Context Navigation

source: trunk/configure.ac@ 589

Last change on this file since 589 was 588, checked in by katerina, 21 hours ago
Fix for ticket #476 (move logfile monitoring module from PCRE to PCRE2).
File size: 82.7 KB

Rev	Line
[43]	1	dnl We want to override the standard _AC_INIT_PARSE_ARGS
[1]	2	dnl
[583]	3	AU_ALIAS([_AC_INIT_PARSE_ARGS], [SH_INIT_PARSE_ARGS], [], [silent])
	4	dnl AU_ALIAS([_AC_INIT_help], [SH_INIT_HELP])
[1]	5
[583]	6	AC_INIT([samhain],[4.5.2])
	7	AC_CONFIG_SRCDIR(src/samhain.c)
[43]	8
[46]	9	AC_ARG_VAR([LIBS], [libraries to link against, e.g. -lintl])
[1]	10
	11	dnl
	12	dnl start
	13	dnl
[583]	14	dnl AM_INIT_AUTOMAKE
	15	m4_pattern_allow([AC_DEFINE])
[171]	16	AC_DEFINE([SAMHAIN], 1, [Application is samhain])
[583]	17	AC_DEFINE_UNQUOTED([VERSION], [_("${PACKAGE_VERSION}")], [Current version] )
	18	AC_DEFINE_UNQUOTED([PACKAGE], [_("${PACKAGE_NAME}")], [Application name] )
[1]	19	AC_CANONICAL_HOST
	20
	21	dnl
	22	dnl checks for programs
	23	dnl
	24
	25	AC_PROG_CC
[98]	26	if test "$host" != "$build"; then
	27	AC_CHECK_PROGS(BUILD_CC, gcc cc)
	28	else
	29	BUILD_CC=$CC
	30	fi
[1]	31	AC_PROG_CPP
	32	AC_PROG_INSTALL
	33	AC_PROG_LN_S
	34	AC_PROG_AWK
[171]	35	SH_PROG_LD
[1]	36	AC_PATH_PROG(cmd_hostname,hostname)
	37	AC_SUBST(cmd_hostname)
[98]	38	AC_SUBST(BUILD_CC)
[1]	39
[583]	40
[440]	41	if test "x$GCC" = "xyes"; then
	42	SH_GCC_VERSION
	43	fi
	44
[572]	45	if test "x${gcc_VERSION_MAJOR}" != "x"
	46	then
	47	AC_MSG_CHECKING([for gcc compiler issues])
	48	if test ${gcc_VERSION_MAJOR} -ge 11
	49	then
	50	dnmalloc_ok=no
	51	AC_MSG_RESULT([dnmalloc does not work with gcc 11])
	52	else
	53	dnmalloc_ok=yes
	54	AC_MSG_RESULT([ok])
	55	fi
	56	else
	57	dnmalloc_ok=yes
	58	fi
	59
	60
[481]	61	AC_CHECK_HEADERS([sys/ipc.h sys/sem.h sys/msg.h sys/uio.h fcntl.h])
[1]	62
[481]	63
[203]	64	AC_MSG_CHECKING([for OS specific issues])
[1]	65	mydebugflag=no
	66	myneedg3=no
	67	uid_cast="signed long"
	68	selectconfig=linux
	69	mynetbsd=no
	70	sh_use_lcaps="undef"
[203]	71	sh_use_pie=yes
[447]	72	enable_asm_ok=yes
[1]	73
	74	case "$host_os" in
	75
	76	linux)
	77	sh_use_lcaps="yes"
[583]	78	AC_DEFINE([HOST_IS_LINUX], [1], [] )
	79	AC_DEFINE([HAVE_EXT2_IOCTLS], [1], [] )
[221]	80	AC_MSG_RESULT([use ioctl to get e2fs flags])
[1]	81	case "$host_cpu" in
	82	i86)
[583]	83	AC_DEFINE([HOST_IS_I86LINUX], [1], [] )
[1]	84	;;
[279]	85	x86_64)
[583]	86	AC_DEFINE([HOST_IS_64LINUX], [1], [Define if host OS is 64bit Linux])
[279]	87	;;
[1]	88	*)
	89	;;
	90	esac
[531]	91	LDFLAGS="${LDFLAGS} -Wl,--as-needed"
	92	;;
[1]	93
	94	osf)
	95	AC_DEFINE([HOST_IS_OSF], 1, [Define if host OS is OSF])
	96	if test "x$GCC" != "xyes"; then
	97	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
	98	CFLAGS="$CFLAGS -O2 -assume noaligned_objects"
	99	myneedg3=yes
[221]	100	AC_MSG_RESULT([compiler needs assume noaligned_objects])
[1]	101	else
[221]	102	AC_MSG_RESULT([none])
[1]	103	fi
	104	;;
	105
	106	cygwin)
[583]	107	AC_DEFINE([HOST_IS_CYGWIN], [1], [] )
[294]	108	AC_DEFINE([USE_REGISTRY_CHECK], 1, [Define for registry check])
[192]	109	dnmalloc_ok=no
[447]	110	enable_asm_ok=no
	111	AC_MSG_RESULT([no trusted paths, no dnmalloc. no asm optimize])
[1]	112	;;
	113
[378]	114	darwin\|apple)
[583]	115	AC_DEFINE([HOST_IS_DARWIN], [1], [] )
[221]	116	dnmalloc_ok=no
	117	AC_MSG_RESULT([check resource forks, no dnmalloc])
[1]	118	;;
	119
[583]	120	freebsd7)
	121	AC_DEFINE([HOST_IS_FREEBSD], [1], [] )
[384]	122	selectconfig=freebsd
	123	case "$host_cpu" in
	124	amd64\|x86_64)
[583]	125	sh_use_pie=no
[384]	126	dnmalloc_ok=no
[583]	127	AC_MSG_RESULT([no dnmalloc and broken compiler toolchain])
[384]	128	;;
	129	*)
	130	AC_MSG_RESULT([none])
	131	;;
	132	esac
	133	;;
	134
[583]	135	freebsd)
	136	AC_DEFINE([HOST_IS_FREEBSD], [1], [] )
[203]	137	selectconfig=freebsd
	138	case "$host_cpu" in
[384]	139	amd64\|x86_64)
[203]	140	dnmalloc_ok=no
[583]	141	AC_MSG_RESULT([no dnmalloc])
[203]	142	;;
	143	*)
[221]	144	AC_MSG_RESULT([none])
[203]	145	;;
	146	esac
[221]	147	AC_MSG_RESULT([none])
[1]	148	;;
	149
	150	openbsd)
[169]	151	AC_DEFINE([HOST_IS_OPENBSD], 1, [Define if host OS is OPENBSD])
[1]	152	selectconfig=freebsd
[171]	153	dnmalloc_ok=no
[221]	154	AC_MSG_RESULT([dnmalloc does not work with pthreads])
[1]	155	;;
	156
	157	netbsd)
	158	mynetbsd=yes
[57]	159	selectconfig=netbsd
[221]	160	AC_MSG_RESULT([bug with libresolve])
[1]	161	;;
	162
	163	solaris)
	164	selectconfig=solaris
[583]	165	AC_DEFINE([HOST_IS_SOLARIS], [1], [] )
[1]	166	case "$host_cpu" in
	167	i*86)
[583]	168	AC_DEFINE([HOST_IS_I86SOLARIS], [1], [] )
[221]	169	AC_MSG_RESULT([vsnprintf prototype])
[1]	170	;;
	171	*)
[221]	172	AC_MSG_RESULT([none])
[1]	173	;;
	174	esac
	175	if test "x$GCC" != "xyes"; then
	176	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
	177	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
	178	fi
	179	if test -z "`echo "$CFLAGS" \| grep "\-xO2" 2> /dev/null`"; then
	180	CFLAGS="$CFLAGS -xO2"
	181	fi
	182	if test -z "`echo "$CFLAGS" \| grep "\-Xa" 2> /dev/null`"; then
	183	CFLAGS="$CFLAGS -Xa"
	184	fi
	185	LIBS="-lc $LIBS"
	186	fi
	187	;;
	188
	189
	190	sun)
	191	selectconfig=solaris
[583]	192	AC_DEFINE([HOST_IS_SOLARIS], [1], [])
[221]	193	AC_MSG_RESULT([none])
[1]	194	;;
	195
	196	aix)
[583]	197	AC_DEFINE([HOST_IS_AIX], [1], [aix])
[1]	198	selectconfig=aix5.2.0
	199	uid_cast="unsigned long"
	200	if test "x$GCC" != "xyes"; then
	201	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
	202	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
	203	fi
	204	if test -z "`echo "$CFLAGS" \| grep "\-O3" 2> /dev/null`"; then
	205	CFLAGS="$CFLAGS -O3"
	206	fi
	207	if test -z "`echo "$CFLAGS" \| grep "\-qstrict" 2> /dev/null`"; then
	208	CFLAGS="$CFLAGS -qstrict"
	209	fi
[221]	210	AC_MSG_RESULT([AIX size_t in the accept call and optimize O3 qstrict])
[1]	211	else
[221]	212	AC_MSG_RESULT([AIX size_t in the accept call])
[1]	213	fi
	214	;;
	215
	216	hpux)
[221]	217	AC_MSG_RESULT([HPUX need _XOPEN_SOURCE_EXTENDED for h_errno])
[583]	218	AC_DEFINE([HOST_IS_HPUX], [1], [hpux])
[1]	219	if test "x$GCC" != "xyes"; then
	220	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
	221	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
	222	fi
[158]	223	if test -z "`echo "$CFLAGS" \| grep "\+O2" 2> /dev/null`"; then
	224	CFLAGS="$CFLAGS +O2"
[1]	225	fi
	226	fi
	227	;;
	228
	229	ultrix)
[221]	230	AC_MSG_RESULT([ULTRIX getcwd uses popen])
[583]	231	AC_DEFINE([HAVE_BROKEN_GETCWD], [1], [bad implementation of getcwd])
[1]	232	;;
	233
	234	*)
[221]	235	AC_MSG_RESULT([none])
[1]	236	;;
	237	esac
	238
	239	AC_SUBST(selectconfig)
[583]	240	AC_DEFINE_UNQUOTED([UID_CAST], [${uid_cast}], [basic type to which we can cast a uid])
[1]	241
	242
[202]	243
[1]	244	dnl *****************************************
	245	dnl
	246	dnl checks for header files
	247	dnl
	248	dnl *****************************************
	249
	250	AC_HEADER_DIRENT
	251	AC_HEADER_MAJOR
[583]	252	AC_CHECK_HEADERS([sys/time.h])
[1]	253	dnl used in minilzo.c
	254	AC_HEADER_STAT
	255
[583]	256	AC_CHECK_DECLS([sys_siglist], [], [],
	257	[#include <signal.h>
	258	/* NetBSD declares sys_siglist in unistd.h. */
	259	#ifdef HAVE_UNISTD_H
	260	# include <unistd.h>
	261	#endif
	262	])
	263
[171]	264	AC_CHECK_HEADERS(stddef.h libgen.h sched.h malloc.h sys/uio.h \
[534]	265	sys/mman.h sys/param.h sys/inotify.h sys/sysmacros.h \
[61]	266	sys/vfs.h mntent.h \
[511]	267	sys/select.h sys/socket.h netinet/in.h ifaddrs.h \
[371]	268	regex.h glob.h fnmatch.h \
[162]	269	linux/ext2_fs.h linux/fs.h ext2fs/ext2_fs.h asm/segment.h \
[294]	270	elf.h linux/elf.h auparse.h \
[68]	271	paths.h arpa/nameser.h arpa/nameser_compat.h \
[290]	272	rpc/rpcent.h rpc/rpc.h sys/statvfs.h,
[1]	273	[],
	274	[],
	275	[#include <sys/types.h>]
	276	)
	277
	278
	279	AC_CHECK_HEADER(utmpx.h, sh_utmpx="yes", sh_utmpx="no")
	280	if test "x$sh_utmpx" = "xyes"; then
[583]	281	AC_DEFINE([HAVE_UTMPX_H], [1], [whether we have utmpx.h])
	282	AC_EGREP_HEADER(ut_host, utmpx.h, AC_DEFINE([HAVE_UTHOST], [1], [] ))
	283	AC_EGREP_HEADER(ut_addr, utmpx.h, AC_DEFINE([HAVE_UTADDR], [1], [] ))
	284	AC_EGREP_HEADER(ut_addr_v6, utmpx.h, AC_DEFINE([HAVE_UTADDR_V6], [1], [] ))
	285	AC_EGREP_HEADER(ut_xtime,utmpx.h, AC_DEFINE([HAVE_UTXTIME], [1], [] ))
	286	AC_EGREP_HEADER(ut_type, utmpx.h, AC_DEFINE([HAVE_UTTYPE], [1], [] ))
[1]	287	else
[583]	288	AC_EGREP_HEADER(ut_addr, utmp.h, AC_DEFINE([HAVE_UTADDR], [1], [] ))
	289	AC_EGREP_HEADER(ut_host, utmp.h, AC_DEFINE([HAVE_UTHOST], [1], [] ))
	290	AC_EGREP_HEADER(ut_type, utmp.h, AC_DEFINE([HAVE_UTTYPE], [1], [] ))
[1]	291	fi
	292
[183]	293	dnl
	294	dnl figure out where acct.h lives
	295	dnl and whether fields are int/comp_t
	296	dnl
	297	dnl GNU Accounting Utilities
	298	dnl Copyright (C) 1993, 1996, 1997, 2003, 2005 Free Software Foundation, Inc.
	299	dnl The GNU Accounting Utilities are free software; you can redistribute
	300	dnl them and/or modify them under the terms of the GNU General Public
	301	dnl License as published by the Free Software Foundation; either version
	302	dnl 2, or (at your option) any later version.
	303	dnl
	304	AC_CHECK_HEADER(sys/acct.h,
	305	AC_DEFINE(HAVE_SYS_ACCT_H, ,
	306	[Define if you have the <sys/acct.h> header file.])
[583]	307	AC_EGREP_HEADER(ac_utime, sys/acct.h,
[183]	308	AC_DEFINE(HAVE_ACUTIME, ,
	309	[Define if <sys/acct.h> has the AC_UTIME field.])
[583]	310	AC_EGREP_HEADER(comp_t.*ac_utime, sys/acct.h,
[183]	311	AC_DEFINE(ACUTIME_COMPT, ,
	312	[Define if <sys/acct.h>'s AC_UTIME field is a COMP_T.]))
	313	)
[583]	314	AC_EGREP_HEADER(ac_stime, sys/acct.h,
[183]	315	AC_DEFINE(HAVE_ACSTIME, ,
	316	[Define if <sys/acct.h> has the AC_STIME field.])
[583]	317	AC_EGREP_HEADER(comp_t.*ac_stime, sys/acct.h,
[183]	318	AC_DEFINE(ACSTIME_COMPT, ,
	319	[Define if <sys/acct.h>'s AC_STIME field is a COMP_T.]))
	320	)
[583]	321	AC_EGREP_HEADER(ac_etime, sys/acct.h,
[183]	322	AC_DEFINE(HAVE_ACETIME, ,
	323	[Define if <sys/acct.h> has the AC_ETIME field.])
[583]	324	AC_EGREP_HEADER(comp_t.*ac_etime, sys/acct.h,
[183]	325	AC_DEFINE(ACETIME_COMPT, ,
	326	[Define if <sys/acct.h>'s AC_ETIME field is a COMP_T.]))
	327	)
[583]	328	AC_EGREP_HEADER(ac_io, sys/acct.h,
[183]	329	AC_DEFINE(HAVE_ACIO, ,
	330	[Define if <sys/acct.h> has the AC_IO field.])
[583]	331	AC_EGREP_HEADER(comp_t.*ac_io, sys/acct.h,
[183]	332	AC_DEFINE(ACIO_COMPT, ,
	333	[Define if <sys/acct.h>'s AC_IO field is a COMP_T.]))
	334	)
[583]	335	AC_EGREP_HEADER(ac_mem, sys/acct.h,
[183]	336	AC_DEFINE(HAVE_ACMEM, ,
	337	[Define if <sys/acct.h> has the AC_MEM field.])
[583]	338	AC_EGREP_HEADER(comp_t.*ac_mem, sys/acct.h,
[183]	339	AC_DEFINE(ACMEM_COMPT, ,
	340	[Define if <sys/acct.h>'s AC_MEM field is a COMP_T.]))
	341	)
[583]	342	AC_EGREP_HEADER(ac_minflt, sys/acct.h,
	343	AC_EGREP_HEADER(ac_majflt, sys/acct.h,
	344	AC_EGREP_HEADER(ac_swaps, sys/acct.h,
[183]	345	AC_DEFINE(HAVE_PAGING, ,
	346	[Define if <sys/acct.h> has the AC_MINFLT, AC_MAJFLT and AC_SWAPS fields.])
[583]	347	AC_EGREP_HEADER(comp_t.*ac_minflt, sys/acct.h,
[183]	348	AC_DEFINE(ACMINFLT_COMPT, ,
	349	[Define if <sys/acct.h>'s AC_MINFLT field is a COMP_T.]))
[583]	350	AC_EGREP_HEADER(comp_t.*ac_mayflt, sys/acct.h,
[183]	351	AC_DEFINE(ACMAJFLT_COMPT, ,
	352	[Define if <sys/acct.h>'s AC_MAJFLT field is a COMP_T.]))
[583]	353	AC_EGREP_HEADER(comp_t.*ac_swaps, sys/acct.h,
[183]	354	AC_DEFINE(ACSWAPS_COMPT, ,
	355	[Define if <sys/acct.h>'s AC_SWAPS field is a COMP_T.]))
	356	)
	357	)
	358	)
[583]	359	AC_EGREP_HEADER(comp_t, sys/acct.h, AC_DEFINE(HAVE_COMP_T, ,
[183]	360	[Define if <sys/acct.h> uses the COMP_T type.]))
[583]	361	AC_EGREP_HEADER([struct acct_v3], sys/acct.h, AC_DEFINE(HAVE_ACCT_V3, ,
[203]	362	[Define if <sys/acct.h> has struct acct_v3.]))
[583]	363	AC_EGREP_HEADER([struct acctv2], sys/acct.h, AC_DEFINE(HAVE_ACCTV2, ,
[384]	364	[Define if <sys/acct.h> has struct acctv2.]))
	365
[183]	366	)
	367
[1]	368	dnl need to check because AIX 4.2 does not have it
	369	dnl
	370	AC_CHECK_MEMBERS([struct statfs.f_flags],[],[],[
	371	#ifdef HAVE_SYS_TYPES_H
	372	#include <sys/types.h>
	373	#endif
	374	#ifdef HAVE_SYS_STAT_H
	375	#include <sys/stat.h>
	376	#endif
	377	#ifdef HAVE_SYS_VFS_H
	378	#include <sys/vfs.h>
	379	#endif
	380	#ifdef HAVE_UNISTD_H
	381	#include <unistd.h>
	382	#endif
	383	])
	384
	385	AC_SYS_LARGEFILE
	386
	387	dnl
	388	dnl check whether _POSIX_SOURCE is required
	389	dnl
	390	SAMHAIN_POSIX
	391
	392
	393	dnl *****************************************
	394	dnl
	395	dnl Checks for library functions.
	396	dnl
	397	dnl *****************************************
	398	AC_FUNC_STRFTIME
[491]	399	AC_CHECK_FUNCS(memcmp memcpy memmove memset getpwent endpwent fpurge \
[544]	400	explicit_memset explicit_bzero \
[1]	401	gettimeofday strlcat strlcpy strstr strchr strerror strsignal \
	402	seteuid setreuid setresuid lstat getwd getcwd ptrace \
	403	usleep setpriority getpeereid nanosleep \
[61]	404	strptime basename sched_yield hasmntopt \
[1]	405	inet_aton gethostbyname setutent setrlimit gethostname uname \
[572]	406	initgroups getpagesize getutxent \
[205]	407	ttyname fchmod writev mmap tzset \
[131]	408	getsid getpriority getpgid statvfs \
[171]	409	strerror_r getgrgid_r getpwnam_r getpwuid_r \
[196]	410	gmtime_r localtime_r rand_r readdir_r strtok_r \
[564]	411	mincore posix_fadvise inotify_init1 scandir
[1]	412	)
[583]	413	AC_CHECK_FUNC([statfs], [
	414	AC_DEFINE([HAVE_STATFS], [1], [have statfs func])
	415	statfs="yes"
	416	], [statfs="no"])
[481]	417	SL_CHECK_VA_COPY
[1]	418	AC_CHECK_FUNCS(vsnprintf, [SL_CHECK_VSNPRINTF])
	419	AC_CHECK_MLOCK
[238]	420	SH_STRFTIME_Z
[1]	421
	422	AC_MSG_CHECKING(how to get filesystem type)
	423	fstype=no
	424	# The order of these tests is important.
[583]	425	AC_PREPROC_IFELSE([AC_LANG_SOURCE([[#include <sys/statvfs.h>
	426	#include <sys/fstyp.h>
	427	]])], [
	428	AC_DEFINE([FSTYPE_STATVFS], [1], [statvfs])
	429	fstype=SVR4])
	430
[1]	431	if test $fstype = no; then
[583]	432	AC_PREPROC_IFELSE([AC_LANG_SOURCE([[#include <sys/statfs.h>
	433	#include <sys/fstyp.h>
	434	]])], [
	435	AC_DEFINE([FSTYPE_USG_STATFS], [1], [usg])
	436	fstype=SVR3])
[1]	437	fi
[583]	438
[1]	439	if test $fstype = no; then
[583]	440	AC_PREPROC_IFELSE([AC_LANG_SOURCE([[#include <sys/statfs.h>
	441	#include <sys/vmount.h>
	442	]])], AC_DEFINE([FSTYPE_AIX_STATFS], [1], [aix]) fstype=AIX)
[1]	443	fi
[583]	444
[1]	445	if test $fstype = no; then
[583]	446	AC_PREPROC_IFELSE([AC_LANG_SOURCE([[#include <mntent.h>
	447	]])], AC_DEFINE([FSTYPE_MNTENT], [1], [mtent]) fstype=4.3BSD)
[1]	448	fi
[583]	449
[1]	450	if test $fstype = no; then
[583]	451	AC_EGREP_HEADER(f_type;, sys/mount.h, AC_DEFINE([FSTYPE_STATFS], [1], [statfs]) fstype=4.4BSD/OSF)
[1]	452	fi
[583]	453
[1]	454	if test $fstype = no; then
[583]	455	AC_PREPROC_IFELSE([AC_LANG_SOURCE([[#include <sys/mount.h>
	456	#include <sys/fs_types.h>
	457	]])], AC_DEFINE([FSTYPE_GETMNT], [1], [getmnt]) fstype=Ultrix)
[1]	458	fi
	459	AC_MSG_RESULT($fstype)
	460
	461	sh_libsocket=
	462	dnl Solaris needs -lsocket and -lnsl. Unisys system includes
	463	dnl gethostbyname in libsocket but needs libnsl for socket.
	464	AC_CHECK_LIB(nsl, gethostbyname)
	465	AC_CHECK_LIB(socket, socket, ac_need_libsocket=1, ac_try_nsl=1)
	466	if test x$ac_need_libsocket = x1; then
	467	LIBS="$LIBS -lsocket"
	468	sh_libsocket="-lsocket"
	469	fi
	470	if test x$ac_try_nsl = x1; then
	471	AC_CHECK_LIB(nsl, gethostbyname, ac_need_libnsl=1)
	472	if test x$ac_need_libnsl = x1
	473	then
	474	LIBS="$LIBS -lnsl"
	475	fi
	476	fi
	477	AC_SUBST(sh_libsocket)
	478
	479	AC_CHECK_LIB(socket, res_search, [
	480	AC_CHECK_LIB(resolv, dn_skipname)
	481	AC_CHECK_LIB(resolv, __dn_skipname)
	482	if test x$ac_need_libsocket = x1; then
	483	:
	484	else
	485	LIBS="$LIBS -lsocket"
	486	fi
	487	], [
	488	AC_CHECK_LIB(resolv, res_search, [
	489	LIBS="$LIBS -lresolv"
	490	], [
	491	AC_CHECK_LIB(resolv, dn_skipname)
	492	AC_CHECK_LIB(resolv, __dn_skipname)
	493	])
	494	])
	495
[471]	496	AC_CHECK_FUNCS( getnameinfo getaddrinfo )
	497
	498
[294]	499	sh_auparse=no
	500
	501	if test "x$ac_cv_header_auparse_h" = "xyes"
	502	then
	503	AC_CHECK_LIB(auparse, auparse_find_field, [
	504	LIBS="$LIBS -lauparse"
	505	sh_auparse=yes
[583]	506	AC_DEFINE([HAVE_AUPARSE_LIB], [1], [Define if you have the auparse lib])
[294]	507	])
	508	fi
	509
[1]	510	dnl arguments for accept
	511
	512	dnl check for Unix98 socklen_t (found on
	513	dnl xemacs-patches mailing list, written
	514	dnl by Martin Buchholz)
	515	dnl
	516	dnl On Darwin(MacOSX) socklen_t needs to be
	517	dnl an int (see accept man page), on all other
	518	dnl unix systems we need a size_t.
	519
	520	AC_MSG_CHECKING(for socklen_t)
[583]	521	AC_COMPILE_IFELSE(
	522	[AC_LANG_PROGRAM([[
[1]	523	#ifdef HAVE_SYS_TYPES_H
	524	#include <sys/types.h>
	525	#endif
	526	#ifdef HAVE_SYS_SOCKET_H
	527	#include <sys/socket.h>
	528	#endif
	529	socklen_t x;
[583]	530	]], [[]])],
	531	[
[1]	532	AC_MSG_RESULT(yes)
	533	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[socklen_t], [type of arg3 of accept])
[46]	534	AC_DEFINE([HAVE_SOCKLEN_T], 1, [Define if you have socklen_t])
[1]	535	],[
[583]	536	AC_COMPILE_IFELSE(
	537	[AC_LANG_PROGRAM([[
[1]	538	#ifdef HAVE_SYS_TYPES_H
	539	#include <sys/types.h>
	540	#endif
	541	#ifdef HAVE_SYS_SOCKET_H
	542	#include <sys/socket.h>
	543	#endif
	544	int accept (int, struct sockaddr , size_t );
[583]	545	]],[[]])],
	546	[
[1]	547	AC_MSG_RESULT(size_t)
	548	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[size_t], [type of arg3 of accept])
	549	], [
	550	AC_MSG_RESULT(int)
	551	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[int], [type of arg3 of accept])
	552	]
	553	)
	554	])
	555
[68]	556	dnl *****************************************
	557	dnl checks for extended attribute or ACL
	558	dnl support
	559	dnl *****************************************
[1]	560
[499]	561	AC_ARG_ENABLE([selinux],
	562	[AS_HELP_STRING([--enable-selinux], [support checking selinux attributes])],
	563	[],
	564	[enable_selinux=check])
	565	if test "x$enable_selinux" != xno; then
	566	sh_CHECK_XATTR
	567	fi
[68]	568
[499]	569	AC_ARG_ENABLE([posix-acl],
	570	[AS_HELP_STRING([--enable-posix-acl], [support checking posix acls])],
	571	[],
	572	[enable_posix_acl=check])
	573	if test "x$enable_posix_acl" != xno; then
	574	sh_CHECK_POSIX_ACL
	575	fi
	576
[1]	577	dnl *****************************************
	578	dnl checks for typedefs
	579	dnl *****************************************
	580
[583]	581	AC_TYPE_LONG_DOUBLE
[1]	582	SH_CHECK_TYPEDEF(long long, HAVE_LONG_LONG)
[265]	583	SH_CHECK_TYPEDEF(uint16_t, HAVE_UINT16_T)
[481]	584	SH_CHECK_TYPEDEF(uint32_t, HAVE_UINT32_T)
[156]	585	SH_CHECK_TYPEDEF(uint64_t, HAVE_UINT64_T)
[1]	586	if test "$sh_HAVE_LONG_LONG" = "yes"; then
	587	AC_CHECK_SIZEOF(unsigned long long, 4)
[76]	588	sh_sizeof_unsigned_long_long=`echo "$ac_cv_sizeof_unsigned_long_long" \| sed 's%[^0-9]%%g'`
	589	if test "$sh_sizeof_unsigned_long_long" = "8"; then
[583]	590	AC_DEFINE([HAVE_LONG_LONG_64], [1], [Define if you have 64bit long long])
[1]	591	fi
	592	fi
	593
	594	AC_CHECK_TYPE(ptrdiff_t, long)
	595	AC_TYPE_SIZE_T
	596	AC_CHECK_SIZEOF(char *, 4)
	597	AC_CHECK_SIZEOF(size_t, 4)
	598
	599	AC_CHECK_SIZEOF(unsigned long, 4)
[76]	600	AC_CHECK_SIZEOF(unsigned int, 4)
[1]	601	AC_CHECK_SIZEOF(unsigned short, 2)
	602
	603
[76]	604	sh_sizeof_unsigned_long=`echo "$ac_cv_sizeof_unsigned_long" \| sed 's%[^0-9]%%g'`
	605	if test "$sh_sizeof_unsigned_long" = "4"; then
[583]	606	AC_DEFINE([HAVE_LONG_32], [1], [long32])
[1]	607	fi
[76]	608	if test "$sh_sizeof_unsigned_long" = "8"; then
[583]	609	AC_DEFINE([HAVE_LONG_64], [1], [long64])
[1]	610	fi
[76]	611	sh_sizeof_unsigned_int=`echo "$ac_cv_sizeof_unsigned_int" \| sed 's%[^0-9]%%g'`
	612	if test "$sh_sizeof_unsigned_int" = "4"; then
[583]	613	AC_DEFINE([HAVE_INT_32], [1], [int32])
[1]	614	fi
[76]	615	sh_sizeof_unsigned_short=`echo "$ac_cv_sizeof_unsigned_short" \| sed 's%[^0-9]%%g'`
	616	if test "$sh_sizeof_unsigned_short" = "4"; then
[583]	617	AC_DEFINE([HAVE_SHORT_32], [1], [short32])
[1]	618	fi
	619
[18]	620	dnl
	621	dnl check for 64 bit programming environment
	622	dnl
	623	SAMHAIN_64
	624
	625
[1]	626	dnl *****************************************
	627	dnl checks for structures
	628	dnl *****************************************
	629
	630	AC_STRUCT_TM
	631
	632	dnl
	633	dnl from e2fsprogs
	634	dnl
	635	AC_MSG_CHECKING(whether struct stat has a st_flags field)
	636	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags,
[583]	637	AC_COMPILE_IFELSE(
	638	[AC_LANG_PROGRAM([[
	639	#include <sys/stat.h>
	640	]],
	641	[[struct stat stat; stat.st_flags = 0;]])],
[1]	642	[e2fsprogs_cv_struct_st_flags=yes],
[583]	643	[e2fsprogs_cv_struct_st_flags=no]
	644	))
[1]	645	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags)
[583]	646
[1]	647	if test "$e2fsprogs_cv_struct_st_flags" = yes; then
	648	AC_MSG_CHECKING(whether st_flags field is useful)
	649	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags_immut,
[583]	650	AC_COMPILE_IFELSE(
	651	[AC_LANG_PROGRAM([[
	652	#include <sys/stat.h>
	653	]],
	654	[[struct stat stat; stat.st_flags \|= UF_IMMUTABLE;]])],
[1]	655	[e2fsprogs_cv_struct_st_flags_immut=yes],
[583]	656	[e2fsprogs_cv_struct_st_flags_immut=no]
	657	))
[1]	658	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags_immut)
	659	if test "$e2fsprogs_cv_struct_st_flags_immut" = yes; then
[583]	660	AC_DEFINE([HAVE_STAT_FLAGS], [1], [Have stat flags])
[1]	661	fi
	662	fi
	663
	664	dnl
	665	dnl from dbus
	666	dnl
	667	AC_MSG_CHECKING(for struct cmsgcred)
[583]	668	AC_COMPILE_IFELSE(
	669	[AC_LANG_PROGRAM([[
[1]	670	#include <sys/types.h>
	671	#include <sys/socket.h>
[583]	672	]],[[
[1]	673	struct cmsgcred cred;
	674
	675	cred.cmcred_pid = 0;
[583]	676	]])],sh_have_struct_cmsgcred=yes,sh_have_struct_cmsgcred=no)
[1]	677	AC_MSG_RESULT($sh_have_struct_cmsgcred)
	678
	679	if test x$sh_have_struct_cmsgcred = xyes; then
[583]	680	AC_DEFINE([HAVE_STRUCT_CMSGCRED], [1], [Have cmsgcred structure])
[1]	681	fi
	682
	683	AC_MSG_CHECKING(for struct fcred)
[583]	684	AC_COMPILE_IFELSE(
	685	[AC_LANG_PROGRAM([[
[1]	686	#include <sys/param.h>
	687	#include <sys/socket.h>
	688	#include <sys/ucred.h>
[583]	689	]],[[
[1]	690	struct fcred sockcred;
[583]	691	]])],sh_have_struct_fcred=yes,sh_have_struct_fcred=no)
[1]	692	AC_MSG_RESULT($sh_have_struct_fcred)
	693
	694	if test x$sh_have_struct_fcred = xyes; then
[583]	695	AC_DEFINE([HAVE_STRUCT_FCRED], [1], [Have fcred structure])
[1]	696	fi
	697
	698	AC_MSG_CHECKING(for struct sockcred)
[583]	699	AC_COMPILE_IFELSE(
	700	[AC_LANG_PROGRAM([[
[1]	701	#include <sys/param.h>
	702	#include <sys/socket.h>
	703	#include <sys/ucred.h>
[583]	704	]],[[
[1]	705	struct sockcred sockcred;
[583]	706	]])],sh_have_struct_sockcred=yes,sh_have_struct_sockcred=no)
[1]	707	AC_MSG_RESULT($sh_have_struct_sockcred)
	708
	709	if test x$sh_have_struct_sockcred = xyes; then
[583]	710	AC_DEFINE([HAVE_STRUCT_SOCKCRED], [1], [Have sockcred structure])
[1]	711	fi
	712
	713	AC_MSG_CHECKING(for SO_PEERCRED)
[583]	714	AC_COMPILE_IFELSE(
	715	[AC_LANG_PROGRAM([[
[1]	716	#include <sys/types.h>
	717	#include <sys/socket.h>
[583]	718	]],[[
[1]	719	int test = SO_PEERCRED;
[583]	720	]])],sh_have_SO_PEERCRED=yes,sh_have_SO_PEERCRED=no)
[1]	721	AC_MSG_RESULT($sh_have_SO_PEERCRED)
	722
	723	if test x$sh_have_SO_PEERCRED = xyes; then
[583]	724	AC_DEFINE([HAVE_SO_PEERCRED], [1], [Have SO_PEERCRED define])
[1]	725	fi
	726
[522]	727	AC_MSG_CHECKING(for union semun)
[583]	728	AC_COMPILE_IFELSE(
	729	[AC_LANG_PROGRAM([[
	730	#include <sys/types.h>
[522]	731	#include <sys/ipc.h>
[583]	732	#include <sys/sem.h>
	733	]],[[
	734	union semun foo;
	735	]])], [sh_have_semun=yes], [sh_have_semun=no])
[522]	736	AC_MSG_RESULT($sh_have_semun)
	737	if test x$sh_have_semun = xyes
	738	then
[583]	739	AC_DEFINE([HAVE_UNION_SEMUN], [1], [union semun already defined in sys/ipc.h or sys/sem.h])
[522]	740	fi
[1]	741
	742	dnl *****************************************
	743	dnl checks for compiler characteristics
	744	dnl *****************************************
	745	AC_C_INLINE
	746	AC_C_CONST
	747	AC_C_BIGENDIAN
[76]	748	AC_C_RESTRICT
[1]	749
	750	AM_SA_SIGACTION_WORKS
	751
[255]	752	AC_ARG_ENABLE(ssp,
	753	[ --disable-ssp disable the GCC stack protector],
	754	[],
	755	[enable_ssp=yes;]
	756	)
	757
[203]	758	if test "x$GCC" = "xyes"; then
[255]	759
	760	if test x"${enable_ssp}" = xno; then
	761	:
	762	else
	763	GCC_STACK_PROTECT_LIB
	764	GCC_STACK_PROTECT_CC
[544]	765	GCC_STACK_CHECK_CC
	766	GCC_PIE_CC
	767	GCC_FLAG_CHECK([-fexceptions])
	768	GCC_FLAG_CHECK([-mcet -fcf-protection])
[255]	769	fi
	770
[203]	771	fi
	772
[1]	773	dnl *****************************************
	774	dnl
	775	dnl checks for system services
	776	dnl
	777	dnl *****************************************
	778
	779	dnl
[68]	780	dnl check for /proc filesystem
	781	dnl
	782	if test -d "/proc/$$"
	783	then
[583]	784	AC_DEFINE([HAVE_PROCFS], [1], [Define if you have a proc fs])
[68]	785	fi
	786
	787	dnl
[1]	788	dnl check for GNU gmp
	789	dnl
	790	AC_CHECK_LIB(gmp, __gmpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
	791	if test "x${sh_have_gmp}" = xno
	792	then
	793	AC_CHECK_LIB(gmp, mpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
	794	fi
	795	if test "x${sh_have_gmp}" = xyes
	796	then
	797	# LIBS="-lgmp $LIBS"
[583]	798	AC_DEFINE([HAVE_LIBGMP], [1], [Have GNU gmp library])
[1]	799	fi
	800	AC_CHECK_HEADERS(gmp.h)
	801
[68]	802	AC_MSG_CHECKING([for ps])
	803	PS=
	804	for ff in /usr/ucb /bin /usr/bin; do
	805	if test -x "$ff/ps"; then
	806	PS="$ff/ps"
	807	AC_MSG_RESULT([$PS])
	808	break
	809	fi
	810	done
	811	if test x$PS = x
	812	then
	813	AC_MSG_RESULT([no])
[183]	814	AC_MSG_ERROR([Cannot find ps in any of /usr/ucb /bin /usr/bin])
[68]	815	fi
[583]	816	AC_DEFINE_UNQUOTED([PSPATH], [_("$PS")], [Path to ps executable])
[1]	817
[68]	818	AC_MSG_CHECKING([how to use ps])
	819	$PS ax >/dev/null 2>&1
	820	if test $? -eq 0; then
[169]	821	case "$host_os" in
	822	openbsd)
	823	one=`$PS akx \| wc -l`
	824	;;
	825	*)
[68]	826	one=`$PS ax \| wc -l`
[169]	827	;;
	828	esac
[68]	829	else
	830	one=0
	831	fi
	832	$PS -e >/dev/null 2>&1
	833	if test $? -eq 0; then
	834	two=`$PS -e \| wc -l`
	835	else
	836	two=0
	837	fi
	838	if test $one -ge $two
	839	then
[169]	840	case "$host_os" in
	841	openbsd)
	842	PSARG="akx"
	843	;;
	844	*)
	845	PSARG="ax"
	846	;;
	847	esac
[68]	848	else
[169]	849	PSARG="-e"
[68]	850	fi
[583]	851	AC_DEFINE_UNQUOTED([PSARG], [_("$PSARG")], [Argument for ps])
[68]	852	AC_MSG_RESULT([$PS $PSARG])
	853
[1]	854	dnl *****************************************
	855	dnl
	856	dnl enable features
	857	dnl
	858	dnl *****************************************
	859
	860	AC_ARG_ENABLE(db-reload,
[100]	861	[ --enable-db-reload enable database reload on SIGHUP [[no]]],
[1]	862	[
	863	if test "x${enable_db_reload}" = xyes; then
[583]	864	AC_DEFINE([RELOAD_DATABASE], [1], [database reload on SIGHUP])
[1]	865	fi
	866	]
	867	)
	868
	869	AC_ARG_ENABLE(xml-log,
	870	[ --enable-xml-log enable XML logfile format [[no]]],
	871	[
	872	if test "x${enable_xml_log}" = xyes; then
[583]	873	AC_DEFINE([SH_USE_XML], [1], [logfile in XML format])
[1]	874	fi
	875	]
	876	)
	877
	878
	879	AC_ARG_ENABLE(mail,
	880	[ --disable-mail disable the internal SMTP mailer],
	881	[
	882	if test "x${enable_mail}" = xno; then
	883	:
	884	else
[583]	885	AC_DEFINE([SH_WITH_MAIL], [1], [internal SMTP mailer])
[1]	886	fi
	887	],
[583]	888	[AC_DEFINE([SH_WITH_MAIL], [1], [internal SMTP mailer])]
[1]	889	)
	890
[412]	891	AC_ARG_ENABLE(suid,
	892	[ --enable-suid allow suid],
	893	[
	894	if test "x${enable_suid}" = xyes; then
	895	AC_DEFINE(SH_ALLOW_SUID, [1], [Define if you want to allow suid execution for samhain])
	896	fi
	897	]
	898	)
	899
[347]	900	AC_ARG_ENABLE(shellexpand,
	901	[ --disable-shellexpand disable shell expansion in config file],
	902	[
	903	if test "x${enable_shellexpand}" = xno; then
	904	:
	905	else
	906	AC_DEFINE(SH_EVAL_SHELL, [1], [Define if you want shell expansion in configuration file])
	907	fi
	908	],
	909	[AC_DEFINE(SH_EVAL_SHELL, [1], [Define if you want shell expansion in configuration file])]
	910	)
	911
[1]	912	AC_ARG_ENABLE(external-scripts,
	913	[ --disable-external-scripts disable interface to external scripts],
	914	[
	915	if test "x${enableval}" = xno; then
	916	:
	917	else
[583]	918	AC_DEFINE([WITH_EXTERNAL], [1], [can use external scripts])
[1]	919	fi
	920	],
[583]	921	[AC_DEFINE([WITH_EXTERNAL], [1], [can use external scripts])]
[1]	922	)
	923
	924	AC_ARG_ENABLE(message-queue,
	925	[ --enable-message-queue[[=MODE]] enable SysV message queue [[MODE=0700]]],
	926	[
[19]	927	if test "x${ac_cv_header_sys_msg_h}" = "xyes"; then
	928	if test "x${enable_message_queue}" = xyes; then
[583]	929	AC_DEFINE([WITH_MESSAGE_QUEUE], [1], [SysV message queue])
	930	AC_DEFINE_UNQUOTED([MESSAGE_QUEUE_MODE], [0700], [mode of message queue])
[19]	931	elif test "x${enable_message_queue}" != xno; then
	932	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
[183]	933	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be numeric])
[19]	934	echo "${enableval}" \| \
	935	grep ['0[0123456789][0123456789][0123456789]'] >/dev/null 2>&1 \|\|
[183]	936	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be an octal (0nnn) number])
[583]	937	AC_DEFINE([WITH_MESSAGE_QUEUE], [1], [SysV message queue])
	938	AC_DEFINE_UNQUOTED([MESSAGE_QUEUE_MODE], [${enable_message_queue}], [mode of message queue])
[19]	939	fi
	940	else
	941	echo
	942	echo "**********************************************"
	943	echo
	944	AC_MSG_WARN([sys/msg.h missing, --enable-message-queue disabled])
	945	echo
	946	echo "**********************************************"
	947	echo
[1]	948	fi
	949	]
	950	)
	951
	952	AC_ARG_WITH(cflags,
	953	[ --with-cflags additional flags to pass to compiler],
	954	[
	955	if test "x$withval" != "xno" ; then
	956	CFLAGS="$CFLAGS $withval"
	957	fi
	958	]
	959	)
	960	AC_ARG_WITH(libs,
	961	[ --with-libs additional libraries to link with],
	962	[
	963	if test "x$withval" != "xno" ; then
	964	LIBS="$LIBS $withval"
	965	fi
	966	]
	967	)
	968
	969
	970	#
	971	# this is from ssh
	972	#
	973	AC_MSG_CHECKING(whether to use libwrap)
	974	LIBWRAP_LIB=""
	975	LIBWRAP_INC=""
	976	AC_ARG_WITH(libwrap,
[18]	977	[ --with-libwrap[=PATH] Compile in libwrap (TCP Wrappers) support],
[1]	978	[ AC_MSG_RESULT($withval)
	979	case "$withval" in
	980	no)
	981	;;
	982	""\|yes)
	983	LIBWRAP_LIB="-lwrap"
	984	;;
	985	*)
	986	if test -d "$withval"; then
	987	LIBWRAP_LIB="-L$withval -lwrap"
	988	changequote(<<, >>)dnl
	989	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
	990	LIBWRAP_INC="-I${sh_libwrap_inc}/include"
	991	changequote([, ])dnl
	992	else
	993	LIBWRAP_LIB="-lwrap"
	994	changequote(<<, >>)dnl
	995	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
	996	LIBWRAP_INC="-I${sh_libwrap_inc}"
	997	changequote([, ])dnl
	998	fi
	999	;;
	1000	esac
	1001	if test -n "$LIBWRAP_LIB"; then
	1002	# OLDLIBS="$LIBS"
	1003	LIBS="$LIBWRAP_LIB $LIBS"
	1004	# OLDCFLAGS="$CFLAGS"
	1005	CFLAGS="$CFLAGS $LIBWRAP_INC"
	1006	AC_CHECK_HEADER(tcpd.h,
	1007	[],
[183]	1008	[ AC_MSG_ERROR([Could not find tcpd.h for libwrap. You need to install tcp_wrappers.]) ])
[583]	1009	AC_LINK_IFELSE(
	1010	[AC_LANG_PROGRAM([[
	1011	#include <tcpd.h>
	1012	]],[[
	1013	int allow_severity;
	1014	int deny_severity;
	1015	hosts_access((struct request_info *) 0); ]])],
	1016	[ AC_DEFINE([SH_USE_LIBWRAP], [1], [Build with tcp wrapper support]) ],
	1017	[ AC_MSG_ERROR([Could not find the libwrap library.]) ]
	1018	)
[1]	1019	fi ],
	1020	AC_MSG_RESULT(no)
	1021	)
	1022
	1023
[129]	1024	dnl
	1025	dnl NETWORK OPTIONS
	1026	dnl
	1027	AC_ARG_ENABLE(network,
	1028	[ --enable-network=[[client\|server]] compile client or server [[no]]],
	1029	[
	1030	if test "x$enable_network" = xclient; then
	1031	mytclient="-DSH_WITH_CLIENT"
	1032	yulectl_prg=
[481]	1033	samhainadmin_prg=
[129]	1034	setpwd_prg="samhain_setpwd"
	1035	sh_main_prg="samhain"
	1036	if test "x${sh_have_gmp}" = xyes
	1037	then
	1038	LIBS="-lgmp $LIBS"
	1039	fi
	1040	dnl AC_CHECK_HEADER(sys/capability.h,
	1041	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
	1042	dnl [sh_use_lcaps="no"])
	1043	elif test "x$enable_network" = xserver; then
	1044	mytclient="-DSH_WITH_SERVER"
	1045	yulectl_prg="yulectl"
[557]	1046	samhainadmin_prg="scripts/samhainadmin-gpg.pl scripts/samhainadmin-sig.pl"
[129]	1047	setpwd_prg="samhain_setpwd"
	1048	sh_main_prg="yule"
	1049	if test "x${sh_have_gmp}" = xyes
	1050	then
	1051	LIBS="-lgmp $LIBS"
	1052	fi
	1053	sh_use_lcaps="undef"
	1054	elif test "x$enable_network" = xno; then
	1055	mytclient="-DSH_STANDALONE"
	1056	yulectl_prg=
[481]	1057	samhainadmin_prg=
[129]	1058	setpwd_prg=
	1059	sh_main_prg="samhain"
	1060	dnl AC_CHECK_HEADER(sys/capability.h,
	1061	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
	1062	dnl [sh_use_lcaps="no"])
	1063	else
[183]	1064	AC_MSG_ERROR([With --enable-network=WHAT, WHAT must be client, server, or no])
[129]	1065	fi
	1066	],
	1067	[
	1068	mytclient="-DSH_STANDALONE"
	1069	setpwd_prg=
	1070	yulectl_prg=
[481]	1071	samhainadmin_prg=
[129]	1072	sh_main_prg="samhain"
	1073	dnl AC_CHECK_HEADER(sys/capability.h,
	1074	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
	1075	dnl [sh_use_lcaps="no"])
	1076	],
	1077	)
	1078
	1079	AC_SUBST(setpwd_prg)
	1080	AC_SUBST(yulectl_prg)
[481]	1081	AC_SUBST(samhainadmin_prg)
[129]	1082	AC_SUBST(sh_main_prg)
	1083	AC_SUBST(mytclient)
	1084
	1085	# needed for the rpm spec
	1086	clmytclient=`echo ${mytclient} \| sed s%\-%%`
	1087	AC_SUBST(clmytclient)
	1088
[171]	1089	sh_no_gcc_static=no
	1090
[124]	1091	AC_ARG_ENABLE(static,
[170]	1092	[ --enable-static enable static linking [[no]]],
[124]	1093	[
	1094	if test x$enable_static = xyes; then
	1095	if test x"$mynetbsd" = xyes
	1096	then
	1097	tmp_LIBS=`echo $LIBS \| sed 's%\-lresolv%%' `
	1098	LIBS="${tmp_LIBS}"
	1099	fi
[294]	1100	if test x"${sh_auparse}" = xyes
	1101	then
	1102	tmp_LIBS=`echo $LIBS \| sed 's%\-lauparse%%' `
	1103	LIBS="${tmp_LIBS}"
[544]	1104	AC_MSG_WARN([--enable-static: no support for Linux Auditing System])
[294]	1105	fi
[481]	1106
	1107	if test "x$GCC" = "xyes";
	1108	then
[544]	1109	if test -n "`echo "$CFLAGS" \| grep "\-flto" 2> /dev/null`"
	1110	then
	1111	AC_MSG_ERROR([--enable-static: not compatible with link-time optimisation])
	1112	fi
[481]	1113	case "$host_os" in
	1114
	1115	solaris)
	1116	AC_MSG_WARN([option --enable-static ignored on Solaris])
	1117	;;
	1118
	1119	*)
[583]	1120	AC_DEFINE([SH_COMPILE_STATIC], [1], [Define if compiling static])
[481]	1121	sh_no_gcc_static=no
	1122	LDFLAGS="$LDFLAGS -static"
	1123	;;
	1124	esac
[124]	1125	else
[583]	1126	AC_DEFINE([SH_COMPILE_STATIC], [1], [Define if compiling static])
[171]	1127	sh_no_gcc_static=yes
[124]	1128	case "$host_os" in
	1129
	1130	aix)
	1131	LDFLAGS="$LDFLAGS -bnso -bI:/lib/syscalls.exp"
	1132	;;
	1133
	1134	hpux)
	1135	LDFLAGS="$LDFLAGS -Wl,-a,archive"
	1136	;;
	1137
	1138	osf)
	1139	LDFLAGS="$LDFLAGS -non_shared"
	1140	;;
	1141
	1142	irix)
	1143	LDFLAGS="$LDFLAGS -non_shared"
	1144	;;
	1145
	1146	sco)
	1147	LDFLAGS="$LDFLAGS -dn"
	1148	;;
	1149
	1150	sun)
	1151	LDFLAGS="$LDFLAGS -Bstatic"
	1152	;;
	1153
	1154	solaris)
	1155	LDFLAGS="$LDFLAGS -Bstatic"
	1156	;;
	1157
	1158	*)
	1159	echo "***********************************************"
	1160	echo "*"
	1161	echo "* Don't know how to enable static linking"
	1162	echo "* with your compiler. Please set the environment"
	1163	echo "* variable LDFLAGS to:"
	1164	echo "* ${LDFLAGS} + the static linking flag"
	1165	echo "* and run configure again"
	1166	echo "*"
	1167	echo "***********************************************"
	1168	;;
	1169
	1170	esac
	1171	fi
	1172	fi
	1173	]
	1174	)
	1175
[138]	1176	if test x"${mytclient}" = x-DSH_STANDALONE -o x"${mytclient}" = x-DSH_WITH_CLIENT;
	1177	then
[168]	1178	dnl For threaded modules
[138]	1179	ACX_PTHREAD
	1180	CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
	1181	LIBS="$PTHREAD_LIBS $LIBS"
[153]	1182	LDFLAGS="$PTHREAD_CFLAGS $LDFLAGS"
[138]	1183	CC="$PTHREAD_CC"
[168]	1184	dnl For MODI_TXT
	1185	CHECK_ZLIB()
[138]	1186	fi
[203]	1187
	1188	if test x$enable_static = xyes; then
	1189	:
	1190	else
	1191	if test x$sh_use_pie = xyes; then
	1192	LDFLAGS="$LDFLAGS $PIE_LDFLAGS"
	1193	CFLAGS="$CFLAGS $PIE_CFLAGS"
	1194	fi
	1195	fi
[439]	1196	AC_CHECK_FUNC(pmap_getmaps,
[583]	1197	AC_DEFINE([HAVE_PMAP_GETMAPS], [1], [Define if pmap_getmaps available]), [],[])
[203]	1198
[138]	1199
[1]	1200	#
	1201	# this is from the snort configure.in
	1202	#
[564]	1203	AC_DEFUN([FAIL_MESSAGE],[
[1]	1204	echo
	1205	echo
	1206	echo "**********************************************"
	1207	echo " ERROR: unable to find" $1
	1208	echo " checked in the following places"
	1209	for i in `echo $2`; do
	1210	echo " $i"
	1211	done
	1212	echo "**********************************************"
	1213	echo
	1214	exit
	1215	])
	1216
	1217	AC_ARG_WITH(libprelude-prefix,
[18]	1218	[ --with-libprelude-prefix=PFX Prefix where libprelude is installed (optional)],
[1]	1219	libprelude_config_prefix="$withval", libprelude_config_prefix="")
	1220
	1221	AC_MSG_CHECKING(whether to use prelude)
	1222	AC_ARG_WITH(prelude,
[18]	1223	[ --with-prelude Prelude IDS support [[no]]],
[1]	1224	[
	1225	if test "x${withval}" = "xno"; then
	1226	AC_MSG_RESULT(no)
	1227	else
	1228	AC_MSG_RESULT(yes)
	1229	if test x$libprelude_config_prefix != x ; then
	1230	if test x${LIBPRELUDE_CONFIG+set} != xset ; then
	1231	LIBPRELUDE_CONFIG=$libprelude_config_prefix/bin/libprelude-config
	1232	fi
	1233	fi
	1234
	1235	AC_PATH_PROG(LIBPRELUDE_CONFIG, libprelude-config, no)
	1236	if test x"$LIBPRELUDE_CONFIG" = "xno" ; then
	1237	HAVE_PRELUDE_CONFIG=no
	1238	else
	1239	HAVE_PRELUDE_CONFIG=yes
	1240	fi
	1241	dnl AC_CHECK_PROG(HAVE_PRELUDE_CONFIG, libprelude-config, yes, no)
	1242	if test "$HAVE_PRELUDE_CONFIG" = "yes"; then
	1243	sh_libprelude_version=`$LIBPRELUDE_CONFIG --version`
	1244	case "$sh_libprelude_version" in
	1245	0.8*)
[183]	1246	AC_MSG_ERROR([You have Libprelude 0.8, which is too old. Version 0.9.6 or higher is required.])
[1]	1247	;;
	1248	*)
[26]	1249	AM_PATH_LIBPRELUDE([0.9.6],
[1]	1250	[
[583]	1251	AC_DEFINE([HAVE_LIBPRELUDE], [1], [Have libprelude])
[1]	1252	CFLAGS="$CFLAGS $LIBPRELUDE_PTHREAD_CFLAGS"
	1253	LDFLAGS="$LDFLAGS $LIBPRELUDE_LDFLAGS"
	1254	LIBS="$LIBS $LIBPRELUDE_LIBS"
	1255	],
	1256	[
[124]	1257	AC_MSG_ERROR([Could not find libprelude (if you are using --enable-static, the static library libprelude.a might be missing).])
[1]	1258	])
	1259	;;
	1260	esac
	1261	else
[124]	1262	AC_MSG_ERROR([Could not find libprelude-config.])
[1]	1263	fi
	1264	fi
	1265	],
	1266	[
	1267	AC_MSG_RESULT(no)
	1268	]
	1269	)
	1270
	1271	#
	1272	# partly based on the snort configure.in
	1273	#
	1274	AC_ARG_WITH(database,
	1275	[ --with-database=[[mysql\|postgresql\|oracle\|odbc]] database support [[no]]],
	1276	[
[544]	1277	if test x"$enable_static" = xyes; then
	1278	AC_MSG_WARN([With --enable-static, --with-database may fail to compile.])
	1279	fi
[1]	1280	if test x"$enable_xml_log" != xyes; then
[183]	1281	AC_MSG_ERROR([With --with-database, --enable-xml-log is required as well.])
[1]	1282	fi
	1283	if test "x${withval}" = "xmysql"; then
[168]	1284	if test "x$zlib_found" = "x"
	1285	then
	1286	CHECK_ZLIB()
	1287	fi
[1]	1288	AC_CHECK_PROG(HAVE_MYSQL_CONFIG, mysql_config, yes, no)
	1289	if test "$HAVE_MYSQL_CONFIG" = "yes"; then
	1290	sh_mysql_libs="`mysql_config --libs`"
	1291	sh_mysql_libs="`eval echo ${sh_mysql_libs}`"
	1292	LIBS="$LIBS ${sh_mysql_libs}"
	1293	sh_mysql_cflags="`mysql_config --cflags`"
	1294	sh_mysql_cflags="`eval echo ${sh_mysql_cflags}`"
	1295	CPPFLAGS="$CPPFLAGS ${sh_mysql_cflags}"
	1296	else
[168]	1297	AC_MSG_CHECKING([for MySQL in /usr /usr/local /usr/local/mysql MYSQL_HOME])
[1]	1298	mysql_directory="/usr /usr/local /usr/local/mysql ${MYSQL_HOME}"
	1299
	1300	for i in $mysql_directory; do
	1301	if test -r $i/include/mysql/mysql.h; then
	1302	MYSQL_DIR=$i
	1303	MYSQL_INC_DIR=$i/include
	1304	# we use AC_CHECK_HEADERS to check for mysql/mysql.h
	1305	fi
	1306	done
	1307	if test -z "$MYSQL_DIR"; then
	1308	for i in $mysql_directory; do
	1309	if test -r $i/include/mysql.h; then
	1310	MYSQL_DIR=$i
	1311	MYSQL_INC_DIR=$i/include
	1312	fi
	1313	done
	1314	fi
	1315
	1316	if test -z "$MYSQL_DIR"; then
	1317	tmp=""
	1318	for i in $mysql_directory; do
	1319	tmp="$tmp $i/include $i/include/mysql"
	1320	done
	1321	FAIL_MESSAGE("mysql headers (mysql.h)", $tmp)
	1322	fi
	1323
	1324	for i in lib lib/mysql; do
	1325	str="$MYSQL_DIR/$i/libmysqlclient.*"
	1326	for j in `echo $str`; do
	1327	if test -r $j; then
	1328	MYSQL_LIB_DIR="$MYSQL_DIR/$i"
	1329	break 2
	1330	fi
	1331	done
	1332	done
	1333
	1334	if test -z "$MYSQL_LIB_DIR"; then
	1335	for ff in $mysql_directory; do
	1336	for i in lib lib/mysql; do
	1337	str="$ff/$i/libmysqlclient.*"
	1338	for j in `echo $str`; do
	1339	if test -r $j; then
	1340	MYSQL_LIB_DIR="$ff/$i"
	1341	break 3
	1342	fi
	1343	done
	1344	done
	1345	done
	1346	fi
	1347
	1348	if test -z "$MYSQL_LIB_DIR"; then
	1349	tmp=""
	1350	for i in $mysql_directory; do
	1351	tmp="$i/lib $i/lib/mysql"
	1352	done
	1353	FAIL_MESSAGE("mysql library libmysqlclient", $tmp)
	1354	fi
	1355
	1356	AC_MSG_RESULT(yes)
	1357	LIBS="$LIBS -L${MYSQL_LIB_DIR} -lmysqlclient"
	1358	# CFLAGS="$CFLAGS -I${MYSQL_INC_DIR}"
	1359	CPPFLAGS="$CPPFLAGS -I${MYSQL_INC_DIR}"
	1360	fi
[583]	1361	AC_DEFINE([WITH_MYSQL], [1], [Use mysql as database])
	1362	AC_DEFINE([WITH_DATABASE], [1], [Use a database])
[168]	1363	if test "x$zlib_found" = "xyes"
[1]	1364	then
	1365	LIBS="$LIBS -lz -lm"
	1366	else
	1367	echo
[168]	1368
	1369	echo " Mysql library was not found or not useable."
	1370	echo " Possible reasons include:"
[101]	1371	echo " - an old, incompatible version compiled from source"
	1372	echo " - on Solaris, libmysql is compiled with the Solaris"
	1373	echo " compiler, thus the mysql_config script provides"
	1374	echo " compiler options unsuitable for gcc (move"
	1375	echo " mysql_config out of your PATH)"
	1376	echo " For other problems, check config.log for the error"
[1]	1377	echo " message from the compiler."
[101]	1378	echo
[168]	1379	echo " If your mysql libraries are installed in an"
[101]	1380	echo " unusual place, use --with-libs=-L/path/to/libdirectory"
[168]	1381	echo " where libdirectory is the directory holding libmysql."
[1]	1382	if test x"$enable_static" = xyes; then
	1383	echo " Note that for compiling a static binary, you need"
	1384	echo " the static libraries, rather than the shared ones."
	1385	fi
	1386	echo
[183]	1387	AC_MSG_ERROR([Could not find libmysql, or it is not useable.])
[1]	1388	fi
	1389	AC_CHECK_HEADERS(mysql/mysql.h)
	1390	elif test "x${withval}" = "xpostgresql"; then
[583]	1391	AC_DEFINE([WITH_POSTGRES], [1], [Use postgres as database])
	1392	AC_DEFINE([WITH_DATABASE], [1], [Use a database])
[1]	1393	#
	1394	PGCONF="no"
	1395	MY_PATH="${PATH}:/usr/local/bin:/usr/local/pgsql/bin"
	1396	OLD_IFS="$IFS"
	1397	IFS=":"
	1398	for ff in ${MY_PATH}
	1399	do
	1400	if test -f "$ff/pg_config"
	1401	then
	1402	PGCONF="$ff/pg_config"
	1403	fi
	1404	done
	1405	IFS="${OLD_IFS}"
	1406	#
	1407	#
	1408	if test "x${PGCONF}" = "xno"
	1409	then
	1410	AC_MSG_CHECKING(for PostgreSQL in /usr/local/pgsql /usr/pgsql /usr/local /usr PGSQL_HOME)
	1411	pgsql_directory="/usr/local/pgsql /usr/pgsql /usr/local /usr ${PGSQL_HOME}"
	1412	for i in $pgsql_directory; do
	1413	if test -r $i/include/pgsql/libpq-fe.h; then
	1414	PGSQL_INC_DIR=$i/include
	1415	PGSQL_DIR=$i
	1416	# use AC_CHECK_HEADERS to check for pgsql/libpq-fe.h
	1417	fi
	1418	done
	1419	if test -z "$PGSQL_DIR"; then
	1420	for i in $pgsql_directory; do
[207]	1421	if test -r $i/include/postgresql/libpq-fe.h; then
	1422	PGSQL_INC_DIR=$i/include
	1423	PGSQL_DIR=$i
	1424	fi
	1425	done
	1426	fi
	1427	if test -z "$PGSQL_DIR"; then
	1428	for i in $pgsql_directory; do
[1]	1429	if test -r $i/include/libpq-fe.h; then
	1430	PGSQL_INC_DIR=$i/include
	1431	PGSQL_DIR=$i
	1432	fi
	1433	done
	1434	fi
	1435
	1436	if test -z "$PGSQL_DIR"; then
	1437	tmp=""
	1438	for i in $pgsql_directory; do
[207]	1439	tmp="$tmp $i/include $i/include/pgsql $i/include/postgresql"
[1]	1440	done
	1441	FAIL_MESSAGE("PostgreSQL header file (libpq-fe.h)", $tmp)
	1442	fi
	1443
[207]	1444	for i in lib lib/pgsql lib/postgresql; do
[1]	1445	str="$PGSQL_DIR/$i/libpq.*"
	1446	for j in `echo $str`; do
	1447	if test -r $j; then
	1448	PGSQL_LIB_DIR="$PGSQL_DIR/$i"
	1449	break 2
	1450	fi
	1451	done
	1452	done
	1453
	1454	if test -z "$PGSQL_LIB_DIR"; then
	1455	for ff in $pgsql_directory; do
[207]	1456	for i in lib lib/pgsql lib/postgresql; do
[1]	1457	str="$ff/$i/libpq.*"
	1458	for j in `echo $str`; do
	1459	if test -r $j; then
	1460	PGSQL_LIB_DIR="$ff/$i"
	1461	break 3
	1462	fi
	1463	done
	1464	done
	1465	done
	1466	fi
	1467
	1468	if test -z "$PGSQL_LIB_DIR"; then
	1469	tmp=""
	1470	for i in $pgsql_directory; do
[207]	1471	tmp="$i/lib $i/lib/pgsql $i/lib/postgresql"
[1]	1472	done
	1473	FAIL_MESSAGE("postgresql library libpq", $tmp)
	1474	fi
	1475
	1476	AC_MSG_RESULT(yes)
	1477
	1478	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
	1479	if test x"$enable_static" = xyes; then
	1480	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lcrypt -lm"
	1481	else
	1482	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
	1483	fi
	1484	# CFLAGS="$CFLAGS -I${PGSQL_INC_DIR}"
	1485	CPPFLAGS="$CPPFLAGS -I${PGSQL_INC_DIR}"
	1486	AC_CHECK_HEADERS(pgsql/libpq-fe.h)
[207]	1487	AC_CHECK_HEADERS(postgresql/libpq-fe.h)
[1]	1488	else
	1489	pg_lib_dir=`${PGCONF} --libdir`
	1490	if test x"$enable_static" = xyes; then
	1491	LIBS="$LIBS -L${pg_lib_dir} -lpq -lcrypt -lm"
	1492	else
	1493	LIBS="$LIBS -L${pg_lib_dir} -lpq -lm"
	1494	fi
	1495	pg_inc_dir=`${PGCONF} --includedir`
	1496	# CFLAGS="$CFLAGS -I${pg_inc_dir}"
	1497	CPPFLAGS="$CPPFLAGS -I${pg_inc_dir}"
	1498	fi
	1499	elif test "x${withval}" = "xodbc"; then
	1500	AC_MSG_CHECKING(for odbc in /usr /usr/local ODBC_HOME)
	1501	odbc_directory="/usr /usr/local"
	1502
	1503	for i in $odbc_directory; do
	1504	if test -r $i/include/sql.h; then
	1505	if test -r $i/include/sqlext.h; then
	1506	if test -r $i/include/sqltypes.h; then
	1507	ODBC_DIR=$i
	1508	ODBC_INC_DIR=$i/include
	1509	fi
	1510	fi
	1511	fi
	1512	done
	1513
	1514	if test -z "$ODBC_DIR"; then
	1515	tmp=""
	1516	for i in $odbc_directory; do
	1517	tmp="$tmp $i/include"
	1518	done
	1519	FAIL_MESSAGE("odbc headers (sql.h sqlext.h sqltypes.h)", $tmp)
	1520	fi
	1521
	1522	str="$ODBC_DIR/lib/libodbc.*"
	1523	for j in `echo $str`; do
	1524	if test -r $j; then
	1525	ODBC_LIB_DIR="$ODBC_DIR/lib"
	1526	ODBC_LIB="odbc"
	1527	fi
	1528	done
	1529
	1530	if test -z "$ODBC_LIB_DIR"; then
	1531	FAIL_MESSAGE("odbc library (libodbc)", "$ODBC_DIR/lib")
	1532	fi
	1533
	1534	AC_MSG_RESULT(yes)
	1535	CPPFLAGS="${CPPFLAGS} -I${ODBC_INC_DIR}"
	1536	LIBS="${LIBS} -L${ODBC_LIB_DIR} -l$ODBC_LIB"
[583]	1537	AC_DEFINE([WITH_ODBC], [1], [Use odbc as database])
	1538	AC_DEFINE([WITH_DATABASE], [1], [Use a database])
[1]	1539
	1540	elif test "x${withval}" = "xoracle"; then
[415]	1541
	1542	AC_MSG_CHECKING(for oracle in ORACLE_HOME /usr/local /usr)
	1543
[1]	1544	oracle_directory="/usr /usr/local ${ORACLE_HOME}"
	1545	for i in $oracle_directory; do
[415]	1546
	1547	ff=`find $i -name oci.h 2>/dev/null \| tail -1`
	1548	if test "x$ff" = "x"; then
	1549	:
	1550	else
	1551	ORACLE_INC=`dirname $ff`
	1552	fi
	1553
	1554	fg=`find $i -name libclntsh.so 2>/dev/null \| tail -1`
	1555	if test "x$fg" = "x"; then
	1556	:
	1557	else
	1558	ORACLE_LIB=`dirname $fg`
	1559	fi
	1560
	1561	done
[1]	1562
[415]	1563	if test -z "$ORACLE_INC"; then
	1564
[1]	1565	tmp=""
	1566	for i in $oracle_directory; do
[415]	1567	tmp="$tmp $i"
[1]	1568	done
[415]	1569	FAIL_MESSAGE("OCI header file (oci.h) please define ORACLE_INC directory where oci.h resides", $tmp)
[1]	1570
[415]	1571	elif test -z "$ORACLE_LIB"; then
	1572
	1573	tmp=""
	1574	for i in $oracle_directory; do
	1575	tmp="$tmp $i"
	1576	done
	1577	FAIL_MESSAGE("OCI library file (libclntsh.so) please define ORACLE_LIB directory where libclntsh.so resides", $tmp)
	1578
	1579	else
	1580
	1581	ORACLE_CPP_FLAGS="-I$ORACLE_INC"
	1582	ORACLE_LIB_DIR="$ORACLE_LIB"
	1583
	1584	AC_MSG_RESULT([$ORACLE_INC $ORACLE_LIB])
	1585
[1]	1586	CPPFLAGS="${CPPFLAGS} ${ORACLE_CPP_FLAGS}"
	1587
	1588	ORACLE_LIBS="-lclntsh"
[415]	1589
	1590	if test -r $ORACLE_LIB_DIR/libnnz11.so; then
	1591	ORACLE_LIBS="${ORACLE_LIBS} -lnnz11"
	1592	fi
[1]	1593	if test -r $ORACLE_LIB_DIR/libwtc9.so; then
	1594	ORACLE_LIBS="${ORACLE_LIBS} -lwtc9"
	1595	elif test -r $ORACLE_LIB_DIR/libwtc8.so; then
	1596	ORACLE_LIBS="${ORACLE_LIBS} -lwtc8"
	1597	fi
	1598	LIBS="${LIBS} -L${ORACLE_LIB_DIR} ${ORACLE_LIBS}"
[45]	1599	if test "x$GCC" != "xyes"; then
	1600	CFLAGS="${CFLAGS} -fno-strict-aliasing"
	1601	fi
[1]	1602	fi
[583]	1603	AC_DEFINE([WITH_ORACLE], [1], [Use oracle as database])
	1604	AC_DEFINE([WITH_DATABASE], [1], [Use a database])
[1]	1605
	1606	else
[183]	1607	AC_MSG_ERROR([Option --with-database=database used with unsupported database ${withval}])
[1]	1608	fi
	1609	]
	1610	)
	1611
	1612	AC_ARG_WITH(console,
[18]	1613	[ --with-console=PATH set path to console device [[/dev/console]]],
[1]	1614	[
	1615	if test "x${withval}" != xno; then
	1616	mycons="$withval"
[583]	1617	AC_DEFINE_UNQUOTED([DEFAULT_CONSOLE], [_("${mycons}")], [] )
[1]	1618	fi
	1619	])
	1620
	1621	AC_ARG_WITH(altconsole,
[18]	1622	[ --with-altconsole=PATH set path to second console device [[none]]],
[1]	1623	[
	1624	if test "x${withval}" != xno; then
	1625	myaltcons="$withval"
	1626	else
	1627	myaltcons="NULL"
	1628	fi
	1629	],
	1630	[myaltcons="NULL"])
[583]	1631	AC_DEFINE_UNQUOTED([ALT_CONSOLE], [_("${myaltcons}")], [] )
[1]	1632
	1633	AC_ARG_WITH(timeserver,
[18]	1634	[ --with-timeserver=HOST set host address for time server [[none]]],
[1]	1635	[
	1636	if test "x${withval}" != xno; then
	1637	mytimeserv="$withval"
[583]	1638	AC_DEFINE([HAVE_NTIME], [1], [use time server])
[1]	1639	else
	1640	mytimeserv="NULL"
	1641	fi
	1642	],
	1643	mytimeserv="NULL")
[583]	1644	AC_DEFINE_UNQUOTED([DEFAULT_TIMESERVER], [_("${mytimeserv}")], [] )
[1]	1645
	1646	AC_ARG_WITH(alttimeserver,
[18]	1647	[ --with-alttimeserver=HOST set address for backup time server [[none]]],
[1]	1648	[
	1649	if test "x${withval}" != xno; then
	1650	myalttimeserv="$withval"
[583]	1651	AC_DEFINE([HAVE_NTIME], [1], [use time server])
[1]	1652	else
	1653	myalttimeserv="NULL"
	1654	fi
	1655	],
	1656	myalttimeserv="NULL")
[583]	1657	AC_DEFINE_UNQUOTED([ALT_TIMESERVER], [_("${myalttimeserv}")], [] )
[1]	1658
	1659	AC_ARG_ENABLE(login-watch,
	1660	[ --enable-login-watch watch for login/logout [[no]]],
	1661	[
	1662	if test "x${enable_login_watch}" = xyes; then
[583]	1663	AC_DEFINE([SH_USE_UTMP], [1], [watch for login/logout])
[1]	1664	fi
	1665	]
	1666	)
	1667
	1668	AC_ARG_ENABLE(mounts-check,
[18]	1669	[ --enable-mounts-check check mount options on filesystems [[no]]],
[1]	1670	[
	1671	if test "x${enable_mounts_check}" = xyes; then
[583]	1672	AC_DEFINE([SH_USE_MOUNTS], [1], [check mount options])
[1]	1673	fi
	1674	]
	1675	)
	1676
[183]	1677	AC_ARG_ENABLE(logfile-monitor,
	1678	[ --enable-logfile-monitor monitor logfiles [[no]]],
	1679	[
	1680	if test "x${enable_logfile_monitor}" = xyes; then
[588]	1681	cflags_store="$CFLAGS"
	1682	CFLAGS="$CFLAGS -DPCRE2_CODE_UNIT_WIDTH=8"
	1683	AC_CHECK_HEADER(pcre2.h,
[183]	1684	[
[583]	1685	AC_DEFINE([USE_LOGFILE_MONITOR], [1], [Define if you want the logfile monitor module.])
[588]	1686	LIBS="-lpcre2-8 $LIBS"
[183]	1687	],
[203]	1688	[
[588]	1689	AC_CHECK_HEADER(pcre2/pcre2.h,
[203]	1690	[
[583]	1691	AC_DEFINE([USE_LOGFILE_MONITOR], [1], [Define if you want the logfile monitor module.])
[588]	1692	AC_DEFINE([HAVE_PCRE2_PCRE2_H], [1], [Define if you have pcre2/pcre2.h.])
	1693	LIBS="-lpcre2-8 $LIBS"
[203]	1694	],
[583]	1695	[AC_MSG_ERROR([The --enable-logfile-monitor option requires libpcre. For compiling the pcre development package is needed.])]
[203]	1696	)
	1697	]
[183]	1698	)
[588]	1699	CFLAGS="$cflags_store"
[183]	1700	fi
	1701	]
	1702	)
	1703
	1704
[68]	1705	AC_ARG_ENABLE(process-check,
	1706	[ --enable-process-check check processes [[no]]],
	1707	[
	1708	if test "x${enable_process_check}" = xyes; then
	1709	AC_CHECK_LIB([rt], [sched_getparam], sh_lrt=yes, sh_lrt=no)
	1710	if test x"$sh_lrt" = xyes; then
	1711	LIBRT=-lrt
	1712	else
	1713	LIBRT=
	1714	fi
	1715	LIBS="$LIBS $LIBRT"
[583]	1716	AC_DEFINE([SH_USE_PROCESSCHECK], [1], [Define if you want to check processes])
[68]	1717	fi
	1718	]
	1719	)
	1720
	1721	AC_ARG_ENABLE(port-check,
	1722	[ --enable-port-check check ports [[no]]],
	1723	[
	1724	if test "x${enable_port_check}" = xyes; then
[583]	1725	AC_DEFINE([SH_USE_PORTCHECK], [1], [Define if you want to check ports])
[68]	1726	fi
	1727	]
	1728	)
	1729
[1]	1730	AC_ARG_ENABLE(userfiles,
[18]	1731	[ --enable-userfiles check for users' config files [[no]]],
[1]	1732	[
	1733	if test "x${enableval}" = "xyes"; then
[583]	1734	AC_DEFINE([SH_USE_USERFILES], [1], [check user files])
[1]	1735	fi
	1736	]
	1737	)
	1738
	1739	AC_ARG_ENABLE(debug,
	1740	[ --enable-debug enable debug options [[no]]],
	1741	[
	1742	if test "x${enable_debug}" = "xyes"; then
	1743	if test "x${mydebugflag}" != "xyes"; then
[583]	1744	AC_DEFINE([MEM_DEBUG], [1], [] )
[1]	1745	fi
[583]	1746	AC_DEFINE([WITH_TPT], [1], [] )
	1747	AC_DEFINE([SL_DEBUG], [1], [] )
	1748	AC_DEFINE([DNMALLOC_CHECKS], [1], [Debug dnmalloc])
	1749	AC_DEFINE([PARANOIA], [0], [Paranoia level for dnmalloc])
	1750	AC_DEFINE([SL_FAIL_ON_ERROR], [1], [] )
[1]	1751	if test "x${myneedg3}" = "xyes"; then
	1752	mydebugdef="-g3"
	1753	else
	1754	mydebugdef="-g"
	1755	fi
	1756	mydebugit="yes"
[579]	1757	elif test "x${enable_debug}" = "xmem"; then
[583]	1758	AC_DEFINE([MEM_DEBUG], [1], [] )
	1759	AC_DEFINE([SH_ABORT_ON_ERROR], [1], [Use abort])
[579]	1760	if test "x${myneedg3}" = "xyes"; then
	1761	mydebugdef="-g3"
	1762	else
	1763	mydebugdef="-g"
	1764	fi
	1765	mydebugit="yes"
[295]	1766	elif test "x${enable_debug}" = "xgdb"; then
[583]	1767	AC_DEFINE([SH_ABORT_ON_ERROR], [1], [Use abort])
[295]	1768	if test "x${myneedg3}" = "xyes"; then
	1769	mydebugdef="-g3"
	1770	else
	1771	mydebugdef="-g"
	1772	fi
	1773	mydebugit="yes"
[1]	1774	fi
	1775	]
	1776	)
	1777	AC_SUBST(mydebugdef)
	1778
[447]	1779	if test "x${enable_asm_ok}" = "xyes"; then
	1780	sh_enable_asm=yes
	1781	else
	1782	sh_enable_asm=no
	1783	fi
[441]	1784	AC_ARG_ENABLE(asm,
	1785	[ --disable-asm disable asm inline code],
	1786	[
	1787	if test "x${enable_asm}" = xno; then
	1788	sh_enable_asm=no
	1789	fi
	1790	]
	1791	)
[295]	1792
[441]	1793	if test "x${samhain_64_asm}" = xyes; then
	1794	if test "x${sh_enable_asm}" = xyes; then
[583]	1795	AC_DEFINE([TIGER_OPT_ASM], [1], [Define to use tiger x86_64 optimized assembly])
[441]	1796	fi
	1797	fi
	1798
[295]	1799	AC_ARG_ENABLE(ipv6,
	1800	[ --disable-ipv6 disable ipv6 support],
	1801	[
	1802	if test "x${enable_ipv6}" = xno; then
[583]	1803	AC_DEFINE([USE_IPV4], [1], [Define if you do not want IPv6])
[295]	1804	fi
	1805	]
	1806	)
	1807
[171]	1808	if test "x${dnmalloc_ok}" = "xyes"; then
	1809	sh_dnmalloc_enabled=yes
	1810	else
	1811	sh_dnmalloc_enabled=no
	1812	fi
	1813
	1814	AC_ARG_ENABLE(dnmalloc,
	1815	[ --disable-dnmalloc disable dnmalloc],
	1816	[
	1817	if test "x${enable_dnmalloc}" = xno; then
	1818	sh_dnmalloc_enabled=no
	1819	else
	1820	sh_dnmalloc_enabled=yes
	1821	fi
	1822	]
	1823	)
	1824
	1825	dnl Handle the problem that static linking against libc.a on Linux
	1826	dnl produces the error "multiple definitions of malloc"
	1827	dnl
	1828	if test "x$sh_dnmalloc_enabled" = "xyes"; then
	1829	if test x$enable_static = xyes; then
	1830	if test "x$sh_no_gcc_static" = "xyes"; then
	1831	sh_dnmalloc_enabled=no
	1832	else
	1833	if test "x$with_gnu_ld" = "xyes"; then
	1834	LDFLAGS="$LDFLAGS -Wl,--allow-multiple-definition"
	1835	else
	1836	sh_dnmalloc_enabled=no
	1837	fi
	1838	fi
	1839	fi
	1840	fi
	1841
	1842	if test "x${sh_dnmalloc_enabled}" = xno; then
[583]	1843	AC_DEFINE([USE_SYSTEM_MALLOC], [1], [Define if you want to use the system malloc])
[171]	1844	fi
	1845
[1]	1846	AC_ARG_ENABLE(ptrace,
	1847	[ --enable-ptrace use anti-debugger options [[no]]],
	1848	[
	1849	if test "x${enable_ptrace}" = xyes; then
	1850	if test "x$mydebugit" != "xyes"; then
[583]	1851	AC_DEFINE([SCREW_IT_UP], [1], [anti debug])
[1]	1852	fi
	1853	fi
	1854	]
	1855	)
	1856
	1857	dnl
	1858	if test "x$GCC" = "xyes"; then
	1859	if test ! -z "`echo "$CFLAGS" \| grep "\-g\ " 2> /dev/null`" ; then
	1860	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
	1861	fi
	1862
[481]	1863	dnl -W is the older name for -Wextra
[1]	1864
[481]	1865
[1]	1866	if test -z "`echo "$CFLAGS" \| grep "\-Wall" 2> /dev/null`" ; then
[481]	1867	case "$host_os" in
	1868	solaris)
	1869	CFLAGS="$CFLAGS -Wall -W -Wno-missing-braces "
	1870	;;
	1871	*)
[544]	1872	CFLAGS="$CFLAGS -Wall -W -Werror=implicit-function-declaration "
[481]	1873	;;
	1874	esac
[1]	1875	fi
	1876
	1877	if test -z "`echo "$CFLAGS" \| grep "\-fstrength\-reduce" 2> /dev/null`"
	1878	then
	1879	if test -z "`echo "$CFLAGS" \| grep "\-fno\-strength\-reduce" 2> /dev/null`"
	1880	then
[474]	1881	GCC_FLAG_CHECK([-fno-strength-reduce])
[1]	1882	fi
	1883	fi
	1884
	1885	if test -z "`echo "$CFLAGS" \| grep "\-fomit\-frame\-pointer" 2> /dev/null`"
	1886	then
	1887	if test -z "`echo "$CFLAGS" \| grep "\-fno\-omit\-frame\-pointer" 2> /dev/null`"
	1888	then
[474]	1889	GCC_FLAG_CHECK([-fno-omit-frame-pointer])
[1]	1890	fi
	1891	fi
	1892
	1893	fi
	1894
[203]	1895	dnl Test whether gcc supports -Wno-empty-body
	1896	dnl Suppresses warnings from glibc pthread_cleanup_pop
	1897	dnl
[474]	1898	GCC_FLAG_CHECK([-Wno-empty-body])
[203]	1899
[474]	1900	dnl This one is for clang
	1901	dnl
	1902	GCC_FLAG_CHECK([-Wno-invalid-source-encoding])
	1903
	1904
[1]	1905	AC_MSG_CHECKING([which random module to use])
	1906	AC_ARG_WITH(rnd,
	1907	[ --with-rnd=[[egd\|unix\|dev\|default]] random number generator [[default]]],
	1908	[use_static_rnd=$withval], [use_static_rnd=default] )
	1909
	1910	if test "$use_static_rnd" = no; then
	1911	use_static_rnd=default
	1912	fi
	1913
	1914	case "$use_static_rnd" in
	1915	egd \| dev \| unix \| default )
	1916	AC_MSG_RESULT($use_static_rnd)
	1917	;;
	1918	* )
	1919	AC_MSG_RESULT([invalid argument])
[183]	1920	AC_MSG_ERROR([Option --with-rnd=module used with unsupported module ${use_static_rnd}])
[1]	1921	;;
	1922	esac
	1923
[583]	1924	dnl for entropy gathering daemon
[1]	1925	AC_ARG_WITH(egd-socket,
	1926	[ --with-egd-socket=NAME EGD socket name],
	1927	egd_socket_name="$withval", egd_socket_name="" )
[583]	1928	AC_DEFINE_UNQUOTED([EGD_SOCKET_NAME], [_("$egd_socket_name")], [] )
[1]	1929
	1930	dnl
	1931	dnl See whether the user wants to disable checking for /dev/random
	1932
	1933	try_dev_random=yes
	1934
	1935	case "$use_static_rnd" in
	1936	dev \| default )
	1937	try_dev_random=yes
	1938	;;
	1939	egd)
[583]	1940	AC_DEFINE([HAVE_EGD_RANDOM], [1], [entropy gathering daemon])
[1]	1941	try_dev_random=no
	1942	;;
	1943	unix)
[583]	1944	AC_DEFINE([HAVE_UNIX_RANDOM], [1], [unix entropy gathering])
[1]	1945	try_dev_random=no
	1946	;;
	1947	esac
	1948
	1949
	1950	if test "x$try_dev_random" = "xyes"; then
	1951	AC_MSG_CHECKING(whether /dev/random exists)
	1952	if test -r "/dev/srandom" && test -c "/dev/srandom"; then
[583]	1953	AC_DEFINE([HAVE_URANDOM], [1], [] )
	1954	AC_DEFINE_UNQUOTED([NAME_OF_DEV_RANDOM], [_("/dev/srandom")], [] )
[1]	1955	AC_MSG_RESULT(yes)
	1956	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
[583]	1957	AC_DEFINE_UNQUOTED([NAME_OF_DEV_URANDOM], [_("/dev/urandom")], [] )
[1]	1958	fi
	1959	else
	1960	if test -r "/dev/random" && test -c "/dev/random"; then
[583]	1961	AC_DEFINE([HAVE_URANDOM], [1], [] )
	1962	AC_DEFINE_UNQUOTED([NAME_OF_DEV_RANDOM], [_("/dev/random")], [] )
[1]	1963	AC_MSG_RESULT(yes)
	1964	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
[583]	1965	AC_DEFINE_UNQUOTED([NAME_OF_DEV_URANDOM], [_("/dev/urandom")], [] )
[1]	1966	fi
	1967	else
	1968	AC_MSG_RESULT(no)
[583]	1969	AC_DEFINE([HAVE_UNIX_RANDOM], [1], [unix entropy gathering])
[1]	1970	fi
	1971	fi
	1972	fi
	1973
	1974
	1975	AC_ARG_ENABLE(udp,
	1976	[ --enable-udp server can listen on port 514/udp [[no]]],
	1977	[
	1978	if test "x${enable_udp}" = xyes; then
[583]	1979	AC_DEFINE([INET_SYSLOG], [1], [server may listen on 514/udp for syslog reports])
[1]	1980	fi
	1981	]
	1982	)
	1983
	1984	myencrypt=yes
	1985	AC_ARG_ENABLE(encrypt,
	1986	[ --disable-encrypt disable client/server encryption],
	1987	[
	1988	if test "x${enable_encrypt}" = xno; then
	1989	myencrypt=no
	1990	fi
	1991	]
	1992	)
	1993	if test "x${myencrypt}" = "xyes"; then
[583]	1994	AC_DEFINE([SH_ENCRYPT], [1], [client/server encryption])
	1995	AC_DEFINE([SH_ENCRYPT_2], [1], [client/server encryption v2])
[1]	1996	fi
	1997
	1998	sh_use_srp_proto=yes
	1999	AC_ARG_ENABLE(srp,
	2000	[ --disable-srp disable SRP for authentication],
	2001	[
	2002	if test "x${enable_srp}" = xno; then
	2003	sh_use_srp_proto=no
	2004	fi
	2005	]
	2006	)
	2007	if test "x${sh_use_srp_proto}" = xyes; then
[583]	2008	AC_DEFINE([USE_SRP_PROTOCOL], [1], [auth with SRP])
[1]	2009	fi
	2010
	2011	AC_ARG_WITH(port,
	2012	[ --with-port=PORT set port to use for TCP/IP connection [[49777]]],
	2013	[
	2014	echo "${withval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
[183]	2015	AC_MSG_ERROR([For --with-port=PORT, PORT must be numeric.])
[1]	2016	myport=${withval}
	2017	],
	2018	[myport="49777"])
[583]	2019	AC_DEFINE_UNQUOTED([SH_DEFAULT_PORT], [${myport}], [TCP port for client/server connection])
[1]	2020	AC_SUBST(myport)
	2021
	2022	AC_ARG_WITH(logserver,
	2023	[ --with-logserver=HOST set host address for log server [[none]]],
	2024	[
	2025	case "$withval" in
	2026	. \| localhost)
	2027	mylogsrv="$withval"
	2028	;;
	2029	*)
	2030	mylogsrv="$withval"
	2031	;;
	2032	esac
	2033	],
	2034	[mylogsrv="NULL"])
[583]	2035	AC_DEFINE_UNQUOTED([DEFAULT_LOGSERVER], [_("${mylogsrv}")], [] )
[1]	2036	AC_SUBST(mylogsrv)
	2037
	2038	AC_ARG_WITH(altlogserver,
	2039	[ --with-altlogserver=HOST set address for backup log server [[none]]],
	2040	[
	2041	case "$withval" in
	2042	. \| localhost)
	2043	myaltlogsrv="$withval"
	2044	;;
	2045	*)
	2046	myaltlogsrv="$withval"
	2047	;;
	2048	esac
	2049	],
	2050	[myaltlogsrv="NULL"])
[583]	2051	AC_DEFINE_UNQUOTED([ALT_LOGSERVER], [_("${myaltlogsrv}")], [] )
[1]	2052
	2053
	2054
	2055	dnl
	2056	dnl STEALTH OPTIONS
	2057	dnl
	2058	nocl_code=
	2059	xor_code=0
	2060	AC_ARG_ENABLE(nocl,
	2061	[ --enable-nocl=PW no CL parsing unless first CL argument is PW],
	2062	[
	2063	if test "x${enableval}" != "x"; then
[583]	2064	AC_DEFINE([SH_STEALTH_NOCL], [1], [restrict CL parsing])
[1]	2065	fi
	2066	if test "x${enableval}" = "xstop" \|\| test "x${enableval}" = "xstart"; then
[183]	2067	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
[1]	2068	fi
	2069	if test "x${enableval}" = "xreload" \|\| test "x${enableval}" = "xrestart"; then
[183]	2070	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
[1]	2071	fi
	2072	if test "x${enableval}" = "xstatus"; then
[183]	2073	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
[1]	2074	fi
	2075	if test "x${enableval}" = "xno"; then
[183]	2076	AC_MSG_ERROR([With --enable-nocl=PW, the use of --enable-nocl=no is ambiguous.])
[1]	2077	fi
	2078	nocl_code="${enable_nocl}"
	2079	]
	2080	)
[583]	2081	AC_DEFINE_UNQUOTED([NOCL_CODE], [_("${nocl_code}")], [code to enable CL parsing] )
[1]	2082	AC_SUBST(nocl_code)
	2083	AC_ARG_ENABLE(stealth,
	2084	[ --enable-stealth=XOR_VAL enable stealth mode [[no]]],
[583]	2085	[
	2086	AC_DEFINE([SH_STEALTH], [1], [enable stealth mode])
[1]	2087	if test "x${enableval}" != "xyes"; then
	2088	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
[183]	2089	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be numeric.])
[1]	2090	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
	2091	if test x"${enableval}" = x0
	2092	then
	2093	:
	2094	else
[183]	2095	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
[1]	2096	fi
	2097	fi
	2098	xor_code="${enable_stealth}"
	2099	else
	2100	xor_code=0
	2101	fi
	2102	stegin_prg="samhain_stealth"
	2103	],
	2104	[
	2105	stegin_prg=
	2106	]
	2107	)
	2108	AC_ARG_ENABLE(micro-stealth,
	2109	[ --enable-micro-stealth=XOR_VAL enable micro stealth mode [[no]]],
	2110	[
[583]	2111	AC_DEFINE([SH_STEALTH], [1], [enable stealth mode])
	2112	AC_DEFINE([SH_STEALTH_MICRO], [1], [enable micro stealth mode])
[1]	2113	if test "x${enableval}" != "xyes"; then
	2114	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
[183]	2115	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be numeric.])
[1]	2116	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
	2117	if test x"${enableval}" = x0
	2118	then
	2119	:
	2120	else
[183]	2121	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
[1]	2122	fi
	2123	fi
	2124	xor_code="${enable_micro_stealth}"
	2125	else
	2126	xor_code=0
	2127	fi
	2128	]
	2129	)
	2130	install_name="samhain"
	2131	INSTALL_NAME="SAMHAIN"
	2132	AC_ARG_ENABLE(install-name,
	2133	[ --enable-install-name=NAME name under which to install [[samhain\|yule]]],
	2134	[
	2135	if test "x${enableval}" != "xyes"; then
	2136	install_name="${enableval}"
	2137	INSTALL_NAME=`echo "${enableval}" \| tr [a-z] [A-Z]`
	2138	else
	2139	install_name="${sh_main_prg}"
	2140	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
	2141	fi
	2142	],
	2143	[
	2144	install_name="${sh_main_prg}"
	2145	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
	2146	]
	2147	)
	2148
	2149
	2150	need_user_install=0
	2151
	2152	AC_ARG_ENABLE(identity,
	2153	[ --enable-identity=USER user if dropping root [[daemon]]],
	2154	[
	2155	if test x"$enableval" = xno; then
	2156	myident="daemon"
	2157	else
	2158	myident="$enableval"
	2159	fi
	2160	echo "${myident}" \| grep ['[^0123456789]'] >/dev/null 2>&1 \|\| \
[183]	2161	AC_MSG_ERROR([With --enable-identity=USER, please supply a username, not a UID.])
[1]	2162	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
	2163	grep "^${myident}:" \| awk -F: '{ print $3; }'`
	2164	if test x"${myident_uid}" = x; then
[183]	2165	AC_MSG_WARN([Option --enable-identity used, user ${myident} will be added upon install.])
[1]	2166	need_user_install=1
	2167	fi
	2168	],
	2169	[
	2170	for myident in ${install_name} daemon nobody; do
	2171	AC_MSG_CHECKING(for user ${myident})
	2172	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
	2173	grep "^${myident}:" \| awk -F: '{ print $3; }'`
	2174	if test x"${myident_uid}" != x; then
	2175	AC_MSG_RESULT(yes)
	2176	break;
	2177	else
	2178	AC_MSG_RESULT(no)
	2179	fi
	2180	done
	2181	if test x"${myident_uid}" = x; then
	2182	myident=${install_name}
	2183	AC_MSG_WARN([--enable-identity: user ${myident} will be added upon install])
	2184	need_user_install=1
	2185	fi
	2186	])
[583]	2187	AC_DEFINE_UNQUOTED([DEFAULT_IDENT], [_("${myident}")], [use this as install name] )
[1]	2188	AC_SUBST(myident)
	2189	AC_SUBST(need_user_install)
	2190
	2191	AC_SUBST(install_name)
	2192	AC_SUBST(INSTALL_NAME)
	2193	AC_SUBST(stegin_prg)
	2194	AC_SUBST(xor_code)
	2195
[583]	2196	AC_DEFINE_UNQUOTED([XOR_CODE], [${xor_code}], [] )
[1]	2197
	2198
	2199	exepack_state0=`${srcdir}/c_random.sh 2>/dev/null`
	2200	exepack_state1=`${srcdir}/c_random.sh 2>/dev/null`
	2201	exepack_state2=`${srcdir}/c_random.sh 2>/dev/null`
	2202
[583]	2203	AC_DEFINE_UNQUOTED([EXEPACK_STATE_0], [${exepack_state0}], [exepack init key p1])
	2204	AC_DEFINE_UNQUOTED([EXEPACK_STATE_1], [${exepack_state1}], [exepack init key p2])
	2205	AC_DEFINE_UNQUOTED([EXEPACK_STATE_2], [${exepack_state2}], [exepack init key p3])
[1]	2206
	2207
	2208	AC_ARG_ENABLE(suidcheck,
	2209	[ --enable-suidcheck check for suid/sgid files [[no]]],
	2210	[
	2211	if test "x${enableval}" = "xyes"; then
[583]	2212	AC_DEFINE([SH_USE_SUIDCHK], [1], [check for suid/sgid files])
[1]	2213	fi
	2214	]
	2215	)
	2216
	2217
	2218	AC_ARG_ENABLE(base,
	2219	[ --enable-base=B1,B2 base key (0...2147483647)],
	2220	[
	2221	AC_MSG_CHECKING(base key setting)
	2222	my_key_A=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $1}'`
	2223	my_key_B=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $2}'`
	2224	AC_MSG_RESULT(${my_key_A} ${my_key_B})
	2225	if test "x${my_key_A}" = x; then
[183]	2226	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid first base key (zero length).])
[1]	2227	fi
	2228	if test "x${my_key_B}" = x; then
[183]	2229	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid second base key (zero length).])
[1]	2230	fi
	2231	echo "${my_key_A}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
[183]	2232	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
[1]	2233	echo "${my_key_B}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
[183]	2234	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
[1]	2235	],
	2236	[
	2237	AC_MSG_CHECKING(base key setting .. collecting entropy)
	2238	my_key_1=`${srcdir}/c_random.sh 2>/dev/null`
	2239	my_key_2=`${srcdir}/c_random.sh 2>/dev/null`
	2240	my_key_3=`${srcdir}/c_random.sh 2>/dev/null`
	2241	my_key_4=`${srcdir}/c_random.sh 2>/dev/null`
	2242	my_key_A=`expr $my_key_1 \* 32767`
	2243	my_key_A=`echo ${my_key_A} \| sed 's%^0*%%g' 2>/dev/null`
	2244	my_key_A=`expr $my_key_A \+ $my_key_2`
	2245	my_key_B=`expr $my_key_3 \* 32767`
	2246	my_key_B=`echo ${my_key_B} \| sed 's%^0*%%g' 2>/dev/null`
	2247	my_key_B=`expr $my_key_B \+ $my_key_4`
	2248	AC_MSG_RESULT(${my_key_A} ${my_key_B})
	2249	]
	2250	)
	2251	AC_SUBST(my_key_A)
	2252	AC_SUBST(my_key_B)
	2253
	2254	dnl low bytes
	2255	my_key_1=`expr $my_key_A \% 65536`
	2256	dnl high bytes
	2257	my_key_2=`expr $my_key_A \/ 65536`
	2258	dnl low bytes
	2259	my_key_3=`expr $my_key_B \% 65536`
	2260	dnl high bytes
	2261	my_key_4=`expr $my_key_B \/ 65536`
	2262
	2263	dnl echo ${my_key_1} ${my_key_2} ${my_key_3} ${my_key_4}
	2264
	2265	dnl touch ./sh_MK.h
	2266	dnl echo "#ifndef SH_MK_H" >> ./sh_MK.h
	2267	dnl echo "#define SH_MK_H" >> ./sh_MK.h
	2268	dnl ${srcdir}/c_bits.sh ${my_key_1} MKB >> ./sh_MK.h
	2269	dnl ${srcdir}/c_bits.sh ${my_key_2} MKA >> ./sh_MK.h
	2270	dnl ${srcdir}/c_bits.sh ${my_key_3} MKC >> ./sh_MK.h
	2271	dnl ${srcdir}/c_bits.sh ${my_key_4} MKD >> ./sh_MK.h
	2272	dnl echo "#endif" >> ./sh_MK.h
	2273	AC_SUBST(my_key_1)
	2274	AC_SUBST(my_key_2)
	2275	AC_SUBST(my_key_3)
	2276	AC_SUBST(my_key_4)
	2277
	2278	AC_MSG_CHECKING(key position)
	2279	pos_tf_1=`${srcdir}/c_random.sh 2>/dev/null`
	2280	pos_tf_2=`expr $pos_tf_1 \% 8`
	2281	pos_tf=`expr $pos_tf_2 + 1`
	2282	AC_MSG_RESULT(${pos_tf})
[583]	2283	AC_DEFINE_UNQUOTED([POS_TF], [${pos_tf}], [] )
[1]	2284
	2285	mykeybase=`echo ${my_key_A},${my_key_B}`
[583]	2286	AC_DEFINE_UNQUOTED([DEFKEY], [${mykeybase}], [] )
[1]	2287	AC_SUBST(mykeybase)
	2288
	2289
	2290	dnl
[550]	2291	dnl Signify/GnuPG options
[1]	2292	dnl
	2293
[550]	2294	AC_ARG_WITH(signify,
	2295	[ --with-signify=PATH use OpenBSD signify to verify database/config [[no]]],
	2296	[
	2297	if test "x${withval}" != "xno"; then
	2298	if test "x${cross_compiling}" = xyes; then
	2299	mysignify="${withval}"
	2300	else
	2301	if test -f "${withval}"; then
	2302	mysignify="${withval}"
	2303	mychk0=`gpg --load-extension tiger --print-md TIGER192 ${withval} 2>/dev/null`
	2304	if test "x$?" != "x0"; then
	2305	mychktest=no
	2306	for sam_pre in ./samhain ./yule /usr/local/sbin/samhain /usr/local/bin/samhain /usr/bin/samhain /usr/sbin/samhain /usr/local/sbin/yule /usr/local/bin/yule /usr/bin/yule /usr/sbin/yule; do
	2307	if test x"${mychktest}" = xyes
	2308	then
	2309	:
	2310	else
	2311	if test -f ${sam_pre}
	2312	then
	2313	echo "use existing ${sam_pre} for signify checksum"
	2314	mychk0=`${sam_pre} -H ${withval} 2>/dev/null`
	2315	if test "x$?" != "x0"; then
	2316	if test "x${nocl_code}" != "x"; then
	2317	mychk0=`echo -H ${withval} \| ${sam_pre} ${nocl_code} 2>/dev/null`
	2318	if test "x$?" != "x0"; then
	2319	:
	2320	else
	2321	mychk="${mychk0}"
	2322	mychktest=yes
	2323	fi
	2324	fi
	2325	else
	2326	mychk="${mychk0}"
	2327	mychktest=yes
	2328	fi
	2329	fi
	2330	fi
	2331	done
	2332	if test x${mychktest} = xno; then
	2333	AC_MSG_WARN([--with-signify: cannot determine TIGER192 checksum of ${withval}])
	2334	echo "-------------------------------------------------------------"
	2335	echo " I cannot find an existing GnuPG or samhain binary to use."
	2336	echo " You can:"
	2337	echo " (a) run make to compile a samhain binary, then repeat"
	2338	echo " ./configure and make"
	2339	echo " (b) ignore the failure. The checksum of the signify binary"
	2340	echo " will not get compiled in, thus allowing an attacker"
	2341	echo " to replace signify with a trojan and subverting the"
	2342	echo " signature verification of configure and database files."
	2343	echo
	2344	echo " PLEASE IGNORE THIS MESSAGE IF YOU ALSO USE --with-checksum"
	2345	echo "-------------------------------------------------------------"
	2346	fi
	2347	else
	2348	mychk="${mychk0}"
	2349	fi
	2350	else
	2351	AC_MSG_ERROR([--with-signify: cannot find signify PATH=${withval}])
	2352	fi
	2353	fi
[583]	2354	AC_DEFINE([WITH_SIG], [1], [Define if signature checking is supported.])
	2355	AC_DEFINE([WITH_SIGNIFY], [1], [Define if using OpenBSD signify for signature checking.])
	2356	AC_DEFINE_UNQUOTED([DEFAULT_SIG_PATH], [_("${mysignify}")], [Define as path to signing binary])
[550]	2357	AC_SUBST(mysignify)
	2358	fi
	2359	]
	2360	)
	2361
	2362	AC_ARG_WITH(pubkey-checksum,
	2363	[ --with-pubkey-checksum=CHKSUM compile in TIGER192 checksum of signify public key [[no]]],
	2364	[
	2365	if test "x${withval}" != "xno"; then
	2366	if test "x${withval}" == "xyes"; then
	2367	AC_MSG_ERROR([Option --with-pubkey-checksum=CHKSUM: checksum CHKSUM of signify public key not specified.])
	2368	else
	2369	if test "x${withval}" = "x"; then
	2370	AC_MSG_ERROR([Option --with-checksum=CHKSUM: checksum CHKSUM of the signify public key not specified.])
	2371	fi
	2372	fi
[583]	2373	AC_DEFINE([HAVE_SIG_KEY_HASH], [1], [Define if signing binary checksum available.])
	2374	AC_DEFINE_UNQUOTED([SIG_KEY_HASH], [_("${withval}")], [Define as the signify public key checksum.] )
[550]	2375	fi
	2376	]
	2377	)
	2378
	2379
[1]	2380	AC_ARG_WITH(gpg,
	2381	[ --with-gpg=PATH use GnuPG to verify database/config [[no]]],
	2382	[
[550]	2383	if test "x${mysignify}" != "x"; then
	2384	AC_MSG_ERROR([--with-gpg: already using --with-signify])
	2385	fi
[1]	2386	if test "x${withval}" != "xno"; then
	2387	if test "x${cross_compiling}" = xyes; then
	2388	mygpg="${withval}"
	2389	else
	2390	if test -f "${withval}"; then
	2391	mygpg="${withval}"
	2392	mychk0=`${withval} --load-extension tiger --print-md TIGER192 ${withval} 2>/dev/null`
	2393	if test "x$?" != "x0"; then
	2394	mychktest=no
	2395	for sampre in ./samhain ./yule /usr/local/sbin/samhain /usr/local/bin/samhain /usr/bin/samhain /usr/sbin/samhain /usr/local/sbin/yule /usr/local/bin/yule /usr/bin/yule /usr/sbin/yule; do
	2396	if test x"${mychktest}" = xyes
	2397	then
	2398	:
	2399	else
	2400	if test -f ${sampre}
	2401	then
	2402	echo "use existing ${sampre} for gpg checksum"
	2403	mychk0=`${sampre} -H ${withval} 2>/dev/null`
	2404	if test "x$?" != "x0"; then
[389]	2405	if test "x${nocl_code}" != "x"; then
	2406	mychk0=`echo -H ${withval} \| ${sampre} ${nocl_code} 2>/dev/null`
	2407	if test "x$?" != "x0"; then
	2408	:
	2409	else
	2410	mychk="${mychk0}"
	2411	mychktest=yes
	2412	fi
	2413	fi
[1]	2414	else
	2415	mychk="${mychk0}"
	2416	mychktest=yes
	2417	fi
	2418	fi
	2419	fi
	2420	done
	2421	if test x${mychktest} = xno; then
	2422	AC_MSG_WARN([--with-gpg: cannot determine TIGER192 checksum of ${withval}])
	2423	echo "-------------------------------------------------------------"
	2424	echo " Your gpg binary does not support the TIGER192 checksum, "
	2425	echo " and I cannot find an existing samhain binary to use instead."
	2426	echo " You can:"
	2427	echo " (a) run make to compile a samhain binary, then repeat"
	2428	echo " ./configure and make"
	2429	echo " (b) ignore the failure. The checksum of the gpg binary"
	2430	echo " will not get compiled in, thus allowing an attacker"
	2431	echo " to replace gpg with a trojan and subverting the gpg"
	2432	echo " signature verification of configure and database files."
[57]	2433	echo
	2434	echo " PLEASE IGNORE THIS MESSAGE IF YOU ALSO USE --with-checksum"
[1]	2435	echo "-------------------------------------------------------------"
	2436	fi
	2437	else
	2438	mychk="${mychk0}"
	2439	fi
	2440	else
[191]	2441	AC_MSG_ERROR([--with-gpg: cannot find GnuPG PATH=${withval}])
[1]	2442	fi
	2443	fi
[583]	2444	AC_DEFINE([WITH_SIG], [1], [Define if signature checking is supported.])
	2445	AC_DEFINE([WITH_GPG], [1], [] )
	2446	AC_DEFINE_UNQUOTED([DEFAULT_SIG_PATH], [_("${mygpg}")], [Define as path to signing binary])
[1]	2447	AC_SUBST(mygpg)
	2448	fi
	2449	]
	2450	)
	2451
[481]	2452
	2453
[191]	2454	AC_ARG_WITH(keyid,
	2455	[ --with-keyid=KEYID specify KeyID (0x...) for GPG/PGP functions [[none]]],
	2456	[
	2457	if test "x${withval}" != "x"; then
	2458	echo "${withval}" \| awk '{if((length($0)==10)\|\|(length($0)==18)){exit 2}else{exit 0}}' &&
	2459	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
	2460	echo "${withval}" \| grep ['[^0][^x][^0123456789ABCDEFabcdef]'] >/dev/null 2>&1 &&
	2461	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
	2462	mykeyid="$withval"
	2463	mykeytag="--default-key"
	2464	else
	2465	mykeyid=""
	2466	mykeytag=""
	2467	fi
	2468	AC_SUBST(mykeyid)
	2469	AC_SUBST(mykeytag)
	2470	]
	2471	)
	2472
[1]	2473	AC_ARG_WITH(checksum,
[550]	2474	[ --with-checksum=CHKSUM compile in checksum of signing binary (e.g. gpg) [[yes]]],
[1]	2475	[
	2476	if test "x${withval}" != "xno"; then
	2477	if test "x${withval}" != "xyes"; then
	2478	if test "x${mychk}" != "x"; then
	2479	if test "x${mychk}" != "x${withval}"; then
[550]	2480	AC_MSG_WARN([--with-checksum: possible signing binary CHKSUM problem])
[1]	2481	AC_MSG_WARN([--with-checksum: CHKSUM=${withval}])
	2482	AC_MSG_WARN([--with-checksum: autodetected=${mychk}])
	2483	fi
	2484	fi
	2485	mychk="${withval}"
	2486	else
	2487	if test "x${mychk}" = "x"; then
[550]	2488	AC_MSG_ERROR([Option --with-checksum=CHKSUM: checksum CHKSUM of the signing binary not specified.])
[1]	2489	fi
	2490	fi
[583]	2491	AC_DEFINE([HAVE_SIG_CHECKSUM], [1], [Define if signing binary checksum available.])
	2492	AC_DEFINE_UNQUOTED([SIG_HASH], [_("${mychk}")], [Define as the signing binary TIGER192 checksum.] )
[550]	2493	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,$.$,\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char sigchk[50];"; for (i=1; i <= m; i++) printf "sigchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "sigchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_sig_chksum.h
[1]	2494	fi
	2495	],
	2496	[
[550]	2497	if test "x${mygpg}" != "x" \|\| test "x${mysignify}" != "x"
	2498	then
[1]	2499	if test "x${mychk}" != "x"; then
[583]	2500	AC_DEFINE([HAVE_SIG_CHECKSUM], [1], [Define if signing binary checksum available.])
	2501	AC_DEFINE_UNQUOTED([SIG_HASH], [_("${mychk}")], [Define as the signing binary TIGER192 checksum.] )
[550]	2502	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,$.$,\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char sigchk[50];"; for (i=1; i <= m; i++) printf "sigchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "sigchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_sig_chksum.h
[1]	2503	fi
	2504	fi
	2505	]
	2506	)
	2507
	2508	AC_ARG_WITH(fp,
	2509	[ --with-fp=FINGERPRINT compile in public key fingerprint [[no]]],
	2510	[
	2511	if test "x${withval}" != "xno"; then
	2512	if test "x${withval}" != "xyes"; then
	2513	withval0=`echo ${withval} \| sed 's% %%g'`
	2514	echo "${withval0}" \| \
	2515	grep ['[^0123456789abcdefABCDEF]'] >/dev/null 2>&1 &&
[183]	2516	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, there is an invalid character(s) in FINGERPRINT=${withval0}.])
[1]	2517	sh_len=`echo ${withval0} \| wc -c \| sed 's% %%g'`
	2518	sh_len0=`expr ${sh_len} \- 1`
	2519	if test "x${sh_len0}" = "x40" \|\| test "x${sh_len0}" = "x32"
	2520	then
	2521	myfp="${withval0}"
[583]	2522	AC_DEFINE([USE_FINGERPRINT], [1], [] )
	2523	AC_DEFINE_UNQUOTED([SH_GPG_FP], [_("${myfp}")], [] )
[1]	2524	echo "${myfp}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,$.$,\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef FINGERPRINT_H"; print "#define FINGERPRINT_H"; printf "char gpgfp[%d];\n", m+1; for (i=1; i <= m; i++) printf "gpgfp[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgfp[%d] = %c%c0%c;\n", m, 39, 92, 39; print "#endif"; }' > sh_gpg_fp.h
	2525	else
[183]	2526	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, the length (${sh_len0}) of FINGERPRINT ${withval0} is incorrect.])
[1]	2527	fi
	2528	else
[183]	2529	AC_MSG_ERROR([For option --with-fp=FINGERPRINT, FINGERPRINT=yes is invalid, please specify a valid key fingerprint.])
[1]	2530	fi
	2531	fi
	2532	])
	2533
	2534
	2535	dnl
	2536	dnl MAIL OPTIONS
	2537	dnl
	2538
	2539	AC_ARG_WITH(recipient,
	2540	[ --with-recipient=ADDR set recipient(s) for e-mail [[none]]],
	2541	[
	2542	withval0=`echo ${withval} \| sed 's%,% %g'`
	2543	for sh_item in ${withval0}
	2544	do
	2545	case ${sh_item} in
[18]	2546	*@localhost)
	2547	;;
[1]	2548	@.*)
	2549	sh_tmp=`echo ${sh_item} \| awk '{ if ($1 ~ [/^[a-zA-Z0-9][a-zA-Z0-9\-_\.]*@[a-zA-Z0-9\-\.]+\.([a-zA-Z]+\|[0-9]+)$/]) {print 1; } else { print 0}}'`
	2550	if test "x${sh_tmp}" != "x1"
	2551	then
[183]	2552	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
[1]	2553	fi
	2554	;;
	2555	*)
[183]	2556	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
[1]	2557	;;
	2558	esac
	2559	done
	2560	myrcp="$withval0"
	2561	],
	2562	[myrcp="NULL"])
[583]	2563	AC_DEFINE_UNQUOTED([DEFAULT_MAILADDRESS], [_("${myrcp}")], [] )
[1]	2564
	2565
	2566	AC_ARG_WITH(sender,
	2567	[ --with-sender=SENDER set sender for e-mail [[daemon]]],
	2568	[
	2569	mysender="${withval}"
	2570	],
	2571	[
	2572	mysender="daemon"
	2573	])
[583]	2574	AC_DEFINE_UNQUOTED([DEFAULT_SENDER], [_("${mysender}")], [] )
[1]	2575
	2576
	2577	dnl
	2578	dnl PATHS
	2579	dnl
	2580
	2581	AC_ARG_WITH(trusted,
	2582	[ --with-trusted=UID Set uid(s) of trusted users [[0]]],
	2583	[
	2584	sh_tmp_test=no
	2585	sh_tmp=`echo ${withval} \| sed 's%,% %g'`
	2586	for sh_tmp1 in ${sh_tmp}
	2587	do
	2588	echo "${sh_tmp1}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
[183]	2589	AC_MSG_ERROR([Option --with-trusted=UID used with non-numeric UID in ${withval}.])
[1]	2590	if test "x${sh_tmp1}" = "x0"
	2591	then
	2592	sh_tmp_test=yes
	2593	fi
	2594	done
	2595	if test "x${sh_tmp_test}" = "xno"
	2596	then
	2597	withval="0,${withval}"
	2598	fi
	2599	mytrust="${withval}"
	2600	],
	2601	[mytrust="0"] )
[583]	2602	AC_DEFINE_UNQUOTED([SL_ALWAYS_TRUSTED], [${mytrust}], [UIDs of trusted users] )
[1]	2603	AC_SUBST(mytrust)
	2604
[302]	2605	mytmpdir=
	2606
[1]	2607	AC_ARG_WITH(tmp-dir,
	2608	[ --with-tmp-dir=PFX set directory for temporary files [[HOME]]],
	2609	[
	2610	if test "x${cross_compiling}" = xyes; then
[302]	2611	mytmpdir="$withval"
[583]	2612	AC_DEFINE_UNQUOTED([SH_TMPDIR], [_("${mytmpdir}")], [] )
[1]	2613	else
	2614	if test -d "${withval}"; then
[302]	2615	mytmpdir="$withval"
[583]	2616	AC_DEFINE_UNQUOTED([SH_TMPDIR], [_("${mytmpdir}")], [] )
[1]	2617	else
[302]	2618	mytmpdir="$withval"
[583]	2619	AC_DEFINE_UNQUOTED([SH_TMPDIR], [_("${mytmpdir}")], [] )
[169]	2620	AC_MSG_WARN([--with-tmp-dir: tmp directory ${withval} does not exist])
[1]	2621	fi
	2622	fi
	2623	]
	2624	)
	2625
[302]	2626	AC_SUBST(mytmpdir)
	2627
	2628
[1]	2629	dnl
	2630	dnl PATH DEFAULTS
	2631	dnl
	2632
	2633	if test "x${ac_prefix_set}" = xyes
	2634	then
	2635	if test "x${exec_prefix}" = xNONE
	2636	then
	2637	exec_prefix="${prefix}"
	2638	fi
	2639
	2640	if test "x${prefix}" = xOPT
	2641	then
	2642	tmp_sbindir="/opt/${install_name}/bin"
	2643	tmp_sysconfdir="/etc/opt"
	2644	tmp_mandir="/opt/${install_name}/man"
	2645	tmp_localstatedir="/var/opt/${install_name}"
	2646	elif test "x${prefix}" = xUSR
	2647	then
	2648	tmp_sbindir="/usr/sbin"
	2649	tmp_sysconfdir="/etc"
	2650	tmp_mandir="/usr/share/man"
	2651	tmp_localstatedir="/var"
	2652	else
	2653	tmp_sbindir=`eval echo ${sbindir}`
	2654	tmp_sysconfdir=`eval echo ${sysconfdir}`
	2655	tmp_mandir=`eval echo ${mandir}`
	2656	tmp_localstatedir=`eval echo ${localstatedir}`
	2657	fi
	2658	else
	2659	prefix=""
	2660	if test "x${ac_exec_prefix_set}" = xyes
	2661	then
	2662	tmp_sbindir=`eval echo ${sbindir}`
	2663	else
	2664	tmp_sbindir="/usr/local/sbin"
	2665	fi
	2666	tmp_sysconfdir="/etc"
	2667	# share/man -> man (FHS) 11.10.2002
	2668	tmp_mandir="/usr/local/man"
	2669	tmp_localstatedir="/var"
	2670	fi
	2671
	2672
	2673	if test "x${ac_sbindir_set}" = xyes
	2674	then
	2675	:
	2676	else
	2677	sbindir=`eval echo ${tmp_sbindir}`
	2678	fi
	2679
	2680
	2681	if test "x${ac_sysconfdir_set}" = xyes
	2682	then
	2683	:
	2684	else
	2685	sysconfdir=`eval echo ${tmp_sysconfdir}`
	2686	fi
	2687
	2688	if test "x${ac_mandir_set}" = xyes
	2689	then
	2690	:
	2691	else
	2692	mandir=`eval echo ${tmp_mandir}`
	2693	fi
	2694
	2695	if test "x${ac_localstatedir_set}" = xyes
	2696	then
	2697	:
	2698	else
	2699	localstatedir=`eval echo ${tmp_localstatedir}`
	2700	fi
	2701
	2702
	2703
	2704	AC_ARG_WITH(config-file,
	2705	[ --with-config-file=FILE configuration file [[/etc/{install_name}rc]]],
	2706	[
	2707	myconffile="${withval}"
	2708	changequote(<<, >>)dnl
	2709	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
	2710	sysconfdir=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
	2711	myrpmconffile="${tmp}"
	2712	changequote([, ])dnl
	2713	],
	2714	[
	2715	myconffile="${sysconfdir}/${install_name}rc"
	2716	myrpmconffile="${myconffile}"
	2717	]
	2718	)
[583]	2719	AC_DEFINE_UNQUOTED([DEFAULT_CONFIGFILE], [_("${myconffile}")], [] )
[1]	2720	AC_SUBST(myconffile)
	2721	AC_SUBST(myrpmconffile)
	2722
	2723	AC_ARG_WITH(log-file,
	2724	[ --with-log-file=FILE path of log file [[/var/log/{install_name}_log]]],
	2725	[
	2726	mylogfile="$withval"
	2727	changequote(<<, >>)dnl
	2728	mylogdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
	2729	changequote([, ])dnl
	2730	],
	2731	[
	2732	if test "x${mytclient}" = "x-DSH_WITH_SERVER"; then
	2733	mylogfile="${localstatedir}/log/${install_name}/${install_name}_log"
	2734	mylogdir="${localstatedir}/log/${install_name}"
	2735	else
	2736	mylogfile="${localstatedir}/log/${install_name}_log"
	2737	mylogdir="${localstatedir}/log"
	2738	fi
	2739	]
	2740	)
[583]	2741	AC_DEFINE_UNQUOTED([DEFAULT_ERRFILE], [_("${mylogfile}")], [] )
	2742	AC_DEFINE_UNQUOTED([DEFAULT_LOGDIR], [_("${mylogdir}")], [] )
[1]	2743	AC_SUBST(mylogfile)
	2744	AC_SUBST(mylogdir)
	2745
	2746	AC_ARG_WITH(pid-file,
	2747	[ --with-pid-file=FILE set path of pid file [[/var/run/{install_name}.pid]]],
	2748	[
	2749	mylockfile="$withval"
	2750	changequote(<<, >>)dnl
	2751	mylockdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
	2752	changequote([, ])dnl
	2753	],
	2754	[
[435]	2755	if test -h /var/run && test -d /run; then
	2756	mylockfile="/run/${install_name}.pid"
	2757	mylockdir="/run"
	2758	else
	2759	mylockfile="${localstatedir}/run/${install_name}.pid"
	2760	mylockdir="${localstatedir}/run"
	2761	fi
[1]	2762	]
	2763	)
[583]	2764	AC_DEFINE_UNQUOTED([DEFAULT_ERRLOCK], [_("${mylockfile}")], [] )
	2765	AC_DEFINE_UNQUOTED([DEFAULT_PIDDIR], [_("${mylockdir}")], [] )
[1]	2766	AC_SUBST(mylockfile)
	2767	AC_SUBST(mylockdir)
	2768
	2769	AC_ARG_WITH(state-dir,
	2770	[ --with-state-dir=PFX set state data directory [[/var/lib/{install_name}]]],
	2771	[
	2772	mydataroot="$withval"
	2773	],
	2774	[
	2775	mydataroot="${localstatedir}/lib/${install_name}"
	2776	]
	2777	)
	2778	AC_ARG_WITH(data-file,
	2779	[ --with-data-file=FILE set path of data file],
	2780	[
	2781	mydatafile="$withval"
	2782	changequote(<<, >>)dnl
	2783	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
	2784	mydataroot=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
	2785	myrpmdatafile="${tmp}"
	2786	changequote([, ])dnl
	2787	if test x"${tmp}" = x
	2788	then
	2789	echo "No local path in data file ${withval}"
	2790	echo "This will not work for initializing the database."
	2791	if test x"${withval}" = xREQ_FROM_SERVER
	2792	then
	2793	echo "It should be REQ_FROM_SERVER/some/local/path"
	2794	fi
[183]	2795	AC_MSG_ERROR([Option --with-data-file=FILE used with invalid path ${withval}.])
[1]	2796	fi
	2797	],
	2798	[
	2799	mydatafile="${mydataroot}/${install_name}_file"
	2800	myrpmdatafile="${mydatafile}"
	2801	])
[583]	2802	AC_DEFINE_UNQUOTED([DEFAULT_DATA_FILE], [_("${mydatafile}")], [] )
[1]	2803	AC_SUBST(mydatafile)
	2804	AC_SUBST(myrpmdatafile)
	2805
[583]	2806	AC_DEFINE_UNQUOTED([DEFAULT_DATAROOT], [_("${mydataroot}")], [] )
[1]	2807	AC_SUBST(mydataroot)
	2808
[583]	2809	AC_DEFINE_UNQUOTED([DEFAULT_QDIR], [_("${mydataroot}/.quarantine")], [] )
[1]	2810	AC_SUBST(myqdir)
	2811
	2812
	2813	AC_ARG_WITH(html-file,
	2814	[ --with-html-file=FILE set path of html file,],
	2815	[
	2816	myhtmlfile="$withval"
	2817	],
	2818	[
	2819	myhtmlfile="${mylogdir}/${install_name}.html"
	2820	])
[583]	2821	AC_DEFINE_UNQUOTED([DEFAULT_HTML_FILE], [_("${myhtmlfile}")], [] )
[1]	2822	AC_SUBST(myhtmlfile)
	2823
	2824
	2825	mydefargs=$ac_configure_args
	2826	# if test -z "`echo "$mydefargs" \| grep "\-\-enable\-static" 2> /dev/null`"
	2827	# then
	2828	# mydefargs="--enable-static $mydefargs"
	2829	# fi
	2830	if test -z "`echo "$mydefargs" \| grep "\-\-enable\-base" 2> /dev/null`"
	2831	then
	2832	mydefargs="--enable-base=${mykeybase} $mydefargs"
	2833	fi
	2834	AC_SUBST(mydefargs)
	2835
	2836
[583]	2837	AC_DEFINE_UNQUOTED([SH_INSTALL_DIR], [_("${sbindir}")], [] )
	2838	AC_DEFINE_UNQUOTED([SH_INSTALL_PATH], [_("${sbindir}/${install_name}")], [] )
	2839	AC_DEFINE_UNQUOTED([SH_INSTALL_NAME], [_("${install_name}")], [] )
[1]	2840
[583]	2841	AH_TOP([
	2842	#ifndef SH_CONFIG_H
	2843	#define SH_CONFIG_H
	2844	])
	2845	AH_BOTTOM([
	2846	#ifdef SH_STEALTH
	2847	char * globber(const char * string);
	2848	#define _(string) globber(string)
	2849	#define N_(string) string
	2850	#else
	2851	#define _(string) string
	2852	#define N_(string) string
	2853	#endif
[1]	2854
[583]	2855	#endif
	2856	])
	2857	AC_CONFIG_HEADERS([config.h])
	2858	AC_CONFIG_FILES([
[1]	2859	Makefile
	2860	samhain-install.sh
	2861	init/samhain.startLSB
	2862	init/samhain.startLinux
[548]	2863	init/samhain.startSystemd
[1]	2864	init/samhain.startGentoo
	2865	init/samhain.startFreeBSD
	2866	init/samhain.startSolaris
	2867	init/samhain.startHPUX
	2868	init/samhain.startIRIX
[71]	2869	init/samhain.startMACOSX
[1]	2870	samhain.spec
	2871	rules.deb
	2872	rules.deb-light
	2873	hp_ux.psf
[412]	2874	scripts/logrotate
[1]	2875	scripts/samhain.spec
	2876	scripts/redhat_i386.client.spec
	2877	scripts/samhain.ebuild
	2878	scripts/samhain.ebuild-light
[550]	2879	scripts/samhainadmin-gpg.pl
	2880	scripts/samhainadmin-sig.pl
[121]	2881	scripts/yuleadmin.pl
[1]	2882	scripts/check_samhain.pl
	2883	deploy.sh
[583]	2884	])
	2885	AC_CONFIG_COMMANDS([stamp-h],[
[1]	2886	echo timestamp > stamp-h
	2887	chmod +x samhain-install.sh
[550]	2888	chmod +x scripts/samhainadmin-gpg.pl
	2889	chmod +x scripts/samhainadmin-sig.pl
[121]	2890	chmod +x scripts/yuleadmin.pl
[1]	2891	chmod +x scripts/check_samhain.pl
	2892	]
	2893	)
[583]	2894	AC_OUTPUT
[1]	2895
	2896	chmod +x deploy.sh
	2897
[550]	2898	if test "x${mysignify}" != x
	2899	then
	2900	cp -a scripts/samhainadmin-sig.pl scripts/samhainadmin.pl
	2901	fi
	2902	if test "x${mygpg}" != x
	2903	then
	2904	cp -a scripts/samhainadmin-gpg.pl scripts/samhainadmin.pl
	2905	fi
	2906
	2907
[1]	2908	if test "x${cross_compiling}" = xyes
	2909	then
	2910
	2911	echo "--------------------------------------------------------------"
	2912	echo
	2913	echo "You are using a cross-compiler. The following system dependent"
	2914	echo "values may have been set to default values that may be"
	2915	echo "incorrect for your target system: "
	2916	echo
	2917	echo "ac_cv_c_bigendian bigendian byte order ${ac_cv_c_bigendian}"
	2918	echo "ac_cv_c_long_double long double exists ${ac_cv_c_long_double}"
	2919	echo "ac_cv_sizeof_char_p size of pointer to char ${ac_cv_sizeof_char_p}"
	2920	echo "ac_cv_sizeof_char_p size of size_t ${ac_cv_sizeof_size_t}"
[97]	2921	echo "ac_cv_sizeof_unsigned_int size of unsigned int ${ac_cv_sizeof_unsigned_int}"
[1]	2922	echo "ac_cv_sizeof_unsigned_long size of unsigned long ${ac_cv_sizeof_unsigned_long}"
	2923	echo "ac_cv_sizeof_unsigned_short size of unsigned short ${ac_cv_sizeof_unsigned_short}"
	2924	echo
	2925	echo "If these values are incorrect, change them in the file "
	2926	echo "config.cache and run configure again."
	2927	echo
	2928	echo "--------------------------------------------------------------"
	2929
	2930	fi
	2931
	2932	if test x${silent} != xyes
	2933	then
	2934
	2935	# A=`eval echo ${sbindir}` ; A=`eval echo ${A}`
	2936	# B=`eval echo ${myconffile}` ; B=`eval echo ${B}`
	2937	# C=`eval echo ${mandir}` ; C=`eval echo ${C}`
	2938	# D=`eval echo ${mylockfile}` ; D=`eval echo ${D}`
	2939	# E=`eval echo ${mylogfile}` ; E=`eval echo ${E}`
	2940	# F=`eval echo ${mydataroot}` ; F=`eval echo ${F}`
	2941
	2942	echo
	2943	echo " samhain has been configured as follows:"
	2944	echo " System binaries: ${sbindir}"
	2945	echo " Configuration file: ${myconffile}"
	2946	echo " Manual pages: ${mandir}"
[481]	2947	echo " Data directory: ${mydataroot}"
	2948	echo " Database file: ${mydatafile}"
[1]	2949	echo " PID file: ${mylockfile}"
	2950	echo " Log file: ${mylogfile}"
	2951	echo " Base key: ${mykeybase}"
[191]	2952	if test x"$mykeyid" != x
	2953	then
	2954	echo " target GPG/PGP key: ${mykeyid}"
	2955	fi
[1]	2956	echo
	2957	if test x"$mytclient" = x"-DSH_WITH_SERVER"
	2958	then
	2959	echo " Selected rc file: yulerc"
	2960	else
	2961	echo " Selected rc file: samhainrc.${selectconfig}"
	2962	fi
	2963
	2964	fi
	2965

Note: See TracBrowser for help on using the repository browser.

Context Navigation

source: trunk/configure.ac@ 589

Download in other formats: