Context Navigation

source: trunk/configure.ac@ 579

Last change on this file since 579 was 579, checked in by katerina, 18 months ago
Fix for ticket #467 (memleak).
File size: 79.3 KB

Line
1	dnl We want to override the standard _AC_INIT_PARSE_ARGS
2	dnl
3	AU_ALIAS([_AC_INIT_PARSE_ARGS], [SH_INIT_PARSE_ARGS])
4	AU_ALIAS([_AC_INIT_help], [SH_INIT_HELP])
5
6	AC_INIT(src/samhain.c)
7
8
9	AC_ARG_VAR([LIBS], [libraries to link against, e.g. -lintl])
10
11	dnl
12	dnl start
13	dnl
14	AM_INIT_AUTOMAKE(samhain, 4.4.10)
15	AC_DEFINE([SAMHAIN], 1, [Application is samhain])
16	AC_CANONICAL_HOST
17
18	dnl
19	dnl checks for programs
20	dnl
21
22	AC_PROG_CC
23	if test "$host" != "$build"; then
24	AC_CHECK_PROGS(BUILD_CC, gcc cc)
25	else
26	BUILD_CC=$CC
27	fi
28	AC_PROG_CPP
29	AC_PROG_INSTALL
30	AC_PROG_LN_S
31	AC_PROG_AWK
32	SH_PROG_LD
33	AC_PATH_PROG(cmd_hostname,hostname)
34	AC_SUBST(cmd_hostname)
35	AC_SUBST(BUILD_CC)
36
37	if test "x$GCC" = "xyes"; then
38	SH_GCC_VERSION
39	fi
40
41	if test "x${gcc_VERSION_MAJOR}" != "x"
42	then
43	AC_MSG_CHECKING([for gcc compiler issues])
44	if test ${gcc_VERSION_MAJOR} -ge 11
45	then
46	dnmalloc_ok=no
47	AC_MSG_RESULT([dnmalloc does not work with gcc 11])
48	else
49	dnmalloc_ok=yes
50	AC_MSG_RESULT([ok])
51	fi
52	else
53	dnmalloc_ok=yes
54	fi
55
56
57	AC_HEADER_STDC
58
59	AC_CHECK_HEADERS([sys/ipc.h sys/sem.h sys/msg.h sys/uio.h fcntl.h])
60
61
62	AC_MSG_CHECKING([for OS specific issues])
63	mydebugflag=no
64	myneedg3=no
65	uid_cast="signed long"
66	selectconfig=linux
67	mynetbsd=no
68	sh_use_lcaps="undef"
69	sh_use_pie=yes
70	enable_asm_ok=yes
71
72	case "$host_os" in
73
74	linux)
75	sh_use_lcaps="yes"
76	AC_DEFINE(HOST_IS_LINUX)
77	AC_DEFINE(HAVE_EXT2_IOCTLS)
78	AC_MSG_RESULT([use ioctl to get e2fs flags])
79	case "$host_cpu" in
80	i86)
81	AC_DEFINE(HOST_IS_I86LINUX)
82	;;
83	x86_64)
84	AC_DEFINE([HOST_IS_64LINUX], 1, [Define if host OS is 64bit Linux])
85	;;
86	*)
87	;;
88	esac
89	LDFLAGS="${LDFLAGS} -Wl,--as-needed"
90	;;
91
92	osf)
93	AC_DEFINE([HOST_IS_OSF], 1, [Define if host OS is OSF])
94	if test "x$GCC" != "xyes"; then
95	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
96	CFLAGS="$CFLAGS -O2 -assume noaligned_objects"
97	myneedg3=yes
98	AC_MSG_RESULT([compiler needs assume noaligned_objects])
99	else
100	AC_MSG_RESULT([none])
101	fi
102	;;
103
104	cygwin)
105	AC_DEFINE(HOST_IS_CYGWIN)
106	AC_DEFINE([USE_REGISTRY_CHECK], 1, [Define for registry check])
107	dnmalloc_ok=no
108	enable_asm_ok=no
109	AC_MSG_RESULT([no trusted paths, no dnmalloc. no asm optimize])
110	;;
111
112	darwin\|apple)
113	AC_DEFINE(HOST_IS_DARWIN)
114	dnmalloc_ok=no
115	AC_MSG_RESULT([check resource forks, no dnmalloc])
116	;;
117
118	freebsd8\|freebsd9)
119	AC_DEFINE(HOST_IS_FREEBSD)
120	selectconfig=freebsd
121	case "$host_cpu" in
122	amd64\|x86_64)
123	dnmalloc_ok=no
124	AC_MSG_RESULT([no dnmalloc])
125	;;
126	*)
127	AC_MSG_RESULT([none])
128	;;
129	esac
130	;;
131
132	freebsd7)
133	AC_DEFINE(HOST_IS_FREEBSD)
134	selectconfig=freebsd
135	case "$host_cpu" in
136	amd64\|x86_64)
137	sh_use_pie=no
138	dnmalloc_ok=no
139	AC_MSG_RESULT([no dnmalloc and broken compiler toolchain])
140	;;
141	*)
142	AC_MSG_RESULT([none])
143	;;
144	esac
145	;;
146
147	freebsd)
148	AC_DEFINE(HOST_IS_FREEBSD)
149	selectconfig=freebsd
150	AC_MSG_RESULT([none])
151	;;
152
153	openbsd)
154	AC_DEFINE([HOST_IS_OPENBSD], 1, [Define if host OS is OPENBSD])
155	selectconfig=freebsd
156	dnmalloc_ok=no
157	AC_MSG_RESULT([dnmalloc does not work with pthreads])
158	;;
159
160	netbsd)
161	mynetbsd=yes
162	selectconfig=netbsd
163	AC_MSG_RESULT([bug with libresolve])
164	;;
165
166	solaris)
167	selectconfig=solaris
168	AC_DEFINE(HOST_IS_SOLARIS)
169	case "$host_cpu" in
170	i*86)
171	AC_DEFINE(HOST_IS_I86SOLARIS)
172	AC_MSG_RESULT([vsnprintf prototype])
173	;;
174	*)
175	AC_MSG_RESULT([none])
176	;;
177	esac
178	if test "x$GCC" != "xyes"; then
179	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
180	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
181	fi
182	if test -z "`echo "$CFLAGS" \| grep "\-xO2" 2> /dev/null`"; then
183	CFLAGS="$CFLAGS -xO2"
184	fi
185	if test -z "`echo "$CFLAGS" \| grep "\-Xa" 2> /dev/null`"; then
186	CFLAGS="$CFLAGS -Xa"
187	fi
188	LIBS="-lc $LIBS"
189	fi
190	;;
191
192
193	sun)
194	selectconfig=solaris
195	AC_DEFINE(HOST_IS_SOLARIS)
196	AC_MSG_RESULT([none])
197	;;
198
199	aix)
200	AC_DEFINE(HOST_IS_AIX)
201	selectconfig=aix5.2.0
202	uid_cast="unsigned long"
203	if test "x$GCC" != "xyes"; then
204	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
205	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
206	fi
207	if test -z "`echo "$CFLAGS" \| grep "\-O3" 2> /dev/null`"; then
208	CFLAGS="$CFLAGS -O3"
209	fi
210	if test -z "`echo "$CFLAGS" \| grep "\-qstrict" 2> /dev/null`"; then
211	CFLAGS="$CFLAGS -qstrict"
212	fi
213	AC_MSG_RESULT([AIX size_t in the accept call and optimize O3 qstrict])
214	else
215	AC_MSG_RESULT([AIX size_t in the accept call])
216	fi
217	;;
218
219	hpux)
220	AC_MSG_RESULT([HPUX need _XOPEN_SOURCE_EXTENDED for h_errno])
221	AC_DEFINE(HOST_IS_HPUX)
222	if test "x$GCC" != "xyes"; then
223	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
224	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
225	fi
226	if test -z "`echo "$CFLAGS" \| grep "\+O2" 2> /dev/null`"; then
227	CFLAGS="$CFLAGS +O2"
228	fi
229	fi
230	;;
231
232	ultrix)
233	AC_MSG_RESULT([ULTRIX getcwd uses popen])
234	AC_DEFINE(HAVE_BROKEN_GETCWD)
235	;;
236
237	*)
238	AC_MSG_RESULT([none])
239	;;
240	esac
241
242	AC_SUBST(selectconfig)
243	AC_DEFINE_UNQUOTED(UID_CAST, ${uid_cast})
244
245
246
247	dnl *****************************************
248	dnl
249	dnl checks for header files
250	dnl
251	dnl *****************************************
252
253	AC_HEADER_DIRENT
254	AC_HEADER_MAJOR
255	AC_HEADER_TIME
256	dnl used in minilzo.c
257	AC_HEADER_STAT
258	AC_DECL_SYS_SIGLIST
259
260	AC_CHECK_HEADERS(stddef.h libgen.h sched.h malloc.h sys/uio.h \
261	sys/mman.h sys/param.h sys/inotify.h sys/sysmacros.h \
262	sys/vfs.h mntent.h \
263	sys/select.h sys/socket.h netinet/in.h ifaddrs.h \
264	regex.h glob.h fnmatch.h \
265	linux/ext2_fs.h linux/fs.h ext2fs/ext2_fs.h asm/segment.h \
266	elf.h linux/elf.h auparse.h \
267	paths.h arpa/nameser.h arpa/nameser_compat.h \
268	rpc/rpcent.h rpc/rpc.h sys/statvfs.h,
269	[],
270	[],
271	[#include <sys/types.h>]
272	)
273
274
275	AC_CHECK_HEADER(utmpx.h, sh_utmpx="yes", sh_utmpx="no")
276	if test "x$sh_utmpx" = "xyes"; then
277	AC_DEFINE(HAVE_UTMPX_H)
278	AC_EGREP_HEADER(ut_host, utmpx.h, AC_DEFINE(HAVE_UTHOST) )
279	AC_EGREP_HEADER(ut_addr, utmpx.h, AC_DEFINE(HAVE_UTADDR) )
280	AC_EGREP_HEADER(ut_addr_v6, utmpx.h, AC_DEFINE(HAVE_UTADDR_V6) )
281	AC_EGREP_HEADER(ut_xtime,utmpx.h, AC_DEFINE(HAVE_UTXTIME) )
282	AC_EGREP_HEADER(ut_type, utmpx.h, AC_DEFINE(HAVE_UTTYPE) )
283	else
284	AC_EGREP_HEADER(ut_addr, utmp.h, AC_DEFINE(HAVE_UTADDR) )
285	AC_EGREP_HEADER(ut_host, utmp.h, AC_DEFINE(HAVE_UTHOST) )
286	AC_EGREP_HEADER(ut_type, utmp.h, AC_DEFINE(HAVE_UTTYPE) )
287	fi
288
289	dnl
290	dnl figure out where acct.h lives
291	dnl and whether fields are int/comp_t
292	dnl
293	dnl GNU Accounting Utilities
294	dnl Copyright (C) 1993, 1996, 1997, 2003, 2005 Free Software Foundation, Inc.
295	dnl The GNU Accounting Utilities are free software; you can redistribute
296	dnl them and/or modify them under the terms of the GNU General Public
297	dnl License as published by the Free Software Foundation; either version
298	dnl 2, or (at your option) any later version.
299	dnl
300	AC_CHECK_HEADER(sys/acct.h,
301	AC_DEFINE(HAVE_SYS_ACCT_H, ,
302	[Define if you have the <sys/acct.h> header file.])
303	AC_HEADER_EGREP(ac_utime, sys/acct.h,
304	AC_DEFINE(HAVE_ACUTIME, ,
305	[Define if <sys/acct.h> has the AC_UTIME field.])
306	AC_HEADER_EGREP(comp_t.*ac_utime, sys/acct.h,
307	AC_DEFINE(ACUTIME_COMPT, ,
308	[Define if <sys/acct.h>'s AC_UTIME field is a COMP_T.]))
309	)
310	AC_HEADER_EGREP(ac_stime, sys/acct.h,
311	AC_DEFINE(HAVE_ACSTIME, ,
312	[Define if <sys/acct.h> has the AC_STIME field.])
313	AC_HEADER_EGREP(comp_t.*ac_stime, sys/acct.h,
314	AC_DEFINE(ACSTIME_COMPT, ,
315	[Define if <sys/acct.h>'s AC_STIME field is a COMP_T.]))
316	)
317	AC_HEADER_EGREP(ac_etime, sys/acct.h,
318	AC_DEFINE(HAVE_ACETIME, ,
319	[Define if <sys/acct.h> has the AC_ETIME field.])
320	AC_HEADER_EGREP(comp_t.*ac_etime, sys/acct.h,
321	AC_DEFINE(ACETIME_COMPT, ,
322	[Define if <sys/acct.h>'s AC_ETIME field is a COMP_T.]))
323	)
324	AC_HEADER_EGREP(ac_io, sys/acct.h,
325	AC_DEFINE(HAVE_ACIO, ,
326	[Define if <sys/acct.h> has the AC_IO field.])
327	AC_HEADER_EGREP(comp_t.*ac_io, sys/acct.h,
328	AC_DEFINE(ACIO_COMPT, ,
329	[Define if <sys/acct.h>'s AC_IO field is a COMP_T.]))
330	)
331	AC_HEADER_EGREP(ac_mem, sys/acct.h,
332	AC_DEFINE(HAVE_ACMEM, ,
333	[Define if <sys/acct.h> has the AC_MEM field.])
334	AC_HEADER_EGREP(comp_t.*ac_mem, sys/acct.h,
335	AC_DEFINE(ACMEM_COMPT, ,
336	[Define if <sys/acct.h>'s AC_MEM field is a COMP_T.]))
337	)
338	AC_HEADER_EGREP(ac_minflt, sys/acct.h,
339	AC_HEADER_EGREP(ac_majflt, sys/acct.h,
340	AC_HEADER_EGREP(ac_swaps, sys/acct.h,
341	AC_DEFINE(HAVE_PAGING, ,
342	[Define if <sys/acct.h> has the AC_MINFLT, AC_MAJFLT and AC_SWAPS fields.])
343	AC_HEADER_EGREP(comp_t.*ac_minflt, sys/acct.h,
344	AC_DEFINE(ACMINFLT_COMPT, ,
345	[Define if <sys/acct.h>'s AC_MINFLT field is a COMP_T.]))
346	AC_HEADER_EGREP(comp_t.*ac_mayflt, sys/acct.h,
347	AC_DEFINE(ACMAJFLT_COMPT, ,
348	[Define if <sys/acct.h>'s AC_MAJFLT field is a COMP_T.]))
