zorp-3.3.6-r2.ebuild

zorp-3.3.6-r2.ebuild (text/plain), 3.26 KB, created by Balazs Nemeth on 2011-03-22 12:58:40 UTC

# Copyright 1999-2010 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: $

EAPI="2"

inherit eutils toolchain-funcs linux-mod

DESCRIPTION="An advanced protocol analyzing firewall"
HOMEPAGE="http://www.balabit.com/network-security/zorp-gpl/overview"
SRC_URI="http://www.balabit.com/downloads/files?path=/zorp/3.3R6/source/zorp_${PV}.tar.gz"

LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~amd64 ~x86"
IUSE="+caps elibc_uclibc kernel_linux ipv6 debug prefork ssl"

DEPEND="caps? ( >=sys-libs/libcap-2.16 )
	ssl? ( dev-libs/openssl )
	>dev-libs/glib-2.20.0
	dev-util/gperf"

RDEPEND="${DEPEND}
	>=net-proxy/libzorpll-3.3.0.12
	dev-lang/python"

WORKDIR="${PORTAGE_BUILDDIR}/work/zorp-${PV}"

tproxy_check() {
    local failed=0
    local error=""

    einfo "Start checking your kernel configuraiton"

    if ! kernel_is 2 6; then
        eerror "You need a 2.6 linux kernel to compile against!"
        die "No 2.6 Kernel found"
    fi

    if ! linux_chkconfig_present NETFILTER_TPROXY; then
	eerror "Please enable TPROXY support in your kernel config, found at:"
	eerror
	eerror "  Core Netfilter Configuration"
	eerror "    <M> Transparent proxying support (EXPERIMENTAL)"
	eerror "    <M>   \"TPROXY\" target support (EXPERIMENTAL)"
	eerror "    <M>   \"socket\" match support (EXPERIMENTAL)"
	eerror
	eerror "and recompile your kernel ..."
	error="${error} CONFIG_NETFILTER_TPROXY is not set"
        failed=1
    fi

    if ! linux_chkconfig_present NETFILTER_XT_TARGET_TPROXY; then
	eerror "Please enable TPROXY TARGET support in your kernel config"
	error="${error} CONFIG_NETFILTER_XT_TARGET_TPROXY is not set"
        failed=1
    fi

    if ! linux_chkconfig_present NETFILTER_XT_MATCH_SOCKET; then
	eerror "Please enable NETFILTER SOCKET MATCH support in your kernel config"
	error="${error} CONFIG_NETFILTER_XT_MATCH_SOCKET is not set"
        failed=1
    fi

    [ "x${failed}" != "x0" ] && die "${error}"
} 

pkg_setup() {
	if ! use caps; then
		eerror "libcap is required by Transparent Proxy support for Netfilter TPROXY!"
		die "Please enable caps USE flag and try again."
	fi
        linux-mod_pkg_setup
        tproxy_check
}

src_configure() {
	econf \
	    $(use_enable ipv6) \
	    $(use_enable debug) \
	    $(use_enable prefork)
}

src_install() {
    emake DESTDIR="${D}" install || die "emake install failed"
    dodoc README ChangeLog doc/zorp-tutorial.html doc/examples/*.py || die "dodoc failed"
    newinitd "${FILESDIR}"/zorp-${PV}.init zorp || die "newinitd failed"

    insinto /etc/zorp
    doins "${S}"/zorpaddr/zorpaddr.cfg.sample
}

pkg_preinst() {
    enewgroup zorp
    enewuser zorp -1 -1 /var/lib/zorp zorp

    fperms 0750 /etc/zorp
    fowners root:zorp /etc/zorp

    dodir /var/run/zorp
    fperms 0770 /var/run/zorp
    fowners root:zorp /var/run/zorp
}

pkg_postinst() {
	elog "Now you can start to create your own policies."
	elog "Create your policy file in ${prefix}/etc/zorp/policy.py and ${prefix}/etc/zorp/instances.conf according to the available documentation."
	elog 
	elog "As a beginner reading Zorp Getting Started Guide might be a good starting point."
	elog "Reference like information is available in python docstrings under /usr/share/zorp/pylib/Zorp/*.py"
	elog "Further information and examples can be found under /usr/share/doc/${P}"
}