Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

Summary:   An intrusion detection system
Name:      snort
Version:   2.9.7.0
Release:   alt2
License: %gpl2only
Group:     Security/Networking
Url:       http://www.snort.org

# You can omit building some target packages via 'rpmbuild --without xxx'
%def_without prelude
%def_with    inline
# You can omit this feature via 'rpmbuild --disable flexresp'
%def_enable flexresp

Source0:   %name-%version.tar

Source10:  snort.sysconfig.m4
Source20:  README-ALT.ru.m4
Source30:  snort.logrotate.m4
Source99:  snortd

Patch0:    %name-%version-%release.patch

Requires:  libpcap >= 0.4
Requires:  service >= 0.5.6
Requires:  snort-base, snort-rules
PreReq:    alternatives >= 0.2.0-alt0.7
BuildPreReq: libltdl-devel, m4, bzip2
BuildRequires: rpm-build-licenses

BuildRequires: libpcap-devel >= 0.4, libpcre-devel
BuildRequires: zlib-devel libdnet-devel libdaq-devel flex

Conflicts: snort-rules < 2.8

%if_with prelude
Requires:  libprelude
%endif
%if_with prelude
BuildRequires: libprelude-devel
%endif
%if_with inline
BuildRequires: iptables-devel
%endif

Summary(ru_RU.UTF-8): п░п╡я┌п╬п╪п╟я┌п╦я┤п╣я│п╨п╦п╧ п╟п╫п╟п╩п╦п╥п╟я┌п╬я─/п╠п╩п╬п╨п╦я─п╬п╡я┴п╦п╨ я│п╣я┌п╣п╡я▀я┘ п©п╟п╨п╣я┌п╬п╡

%description
Snort is a libpcap-based packet sniffer/logger which can be used as a
lightweight network intrusion detection system.  It features rules
based logging and can perform protocol analysis, content
searching/matching and can be used to detect a variety of attacks and
probes, such as buffer overflows, stealth port scans, CGI attacks, SMB
probes, OS fingerprinting attempts, and much more.  Snort has a
real-time alerting capabilty, with alerts being sent to syslog, a
seperate "alert" file, or as a WinPopup message via Samba's smbclient.

Please see the documentation in %_docdir/%name-%version

%description -l ru_RU.UTF-8
Snort -- я█я┌п╬ п╪п╬я┴п╫я▀п╧ п©я─п╬я│п╩я┐я┬п╦п╡п╟я┌п╣п╩я▄ п╦ п©п╣я─п╣я┘п╡п╟я┌я┤п╦п╨ я│п╣я┌п╣п╡я▀я┘ п©п╟п╨п╣я┌п╬п╡,
п╬я│п╫п╬п╡п╟п╫п╫я▀п╧ п╫п╟ п╠п╦п╠п╩п╦п╬я┌п╣п╨п╣ libpcap. п÷я─п╦ я─п╟п╠п╬я┌п╣ Snort п╦я│п©п╬п╩я▄п╥я┐п╣я┌ п╫п╟п╠п╬я─
п©я─п╣п╢п╡п╟я─п╦я┌п╣п╩я▄п╫п╬ п©п╬п╢пЁп╬я┌п╬п╡п╩п╣п╫п╫я▀я┘ п©я─п╟п╡п╦п╩, п╨п╬я┌п╬я─я▀п╣ я│п╬п╢п╣я─п╤п╟я┌ я┐я│п╩п╬п╡п╦я▐ я│я─п╟п╠п╟я┌я▀п╡п╟п╫п╦я▐
п©п╬ п╥п╫п╟я┤п╣п╫п╦я▐п╪ я│п╩я┐п╤п╣п╠п╫я▀я┘ п╦ п©я─п╦п╨п╩п╟п╢п╫я▀я┘ п╢п╟п╫п╫я▀я┘.

Snort п╪п╬п╤п╣я┌ п╦я│п©п╬п╩я▄п╥п╬п╡п╟я┌я▄я│я▐ п╡ п╨п╟я┤п╣я│я┌п╡п╣ я│п╦я│я┌п╣п╪я▀ п╬п╠п╫п╟я─я┐п╤п╣п╫п╦я▐ п╡я┌п╬я─п╤п╣п╫п╦я▐ п╡ я│п╣я┌я▄,
п╟ я┌п╟п╨п╤п╣ я─п╟п╥п╫п╬п╬п╠я─п╟п╥п╫я▀я┘ п╟я┌п╟п╨ п╦ п©п╬п©я▀я┌п╬п╨ п©я─п╣п╢п©я─п╦п╫я▐я┌п╦я▐ я┌п╟п╨п╬п╡я▀я┘ (п©п╣я─п╣п©п╬п╩п╫п╣п╫п╦п╣ п╠я┐я└п╣я─п╟,
я│п╨п╟п╫п╦я─п╬п╡п╟п╫п╦п╣ п©п╬я─я┌п╬п╡ п╦ SMB, я│я┌п╣п╩я│-я│п╨п╟п╫п╦я─п╬п╡п╟п╫п╦п╣, п╟я┌п╟п╨п╦ CGI, п╬п©я─п╣п╢п╣п╩п╣п╫п╦п╣
п╬п©п╣я─п╟я├п╦п╬п╫п╫я▀я┘ я│п╦я│я┌п╣п╪ п╦ п╪п╫п╬пЁп╬п╣ п╢я─я┐пЁп╬п╣).

Snort п╦п╪п╣п╣я┌ п╡п╬п╥п╪п╬п╤п╫п╬я│я┌я▄ п╬п©п╬п╡п╣я┴п╣п╫п╦я▐ п╡ я─п╣п╟п╩я▄п╫п╬п╪ п╪п╟я│я┬я┌п╟п╠п╣ п╡я─п╣п╪п╣п╫п╦ я┤п╣я─п╣п╥ я│п╬п╬п╠я┴п╣п╫п╦я▐,
п╬я┌п©я─п╟п╡п╩п╣п╫п╫я▀п╣ п╡ я│п╦я│я┌п╣п╪п╫я▀п╧ п╩п╬пЁ-я└п╟п╧п╩, п╟п╩я▄я┌п╣я─п╫п╟я┌п╦п╡п╫я▀п╧ я└п╟п╧п╩ "я┌я─п╣п╡п╬пЁп╦"
п╦п╩п╦ п╨п╟п╨ WinPopup-я│п╬п╬п╠я┴п╣п╫п╦п╣, п╬я┌п©я─п╟п╡п╩п╣п╫п╫п╬п╣ я│ п©п╬п╪п╬я┴я▄я▌ smbclient.

п▒п╟п╥п╬п╡п╟я▐ п╡п╣я─я│п╦я▐ п╫п╣ п╠п╩п╬п╨п╦я─я┐п╣я┌ п╬п©п╟я│п╫я▀п╣ я│п╬п╣п╢п╦п╫п╣п╫п╦я▐. п∙я│п╩п╦ п╡п╟п╪ я┌я─п╣п╠я┐п╣я┌я│я▐ я█я┌п╟ я└я┐п╫п╨я├п╦я▐,
п╦п╫я│я┌п╟п╩п╩п╦я─я┐п╧я┌п╣ п╬п╢п╦п╫ п╦п╥ п©п╟п╨п╣я┌п╬п╡ snort я│ я│я┐я└я└п╦п╨я│п╬п╪ flexresp п╦п╩п╦ bloat п╡ п╫п╟п╥п╡п╟п╫п╦п╦.

