LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
11750 Commits
1 Branch
46 MiB
Tree: f334bc7181
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'f334bc7181'
${ noResults }
openwrt-packages-dist/utils/yara/Makefile

71 lines
2.1 KiB
Raw Normal View History

yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
​
​
​
​
​
yara: bump to 3.7.1 Package upgraded to the latest 3.7.1 release. Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
7 years ago
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
yara: bump to 3.7.1 Package upgraded to the latest 3.7.1 release. Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
7 years ago
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
​
​
​
​
​
​
​
​
​
yara: magic module dependancy fix Libmagic dependency replaced with File so Yara magic module can make use of magic patterns. magic.mgc is installed on the target only when the File package is selected. Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
7 years ago
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
​
​
​
​
​
​
yara: add dotnet module Dotnet module added as a compile time option. The dotnet module allows you to create more fine-grained rules for .NET files by using attributes and features of the .NET file format. http://yara.readthedocs.io/en/latest/modules/dotnet.html Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
7 years ago
yara: add missing config string Missing CONFIG string added at the beginning of Magic and Cuckoo configure variables. Signed-off-by: Ashkan Jazayeri <ashkan@jazayeri.net>
7 years ago
​
yara: add package YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families based on textual or binary patterns. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
8 years ago
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
 
  1. #

  2. # Copyright (C) 2017 OpenWrt.org

  3. #

  4. # This is free software, licensed under the GNU General Public License v2.

  5. # See /LICENSE for more information.

  6. #

  7. 

  8. include $(TOPDIR)/rules.mk
  9. 

  10. PKG_NAME:=yara
  11. PKG_VERSION:=3.7.1
  12. PKG_RELEASE:=1
  13. PKG_LICENSE:=BSD-3-Clause
  14. 

  15. PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
  16. PKG_SOURCE_URL:=https://github.com/VirusTotal/yara/archive/v$(PKG_VERSION)/
  17. PKG_HASH:=df077a29b0fffbf4e7c575f838a440f42d09b215fcb3971e6fb6360318a64892
  18. 

  19. PKG_FIXUP:=autoreconf
  20. PKG_BUILD_PARALLEL:=1
  21. PKG_INSTALL:=1
  22. 

  23. include $(INCLUDE_DIR)/package.mk
  24. 

  25. define Package/yara
  26.   SECTION:=utils
  27.   CATEGORY:=Utilities
  28.   TITLE:=Pattern matching swiss knife for malware researchers
  29.   URL:=http://virustotal.github.io/yara/
  30.   MAINTAINER:=Marko Ratkaj <marko.ratkaj@sartura.hr>
  31.   DEPENDS:= +libopenssl
  32.   DEPENDS+= +YARA_module_magic:file
  33.   DEPENDS+= +YARA_module_cuckoo:jansson
  34.   MENU:=1
  35. endef
  36. 

  37. define Package/yara/description
  38.   YARA is a tool aimed at (but not limited to) helping malware researchers
  39.   to identify and classify malware samples. With YARA you can create
  40.   descriptions of malware families based on textual or binary patterns.
  41. endef
  42. 

  43. CONFIGURE_ARGS += \

  44. 	$(if $(CONFIG_YARA_module_dotnet),--enable,--disable)-dotnet \

  45. 	$(if $(CONFIG_YARA_module_magic),--enable,--disable)-magic \

  46. 	$(if $(CONFIG_YARA_module_cuckoo),--enable,--disable)-cuckoo
  47. 

  48. define Package/yara/config
  49. 	source "$(SOURCE)/Config.in"
  50. endef
  51. 

  52. define Build/InstallDev
  53. 	$(INSTALL_DIR) $(1)/usr/include
  54. 	$(CP) $(PKG_INSTALL_DIR)/usr/include/yara.h $(1)/usr/include
  55. 	$(INSTALL_DIR) $(1)/usr/include/yara
  56. 	$(CP) $(PKG_INSTALL_DIR)/usr/include/yara/* $(1)/usr/include/yara
  57. 	$(INSTALL_DIR) $(1)/usr/lib
  58. 	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libyara.{a,la,so*} $(1)/usr/lib/
  59. 	$(INSTALL_DIR) $(1)/usr/lib/pkgconfig
  60. 	$(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/yara.pc $(1)/usr/lib/pkgconfig
  61. endef
  62. 

  63. define Package/yara/install
  64. 	$(INSTALL_DIR) $(1)/usr/bin
  65. 	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/yara $(1)/usr/bin/
  66. 	$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/yarac $(1)/usr/bin/
  67. 	$(INSTALL_DIR) $(1)/usr/lib/
  68. 	$(CP) $(PKG_INSTALL_DIR)/usr/lib/libyara.so* $(1)/usr/lib/
  69. endef
  70. 

  71. $(eval $(call BuildPackage,yara))