Context Navigation

source: trunk/configure.ac@ 211

Last change on this file since 211 was 210, checked in by katerina, 16 years ago
Fix for ticket #136 (compile error); also enhance testsuite to catch compiler warnings.
File size: 73.9 KB

Line
1	dnl We want to override the standard _AC_INIT_PARSE_ARGS
2	dnl
3	AU_ALIAS([_AC_INIT_PARSE_ARGS], [SH_INIT_PARSE_ARGS])
4	AU_ALIAS([_AC_INIT_help], [SH_INIT_HELP])
5
6	AC_INIT(src/samhain.c)
7
8
9	AC_ARG_VAR([LIBS], [libraries to link against, e.g. -lintl])
10
11	dnl
12	dnl start
13	dnl
14	AM_INIT_AUTOMAKE(samhain, 2.5.2b)
15	AC_DEFINE([SAMHAIN], 1, [Application is samhain])
16	AC_CANONICAL_HOST
17
18	dnl
19	dnl checks for programs
20	dnl
21
22	AC_PROG_CC
23	if test "$host" != "$build"; then
24	AC_CHECK_PROGS(BUILD_CC, gcc cc)
25	else
26	BUILD_CC=$CC
27	fi
28	AC_PROG_CPP
29	AC_PROG_INSTALL
30	AC_PROG_LN_S
31	AC_PROG_AWK
32	SH_PROG_LD
33	AC_PATH_PROG(cmd_hostname,hostname)
34	AC_SUBST(cmd_hostname)
35	AC_SUBST(BUILD_CC)
36
37	AC_HEADER_STDC
38	dnl
39	dnl first one is a dummy because of an autoconf bug
40	dnl (no HAVE_... for first one)
41	dnl
42	AC_CHECK_HEADERS([sys/ipc.h sys/msg.h sys/uio.h fcntl.h])
43
44
45	AC_MSG_CHECKING([for OS specific issues])
46	mydebugflag=no
47	myneedg3=no
48	uid_cast="signed long"
49	selectconfig=linux
50	mynetbsd=no
51	sh_use_lcaps="undef"
52	dnmalloc_ok=yes
53	sh_use_pie=yes
54
55	case "$host_os" in
56
57	linux)
58	sh_use_lcaps="yes"
59	AC_DEFINE(HOST_IS_LINUX)
60	AC_DEFINE(HAVE_EXT2_IOCTLS)
61	AC_MSG_RESULT(use ioctl to get e2fs flags)
62	case "$host_cpu" in
63	i86)
64	AC_DEFINE(HOST_IS_I86LINUX)
65	;;
66	*)
67	;;
68	esac
69	;;
70
71	osf)
72	AC_DEFINE([HOST_IS_OSF], 1, [Define if host OS is OSF])
73	if test "x$GCC" != "xyes"; then
74	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
75	CFLAGS="$CFLAGS -O2 -assume noaligned_objects"
76	myneedg3=yes
77	AC_MSG_RESULT(compiler needs assume noaligned_objects)
78	else
79	AC_MSG_RESULT(none)
80	fi
81	;;
82
83	cygwin)
84	AC_DEFINE(HOST_IS_CYGWIN)
85	dnmalloc_ok=no
86	AC_MSG_RESULT(no trusted paths and no dnmalloc)
87	;;
88
89	darwin)
90	AC_DEFINE(HOST_IS_DARWIN)
91	AC_MSG_RESULT(check resource forks)
92	;;
93
94	freebsd7)
95	AC_DEFINE(HOST_IS_FREEBSD)
96	selectconfig=freebsd
97	case "$host_cpu" in
98	amd64)
99	sh_use_pie=no
100	dnmalloc_ok=no
101	AC_MSG_RESULT([no dnmalloc and broken compiler toolchain])
102	;;
103	*)
104	AC_MSG_RESULT(none)
105	;;
106	esac
107	;;
108
109	freebsd)
110	AC_DEFINE(HOST_IS_FREEBSD)
111	selectconfig=freebsd
112	AC_MSG_RESULT(none)
113	;;
114
115	openbsd)
116	AC_DEFINE([HOST_IS_OPENBSD], 1, [Define if host OS is OPENBSD])
117	selectconfig=freebsd
118	dnmalloc_ok=no
119	AC_MSG_RESULT(dnmalloc does not work with pthreads)
120	;;
121
122	netbsd)
123	mynetbsd=yes
124	selectconfig=netbsd
125	AC_MSG_RESULT(bug with libresolve)
126	;;
127
128	solaris)
129	selectconfig=solaris
130	AC_DEFINE(HOST_IS_SOLARIS)
131	case "$host_cpu" in
132	i*86)
133	AC_DEFINE(HOST_IS_I86SOLARIS)
134	AC_MSG_RESULT(vsnprintf prototype)
135	;;
136	*)
137	AC_MSG_RESULT(none)
138	;;
139	esac
140	if test "x$GCC" != "xyes"; then
141	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
142	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
143	fi
144	if test -z "`echo "$CFLAGS" \| grep "\-xO2" 2> /dev/null`"; then
145	CFLAGS="$CFLAGS -xO2"
146	fi
147	if test -z "`echo "$CFLAGS" \| grep "\-Xa" 2> /dev/null`"; then
148	CFLAGS="$CFLAGS -Xa"
149	fi
150	LIBS="-lc $LIBS"
151	fi
152	;;
153
154
155	sun)
156	selectconfig=solaris
157	AC_DEFINE(HOST_IS_SOLARIS)
158	AC_MSG_RESULT(none)
159	;;
160
161	aix)
162	AC_DEFINE(HOST_IS_AIX)
163	selectconfig=aix5.2.0
164	uid_cast="unsigned long"
165	if test "x$GCC" != "xyes"; then
166	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
167	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
168	fi
169	if test -z "`echo "$CFLAGS" \| grep "\-O3" 2> /dev/null`"; then
170	CFLAGS="$CFLAGS -O3"
171	fi
172	if test -z "`echo "$CFLAGS" \| grep "\-qstrict" 2> /dev/null`"; then
173	CFLAGS="$CFLAGS -qstrict"
174	fi
175	AC_MSG_RESULT(AIX size_t in the accept call and optimize O3 qstrict)
176	else
177	AC_MSG_RESULT(AIX size_t in the accept call)
178	fi
179	;;
180
181	hpux)
182	AC_MSG_RESULT(HPUX need _XOPEN_SOURCE_EXTENDED for h_errno)
183	AC_DEFINE(HOST_IS_HPUX)
184	if test "x$GCC" != "xyes"; then
185	if test ! -z "`echo "$CFLAGS" \| grep "\-g" 2> /dev/null`" ; then
186	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
187	fi
188	if test -z "`echo "$CFLAGS" \| grep "\+O2" 2> /dev/null`"; then
189	CFLAGS="$CFLAGS +O2"
190	fi
191	fi
192	;;
193
194	ultrix)
195	AC_MSG_RESULT(ULTRIX getcwd uses popen)
196	AC_DEFINE(HAVE_BROKEN_GETCWD)
197	;;
198
199	*)
200	AC_MSG_RESULT(none)
201	;;
202	esac
203
204	AC_SUBST(selectconfig)
205	AC_DEFINE_UNQUOTED(UID_CAST, ${uid_cast})
206
207
208
209	dnl *****************************************
210	dnl
211	dnl checks for header files
212	dnl
213	dnl *****************************************
214
215	AC_HEADER_DIRENT
216	AC_HEADER_MAJOR
217	AC_HEADER_TIME
218	dnl used in minilzo.c
219	AC_HEADER_STAT
220	AC_DECL_SYS_SIGLIST
221
222	AC_CHECK_HEADERS(stddef.h libgen.h sched.h malloc.h sys/uio.h \
223	sys/mman.h sys/param.h \
224	sys/vfs.h mntent.h \
225	sys/select.h sys/socket.h netinet/in.h \
226	regex.h glob.h \
227	linux/ext2_fs.h linux/fs.h ext2fs/ext2_fs.h asm/segment.h \
228	elf.h linux/elf.h \
229	paths.h arpa/nameser.h arpa/nameser_compat.h \
230	rpc/rpcent.h sys/statvfs.h,
231	[],
232	[],
233	[#include <sys/types.h>]
234	)
235
236
237	AC_CHECK_HEADER(utmpx.h, sh_utmpx="yes", sh_utmpx="no")
238	if test "x$sh_utmpx" = "xyes"; then
239	if cat "/usr/include/utmpx.h" 2>&5 \|
240	egrep "WTMPX_FILE" >/dev/null 2>&1; then
241	AC_DEFINE(HAVE_UTMPX_H)
242	AC_EGREP_HEADER(ut_host, utmpx.h, AC_DEFINE(HAVE_UTHOST) )
243	AC_EGREP_HEADER(ut_addr, utmpx.h, AC_DEFINE(HAVE_UTADDR) )
244	AC_EGREP_HEADER(ut_xtime,utmpx.h, AC_DEFINE(HAVE_UTXTIME) )
245	AC_EGREP_HEADER(ut_type, utmpx.h, AC_DEFINE(HAVE_UTTYPE) )
246	else
247	AC_EGREP_HEADER(ut_addr, utmp.h, AC_DEFINE(HAVE_UTADDR) )
248	AC_EGREP_HEADER(ut_host, utmp.h, AC_DEFINE(HAVE_UTHOST) )
249	AC_EGREP_HEADER(ut_type, utmp.h, AC_DEFINE(HAVE_UTTYPE) )
250	fi
251	else
252	AC_EGREP_HEADER(ut_host, utmp.h, AC_DEFINE(HAVE_UTHOST) )
253	AC_EGREP_HEADER(ut_type, utmp.h, AC_DEFINE(HAVE_UTTYPE) )
254	fi
255
256	dnl
257	dnl figure out where acct.h lives
258	dnl and whether fields are int/comp_t
259	dnl
260	dnl GNU Accounting Utilities
261	dnl Copyright (C) 1993, 1996, 1997, 2003, 2005 Free Software Foundation, Inc.
262	dnl The GNU Accounting Utilities are free software; you can redistribute
263	dnl them and/or modify them under the terms of the GNU General Public
264	dnl License as published by the Free Software Foundation; either version
265	dnl 2, or (at your option) any later version.
266	dnl
267	AC_CHECK_HEADER(sys/acct.h,
268	AC_DEFINE(HAVE_SYS_ACCT_H, ,
269	[Define if you have the <sys/acct.h> header file.])
270	AC_HEADER_EGREP(ac_utime, sys/acct.h,
271	AC_DEFINE(HAVE_ACUTIME, ,
272	[Define if <sys/acct.h> has the AC_UTIME field.])
273	AC_HEADER_EGREP(comp_t.*ac_utime, sys/acct.h,
274	AC_DEFINE(ACUTIME_COMPT, ,
275	[Define if <sys/acct.h>'s AC_UTIME field is a COMP_T.]))
276	)
277	AC_HEADER_EGREP(ac_stime, sys/acct.h,
278	AC_DEFINE(HAVE_ACSTIME, ,
279	[Define if <sys/acct.h> has the AC_STIME field.])
280	AC_HEADER_EGREP(comp_t.*ac_stime, sys/acct.h,
281	AC_DEFINE(ACSTIME_COMPT, ,
282	[Define if <sys/acct.h>'s AC_STIME field is a COMP_T.]))
283	)
284	AC_HEADER_EGREP(ac_etime, sys/acct.h,
285	AC_DEFINE(HAVE_ACETIME, ,
286	[Define if <sys/acct.h> has the AC_ETIME field.])
287	AC_HEADER_EGREP(comp_t.*ac_etime, sys/acct.h,
288	AC_DEFINE(ACETIME_COMPT, ,
289	[Define if <sys/acct.h>'s AC_ETIME field is a COMP_T.]))
290	)
291	AC_HEADER_EGREP(ac_io, sys/acct.h,
292	AC_DEFINE(HAVE_ACIO, ,
293	[Define if <sys/acct.h> has the AC_IO field.])
294	AC_HEADER_EGREP(comp_t.*ac_io, sys/acct.h,
295	AC_DEFINE(ACIO_COMPT, ,
296	[Define if <sys/acct.h>'s AC_IO field is a COMP_T.]))
297	)
298	AC_HEADER_EGREP(ac_mem, sys/acct.h,
299	AC_DEFINE(HAVE_ACMEM, ,
300	[Define if <sys/acct.h> has the AC_MEM field.])
301	AC_HEADER_EGREP(comp_t.*ac_mem, sys/acct.h,
302	AC_DEFINE(ACMEM_COMPT, ,
303	[Define if <sys/acct.h>'s AC_MEM field is a COMP_T.]))
304	)
305	AC_HEADER_EGREP(ac_minflt, sys/acct.h,
306	AC_HEADER_EGREP(ac_majflt, sys/acct.h,
307	AC_HEADER_EGREP(ac_swaps, sys/acct.h,
308	AC_DEFINE(HAVE_PAGING, ,
309	[Define if <sys/acct.h> has the AC_MINFLT, AC_MAJFLT and AC_SWAPS fields.])
310	AC_HEADER_EGREP(comp_t.*ac_minflt, sys/acct.h,
311	AC_DEFINE(ACMINFLT_COMPT, ,
312	[Define if <sys/acct.h>'s AC_MINFLT field is a COMP_T.]))
313	AC_HEADER_EGREP(comp_t.*ac_mayflt, sys/acct.h,
314	AC_DEFINE(ACMAJFLT_COMPT, ,
315	[Define if <sys/acct.h>'s AC_MAJFLT field is a COMP_T.]))
316	AC_HEADER_EGREP(comp_t.*ac_swaps, sys/acct.h,
317	AC_DEFINE(ACSWAPS_COMPT, ,
318	[Define if <sys/acct.h>'s AC_SWAPS field is a COMP_T.]))
319	)
320	)
321	)
322	AC_HEADER_EGREP(comp_t, sys/acct.h, AC_DEFINE(HAVE_COMP_T, ,
323	[Define if <sys/acct.h> uses the COMP_T type.]))
324	AC_HEADER_EGREP([struct acct_v3], sys/acct.h, AC_DEFINE(HAVE_ACCT_V3, ,
325	[Define if <sys/acct.h> has struct acct_v3.]))
326	)
327
328
329	dnl need to check because AIX 4.2 does not have it
330	dnl
331	AC_CHECK_MEMBERS([struct statfs.f_flags],[],[],[
332	#ifdef HAVE_SYS_TYPES_H
333	#include <sys/types.h>
334	#endif
335	#ifdef HAVE_SYS_STAT_H
336	#include <sys/stat.h>
337	#endif
338	#ifdef HAVE_SYS_VFS_H
339	#include <sys/vfs.h>
340	#endif
341	#ifdef HAVE_UNISTD_H
342	#include <unistd.h>
343	#endif
344	])
345
346	AC_SYS_LARGEFILE
347
348	dnl
349	dnl check whether _POSIX_SOURCE is required
350	dnl
351	SAMHAIN_POSIX
352
353
354	dnl *****************************************
355	dnl
356	dnl Checks for library functions.
357	dnl
358	dnl *****************************************
359	AC_FUNC_STRFTIME
360	AC_CHECK_FUNCS(memcmp memcpy memmove memset getpwent endpwent \
361	gettimeofday strlcat strlcpy strstr strchr strerror strsignal \
362	seteuid setreuid setresuid lstat getwd getcwd ptrace \
363	usleep setpriority getpeereid nanosleep \
364	strptime basename sched_yield hasmntopt \
365	inet_aton gethostbyname setutent setrlimit gethostname uname \
366	initgroups getpagesize \
367	ttyname fchmod writev mmap tzset \
368	getsid getpriority getpgid statvfs \
369	strerror_r getgrgid_r getpwnam_r getpwuid_r \
370	gmtime_r localtime_r rand_r readdir_r strtok_r \
371	mincore posix_fadvise
372	)
373	AC_CHECK_FUNC(statfs, AC_DEFINE(HAVE_STATFS) statfs="yes", statfs="no")
374	SL_CHECK_VA_COPY
375	AC_CHECK_FUNCS(vsnprintf, [SL_CHECK_VSNPRINTF])
376	AC_CHECK_MLOCK
377
378	AC_MSG_CHECKING(how to get filesystem type)
379	fstype=no
380	# The order of these tests is important.
381	AC_TRY_CPP([#include <sys/statvfs.h>
382	#include <sys/fstyp.h>], AC_DEFINE(FSTYPE_STATVFS) fstype=SVR4)
383	if test $fstype = no; then
384	AC_TRY_CPP([#include <sys/statfs.h>
385	#include <sys/fstyp.h>], AC_DEFINE(FSTYPE_USG_STATFS) fstype=SVR3)
386	fi
387	if test $fstype = no; then
388	AC_TRY_CPP([#include <sys/statfs.h>
389	#include <sys/vmount.h>], AC_DEFINE(FSTYPE_AIX_STATFS) fstype=AIX)
390	fi
391	if test $fstype = no; then
392	AC_TRY_CPP([#include <mntent.h>], AC_DEFINE(FSTYPE_MNTENT) fstype=4.3BSD)
393	fi
394	if test $fstype = no; then
395	AC_EGREP_HEADER(f_type;, sys/mount.h, AC_DEFINE(FSTYPE_STATFS) fstype=4.4BSD/OSF)
396	fi
397	if test $fstype = no; then
398	AC_TRY_CPP([#include <sys/mount.h>
399	#include <sys/fs_types.h>], AC_DEFINE(FSTYPE_GETMNT) fstype=Ultrix)
400	fi
401	AC_MSG_RESULT($fstype)
402
403	sh_libsocket=
404
405	dnl Solaris needs -lsocket and -lnsl. Unisys system includes
406	dnl gethostbyname in libsocket but needs libnsl for socket.
407	AC_CHECK_LIB(nsl, gethostbyname)
408	AC_CHECK_LIB(socket, socket, ac_need_libsocket=1, ac_try_nsl=1)
409	if test x$ac_need_libsocket = x1; then
410	LIBS="$LIBS -lsocket"
411	sh_libsocket="-lsocket"
412	fi
413	if test x$ac_try_nsl = x1; then
414	AC_CHECK_LIB(nsl, gethostbyname, ac_need_libnsl=1)
415	if test x$ac_need_libnsl = x1
416	then
417	LIBS="$LIBS -lnsl"
418	fi
419	fi
420	AC_SUBST(sh_libsocket)
421
422	AC_CHECK_LIB(socket, res_search, [
423	AC_CHECK_LIB(resolv, dn_skipname)
424	AC_CHECK_LIB(resolv, __dn_skipname)
425	if test x$ac_need_libsocket = x1; then
426	:
427	else
428	LIBS="$LIBS -lsocket"
429	fi
430	], [
431	AC_CHECK_LIB(resolv, res_search, [
432	LIBS="$LIBS -lresolv"
433	], [
434	AC_CHECK_LIB(resolv, dn_skipname)
435	AC_CHECK_LIB(resolv, __dn_skipname)
436	])
437	])
438
439	dnl arguments for accept
440
441	dnl check for Unix98 socklen_t (found on
442	dnl xemacs-patches mailing list, written
443	dnl by Martin Buchholz)
444	dnl
445	dnl On Darwin(MacOSX) socklen_t needs to be
446	dnl an int (see accept man page), on all other
447	dnl unix systems we need a size_t.
448
449	AC_MSG_CHECKING(for socklen_t)
450	AC_TRY_COMPILE([
451	#ifdef HAVE_SYS_TYPES_H
452	#include <sys/types.h>
453	#endif
454	#ifdef HAVE_SYS_SOCKET_H
455	#include <sys/socket.h>
456	#endif
457	socklen_t x;
458	], [],[
459	AC_MSG_RESULT(yes)
460	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[socklen_t], [type of arg3 of accept])
461	AC_DEFINE([HAVE_SOCKLEN_T], 1, [Define if you have socklen_t])
462	],[
463	AC_TRY_COMPILE([
464	#ifdef HAVE_SYS_TYPES_H
465	#include <sys/types.h>
466	#endif
467	#ifdef HAVE_SYS_SOCKET_H
468	#include <sys/socket.h>
469	#endif
470	int accept (int, struct sockaddr , size_t );
471	],[],[
472	AC_MSG_RESULT(size_t)
473	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[size_t], [type of arg3 of accept])
474	], [
475	AC_MSG_RESULT(int)
476	AC_DEFINE_UNQUOTED([ACCEPT_TYPE_ARG3],[int], [type of arg3 of accept])
477	]
478	)
479	])
480
481	dnl *****************************************
482	dnl checks for extended attribute or ACL
483	dnl support
484	dnl *****************************************
485
486	sh_CHECK_XATTR
487	sh_CHECK_POSIX_ACL
488
489	dnl *****************************************
490	dnl checks for typedefs
491	dnl *****************************************
492
493	AC_C_LONG_DOUBLE
494	SH_CHECK_TYPEDEF(long long, HAVE_LONG_LONG)
495	SH_CHECK_TYPEDEF(uint64_t, HAVE_UINT64_T)
496	if test "$sh_HAVE_LONG_LONG" = "yes"; then
497	AC_CHECK_SIZEOF(unsigned long long, 4)
498	sh_sizeof_unsigned_long_long=`echo "$ac_cv_sizeof_unsigned_long_long" \| sed 's%[^0-9]%%g'`
499	if test "$sh_sizeof_unsigned_long_long" = "8"; then
500	AC_DEFINE(HAVE_LONG_LONG_64, 1, [Define if you have 64bit long long])
501	fi
502	fi
503
504	AC_CHECK_TYPE(ptrdiff_t, long)
505	AC_TYPE_SIZE_T
506	AC_CHECK_SIZEOF(char *, 4)
507	AC_CHECK_SIZEOF(size_t, 4)
508
509	AC_CHECK_SIZEOF(unsigned long, 4)
510	AC_CHECK_SIZEOF(unsigned int, 4)
511	AC_CHECK_SIZEOF(unsigned short, 2)
512
513
514	sh_sizeof_unsigned_long=`echo "$ac_cv_sizeof_unsigned_long" \| sed 's%[^0-9]%%g'`
515	if test "$sh_sizeof_unsigned_long" = "4"; then
516	AC_DEFINE(HAVE_LONG_32)
517	fi
518	if test "$sh_sizeof_unsigned_long" = "8"; then
519	AC_DEFINE(HAVE_LONG_64)
520	fi
521	sh_sizeof_unsigned_int=`echo "$ac_cv_sizeof_unsigned_int" \| sed 's%[^0-9]%%g'`
522	if test "$sh_sizeof_unsigned_int" = "4"; then
523	AC_DEFINE(HAVE_INT_32)
524	fi
525	sh_sizeof_unsigned_short=`echo "$ac_cv_sizeof_unsigned_short" \| sed 's%[^0-9]%%g'`
526	if test "$sh_sizeof_unsigned_short" = "4"; then
527	AC_DEFINE(HAVE_SHORT_32)
528	fi
529
530	dnl
531	dnl check for 64 bit programming environment
532	dnl
533	SAMHAIN_64
534
535
536	dnl *****************************************
537	dnl checks for structures
538	dnl *****************************************
539
540	AC_STRUCT_TM
541
542	dnl
543	dnl from e2fsprogs
544	dnl
545	AC_MSG_CHECKING(whether struct stat has a st_flags field)
546	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags,
547	AC_TRY_COMPILE([#include <sys/stat.h>],
548	[struct stat stat; stat.st_flags = 0;],
549	[e2fsprogs_cv_struct_st_flags=yes],
550	[e2fsprogs_cv_struct_st_flags=no]))
551	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags)
552	if test "$e2fsprogs_cv_struct_st_flags" = yes; then
553	AC_MSG_CHECKING(whether st_flags field is useful)
554	AC_CACHE_VAL(e2fsprogs_cv_struct_st_flags_immut,
555	AC_TRY_COMPILE([#include <sys/stat.h>],
556	[struct stat stat; stat.st_flags \|= UF_IMMUTABLE;],
557	[e2fsprogs_cv_struct_st_flags_immut=yes],
558	[e2fsprogs_cv_struct_st_flags_immut=no]))
559	AC_MSG_RESULT($e2fsprogs_cv_struct_st_flags_immut)
560	if test "$e2fsprogs_cv_struct_st_flags_immut" = yes; then
561	AC_DEFINE(HAVE_STAT_FLAGS)
562	fi
563	fi
564
565	dnl
566	dnl from dbus
567	dnl
568	AC_MSG_CHECKING(for struct cmsgcred)
569	AC_TRY_COMPILE([
570	#include <sys/types.h>
571	#include <sys/socket.h>
572	],[
573	struct cmsgcred cred;
574
575	cred.cmcred_pid = 0;
576	],sh_have_struct_cmsgcred=yes,sh_have_struct_cmsgcred=no)
577	AC_MSG_RESULT($sh_have_struct_cmsgcred)
578
579	if test x$sh_have_struct_cmsgcred = xyes; then
580	AC_DEFINE(HAVE_STRUCT_CMSGCRED,1,[Have cmsgcred structure])
581	fi
582
583	AC_MSG_CHECKING(for struct fcred)
584	AC_TRY_COMPILE([
585	#include <sys/param.h>
586	#include <sys/socket.h>
587	#include <sys/ucred.h>
588	],[
589	struct fcred sockcred;
590	],sh_have_struct_fcred=yes,sh_have_struct_fcred=no)
591	AC_MSG_RESULT($sh_have_struct_fcred)
592
593	if test x$sh_have_struct_fcred = xyes; then
594	AC_DEFINE(HAVE_STRUCT_FCRED,1,[Have fcred structure])
595	fi
596
597	AC_MSG_CHECKING(for struct sockcred)
598	AC_TRY_COMPILE([
599	#include <sys/param.h>
600	#include <sys/socket.h>
601	#include <sys/ucred.h>
602	],[
603	struct sockcred sockcred;
604	],sh_have_struct_sockcred=yes,sh_have_struct_sockcred=no)
605	AC_MSG_RESULT($sh_have_struct_sockcred)
606
607	if test x$sh_have_struct_sockcred = xyes; then
608	AC_DEFINE(HAVE_STRUCT_SOCKCRED,1,[Have sockcred structure])
609	fi
610
611	AC_MSG_CHECKING(for SO_PEERCRED)
612	AC_TRY_COMPILE([
613	#include <sys/types.h>
614	#include <sys/socket.h>
615	],[
616	int test = SO_PEERCRED;
617	],sh_have_SO_PEERCRED=yes,sh_have_SO_PEERCRED=no)
618	AC_MSG_RESULT($sh_have_SO_PEERCRED)
619
620	if test x$sh_have_SO_PEERCRED = xyes; then
621	AC_DEFINE(HAVE_SO_PEERCRED,1,[Have SO_PEERCRED define])
622	fi
623
624
625	dnl *****************************************
626	dnl checks for compiler characteristics
627	dnl *****************************************
628	AC_C_INLINE
629	AC_C_CONST
630	AC_C_BIGENDIAN
631	AC_C_RESTRICT
632
633	AM_SA_SIGACTION_WORKS
634
635	if test "x$GCC" = "xyes"; then
636	GCC_STACK_PROTECT_LIB
637	GCC_STACK_PROTECT_CC
638	GCC_PIE_CC
639	fi
640
641	dnl *****************************************
642	dnl
643	dnl checks for system services
644	dnl
645	dnl *****************************************
646
647	dnl
648	dnl check for /proc filesystem
649	dnl
650	if test -d "/proc/$$"
651	then
652	AC_DEFINE([HAVE_PROCFS],[1],[Define if you have a proc fs])
653	fi
654
655	dnl
656	dnl check for GNU gmp
657	dnl
658	AC_CHECK_LIB(gmp, __gmpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
659	if test "x${sh_have_gmp}" = xno
660	then
661	AC_CHECK_LIB(gmp, mpz_init, [sh_have_gmp=yes], [sh_have_gmp=no])
662	fi
663	if test "x${sh_have_gmp}" = xyes
664	then
665	# LIBS="-lgmp $LIBS"
666	AC_DEFINE(HAVE_LIBGMP, 1, [Have GNU gmp library])
667	fi
668	AC_CHECK_HEADERS(gmp.h)
669
670	AC_MSG_CHECKING([for ps])
671	PS=
672	for ff in /usr/ucb /bin /usr/bin; do
673	if test -x "$ff/ps"; then
674	PS="$ff/ps"
675	AC_MSG_RESULT([$PS])
676	break
677	fi
678	done
679	if test x$PS = x
680	then
681	AC_MSG_RESULT([no])
682	AC_MSG_ERROR([Cannot find ps in any of /usr/ucb /bin /usr/bin])
683	fi
684	AC_DEFINE_UNQUOTED([PSPATH], _("$PS"), [Path to ps])
685
686	AC_MSG_CHECKING([how to use ps])
687	$PS ax >/dev/null 2>&1
688	if test $? -eq 0; then
689	case "$host_os" in
690	openbsd)
691	one=`$PS akx \| wc -l`
692	;;
693	*)
694	one=`$PS ax \| wc -l`
695	;;
696	esac
697	else
698	one=0
699	fi
700	$PS -e >/dev/null 2>&1
701	if test $? -eq 0; then
702	two=`$PS -e \| wc -l`
703	else
704	two=0
705	fi
706	if test $one -ge $two
707	then
708	case "$host_os" in
709	openbsd)
710	PSARG="akx"
711	;;
712	*)
713	PSARG="ax"
714	;;
715	esac
716	else
717	PSARG="-e"
718	fi
719	AC_DEFINE_UNQUOTED([PSARG], _("$PSARG"), [Argument for ps])
720	AC_MSG_RESULT([$PS $PSARG])
721
722	dnl *****************************************
723	dnl
724	dnl enable features
725	dnl
726	dnl *****************************************
727
728	AC_ARG_ENABLE(db-reload,
729	[ --enable-db-reload enable database reload on SIGHUP [[no]]],
730	[
731	if test "x${enable_db_reload}" = xyes; then
732	AC_DEFINE(RELOAD_DATABASE)
733	fi
734	]
735	)
736
737	AC_ARG_ENABLE(xml-log,
738	[ --enable-xml-log enable XML logfile format [[no]]],
739	[
740	if test "x${enable_xml_log}" = xyes; then
741	AC_DEFINE(SH_USE_XML)
742	fi
743	]
744	)
745
746
747	AC_ARG_ENABLE(mail,
748	[ --disable-mail disable the internal SMTP mailer],
749	[
750	if test "x${enable_mail}" = xno; then
751	:
752	else
753	AC_DEFINE(SH_WITH_MAIL)
754	fi
755	],
756	[AC_DEFINE(SH_WITH_MAIL)]
757	)
758
759	AC_ARG_ENABLE(external-scripts,
760	[ --disable-external-scripts disable interface to external scripts],
761	[
762	if test "x${enableval}" = xno; then
763	:
764	else
765	AC_DEFINE(WITH_EXTERNAL)
766	fi
767	],
768	[AC_DEFINE(WITH_EXTERNAL)]
769	)
770
771	AC_ARG_ENABLE(message-queue,
772	[ --enable-message-queue[[=MODE]] enable SysV message queue [[MODE=0700]]],
773	[
774	if test "x${ac_cv_header_sys_msg_h}" = "xyes"; then
775	if test "x${enable_message_queue}" = xyes; then
776	AC_DEFINE(WITH_MESSAGE_QUEUE)
777	AC_DEFINE_UNQUOTED(MESSAGE_QUEUE_MODE, 0700)
778	elif test "x${enable_message_queue}" != xno; then
779	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
780	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be numeric])
781	echo "${enableval}" \| \
782	grep ['0[0123456789][0123456789][0123456789]'] >/dev/null 2>&1 \|\|
783	AC_MSG_ERROR([With --enable-message-queue=MODE, MODE must be an octal (0nnn) number])
784	AC_DEFINE(WITH_MESSAGE_QUEUE)
785	AC_DEFINE_UNQUOTED(MESSAGE_QUEUE_MODE, ${enable_message_queue})
786	fi
787	else
788	echo
789	echo "**********************************************"
790	echo
791	AC_MSG_WARN([sys/msg.h missing, --enable-message-queue disabled])
792	echo
793	echo "**********************************************"
794	echo
795	fi
796	]
797	)
798
799	AC_ARG_WITH(cflags,
800	[ --with-cflags additional flags to pass to compiler],
801	[
802	if test "x$withval" != "xno" ; then
803	CFLAGS="$CFLAGS $withval"
804	fi
805	]
806	)
807	AC_ARG_WITH(libs,
808	[ --with-libs additional libraries to link with],
809	[
810	if test "x$withval" != "xno" ; then
811	LIBS="$LIBS $withval"
812	fi
813	]
814	)
815
816
817	#
818	# this is from ssh
819	#
820	AC_MSG_CHECKING(whether to use libwrap)
821	LIBWRAP_LIB=""
822	LIBWRAP_INC=""
823	AC_ARG_WITH(libwrap,
824	[ --with-libwrap[=PATH] Compile in libwrap (TCP Wrappers) support],
825	[ AC_MSG_RESULT($withval)
826	case "$withval" in
827	no)
828	;;
829	""\|yes)
830	LIBWRAP_LIB="-lwrap"
831	;;
832	*)
833	if test -d "$withval"; then
834	LIBWRAP_LIB="-L$withval -lwrap"
835	changequote(<<, >>)dnl
836	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
837	LIBWRAP_INC="-I${sh_libwrap_inc}/include"
838	changequote([, ])dnl
839	else
840	LIBWRAP_LIB="-lwrap"
841	changequote(<<, >>)dnl
842	sh_libwrap_inc=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
843	LIBWRAP_INC="-I${sh_libwrap_inc}"
844	changequote([, ])dnl
845	fi
846	;;
847	esac
848	if test -n "$LIBWRAP_LIB"; then
849	# OLDLIBS="$LIBS"
850	LIBS="$LIBWRAP_LIB $LIBS"
851	# OLDCFLAGS="$CFLAGS"
852	CFLAGS="$CFLAGS $LIBWRAP_INC"
853	AC_CHECK_HEADER(tcpd.h,
854	[],
855	[ AC_MSG_ERROR([Could not find tcpd.h for libwrap. You need to install tcp_wrappers.]) ])
856	AC_TRY_LINK([ #include <tcpd.h>
857	int allow_severity; int deny_severity; ],
858	[ hosts_access((struct request_info *) 0); ],
859	[ AC_DEFINE(SH_USE_LIBWRAP,1,[Build with tcp wrapper support]) ],
860	[ AC_MSG_ERROR([Could not find the libwrap library.]) ])
861	fi ],
862	AC_MSG_RESULT(no)
863	)
864
865
866	dnl
867	dnl NETWORK OPTIONS
868	dnl
869	AC_ARG_ENABLE(network,
870	[ --enable-network=[[client\|server]] compile client or server [[no]]],
871	[
872	if test "x$enable_network" = xclient; then
873	mytclient="-DSH_WITH_CLIENT"
874	yulectl_prg=
875	setpwd_prg="samhain_setpwd"
876	sh_main_prg="samhain"
877	if test "x${sh_have_gmp}" = xyes
878	then
879	LIBS="-lgmp $LIBS"
880	fi
881	dnl AC_CHECK_HEADER(sys/capability.h,
882	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
883	dnl [sh_use_lcaps="no"])
884	elif test "x$enable_network" = xserver; then
885	mytclient="-DSH_WITH_SERVER"
886	yulectl_prg="yulectl"
887	setpwd_prg="samhain_setpwd"
888	sh_main_prg="yule"
889	if test "x${sh_have_gmp}" = xyes
890	then
891	LIBS="-lgmp $LIBS"
892	fi
893	sh_use_lcaps="undef"
894	elif test "x$enable_network" = xno; then
895	mytclient="-DSH_STANDALONE"
896	yulectl_prg=
897	setpwd_prg=
898	sh_main_prg="samhain"
899	dnl AC_CHECK_HEADER(sys/capability.h,
900	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
901	dnl [sh_use_lcaps="no"])
902	else
903	AC_MSG_ERROR([With --enable-network=WHAT, WHAT must be client, server, or no])
904	fi
905	],
906	[
907	mytclient="-DSH_STANDALONE"
908	setpwd_prg=
909	yulectl_prg=
910	sh_main_prg="samhain"
911	dnl AC_CHECK_HEADER(sys/capability.h,
912	dnl [AC_CHECK_LIB(cap, cap_get_proc,,sh_use_lcaps="no")],
913	dnl [sh_use_lcaps="no"])
914	],
915	)
916
917	AC_SUBST(setpwd_prg)
918	AC_SUBST(yulectl_prg)
919	AC_SUBST(sh_main_prg)
920	AC_SUBST(mytclient)
921
922	# needed for the rpm spec
923	clmytclient=`echo ${mytclient} \| sed s%\-%%`
924	AC_SUBST(clmytclient)
925
926	sh_no_gcc_static=no
927
928	AC_ARG_ENABLE(static,
929	[ --enable-static enable static linking [[no]]],
930	[
931	if test x$enable_static = xyes; then
932	if test x"$mynetbsd" = xyes
933	then
934	tmp_LIBS=`echo $LIBS \| sed 's%\-lresolv%%' `
935	LIBS="${tmp_LIBS}"
936	fi
937	AC_DEFINE(SH_COMPILE_STATIC, 1, [Define if compiling static])
938	if test "x$GCC" = "xyes"; then
939	sh_no_gcc_static=no
940	LDFLAGS="$LDFLAGS -static"
941	else
942	sh_no_gcc_static=yes
943	case "$host_os" in
944
945	aix)
946	LDFLAGS="$LDFLAGS -bnso -bI:/lib/syscalls.exp"
947	;;
948
949	hpux)
950	LDFLAGS="$LDFLAGS -Wl,-a,archive"
951	;;
952
953	osf)
954	LDFLAGS="$LDFLAGS -non_shared"
955	;;
956
957	irix)
958	LDFLAGS="$LDFLAGS -non_shared"
959	;;
960
961	sco)
962	LDFLAGS="$LDFLAGS -dn"
963	;;
964
965	sun)
966	LDFLAGS="$LDFLAGS -Bstatic"
967	;;
968
969	solaris)
970	LDFLAGS="$LDFLAGS -Bstatic"
971	;;
972
973	*)
974	echo "***********************************************"
975	echo "*"
976	echo "* Don't know how to enable static linking"
977	echo "* with your compiler. Please set the environment"
978	echo "* variable LDFLAGS to:"
979	echo "* ${LDFLAGS} + the static linking flag"
980	echo "* and run configure again"
981	echo "*"
982	echo "***********************************************"
983	;;
984
985	esac
986	fi
987	fi
988	]
989	)
990
991	if test x"${mytclient}" = x-DSH_STANDALONE -o x"${mytclient}" = x-DSH_WITH_CLIENT;
992	then
993	dnl For threaded modules
994	ACX_PTHREAD
995	CFLAGS="$CFLAGS $PTHREAD_CFLAGS"
996	LIBS="$PTHREAD_LIBS $LIBS"
997	LDFLAGS="$PTHREAD_CFLAGS $LDFLAGS"
998	CC="$PTHREAD_CC"
999	dnl For MODI_TXT
1000	CHECK_ZLIB()
1001	fi
1002
1003	if test x$enable_static = xyes; then
1004	:
1005	else
1006	if test x$sh_use_pie = xyes; then
1007	LDFLAGS="$LDFLAGS $PIE_LDFLAGS"
1008	CFLAGS="$CFLAGS $PIE_CFLAGS"
1009	fi
1010	fi
1011
1012
1013	#
1014	# this is from the snort configure.in
1015	#
1016	AC_DEFUN(FAIL_MESSAGE,[
1017	echo
1018	echo
1019	echo "**********************************************"
1020	echo " ERROR: unable to find" $1
1021	echo " checked in the following places"
1022	for i in `echo $2`; do
1023	echo " $i"
1024	done
1025	echo "**********************************************"
1026	echo
1027	exit
1028	])
1029
1030	AC_ARG_WITH(libprelude-prefix,
1031	[ --with-libprelude-prefix=PFX Prefix where libprelude is installed (optional)],
1032	libprelude_config_prefix="$withval", libprelude_config_prefix="")
1033
1034	AC_MSG_CHECKING(whether to use prelude)
1035	AC_ARG_WITH(prelude,
1036	[ --with-prelude Prelude IDS support [[no]]],
1037	[
1038	if test "x${withval}" = "xno"; then
1039	AC_MSG_RESULT(no)
1040	else
1041	AC_MSG_RESULT(yes)
1042	if test x$libprelude_config_prefix != x ; then
1043	if test x${LIBPRELUDE_CONFIG+set} != xset ; then
1044	LIBPRELUDE_CONFIG=$libprelude_config_prefix/bin/libprelude-config
1045	fi
1046	fi
1047
1048	AC_PATH_PROG(LIBPRELUDE_CONFIG, libprelude-config, no)
1049	if test x"$LIBPRELUDE_CONFIG" = "xno" ; then
1050	HAVE_PRELUDE_CONFIG=no
1051	else
1052	HAVE_PRELUDE_CONFIG=yes
1053	fi
1054	dnl AC_CHECK_PROG(HAVE_PRELUDE_CONFIG, libprelude-config, yes, no)
1055	if test "$HAVE_PRELUDE_CONFIG" = "yes"; then
1056	sh_libprelude_version=`$LIBPRELUDE_CONFIG --version`
1057	case "$sh_libprelude_version" in
1058	0.8*)
1059	AC_MSG_ERROR([You have Libprelude 0.8, which is too old. Version 0.9.6 or higher is required.])
1060	;;
1061	*)
1062	AM_PATH_LIBPRELUDE([0.9.6],
1063	[
1064	AC_DEFINE(HAVE_LIBPRELUDE,1,[Have libprelude])
1065	CFLAGS="$CFLAGS $LIBPRELUDE_PTHREAD_CFLAGS"
1066	LDFLAGS="$LDFLAGS $LIBPRELUDE_LDFLAGS"
1067	LIBS="$LIBS $LIBPRELUDE_LIBS"
1068	],
1069	[
1070	AC_MSG_ERROR([Could not find libprelude (if you are using --enable-static, the static library libprelude.a might be missing).])
1071	])
1072	;;
1073	esac
1074	else
1075	AC_MSG_ERROR([Could not find libprelude-config.])
1076	fi
1077	fi
1078	],
1079	[
1080	AC_MSG_RESULT(no)
1081	]
1082	)
1083
1084	#
1085	# partly based on the snort configure.in
1086	#
1087	AC_ARG_WITH(database,
1088	[ --with-database=[[mysql\|postgresql\|oracle\|odbc]] database support [[no]]],
1089	[
1090	if test x"$enable_xml_log" != xyes; then
1091	AC_MSG_ERROR([With --with-database, --enable-xml-log is required as well.])
1092	fi
1093	if test "x${withval}" = "xmysql"; then
1094	if test "x$zlib_found" = "x"
1095	then
1096	CHECK_ZLIB()
1097	fi
1098	AC_CHECK_PROG(HAVE_MYSQL_CONFIG, mysql_config, yes, no)
1099	if test "$HAVE_MYSQL_CONFIG" = "yes"; then
1100	sh_mysql_libs="`mysql_config --libs`"
1101	sh_mysql_libs="`eval echo ${sh_mysql_libs}`"
1102	LIBS="$LIBS ${sh_mysql_libs}"
1103	sh_mysql_cflags="`mysql_config --cflags`"
1104	sh_mysql_cflags="`eval echo ${sh_mysql_cflags}`"
1105	CPPFLAGS="$CPPFLAGS ${sh_mysql_cflags}"
1106	else
1107	AC_MSG_CHECKING([for MySQL in /usr /usr/local /usr/local/mysql MYSQL_HOME])
1108	mysql_directory="/usr /usr/local /usr/local/mysql ${MYSQL_HOME}"
1109
1110	for i in $mysql_directory; do
1111	if test -r $i/include/mysql/mysql.h; then
1112	MYSQL_DIR=$i
1113	MYSQL_INC_DIR=$i/include
1114	# we use AC_CHECK_HEADERS to check for mysql/mysql.h
1115	fi
1116	done
1117	if test -z "$MYSQL_DIR"; then
1118	for i in $mysql_directory; do
1119	if test -r $i/include/mysql.h; then
1120	MYSQL_DIR=$i
1121	MYSQL_INC_DIR=$i/include
1122	fi
1123	done
1124	fi
1125
1126	if test -z "$MYSQL_DIR"; then
1127	tmp=""
1128	for i in $mysql_directory; do
1129	tmp="$tmp $i/include $i/include/mysql"
1130	done
1131	FAIL_MESSAGE("mysql headers (mysql.h)", $tmp)
1132	fi
1133
1134	for i in lib lib/mysql; do
1135	str="$MYSQL_DIR/$i/libmysqlclient.*"
1136	for j in `echo $str`; do
1137	if test -r $j; then
1138	MYSQL_LIB_DIR="$MYSQL_DIR/$i"
1139	break 2
1140	fi
1141	done
1142	done
1143
1144	if test -z "$MYSQL_LIB_DIR"; then
1145	for ff in $mysql_directory; do
1146	for i in lib lib/mysql; do
1147	str="$ff/$i/libmysqlclient.*"
1148	for j in `echo $str`; do
1149	if test -r $j; then
1150	MYSQL_LIB_DIR="$ff/$i"
1151	break 3
1152	fi
1153	done
1154	done
1155	done
1156	fi
1157
1158	if test -z "$MYSQL_LIB_DIR"; then
1159	tmp=""
1160	for i in $mysql_directory; do
1161	tmp="$i/lib $i/lib/mysql"
1162	done
1163	FAIL_MESSAGE("mysql library libmysqlclient", $tmp)
1164	fi
1165
1166	AC_MSG_RESULT(yes)
1167	LIBS="$LIBS -L${MYSQL_LIB_DIR} -lmysqlclient"
1168	# CFLAGS="$CFLAGS -I${MYSQL_INC_DIR}"
1169	CPPFLAGS="$CPPFLAGS -I${MYSQL_INC_DIR}"
1170	fi
1171	AC_DEFINE(WITH_MYSQL)
1172	AC_DEFINE(WITH_DATABASE)
1173	if test "x$zlib_found" = "xyes"
1174	then
1175	LIBS="$LIBS -lz -lm"
1176	else
1177	echo
1178
1179	echo " Mysql library was not found or not useable."
1180	echo " Possible reasons include:"
1181	echo " - an old, incompatible version compiled from source"
1182	echo " - on Solaris, libmysql is compiled with the Solaris"
1183	echo " compiler, thus the mysql_config script provides"
1184	echo " compiler options unsuitable for gcc (move"
1185	echo " mysql_config out of your PATH)"
1186	echo " For other problems, check config.log for the error"
1187	echo " message from the compiler."
1188	echo
1189	echo " If your mysql libraries are installed in an"
1190	echo " unusual place, use --with-libs=-L/path/to/libdirectory"
1191	echo " where libdirectory is the directory holding libmysql."
1192	if test x"$enable_static" = xyes; then
1193	echo " Note that for compiling a static binary, you need"
1194	echo " the static libraries, rather than the shared ones."
1195	fi
1196	echo
1197	AC_MSG_ERROR([Could not find libmysql, or it is not useable.])
1198	fi
1199	AC_CHECK_HEADERS(mysql/mysql.h)
1200	elif test "x${withval}" = "xpostgresql"; then
1201	AC_DEFINE(WITH_POSTGRES)
1202	AC_DEFINE(WITH_DATABASE)
1203	#
1204	PGCONF="no"
1205	MY_PATH="${PATH}:/usr/local/bin:/usr/local/pgsql/bin"
1206	OLD_IFS="$IFS"
1207	IFS=":"
1208	for ff in ${MY_PATH}
1209	do
1210	if test -f "$ff/pg_config"
1211	then
1212	PGCONF="$ff/pg_config"
1213	fi
1214	done
1215	IFS="${OLD_IFS}"
1216	#
1217	#
1218	if test "x${PGCONF}" = "xno"
1219	then
1220	AC_MSG_CHECKING(for PostgreSQL in /usr/local/pgsql /usr/pgsql /usr/local /usr PGSQL_HOME)
1221	pgsql_directory="/usr/local/pgsql /usr/pgsql /usr/local /usr ${PGSQL_HOME}"
1222	for i in $pgsql_directory; do
1223	if test -r $i/include/pgsql/libpq-fe.h; then
1224	PGSQL_INC_DIR=$i/include
1225	PGSQL_DIR=$i
1226	# use AC_CHECK_HEADERS to check for pgsql/libpq-fe.h
1227	fi
1228	done
1229	if test -z "$PGSQL_DIR"; then
1230	for i in $pgsql_directory; do
1231	if test -r $i/include/postgresql/libpq-fe.h; then
1232	PGSQL_INC_DIR=$i/include
1233	PGSQL_DIR=$i
1234	fi
1235	done
1236	fi
1237	if test -z "$PGSQL_DIR"; then
1238	for i in $pgsql_directory; do
1239	if test -r $i/include/libpq-fe.h; then
1240	PGSQL_INC_DIR=$i/include
1241	PGSQL_DIR=$i
1242	fi
1243	done
1244	fi
1245
1246	if test -z "$PGSQL_DIR"; then
1247	tmp=""
1248	for i in $pgsql_directory; do
1249	tmp="$tmp $i/include $i/include/pgsql $i/include/postgresql"
1250	done
1251	FAIL_MESSAGE("PostgreSQL header file (libpq-fe.h)", $tmp)
1252	fi
1253
1254	for i in lib lib/pgsql lib/postgresql; do
1255	str="$PGSQL_DIR/$i/libpq.*"
1256	for j in `echo $str`; do
1257	if test -r $j; then
1258	PGSQL_LIB_DIR="$PGSQL_DIR/$i"
1259	break 2
1260	fi
1261	done
1262	done
1263
1264	if test -z "$PGSQL_LIB_DIR"; then
1265	for ff in $pgsql_directory; do
1266	for i in lib lib/pgsql lib/postgresql; do
1267	str="$ff/$i/libpq.*"
1268	for j in `echo $str`; do
1269	if test -r $j; then
1270	PGSQL_LIB_DIR="$ff/$i"
1271	break 3
1272	fi
1273	done
1274	done
1275	done
1276	fi
1277
1278	if test -z "$PGSQL_LIB_DIR"; then
1279	tmp=""
1280	for i in $pgsql_directory; do
1281	tmp="$i/lib $i/lib/pgsql $i/lib/postgresql"
1282	done
1283	FAIL_MESSAGE("postgresql library libpq", $tmp)
1284	fi
1285
1286	AC_MSG_RESULT(yes)
1287
1288	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
1289	if test x"$enable_static" = xyes; then
1290	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lcrypt -lm"
1291	else
1292	LIBS="$LIBS -L${PGSQL_LIB_DIR} -lpq -lm"
1293	fi
1294	# CFLAGS="$CFLAGS -I${PGSQL_INC_DIR}"
1295	CPPFLAGS="$CPPFLAGS -I${PGSQL_INC_DIR}"
1296	AC_CHECK_HEADERS(pgsql/libpq-fe.h)
1297	AC_CHECK_HEADERS(postgresql/libpq-fe.h)
1298	else
1299	pg_lib_dir=`${PGCONF} --libdir`
1300	if test x"$enable_static" = xyes; then
1301	LIBS="$LIBS -L${pg_lib_dir} -lpq -lcrypt -lm"
1302	else
1303	LIBS="$LIBS -L${pg_lib_dir} -lpq -lm"
1304	fi
1305	pg_inc_dir=`${PGCONF} --includedir`
1306	# CFLAGS="$CFLAGS -I${pg_inc_dir}"
1307	CPPFLAGS="$CPPFLAGS -I${pg_inc_dir}"
1308	fi
1309	elif test "x${withval}" = "xodbc"; then
1310	AC_MSG_CHECKING(for odbc in /usr /usr/local ODBC_HOME)
1311	odbc_directory="/usr /usr/local"
1312
1313	for i in $odbc_directory; do
1314	if test -r $i/include/sql.h; then
1315	if test -r $i/include/sqlext.h; then
1316	if test -r $i/include/sqltypes.h; then
1317	ODBC_DIR=$i
1318	ODBC_INC_DIR=$i/include
1319	fi
1320	fi
1321	fi
1322	done
1323
1324	if test -z "$ODBC_DIR"; then
1325	tmp=""
1326	for i in $odbc_directory; do
1327	tmp="$tmp $i/include"
1328	done
1329	FAIL_MESSAGE("odbc headers (sql.h sqlext.h sqltypes.h)", $tmp)
1330	fi
1331
1332	str="$ODBC_DIR/lib/libodbc.*"
1333	for j in `echo $str`; do
1334	if test -r $j; then
1335	ODBC_LIB_DIR="$ODBC_DIR/lib"
1336	ODBC_LIB="odbc"
1337	fi
1338	done
1339
1340	if test -z "$ODBC_LIB_DIR"; then
1341	FAIL_MESSAGE("odbc library (libodbc)", "$ODBC_DIR/lib")
1342	fi
1343
1344	AC_MSG_RESULT(yes)
1345	CPPFLAGS="${CPPFLAGS} -I${ODBC_INC_DIR}"
1346	LIBS="${LIBS} -L${ODBC_LIB_DIR} -l$ODBC_LIB"
1347	AC_DEFINE(WITH_ODBC)
1348	AC_DEFINE(WITH_DATABASE)
1349
1350	elif test "x${withval}" = "xoracle"; then
1351	AC_MSG_CHECKING(for oracle in /usr /usr/local ORACLE_HOME)
1352	oracle_directory="/usr /usr/local ${ORACLE_HOME}"
1353	for i in $oracle_directory; do
1354	if test -r $i/rdbms/demo/oci.h; then
1355	ORACLE_DIR=$i
1356	fi
1357	done
1358
1359	if test -z "$ORACLE_DIR"; then
1360	tmp=""
1361	for i in $oracle_directory; do
1362	tmp="$tmp $i/rdbms/demo"
1363	done
1364	FAIL_MESSAGE("OCI header file (oci.h)", $tmp)
1365	else
1366	for i in rdbms/demo rdbms/public network/public; do
1367	ORACLE_CPP_FLAGS="$ORACLE_CPP_FLAGS -I$ORACLE_DIR/$i"
1368	done
1369	ORACLE_LIB_DIR="$ORACLE_DIR/lib"
1370	AC_MSG_RESULT(yes)
1371
1372	CPPFLAGS="${CPPFLAGS} ${ORACLE_CPP_FLAGS}"
1373
1374	ORACLE_LIBS="-lclntsh"
1375	if test -r $ORACLE_LIB_DIR/libwtc9.so; then
1376	ORACLE_LIBS="${ORACLE_LIBS} -lwtc9"
1377	elif test -r $ORACLE_LIB_DIR/libwtc8.so; then
1378	ORACLE_LIBS="${ORACLE_LIBS} -lwtc8"
1379	fi
1380	LIBS="${LIBS} -L${ORACLE_LIB_DIR} ${ORACLE_LIBS}"
1381	if test "x$GCC" != "xyes"; then
1382	CFLAGS="${CFLAGS} -fno-strict-aliasing"
1383	fi
1384	fi
1385	AC_DEFINE(WITH_ORACLE)
1386	AC_DEFINE(WITH_DATABASE)
1387
1388	else
1389	AC_MSG_ERROR([Option --with-database=database used with unsupported database ${withval}])
1390	fi
1391	]
1392	)
1393
1394	AC_ARG_WITH(console,
1395	[ --with-console=PATH set path to console device [[/dev/console]]],
1396	[
1397	if test "x${withval}" != xno; then
1398	mycons="$withval"
1399	AC_DEFINE_UNQUOTED(DEFAULT_CONSOLE, _("${mycons}") )
1400	fi
1401	])
1402
1403	AC_ARG_WITH(altconsole,
1404	[ --with-altconsole=PATH set path to second console device [[none]]],
1405	[
1406	if test "x${withval}" != xno; then
1407	myaltcons="$withval"
1408	else
1409	myaltcons="NULL"
1410	fi
1411	],
1412	[myaltcons="NULL"])
1413	AC_DEFINE_UNQUOTED(ALT_CONSOLE, _("${myaltcons}") )
1414
1415	AC_ARG_WITH(timeserver,
1416	[ --with-timeserver=HOST set host address for time server [[none]]],
1417	[
1418	if test "x${withval}" != xno; then
1419	mytimeserv="$withval"
1420	AC_DEFINE(HAVE_NTIME)
1421	else
1422	mytimeserv="NULL"
1423	fi
1424	],
1425	mytimeserv="NULL")
1426	AC_DEFINE_UNQUOTED(DEFAULT_TIMESERVER, _("${mytimeserv}") )
1427
1428	AC_ARG_WITH(alttimeserver,
1429	[ --with-alttimeserver=HOST set address for backup time server [[none]]],
1430	[
1431	if test "x${withval}" != xno; then
1432	myalttimeserv="$withval"
1433	AC_DEFINE(HAVE_NTIME)
1434	else
1435	myalttimeserv="NULL"
1436	fi
1437	],
1438	myalttimeserv="NULL")
1439	AC_DEFINE_UNQUOTED(ALT_TIMESERVER, _("${myalttimeserv}") )
1440
1441	AC_ARG_ENABLE(login-watch,
1442	[ --enable-login-watch watch for login/logout [[no]]],
1443	[
1444	if test "x${enable_login_watch}" = xyes; then
1445	AC_DEFINE(SH_USE_UTMP)
1446	fi
1447	]
1448	)
1449
1450	AC_ARG_ENABLE(mounts-check,
1451	[ --enable-mounts-check check mount options on filesystems [[no]]],
1452	[
1453	if test "x${enable_mounts_check}" = xyes; then
1454	AC_DEFINE(SH_USE_MOUNTS)
1455	fi
1456	]
1457	)
1458
1459	AC_ARG_ENABLE(logfile-monitor,
1460	[ --enable-logfile-monitor monitor logfiles [[no]]],
1461	[
1462	if test "x${enable_logfile_monitor}" = xyes; then
1463	AC_CHECK_HEADER(pcre.h,
1464	[
1465	AC_DEFINE(USE_LOGFILE_MONITOR, 1, [Define if you want the logfile monitor module.])
1466	LIBS="-lpcre $LIBS"
1467	],
1468	[
1469	AC_CHECK_HEADER(pcre/pcre.h,
1470	[
1471	AC_DEFINE(USE_LOGFILE_MONITOR, 1, [Define if you want the logfile monitor module.])
1472	AC_DEFINE(HAVE_PCRE_PCRE_H, 1, [Define if you have pcre/pcre.h.])
1473	LIBS="-lpcre $LIBS"
1474	],
1475	AC_MSG_ERROR([The --enable-logfile-monitor option requires libpcre. For compiling the pcre development package is needed.])
1476	)
1477	]
1478	)
1479	fi
1480	]
1481	)
1482
1483
1484	AC_ARG_ENABLE(process-check,
1485	[ --enable-process-check check processes [[no]]],
1486	[
1487	if test "x${enable_process_check}" = xyes; then
1488	AC_CHECK_LIB([rt], [sched_getparam], sh_lrt=yes, sh_lrt=no)
1489	if test x"$sh_lrt" = xyes; then
1490	LIBRT=-lrt
1491	else
1492	LIBRT=
1493	fi
1494	LIBS="$LIBS $LIBRT"
1495	AC_DEFINE(SH_USE_PROCESSCHECK, [1], [Define if you want to check processes])
1496	fi
1497	]
1498	)
1499
1500	AC_ARG_ENABLE(port-check,
1501	[ --enable-port-check check ports [[no]]],
1502	[
1503	if test "x${enable_port_check}" = xyes; then
1504	AC_DEFINE(SH_USE_PORTCHECK, [1], [Define if you want to check ports])
1505	fi
1506	]
1507	)
1508
1509	AC_ARG_ENABLE(userfiles,
1510	[ --enable-userfiles check for users' config files [[no]]],
1511	[
1512	if test "x${enableval}" = "xyes"; then
1513	AC_DEFINE(SH_USE_USERFILES)
1514	fi
1515	]
1516	)
1517
1518	AC_ARG_ENABLE(debug,
1519	[ --enable-debug enable debug options [[no]]],
1520	[
1521	if test "x${enable_debug}" = "xyes"; then
1522	if test "x${mydebugflag}" != "xyes"; then
1523	AC_DEFINE(MEM_DEBUG)
1524	fi
1525	AC_DEFINE(WITH_TPT)
1526	AC_DEFINE(SL_DEBUG)
1527	AC_DEFINE(DNMALLOC_CHECKS, 1, [Debug dnmalloc])
1528	AC_DEFINE(PARANOIA, 0, [Paranoia level for dnmalloc])
1529	AC_DEFINE(SL_FAIL_ON_ERROR)
1530	if test "x${myneedg3}" = "xyes"; then
1531	mydebugdef="-g3"
1532	else
1533	mydebugdef="-g"
1534	fi
1535	mydebugit="yes"
1536	fi
1537	]
1538	)
1539	AC_SUBST(mydebugdef)
1540
1541	if test "x${dnmalloc_ok}" = "xyes"; then
1542	sh_dnmalloc_enabled=yes
1543	else
1544	sh_dnmalloc_enabled=no
1545	fi
1546
1547	AC_ARG_ENABLE(dnmalloc,
1548	[ --disable-dnmalloc disable dnmalloc],
1549	[
1550	if test "x${enable_dnmalloc}" = xno; then
1551	sh_dnmalloc_enabled=no
1552	else
1553	sh_dnmalloc_enabled=yes
1554	fi
1555	]
1556	)
1557
1558	dnl Handle the problem that static linking against libc.a on Linux
1559	dnl produces the error "multiple definitions of malloc"
1560	dnl
1561	if test "x$sh_dnmalloc_enabled" = "xyes"; then
1562	if test x$enable_static = xyes; then
1563	if test "x$sh_no_gcc_static" = "xyes"; then
1564	sh_dnmalloc_enabled=no
1565	else
1566	if test "x$with_gnu_ld" = "xyes"; then
1567	LDFLAGS="$LDFLAGS -Wl,--allow-multiple-definition"
1568	else
1569	sh_dnmalloc_enabled=no
1570	fi
1571	fi
1572	fi
1573	fi
1574
1575	if test "x${sh_dnmalloc_enabled}" = xno; then
1576	AC_DEFINE(USE_SYSTEM_MALLOC,1,[Define if you want to use the system malloc])
1577	fi
1578
1579	AC_ARG_ENABLE(ptrace,
1580	[ --enable-ptrace use anti-debugger options [[no]]],
1581	[
1582	if test "x${enable_ptrace}" = xyes; then
1583	if test "x$mydebugit" != "xyes"; then
1584	AC_DEFINE(SCREW_IT_UP)
1585	fi
1586	fi
1587	]
1588	)
1589
1590	dnl
1591	if test "x$GCC" = "xyes"; then
1592	if test ! -z "`echo "$CFLAGS" \| grep "\-g\ " 2> /dev/null`" ; then
1593	CFLAGS=`echo $CFLAGS \| sed 's%\-g%%' `
1594	fi
1595
1596	dnl if test ! -z "`echo "$CFLAGS" \| grep "\-O2" 2> /dev/null`" ; then
1597	dnl CFLAGS=`echo $CFLAGS \| sed 's%\-O2%\-O3%' `
1598	dnl fi
1599
1600	if test -z "`echo "$CFLAGS" \| grep "\-Wall" 2> /dev/null`" ; then
1601	CFLAGS="$CFLAGS -Wall -W "
1602	fi
1603
1604	if test -z "`echo "$CFLAGS" \| grep "\-fstrength\-reduce" 2> /dev/null`"
1605	then
1606	if test -z "`echo "$CFLAGS" \| grep "\-fno\-strength\-reduce" 2> /dev/null`"
1607	then
1608	CFLAGS="$CFLAGS -fno-strength-reduce"
1609	fi
1610	fi
1611
1612	if test -z "`echo "$CFLAGS" \| grep "\-fomit\-frame\-pointer" 2> /dev/null`"
1613	then
1614	if test -z "`echo "$CFLAGS" \| grep "\-fno\-omit\-frame\-pointer" 2> /dev/null`"
1615	then
1616	CFLAGS="$CFLAGS -fno-omit-frame-pointer"
1617	fi
1618	fi
1619
1620	fi
1621
1622	dnl Test whether gcc supports -Wno-empty-body
1623	dnl Suppresses warnings from glibc pthread_cleanup_pop
1624	dnl
1625	GCC_WEMPTY_BODY
1626
1627	AC_MSG_CHECKING([which random module to use])
1628	AC_ARG_WITH(rnd,
1629	[ --with-rnd=[[egd\|unix\|dev\|default]] random number generator [[default]]],
1630	[use_static_rnd=$withval], [use_static_rnd=default] )
1631
1632	if test "$use_static_rnd" = no; then
1633	use_static_rnd=default
1634	fi
1635
1636	case "$use_static_rnd" in
1637	egd \| dev \| unix \| default )
1638	AC_MSG_RESULT($use_static_rnd)
1639	;;
1640	* )
1641	AC_MSG_RESULT([invalid argument])
1642	AC_MSG_ERROR([Option --with-rnd=module used with unsupported module ${use_static_rnd}])
1643	;;
1644	esac
1645
1646	AC_ARG_WITH(egd-socket,
1647	[ --with-egd-socket=NAME EGD socket name],
1648	egd_socket_name="$withval", egd_socket_name="" )
1649	AC_DEFINE_UNQUOTED(EGD_SOCKET_NAME, _("$egd_socket_name") )
1650
1651	dnl
1652	dnl See whether the user wants to disable checking for /dev/random
1653
1654	try_dev_random=yes
1655
1656	case "$use_static_rnd" in
1657	dev \| default )
1658	try_dev_random=yes
1659	;;
1660	egd)
1661	AC_DEFINE(HAVE_EGD_RANDOM)
1662	try_dev_random=no
1663	;;
1664	unix)
1665	AC_DEFINE(HAVE_UNIX_RANDOM)
1666	try_dev_random=no
1667	;;
1668	esac
1669
1670
1671	if test "x$try_dev_random" = "xyes"; then
1672	AC_MSG_CHECKING(whether /dev/random exists)
1673	if test -r "/dev/srandom" && test -c "/dev/srandom"; then
1674	AC_DEFINE(HAVE_URANDOM)
1675	AC_DEFINE_UNQUOTED(NAME_OF_DEV_RANDOM, _("/dev/srandom") )
1676	AC_MSG_RESULT(yes)
1677	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
1678	AC_DEFINE_UNQUOTED(NAME_OF_DEV_URANDOM, _("/dev/urandom") )
1679	fi
1680	else
1681	if test -r "/dev/random" && test -c "/dev/random"; then
1682	AC_DEFINE(HAVE_URANDOM)
1683	AC_DEFINE_UNQUOTED(NAME_OF_DEV_RANDOM, _("/dev/random") )
1684	AC_MSG_RESULT(yes)
1685	if test -r "/dev/urandom" && test -c "/dev/urandom"; then
1686	AC_DEFINE_UNQUOTED(NAME_OF_DEV_URANDOM, _("/dev/urandom") )
1687	fi
1688	else
1689	AC_MSG_RESULT(no)
1690	AC_DEFINE(HAVE_UNIX_RANDOM)
1691	fi
1692	fi
1693	fi
1694
1695
1696	AC_ARG_ENABLE(udp,
1697	[ --enable-udp server can listen on port 514/udp [[no]]],
1698	[
1699	if test "x${enable_udp}" = xyes; then
1700	AC_DEFINE(INET_SYSLOG)
1701	fi
1702	]
1703	)
1704
1705	myencrypt=yes
1706	AC_ARG_ENABLE(encrypt,
1707	[ --disable-encrypt disable client/server encryption],
1708	[
1709	if test "x${enable_encrypt}" = xno; then
1710	myencrypt=no
1711	elif test "x${enable_encrypt}" = "x1"; then
1712	myencrypt=1
1713	fi
1714	]
1715	)
1716	if test "x${myencrypt}" = "xyes"; then
1717	AC_DEFINE(SH_ENCRYPT)
1718	AC_DEFINE(SH_ENCRYPT_2)
1719	elif test "x${myencrypt}" = "x1"; then
1720	AC_DEFINE(SH_ENCRYPT)
1721	fi
1722
1723	sh_use_srp_proto=yes
1724	AC_ARG_ENABLE(srp,
1725	[ --disable-srp disable SRP for authentication],
1726	[
1727	if test "x${enable_srp}" = xno; then
1728	sh_use_srp_proto=no
1729	fi
1730	]
1731	)
1732	if test "x${sh_use_srp_proto}" = xyes; then
1733	AC_DEFINE(USE_SRP_PROTOCOL)
1734	fi
1735
1736	AC_ARG_WITH(port,
1737	[ --with-port=PORT set port to use for TCP/IP connection [[49777]]],
1738	[
1739	echo "${withval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1740	AC_MSG_ERROR([For --with-port=PORT, PORT must be numeric.])
1741	myport=${withval}
1742	],
1743	[myport="49777"])
1744	AC_DEFINE_UNQUOTED(SH_DEFAULT_PORT, ${myport})
1745	AC_SUBST(myport)
1746
1747	AC_ARG_WITH(logserver,
1748	[ --with-logserver=HOST set host address for log server [[none]]],
1749	[
1750	case "$withval" in
1751	. \| localhost)
1752	mylogsrv="$withval"
1753	;;
1754	*)
1755	mylogsrv="$withval"
1756	;;
1757	esac
1758	],
1759	[mylogsrv="NULL"])
1760	AC_DEFINE_UNQUOTED(DEFAULT_LOGSERVER, _("${mylogsrv}") )
1761	AC_SUBST(mylogsrv)
1762
1763	AC_ARG_WITH(altlogserver,
1764	[ --with-altlogserver=HOST set address for backup log server [[none]]],
1765	[
1766	case "$withval" in
1767	. \| localhost)
1768	myaltlogsrv="$withval"
1769	;;
1770	*)
1771	myaltlogsrv="$withval"
1772	;;
1773	esac
1774	],
1775	[myaltlogsrv="NULL"])
1776	AC_DEFINE_UNQUOTED(ALT_LOGSERVER, _("${myaltlogsrv}"))
1777
1778
1779
1780	dnl
1781	dnl STEALTH OPTIONS
1782	dnl
1783	nocl_code=
1784	xor_code=0
1785	AC_ARG_ENABLE(nocl,
1786	[ --enable-nocl=PW no CL parsing unless first CL argument is PW],
1787	[
1788	if test "x${enableval}" != "x"; then
1789	AC_DEFINE(SH_STEALTH_NOCL)
1790	fi
1791	if test "x${enableval}" = "xstop" \|\| test "x${enableval}" = "xstart"; then
1792	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1793	fi
1794	if test "x${enableval}" = "xreload" \|\| test "x${enableval}" = "xrestart"; then
1795	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1796	fi
1797	if test "x${enableval}" = "xstatus"; then
1798	AC_MSG_ERROR([For --enable-nocl=PW start/stop/reload/restart/status are reserved words.])
1799	fi
1800	if test "x${enableval}" = "xno"; then
1801	AC_MSG_ERROR([With --enable-nocl=PW, the use of --enable-nocl=no is ambiguous.])
1802	fi
1803	nocl_code="${enable_nocl}"
1804	]
1805	)
1806	AC_DEFINE_UNQUOTED(NOCL_CODE, _("${nocl_code}") )
1807	AC_SUBST(nocl_code)
1808	AC_ARG_ENABLE(stealth,
1809	[ --enable-stealth=XOR_VAL enable stealth mode [[no]]],
1810	[AC_DEFINE(SH_STEALTH)
1811	if test "x${enableval}" != "xyes"; then
1812	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1813	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be numeric.])
1814	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
1815	if test x"${enableval}" = x0
1816	then
1817	:
1818	else
1819	AC_MSG_ERROR([For --enable-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
1820	fi
1821	fi
1822	xor_code="${enable_stealth}"
1823	else
1824	xor_code=0
1825	fi
1826	stegin_prg="samhain_stealth"
1827	],
1828	[
1829	stegin_prg=
1830	]
1831	)
1832	AC_ARG_ENABLE(micro-stealth,
1833	[ --enable-micro-stealth=XOR_VAL enable micro stealth mode [[no]]],
1834	[
1835	AC_DEFINE(SH_STEALTH)
1836	AC_DEFINE(SH_STEALTH_MICRO)
1837	if test "x${enableval}" != "xyes"; then
1838	echo "${enableval}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
1839	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be numeric.])
1840	if test "${enableval}" -lt 127 \|\| test "${enableval}" -gt 255; then
1841	if test x"${enableval}" = x0
1842	then
1843	:
1844	else
1845	AC_MSG_ERROR([For --enable-micro-stealth=XOR_VAL, XOR_VAL must be in the range 127 to 255.])
1846	fi
1847	fi
1848	xor_code="${enable_micro_stealth}"
1849	else
1850	xor_code=0
1851	fi
1852	]
1853	)
1854	install_name="samhain"
1855	INSTALL_NAME="SAMHAIN"
1856	AC_ARG_ENABLE(install-name,
1857	[ --enable-install-name=NAME name under which to install [[samhain\|yule]]],
1858	[
1859	if test "x${enableval}" != "xyes"; then
1860	install_name="${enableval}"
1861	INSTALL_NAME=`echo "${enableval}" \| tr [a-z] [A-Z]`
1862	else
1863	install_name="${sh_main_prg}"
1864	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
1865	fi
1866	],
1867	[
1868	install_name="${sh_main_prg}"
1869	INSTALL_NAME=`echo "${sh_main_prg}" \| tr [a-z] [A-Z]`
1870	]
1871	)
1872
1873
1874	need_user_install=0
1875
1876	AC_ARG_ENABLE(identity,
1877	[ --enable-identity=USER user if dropping root [[daemon]]],
1878	[
1879	if test x"$enableval" = xno; then
1880	myident="daemon"
1881	else
1882	myident="$enableval"
1883	fi
1884	echo "${myident}" \| grep ['[^0123456789]'] >/dev/null 2>&1 \|\| \
1885	AC_MSG_ERROR([With --enable-identity=USER, please supply a username, not a UID.])
1886	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
1887	grep "^${myident}:" \| awk -F: '{ print $3; }'`
1888	if test x"${myident_uid}" = x; then
1889	AC_MSG_WARN([Option --enable-identity used, user ${myident} will be added upon install.])
1890	need_user_install=1
1891	fi
1892	],
1893	[
1894	for myident in ${install_name} daemon nobody; do
1895	AC_MSG_CHECKING(for user ${myident})
1896	myident_uid=`(cat /etc/passwd; ypcat passwd) 2>/dev/null \|\
1897	grep "^${myident}:" \| awk -F: '{ print $3; }'`
1898	if test x"${myident_uid}" != x; then
1899	AC_MSG_RESULT(yes)
1900	break;
1901	else
1902	AC_MSG_RESULT(no)
1903	fi
1904	done
1905	if test x"${myident_uid}" = x; then
1906	myident=${install_name}
1907	AC_MSG_WARN([--enable-identity: user ${myident} will be added upon install])
1908	need_user_install=1
1909	fi
1910	])
1911	AC_DEFINE_UNQUOTED(DEFAULT_IDENT, _("${myident}") )
1912	AC_SUBST(myident)
1913	AC_SUBST(need_user_install)
1914
1915	sh_insmod_cmd=": # no kernel module"
1916	sh_lkm=""
1917	lkm_inc=""
1918	khidemap="/boot/System.map"
1919	sh_syscalltable="0x0"
1920	AC_ARG_ENABLE(khide,
1921	[ --enable-khide=SYSTEM_MAP use kernel module to hide (Linux only)[[/boot/System.map]]],
1922	[
1923	if test "x${enable_khide}" != xno; then
1924	if test "x${enableval}" != "xyes"; then
1925	khidemap="${enableval}"
1926	fi
1927	sh_syscalltable=`egrep '(D\|d\|R\|r) sys_call_table' ${khidemap} \| awk '{print $1}'`
1928	if test x"$sh_syscalltable" = x; then
1929	AC_MSG_ERROR([Option --enable-khide cannot be used since the symbol sys_call_table was not found in ${khidemap}.])
1930	fi
1931	sh_syscalltable="0x${sh_syscalltable}"
1932	install_name_len=`echo ${install_name} \| awk '{ print(length()); }'`
1933	if test "${install_name_len}" -gt 15 ; then
1934	AC_MSG_ERROR([If --enable-khide is used, install_name must not exceed a length of 15 chars.])
1935	fi
1936	AC_DEFINE(SH_USE_LKM)
1937	AC_DEFINE_UNQUOTED(SH_MAGIC_HIDE, "${install_name}")
1938
1939	# -- NEW --
1940	kernel_version=`uname -r \| sed s,2.6.*,LINUX26,`
1941	kernel_numeric=`uname -r \| sed 's%-%.%g' \| sed 's%_%.%g' \| awk -F. '{ print $165536+$2256+$3 }'`
1942	AC_DEFINE_UNQUOTED(SH_KERNEL_NUMERIC, ${kernel_numeric}, [Kernel number])
1943
1944	if test x"$kernel_version" = xLINUX26
1945	then
1946	AC_MSG_CHECKING([for modlist_lock])
1947	sh_modlist_lock=`egrep ['[bd] modlist_lock$'] ${khidemap} \| awk '{print $1}'`
1948	if test x"$sh_modlist_lock" = x; then
1949	AC_MSG_RESULT(no)
1950	else
1951	sh_modlist_lock="0x${sh_modlist_lock}"
1952	AC_MSG_RESULT([${sh_modlist_lock}])
1953	AC_DEFINE_UNQUOTED(SH_MODLIST_LOCK, ${sh_modlist_lock}, [The address of the modules list spinlock])
1954	fi
1955
1956	AC_MSG_CHECKING([for module_mutex])
1957	sh_modlist_mutex=`egrep ['[bd] module_mutex$'] ${khidemap} \| awk '{print $1}'`
1958	if test x"$sh_modlist_mutex" = x; then
1959	AC_MSG_RESULT(no)
1960	else
1961	sh_modlist_mutex="0x${sh_modlist_mutex}"
1962	AC_MSG_RESULT([${sh_modlist_mutex}])
1963	AC_DEFINE_UNQUOTED(SH_MODLIST_MUTEX, ${sh_modlist_mutex}, [The address of the modules list mutex])
1964	fi
1965
1966	sh_list_modules=`egrep 'd modules$' ${khidemap} \| awk '{print $1}'`
1967	if test x"$sh_list_modules" = x; then
1968	AC_MSG_ERROR([Option --enable-khide cannot be used, since the symbol modules was not found in ${khidemap}.])
1969	fi
1970	sh_list_modules="0x${sh_list_modules}"
1971	AC_DEFINE_UNQUOTED(SH_LIST_MODULES, ${sh_list_modules}, [The address of the modules list])
1972
1973	AC_DEFINE(LINUX26, 1, [Define if kernel is 2.6])
1974	sh_insmod_cmd="modprobe ${install_name}_hide"
1975	sh_lkm="samhain_hide.ko"
1976	else
1977	sh_insmod_cmd="insmod ${install_name}_hide; insmod ${install_name}_erase; rmmod ${install_name}_erase"
1978	sh_lkm="samhain_hide.o samhain_erase.o"
1979	fi
1980	# -- END NEW --
1981
1982	kvers=`uname -r`
1983	if test -f /lib/modules/${kvers}/build/include/linux/kernel.h; then
1984	lkm_inc="-I/lib/modules/${kvers}/build/include"
1985	else
1986	AC_MSG_WARN([--enable-khide: /lib/modules/${kvers}/build/include/linux not found])
1987	AC_MSG_WARN([--enable-khide: You may need to install the kernel-source])
1988	AC_MSG_WARN([--enable-khide: headers for the currently-running kernel.])
1989	fi
1990
1991	AC_MSG_CHECKING([for 2.4 vanilla kernel])
1992	sh_is_vanilla_kernel=yes
1993	if test -f /lib/modules/${kvers}/build/include/linux/sched.h; then
1994	grep 'next_task,' /lib/modules/${kvers}/build/include/linux/sched.h >/dev/null 2>&1 \|\| sh_is_vanilla_kernel=no
1995	fi
1996	if test x"${sh_is_vanilla_kernel}" = xno; then
1997	AC_MSG_RESULT(no)
1998	else
1999	AC_MSG_RESULT(yes)
2000	AC_DEFINE(SH_VANILLA_KERNEL)
2001	fi
2002
2003	fi
2004	]
2005	)
2006	AC_SUBST(lkm_inc)
2007	AC_SUBST(sh_lkm)
2008	AC_SUBST(sh_insmod_cmd)
2009	AC_SUBST(install_name)
2010	AC_SUBST(INSTALL_NAME)
2011	AC_SUBST(stegin_prg)
2012	AC_SUBST(xor_code)
2013
2014	AC_DEFINE_UNQUOTED(XOR_CODE, ${xor_code})
2015	AC_DEFINE_UNQUOTED(SH_SYSCALLTABLE, ${sh_syscalltable})
2016
2017
2018	exepack_state0=`${srcdir}/c_random.sh 2>/dev/null`
2019	exepack_state1=`${srcdir}/c_random.sh 2>/dev/null`
2020	exepack_state2=`${srcdir}/c_random.sh 2>/dev/null`
2021
2022	AC_DEFINE_UNQUOTED(EXEPACK_STATE_0, ${exepack_state0})
2023	AC_DEFINE_UNQUOTED(EXEPACK_STATE_1, ${exepack_state1})
2024	AC_DEFINE_UNQUOTED(EXEPACK_STATE_2, ${exepack_state2})
2025
2026
2027	AC_ARG_ENABLE(suidcheck,
2028	[ --enable-suidcheck check for suid/sgid files [[no]]],
2029	[
2030	if test "x${enableval}" = "xyes"; then
2031	AC_DEFINE(SH_USE_SUIDCHK)
2032	fi
2033	]
2034	)
2035
2036
2037	systemmap="/boot/System.map"
2038	sh_libkvm=""
2039	AC_ARG_WITH(kcheck,
2040	[ --with-kcheck[[=SYSTEM_MAP]] check Linux/FreeBSD/OpenBSD kernel integrity [[/boot/System.map]]],
2041	[
2042	if test "x${withval}" != "xno"; then
2043	AC_DEFINE(SH_USE_KERN)
2044
2045	kernel_numeric=`uname -r \| sed 's%-%.%g' \| sed 's%_%.%g' \| awk -F. '{ print $165536+$2256+$3 }'`
2046	AC_DEFINE_UNQUOTED(SH_KERNEL_NUMBER, ${kernel_numeric}, [Kernel number])
2047
2048	kernelversion=`uname -r`
2049	AC_DEFINE_UNQUOTED(SH_KERNEL_VERSION, _("${kernelversion}"), [Define the kernel version])
2050	if test "x${withval}" != "xyes"; then
2051	systemmap="${withval}"
2052	fi
2053	if test "x${cross_compiling}" = xyes; then
2054	:
2055	elif test "x$selectconfig" = "xfreebsd"; then
2056	LIBS="$LIBS -lkvm"
2057	sh_libkvm="-lkvm"
2058	elif test -f "${systemmap}"; then
2059	:
2060	else
2061	AC_MSG_ERROR([Option --with-kcheck=systemmap cannot be used, because system map ${systemmap} does not exist.])
2062	fi
2063	fi
2064	]
2065	)
2066	AC_SUBST(systemmap)
2067	AC_SUBST(sh_libkvm)
2068
2069	AC_ARG_ENABLE(base,
2070	[ --enable-base=B1,B2 base key (0...2147483647)],
2071	[
2072	AC_MSG_CHECKING(base key setting)
2073	my_key_A=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $1}'`
2074	my_key_B=`echo ${enableval} \| awk 'BEGIN{FS=","}{print $2}'`
2075	AC_MSG_RESULT(${my_key_A} ${my_key_B})
2076	if test "x${my_key_A}" = x; then
2077	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid first base key (zero length).])
2078	fi
2079	if test "x${my_key_B}" = x; then
2080	AC_MSG_ERROR([Option --enable-base=B1,B2 used with invalid second base key (zero length).])
2081	fi
2082	echo "${my_key_A}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2083	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
2084	echo "${my_key_B}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2085	AC_MSG_ERROR([For --enable-base=B1,B2, B1 and B2 must be numeric in the range 0 to 2147483647.])
2086	],
2087	[
2088	AC_MSG_CHECKING(base key setting .. collecting entropy)
2089	my_key_1=`${srcdir}/c_random.sh 2>/dev/null`
2090	my_key_2=`${srcdir}/c_random.sh 2>/dev/null`
2091	my_key_3=`${srcdir}/c_random.sh 2>/dev/null`
2092	my_key_4=`${srcdir}/c_random.sh 2>/dev/null`
2093	my_key_A=`expr $my_key_1 \* 32767`
2094	my_key_A=`echo ${my_key_A} \| sed 's%^0*%%g' 2>/dev/null`
2095	my_key_A=`expr $my_key_A \+ $my_key_2`
2096	my_key_B=`expr $my_key_3 \* 32767`
2097	my_key_B=`echo ${my_key_B} \| sed 's%^0*%%g' 2>/dev/null`
2098	my_key_B=`expr $my_key_B \+ $my_key_4`
2099	AC_MSG_RESULT(${my_key_A} ${my_key_B})
2100	]
2101	)
2102	AC_SUBST(my_key_A)
2103	AC_SUBST(my_key_B)
2104
2105	dnl low bytes
2106	my_key_1=`expr $my_key_A \% 65536`
2107	dnl high bytes
2108	my_key_2=`expr $my_key_A \/ 65536`
2109	dnl low bytes
2110	my_key_3=`expr $my_key_B \% 65536`
2111	dnl high bytes
2112	my_key_4=`expr $my_key_B \/ 65536`
2113
2114	dnl echo ${my_key_1} ${my_key_2} ${my_key_3} ${my_key_4}
2115
2116	dnl touch ./sh_MK.h
2117	dnl echo "#ifndef SH_MK_H" >> ./sh_MK.h
2118	dnl echo "#define SH_MK_H" >> ./sh_MK.h
2119	dnl ${srcdir}/c_bits.sh ${my_key_1} MKB >> ./sh_MK.h
2120	dnl ${srcdir}/c_bits.sh ${my_key_2} MKA >> ./sh_MK.h
2121	dnl ${srcdir}/c_bits.sh ${my_key_3} MKC >> ./sh_MK.h
2122	dnl ${srcdir}/c_bits.sh ${my_key_4} MKD >> ./sh_MK.h
2123	dnl echo "#endif" >> ./sh_MK.h
2124	AC_SUBST(my_key_1)
2125	AC_SUBST(my_key_2)
2126	AC_SUBST(my_key_3)
2127	AC_SUBST(my_key_4)
2128
2129	AC_MSG_CHECKING(key position)
2130	pos_tf_1=`${srcdir}/c_random.sh 2>/dev/null`
2131	pos_tf_2=`expr $pos_tf_1 \% 8`
2132	pos_tf=`expr $pos_tf_2 + 1`
2133	AC_MSG_RESULT(${pos_tf})
2134	AC_DEFINE_UNQUOTED(POS_TF, ${pos_tf} )
2135
2136	mykeybase=`echo ${my_key_A},${my_key_B}`
2137	AC_DEFINE_UNQUOTED(DEFKEY, ${mykeybase} )
2138	AC_SUBST(mykeybase)
2139
2140
2141	dnl
2142	dnl GPG/PGP options
2143	dnl
2144
2145	AC_ARG_WITH(gpg,
2146	[ --with-gpg=PATH use GnuPG to verify database/config [[no]]],
2147	[
2148	if test "x${withval}" != "xno"; then
2149	if test "x${cross_compiling}" = xyes; then
2150	mygpg="${withval}"
2151	else
2152	if test -f "${withval}"; then
2153	mygpg="${withval}"
2154	mychk0=`${withval} --load-extension tiger --print-md TIGER192 ${withval} 2>/dev/null`
2155	if test "x$?" != "x0"; then
2156	mychktest=no
2157	for sampre in ./samhain ./yule /usr/local/sbin/samhain /usr/local/bin/samhain /usr/bin/samhain /usr/sbin/samhain /usr/local/sbin/yule /usr/local/bin/yule /usr/bin/yule /usr/sbin/yule; do
2158	if test x"${mychktest}" = xyes
2159	then
2160	:
2161	else
2162	if test -f ${sampre}
2163	then
2164	echo "use existing ${sampre} for gpg checksum"
2165	mychk0=`${sampre} -H ${withval} 2>/dev/null`
2166	if test "x$?" != "x0"; then
2167	:
2168	else
2169	mychk="${mychk0}"
2170	mychktest=yes
2171	fi
2172	fi
2173	fi
2174	done
2175	if test x${mychktest} = xno; then
2176	AC_MSG_WARN([--with-gpg: cannot determine TIGER192 checksum of ${withval}])
2177	echo "-------------------------------------------------------------"
2178	echo " Your gpg binary does not support the TIGER192 checksum, "
2179	echo " and I cannot find an existing samhain binary to use instead."
2180	echo " You can:"
2181	echo " (a) run make to compile a samhain binary, then repeat"
2182	echo " ./configure and make"
2183	echo " (b) ignore the failure. The checksum of the gpg binary"
2184	echo " will not get compiled in, thus allowing an attacker"
2185	echo " to replace gpg with a trojan and subverting the gpg"
2186	echo " signature verification of configure and database files."
2187	echo
2188	echo " PLEASE IGNORE THIS MESSAGE IF YOU ALSO USE --with-checksum"
2189	echo "-------------------------------------------------------------"
2190	fi
2191	else
2192	mychk="${mychk0}"
2193	fi
2194	else
2195	AC_MSG_ERROR([--with-gpg: cannot find GnuPG PATH=${withval}])
2196	fi
2197	fi
2198	AC_DEFINE(WITH_GPG)
2199	AC_DEFINE_UNQUOTED(DEFAULT_GPG_PATH, _("${mygpg}") )
2200	AC_SUBST(mygpg)
2201	fi
2202	]
2203	)
2204
2205	AC_ARG_WITH(keyid,
2206	[ --with-keyid=KEYID specify KeyID (0x...) for GPG/PGP functions [[none]]],
2207	[
2208	if test "x${withval}" != "x"; then
2209	echo "${withval}" \| awk '{if((length($0)==10)\|\|(length($0)==18)){exit 2}else{exit 0}}' &&
2210	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
2211	echo "${withval}" \| grep ['[^0][^x][^0123456789ABCDEFabcdef]'] >/dev/null 2>&1 &&
2212	AC_MSG_ERROR([--with-keyid:${withval} must be "0x" + 8\|16 hex digits])
2213	mykeyid="$withval"
2214	mykeytag="--default-key"
2215	else
2216	mykeyid=""
2217	mykeytag=""
2218	fi
2219	AC_SUBST(mykeyid)
2220	AC_SUBST(mykeytag)
2221	]
2222	)
2223
2224	dnl AC_ARG_WITH(pgp,
2225	dnl [ --with-pgp=PATH Use PGP to verify database/config (no).],
2226	dnl [myppg="$withval"
2227	dnl AC_DEFINE(WITH_PGP)
2228	dnl AC_DEFINE_UNQUOTED(DEFAULT_PGP_PATH, _("${myppg}") )
2229	dnl ])
2230
2231	AC_ARG_WITH(checksum,
2232	[ --with-checksum=CHKSUM compile in gpg/pgp checksum [[yes]]],
2233	[
2234	if test "x${withval}" != "xno"; then
2235	if test "x${withval}" != "xyes"; then
2236	if test "x${mychk}" != "x"; then
2237	if test "x${mychk}" != "x${withval}"; then
2238	AC_MSG_WARN([--with-checksum: possible gpg CHKSUM problem])
2239	AC_MSG_WARN([--with-checksum: CHKSUM=${withval}])
2240	AC_MSG_WARN([--with-checksum: autodetected=${mychk}])
2241	fi
2242	fi
2243	mychk="${withval}"
2244	else
2245	if test "x${mychk}" = "x"; then
2246	AC_MSG_ERROR([Option --with-checksum=CHKSUM: checksum CHKSUM of the gpg binary not specified.])
2247	fi
2248	fi
2249	AC_DEFINE(HAVE_GPG_CHECKSUM)
2250	AC_DEFINE_UNQUOTED(GPG_HASH, _("${mychk}") )
2251	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char gpgchk[50];"; for (i=1; i <= m; i++) printf "gpgchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_gpg_chksum.h
2252	fi
2253	],
2254	[
2255	if test "x${mygpg}" != "x"; then
2256	if test "x${mychk}" != "x"; then
2257	AC_DEFINE(HAVE_GPG_CHECKSUM)
2258	AC_DEFINE_UNQUOTED(GPG_HASH, _("${mychk}") )
2259	echo "${mychk}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef CHKSUM_H"; print "#define CHKSUM_H"; print "char gpgchk[50];"; for (i=1; i <= m; i++) printf "gpgchk[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgchk[48] = %c%c0%c;\n", 39, 92, 39; print "#endif"; }' > sh_gpg_chksum.h
2260	fi
2261	fi
2262	]
2263	)
2264
2265	AC_ARG_WITH(fp,
2266	[ --with-fp=FINGERPRINT compile in public key fingerprint [[no]]],
2267	[
2268	if test "x${withval}" != "xno"; then
2269	if test "x${withval}" != "xyes"; then
2270	withval0=`echo ${withval} \| sed 's% %%g'`
2271	echo "${withval0}" \| \
2272	grep ['[^0123456789abcdefABCDEF]'] >/dev/null 2>&1 &&
2273	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, there is an invalid character(s) in FINGERPRINT=${withval0}.])
2274	sh_len=`echo ${withval0} \| wc -c \| sed 's% %%g'`
2275	sh_len0=`expr ${sh_len} \- 1`
2276	if test "x${sh_len0}" = "x40" \|\| test "x${sh_len0}" = "x32"
2277	then
2278	myfp="${withval0}"
2279	AC_DEFINE(USE_FINGERPRINT)
2280	AC_DEFINE_UNQUOTED(SH_GPG_FP, _("${myfp}") )
2281	echo "${myfp}" \| sed 's,.*:,,g' \| sed 's, ,,g' \| sed 's,\(.\),\1:,g' \| awk '{ split($0, arr, ":"); m = length($1)/2; print "#ifndef FINGERPRINT_H"; print "#define FINGERPRINT_H"; printf "char gpgfp[%d];\n", m+1; for (i=1; i <= m; i++) printf "gpgfp[%d] = %c%s%c;\n", i-1, 39, arr[i], 39; printf "gpgfp[%d] = %c%c0%c;\n", m, 39, 92, 39; print "#endif"; }' > sh_gpg_fp.h
2282	else
2283	AC_MSG_ERROR([In option --with-fp=FINGERPRINT, the length (${sh_len0}) of FINGERPRINT ${withval0} is incorrect.])
2284	fi
2285	else
2286	AC_MSG_ERROR([For option --with-fp=FINGERPRINT, FINGERPRINT=yes is invalid, please specify a valid key fingerprint.])
