NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
91f241b8e9
kumquat-buildroot/package/libmodsecurity/libmodsecurity.mk

66 lines
1.9 KiB
Makefile
Raw Normal View History

package/libmodsecurity: new package The dependency on !BR2_STATIC_LIBS is due to missing Libs.private in the libmodconfig pkg-config file making builds that statically link against libmodsecurity fail. Lua is disabled due to using the host libraries. Yajl is disabled as enabling it forces the tests to be built. These tests have a hard dependency on libmodsecurity.a which is not built when --disable-static is used in the configuration. There is no flag to disable these tests. Signed-off-by: Frank Vanbever <frank.vanbever@essensium.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-30 10:56:28 +01:00
################################################################################
#
# libmodsecurity
#
################################################################################
package/libmodsecurity: security bump to version 3.0.6 Support configurable limit on depth of JSON parsing (possible DoS issue) https://github.com/SpiderLabs/ModSecurity/releases/tag/v3.0.6 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-11-25 08:10:23 +01:00
LIBMODSECURITY_VERSION = 3.0.6
package/libmodsecurity: new package The dependency on !BR2_STATIC_LIBS is due to missing Libs.private in the libmodconfig pkg-config file making builds that statically link against libmodsecurity fail. Lua is disabled due to using the host libraries. Yajl is disabled as enabling it forces the tests to be built. These tests have a hard dependency on libmodsecurity.a which is not built when --disable-static is used in the configuration. There is no flag to disable these tests. Signed-off-by: Frank Vanbever <frank.vanbever@essensium.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-30 10:56:28 +01:00
LIBMODSECURITY_SOURCE = modsecurity-v$(LIBMODSECURITY_VERSION).tar.gz
LIBMODSECURITY_SITE = https://github.com/SpiderLabs/ModSecurity/releases/download/v$(LIBMODSECURITY_VERSION)
LIBMODSECURITY_INSTALL_STAGING = YES
LIBMODSECURITY_LICENSE = Apache-2.0
LIBMODSECURITY_LICENSE_FILES = LICENSE
package/libmodsecurity: add CPE variables cpe:2.3:a:trustwave:modsecurity is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Atrustwave%3Amodsecurity Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2021-03-06 10:41:36 +01:00
LIBMODSECURITY_CPE_ID_VENDOR = trustwave
LIBMODSECURITY_CPE_ID_PRODUCT = modsecurity
package/libmodsecurity: fix build with libmaxminddb Build with libmaxminddb is broken since bump to version 3.0.5 in commit 464d0be380c84ac7c3f1684e49153c3868280d7e because of https://github.com/SpiderLabs/ModSecurity/commit/785958f9b5089b918c7d054cbcc2fe4a3c7b3788 So revert this commit until upstream answer to comment to https://github.com/SpiderLabs/ModSecurity/issues/2131 Reverting this commit requires autoreconfiguring, which itself causes lots of warnings as configure.ac queries git to know the version of various parts of libmodsecurity. However, it turns out that those versions are only used to be displayed in the output of the configure script, which is quite useless. The only one that is referenced elsewhere is LIBINJECTION_VERSION, but it's in fact a different thing: it is defined by others/libinjection/src/libinjection_sqli.c. The only variable that was AC_SUBST() and therefore visible elsewhere was MSC_GIT_VERSION, but it is not used anywhere in the code base, except in the configure script itself. Note that one patch is 0001 and the other 0003, because there was already a 0002 patch. Fixes: - http://autobuild.buildroot.org/results/4c639fd967faa06f8ae362bacd38f3409c47267c Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2021-08-01 23:51:58 +02:00
# We're patching build/libmaxmind.m4
LIBMODSECURITY_AUTORECONF = YES
