notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
This referral link gives you 10% off a Fastmail.com account and gives me a discount on my Fastmail account.

Get notified when packages are built

A new feature has been added. FreshPorts already tracks package built by the FreeBSD project. This information is displayed on each port page. You can now get an email when FreshPorts notices a new package is available for something on one of your watch lists. However, you must opt into that. Click on Report Subscriptions on the right, and New Package Notification box, and click on Update.

Finally, under Watch Lists, click on ABI Package Subscriptions to select your ABI (e.g. FreeBSD:14:amd64) & package set (latest/quarterly) combination for a given watch list. This is what FreshPorts will look for.

Port details
samhain Samhain Intrusion Detection System
4.4.3_1 security on this many watch lists=15 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 4.4.3Version of this port present on the latest quarterly branch.
Maintainer: freebsd@gregv.net search for ports maintained by this maintainer
Port Added: 2003-04-13 13:17:51
Last Update: 2024-02-25 13:19:54
Commit Hash: af6da1b
People watching this port, also watch:: snort, sudo, smartmontools, openvpn
License: GPLv2
WWW:
https://la-samhna.de/samhain/
Description:
Samhain is an open source file integrity and host-based intrusion detection system for Linux and Unix. It can run as a daemon process, and thus can remember file changes - contrary to a tool that runs from cron, if a file is modified you will get only one report, while subsequent checks of that file will ignore the modification as it is already reported (unless the file is modified again). Samhain can optionally be used as client/server system to provide centralized monitoring for multiple host. Logging to a (MySQL or PostgreSQL) database is supported.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (38 items)
Collapse this list.
  1. /usr/local/share/licenses/samhain-4.4.3_1/catalog.mk
  2. /usr/local/share/licenses/samhain-4.4.3_1/LICENSE
  3. /usr/local/share/licenses/samhain-4.4.3_1/GPLv2
  4. @dir /var/lib
  5. share/doc/samhain/BUGS
  6. share/doc/samhain/FAQ.html
  7. share/doc/samhain/HOWTO-client+server-troubleshooting.html
  8. share/doc/samhain/HOWTO-client+server.html
  9. share/doc/samhain/HOWTO-samhain+GnuPG.html
  10. share/doc/samhain/HOWTO-write-modules.html
  11. share/doc/samhain/MANUAL-2_4.pdf
  12. share/doc/samhain/README
  13. share/doc/samhain/README.UPGRADE
  14. share/doc/samhain/sh_mounts.txt
  15. share/doc/samhain/sh_userfiles.txt
  16. @dir share/doc/samhain
  17. @dir /var/lib/samhain
  18. @sample etc/samhainrc.sample
  19. etc/rc.d/samhain
  20. share/man/man5/samhainrc.5.gz
  21. share/man/man8/samhain.8.gz
  22. sbin/samhain
  23. @comment sbin/samhain_setpwd
  24. @comment @dir /var/lib/yule
  25. @comment @dir /var/log/yule
  26. @comment @sample etc/yulerc.sample
  27. @comment @postunexec echo "To delete the yule user permanently, use 'pw userdel yule'"
  28. @comment etc/rc.d/yule
  29. @comment share/man/man5/yulerc.5.gz
  30. @comment share/man/man8/yule.8.gz
  31. @comment sbin/yule
  32. @comment sbin/yule_setpwd
  33. @comment sbin/yuleadmin-gpg.pl
  34. @comment sbin/yuleadmin-sig.pl
  35. @comment sbin/yulectl
  36. @owner
  37. @group
  38. @mode
Collapse this list.
Dependency lines:
  • samhain>0:security/samhain
To install the port:
cd /usr/ports/security/samhain/ && make install clean
To add the package, run one of these commands:
  • pkg install security/samhain
  • pkg install samhain
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: samhain
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1607614629 SHA256 (samhain_signed-4.4.3.tar.gz) = 3e57574036d5055e9557ec5095818b419ea6c4365370fc2ccce1e9f87f9fad08 SIZE (samhain_signed-4.4.3.tar.gz) = 2160977

