| 1 |
|
|---|
| 2 | #ifndef CONFIG_H
|
|---|
| 3 | #define CONFIG_H
|
|---|
| 4 |
|
|---|
| 5 |
|
|---|
| 6 | @TOP@
|
|---|
| 7 |
|
|---|
| 8 | /* ---- compile options ------------ */
|
|---|
| 9 |
|
|---|
| 10 | /* Define if you want database support */
|
|---|
| 11 | #undef WITH_DATABASE
|
|---|
| 12 |
|
|---|
| 13 | /* Define if the database is unixODBC */
|
|---|
| 14 | #undef WITH_ODBC
|
|---|
| 15 |
|
|---|
| 16 | /* Define if the database is oracle */
|
|---|
| 17 | #undef WITH_ORACLE
|
|---|
| 18 |
|
|---|
| 19 | /* Define if the database is mysql */
|
|---|
| 20 | #undef WITH_MYSQL
|
|---|
| 21 |
|
|---|
| 22 | /* Define if the database is postgresql */
|
|---|
| 23 | #undef WITH_POSTGRES
|
|---|
| 24 |
|
|---|
| 25 | /* Define if the server may listen on 514/udp */
|
|---|
| 26 | #undef INET_SYSLOG
|
|---|
| 27 |
|
|---|
| 28 | /* Define if you want logfile in XML format */
|
|---|
| 29 | #undef SH_USE_XML
|
|---|
| 30 |
|
|---|
| 31 | /* Define if you want external programs. */
|
|---|
| 32 | #undef WITH_EXTERNAL
|
|---|
| 33 |
|
|---|
| 34 | /* Define if you want to reload the database */
|
|---|
| 35 | /* on SIGHUP. */
|
|---|
| 36 | #undef RELOAD_DATABASE
|
|---|
| 37 |
|
|---|
| 38 | /* Define if you want SysV message queue. */
|
|---|
| 39 | #undef WITH_MESSAGE_QUEUE
|
|---|
| 40 |
|
|---|
| 41 | /* Define the mode of the message queue. */
|
|---|
| 42 | #undef MESSAGE_QUEUE_MODE
|
|---|
| 43 |
|
|---|
| 44 | /* Define which users are always trusted. */
|
|---|
| 45 | /* default = 0 ( = root) */
|
|---|
| 46 | #undef SL_ALWAYS_TRUSTED
|
|---|
| 47 |
|
|---|
| 48 | /* Define if you want network time. */
|
|---|
| 49 | /* default = no */
|
|---|
| 50 | #undef HAVE_NTIME
|
|---|
| 51 |
|
|---|
| 52 | /* The time server host address. */
|
|---|
| 53 | /* default = "NULL" */
|
|---|
| 54 | #undef DEFAULT_TIMESERVER
|
|---|
| 55 | #undef ALT_TIMESERVER
|
|---|
| 56 |
|
|---|
| 57 | /* Define if you want to use the mail code. */
|
|---|
| 58 | /* default = yes */
|
|---|
| 59 | #undef SH_WITH_MAIL
|
|---|
| 60 |
|
|---|
| 61 | /* Define if you want client/server encryption*/
|
|---|
| 62 | #undef SH_ENCRYPT
|
|---|
| 63 |
|
|---|
| 64 | /* Define if you want version 2 encryption */
|
|---|
| 65 | #undef SH_ENCRYPT_2
|
|---|
| 66 |
|
|---|
| 67 | /* Define if you want to watch for login/-out.*/
|
|---|
| 68 | /* default = no */
|
|---|
| 69 | #undef SH_USE_UTMP
|
|---|
| 70 |
|
|---|
| 71 | /* Define if you want to check mount options on filesystems */
|
|---|
| 72 | /* default = no */
|
|---|
| 73 | #undef SH_USE_MOUNTS
|
|---|
| 74 |
|
|---|
| 75 | /* Define if you want to keep an eye on */
|
|---|
| 76 | /* sensitive files that your users own */