package/libmodsecurity: new package The dependency on !BR2_STATIC_LIBS is due to missing Libs.private in the libmodconfig pkg-config file making builds that statically link against libmodsecurity fail. Lua is disabled due to using the host libraries. Yajl is disabled as enabling it forces the tests to be built. These tests have a hard dependency on libmodsecurity.a which is not built when --disable-static is used in the configuration. There is no flag to disable these tests. Signed-off-by: Frank Vanbever <frank.vanbever@essensium.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-30 10:56:28 +01:00
LIBMODSECURITY_DEPENDENCIES = pcre
LIBMODSECURITY_CONF_OPTS = \
package/libmodsecurity: point to staging pcre-config The libmodsecurity build system uses the file installed on the host if not explicitly pointed to pcre-config in the staging dir. Fixes: - http://autobuild.buildroot.net/results/f936ad05bca4bb776917306700750ba6d2498ef0 + similar failures for other architectures Signed-off-by: Frank Vanbever <frank.vanbever@essensium.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-01-31 16:42:57 +01:00
--with-pcre="$(STAGING_DIR)/usr/bin/pcre-config" \
package/libmodsecurity: new package The dependency on !BR2_STATIC_LIBS is due to missing Libs.private in the libmodconfig pkg-config file making builds that statically link against libmodsecurity fail. Lua is disabled due to using the host libraries. Yajl is disabled as enabling it forces the tests to be built. These tests have a hard dependency on libmodsecurity.a which is not built when --disable-static is used in the configuration. There is no flag to disable these tests. Signed-off-by: Frank Vanbever <frank.vanbever@essensium.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-30 10:56:28 +01:00
--disable-examples \
--without-lmdb \
--without-ssdeep \
--without-lua \
--without-yajl
ifeq ($(BR2_PACKAGE_LIBXML2),y)
LIBMODSECURITY_DEPENDENCIES += libxml2
LIBMODSECURITY_CONF_OPTS += --with-libxml="$(STAGING_DIR)/usr/bin/xml2-config"
else
LIBMODSECURITY_CONF_OPTS += --without-libxml
endif
ifeq ($(BR2_PACKAGE_LIBCURL),y)
LIBMODSECURITY_DEPENDENCIES += libcurl
LIBMODSECURITY_CONF_OPTS += --with-curl="$(STAGING_DIR)/usr/bin/curl-config"
else
LIBMODSECURITY_CONF_OPTS += --without-curl
endif
ifeq ($(BR2_PACKAGE_GEOIP),y)
LIBMODSECURITY_DEPENDENCIES += geoip
LIBMODSECURITY_CONF_OPTS += --with-geoip
else
LIBMODSECURITY_CONF_OPTS += --without-geoip
endif
ifeq ($(BR2_PACKAGE_LIBMAXMINDDB),y)
LIBMODSECURITY_DEPENDENCIES += libmaxminddb
LIBMODSECURITY_CONF_OPTS += --with-maxmind
else
LIBMODSECURITY_CONF_OPTS += --without-maxmind
endif
package/libmodsecurity: disable -fPIC on m68k_cf This package has -fPIC gcc option set by default but we can't use it on m68k_cf since it doesn't support it throwing a gcc build failure. So let's disable it by passing -fno-PIC. Fixes: http://autobuild.buildroot.net/results/b92980a563fe7ee331e70f288ce041be0bf29d40/ Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2021-08-22 01:06:13 +02:00
LIBMODSECURITY_CXXFLAGS = $(TARGET_CXXFLAGS)
# m68k_cf can't use -fPIC that libmodsecurity forces to use, so we need
# to disable it to avoid a build failure.
ifeq ($(BR2_m68k_cf),y)
LIBMODSECURITY_CXXFLAGS += -fno-PIC
endif
LIBMODSECURITY_CONF_OPTS += CXXFLAGS="$(LIBMODSECURITY_CXXFLAGS)"
package/libmodsecurity: new package The dependency on !BR2_STATIC_LIBS is due to missing Libs.private in the libmodconfig pkg-config file making builds that statically link against libmodsecurity fail. Lua is disabled due to using the host libraries. Yajl is disabled as enabling it forces the tests to be built. These tests have a hard dependency on libmodsecurity.a which is not built when --disable-static is used in the configuration. There is no flag to disable these tests. Signed-off-by: Frank Vanbever <frank.vanbever@essensium.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-01-30 10:56:28 +01:00
$(eval $(autotools-package))
Reference in New Issue Copy Permalink