Subject: [alpine-aports] [PATCH] testing/psad: temporarily disable whois lookups

From: Stuart Cardall <[email-masked]>
Date: Tue, 30 Jun 2015 13:51:58 +0000

At the moment whois lookups trigger reboots on Alpine 3.1 & 3.2 so
I don't think it's related to the new OpenRC version. Have raised an
issue on github.
---
 testing/psad/APKBUILD | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/testing/psad/APKBUILD b/testing/psad/APKBUILD
index 0815c56..e1cf8de 100644
--- a/testing/psad/APKBUILD
+++ b/testing/psad/APKBUILD
@@ -2,12 +2,13 @@
 # Maintainer: Stuart Cardall <[email-masked]>
 pkgname=psad
 pkgver=2.4.1
-pkgrel=0
+pkgrel=1
 pkgdesc="3 lightweight system daemons that analyze iptables log messages to detect port scans and other suspicious traffic"
 url="http://cipherdyne.org/psad/"
 arch="all"
 license="GPL"
-depends="perl iptables ip6tables ssmtp mailx psmisc perl-bit-vector perl-date-calc perl-iptables-chainmgr perl-iptables-parse perl-net-ipv4addr perl-unix-syslog net-tools"
+depends="perl iptables ip6tables ssmtp mailx psmisc perl-bit-vector perl-date-calc perl-iptables-chainmgr \
+		perl-iptables-parse perl-net-ipv4addr perl-unix-syslog net-tools"
 subpackages="$pkgname-doc"
 source="http://cipherdyne.org/psad/download/$pkgname-nodeps-$pkgver.tar.gz
 	psad.initd
@@ -84,7 +85,7 @@ package() {
 	chmod -R o+r $pkgdir/usr/sbin/*
 	chmod 0700 $pkgdir/var/lib/psad
 	#remove whois symbolic link
-	rm -rf $pkgdir/usr/bin/whois
+	rm f $pkgdir/usr/bin/whois
 
 	# Fix the config
 	sed -e "s|$pkgdir||" $pkgdir/etc/psad/psad.conf -i
@@ -95,6 +96,9 @@ package() {
 		"$pkgdir"/etc/init.d/$pkgname || return 1
 	install -m644 -D "$srcdir"/$pkgname.confd \
 		"$pkgdir"/etc/conf.d/$pkgname || return 1
+
+	# temporarily disable whois lookups https://github.com/mrash/psad/issues/22
+	sed -i 's|ENABLE_WHOIS_LOOKUPS        Y;|ENABLE_WHOIS_LOOKUPS        N;|' "$pkgdir"/etc/psad/psad.conf
 }
 
 md5sums="acbb0ab7ae9a983386b8baee2a51b929  psad-nodeps-2.4.1.tar.gz
-- 
2.4.4

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---