|
|---|
| 77 | #undef SH_USE_USERFILES
|
|---|
| 78 |
|
|---|
| 79 | /* Define if you want to watch for suid/sgid */
|
|---|
| 80 | /* files */
|
|---|
| 81 | #undef SH_USE_SUIDCHK
|
|---|
| 82 |
|
|---|
| 83 | /* Define if you want to check kernel syscall */
|
|---|
| 84 | /* table to detect LKM rootkits. */
|
|---|
| 85 | /* default = no */
|
|---|
| 86 | #undef SH_USE_KERN
|
|---|
| 87 |
|
|---|
| 88 | /* Define if you want to use the Kernel */
|
|---|
| 89 | /* module to hide samhain. */
|
|---|
| 90 | #undef SH_USE_LKM
|
|---|
| 91 |
|
|---|
| 92 | /* Define if you have a vanilla Kernel */
|
|---|
| 93 | /* (2.4 or 2.2) */
|
|---|
| 94 | #undef SH_VANILLA_KERNEL
|
|---|
| 95 |
|
|---|
| 96 | /* Define to the name of the MAGIC_HIDE */
|
|---|
| 97 | /* string if you use the Kernel module to */
|
|---|
| 98 | /* hide samhain. */
|
|---|
| 99 | #undef SH_MAGIC_HIDE
|
|---|
| 100 |
|
|---|
| 101 | /* Define if you want 'micro' stealth mode. */
|
|---|
| 102 | /* default = no */
|
|---|
| 103 | #undef SH_STEALTH_MICRO
|
|---|
| 104 |
|
|---|
| 105 | /* Define if you want to use stealth mode. */
|
|---|
| 106 | /* default = no */
|
|---|
| 107 | #undef SH_STEALTH
|
|---|
| 108 |
|
|---|
| 109 | /* Define if you want stealth w/o CL parsing. */
|
|---|
| 110 | /* default = no */
|
|---|
| 111 | #undef SH_STEALTH_NOCL
|
|---|
| 112 |
|
|---|
| 113 | /* The magic argv[1] to re-enable CL parsing. */
|
|---|
| 114 | /* default = "yes" */
|
|---|
| 115 | #undef NOCL_CODE
|
|---|
| 116 |
|
|---|
| 117 | /* XOR value to hide literal strings. */
|
|---|
| 118 | /* default = 0 */
|
|---|
| 119 | #undef XOR_CODE
|
|---|
| 120 |
|
|---|
| 121 | /* The port number for TCP/IP connection. */
|
|---|
| 122 | /* default = 49777 */
|
|---|
| 123 | #undef SH_DEFAULT_PORT
|
|---|
| 124 |
|
|---|
| 125 | /* The identity to assume when dropping root */
|
|---|
| 126 | /* default = "nobody" */
|
|---|
| 127 | #undef DEFAULT_IDENT
|
|---|
| 128 |
|
|---|
| 129 | /* Directory for tmp files */
|
|---|
| 130 | #undef SH_TMPDIR
|
|---|
| 131 |
|
|---|
| 132 | /* The data root directory. */
|
|---|
| 133 | /* default="/var/lib/samhain" */
|
|---|
| 134 | #undef DEFAULT_DATAROOT
|
|---|
| 135 |
|
|---|
| 136 | /* The quarantine directory. */
|
|---|
| 137 | /* default="/var/lib/samhain/.quarantine */
|
|---|
| 138 | #undef DEFAULT_QDIR
|
|---|
| 139 |
|
|---|
| 140 | /* The location of the log file. */
|
|---|
| 141 | /* default="/var/log/samhain_log" */
|
|---|
| 142 | #undef DEFAULT_ERRFILE
|
|---|
| 143 |
|
|---|
| 144 | /* The directory of the log file. */
|
|---|
| 145 | /* default="/var/log" */
|
|---|
| 146 | #undef DEFAULT_LOGDIR
|
|---|
| 147 |
|
|---|
| 148 | /* The location of the pid file. */
