forked from gentoo/gentoo
-
Notifications
You must be signed in to change notification settings - Fork 0
/
qmail-scanner-2.08.ebuild
194 lines (165 loc) · 5.45 KB
/
qmail-scanner-2.08.ebuild
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
# Copyright 1999-2017 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
EAPI=2
inherit fixheadtails toolchain-funcs eutils user
Q_S_DATE=20091012
DESCRIPTION="E-Mail virus scanner for qmail"
HOMEPAGE="http://qmail-scanner.sourceforge.net/
http://toribio.apollinare.org/qmail-scanner/"
SRC_URI="mirror://sourceforge/${PN}/${PV}/${P}.tgz
http://toribio.apollinare.org/qmail-scanner/download/q-s-${PV}st-${Q_S_DATE}.patch.gz"
IUSE="clamav spamassassin"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 ppc x86"
RESTRICT="userpriv"
RDEPEND="dev-lang/perl
virtual/perl-Time-HiRes
net-mail/tnef
virtual/perl-DB_File
mail-filter/maildrop
virtual/qmail
app-arch/unzip
virtual/daemontools
clamav? ( app-antivirus/clamav )
spamassassin? ( mail-filter/spamassassin )"
DEPEND="${RDEPEND}"
pkg_setup() {
enewgroup qscand 210
enewuser qscand 210 -1 /var/spool/qscan qscand
use clamav && usermod -a -G qscand,nofiles clamav
}
pkg_preinst() {
local oldname="/var/qmail/bin/qmail-scanner-queue.pl"
if [ -f ${oldname} ]; then
newname=${oldname}.`date +%Y%m%d%H%M%S`
elog "Backing up old qmail-scanner as $newname in case of modifications."
cp ${oldname} ${newname}
chmod 600 ${newname}
fi
}
src_prepare() {
epatch "${DISTDIR}"/q-s-${PV}st-${Q_S_DATE}.patch.gz
epatch "${FILESDIR}"/${PN}-2.08-disable-suid-check.patch #364123
ht_fix_file autoupdaters/* configure
sed -i \
-e "s:/var/spool/qscand:/var/spool/qscan:g" \
README-st-patch.html \
README-st-patch.txt || die "Fixing doc with sed failed"
EXTRA_VIRII="bagle,beagle,mydoom,sco,maldal,mimail,novarg,shimg,bugler,cissi,cissy,dloade,netsky,qizy"
elog "Adding items to the SILENT_VIRUSES list (${EXTRA_VIRII})"
sed -i \
-e "/^SILENT_VIRUSES/s/\"$/,${EXTRA_VIRII}\"/g" \
-e '/DD/s/1\\.0/ 1\\.0/' \
configure
}
src_configure() {
local myconf
addpredict /var/log/kav/kavscan.log
addpredict /opt/bdc/plugins.htm
use spamassassin && myconf="--virus-to-delete yes --sa-quarantine 2.1 --sa-delete 4.2 --sa-reject no --sa-subject SPAM: --sa-delta 0.5 --sa-alt yes"
PATH=${PATH}:/opt/f-prot:/opt/vlnx ./configure \
--domain localhost \
--batch \
--log-details yes \
--skip-setuid-test \
${myconf} \
|| die "./configure failed!"
# build for qmail-scanner-queue wrapper, so we don't need suidperl
cd contrib
$(tc-getCC) ${CFLAGS} -o qmail-scanner-queue qmail-scanner-queue.c || die
}
src_install () {
# Create Directory Structure
diropts -m 755 -o qscand -g qscand
dodir /var/spool/qscan
keepdir /var/spool/qscan
diropts -m 750 -o qscand -g qscand
dodir /var/spool/qscan/quarantine
for i in quarantine/{viruses,policy,spam} working archives; do
for j in tmp new cur; do
dodir /var/spool/qscan/${i}/${j}
keepdir /var/spool/qscan/${i}/${j}
done
done
dodir /var/spool/qscan/tmp
keepdir /var/spool/qscan/tmp
# Install standard quarantine events file
insinto /var/spool/qscan
insopts -m 644 -o qscand -g qscand
doins quarantine-events.txt
# create quarantine.log and viruses.log
touch quarantine.log
insinto /var/spool/qscan
insopts -m 644 -o qscand -g qscand
doins quarantine.log
dosym quarantine.log ${DESTDIR}/var/spool/qscan/viruses.log
# Install qmail-scanner wrapper
insinto /var/qmail/bin
insopts -m 4755 -o qscand -g qscand
doins contrib/qmail-scanner-queue
# Install qmail-scanner script
insinto /var/qmail/bin
insopts -m 0755 -o qscand -g qscand
doins qmail-scanner-queue.pl
insinto /etc/logrotate.d/
insopts -m 644 -o root -g root
newins "${FILESDIR}"/${P}.logrotate qmail-scanner
exeinto /etc/cron.daily/
newexe "${FILESDIR}"/qmailscanner.cronjob qmail-scanner
# Install documentation
dodoc README CHANGES
dohtml README.html FAQ.php TODO.php configure-options.php manual-install.php perlscanner.php
docinto contrib
cd "${S}"/contrib
dodoc spamc-nice.eml \
test-trophie.pl \
logrotate.qmail-scanner \
sub-avpdaemon.pl \
logging_first_80_chars.eml \
spamc-nasty.eml \
avpdeamon.init \
test_installation.sh \
test-sophie.pl \
reformime-test.eml \
sub-sender-cache.pl \
rbl_scanner.txt \
test-clamd.pl \
qs2mrtg.pl \
mrtg-qmail-scanner.cfg \
check_AV_daemons \
patch_for_nod32_single_user.eml \
qmail-delay \
qs-scanner-report.sh \
qs_config.sh \
qscan-spam-to-users.pl \
test-avgd.pl \
test_password.zip \
vpopmail-issues.eml
}
pkg_postinst () {
einfo "Fixing ownerships"
chown -R qscand:qscand /var/spool/qscan
touch /var/qmail/bin/qmail-scanner-queue.pl
# Setup perlscanner + Version Info
chmod -s "${ROOT}"/var/qmail/bin/qmail-scanner-queue.pl
"${ROOT}"/var/qmail/bin/qmail-scanner-queue -z
"${ROOT}"/var/qmail/bin/qmail-scanner-queue -g
elog "To activate qmail-scanner, please edit your"
elog "/var/qmail/control/conf-common file and set:"
elog "export QMAILQUEUE=/var/qmail/bin/qmail-scanner-queue"
elog "Or place it in your tcprules file."
ewarn "Please note that it was a call to qmail-scanner-queue.pl before,"
ewarn "but this is now changed to use a wrapper to improve security!"
ewarn "Once you have changed to the wrapper, you can remove the setuid "
ewarn "bit on qmail-scanner-queue.pl"
ewarn "If this is an upgrade from <=2.0.1 the home directory of the qscand"
ewarn "user is changed. Please update it manually to /var/spool/qscan"
ewarn "or remove the user and emerge again this package"
if use clamav; then
ewarn "To allow clamav integration comment-out in /etc/clamd.conf:"
ewarn "AllowSupplementaryGroups putting yes."
ewarn "After that, restart clamd with"
ewarn "/etc/init.d/clamd restart"
fi
}