349	AC_HEADER_EGREP(comp_t.*ac_swaps, sys/acct.h,
350	AC_DEFINE(ACSWAPS_COMPT, ,
351	[Define if <sys/acct.h>'s AC_SWAPS field is a COMP_T.]))
352	)
353	)
354	)
355	AC_HEADER_EGREP(comp_t, sys/acct.h, AC_DEFINE(HAVE_COMP_T, ,
356	[Define if <sys/acct.h> uses the COMP_T type.]))
357	AC_HEADER_EGREP([struct acct_v3], sys/acct.h, AC_DEFINE(HAVE_ACCT_V3, ,
358	[Define if <sys/acct.h> has struct acct_v3.]))
359	AC_HEADER_EGREP([struct acctv2], sys/acct.h, AC_DEFINE(HAVE_ACCTV2, ,
360	[Define if <sys/acct.h> has struct acctv2.]))
361
362	)
363
364
365	dnl need to check because AIX 4.2 does not have it
366	dnl
367	AC_CHECK_MEMBERS([struct statfs.f_flags],[],[],[
368	#ifdef HAVE_SYS_TYPES_H
369	#include <sys/types.h>
370	#endif
371	#ifdef HAVE_SYS_STAT_H
372	#include <sys/stat.h>
373	#endif
374	#ifdef HAVE_SYS_VFS_H
375	#include <sys/vfs.h>
376	#endif
377	#ifdef HAVE_UNISTD_H
378	#include <unistd.h>
379	#endif
380	])
381
382	AC_SYS_LARGEFILE
383
384	dnl
385	dnl check whether _POSIX_SOURCE is required
386	dnl
387	SAMHAIN_POSIX
388
389
390	dnl *****************************************
391	dnl
392	dnl Checks for library functions.
393	dnl
394	dnl *****************************************
395	AC_FUNC_STRFTIME
396	AC_CHECK_FUNCS(memcmp memcpy memmove memset getpwent endpwent fpurge \
397	explicit_memset explicit_bzero \
398	gettimeofday strlcat strlcpy strstr strchr strerror strsignal \
399	seteuid setreuid setresuid lstat getwd getcwd ptrace \
400	usleep setpriority getpeereid nanosleep \
401	strptime basename sched_yield hasmntopt \
402	inet_aton gethostbyname setutent setrlimit gethostname uname \
403	initgroups getpagesize getutxent \
404	ttyname fchmod writev mmap tzset \
405	getsid getpriority getpgid statvfs \
406	strerror_r getgrgid_r getpwnam_r getpwuid_r \
407	gmtime_r localtime_r rand_r readdir_r strtok_r \
408	mincore posix_fadvise inotify_init1 scandir
409	)
410	AC_CHECK_FUNC(statfs, AC_DEFINE(HAVE_STATFS) statfs="yes", statfs="no")
411	SL_CHECK_VA_COPY
412	AC_CHECK_FUNCS(vsnprintf, [SL_CHECK_VSNPRINTF])
413	AC_CHECK_MLOCK
414	SH_STRFTIME_Z
415
416	AC_MSG_CHECKING(how to get filesystem type)
417	fstype=no
418	# The order of these tests is important.
419	AC_TRY_CPP([#include <sys/statvfs.h>
420	#include <sys/fstyp.h>], AC_DEFINE(FSTYPE_STATVFS) fstype=SVR4)
421	if test $fstype = no; then
422	AC_TRY_CPP([#include <sys/statfs.h>
423	#include <sys/fstyp.h>], AC_DEFINE(FSTYPE_USG_STATFS) fstype=SVR3)
424	fi
425	if test $fstype = no; then
426	AC_TRY_CPP([#include <sys/statfs.h>
427	#include <sys/vmount.h>], AC_DEFINE(FSTYPE_AIX_STATFS) fstype=AIX)
428	fi
429	if test $fstype = no; then
430	AC_TRY_CPP([#include <mntent.h>], AC_DEFINE(FSTYPE_MNTENT) fstype=4.3BSD)
431	fi
432	if test $fstype = no; then
433	AC_EGREP_HEADER(f_type;, sys/mount.h, AC_DEFINE(FSTYPE_STATFS) fstype=4.4BSD/OSF)
434	fi
435	if test $fstype = no; then
436	AC_TRY_CPP([#include <sys/mount.h>
437	#include <sys/fs_types.h>], AC_DEFINE(FSTYPE_GETMNT) fstype=Ultrix)
438	fi
439	AC_MSG_RESULT($fstype)
440
441	sh_libsocket=
442
443	dnl Solaris needs -lsocket and -lnsl. Unisys system includes
444	dnl gethostbyname in libsocket but needs libnsl for socket.
445	AC_CHECK_LIB(nsl, gethostbyname)
446	AC_CHECK_LIB(socket, socket, ac_need_libsocket=1, ac_try_nsl=1)
447	if test x$ac_need_libsocket = x1; then
448	LIBS="$LIBS -lsocket"
449	sh_libsocket="-lsocket"
450	fi
451	if test x$ac_try_nsl = x1; then
452	AC_CHECK_LIB(nsl, gethostbyname, ac_need_libnsl=1)
453	if test x$ac_need_libnsl = x1
454	then
455	LIBS="$LIBS -lnsl"
456	fi
457	fi
458	AC_SUBST(sh_libsocket)
459
460	AC_CHECK_LIB(socket, res_search, [
461	AC_CHECK_LIB(resolv, dn_skipname)
462	AC_CHECK_LIB(resolv, __dn_skipname)
463	if test x$ac_need_libsocket = x1; then
464	:
465	else
466	LIBS="$LIBS -lsocket"
467	fi
468	], [
469	AC_CHECK_LIB(resolv, res_search, [
470	LIBS="$LIBS -lresolv"
471	], [
472	AC_CHECK_LIB(resolv, dn_skipname)
473	AC_CHECK_LIB(resolv, __dn_skipname)
474	])
475	])
476
477	AC_CHECK_FUNCS( getnameinfo getaddrinfo )
478
479
480	sh_auparse=no
481
482	if test "x$ac_cv_header_auparse_h" = "xyes"
483	then
484	AC_CHECK_LIB(auparse, auparse_find_field, [
485	LIBS="$LIBS -lauparse"
486	sh_auparse=yes
487	AC_DEFINE(HAVE_AUPARSE_LIB, 1, [Define if you have the auparse lib])
488	])
489	fi
490
491	dnl arguments for accept
492
493	dnl check for Unix98 socklen_t (found on
494	dnl xemacs-patches mailing list, written
495	dnl by Martin Buchholz)
496	dnl
497	dnl On Darwin(MacOSX) socklen_t needs to be
498	dnl an int (see accept man page), on all other
499	dnl unix systems we need a size_t.
500
501	AC_MSG_CHECKING(for socklen_t)
502	AC_TRY_COMPILE([
503	#ifdef HAVE_SYS_TYPES_H
504	#include <sys/types.h>
505	#endif
506	#ifdef HAVE_SYS_SOCKET_H
507	#include <sys/socket.h>
508	#endif
509	socklen_t x;
510	], [],[
511	AC_MSG_RESULT(yes)
512	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[socklen_t], [type of arg3 of accept])
513	AC_DEFINE([HAVE_SOCKLEN_T], 1, [Define if you have socklen_t])
514	],[
515	AC_TRY_COMPILE([
516	#ifdef HAVE_SYS_TYPES_H
517	#include <sys/types.h>
518	#endif
519	#ifdef HAVE_SYS_SOCKET_H
520	#include <sys/socket.h>
521	#endif
522	int accept (int, struct sockaddr , size_t );
523	],[],[
524	AC_MSG_RESULT(size_t)
525	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[size_t], [type of arg3 of accept])
526	], [
527	AC_MSG_RESULT(int)
528	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[int], [type of arg3 of accept])
529	]
530	)
531	])
532
533	dnl *****************************************
534	dnl checks for extended attribute or ACL
535	dnl support
536	dnl *****************************************
537
538	AC_ARG_ENABLE([selinux],
539	[AS_HELP_STRING([--enable-selinux], [support checking selinux attributes])],
540	[],
541	[enable_selinux=check])
542	if test "x$enable_selinux" != xno; then
543	sh_CHECK_XATTR
544	fi
545
546	AC_ARG_ENABLE([posix-acl],
547	[AS_HELP_STRING([--enable-posix-acl], [support checking posix acls])],
548	[],
549	[enable_posix_acl=check])
550	if test "x$enable_posix_acl" != xno; then
551	sh_CHECK_POSIX_ACL
552	fi
553
554	dnl *****************************************
555	dnl checks for typedefs
556	dnl *****************************************
557
558	AC_C_LONG_DOUBLE
559	SH_CHECK_TYPEDEF(long long, HAVE_LONG_LONG)
560	SH_CHECK_TYPEDEF(uint16_t, HAVE_UINT16_T)
561	SH_CHECK_TYPEDEF(uint32_t, HAVE_UINT32_T)
562	SH_CHECK_TYPEDEF(uint64_t, HAVE_UINT64_T)
563	if test "$sh_HAVE_LONG_LONG" = "yes"; then
564	AC_CHECK_SIZEOF(unsigned long long, 4)
565	sh_sizeof_unsigned_long_long=`echo "$ac_cv_sizeof_unsigned_long_long" \| sed 's%[^0-9]%%g'`
566	if test "$sh_sizeof_unsigned_long_long" = "8"; then
567	AC_DEFINE(HAVE_LONG_LONG_64, 1, [Define if you have 64bit long long])
568	fi
569	fi
570
571	AC_CHECK_TYPE(ptrdiff_t, long)
572	AC_TYPE_SIZE_T
573	AC_CHECK_SIZEOF(char *, 4)
574	AC_CHECK_SIZEOF(size_t, 4)
575
576	AC_CHECK_SIZEOF(unsigned long, 4)
577	AC_CHECK_SIZEOF(unsigned int, 4)
578	AC_CHECK_SIZEOF(unsigned short, 2)
579
580
581	sh_sizeof_unsigned_long=`echo "$ac_cv_sizeof_unsigned_long" \| sed 's%[^0-9]%%g'`
582	if test "$sh_sizeof_unsigned_long" = "4"; then
583	AC_DEFINE(HAVE_LONG_32)
584	fi
585	if test "$sh_sizeof_unsigned_long" = "8"; then
586	AC_DEFINE(HAVE_LONG_64)
587	fi
588	sh_sizeof_unsigned_int=`echo "$ac_cv_sizeof_unsigned_int" \| sed 's%[^0-9]%%g'`
589	if test "$sh_sizeof_unsigned_int" = "4"; then
590	AC_DEFINE(HAVE_INT_32)
591	fi
592	sh_sizeof_unsigned_short=`echo "$ac_cv_sizeof_unsigned_short" \| sed 's%[^0-9]%%g'`
593	if test "$sh_sizeof_unsigned_short" = "4"; then
594	AC_DEFINE(HAVE_SHORT_32)
595	fi
596
597	dnl
598	dnl check for 64 bit programming environment
599	dnl
600	SAMHAIN_64
601
602
603	dnl *****************************************
604	dnl checks for structures
605	dnl *****************************************
606
607	AC_STRUCT_TM
608
609	dnl
610	dnl from e2fsprogs
611	dnl
612	AC_MSG_CHECKING(whether struct stat has a st_flags field)
613	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags,
614	AC_TRY_COMPILE([#include <sys/stat.h>],
615	[struct stat stat; stat.st_flags = 0;],
616	[e2fsprogs_cv_struct_st_flags=yes],
617	[e2fsprogs_cv_struct_st_flags=no]))
618	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags)
619	if test "$e2fsprogs_cv_struct_st_flags" = yes; then
620	AC_MSG_CHECKING(whether st_flags field is useful)
621	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags_immut,
622	AC_TRY_COMPILE([#include <sys/stat.h>],
623	[struct stat stat; stat.st_flags \|= UF_IMMUTABLE;],
624	[e2fsprogs_cv_struct_st_flags_immut=yes],
625	[e2fsprogs_cv_struct_st_flags_immut=no]))
626	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags_immut)
627	if test "$e2fsprogs_cv_struct_st_flags_immut" = yes; then
628	AC_DEFINE(HAVE_STAT_FLAGS)
629	fi
630	fi
631
632	dnl
633	dnl from dbus
634	dnl
635	AC_MSG_CHECKING(for struct cmsgcred)
636	AC_TRY_COMPILE([
637	#include <sys/types.h>
638	#include <sys/socket.h>
639	],[
640	struct cmsgcred cred;
641
642	cred.cmcred_pid = 0;
643	],sh_have_struct_cmsgcred=yes,sh_have_struct_cmsgcred=no)
644	AC_MSG_RESULT($sh_have_struct_cmsgcred)
645
646	if test x$sh_have_struct_cmsgcred = xyes; then
647	AC_DEFINE(HAVE_STRUCT_CMSGCRED,1,[Have cmsgcred structure])
648	fi
649
650	AC_MSG_CHECKING(for struct fcred)
651	AC_TRY_COMPILE([
652	#include <sys/param.h>
653	#include <sys/socket.h>
654	#include <sys/ucred.h>
655	],[
656	struct fcred sockcred;
657	],sh_have_struct_fcred=yes,sh_have_struct_fcred=no)
658	AC_MSG_RESULT($sh_have_struct_fcred)
659
660	if test x$sh_have_struct_fcred = xyes; then
661	AC_DEFINE(HAVE_STRUCT_FCRED,1,[Have fcred structure])
662	fi
663
664	AC_MSG_CHECKING(for struct sockcred)
665	AC_TRY_COMPILE([
666	#include <sys/param.h>
667	#include <sys/socket.h>
668	#include <sys/ucred.h>
669	],[
670	struct sockcred sockcred;
671	],sh_have_struct_sockcred=yes,sh_have_struct_sockcred=no)
672	AC_MSG_RESULT($sh_have_struct_sockcred)
673
674	if test x$sh_have_struct_sockcred = xyes; then
675	AC_DEFINE(HAVE_STRUCT_SOCKCRED,1,[Have sockcred structure])
676	fi
677
678	AC_MSG_CHECKING(for SO_PEERCRED)
679	AC_TRY_COMPILE([
680	#include <sys/types.h>
681	#include <sys/socket.h>
682	],[
683	int test = SO_PEERCRED;
684	],sh_have_SO_PEERCRED=yes,sh_have_SO_PEERCRED=no)
685	AC_MSG_RESULT($sh_have_SO_PEERCRED)
686
687	if test x$sh_have_SO_PEERCRED = xyes; then
688	AC_DEFINE(HAVE_SO_PEERCRED,1,[Have SO_PEERCRED define])
689	fi
690
691	AC_MSG_CHECKING(for union semun)
692	AC_TRY_COMPILE([#include <sys/types.h>
693	#include <sys/ipc.h>
694	#include <sys/sem.h>],[union semun foo;], [sh_have_semun=yes], [sh_have_semun=no])
695	AC_MSG_RESULT($sh_have_semun)
696	if test x$sh_have_semun = xyes
697	then
698	AC_DEFINE(HAVE_UNION_SEMUN, 1, [union semun already defined in sys/ipc.h or sys/sem.h])
699	fi
700
701	dnl *****************************************
702	dnl checks for compiler characteristics
703	dnl *****************************************
704	AC_C_INLINE
705	AC_C_CONST
706	AC_C_BIGENDIAN
707	AC_C_RESTRICT
708
709	AM_SA_SIGACTION_WORKS
710
711	AC_ARG_ENABLE(ssp,
712	[ --disable-ssp disable the GCC stack protector],
713	[],
714	[enable_ssp=yes;]
715	)
716
717	if test "x$GCC" = "xyes"; then
718
719	if test x"${enable_ssp}" = xno; then
720	:
721	else
722	GCC_STACK_PROTECT_LIB
723	GCC_STACK_PROTECT_CC
724	GCC_STACK_CHECK_CC
725	GCC_PIE_CC
726	GCC_FLAG_CHECK([-fexceptions])
727	GCC_FLAG_CHECK([-mcet -fcf-protection])
728	fi
729
730	fi
731
732	dnl *****************************************
733	dnl
734	dnl checks for system services
735	dnl
736	dnl *****************************************
737
738	dnl
739	dnl check for /proc filesystem
740	dnl
741	if test -d "/proc/$$"
742	then