п÷п╬п╤п╟п╩я┐п╧я│я┌п╟, п╬п╠я▐п╥п╟я┌п╣п╩я▄п╫п╬ п╬п╥п╫п╟п╨п╬п╪я▄я┌п╣я│я▄ я│ п╢п╬п╨я┐п╪п╣п╫я┌п╟я├п╦п╣п╧,
п╨п╬я┌п╬я─п╟я▐ я─п╟п╥п╪п╣я┴п╣п╫п╟ п╡ %_docdir/%name-%version

%description -l uk_UA.UTF-8
Snort -- я├п╣ п©п╬я┌я┐п╤п╫п╦п╧ п╥п╟я│Б∙∙п╠ п©я─п╬я│п╩я┐я┘п╬п╡я┐п╡п╟п╫п╫я▐ я┌п╟ п©п╣я─п╣я┘п╡п╟я┌я┐ п╪п╣я─п╣п╤п╣п╡п╦я┘
п©п╟п╨п╣я┌Б∙∙п╡, п╬я│п╫п╬п╡п╟п╫п╦п╧ п╫п╟ п╠Б∙∙п╠п╩Б∙∙п╬я┌п╣я├Б∙∙ libpcap. п▓Б∙∙п╫ п╠п╟п╥я┐Б∙⌠я┌я▄я│я▐ п╫п╟ п©п╬п©п╣я─п╣п╢п╫я▄п╬
я│я└п╬я─п╪п╬п╡п╟п╫п╦я┘ п©я─п╟п╡п╦п╩п╟я┘ я┌п╟ п╡п╪Б∙∙Б∙⌠ п╡п╦п╨п╬п╫я┐п╡п╟я┌п╦ п╟п╫п╟п╩Б∙∙п╥ п╥п╪Б∙∙я│я┌я┐ п©я─п╬я┌п╬п╨п╬п╩я┐.

п■п╟п╫п╦п╧ п©п╟п╨п╣я┌ п╪п╬п╤п╣ п╡п╦п╨п╬я─п╦я│я┌п╬п╡я┐п╡п╟я┌п╦я│я▐ п╡ я▐п╨п╬я│я┌Б∙∙ я│п╦я│я┌п╣п╪п╦ п╡п╦я▐п╡п╩п╣п╫п╫я▐
п╡я┌п╬я─пЁп╫п╣п╫я▄ п╡ п╪п╣я─п╣п╤Б∙∙, п╟ я┌п╟п╨п╬п╤ п╢п╬п©п╬п╪п╟пЁп╟Б∙⌠ п╡п╦я▐п╡п╩я▐я┌п╦ я─Б∙∙п╥п╫п╬п╪п╟п╫Б∙∙я┌п╫Б∙∙ п╟я┌п╟п╨п╦ я┌п╟
Б∙√я┘ я│п©я─п╬п╠п╦ (п©п╣я─п╣п©п╬п╡п╫п╣п╫п╫я▐ п╠я┐я└п╣я─п╟, я│п╨п╟п╫я┐п╡п╟п╫п╫я▐ п©п╬я─я┌Б∙∙п╡, п╫п╣п╡п╦п╢п╦п╪Б∙∙
я│п╨п╟п╫я┐п╡п╟п╫п╫я▐, п╟я┌п╟п╨п╦ CGI, SMB, я│п©я─п╬п╠п╦ п╡п╦п╥п╫п╟я┤п╣п╫п╫я▐ я┌п╦п©я┐ п╬п©п╣я─п╟я├Б∙∙п╧п╫п╬Б∙√ я│п╦я│я┌п╣п╪п╦
я┌п╟ п╠п╟пЁп╟я┌п╬ Б∙∙п╫я┬п╦я┘).

Snort п╪п╟Б∙⌠ п╪п╬п╤п╩п╦п╡Б∙∙я│я┌я▄ п╬п©п╬п╡Б∙∙я┴п╣п╫п╫я▐ п╡ я─п╣п╟п╩я▄п╫п╬п╪я┐ п╪п╟я│я┬я┌п╟п╠Б∙∙ я┤п╟я│я┐ я┤п╣я─п╣п╥
п©п╬п╡Б∙∙п╢п╬п╪п╩п╣п╫п╫я▐, п╡Б∙∙п╢п©я─п╟п╡п╩п╣п╫Б∙∙ п╡ я│п╦я│я┌п╣п╪п╫п╦п╧ п╩п╬пЁ-я└п╟п╧п╩, п╟п╩я▄я┌п╣я─п╫п╟я┌п╦п╡п╫п╦п╧ я└п╟п╧п╩
"я┌я─п╦п╡п╬пЁп╦" п╟п╠п╬ я▐п╨ WinPopup-п©п╬п╡Б∙∙п╢п╬п╪п╩п╣п╫п╫я▐, п╡Б∙∙п╢п©я─п╟п╡п╩п╣п╫п╣ п╥п╟ п╢п╬п©п╬п╪п╬пЁп╬я▌
п©я─п╬пЁя─п╟п╪п╦ smbclient.

