rekall-gui: v1.7.1 bump WIP (need help)

This commit is contained in:
Guido Kroon 2020-06-05 15:56:46 +02:00
parent 19e7f6cde7
commit e7764d0d1a
No known key found for this signature in database
GPG key ID: 394C398C531EFAB0
23 changed files with 311 additions and 75 deletions

View file

@ -0,0 +1 @@
DIST rekall-core-1.7.1.tar.gz 5582152 BLAKE2B 0bc0f267313ec9edd597e2622c4fa232cd1f15264d21361ca91fde2fba60b39e941ed0dd7ca2bb429288e77e00f90570450fdbecfb64d7403acbceed1c12a91f SHA512 451e7e5f55630d74245003d7a82bed9271a6f6356e649d1f0e0d5338a76b82dab63acf9c0a2322ecf79b3ce0e19a05d8c653cb3d1f19a6e7b5df7fdb05112824

View file

@ -0,0 +1,78 @@
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
PYTHON_COMPAT=( python3_{6,7} )
inherit eutils distutils-r1
DESCRIPTION="Rekall Memory Forensic Framework"
HOMEPAGE="http://www.rekall-forensic.com/"
if [[ ${PV} == *9999 ]]; then
inherit git-r3
EGIT_REPO_URI="https://github.com/google/rekall"
else
HASH_COMMIT="v${PV}"
SRC_URI="https://github.com/google/rekall/archive/${HASH_COMMIT}.tar.gz -> ${P}.tar.gz"
fi
LICENSE="GPL-2"
SLOT="0"
#KEYWORDS="~amd64 ~x86"
# Commented out KEYWORDS because this ebuild installs files to /usr/resources,
# which is dirty, and because some deps are borked
RDEPEND="${DEPEND}"
DEPEND="
>=app-forensics/yara-4.0.1[${PYTHON_USEDEP}]
>=dev-python/acora-2.0[${PYTHON_USEDEP}]
>=dev-python/arrow-0.10.0[${PYTHON_USEDEP}]
>=dev-python/artifacts-20200515[${PYTHON_USEDEP}]
>=dev-python/capstone-3.0.5[${PYTHON_USEDEP}]
>=dev-python/dotty-1.5[${PYTHON_USEDEP}]
>=dev-python/intervaltree-2.1.0[${PYTHON_USEDEP}]
>=dev-python/psutil-4.0[${PYTHON_USEDEP}]
>=dev-python/pyaff4-0.27[${PYTHON_USEDEP}]
>=dev-python/pyelftools-0.23[${PYTHON_USEDEP}]
>=dev-python/pyparsing-2.1.5[${PYTHON_USEDEP}]
>=dev-python/python-dateutil-2.5.3[${PYTHON_USEDEP}]
>=dev-python/pytz-4.0[${PYTHON_USEDEP}]
>=dev-python/pyyaml-3.11[${PYTHON_USEDEP}]
>=dev-python/sortedcontainers-1.4.4[${PYTHON_USEDEP}]
"
#FIXME:
# 'PyYAML',
# 'acora==2.1',
# 'arrow==0.10.0',
# 'artifacts==20170909',
# 'future==0.16.0',
# 'intervaltree==2.1.0',
# 'ipaddr==2.2.0',
# 'parsedatetime==2.4',
# "psutil >= 5.0, < 6.0",
# 'pyaff4 ==0.26.post6',
# 'pycryptodome==3.4.7',
# 'pyelftools==0.24',
# 'pyparsing==2.1.5',
# 'python-dateutil==2.6.1',
# 'pytsk3==20170802',
# 'pytz==2017.3',
# 'rekall-capstone==3.0.5.post2',
# "rekall-efilter >= 1.6, < 1.7",
# 'pypykatz==0.0.8;python_version>="3.5"',
# Should match exactly the version of this package.
# 'rekall-lib',
# 'rekall-yara==3.6.3.1',
S="${WORKDIR}/rekall-${PV}/rekall-core"
#src_prepare() {
#add "share" prefix for resources"
# sed -i 's|result.append((directory|result.append(("share/"+directory|' setup.py || die "Sed failed!"
# distutils-r1_src_prepare
#}