743	AC_DEFINE([HAVE_PROCFS],[1],[Define if you have a proc fs])
744	fi
745
746	dnl
747	dnl check for GNU gmp
748	dnl
749	AC_CHECK_LIB(gmp, __gmpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
750	if test "x${sh_have_gmp}" = xno
751	then
752	AC_CHECK_LIB(gmp, mpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
753	fi
754	if test "x${sh_have_gmp}" = xyes
755	then
756	# LIBS="-lgmp $LIBS"
757	AC_DEFINE(HAVE_LIBGMP, 1, [Have GNU gmp library])
758	fi
759	AC_CHECK_HEADERS(gmp.h)
760
761	AC_MSG_CHECKING([for ps])
762	PS=
763	for ff in /usr/ucb /bin /usr/bin; do
764	if test -x "$ff/ps"; then
765	PS="$ff/ps"
766	AC_MSG_RESULT([$PS])
767	break
768	fi
769	done
770	if test x$PS = x
771	then
772	AC_MSG_RESULT([no])
773	AC_MSG_ERROR([Cannot find ps in any of /usr/ucb /bin /usr/bin])
774	fi
775	AC_DEFINE_UNQUOTED([PSPATH], _("$PS"), [Path to ps])
776
777	AC_MSG_CHECKING([how to use ps])
778	$PS ax >/dev/null 2>&1
779	if test $? -eq 0; then
780	case "$host_os" in
781	openbsd)
782	one=`$PS akx \| wc -l`
783	;;
784	*)
785	one=`$PS ax \| wc -l`
786	;;
787	esac
788	else
789	one=0
790	fi
791	$PS -e >/dev/null 2>&1
792	if test $? -eq 0; then
793	two=`$PS -e \| wc -l`
794	else
795	two=0
796	fi
797	if test $one -ge $two
798	then
799	case "$host_os" in
800	openbsd)
801	PSARG="akx"
802	;;
803	*)
804	PSARG="ax"
805	;;
806	esac
807	else
808	PSARG="-e"
809	fi
810	AC_DEFINE_UNQUOTED([PSARG], _("$PSARG"), [Argument for ps])
811	AC_MSG_RESULT([$PS $PSARG])
812
813	dnl *****************************************
814	dnl
815	dnl enable features
816	dnl
817	dnl *****************************************
818
819	AC_ARG_ENABLE(db-reload,
820	[ --enable-db-reload enable database reload on SIGHUP [[no]]],
821	[
822	if test "x${enable_db_reload}" = xyes; then
823	AC_DEFINE(RELOAD_DATABASE)
824	fi
825	]
826	)
827
828	AC_ARG_ENABLE(xml-log,
829	[ --enable-xml-log enable XML logfile format [[no]]],
830	[
831	if test "x${enable_xml_log}" = xyes; then
832	AC_DEFINE(SH_USE_XML)
833	fi
834	]
835	)
836
837
838	AC_ARG_ENABLE(mail,
839	[ --disable-mail disable the internal SMTP mailer],
840	[
841	if test "x${enable_mail}" = xno; then
842	:
843	else
844	AC_DEFINE(SH_WITH_MAIL)
845	fi
846	],
847	[AC_DEFINE(SH_WITH_MAIL)]
848	)
849
850	AC_ARG_ENABLE(suid,
851	[ --enable-suid allow suid],
852	[
853	if test "x${enable_suid}" = xyes; then
854	AC_DEFINE(SH_ALLOW_SUID, [1], [Define if you want to allow suid execution for samhain])
855	fi
856	]
857	)
858
859	AC_ARG_ENABLE(shellexpand,
860	[ --disable-shellexpand disable shell expansion in config file],
861	[
862	if test "x${enable_shellexpand}" = xno; then
863	:
864	else
865	AC_DEFINE(SH_EVAL_SHELL, [1], [Define if you want shell expansion in configuration file])
866	fi
867	],
868	[AC_DEFINE(SH_EVAL_SHELL, [1], [Define if you want shell expansion in configuration file])]
869	)
870
871	AC_ARG_ENABLE(external-scripts,
872	[ --disable-external-scripts disable interface to external scripts],
873	[
874	if test "x${enableval}" = xno; then
875	:
876	else
877	AC_DEFINE(WITH_EXTERNAL)
878	fi
879	],
880	[AC_DEFINE(WITH_EXTERNAL)]
881	)
882
883	AC_ARG_ENABLE(message-queue,
884	[ --enable-message-queue[[=MODE]] enable SysV message queue [[MODE=0700]]],
885	[
886	if test "x${ac_cv_header_sys_msg_h}" = "xyes"; then
887	if test "x${enable_message_queue}" = xyes; then
888	AC_DEFINE(WITH_MESSAGE_QUEUE)
889	AC_DEFINE_UNQUOTED(MESSAGE_QUEUE_MODE, 0700)
890	elif test "x${enable_message_queue}" != xno; then
891	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
892	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be numeric])
893	echo "${enableval}" \| \
894	grep ['0[0123456789][0123456789][0123456789]'] >/dev/null 2>&1 \|\|
895	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be an octal (0nnn) number])
896	AC_DEFINE(WITH_MESSAGE_QUEUE)
897	AC_DEFINE_UNQUOTED(MESSAGE_QUEUE_MODE, ${enable_message_queue})
898	fi
899	else
900	echo
901	echo "**********************************************"
902	echo
903	AC_MSG_WARN([sys/msg.h missing, --enable-message-queue disabled])
904	echo
905	echo "**********************************************"
906	echo
907	fi
908	]
909	)
910
911	AC_ARG_WITH(cflags,
912	[ --with-cflags additional flags to pass to compiler],
913	[
914	if test "x$withval" != "xno" ; then
915	CFLAGS="$CFLAGS $withval"
916	fi
917	]
918	)
919	AC_ARG_WITH(libs,
920	[ --with-libs additional libraries to link with],
921	[
922	if test "x$withval" != "xno" ; then
923	LIBS="$LIBS $withval"
924	fi
925	]
926	)
927
928
929	#
930	# this is from ssh
931	#
932	AC_MSG_CHECKING(whether to use libwrap)
933	LIBWRAP_LIB=""
934	LIBWRAP_INC=""
935	AC_ARG_WITH(libwrap,
936	[ --with-libwrap[=PATH] Compile in libwrap (TCP Wrappers) support],
937	[ AC_MSG_RESULT($withval)
938	case "$withval" in
939	no)
940	;;
941	""\|yes)
942	LIBWRAP_LIB="-lwrap"
943	;;
944	*)
945	if test -d "$withval"; then
946	LIBWRAP_LIB="-L$withval -lwrap"
947	changequote(<<, >>)dnl
948	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
949	LIBWRAP_INC="-I${sh_libwrap_inc}/include"
950	changequote([, ])dnl
951	else
952	LIBWRAP_LIB="-lwrap"
953	changequote(<<, >>)dnl
954	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
955	LIBWRAP_INC="-I${sh_libwrap_inc}"
956	changequote([, ])dnl
957	fi
958	;;
959	esac
960	if test -n "$LIBWRAP_LIB"; then
961	# OLDLIBS="$LIBS"
962	LIBS="$LIBWRAP_LIB $LIBS"
963	# OLDCFLAGS="$CFLAGS"
964	CFLAGS="$CFLAGS $LIBWRAP_INC"
965	AC_CHECK_HEADER(tcpd.h,
966	[],
967	[ AC_MSG_ERROR([Could not find tcpd.h for libwrap. You need to install tcp_wrappers.]) ])
968	AC_TRY_LINK([ #include <tcpd.h>
969	int allow_severity; int deny_severity; ],
970	[ hosts_access((struct request_info *) 0); ],
971	[ AC_DEFINE(SH_USE_LIBWRAP,1,[Build with tcp wrapper support]) ],
972	[ AC_MSG_ERROR([Could not find the libwrap library.]) ])
973	fi ],
974	AC_MSG_RESULT(no)
975	)
976
977
978	dnl
979	dnl NETWORK OPTIONS
980	dnl
981	AC_ARG_ENABLE(network,
982	[ --enable-network=[[client\|server]] compile client or server [[no]]],
983	[
984	if test "x$enable_network" = xclient; then
985	mytclient="-DSH_WITH_CLIENT"
986	yulectl_prg=
987	samhainadmin_prg=
988	setpwd_prg="samhain_setpwd"
989	sh_main_prg="samhain"
990	if test "x${sh_have_gmp}" = xyes
991	then
992	LIBS="-lgmp $LIBS"
993	fi
994	dnl AC_CHECK_HEADER(sys/capability.h,
995	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
996	dnl [sh_use_lcaps="no"])
997	elif test "x$enable_network" = xserver; then
998	mytclient="-DSH_WITH_SERVER"
999	yulectl_prg="yulectl"
1000	samhainadmin_prg="scripts/samhainadmin-gpg.pl scripts/samhainadmin-sig.pl"
1001	setpwd_prg="samhain_setpwd"
1002	sh_main_prg="yule"
1003	if test "x${sh_have_gmp}" = xyes
1004	then
1005	LIBS="-lgmp $LIBS"
1006	fi
1007	sh_use_lcaps="undef"
1008	elif test "x$enable_network" = xno; then
1009	mytclient="-DSH_STANDALONE"
1010	yulectl_prg=
1011	samhainadmin_prg=
1012	setpwd_prg=
1013	sh_main_prg="samhain"
1014	dnl AC_CHECK_HEADER(sys/capability.h,
1015	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
1016	dnl [sh_use_lcaps="no"])
1017	else
1018	AC_MSG_ERROR([With --enable-network=WHAT, WHAT must be client, server, or no])
1019	fi
1020	],
1021	[
1022	mytclient="-DSH_STANDALONE"
1023	setpwd_prg=
1024	yulectl_prg=
1025	samhainadmin_prg=
1026	sh_main_prg="samhain"
1027	dnl AC_CHECK_HEADER(sys/capability.h,
1028	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
1029	dnl [sh_use_lcaps="no"])
1030	],
1031	)
1032
1033	AC_SUBST(setpwd_prg)
1034	AC_SUBST(yulectl_prg)
1035	AC_SUBST(samhainadmin_prg)
1036	AC_SUBST(sh_main_prg)
1037	AC_SUBST(mytclient)
1038
1039	# needed for the rpm spec
1040	clmytclient=`echo ${mytclient} \| sed s%\-%%`
1041	AC_SUBST(clmytclient)
1042
1043	sh_no_gcc_static=no
1044
1045	AC_ARG_ENABLE(static,
1046	[ --enable-static enable static linking [[no]]],
1047	[
1048	if test x$enable_static = xyes; then
1049	if test x"$mynetbsd" = xyes
1050	then
1051	tmp_LIBS=`echo $LIBS \| sed 's%\-lresolv%%' `
1052	LIBS="${tmp_LIBS}"
1053	fi
1054	if test x"${sh_auparse}" = xyes
1055	then
1056	tmp_LIBS=`echo $LIBS \| sed 's%\-lauparse%%' `
1057	LIBS="${tmp_LIBS}"
1058	AC_MSG_WARN([--enable-static: no support for Linux Auditing System])
1059	fi
1060
1061	if test "x$GCC" = "xyes";
1062	then
1063	if test -n "`echo "$CFLAGS" \| grep "\-flto" 2> /dev/null`"
1064	then
1065	AC_MSG_ERROR([--enable-static: not compatible with link-time optimisation])
1066	fi
1067	case "$host_os" in
1068
1069	solaris)
1070	AC_MSG_WARN([option --enable-static ignored on Solaris])
1071	;;
1072
1073	*)
1074	AC_DEFINE(SH_COMPILE_STATIC, 1, [Define if compiling static])
1075	sh_no_gcc_static=no
1076	LDFLAGS="$LDFLAGS -static"
1077	;;
1078	esac
1079	else
1080	AC_DEFINE(SH_COMPILE_STATIC, 1, [Define if compiling static])
1081	sh_no_gcc_static=yes
1082	case "$host_os" in
1083
1084	aix)
1085	LDFLAGS="$LDFLAGS -bnso -bI:/lib/syscalls.exp"
1086	;;
1087
1088	hpux)
1089	LDFLAGS="$LDFLAGS -Wl,-a,archive"
1090	;;
1091
1092	osf)
1093	LDFLAGS="$LDFLAGS -non_shared"
1094	;;
1095
1096	irix)
1097	LDFLAGS="$LDFLAGS -non_shared"
1098	;;
1099
1100	sco)
1101	LDFLAGS="$LDFLAGS -dn"
1102	;;
1103
1104	sun)
1105	LDFLAGS="$LDFLAGS -Bstatic"
1106	;;
1107
1108	solaris)
1109	LDFLAGS="$LDFLAGS -Bstatic"
1110	;;
1111
1112	*)
1113	echo "***********************************************"
1114	echo "*"
1115	echo "* Don't know how to enable static linking"
1116	echo "* with your compiler. Please set the environment"
1117	echo "* variable LDFLAGS to:"
1118	echo "* ${LDFLAGS} + the static linking flag"
1119	echo "* and run configure again"
1120	echo "*"
1121	echo "***********************************************"
1122	;;
1123
1124	esac
1125	fi
1126	fi
1127	]
1128	)
1129
1130	if test x"${mytclient}" = x-DSH_STANDALONE -o x"${mytclient}" = x-DSH_WITH_CLIENT;
1131	then
1132	dnl For threaded modules
1133	ACX_PTHREAD
1134	CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
1135	LIBS="$PTHREAD_LIBS $LIBS"
1136	LDFLAGS="$PTHREAD_CFLAGS $LDFLAGS"
1137	CC="$PTHREAD_CC"
1138	dnl For MODI_TXT
1139	CHECK_ZLIB()
1140	fi
1141
1142	if test x$enable_static = xyes; then
1143	:
1144	else
1145	if test x$sh_use_pie = xyes; then
1146	LDFLAGS="$LDFLAGS $PIE_LDFLAGS"
1147	CFLAGS="$CFLAGS $PIE_CFLAGS"
1148	fi
1149	fi
1150	AC_CHECK_FUNC(pmap_getmaps,
1151	AC_DEFINE([HAVE_PMAP_GETMAPS], [], [Define if pmap_getmaps available]), [],[])
1152
1153
1154	#
1155	# this is from the snort configure.in
1156	#
1157	AC_DEFUN([FAIL_MESSAGE],[
1158	echo
1159	echo
1160	echo "**********************************************"
1161	echo " ERROR: unable to find" $1
1162	echo " checked in the following places"
1163	for i in `echo $2`; do
1164	echo " $i"
1165	done
1166	echo "**********************************************"
1167	echo
1168	exit
1169	])
1170
1171	AC_ARG_WITH(libprelude-prefix,
1172	[ --with-libprelude-prefix=PFX Prefix where libprelude is installed (optional)],
1173	libprelude_config_prefix="$withval", libprelude_config_prefix="")
1174
1175	AC_MSG_CHECKING(whether to use prelude)
1176	AC_ARG_WITH(prelude,
1177	[ --with-prelude Prelude IDS support [[no]]],
1178	[
1179	if test "x${withval}" = "xno"; then
1180	AC_MSG_RESULT(no)
1181	else
1182	AC_MSG_RESULT(yes)
1183	if test x$libprelude_config_prefix != x ; then
1184	if test x${LIBPRELUDE_CONFIG+set} != xset ; then
1185	LIBPRELUDE_CONFIG=$libprelude_config_prefix/bin/libprelude-config
1186	fi
1187	fi
1188
1189	AC_PATH_PROG(LIBPRELUDE_CONFIG, libprelude-config, no)
1190	if test x"$LIBPRELUDE_CONFIG" = "xno" ; then
1191	HAVE_PRELUDE_CONFIG=no
1192	else
1193	HAVE_PRELUDE_CONFIG=yes
1194	fi
1195	dnl AC_CHECK_PROG(HAVE_PRELUDE_CONFIG, libprelude-config, yes, no)
1196	if test "$HAVE_PRELUDE_CONFIG" = "yes"; then
1197	sh_libprelude_version=`$LIBPRELUDE_CONFIG --version`
1198	case "$sh_libprelude_version" in
1199	0.8*)
1200	AC_MSG_ERROR([You have Libprelude 0.8, which is too old. Version 0.9.6 or higher is required.])
1201	;;
1202	*)
1203	AM_PATH_LIBPRELUDE([0.9.6],
1204	[
1205	AC_DEFINE(HAVE_LIBPRELUDE,1,[Have libprelude])
1206	CFLAGS="$CFLAGS $LIBPRELUDE_PTHREAD_CFLAGS"
1207	LDFLAGS="$LDFLAGS $LIBPRELUDE_LDFLAGS"
1208	LIBS="$LIBS $LIBPRELUDE_LIBS"
1209	],
1210	[
1211	AC_MSG_ERROR([Could not find libprelude (if you are using --enable-static, the static library libprelude.a might be missing).])
1212	])
1213	;;
1214	esac
1215	else
1216	AC_MSG_ERROR([Could not find libprelude-config.])
1217	fi
1218	fi
1219	],
1220	[
1221	AC_MSG_RESULT(no)
1222	]
1223	)
1224
1225	#
1226	# partly based on the snort configure.in
1227	#
1228	AC_ARG_WITH(database,
1229	[ --with-database=[[mysql\|postgresql\|oracle\|odbc]] database support [[no]]],
1230	[
1231	if test x"$enable_static" = xyes; then
1232	AC_MSG_WARN([With --enable-static, --with-database may fail to compile.])
1233	fi
1234	if test x"$enable_xml_log" != xyes; then
1235	AC_MSG_ERROR([With --with-database, --enable-xml-log is required as well.])
1236	fi
1237	if test "x${withval}" = "xmysql"; then
1238	if test "x$zlib_found" = "x"
1239	then
1240	CHECK_ZLIB()
1241	fi
1242	AC_CHECK_PROG(HAVE_MYSQL_CONFIG, mysql_config, yes, no)
1243	if test "$HAVE_MYSQL_CONFIG" = "yes"; then
1244	sh_mysql_libs="`mysql_config --libs`"
1245	sh_mysql_libs="`eval echo ${sh_mysql_libs}`"
1246	LIBS="$LIBS ${sh_mysql_libs}"
1247	sh_mysql_cflags="`mysql_config --cflags`"
1248	sh_mysql_cflags="`eval echo ${sh_mysql_cflags}`"
1249	CPPFLAGS="$CPPFLAGS ${sh_mysql_cflags}"
1250	else
1251	AC_MSG_CHECKING([for MySQL in /usr /usr/local /usr/local/mysql MYSQL_HOME])
1252	mysql_directory="/usr /usr/local /usr/local/mysql ${MYSQL_HOME}"
1253
1254	for i in $mysql_directory; do
1255	if test -r $i/include/mysql/mysql.h; then
1256	MYSQL_DIR=$i
1257	MYSQL_INC_DIR=$i/include
1258	# we use AC_CHECK_HEADERS to check for mysql/mysql.h
1259	fi
1260	done
1261	if test -z "$MYSQL_DIR"; then
1262	for i in $mysql_directory; do
1263	if test -r $i/include/mysql.h; then
1264	MYSQL_DIR=$i
1265	MYSQL_INC_DIR=$i/include
1266	fi
1267	done
1268	fi
1269
1270	if test -z "$MYSQL_DIR"; then
1271	tmp=""
1272	for i in $mysql_directory; do
1273	tmp="$tmp $i/include $i/include/mysql"
1274	done
1275	FAIL_MESSAGE("mysql headers (mysql.h)", $tmp)
1276	fi
1277
1278	for i in lib lib/mysql; do
1279	str="$MYSQL_DIR/$i/libmysqlclient.*"
1280	for j in `echo $str`; do
1281	if test -r $j; then
1282	MYSQL_LIB_DIR="$MYSQL_DIR/$i"
1283	break 2
1284	fi
1285	done
1286	done
1287
1288	if test -z "$MYSQL_LIB_DIR"; then
1289	for ff in $mysql_directory; do
1290	for i in lib lib/mysql; do
1291	str="$ff/$i/libmysqlclient.*"
1292	for j in `echo $str`; do
1293	if test -r $j; then
1294	MYSQL_LIB_DIR="$ff/$i"
1295	break 3
1296	fi
1297	done
1298	done
1299	done
1300	fi
1301
1302	if test -z "$MYSQL_LIB_DIR"; then
1303	tmp=""
1304	for i in $mysql_directory; do
1305	tmp="$i/lib $i/lib/mysql"
1306	done
1307	FAIL_MESSAGE("mysql library libmysqlclient", $tmp)
1308	fi
1309
1310	AC_MSG_RESULT(yes)
1311	LIBS="$LIBS -L${MYSQL_LIB_DIR} -lmysqlclient"
1312	# CFLAGS="$CFLAGS -I${MYSQL_INC_DIR}"
1313	CPPFLAGS="$CPPFLAGS -I${MYSQL_INC_DIR}"
1314	fi
1315	AC_DEFINE(WITH_MYSQL)
1316	AC_DEFINE(WITH_DATABASE)
1317	if test "x$zlib_found" = "xyes"
1318	then
1319	LIBS="$LIBS -lz -lm"
1320	else
1321	echo
1322
1323	echo " Mysql library was not found or not useable."
1324	echo " Possible reasons include:"
1325	echo " - an old, incompatible version compiled from source"
1326	echo " - on Solaris, libmysql is compiled with the Solaris"
1327	echo " compiler, thus the mysql_config script provides"
1328	echo " compiler options unsuitable for gcc (move"
1329	echo " mysql_config out of your PATH)"
1330	echo " For other problems, check config.log for the error"
1331	echo " message from the compiler."
1332	echo
1333	echo " If your mysql libraries are installed in an"
1334	echo " unusual place, use --with-libs=-L/path/to/libdirectory"
1335	echo " where libdirectory is the directory holding libmysql."
1336	if test x"$enable_static" = xyes; then
1337	echo " Note that for compiling a static binary, you need"
1338	echo " the static libraries, rather than the shared ones."
1339	fi
1340	echo
1341	AC_MSG_ERROR([Could not find libmysql, or it is not useable.])
1342	fi
1343	AC_CHECK_HEADERS(mysql/mysql.h)
1344	elif test "x${withval}" = "xpostgresql"; then
1345	AC_DEFINE(WITH_POSTGRES)
1346	AC_DEFINE(WITH_DATABASE)
1347	#
1348	PGCONF="no"
1349	MY_PATH="${PATH}:/usr/local/bin:/usr/local/pgsql/bin"
1350	OLD_IFS="$IFS"
1351	IFS=":"
1352	for ff in ${MY_PATH}
1353	do
1354	if test -f "$ff/pg_config"
1355	then
1356	PGCONF="$ff/pg_config"
1357	fi
1358	done
1359	IFS="${OLD_IFS}"
1360	#
1361	#
1362	if test "x${PGCONF}" = "xno"
1363	then
1364	AC_MSG_CHECKING(for PostgreSQL in /usr/local/pgsql /usr/pgsql /usr/local /usr PGSQL_HOME)
1365	pgsql_directory="/usr/local/pgsql /usr/pgsql /usr/local /usr ${PGSQL_HOME}"
1366	for i in $pgsql_directory; do
1367	if test -r $i/include/pgsql/libpq-fe.h; then
1368	PGSQL_INC_DIR=$i/include
1369	PGSQL_DIR=$i
1370	# use AC_CHECK_HEADERS to check for pgsql/libpq-fe.h
1371	fi
1372	done
1373	if test -z "$PGSQL_DIR"; then
1374	for i in $pgsql_directory; do
1375	if test -r $i/include/postgresql/libpq-fe.h; then
1376	PGSQL_INC_DIR=$i/include
1377	PGSQL_DIR=$i
1378	fi
1379	done
1380	fi
1381	if test -z "$PGSQL_DIR"; then
1382	for i in $pgsql_directory; do
1383	if test -r $i/include/libpq-fe.h; then
1384	PGSQL_INC_DIR=$i/include
1385	PGSQL_DIR=$i
1386	fi
1387	done
1388	fi
1389
1390	if test -z "$PGSQL_DIR"; then
1391	tmp=""
1392	for i in $pgsql_directory; do
1393	tmp="$tmp $i/include $i/include/pgsql $i/include/postgresql"
1394	done
1395	FAIL_MESSAGE("PostgreSQL header file (libpq-fe.h)", $tmp)
1396	fi
1397
1398	for i in lib lib/pgsql lib/postgresql; do
1399	str="$PGSQL_DIR/$i/libpq.*"
1400	for j in `echo $str`; do
1401	if test -r $j; then
1402	PGSQL_LIB_DIR="$PGSQL_DIR/$i"
1403	break 2
1404	fi
1405	done
1406	done
1407
1408	if test -z "$PGSQL_LIB_DIR"; then
1409	for ff in $pgsql_directory; do
1410	for i in lib lib/pgsql lib/postgresql; do
1411	str="$ff/$i/libpq.*"
1412	for j in `echo $str`; do
1413	if test -r $j; then
1414	PGSQL_LIB_DIR="$ff/$i"
1415	break 3
1416	fi
1417	done
1418	done
1419	done
1420	fi
1421
1422	if test -z "$PGSQL_LIB_DIR"; then
1423	tmp=""
1424	for i in $pgsql_directory; do
1425	tmp="$i/lib $i/lib/pgsql $i/lib/postgresql"
1426	done
1427	FAIL_MESSAGE("postgresql library libpq", $tmp)
1428	fi
1429
1430	AC_MSG_RESULT(yes)
1431
1432	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
1433	if test x"$enable_static" = xyes; then
1434	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lcrypt -lm"
1435	else
1436	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
1437	fi
1438	# CFLAGS="$CFLAGS -I${PGSQL_INC_DIR}"
1439	CPPFLAGS="$CPPFLAGS -I${PGSQL_INC_DIR}"
1440	AC_CHECK_HEADERS(pgsql/libpq-fe.h)
1441	AC_CHECK_HEADERS(postgresql/libpq-fe.h)
1442	else
1443	pg_lib_dir=`${PGCONF} --libdir`
1444	if test x"$enable_static" = xyes; then
1445	LIBS="$LIBS -L${pg_lib_dir} -lpq -lcrypt -lm"
1446	else
1447	LIBS="$LIBS -L${pg_lib_dir} -lpq -lm"
1448	fi
1449	pg_inc_dir=`${PGCONF} --includedir`
1450	# CFLAGS="$CFLAGS -I${pg_inc_dir}"
1451	CPPFLAGS="$CPPFLAGS -I${pg_inc_dir}"
1452	fi
1453	elif test "x${withval}" = "xodbc"; then
1454	AC_MSG_CHECKING(for odbc in /usr /usr/local ODBC_HOME)
1455	odbc_directory="/usr /usr/local"
1456
1457	for i in $odbc_directory; do
1458	if test -r $i/include/sql.h; then
1459	if test -r $i/include/sqlext.h; then
1460	if test -r $i/include/sqltypes.h; then
1461	ODBC_DIR=$i
1462	ODBC_INC_DIR=$i/include
1463	fi
1464	fi
1465	fi
1466	done
1467
1468	if test -z "$ODBC_DIR"; then
1469	tmp=""
1470	for i in $odbc_directory; do
1471	tmp="$tmp $i/include"
1472	done
1473	FAIL_MESSAGE("odbc headers (sql.h sqlext.h sqltypes.h)", $tmp)
1474	fi
1475
1476	str="$ODBC_DIR/lib/libodbc.*"
1477	for j in `echo $str`; do
1478	if test -r $j; then
1479	ODBC_LIB_DIR="$ODBC_DIR/lib"
1480	ODBC_LIB="odbc"
1481	fi
1482	done
1483
1484	if test -z "$ODBC_LIB_DIR"; then
1485	FAIL_MESSAGE("odbc library (libodbc)", "$ODBC_DIR/lib")
1486	fi
1487
1488	AC_MSG_RESULT(yes)
1489	CPPFLAGS="${CPPFLAGS} -I${ODBC_INC_DIR}"
1490	LIBS="${LIBS} -L${ODBC_LIB_DIR} -l$ODBC_LIB"
1491	AC_DEFINE(WITH_ODBC)
1492	AC_DEFINE(WITH_DATABASE)
1493
1494	elif test "x${withval}" = "xoracle"; then
1495
1496	AC_MSG_CHECKING(for oracle in ORACLE_HOME /usr/local /usr)
1497
1498	oracle_directory="/usr /usr/local ${ORACLE_HOME}"
1499	for i in $oracle_directory; do
1500
1501	ff=`find $i -name oci.h 2>/dev/null \| tail -1`
1502	if test "x$ff" = "x"; then
1503	:
1504	else
1505	ORACLE_INC=`dirname $ff`
1506	fi
1507
1508	fg=`find $i -name libclntsh.so 2>/dev/null \| tail -1`
1509	if test "x$fg" = "x"; then
1510	:
1511	else
1512	ORACLE_LIB=`dirname $fg`
1513	fi
1514
1515	done
1516
1517	if test -z "$ORACLE_INC"; then
1518
1519	tmp=""
1520	for i in $oracle_directory; do
1521	tmp="$tmp $i"
1522	done
1523	FAIL_MESSAGE("OCI header file (oci.h) please define ORACLE_INC directory where oci.h resides", $tmp)
1524
1525	elif test -z "$ORACLE_LIB"; then
1526
1527	tmp=""
1528	for i in $oracle_directory; do
1529	tmp="$tmp $i"
1530	done
1531	FAIL_MESSAGE("OCI library file (libclntsh.so) please define ORACLE_LIB directory where libclntsh.so resides", $tmp)
1532
1533	else
1534
1535	ORACLE_CPP_FLAGS="-I$ORACLE_INC"
1536	ORACLE_LIB_DIR="$ORACLE_LIB"
1537
1538	AC_MSG_RESULT([$ORACLE_INC $ORACLE_LIB])
1539
1540	CPPFLAGS="${CPPFLAGS} ${ORACLE_CPP_FLAGS}"
1541
1542	ORACLE_LIBS="-lclntsh"
1543
1544	if test -r $ORACLE_LIB_DIR/libnnz11.so; then
1545	ORACLE_LIBS="${ORACLE_LIBS} -lnnz11"
1546	fi
1547	if test -r $ORACLE_LIB_DIR/libwtc9.so; then
1548	ORACLE_LIBS="${ORACLE_LIBS} -lwtc9"
1549	elif test -r $ORACLE_LIB_DIR/libwtc8.so; then
1550	ORACLE_LIBS="${ORACLE_LIBS} -lwtc8"
1551	fi
1552	LIBS="${LIBS} -L${ORACLE_LIB_DIR} ${ORACLE_LIBS}"
1553	if test "x$GCC" != "xyes"; then
1554	CFLAGS="${CFLAGS} -fno-strict-aliasing"
1555	fi
1556	fi
1557	AC_DEFINE(WITH_ORACLE)
1558	AC_DEFINE(WITH_DATABASE)
1559
1560	else
1561	AC_MSG_ERROR([Option --with-database=database used with unsupported database ${withval}])
1562	fi
1563	]
1564	)
1565
1566	AC_ARG_WITH(console,
1567	[ --with-console=PATH set path to console device [[/dev/console]]],
1568	[
1569	if test "x${withval}" != xno; then
1570	mycons="$withval"
1571	AC_DEFINE_UNQUOTED(DEFAULT_CONSOLE, _("${mycons}") )
1572	fi
1573	])
1574
1575	AC_ARG_WITH(altconsole,
1576	[ --with-altconsole=PATH set path to second console device [[none]]],
1577	[
1578	if test "x${withval}" != xno; then
1579	myaltcons="$withval"
1580	else
1581	myaltcons="NULL"
1582	fi
1583	],
1584	[myaltcons="NULL"])
1585	AC_DEFINE_UNQUOTED(ALT_CONSOLE, _("${myaltcons}") )
1586
1587	AC_ARG_WITH(timeserver,
1588	[ --with-timeserver=HOST set host address for time server [[none]]],
1589	[
1590	if test "x${withval}" != xno; then
1591	mytimeserv="$withval"
1592	AC_DEFINE(HAVE_NTIME)
1593	else
1594	mytimeserv="NULL"
1595	fi
1596	],
1597	mytimeserv="NULL")
1598	AC_DEFINE_UNQUOTED(DEFAULT_TIMESERVER, _("${mytimeserv}") )
1599
1600	AC_ARG_WITH(alttimeserver,
1601	[ --with-alttimeserver=HOST set address for backup time server [[none]]],
1602	[
1603	if test "x${withval}" != xno; then
1604	myalttimeserv="$withval"
1605	AC_DEFINE(HAVE_NTIME)
1606	else
1607	myalttimeserv="NULL"
1608	fi
1609	],
1610	myalttimeserv="NULL")
1611	AC_DEFINE_UNQUOTED(ALT_TIMESERVER, _("${myalttimeserv}") )
1612
1613	AC_ARG_ENABLE(login-watch,
1614	[ --enable-login-watch watch for login/logout [[no]]],
1615	[
1616	if test "x${enable_login_watch}" = xyes; then
1617	AC_DEFINE(SH_USE_UTMP)
1618	fi
1619	]
1620	)
1621
1622	AC_ARG_ENABLE(mounts-check,
1623	[ --enable-mounts-check check mount options on filesystems [[no]]],
1624	[
1625	if test "x${enable_mounts_check}" = xyes; then
1626	AC_DEFINE(SH_USE_MOUNTS)
1627	fi
1628	]
1629	)
1630
1631	AC_ARG_ENABLE(logfile-monitor,
1632	[ --enable-logfile-monitor monitor logfiles [[no]]],
1633	[
1634	if test "x${enable_logfile_monitor}" = xyes; then
1635	AC_CHECK_HEADER(pcre.h,
1636	[
1637	AC_DEFINE(USE_LOGFILE_MONITOR, 1, [Define if you want the logfile monitor module.])
1638	LIBS="-lpcre $LIBS"
1639	],
1640	[
1641	AC_CHECK_HEADER(pcre/pcre.h,
1642	[
1643	AC_DEFINE(USE_LOGFILE_MONITOR, 1, [Define if you want the logfile monitor module.])
1644	AC_DEFINE(HAVE_PCRE_PCRE_H, 1, [Define if you have pcre/pcre.h.])
1645	LIBS="-lpcre $LIBS"
1646	],
1647	AC_MSG_ERROR([The --enable-logfile-monitor option requires libpcre. For compiling the pcre development package is needed.])
1648	)
1649	]
1650	)
1651	AC_CHECK_LIB(pcre, pcre_dfa_exec, [
1652	AC_DEFINE([HAVE_PCRE_DFA_EXEC], 1, [Define if you have pcre_dfa_exec])
1653	], [
1654	AC_MSG_WARN([pcre_dfa_exec not available])
1655	])
1656	fi
1657	]
1658	)
1659
1660
1661	AC_ARG_ENABLE(process-check,
1662	[ --enable-process-check check processes [[no]]],
1663	[
1664	if test "x${enable_process_check}" = xyes; then
1665	AC_CHECK_LIB([rt], [sched_getparam], sh_lrt=yes, sh_lrt=no)
1666	if test x"$sh_lrt" = xyes; then
1667	LIBRT=-lrt
1668	else
1669	LIBRT=
1670	fi
1671	LIBS="$LIBS $LIBRT"
1672	AC_DEFINE(SH_USE_PROCESSCHECK, [1], [Define if you want to check processes])
1673	fi
1674	]
1675	)
1676
1677	AC_ARG_ENABLE(port-check,
1678	[ --enable-port-check check ports [[no]]],
1679	[
1680	if test "x${enable_port_check}" = xyes; then
1681	AC_DEFINE(SH_USE_PORTCHECK, [1], [Define if you want to check ports])
1682	fi
1683	]
1684	)
1685
1686	AC_ARG_ENABLE(userfiles,
1687	[ --enable-userfiles check for users' config files [[no]]],
1688	[
1689	if test "x${enableval}" = "xyes"; then
1690	AC_DEFINE(SH_USE_USERFILES)
1691	fi
1692	]
1693	)
1694
1695	AC_ARG_ENABLE(debug,
1696	[ --enable-debug enable debug options [[no]]],
1697	[
1698	if test "x${enable_debug}" = "xyes"; then
1699	if test "x${mydebugflag}" != "xyes"; then
1700	AC_DEFINE(MEM_DEBUG)
1701	fi
1702	AC_DEFINE(WITH_TPT)
1703	AC_DEFINE(SL_DEBUG)
1704	AC_DEFINE(DNMALLOC_CHECKS, 1, [Debug dnmalloc])
1705	AC_DEFINE(PARANOIA, 0, [Paranoia level for dnmalloc])
1706	AC_DEFINE(SL_FAIL_ON_ERROR)
1707	if test "x${myneedg3}" = "xyes"; then
1708	mydebugdef="-g3"
1709	else
1710	mydebugdef="-g"
1711	fi
1712	mydebugit="yes"
1713	elif test "x${enable_debug}" = "xmem"; then
1714	AC_DEFINE(MEM_DEBUG)
1715	AC_DEFINE(SH_ABORT_ON_ERROR, 1, [Use abort])
1716	if test "x${myneedg3}" = "xyes"; then
1717	mydebugdef="-g3"
1718	else
1719	mydebugdef="-g"
1720	fi
1721	mydebugit="yes"
1722	elif test "x${enable_debug}" = "xgdb"; then
1723	AC_DEFINE(SH_ABORT_ON_ERROR, 1, [Use abort])
1724	if test "x${myneedg3}" = "xyes"; then
1725	mydebugdef="-g3"
1726	else
1727	mydebugdef="-g"
1728	fi
1729	mydebugit="yes"
1730	fi
1731	]
1732	)
1733	AC_SUBST(mydebugdef)
1734
1735	if test "x${enable_asm_ok}" = "xyes"; then
1736	sh_enable_asm=yes
1737	else
1738	sh_enable_asm=no
1739	fi
1740	AC_ARG_ENABLE(asm,
1741	[ --disable-asm disable asm inline code],
1742	[
1743	if test "x${enable_asm}" = xno; then
1744	sh_enable_asm=no
1745	fi
1746	]
1747	)
1748
1749	if test "x${samhain_64_asm}" = xyes; then
1750	if test "x${sh_enable_asm}" = xyes; then
1751	AC_DEFINE([TIGER_OPT_ASM],1,[Define to use tiger x86_64 optimized assembly])
1752	fi
1753	fi
1754
1755	AC_ARG_ENABLE(ipv6,
1756	[ --disable-ipv6 disable ipv6 support],
1757	[
1758	if test "x${enable_ipv6}" = xno; then
1759	AC_DEFINE(USE_IPV4,1,[Define if you do not want IPv6])
1760	fi
1761	]
1762	)
1763
1764	if test "x${dnmalloc_ok}" = "xyes"; then
1765	sh_dnmalloc_enabled=yes
1766	else
1767	sh_dnmalloc_enabled=no
1768	fi
1769
1770	AC_ARG_ENABLE(dnmalloc,
1771	[ --disable-dnmalloc disable dnmalloc],
1772	[
1773	if test "x${enable_dnmalloc}" = xno; then
1774	sh_dnmalloc_enabled=no
1775	else
1776	sh_dnmalloc_enabled=yes
1777	fi
1778	]
1779	)
1780
1781	dnl Handle the problem that static linking against libc.a on Linux
1782	dnl produces the error "multiple definitions of malloc"
1783	dnl
1784	if test "x$sh_dnmalloc_enabled" = "xyes"; then
1785	if test x$enable_static = xyes; then
1786	if test "x$sh_no_gcc_static" = "xyes"; then
1787	sh_dnmalloc_enabled=no
1788	else
1789	if test "x$with_gnu_ld" = "xyes"; then
1790	LDFLAGS="$LDFLAGS -Wl,--allow-multiple-definition"
1791	else
1792	sh_dnmalloc_enabled=no
1793	fi
1794	fi
1795	fi
1796	fi
1797
1798	if test "x${sh_dnmalloc_enabled}" = xno; then
1799	AC_DEFINE(USE_SYSTEM_MALLOC,1,[Define if you want to use the system malloc])
1800	fi
1801
1802	AC_ARG_ENABLE(ptrace,
1803	[ --enable-ptrace use anti-debugger options [[no]]],
1804	[
1805	if test "x${enable_ptrace}" = xyes; then
1806	if test "x$mydebugit" != "xyes"; then
1807	AC_DEFINE(SCREW_IT_UP)
1808	fi
1809	fi
1810	]
1811	)
1812
1813	dnl
1814	if test "x$GCC" = "xyes"; then
1815	if test ! -z "`echo "$CFLAGS" \| grep "\-g\ " 2> /dev/null`" ; then
1816	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
1817	fi
1818
1819	dnl -W is the older name for -Wextra
1820
1821
1822	if test -z "`echo "$CFLAGS" \| grep "\-Wall" 2> /dev/null`" ; then
1823	case "$host_os" in
1824	solaris)
1825	CFLAGS="$CFLAGS -Wall -W -Wno-missing-braces "
1826	;;
1827	*)
1828	CFLAGS="$CFLAGS -Wall -W -Werror=implicit-function-declaration "
1829	;;
1830	esac
1831	fi
1832
1833	if test -z "`echo "$CFLAGS" \| grep "\-fstrength\-reduce" 2> /dev/null`"
1834	then
1835	if test -z "`echo "$CFLAGS" \| grep "\-fno\-strength\-reduce" 2> /dev/null`"
1836	then
1837	GCC_FLAG_CHECK([-fno-strength-reduce])
1838	fi
1839	fi
1840
1841	if test -z "`echo "$CFLAGS" \| grep "\-fomit\-frame\-pointer" 2> /dev/null`"
1842	then
1843	if test -z "`echo "$CFLAGS" \| grep "\-fno\-omit\-frame\-pointer" 2> /dev/null`"
1844	then
1845	GCC_FLAG_CHECK([-fno-omit-frame-pointer])
1846	fi
1847	fi
1848
1849	fi
1850
1851	dnl Test whether gcc supports -Wno-empty-body
1852	dnl Suppresses warnings from glibc pthread_cleanup_pop
1853	dnl
1854	GCC_FLAG_CHECK([-Wno-empty-body])
1855
1856	dnl This one is for clang
1857	dnl
1858	GCC_FLAG_CHECK([-Wno-invalid-source-encoding])
1859
1860
1861	AC_MSG_CHECKING([which random module to use])
1862	AC_ARG_WITH(rnd,
1863	[ --with-rnd=[[egd\|unix\|dev\|default]] random number generator [[default]]],
1864	[use_static_rnd=$withval], [use_static_rnd=default] )
1865
1866	if test "$use_static_rnd" = no; then
1867	use_static_rnd=default
1868	fi
1869
1870	case "$use_static_rnd" in
1871	egd \| dev \| unix \| default )
1872	AC_MSG_RESULT($use_static_rnd)
1873	;;
1874	* )
1875	AC_MSG_RESULT([invalid argument])
1876	AC_MSG_ERROR([Option --with-rnd=module used with unsupported module ${use_static_rnd}])
1877	;;
1878	esac
1879
1880	AC_ARG_WITH(egd-socket,
1881	[ --with-egd-socket=NAME EGD socket name],
1882	egd_socket_name="$withval", egd_socket_name="" )
1883	AC_DEFINE_UNQUOTED(EGD_SOCKET_NAME, _("$egd_socket_name") )
1884
1885	dnl
1886	dnl See whether the user wants to disable checking for /dev/random
1887
1888	try_dev_random=yes
1889
1890	case "$use_static_rnd" in
1891	dev \| default )
1892	try_dev_random=yes
1893	;;
1894	egd)
1895	AC_DEFINE(HAVE_EGD_RANDOM)
1896	try_dev_random=no
1897	;;
1898	unix)
1899	AC_DEFINE(HAVE_UNIX_RANDOM)
1900	try_dev_random=no
1901	;;
1902	esac
1903
1904
1905	if test "x$try_dev_random" = "xyes"; then
1906	AC_MSG_CHECKING(whether /dev/random exists)
1907	if test -r "/dev/srandom" && test -c "/dev/srandom"; then
1908	AC_DEFINE(HAVE_URANDOM)
1909	AC_DEFINE_UNQUOTED(NAME_OF_DEV_RANDOM, _("/dev/srandom") )
1910	AC_MSG_RESULT(yes)
1911	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
1912	AC_DEFINE_UNQUOTED(NAME_OF_DEV_URANDOM, _("/dev/urandom") )
1913	fi
1914	else
1915	if test -r "/dev/random" && test -c "/dev/random"; then
1916	AC_DEFINE(HAVE_URANDOM)
1917	AC_DEFINE_UNQUOTED(NAME_OF_DEV_RANDOM, _("/dev/random") )
1918	AC_MSG_RESULT(yes)
1919	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
1920	AC_DEFINE_UNQUOTED(NAME_OF_DEV_URANDOM, _("/dev/urandom") )
1921	fi
1922	else
1923	AC_MSG_RESULT(no)
1924	AC_DEFINE(HAVE_UNIX_RANDOM)
1925	fi
1926	fi
1927	fi
1928
1929
1930	AC_ARG_ENABLE(udp,
1931	[ --enable-udp server can listen on port 514/udp [[no]]],
1932	[
1933	if test "x${enable_udp}" = xyes; then
1934	AC_DEFINE(INET_SYSLOG)
1935	fi
1936	]
1937	)
1938
1939	myencrypt=yes
1940	AC_ARG_ENABLE(encrypt,
1941	[ --disable-encrypt disable client/server encryption],
1942	[
1943	if test "x${enable_encrypt}" = xno; then
1944	myencrypt=no
1945	fi
1946	]
1947	)
1948	if test "x${myencrypt}" = "xyes"; then
1949	AC_DEFINE(SH_ENCRYPT)
1950	AC_DEFINE(SH_ENCRYPT_2)
1951	fi
1952
1953	sh_use_srp_proto=yes
1954	AC_ARG_ENABLE(srp,
1955	[ --disable-srp disable SRP for authentication],
1956	[
1957	if test "x${enable_srp}" = xno; then
1958	sh_use_srp_proto=no
1959	fi
1960	]
1961	)
1962	if test "x${sh_use_srp_proto}" = xyes; then
1963	AC_DEFINE(USE_SRP_PROTOCOL)
1964	fi
1965
1966	AC_ARG_WITH(port,
1967	[ --with-port=PORT set port to use for TCP/IP connection [[49777]]],
1968	[
1969	echo "${withval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1970	AC_MSG_ERROR([For --with-port=PORT, PORT must be numeric.])
1971	myport=${withval}
1972	],
1973	[myport="49777"])
1974	AC_DEFINE_UNQUOTED(SH_DEFAULT_PORT, ${myport})
1975	AC_SUBST(myport)
1976
1977	AC_ARG_WITH(logserver,
1978	[ --with-logserver=HOST set host address for log server [[none]]],
1979	[
1980	case "$withval" in
1981	. \| localhost)
1982	mylogsrv="$withval"
1983	;;
1984	*)
1985	mylogsrv="$withval"
1986	;;
1987	esac
1988	],
1989	[mylogsrv="NULL"])
1990	AC_DEFINE_UNQUOTED(DEFAULT_LOGSERVER, _("${mylogsrv}") )
1991	AC_SUBST(mylogsrv)
1992
1993	AC_ARG_WITH(altlogserver,
1994	[ --with-altlogserver=HOST set address for backup log server [[none]]],
1995	[
1996	case "$withval" in
1997	. \| localhost)
1998	myaltlogsrv="$withval"
1999	;;
2000	*)
2001	myaltlogsrv="$withval"
2002	;;
2003	esac
2004	],
2005	[myaltlogsrv="NULL"])
2006	AC_DEFINE_UNQUOTED(ALT_LOGSERVER, _("${myaltlogsrv}"))
2007
2008
2009
2010	dnl
2011	dnl STEALTH OPTIONS
2012	dnl
2013	nocl_code=
2014	xor_code=0
2015	AC_ARG_ENABLE(nocl,
2016	[ --enable-nocl=PW no CL parsing unless first CL argument is PW],
2017	[
2018	if test "x${enableval}" != "x"; then
2019	AC_DEFINE(SH_STEALTH_NOCL)
2020	fi
2021	if test "x${enableval}" = "xstop" \|\| test "x${enableval}" = "xstart"; then
2022	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
2023	fi
2024	if test "x${enableval}" = "xreload" \|\| test "x${enableval}" = "xrestart"; then
2025	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
2026	fi
2027	if test "x${enableval}" = "xstatus"; then
2028	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
2029	fi
2030	if test "x${enableval}" = "xno"; then
2031	AC_MSG_ERROR([With --enable-nocl=PW, the use of --enable-nocl=no is ambiguous.])
2032	fi
2033	nocl_code="${enable_nocl}"
2034	]
2035	)
2036	AC_DEFINE_UNQUOTED(NOCL_CODE, _("${nocl_code}") )
2037	AC_SUBST(nocl_code)
2038	AC_ARG_ENABLE(stealth,
2039	[ --enable-stealth=XOR_VAL enable stealth mode [[no]]],
2040	[AC_DEFINE(SH_STEALTH)
2041	if test "x${enableval}" != "xyes"; then
2042	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2043	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be numeric.])
2044	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
2045	if test x"${enableval}" = x0
2046	then
2047	:
2048	else
2049	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
2050	fi
2051	fi
2052	xor_code="${enable_stealth}"
2053	else
2054	xor_code=0
2055	fi
2056	stegin_prg="samhain_stealth"
2057	],
2058	[
2059	stegin_prg=
2060	]
2061	)
2062	AC_ARG_ENABLE(micro-stealth,
2063	[ --enable-micro-stealth=XOR_VAL enable micro stealth mode [[no]]],
2064	[
2065	AC_DEFINE(SH_STEALTH)
2066	AC_DEFINE(SH_STEALTH_MICRO)
2067	if test "x${enableval}" != "xyes"; then
2068	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2069	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be numeric.])
2070	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
2071	if test x"${enableval}" = x0
2072	then
2073	:
2074	else
2075	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
2076	fi
2077	fi
2078	xor_code="${enable_micro_stealth}"
2079	else
2080	xor_code=0
2081	fi
2082	]
2083	)
2084	install_name="samhain"
2085	INSTALL_NAME="SAMHAIN"
2086	AC_ARG_ENABLE(install-name,
2087	[ --enable-install-name=NAME name under which to install [[samhain\|yule]]],
2088	[
2089	if test "x${enableval}" != "xyes"; then
2090	install_name="${enableval}"
2091	INSTALL_NAME=`echo "${enableval}" \| tr [a-z] [A-Z]`
2092	else
2093	install_name="${sh_main_prg}"
2094	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
2095	fi
2096	],
2097	[
2098	install_name="${sh_main_prg}"
2099	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
2100	]
2101	)
2102
2103
2104	need_user_install=0
2105
2106	AC_ARG_ENABLE(identity,
2107	[ --enable-identity=USER user if dropping root [[daemon]]],
2108	[
2109	if test x"$enableval" = xno; then
2110	myident="daemon"
2111	else
2112	myident="$enableval"
2113	fi
2114	echo "${myident}" \| grep ['[^0123456789]'] >/dev/null 2>&1 \|\| \
2115	AC_MSG_ERROR([With --enable-identity=USER, please supply a username, not a UID.])
2116	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
2117	grep "^${myident}:" \| awk -F: '{ print $3; }'`
2118	if test x"${myident_uid}" = x; then
2119	AC_MSG_WARN([Option --enable-identity used, user ${myident} will be added upon install.])
2120	need_user_install=1
2121	fi
2122	],
2123	[
2124	for myident in ${install_name} daemon nobody; do
2125	AC_MSG_CHECKING(for user ${myident})
2126	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
2127	grep "^${myident}:" \| awk -F: '{ print $3; }'`
2128	if test x"${myident_uid}" != x; then
2129	AC_MSG_RESULT(yes)
2130	break;
2131	else
2132	AC_MSG_RESULT(no)
2133	fi
2134	done
2135	if test x"${myident_uid}" = x; then
2136	myident=${install_name}
2137	AC_MSG_WARN([--enable-identity: user ${myident} will be added upon install])
2138	need_user_install=1
2139	fi
2140	])
2141	AC_DEFINE_UNQUOTED(DEFAULT_IDENT, _("${myident}") )
2142	AC_SUBST(myident)
2143	AC_SUBST(need_user_install)
2144
2145	AC_SUBST(install_name)
2146	AC_SUBST(INSTALL_NAME)
2147	AC_SUBST(stegin_prg)
2148	AC_SUBST(xor_code)
2149
2150	AC_DEFINE_UNQUOTED(XOR_CODE, ${xor_code})
2151	AC_DEFINE_UNQUOTED(SH_SYSCALLTABLE, ${sh_syscalltable})
2152
2153
2154	exepack_state0=`${srcdir}/c_random.sh 2>/dev/null`
2155	exepack_state1=`${srcdir}/c_random.sh 2>/dev/null`
2156	exepack_state2=`${srcdir}/c_random.sh 2>/dev/null`
2157
2158	AC_DEFINE_UNQUOTED(EXEPACK_STATE_0, ${exepack_state0})
2159	AC_DEFINE_UNQUOTED(EXEPACK_STATE_1, ${exepack_state1})
2160	AC_DEFINE_UNQUOTED(EXEPACK_STATE_2, ${exepack_state2})
2161
2162
2163	AC_ARG_ENABLE(suidcheck,
2164	[ --enable-suidcheck check for suid/sgid files [[no]]],
2165	[
2166	if test "x${enableval}" = "xyes"; then
2167	AC_DEFINE(SH_USE_SUIDCHK)
2168	fi
2169	]
2170	)
2171
2172
2173	AC_ARG_ENABLE(base,
2174	[ --enable-base=B1,B2 base key (0...2147483647)],
2175	[
2176	AC_MSG_CHECKING(base key setting)
2177	my_key_A=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $1}'`
2178	my_key_B=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $2}'`
2179	AC_MSG_RESULT(${my_key_A} ${my_key_B})
2180	if test "x${my_key_A}" = x; then
2181	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid first base key (zero length).])
2182	fi
2183	if test "x${my_key_B}" = x; then
2184	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid second base key (zero length).])