2287	fi
2288	fi
2289	])
2290
2291
2292	dnl
2293	dnl MAIL OPTIONS
2294	dnl
2295
2296	AC_ARG_WITH(recipient,
2297	[ --with-recipient=ADDR set recipient(s) for e-mail [[none]]],
2298	[
2299	withval0=`echo ${withval} \| sed 's%,% %g'`
2300	for sh_item in ${withval0}
2301	do
2302	case ${sh_item} in
2303	*@localhost)
2304	;;
2305	@.*)
2306	sh_tmp=`echo ${sh_item} \| awk '{ if ($1 ~ [/^[a-zA-Z0-9][a-zA-Z0-9\-_\.]*@[a-zA-Z0-9\-\.]+\.([a-zA-Z]+\|[0-9]+)$/]) {print 1; } else { print 0}}'`
2307	if test "x${sh_tmp}" != "x1"
2308	then
2309	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
2310	fi
2311	;;
2312	*)
2313	AC_MSG_ERROR([Option --with-recipient=ADDR used with invalid mail address ${sh_item}.])
2314	;;
2315	esac
2316	done
2317	myrcp="$withval0"
2318	],
2319	[myrcp="NULL"])
2320	AC_DEFINE_UNQUOTED(DEFAULT_MAILADDRESS, _("${myrcp}") )
2321
2322
2323	AC_ARG_WITH(sender,
2324	[ --with-sender=SENDER set sender for e-mail [[daemon]]],
2325	[
2326	mysender="${withval}"
2327	],
2328	[
2329	mysender="daemon"
2330	])
2331	AC_DEFINE_UNQUOTED(DEFAULT_SENDER, _("${mysender}") )
2332
2333
2334	dnl
2335	dnl PATHS
2336	dnl
2337
2338	AC_ARG_WITH(trusted,
2339	[ --with-trusted=UID Set uid(s) of trusted users [[0]]],
2340	[
2341	sh_tmp_test=no
2342	sh_tmp=`echo ${withval} \| sed 's%,% %g'`
2343	for sh_tmp1 in ${sh_tmp}
2344	do
2345	echo "${sh_tmp1}" \| grep ['[^0123456789]'] >/dev/null 2>&1 &&
2346	AC_MSG_ERROR([Option --with-trusted=UID used with non-numeric UID in ${withval}.])
2347	if test "x${sh_tmp1}" = "x0"
2348	then
2349	sh_tmp_test=yes
2350	fi
2351	done
2352	if test "x${sh_tmp_test}" = "xno"
2353	then
2354	withval="0,${withval}"
2355	fi
2356	mytrust="${withval}"
2357	],
2358	[mytrust="0"] )
2359	AC_DEFINE_UNQUOTED(SL_ALWAYS_TRUSTED, ${mytrust} )
2360	AC_SUBST(mytrust)
2361
2362	AC_ARG_WITH(tmp-dir,
2363	[ --with-tmp-dir=PFX set directory for temporary files [[HOME]]],
2364	[
2365	if test "x${cross_compiling}" = xyes; then
2366	my_tmp_dir="$withval"
2367	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${my_tmp_dir}") )
2368	else
2369	if test -d "${withval}"; then
2370	my_tmp_dir="$withval"
2371	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${my_tmp_dir}") )
2372	else
2373	my_tmp_dir="$withval"
2374	AC_DEFINE_UNQUOTED(SH_TMPDIR, _("${my_tmp_dir}") )
2375	AC_MSG_WARN([--with-tmp-dir: tmp directory ${withval} does not exist])
2376	fi
2377	fi
2378	]
2379	)
2380
2381	dnl
2382	dnl PATH DEFAULTS
2383	dnl
2384
2385	if test "x${ac_prefix_set}" = xyes
2386	then
2387	if test "x${exec_prefix}" = xNONE
2388	then
2389	exec_prefix="${prefix}"
2390	fi
2391
2392	if test "x${prefix}" = xOPT
2393	then
2394	tmp_sbindir="/opt/${install_name}/bin"
2395	tmp_sysconfdir="/etc/opt"
2396	tmp_mandir="/opt/${install_name}/man"
2397	tmp_localstatedir="/var/opt/${install_name}"
2398	elif test "x${prefix}" = xUSR
2399	then
2400	tmp_sbindir="/usr/sbin"
2401	tmp_sysconfdir="/etc"
2402	tmp_mandir="/usr/share/man"
2403	tmp_localstatedir="/var"
2404	else
2405	tmp_sbindir=`eval echo ${sbindir}`
2406	tmp_sysconfdir=`eval echo ${sysconfdir}`
2407	tmp_mandir=`eval echo ${mandir}`
2408	tmp_localstatedir=`eval echo ${localstatedir}`
2409	fi
2410	else
2411	prefix=""
2412	if test "x${ac_exec_prefix_set}" = xyes
2413	then
2414	tmp_sbindir=`eval echo ${sbindir}`
2415	else
2416	tmp_sbindir="/usr/local/sbin"
2417	fi
2418	tmp_sysconfdir="/etc"
2419	# share/man -> man (FHS) 11.10.2002
2420	tmp_mandir="/usr/local/man"
2421	tmp_localstatedir="/var"
2422	fi
2423
2424
2425	if test "x${ac_sbindir_set}" = xyes
2426	then
2427	:
2428	else
2429	sbindir=`eval echo ${tmp_sbindir}`
2430	fi
2431
2432
2433	if test "x${ac_sysconfdir_set}" = xyes
2434	then
2435	:
2436	else
2437	sysconfdir=`eval echo ${tmp_sysconfdir}`
2438	fi
2439
2440	if test "x${ac_mandir_set}" = xyes
2441	then
2442	:
2443	else
2444	mandir=`eval echo ${tmp_mandir}`
2445	fi
2446
2447	if test "x${ac_localstatedir_set}" = xyes
2448	then
2449	:
2450	else
2451	localstatedir=`eval echo ${tmp_localstatedir}`
2452	fi
2453
2454
2455
2456	AC_ARG_WITH(config-file,
2457	[ --with-config-file=FILE configuration file [[/etc/{install_name}rc]]],
2458	[
2459	myconffile="${withval}"
2460	changequote(<<, >>)dnl
2461	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
2462	sysconfdir=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
2463	myrpmconffile="${tmp}"
2464	changequote([, ])dnl
2465	],
2466	[
2467	myconffile="${sysconfdir}/${install_name}rc"
2468	myrpmconffile="${myconffile}"
2469	]
2470	)
2471	AC_DEFINE_UNQUOTED(DEFAULT_CONFIGFILE, _("${myconffile}") )
2472	AC_SUBST(myconffile)
2473	AC_SUBST(myrpmconffile)
2474
2475	AC_ARG_WITH(log-file,
2476	[ --with-log-file=FILE path of log file [[/var/log/{install_name}_log]]],
2477	[
2478	mylogfile="$withval"
2479	changequote(<<, >>)dnl
2480	mylogdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
2481	changequote([, ])dnl
2482	],
2483	[
2484	if test "x${mytclient}" = "x-DSH_WITH_SERVER"; then
2485	mylogfile="${localstatedir}/log/${install_name}/${install_name}_log"
2486	mylogdir="${localstatedir}/log/${install_name}"
2487	else
2488	mylogfile="${localstatedir}/log/${install_name}_log"
2489	mylogdir="${localstatedir}/log"
2490	fi
2491	]
2492	)
2493	AC_DEFINE_UNQUOTED(DEFAULT_ERRFILE, _("${mylogfile}") )
2494	AC_DEFINE_UNQUOTED(DEFAULT_LOGDIR, _("${mylogdir}") )
2495	AC_SUBST(mylogfile)
2496	AC_SUBST(mylogdir)
2497
2498	AC_ARG_WITH(pid-file,
2499	[ --with-pid-file=FILE set path of pid file [[/var/run/{install_name}.pid]]],
2500	[
2501	mylockfile="$withval"
2502	changequote(<<, >>)dnl
2503	mylockdir=`echo ${withval} \| sed 's%/[^/][^/]*$%%'`
2504	changequote([, ])dnl
2505	],
2506	[
2507	mylockfile="${localstatedir}/run/${install_name}.pid"
2508	mylockdir="${localstatedir}/run"
2509	]
2510	)
2511	AC_DEFINE_UNQUOTED(DEFAULT_ERRLOCK, _("${mylockfile}") )
2512	AC_DEFINE_UNQUOTED(DEFAULT_PIDDIR, _("${mylockdir}") )
2513	AC_SUBST(mylockfile)
2514	AC_SUBST(mylockdir)
2515
2516	AC_ARG_WITH(state-dir,
2517	[ --with-state-dir=PFX set state data directory [[/var/lib/{install_name}]]],
2518	[
2519	mydataroot="$withval"
2520	],
2521	[
2522	mydataroot="${localstatedir}/lib/${install_name}"
2523	]
2524	)
2525	AC_ARG_WITH(data-file,
2526	[ --with-data-file=FILE set path of data file],
2527	[
2528	mydatafile="$withval"
2529	changequote(<<, >>)dnl
2530	tmp=`echo ${withval} \| sed 's%^REQ_FROM_SERVER%%'`
2531	mydataroot=`echo ${tmp} \| sed 's%/[^/][^/]*$%%'`
2532	myrpmdatafile="${tmp}"
2533	changequote([, ])dnl
2534	if test x"${tmp}" = x
2535	then
2536	echo "No local path in data file ${withval}"
2537	echo "This will not work for initializing the database."
2538	if test x"${withval}" = xREQ_FROM_SERVER
2539	then
2540	echo "It should be REQ_FROM_SERVER/some/local/path"
2541	fi
2542	AC_MSG_ERROR([Option --with-data-file=FILE used with invalid path ${withval}.])
2543	fi
2544	],
2545	[
2546	mydatafile="${mydataroot}/${install_name}_file"
2547	myrpmdatafile="${mydatafile}"
2548	])
2549	AC_DEFINE_UNQUOTED(DEFAULT_DATA_FILE, _("${mydatafile}") )
2550	AC_SUBST(mydatafile)
2551	AC_SUBST(myrpmdatafile)
2552
2553	AC_DEFINE_UNQUOTED(DEFAULT_DATAROOT, _("${mydataroot}") )
2554	AC_SUBST(mydataroot)
2555
2556	AC_DEFINE_UNQUOTED(DEFAULT_QDIR, _("${mydataroot}/.quarantine") )
2557	AC_SUBST(myqdir)
2558
2559
2560	AC_ARG_WITH(html-file,
2561	[ --with-html-file=FILE set path of html file,],
2562	[
2563	myhtmlfile="$withval"
2564	],
2565	[
2566	myhtmlfile="${mylogdir}/${install_name}.html"
2567	])
2568	AC_DEFINE_UNQUOTED(DEFAULT_HTML_FILE, _("${myhtmlfile}") )
2569	AC_SUBST(myhtmlfile)
2570
2571
2572	mydefargs=$ac_configure_args
2573	# if test -z "`echo "$mydefargs" \| grep "\-\-enable\-static" 2> /dev/null`"
2574	# then
2575	# mydefargs="--enable-static $mydefargs"
2576	# fi
2577	if test -z "`echo "$mydefargs" \| grep "\-\-enable\-base" 2> /dev/null`"
2578	then
2579	mydefargs="--enable-base=${mykeybase} $mydefargs"
2580	fi
2581	AC_SUBST(mydefargs)
2582
2583
2584	AC_DEFINE_UNQUOTED(SH_INSTALL_DIR, _("${sbindir}"))
2585	AC_DEFINE_UNQUOTED(SH_INSTALL_PATH, _("${sbindir}/${install_name}"))
2586	AC_DEFINE_UNQUOTED(SH_INSTALL_NAME, _("${install_name}"))
2587
2588	AC_CONFIG_HEADER(config.h)
2589
2590	AC_OUTPUT(
2591	[
2592	Makefile
2593	samhain-install.sh
2594	init/samhain.startLSB
2595	init/samhain.startLinux
2596	init/samhain.startGentoo
2597	init/samhain.startFreeBSD
2598	init/samhain.startSolaris
2599	init/samhain.startHPUX
2600	init/samhain.startIRIX
2601	init/samhain.startMACOSX
2602	samhain.spec
2603	rules.deb
2604	rules.deb-light
2605	hp_ux.psf
2606	scripts/samhain.spec
2607	scripts/redhat_i386.client.spec
2608	scripts/samhain.ebuild
2609	scripts/samhain.ebuild-light
2610	scripts/samhainadmin.pl
2611	scripts/yuleadmin.pl
2612	scripts/check_samhain.pl
2613	deploy.sh
2614	],
2615	[
2616	echo timestamp > stamp-h
2617	chmod +x samhain-install.sh
2618	chmod +x scripts/samhainadmin.pl
2619	chmod +x scripts/yuleadmin.pl
2620	chmod +x scripts/check_samhain.pl
2621	]
2622	)
2623
2624	chmod +x deploy.sh
2625
2626	if test "x${cross_compiling}" = xyes
2627	then
2628
2629	echo "--------------------------------------------------------------"
2630	echo
2631	echo "You are using a cross-compiler. The following system dependent"
2632	echo "values may have been set to default values that may be"
2633	echo "incorrect for your target system: "
2634	echo
2635	echo "ac_cv_c_bigendian bigendian byte order ${ac_cv_c_bigendian}"
2636	echo "ac_cv_c_long_double long double exists ${ac_cv_c_long_double}"
2637	echo "ac_cv_sizeof_char_p size of pointer to char ${ac_cv_sizeof_char_p}"
2638	echo "ac_cv_sizeof_char_p size of size_t ${ac_cv_sizeof_size_t}"
2639	echo "ac_cv_sizeof_unsigned_int size of unsigned int ${ac_cv_sizeof_unsigned_int}"
2640	echo "ac_cv_sizeof_unsigned_long size of unsigned long ${ac_cv_sizeof_unsigned_long}"
2641	echo "ac_cv_sizeof_unsigned_short size of unsigned short ${ac_cv_sizeof_unsigned_short}"
2642	echo
2643	echo "If these values are incorrect, change them in the file "
2644	echo "config.cache and run configure again."
2645	echo
2646	echo "--------------------------------------------------------------"
2647
2648	fi
2649
2650	if test x${silent} != xyes
2651	then
2652
2653	# A=`eval echo ${sbindir}` ; A=`eval echo ${A}`
2654	# B=`eval echo ${myconffile}` ; B=`eval echo ${B}`
2655	# C=`eval echo ${mandir}` ; C=`eval echo ${C}`
2656	# D=`eval echo ${mylockfile}` ; D=`eval echo ${D}`
2657	# E=`eval echo ${mylogfile}` ; E=`eval echo ${E}`
2658	# F=`eval echo ${mydataroot}` ; F=`eval echo ${F}`
2659
2660	echo
2661	echo " samhain has been configured as follows:"
2662	echo " System binaries: ${sbindir}"
2663	echo " Configuration file: ${myconffile}"
2664	echo " Manual pages: ${mandir}"
2665	echo " Data: ${mydataroot}"
2666	echo " PID file: ${mylockfile}"
2667	echo " Log file: ${mylogfile}"
2668	echo " Base key: ${mykeybase}"
2669	if test x"$mykeyid" != x
2670	then
2671	echo " target GPG/PGP key: ${mykeyid}"
2672	fi
2673	echo
2674	if test x"$mytclient" = x"-DSH_WITH_SERVER"
2675	then
2676	echo " Selected rc file: yulerc"
2677	else
2678	echo " Selected rc file: samhainrc.${selectconfig}"
2679	fi
2680
2681	fi
2682

Note: See TracBrowser for help on using the repository browser.

Download in other formats: