pyrox.dev
1{ lib, stdenv, fetchurl, which }:
2
3stdenv.mkDerivation rec {
4 pname = "ossec-client";
5 version = "2.6";
6
7 src = fetchurl {
8 url = "https://www.ossec.net/files/ossec-hids-${version}.tar.gz";
9 sha256 = "0k1b59wdv9h50gbyy88qw3cnpdm8hv0nrl0znm92h9a11i5b39ip";
10 };
11
12 buildInputs = [ which ];
13
14 patches = [ ./no-root.patch ];
15
16 # Workaround build failure on -fno-common toolchains like upstream
17 # gcc-10. Otherwise build fails as:
18 # ld: src/common/mgmt/pint-worker-external.po:(.data.rel.local+0x0): multiple definition of
19 # `PINT_worker_external_impl'; src/common/mgmt/pint-mgmt.po:(.bss+0x20): first defined here
20 env.NIX_CFLAGS_COMPILE = "-fcommon";
21
22 buildPhase = ''
23 echo "en
24
25agent
26$out
27no
28127.0.0.1
29yes
30yes
31yes
32
33
34" | ./install.sh
35 '';
36
37 meta = with lib; {
38 description = "Open source host-based instrusion detection system";
39 homepage = "https://www.ossec.net";
40 license = licenses.gpl2;
41 maintainers = with maintainers; [ ];
42 platforms = platforms.linux;
43 };
44}
45