diff options
Diffstat (limited to 'external/meta-security/recipes-scanners/arpwatch/files')
5 files changed, 265 insertions, 0 deletions
diff --git a/external/meta-security/recipes-scanners/arpwatch/files/arpwatch.conf b/external/meta-security/recipes-scanners/arpwatch/files/arpwatch.conf new file mode 100644 index 00000000..67213c97 --- /dev/null +++ b/external/meta-security/recipes-scanners/arpwatch/files/arpwatch.conf @@ -0,0 +1,23 @@ +# /etc/arpwatch.conf: Debian-specific way to watch multiple interfaces. +# Format of this configuration file is: +# +#<dev1> <arpwatch options for dev1> +#<dev2> <arpwatch options for dev2> +#... +#<devN> <arpwatch options for devN> +# +# You can set global options for all interfaces by editing +# /etc/default/arpwatch + +# For example: + +eth0 +#eth0 -m root +#eth1 -m root +#eth2 -m root + +# or, if you have an MTA configured for plussed addressing: +# +#eth0 -m root+eth0 +#eth1 -m root+eth1 +#eth2 -m root+eth2 diff --git a/external/meta-security/recipes-scanners/arpwatch/files/arpwatch.default b/external/meta-security/recipes-scanners/arpwatch/files/arpwatch.default new file mode 100644 index 00000000..b0a7d8f9 --- /dev/null +++ b/external/meta-security/recipes-scanners/arpwatch/files/arpwatch.default @@ -0,0 +1,7 @@ +# Global options for arpwatch(8). + +# Debian: don't report bogons, don't use PROMISC. +ARGS="-N -p" + +# Debian: run as `arpwatch' user. Empty this to run as root. +RUNAS="arpwatch" diff --git a/external/meta-security/recipes-scanners/arpwatch/files/arpwatch_init b/external/meta-security/recipes-scanners/arpwatch/files/arpwatch_init new file mode 100644 index 00000000..9860c65a --- /dev/null +++ b/external/meta-security/recipes-scanners/arpwatch/files/arpwatch_init @@ -0,0 +1,123 @@ +#!/bin/sh + +PATH=/sbin:/bin:/usr/sbin:/usr/bin +NAME=arpwatch +DAEMON=/usr/sbin/$NAME +DESC="Ethernet/FDDI station monitor daemon" +DATADIR=/var/lib/$NAME +RETVAL=0 + +. /etc/init.d/functions + +### You shouldn't touch anything below unless you know what you are doing. + +[ -f /etc/default/arpwatch ] && . /etc/default/arpwatch + +# Decide whether we have to deal with multiple interfaces. +CONF=/etc/arpwatch.conf +MULTIPLE=0 +if [ -r $CONF ]; then + grep -c '^[a-z]' $CONF 2>&1 >/dev/null && MULTIPLE=1 +fi + +# Check whether we have to drop privileges. +if [ -n "$RUNAS" ]; then + if getent passwd "$RUNAS" >/dev/null; then + ARGS="-u ${RUNAS} $ARGS" + else + RUNAS="" + fi +fi + +start_instance () { + IFACE=$1 + INSTANCE=${NAME}-${IFACE} + DATAFILE=$DATADIR/${IFACE}.dat + IFACE_OPTS="-P /var/run/${INSTANCE}.pid -i ${IFACE} -f ${DATAFILE} $2" + + echo -n "Starting $DESC: " + if [ ! -f $DATAFILE ]; then + echo -n "(creating $DATAFILE) " :> $DATAFILE + fi + if [ -n "$RUNAS" ]; then + echo -n "(chown $RUNAS $DATAFILE) " + chown $RUNAS $DATAFILE + fi + start-stop-daemon --start --quiet \ + --pidfile /var/run/${INSTANCE}.pid \ + --exec $DAEMON -- $IFACE_OPTS $ARGS + echo "${INSTANCE}." + ps h -C $NAME -o pid,args | \ + awk "/$IFACE/ { print \$1 }" > /var/run/${INSTANCE}.pid +} + +stop_instance () { + IFACE=$1 + INSTANCE=${NAME}-${IFACE} + [ -f /var/run/${INSTANCE}.pid ] || return 0 + echo -n "Stopping $DESC: " + start-stop-daemon --stop --quiet --oknodo \ + --pidfile /var/run/${INSTANCE}.pid + echo "${INSTANCE}." + rm -f /var/run/${INSTANCE}.pid +} + +process_loop_break_line () { + __IFACE=$1 + shift + __IOPTS="$@" +} + +process_loop () { + OPERATION=$1 + grep '^[a-z]' $CONF 2>/dev/null | \ + while read LINE + do + process_loop_break_line $LINE + I=$__IFACE + I_OPTS="$__IOPTS" + $OPERATION $I "$I_OPTS" + done +} + +startup () { + process_loop start_instance +} + +shutdown () { + process_loop stop_instance +} + +case "$1" in + start) + startup + ;; + stop) + shutdown + ;; + reload) + echo "Reload operation not supported -- use restart." + RETVAL=2 + ;; + restart|force-reload) + # + # If the "reload" option is implemented, move the "force-reload" + # option to the "reload" entry above. If not, "force-reload" is + # just the same as "restart". + # + shutdown + sleep 1 + startup + ;; + status) + status_of_proc $DAEMON $NAME + ;; + *) + N=/etc/init.d/$NAME + # echo "Usage: $N {start|stop|restart|reload|force-reload}" >&2 + echo "Usage: $N {start|stop|restart|force-reload}" >&2 + RETVAL=2 + ;; +esac + +exit $RETVAL diff --git a/external/meta-security/recipes-scanners/arpwatch/files/host_contam_fix.patch b/external/meta-security/recipes-scanners/arpwatch/files/host_contam_fix.patch new file mode 100644 index 00000000..7d7ffacf --- /dev/null +++ b/external/meta-security/recipes-scanners/arpwatch/files/host_contam_fix.patch @@ -0,0 +1,21 @@ +This removes the host contamination + +Upstream-Status: Inappropriate [embedded specific] + +Signed-off-by: Armin Kuster <akuster808@gmail.com> + +Index: arpwatch-3.0/configure +=================================================================== +--- arpwatch-3.0.orig/configure ++++ arpwatch-3.0/configure +@@ -4349,8 +4349,8 @@ fi + CC=cc + export CC + fi +- V_INCLS="$V_INCLS -I/usr/local/include" +- LDFLAGS="$LDFLAGS -L/usr/local/lib" ++ V_INCLS="$V_INCLS " ++ LDFLAGS="$LDFLAGS " + if test "$GCC" != yes ; then + { $as_echo "$as_me:${as_lineno-$LINENO}: checking that $CC handles ansi prototypes" >&5 + $as_echo_n "checking that $CC handles ansi prototypes... " >&6; } diff --git a/external/meta-security/recipes-scanners/arpwatch/files/postfix_workaround.patch b/external/meta-security/recipes-scanners/arpwatch/files/postfix_workaround.patch new file mode 100644 index 00000000..95213f2b --- /dev/null +++ b/external/meta-security/recipes-scanners/arpwatch/files/postfix_workaround.patch @@ -0,0 +1,91 @@ +Sendmail exists after the system boots. We are using postfix +so no need to check if it exists. + +Upstream-Status: Inappropriate [embedded specific] + +Signed-off-by: Armin Kuster <akuster808@gmail.com> + +Index: arpwatch-3.0/configure +=================================================================== +--- arpwatch-3.0.orig/configure ++++ arpwatch-3.0/configure +@@ -636,7 +636,6 @@ LBL_LIBS + HAVE_FREEBSD_TRUE + HAVE_FREEBSD_FALSE + PYTHON +-V_SENDMAIL + LIBOBJS + INSTALL_DATA + INSTALL_SCRIPT +@@ -5573,53 +5572,6 @@ fi + done + + +-# Extract the first word of "sendmail", so it can be a program name with args. +-set dummy sendmail; ac_word=$2 +-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5 +-$as_echo_n "checking for $ac_word... " >&6; } +-if ${ac_cv_path_V_SENDMAIL+:} false; then : +- $as_echo_n "(cached) " >&6 +-else +- case $V_SENDMAIL in +- [\\/]* | ?:[\\/]*) +- ac_cv_path_V_SENDMAIL="$V_SENDMAIL" # Let the user override the test with a path. +- ;; +- *) +- as_save_IFS=$IFS; IFS=$PATH_SEPARATOR +-as_dummy="$PATH:/usr/sbin:/usr/lib:/usr/bin:/usr/ucblib:/usr/local/etc" +-for as_dir in $as_dummy +-do +- IFS=$as_save_IFS +- test -z "$as_dir" && as_dir=. +- for ac_exec_ext in '' $ac_executable_extensions; do +- if as_fn_executable_p "$as_dir/$ac_word$ac_exec_ext"; then +- ac_cv_path_V_SENDMAIL="$as_dir/$ac_word$ac_exec_ext" +- $as_echo "$as_me:${as_lineno-$LINENO}: found $as_dir/$ac_word$ac_exec_ext" >&5 +- break 2 +- fi +-done +- done +-IFS=$as_save_IFS +- +- ;; +-esac +-fi +-V_SENDMAIL=$ac_cv_path_V_SENDMAIL +-if test -n "$V_SENDMAIL"; then +- { $as_echo "$as_me:${as_lineno-$LINENO}: result: $V_SENDMAIL" >&5 +-$as_echo "$V_SENDMAIL" >&6; } +-else +- { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5 +-$as_echo "no" >&6; } +-fi +- +- +- +-if test -z "${V_SENDMAIL}" ; then +- as_fn_error $? "Can't find sendmail" "$LINENO" 5 +-fi +- +- + python=${PYTHON:-python} + # Extract the first word of "${python}", so it can be a program name with args. + set dummy ${python}; ac_word=$2 +Index: arpwatch-3.0/configure.in +=================================================================== +--- arpwatch-3.0.orig/configure.in ++++ arpwatch-3.0/configure.in +@@ -76,13 +76,6 @@ AC_LBL_UNION_WAIT + AC_CHECK_LIB(resolv, res_query) + AC_LBL_LIBPCAP(V_PCAPDEP, V_INCLS) + +-AC_PATH_PROG(V_SENDMAIL, sendmail,, +- $PATH:/usr/sbin:/usr/lib:/usr/bin:/usr/ucblib:/usr/local/etc) +- +-if test -z "${V_SENDMAIL}" ; then +- AC_MSG_ERROR([Can't find sendmail]) +-fi +- + dnl AC_LBL_CHECK_TYPE(int32_t, int) + dnl AC_LBL_CHECK_TYPE(u_int32_t, u_int) + |