|
|---|
| 149 | /* default="/var/run/samhain.pid" */
|
|---|
| 150 | #undef DEFAULT_ERRLOCK
|
|---|
| 151 |
|
|---|
| 152 | /* The location of the pid file directory. */
|
|---|
| 153 | /* default="/var/run " */
|
|---|
| 154 | #undef DEFAULT_PIDDIR
|
|---|
| 155 |
|
|---|
| 156 | /* The location of the configuration file. */
|
|---|
| 157 | /* default="/etc/samhainrc" */
|
|---|
| 158 | #undef DEFAULT_CONFIGFILE
|
|---|
| 159 |
|
|---|
| 160 | /* The location of the checksum data. */
|
|---|
| 161 | /* default="/var/lib/samhain/samhain_file" */
|
|---|
| 162 | #undef DEFAULT_DATA_FILE
|
|---|
| 163 |
|
|---|
| 164 | /* The location of the html report. */
|
|---|
| 165 | /* default="/var/log/.samhain.html" */
|
|---|
| 166 | #undef DEFAULT_HTML_FILE
|
|---|
| 167 |
|
|---|
| 168 | /* The install directory. */
|
|---|
| 169 | /* default="/usr/local/sbin" */
|
|---|
| 170 | #undef SH_INSTALL_DIR
|
|---|
| 171 |
|
|---|
| 172 | /* The install path. */
|
|---|
| 173 | /* default="/usr/local/sbin/samhain" */
|
|---|
| 174 | #undef SH_INSTALL_PATH
|
|---|
| 175 | #undef SH_INSTALL_YULE_PATH
|
|---|
| 176 |
|
|---|
| 177 | /* The install name. */
|
|---|
| 178 | /* default="samhain" */
|
|---|
| 179 | #undef SH_INSTALL_NAME
|
|---|
| 180 |
|
|---|
| 181 | /* The sender name to use. */
|
|---|
| 182 | /* default = "daemon" */
|
|---|
| 183 | #undef DEFAULT_SENDER
|
|---|
| 184 |
|
|---|
| 185 | /* The address to send mail to. */
|
|---|
| 186 | /* default = "NULL" */
|
|---|
| 187 | #undef DEFAULT_MAILADDRESS
|
|---|
| 188 | #undef ALT_MAILADDRESS
|
|---|
| 189 |
|
|---|
| 190 | /* The log server. */
|
|---|
| 191 | /* default = "NULL" */
|
|---|
| 192 | #undef DEFAULT_LOGSERVER
|
|---|
| 193 | #undef ALT_LOGSERVER
|
|---|
| 194 |
|
|---|
| 195 | /* The console. */
|
|---|
| 196 | /* default = "NULL" */
|
|---|
| 197 | #undef DEFAULT_CONSOLE
|
|---|
| 198 | #undef ALT_CONSOLE
|
|---|
| 199 |
|
|---|
| 200 | /* The default base for one-time pads. */
|
|---|
| 201 | /* default = compile_time,compile_time */
|
|---|
| 202 | #undef DEFKEY
|
|---|
| 203 |
|
|---|
| 204 | /* Define if you want more debug options. */
|
|---|
| 205 | /* default = no */
|
|---|
| 206 | #undef MEM_DEBUG
|
|---|
| 207 |
|
|---|
| 208 | /* Define if you want more debug output. */
|
|---|
| 209 | /* default = no */
|
|---|
| 210 | #undef WITH_TPT
|
|---|
| 211 |
|
|---|
| 212 | /* Define if you want tracing. */
|
|---|
| 213 | /* default = no */
|
|---|
| 214 | #undef WITH_TRACE
|
|---|
| 215 |
|
|---|
| 216 | /* Define if you want slib debug. */
|
|---|
| 217 | /* default = no */
|
|---|
| 218 | #undef SL_DEBUG
|
|---|
| 219 |
|
|---|
| 220 | /* Define if you want slib to abort on errors.*/