2185	fi
2186	echo "${my_key_A}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2187	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
2188	echo "${my_key_B}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2189	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
2190	],
2191	[
2192	AC_MSG_CHECKING(base key setting .. collecting entropy)
2193	my_key_1=`${srcdir}/c_random.sh 2>/dev/null`
2194	my_key_2=`${srcdir}/c_random.sh 2>/dev/null`
2195	my_key_3=`${srcdir}/c_random.sh 2>/dev/null`
2196	my_key_4=`${srcdir}/c_random.sh 2>/dev/null`
2197	my_key_A=`expr $my_key_1 \* 32767`
2198	my_key_A=`echo ${my_key_A} \| sed 's%^0*%%g' 2>/dev/null`
2199	my_key_A=`expr $my_key_A \+ $my_key_2`
2200	my_key_B=`expr $my_key_3 \* 32767`
2201	my_key_B=`echo ${my_key_B} \| sed 's%^0*%%g' 2>/dev/null`
2202	my_key_B=`expr $my_key_B \+ $my_key_4`
2203	AC_MSG_RESULT(${my_key_A} ${my_key_B})
2204	]
2205	)
2206	AC_SUBST(my_key_A)
2207	AC_SUBST(my_key_B)
2208
2209	dnl low bytes
2210	my_key_1=`expr $my_key_A \% 65536`
2211	dnl high bytes
2212	my_key_2=`expr $my_key_A \/ 65536`
2213	dnl low bytes
2214	my_key_3=`expr $my_key_B \% 65536`
2215	dnl high bytes
2216	my_key_4=`expr $my_key_B \/ 65536`
2217
2218	dnl echo ${my_key_1} ${my_key_2} ${my_key_3} ${my_key_4}
2219
2220	dnl touch ./sh_MK.h
2221	dnl echo "#ifndef SH_MK_H" >> ./sh_MK.h
2222	dnl echo "#define SH_MK_H" >> ./sh_MK.h
2223	dnl ${srcdir}/c_bits.sh ${my_key_1} MKB >> ./sh_MK.h
2224	dnl ${srcdir}/c_bits.sh ${my_key_2} MKA >> ./sh_MK.h
2225	dnl ${srcdir}/c_bits.sh ${my_key_3} MKC >> ./sh_MK.h
2226	dnl ${srcdir}/c_bits.sh ${my_key_4} MKD >> ./sh_MK.h
2227	dnl echo "#endif" >> ./sh_MK.h
2228	AC_SUBST(my_key_1)
2229	AC_SUBST(my_key_2)
2230	AC_SUBST(my_key_3)
2231	AC_SUBST(my_key_4)
2232
2233	AC_MSG_CHECKING(key position)
2234	pos_tf_1=`${srcdir}/c_random.sh 2>/dev/null`
2235	pos_tf_2=`expr $pos_tf_1 \% 8`
2236	pos_tf=`expr $pos_tf_2 + 1`
2237	AC_MSG_RESULT(${pos_tf})
2238	AC_DEFINE_UNQUOTED(POS_TF, ${pos_tf} )
2239
2240	mykeybase=`echo ${my_key_A},${my_key_B}`
2241	AC_DEFINE_UNQUOTED(DEFKEY, ${mykeybase} )
2242	AC_SUBST(mykeybase)
2243
2244
2245	dnl
2246	dnl Signify/GnuPG options
2247	dnl
2248
2249	AC_ARG_WITH(signify,
2250	[ --with-signify=PATH use OpenBSD signify to verify database/config [[no]]],
2251	[
2252	if test "x${withval}" != "xno"; then
2253	if test "x${cross_compiling}" = xyes; then
2254	mysignify="${withval}"
2255	else
2256	if test -f "${withval}"; then
2257	mysignify="${withval}"
2258	mychk0=`gpg --load-extension tiger --print-md TIGER192 ${withval} 2>/dev/null`
2259	if test "x$?" != "x0"; then
2260	mychktest=no
2261	for sam_pre in ./samhain ./yule /usr/local/sbin/samhain /usr/local/bin/samhain /usr/bin/samhain /usr/sbin/samhain /usr/local/sbin/yule /usr/local/bin/yule /usr/bin/yule /usr/sbin/yule; do
2262	if test x"${mychktest}" = xyes
2263	then
2264	:
2265	else
2266	if test -f ${sam_pre}
2267	then
2268	echo "use existing ${sam_pre} for signify checksum"
2269	mychk0=`${sam_pre} -H ${withval} 2>/dev/null`
2270	if test "x$?" != "x0"; then
2271	if test "x${nocl_code}" != "x"; then
2272	mychk0=`echo -H ${withval} \| ${sam_pre} ${nocl_code} 2>/dev/null`
2273	if test "x$?" != "x0"; then
2274	:
2275	else
2276	mychk="${mychk0}"
2277	mychktest=yes
2278	fi
2279	fi
2280	else
2281	mychk="${mychk0}"
2282	mychktest=yes
2283	fi
2284	fi
2285	fi
2286	done
2287	if test x${mychktest} = xno; then
2288	AC_MSG_WARN([--with-signify: cannot determine TIGER192 checksum of ${withval}])
2289	echo "-------------------------------------------------------------"
2290	echo " I cannot find an existing GnuPG or samhain binary to use."
2291	echo " You can:"
2292	echo " (a) run make to compile a samhain binary, then repeat"
2293	echo " ./configure and make"
2294	echo " (b) ignore the failure. The checksum of the signify binary"
2295	echo " will not get compiled in, thus allowing an attacker"
2296	echo " to replace signify with a trojan and subverting the"
2297	echo " signature verification of configure and database files."
2298	echo
2299	echo " PLEASE IGNORE THIS MESSAGE IF YOU ALSO USE --with-checksum"
2300	echo "-------------------------------------------------------------"
2301	fi
2302	else
2303	mychk="${mychk0}"
2304	fi
2305	else
2306	AC_MSG_ERROR([--with-signify: cannot find signify PATH=${withval}])
2307	fi
2308	fi
2309	AC_DEFINE([WITH_SIG], 1, [Define if signature checking is supported.])
2310	AC_DEFINE([WITH_SIGNIFY], 1, [Define if using OpenBSD signify for signature checking.])
2311	AC_DEFINE_UNQUOTED([DEFAULT_SIG_PATH], _("${mysignify}"), [Define as path to signing binary])
2312	AC_SUBST(mysignify)
2313	fi
2314	]
2315	)
2316
2317	AC_ARG_WITH(pubkey-checksum,
2318	[ --with-pubkey-checksum=CHKSUM compile in TIGER192 checksum of signify public key [[no]]],
2319	[
2320	if test "x${withval}" != "xno"; then
2321	if test "x${withval}" == "xyes"; then
2322	AC_MSG_ERROR([Option --with-pubkey-checksum=CHKSUM: checksum CHKSUM of signify public key not specified.])
2323	else
2324	if test "x${withval}" = "x"; then
2325	AC_MSG_ERROR([Option --with-checksum=CHKSUM: checksum CHKSUM of the signify public key not specified.])
2326	fi
2327	fi
2328	AC_DEFINE([HAVE_SIG_KEY_HASH], 1, [Define if signing binary checksum available.])
2329	AC_DEFINE_UNQUOTED([SIG_KEY_HASH], _("${withval}"), [Define as the signify public key checksum.] )
2330	fi
2331	]
2332	)
2333
2334
2335	AC_ARG_WITH(gpg,
2336	[ --with-gpg=PATH use GnuPG to verify database/config [[no]]],
2337	[
2338	if test "x${mysignify}" != "x"; then
2339	AC_MSG_ERROR([--with-gpg: already using --with-signify])
2340	fi
2341	if test "x${withval}" != "xno"; then
2342	if test "x${cross_compiling}" = xyes; then
2343	mygpg="${withval}"
2344	else
2345	if test -f "${withval}"; then
2346	mygpg="${withval}"
2347	mychk0=`${withval} --load-extension tiger --print-md TIGER192 ${withval} 2>/dev/null`
2348	if test "x$?" != "x0"; then
2349	mychktest=no
2350	for sampre in ./samhain ./yule /usr/local/sbin/samhain /usr/local/bin/samhain /usr/bin/samhain /usr/sbin/samhain /usr/local/sbin/yule /usr/local/bin/yule /usr/bin/yule /usr/sbin/yule; do
2351	if test x"${mychktest}" = xyes
2352	then
2353	:
2354	else
2355	if test -f ${sampre}
2356	then
2357	echo "use existing ${sampre} for gpg checksum"
2358	mychk0=`${sampre} -H ${withval} 2>/dev/null`
2359	if test "x$?" != "x0"; then
2360	if test "x${nocl_code}" != "x"; then
2361	mychk0=`echo -H ${withval} \| ${sampre} ${nocl_code} 2>/dev/null`
2362	if test "x$?" != "x0"; then
2363	:
2364	else
2365	mychk="${mychk0}"
2366	mychktest=yes
2367	fi
2368	fi
2369	else
2370	mychk="${mychk0}"
2371	mychktest=yes
2372	fi
2373	fi
2374	fi
2375	done
2376	if test x${mychktest} = xno; then
2377	AC_MSG_WARN([--with-gpg: cannot determine TIGER192 checksum of ${withval}])
2378	echo "-------------------------------------------------------------"
2379	echo " Your gpg binary does not support the TIGER192 checksum, "
2380	echo " and I cannot find an existing samhain binary to use instead."
2381	echo " You can:"
2382	echo " (a) run make to compile a samhain binary, then repeat"
2383	echo " ./configure and make"
2384	echo " (b) ignore the failure. The checksum of the gpg binary"
2385	echo " will not get compiled in, thus allowing an attacker"
2386	echo " to replace gpg with a trojan and subverting the gpg"
2387	echo " signature verification of configure and database files."
2388	echo
2389	echo " PLEASE IGNORE THIS MESSAGE IF YOU ALSO USE --with-checksum"
2390	echo "-------------------------------------------------------------"
2391	fi
2392	else
2393	mychk="${mychk0}"
2394	fi
2395	else
2396	AC_MSG_ERROR([--with-gpg: cannot find GnuPG PATH=${withval}])
2397	fi
2398	fi
2399	AC_DEFINE([WITH_SIG], 1, [Define if signature checking is supported.])
2400	AC_DEFINE(WITH_GPG)
2401	AC_DEFINE_UNQUOTED([DEFAULT_SIG_PATH], _("${mygpg}"), [Define as path to signing binary])
2402	AC_SUBST(mygpg)
2403	fi
2404	]
2405	)
2406
2407
2408
2409	AC_ARG_WITH(keyid,
2410	[ --with-keyid=KEYID specify KeyID (0x...) for GPG/PGP functions [[none]]],
2411	[
2412	if test "x${withval}" != "x"; then
2413	echo "${withval}" \| awk '{if((length($0)==10)\|\|(length($0)==18)){exit 2}else{exit 0}}' &&
2414	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
2415	echo "${withval}" \| grep ['[^0][^x][^0123456789ABCDEFabcdef]'] >/dev/null 2>&1 &&
2416	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
2417	mykeyid="$withval"
2418	mykeytag="--default-key"
2419	else
2420	mykeyid=""
2421	mykeytag=""
2422	fi
2423	AC_SUBST(mykeyid)
2424	AC_SUBST(mykeytag)
2425	]
2426	)
2427
2428	AC_ARG_WITH(checksum,
2429	[ --with-checksum=CHKSUM compile in checksum of signing binary (e.g. gpg) [[yes]]],
2430	[
2431	if test "x${withval}" != "xno"; then
2432	if test "x${withval}" != "xyes"; then
2433	if test "x${mychk}" != "x"; then
2434	if test "x${mychk}" != "x${withval}"; then
2435	AC_MSG_WARN([--with-checksum: possible signing binary CHKSUM problem])
2436	AC_MSG_WARN([--with-checksum: CHKSUM=${withval}])
2437	AC_MSG_WARN([--with-checksum: autodetected=${mychk}])
2438	fi
2439	fi
2440	mychk="${withval}"
2441	else
2442	if test "x${mychk}" = "x"; then
2443	AC_MSG_ERROR([Option --with-checksum=CHKSUM: checksum CHKSUM of the signing binary not specified.])
2444	fi
2445	fi
2446	AC_DEFINE([HAVE_SIG_CHECKSUM], 1, [Define if signing binary checksum available.])
2447	AC_DEFINE_UNQUOTED([SIG_HASH], _("${mychk}"), [Define as the signing binary TIGER192 checksum.] )
2448	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char sigchk[50];"; for (i=1; i <= m; i++) printf "sigchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "sigchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_sig_chksum.h
2449	fi
2450	],
2451	[
2452	if test "x${mygpg}" != "x" \|\| test "x${mysignify}" != "x"
2453	then
2454	if test "x${mychk}" != "x"; then
2455	AC_DEFINE([HAVE_SIG_CHECKSUM], 1, [Define if signing binary checksum available.])
2456	AC_DEFINE_UNQUOTED([SIG_HASH], _("${mychk}"), [Define as the signing binary TIGER192 checksum.] )
2457	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char sigchk[50];"; for (i=1; i <= m; i++) printf "sigchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "sigchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_sig_chksum.h
2458	fi
2459	fi
2460	]
2461	)
2462
2463	AC_ARG_WITH(fp,
2464	[ --with-fp=FINGERPRINT compile in public key fingerprint [[no]]],
2465	[
2466	if test "x${withval}" != "xno"; then
2467	if test "x${withval}" != "xyes"; then
2468	withval0=`echo ${withval} \| sed 's% %%g'`
2469	echo "${withval0}" \| \
2470	grep ['[^0123456789abcdefABCDEF]'] >/dev/null 2>&1 &&
2471	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, there is an invalid character(s) in FINGERPRINT=${withval0}.])
2472	sh_len=`echo ${withval0} \| wc -c \| sed 's% %%g'`
2473	sh_len0=`expr ${sh_len} \- 1`
2474	if test "x${sh_len0}" = "x40" \|\| test "x${sh_len0}" = "x32"
2475	then
2476	myfp="${withval0}"
2477	AC_DEFINE(USE_FINGERPRINT)
2478	AC_DEFINE_UNQUOTED(SH_GPG_FP, _("${myfp}") )
2479	echo "${myfp}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef FINGERPRINT_H"; print "#define FINGERPRINT_H"; printf "char gpgfp[%d];\n", m+1; for (i=1; i <= m; i++) printf "gpgfp[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgfp[%d] = %c%c0%c;\n", m, 39, 92, 39; print "#endif"; }' > sh_gpg_fp.h
2480	else
2481	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, the length (${sh_len0}) of FINGERPRINT ${withval0} is incorrect.])
2482	fi
2483	else
2484	AC_MSG_ERROR([For option --with-fp=FINGERPRINT, FINGERPRINT=yes is invalid, please specify a valid key fingerprint.])
2485	fi
2486	fi
2487	])
2488
2489
2490	dnl
2491	dnl MAIL OPTIONS
2492	dnl
2493
2494	AC_ARG_WITH(recipient,
2495	[ --with-recipient=ADDR set recipient(s) for e-mail [[none]]],
2496	[
2497	withval0=`echo ${withval} \| sed 's%,% %g'`
2498	for sh_item in ${withval0}
2499	do
2500	case ${sh_item} in
2501	*@localhost)
2502	;;
2503	@.*)
2504	sh_tmp=`echo ${sh_item} \| awk '{ if ($1 ~ [/^[a-zA-Z0-9][a-zA-Z0-9\-_\.]*@[a-zA-Z0-9\-\.]+\.([a-zA-Z]+\|[0-9]+)$/]) {print 1; } else { print 0}}'`
2505	if test "x${sh_tmp}" != "x1"
2506	then
2507	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
2508	fi
2509	;;
2510	*)
2511	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
2512	;;
2513	esac
2514	done
2515	myrcp="$withval0"
2516	],
2517	[myrcp="NULL"])
2518	AC_DEFINE_UNQUOTED(DEFAULT_MAILADDRESS, _("${myrcp}") )
2519
2520
2521	AC_ARG_WITH(sender,
2522	[ --with-sender=SENDER set sender for e-mail [[daemon]]],
2523	[
2524	mysender="${withval}"
2525	],
2526	[
2527	mysender="daemon"
2528	])
2529	AC_DEFINE_UNQUOTED(DEFAULT_SENDER, _("${mysender}") )
2530
2531
2532	dnl
2533	dnl PATHS
2534	dnl
2535
2536	AC_ARG_WITH(trusted,
2537	[ --with-trusted=UID Set uid(s) of trusted users [[0]]],
2538	[
2539	sh_tmp_test=no
2540	sh_tmp=`echo ${withval} \| sed 's%,% %g'`
2541	for sh_tmp1 in ${sh_tmp}
2542	do
2543	echo "${sh_tmp1}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2544	AC_MSG_ERROR([Option --with-trusted=UID used with non-numeric UID in ${withval}.])
2545	if test "x${sh_tmp1}" = "x0"
2546	then
2547	sh_tmp_test=yes
2548	fi
2549	done
2550	if test "x${sh_tmp_test}" = "xno"
2551	then
2552	withval="0,${withval}"
2553	fi
2554	mytrust="${withval}"
2555	],
2556	[mytrust="0"] )
2557	AC_DEFINE_UNQUOTED(SL_ALWAYS_TRUSTED, ${mytrust} )
2558	AC_SUBST(mytrust)
2559
2560	mytmpdir=
2561
2562	AC_ARG_WITH(tmp-dir,
2563	[ --with-tmp-dir=PFX set directory for temporary files [[HOME]]],
2564	[
2565	if test "x${cross_compiling}" = xyes; then
2566	mytmpdir="$withval"
2567	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2568	else
2569	if test -d "${withval}"; then
2570	mytmpdir="$withval"
2571	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2572	else
2573	mytmpdir="$withval"
2574	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${mytmpdir}") )
2575	AC_MSG_WARN([--with-tmp-dir: tmp directory ${withval} does not exist])
2576	fi
2577	fi
2578	]
2579	)
2580
2581	AC_SUBST(mytmpdir)
2582
2583
2584	dnl
2585	dnl PATH DEFAULTS
2586	dnl
2587
2588	if test "x${ac_prefix_set}" = xyes
2589	then
2590	if test "x${exec_prefix}" = xNONE
2591	then
2592	exec_prefix="${prefix}"
2593	fi
2594
2595	if test "x${prefix}" = xOPT
2596	then
2597	tmp_sbindir="/opt/${install_name}/bin"
2598	tmp_sysconfdir="/etc/opt"
2599	tmp_mandir="/opt/${install_name}/man"
2600	tmp_localstatedir="/var/opt/${install_name}"
2601	elif test "x${prefix}" = xUSR
2602	then
2603	tmp_sbindir="/usr/sbin"
2604	tmp_sysconfdir="/etc"
2605	tmp_mandir="/usr/share/man"
2606	tmp_localstatedir="/var"
2607	else
2608	tmp_sbindir=`eval echo ${sbindir}`
2609	tmp_sysconfdir=`eval echo ${sysconfdir}`
2610	tmp_mandir=`eval echo ${mandir}`
2611	tmp_localstatedir=`eval echo ${localstatedir}`
2612	fi
2613	else
2614	prefix=""
2615	if test "x${ac_exec_prefix_set}" = xyes
2616	then
2617	tmp_sbindir=`eval echo ${sbindir}`
2618	else
2619	tmp_sbindir="/usr/local/sbin"
2620	fi
2621	tmp_sysconfdir="/etc"
2622	# share/man -> man (FHS) 11.10.2002
2623	tmp_mandir="/usr/local/man"
2624	tmp_localstatedir="/var"
2625	fi
2626
2627
2628	if test "x${ac_sbindir_set}" = xyes
2629	then
2630	:
2631	else
2632	sbindir=`eval echo ${tmp_sbindir}`
2633	fi
2634
2635
2636	if test "x${ac_sysconfdir_set}" = xyes
2637	then
2638	:
2639	else
2640	sysconfdir=`eval echo ${tmp_sysconfdir}`
2641	fi
2642
2643	if test "x${ac_mandir_set}" = xyes
2644	then
2645	:
2646	else
2647	mandir=`eval echo ${tmp_mandir}`
2648	fi
2649
2650	if test "x${ac_localstatedir_set}" = xyes
2651	then
2652	:
2653	else
2654	localstatedir=`eval echo ${tmp_localstatedir}`
2655	fi
2656
2657
2658
2659	AC_ARG_WITH(config-file,
2660	[ --with-config-file=FILE configuration file [[/etc/{install_name}rc]]],
2661	[
2662	myconffile="${withval}"
2663	changequote(<<, >>)dnl
2664	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
2665	sysconfdir=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
2666	myrpmconffile="${tmp}"
2667	changequote([, ])dnl
2668	],
2669	[
2670	myconffile="${sysconfdir}/${install_name}rc"
2671	myrpmconffile="${myconffile}"
2672	]
2673	)
2674	AC_DEFINE_UNQUOTED(DEFAULT_CONFIGFILE, _("${myconffile}") )
2675	AC_SUBST(myconffile)
2676	AC_SUBST(myrpmconffile)
2677
2678	AC_ARG_WITH(log-file,
2679	[ --with-log-file=FILE path of log file [[/var/log/{install_name}_log]]],
2680	[
2681	mylogfile="$withval"
2682	changequote(<<, >>)dnl
2683	mylogdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
2684	changequote([, ])dnl
2685	],
2686	[
2687	if test "x${mytclient}" = "x-DSH_WITH_SERVER"; then
2688	mylogfile="${localstatedir}/log/${install_name}/${install_name}_log"
2689	mylogdir="${localstatedir}/log/${install_name}"
2690	else
2691	mylogfile="${localstatedir}/log/${install_name}_log"
2692	mylogdir="${localstatedir}/log"
2693	fi
2694	]
2695	)
2696	AC_DEFINE_UNQUOTED(DEFAULT_ERRFILE, _("${mylogfile}") )
2697	AC_DEFINE_UNQUOTED(DEFAULT_LOGDIR, _("${mylogdir}") )
2698	AC_SUBST(mylogfile)
2699	AC_SUBST(mylogdir)
2700
2701	AC_ARG_WITH(pid-file,
2702	[ --with-pid-file=FILE set path of pid file [[/var/run/{install_name}.pid]]],
2703	[
2704	mylockfile="$withval"
2705	changequote(<<, >>)dnl
2706	mylockdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
2707	changequote([, ])dnl
2708	],
2709	[
2710	if test -h /var/run && test -d /run; then
2711	mylockfile="/run/${install_name}.pid"
2712	mylockdir="/run"
2713	else
2714	mylockfile="${localstatedir}/run/${install_name}.pid"
2715	mylockdir="${localstatedir}/run"
2716	fi
2717	]
2718	)
2719	AC_DEFINE_UNQUOTED(DEFAULT_ERRLOCK, _("${mylockfile}") )
2720	AC_DEFINE_UNQUOTED(DEFAULT_PIDDIR, _("${mylockdir}") )
2721	AC_SUBST(mylockfile)
2722	AC_SUBST(mylockdir)
2723
2724	AC_ARG_WITH(state-dir,
2725	[ --with-state-dir=PFX set state data directory [[/var/lib/{install_name}]]],
2726	[
2727	mydataroot="$withval"
2728	],
2729	[
2730	mydataroot="${localstatedir}/lib/${install_name}"
2731	]
2732	)
2733	AC_ARG_WITH(data-file,
2734	[ --with-data-file=FILE set path of data file],
2735	[
2736	mydatafile="$withval"
2737	changequote(<<, >>)dnl
2738	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
2739	mydataroot=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
2740	myrpmdatafile="${tmp}"
2741	changequote([, ])dnl
2742	if test x"${tmp}" = x
2743	then
2744	echo "No local path in data file ${withval}"
2745	echo "This will not work for initializing the database."
2746	if test x"${withval}" = xREQ_FROM_SERVER
2747	then
2748	echo "It should be REQ_FROM_SERVER/some/local/path"
2749	fi
2750	AC_MSG_ERROR([Option --with-data-file=FILE used with invalid path ${withval}.])
2751	fi
2752	],
2753	[
2754	mydatafile="${mydataroot}/${install_name}_file"
2755	myrpmdatafile="${mydatafile}"
2756	])
2757	AC_DEFINE_UNQUOTED(DEFAULT_DATA_FILE, _("${mydatafile}") )
2758	AC_SUBST(mydatafile)
2759	AC_SUBST(myrpmdatafile)
2760
2761	AC_DEFINE_UNQUOTED(DEFAULT_DATAROOT, _("${mydataroot}") )
2762	AC_SUBST(mydataroot)
2763
2764	AC_DEFINE_UNQUOTED(DEFAULT_QDIR, _("${mydataroot}/.quarantine") )
2765	AC_SUBST(myqdir)
2766
2767
2768	AC_ARG_WITH(html-file,
2769	[ --with-html-file=FILE set path of html file,],
2770	[
2771	myhtmlfile="$withval"
2772	],
2773	[
2774	myhtmlfile="${mylogdir}/${install_name}.html"
2775	])
2776	AC_DEFINE_UNQUOTED(DEFAULT_HTML_FILE, _("${myhtmlfile}") )
2777	AC_SUBST(myhtmlfile)
2778
2779
2780	mydefargs=$ac_configure_args
2781	# if test -z "`echo "$mydefargs" \| grep "\-\-enable\-static" 2> /dev/null`"
2782	# then
2783	# mydefargs="--enable-static $mydefargs"
2784	# fi
2785	if test -z "`echo "$mydefargs" \| grep "\-\-enable\-base" 2> /dev/null`"
2786	then
2787	mydefargs="--enable-base=${mykeybase} $mydefargs"
2788	fi
2789	AC_SUBST(mydefargs)
2790
2791
2792	AC_DEFINE_UNQUOTED(SH_INSTALL_DIR, _("${sbindir}"))
2793	AC_DEFINE_UNQUOTED(SH_INSTALL_PATH, _("${sbindir}/${install_name}"))
2794	AC_DEFINE_UNQUOTED(SH_INSTALL_NAME, _("${install_name}"))
2795
2796	AC_CONFIG_HEADER(config.h)
2797
2798	AC_OUTPUT(
2799	[
2800	Makefile
2801	samhain-install.sh
2802	init/samhain.startLSB
2803	init/samhain.startLinux
2804	init/samhain.startSystemd
2805	init/samhain.startGentoo
2806	init/samhain.startFreeBSD
2807	init/samhain.startSolaris
2808	init/samhain.startHPUX
2809	init/samhain.startIRIX
2810	init/samhain.startMACOSX
2811	samhain.spec
2812	rules.deb
2813	rules.deb-light
2814	hp_ux.psf
2815	scripts/logrotate
2816	scripts/samhain.spec
2817	scripts/redhat_i386.client.spec
2818	scripts/samhain.ebuild
2819	scripts/samhain.ebuild-light
2820	scripts/samhainadmin-gpg.pl
2821	scripts/samhainadmin-sig.pl
2822	scripts/yuleadmin.pl
2823	scripts/check_samhain.pl
2824	deploy.sh
2825	],
2826	[
2827	echo timestamp > stamp-h
2828	chmod +x samhain-install.sh
2829	chmod +x scripts/samhainadmin-gpg.pl
2830	chmod +x scripts/samhainadmin-sig.pl
2831	chmod +x scripts/yuleadmin.pl
2832	chmod +x scripts/check_samhain.pl
2833	]
2834	)
2835
2836	chmod +x deploy.sh
2837
2838	if test "x${mysignify}" != x
2839	then
2840	cp -a scripts/samhainadmin-sig.pl scripts/samhainadmin.pl
2841	fi
2842	if test "x${mygpg}" != x
2843	then
2844	cp -a scripts/samhainadmin-gpg.pl scripts/samhainadmin.pl
2845	fi
2846
2847
2848	if test "x${cross_compiling}" = xyes
2849	then
2850
2851	echo "--------------------------------------------------------------"
2852	echo
2853	echo "You are using a cross-compiler. The following system dependent"
2854	echo "values may have been set to default values that may be"
2855	echo "incorrect for your target system: "
2856	echo
2857	echo "ac_cv_c_bigendian bigendian byte order ${ac_cv_c_bigendian}"
2858	echo "ac_cv_c_long_double long double exists ${ac_cv_c_long_double}"
2859	echo "ac_cv_sizeof_char_p size of pointer to char ${ac_cv_sizeof_char_p}"
2860	echo "ac_cv_sizeof_char_p size of size_t ${ac_cv_sizeof_size_t}"
2861	echo "ac_cv_sizeof_unsigned_int size of unsigned int ${ac_cv_sizeof_unsigned_int}"
2862	echo "ac_cv_sizeof_unsigned_long size of unsigned long ${ac_cv_sizeof_unsigned_long}"
2863	echo "ac_cv_sizeof_unsigned_short size of unsigned short ${ac_cv_sizeof_unsigned_short}"
2864	echo
2865	echo "If these values are incorrect, change them in the file "
2866	echo "config.cache and run configure again."
2867	echo
2868	echo "--------------------------------------------------------------"
2869
2870	fi
2871
2872	if test x${silent} != xyes
2873	then
2874
2875	# A=`eval echo ${sbindir}` ; A=`eval echo ${A}`
2876	# B=`eval echo ${myconffile}` ; B=`eval echo ${B}`
2877	# C=`eval echo ${mandir}` ; C=`eval echo ${C}`
2878	# D=`eval echo ${mylockfile}` ; D=`eval echo ${D}`
2879	# E=`eval echo ${mylogfile}` ; E=`eval echo ${E}`
2880	# F=`eval echo ${mydataroot}` ; F=`eval echo ${F}`
2881
2882	echo
2883	echo " samhain has been configured as follows:"
2884	echo " System binaries: ${sbindir}"
2885	echo " Configuration file: ${myconffile}"
2886	echo " Manual pages: ${mandir}"
2887	echo " Data directory: ${mydataroot}"
2888	echo " Database file: ${mydatafile}"
2889	echo " PID file: ${mylockfile}"
2890	echo " Log file: ${mylogfile}"
2891	echo " Base key: ${mykeybase}"
2892	if test x"$mykeyid" != x
2893	then
2894	echo " target GPG/PGP key: ${mykeyid}"
2895	fi
2896	echo
2897	if test x"$mytclient" = x"-DSH_WITH_SERVER"
2898	then
2899	echo " Selected rc file: yulerc"
2900	else
2901	echo " Selected rc file: samhainrc.${selectconfig}"
2902	fi
2903
2904	fi
2905

Note: See TracBrowser for help on using the repository browser.

Download in other formats: