[NEW] samhain

[jul_bsd@…]

another host-based intrusion detection system

• work in progress
• 3.1.0
• build/run
• some options failing to compile or deprecated
• no '--enable-login-watch' as wtmp/utmp is deprecated on macosx. right?
• no --enable-process-check:

  Undefined symbols for architecture x86_64: "_sched_getparam", referenced from:
  

• variants need to be reviewed and tested

[jul_bsd@…]

• reviewed Portfile, replace startupitem w cron-like plist at regular interval
• respect existing config

[jul_bsd@…]

• destroot variants tested: some post-destroot error w server, can't test prelude as libprelude fails to build, not all database/too heavy
• plist launchd
• mac config file
• mores notes to finish install
• change tabs to 4 spaces
• add description to most variants
• check dependencies of binaries w otool

[jul_bsd@…]

• port lint --nitpick
• livecheck
• /tab/spacex4/

[jul_bsd@…]

• could update to 3.1.1 but seems there is packaging update (latest containt something named 3.1.0 ...)
• try to use compiler.blacklist but still doing llvm-gcc4.2 ???
• use LaunchDaemons