig.%{name}
install -Dpm 0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rcsuricata
mkdir -p %{buildroot}%{_localstatedir}/log/suricata

%pre
%service_add_pre %{name}.service

%post
%service_add_post %{name}.service
%fillup_only
suricata-update

%preun
%service_del_preun %{name}.service

%postun
%service_del_postun %{name}.service

%files
%license COPYING
%doc doc/AUTHORS doc/Basic_Setup.txt doc/GITGUIDE doc/Setting_up_IPSinline_for_Linux.txt doc/Third_Party_Installation_Guides.txt doc/TODO
%config(noreplace)%{_sysconfdir}/suricata
%{_bindir}/suricata
%{_bindir}/suricatasc
%{_bindir}/suricatactl
%{_bindir}/suricata-update
%{_sbindir}/rcsuricata
%dir %{_prefix}/lib/suricata
%dir %{_prefix}/lib/suricata/python
%{_prefix}/lib/suricata/python/suricata/
%{_prefix}/lib/suricata/python/suricatasc/
%{_datadir}/suricata*
%dir %{_localstatedir}/log/suricata
%{_mandir}/man1/suricata.1%{?ext_man}
%{_mandir}/man1/suricatasc.1%{?ext_man}
%{_mandir}/man1/suricatactl.1%{?ext_man}
%{_mandir}/man1/suricatactl-filestore.1%{?ext_man}

%dir %{_localstatedir}/lib/suricata
%{_unitdir}/%{name}.service
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
%{_fillupdir}/sysconfig.%{name}

%changelog

Places

File suricata.spec of Package suricata

Places