From 88c16f4d19b32f12e1086063f94ef6814cef0568 Mon Sep 17 00:00:00 2001 From: "Andrew J. Hesford" Date: Wed, 22 Jan 2020 16:35:49 -0500 Subject: [PATCH] sshguard: support dynamic firewall config and remove iptables dependency --- srcpkgs/sshguard/files/sshguard-socklog/run | 5 ----- srcpkgs/sshguard/files/sshguard/run | 11 +++++++++++ srcpkgs/sshguard/template | 5 ++--- 3 files changed, 13 insertions(+), 8 deletions(-) delete mode 100755 srcpkgs/sshguard/files/sshguard-socklog/run create mode 100755 srcpkgs/sshguard/files/sshguard/run diff --git a/srcpkgs/sshguard/files/sshguard-socklog/run b/srcpkgs/sshguard/files/sshguard-socklog/run deleted file mode 100755 index 720e4676785..00000000000 --- a/srcpkgs/sshguard/files/sshguard-socklog/run +++ /dev/null @@ -1,5 +0,0 @@ -#!/bin/sh -sv check iptables >/dev/null || exit 1 -sv check socklog-unix >/dev/null || exit 1 - -exec sshguard -l /var/log/socklog/secure/current -b 200:/var/db/sshguard/blacklist.db 2>&1 diff --git a/srcpkgs/sshguard/files/sshguard/run b/srcpkgs/sshguard/files/sshguard/run new file mode 100755 index 00000000000..a63f90834fb --- /dev/null +++ b/srcpkgs/sshguard/files/sshguard/run @@ -0,0 +1,11 @@ +#!/bin/sh + +# Allow the firewall and logger backends to be specified +[ -f ./conf ] && . ./conf + +sv check "${FIREWALL:-iptables}" >/dev/null || exit 1 + +sv check "${LOGGER:-socklog-unix}" >/dev/null || exit 1 +LOGFILE="${LOGFILE:-/var/log/socklog/secure/current}" + +exec sshguard -l "$LOGFILE" -b 200:/var/db/sshguard/blacklist.db $OPTS 2>&1 diff --git a/srcpkgs/sshguard/template b/srcpkgs/sshguard/template index 8c08d1f1120..0d3a5506373 100644 --- a/srcpkgs/sshguard/template +++ b/srcpkgs/sshguard/template @@ -1,10 +1,9 @@ # Template file for 'sshguard' pkgname=sshguard version=2.4.0 -revision=1 +revision=2 build_style=gnu-configure hostmakedepends="flex" -depends="iptables" short_desc="Protects networked hosts from brute force attacks" maintainer="Lodvær " license="BSD-3-Clause" @@ -16,7 +15,7 @@ make_dirs="/var/db/sshguard 0755 root root" conf_files="/etc/sshguard.conf" post_install() { - vsv sshguard-socklog + vsv sshguard vconf examples/sshguard.conf.sample sshguard.conf vsed -i 's@/usr/local/@/usr/@g' ${DESTDIR}/etc/sshguard.conf vlicense COPYING