CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/bsmtrace3 3.1

BSM based intrusion detection system

Port info

Maintainer
csjp@FreeBSD.org
Packages
latest: 3.1
Upstream
up to date
Last update
to 3.1 · e4610fcb8b
Quarterly
2026Q4: 3.1
WWW
https://www.github.com/openbsm/bsmtrace
Links
cgit · VuXML

Install

Package
# pkg install bsmtrace3
installs 3.1 from latest; from quarterly (2026Q4) 3.1
Port
# cd /usr/ports/security/bsmtrace3 && make install clean
# make -C /usr/ports/security/bsmtrace3 config  # change options first
Size
28 KiB download · 69 KiB installed
Depends on
devel/pcre 8.45_4
License
BSD2CLAUSE
Options
1 of 1 on in the package: EXAMPLES
pkg-message
Shown after installing
Please note a sample configuration file for bsmtrace has been installed
in /usr/local/share/examples/bsmtrace.  This file will not be
suitable for your own system, but can be used as a reference to get
started.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.13.1–
FreeBSD 153.13.1–
FreeBSD 143.13.13.1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.13.1–
FreeBSD 143.13.13.1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (8)

Baptiste Daroussin (bapt) · 3.1
MAN?PREFIX: eleminate its usage  and move man to share/man
e4610fcb8b
Stefan Eßer (se) · 3.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Stefan Eßer (se) · 3.1
*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Approved by: portmgr (blanket)
5933ac0b09
Mathieu Arnold (mat) · 3.1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 3.1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Kyle Evans (kevans) · 3.1
security/bsmtrace3: update to the 3.1 -fno-common build fix

The only changes between 3.0 and 3.1 are a change to the README to note work
sponsored by an organization, and the -fno-common build fix.

-fno-common is now the default in LLVM 11/GCC 10.

PR:		248756
Approved by:	csjp (maintainer, also discussed with)
MFH:		2020Q3 (-fno-common build fix)
fc4cda8929
Kyle Evans (kevans) · 3.0
[NEW] security/bsmtrace3: BSM based intrusion detection system

bsmtrace is a BSM based intrusion detection system, utilizing audit trails
and real-time audit event analysis through auditpipe(4).  This host based
IDS operates using a finite state machine principles with a flexible
sequence driven signature system.

WWW: https://www.github.com/openbsm/bsmtrace

This is a repocopy of security/bsmtrace, updated to recently-released 3.x.
There are breaking changes between 1.x and 3.x, so it was decided to create
a new port to give consumers some time to update their configs. The old
security/bsmtrace should be deprecated in fairly short order, after
bsmtrace3 has received a little bit of soak time in ports.

bsmtrace 3.x, compared to the previous port, offers following new features:
- Set arrays will now resize on the fly, so the size limits should be no
    more
- Logging channels have been removed, there's now one `logfile` directive
    that can be applied at the global level to switch the logfile, assuming
    the -l logdir option is in use
- Other config files can now be included with the 'include' directive; globs
    are not currently supported, paths are relative to the primary config
    file
- Sequences can now be configured to match on the jail name with the
    per-sequence `zone` directive; valid values are: any, none, or a glob
    string that matches the jail name.
    Any = any jail, not the host. None = Only the host, no jails.

Other points:
- The Makefile patch is no longer needed as PCRE is now a mandatory
    dependency.
- The dprintf(3) conflict is no more, so the rest of the patches also
    disappear.
- This port now installs manpages to ${PREFIX}/share/man as per recent
    guidelines to reflect base hierarchy.
- MAINTAINER remains csjp with the OpenBSM/TrustedBSD project.

Approved by:	koobs (mentor)
Differential Revision:	https://reviews.freebsd.org/D24437
dcb93871af