п▒я┐п╢я▄-п╩п╟я│п╨п╟, п╬п╠п╬п╡'я▐п╥п╨п╬п╡п╬ п╬п╥п╫п╟п╧п╬п╪я┌п╣я│я▐ п╥ п╢п╬п╨я┐п╪п╣п╫я┌п╟я├Б∙∙Б∙⌠я▌, я┴п╬ я─п╬п╥п╪Б∙∙я┴п╣п╫п╟ п╡
%_docdir/%name-%version

%package plain+flexresp
Summary: Snort (plain) with Flexible Response
Summary(ru_RU.UTF-8): Snort я│ п©п╬п╢п╢п╣я─п╤п╨п╬п╧ п╟п╡я┌п╬п╪п╟я┌п╦я┤п╣я│п╨п╬пЁп╬ п╠п╩п╬п╨п╦я─п╬п╡п╟п╫п╦я▐ я│п╬п╣п╢п╦п╫п╣п╫п╦п╧
Group: Security/Networking
Requires: %name = %version
%description plain+flexresp
Snort compiled with flexresp support.
Flexible Response allows snort to actively close offending connections.
%description -l ru_RU.UTF-8 plain+flexresp
Snort, я│п╨п╬п╪п©п╦п╩п╦я─п╬п╡п╟п╫п╫я▀п╧ я│ п©п╬п╢п╢п╣я─п╤п╨п╬п╧ flexresp. Flexible Responses п╬п╥п╫п╟я┤п╟п╣я┌
п╡п╬п╥п╪п╬п╤п╫п╬я│я┌я▄ п╟п╡я┌п╬п╪п╟я┌п╦я┤п╣я│п╨п╦ п╠п╩п╬п╨п╦я─п╬п╡п╟я┌я▄ я│п╬п╣п╢п╦п╫п╣п╫п╦я▐, п©я─п╦п╥п╫п╟п╫п╫я▀п╣ п╥п╩п╬п╫п╟п╪п╣я─п╣п╫п╫я▀п╪п╦
п╫п╟ п╬я│п╫п╬п╡п╟п╫п╦п╦ я│п╬п╬я┌п╡п╣я┌я│я┌п╡я┐я▌я┴п╦я┘ п©я─п╟п╡п╦п╩.
%description -l uk_UA.UTF-8 plain+flexresp
Snort, я│п╨п╬п╪п©Б∙∙п╩я▄п╬п╡п╟п╫п╦п╧ п╥ п©Б∙∙п╢я┌я─п╦п╪п╨п╬я▌ flexresp.

%package inline
Summary: Snort with IPTables support
Summary(ru_RU.UTF-8): Snort я│ я┤я┌п╣п╫п╦п╣п╪ я┌я─п╟я└п╦п╨п╟ я┤п╣я─п╣п╥ IPTables п╡п╪п╣я│я┌п╬ PCAP
Group: Security/Networking
Requires: %name = %version
Requires: iptables
%description inline
Snort-Inline takes packets from iptables instead of libpcap.
It then uses new rule types to help iptables make pass or drop decisions
based on snort rules.
%description -l ru_RU.UTF-8 inline
Snort, п╦я│п©п╬п╩я▄п╥я┐я▌я┴п╦п╧ п╢п╩я▐ п©я─п╬я│п╪п╬я┌я─п╟ я┌я─п╟я└п╦п╨п╟ я└я┐п╫п╨я├п╦п╦ п©п╟п╨п╣я┌п╫п╬пЁп╬ я└п╦п╩я▄я┌я─п╟ IPTables
п╡п╪п╣я│я┌п╬ п╠п╦п╠п╩п╦п╬я┌п╣п╨п╦ PCAP. п■п╬п©п╬п╩п╫п╦я┌п╣п╩я▄п╫я▀п╣ я┌п╦п©я▀ п©я─п╟п╡п╦п╩ я│п╩я┐п╤п╟я┌ п╢п╩я▐ п©п╣я─п╣п╢п╟я┤п╦ я┐п╨п╟п╥п╟п╫п╦п╧
п╬я┌ Snort'п╟ п©п╟п╨п╣я┌п╫п╬п╪я┐ я└п╦п╩я▄я┌я─я┐.
%description -l uk_UA.UTF-8 inline
Snort, я│п╨п╬п╪п©Б∙∙п╩я▄п╬п╡п╟п╫п╦п╧ п╥ п©Б∙∙п╢я┌я─п╦п╪п╨п╬я▌ IPTables

%package inline+flexresp
Summary: Snort with IPTables and FlexibleResponse support
Summary(ru_RU.UTF-8): Snort я│ я┤я┌п╣п╫п╦п╣п╪ я┌я─п╟я└п╦п╨п╟ я┤п╣я─п╣п╥ IPTables п╦ п╟п╡я┌п╬п╠п╩п╬п╨п╦я─п╬п╡п╨п╬п╧
Group: Security/Networking
Requires: %name = %version
Requires: iptables
%description inline+flexresp
Snort-Inline takes packets from iptables instead of libpcap.
It then uses new rule types to help iptables make pass or drop decisions
based on snort rules.
%description -l ru_RU.UTF-8 inline+flexresp
Snort, п╦я│п©п╬п╩я▄п╥я┐я▌я┴п╦п╧ п╢п╩я▐ п©я─п╬я│п╪п╬я┌я─п╟ я┌я─п╟я└п╦п╨п╟ я└я┐п╫п╨я├п╦п╦ п©п╟п╨п╣я┌п╫п╬пЁп╬ я└п╦п╩я▄я┌я─п╟ IPTables
п╡п╪п╣я│я┌п╬ п╠п╦п╠п╩п╦п╬я┌п╣п╨п╦ PCAP. п■п╬п©п╬п╩п╫п╦я┌п╣п╩я▄п╫я▀п╣ я┌п╦п©я▀ п©я─п╟п╡п╦п╩ я│п╩я┐п╤п╟я┌ п╢п╩я▐ п©п╣я─п╣п╢п╟я┤п╦ я┐п╨п╟п╥п╟п╫п╦п╧
п╬я┌ Snort'п╟ п©п╟п╨п╣я┌п╫п╬п╪я┐ я└п╦п╩я▄я┌я─я┐. Flexresp п╬п╥п╫п╟я┤п╟п╣я┌ п╡п╬п╥п╪п╬п╤п╫п╬я│я┌я▄ п╟п╡я┌п╬п╪п╟я┌п╦я┤п╣я│п╨п╦
п╠п╩п╬п╨п╦я─п╬п╡п╟я┌я▄ я│п╬п╣п╢п╦п╫п╣п╫п╦я▐ п╫п╟ п╬я│п╫п╬п╡п╟п╫п╦п╦ я│п╬п╬я┌п╡п╣я┌я│я┌п╡я┐я▌я┴п╦я┘ п©я─п╟п╡п╦п╩.
%description -l uk_UA.UTF-8 inline+flexresp
Snort, я│п╨п╬п╪п©Б∙∙п╩я▄п╬п╡п╟п╫п╦п╧ п╥ п©Б∙∙п╢я┌я─п╦п╪п╨п╬я▌ IPTables я┌п╟ flexresp.

%package doc
Summary: Various documentation from Snort IDS distribution.
Summary(ru_RU.UTF-8): п■п╬п╨я┐п╪п╣п╫я┌п╟я├п╦я▐ п©п╬ п╟п╫п╟п╩п╦п╥п╟я┌п╬я─я┐ я│п╣я┌п╣п╡п╬пЁп╬ я┌я─п╟я└п╦п╨п╟ Snort
Group: Security/Networking
BuildArch: noarch
%description doc
Snort manual, FAQ and tons of detailed textual listings
describing all network intrusions known by Snort.
%description doc -l ru_RU.UTF-8
п═я┐п╨п╬п╡п╬п╢я│я┌п╡п╬ п©п╬п╩я▄п╥п╬п╡п╟я┌п╣п╩я▐, FAQ, п╟ я┌п╟п╨п╤п╣ п╢п╣я┌п╟п╩я▄п╫п╟я▐ п╢п╬п╨я┐п╪п╣п╫я┌п╟я├п╦я▐
п©п╬ я│п╦пЁп╫п╟я┌я┐я─п╟п╪ п╡я│п╣я┘ я│п╣я┌п╣п╡я▀я┘ п╟я┌п╟п╨, п╨п╬я┌п╬я─я▀п╣ я─п╟я│п©п╬п╥п╫п╟я▒я┌ Snort.

%prep
%setup -q

%patch0 -p1

mkdir -p building
%autoreconf -I m4

%build

#export LDFLAGS="$LDFLAGS -Wl,--no-as-needed"

function prepconf() {
   local t=$1
   case $t in
--without* ) return ;;
   esac
   shift

#   echo DEBUG: Configure args: "$ at "
#   return

   local d=$1
   shift
   mkdir -p $d
   pushd $d
   ln -s -f ../configure ./configure
   OPENSSL_LIB_DIR=%_libdir \
    %configure \
--prefix=%_prefix \
--sysconfdir=%_sysconfdir/%name \
--enable-linux-smp-stats \
--disable-static-daq \
--enable-dynamicplugin \
%{subst_with prelude} \
"$ at "
   %make    
   mv src/%name ../building/%name-$d
   case "$d" in
       plain)
       mv src/dynamic-plugins/sf_engine/.libs/libsf_engine.so* ../building/
       mv src/dynamic-preprocessors/build/usr/lib*/snort_dynamicpreprocessor ../building/
       ;;
       *);;
   esac
   popd
}

prepconf   xxx                    plain               --enable-inline=no
prepconf %{subst_with inline}     inline              --enable-inline=yes
%if_enabled flexresp
prepconf   xxx                    plain+flexresp      --enable-inline=no  --enable-flexresp3
prepconf %{subst_with inline}     inline+flexresp     --enable-inline=yes --enable-flexresp3
%endif

%install
mkdir -p %buildroot{%_sbindir,%_initdir,%_man8dir,%_logdir/%name,%_altdir}
mkdir -p %buildroot%_sysconfdir/{%name,logrotate.d,sysconfig}

weight=0

function myinstall() {
   weight=$[10+$weight]
   test -r "$1" || return 0
   install -m 755 "$1" "%buildroot%_sbindir/$1"

   # Create record file for alterantives
   printf "%_sbindir/%name\t%_sbindir/$1\t$weight\n" > %buildroot%_altdir/$1
}

mkdir -p %buildroot%_libdir/%name/dynamicengine
mkdir -p %buildroot%_libdir/%name/dynamicpreprocessor/
mkdir -p %buildroot%_libdir/%name/dynamicrules
pushd building
for c in %name-{plain,inline}; do
   myinstall "$c"
   myinstall "$c+flexresp"
done
myinstall "%name-bloat"
cp -P libsf_engine.so* %buildroot%_libdir/%name/dynamicengine/
chmod 0644 %buildroot%_libdir/%name/dynamicengine/libsf_engine.so*
cp -P snort_dynamicpreprocessor/libsf_*_preproc.so* %buildroot%_libdir/%name/dynamicpreprocessor/
chmod 0644 %buildroot%_libdir/%name/dynamicpreprocessor/libsf_*_preproc.so*
popd

# Create symlink for %%ghost, actually not packaged
pushd %buildroot%_sbindir
ln -s %name-plain %name
popd

install -m 644 %name.8    %buildroot%_man8dir/
install -m 644 etc/*.{conf,config,map} %buildroot%_sysconfdir/%name
install -m 744 %SOURCE99  %buildroot%_initdir/
mkdir -p %buildroot%_sysconfdir/%name/preproc_rules/
install -m 644 preproc_rules/*.rules %buildroot%_sysconfdir/%name/preproc_rules/
sed -i 's;^var RULE_PATH \.\./rules;var RULE_PATH \%_sysconfdir/%name/rules;i' %buildroot%_sysconfdir/%name/%name.conf
sed -i 's;^var PREPROC_RULE_PATH \.\./preproc_rules;var PREPROC_RULE_PATH \%_sysconfdir/%name/preproc_rules;i' \
       %buildroot%_sysconfdir/%name/%name.conf
sed -i 's;/usr/local/lib/snort_;%_libdir/%name/;' %buildroot%_sysconfdir/%name/%name.conf
sed -i 's;^# config daq_dir: <dir>;config daq_dir: %_libdir/daq/;' %buildroot%_sysconfdir/%name/%name.conf
sed -i 's;^var WHITE_LIST_PATH \.\./rules;var WHITE_LIST_PATH \%_sysconfdir/%name/rules;i' %buildroot%_sysconfdir/%name/%name.conf
sed -i 's;^var BLACK_LIST_PATH \.\./rules;var BLACK_LIST_PATH \%_sysconfdir/%name/rules;i' %buildroot%_sysconfdir/%name/%name.conf

m4 -DSNORT_CONFDIRPATH=%_sysconfdir/%name %SOURCE10 > %buildroot%_sysconfdir/sysconfig/%name
m4 -DSNORT_LOGPATH=%_logdir/%name %SOURCE30 > %buildroot%_sysconfdir/logrotate.d/%name
m4 -DSNORT_CONFPATH=%_sysconfdir/%name/%name.conf -DSNORT_BINPATH=%_sbindir/%name %SOURCE20 > README-ALT.ru

mkdir -p %buildroot%_sysconfdir/%name/rules/
touch %buildroot%_sysconfdir/%name/rules/white_list.rules
touch %buildroot%_sysconfdir/%name/rules/black_list.rules

%pre
%_sbindir/groupadd -rf %name
%_bindir/id %name > /dev/null 2>&1 \
|| %_sbindir/useradd -c "Snort IDS" -g %name -r -M -d /dev/null -s /dev/null %name

%post
%post_service snortd

%preun
%preun_service snortd

%files
%doc doc/AUTHORS doc/BUGS doc/CREDITS doc/NEWS doc/PROBLEMS doc/README* doc/TODO doc/USAGE doc/WISHLIST
%doc README-ALT.ru
%config(noreplace) %_sysconfdir/sysconfig/%name
%config(noreplace) %_initdir/snortd
%config(noreplace) %_sysconfdir/logrotate.d/%name
%config(noreplace) %_sysconfdir/%name
%attr(0770,root,snort) %dir %_logdir/%name
%_sbindir/%name-plain
%ghost %_sbindir/%name
%_man8dir/%name.*
%_altdir/%name-plain
%_libdir/%name

%if_with inline
%files inline
%_sbindir/%name-inline
%_altdir/%name-inline
%endif

%if_enabled flexresp

%files plain+flexresp
%_sbindir/%name-plain+flexresp
%_altdir/%name-plain+flexresp

%if_with inline
%files inline+flexresp
%_sbindir/%name-inline+flexresp
%_altdir/%name-inline+flexresp
%endif

%endif  # flexresp

%files doc
%doc doc/snort_manual.*

%changelog
…
Полный changelog можно просмотреть здесь