AFFLib is an open and extensible file format designed to store disk images and associated metadata for forensics purposes. Comprises both libraries and supporting tools. Homepage: http://www.afflib.org/ Reproducible: Always Steps to Reproduce:
Created attachment 139622 [details] Proposed ebuild
Created attachment 154743 [details] 3.2.0 ebuild 3.2.0 is available, this is an extended ebuild to more accurately reflect dependencies (http://www.afflib.org/requirements.php) and take advantage of the libewf ebuild (bug 224121) I just submitted. The HAVE_WIDE_CHARACTER_TYPE bit is a touch hackish, but I've submitted an upstream query to make it work better - positive response, so I expect not to have to do this in the next revision.
Created attachment 154773 [details] updated ebuild Updated to reflect some ebuild quoting feedback I got as well as use the upcoming 3.2.1 release that fixes the -DHAVE_WIDE_CHARACTER_TYPE hack.
There's a new version (3.3.1) available and I've modified the ebuild for it, but am holding off on publishing it - currently had to do some dirty hacks to get it to compile properly in Gentoo-land, upstream is working out the fix. Version 3.3.x introduces the ability to read/handle just about any image qemu can - parallels images, VMWare VMDK, DMG, etc.
Created attachment 167021 [details] afflib-3.3.4 ebuild Ebuild for afflib-3.3.4; this version addresses all the concerns I had with previos 3.3.x iterations - no patching required, at least on my systems.
(In reply to comment #5) > Created an attachment (id=167021) [edit] > afflib-3.3.4 ebuild > > Ebuild for afflib-3.3.4; this version addresses all the concerns I had with > previos 3.3.x iterations - no patching required, at least on my systems. Any news on getting this into portage ?
Same story as sleuthkit.
+ 01 Mar 2009; Patrick Lauer <patrick@gentoo.org> +metadata.xml, + +afflib-3.3.4.ebuild: + Initial import. Fixes #203758. Ebuild by raistlin@s0ftpj.org and + aoz.syn@gmail.com. +
Arches: sleuthkit needs this as a dependency, please try to keyword it.
Add ~sparc for testing (All tests pass).
Marked ~hppa.
Tests pass on ppc, marked ~ppc.
sparc has the keyword already
~arm/~s390 done, closing