Packages (timestamps in pop-ups are UTC):
samhain
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest-4.4.3_14.4.34.4.3_14.4.3_1---
FreeBSD:13:quarterly-4.4.34.4.34.4.34.4.34.4.34.4.34.4.3
FreeBSD:14:latest-4.4.3_14.4.34.4.3_14.4.3_1--4.4.3
FreeBSD:14:quarterly-4.4.3-4.4.34.4.3--4.4.3
FreeBSD:15:latest-4.4.3_1n/a4.4.3n/a4.4.34.4.34.4.3
FreeBSD:15:quarterly--n/a-n/a---
Slave ports:
  1. security/samhain-client
  2. security/samhain-server
This port has no dependencies.
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for samhain-4.4.3_1: ASM=on: Use optimized assembly code DB_RELOAD=off: Enable database reload on SIGHUP DEBUG=off: Build with debugging support DNMALLOC=on: Enable dnmalloc DOCS=on: Build and/or install documentation ENCRYPT=on: Enable client/server encryption GNUPG=off: GNU Privacy Guard support IPV6=on: IPv6 protocol support LIBWRAP=on: TCP wrapper support LOGFILE_MONITOR=off: Enable monitor logfiles LOGIN_WATCH=off: Enable watch for login/logout MAIL=on: Enable internal SMTP mailer MOUNTS_CHECK=off: Enable check mount options on filesystems PORT_CHECK=off: Enable check ports POSIX_ACL=off: Enable check posix acls PRELUDE=off: Enable Prelude Framework support PROCESS_CHECK=off: Enable check processes PTRACE=off: Enable use anti-debugger options SRP=on: Enable SRP for authentication STATIC=off: Build static executables and/or libraries SUIDCHECK=off: Enable check for suid/sgid files UDP=off: Enable UDP server USERFILES=off: Enable check for users config files XML_LOGS=off: Enable XML-formatted logs ====> Database support: you can only select none or one of them MYSQL=off: MySQL database support ODBC=off: ODBC database backend PGSQL=off: PostgreSQL database support ===> Use 'make config' to modify these settings
Options name:
security_samhain
USES:
shebangfix
pkg-message:
For install:
To start the samhain daemon at system boot, add: samhain_enable="YES" and/or yule_enable="YES" to /etc/rc.conf.
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. http://la-samhna.de/archive/
Collapse this list.

Number of commits found: 134 (showing only 34 on this page)

«  1 | 2 

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
2.1.2
18 Mar 2006 19:17:30
Original commit files touched by this commit
mnag search for other commits by this committer
- Update to 2.1.2
- Add PRELUDE option

PR:             94406
Submitted by:   Robin Gruyters <r.gruyters@yirdis.nl>
Approved by:    maintainer
2.1.0
24 Jan 2006 01:03:33
Original commit files touched by this commit
edwin search for other commits by this committer
SHA256ify

Approved by: krion@
2.1.0
07 Jan 2006 07:56:03
Original commit files touched by this commit
edwin search for other commits by this committer
Update: security/samhain 2.0.10 -> 2.1.0

        Updating the Samhain integrity checking system to 2.1.0, a
        bugfix release.

        It's been requested by several people to break Samhain out
        into separate client and server ports. This PR does that,
        with a samhain-client and samhain-server port, as slave
        ports off of samhain. I'm not sure the best way to submit
        a PR to do this kind of action, but here is a shar of all
        three ports. If another format is desired, please let me
        know.  I'm also interested in feedback on the approach used
        for splitting these out.

PR:             ports/90305
Submitted by:   David Thiel <lx@redundancy.redundancy.org>
2.0.10
22 Sep 2005 07:15:29
Original commit files touched by this commit
vsevolod search for other commits by this committer
Fix DISTNAME variable.

Reported by:    Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw>
Pointy hat to:  vsevolod
2.0.10
21 Sep 2005 22:56:58
Original commit files touched by this commit
vsevolod search for other commits by this committer
Update to 2.0.10 [1]
Feed portlint

PR:             86426 [1]
Submitted by:   David Thiel (maintainer) [1]
2.0.9
10 Sep 2005 20:32:10
Original commit files touched by this commit
pav search for other commits by this committer
- Replace .error with IGNORE to prevent INDEX build failures
2.0.9
30 Aug 2005 22:04:29
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 2.0.9
- samhainrc.sample file is chgrp'd to wheel
- RUNAS_USER now defaults to "yule" properly
- XML logging is now on by default and tunable

PR:             ports/85448
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
2.0.8
31 Jul 2005 19:53:33
Original commit files touched by this commit
thierry search for other commits by this committer
Update to 2.0.8.

PR:             83960
Submitted by:   Babak Farrokhi <babak (at) farrokhi.net>
Approved by:    maintainer
2.0.6
05 May 2005 09:21:28
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 2.0.6

PR:             ports/80622
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
2.0.2
09 Nov 2004 22:20:10
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 2.0.2

PR:             ports/73699
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
2.0.1
04 Nov 2004 12:36:59
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 2.0.1

PR:             ports/73501
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
2.0.0
02 Nov 2004 18:12:13
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 2.0.0

PR:             ports/73393
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.8.12
21 Oct 2004 12:37:50
Original commit files touched by this commit
pav search for other commits by this committer
- Fix OPTIONS handling
1.8.12
16 Oct 2004 11:56:24
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 1.8.12 and unbreak on 5.x

PR:             ports/72750
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.8.11
13 Oct 2004 02:04:30
Original commit files touched by this commit
edwin search for other commits by this committer
Update: security/samhain 1.8.10b -> 1.8.11

        Updating the Samhain integrity checking system from 1.8.10b to 1.8.11.

        Code changes include:

        o for files in the IgnoreAll policy, there are no warnings
          (anymore) about 'no such user/group' and/or non-printable filenames
        o there is a new option HardlinkOffset=... to specify an
          offset from the canonical hardlink count for a directory
        o ... and a new option AddOKChars=... to modify the set of
          characters in a filename for which a warning (about
          obscure/non-printable) filename is issued.

        Port changes:

        Turn off kernel integrity checking by default - building
        this into packages wouldn't work anyhow, since it would
        only work with an identical kernel as on the build cluster.

PR:             ports/71169
Submitted by:   David Thiel <lx@redundancy.redundancy.org>
1.8.10b
26 Sep 2004 03:03:48
Original commit files touched by this commit
kris search for other commits by this committer
BROKEN on 5.x: Does not compile

Approved by:    portmgr (self)
1.8.10b
11 Aug 2004 23:00:12
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 1.8.10b

PR:             ports/69387
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.8.9
21 Jun 2004 19:09:14
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 1.8.9

PR:             ports/68173
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.8.7
14 May 2004 14:18:32
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 1.8.7
- Fix WITH_LOGSERVER knob

PR:             ports/66578
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.8.6
19 Apr 2004 19:41:31
Original commit files touched by this commit
krion search for other commits by this committer
- Update to version 1.8.6

PR:             ports/65778
Submitted by:   maintainer
1.8.5
06 Apr 2004 13:01:14
Original commit files touched by this commit
krion search for other commits by this committer
- Update to version 1.8.5

PR:             ports/65226
Submitted by:   maintainer
1.8.4
19 Mar 2004 21:26:56
Original commit files touched by this commit
krion search for other commits by this committer
- Update to version 1.8.4

PR:             ports/64480
Submitted by:   maintainer
1.8.3
18 Mar 2004 18:01:13
Original commit files touched by this commit
trevor search for other commits by this committer
Add size data, approved by maintainers.
1.8.3
07 Feb 2004 05:09:02
Original commit files touched by this commit
linimon search for other commits by this committer
Update to 1.8.3.  See docs/Changelog for full details.  Notable:

 new option SetBindAddress (--bind-address=...) to force
   interface for outgoing connections on multi-interface box
 use persistent connection to database by default

PR:             ports/62290
Submitted by:   David Thiel <lx@redundancy.redundancy.org>
1.8.2
19 Jan 2004 21:46:24
Original commit files touched by this commit
pav search for other commits by this committer
- Update to 1.8.2

PR:             ports/61588
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.8.1
11 Dec 2003 09:50:16
Original commit files touched by this commit
linimon search for other commits by this committer
Update to 1.8.1, mostly minor bugfixes.  See docs/Changelog for details.

PR:             ports/59935
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.8.0
01 Nov 2003 14:05:52
Original commit files touched by this commit
krion search for other commits by this committer
- Update to version 1.8.0

PR:             58790
Submitted by:   maintainer
1.7.12
14 Oct 2003 07:11:22
Original commit files touched by this commit
daichi search for other commits by this committer
update security/samhain: 1.7.11 -> 1.7.12
  - Updating Samhain to 1.7.12, which contains fixes for a heap overflow
    in e-mail parsing.

PR:             57965
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.7.11
24 Sep 2003 11:25:47
Original commit files touched by this commit
edwin search for other commits by this committer
Update port: security/samhain

        Update to 1.7.11.

PR:             ports/56754
Submitted by:   David Thiel <lx@redundancy.redundancy.org>
1.7.10
29 Jul 2003 05:45:30
Original commit files touched by this commit
daichi search for other commits by this committer
update security/samhain: 1.7.9 -> 1.7.10

PR:             54997
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.7.9
15 Jul 2003 06:08:05
Original commit files touched by this commit
daichi search for other commits by this committer
update security/samhain: 1.7.8 -> 1.7.9

PR:             54481
Submitted by:   David Thiel <lx@redundancy.redundancy.org> (maintainer)
1.7.8
04 Jun 2003 09:20:58
Original commit files touched by this commit
edwin search for other commits by this committer
iUpdate of Samhain to 1.7.8

        Update to version 1.7.8
        Fix build when MySQL logging is enabled
        Add LOG_SERVER and ALT_LOG_SERVER tunables
        Require LOG_SERVER be defined for clients
        Have clients request config and signatures from server by default
        Change TRUSTED_USER to a more accurate name (RUNAS_USER)
        Fix sample config file install/deinstall
        Add documentation on tunables

PR:             ports/52912
Submitted by:   David Thiel <lx@redundancy.redundancy.org>
1.7.5
28 Apr 2003 00:42:32
Original commit files touched by this commit
naddy search for other commits by this committer
Update to 1.7.5, fix packing list bugs, and add a more reliable
MASTER_SITE.

PR:             51044
Submitted by:   David Thiel <lx@redundancy.redundancy.org>
1.7.4
13 Apr 2003 13:17:14
Original commit files touched by this commit
edwin search for other commits by this committer
The Samhain Intrusion Detection System

        Samhain is a host-based Intrusion Detection System and
        integrity checker with advanced features such as centralized
        logging, MySQL/PostgreSQL support, and rootkit detection.

PR:             ports/46982
Submitted by:   David Thiel <lx@redundancy.redundancy.org>

Number of commits found: 134 (showing only 34 on this page)

«  1 | 2