encase pkg

doesn't include actual binary. get it from the vendor. this appears to
work fine.

encase/EnCase

@@ -0,0 +1,21 @@
+#!/bin/sh
+. /etc/rc.common
+StartService ()
+{
+ConsoleMessage "Starting EnCase Servlet"
+	/usr/local/sbin/enosxintel -d -p /usr/local/sbin
+}
+StopService ()
+{
+ConsoleMessage "Stopping EnCase Servlet"
+	pid=`/bin/ps -ax | /usr/bin/grep [e]nosx | /usr/bin/sed -e 's/^ *//' -e 's/ .*//'`
+	/bin/kill ${pid}
+}
+RestartService ()
+{
+ConsoleMessage "Restarting EnCase Servlet"
+	pid=`/bin/ps -ax | /usr/bin/grep [e]nosx | /usr/bin/sed -e 's/^ *//' -e 's/ .*//'`
+	/bin/kill ${pid}
+	/usr/local/sbin/enosxintel -d -p /usr/local/sbin
+}
+RunService "$1"

encase/Makefile

@@ -0,0 +1,35 @@
+#
+#   Copyright 2009 Joe Block <jpb@ApesSeekingKnowledge.net>
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+# 
+
+include /usr/local/share/luggage/luggage.make
+
+TITLE=encase
+PACKAGE_VERSION=6.17.0.75
+REVERSE_DOMAIN=com.guidancesoftware
+PAYLOAD= \
+	pack-usr-local-sbin-enosxintel\
+	pack-encase-startup-EnCase \
+	pack-encase-startup-StartupParameters.plist \
+	pack-script-postflight
+
+l_Library_StartupItems_EnCase: l_Library_StartupItems
+	@sudo mkdir -p ${WORK_D}/Library/StartupItems/EnCase
+	@sudo chown root:wheel ${WORK_D}/Library/StartupItems/EnCase
+	@sudo chmod 755 ${WORK_D}/Library/StartupItems/EnCase
+
+pack-encase-startup-%: % l_Library_StartupItems_EnCase
+	@sudo ${INSTALL} -m 700 -g wheel -o root $< ${WORK_D}/Library/StartupItems/EnCase

encase/StartupParameters.plist

@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>Description</key>
+	<string>EnCase</string>
+	<key>OrderPreference</key>
+	<string>Last</string>
+	<key>Messages</key>
+	<dict>
+		<key>restart</key>
+		<string>Restarting EnCase agent</string>
+		<key>start</key>
+		<string>Starting EnCase agent</string>
+		<key>stop</key>
+		<string>Stopping EnCase agent</string>
+	</dict>
+	<key>Provides</key>
+	<array>
+		<string>EnCase</string>
+	</array>
+</dict>
+</plist>

encase/postflight

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+if [[ -e /Library/StartupItems/EnCase/EnCase ]]; then
+	/sbin/SystemStarter start EnCase
+fi