mirror
/
openwrt-packages
mirror of https://git.openwrt.org/feed/packages.git
1
0
Fork 0
Code Releases Activity
openwrt-packages/utils/yara/Makefile

72 lines
2.1 KiB
Makefile
Raw Normal View History

yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2017-04-18 15:35:29 +02:00
#
# Copyright (C) 2017 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=yara
yara: Update to 3.8.1 Switched URL to codeload. The previous redirects to this one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 05:07:01 +02:00
PKG_VERSION:=3.8.1
yara: Fix compile without deprecated OpenSSL APIs Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-09 00:09:36 +01:00
PKG_RELEASE:=2
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2017-04-18 15:35:29 +02:00
PKG_LICENSE:=BSD-3-Clause
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
yara: Update to 3.8.1 Switched URL to codeload. The previous redirects to this one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-08-21 05:07:01 +02:00
PKG_SOURCE_URL:=https://codeload.github.com/VirusTotal/yara/tar.gz/v$(PKG_VERSION)?
PKG_HASH:=283527711269354d3c60e2705f7f74b1f769d2d35ddba8f7f9ce97d0fd5cb1ca
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2017-04-18 15:35:29 +02:00
PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
PKG_INSTALL:=1
include $(INCLUDE_DIR)/package.mk
define Package/yara
SECTION:=utils
CATEGORY:=Utilities
TITLE:=Pattern matching swiss knife for malware researchers
URL:=http://virustotal.github.io/yara/
MAINTAINER:=Marko Ratkaj <marko.ratkaj@sartura.hr>
DEPENDS:= +libopenssl
yara: magic module dependancy fix Libmagic dependency replaced with File so Yara magic module can make use of magic patterns. magic.mgc is installed on the target only when the File package is selected. Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
2018-06-05 19:59:00 +02:00
DEPENDS+= +YARA_module_magic:file
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2017-04-18 15:35:29 +02:00
DEPENDS+= +YARA_module_cuckoo:jansson
MENU:=1
endef
define Package/yara/description
YARA is a tool aimed at (but not limited to) helping malware researchers
to identify and classify malware samples. With YARA you can create
descriptions of malware families based on textual or binary patterns.
endef
CONFIGURE_ARGS += \
yara: add dotnet module Dotnet module added as a compile time option. The dotnet module allows you to create more fine-grained rules for .NET files by using attributes and features of the .NET file format. http://yara.readthedocs.io/en/latest/modules/dotnet.html Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
2018-06-05 20:01:14 +02:00
$(if $(CONFIG_YARA_module_dotnet),--enable,--disable)-dotnet \
yara: add missing config string Missing CONFIG string added at the beginning of Magic and Cuckoo configure variables. Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
2018-06-05 19:56:42 +02:00
$(if $(CONFIG_YARA_module_magic),--enable,--disable)-magic \
$(if $(CONFIG_YARA_module_cuckoo),--enable,--disable)-cuckoo
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2017-04-18 15:35:29 +02:00
define Package/yara/config
source "$(SOURCE)/Config.in"
endef
define Build/InstallDev
$(INSTALL_DIR) $(1)/usr/include
$(CP) $(PKG_INSTALL_DIR)/usr/include/yara.h $(1)/usr/include
$(INSTALL_DIR) $(1)/usr/include/yara
$(CP) $(PKG_INSTALL_DIR)/usr/include/yara/* $(1)/usr/include/yara
$(INSTALL_DIR) $(1)/usr/lib
$(CP) $(PKG_INSTALL_DIR)/usr/lib/libyara.{a,la,so*} $(1)/usr/lib/
$(INSTALL_DIR) $(1)/usr/lib/pkgconfig
$(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/yara.pc $(1)/usr/lib/pkgconfig
endef
define Package/yara/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/yara $(1)/usr/bin/
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/yarac $(1)/usr/bin/
$(INSTALL_DIR) $(1)/usr/lib/
$(CP) $(PKG_INSTALL_DIR)/usr/lib/libyara.so* $(1)/usr/lib/
endef
$(eval $(call BuildPackage,yara))