Context Navigation

source: trunk/configure.ac@ 347

Last change on this file since 347 was 347, checked in by katerina, 14 years ago
Fix for ticket #255 (improve protection against 'intruder on server' scenario).
File size: 77.3 KB

Line
1	dnl We want to override the standard _AC_INIT_PARSE_ARGS
2	dnl
3	AU_ALIAS([_AC_INIT_PARSE_ARGS], [SH_INIT_PARSE_ARGS])
4	AU_ALIAS([_AC_INIT_help], [SH_INIT_HELP])
5
6	AC_INIT(src/samhain.c)
7
8
9	AC_ARG_VAR([LIBS], [libraries to link against, e.g. -lintl])
10
11	dnl
12	dnl start
13	dnl
14	AM_INIT_AUTOMAKE(samhain, 2.8.4a)
15	AC_DEFINE([SAMHAIN], 1, [Application is samhain])
16	AC_CANONICAL_HOST
17
18	dnl
19	dnl checks for programs
20	dnl
21
22	AC_PROG_CC
23	if test "$host" != "$build"; then
24	AC_CHECK_PROGS(BUILD_CC, gcc cc)
25	else
26	BUILD_CC=$CC
27	fi
28	AC_PROG_CPP
29	AC_PROG_INSTALL
30	AC_PROG_LN_S
31	AC_PROG_AWK
32	SH_PROG_LD
33	AC_PATH_PROG(cmd_hostname,hostname)
34	AC_SUBST(cmd_hostname)
35	AC_SUBST(BUILD_CC)
36
37	AC_HEADER_STDC
38	dnl
39	dnl first one is a dummy because of an autoconf bug
40	dnl (no HAVE_... for first one)
41	dnl
42	AC_CHECK_HEADERS([sys/ipc.h sys/msg.h sys/uio.h fcntl.h])
43
44
45	AC_MSG_CHECKING([for OS specific issues])
46	mydebugflag=no
47	myneedg3=no
48	uid_cast="signed long"
49	selectconfig=linux
50	mynetbsd=no
51	sh_use_lcaps="undef"
52	dnmalloc_ok=yes
53	sh_use_pie=yes
54
55	case "$host_os" in
56
57	linux)
58	sh_use_lcaps="yes"
59	AC_DEFINE(HOST_IS_LINUX)
60	AC_DEFINE(HAVE_EXT2_IOCTLS)
61	AC_MSG_RESULT([use ioctl to get e2fs flags])
62	case "$host_cpu" in
63	i86)
64	AC_DEFINE(HOST_IS_I86LINUX)
65	;;
66	x86_64)
67	AC_DEFINE([HOST_IS_64LINUX], 1, [Define if host OS is 64bit Linux])
68	;;
69	*)
70	;;
71	esac
72	;;
73
74	osf)
75	AC_DEFINE([HOST_IS_OSF], 1, [Define if host OS is OSF])
76	if test "x$GCC" != "xyes"; then
77	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
78	CFLAGS="$CFLAGS -O2 -assume noaligned_objects"
79	myneedg3=yes
80	AC_MSG_RESULT([compiler needs assume noaligned_objects])
81	else
82	AC_MSG_RESULT([none])
83	fi
84	;;
85
86	cygwin)
87	AC_DEFINE(HOST_IS_CYGWIN)
88	AC_DEFINE([USE_REGISTRY_CHECK], 1, [Define for registry check])
89	dnmalloc_ok=no
90	AC_MSG_RESULT([no trusted paths and no dnmalloc])
91	;;
92
93	darwin)
94	AC_DEFINE(HOST_IS_DARWIN)
95	dnmalloc_ok=no
96	AC_MSG_RESULT([check resource forks, no dnmalloc])
97	;;
98
99	freebsd7)
100	AC_DEFINE(HOST_IS_FREEBSD)
101	selectconfig=freebsd
102	case "$host_cpu" in
103	amd64)
104	sh_use_pie=no
105	dnmalloc_ok=no
106	AC_MSG_RESULT([no dnmalloc and broken compiler toolchain])
107	;;
108	*)
109	AC_MSG_RESULT([none])
110	;;
111	esac
112	;;
113
114	freebsd)
115	AC_DEFINE(HOST_IS_FREEBSD)
116	selectconfig=freebsd
117	AC_MSG_RESULT([none])
118	;;
119
120	openbsd)
121	AC_DEFINE([HOST_IS_OPENBSD], 1, [Define if host OS is OPENBSD])
122	selectconfig=freebsd
123	dnmalloc_ok=no
124	AC_MSG_RESULT([dnmalloc does not work with pthreads])
125	;;
126
127	netbsd)
128	mynetbsd=yes
129	selectconfig=netbsd
130	AC_MSG_RESULT([bug with libresolve])
131	;;
132
133	solaris)
134	selectconfig=solaris
135	AC_DEFINE(HOST_IS_SOLARIS)
136	case "$host_cpu" in
137	i*86)
138	AC_DEFINE(HOST_IS_I86SOLARIS)
139	AC_MSG_RESULT([vsnprintf prototype])
140	;;
141	*)
142	AC_MSG_RESULT([none])
143	;;
144	esac
145	if test "x$GCC" != "xyes"; then
146	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
147	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
148	fi
149	if test -z "`echo "$CFLAGS" \| grep "\-xO2" 2> /dev/null`"; then
150	CFLAGS="$CFLAGS -xO2"
151	fi
152	if test -z "`echo "$CFLAGS" \| grep "\-Xa" 2> /dev/null`"; then
153	CFLAGS="$CFLAGS -Xa"
154	fi
155	LIBS="-lc $LIBS"
156	fi
157	;;
158
159
160	sun)
161	selectconfig=solaris
162	AC_DEFINE(HOST_IS_SOLARIS)
163	AC_MSG_RESULT([none])
164	;;
165
166	aix)
167	AC_DEFINE(HOST_IS_AIX)
168	selectconfig=aix5.2.0
169	uid_cast="unsigned long"
170	if test "x$GCC" != "xyes"; then
171	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
172	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
173	fi
174	if test -z "`echo "$CFLAGS" \| grep "\-O3" 2> /dev/null`"; then
175	CFLAGS="$CFLAGS -O3"
176	fi
177	if test -z "`echo "$CFLAGS" \| grep "\-qstrict" 2> /dev/null`"; then
178	CFLAGS="$CFLAGS -qstrict"
179	fi
180	AC_MSG_RESULT([AIX size_t in the accept call and optimize O3 qstrict])
181	else
182	AC_MSG_RESULT([AIX size_t in the accept call])
183	fi
184	;;
185
186	hpux)
187	AC_MSG_RESULT([HPUX need _XOPEN_SOURCE_EXTENDED for h_errno])
188	AC_DEFINE(HOST_IS_HPUX)
189	if test "x$GCC" != "xyes"; then
190	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
191	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
192	fi
193	if test -z "`echo "$CFLAGS" \| grep "\+O2" 2> /dev/null`"; then
194	CFLAGS="$CFLAGS +O2"
195	fi
196	fi
197	;;
198
199	ultrix)
200	AC_MSG_RESULT([ULTRIX getcwd uses popen])
201	AC_DEFINE(HAVE_BROKEN_GETCWD)
202	;;
203
204	*)
205	AC_MSG_RESULT([none])
206	;;
207	esac
208
209	AC_SUBST(selectconfig)
210	AC_DEFINE_UNQUOTED(UID_CAST, ${uid_cast})
211
212
213
214	dnl *****************************************
215	dnl
216	dnl checks for header files
217	dnl
218	dnl *****************************************
219
220	AC_HEADER_DIRENT
221	AC_HEADER_MAJOR
222	AC_HEADER_TIME
223	dnl used in minilzo.c
224	AC_HEADER_STAT
225	AC_DECL_SYS_SIGLIST
226
227	AC_CHECK_HEADERS(stddef.h libgen.h sched.h malloc.h sys/uio.h \
228	sys/mman.h sys/param.h sys/inotify.h \
229	sys/vfs.h mntent.h \
230	sys/select.h sys/socket.h netinet/in.h \
231	regex.h glob.h \
232	linux/ext2_fs.h linux/fs.h ext2fs/ext2_fs.h asm/segment.h \
233	elf.h linux/elf.h auparse.h \
234	paths.h arpa/nameser.h arpa/nameser_compat.h \
235	rpc/rpcent.h rpc/rpc.h sys/statvfs.h,
236	[],
237	[],
238	[#include <sys/types.h>]
239	)
240
241
242	AC_CHECK_HEADER(utmpx.h, sh_utmpx="yes", sh_utmpx="no")
243	if test "x$sh_utmpx" = "xyes"; then
244	if cat "/usr/include/utmpx.h" 2>&5 \|
245	egrep "WTMPX_FILE" >/dev/null 2>&1; then
246	AC_DEFINE(HAVE_UTMPX_H)
247	AC_EGREP_HEADER(ut_host, utmpx.h, AC_DEFINE(HAVE_UTHOST) )
248	AC_EGREP_HEADER(ut_addr, utmpx.h, AC_DEFINE(HAVE_UTADDR) )
249	AC_EGREP_HEADER(ut_addr_v6, utmpx.h, AC_DEFINE(HAVE_UTADDR_V6) )
250	AC_EGREP_HEADER(ut_xtime,utmpx.h, AC_DEFINE(HAVE_UTXTIME) )
251	AC_EGREP_HEADER(ut_type, utmpx.h, AC_DEFINE(HAVE_UTTYPE) )
252	else
253	AC_EGREP_HEADER(ut_addr, utmp.h, AC_DEFINE(HAVE_UTADDR) )
254	AC_EGREP_HEADER(ut_host, utmp.h, AC_DEFINE(HAVE_UTHOST) )
255	AC_EGREP_HEADER(ut_type, utmp.h, AC_DEFINE(HAVE_UTTYPE) )
256	fi
257	else
258	AC_EGREP_HEADER(ut_host, utmp.h, AC_DEFINE(HAVE_UTHOST) )
259	AC_EGREP_HEADER(ut_type, utmp.h, AC_DEFINE(HAVE_UTTYPE) )
260	fi
261
262	dnl
263	dnl figure out where acct.h lives
264	dnl and whether fields are int/comp_t
265	dnl
266	dnl GNU Accounting Utilities
267	dnl Copyright (C) 1993, 1996, 1997, 2003, 2005 Free Software Foundation, Inc.
268	dnl The GNU Accounting Utilities are free software; you can redistribute
269	dnl them and/or modify them under the terms of the GNU General Public
270	dnl License as published by the Free Software Foundation; either version
271	dnl 2, or (at your option) any later version.
272	dnl
273	AC_CHECK_HEADER(sys/acct.h,
274	AC_DEFINE(HAVE_SYS_ACCT_H, ,
275	[Define if you have the <sys/acct.h> header file.])
276	AC_HEADER_EGREP(ac_utime, sys/acct.h,
277	AC_DEFINE(HAVE_ACUTIME, ,
278	[Define if <sys/acct.h> has the AC_UTIME field.])
279	AC_HEADER_EGREP(comp_t.*ac_utime, sys/acct.h,
280	AC_DEFINE(ACUTIME_COMPT, ,
281	[Define if <sys/acct.h>'s AC_UTIME field is a COMP_T.]))
282	)
283	AC_HEADER_EGREP(ac_stime, sys/acct.h,
284	AC_DEFINE(HAVE_ACSTIME, ,
285	[Define if <sys/acct.h> has the AC_STIME field.])
286	AC_HEADER_EGREP(comp_t.*ac_stime, sys/acct.h,
287	AC_DEFINE(ACSTIME_COMPT, ,
288	[Define if <sys/acct.h>'s AC_STIME field is a COMP_T.]))
289	)
290	AC_HEADER_EGREP(ac_etime, sys/acct.h,
291	AC_DEFINE(HAVE_ACETIME, ,
292	[Define if <sys/acct.h> has the AC_ETIME field.])
293	AC_HEADER_EGREP(comp_t.*ac_etime, sys/acct.h,
294	AC_DEFINE(ACETIME_COMPT, ,
295	[Define if <sys/acct.h>'s AC_ETIME field is a COMP_T.]))
296	)
297	AC_HEADER_EGREP(ac_io, sys/acct.h,
298	AC_DEFINE(HAVE_ACIO, ,
299	[Define if <sys/acct.h> has the AC_IO field.])
300	AC_HEADER_EGREP(comp_t.*ac_io, sys/acct.h,
301	AC_DEFINE(ACIO_COMPT, ,
302	[Define if <sys/acct.h>'s AC_IO field is a COMP_T.]))
303	)
304	AC_HEADER_EGREP(ac_mem, sys/acct.h,
305	AC_DEFINE(HAVE_ACMEM, ,
306	[Define if <sys/acct.h> has the AC_MEM field.])
307	AC_HEADER_EGREP(comp_t.*ac_mem, sys/acct.h,
308	AC_DEFINE(ACMEM_COMPT, ,
309	[Define if <sys/acct.h>'s AC_MEM field is a COMP_T.]))
310	)
311	AC_HEADER_EGREP(ac_minflt, sys/acct.h,
312	AC_HEADER_EGREP(ac_majflt, sys/acct.h,
313	AC_HEADER_EGREP(ac_swaps, sys/acct.h,
314	AC_DEFINE(HAVE_PAGING, ,
315	[Define if <sys/acct.h> has the AC_MINFLT, AC_MAJFLT and AC_SWAPS fields.])
316	AC_HEADER_EGREP(comp_t.*ac_minflt, sys/acct.h,
317	AC_DEFINE(ACMINFLT_COMPT, ,
318	[Define if <sys/acct.h>'s AC_MINFLT field is a COMP_T.]))
319	AC_HEADER_EGREP(comp_t.*ac_mayflt, sys/acct.h,
320	AC_DEFINE(ACMAJFLT_COMPT, ,
321	[Define if <sys/acct.h>'s AC_MAJFLT field is a COMP_T.]))
322	AC_HEADER_EGREP(comp_t.*ac_swaps, sys/acct.h,
323	AC_DEFINE(ACSWAPS_COMPT, ,
324	[Define if <sys/acct.h>'s AC_SWAPS field is a COMP_T.]))
325	)
326	)
327	)
328	AC_HEADER_EGREP(comp_t, sys/acct.h, AC_DEFINE(HAVE_COMP_T, ,
329	[Define if <sys/acct.h> uses the COMP_T type.]))
330	AC_HEADER_EGREP([struct acct_v3], sys/acct.h, AC_DEFINE(HAVE_ACCT_V3, ,
331	[Define if <sys/acct.h> has struct acct_v3.]))
332	)
333
334
335	dnl need to check because AIX 4.2 does not have it
336	dnl
337	AC_CHECK_MEMBERS([struct statfs.f_flags],[],[],[
338	#ifdef HAVE_SYS_TYPES_H
339	#include <sys/types.h>
340	#endif
341	#ifdef HAVE_SYS_STAT_H
342	#include <sys/stat.h>
343	#endif
344	#ifdef HAVE_SYS_VFS_H
345	#include <sys/vfs.h>
346	#endif
347	#ifdef HAVE_UNISTD_H
348	#include <unistd.h>
349	#endif
350	])
351
352	AC_SYS_LARGEFILE
353
354	dnl
355	dnl check whether _POSIX_SOURCE is required
356	dnl
357	SAMHAIN_POSIX
358
359
360	dnl *****************************************
361	dnl
362	dnl Checks for library functions.
363	dnl
364	dnl *****************************************
365	AC_FUNC_STRFTIME
366	AC_CHECK_FUNCS(memcmp memcpy memmove memset getpwent endpwent \
367	gettimeofday strlcat strlcpy strstr strchr strerror strsignal \
368	seteuid setreuid setresuid lstat getwd getcwd ptrace \
369	usleep setpriority getpeereid nanosleep \
370	strptime basename sched_yield hasmntopt \
371	inet_aton gethostbyname setutent setrlimit gethostname uname \
372	getaddrinfo getnameinfo \
373	initgroups getpagesize \
374	ttyname fchmod writev mmap tzset \
375	getsid getpriority getpgid statvfs \
376	strerror_r getgrgid_r getpwnam_r getpwuid_r \
377	gmtime_r localtime_r rand_r readdir_r strtok_r \
378	mincore posix_fadvise inotify_init1
379	)
380	AC_CHECK_FUNC(statfs, AC_DEFINE(HAVE_STATFS) statfs="yes", statfs="no")
381	SL_CHECK_VA_COPY
382	AC_CHECK_FUNCS(vsnprintf, [SL_CHECK_VSNPRINTF])
383	AC_CHECK_MLOCK
384	SH_STRFTIME_Z
385
386	AC_MSG_CHECKING(how to get filesystem type)
387	fstype=no
388	# The order of these tests is important.
389	AC_TRY_CPP([#include <sys/statvfs.h>
390	#include <sys/fstyp.h>], AC_DEFINE(FSTYPE_STATVFS) fstype=SVR4)
391	if test $fstype = no; then
392	AC_TRY_CPP([#include <sys/statfs.h>
393	#include <sys/fstyp.h>], AC_DEFINE(FSTYPE_USG_STATFS) fstype=SVR3)
394	fi
395	if test $fstype = no; then
396	AC_TRY_CPP([#include <sys/statfs.h>
397	#include <sys/vmount.h>], AC_DEFINE(FSTYPE_AIX_STATFS) fstype=AIX)
398	fi
399	if test $fstype = no; then
400	AC_TRY_CPP([#include <mntent.h>], AC_DEFINE(FSTYPE_MNTENT) fstype=4.3BSD)
401	fi
402	if test $fstype = no; then
403	AC_EGREP_HEADER(f_type;, sys/mount.h, AC_DEFINE(FSTYPE_STATFS) fstype=4.4BSD/OSF)
404	fi
405	if test $fstype = no; then
406	AC_TRY_CPP([#include <sys/mount.h>
407	#include <sys/fs_types.h>], AC_DEFINE(FSTYPE_GETMNT) fstype=Ultrix)
408	fi
409	AC_MSG_RESULT($fstype)
410
411	sh_libsocket=
412
413	dnl Solaris needs -lsocket and -lnsl. Unisys system includes
414	dnl gethostbyname in libsocket but needs libnsl for socket.
415	AC_CHECK_LIB(nsl, gethostbyname)
416	AC_CHECK_LIB(socket, socket, ac_need_libsocket=1, ac_try_nsl=1)
417	if test x$ac_need_libsocket = x1; then
418	LIBS="$LIBS -lsocket"
419	sh_libsocket="-lsocket"
420	fi
421	if test x$ac_try_nsl = x1; then
422	AC_CHECK_LIB(nsl, gethostbyname, ac_need_libnsl=1)
423	if test x$ac_need_libnsl = x1
424	then
425	LIBS="$LIBS -lnsl"
426	fi
427	fi
428	AC_SUBST(sh_libsocket)
429
430	AC_CHECK_LIB(socket, res_search, [
431	AC_CHECK_LIB(resolv, dn_skipname)
432	AC_CHECK_LIB(resolv, __dn_skipname)
433	if test x$ac_need_libsocket = x1; then
434	:
435	else
436	LIBS="$LIBS -lsocket"
437	fi
438	], [
439	AC_CHECK_LIB(resolv, res_search, [
440	LIBS="$LIBS -lresolv"
441	], [
442	AC_CHECK_LIB(resolv, dn_skipname)
443	AC_CHECK_LIB(resolv, __dn_skipname)
444	])
445	])
446
447	sh_auparse=no
448
449	if test "x$ac_cv_header_auparse_h" = "xyes"
450	then
451	AC_CHECK_LIB(auparse, auparse_find_field, [
452	LIBS="$LIBS -lauparse"
453	sh_auparse=yes
454	AC_DEFINE(HAVE_AUPARSE_LIB, 1, [Define if you have the auparse lib])
455	])
456	fi
457
458	dnl arguments for accept
459
460	dnl check for Unix98 socklen_t (found on
461	dnl xemacs-patches mailing list, written
462	dnl by Martin Buchholz)
463	dnl
464	dnl On Darwin(MacOSX) socklen_t needs to be
465	dnl an int (see accept man page), on all other
466	dnl unix systems we need a size_t.
467
468	AC_MSG_CHECKING(for socklen_t)
469	AC_TRY_COMPILE([
470	#ifdef HAVE_SYS_TYPES_H
471	#include <sys/types.h>
472	#endif
473	#ifdef HAVE_SYS_SOCKET_H
474	#include <sys/socket.h>
475	#endif
476	socklen_t x;
477	], [],[
478	AC_MSG_RESULT(yes)
479	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[socklen_t], [type of arg3 of accept])
480	AC_DEFINE([HAVE_SOCKLEN_T], 1, [Define if you have socklen_t])
481	],[
482	AC_TRY_COMPILE([
483	#ifdef HAVE_SYS_TYPES_H
484	#include <sys/types.h>
485	#endif
486	#ifdef HAVE_SYS_SOCKET_H
487	#include <sys/socket.h>
488	#endif
489	int accept (int, struct sockaddr , size_t );
490	],[],[
491	AC_MSG_RESULT(size_t)
492	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[size_t], [type of arg3 of accept])
493	], [
494	AC_MSG_RESULT(int)
495	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[int], [type of arg3 of accept])
496	]
497	)
498	])
499
500	dnl *****************************************
501	dnl checks for extended attribute or ACL
502	dnl support
503	dnl *****************************************
504
505	sh_CHECK_XATTR
506	sh_CHECK_POSIX_ACL
507
508	dnl *****************************************
509	dnl checks for typedefs
510	dnl *****************************************
511
512	AC_C_LONG_DOUBLE
513	SH_CHECK_TYPEDEF(long long, HAVE_LONG_LONG)
514	SH_CHECK_TYPEDEF(uint16_t, HAVE_UINT16_T)
515	SH_CHECK_TYPEDEF(uint64_t, HAVE_UINT64_T)
516	if test "$sh_HAVE_LONG_LONG" = "yes"; then
517	AC_CHECK_SIZEOF(unsigned long long, 4)
518	sh_sizeof_unsigned_long_long=`echo "$ac_cv_sizeof_unsigned_long_long" \| sed 's%[^0-9]%%g'`
519	if test "$sh_sizeof_unsigned_long_long" = "8"; then
520	AC_DEFINE(HAVE_LONG_LONG_64, 1, [Define if you have 64bit long long])
521	fi
522	fi
523
524	AC_CHECK_TYPE(ptrdiff_t, long)
525	AC_TYPE_SIZE_T
526	AC_CHECK_SIZEOF(char *, 4)
527	AC_CHECK_SIZEOF(size_t, 4)
528
529	AC_CHECK_SIZEOF(unsigned long, 4)
530	AC_CHECK_SIZEOF(unsigned int, 4)
531	AC_CHECK_SIZEOF(unsigned short, 2)
532
533
534	sh_sizeof_unsigned_long=`echo "$ac_cv_sizeof_unsigned_long" \| sed 's%[^0-9]%%g'`
535	if test "$sh_sizeof_unsigned_long" = "4"; then
536	AC_DEFINE(HAVE_LONG_32)
537	fi
538	if test "$sh_sizeof_unsigned_long" = "8"; then
539	AC_DEFINE(HAVE_LONG_64)
540	fi
541	sh_sizeof_unsigned_int=`echo "$ac_cv_sizeof_unsigned_int" \| sed 's%[^0-9]%%g'`
542	if test "$sh_sizeof_unsigned_int" = "4"; then
543	AC_DEFINE(HAVE_INT_32)
544	fi
545	sh_sizeof_unsigned_short=`echo "$ac_cv_sizeof_unsigned_short" \| sed 's%[^0-9]%%g'`
546	if test "$sh_sizeof_unsigned_short" = "4"; then
547	AC_DEFINE(HAVE_SHORT_32)
548	fi
549
550	dnl
551	dnl check for 64 bit programming environment
552	dnl
553	SAMHAIN_64
554
555
556	dnl *****************************************
557	dnl checks for structures
558	dnl *****************************************
559
560	AC_STRUCT_TM
561
562	dnl
563	dnl from e2fsprogs
564	dnl
565	AC_MSG_CHECKING(whether struct stat has a st_flags field)
566	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags,
567	AC_TRY_COMPILE([#include <sys/stat.h>],
568	[struct stat stat; stat.st_flags = 0;],
569	[e2fsprogs_cv_struct_st_flags=yes],
570	[e2fsprogs_cv_struct_st_flags=no]))
571	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags)
572	if test "$e2fsprogs_cv_struct_st_flags" = yes; then
573	AC_MSG_CHECKING(whether st_flags field is useful)
574	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags_immut,
575	AC_TRY_COMPILE([#include <sys/stat.h>],
576	[struct stat stat; stat.st_flags \|= UF_IMMUTABLE;],
577	[e2fsprogs_cv_struct_st_flags_immut=yes],
578	[e2fsprogs_cv_struct_st_flags_immut=no]))
579	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags_immut)
580	if test "$e2fsprogs_cv_struct_st_flags_immut" = yes; then
581	AC_DEFINE(HAVE_STAT_FLAGS)
582	fi
583	fi
584
585	dnl
586	dnl from dbus
587	dnl
588	AC_MSG_CHECKING(for struct cmsgcred)
589	AC_TRY_COMPILE([
590	#include <sys/types.h>
591	#include <sys/socket.h>
592	],[
593	struct cmsgcred cred;
594
595	cred.cmcred_pid = 0;
596	],sh_have_struct_cmsgcred=yes,sh_have_struct_cmsgcred=no)
597	AC_MSG_RESULT($sh_have_struct_cmsgcred)
598
599	if test x$sh_have_struct_cmsgcred = xyes; then
600	AC_DEFINE(HAVE_STRUCT_CMSGCRED,1,[Have cmsgcred structure])
601	fi
602
603	AC_MSG_CHECKING(for struct fcred)
604	AC_TRY_COMPILE([
605	#include <sys/param.h>
606	#include <sys/socket.h>
607	#include <sys/ucred.h>
608	],[
609	struct fcred sockcred;
610	],sh_have_struct_fcred=yes,sh_have_struct_fcred=no)
611	AC_MSG_RESULT($sh_have_struct_fcred)
612
613	if test x$sh_have_struct_fcred = xyes; then
614	AC_DEFINE(HAVE_STRUCT_FCRED,1,[Have fcred structure])
615	fi
616
617	AC_MSG_CHECKING(for struct sockcred)
618	AC_TRY_COMPILE([
619	#include <sys/param.h>
620	#include <sys/socket.h>
621	#include <sys/ucred.h>
622	],[
623	struct sockcred sockcred;
624	],sh_have_struct_sockcred=yes,sh_have_struct_sockcred=no)
625	AC_MSG_RESULT($sh_have_struct_sockcred)
626
627	if test x$sh_have_struct_sockcred = xyes; then
628	AC_DEFINE(HAVE_STRUCT_SOCKCRED,1,[Have sockcred structure])
629	fi
630
631	AC_MSG_CHECKING(for SO_PEERCRED)
632	AC_TRY_COMPILE([
633	#include <sys/types.h>
634	#include <sys/socket.h>
635	],[
636	int test = SO_PEERCRED;
637	],sh_have_SO_PEERCRED=yes,sh_have_SO_PEERCRED=no)
638	AC_MSG_RESULT($sh_have_SO_PEERCRED)
639
640	if test x$sh_have_SO_PEERCRED = xyes; then
641	AC_DEFINE(HAVE_SO_PEERCRED,1,[Have SO_PEERCRED define])
642	fi
643
644
645	dnl *****************************************
646	dnl checks for compiler characteristics
647	dnl *****************************************
648	AC_C_INLINE
649	AC_C_CONST
650	AC_C_BIGENDIAN
651	AC_C_RESTRICT
652
653	AM_SA_SIGACTION_WORKS
654
655	AC_ARG_ENABLE(ssp,
656	[ --disable-ssp disable the GCC stack protector],
657	[],
658	[enable_ssp=yes;]
659	)
660
661	if test "x$GCC" = "xyes"; then
662
663	if test x"${enable_ssp}" = xno; then
664	:
665	else
666	GCC_STACK_PROTECT_LIB
667	GCC_STACK_PROTECT_CC
668	dnl GCC_STACK_CHECK_CC
669	GCC_PIE_CC
670	fi
671
672	fi
673
674	dnl *****************************************
675	dnl
676	dnl checks for system services
677	dnl
678	dnl *****************************************
679
680	dnl
681	dnl check for /proc filesystem
682	dnl
683	if test -d "/proc/$$"
684	then
685	AC_DEFINE([HAVE_PROCFS],[1],[Define if you have a proc fs])
686	fi
687
688	dnl
689	dnl check for GNU gmp
690	dnl
691	AC_CHECK_LIB(gmp, __gmpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
692	if test "x${sh_have_gmp}" = xno
693	then
694	AC_CHECK_LIB(gmp, mpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
695	fi
696	if test "x${sh_have_gmp}" = xyes
697	then
698	# LIBS="-lgmp $LIBS"
699	AC_DEFINE(HAVE_LIBGMP, 1, [Have GNU gmp library])
700	fi
701	AC_CHECK_HEADERS(gmp.h)
702
703	AC_MSG_CHECKING([for ps])
704	PS=
705	for ff in /usr/ucb /bin /usr/bin; do
706	if test -x "$ff/ps"; then
707	PS="$ff/ps"
708	AC_MSG_RESULT([$PS])
709	break
710	fi
711	done
712	if test x$PS = x
713	then
714	AC_MSG_RESULT([no])
715	AC_MSG_ERROR([Cannot find ps in any of /usr/ucb /bin /usr/bin])
716	fi
717	AC_DEFINE_UNQUOTED([PSPATH], _("$PS"), [Path to ps])
718
719	AC_MSG_CHECKING([how to use ps])
720	$PS ax >/dev/null 2>&1
721	if test $? -eq 0; then
722	case "$host_os" in
723	openbsd)
724	one=`$PS akx \| wc -l`
725	;;
726	*)
727	one=`$PS ax \| wc -l`
728	;;
729	esac
730	else
731	one=0
732	fi
733	$PS -e >/dev/null 2>&1
734	if test $? -eq 0; then
735	two=`$PS -e \| wc -l`
736	else
737	two=0
738	fi
739	if test $one -ge $two
740	then
741	case "$host_os" in
742	openbsd)
743	PSARG="akx"
744	;;
745	*)
746	PSARG="ax"
747	;;
748	esac
749	else
750	PSARG="-e"
751	fi
752	AC_DEFINE_UNQUOTED([PSARG], _("$PSARG"), [Argument for ps])
753	AC_MSG_RESULT([$PS $PSARG])
754
755	dnl *****************************************
756	dnl
757	dnl enable features
758	dnl
759	dnl *****************************************
760
761	AC_ARG_ENABLE(db-reload,
762	[ --enable-db-reload enable database reload on SIGHUP [[no]]],
763	[
764	if test "x${enable_db_reload}" = xyes; then
765	AC_DEFINE(RELOAD_DATABASE)
766	fi
767	]
768	)
769
770	AC_ARG_ENABLE(xml-log,
771	[ --enable-xml-log enable XML logfile format [[no]]],
772	[
773	if test "x${enable_xml_log}" = xyes; then
774	AC_DEFINE(SH_USE_XML)
775	fi
776	]
777	)
778
779
780	AC_ARG_ENABLE(mail,
781	[ --disable-mail disable the internal SMTP mailer],
782	[
783	if test "x${enable_mail}" = xno; then
784	:
785	else
786	AC_DEFINE(SH_WITH_MAIL)
787	fi
788	],
789	[AC_DEFINE(SH_WITH_MAIL)]
790	)
791
792	AC_ARG_ENABLE(shellexpand,
793	[ --disable-shellexpand disable shell expansion in config file],
794	[
795	if test "x${enable_shellexpand}" = xno; then
796	:
797	else
798	AC_DEFINE(SH_EVAL_SHELL, [1], [Define if you want shell expansion in configuration file])
799	fi
800	],
801	[AC_DEFINE(SH_EVAL_SHELL, [1], [Define if you want shell expansion in configuration file])]
802	)
803
804	AC_ARG_ENABLE(external-scripts,
805	[ --disable-external-scripts disable interface to external scripts],
806	[
807	if test "x${enableval}" = xno; then
808	:
809	else
810	AC_DEFINE(WITH_EXTERNAL)
811	fi
812	],
813	[AC_DEFINE(WITH_EXTERNAL)]
814	)
815
816	AC_ARG_ENABLE(message-queue,
817	[ --enable-message-queue[[=MODE]] enable SysV message queue [[MODE=0700]]],
818	[
819	if test "x${ac_cv_header_sys_msg_h}" = "xyes"; then
820	if test "x${enable_message_queue}" = xyes; then
821	AC_DEFINE(WITH_MESSAGE_QUEUE)
822	AC_DEFINE_UNQUOTED(MESSAGE_QUEUE_MODE, 0700)
823	elif test "x${enable_message_queue}" != xno; then
824	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
825	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be numeric])
826	echo "${enableval}" \| \
827	grep ['0[0123456789][0123456789][0123456789]'] >/dev/null 2>&1 \|\|
828	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be an octal (0nnn) number])
829	AC_DEFINE(WITH_MESSAGE_QUEUE)
830	AC_DEFINE_UNQUOTED(MESSAGE_QUEUE_MODE, ${enable_message_queue})
831	fi
832	else
833	echo
834	echo "**********************************************"
835	echo
836	AC_MSG_WARN([sys/msg.h missing, --enable-message-queue disabled])
837	echo
838	echo "**********************************************"
839	echo
840	fi
841	]
842	)
843
844	AC_ARG_WITH(cflags,
845	[ --with-cflags additional flags to pass to compiler],
846	[
847	if test "x$withval" != "xno" ; then
848	CFLAGS="$CFLAGS $withval"
849	fi
850	]
851	)
852	AC_ARG_WITH(libs,
853	[ --with-libs additional libraries to link with],
854	[
855	if test "x$withval" != "xno" ; then
856	LIBS="$LIBS $withval"
857	fi
858	]
859	)
860
861
862	#
863	# this is from ssh
864	#
865	AC_MSG_CHECKING(whether to use libwrap)
866	LIBWRAP_LIB=""
867	LIBWRAP_INC=""
868	AC_ARG_WITH(libwrap,
869	[ --with-libwrap[=PATH] Compile in libwrap (TCP Wrappers) support],
870	[ AC_MSG_RESULT($withval)
871	case "$withval" in
872	no)
873	;;
874	""\|yes)
875	LIBWRAP_LIB="-lwrap"
876	;;
877	*)
878	if test -d "$withval"; then
879	LIBWRAP_LIB="-L$withval -lwrap"
880	changequote(<<, >>)dnl
881	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
882	LIBWRAP_INC="-I${sh_libwrap_inc}/include"
883	changequote([, ])dnl
884	else
885	LIBWRAP_LIB="-lwrap"
886	changequote(<<, >>)dnl
887	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
888	LIBWRAP_INC="-I${sh_libwrap_inc}"
889	changequote([, ])dnl
890	fi
891	;;
892	esac
893	if test -n "$LIBWRAP_LIB"; then
894	# OLDLIBS="$LIBS"
895	LIBS="$LIBWRAP_LIB $LIBS"
896	# OLDCFLAGS="$CFLAGS"
897	CFLAGS="$CFLAGS $LIBWRAP_INC"
898	AC_CHECK_HEADER(tcpd.h,
899	[],
900	[ AC_MSG_ERROR([Could not find tcpd.h for libwrap. You need to install tcp_wrappers.]) ])
901	AC_TRY_LINK([ #include <tcpd.h>
902	int allow_severity; int deny_severity; ],
903	[ hosts_access((struct request_info *) 0); ],
904	[ AC_DEFINE(SH_USE_LIBWRAP,1,[Build with tcp wrapper support]) ],
905	[ AC_MSG_ERROR([Could not find the libwrap library.]) ])
906	fi ],
907	AC_MSG_RESULT(no)
908	)
909
910
911	dnl
912	dnl NETWORK OPTIONS
913	dnl
914	AC_ARG_ENABLE(network,
915	[ --enable-network=[[client\|server]] compile client or server [[no]]],
916	[
917	if test "x$enable_network" = xclient; then
918	mytclient="-DSH_WITH_CLIENT"
919	yulectl_prg=
920	setpwd_prg="samhain_setpwd"
921	sh_main_prg="samhain"
922	if test "x${sh_have_gmp}" = xyes
923	then
924	LIBS="-lgmp $LIBS"
925	fi
926	dnl AC_CHECK_HEADER(sys/capability.h,
927	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
928	dnl [sh_use_lcaps="no"])
929	elif test "x$enable_network" = xserver; then
930	mytclient="-DSH_WITH_SERVER"
931	yulectl_prg="yulectl"
932	setpwd_prg="samhain_setpwd"
933	sh_main_prg="yule"
934	if test "x${sh_have_gmp}" = xyes
935	then
936	LIBS="-lgmp $LIBS"
937	fi
938	sh_use_lcaps="undef"
939	elif test "x$enable_network" = xno; then
940	mytclient="-DSH_STANDALONE"
941	yulectl_prg=
942	setpwd_prg=
943	sh_main_prg="samhain"
944	dnl AC_CHECK_HEADER(sys/capability.h,
945	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
946	dnl [sh_use_lcaps="no"])
947	else
948	AC_MSG_ERROR([With --enable-network=WHAT, WHAT must be client, server, or no])
949	fi
950	],
951	[
952	mytclient="-DSH_STANDALONE"
953	setpwd_prg=
954	yulectl_prg=
955	sh_main_prg="samhain"
956	dnl AC_CHECK_HEADER(sys/capability.h,
957	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
958	dnl [sh_use_lcaps="no"])
959	],
960	)
961
962	AC_SUBST(setpwd_prg)
963	AC_SUBST(yulectl_prg)
964	AC_SUBST(sh_main_prg)
965	AC_SUBST(mytclient)
966
967	# needed for the rpm spec
968	clmytclient=`echo ${mytclient} \| sed s%\-%%`
969	AC_SUBST(clmytclient)
970
971	sh_no_gcc_static=no
972
973	AC_ARG_ENABLE(static,
974	[ --enable-static enable static linking [[no]]],
975	[
976	if test x$enable_static = xyes; then
977	if test x"$mynetbsd" = xyes
978	then
979	tmp_LIBS=`echo $LIBS \| sed 's%\-lresolv%%' `
980	LIBS="${tmp_LIBS}"
981	fi
982	if test x"${sh_auparse}" = xyes
983	then
984	tmp_LIBS=`echo $LIBS \| sed 's%\-lauparse%%' `
985	LIBS="${tmp_LIBS}"
986	fi
987	AC_DEFINE(SH_COMPILE_STATIC, 1, [Define if compiling static])
988	if test "x$GCC" = "xyes"; then
989	sh_no_gcc_static=no
990	LDFLAGS="$LDFLAGS -static"
991	else
992	sh_no_gcc_static=yes
993	case "$host_os" in
994
995	aix)
996	LDFLAGS="$LDFLAGS -bnso -bI:/lib/syscalls.exp"
997	;;
998
999	hpux)
1000	LDFLAGS="$LDFLAGS -Wl,-a,archive"
1001	;;
1002
1003	osf)
1004	LDFLAGS="$LDFLAGS -non_shared"
1005	;;
1006
1007	irix)
1008	LDFLAGS="$LDFLAGS -non_shared"
1009	;;
1010
1011	sco)
1012	LDFLAGS="$LDFLAGS -dn"
1013	;;
1014
1015	sun)
1016	LDFLAGS="$LDFLAGS -Bstatic"
1017	;;
1018
1019	solaris)
1020	LDFLAGS="$LDFLAGS -Bstatic"
1021	;;
1022
1023	*)
1024	echo "***********************************************"
1025	echo "*"
1026	echo "* Don't know how to enable static linking"
1027	echo "* with your compiler. Please set the environment"
1028	echo "* variable LDFLAGS to:"
1029	echo "* ${LDFLAGS} + the static linking flag"
1030	echo "* and run configure again"
1031	echo "*"
1032	echo "***********************************************"
1033	;;
1034
1035	esac
1036	fi
1037	fi
1038	]
1039	)
1040
1041	if test x"${mytclient}" = x-DSH_STANDALONE -o x"${mytclient}" = x-DSH_WITH_CLIENT;
1042	then
1043	dnl For threaded modules
1044	ACX_PTHREAD
1045	CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
1046	LIBS="$PTHREAD_LIBS $LIBS"
1047	LDFLAGS="$PTHREAD_CFLAGS $LDFLAGS"
1048	CC="$PTHREAD_CC"
1049	dnl For MODI_TXT
1050	CHECK_ZLIB()
1051	fi
1052
1053	if test x$enable_static = xyes; then
1054	:
1055	else
1056	if test x$sh_use_pie = xyes; then
1057	LDFLAGS="$LDFLAGS $PIE_LDFLAGS"
1058	CFLAGS="$CFLAGS $PIE_CFLAGS"
1059	fi
1060	fi
1061
1062
1063	#
1064	# this is from the snort configure.in
1065	#
1066	AC_DEFUN(FAIL_MESSAGE,[
1067	echo
1068	echo
1069	echo "**********************************************"
1070	echo " ERROR: unable to find" $1
1071	echo " checked in the following places"
1072	for i in `echo $2`; do
1073	echo " $i"
1074	done
1075	echo "**********************************************"
1076	echo
1077	exit
1078	])
1079
1080	AC_ARG_WITH(libprelude-prefix,
1081	[ --with-libprelude-prefix=PFX Prefix where libprelude is installed (optional)],
1082	libprelude_config_prefix="$withval", libprelude_config_prefix="")
1083
1084	AC_MSG_CHECKING(whether to use prelude)
1085	AC_ARG_WITH(prelude,
1086	[ --with-prelude Prelude IDS support [[no]]],
1087	[
1088	if test "x${withval}" = "xno"; then
1089	AC_MSG_RESULT(no)
1090	else
1091	AC_MSG_RESULT(yes)
1092	if test x$libprelude_config_prefix != x ; then
1093	if test x${LIBPRELUDE_CONFIG+set} != xset ; then
1094	LIBPRELUDE_CONFIG=$libprelude_config_prefix/bin/libprelude-config
1095	fi
1096	fi
1097
1098	AC_PATH_PROG(LIBPRELUDE_CONFIG, libprelude-config, no)
1099	if test x"$LIBPRELUDE_CONFIG" = "xno" ; then
1100	HAVE_PRELUDE_CONFIG=no
1101	else
1102	HAVE_PRELUDE_CONFIG=yes
1103	fi
1104	dnl AC_CHECK_PROG(HAVE_PRELUDE_CONFIG, libprelude-config, yes, no)
1105	if test "$HAVE_PRELUDE_CONFIG" = "yes"; then
1106	sh_libprelude_version=`$LIBPRELUDE_CONFIG --version`
1107	case "$sh_libprelude_version" in
1108	0.8*)
1109	AC_MSG_ERROR([You have Libprelude 0.8, which is too old. Version 0.9.6 or higher is required.])
1110	;;
1111	*)
1112	AM_PATH_LIBPRELUDE([0.9.6],
1113	[
1114	AC_DEFINE(HAVE_LIBPRELUDE,1,[Have libprelude])
1115	CFLAGS="$CFLAGS $LIBPRELUDE_PTHREAD_CFLAGS"
1116	LDFLAGS="$LDFLAGS $LIBPRELUDE_LDFLAGS"
1117	LIBS="$LIBS $LIBPRELUDE_LIBS"
1118	],
1119	[
1120	AC_MSG_ERROR([Could not find libprelude (if you are using --enable-static, the static library libprelude.a might be missing).])
1121	])
1122	;;
1123	esac
1124	else
1125	AC_MSG_ERROR([Could not find libprelude-config.])
1126	fi
1127	fi
1128	],
1129	[
1130	AC_MSG_RESULT(no)
1131	]
1132	)
1133
1134	#
1135	# partly based on the snort configure.in
1136	#
1137	AC_ARG_WITH(database,
1138	[ --with-database=[[mysql\|postgresql\|oracle\|odbc]] database support [[no]]],
1139	[
1140	if test x"$enable_xml_log" != xyes; then
1141	AC_MSG_ERROR([With --with-database, --enable-xml-log is required as well.])
1142	fi
1143	if test "x${withval}" = "xmysql"; then
1144	if test "x$zlib_found" = "x"
1145	then
1146	CHECK_ZLIB()
1147	fi
1148	AC_CHECK_PROG(HAVE_MYSQL_CONFIG, mysql_config, yes, no)
1149	if test "$HAVE_MYSQL_CONFIG" = "yes"; then
1150	sh_mysql_libs="`mysql_config --libs`"
1151	sh_mysql_libs="`eval echo ${sh_mysql_libs}`"
1152	LIBS="$LIBS ${sh_mysql_libs}"
1153	sh_mysql_cflags="`mysql_config --cflags`"
1154	sh_mysql_cflags="`eval echo ${sh_mysql_cflags}`"
1155	CPPFLAGS="$CPPFLAGS ${sh_mysql_cflags}"
1156	else
1157	AC_MSG_CHECKING([for MySQL in /usr /usr/local /usr/local/mysql MYSQL_HOME])
1158	mysql_directory="/usr /usr/local /usr/local/mysql ${MYSQL_HOME}"
1159
1160	for i in $mysql_directory; do
1161	if test -r $i/include/mysql/mysql.h; then
1162	MYSQL_DIR=$i
1163	MYSQL_INC_DIR=$i/include
1164	# we use AC_CHECK_HEADERS to check for mysql/mysql.h
1165	fi
1166	done
1167	if test -z "$MYSQL_DIR"; then
1168	for i in $mysql_directory; do
1169	if test -r $i/include/mysql.h; then
1170	MYSQL_DIR=$i
1171	MYSQL_INC_DIR=$i/include
1172	fi
1173	done
1174	fi
1175
1176	if test -z "$MYSQL_DIR"; then
1177	tmp=""
1178	for i in $mysql_directory; do
1179	tmp="$tmp $i/include $i/include/mysql"
1180	done
1181	FAIL_MESSAGE("mysql headers (mysql.h)", $tmp)
1182	fi
1183
1184	for i in lib lib/mysql; do
1185	str="$MYSQL_DIR/$i/libmysqlclient.*"
1186	for j in `echo $str`; do
1187	if test -r $j; then
1188	MYSQL_LIB_DIR="$MYSQL_DIR/$i"
1189	break 2
1190	fi
1191	done
1192	done
1193
1194	if test -z "$MYSQL_LIB_DIR"; then
1195	for ff in $mysql_directory; do
1196	for i in lib lib/mysql; do
1197	str="$ff/$i/libmysqlclient.*"
1198	for j in `echo $str`; do
1199	if test -r $j; then
1200	MYSQL_LIB_DIR="$ff/$i"
1201	break 3
1202	fi
1203	done
1204	done
1205	done
1206	fi
1207
1208	if test -z "$MYSQL_LIB_DIR"; then
1209	tmp=""
1210	for i in $mysql_directory; do
1211	tmp="$i/lib $i/lib/mysql"
1212	done
1213	FAIL_MESSAGE("mysql library libmysqlclient", $tmp)
1214	fi
1215
1216	AC_MSG_RESULT(yes)
1217	LIBS="$LIBS -L${MYSQL_LIB_DIR} -lmysqlclient"
1218	# CFLAGS="$CFLAGS -I${MYSQL_INC_DIR}"
1219	CPPFLAGS="$CPPFLAGS -I${MYSQL_INC_DIR}"
1220	fi
1221	AC_DEFINE(WITH_MYSQL)
1222	AC_DEFINE(WITH_DATABASE)
1223	if test "x$zlib_found" = "xyes"
1224	then
1225	LIBS="$LIBS -lz -lm"
1226	else
1227	echo
1228
1229	echo " Mysql library was not found or not useable."
1230	echo " Possible reasons include:"
1231	echo " - an old, incompatible version compiled from source"
1232	echo " - on Solaris, libmysql is compiled with the Solaris"
1233	echo " compiler, thus the mysql_config script provides"
1234	echo " compiler options unsuitable for gcc (move"
1235	echo " mysql_config out of your PATH)"
1236	echo " For other problems, check config.log for the error"
1237	echo " message from the compiler."
1238	echo
1239	echo " If your mysql libraries are installed in an"
1240	echo " unusual place, use --with-libs=-L/path/to/libdirectory"
1241	echo " where libdirectory is the directory holding libmysql."
1242	if test x"$enable_static" = xyes; then
1243	echo " Note that for compiling a static binary, you need"
1244	echo " the static libraries, rather than the shared ones."
1245	fi
1246	echo
1247	AC_MSG_ERROR([Could not find libmysql, or it is not useable.])
1248	fi
1249	AC_CHECK_HEADERS(mysql/mysql.h)
1250	elif test "x${withval}" = "xpostgresql"; then
1251	AC_DEFINE(WITH_POSTGRES)
1252	AC_DEFINE(WITH_DATABASE)
1253	#
1254	PGCONF="no"
1255	MY_PATH="${PATH}:/usr/local/bin:/usr/local/pgsql/bin"
1256	OLD_IFS="$IFS"
1257	IFS=":"
1258	for ff in ${MY_PATH}
1259	do
1260	if test -f "$ff/pg_config"
1261	then
1262	PGCONF="$ff/pg_config"
1263	fi
1264	done
1265	IFS="${OLD_IFS}"
1266	#
1267	#
1268	if test "x${PGCONF}" = "xno"
1269	then
1270	AC_MSG_CHECKING(for PostgreSQL in /usr/local/pgsql /usr/pgsql /usr/local /usr PGSQL_HOME)
1271	pgsql_directory="/usr/local/pgsql /usr/pgsql /usr/local /usr ${PGSQL_HOME}"
1272	for i in $pgsql_directory; do
1273	if test -r $i/include/pgsql/libpq-fe.h; then
1274	PGSQL_INC_DIR=$i/include
1275	PGSQL_DIR=$i
1276	# use AC_CHECK_HEADERS to check for pgsql/libpq-fe.h
1277	fi
1278	done
1279	if test -z "$PGSQL_DIR"; then
1280	for i in $pgsql_directory; do
1281	if test -r $i/include/postgresql/libpq-fe.h; then
1282	PGSQL_INC_DIR=$i/include
1283	PGSQL_DIR=$i
1284	fi
1285	done
1286	fi
1287	if test -z "$PGSQL_DIR"; then
1288	for i in $pgsql_directory; do
1289	if test -r $i/include/libpq-fe.h; then
1290	PGSQL_INC_DIR=$i/include
1291	PGSQL_DIR=$i
1292	fi
1293	done
1294	fi
1295
1296	if test -z "$PGSQL_DIR"; then
1297	tmp=""
1298	for i in $pgsql_directory; do
1299	tmp="$tmp $i/include $i/include/pgsql $i/include/postgresql"
1300	done
1301	FAIL_MESSAGE("PostgreSQL header file (libpq-fe.h)", $tmp)
1302	fi
1303
1304	for i in lib lib/pgsql lib/postgresql; do
1305	str="$PGSQL_DIR/$i/libpq.*"
1306	for j in `echo $str`; do
1307	if test -r $j; then
1308	PGSQL_LIB_DIR="$PGSQL_DIR/$i"
1309	break 2
1310	fi
1311	done
1312	done
1313
1314	if test -z "$PGSQL_LIB_DIR"; then
1315	for ff in $pgsql_directory; do
1316	for i in lib lib/pgsql lib/postgresql; do
1317	str="$ff/$i/libpq.*"
1318	for j in `echo $str`; do
1319	if test -r $j; then
1320	PGSQL_LIB_DIR="$ff/$i"
1321	break 3
1322	fi
1323	done
1324	done
1325	done
1326	fi
1327
1328	if test -z "$PGSQL_LIB_DIR"; then
1329	tmp=""
1330	for i in $pgsql_directory; do
1331	tmp="$i/lib $i/lib/pgsql $i/lib/postgresql"
1332	done
1333	FAIL_MESSAGE("postgresql library libpq", $tmp)
1334	fi
1335
1336	AC_MSG_RESULT(yes)
1337
1338	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
1339	if test x"$enable_static" = xyes; then
1340	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lcrypt -lm"
1341	else
1342	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
1343	fi
1344	# CFLAGS="$CFLAGS -I${PGSQL_INC_DIR}"
1345	CPPFLAGS="$CPPFLAGS -I${PGSQL_INC_DIR}"
1346	AC_CHECK_HEADERS(pgsql/libpq-fe.h)
1347	AC_CHECK_HEADERS(postgresql/libpq-fe.h)
1348	else
1349	pg_lib_dir=`${PGCONF} --libdir`
1350	if test x"$enable_static" = xyes; then
1351	LIBS="$LIBS -L${pg_lib_dir} -lpq -lcrypt -lm"
1352	else
1353	LIBS="$LIBS -L${pg_lib_dir} -lpq -lm"
1354	fi
1355	pg_inc_dir=`${PGCONF} --includedir`
1356	# CFLAGS="$CFLAGS -I${pg_inc_dir}"
1357	CPPFLAGS="$CPPFLAGS -I${pg_inc_dir}"
1358	fi
1359	elif test "x${withval}" = "xodbc"; then
1360	AC_MSG_CHECKING(for odbc in /usr /usr/local ODBC_HOME)
1361	odbc_directory="/usr /usr/local"
1362
1363	for i in $odbc_directory; do
1364	if test -r $i/include/sql.h; then
1365	if test -r $i/include/sqlext.h; then
1366	if test -r $i/include/sqltypes.h; then
1367	ODBC_DIR=$i
1368	ODBC_INC_DIR=$i/include
1369	fi
1370	fi
1371	fi
1372	done
1373
1374	if test -z "$ODBC_DIR"; then
1375	tmp=""
1376	for i in $odbc_directory; do
1377	tmp="$tmp $i/include"
1378	done
1379	FAIL_MESSAGE("odbc headers (sql.h sqlext.h sqltypes.h)", $tmp)
1380	fi
1381
1382	str="$ODBC_DIR/lib/libodbc.*"
1383	for j in `echo $str`; do
1384	if test -r $j; then
1385	ODBC_LIB_DIR="$ODBC_DIR/lib"
1386	ODBC_LIB="odbc"
1387	fi
1388	done
1389
1390	if test -z "$ODBC_LIB_DIR"; then
1391	FAIL_MESSAGE("odbc library (libodbc)", "$ODBC_DIR/lib")
1392	fi
1393
1394	AC_MSG_RESULT(yes)
1395	CPPFLAGS="${CPPFLAGS} -I${ODBC_INC_DIR}"
1396	LIBS="${LIBS} -L${ODBC_LIB_DIR} -l$ODBC_LIB"
1397	AC_DEFINE(WITH_ODBC)
1398	AC_DEFINE(WITH_DATABASE)
1399
1400	elif test "x${withval}" = "xoracle"; then
1401	AC_MSG_CHECKING(for oracle in /usr /usr/local ORACLE_HOME)
1402	oracle_directory="/usr /usr/local ${ORACLE_HOME}"
1403	for i in $oracle_directory; do
1404	if test -r $i/rdbms/demo/oci.h; then
1405	ORACLE_DIR=$i
1406	fi
1407	done
1408
1409	if test -z "$ORACLE_DIR"; then
1410	tmp=""
1411	for i in $oracle_directory; do
1412	tmp="$tmp $i/rdbms/demo"
1413	done
1414	FAIL_MESSAGE("OCI header file (oci.h)", $tmp)
1415	else
1416	for i in rdbms/demo rdbms/public network/public; do
1417	ORACLE_CPP_FLAGS="$ORACLE_CPP_FLAGS -I$ORACLE_DIR/$i"
1418	done
1419	ORACLE_LIB_DIR="$ORACLE_DIR/lib"
1420	AC_MSG_RESULT(yes)
1421
1422	CPPFLAGS="${CPPFLAGS} ${ORACLE_CPP_FLAGS}"
1423
1424	ORACLE_LIBS="-lclntsh"
1425	if test -r $ORACLE_LIB_DIR/libwtc9.so; then
1426	ORACLE_LIBS="${ORACLE_LIBS} -lwtc9"
1427	elif test -r $ORACLE_LIB_DIR/libwtc8.so; then
1428	ORACLE_LIBS="${ORACLE_LIBS} -lwtc8"
1429	fi
1430	LIBS="${LIBS} -L${ORACLE_LIB_DIR} ${ORACLE_LIBS}"
1431	if test "x$GCC" != "xyes"; then
1432	CFLAGS="${CFLAGS} -fno-strict-aliasing"
1433	fi
1434	fi
1435	AC_DEFINE(WITH_ORACLE)
1436	AC_DEFINE(WITH_DATABASE)
1437
1438	else
1439	AC_MSG_ERROR([Option --with-database=database used with unsupported database ${withval}])
1440	fi
1441	]
1442	)
1443
1444	AC_ARG_WITH(console,
1445	[ --with-console=PATH set path to console device [[/dev/console]]],
1446	[
1447	if test "x${withval}" != xno; then
1448	mycons="$withval"
1449	AC_DEFINE_UNQUOTED(DEFAULT_CONSOLE, _("${mycons}") )
1450	fi
1451	])
1452
1453	AC_ARG_WITH(altconsole,
1454	[ --with-altconsole=PATH set path to second console device [[none]]],
1455	[
1456	if test "x${withval}" != xno; then
1457	myaltcons="$withval"
1458	else
1459	myaltcons="NULL"
1460	fi
1461	],
1462	[myaltcons="NULL"])
1463	AC_DEFINE_UNQUOTED(ALT_CONSOLE, _("${myaltcons}") )
1464
1465	AC_ARG_WITH(timeserver,
1466	[ --with-timeserver=HOST set host address for time server [[none]]],
1467	[
1468	if test "x${withval}" != xno; then
1469	mytimeserv="$withval"
1470	AC_DEFINE(HAVE_NTIME)
1471	else
1472	mytimeserv="NULL"
1473	fi
1474	],
1475	mytimeserv="NULL")
1476	AC_DEFINE_UNQUOTED(DEFAULT_TIMESERVER, _("${mytimeserv}") )
1477
1478	AC_ARG_WITH(alttimeserver,
1479	[ --with-alttimeserver=HOST set address for backup time server [[none]]],
1480	[
1481	if test "x${withval}" != xno; then
1482	myalttimeserv="$withval"
1483	AC_DEFINE(HAVE_NTIME)
1484	else
1485	myalttimeserv="NULL"
1486	fi
1487	],
1488	myalttimeserv="NULL")
1489	AC_DEFINE_UNQUOTED(ALT_TIMESERVER, _("${myalttimeserv}") )
1490
1491	AC_ARG_ENABLE(login-watch,
1492	[ --enable-login-watch watch for login/logout [[no]]],
1493	[
1494	if test "x${enable_login_watch}" = xyes; then
1495	AC_DEFINE(SH_USE_UTMP)
1496	fi
1497	]
1498	)
1499
1500	AC_ARG_ENABLE(mounts-check,
1501	[ --enable-mounts-check check mount options on filesystems [[no]]],
1502	[
1503	if test "x${enable_mounts_check}" = xyes; then
1504	AC_DEFINE(SH_USE_MOUNTS)
1505	fi
1506	]
1507	)
1508
1509	AC_ARG_ENABLE(logfile-monitor,
1510	[ --enable-logfile-monitor monitor logfiles [[no]]],
1511	[
1512	if test "x${enable_logfile_monitor}" = xyes; then
1513	AC_CHECK_HEADER(pcre.h,
1514	[
1515	AC_DEFINE(USE_LOGFILE_MONITOR, 1, [Define if you want the logfile monitor module.])
1516	LIBS="-lpcre $LIBS"
1517	],
1518	[
1519	AC_CHECK_HEADER(pcre/pcre.h,
1520	[
1521	AC_DEFINE(USE_LOGFILE_MONITOR, 1, [Define if you want the logfile monitor module.])
1522	AC_DEFINE(HAVE_PCRE_PCRE_H, 1, [Define if you have pcre/pcre.h.])
1523	LIBS="-lpcre $LIBS"
1524	],
1525	AC_MSG_ERROR([The --enable-logfile-monitor option requires libpcre. For compiling the pcre development package is needed.])
1526	)
1527	]
1528	)
1529	AC_CHECK_LIB(pcre, pcre_dfa_exec, [
1530	AC_DEFINE([HAVE_PCRE_DFA_EXEC], 1, [Define if you have pcre_dfa_exec])
1531	], [
1532	AC_MSG_WARN([pcre_dfa_exec not available])
1533	])
1534	fi
1535	]
1536	)
1537
1538
1539	AC_ARG_ENABLE(process-check,
1540	[ --enable-process-check check processes [[no]]],
1541	[
1542	if test "x${enable_process_check}" = xyes; then
1543	AC_CHECK_LIB([rt], [sched_getparam], sh_lrt=yes, sh_lrt=no)
1544	if test x"$sh_lrt" = xyes; then
1545	LIBRT=-lrt
1546	else
1547	LIBRT=
1548	fi
1549	LIBS="$LIBS $LIBRT"
1550	AC_DEFINE(SH_USE_PROCESSCHECK, [1], [Define if you want to check processes])
1551	fi
1552	]
1553	)
1554
1555	AC_ARG_ENABLE(port-check,
1556	[ --enable-port-check check ports [[no]]],
1557	[
1558	if test "x${enable_port_check}" = xyes; then
1559	AC_DEFINE(SH_USE_PORTCHECK, [1], [Define if you want to check ports])
1560	fi
1561	]
1562	)
1563
1564	AC_ARG_ENABLE(userfiles,
1565	[ --enable-userfiles check for users' config files [[no]]],
1566	[
1567	if test "x${enableval}" = "xyes"; then
1568	AC_DEFINE(SH_USE_USERFILES)
1569	fi
1570	]
1571	)
1572
1573	AC_ARG_ENABLE(debug,
1574	[ --enable-debug enable debug options [[no]]],
1575	[
1576	if test "x${enable_debug}" = "xyes"; then
1577	if test "x${mydebugflag}" != "xyes"; then
1578	AC_DEFINE(MEM_DEBUG)
1579	fi
1580	AC_DEFINE(WITH_TPT)
1581	AC_DEFINE(SL_DEBUG)
1582	AC_DEFINE(DNMALLOC_CHECKS, 1, [Debug dnmalloc])
1583	AC_DEFINE(PARANOIA, 0, [Paranoia level for dnmalloc])
1584	AC_DEFINE(SL_FAIL_ON_ERROR)
1585	if test "x${myneedg3}" = "xyes"; then
1586	mydebugdef="-g3"
1587	else
1588	mydebugdef="-g"
1589	fi
1590	mydebugit="yes"
1591	elif test "x${enable_debug}" = "xgdb"; then
1592	if test "x${myneedg3}" = "xyes"; then
1593	mydebugdef="-g3"
1594	else
1595	mydebugdef="-g"
1596	fi
1597	mydebugit="yes"
1598	fi
1599	]
1600	)
1601	AC_SUBST(mydebugdef)
1602
1603
1604	AC_ARG_ENABLE(ipv6,
1605	[ --disable-ipv6 disable ipv6 support],
1606	[
1607	if test "x${enable_ipv6}" = xno; then
1608	AC_DEFINE(USE_IPV4,1,[Define if you do not want IPv6])
1609	fi
1610	]
1611	)
1612
1613	if test "x${dnmalloc_ok}" = "xyes"; then
1614	sh_dnmalloc_enabled=yes
1615	else
1616	sh_dnmalloc_enabled=no
1617	fi
1618
1619	AC_ARG_ENABLE(dnmalloc,
1620	[ --disable-dnmalloc disable dnmalloc],
1621	[
1622	if test "x${enable_dnmalloc}" = xno; then
1623	sh_dnmalloc_enabled=no
1624	else
1625	sh_dnmalloc_enabled=yes
1626	fi
1627	]
1628	)
1629
1630	dnl Handle the problem that static linking against libc.a on Linux
1631	dnl produces the error "multiple definitions of malloc"
1632	dnl
1633	if test "x$sh_dnmalloc_enabled" = "xyes"; then
1634	if test x$enable_static = xyes; then
1635	if test "x$sh_no_gcc_static" = "xyes"; then
1636	sh_dnmalloc_enabled=no
1637	else
1638	if test "x$with_gnu_ld" = "xyes"; then
1639	LDFLAGS="$LDFLAGS -Wl,--allow-multiple-definition"
1640	else
1641	sh_dnmalloc_enabled=no
1642	fi
1643	fi
1644	fi
1645	fi
1646
1647	if test "x${sh_dnmalloc_enabled}" = xno; then
1648	AC_DEFINE(USE_SYSTEM_MALLOC,1,[Define if you want to use the system malloc])
1649	fi
1650
1651	AC_ARG_ENABLE(ptrace,
1652	[ --enable-ptrace use anti-debugger options [[no]]],
1653	[
1654	if test "x${enable_ptrace}" = xyes; then
1655	if test "x$mydebugit" != "xyes"; then
1656	AC_DEFINE(SCREW_IT_UP)
1657	fi
1658	fi
1659	]
1660	)
1661
1662	dnl
1663	if test "x$GCC" = "xyes"; then
1664	if test ! -z "`echo "$CFLAGS" \| grep "\-g\ " 2> /dev/null`" ; then
1665	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
1666	fi
1667
1668	dnl if test ! -z "`echo "$CFLAGS" \| grep "\-O2" 2> /dev/null`" ; then
1669	dnl CFLAGS=`echo $CFLAGS \| sed 's%\-O2%\-O3%' `
1670	dnl fi
1671
1672	if test -z "`echo "$CFLAGS" \| grep "\-Wall" 2> /dev/null`" ; then
1673	CFLAGS="$CFLAGS -Wall -W "
1674	fi
1675
1676	if test -z "`echo "$CFLAGS" \| grep "\-fstrength\-reduce" 2> /dev/null`"
1677	then
1678	if test -z "`echo "$CFLAGS" \| grep "\-fno\-strength\-reduce" 2> /dev/null`"
1679	then
1680	CFLAGS="$CFLAGS -fno-strength-reduce"
1681	fi
1682	fi
1683
1684	if test -z "`echo "$CFLAGS" \| grep "\-fomit\-frame\-pointer" 2> /dev/null`"
1685	then
1686	if test -z "`echo "$CFLAGS" \| grep "\-fno\-omit\-frame\-pointer" 2> /dev/null`"
1687	then
1688	CFLAGS="$CFLAGS -fno-omit-frame-pointer"
1689	fi
1690	fi
1691
1692	fi
1693
1694	dnl Test whether gcc supports -Wno-empty-body
1695	dnl Suppresses warnings from glibc pthread_cleanup_pop
1696	dnl
1697	GCC_WEMPTY_BODY
1698
1699	AC_MSG_CHECKING([which random module to use])
1700	AC_ARG_WITH(rnd,
1701	[ --with-rnd=[[egd\|unix\|dev\|default]] random number generator [[default]]],
1702	[use_static_rnd=$withval], [use_static_rnd=default] )
1703
1704	if test "$use_static_rnd" = no; then
1705	use_static_rnd=default
1706	fi
1707
1708	case "$use_static_rnd" in
1709	egd \| dev \| unix \| default )
1710	AC_MSG_RESULT($use_static_rnd)
1711	;;
1712	* )
1713	AC_MSG_RESULT([invalid argument])
1714	AC_MSG_ERROR([Option --with-rnd=module used with unsupported module ${use_static_rnd}])
1715	;;
1716	esac
1717
1718	AC_ARG_WITH(egd-socket,
1719	[ --with-egd-socket=NAME EGD socket name],
1720	egd_socket_name="$withval", egd_socket_name="" )
1721	AC_DEFINE_UNQUOTED(EGD_SOCKET_NAME, _("$egd_socket_name") )
1722
1723	dnl
1724	dnl See whether the user wants to disable checking for /dev/random
1725
1726	try_dev_random=yes
1727
1728	case "$use_static_rnd" in
1729	dev \| default )
1730	try_dev_random=yes
1731	;;
1732	egd)
1733	AC_DEFINE(HAVE_EGD_RANDOM)
1734	try_dev_random=no
1735	;;
1736	unix)
1737	AC_DEFINE(HAVE_UNIX_RANDOM)
1738	try_dev_random=no
1739	;;
1740	esac
1741
1742
1743	if test "x$try_dev_random" = "xyes"; then
1744	AC_MSG_CHECKING(whether /dev/random exists)
1745	if test -r "/dev/srandom" && test -c "/dev/srandom"; then
1746	AC_DEFINE(HAVE_URANDOM)
1747	AC_DEFINE_UNQUOTED(NAME_OF_DEV_RANDOM, _("/dev/srandom") )
1748	AC_MSG_RESULT(yes)
1749	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
1750	AC_DEFINE_UNQUOTED(NAME_OF_DEV_URANDOM, _("/dev/urandom") )
1751	fi
1752	else
1753	if test -r "/dev/random" && test -c "/dev/random"; then
1754	AC_DEFINE(HAVE_URANDOM)
1755	AC_DEFINE_UNQUOTED(NAME_OF_DEV_RANDOM, _("/dev/random") )
1756	AC_MSG_RESULT(yes)
1757	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
1758	AC_DEFINE_UNQUOTED(NAME_OF_DEV_URANDOM, _("/dev/urandom") )
1759	fi
1760	else
1761	AC_MSG_RESULT(no)
1762	AC_DEFINE(HAVE_UNIX_RANDOM)
1763	fi
1764	fi
1765	fi
1766
1767
1768	AC_ARG_ENABLE(udp,
1769	[ --enable-udp server can listen on port 514/udp [[no]]],
1770	[
1771	if test "x${enable_udp}" = xyes; then
1772	AC_DEFINE(INET_SYSLOG)
1773	fi
1774	]
1775	)
1776
1777	myencrypt=yes
1778	AC_ARG_ENABLE(encrypt,
1779	[ --disable-encrypt disable client/server encryption],
1780	[
1781	if test "x${enable_encrypt}" = xno; then
1782	myencrypt=no
1783	elif test "x${enable_encrypt}" = "x1"; then
1784	myencrypt=1
1785	fi
1786	]
1787	)
1788	if test "x${myencrypt}" = "xyes"; then
1789	AC_DEFINE(SH_ENCRYPT)
1790	AC_DEFINE(SH_ENCRYPT_2)
1791	elif test "x${myencrypt}" = "x1"; then
1792	AC_DEFINE(SH_ENCRYPT)
1793	fi
1794
1795	sh_use_srp_proto=yes
1796	AC_ARG_ENABLE(srp,
1797	[ --disable-srp disable SRP for authentication],
1798	[
1799	if test "x${enable_srp}" = xno; then
1800	sh_use_srp_proto=no
1801	fi
1802	]
1803	)
1804	if test "x${sh_use_srp_proto}" = xyes; then
1805	AC_DEFINE(USE_SRP_PROTOCOL)
1806	fi
1807
1808	AC_ARG_WITH(port,
1809	[ --with-port=PORT set port to use for TCP/IP connection [[49777]]],
1810	[
1811	echo "${withval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1812	AC_MSG_ERROR([For --with-port=PORT, PORT must be numeric.])
1813	myport=${withval}
1814	],
1815	[myport="49777"])
1816	AC_DEFINE_UNQUOTED(SH_DEFAULT_PORT, ${myport})
1817	AC_SUBST(myport)
1818
1819	AC_ARG_WITH(logserver,
1820	[ --with-logserver=HOST set host address for log server [[none]]],
1821	[
1822	case "$withval" in
1823	. \| localhost)
1824	mylogsrv="$withval"
1825	;;
1826	*)
1827	mylogsrv="$withval"
1828	;;
1829	esac
1830	],
1831	[mylogsrv="NULL"])
1832	AC_DEFINE_UNQUOTED(DEFAULT_LOGSERVER, _("${mylogsrv}") )
1833	AC_SUBST(mylogsrv)
1834
1835	AC_ARG_WITH(altlogserver,
1836	[ --with-altlogserver=HOST set address for backup log server [[none]]],
1837	[
1838	case "$withval" in
1839	. \| localhost)
1840	myaltlogsrv="$withval"
1841	;;
1842	*)
1843	myaltlogsrv="$withval"
1844	;;
1845	esac
1846	],
1847	[myaltlogsrv="NULL"])
1848	AC_DEFINE_UNQUOTED(ALT_LOGSERVER, _("${myaltlogsrv}"))
1849
1850
1851
1852	dnl
1853	dnl STEALTH OPTIONS
1854	dnl
1855	nocl_code=
1856	xor_code=0
1857	AC_ARG_ENABLE(nocl,
1858	[ --enable-nocl=PW no CL parsing unless first CL argument is PW],
1859	[
1860	if test "x${enableval}" != "x"; then
1861	AC_DEFINE(SH_STEALTH_NOCL)
1862	fi
1863	if test "x${enableval}" = "xstop" \|\| test "x${enableval}" = "xstart"; then
1864	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1865	fi
1866	if test "x${enableval}" = "xreload" \|\| test "x${enableval}" = "xrestart"; then
1867	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1868	fi
1869	if test "x${enableval}" = "xstatus"; then
1870	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1871	fi
1872	if test "x${enableval}" = "xno"; then
1873	AC_MSG_ERROR([With --enable-nocl=PW, the use of --enable-nocl=no is ambiguous.])
1874	fi
1875	nocl_code="${enable_nocl}"
1876	]
1877	)
1878	AC_DEFINE_UNQUOTED(NOCL_CODE, _("${nocl_code}") )
1879	AC_SUBST(nocl_code)
1880	AC_ARG_ENABLE(stealth,
1881	[ --enable-stealth=XOR_VAL enable stealth mode [[no]]],
1882	[AC_DEFINE(SH_STEALTH)
1883	if test "x${enableval}" != "xyes"; then
1884	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1885	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be numeric.])
1886	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
1887	if test x"${enableval}" = x0
1888	then
1889	:
1890	else
1891	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
1892	fi
1893	fi
1894	xor_code="${enable_stealth}"
1895	else
1896	xor_code=0
1897	fi
1898	stegin_prg="samhain_stealth"
1899	],
1900	[
1901	stegin_prg=
1902	]
1903	)
1904	AC_ARG_ENABLE(micro-stealth,
1905	[ --enable-micro-stealth=XOR_VAL enable micro stealth mode [[no]]],
1906	[
1907	AC_DEFINE(SH_STEALTH)
1908	AC_DEFINE(SH_STEALTH_MICRO)
1909	if test "x${enableval}" != "xyes"; then
1910	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1911	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be numeric.])
1912	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
1913	if test x"${enableval}" = x0
1914	then
1915	:
1916	else
1917	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
1918	fi
1919	fi
1920	xor_code="${enable_micro_stealth}"
1921	else
1922	xor_code=0
1923	fi
1924	]
1925	)
1926	install_name="samhain"
1927	INSTALL_NAME="SAMHAIN"
1928	AC_ARG_ENABLE(install-name,
1929	[ --enable-install-name=NAME name under which to install [[samhain\|yule]]],
1930	[
1931	if test "x${enableval}" != "xyes"; then
1932	install_name="${enableval}"
1933	INSTALL_NAME=`echo "${enableval}" \| tr [a-z] [A-Z]`
1934	else
1935	install_name="${sh_main_prg}"
1936	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
1937	fi
1938	],
1939	[
1940	install_name="${sh_main_prg}"
1941	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
1942	]
1943	)
1944
1945
1946	need_user_install=0
1947
1948	AC_ARG_ENABLE(identity,
1949	[ --enable-identity=USER user if dropping root [[daemon]]],
1950	[
1951	if test x"$enableval" = xno; then
1952	myident="daemon"
1953	else
1954	myident="$enableval"
1955	fi
1956	echo "${myident}" \| grep ['[^0123456789]'] >/dev/null 2>&1 \|\| \
1957	AC_MSG_ERROR([With --enable-identity=USER, please supply a username, not a UID.])
1958	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
1959	grep "^${myident}:" \| awk -F: '{ print $3; }'`
1960	if test x"${myident_uid}" = x; then
1961	AC_MSG_WARN([Option --enable-identity used, user ${myident} will be added upon install.])
1962	need_user_install=1
1963	fi
1964	],
1965	[
1966	for myident in ${install_name} daemon nobody; do
1967	AC_MSG_CHECKING(for user ${myident})
1968	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
1969	grep "^${myident}:" \| awk -F: '{ print $3; }'`
1970	if test x"${myident_uid}" != x; then
1971	AC_MSG_RESULT(yes)
1972	break;
1973	else
1974	AC_MSG_RESULT(no)
1975	fi
1976	done
1977	if test x"${myident_uid}" = x; then
1978	myident=${install_name}
1979	AC_MSG_WARN([--enable-identity: user ${myident} will be added upon install])
1980	need_user_install=1
1981	fi
1982	])
1983	AC_DEFINE_UNQUOTED(DEFAULT_IDENT, _("${myident}") )
1984	AC_SUBST(myident)
1985	AC_SUBST(need_user_install)
1986
1987	sh_insmod_cmd=": # no kernel module"
1988	sh_insmod_pre=": # no kernel module"
1989	sh_lkm=""
1990	lkm_inc=""
1991	khidemap="/boot/System.map"
1992	sh_syscalltable="0x0"
1993	AC_ARG_ENABLE(khide,
1994	[ --enable-khide=SYSTEM_MAP use kernel module to hide (Linux only)[[/boot/System.map]]],
1995	[
1996	if test "x${enable_khide}" != xno; then
1997	if test "x${enableval}" != "xyes"; then
1998	khidemap="${enableval}"
1999	fi
2000	sh_syscalltable=`egrep '(D\|d\|R\|r) sys_call_table' ${khidemap} \| awk '{print $1}'`
2001	if test x"$sh_syscalltable" = x; then
2002	AC_MSG_ERROR([Option --enable-khide cannot be used since the symbol sys_call_table was not found in ${khidemap}.])
2003	fi
2004	sh_syscalltable="0x${sh_syscalltable}"
2005	install_name_len=`echo ${install_name} \| awk '{ print(length()); }'`
2006	if test "${install_name_len}" -gt 15 ; then
2007	AC_MSG_ERROR([If --enable-khide is used, install_name must not exceed a length of 15 chars.])
2008	fi
2009	AC_DEFINE(SH_USE_LKM)
2010	AC_DEFINE_UNQUOTED(SH_MAGIC_HIDE, "${install_name}")
2011
2012	# -- NEW --
2013	kernel_version=`uname -r \| sed s,2.6.*,LINUX26,`
2014	kernel_numeric=`uname -r \| sed 's%-%.%g' \| sed 's%_%.%g' \| awk -F. '{ print $165536+$2256+$3 }'`
2015	AC_DEFINE_UNQUOTED(SH_KERNEL_NUMERIC, ${kernel_numeric}, [Kernel number])
2016
2017	if test x"$kernel_version" = xLINUX26
2018	then
2019	AC_MSG_CHECKING([for modlist_lock])
2020	sh_modlist_lock=`egrep ['[bd] modlist_lock$'] ${khidemap} \| awk '{print $1}'`
2021	if test x"$sh_modlist_lock" = x; then
2022	AC_MSG_RESULT(no)
2023	else
2024	sh_modlist_lock="0x${sh_modlist_lock}"
2025	AC_MSG_RESULT([${sh_modlist_lock}])
2026	AC_DEFINE_UNQUOTED(SH_MODLIST_LOCK, ${sh_modlist_lock}, [The address of the modules list spinlock])
2027	fi
2028
2029	AC_MSG_CHECKING([for module_mutex])
2030	sh_modlist_mutex=`egrep ['[bd] module_mutex$'] ${khidemap} \| awk '{print $1}'`
2031	if test x"$sh_modlist_mutex" = x; then
2032	AC_MSG_RESULT(no)
2033	else
2034	sh_modlist_mutex="0x${sh_modlist_mutex}"
2035	AC_MSG_RESULT([${sh_modlist_mutex}])
2036	AC_DEFINE_UNQUOTED(SH_MODLIST_MUTEX, ${sh_modlist_mutex}, [The address of the modules list mutex])
2037	fi
2038
2039	sh_list_modules=`egrep 'd modules$' ${khidemap} \| awk '{print $1}'`
2040	if test x"$sh_list_modules" = x; then
2041	AC_MSG_ERROR([Option --enable-khide cannot be used, since the symbol modules was not found in ${khidemap}.])
2042	fi
2043	sh_list_modules="0x${sh_list_modules}"
2044	AC_DEFINE_UNQUOTED(SH_LIST_MODULES, ${sh_list_modules}, [The address of the modules list])
2045
2046	AC_DEFINE(LINUX26, 1, [Define if kernel is 2.6])
2047	sh_insmod_cmd="modprobe ${install_name}_hide"
2048	sh_lkm="samhain_hide.ko"
2049	else
2050	sh_insmod_cmd="insmod ${install_name}_hide; insmod ${install_name}_erase; rmmod ${install_name}_erase"
2051	sh_lkm="samhain_hide.o samhain_erase.o"
2052	fi
2053	# -- END NEW --
2054
2055	kvers=`uname -r`
2056	if test -f /lib/modules/${kvers}/build/include/linux/kernel.h; then
2057	lkm_inc="-I/lib/modules/${kvers}/build/include"
2058	else
2059	AC_MSG_WARN([--enable-khide: /lib/modules/${kvers}/build/include/linux not found])
2060	AC_MSG_WARN([--enable-khide: You may need to install the kernel-source])
2061	AC_MSG_WARN([--enable-khide: headers for the currently-running kernel.])
2062	fi
2063
2064	AC_MSG_CHECKING([for 2.4 vanilla kernel])
2065	sh_is_vanilla_kernel=yes
2066	if test -f /lib/modules/${kvers}/build/include/linux/sched.h; then
2067	grep 'next_task,' /lib/modules/${kvers}/build/include/linux/sched.h >/dev/null 2>&1 \|\| sh_is_vanilla_kernel=no
2068	fi
2069	if test x"${sh_is_vanilla_kernel}" = xno; then
2070	AC_MSG_RESULT(no)
2071	else
2072	AC_MSG_RESULT(yes)
2073	AC_DEFINE(SH_VANILLA_KERNEL)
2074	fi
2075
2076	fi
2077	]
2078	)
2079
2080	AC_SUBST(install_name)
2081	AC_SUBST(INSTALL_NAME)
2082	AC_SUBST(stegin_prg)
2083	AC_SUBST(xor_code)
2084
2085	AC_DEFINE_UNQUOTED(XOR_CODE, ${xor_code})
2086	AC_DEFINE_UNQUOTED(SH_SYSCALLTABLE, ${sh_syscalltable})
2087
2088
2089	exepack_state0=`${srcdir}/c_random.sh 2>/dev/null`
2090	exepack_state1=`${srcdir}/c_random.sh 2>/dev/null`
2091	exepack_state2=`${srcdir}/c_random.sh 2>/dev/null`
2092
2093	AC_DEFINE_UNQUOTED(EXEPACK_STATE_0, ${exepack_state0})
2094	AC_DEFINE_UNQUOTED(EXEPACK_STATE_1, ${exepack_state1})
2095	AC_DEFINE_UNQUOTED(EXEPACK_STATE_2, ${exepack_state2})
2096
2097
2098	AC_ARG_ENABLE(suidcheck,
2099	[ --enable-suidcheck check for suid/sgid files [[no]]],
2100	[
2101	if test "x${enableval}" = "xyes"; then
2102	AC_DEFINE(SH_USE_SUIDCHK)
2103	fi
2104	]
2105	)
2106
2107
2108	systemmap="/boot/System.map"
2109	sh_libkvm=""
2110	AC_ARG_WITH(kcheck,
2111	[ --with-kcheck[[=SYSTEM_MAP]] check Linux/FreeBSD/OpenBSD kernel integrity [[/boot/System.map]]],
2112	[
2113	if test "x${withval}" != "xno"; then
2114	AC_DEFINE(SH_USE_KERN)
2115
2116	kernel_numeric=`uname -r \| sed 's%-%.%g' \| sed 's%_%.%g' \| awk -F. '{ print $165536+$2256+$3 }'`
2117	AC_DEFINE_UNQUOTED(SH_KERNEL_NUMBER, ${kernel_numeric}, [Kernel number])
2118
2119	kernelversion=`uname -r`
2120	AC_DEFINE_UNQUOTED(SH_KERNEL_VERSION, _("${kernelversion}"), [Define the kernel version])
2121
2122	if test "x${withval}" != "xyes"; then
2123	systemmap="${withval}"
2124	fi
2125
2126	if test "x${cross_compiling}" = xyes; then
2127	:
2128	elif test "x$selectconfig" = "xfreebsd"; then
2129	LIBS="$LIBS -lkvm"
2130	sh_libkvm="-lkvm"
2131	elif test -f "${systemmap}"; then
2132	if test -c /dev/kmem; then
2133	:
2134	else
2135	# need kernel module
2136
2137	if test -f /lib/modules/${kernelversion}/build/include/linux/kernel.h; then
2138	lkm_inc="-I/lib/modules/${kernelversion}/build/include"
2139	else
2140	AC_MSG_WARN([--enable-khide: /lib/modules/${kernelversion}/build/include/linux not found])
2141	AC_MSG_WARN([--enable-khide: You may need to install the kernel-source])
2142	AC_MSG_WARN([--enable-khide: headers for the currently-running kernel.])
2143	fi
2144
2145	AC_MSG_CHECKING([for vmlist_lock])
2146	sh_vmlist_lock=`egrep ['[bdBD] vmlist_lock$'] ${systemmap} \| awk '{print $1}'`
2147	if test x"$sh_vmlist_lock" = x; then
2148	AC_MSG_RESULT(no)
2149	else
2150	sh_vmlist_lock="0x${sh_vmlist_lock}"
2151	AC_MSG_RESULT([${sh_vmlist_lock}])
2152	AC_DEFINE_UNQUOTED(SH_VMLIST_LOCK, ${sh_vmlist_lock}, [The address of the vmlist spinlock])
2153	fi
2154
2155	AC_MSG_CHECKING([for vmlist])
2156	sh_vmlist=`egrep ['[bdBD] vmlist$'] ${systemmap} \| awk '{print $1}'`
2157	if test x"$sh_vmlist" = x; then
2158	AC_MSG_RESULT(no)
2159	else
2160	sh_vmlist="0x${sh_vmlist}"
2161	AC_MSG_RESULT([${sh_vmlist}])
2162	AC_DEFINE_UNQUOTED(SH_VMLIST, ${sh_vmlist}, [The address of the vmlist])
2163	fi
2164
2165	sh_lkm="${sh_lkm} samhain_kmem.ko"
2166	sh_insmod_pre="modprobe ${install_name}_kmem"
2167
2168	fi
2169	else
2170	AC_MSG_ERROR([Option --with-kcheck=systemmap cannot be used, because system map ${systemmap} does not exist.])
2171	fi
2172	fi
2173	]
2174	)
2175
2176	AC_SUBST(lkm_inc)
2177	AC_SUBST(sh_lkm)
2178	AC_SUBST(sh_insmod_cmd)
2179	AC_SUBST(sh_insmod_pre)
2180
2181	AC_SUBST(systemmap)
2182	AC_SUBST(sh_libkvm)
2183
2184	AC_ARG_ENABLE(base,
2185	[ --enable-base=B1,B2 base key (0...2147483647)],
2186	[
2187	AC_MSG_CHECKING(base key setting)
2188	my_key_A=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $1}'`
2189	my_key_B=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $2}'`
2190	AC_MSG_RESULT(${my_key_A} ${my_key_B})
2191	if test "x${my_key_A}" = x; then
2192	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid first base key (zero length).])
2193	fi
2194	if test "x${my_key_B}" = x; then
2195	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid second base key (zero length).])
2196	fi
2197	echo "${my_key_A}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2198	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
2199	echo "${my_key_B}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2200	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
2201	],
2202	[
2203	AC_MSG_CHECKING(base key setting .. collecting entropy)
2204	my_key_1=`${srcdir}/c_random.sh 2>/dev/null`
2205	my_key_2=`${srcdir}/c_random.sh 2>/dev/null`
2206	my_key_3=`${srcdir}/c_random.sh 2>/dev/null`
2207	my_key_4=`${srcdir}/c_random.sh 2>/dev/null`
2208	my_key_A=`expr $my_key_1 \* 32767`
2209	my_key_A=`echo ${my_key_A} \| sed 's%^0*%%g' 2>/dev/null`
2210	my_key_A=`expr $my_key_A \+ $my_key_2`
2211	my_key_B=`expr $my_key_3 \* 32767`
2212	my_key_B=`echo ${my_key_B} \| sed 's%^0*%%g' 2>/dev/null`
2213	my_key_B=`expr $my_key_B \+ $my_key_4`
2214	AC_MSG_RESULT(${my_key_A} ${my_key_B})
2215	]
2216	)
2217	AC_SUBST(my_key_A)
2218	AC_SUBST(my_key_B)
2219
2220	dnl low bytes
2221	my_key_1=`expr $my_key_A \% 65536`
2222	dnl high bytes
2223	my_key_2=`expr $my_key_A \/ 65536`
2224	dnl low bytes
2225	my_key_3=`expr $my_key_B \% 65536`
2226	dnl high bytes
2227	my_key_4=`expr $my_key_B \/ 65536`
2228
2229	dnl echo ${my_key_1} ${my_key_2} ${my_key_3} ${my_key_4}
2230
2231	dnl touch ./sh_MK.h
2232	dnl echo "#ifndef SH_MK_H" >> ./sh_MK.h
2233	dnl echo "#define SH_MK_H" >> ./sh_MK.h
2234	dnl ${srcdir}/c_bits.sh ${my_key_1} MKB >> ./sh_MK.h
2235	dnl ${srcdir}/c_bits.sh ${my_key_2} MKA >> ./sh_MK.h
2236	dnl ${srcdir}/c_bits.sh ${my_key_3} MKC >> ./sh_MK.h
2237	dnl ${srcdir}/c_bits.sh ${my_key_4} MKD >> ./sh_MK.h
2238	dnl echo "#endif" >> ./sh_MK.h
2239	AC_SUBST(my_key_1)
2240	AC_SUBST(my_key_2)
2241	AC_SUBST(my_key_3)
2242	AC_SUBST(my_key_4)
2243
2244	AC_MSG_CHECKING(key position)
2245	pos_tf_1=`${srcdir}/c_random.sh 2>/dev/null`
2246	pos_tf_2=`expr $pos_tf_1 \% 8`
2247	pos_tf=`expr $pos_tf_2 + 1`
2248	AC_MSG_RESULT(${pos_tf})
2249	AC_DEFINE_UNQUOTED(POS_TF, ${pos_tf} )
2250
2251	mykeybase=`echo ${my_key_A},${my_key_B}`
2252	AC_DEFINE_UNQUOTED(DEFKEY, ${mykeybase} )
2253	AC_SUBST(mykeybase)
2254
2255
2256	dnl
2257	dnl GPG/PGP options
2258	dnl
2259
2260	AC_ARG_WITH(gpg,
2261	[ --with-gpg=PATH use GnuPG to verify database/config [[no]]],
2262	[
2263	if test "x${withval}" != "xno"; then
2264	if test "x${cross_compiling}" = xyes; then
2265	mygpg="${withval}"
2266	else
2267	if test -f "${withval}"; then
2268	mygpg="${withval}"
2269	mychk0=`${withval} --load-extension tiger --print-md TIGER192 ${withval} 2>/dev/null`
2270	if test "x$?" != "x0"; then
2271	mychktest=no
2272	for sampre in ./samhain ./yule /usr/local/sbin/samhain /usr/local/bin/samhain /usr/bin/samhain /usr/sbin/samhain /usr/local/sbin/yule /usr/local/bin/yule /usr/bin/yule /usr/sbin/yule; do
2273	if test x"${mychktest}" = xyes
2274	then
2275	:
2276	else
2277	if test -f ${sampre}
2278	then
2279	echo "use existing ${sampre} for gpg checksum"
2280	mychk0=`${sampre} -H ${withval} 2>/dev/null`
2281	if test "x$?" != "x0"; then
2282	:
2283	else
2284	mychk="${mychk0}"
2285	mychktest=yes
2286	fi
2287	fi
2288	fi
2289	done
2290	if test x${mychktest} = xno; then
2291	AC_MSG_WARN([--with-gpg: cannot determine TIGER192 checksum of ${withval}])
2292	echo "-------------------------------------------------------------"
2293	echo " Your gpg binary does not support the TIGER192 checksum, "
2294	echo " and I cannot find an existing samhain binary to use instead."
2295	echo " You can:"
2296	echo " (a) run make to compile a samhain binary, then repeat"
2297	echo " ./configure and make"
2298	echo " (b) ignore the failure. The checksum of the gpg binary"
2299	echo " will not get compiled in, thus allowing an attacker"
2300	echo " to replace gpg with a trojan and subverting the gpg"
2301	echo " signature verification of configure and database files."
2302	echo
2303	echo " PLEASE IGNORE THIS MESSAGE IF YOU ALSO USE --with-checksum"
2304	echo "-------------------------------------------------------------"
2305	fi
2306	else
2307	mychk="${mychk0}"
2308	fi
2309	else
2310	AC_MSG_ERROR([--with-gpg: cannot find GnuPG PATH=${withval}])
2311	fi
2312	fi
2313	AC_DEFINE(WITH_GPG)
2314	AC_DEFINE_UNQUOTED(DEFAULT_GPG_PATH, _("${mygpg}") )
2315	AC_SUBST(mygpg)
2316	fi
2317	]
2318	)
2319
2320	AC_ARG_WITH(keyid,
2321	[ --with-keyid=KEYID specify KeyID (0x...) for GPG/PGP functions [[none]]],
2322	[
2323	if test "x${withval}" != "x"; then
2324	echo "${withval}" \| awk '{if((length($0)==10)\|\|(length($0)==18)){exit 2}else{exit 0}}' &&
2325	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
2326	echo "${withval}" \| grep ['[^0][^x][^0123456789ABCDEFabcdef]'] >/dev/null 2>&1 &&
2327	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
2328	mykeyid="$withval"
2329	mykeytag="--default-key"
2330	else
2331	mykeyid=""
2332	mykeytag=""
2333	fi
2334	AC_SUBST(mykeyid)
2335	AC_SUBST(mykeytag)
2336	]
2337	)
2338
2339	dnl AC_ARG_WITH(pgp,
2340	dnl [ --with-pgp=PATH Use PGP to verify database/config (no).],
2341	dnl [myppg="$withval"
2342	dnl AC_DEFINE(WITH_PGP)
2343	dnl AC_DEFINE_UNQUOTED(DEFAULT_PGP_PATH, _("${myppg}") )
2344	dnl ])
2345
2346	AC_ARG_WITH(checksum,
2347	[ --with-checksum=CHKSUM compile in gpg/pgp checksum [[yes]]],
2348	[
2349	if test "x${withval}" != "xno"; then
2350	if test "x${withval}" != "xyes"; then
2351	if test "x${mychk}" != "x"; then
2352	if test "x${mychk}" != "x${withval}"; then
2353	AC_MSG_WARN([--with-checksum: possible gpg CHKSUM problem])
2354	AC_MSG_WARN([--with-checksum: CHKSUM=${withval}])
2355	AC_MSG_WARN([--with-checksum: autodetected=${mychk}])
2356	fi
2357	fi
2358	mychk="${withval}"
2359	else
2360	if test "x${mychk}" = "x"; then
2361	AC_MSG_ERROR([Option --with-checksum=CHKSUM: checksum CHKSUM of the gpg binary not specified.])
2362	fi
2363	fi
2364	AC_DEFINE(HAVE_GPG_CHECKSUM)
2365	AC_DEFINE_UNQUOTED(GPG_HASH, _("${mychk}") )
2366	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char gpgchk[50];"; for (i=1; i <= m; i++) printf "gpgchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_gpg_chksum.h
2367	fi
2368	],
2369	[
2370	if test "x${mygpg}" != "x"; then
2371	if test "x${mychk}" != "x"; then
2372	AC_DEFINE(HAVE_GPG_CHECKSUM)
2373	AC_DEFINE_UNQUOTED(GPG_HASH, _("${mychk}") )
2374	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char gpgchk[50];"; for (i=1; i <= m; i++) printf "gpgchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_gpg_chksum.h
2375	fi
2376	fi
2377	]
2378	)
2379
2380	AC_ARG_WITH(fp,
2381	[ --with-fp=FINGERPRINT compile in public key fingerprint [[no]]],
2382	[
2383	if test "x${withval}" != "xno"; then
2384	if test "x${withval}" != "xyes"; then
2385	withval0=`echo ${withval} \| sed 's% %%g'`
2386	echo "${withval0}" \| \
2387	grep ['[^0123456789abcdefABCDEF]'] >/dev/null 2>&1 &&
2388	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, there is an invalid character(s) in FINGERPRINT=${withval0}.])
2389	sh_len=`echo ${withval0} \| wc -c \| sed 's% %%g'`
2390	sh_len0=`expr ${sh_len} \- 1`
2391	if test "x${sh_len0}" = "x40" \|\| test "x${sh_len0}" = "x32"
2392	then
2393	myfp="${withval0}"
2394	AC_DEFINE(USE_FINGERPRINT)
2395	AC_DEFINE_UNQUOTED(SH_GPG_FP, _("${myfp}") )
2396	echo "${myfp}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef FINGERPRINT_H"; print "#define FINGERPRINT_H"; printf "char gpgfp[%d];\n", m+1; for (i=1; i <= m; i++) printf "gpgfp[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgfp[%d] = %c%c0%c;\n", m, 39, 92, 39; print "#endif"; }' > sh_gpg_fp.h
2397	else
2398	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, the length (${sh_len0}) of FINGERPRINT ${withval0} is incorrect.])
2399	fi
2400	else
2401	AC_MSG_ERROR([For option --with-fp=FINGERPRINT, FINGERPRINT=yes is invalid, please specify a valid key fingerprint.])
2402	fi
2403	fi
2404	])
2405
2406
2407	dnl
2408	dnl MAIL OPTIONS
2409	dnl
2410
2411	AC_ARG_WITH(recipient,
2412	[ --with-recipient=ADDR set recipient(s) for e-mail [[none]]],
2413	[
2414	withval0=`echo ${withval} \| sed 's%,% %g'`
2415	for sh_item in ${withval0}
2416	do
2417	case ${sh_item} in
2418	*@localhost)
2419	;;
2420	@.*)
2421	sh_tmp=`echo ${sh_item} \| awk '{ if ($1 ~ [/^[a-zA-Z0-9][a-zA-Z0-9\-_\.]*@[a-zA-Z0-9\-\.]+\.([a-zA-Z]+\|[0-9]+)$/]) {print 1; } else { print 0}}'`
2422	if test "x${sh_tmp}" != "x1"
2423	then
2424	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
2425	fi
2426	;;
2427	*)
2428	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
2429	;;
2430	esac
2431	done
2432	myrcp="$withval0"
2433	],
2434	[myrcp="NULL"])
2435	AC_DEFINE_UNQUOTED(DEFAULT_MAILADDRESS, _("${myrcp}") )
2436
2437
2438	AC_ARG_WITH(sender,
2439	[ --with-sender=SENDER set sender for e-mail [[daemon]]],
2440	[
2441	mysender="${withval}"
2442	],
2443	[
2444	mysender="daemon"
2445	])
2446	AC_DEFINE_UNQUOTED(DEFAULT_SENDER, _("${mysender}") )
2447
2448
2449	dnl
2450	dnl PATHS
2451	dnl
2452
2453	AC_ARG_WITH(trusted,
2454	[ --with-trusted=UID Set uid(s) of trusted users [[0]]],
2455	[
2456	sh_tmp_test=no
2457	sh_tmp=`echo ${withval} \| sed 's%,% %g'`
2458	for sh_tmp1 in ${sh_tmp}
2459	do
2460	echo "${sh_tmp1}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2461	AC_MSG_ERROR([Option --with-trusted=UID used with non-numeric UID in ${withval}.])
2462	if test "x${sh_tmp1}" = "x0"
2463	then
2464	sh_tmp_test=yes
2465	fi
2466	done
2467	if test "x${sh_tmp_test}" = "xno"
2468	then
2469	withval="0,${withval}"
2470	fi
2471	mytrust="${withval}"
2472	],
2473	[mytrust="0"] )
2474	AC_DEFINE_UNQUOTED(SL_ALWAYS_TRUSTED, ${mytrust} )
2475	AC_SUBST(mytrust)
2476
2477	mytmpdir=
2478
2479	AC_ARG_WITH(tmp-dir,
2480	[ --with-tmp-dir=PFX set directory for temporary files [[HOME]]],
2481	[
2482	if test "x${cross_compiling}" = xyes; then
2483	mytmpdir="$withval"
2484	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2485	else
2486	if test -d "${withval}"; then
2487	mytmpdir="$withval"
2488	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2489	else
2490	mytmpdir="$withval"
2491	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2492	AC_MSG_WARN([--with-tmp-dir: tmp directory ${withval} does not exist])
2493	fi
2494	fi
2495	]
2496	)
2497
2498	AC_SUBST(mytmpdir)
2499
2500
2501	dnl
2502	dnl PATH DEFAULTS
2503	dnl
2504
2505	if test "x${ac_prefix_set}" = xyes
2506	then
2507	if test "x${exec_prefix}" = xNONE
2508	then
2509	exec_prefix="${prefix}"
2510	fi
2511
2512	if test "x${prefix}" = xOPT
2513	then
2514	tmp_sbindir="/opt/${install_name}/bin"
2515	tmp_sysconfdir="/etc/opt"
2516	tmp_mandir="/opt/${install_name}/man"
2517	tmp_localstatedir="/var/opt/${install_name}"
2518	elif test "x${prefix}" = xUSR
2519	then
2520	tmp_sbindir="/usr/sbin"
2521	tmp_sysconfdir="/etc"
2522	tmp_mandir="/usr/share/man"
2523	tmp_localstatedir="/var"
2524	else
2525	tmp_sbindir=`eval echo ${sbindir}`
2526	tmp_sysconfdir=`eval echo ${sysconfdir}`
2527	tmp_mandir=`eval echo ${mandir}`
2528	tmp_localstatedir=`eval echo ${localstatedir}`
2529	fi
2530	else
2531	prefix=""
2532	if test "x${ac_exec_prefix_set}" = xyes
2533	then
2534	tmp_sbindir=`eval echo ${sbindir}`
2535	else
2536	tmp_sbindir="/usr/local/sbin"
2537	fi
2538	tmp_sysconfdir="/etc"
2539	# share/man -> man (FHS) 11.10.2002
2540	tmp_mandir="/usr/local/man"
2541	tmp_localstatedir="/var"
2542	fi
2543
2544
2545	if test "x${ac_sbindir_set}" = xyes
2546	then
2547	:
2548	else
2549	sbindir=`eval echo ${tmp_sbindir}`
2550	fi
2551
2552
2553	if test "x${ac_sysconfdir_set}" = xyes
2554	then
2555	:
2556	else
2557	sysconfdir=`eval echo ${tmp_sysconfdir}`
2558	fi
2559
2560	if test "x${ac_mandir_set}" = xyes
2561	then
2562	:
2563	else
2564	mandir=`eval echo ${tmp_mandir}`
2565	fi
2566
2567	if test "x${ac_localstatedir_set}" = xyes
2568	then
2569	:
2570	else
2571	localstatedir=`eval echo ${tmp_localstatedir}`
2572	fi
2573
2574
2575
2576	AC_ARG_WITH(config-file,
2577	[ --with-config-file=FILE configuration file [[/etc/{install_name}rc]]],
2578	[
2579	myconffile="${withval}"
2580	changequote(<<, >>)dnl
2581	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
2582	sysconfdir=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
2583	myrpmconffile="${tmp}"
2584	changequote([, ])dnl
2585	],
2586	[
2587	myconffile="${sysconfdir}/${install_name}rc"
2588	myrpmconffile="${myconffile}"
2589	]
2590	)
2591	AC_DEFINE_UNQUOTED(DEFAULT_CONFIGFILE, _("${myconffile}") )
2592	AC_SUBST(myconffile)
2593	AC_SUBST(myrpmconffile)
2594
2595	AC_ARG_WITH(log-file,
2596	[ --with-log-file=FILE path of log file [[/var/log/{install_name}_log]]],
2597	[
2598	mylogfile="$withval"
2599	changequote(<<, >>)dnl
2600	mylogdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
2601	changequote([, ])dnl
2602	],
2603	[
2604	if test "x${mytclient}" = "x-DSH_WITH_SERVER"; then
2605	mylogfile="${localstatedir}/log/${install_name}/${install_name}_log"
2606	mylogdir="${localstatedir}/log/${install_name}"
2607	else
2608	mylogfile="${localstatedir}/log/${install_name}_log"
2609	mylogdir="${localstatedir}/log"
2610	fi
2611	]
2612	)
2613	AC_DEFINE_UNQUOTED(DEFAULT_ERRFILE, _("${mylogfile}") )
2614	AC_DEFINE_UNQUOTED(DEFAULT_LOGDIR, _("${mylogdir}") )
2615	AC_SUBST(mylogfile)
2616	AC_SUBST(mylogdir)
2617
2618	AC_ARG_WITH(pid-file,
2619	[ --with-pid-file=FILE set path of pid file [[/var/run/{install_name}.pid]]],
2620	[
2621	mylockfile="$withval"
2622	changequote(<<, >>)dnl
2623	mylockdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
2624	changequote([, ])dnl
2625	],
2626	[
2627	mylockfile="${localstatedir}/run/${install_name}.pid"
2628	mylockdir="${localstatedir}/run"
2629	]
2630	)
2631	AC_DEFINE_UNQUOTED(DEFAULT_ERRLOCK, _("${mylockfile}") )
2632	AC_DEFINE_UNQUOTED(DEFAULT_PIDDIR, _("${mylockdir}") )
2633	AC_SUBST(mylockfile)
2634	AC_SUBST(mylockdir)
2635
2636	AC_ARG_WITH(state-dir,
2637	[ --with-state-dir=PFX set state data directory [[/var/lib/{install_name}]]],
2638	[
2639	mydataroot="$withval"
2640	],
2641	[
2642	mydataroot="${localstatedir}/lib/${install_name}"
2643	]
2644	)
2645	AC_ARG_WITH(data-file,
2646	[ --with-data-file=FILE set path of data file],
2647	[
2648	mydatafile="$withval"
2649	changequote(<<, >>)dnl
2650	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
2651	mydataroot=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
2652	myrpmdatafile="${tmp}"
2653	changequote([, ])dnl
2654	if test x"${tmp}" = x
2655	then
2656	echo "No local path in data file ${withval}"
2657	echo "This will not work for initializing the database."
2658	if test x"${withval}" = xREQ_FROM_SERVER
2659	then
2660	echo "It should be REQ_FROM_SERVER/some/local/path"
2661	fi
2662	AC_MSG_ERROR([Option --with-data-file=FILE used with invalid path ${withval}.])
2663	fi
2664	],
2665	[
2666	mydatafile="${mydataroot}/${install_name}_file"
2667	myrpmdatafile="${mydatafile}"
2668	])
2669	AC_DEFINE_UNQUOTED(DEFAULT_DATA_FILE, _("${mydatafile}") )
2670	AC_SUBST(mydatafile)
2671	AC_SUBST(myrpmdatafile)
2672
2673	AC_DEFINE_UNQUOTED(DEFAULT_DATAROOT, _("${mydataroot}") )
2674	AC_SUBST(mydataroot)
2675
2676	AC_DEFINE_UNQUOTED(DEFAULT_QDIR, _("${mydataroot}/.quarantine") )
2677	AC_SUBST(myqdir)
2678
2679
2680	AC_ARG_WITH(html-file,
2681	[ --with-html-file=FILE set path of html file,],
2682	[
2683	myhtmlfile="$withval"
2684	],
2685	[
2686	myhtmlfile="${mylogdir}/${install_name}.html"
2687	])
2688	AC_DEFINE_UNQUOTED(DEFAULT_HTML_FILE, _("${myhtmlfile}") )
2689	AC_SUBST(myhtmlfile)
2690
2691
2692	mydefargs=$ac_configure_args
2693	# if test -z "`echo "$mydefargs" \| grep "\-\-enable\-static" 2> /dev/null`"
2694	# then
2695	# mydefargs="--enable-static $mydefargs"
2696	# fi
2697	if test -z "`echo "$mydefargs" \| grep "\-\-enable\-base" 2> /dev/null`"
2698	then
2699	mydefargs="--enable-base=${mykeybase} $mydefargs"
2700	fi
2701	AC_SUBST(mydefargs)
2702
2703
2704	AC_DEFINE_UNQUOTED(SH_INSTALL_DIR, _("${sbindir}"))
2705	AC_DEFINE_UNQUOTED(SH_INSTALL_PATH, _("${sbindir}/${install_name}"))
2706	AC_DEFINE_UNQUOTED(SH_INSTALL_NAME, _("${install_name}"))
2707
2708	AC_CONFIG_HEADER(config.h)
2709
2710	AC_OUTPUT(
2711	[
2712	Makefile
2713	samhain-install.sh
2714	init/samhain.startLSB
2715	init/samhain.startLinux
2716	init/samhain.startGentoo
2717	init/samhain.startFreeBSD
2718	init/samhain.startSolaris
2719	init/samhain.startHPUX
2720	init/samhain.startIRIX
2721	init/samhain.startMACOSX
2722	samhain.spec
2723	rules.deb
2724	rules.deb-light
2725	hp_ux.psf
2726	scripts/samhain.spec
2727	scripts/redhat_i386.client.spec
2728	scripts/samhain.ebuild
2729	scripts/samhain.ebuild-light
2730	scripts/samhainadmin.pl
2731	scripts/yuleadmin.pl
2732	scripts/check_samhain.pl
2733	deploy.sh
2734	],
2735	[
2736	echo timestamp > stamp-h
2737	chmod +x samhain-install.sh
2738	chmod +x scripts/samhainadmin.pl
2739	chmod +x scripts/yuleadmin.pl
2740	chmod +x scripts/check_samhain.pl
2741	]
2742	)
2743
2744	chmod +x deploy.sh
2745
2746	if test "x${cross_compiling}" = xyes
2747	then
2748
2749	echo "--------------------------------------------------------------"
2750	echo
2751	echo "You are using a cross-compiler. The following system dependent"
2752	echo "values may have been set to default values that may be"
2753	echo "incorrect for your target system: "
2754	echo
2755	echo "ac_cv_c_bigendian bigendian byte order ${ac_cv_c_bigendian}"
2756	echo "ac_cv_c_long_double long double exists ${ac_cv_c_long_double}"
2757	echo "ac_cv_sizeof_char_p size of pointer to char ${ac_cv_sizeof_char_p}"
2758	echo "ac_cv_sizeof_char_p size of size_t ${ac_cv_sizeof_size_t}"
2759	echo "ac_cv_sizeof_unsigned_int size of unsigned int ${ac_cv_sizeof_unsigned_int}"
2760	echo "ac_cv_sizeof_unsigned_long size of unsigned long ${ac_cv_sizeof_unsigned_long}"
2761	echo "ac_cv_sizeof_unsigned_short size of unsigned short ${ac_cv_sizeof_unsigned_short}"
2762	echo
2763	echo "If these values are incorrect, change them in the file "
2764	echo "config.cache and run configure again."
2765	echo
2766	echo "--------------------------------------------------------------"
2767
2768	fi
2769
2770	if test x${silent} != xyes
2771	then
2772
2773	# A=`eval echo ${sbindir}` ; A=`eval echo ${A}`
2774	# B=`eval echo ${myconffile}` ; B=`eval echo ${B}`
2775	# C=`eval echo ${mandir}` ; C=`eval echo ${C}`
2776	# D=`eval echo ${mylockfile}` ; D=`eval echo ${D}`
2777	# E=`eval echo ${mylogfile}` ; E=`eval echo ${E}`
2778	# F=`eval echo ${mydataroot}` ; F=`eval echo ${F}`
2779
2780	echo
2781	echo " samhain has been configured as follows:"
2782	echo " System binaries: ${sbindir}"
2783	echo " Configuration file: ${myconffile}"
2784	echo " Manual pages: ${mandir}"
2785	echo " Data: ${mydataroot}"
2786	echo " PID file: ${mylockfile}"
2787	echo " Log file: ${mylogfile}"
2788	echo " Base key: ${mykeybase}"
2789	if test x"$mykeyid" != x
2790	then
2791	echo " target GPG/PGP key: ${mykeyid}"
2792	fi
2793	echo
2794	if test x"$mytclient" = x"-DSH_WITH_SERVER"
2795	then
2796	echo " Selected rc file: yulerc"
2797	else
2798	echo " Selected rc file: samhainrc.${selectconfig}"
2799	fi
2800
2801	fi
2802

Note: See TracBrowser for help on using the repository browser.

Download in other formats: