Context Navigation

source: trunk/configure.ac@ 460

Last change on this file since 460 was 460, checked in by katerina, 10 years ago
Better error message for update and fix for deadlock in UNIX entropy collector. 3.1.3 final.
File size: 79.7 KB

Line
1	dnl We want to override the standard _AC_INIT_PARSE_ARGS
2	dnl
3	AU_ALIAS([_AC_INIT_PARSE_ARGS], [SH_INIT_PARSE_ARGS])
4	AU_ALIAS([_AC_INIT_help], [SH_INIT_HELP])
5
6	AC_INIT(src/samhain.c)
7
8
9	AC_ARG_VAR([LIBS], [libraries to link against, e.g. -lintl])
10
11	dnl
12	dnl start
13	dnl
14	AM_INIT_AUTOMAKE(samhain, 3.1.3)
15	AC_DEFINE([SAMHAIN], 1, [Application is samhain])
16	AC_CANONICAL_HOST
17
18	dnl
19	dnl checks for programs
20	dnl
21
22	AC_PROG_CC
23	if test "$host" != "$build"; then
24	AC_CHECK_PROGS(BUILD_CC, gcc cc)
25	else
26	BUILD_CC=$CC
27	fi
28	AC_PROG_CPP
29	AC_PROG_INSTALL
30	AC_PROG_LN_S
31	AC_PROG_AWK
32	SH_PROG_LD
33	AC_PATH_PROG(cmd_hostname,hostname)
34	AC_SUBST(cmd_hostname)
35	AC_SUBST(BUILD_CC)
36
37	if test "x$GCC" = "xyes"; then
38	SH_GCC_VERSION
39	fi
40
41	AC_HEADER_STDC
42	dnl
43	dnl first one is a dummy because of an autoconf bug
44	dnl (no HAVE_... for first one)
45	dnl
46	AC_CHECK_HEADERS([sys/ipc.h sys/msg.h sys/uio.h fcntl.h])
47
48
49	AC_MSG_CHECKING([for OS specific issues])
50	mydebugflag=no
51	myneedg3=no
52	uid_cast="signed long"
53	selectconfig=linux
54	mynetbsd=no
55	sh_use_lcaps="undef"
56	dnmalloc_ok=yes
57	sh_use_pie=yes
58	enable_asm_ok=yes
59
60	case "$host_os" in
61
62	linux)
63	sh_use_lcaps="yes"
64	AC_DEFINE(HOST_IS_LINUX)
65	AC_DEFINE(HAVE_EXT2_IOCTLS)
66	AC_MSG_RESULT([use ioctl to get e2fs flags])
67	case "$host_cpu" in
68	i86)
69	AC_DEFINE(HOST_IS_I86LINUX)
70	;;
71	x86_64)
72	AC_DEFINE([HOST_IS_64LINUX], 1, [Define if host OS is 64bit Linux])
73	;;
74	*)
75	;;
76	esac
77	;;
78
79	osf)
80	AC_DEFINE([HOST_IS_OSF], 1, [Define if host OS is OSF])
81	if test "x$GCC" != "xyes"; then
82	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
83	CFLAGS="$CFLAGS -O2 -assume noaligned_objects"
84	myneedg3=yes
85	AC_MSG_RESULT([compiler needs assume noaligned_objects])
86	else
87	AC_MSG_RESULT([none])
88	fi
89	;;
90
91	cygwin)
92	AC_DEFINE(HOST_IS_CYGWIN)
93	AC_DEFINE([USE_REGISTRY_CHECK], 1, [Define for registry check])
94	dnmalloc_ok=no
95	enable_asm_ok=no
96	AC_MSG_RESULT([no trusted paths, no dnmalloc. no asm optimize])
97	;;
98
99	darwin\|apple)
100	AC_DEFINE(HOST_IS_DARWIN)
101	dnmalloc_ok=no
102	AC_MSG_RESULT([check resource forks, no dnmalloc])
103	;;
104
105	freebsd8\|freebsd9)
106	AC_DEFINE(HOST_IS_FREEBSD)
107	selectconfig=freebsd
108	case "$host_cpu" in
109	amd64\|x86_64)
110	dnmalloc_ok=no
111	AC_MSG_RESULT([no dnmalloc])
112	;;
113	*)
114	AC_MSG_RESULT([none])
115	;;
116	esac
117	;;
118
119	freebsd7)
120	AC_DEFINE(HOST_IS_FREEBSD)
121	selectconfig=freebsd
122	case "$host_cpu" in
123	amd64\|x86_64)
124	sh_use_pie=no
125	dnmalloc_ok=no
126	AC_MSG_RESULT([no dnmalloc and broken compiler toolchain])
127	;;
128	*)
129	AC_MSG_RESULT([none])
130	;;
131	esac
132	;;
133
134	freebsd)
135	AC_DEFINE(HOST_IS_FREEBSD)
136	selectconfig=freebsd
137	AC_MSG_RESULT([none])
138	;;
139
140	openbsd)
141	AC_DEFINE([HOST_IS_OPENBSD], 1, [Define if host OS is OPENBSD])
142	selectconfig=freebsd
143	dnmalloc_ok=no
144	AC_MSG_RESULT([dnmalloc does not work with pthreads])
145	;;
146
147	netbsd)
148	mynetbsd=yes
149	selectconfig=netbsd
150	AC_MSG_RESULT([bug with libresolve])
151	;;
152
153	solaris)
154	selectconfig=solaris
155	AC_DEFINE(HOST_IS_SOLARIS)
156	case "$host_cpu" in
157	i*86)
158	AC_DEFINE(HOST_IS_I86SOLARIS)
159	AC_MSG_RESULT([vsnprintf prototype])
160	;;
161	*)
162	AC_MSG_RESULT([none])
163	;;
164	esac
165	if test "x$GCC" != "xyes"; then
166	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
167	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
168	fi
169	if test -z "`echo "$CFLAGS" \| grep "\-xO2" 2> /dev/null`"; then
170	CFLAGS="$CFLAGS -xO2"
171	fi
172	if test -z "`echo "$CFLAGS" \| grep "\-Xa" 2> /dev/null`"; then
173	CFLAGS="$CFLAGS -Xa"
174	fi
175	LIBS="-lc $LIBS"
176	fi
177	;;
178
179
180	sun)
181	selectconfig=solaris
182	AC_DEFINE(HOST_IS_SOLARIS)
183	AC_MSG_RESULT([none])
184	;;
185
186	aix)
187	AC_DEFINE(HOST_IS_AIX)
188	selectconfig=aix5.2.0
189	uid_cast="unsigned long"
190	if test "x$GCC" != "xyes"; then
191	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
192	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
193	fi
194	if test -z "`echo "$CFLAGS" \| grep "\-O3" 2> /dev/null`"; then
195	CFLAGS="$CFLAGS -O3"
196	fi
197	if test -z "`echo "$CFLAGS" \| grep "\-qstrict" 2> /dev/null`"; then
198	CFLAGS="$CFLAGS -qstrict"
199	fi
200	AC_MSG_RESULT([AIX size_t in the accept call and optimize O3 qstrict])
201	else
202	AC_MSG_RESULT([AIX size_t in the accept call])
203	fi
204	;;
205
206	hpux)
207	AC_MSG_RESULT([HPUX need _XOPEN_SOURCE_EXTENDED for h_errno])
208	AC_DEFINE(HOST_IS_HPUX)
209	if test "x$GCC" != "xyes"; then
210	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
211	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
212	fi
213	if test -z "`echo "$CFLAGS" \| grep "\+O2" 2> /dev/null`"; then
214	CFLAGS="$CFLAGS +O2"
215	fi
216	fi
217	;;
218
219	ultrix)
220	AC_MSG_RESULT([ULTRIX getcwd uses popen])
221	AC_DEFINE(HAVE_BROKEN_GETCWD)
222	;;
223
224	*)
225	AC_MSG_RESULT([none])
226	;;
227	esac
228
229	AC_SUBST(selectconfig)
230	AC_DEFINE_UNQUOTED(UID_CAST, ${uid_cast})
231
232
233
234	dnl *****************************************
235	dnl
236	dnl checks for header files
237	dnl
238	dnl *****************************************
239
240	AC_HEADER_DIRENT
241	AC_HEADER_MAJOR
242	AC_HEADER_TIME
243	dnl used in minilzo.c
244	AC_HEADER_STAT
245	AC_DECL_SYS_SIGLIST
246
247	AC_CHECK_HEADERS(stddef.h libgen.h sched.h malloc.h sys/uio.h \
248	sys/mman.h sys/param.h sys/inotify.h \
249	sys/vfs.h mntent.h \
250	sys/select.h sys/socket.h netinet/in.h \
251	regex.h glob.h fnmatch.h \
252	linux/ext2_fs.h linux/fs.h ext2fs/ext2_fs.h asm/segment.h \
253	elf.h linux/elf.h auparse.h \
254	paths.h arpa/nameser.h arpa/nameser_compat.h \
255	rpc/rpcent.h rpc/rpc.h sys/statvfs.h,
256	[],
257	[],
258	[#include <sys/types.h>]
259	)
260
261
262	AC_CHECK_HEADER(utmpx.h, sh_utmpx="yes", sh_utmpx="no")
263	if test "x$sh_utmpx" = "xyes"; then
264	AC_DEFINE(HAVE_UTMPX_H)
265	AC_EGREP_HEADER(ut_host, utmpx.h, AC_DEFINE(HAVE_UTHOST) )
266	AC_EGREP_HEADER(ut_addr, utmpx.h, AC_DEFINE(HAVE_UTADDR) )
267	AC_EGREP_HEADER(ut_addr_v6, utmpx.h, AC_DEFINE(HAVE_UTADDR_V6) )
268	AC_EGREP_HEADER(ut_xtime,utmpx.h, AC_DEFINE(HAVE_UTXTIME) )
269	AC_EGREP_HEADER(ut_type, utmpx.h, AC_DEFINE(HAVE_UTTYPE) )
270	else
271	AC_EGREP_HEADER(ut_addr, utmp.h, AC_DEFINE(HAVE_UTADDR) )
272	AC_EGREP_HEADER(ut_host, utmp.h, AC_DEFINE(HAVE_UTHOST) )
273	AC_EGREP_HEADER(ut_type, utmp.h, AC_DEFINE(HAVE_UTTYPE) )
274	fi
275
276	dnl
277	dnl figure out where acct.h lives
278	dnl and whether fields are int/comp_t
279	dnl
280	dnl GNU Accounting Utilities
281	dnl Copyright (C) 1993, 1996, 1997, 2003, 2005 Free Software Foundation, Inc.
282	dnl The GNU Accounting Utilities are free software; you can redistribute
283	dnl them and/or modify them under the terms of the GNU General Public
284	dnl License as published by the Free Software Foundation; either version
285	dnl 2, or (at your option) any later version.
286	dnl
287	AC_CHECK_HEADER(sys/acct.h,
288	AC_DEFINE(HAVE_SYS_ACCT_H, ,
289	[Define if you have the <sys/acct.h> header file.])
290	AC_HEADER_EGREP(ac_utime, sys/acct.h,
291	AC_DEFINE(HAVE_ACUTIME, ,
292	[Define if <sys/acct.h> has the AC_UTIME field.])
293	AC_HEADER_EGREP(comp_t.*ac_utime, sys/acct.h,
294	AC_DEFINE(ACUTIME_COMPT, ,
295	[Define if <sys/acct.h>'s AC_UTIME field is a COMP_T.]))
296	)
297	AC_HEADER_EGREP(ac_stime, sys/acct.h,
298	AC_DEFINE(HAVE_ACSTIME, ,
299	[Define if <sys/acct.h> has the AC_STIME field.])
300	AC_HEADER_EGREP(comp_t.*ac_stime, sys/acct.h,
301	AC_DEFINE(ACSTIME_COMPT, ,
302	[Define if <sys/acct.h>'s AC_STIME field is a COMP_T.]))
303	)
304	AC_HEADER_EGREP(ac_etime, sys/acct.h,
305	AC_DEFINE(HAVE_ACETIME, ,
306	[Define if <sys/acct.h> has the AC_ETIME field.])
307	AC_HEADER_EGREP(comp_t.*ac_etime, sys/acct.h,
308	AC_DEFINE(ACETIME_COMPT, ,
309	[Define if <sys/acct.h>'s AC_ETIME field is a COMP_T.]))
310	)
311	AC_HEADER_EGREP(ac_io, sys/acct.h,
312	AC_DEFINE(HAVE_ACIO, ,
313	[Define if <sys/acct.h> has the AC_IO field.])
314	AC_HEADER_EGREP(comp_t.*ac_io, sys/acct.h,
315	AC_DEFINE(ACIO_COMPT, ,
316	[Define if <sys/acct.h>'s AC_IO field is a COMP_T.]))
317	)
318	AC_HEADER_EGREP(ac_mem, sys/acct.h,
319	AC_DEFINE(HAVE_ACMEM, ,
320	[Define if <sys/acct.h> has the AC_MEM field.])
321	AC_HEADER_EGREP(comp_t.*ac_mem, sys/acct.h,
322	AC_DEFINE(ACMEM_COMPT, ,
323	[Define if <sys/acct.h>'s AC_MEM field is a COMP_T.]))
324	)
325	AC_HEADER_EGREP(ac_minflt, sys/acct.h,
326	AC_HEADER_EGREP(ac_majflt, sys/acct.h,
327	AC_HEADER_EGREP(ac_swaps, sys/acct.h,
328	AC_DEFINE(HAVE_PAGING, ,
329	[Define if <sys/acct.h> has the AC_MINFLT, AC_MAJFLT and AC_SWAPS fields.])
330	AC_HEADER_EGREP(comp_t.*ac_minflt, sys/acct.h,
331	AC_DEFINE(ACMINFLT_COMPT, ,
332	[Define if <sys/acct.h>'s AC_MINFLT field is a COMP_T.]))
333	AC_HEADER_EGREP(comp_t.*ac_mayflt, sys/acct.h,
334	AC_DEFINE(ACMAJFLT_COMPT, ,
335	[Define if <sys/acct.h>'s AC_MAJFLT field is a COMP_T.]))
336	AC_HEADER_EGREP(comp_t.*ac_swaps, sys/acct.h,
337	AC_DEFINE(ACSWAPS_COMPT, ,
338	[Define if <sys/acct.h>'s AC_SWAPS field is a COMP_T.]))
339	)
340	)
341	)
342	AC_HEADER_EGREP(comp_t, sys/acct.h, AC_DEFINE(HAVE_COMP_T, ,
343	[Define if <sys/acct.h> uses the COMP_T type.]))
344	AC_HEADER_EGREP([struct acct_v3], sys/acct.h, AC_DEFINE(HAVE_ACCT_V3, ,
345	[Define if <sys/acct.h> has struct acct_v3.]))
346	AC_HEADER_EGREP([struct acctv2], sys/acct.h, AC_DEFINE(HAVE_ACCTV2, ,
347	[Define if <sys/acct.h> has struct acctv2.]))
348
349	)
350
351
352	dnl need to check because AIX 4.2 does not have it
353	dnl
354	AC_CHECK_MEMBERS([struct statfs.f_flags],[],[],[
355	#ifdef HAVE_SYS_TYPES_H
356	#include <sys/types.h>
357	#endif
358	#ifdef HAVE_SYS_STAT_H
359	#include <sys/stat.h>
360	#endif
361	#ifdef HAVE_SYS_VFS_H
362	#include <sys/vfs.h>
363	#endif
364	#ifdef HAVE_UNISTD_H
365	#include <unistd.h>
366	#endif
367	])
368
369	AC_SYS_LARGEFILE
370
371	dnl
372	dnl check whether _POSIX_SOURCE is required
373	dnl
374	SAMHAIN_POSIX
375
376
377	dnl *****************************************
378	dnl
379	dnl Checks for library functions.
380	dnl
381	dnl *****************************************
382	AC_FUNC_STRFTIME
383	AC_CHECK_FUNCS(memcmp memcpy memmove memset getpwent endpwent \
384	gettimeofday strlcat strlcpy strstr strchr strerror strsignal \
385	seteuid setreuid setresuid lstat getwd getcwd ptrace \
386	usleep setpriority getpeereid nanosleep \
387	strptime basename sched_yield hasmntopt \
388	inet_aton gethostbyname setutent setrlimit gethostname uname \
389	getaddrinfo getnameinfo \
390	initgroups getpagesize \
391	ttyname fchmod writev mmap tzset \
392	getsid getpriority getpgid statvfs \
393	strerror_r getgrgid_r getpwnam_r getpwuid_r \
394	gmtime_r localtime_r rand_r readdir_r strtok_r \
395	mincore posix_fadvise inotify_init1
396	)
397	AC_CHECK_FUNC(statfs, AC_DEFINE(HAVE_STATFS) statfs="yes", statfs="no")
398	SL_CHECK_VA_COPY
399	AC_CHECK_FUNCS(vsnprintf, [SL_CHECK_VSNPRINTF])
400	AC_CHECK_MLOCK
401	SH_STRFTIME_Z
402
403	AC_MSG_CHECKING(how to get filesystem type)
404	fstype=no
405	# The order of these tests is important.
406	AC_TRY_CPP([#include <sys/statvfs.h>
407	#include <sys/fstyp.h>], AC_DEFINE(FSTYPE_STATVFS) fstype=SVR4)
408	if test $fstype = no; then
409	AC_TRY_CPP([#include <sys/statfs.h>
410	#include <sys/fstyp.h>], AC_DEFINE(FSTYPE_USG_STATFS) fstype=SVR3)
411	fi
412	if test $fstype = no; then
413	AC_TRY_CPP([#include <sys/statfs.h>
414	#include <sys/vmount.h>], AC_DEFINE(FSTYPE_AIX_STATFS) fstype=AIX)
415	fi
416	if test $fstype = no; then
417	AC_TRY_CPP([#include <mntent.h>], AC_DEFINE(FSTYPE_MNTENT) fstype=4.3BSD)
418	fi
419	if test $fstype = no; then
420	AC_EGREP_HEADER(f_type;, sys/mount.h, AC_DEFINE(FSTYPE_STATFS) fstype=4.4BSD/OSF)
421	fi
422	if test $fstype = no; then
423	AC_TRY_CPP([#include <sys/mount.h>
424	#include <sys/fs_types.h>], AC_DEFINE(FSTYPE_GETMNT) fstype=Ultrix)
425	fi
426	AC_MSG_RESULT($fstype)
427
428	sh_libsocket=
429
430	dnl Solaris needs -lsocket and -lnsl. Unisys system includes
431	dnl gethostbyname in libsocket but needs libnsl for socket.
432	AC_CHECK_LIB(nsl, gethostbyname)
433	AC_CHECK_LIB(socket, socket, ac_need_libsocket=1, ac_try_nsl=1)
434	if test x$ac_need_libsocket = x1; then
435	LIBS="$LIBS -lsocket"
436	sh_libsocket="-lsocket"
437	fi
438	if test x$ac_try_nsl = x1; then
439	AC_CHECK_LIB(nsl, gethostbyname, ac_need_libnsl=1)
440	if test x$ac_need_libnsl = x1
441	then
442	LIBS="$LIBS -lnsl"
443	fi
444	fi
445	AC_SUBST(sh_libsocket)
446
447	AC_CHECK_LIB(socket, res_search, [
448	AC_CHECK_LIB(resolv, dn_skipname)
449	AC_CHECK_LIB(resolv, __dn_skipname)
450	if test x$ac_need_libsocket = x1; then
451	:
452	else
453	LIBS="$LIBS -lsocket"
454	fi
455	], [
456	AC_CHECK_LIB(resolv, res_search, [
457	LIBS="$LIBS -lresolv"
458	], [
459	AC_CHECK_LIB(resolv, dn_skipname)
460	AC_CHECK_LIB(resolv, __dn_skipname)
461	])
462	])
463
464	sh_auparse=no
465
466	if test "x$ac_cv_header_auparse_h" = "xyes"
467	then
468	AC_CHECK_LIB(auparse, auparse_find_field, [
469	LIBS="$LIBS -lauparse"
470	sh_auparse=yes
471	AC_DEFINE(HAVE_AUPARSE_LIB, 1, [Define if you have the auparse lib])
472	])
473	fi
474
475	dnl arguments for accept
476
477	dnl check for Unix98 socklen_t (found on
478	dnl xemacs-patches mailing list, written
479	dnl by Martin Buchholz)
480	dnl
481	dnl On Darwin(MacOSX) socklen_t needs to be
482	dnl an int (see accept man page), on all other
483	dnl unix systems we need a size_t.
484
485	AC_MSG_CHECKING(for socklen_t)
486	AC_TRY_COMPILE([
487	#ifdef HAVE_SYS_TYPES_H
488	#include <sys/types.h>
489	#endif
490	#ifdef HAVE_SYS_SOCKET_H
491	#include <sys/socket.h>
492	#endif
493	socklen_t x;
494	], [],[
495	AC_MSG_RESULT(yes)
496	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[socklen_t], [type of arg3 of accept])
497	AC_DEFINE([HAVE_SOCKLEN_T], 1, [Define if you have socklen_t])
498	],[
499	AC_TRY_COMPILE([
500	#ifdef HAVE_SYS_TYPES_H
501	#include <sys/types.h>
502	#endif
503	#ifdef HAVE_SYS_SOCKET_H
504	#include <sys/socket.h>
505	#endif
506	int accept (int, struct sockaddr , size_t );
507	],[],[
508	AC_MSG_RESULT(size_t)
509	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[size_t], [type of arg3 of accept])
510	], [
511	AC_MSG_RESULT(int)
512	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[int], [type of arg3 of accept])
513	]
514	)
515	])
516
517	dnl *****************************************
518	dnl checks for extended attribute or ACL
519	dnl support
520	dnl *****************************************
521
522	sh_CHECK_XATTR
523	sh_CHECK_POSIX_ACL
524
525	dnl *****************************************
526	dnl checks for typedefs
527	dnl *****************************************
528
529	AC_C_LONG_DOUBLE
530	SH_CHECK_TYPEDEF(long long, HAVE_LONG_LONG)
531	SH_CHECK_TYPEDEF(uint16_t, HAVE_UINT16_T)
532	SH_CHECK_TYPEDEF(uint64_t, HAVE_UINT64_T)
533	if test "$sh_HAVE_LONG_LONG" = "yes"; then
534	AC_CHECK_SIZEOF(unsigned long long, 4)
535	sh_sizeof_unsigned_long_long=`echo "$ac_cv_sizeof_unsigned_long_long" \| sed 's%[^0-9]%%g'`
536	if test "$sh_sizeof_unsigned_long_long" = "8"; then
537	AC_DEFINE(HAVE_LONG_LONG_64, 1, [Define if you have 64bit long long])
538	fi
539	fi
540
541	AC_CHECK_TYPE(ptrdiff_t, long)
542	AC_TYPE_SIZE_T
543	AC_CHECK_SIZEOF(char *, 4)
544	AC_CHECK_SIZEOF(size_t, 4)
545
546	AC_CHECK_SIZEOF(unsigned long, 4)
547	AC_CHECK_SIZEOF(unsigned int, 4)
548	AC_CHECK_SIZEOF(unsigned short, 2)
549
550
551	sh_sizeof_unsigned_long=`echo "$ac_cv_sizeof_unsigned_long" \| sed 's%[^0-9]%%g'`
552	if test "$sh_sizeof_unsigned_long" = "4"; then
553	AC_DEFINE(HAVE_LONG_32)
554	fi
555	if test "$sh_sizeof_unsigned_long" = "8"; then
556	AC_DEFINE(HAVE_LONG_64)
557	fi
558	sh_sizeof_unsigned_int=`echo "$ac_cv_sizeof_unsigned_int" \| sed 's%[^0-9]%%g'`
559	if test "$sh_sizeof_unsigned_int" = "4"; then
560	AC_DEFINE(HAVE_INT_32)
561	fi
562	sh_sizeof_unsigned_short=`echo "$ac_cv_sizeof_unsigned_short" \| sed 's%[^0-9]%%g'`
563	if test "$sh_sizeof_unsigned_short" = "4"; then
564	AC_DEFINE(HAVE_SHORT_32)
565	fi
566
567	dnl
568	dnl check for 64 bit programming environment
569	dnl
570	SAMHAIN_64
571
572
573	dnl *****************************************
574	dnl checks for structures
575	dnl *****************************************
576
577	AC_STRUCT_TM
578
579	dnl
580	dnl from e2fsprogs
581	dnl
582	AC_MSG_CHECKING(whether struct stat has a st_flags field)
583	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags,
584	AC_TRY_COMPILE([#include <sys/stat.h>],
585	[struct stat stat; stat.st_flags = 0;],
586	[e2fsprogs_cv_struct_st_flags=yes],
587	[e2fsprogs_cv_struct_st_flags=no]))
588	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags)
589	if test "$e2fsprogs_cv_struct_st_flags" = yes; then
590	AC_MSG_CHECKING(whether st_flags field is useful)
591	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags_immut,
592	AC_TRY_COMPILE([#include <sys/stat.h>],
593	[struct stat stat; stat.st_flags \|= UF_IMMUTABLE;],
594	[e2fsprogs_cv_struct_st_flags_immut=yes],
595	[e2fsprogs_cv_struct_st_flags_immut=no]))
596	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags_immut)
597	if test "$e2fsprogs_cv_struct_st_flags_immut" = yes; then
598	AC_DEFINE(HAVE_STAT_FLAGS)
599	fi
600	fi
601
602	dnl
603	dnl from dbus
604	dnl
605	AC_MSG_CHECKING(for struct cmsgcred)
606	AC_TRY_COMPILE([
607	#include <sys/types.h>
608	#include <sys/socket.h>
609	],[
610	struct cmsgcred cred;
611
612	cred.cmcred_pid = 0;
613	],sh_have_struct_cmsgcred=yes,sh_have_struct_cmsgcred=no)
614	AC_MSG_RESULT($sh_have_struct_cmsgcred)
615
616	if test x$sh_have_struct_cmsgcred = xyes; then
617	AC_DEFINE(HAVE_STRUCT_CMSGCRED,1,[Have cmsgcred structure])
618	fi
619
620	AC_MSG_CHECKING(for struct fcred)
621	AC_TRY_COMPILE([
622	#include <sys/param.h>
623	#include <sys/socket.h>
624	#include <sys/ucred.h>
625	],[
626	struct fcred sockcred;
627	],sh_have_struct_fcred=yes,sh_have_struct_fcred=no)
628	AC_MSG_RESULT($sh_have_struct_fcred)
629
630	if test x$sh_have_struct_fcred = xyes; then
631	AC_DEFINE(HAVE_STRUCT_FCRED,1,[Have fcred structure])
632	fi
633
634	AC_MSG_CHECKING(for struct sockcred)
635	AC_TRY_COMPILE([
636	#include <sys/param.h>
637	#include <sys/socket.h>
638	#include <sys/ucred.h>
639	],[
640	struct sockcred sockcred;
641	],sh_have_struct_sockcred=yes,sh_have_struct_sockcred=no)
642	AC_MSG_RESULT($sh_have_struct_sockcred)
643
644	if test x$sh_have_struct_sockcred = xyes; then
645	AC_DEFINE(HAVE_STRUCT_SOCKCRED,1,[Have sockcred structure])
646	fi
647
648	AC_MSG_CHECKING(for SO_PEERCRED)
649	AC_TRY_COMPILE([
650	#include <sys/types.h>
651	#include <sys/socket.h>
652	],[
653	int test = SO_PEERCRED;
654	],sh_have_SO_PEERCRED=yes,sh_have_SO_PEERCRED=no)
655	AC_MSG_RESULT($sh_have_SO_PEERCRED)
656
657	if test x$sh_have_SO_PEERCRED = xyes; then
658	AC_DEFINE(HAVE_SO_PEERCRED,1,[Have SO_PEERCRED define])
659	fi
660
661
662	dnl *****************************************
663	dnl checks for compiler characteristics
664	dnl *****************************************
665	AC_C_INLINE
666	AC_C_CONST
667	AC_C_BIGENDIAN
668	AC_C_RESTRICT
669
670	AM_SA_SIGACTION_WORKS
671
672	AC_ARG_ENABLE(ssp,
673	[ --disable-ssp disable the GCC stack protector],
674	[],
675	[enable_ssp=yes;]
676	)
677
678	if test "x$GCC" = "xyes"; then
679
680	if test x"${enable_ssp}" = xno; then
681	:
682	else
683	GCC_STACK_PROTECT_LIB
684	GCC_STACK_PROTECT_CC
685	dnl GCC_STACK_CHECK_CC
686	GCC_PIE_CC
687	fi
688
689	fi
690
691	dnl *****************************************
692	dnl
693	dnl checks for system services
694	dnl
695	dnl *****************************************
696
697	dnl
698	dnl check for /proc filesystem
699	dnl
700	if test -d "/proc/$$"
701	then
702	AC_DEFINE([HAVE_PROCFS],[1],[Define if you have a proc fs])
703	fi
704
705	dnl
706	dnl check for GNU gmp
707	dnl
708	AC_CHECK_LIB(gmp, __gmpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
709	if test "x${sh_have_gmp}" = xno
710	then
711	AC_CHECK_LIB(gmp, mpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
712	fi
713	if test "x${sh_have_gmp}" = xyes
714	then
715	# LIBS="-lgmp $LIBS"
716	AC_DEFINE(HAVE_LIBGMP, 1, [Have GNU gmp library])
717	fi
718	AC_CHECK_HEADERS(gmp.h)
719
720	AC_MSG_CHECKING([for ps])
721	PS=
722	for ff in /usr/ucb /bin /usr/bin; do
723	if test -x "$ff/ps"; then
724	PS="$ff/ps"
725	AC_MSG_RESULT([$PS])
726	break
727	fi
728	done
729	if test x$PS = x
730	then
731	AC_MSG_RESULT([no])
732	AC_MSG_ERROR([Cannot find ps in any of /usr/ucb /bin /usr/bin])
733	fi
734	AC_DEFINE_UNQUOTED([PSPATH], _("$PS"), [Path to ps])
735
736	AC_MSG_CHECKING([how to use ps])
737	$PS ax >/dev/null 2>&1
738	if test $? -eq 0; then
739	case "$host_os" in
740	openbsd)
741	one=`$PS akx \| wc -l`
742	;;
743	*)
744	one=`$PS ax \| wc -l`
745	;;
746	esac
747	else
748	one=0
749	fi
750	$PS -e >/dev/null 2>&1
751	if test $? -eq 0; then
752	two=`$PS -e \| wc -l`
753	else
754	two=0
755	fi
756	if test $one -ge $two
757	then
758	case "$host_os" in
759	openbsd)
760	PSARG="akx"
761	;;
762	*)
763	PSARG="ax"
764	;;
765	esac
766	else
767	PSARG="-e"
768	fi
769	AC_DEFINE_UNQUOTED([PSARG], _("$PSARG"), [Argument for ps])
770	AC_MSG_RESULT([$PS $PSARG])
771
772	dnl *****************************************
773	dnl
774	dnl enable features
775	dnl
776	dnl *****************************************
777
778	AC_ARG_ENABLE(db-reload,
779	[ --enable-db-reload enable database reload on SIGHUP [[no]]],
780	[
781	if test "x${enable_db_reload}" = xyes; then
782	AC_DEFINE(RELOAD_DATABASE)
783	fi
784	]
785	)
786
787	AC_ARG_ENABLE(xml-log,
788	[ --enable-xml-log enable XML logfile format [[no]]],
789	[
790	if test "x${enable_xml_log}" = xyes; then
791	AC_DEFINE(SH_USE_XML)
792	fi
793	]
794	)
795
796
797	AC_ARG_ENABLE(mail,
798	[ --disable-mail disable the internal SMTP mailer],
799	[
800	if test "x${enable_mail}" = xno; then
801	:
802	else
803	AC_DEFINE(SH_WITH_MAIL)
804	fi
805	],
806	[AC_DEFINE(SH_WITH_MAIL)]
807	)
808
809	AC_ARG_ENABLE(suid,
810	[ --enable-suid allow suid],
811	[
812	if test "x${enable_suid}" = xyes; then
813	AC_DEFINE(SH_ALLOW_SUID, [1], [Define if you want to allow suid execution for samhain])
814	fi
815	]
816	)
817
818	AC_ARG_ENABLE(shellexpand,
819	[ --disable-shellexpand disable shell expansion in config file],
820	[
821	if test "x${enable_shellexpand}" = xno; then
822	:
823	else
824	AC_DEFINE(SH_EVAL_SHELL, [1], [Define if you want shell expansion in configuration file])
825	fi
826	],
827	[AC_DEFINE(SH_EVAL_SHELL, [1], [Define if you want shell expansion in configuration file])]
828	)
829
830	AC_ARG_ENABLE(external-scripts,
831	[ --disable-external-scripts disable interface to external scripts],
832	[
833	if test "x${enableval}" = xno; then
834	:
835	else
836	AC_DEFINE(WITH_EXTERNAL)
837	fi
838	],
839	[AC_DEFINE(WITH_EXTERNAL)]
840	)
841
842	AC_ARG_ENABLE(message-queue,
843	[ --enable-message-queue[[=MODE]] enable SysV message queue [[MODE=0700]]],
844	[
845	if test "x${ac_cv_header_sys_msg_h}" = "xyes"; then
846	if test "x${enable_message_queue}" = xyes; then
847	AC_DEFINE(WITH_MESSAGE_QUEUE)
848	AC_DEFINE_UNQUOTED(MESSAGE_QUEUE_MODE, 0700)
849	elif test "x${enable_message_queue}" != xno; then
850	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
851	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be numeric])
852	echo "${enableval}" \| \
853	grep ['0[0123456789][0123456789][0123456789]'] >/dev/null 2>&1 \|\|
854	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be an octal (0nnn) number])
855	AC_DEFINE(WITH_MESSAGE_QUEUE)
856	AC_DEFINE_UNQUOTED(MESSAGE_QUEUE_MODE, ${enable_message_queue})
857	fi
858	else
859	echo
860	echo "**********************************************"
861	echo
862	AC_MSG_WARN([sys/msg.h missing, --enable-message-queue disabled])
863	echo
864	echo "**********************************************"
865	echo
866	fi
867	]
868	)
869
870	AC_ARG_WITH(cflags,
871	[ --with-cflags additional flags to pass to compiler],
872	[
873	if test "x$withval" != "xno" ; then
874	CFLAGS="$CFLAGS $withval"
875	fi
876	]
877	)
878	AC_ARG_WITH(libs,
879	[ --with-libs additional libraries to link with],
880	[
881	if test "x$withval" != "xno" ; then
882	LIBS="$LIBS $withval"
883	fi
884	]
885	)
886
887
888	#
889	# this is from ssh
890	#
891	AC_MSG_CHECKING(whether to use libwrap)
892	LIBWRAP_LIB=""
893	LIBWRAP_INC=""
894	AC_ARG_WITH(libwrap,
895	[ --with-libwrap[=PATH] Compile in libwrap (TCP Wrappers) support],
896	[ AC_MSG_RESULT($withval)
897	case "$withval" in
898	no)
899	;;
900	""\|yes)
901	LIBWRAP_LIB="-lwrap"
902	;;
903	*)
904	if test -d "$withval"; then
905	LIBWRAP_LIB="-L$withval -lwrap"
906	changequote(<<, >>)dnl
907	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
908	LIBWRAP_INC="-I${sh_libwrap_inc}/include"
909	changequote([, ])dnl
910	else
911	LIBWRAP_LIB="-lwrap"
912	changequote(<<, >>)dnl
913	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
914	LIBWRAP_INC="-I${sh_libwrap_inc}"
915	changequote([, ])dnl
916	fi
917	;;
918	esac
919	if test -n "$LIBWRAP_LIB"; then
920	# OLDLIBS="$LIBS"
921	LIBS="$LIBWRAP_LIB $LIBS"
922	# OLDCFLAGS="$CFLAGS"
923	CFLAGS="$CFLAGS $LIBWRAP_INC"
924	AC_CHECK_HEADER(tcpd.h,
925	[],
926	[ AC_MSG_ERROR([Could not find tcpd.h for libwrap. You need to install tcp_wrappers.]) ])
927	AC_TRY_LINK([ #include <tcpd.h>
928	int allow_severity; int deny_severity; ],
929	[ hosts_access((struct request_info *) 0); ],
930	[ AC_DEFINE(SH_USE_LIBWRAP,1,[Build with tcp wrapper support]) ],
931	[ AC_MSG_ERROR([Could not find the libwrap library.]) ])
932	fi ],
933	AC_MSG_RESULT(no)
934	)
935
936
937	dnl
938	dnl NETWORK OPTIONS
939	dnl
940	AC_ARG_ENABLE(network,
941	[ --enable-network=[[client\|server]] compile client or server [[no]]],
942	[
943	if test "x$enable_network" = xclient; then
944	mytclient="-DSH_WITH_CLIENT"
945	yulectl_prg=
946	setpwd_prg="samhain_setpwd"
947	sh_main_prg="samhain"
948	if test "x${sh_have_gmp}" = xyes
949	then
950	LIBS="-lgmp $LIBS"
951	fi
952	dnl AC_CHECK_HEADER(sys/capability.h,
953	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
954	dnl [sh_use_lcaps="no"])
955	elif test "x$enable_network" = xserver; then
956	mytclient="-DSH_WITH_SERVER"
957	yulectl_prg="yulectl"
958	setpwd_prg="samhain_setpwd"
959	sh_main_prg="yule"
960	if test "x${sh_have_gmp}" = xyes
961	then
962	LIBS="-lgmp $LIBS"
963	fi
964	sh_use_lcaps="undef"
965	elif test "x$enable_network" = xno; then
966	mytclient="-DSH_STANDALONE"
967	yulectl_prg=
968	setpwd_prg=
969	sh_main_prg="samhain"
970	dnl AC_CHECK_HEADER(sys/capability.h,
971	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
972	dnl [sh_use_lcaps="no"])
973	else
974	AC_MSG_ERROR([With --enable-network=WHAT, WHAT must be client, server, or no])
975	fi
976	],
977	[
978	mytclient="-DSH_STANDALONE"
979	setpwd_prg=
980	yulectl_prg=
981	sh_main_prg="samhain"
982	dnl AC_CHECK_HEADER(sys/capability.h,
983	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
984	dnl [sh_use_lcaps="no"])
985	],
986	)
987
988	AC_SUBST(setpwd_prg)
989	AC_SUBST(yulectl_prg)
990	AC_SUBST(sh_main_prg)
991	AC_SUBST(mytclient)
992
993	# needed for the rpm spec
994	clmytclient=`echo ${mytclient} \| sed s%\-%%`
995	AC_SUBST(clmytclient)
996
997	sh_no_gcc_static=no
998
999	AC_ARG_ENABLE(static,
1000	[ --enable-static enable static linking [[no]]],
1001	[
1002	if test x$enable_static = xyes; then
1003	if test x"$mynetbsd" = xyes
1004	then
1005	tmp_LIBS=`echo $LIBS \| sed 's%\-lresolv%%' `
1006	LIBS="${tmp_LIBS}"
1007	fi
1008	if test x"${sh_auparse}" = xyes
1009	then
1010	tmp_LIBS=`echo $LIBS \| sed 's%\-lauparse%%' `
1011	LIBS="${tmp_LIBS}"
1012	fi
1013	AC_DEFINE(SH_COMPILE_STATIC, 1, [Define if compiling static])
1014	if test "x$GCC" = "xyes"; then
1015	sh_no_gcc_static=no
1016	LDFLAGS="$LDFLAGS -static"
1017	else
1018	sh_no_gcc_static=yes
1019	case "$host_os" in
1020
1021	aix)
1022	LDFLAGS="$LDFLAGS -bnso -bI:/lib/syscalls.exp"
1023	;;
1024
1025	hpux)
1026	LDFLAGS="$LDFLAGS -Wl,-a,archive"
1027	;;
1028
1029	osf)
1030	LDFLAGS="$LDFLAGS -non_shared"
1031	;;
1032
1033	irix)
1034	LDFLAGS="$LDFLAGS -non_shared"
1035	;;
1036
1037	sco)
1038	LDFLAGS="$LDFLAGS -dn"
1039	;;
1040
1041	sun)
1042	LDFLAGS="$LDFLAGS -Bstatic"
1043	;;
1044
1045	solaris)
1046	LDFLAGS="$LDFLAGS -Bstatic"
1047	;;
1048
1049	*)
1050	echo "***********************************************"
1051	echo "*"
1052	echo "* Don't know how to enable static linking"
1053	echo "* with your compiler. Please set the environment"
1054	echo "* variable LDFLAGS to:"
1055	echo "* ${LDFLAGS} + the static linking flag"
1056	echo "* and run configure again"
1057	echo "*"
1058	echo "***********************************************"
1059	;;
1060
1061	esac
1062	fi
1063	fi
1064	]
1065	)
1066
1067	if test x"${mytclient}" = x-DSH_STANDALONE -o x"${mytclient}" = x-DSH_WITH_CLIENT;
1068	then
1069	dnl For threaded modules
1070	ACX_PTHREAD
1071	CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
1072	LIBS="$PTHREAD_LIBS $LIBS"
1073	LDFLAGS="$PTHREAD_CFLAGS $LDFLAGS"
1074	CC="$PTHREAD_CC"
1075	dnl For MODI_TXT
1076	CHECK_ZLIB()
1077	fi
1078
1079	if test x$enable_static = xyes; then
1080	:
1081	else
1082	if test x$sh_use_pie = xyes; then
1083	LDFLAGS="$LDFLAGS $PIE_LDFLAGS"
1084	CFLAGS="$CFLAGS $PIE_CFLAGS"
1085	fi
1086	fi
1087	AC_CHECK_FUNC(pmap_getmaps,
1088	AC_DEFINE([HAVE_PMAP_GETMAPS], [], [Define if pmap_getmaps available]), [],[])
1089
1090
1091	#
1092	# this is from the snort configure.in
1093	#
1094	AC_DEFUN(FAIL_MESSAGE,[
1095	echo
1096	echo
1097	echo "**********************************************"
1098	echo " ERROR: unable to find" $1
1099	echo " checked in the following places"
1100	for i in `echo $2`; do
1101	echo " $i"
1102	done
1103	echo "**********************************************"
1104	echo
1105	exit
1106	])
1107
1108	AC_ARG_WITH(libprelude-prefix,
1109	[ --with-libprelude-prefix=PFX Prefix where libprelude is installed (optional)],
1110	libprelude_config_prefix="$withval", libprelude_config_prefix="")
1111
1112	AC_MSG_CHECKING(whether to use prelude)
1113	AC_ARG_WITH(prelude,
1114	[ --with-prelude Prelude IDS support [[no]]],
1115	[
1116	if test "x${withval}" = "xno"; then
1117	AC_MSG_RESULT(no)
1118	else
1119	AC_MSG_RESULT(yes)
1120	if test x$libprelude_config_prefix != x ; then
1121	if test x${LIBPRELUDE_CONFIG+set} != xset ; then
1122	LIBPRELUDE_CONFIG=$libprelude_config_prefix/bin/libprelude-config
1123	fi
1124	fi
1125
1126	AC_PATH_PROG(LIBPRELUDE_CONFIG, libprelude-config, no)
1127	if test x"$LIBPRELUDE_CONFIG" = "xno" ; then
1128	HAVE_PRELUDE_CONFIG=no
1129	else
1130	HAVE_PRELUDE_CONFIG=yes
1131	fi
1132	dnl AC_CHECK_PROG(HAVE_PRELUDE_CONFIG, libprelude-config, yes, no)
1133	if test "$HAVE_PRELUDE_CONFIG" = "yes"; then
1134	sh_libprelude_version=`$LIBPRELUDE_CONFIG --version`
1135	case "$sh_libprelude_version" in
1136	0.8*)
1137	AC_MSG_ERROR([You have Libprelude 0.8, which is too old. Version 0.9.6 or higher is required.])
1138	;;
1139	*)
1140	AM_PATH_LIBPRELUDE([0.9.6],
1141	[
1142	AC_DEFINE(HAVE_LIBPRELUDE,1,[Have libprelude])
1143	CFLAGS="$CFLAGS $LIBPRELUDE_PTHREAD_CFLAGS"
1144	LDFLAGS="$LDFLAGS $LIBPRELUDE_LDFLAGS"
1145	LIBS="$LIBS $LIBPRELUDE_LIBS"
1146	],
1147	[
1148	AC_MSG_ERROR([Could not find libprelude (if you are using --enable-static, the static library libprelude.a might be missing).])
1149	])
1150	;;
1151	esac
1152	else
1153	AC_MSG_ERROR([Could not find libprelude-config.])
1154	fi
1155	fi
1156	],
1157	[
1158	AC_MSG_RESULT(no)
1159	]
1160	)
1161
1162	#
1163	# partly based on the snort configure.in
1164	#
1165	AC_ARG_WITH(database,
1166	[ --with-database=[[mysql\|postgresql\|oracle\|odbc]] database support [[no]]],
1167	[
1168	if test x"$enable_xml_log" != xyes; then
1169	AC_MSG_ERROR([With --with-database, --enable-xml-log is required as well.])
1170	fi
1171	if test "x${withval}" = "xmysql"; then
1172	if test "x$zlib_found" = "x"
1173	then
1174	CHECK_ZLIB()
1175	fi
1176	AC_CHECK_PROG(HAVE_MYSQL_CONFIG, mysql_config, yes, no)
1177	if test "$HAVE_MYSQL_CONFIG" = "yes"; then
1178	sh_mysql_libs="`mysql_config --libs`"
1179	sh_mysql_libs="`eval echo ${sh_mysql_libs}`"
1180	LIBS="$LIBS ${sh_mysql_libs}"
1181	sh_mysql_cflags="`mysql_config --cflags`"
1182	sh_mysql_cflags="`eval echo ${sh_mysql_cflags}`"
1183	CPPFLAGS="$CPPFLAGS ${sh_mysql_cflags}"
1184	else
1185	AC_MSG_CHECKING([for MySQL in /usr /usr/local /usr/local/mysql MYSQL_HOME])
1186	mysql_directory="/usr /usr/local /usr/local/mysql ${MYSQL_HOME}"
1187
1188	for i in $mysql_directory; do
1189	if test -r $i/include/mysql/mysql.h; then
1190	MYSQL_DIR=$i
1191	MYSQL_INC_DIR=$i/include
1192	# we use AC_CHECK_HEADERS to check for mysql/mysql.h
1193	fi
1194	done
1195	if test -z "$MYSQL_DIR"; then
1196	for i in $mysql_directory; do
1197	if test -r $i/include/mysql.h; then
1198	MYSQL_DIR=$i
1199	MYSQL_INC_DIR=$i/include
1200	fi
1201	done
1202	fi
1203
1204	if test -z "$MYSQL_DIR"; then
1205	tmp=""
1206	for i in $mysql_directory; do
1207	tmp="$tmp $i/include $i/include/mysql"
1208	done
1209	FAIL_MESSAGE("mysql headers (mysql.h)", $tmp)
1210	fi
1211
1212	for i in lib lib/mysql; do
1213	str="$MYSQL_DIR/$i/libmysqlclient.*"
1214	for j in `echo $str`; do
1215	if test -r $j; then
1216	MYSQL_LIB_DIR="$MYSQL_DIR/$i"
1217	break 2
1218	fi
1219	done
1220	done
1221
1222	if test -z "$MYSQL_LIB_DIR"; then
1223	for ff in $mysql_directory; do
1224	for i in lib lib/mysql; do
1225	str="$ff/$i/libmysqlclient.*"
1226	for j in `echo $str`; do
1227	if test -r $j; then
1228	MYSQL_LIB_DIR="$ff/$i"
1229	break 3
1230	fi
1231	done
1232	done
1233	done
1234	fi
1235
1236	if test -z "$MYSQL_LIB_DIR"; then
1237	tmp=""
1238	for i in $mysql_directory; do
1239	tmp="$i/lib $i/lib/mysql"
1240	done
1241	FAIL_MESSAGE("mysql library libmysqlclient", $tmp)
1242	fi
1243
1244	AC_MSG_RESULT(yes)
1245	LIBS="$LIBS -L${MYSQL_LIB_DIR} -lmysqlclient"
1246	# CFLAGS="$CFLAGS -I${MYSQL_INC_DIR}"
1247	CPPFLAGS="$CPPFLAGS -I${MYSQL_INC_DIR}"
1248	fi
1249	AC_DEFINE(WITH_MYSQL)
1250	AC_DEFINE(WITH_DATABASE)
1251	if test "x$zlib_found" = "xyes"
1252	then
1253	LIBS="$LIBS -lz -lm"
1254	else
1255	echo
1256
1257	echo " Mysql library was not found or not useable."
1258	echo " Possible reasons include:"
1259	echo " - an old, incompatible version compiled from source"
1260	echo " - on Solaris, libmysql is compiled with the Solaris"
1261	echo " compiler, thus the mysql_config script provides"
1262	echo " compiler options unsuitable for gcc (move"
1263	echo " mysql_config out of your PATH)"
1264	echo " For other problems, check config.log for the error"
1265	echo " message from the compiler."
1266	echo
1267	echo " If your mysql libraries are installed in an"
1268	echo " unusual place, use --with-libs=-L/path/to/libdirectory"
1269	echo " where libdirectory is the directory holding libmysql."
1270	if test x"$enable_static" = xyes; then
1271	echo " Note that for compiling a static binary, you need"
1272	echo " the static libraries, rather than the shared ones."
1273	fi
1274	echo
1275	AC_MSG_ERROR([Could not find libmysql, or it is not useable.])
1276	fi
1277	AC_CHECK_HEADERS(mysql/mysql.h)
1278	elif test "x${withval}" = "xpostgresql"; then
1279	AC_DEFINE(WITH_POSTGRES)
1280	AC_DEFINE(WITH_DATABASE)
1281	#
1282	PGCONF="no"
1283	MY_PATH="${PATH}:/usr/local/bin:/usr/local/pgsql/bin"
1284	OLD_IFS="$IFS"
1285	IFS=":"
1286	for ff in ${MY_PATH}
1287	do
1288	if test -f "$ff/pg_config"
1289	then
1290	PGCONF="$ff/pg_config"
1291	fi
1292	done
1293	IFS="${OLD_IFS}"
1294	#
1295	#
1296	if test "x${PGCONF}" = "xno"
1297	then
1298	AC_MSG_CHECKING(for PostgreSQL in /usr/local/pgsql /usr/pgsql /usr/local /usr PGSQL_HOME)
1299	pgsql_directory="/usr/local/pgsql /usr/pgsql /usr/local /usr ${PGSQL_HOME}"
1300	for i in $pgsql_directory; do
1301	if test -r $i/include/pgsql/libpq-fe.h; then
1302	PGSQL_INC_DIR=$i/include
1303	PGSQL_DIR=$i
1304	# use AC_CHECK_HEADERS to check for pgsql/libpq-fe.h
1305	fi
1306	done
1307	if test -z "$PGSQL_DIR"; then
1308	for i in $pgsql_directory; do
1309	if test -r $i/include/postgresql/libpq-fe.h; then
1310	PGSQL_INC_DIR=$i/include
1311	PGSQL_DIR=$i
1312	fi
1313	done
1314	fi
1315	if test -z "$PGSQL_DIR"; then
1316	for i in $pgsql_directory; do
1317	if test -r $i/include/libpq-fe.h; then
1318	PGSQL_INC_DIR=$i/include
1319	PGSQL_DIR=$i
1320	fi
1321	done
1322	fi
1323
1324	if test -z "$PGSQL_DIR"; then
1325	tmp=""
1326	for i in $pgsql_directory; do
1327	tmp="$tmp $i/include $i/include/pgsql $i/include/postgresql"
1328	done
1329	FAIL_MESSAGE("PostgreSQL header file (libpq-fe.h)", $tmp)
1330	fi
1331
1332	for i in lib lib/pgsql lib/postgresql; do
1333	str="$PGSQL_DIR/$i/libpq.*"
1334	for j in `echo $str`; do
1335	if test -r $j; then
1336	PGSQL_LIB_DIR="$PGSQL_DIR/$i"
1337	break 2
1338	fi
1339	done
1340	done
1341
1342	if test -z "$PGSQL_LIB_DIR"; then
1343	for ff in $pgsql_directory; do
1344	for i in lib lib/pgsql lib/postgresql; do
1345	str="$ff/$i/libpq.*"
1346	for j in `echo $str`; do
1347	if test -r $j; then
1348	PGSQL_LIB_DIR="$ff/$i"
1349	break 3
1350	fi
1351	done
1352	done
1353	done
1354	fi
1355
1356	if test -z "$PGSQL_LIB_DIR"; then
1357	tmp=""
1358	for i in $pgsql_directory; do
1359	tmp="$i/lib $i/lib/pgsql $i/lib/postgresql"
1360	done
1361	FAIL_MESSAGE("postgresql library libpq", $tmp)
1362	fi
1363
1364	AC_MSG_RESULT(yes)
1365
1366	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
1367	if test x"$enable_static" = xyes; then
1368	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lcrypt -lm"
1369	else
1370	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
1371	fi
1372	# CFLAGS="$CFLAGS -I${PGSQL_INC_DIR}"
1373	CPPFLAGS="$CPPFLAGS -I${PGSQL_INC_DIR}"
1374	AC_CHECK_HEADERS(pgsql/libpq-fe.h)
1375	AC_CHECK_HEADERS(postgresql/libpq-fe.h)
1376	else
1377	pg_lib_dir=`${PGCONF} --libdir`
1378	if test x"$enable_static" = xyes; then
1379	LIBS="$LIBS -L${pg_lib_dir} -lpq -lcrypt -lm"
1380	else
1381	LIBS="$LIBS -L${pg_lib_dir} -lpq -lm"
1382	fi
1383	pg_inc_dir=`${PGCONF} --includedir`
1384	# CFLAGS="$CFLAGS -I${pg_inc_dir}"
1385	CPPFLAGS="$CPPFLAGS -I${pg_inc_dir}"
1386	fi
1387	elif test "x${withval}" = "xodbc"; then
1388	AC_MSG_CHECKING(for odbc in /usr /usr/local ODBC_HOME)
1389	odbc_directory="/usr /usr/local"
1390
1391	for i in $odbc_directory; do
1392	if test -r $i/include/sql.h; then
1393	if test -r $i/include/sqlext.h; then
1394	if test -r $i/include/sqltypes.h; then
1395	ODBC_DIR=$i
1396	ODBC_INC_DIR=$i/include
1397	fi
1398	fi
1399	fi
1400	done
1401
1402	if test -z "$ODBC_DIR"; then
1403	tmp=""
1404	for i in $odbc_directory; do
1405	tmp="$tmp $i/include"
1406	done
1407	FAIL_MESSAGE("odbc headers (sql.h sqlext.h sqltypes.h)", $tmp)
1408	fi
1409
1410	str="$ODBC_DIR/lib/libodbc.*"
1411	for j in `echo $str`; do
1412	if test -r $j; then
1413	ODBC_LIB_DIR="$ODBC_DIR/lib"
1414	ODBC_LIB="odbc"
1415	fi
1416	done
1417
1418	if test -z "$ODBC_LIB_DIR"; then
1419	FAIL_MESSAGE("odbc library (libodbc)", "$ODBC_DIR/lib")
1420	fi
1421
1422	AC_MSG_RESULT(yes)
1423	CPPFLAGS="${CPPFLAGS} -I${ODBC_INC_DIR}"
1424	LIBS="${LIBS} -L${ODBC_LIB_DIR} -l$ODBC_LIB"
1425	AC_DEFINE(WITH_ODBC)
1426	AC_DEFINE(WITH_DATABASE)
1427
1428	elif test "x${withval}" = "xoracle"; then
1429
1430	AC_MSG_CHECKING(for oracle in ORACLE_HOME /usr/local /usr)
1431
1432	oracle_directory="/usr /usr/local ${ORACLE_HOME}"
1433	for i in $oracle_directory; do
1434
1435	ff=`find $i -name oci.h 2>/dev/null \| tail -1`
1436	if test "x$ff" = "x"; then
1437	:
1438	else
1439	ORACLE_INC=`dirname $ff`
1440	fi
1441
1442	fg=`find $i -name libclntsh.so 2>/dev/null \| tail -1`
1443	if test "x$fg" = "x"; then
1444	:
1445	else
1446	ORACLE_LIB=`dirname $fg`
1447	fi
1448
1449	done
1450
1451	if test -z "$ORACLE_INC"; then
1452
1453	tmp=""
1454	for i in $oracle_directory; do
1455	tmp="$tmp $i"
1456	done
1457	FAIL_MESSAGE("OCI header file (oci.h) please define ORACLE_INC directory where oci.h resides", $tmp)
1458
1459	elif test -z "$ORACLE_LIB"; then
1460
1461	tmp=""
1462	for i in $oracle_directory; do
1463	tmp="$tmp $i"
1464	done
1465	FAIL_MESSAGE("OCI library file (libclntsh.so) please define ORACLE_LIB directory where libclntsh.so resides", $tmp)
1466
1467	else
1468
1469	ORACLE_CPP_FLAGS="-I$ORACLE_INC"
1470	ORACLE_LIB_DIR="$ORACLE_LIB"
1471
1472	AC_MSG_RESULT([$ORACLE_INC $ORACLE_LIB])
1473
1474	CPPFLAGS="${CPPFLAGS} ${ORACLE_CPP_FLAGS}"
1475
1476	ORACLE_LIBS="-lclntsh"
1477
1478	if test -r $ORACLE_LIB_DIR/libnnz11.so; then
1479	ORACLE_LIBS="${ORACLE_LIBS} -lnnz11"
1480	fi
1481	if test -r $ORACLE_LIB_DIR/libwtc9.so; then
1482	ORACLE_LIBS="${ORACLE_LIBS} -lwtc9"
1483	elif test -r $ORACLE_LIB_DIR/libwtc8.so; then
1484	ORACLE_LIBS="${ORACLE_LIBS} -lwtc8"
1485	fi
1486	LIBS="${LIBS} -L${ORACLE_LIB_DIR} ${ORACLE_LIBS}"
1487	if test "x$GCC" != "xyes"; then
1488	CFLAGS="${CFLAGS} -fno-strict-aliasing"
1489	fi
1490	fi
1491	AC_DEFINE(WITH_ORACLE)
1492	AC_DEFINE(WITH_DATABASE)
1493
1494	else
1495	AC_MSG_ERROR([Option --with-database=database used with unsupported database ${withval}])
1496	fi
1497	]
1498	)
1499
1500	AC_ARG_WITH(console,
1501	[ --with-console=PATH set path to console device [[/dev/console]]],
1502	[
1503	if test "x${withval}" != xno; then
1504	mycons="$withval"
1505	AC_DEFINE_UNQUOTED(DEFAULT_CONSOLE, _("${mycons}") )
1506	fi
1507	])
1508
1509	AC_ARG_WITH(altconsole,
1510	[ --with-altconsole=PATH set path to second console device [[none]]],
1511	[
1512	if test "x${withval}" != xno; then
1513	myaltcons="$withval"
1514	else
1515	myaltcons="NULL"
1516	fi
1517	],
1518	[myaltcons="NULL"])
1519	AC_DEFINE_UNQUOTED(ALT_CONSOLE, _("${myaltcons}") )
1520
1521	AC_ARG_WITH(timeserver,
1522	[ --with-timeserver=HOST set host address for time server [[none]]],
1523	[
1524	if test "x${withval}" != xno; then
1525	mytimeserv="$withval"
1526	AC_DEFINE(HAVE_NTIME)
1527	else
1528	mytimeserv="NULL"
1529	fi
1530	],
1531	mytimeserv="NULL")
1532	AC_DEFINE_UNQUOTED(DEFAULT_TIMESERVER, _("${mytimeserv}") )
1533
1534	AC_ARG_WITH(alttimeserver,
1535	[ --with-alttimeserver=HOST set address for backup time server [[none]]],
1536	[
1537	if test "x${withval}" != xno; then
1538	myalttimeserv="$withval"
1539	AC_DEFINE(HAVE_NTIME)
1540	else
1541	myalttimeserv="NULL"
1542	fi
1543	],
1544	myalttimeserv="NULL")
1545	AC_DEFINE_UNQUOTED(ALT_TIMESERVER, _("${myalttimeserv}") )
1546
1547	AC_ARG_ENABLE(login-watch,
1548	[ --enable-login-watch watch for login/logout [[no]]],
1549	[
1550	if test "x${enable_login_watch}" = xyes; then
1551	AC_DEFINE(SH_USE_UTMP)
1552	fi
1553	]
1554	)
1555
1556	AC_ARG_ENABLE(mounts-check,
1557	[ --enable-mounts-check check mount options on filesystems [[no]]],
1558	[
1559	if test "x${enable_mounts_check}" = xyes; then
1560	AC_DEFINE(SH_USE_MOUNTS)
1561	fi
1562	]
1563	)
1564
1565	AC_ARG_ENABLE(logfile-monitor,
1566	[ --enable-logfile-monitor monitor logfiles [[no]]],
1567	[
1568	if test "x${enable_logfile_monitor}" = xyes; then
1569	AC_CHECK_HEADER(pcre.h,
1570	[
1571	AC_DEFINE(USE_LOGFILE_MONITOR, 1, [Define if you want the logfile monitor module.])
1572	LIBS="-lpcre $LIBS"
1573	],
1574	[
1575	AC_CHECK_HEADER(pcre/pcre.h,
1576	[
1577	AC_DEFINE(USE_LOGFILE_MONITOR, 1, [Define if you want the logfile monitor module.])
1578	AC_DEFINE(HAVE_PCRE_PCRE_H, 1, [Define if you have pcre/pcre.h.])
1579	LIBS="-lpcre $LIBS"
1580	],
1581	AC_MSG_ERROR([The --enable-logfile-monitor option requires libpcre. For compiling the pcre development package is needed.])
1582	)
1583	]
1584	)
1585	AC_CHECK_LIB(pcre, pcre_dfa_exec, [
1586	AC_DEFINE([HAVE_PCRE_DFA_EXEC], 1, [Define if you have pcre_dfa_exec])
1587	], [
1588	AC_MSG_WARN([pcre_dfa_exec not available])
1589	])
1590	fi
1591	]
1592	)
1593
1594
1595	AC_ARG_ENABLE(process-check,
1596	[ --enable-process-check check processes [[no]]],
1597	[
1598	if test "x${enable_process_check}" = xyes; then
1599	AC_CHECK_LIB([rt], [sched_getparam], sh_lrt=yes, sh_lrt=no)
1600	if test x"$sh_lrt" = xyes; then
1601	LIBRT=-lrt
1602	else
1603	LIBRT=
1604	fi
1605	LIBS="$LIBS $LIBRT"
1606	AC_DEFINE(SH_USE_PROCESSCHECK, [1], [Define if you want to check processes])
1607	fi
1608	]
1609	)
1610
1611	AC_ARG_ENABLE(port-check,
1612	[ --enable-port-check check ports [[no]]],
1613	[
1614	if test "x${enable_port_check}" = xyes; then
1615	AC_DEFINE(SH_USE_PORTCHECK, [1], [Define if you want to check ports])
1616	fi
1617	]
1618	)
1619
1620	AC_ARG_ENABLE(userfiles,
1621	[ --enable-userfiles check for users' config files [[no]]],
1622	[
1623	if test "x${enableval}" = "xyes"; then
1624	AC_DEFINE(SH_USE_USERFILES)
1625	fi
1626	]
1627	)
1628
1629	AC_ARG_ENABLE(debug,
1630	[ --enable-debug enable debug options [[no]]],
1631	[
1632	if test "x${enable_debug}" = "xyes"; then
1633	if test "x${mydebugflag}" != "xyes"; then
1634	AC_DEFINE(MEM_DEBUG)
1635	fi
1636	AC_DEFINE(WITH_TPT)
1637	AC_DEFINE(SL_DEBUG)
1638	AC_DEFINE(DNMALLOC_CHECKS, 1, [Debug dnmalloc])
1639	AC_DEFINE(PARANOIA, 0, [Paranoia level for dnmalloc])
1640	AC_DEFINE(SL_FAIL_ON_ERROR)
1641	if test "x${myneedg3}" = "xyes"; then
1642	mydebugdef="-g3"
1643	else
1644	mydebugdef="-g"
1645	fi
1646	mydebugit="yes"
1647	elif test "x${enable_debug}" = "xgdb"; then
1648	AC_DEFINE(SH_ABORT_ON_ERROR, 1, [Use abort])
1649	if test "x${myneedg3}" = "xyes"; then
1650	mydebugdef="-g3"
1651	else
1652	mydebugdef="-g"
1653	fi
1654	mydebugit="yes"
1655	fi
1656	]
1657	)
1658	AC_SUBST(mydebugdef)
1659
1660	if test "x${enable_asm_ok}" = "xyes"; then
1661	sh_enable_asm=yes
1662	else
1663	sh_enable_asm=no
1664	fi
1665	AC_ARG_ENABLE(asm,
1666	[ --disable-asm disable asm inline code],
1667	[
1668	if test "x${enable_asm}" = xno; then
1669	sh_enable_asm=no
1670	fi
1671	]
1672	)
1673
1674	if test "x${samhain_64_asm}" = xyes; then
1675	if test "x${sh_enable_asm}" = xyes; then
1676	AC_DEFINE([TIGER_OPT_ASM],1,[Define to use tiger x86_64 optimized assembly])
1677	fi
1678	fi
1679
1680	AC_ARG_ENABLE(ipv6,
1681	[ --disable-ipv6 disable ipv6 support],
1682	[
1683	if test "x${enable_ipv6}" = xno; then
1684	AC_DEFINE(USE_IPV4,1,[Define if you do not want IPv6])
1685	fi
1686	]
1687	)
1688
1689	if test "x${dnmalloc_ok}" = "xyes"; then
1690	sh_dnmalloc_enabled=yes
1691	else
1692	sh_dnmalloc_enabled=no
1693	fi
1694
1695	AC_ARG_ENABLE(dnmalloc,
1696	[ --disable-dnmalloc disable dnmalloc],
1697	[
1698	if test "x${enable_dnmalloc}" = xno; then
1699	sh_dnmalloc_enabled=no
1700	else
1701	sh_dnmalloc_enabled=yes
1702	fi
1703	]
1704	)
1705
1706	dnl Handle the problem that static linking against libc.a on Linux
1707	dnl produces the error "multiple definitions of malloc"
1708	dnl
1709	if test "x$sh_dnmalloc_enabled" = "xyes"; then
1710	if test x$enable_static = xyes; then
1711	if test "x$sh_no_gcc_static" = "xyes"; then
1712	sh_dnmalloc_enabled=no
1713	else
1714	if test "x$with_gnu_ld" = "xyes"; then
1715	LDFLAGS="$LDFLAGS -Wl,--allow-multiple-definition"
1716	else
1717	sh_dnmalloc_enabled=no
1718	fi
1719	fi
1720	fi
1721	fi
1722
1723	if test "x${sh_dnmalloc_enabled}" = xno; then
1724	AC_DEFINE(USE_SYSTEM_MALLOC,1,[Define if you want to use the system malloc])
1725	fi
1726
1727	AC_ARG_ENABLE(ptrace,
1728	[ --enable-ptrace use anti-debugger options [[no]]],
1729	[
1730	if test "x${enable_ptrace}" = xyes; then
1731	if test "x$mydebugit" != "xyes"; then
1732	AC_DEFINE(SCREW_IT_UP)
1733	fi
1734	fi
1735	]
1736	)
1737
1738	dnl
1739	if test "x$GCC" = "xyes"; then
1740	if test ! -z "`echo "$CFLAGS" \| grep "\-g\ " 2> /dev/null`" ; then
1741	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
1742	fi
1743
1744	dnl if test ! -z "`echo "$CFLAGS" \| grep "\-O2" 2> /dev/null`" ; then
1745	dnl CFLAGS=`echo $CFLAGS \| sed 's%\-O2%\-O3%' `
1746	dnl fi
1747
1748	if test -z "`echo "$CFLAGS" \| grep "\-Wall" 2> /dev/null`" ; then
1749	CFLAGS="$CFLAGS -Wall -W "
1750	fi
1751
1752	if test -z "`echo "$CFLAGS" \| grep "\-fstrength\-reduce" 2> /dev/null`"
1753	then
1754	if test -z "`echo "$CFLAGS" \| grep "\-fno\-strength\-reduce" 2> /dev/null`"
1755	then
1756	CFLAGS="$CFLAGS -fno-strength-reduce"
1757	fi
1758	fi
1759
1760	if test -z "`echo "$CFLAGS" \| grep "\-fomit\-frame\-pointer" 2> /dev/null`"
1761	then
1762	if test -z "`echo "$CFLAGS" \| grep "\-fno\-omit\-frame\-pointer" 2> /dev/null`"
1763	then
1764	CFLAGS="$CFLAGS -fno-omit-frame-pointer"
1765	fi
1766	fi
1767
1768	fi
1769
1770	dnl Test whether gcc supports -Wno-empty-body
1771	dnl Suppresses warnings from glibc pthread_cleanup_pop
1772	dnl
1773	GCC_WEMPTY_BODY
1774
1775	AC_MSG_CHECKING([which random module to use])
1776	AC_ARG_WITH(rnd,
1777	[ --with-rnd=[[egd\|unix\|dev\|default]] random number generator [[default]]],
1778	[use_static_rnd=$withval], [use_static_rnd=default] )
1779
1780	if test "$use_static_rnd" = no; then
1781	use_static_rnd=default
1782	fi
1783
1784	case "$use_static_rnd" in
1785	egd \| dev \| unix \| default )
1786	AC_MSG_RESULT($use_static_rnd)
1787	;;
1788	* )
1789	AC_MSG_RESULT([invalid argument])
1790	AC_MSG_ERROR([Option --with-rnd=module used with unsupported module ${use_static_rnd}])
1791	;;
1792	esac
1793
1794	AC_ARG_WITH(egd-socket,
1795	[ --with-egd-socket=NAME EGD socket name],
1796	egd_socket_name="$withval", egd_socket_name="" )
1797	AC_DEFINE_UNQUOTED(EGD_SOCKET_NAME, _("$egd_socket_name") )
1798
1799	dnl
1800	dnl See whether the user wants to disable checking for /dev/random
1801
1802	try_dev_random=yes
1803
1804	case "$use_static_rnd" in
1805	dev \| default )
1806	try_dev_random=yes
1807	;;
1808	egd)
1809	AC_DEFINE(HAVE_EGD_RANDOM)
1810	try_dev_random=no
1811	;;
1812	unix)
1813	AC_DEFINE(HAVE_UNIX_RANDOM)
1814	try_dev_random=no
1815	;;
1816	esac
1817
1818
1819	if test "x$try_dev_random" = "xyes"; then
1820	AC_MSG_CHECKING(whether /dev/random exists)
1821	if test -r "/dev/srandom" && test -c "/dev/srandom"; then
1822	AC_DEFINE(HAVE_URANDOM)
1823	AC_DEFINE_UNQUOTED(NAME_OF_DEV_RANDOM, _("/dev/srandom") )
1824	AC_MSG_RESULT(yes)
1825	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
1826	AC_DEFINE_UNQUOTED(NAME_OF_DEV_URANDOM, _("/dev/urandom") )
1827	fi
1828	else
1829	if test -r "/dev/random" && test -c "/dev/random"; then
1830	AC_DEFINE(HAVE_URANDOM)
1831	AC_DEFINE_UNQUOTED(NAME_OF_DEV_RANDOM, _("/dev/random") )
1832	AC_MSG_RESULT(yes)
1833	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
1834	AC_DEFINE_UNQUOTED(NAME_OF_DEV_URANDOM, _("/dev/urandom") )
1835	fi
1836	else
1837	AC_MSG_RESULT(no)
1838	AC_DEFINE(HAVE_UNIX_RANDOM)
1839	fi
1840	fi
1841	fi
1842
1843
1844	AC_ARG_ENABLE(udp,
1845	[ --enable-udp server can listen on port 514/udp [[no]]],
1846	[
1847	if test "x${enable_udp}" = xyes; then
1848	AC_DEFINE(INET_SYSLOG)
1849	fi
1850	]
1851	)
1852
1853	myencrypt=yes
1854	AC_ARG_ENABLE(encrypt,
1855	[ --disable-encrypt disable client/server encryption],
1856	[
1857	if test "x${enable_encrypt}" = xno; then
1858	myencrypt=no
1859	elif test "x${enable_encrypt}" = "x1"; then
1860	myencrypt=1
1861	fi
1862	]
1863	)
1864	if test "x${myencrypt}" = "xyes"; then
1865	AC_DEFINE(SH_ENCRYPT)
1866	AC_DEFINE(SH_ENCRYPT_2)
1867	elif test "x${myencrypt}" = "x1"; then
1868	AC_DEFINE(SH_ENCRYPT)
1869	fi
1870
1871	sh_use_srp_proto=yes
1872	AC_ARG_ENABLE(srp,
1873	[ --disable-srp disable SRP for authentication],
1874	[
1875	if test "x${enable_srp}" = xno; then
1876	sh_use_srp_proto=no
1877	fi
1878	]
1879	)
1880	if test "x${sh_use_srp_proto}" = xyes; then
1881	AC_DEFINE(USE_SRP_PROTOCOL)
1882	fi
1883
1884	AC_ARG_WITH(port,
1885	[ --with-port=PORT set port to use for TCP/IP connection [[49777]]],
1886	[
1887	echo "${withval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1888	AC_MSG_ERROR([For --with-port=PORT, PORT must be numeric.])
1889	myport=${withval}
1890	],
1891	[myport="49777"])
1892	AC_DEFINE_UNQUOTED(SH_DEFAULT_PORT, ${myport})
1893	AC_SUBST(myport)
1894
1895	AC_ARG_WITH(logserver,
1896	[ --with-logserver=HOST set host address for log server [[none]]],
1897	[
1898	case "$withval" in
1899	. \| localhost)
1900	mylogsrv="$withval"
1901	;;
1902	*)
1903	mylogsrv="$withval"
1904	;;
1905	esac
1906	],
1907	[mylogsrv="NULL"])
1908	AC_DEFINE_UNQUOTED(DEFAULT_LOGSERVER, _("${mylogsrv}") )
1909	AC_SUBST(mylogsrv)
1910
1911	AC_ARG_WITH(altlogserver,
1912	[ --with-altlogserver=HOST set address for backup log server [[none]]],
1913	[
1914	case "$withval" in
1915	. \| localhost)
1916	myaltlogsrv="$withval"
1917	;;
1918	*)
1919	myaltlogsrv="$withval"
1920	;;
1921	esac
1922	],
1923	[myaltlogsrv="NULL"])
1924	AC_DEFINE_UNQUOTED(ALT_LOGSERVER, _("${myaltlogsrv}"))
1925
1926
1927
1928	dnl
1929	dnl STEALTH OPTIONS
1930	dnl
1931	nocl_code=
1932	xor_code=0
1933	AC_ARG_ENABLE(nocl,
1934	[ --enable-nocl=PW no CL parsing unless first CL argument is PW],
1935	[
1936	if test "x${enableval}" != "x"; then
1937	AC_DEFINE(SH_STEALTH_NOCL)
1938	fi
1939	if test "x${enableval}" = "xstop" \|\| test "x${enableval}" = "xstart"; then
1940	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1941	fi
1942	if test "x${enableval}" = "xreload" \|\| test "x${enableval}" = "xrestart"; then
1943	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1944	fi
1945	if test "x${enableval}" = "xstatus"; then
1946	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1947	fi
1948	if test "x${enableval}" = "xno"; then
1949	AC_MSG_ERROR([With --enable-nocl=PW, the use of --enable-nocl=no is ambiguous.])
1950	fi
1951	nocl_code="${enable_nocl}"
1952	]
1953	)
1954	AC_DEFINE_UNQUOTED(NOCL_CODE, _("${nocl_code}") )
1955	AC_SUBST(nocl_code)
1956	AC_ARG_ENABLE(stealth,
1957	[ --enable-stealth=XOR_VAL enable stealth mode [[no]]],
1958	[AC_DEFINE(SH_STEALTH)
1959	if test "x${enableval}" != "xyes"; then
1960	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1961	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be numeric.])
1962	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
1963	if test x"${enableval}" = x0
1964	then
1965	:
1966	else
1967	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
1968	fi
1969	fi
1970	xor_code="${enable_stealth}"
1971	else
1972	xor_code=0
1973	fi
1974	stegin_prg="samhain_stealth"
1975	],
1976	[
1977	stegin_prg=
1978	]
1979	)
1980	AC_ARG_ENABLE(micro-stealth,
1981	[ --enable-micro-stealth=XOR_VAL enable micro stealth mode [[no]]],
1982	[
1983	AC_DEFINE(SH_STEALTH)
1984	AC_DEFINE(SH_STEALTH_MICRO)
1985	if test "x${enableval}" != "xyes"; then
1986	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1987	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be numeric.])
1988	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
1989	if test x"${enableval}" = x0
1990	then
1991	:
1992	else
1993	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
1994	fi
1995	fi
1996	xor_code="${enable_micro_stealth}"
1997	else
1998	xor_code=0
1999	fi
2000	]
2001	)
2002	install_name="samhain"
2003	INSTALL_NAME="SAMHAIN"
2004	AC_ARG_ENABLE(install-name,
2005	[ --enable-install-name=NAME name under which to install [[samhain\|yule]]],
2006	[
2007	if test "x${enableval}" != "xyes"; then
2008	install_name="${enableval}"
2009	INSTALL_NAME=`echo "${enableval}" \| tr [a-z] [A-Z]`
2010	else
2011	install_name="${sh_main_prg}"
2012	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
2013	fi
2014	],
2015	[
2016	install_name="${sh_main_prg}"
2017	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
2018	]
2019	)
2020
2021
2022	need_user_install=0
2023
2024	AC_ARG_ENABLE(identity,
2025	[ --enable-identity=USER user if dropping root [[daemon]]],
2026	[
2027	if test x"$enableval" = xno; then
2028	myident="daemon"
2029	else
2030	myident="$enableval"
2031	fi
2032	echo "${myident}" \| grep ['[^0123456789]'] >/dev/null 2>&1 \|\| \
2033	AC_MSG_ERROR([With --enable-identity=USER, please supply a username, not a UID.])
2034	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
2035	grep "^${myident}:" \| awk -F: '{ print $3; }'`
2036	if test x"${myident_uid}" = x; then
2037	AC_MSG_WARN([Option --enable-identity used, user ${myident} will be added upon install.])
2038	need_user_install=1
2039	fi
2040	],
2041	[
2042	for myident in ${install_name} daemon nobody; do
2043	AC_MSG_CHECKING(for user ${myident})
2044	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
2045	grep "^${myident}:" \| awk -F: '{ print $3; }'`
2046	if test x"${myident_uid}" != x; then
2047	AC_MSG_RESULT(yes)
2048	break;
2049	else
2050	AC_MSG_RESULT(no)
2051	fi
2052	done
2053	if test x"${myident_uid}" = x; then
2054	myident=${install_name}
2055	AC_MSG_WARN([--enable-identity: user ${myident} will be added upon install])
2056	need_user_install=1
2057	fi
2058	])
2059	AC_DEFINE_UNQUOTED(DEFAULT_IDENT, _("${myident}") )
2060	AC_SUBST(myident)
2061	AC_SUBST(need_user_install)
2062
2063	sh_insmod_cmd=": # no kernel module"
2064	sh_insmod_pre=": # no kernel module"
2065	sh_lkm=""
2066	lkm_inc=""
2067	khidemap="/boot/System.map"
2068	sh_syscalltable="0x0"
2069	AC_ARG_ENABLE(khide,
2070	[ --enable-khide=SYSTEM_MAP use kernel module to hide (Linux only)[[/boot/System.map]]],
2071	[
2072	if test "x${enable_khide}" != xno; then
2073
2074	kernel_testsupport=`uname -r \| sed s,^3.*,LINUX3,`
2075	if test "x${kernel_testsupport}" = "xLINUX3"; then
2076	AC_MSG_ERROR([The --enable-khide option is not supported on Linux kernel version 3.x or above.])
2077	fi
2078
2079	if test "x${enableval}" != "xyes"; then
2080	khidemap="${enableval}"
2081	fi
2082	sh_syscalltable=`egrep '(D\|d\|R\|r) sys_call_table' ${khidemap} \| awk '{print $1}'`
2083	if test x"$sh_syscalltable" = x; then
2084	AC_MSG_ERROR([Option --enable-khide cannot be used since the symbol sys_call_table was not found in ${khidemap}.])
2085	fi
2086	sh_syscalltable="0x${sh_syscalltable}"
2087	install_name_len=`echo ${install_name} \| awk '{ print(length()); }'`
2088	if test "${install_name_len}" -gt 15 ; then
2089	AC_MSG_ERROR([If --enable-khide is used, install_name must not exceed a length of 15 chars.])
2090	fi
2091	AC_DEFINE(SH_USE_LKM)
2092	AC_DEFINE_UNQUOTED(SH_MAGIC_HIDE, "${install_name}")
2093
2094	# -- NEW --
2095	kernel_version=`uname -r \| sed s,2.6.*,LINUX26,`
2096	kernel_numeric=`uname -r \| sed 's%-%.%g' \| sed 's%_%.%g' \| awk -F. '{ print $165536+$2256+$3 }'`
2097	AC_DEFINE_UNQUOTED(SH_KERNEL_NUMERIC, ${kernel_numeric}, [Kernel number])
2098
2099	if test x"$kernel_version" = xLINUX26
2100	then
2101	AC_MSG_CHECKING([for modlist_lock])
2102	sh_modlist_lock=`egrep ['[bd] modlist_lock$'] ${khidemap} \| awk '{print $1}'`
2103	if test x"$sh_modlist_lock" = x; then
2104	AC_MSG_RESULT(no)
2105	else
2106	sh_modlist_lock="0x${sh_modlist_lock}"
2107	AC_MSG_RESULT([${sh_modlist_lock}])
2108	AC_DEFINE_UNQUOTED(SH_MODLIST_LOCK, ${sh_modlist_lock}, [The address of the modules list spinlock])
2109	fi
2110
2111	AC_MSG_CHECKING([for module_mutex])
2112	sh_modlist_mutex=`egrep ['[bd] module_mutex$'] ${khidemap} \| awk '{print $1}'`
2113	if test x"$sh_modlist_mutex" = x; then
2114	AC_MSG_RESULT(no)
2115	else
2116	sh_modlist_mutex="0x${sh_modlist_mutex}"
2117	AC_MSG_RESULT([${sh_modlist_mutex}])
2118	AC_DEFINE_UNQUOTED(SH_MODLIST_MUTEX, ${sh_modlist_mutex}, [The address of the modules list mutex])
2119	fi
2120
2121	sh_list_modules=`egrep 'd modules$' ${khidemap} \| awk '{print $1}'`
2122	if test x"$sh_list_modules" = x; then
2123	AC_MSG_ERROR([Option --enable-khide cannot be used, since the symbol modules was not found in ${khidemap}.])
2124	fi
2125	sh_list_modules="0x${sh_list_modules}"
2126	AC_DEFINE_UNQUOTED(SH_LIST_MODULES, ${sh_list_modules}, [The address of the modules list])
2127
2128	AC_DEFINE(LINUX26, 1, [Define if kernel is 2.6])
2129	sh_insmod_cmd="modprobe ${install_name}_hide"
2130	sh_lkm="samhain_hide.ko"
2131	else
2132	sh_insmod_cmd="insmod ${install_name}_hide; insmod ${install_name}_erase; rmmod ${install_name}_erase"
2133	sh_lkm="samhain_hide.o samhain_erase.o"
2134	fi
2135	# -- END NEW --
2136
2137	kvers=`uname -r`
2138	if test -f /lib/modules/${kvers}/build/include/linux/kernel.h; then
2139	lkm_inc="-I/lib/modules/${kvers}/build/include"
2140	else
2141	AC_MSG_WARN([--enable-khide: /lib/modules/${kvers}/build/include/linux not found])
2142	AC_MSG_WARN([--enable-khide: You may need to install the kernel-source])
2143	AC_MSG_WARN([--enable-khide: headers for the currently-running kernel.])
2144	fi
2145
2146	AC_MSG_CHECKING([for 2.4 vanilla kernel])
2147	sh_is_vanilla_kernel=yes
2148	if test -f /lib/modules/${kvers}/build/include/linux/sched.h; then
2149	grep 'next_task,' /lib/modules/${kvers}/build/include/linux/sched.h >/dev/null 2>&1 \|\| sh_is_vanilla_kernel=no
2150	fi
2151	if test x"${sh_is_vanilla_kernel}" = xno; then
2152	AC_MSG_RESULT(no)
2153	else
2154	AC_MSG_RESULT(yes)
2155	AC_DEFINE(SH_VANILLA_KERNEL)
2156	fi
2157
2158	fi
2159	]
2160	)
2161
2162	AC_SUBST(install_name)
2163	AC_SUBST(INSTALL_NAME)
2164	AC_SUBST(stegin_prg)
2165	AC_SUBST(xor_code)
2166
2167	AC_DEFINE_UNQUOTED(XOR_CODE, ${xor_code})
2168	AC_DEFINE_UNQUOTED(SH_SYSCALLTABLE, ${sh_syscalltable})
2169
2170
2171	exepack_state0=`${srcdir}/c_random.sh 2>/dev/null`
2172	exepack_state1=`${srcdir}/c_random.sh 2>/dev/null`
2173	exepack_state2=`${srcdir}/c_random.sh 2>/dev/null`
2174
2175	AC_DEFINE_UNQUOTED(EXEPACK_STATE_0, ${exepack_state0})
2176	AC_DEFINE_UNQUOTED(EXEPACK_STATE_1, ${exepack_state1})
2177	AC_DEFINE_UNQUOTED(EXEPACK_STATE_2, ${exepack_state2})
2178
2179
2180	AC_ARG_ENABLE(suidcheck,
2181	[ --enable-suidcheck check for suid/sgid files [[no]]],
2182	[
2183	if test "x${enableval}" = "xyes"; then
2184	AC_DEFINE(SH_USE_SUIDCHK)
2185	fi
2186	]
2187	)
2188
2189
2190	systemmap="/boot/System.map"
2191	sh_libkvm=""
2192	AC_ARG_WITH(kcheck,
2193	[ --with-kcheck[[=SYSTEM_MAP]] check Linux/FreeBSD/OpenBSD kernel integrity [[/boot/System.map]]],
2194	[
2195	if test "x${withval}" != "xno"; then
2196	AC_DEFINE(SH_USE_KERN)
2197
2198	kernel_numeric=`uname -r \| sed 's%-%.%g' \| sed 's%_%.%g' \| awk -F. '{ print $165536+$2256+$3 }'`
2199	AC_DEFINE_UNQUOTED(SH_KERNEL_NUMBER, ${kernel_numeric}, [Kernel number])
2200
2201	kernelversion=`uname -r`
2202	AC_DEFINE_UNQUOTED(SH_KERNEL_VERSION, _("${kernelversion}"), [Define the kernel version])
2203
2204	if test "x${withval}" != "xyes"; then
2205	systemmap="${withval}"
2206	fi
2207
2208	if test "x${cross_compiling}" = xyes; then
2209	:
2210	elif test "x$selectconfig" = "xfreebsd"; then
2211	LIBS="$LIBS -lkvm"
2212	sh_libkvm="-lkvm"
2213	elif test -f "${systemmap}"; then
2214
2215	test_kmap_open=no
2216
2217	if test -c /dev/kmem; then
2218	AC_MSG_CHECKING([whether /dev/kmem is useable])
2219	dd bs=4 count=16 if=/dev/kmem of=/dev/null >/dev/null 2>&1
2220	if test $? -eq 0; then
2221	test_kmap_open=yes
2222	fi
2223	AC_MSG_RESULT([${test_kmap_open}])
2224	fi
2225
2226	if test x"${test_kmap_open}" = xno; then
2227	# need kernel module
2228
2229	if test -f /lib/modules/${kernelversion}/build/include/linux/kernel.h; then
2230	lkm_inc="-I/lib/modules/${kernelversion}/build/include"
2231	else
2232	AC_MSG_WARN([--enable-khide: /lib/modules/${kernelversion}/build/include/linux not found])
2233	AC_MSG_WARN([--enable-khide: You may need to install the kernel-source])
2234	AC_MSG_WARN([--enable-khide: headers for the currently-running kernel.])
2235	fi
2236
2237	AC_MSG_CHECKING([for vmlist_lock])
2238	sh_vmlist_lock=`egrep ['[bdBD] vmlist_lock$'] ${systemmap} \| awk '{print $1}'`
2239	if test x"$sh_vmlist_lock" = x; then
2240	AC_MSG_RESULT(no)
2241	else
2242	sh_vmlist_lock="0x${sh_vmlist_lock}"
2243	AC_MSG_RESULT([${sh_vmlist_lock}])
2244	AC_DEFINE_UNQUOTED(SH_VMLIST_LOCK, ${sh_vmlist_lock}, [The address of the vmlist spinlock])
2245	fi
2246
2247	AC_MSG_CHECKING([for vmlist])
2248	sh_vmlist=`egrep ['[bdBD] vmlist$'] ${systemmap} \| awk '{print $1}'`
2249	if test x"$sh_vmlist" = x; then
2250	AC_MSG_RESULT(no)
2251	else
2252	sh_vmlist="0x${sh_vmlist}"
2253	AC_MSG_RESULT([${sh_vmlist}])
2254	AC_DEFINE_UNQUOTED(SH_VMLIST, ${sh_vmlist}, [The address of the vmlist])
2255	fi
2256
2257	sh_lkm="${sh_lkm} samhain_kmem.ko"
2258	sh_insmod_pre="modprobe ${install_name}_kmem"
2259
2260	fi
2261	else
2262	AC_MSG_ERROR([Option --with-kcheck=systemmap cannot be used, because system map ${systemmap} does not exist.])
2263	fi
2264	fi
2265	]
2266	)
2267
2268	AC_SUBST(lkm_inc)
2269	AC_SUBST(sh_lkm)
2270	AC_SUBST(sh_insmod_cmd)
2271	AC_SUBST(sh_insmod_pre)
2272
2273	AC_SUBST(systemmap)
2274	AC_SUBST(sh_libkvm)
2275
2276	AC_ARG_ENABLE(base,
2277	[ --enable-base=B1,B2 base key (0...2147483647)],
2278	[
2279	AC_MSG_CHECKING(base key setting)
2280	my_key_A=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $1}'`
2281	my_key_B=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $2}'`
2282	AC_MSG_RESULT(${my_key_A} ${my_key_B})
2283	if test "x${my_key_A}" = x; then
2284	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid first base key (zero length).])
2285	fi
2286	if test "x${my_key_B}" = x; then
2287	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid second base key (zero length).])
2288	fi
2289	echo "${my_key_A}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2290	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
2291	echo "${my_key_B}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2292	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
2293	],
2294	[
2295	AC_MSG_CHECKING(base key setting .. collecting entropy)
2296	my_key_1=`${srcdir}/c_random.sh 2>/dev/null`
2297	my_key_2=`${srcdir}/c_random.sh 2>/dev/null`
2298	my_key_3=`${srcdir}/c_random.sh 2>/dev/null`
2299	my_key_4=`${srcdir}/c_random.sh 2>/dev/null`
2300	my_key_A=`expr $my_key_1 \* 32767`
2301	my_key_A=`echo ${my_key_A} \| sed 's%^0*%%g' 2>/dev/null`
2302	my_key_A=`expr $my_key_A \+ $my_key_2`
2303	my_key_B=`expr $my_key_3 \* 32767`
2304	my_key_B=`echo ${my_key_B} \| sed 's%^0*%%g' 2>/dev/null`
2305	my_key_B=`expr $my_key_B \+ $my_key_4`
2306	AC_MSG_RESULT(${my_key_A} ${my_key_B})
2307	]
2308	)
2309	AC_SUBST(my_key_A)
2310	AC_SUBST(my_key_B)
2311
2312	dnl low bytes
2313	my_key_1=`expr $my_key_A \% 65536`
2314	dnl high bytes
2315	my_key_2=`expr $my_key_A \/ 65536`
2316	dnl low bytes
2317	my_key_3=`expr $my_key_B \% 65536`
2318	dnl high bytes
2319	my_key_4=`expr $my_key_B \/ 65536`
2320
2321	dnl echo ${my_key_1} ${my_key_2} ${my_key_3} ${my_key_4}
2322
2323	dnl touch ./sh_MK.h
2324	dnl echo "#ifndef SH_MK_H" >> ./sh_MK.h
2325	dnl echo "#define SH_MK_H" >> ./sh_MK.h
2326	dnl ${srcdir}/c_bits.sh ${my_key_1} MKB >> ./sh_MK.h
2327	dnl ${srcdir}/c_bits.sh ${my_key_2} MKA >> ./sh_MK.h
2328	dnl ${srcdir}/c_bits.sh ${my_key_3} MKC >> ./sh_MK.h
2329	dnl ${srcdir}/c_bits.sh ${my_key_4} MKD >> ./sh_MK.h
2330	dnl echo "#endif" >> ./sh_MK.h
2331	AC_SUBST(my_key_1)
2332	AC_SUBST(my_key_2)
2333	AC_SUBST(my_key_3)
2334	AC_SUBST(my_key_4)
2335
2336	AC_MSG_CHECKING(key position)
2337	pos_tf_1=`${srcdir}/c_random.sh 2>/dev/null`
2338	pos_tf_2=`expr $pos_tf_1 \% 8`
2339	pos_tf=`expr $pos_tf_2 + 1`
2340	AC_MSG_RESULT(${pos_tf})
2341	AC_DEFINE_UNQUOTED(POS_TF, ${pos_tf} )
2342
2343	mykeybase=`echo ${my_key_A},${my_key_B}`
2344	AC_DEFINE_UNQUOTED(DEFKEY, ${mykeybase} )
2345	AC_SUBST(mykeybase)
2346
2347
2348	dnl
2349	dnl GPG/PGP options
2350	dnl
2351
2352	AC_ARG_WITH(gpg,
2353	[ --with-gpg=PATH use GnuPG to verify database/config [[no]]],
2354	[
2355	if test "x${withval}" != "xno"; then
2356	if test "x${cross_compiling}" = xyes; then
2357	mygpg="${withval}"
2358	else
2359	if test -f "${withval}"; then
2360	mygpg="${withval}"
2361	mychk0=`${withval} --load-extension tiger --print-md TIGER192 ${withval} 2>/dev/null`
2362	if test "x$?" != "x0"; then
2363	mychktest=no
2364	for sampre in ./samhain ./yule /usr/local/sbin/samhain /usr/local/bin/samhain /usr/bin/samhain /usr/sbin/samhain /usr/local/sbin/yule /usr/local/bin/yule /usr/bin/yule /usr/sbin/yule; do
2365	if test x"${mychktest}" = xyes
2366	then
2367	:
2368	else
2369	if test -f ${sampre}
2370	then
2371	echo "use existing ${sampre} for gpg checksum"
2372	mychk0=`${sampre} -H ${withval} 2>/dev/null`
2373	if test "x$?" != "x0"; then
2374	if test "x${nocl_code}" != "x"; then
2375	mychk0=`echo -H ${withval} \| ${sampre} ${nocl_code} 2>/dev/null`
2376	if test "x$?" != "x0"; then
2377	:
2378	else
2379	mychk="${mychk0}"
2380	mychktest=yes
2381	fi
2382	fi
2383	else
2384	mychk="${mychk0}"
2385	mychktest=yes
2386	fi
2387	fi
2388	fi
2389	done
2390	if test x${mychktest} = xno; then
2391	AC_MSG_WARN([--with-gpg: cannot determine TIGER192 checksum of ${withval}])
2392	echo "-------------------------------------------------------------"
2393	echo " Your gpg binary does not support the TIGER192 checksum, "
2394	echo " and I cannot find an existing samhain binary to use instead."
2395	echo " You can:"
2396	echo " (a) run make to compile a samhain binary, then repeat"
2397	echo " ./configure and make"
2398	echo " (b) ignore the failure. The checksum of the gpg binary"
2399	echo " will not get compiled in, thus allowing an attacker"
2400	echo " to replace gpg with a trojan and subverting the gpg"
2401	echo " signature verification of configure and database files."
2402	echo
2403	echo " PLEASE IGNORE THIS MESSAGE IF YOU ALSO USE --with-checksum"
2404	echo "-------------------------------------------------------------"
2405	fi
2406	else
2407	mychk="${mychk0}"
2408	fi
2409	else
2410	AC_MSG_ERROR([--with-gpg: cannot find GnuPG PATH=${withval}])
2411	fi
2412	fi
2413	AC_DEFINE(WITH_GPG)
2414	AC_DEFINE_UNQUOTED(DEFAULT_GPG_PATH, _("${mygpg}") )
2415	AC_SUBST(mygpg)
2416	fi
2417	]
2418	)
2419
2420	AC_ARG_WITH(keyid,
2421	[ --with-keyid=KEYID specify KeyID (0x...) for GPG/PGP functions [[none]]],
2422	[
2423	if test "x${withval}" != "x"; then
2424	echo "${withval}" \| awk '{if((length($0)==10)\|\|(length($0)==18)){exit 2}else{exit 0}}' &&
2425	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
2426	echo "${withval}" \| grep ['[^0][^x][^0123456789ABCDEFabcdef]'] >/dev/null 2>&1 &&
2427	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
2428	mykeyid="$withval"
2429	mykeytag="--default-key"
2430	else
2431	mykeyid=""
2432	mykeytag=""
2433	fi
2434	AC_SUBST(mykeyid)
2435	AC_SUBST(mykeytag)
2436	]
2437	)
2438
2439	dnl AC_ARG_WITH(pgp,
2440	dnl [ --with-pgp=PATH Use PGP to verify database/config (no).],
2441	dnl [myppg="$withval"
2442	dnl AC_DEFINE(WITH_PGP)
2443	dnl AC_DEFINE_UNQUOTED(DEFAULT_PGP_PATH, _("${myppg}") )
2444	dnl ])
2445
2446	AC_ARG_WITH(checksum,
2447	[ --with-checksum=CHKSUM compile in gpg/pgp checksum [[yes]]],
2448	[
2449	if test "x${withval}" != "xno"; then
2450	if test "x${withval}" != "xyes"; then
2451	if test "x${mychk}" != "x"; then
2452	if test "x${mychk}" != "x${withval}"; then
2453	AC_MSG_WARN([--with-checksum: possible gpg CHKSUM problem])
2454	AC_MSG_WARN([--with-checksum: CHKSUM=${withval}])
2455	AC_MSG_WARN([--with-checksum: autodetected=${mychk}])
2456	fi
2457	fi
2458	mychk="${withval}"
2459	else
2460	if test "x${mychk}" = "x"; then
2461	AC_MSG_ERROR([Option --with-checksum=CHKSUM: checksum CHKSUM of the gpg binary not specified.])
2462	fi
2463	fi
2464	AC_DEFINE(HAVE_GPG_CHECKSUM)
2465	AC_DEFINE_UNQUOTED(GPG_HASH, _("${mychk}") )
2466	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char gpgchk[50];"; for (i=1; i <= m; i++) printf "gpgchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_gpg_chksum.h
2467	fi
2468	],
2469	[
2470	if test "x${mygpg}" != "x"; then
2471	if test "x${mychk}" != "x"; then
2472	AC_DEFINE(HAVE_GPG_CHECKSUM)
2473	AC_DEFINE_UNQUOTED(GPG_HASH, _("${mychk}") )
2474	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char gpgchk[50];"; for (i=1; i <= m; i++) printf "gpgchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_gpg_chksum.h
2475	fi
2476	fi
2477	]
2478	)
2479
2480	AC_ARG_WITH(fp,
2481	[ --with-fp=FINGERPRINT compile in public key fingerprint [[no]]],
2482	[
2483	if test "x${withval}" != "xno"; then
2484	if test "x${withval}" != "xyes"; then
2485	withval0=`echo ${withval} \| sed 's% %%g'`
2486	echo "${withval0}" \| \
2487	grep ['[^0123456789abcdefABCDEF]'] >/dev/null 2>&1 &&
2488	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, there is an invalid character(s) in FINGERPRINT=${withval0}.])
2489	sh_len=`echo ${withval0} \| wc -c \| sed 's% %%g'`
2490	sh_len0=`expr ${sh_len} \- 1`
2491	if test "x${sh_len0}" = "x40" \|\| test "x${sh_len0}" = "x32"
2492	then
2493	myfp="${withval0}"
2494	AC_DEFINE(USE_FINGERPRINT)
2495	AC_DEFINE_UNQUOTED(SH_GPG_FP, _("${myfp}") )
2496	echo "${myfp}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef FINGERPRINT_H"; print "#define FINGERPRINT_H"; printf "char gpgfp[%d];\n", m+1; for (i=1; i <= m; i++) printf "gpgfp[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgfp[%d] = %c%c0%c;\n", m, 39, 92, 39; print "#endif"; }' > sh_gpg_fp.h
2497	else
2498	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, the length (${sh_len0}) of FINGERPRINT ${withval0} is incorrect.])
2499	fi
2500	else
2501	AC_MSG_ERROR([For option --with-fp=FINGERPRINT, FINGERPRINT=yes is invalid, please specify a valid key fingerprint.])
2502	fi
2503	fi
2504	])
2505
2506
2507	dnl
2508	dnl MAIL OPTIONS
2509	dnl
2510
2511	AC_ARG_WITH(recipient,
2512	[ --with-recipient=ADDR set recipient(s) for e-mail [[none]]],
2513	[
2514	withval0=`echo ${withval} \| sed 's%,% %g'`
2515	for sh_item in ${withval0}
2516	do
2517	case ${sh_item} in
2518	*@localhost)
2519	;;
2520	@.*)
2521	sh_tmp=`echo ${sh_item} \| awk '{ if ($1 ~ [/^[a-zA-Z0-9][a-zA-Z0-9\-_\.]*@[a-zA-Z0-9\-\.]+\.([a-zA-Z]+\|[0-9]+)$/]) {print 1; } else { print 0}}'`
2522	if test "x${sh_tmp}" != "x1"
2523	then
2524	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
2525	fi
2526	;;
2527	*)
2528	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
2529	;;
2530	esac
2531	done
2532	myrcp="$withval0"
2533	],
2534	[myrcp="NULL"])
2535	AC_DEFINE_UNQUOTED(DEFAULT_MAILADDRESS, _("${myrcp}") )
2536
2537
2538	AC_ARG_WITH(sender,
2539	[ --with-sender=SENDER set sender for e-mail [[daemon]]],
2540	[
2541	mysender="${withval}"
2542	],
2543	[
2544	mysender="daemon"
2545	])
2546	AC_DEFINE_UNQUOTED(DEFAULT_SENDER, _("${mysender}") )
2547
2548
2549	dnl
2550	dnl PATHS
2551	dnl
2552
2553	AC_ARG_WITH(trusted,
2554	[ --with-trusted=UID Set uid(s) of trusted users [[0]]],
2555	[
2556	sh_tmp_test=no
2557	sh_tmp=`echo ${withval} \| sed 's%,% %g'`
2558	for sh_tmp1 in ${sh_tmp}
2559	do
2560	echo "${sh_tmp1}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2561	AC_MSG_ERROR([Option --with-trusted=UID used with non-numeric UID in ${withval}.])
2562	if test "x${sh_tmp1}" = "x0"
2563	then
2564	sh_tmp_test=yes
2565	fi
2566	done
2567	if test "x${sh_tmp_test}" = "xno"
2568	then
2569	withval="0,${withval}"
2570	fi
2571	mytrust="${withval}"
2572	],
2573	[mytrust="0"] )
2574	AC_DEFINE_UNQUOTED(SL_ALWAYS_TRUSTED, ${mytrust} )
2575	AC_SUBST(mytrust)
2576
2577	mytmpdir=
2578
2579	AC_ARG_WITH(tmp-dir,
2580	[ --with-tmp-dir=PFX set directory for temporary files [[HOME]]],
2581	[
2582	if test "x${cross_compiling}" = xyes; then
2583	mytmpdir="$withval"
2584	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2585	else
2586	if test -d "${withval}"; then
2587	mytmpdir="$withval"
2588	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2589	else
2590	mytmpdir="$withval"
2591	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2592	AC_MSG_WARN([--with-tmp-dir: tmp directory ${withval} does not exist])
2593	fi
2594	fi
2595	]
2596	)
2597
2598	AC_SUBST(mytmpdir)
2599
2600
2601	dnl
2602	dnl PATH DEFAULTS
2603	dnl
2604
2605	if test "x${ac_prefix_set}" = xyes
2606	then
2607	if test "x${exec_prefix}" = xNONE
2608	then
2609	exec_prefix="${prefix}"
2610	fi
2611
2612	if test "x${prefix}" = xOPT
2613	then
2614	tmp_sbindir="/opt/${install_name}/bin"
2615	tmp_sysconfdir="/etc/opt"
2616	tmp_mandir="/opt/${install_name}/man"
2617	tmp_localstatedir="/var/opt/${install_name}"
2618	elif test "x${prefix}" = xUSR
2619	then
2620	tmp_sbindir="/usr/sbin"
2621	tmp_sysconfdir="/etc"
2622	tmp_mandir="/usr/share/man"
2623	tmp_localstatedir="/var"
2624	else
2625	tmp_sbindir=`eval echo ${sbindir}`
2626	tmp_sysconfdir=`eval echo ${sysconfdir}`
2627	tmp_mandir=`eval echo ${mandir}`
2628	tmp_localstatedir=`eval echo ${localstatedir}`
2629	fi
2630	else
2631	prefix=""
2632	if test "x${ac_exec_prefix_set}" = xyes
2633	then
2634	tmp_sbindir=`eval echo ${sbindir}`
2635	else
2636	tmp_sbindir="/usr/local/sbin"
2637	fi
2638	tmp_sysconfdir="/etc"
2639	# share/man -> man (FHS) 11.10.2002
2640	tmp_mandir="/usr/local/man"
2641	tmp_localstatedir="/var"
2642	fi
2643
2644
2645	if test "x${ac_sbindir_set}" = xyes
2646	then
2647	:
2648	else
2649	sbindir=`eval echo ${tmp_sbindir}`
2650	fi
2651
2652
2653	if test "x${ac_sysconfdir_set}" = xyes
2654	then
2655	:
2656	else
2657	sysconfdir=`eval echo ${tmp_sysconfdir}`
2658	fi
2659
2660	if test "x${ac_mandir_set}" = xyes
2661	then
2662	:
2663	else
2664	mandir=`eval echo ${tmp_mandir}`
2665	fi
2666
2667	if test "x${ac_localstatedir_set}" = xyes
2668	then
2669	:
2670	else
2671	localstatedir=`eval echo ${tmp_localstatedir}`
2672	fi
2673
2674
2675
2676	AC_ARG_WITH(config-file,
2677	[ --with-config-file=FILE configuration file [[/etc/{install_name}rc]]],
2678	[
2679	myconffile="${withval}"
2680	changequote(<<, >>)dnl
2681	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
2682	sysconfdir=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
2683	myrpmconffile="${tmp}"
2684	changequote([, ])dnl
2685	],
2686	[
2687	myconffile="${sysconfdir}/${install_name}rc"
2688	myrpmconffile="${myconffile}"
2689	]
2690	)
2691	AC_DEFINE_UNQUOTED(DEFAULT_CONFIGFILE, _("${myconffile}") )
2692	AC_SUBST(myconffile)
2693	AC_SUBST(myrpmconffile)
2694
2695	AC_ARG_WITH(log-file,
2696	[ --with-log-file=FILE path of log file [[/var/log/{install_name}_log]]],
2697	[
2698	mylogfile="$withval"
2699	changequote(<<, >>)dnl
2700	mylogdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
2701	changequote([, ])dnl
2702	],
2703	[
2704	if test "x${mytclient}" = "x-DSH_WITH_SERVER"; then
2705	mylogfile="${localstatedir}/log/${install_name}/${install_name}_log"
2706	mylogdir="${localstatedir}/log/${install_name}"
2707	else
2708	mylogfile="${localstatedir}/log/${install_name}_log"
2709	mylogdir="${localstatedir}/log"
2710	fi
2711	]
2712	)
2713	AC_DEFINE_UNQUOTED(DEFAULT_ERRFILE, _("${mylogfile}") )
2714	AC_DEFINE_UNQUOTED(DEFAULT_LOGDIR, _("${mylogdir}") )
2715	AC_SUBST(mylogfile)
2716	AC_SUBST(mylogdir)
2717
2718	AC_ARG_WITH(pid-file,
2719	[ --with-pid-file=FILE set path of pid file [[/var/run/{install_name}.pid]]],
2720	[
2721	mylockfile="$withval"
2722	changequote(<<, >>)dnl
2723	mylockdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
2724	changequote([, ])dnl
2725	],
2726	[
2727	if test -h /var/run && test -d /run; then
2728	mylockfile="/run/${install_name}.pid"
2729	mylockdir="/run"
2730	else
2731	mylockfile="${localstatedir}/run/${install_name}.pid"
2732	mylockdir="${localstatedir}/run"
2733	fi
2734	]
2735	)
2736	AC_DEFINE_UNQUOTED(DEFAULT_ERRLOCK, _("${mylockfile}") )
2737	AC_DEFINE_UNQUOTED(DEFAULT_PIDDIR, _("${mylockdir}") )
2738	AC_SUBST(mylockfile)
2739	AC_SUBST(mylockdir)
2740
2741	AC_ARG_WITH(state-dir,
2742	[ --with-state-dir=PFX set state data directory [[/var/lib/{install_name}]]],
2743	[
2744	mydataroot="$withval"
2745	],
2746	[
2747	mydataroot="${localstatedir}/lib/${install_name}"
2748	]
2749	)
2750	AC_ARG_WITH(data-file,
2751	[ --with-data-file=FILE set path of data file],
2752	[
2753	mydatafile="$withval"
2754	changequote(<<, >>)dnl
2755	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
2756	mydataroot=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
2757	myrpmdatafile="${tmp}"
2758	changequote([, ])dnl
2759	if test x"${tmp}" = x
2760	then
2761	echo "No local path in data file ${withval}"
2762	echo "This will not work for initializing the database."
2763	if test x"${withval}" = xREQ_FROM_SERVER
2764	then
2765	echo "It should be REQ_FROM_SERVER/some/local/path"
2766	fi
2767	AC_MSG_ERROR([Option --with-data-file=FILE used with invalid path ${withval}.])
2768	fi
2769	],
2770	[
2771	mydatafile="${mydataroot}/${install_name}_file"
2772	myrpmdatafile="${mydatafile}"
2773	])
2774	AC_DEFINE_UNQUOTED(DEFAULT_DATA_FILE, _("${mydatafile}") )
2775	AC_SUBST(mydatafile)
2776	AC_SUBST(myrpmdatafile)
2777
2778	AC_DEFINE_UNQUOTED(DEFAULT_DATAROOT, _("${mydataroot}") )
2779	AC_SUBST(mydataroot)
2780
2781	AC_DEFINE_UNQUOTED(DEFAULT_QDIR, _("${mydataroot}/.quarantine") )
2782	AC_SUBST(myqdir)
2783
2784
2785	AC_ARG_WITH(html-file,
2786	[ --with-html-file=FILE set path of html file,],
2787	[
2788	myhtmlfile="$withval"
2789	],
2790	[
2791	myhtmlfile="${mylogdir}/${install_name}.html"
2792	])
2793	AC_DEFINE_UNQUOTED(DEFAULT_HTML_FILE, _("${myhtmlfile}") )
2794	AC_SUBST(myhtmlfile)
2795
2796
2797	mydefargs=$ac_configure_args
2798	# if test -z "`echo "$mydefargs" \| grep "\-\-enable\-static" 2> /dev/null`"
2799	# then
2800	# mydefargs="--enable-static $mydefargs"
2801	# fi
2802	if test -z "`echo "$mydefargs" \| grep "\-\-enable\-base" 2> /dev/null`"
2803	then
2804	mydefargs="--enable-base=${mykeybase} $mydefargs"
2805	fi
2806	AC_SUBST(mydefargs)
2807
2808
2809	AC_DEFINE_UNQUOTED(SH_INSTALL_DIR, _("${sbindir}"))
2810	AC_DEFINE_UNQUOTED(SH_INSTALL_PATH, _("${sbindir}/${install_name}"))
2811	AC_DEFINE_UNQUOTED(SH_INSTALL_NAME, _("${install_name}"))
2812
2813	AC_CONFIG_HEADER(config.h)
2814
2815	AC_OUTPUT(
2816	[
2817	Makefile
2818	samhain-install.sh
2819	init/samhain.startLSB
2820	init/samhain.startLinux
2821	init/samhain.startGentoo
2822	init/samhain.startFreeBSD
2823	init/samhain.startSolaris
2824	init/samhain.startHPUX
2825	init/samhain.startIRIX
2826	init/samhain.startMACOSX
2827	samhain.spec
2828	rules.deb
2829	rules.deb-light
2830	hp_ux.psf
2831	scripts/logrotate
2832	scripts/samhain.spec
2833	scripts/redhat_i386.client.spec
2834	scripts/samhain.ebuild
2835	scripts/samhain.ebuild-light
2836	scripts/samhainadmin.pl
2837	scripts/yuleadmin.pl
2838	scripts/check_samhain.pl
2839	deploy.sh
2840	],
2841	[
2842	echo timestamp > stamp-h
2843	chmod +x samhain-install.sh
2844	chmod +x scripts/samhainadmin.pl
2845	chmod +x scripts/yuleadmin.pl
2846	chmod +x scripts/check_samhain.pl
2847	]
2848	)
2849
2850	chmod +x deploy.sh
2851
2852	if test "x${cross_compiling}" = xyes
2853	then
2854
2855	echo "--------------------------------------------------------------"
2856	echo
2857	echo "You are using a cross-compiler. The following system dependent"
2858	echo "values may have been set to default values that may be"
2859	echo "incorrect for your target system: "
2860	echo
2861	echo "ac_cv_c_bigendian bigendian byte order ${ac_cv_c_bigendian}"
2862	echo "ac_cv_c_long_double long double exists ${ac_cv_c_long_double}"
2863	echo "ac_cv_sizeof_char_p size of pointer to char ${ac_cv_sizeof_char_p}"
2864	echo "ac_cv_sizeof_char_p size of size_t ${ac_cv_sizeof_size_t}"
2865	echo "ac_cv_sizeof_unsigned_int size of unsigned int ${ac_cv_sizeof_unsigned_int}"
2866	echo "ac_cv_sizeof_unsigned_long size of unsigned long ${ac_cv_sizeof_unsigned_long}"
2867	echo "ac_cv_sizeof_unsigned_short size of unsigned short ${ac_cv_sizeof_unsigned_short}"
2868	echo
2869	echo "If these values are incorrect, change them in the file "
2870	echo "config.cache and run configure again."
2871	echo
2872	echo "--------------------------------------------------------------"
2873
2874	fi
2875
2876	if test x${silent} != xyes
2877	then
2878
2879	# A=`eval echo ${sbindir}` ; A=`eval echo ${A}`
2880	# B=`eval echo ${myconffile}` ; B=`eval echo ${B}`
2881	# C=`eval echo ${mandir}` ; C=`eval echo ${C}`
2882	# D=`eval echo ${mylockfile}` ; D=`eval echo ${D}`
2883	# E=`eval echo ${mylogfile}` ; E=`eval echo ${E}`
2884	# F=`eval echo ${mydataroot}` ; F=`eval echo ${F}`
2885
2886	echo
2887	echo " samhain has been configured as follows:"
2888	echo " System binaries: ${sbindir}"
2889	echo " Configuration file: ${myconffile}"
2890	echo " Manual pages: ${mandir}"
2891	echo " Data: ${mydataroot}"
2892	echo " PID file: ${mylockfile}"
2893	echo " Log file: ${mylogfile}"
2894	echo " Base key: ${mykeybase}"
2895	if test x"$mykeyid" != x
2896	then
2897	echo " target GPG/PGP key: ${mykeyid}"
2898	fi
2899	echo
2900	if test x"$mytclient" = x"-DSH_WITH_SERVER"
2901	then
2902	echo " Selected rc file: yulerc"
2903	else
2904	echo " Selected rc file: samhainrc.${selectconfig}"
2905	fi
2906
2907	fi
2908

Note: See TracBrowser for help on using the repository browser.

Download in other formats: