LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
14786 Commits
1 Branch
46 MiB
Tree: e45008f6a7
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'e45008f6a7'
${ noResults }
openwrt-packages-dist/utils/yara/Makefile

72 lines
2.2 KiB
Raw Normal View History

yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
​
​
​
​
​
yara: update to version 3.9.0 Changes: Remove merged patch for OpenSSL THREADID Add PKG_CPE_ID Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
6 years ago
​
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
yara: Update to 3.8.1 Switched URL to codeload. The previous redirects to this one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
6 years ago
yara: update to version 3.9.0 Changes: Remove merged patch for OpenSSL THREADID Add PKG_CPE_ID Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
6 years ago
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
yara: update to version 3.9.0 Changes: Remove merged patch for OpenSSL THREADID Add PKG_CPE_ID Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
6 years ago
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
​
​
​
​
​
​
​
​
yara: magic module dependancy fix Libmagic dependency replaced with File so Yara magic module can make use of magic patterns. magic.mgc is installed on the target only when the File package is selected. Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
7 years ago
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
​
​
​
​
​
​
yara: add dotnet module Dotnet module added as a compile time option. The dotnet module allows you to create more fine-grained rules for .NET files by using attributes and features of the .NET file format. http://yara.readthedocs.io/en/latest/modules/dotnet.html Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
7 years ago
yara: add missing config string Missing CONFIG string added at the beginning of Magic and Cuckoo configure variables. Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
7 years ago
​
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
 
  1. #

  2. # Copyright (C) 2017 OpenWrt.org

  3. #

  4. # This is free software, licensed under the GNU General Public License v2.

  5. # See /LICENSE for more information.

  6. #

  7. 

  8. include $(TOPDIR)/rules.mk
  9. 

  10. PKG_NAME:=yara
  11. PKG_VERSION:=3.9.0
  12. PKG_RELEASE:=1
  13. PKG_LICENSE:=BSD-3-Clause
  14. 

  15. PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
  16. PKG_SOURCE_URL:=https://codeload.github.com/VirusTotal/yara/tar.gz/v$(PKG_VERSION)?
  17. PKG_HASH:=ebe7fab0abadb90449a62afbd24e196e18b177efe71ffd8bf22df95c5386f64d
  18. 

  19. PKG_CPE_ID:=cpe:/a:virustotal:yara
  20. PKG_FIXUP:=autoreconf
  21. PKG_BUILD_PARALLEL:=1
  22. PKG_INSTALL:=1
  23. 

  24. include $(INCLUDE_DIR)/package.mk
  25. 

  26. define Package/yara
  27.   SECTION:=utils
  28.   CATEGORY:=Utilities
  29.   TITLE:=Pattern matching swiss knife for malware researchers
  30.   URL:=http://virustotal.github.io/yara/
  31.   MAINTAINER:=Marko Ratkaj <marko.ratkaj@sartura.hr>
  32.   DEPENDS:= +libopenssl
  33.   DEPENDS+= +YARA_module_magic:file
  34.   DEPENDS+= +YARA_module_cuckoo:jansson
  35.   MENU:=1
  36. endef
  37. 

  38. define Package/yara/description
  39.   YARA is a tool aimed at (but not limited to) helping malware researchers
  40.   to identify and classify malware samples. With YARA you can create
  41.   descriptions of malware families based on textual or binary patterns.
  42. endef
  43. 

  44. CONFIGURE_ARGS += \

  45. 	$(if $(CONFIG_YARA_module_dotnet),--enable,--disable)-dotnet \

  46. 	$(if $(CONFIG_YARA_module_magic),--enable,--disable)-magic \

  47. 	$(if $(CONFIG_YARA_module_cuckoo),--enable,--disable)-cuckoo
  48. 

  49. define Package/yara/config
  50. 	source "$(SOURCE)/Config.in"
  51. endef
  52. 

  53. define Build/InstallDev
  54. 	$(INSTALL_DIR) $(1)/usr/include
  55. 	$(CP) $(PKG_INSTALL_DIR)/usr/include/yara.h $(1)/usr/include
  56. 	$(INSTALL_DIR) $(1)/usr/include/yara
  57. 	$(CP) $(PKG_INSTALL_DIR)/usr/include/yara/* $(1)/usr/include/yara
  58. 	$(INSTALL_DIR) $(1)/usr/lib
  59. 	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libyara.{a,la,so*} $(1)/usr/lib/
  60. 	$(INSTALL_DIR) $(1)/usr/lib/pkgconfig
  61. 	$(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/yara.pc $(1)/usr/lib/pkgconfig
  62. endef
  63. 

  64. define Package/yara/install
  65. 	$(INSTALL_DIR) $(1)/usr/bin
  66. 	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/yara $(1)/usr/bin/
  67. 	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/yarac $(1)/usr/bin/
  68. 	$(INSTALL_DIR) $(1)/usr/lib/
  69. 	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libyara.so* $(1)/usr/lib/
  70. endef
  71. 

  72. $(eval $(call BuildPackage,yara))