diff options
author | John Darrington <jmd@gnu.org> | 2016-09-07 18:36:56 +0200 |
---|---|---|
committer | John Darrington <jmd@gnu.org> | 2016-09-07 18:41:36 +0200 |
commit | c4947d0e1b3c5c46049943504a1a3975fbe46be6 (patch) | |
tree | 7293a04ddbcc8bbd75b710195c5938ed020cdb8c | |
parent | f07f7d86145c10539709ca43cb0c201b6f935005 (diff) | |
download | guix-c4947d0e1b3c5c46049943504a1a3975fbe46be6.tar.gz |
gnu: Add tcp-wrappers.
* gnu/packages/networking.scm (tcp-wrappers): New variable.
-rw-r--r-- | gnu/packages/networking.scm | 78 |
1 files changed, 78 insertions, 0 deletions
diff --git a/gnu/packages/networking.scm b/gnu/packages/networking.scm index 07f0b9d957..c4edbc319a 100644 --- a/gnu/packages/networking.scm +++ b/gnu/packages/networking.scm @@ -135,6 +135,84 @@ establish a relatively secure environment (su and chroot) for running client or server shell scripts with network connections.") (license license:gpl2))) +(define-public tcp-wrappers + (package + (name "tcp-wrappers") + (version "7.6") + (source (origin + (method url-fetch) + (uri (string-append + "ftp://ftp.porcupine.org/pub/security/tcp_wrappers_" + version ".tar.gz")) + (sha256 + (base32 + "0p9ilj4v96q32klavx0phw9va21fjp8vpk11nbh6v2ppxnnxfhwm")))) + (build-system gnu-build-system) + (arguments + `(#:phases + (modify-phases %standard-phases + (delete 'configure) ; there is no configure script + (delete 'check) ; there are no tests + (replace 'build + (lambda _ + (chmod "." #o755) + ;; Upstream doesn't generate a shared library. So we have to do it. + (setenv "CC" "gcc -fno-builtin -fPIC") + (substitute* "Makefile" + (("^(all[^\n]*)" line) (string-append line " libwrap.so\n +libwrap.so: $(LIB_OBJ)\n +\tgcc -shared $^ -o $@\n"))) + ;; Deal with some gcc breakage. + (substitute* "percent_m.c" + (("extern char .sys_errlist.*;") "")) + (substitute* "scaffold.c" + (("extern char .malloc.*;") "")) + ;; This, believe it or not, is the recommended way to build! + (zero? (system* "make" "REAL_DAEMON_DIR=/etc" "linux")))) + ;; There is no make install stage, so we have to do it ourselves. + (replace 'install + (lambda _ + (let ((out (assoc-ref %outputs "out")) + (man-pages `("hosts_access.3" + "hosts_access.5" + "hosts_options.5" + "tcpd.8" + "tcpdchk.8" + "tcpdmatch.8")) + (libs `("libwrap.a" + "libwrap.so")) + (headers `("tcpd.h")) + (bins `("safe_finger" + "tcpd" + "tcpdchk" + "tcpdmatch" + "try-from"))) + (for-each + (lambda (x) + (install-file x (string-append out "/include"))) + headers) + (for-each + (lambda (x) + (install-file x (string-append out "/share/man/man" + (string-take-right x 1)))) + man-pages) + (for-each + (lambda (x) + (install-file x (string-append out "/lib/"))) + libs) + (for-each + (lambda (x) + (install-file x (string-append out "/bin/"))) + bins))))))) + (home-page "http://www.porcupine.org") + (synopsis "Monitor and filter incoming requests for network services") + (description "With this package you can monitor and filter incoming requests for +network services. It includes a library which may be used by daemons to +transparently check connection attempts against an access control list.") + (license (license:non-copyleft "file://DISCLAIMER" + "See the file DISCLAIMER in the distribution.")))) + + (define-public zeromq (package (name "zeromq") |