##
##  portsentry.spec -- OpenPKG RPM Package Specification
##  Copyright (c) 2000-2025 OpenPKG Project <http://openpkg.org/>
##
##  Permission to use, copy, modify, and distribute this software for
##  any purpose with or without fee is hereby granted, provided that
##  the above copyright notice and this permission notice appear in all
##  copies.
##
##  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
##  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
##  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
##  IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR
##  CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
##  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
##  LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
##  USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
##  ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
##  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
##  OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
##  SUCH DAMAGE.
##

#   package information
Name:         portsentry
Summary:      Port Scanning Detection Daemon
URL:          http://sourceforge.net/projects/sentrytools/
Vendor:       Psionic Software, Inc
Packager:     OpenPKG Project
Distribution: OpenPKG Community
Class:        BASE
Group:        Security
License:      Open Source
Version:      1.2
Release:      20080101

#   package options
%option       with_fsl  yes

#   list of sources
Source0:      http://download.sourceforge.net/sentrytools/portsentry-%{version}.tar.gz
Source1:      rc.portsentry
Source2:      fsl.portsentry
Patch0:       portsentry.patch

#   build information
BuildPreReq:  OpenPKG, openpkg >= 20160101
PreReq:       OpenPKG, openpkg >= 20160101
%if "%{with_fsl}" == "yes"
BuildPreReq:  fsl
PreReq:       fsl
%endif

%description
    Portsentry is a program designed to detect and respond to port scans
    against a target host in real-time. It runs as a daemon and listens
    to a wide range of spare sockets in order to detect port scans.

%track
    prog portsentry = {
        version   = %{version}
        url       = http://sourceforge.net/projects/sentrytools/files/
        regex     = portsentry-(__VER__)\.tar\.gz
    }

%prep
    %setup -q -n portsentry_beta
    %patch -p0

%build
    %{l_shtool} subst \
        -e 's;^\(.*CONFIG_FILE.*"\)[^"]*\("\);\1%{l_prefix}/etc/portsentry/portsentry.conf\2;' \
        -e 's;^\(.*WRAPPER_HOSTS_DENY.*"\)[^"]*\("\);\1%{l_prefix}/etc/portsentry/portsentry.deny\2;' \
        portsentry_config.h
    %{l_shtool} subst \
        -e 's;/usr/local/psionic/portsentry/;%{l_prefix}/etc/portsentry/;g' \
        portsentry.conf
    case "%{l_platform -t}" in
        *-freebsd* ) os="freebsd" ;;
        *-sunos*   ) os="solaris" ;;
        *-linux*   ) os="linux"   ;;
        *-netbsd*  ) os="netbsd"  ;;
    esac
    %{l_make} %{l_mflags -O} \
        CC="%{l_cc}" \
        CFLAGS="%{l_cflags -O}" \
        LIBS="%{l_fsl_ldflags} %{l_fsl_libs}" \
        $os

%install
    %{l_shtool} mkdir -f -p -m 755 \
        $RPM_BUILD_ROOT%{l_prefix}/var/portsentry \
        $RPM_BUILD_ROOT%{l_prefix}/sbin \
        $RPM_BUILD_ROOT%{l_prefix}/etc/portsentry \
        $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d
    %{l_shtool} install -c -s -m 755 \
        portsentry $RPM_BUILD_ROOT%{l_prefix}/sbin/
    %{l_shtool} install -c -m 644 \
        portsentry.conf $RPM_BUILD_ROOT%{l_prefix}/etc/portsentry/
    %{l_shtool} install -c -m 644 \
        portsentry.ignore $RPM_BUILD_ROOT%{l_prefix}/etc/portsentry/
    %{l_shtool} install -c -m 644 \
        /dev/null $RPM_BUILD_ROOT%{l_prefix}/etc/portsentry/portsentry.history
    %{l_shtool} install -c -m 644 \
        /dev/null $RPM_BUILD_ROOT%{l_prefix}/etc/portsentry/portsentry.blocked

    #   install run-command script
    %{l_shtool} mkdir -f -p -m 755 \
        $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d
    %{l_shtool} install -c -m 755 %{l_value -s -a} \
        %{SOURCE rc.portsentry} $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d/

    #   install OSSP fsl configuration
    %{l_shtool} mkdir -f -p -m 755 $RPM_BUILD_ROOT%{l_prefix}/etc/fsl
    %{l_shtool} install -c -m 644 %{l_value -s -a} \
        %{SOURCE fsl.portsentry} \
        $RPM_BUILD_ROOT%{l_prefix}/etc/fsl/

    #   determine installation files
    %{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \
        %{l_files_std} \
        '%config %{l_prefix}/etc/fsl/fsl.portsentry' \
        '%config %{l_prefix}/etc/portsentry/portsentry.conf' \
        '%config %{l_prefix}/etc/portsentry/portsentry.ignore'

%files -f files

%clean

%post
    #   after upgrade, restart service
    [ $1 -eq 2 ] || exit 0
    eval `%{l_rc} portsentry status 2>/dev/null`
    [ ".$portsentry_active" = .yes ] && %{l_rc} portsentry restart
    exit 0

%preun
    #   before erase, stop service and remove log files
    [ $1 -eq 0 ] || exit 0
    %{l_rc} portsentry stop 2>/dev/null
    rm -f $RPM_INSTALL_PREFIX/var/portsentry/portsentry.log* >/dev/null 2>&1 || true
    exit 0