|
|---|
| 221 | /* default = no */
|
|---|
| 222 | #undef SL_FAIL_ON_ERROR
|
|---|
| 223 |
|
|---|
| 224 | /* Define if you want to use SRP authenticaton*/
|
|---|
| 225 | #undef USE_SRP_PROTOCOL
|
|---|
| 226 |
|
|---|
| 227 | /* Define if you want to use GnuPG to */
|
|---|
| 228 | /* verify database and configuation file. */
|
|---|
| 229 | #undef WITH_GPG
|
|---|
| 230 |
|
|---|
| 231 | /* The full path to GnuPG */
|
|---|
| 232 | #undef DEFAULT_GPG_PATH
|
|---|
| 233 |
|
|---|
| 234 | /* Define if using the gpg/pgp checksum. */
|
|---|
| 235 | #undef HAVE_GPG_CHECKSUM
|
|---|
| 236 |
|
|---|
| 237 | /* The tiger checksum of the gpg/pgp binary. */
|
|---|
| 238 | #undef GPG_HASH
|
|---|
| 239 |
|
|---|
| 240 | /* Define if you want to compile in the */
|
|---|
| 241 | /* public key fingerprint. */
|
|---|
| 242 | #undef USE_FINGERPRINT
|
|---|
| 243 |
|
|---|
| 244 | /* The public key fingerprint. */
|
|---|
| 245 | #undef SH_GPG_FP
|
|---|
| 246 |
|
|---|
| 247 | /* Use ptrace - screw up signal handling. */
|
|---|
| 248 | #undef SCREW_IT_UP
|
|---|
| 249 |
|
|---|
| 250 | /* ---- misc ------------ */
|
|---|
| 251 |
|
|---|
| 252 | /* Define the package name. */
|
|---|
| 253 | #undef PACKAGE
|
|---|
| 254 |
|
|---|
| 255 | /* Define the package version. */
|
|---|
| 256 | #undef VERSION
|
|---|
| 257 |
|
|---|
| 258 | /* Define to the position of the key (1...8). */
|
|---|
| 259 | #undef POS_TF
|
|---|
| 260 |
|
|---|
| 261 | /* Init key for exepack. */
|
|---|
| 262 | #undef EXEPACK_STATE_0
|
|---|
| 263 | #undef EXEPACK_STATE_1
|
|---|
| 264 | #undef EXEPACK_STATE_2
|
|---|
| 265 |
|
|---|
| 266 | /* ---- system-specific options ------------ */
|
|---|
| 267 |
|
|---|
| 268 | /* Define to the address of sys_call_table */
|
|---|
| 269 | #undef SH_SYSCALLTABLE
|
|---|
| 270 |
|
|---|
| 271 | /* Define to use SVR4 statvfs to get filesystem type. */
|
|---|
| 272 | #undef FSTYPE_STATVFS
|
|---|
| 273 |
|
|---|
| 274 | /* Define to use SVR3.2 statfs to get filesystem type. */
|
|---|
| 275 | #undef FSTYPE_USG_STATFS
|
|---|
| 276 |
|
|---|
| 277 | /* Define to use AIX3 statfs to get filesystem type. */
|
|---|
| 278 | #undef FSTYPE_AIX_STATFS
|
|---|
| 279 |
|
|---|
| 280 | /* Define to use 4.3BSD getmntent to get filesystem type. */
|
|---|
| 281 | #undef FSTYPE_MNTENT
|
|---|
| 282 |
|
|---|
| 283 | /* Define to use 4.4BSD and OSF1 statfs to get filesystem type. */
|
|---|
| 284 | #undef FSTYPE_STATFS
|
|---|
| 285 |
|
|---|
| 286 | /* Define to use Ultrix getmnt to get filesystem type. */
|
|---|
| 287 | #undef FSTYPE_GETMNT
|
|---|
| 288 |
|
|---|
| 289 | /* the basic type to which we can cast a uid
|
|---|
| 290 | */
|
|---|
| 291 | #undef UID_CAST
|
|---|
| 292 |
|
|---|
| 293 | /* for ext2fs flags */
|
|---|
| 294 | #undef HAVE_EXT2_IOCTLS
|
|---|
| 295 | #undef HAVE_STAT_FLAGS
|
|---|
| 296 |
|
|---|
| 297 | /* obvious */
|
|---|
| 298 | #undef HOST_IS_LINUX
|
|---|
| 299 | #undef HOST_IS_I86LINUX
|
|---|
| 300 |
|
|---|
| 301 | /* obvious */
|
|---|
| 302 | #undef HOST_IS_CYGWIN
|
|---|
| 303 |
|
|---|
| 304 | /* obvious */
|
|---|
| 305 | #undef HOST_IS_DARWIN
|
|---|
| 306 |
|
|---|
| 307 | /* obvious */
|
|---|
| 308 | #undef HOST_IS_FREEBSD
|
|---|
| 309 |
|
|---|
| 310 | /* obvious */
|
|---|
| 311 | #undef HOST_IS_AIX
|
|---|
| 312 |
|
|---|
| 313 | /* obvious */
|
|---|
| 314 | #undef HOST_IS_SOLARIS
|
|---|
| 315 |
|
|---|
| 316 | /* obvious */
|
|---|
| 317 | #undef HOST_IS_I86SOLARIS
|
|---|
| 318 |
|
|---|
| 319 | /* obvious */
|
|---|
| 320 | #undef HOST_IS_HPUX
|
|---|
| 321 |
|
|---|
| 322 | /* Define to the name of the random devices. */
|
|---|
| 323 | #undef NAME_OF_DEV_RANDOM
|
|---|
| 324 |
|
|---|
| 325 | #undef NAME_OF_DEV_URANDOM
|
|---|
| 326 |
|
|---|
| 327 | /* Define if you have long long. */
|
|---|
| 328 | #undef HAVE_LONG_LONG
|
|---|
| 329 |
|
|---|
| 330 | /* Define if short is 32 bits. */
|
|---|
| 331 | #undef HAVE_SHORT_32
|
|---|
| 332 |
|
|---|
| 333 | /* Define if int is 32 bits. */
|
|---|
| 334 | #undef HAVE_INT_32
|
|---|
| 335 |
|
|---|
| 336 | /* Define if long is 32 bits. */
|
|---|
| 337 | #undef HAVE_LONG_32
|
|---|
| 338 |
|
|---|
| 339 | /* Define if long is 64 bits. */
|
|---|
| 340 | #undef HAVE_LONG_64
|
|---|
| 341 |
|
|---|
| 342 | /* Define if UINT64 is 32 bits. */
|
|---|
| 343 | #undef UINT64_IS_32
|
|---|
| 344 |
|
|---|
| 345 | /* Define if you have uint64_t. */
|
|---|
| 346 | #undef HAVE_UINT16_T
|
|---|
| 347 |
|
|---|
| 348 | /* Define if you have uint64_t. */
|
|---|
| 349 | #undef HAVE_UINT64_T
|
|---|
| 350 |
|
|---|
| 351 | /* Define if you have utmpx.h. */
|
|---|
| 352 | #undef HAVE_UTMPX_H
|
|---|
| 353 |
|
|---|
| 354 | /* Define if your struct utmpx has ut_xtime. */
|
|---|
| 355 | #undef HAVE_UTXTIME
|
|---|
| 356 |
|
|---|
| 357 | /* Define if your struct utmp has ut_type. */
|
|---|
| 358 | #undef HAVE_UTTYPE
|
|---|
| 359 |
|
|---|
| 360 | /* Define if your struct utmp has ut_host. */
|
|---|
| 361 | #undef HAVE_UTHOST
|
|---|
| 362 |
|
|---|
| 363 | /* Define if your struct utmp has ut_addr. */
|
|---|
| 364 | #undef HAVE_UTADDR
|
|---|
| 365 |
|
|---|
| 366 | /* Define if your struct utmp has ut_addr_v6 */
|
|---|
| 367 | #undef HAVE_UTADDR_V6
|
|---|
| 368 |
|
|---|
| 369 | /* Define if your includes are broken. */
|
|---|
| 370 | #undef HAVE_BROKEN_INCLUDES
|
|---|
| 371 |
|
|---|
| 372 | /* Define if your getcwd uses 'popen'. */
|
|---|
| 373 | #undef HAVE_BROKEN_GETCWD
|
|---|
| 374 |
|
|---|
| 375 | /* Define if your vsnprintf is broken. */
|
|---|
| 376 | #undef HAVE_BROKEN_VSNPRINTF
|
|---|
| 377 |
|
|---|
| 378 | /* Define if you need unix entropy gatherer. */
|
|---|
| 379 | #undef HAVE_UNIX_RANDOM
|
|---|
| 380 |
|
|---|
| 381 | /* Define if you have EGD. */
|
|---|
| 382 | #undef HAVE_EGD_RANDOM
|
|---|
| 383 |
|
|---|
| 384 | /* Define if you have /dev/random. */
|
|---|
| 385 | #undef HAVE_URANDOM
|
|---|
| 386 |
|
|---|
| 387 | /* Soket name for EGD. */
|
|---|
| 388 | #undef EGD_SOCKET_NAME
|
|---|
| 389 |
|
|---|
| 390 | /* Define if your mlock() is broken. */
|
|---|
| 391 | #undef HAVE_BROKEN_MLOCK
|
|---|
| 392 |
|
|---|
| 393 | /* Define the proc f_type. */
|
|---|
| 394 | #undef SH_PROC_MAGIC
|
|---|
| 395 |
|
|---|
| 396 | /* Define if you have statfs. */
|
|---|
| 397 | #undef HAVE_STATFS
|
|---|
| 398 |
|
|---|
| 399 | /* Define if statfs works. */
|
|---|
| 400 | #undef STATFS_WORKS
|
|---|
| 401 |
|
|---|
| 402 | /* Define to long if not defined. */
|
|---|
| 403 | #undef ptrdiff_t
|
|---|
| 404 |
|
|---|
| 405 | @BOTTOM@
|
|---|
| 406 |
|
|---|
| 407 | /* dont modify this, unless you know what you do
|
|---|
| 408 | */
|
|---|
| 409 | #define SRP_GENERATOR_1024 "2"
|
|---|
| 410 | #define SRP_MODULUS_1024_1 \
|
|---|
| 411 | _("f488fd584e49dbcd20b49de49107366b336c380d451d0f7c88b31c7c5b2d8ef6")
|
|---|
| 412 | #define SRP_MODULUS_1024_2 \
|
|---|
| 413 | _("f3c923c043f0a55b188d8ebb558cb85d38d334fd7c175743a31d186cde33212c")
|
|---|
| 414 | #define SRP_MODULUS_1024_3 \
|
|---|
| 415 | _("b52aff3ce1b1294018118d7c84a70a72d686c40319c807297aca950cd9969fab")
|
|---|
| 416 | #define SRP_MODULUS_1024_4 \
|
|---|
| 417 | _("d00a509b0246d3083d66a45d419f9c7cbd894b221926baaba25ec355e92f78c7")
|
|---|
| 418 |
|
|---|
| 419 | #define SDG_0RETU _("return.\n")
|
|---|
| 420 | #define SDG_TERRO _("ERROR: file=<%s>, line=<%d>, reason=<%s>\n")
|
|---|
| 421 | #define SDG_AERRO _("ERROR: file=<%s>, line=<%d>, failed_assertion=<%s>\n")
|
|---|
| 422 | #define SDG_AFAIL _("FAILED: file=<%s>, line=<%d>, assertion=<%s>\n")
|
|---|
| 423 | #define SDG_ENTER _("enter=<%s>\n")
|
|---|
| 424 | #define SDG_RETUR _("return=<%s>.\n")
|
|---|
| 425 | #define SDG_ERROR _("error=<%ld>.\n")
|
|---|
| 426 |
|
|---|
| 427 | #ifdef SH_STEALTH
|
|---|
| 428 | char * globber(const char * string);
|
|---|
| 429 | #define _(string) globber(string)
|
|---|
| 430 | #define N_(string) string
|
|---|
| 431 | #else
|
|---|
| 432 | #define _(string) string
|
|---|
| 433 | #define N_(string) string
|
|---|
| 434 | #endif
|
|---|
| 435 |
|
|---|
| 436 | #endif
|
|---|
