From 6080784f5eb8bcae13436b3651726e91110d482e Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Sat, 20 May 2006 21:16:26 +0000
Subject: Adding clamav and havp packages.

Submitted-by: Rajkumar S <raj_AT_linuxense.com>
---
 packages/clamav.inc         |  41 +++++++++++++++++
 packages/clamav.xml         |  24 ++++++++++
 packages/havp.inc           | 107 +++++++++++++++++++++++++++++++++++++++++++
 packages/havp.xml           | 109 ++++++++++++++++++++++++++++++++++++++++++++
 packages/havp_blacklist.xml |  67 +++++++++++++++++++++++++++
 packages/havp_whitelist.xml |  67 +++++++++++++++++++++++++++
 6 files changed, 415 insertions(+)
 create mode 100644 packages/clamav.inc
 create mode 100644 packages/clamav.xml
 create mode 100644 packages/havp.inc
 create mode 100644 packages/havp.xml
 create mode 100644 packages/havp_blacklist.xml
 create mode 100644 packages/havp_whitelist.xml

(limited to 'packages')

diff --git a/packages/clamav.inc b/packages/clamav.inc
new file mode 100644
index 00000000..b63eb984
--- /dev/null
+++ b/packages/clamav.inc
@@ -0,0 +1,41 @@
+<?php
+function sync_package_clamav() {
+	conf_mount_rw();
+	config_lock();
+	global $config;
+	$fd = fopen("/usr/local/etc/freshclam.conf","w");
+	fwrite($fd, "DatabaseDirectory /var/db/clamav\n");
+	fwrite($fd, "UpdateLogFile /var/log/clamav/freshclam.log\n");
+	fwrite($fd, "DatabaseOwner clamav\n");
+	fwrite($fd, "AllowSupplementaryGroups\n");
+	fwrite($fd, "DatabaseMirror database.clamav.net\n");
+	fclose($fd);
+	$cronjob = "*/120   *       *       *       *       root            /usr/bin/nice -n20 /usr/local/bin/freshclam";
+	add_text_to_file("/etc/crontab", $cronjob);
+	conf_mount_ro();
+	config_unlock();
+	mwexec("killall -HUP cron");
+}
+
+function clamav_install_command() {
+	global $config, $g;
+	mwexec ("mkdir -p /var/db/clamav");
+	mwexec ("chown clamav:clamav /var/db/clamav/");
+	mwexec ("chown clamav:clamav /var/log/clamav/");
+	mwexec ("/usr/local/bin/freshclam");
+	sync_package_clamav();
+}
+
+function clamav_deinstall_command() {
+	global $config, $g;
+	conf_mount_rw();
+	unlink_if_exists("/usr/local/etc/rc.d/clamav.sh");
+	unlink_if_exists("/var/db/clamav/daily.cvd");
+	unlink_if_exists("/var/db/clamav/main.cvd");
+	unlink_if_exists("/var/db/clamav");
+	$cronjob = "*/120   *       *       *       *       root            /usr/bin/nice -n20 /usr/local/bin/freshclam";
+	#remove_text_to_file("/etc/crontab", $cronjob);
+	conf_mount_ro();
+}
+
+?>
diff --git a/packages/clamav.xml b/packages/clamav.xml
new file mode 100644
index 00000000..ee390a50
--- /dev/null
+++ b/packages/clamav.xml
@@ -0,0 +1,24 @@
+<packagegui>
+	<name>clamav</name>
+	<version>0.1</version>
+	<title>ClamAV: Settings</title>
+	<include_file>/usr/local/pkg/clamav.inc</include_file>
+
+	<service>
+		<name>clamav</name>
+		<rcfile>/usr/local/etc/rc.d/clamav.sh</rcfile>
+	</service>
+
+    	<additional_files_needed>
+	    <prefix>/usr/local/pkg/</prefix>
+	    <chmod>0755</chmod>
+	    <item>http://agni.linuxense.com/packages/config/clamav.inc</item>
+	</additional_files_needed>
+
+	<custom_php_install_command> clamav_install_command(); </custom_php_install_command>
+	<custom_php_deinstall_command> clamav_deinstall_command(); </custom_php_deinstall_command>
+	<custom_delete_php_command> sync_package_clamav(); </custom_delete_php_command>
+	<custom_php_resync_config_command> sync_package_clamav(); </custom_php_resync_config_command>
+	<custom_add_php_command> sync_package_clamav(); </custom_add_php_command>
+</packagegui>
+
diff --git a/packages/havp.inc b/packages/havp.inc
new file mode 100644
index 00000000..631db0e3
--- /dev/null
+++ b/packages/havp.inc
@@ -0,0 +1,107 @@
+<?php
+function sync_package_havp() {
+	conf_mount_rw();
+	config_lock();
+	global $config, $g;
+	$fd = fopen("/etc/havp.config","w");
+	fwrite($fd, "USER havp\n");
+	fwrite($fd, "GROUP havp\n");
+	fwrite($fd, "ACCESSLOG /var/log/havp/access.log\n");
+	fwrite($fd, "ERRORLOG /var/log/havp/error.log\n");
+	fwrite($fd, "DISPLAYINITIALMESSAGES false\n");
+	fwrite($fd, "ENABLECLAMLIB true\n");
+	fwrite($fd, "CLAMDBDIR /var/db/clamav/\n");
+	fwrite($fd, "ENABLECLAMD false\n");
+	fwrite($fd, "ENABLEFPROT false\n");
+	fwrite($fd, "ENABLEAVG false\n");
+	fwrite($fd, "ENABLEAVESERVER false\n");
+	fwrite($fd, "ENABLESOPHIE false\n");
+	fwrite($fd, "ENABLETROPHIE false\n");
+	fwrite($fd, "ENABLENOD32 false\n");
+	fwrite($fd, "ENABLEAVAST false\n");
+        foreach($config['installedpackages']['havp']['config'] as $tmp) {
+		fwrite($fd,"SERVERNUMBER " . $tmp['servernumber'] . "\n");
+		fwrite($fd,"MAXSERVERS " . $tmp['maxservers'] . "\n");
+		fwrite($fd,"PORT " . $tmp['port'] . "\n");
+		if ($tmp['bind_address'] <> "")
+		  fwrite($fd,"BIND_ADDRESS " . $tmp['bind_address'] . " \n");
+		if ($tmp['source_address'] <> "")
+		  fwrite($fd,"SOURCE_ADDRESS " . $tmp['source_address'] . " \n");
+		if ($tmp['transparent'] == "on"){
+		  fwrite($fd,"TRANSPARENT true\n");
+		}
+		else {
+		  fwrite($fd,"TRANSPARENT false\n");
+		}
+		if ($tmp['range'] == "on"){
+		  fwrite($fd,"RANGE true\n");
+		}
+		else {
+		  fwrite($fd,"RANGE false\n");
+		}
+	}
+	fclose($fd);
+	$start = "/usr/local/sbin/havp &\n";
+	$stop  = "/usr/bin/killall havp\n" .   "sleep 2";
+	write_rcfile(array(
+			   "file" => "havp.sh",
+			   "start" => $start,
+			   "stop" =>  $stop
+			   )
+		     );
+	conf_mount_ro();
+	config_unlock();
+	unlink_if_exists("/usr/local/etc/havp/havp.config");
+	mwexec("ln -sf /etc/havp.config /usr/local/etc/havp/havp.config");
+	mwexec("/usr/local/etc/rc.d/havp.sh stop");
+	mwexec("/usr/local/etc/rc.d/havp.sh start");
+}
+
+function havp_install_command() {
+	global $config, $g;
+	mwexec ("mkdir -p /var/log/havp/");
+	mwexec ("mkdir -p /var/tmp/havp/");
+	mwexec ("mkdir -p /var/run/havp/");
+	mwexec ("chown havp:havp /var/log/havp");
+	mwexec ("chown havp:havp /var/tmp/havp");
+	mwexec ("chown havp:havp /var/run/havp");
+	sync_package_havp();
+}
+
+function havp_deinstall_command() {
+	global $config, $g;
+	conf_mount_rw();
+	unlink_if_exists("/usr/local/etc/rc.d/havp.sh");
+	unlink_if_exists("/usr/local/etc/havp/havp.config");
+	conf_mount_ro();
+}
+function sync_package_havp_whitelist() {
+	global $config;
+	conf_mount_rw();
+	config_lock();
+	$fd = fopen("/usr/local/etc/havp/whitelist","w");
+	if($config['installedpackages']['havpwhitelist']['config'] != "")
+	    foreach($config['installedpackages']['havpwhitelist']['config'] as $tmp) {
+		fwrite($fd, $tmp['url'] . "\n");
+	    }
+	fclose($fd);
+	/* signal a reload of all files */
+	conf_mount_ro();
+	config_unlock();
+}
+
+function sync_package_havp_blacklist() {
+	global $config;
+	conf_mount_rw();
+	config_lock();
+	$fd = fopen("/usr/local/etc/havp/blacklist","w");
+	if($config['installedpackages']['havpblacklist']['config'] != "")
+	    foreach($config['installedpackages']['havpblacklist']['config'] as $tmp) {
+		fwrite($fd, $tmp['url'] . "\n");
+	    }
+	fclose($fd);
+	/* signal a reload of all files */
+	conf_mount_ro();
+	config_unlock();
+}
+?>
\ No newline at end of file
diff --git a/packages/havp.xml b/packages/havp.xml
new file mode 100644
index 00000000..8f278a4a
--- /dev/null
+++ b/packages/havp.xml
@@ -0,0 +1,109 @@
+<packagegui>
+	<name>havp</name>
+	<version>0.1</version>
+	<title>Havp: Settings</title>
+	<include_file>/usr/local/pkg/havp.inc</include_file>
+
+	<menu>
+		<name>HAVP</name>
+		<section>Services</section>
+		<tooltiptext>Modify HAVP settings.</tooltiptext>
+		<url>/pkg_edit.php?xml=havp.xml&amp;act=edit&amp;id=0</url>
+		<configfile>havp.xml</configfile>
+	</menu>
+
+	<service>
+		<name>havp</name>
+		<rcfile>/usr/local/etc/rc.d/havp.sh</rcfile>
+	</service>
+
+	<tabs>
+		<tab>
+			<text>Settings</text>
+			<url>/pkg_edit.php?xml=havp.xml&amp;act=edit&amp;id=0</url>
+			<active/>
+		</tab>
+		<tab>
+			<text>Whitelist</text>
+			<url>/pkg.php?xml=havp_whitelist.xml</url>
+		</tab>
+		<tab>
+			<text>Blacklist</text>
+			<url>/pkg.php?xml=havp_blacklist.xml</url>
+		</tab>
+	</tabs>
+
+    	<additional_files_needed>
+	    <prefix>/usr/local/pkg/</prefix>
+	    <chmod>0755</chmod>
+	    <item>http://agni.linuxense.com/packages/config/havp.inc</item>
+	</additional_files_needed>
+    	<additional_files_needed>
+	    <prefix>/usr/local/pkg/</prefix>
+	    <chmod>0755</chmod>
+	    <item>http://agni.linuxense.com/packages/config/havp_whitelist.xml</item>
+	</additional_files_needed>
+    	<additional_files_needed>
+	    <prefix>/usr/local/pkg/</prefix>
+	    <chmod>0755</chmod>
+	    <item>http://agni.linuxense.com/packages/config/havp_blacklist.xml</item>
+	</additional_files_needed>
+
+	<configpath>['installedpackages']['havp]['config']</configpath>
+
+	<fields>
+		<field>
+			<fielddescr>Server Number</fielddescr>
+			<fieldname>servernumber</fieldname>
+			<description>Specify how many servers (child processes) are simultaneously listening on port PORT for a connection. Minimum value should be the peak requests-per-second expected + 5 for headroom.</description>
+			<type>input</type>
+		</field>		
+		<field>
+			<fielddescr>Max Server Number</fielddescr>
+			<fieldname>maxservers</fieldname>
+			<description>This is the hard limit for concurrent requests processed.</description>
+			<type>input</type>
+		</field>		
+		<field>
+			<fielddescr>Transparent?</fielddescr>
+			<fieldname>transparent</fieldname>
+			<description>Run HAVP as transparent Proxy?</description>
+			<type>checkbox</type>
+			<value>yes</value>
+		</field>		
+		<field>
+			<fielddescr>Port</fielddescr>
+			<fieldname>port</fieldname>
+			<description>Port HAVP is listening on.</description>
+			<type>input</type>
+			<value>8080</value>
+		</field>		
+		<field>
+			<fielddescr>Bind Address</fielddescr>
+			<fieldname>bind_address</fieldname>
+			<description>IP address that HAVP listens on. Leave it empty to bind all addresses.</description>
+			<type>input</type>
+		</field>		
+		<field>
+			<fielddescr>Source Address</fielddescr>
+			<fieldname>source_address</fieldname>
+			<description>IP address used for sending outbound packets. Let it be undefined if you want OS to handle right address.</description>
+			<type>input</type>
+		</field>		
+		<field>
+			<fielddescr>Range Requests</fielddescr>
+			<fieldname>range</fieldname>
+			<description> Allow HTTP Range Requests?</description>
+			<type>checkbox</type>
+			<value>yes</value>
+		</field>		
+	</fields>
+
+	<custom_php_install_command> havp_install_command(); </custom_php_install_command>
+	<custom_php_deinstall_command> havp_deinstall_command(); </custom_php_deinstall_command>
+	<custom_delete_php_command> sync_package_havp(); </custom_delete_php_command>
+	<custom_php_resync_config_command> sync_package_havp(); </custom_php_resync_config_command>
+	<custom_add_php_command> sync_package_havp(); </custom_add_php_command>
+
+</packagegui>
+
diff --git a/packages/havp_blacklist.xml b/packages/havp_blacklist.xml
new file mode 100644
index 00000000..38388628
--- /dev/null
+++ b/packages/havp_blacklist.xml
@@ -0,0 +1,67 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<packagegui>
+	<name>havp-blacklist</name>
+	<version>0.1.0</version>
+	<title>Havp: Blacklist</title>
+	<include_file>/usr/local/pkg/havp.inc</include_file>
+
+	<menu>
+		<name>HAVP Blacklist</name>
+		<tooltiptext></tooltiptext>
+		<section>Services</section>
+		<configfile>havp.xml</configfile>
+	</menu>
+	<tabs>
+		<tab>
+			<text>Settings</text>
+			<url>/pkg_edit.php?xml=havp.xml&amp;act=edit&amp;id=0</url>
+		</tab>
+		<tab>
+			<text>Whitelist</text>
+			<url>/pkg.php?xml=havp_whitelist.xml</url>
+		</tab>
+		<tab>
+			<text>Blacklist</text>
+			<url>/pkg.php?xml=havp_blacklist.xml</url>
+			<active/>
+		</tab>
+	</tabs>
+
+    	<additional_files_needed>
+	    <prefix>/usr/local/pkg/</prefix>
+	    <chmod>0755</chmod>
+	    <item>http://agni.linuxense.com/packages/config/havp.inc</item>
+	</additional_files_needed>
+
+	<configpath>['installedpackages']['havpblacklist']['config']</configpath>
+
+	<adddeleteeditpagefields>
+		<columnitem>
+			<fielddescr>Blocked URL</fielddescr>
+			<fieldname>url</fieldname>
+		</columnitem>
+		<columnitem>
+			<fielddescr>Description</fielddescr>
+			<fieldname>description</fieldname>
+		</columnitem>
+	</adddeleteeditpagefields>
+
+	<fields>
+		<field>
+			<fielddescr>Blocked URL</fielddescr>
+			<fieldname>url</fieldname>
+			<description>Enter the URL to blacklist</description>
+			<type>input</type>
+		</field>
+		<field>
+			<fielddescr>Description</fielddescr>
+			<fieldname>description</fieldname>
+			<description>Enter the description for this url</description>
+			<type>input</type>
+		</field>
+	</fields>
+
+	<custom_php_command_before_form>sync_package_havp_blacklist();</custom_php_command_before_form>
+	<custom_delete_php_command>sync_package_havp_blacklist();</custom_delete_php_command>	
+	<custom_php_resync_config_command>sync_package_havp_blacklist();</custom_php_resync_config_command>
+</packagegui>
diff --git a/packages/havp_whitelist.xml b/packages/havp_whitelist.xml
new file mode 100644
index 00000000..429d957e
--- /dev/null
+++ b/packages/havp_whitelist.xml
@@ -0,0 +1,67 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<packagegui>
+	<name>havp-whitelist</name>
+	<version>0.1.0</version>
+	<title>HAVP: Whitelist</title>
+	<include_file>/usr/local/pkg/havp.inc</include_file>
+
+	<menu>
+		<name>HAVP Whitelist</name>
+		<tooltiptext></tooltiptext>
+		<section>Services</section>
+		<configfile>havp.xml</configfile>
+	</menu>
+	<tabs>
+		<tab>
+			<text>Settings</text>
+			<url>/pkg_edit.php?xml=havp.xml&amp;act=edit&amp;id=0</url>
+		</tab>
+		<tab>
+			<text>Whitelist</text>
+			<url>/pkg.php?xml=havp_whitelist.xml</url>
+			<active/>
+		</tab>
+		<tab>
+			<text>Blacklist</text>
+			<url>/pkg.php?xml=havp_blacklist.xml</url>
+		</tab>
+	</tabs>
+
+    	<additional_files_needed>
+	    <prefix>/usr/local/pkg/</prefix>
+	    <chmod>0755</chmod>
+	    <item>http://agni.linuxense.com/packages/config/havp.inc</item>
+	</additional_files_needed>
+
+	<configpath>['installedpackages']['havpwhitelist']['config']</configpath>
+
+	<adddeleteeditpagefields>
+		<columnitem>
+			<fielddescr>Exempted URL</fielddescr>
+			<fieldname>url</fieldname>
+		</columnitem>
+		<columnitem>
+			<fielddescr>Description</fielddescr>
+			<fieldname>description</fieldname>
+		</columnitem>
+	</adddeleteeditpagefields>
+
+	<fields>
+		<field>
+			<fielddescr>Exempted URL</fielddescr>
+			<fieldname>url</fieldname>
+			<description>Enter the URL to exempt from blacklisting</description>
+			<type>input</type>
+		</field>
+		<field>
+			<fielddescr>Description</fielddescr>
+			<fieldname>description</fieldname>
+			<description>Enter the description for this item</description>
+			<type>input</type>
+		</field>
+	</fields>
+
+	<custom_php_command_before_form>sync_package_havp_whitelist();</custom_php_command_before_form>
+	<custom_delete_php_command>sync_package_havp_whitelist();</custom_delete_php_command>	
+	<custom_php_resync_config_command>sync_package_havp_whitelist();</custom_php_resync_config_command>
+</packagegui>
-- 
cgit v1.2.3