[Bug 244648] security/samhain: update to 4.4.1

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Tue Jul 21 14:14:36 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=244648

--- Comment #3 from Greg Veldman <freebsd at gregv.net> ---
This appears to be an upstream bug.  Between 4.3 and 4.4, Samhain added support
for OpenBSD signify to sign the database.  Because of that, the samhainadmin.pl
script was split out into two variants, one for GnuPG and one for signify.  The
configure script contains logic to figure out which one is actually in use and
copy it to the actual samhainadmin.pl script, which the build process expects
to be present with the network server option:

+if test "x${mysignify}" != x
+then
+       cp -a scripts/samhainadmin-sig.pl scripts/samhainadmin.pl
+fi
+if test "x${mygpg}" != x
+then
+       cp -a scripts/samhainadmin-gpg.pl scripts/samhainadmin.pl
+fi
+
+

The problem is the default port build options don't use GnuPG.  Based on that
configure logic, in this case neither variant gets copied to samhainadmin.pl,
which breaks the install-program make target.

I've created an updated patch which adds a fix to the configure script to deal
with this case.  I'm not sure if using server mode without either GnuPG or
signify is an unsupported configuration, but I'll also submit this upstream to
see if this can be fixed there.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list