security/samhain 4.4.3_1

Update to 3.0.2 - minor bugfixes.

Update to 3.0.1.

Feature safe:	yes

Update to 3.0.0a.

Update to 2.8.6.

Update to 2.8.5.

Update to 2.8.4.

Update to 2.8.3a.

Update to 2.8.1. Bugfixes, IPv6.

Update to 2.7.2.

- Exclude from amd64/8 builds on pointyhat, where it mysteriously fails to link

Unbreak on 8.x, it builds just fine on amd64 here. If someone has a specific OS version on which it will not, please let me know.

Update to 2.7.1.

Feature safe:	yes

Update to 2.7.0.

Update to 2.6.4.

- Mark BROKEN on HEAD: fails to build with new utmpx

Reported by:	pointyhat

Update to 2.6.1. From changelog:

-  Logfile monitoring has been enhanced with three new features:
    (1) reporting on bursts of very similar/repeated messages
    (2) reporting on expected yet missing messages (e.g. heartbeat messages)
    (3) reporting on correlated events (e.g. event A is followed by event B
        within X seconds)

 -  Better caching of UIDs/GIDs to reduce lookups

 -  Hostnames of clients are matched case-insensitively now

Update to 2.6.0.

Update to 2.5.10, a bugfix release.

Feature safe:	yes

Update to 2.5.9.

Feature safe: yes

- Chase libprelude update

Feature safe:	yes

- Mark BROKEN on amd64/8

Reported by:	pointyhat

Update to 2.5.7, a bugfix release.

Update to 2.5.4, a security bugfix release. This resolves a problem where an unauthorized client could download configuration and database files from the server.

Full changes since 2.5.2:

 - email logging has been rewritten for enhanced functionality. It's
   now possible to filter messages different for each recipient, and
   regular expressions can be used now for filtering

 - new option SetMailPort allows to set a custom SMTP port

 - in the configuration file, option values can now be set by evaluating
   shell commands: Key = $( command )

 - PortCheckInterface now allows a list as value

 - new option SetConnectionTimeout allows to configure the client/server
   connection timeout

 - new option SetThrottle allows to configure throughput throttling for
   the database download to the client

- Chase security/libprelude shlib version bump

PR:		131286, 131585 (partial)
Submitted by:	Vladimir Korkodinov <viper at perm dot raid dot ru>

Update to 2.5.2.

Changes:

 -  On request, there is now a global option LooseDirCheck ([false]/true) to
    drop reports on directories with changes of size/mtime/ctime (resulting
    from changes within the directory)

 -  An option to improve hidden process detection from within an OpenVZ
    container has been added

 -  Port check now reports process pid, reporting to prelude is more
    complete now

 -  A bug has been fixed whereby for files larger than 2GB, a filesize of
    exactly 2GB could be inserted into the RDBMS (if logging to one)

Update to 2.5.1, which should really fix the amd64 build problems.

- Chase libprelude update

Forgotten by:	beech
Reported by:	pointyhat

Update to 2.5.0. Includes a new module for log file analysis, and should fix build issues on 64 bit platforms.

- Mark BROKEN on amd64

Use -fPIC on amd64.

Submitted by:	QA Tindy

Update to 2.4.5. Only notable change on fbsd is the introduction of the dnmalloc allocator.

Update dependency on libprelude.

PR:		123660
Submitted by:	Robin Gruyters <r.gruyters@yirdis.nl>

Update to 2.4.4. Fixes some bugs, and adds the ability to store full file content for small files in the signature database itself.

Update to 2.4.2. This fixes a security issue where checksumming of the gpg binary before execution did not function correctly.

Update to 2.4.1. Also fix a rather silly uninstall message, reported by brd@.

Upgrade to 2.3.7, which fixes a Prelude integration bug.

Update to 2.3.6.

Chase libprelude version bump.

PR:		ports/116112
Submitted by:	Robin Gruyters <r.gruyters@yirdis.nl>
Approved by:	lx

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script   supports them.  This is determined by running ``configure --help'' in   do-configure target and set the shell variable _LATE_CONFIGURE_ARGS   which is then passed to CONFIGURE_ARGS. - Remove --mandir and --infodir in ports' Makefile where applicable   Few ports use REINPLACE_CMD to achieve the same effect, remove them too. - 

PR:		ports/111470
Approved by:	portmgr
Discussed with:	stas (Mk/*), gerald (info related stuffs)
Tested by:	pointyhat exp run

Update to 2.3.5.

- Update libprelude to 0.9.14. - Update dependent ports accordingly. - Bump PORTVERSION to force rebuild.

PR:		ports/112703
Submitted by:	Marcelo Araujo <araujo@FreeBSD.org>
Approved by:	stas (mentor)

Update to 2.3.4. This fixes a reliablility problem in the process check module. If you are a user of this module, upgrading is recommended.

Approved by:	edwin (mentor)

Updating to 2.3.3.

Approved by:	edwin (mentor)

Update to 2.3.2, which fixes a regression in "stealth mode".

Approved by:	edwin (mentor)

Updating to 2.3.1.

Approved by:	edwin (mentor)

- update Prelude version - bump PORTREVISION

PR:		ports/107985
Submitted by:	Robin Gruyters <r.gruyters at yirdis.nl>
Approved by:	edwin (mentor)

- Update to 0.9.11 - library version update of related ports

Changelog libprelude:
- Hook class comparison function. Accept NULL, equal, not equal operator.
- Introduce better error checking in the idmef-class API, which is now
  considered public and might be used by external application. Rename
  error code to reflect the API.
- Change to the way IDMEF listed element are handled. Specifying negative
  number as the position of the element from the low level API now allow
  to position the element at the specified (reversed) index. Using the
  high level API a negative index permit to address a list of element
  backward (replace an element).
- Build fixes for SWIG > 1.3.27.
- Modify idmef_value_match() so that it always unroll listed value
  (do it for both val1 and val2. Remove assertion, and let
  idmef_value_type_compare() return an error code in case there is an issue.
- Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as
  path using an undefined list index on idmef_path_get() call.
- Make criteria parser accept (*) list index.
- Implement comparison function for all IDMEF object.

PR:		ports/104328
Submitted by:	maintainer (Robin Gruyters)
Approved by:	portmgr (pav)

- Update to 2.3.0

PR:		ports/105159
Submitted by:	David Thiel (maintainer)

- Update to 2.2.4

PR:		ports/102915
Submitted by:	David Thiel <lx at redundancy.redundancy.org> (maintainer)

Updating the Samhain HIDS to 2.2.1. This is a minor release which fixes some issues with the Prelude IDS system and compilation on x86_64.

PR:		ports/99114
Submitted by:	maintainer