Skip to content

Commit

Permalink
security/suricata: Update to 7.0.0
Browse files Browse the repository at this point in the history
* The (broken) Prelude support was removed upstream.
* Netmap API support requires version 14 now. Otherwise it has to be
  disabled to build.
* Caveats may still apply as no stable release was published yet.

  OPNsense users are reporting instability issues with Netmap compared to
  version 6.0.13, but as these things move quite slowly and demand is high
  the update shall go in since it is an official release.

ChangeLog:	https://suricata.io/2023/07/18/suricata-7-0-0-released/
PR:		267688
  • Loading branch information
fichtner authored and nunotexbsd committed Sep 10, 2023
1 parent c63480e commit 62bc0ae
Show file tree
Hide file tree
Showing 4 changed files with 10 additions and 45 deletions.
21 changes: 4 additions & 17 deletions security/suricata/Makefile
@@ -1,6 +1,5 @@
PORTNAME= suricata
DISTVERSION= 6.0.13
PORTREVISION= 3
DISTVERSION= 7.0.0
CATEGORIES= security
MASTER_SITES= https://www.openinfosecfoundation.org/download/

Expand All @@ -15,7 +14,7 @@ BUILD_DEPENDS= rustc:lang/${RUST_DEFAULT}
LIB_DEPENDS= libjansson.so:devel/jansson \
liblz4.so:archivers/liblz4 \
libnet.so:net/libnet \
libpcre.so:devel/pcre \
libpcre2-8.so:devel/pcre2 \
libyaml.so:textproc/libyaml

USES= autoreconf cpe gmake iconv:translit libtool localbase pathfix \
Expand All @@ -40,8 +39,7 @@ CONFLICTS_INSTALL= libhtp

SUB_FILES= pkg-message

OPTIONS_DEFINE= GEOIP IPFW NETMAP NSS PORTS_PCAP PRELUDE PYTHON REDIS \
TESTS
OPTIONS_DEFINE= GEOIP IPFW NETMAP NSS PORTS_PCAP PYTHON REDIS TESTS
OPTIONS_DEFINE_amd64= HYPERSCAN
OPTIONS_DEFAULT= IPFW NETMAP PYTHON

Expand All @@ -50,8 +48,6 @@ OPTIONS_RADIO_SCRIPTS= LUA LUAJIT

OPTIONS_SUB= yes

PRELUDE_BROKEN= Compilation broken, see https://redmine.openinfosecfoundation.org/issues/4065

GEOIP_DESC= GeoIP support
HYPERSCAN_DESC= Hyperscan support
IPFW_DESC= IPFW and IP Divert support for inline IDP
Expand All @@ -60,7 +56,6 @@ LUA_DESC= LUA scripting support
NETMAP_DESC= Netmap support for inline IDP
NSS_DESC= File checksums and SSL/TLS fingerprinting
PORTS_PCAP_DESC= Use libpcap from ports
PRELUDE_DESC= Prelude support for NIDS alerts
PYTHON_DESC= Python-based update and control utilities
REDIS_DESC= Redis output support
SCRIPTS_DESC= Scripting
Expand All @@ -79,7 +74,7 @@ LUAJIT_CONFIGURE_ON= --enable-luajit
LUA_USES= lua:51
LUA_CONFIGURE_ON= --enable-lua

NETMAP_CONFIGURE_ENABLE= netmap # netmap-v14
NETMAP_CONFIGURE_ENABLE= netmap

NSS_LIB_DEPENDS= libnspr4.so:devel/nspr \
libnss3.so:security/nss
Expand All @@ -88,14 +83,6 @@ NSS_CONFIGURE_OFF= --disable-nspr \

PORTS_PCAP_LIB_DEPENDS= libpcap.so.1:net/libpcap

PRELUDE_LIB_DEPENDS= libgcrypt.so:security/libgcrypt \
libgnutls.so:security/gnutls \
libgpg-error.so:security/libgpg-error \
libltdl.so:devel/libltdl \
libprelude.so:security/libprelude
PRELUDE_CONFIGURE_ON= --with-libprelude-prefix=${LOCALBASE}
PRELUDE_CONFIGURE_ENABLE= prelude

PYTHON_BUILD_DEPENDS= ${PYTHON_RUN_DEPENDS}
PYTHON_RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}yaml>0:devel/py-yaml@${PY_FLAVOR}
PYTHON_USES= python
Expand Down
6 changes: 3 additions & 3 deletions security/suricata/distinfo
@@ -1,3 +1,3 @@
TIMESTAMP = 1686896524
SHA256 (suricata-6.0.13.tar.gz) = e09f2f800d0e0cd2f97f21c505950ccc3dbb9ce5cfe808df9567b6d849a31055
SIZE (suricata-6.0.13.tar.gz) = 27411308
TIMESTAMP = 1689683356
SHA256 (suricata-7.0.0.tar.gz) = 7bcd1313118366451465dc3f8385a3f6aadd084ffe44dd257dda8105863bb769
SIZE (suricata-7.0.0.tar.gz) = 23426302
24 changes: 0 additions & 24 deletions security/suricata/files/patch-configure.ac

This file was deleted.

4 changes: 3 additions & 1 deletion security/suricata/pkg-plist
Expand Up @@ -20,7 +20,6 @@ include/htp/htp_utf8_decoder.h
include/htp/htp_version.h
include/htp/lzma/7zTypes.h
include/htp/lzma/LzmaDec.h
include/suricata-plugin.h
lib/libhtp.a
lib/libhtp.so
lib/libhtp.so.2
Expand Down Expand Up @@ -141,6 +140,7 @@ man/man1/suricata.1.gz
%%DATADIR%%/rules/dnp3-events.rules
%%DATADIR%%/rules/dns-events.rules
%%DATADIR%%/rules/files.rules
%%DATADIR%%/rules/ftp-events.rules
%%DATADIR%%/rules/http-events.rules
%%DATADIR%%/rules/http2-events.rules
%%DATADIR%%/rules/ipsec-events.rules
Expand All @@ -149,6 +149,8 @@ man/man1/suricata.1.gz
%%DATADIR%%/rules/mqtt-events.rules
%%DATADIR%%/rules/nfs-events.rules
%%DATADIR%%/rules/ntp-events.rules
%%DATADIR%%/rules/quic-events.rules
%%DATADIR%%/rules/rfb-events.rules
%%DATADIR%%/rules/smb-events.rules
%%DATADIR%%/rules/smtp-events.rules
%%DATADIR%%/rules/ssh-events.rules
Expand Down

0 comments on commit 62bc0ae

Please sign in to comment.