View file

@ -1,62 +0,0 @@
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
PYTHON_COMPAT=( python3_{6,7} )
inherit eutils distutils-r1
DESCRIPTION="Rekall Memory Forensic Framework"
HOMEPAGE="http://www.rekall-forensic.com/"
if [[ ${PV} == *9999 ]]; then
inherit git-r3
EGIT_REPO_URI="https://github.com/google/rekall"
S="${WORKDIR}/${P}/${PN}"
else
SRC_URI="https://github.com/google/rekall"
S="${WORKDIR}/${P}/${PN}"
fi
LICENSE="GPL-2"
SLOT="0"
# Removed keyword because this package installs incorrectly (see below).
KEYWORDS=""
DEPEND="${PYTHON_DEPS}"
#FIXME:
# 'PyYAML',
# 'acora==2.1',
# 'arrow==0.10.0',
# 'artifacts==20170909',
# 'future==0.16.0',
# 'intervaltree==2.1.0',
# 'ipaddr==2.2.0',
# 'parsedatetime==2.4',
# "psutil >= 5.0, < 6.0",
# 'pyaff4 ==0.26.post6',
# 'pycryptodome==3.4.7',
# 'pyelftools==0.24',
# 'pyparsing==2.1.5',
# 'python-dateutil==2.6.1',
# 'pytsk3==20170802',
# 'pytz==2017.3',
# 'rekall-capstone==3.0.5.post2',
# "rekall-efilter >= 1.6, < 1.7",
# 'pypykatz==0.0.8;python_version>="3.5"',
# Should match exactly the version of this package.
# 'rekall-lib',
# 'rekall-yara==3.6.3.1',
RDEPEND="${DEPEND}"
S="${WORKDIR}/rekall-core-9999/rekall-core"
src_prepare() {
#add "share" prefix for resources"
sed -i 's|result.append((directory|result.append(("share/"+directory|' setup.py || die "Sed failed!"
distutils-r1_src_prepare
}

View file

@ -0,0 +1,11 @@
--- a/setup.py 2020-06-04 12:21:58.825454381 +0200
+++ b/setup.py 2020-06-04 12:22:50.861459475 +0200
@@ -27,7 +27,7 @@
from setuptools import find_packages, setup, Command
VERSION_ENV = {}
-exec(open("rekall_gui/_version.py").read(), VERSION_ENV)
+exec(open("_version.py").read(), VERSION_ENV)
VERSION = VERSION_ENV["get_versions"]()
rekall_description = "Rekall Memory Forensic Framework"

View file

@ -1,8 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<herd>forensics</herd>
<maintainer>
<email>maintainer-needed@gentoo.org</email>
</maintainer>
<maintainer type="project">
<email>proxy-maint@gentoo.org</email>
<name>Proxy Maintainers</name>
</maintainer>
</pkgmetadata>

View file

@ -8,14 +8,14 @@ PYTHON_COMPAT=( python3_{6,7} )
inherit distutils-r1
if [[ ${PV} = *9999* ]]; then
inherit git-r3
inherit git-r3
EGIT_REPO_URI="https://github.com/google/rekall.git"
EGIT_CHECKOUT_DIR="${WORKDIR}/rekall"
S="${WORKDIR}/rekall/${PN}"
else
HASH_COMMIT="v${PV}"
SRC_URI="https://github.com/google/rekall/archive/${HASH_COMMIT}.tar.gz -> ${P}.tar.gz"
S="${WORKDIR}/rekall-${PV}"
HASH_COMMIT="v${PV}"
SRC_URI="https://github.com/google/rekall/archive/${HASH_COMMIT}.tar.gz -> ${P}.tar.gz"
S="${WORKDIR}/rekall-${PV}/${PN}"
fi
DESCRIPTION="Rekall Memory Forensic Framework"
@ -23,10 +23,22 @@ HOMEPAGE="http://www.rekall-forensic.com/"
LICENSE="GPL-2"
SLOT="0"
#KEYWORDS="~amd64" # WIP
#KEYWORDS="~amd64 ~x86"
REQUIRED_USE="${PYTHON_REQUIRED_USE}"
# Commented out KEYWORDS because this ebuild installs to /usr/manuskript and
# /usr/rekall_gui, which is dirty
DEPEND="${PYTHON_DEPS}"
RDEPEND="${DEPEND}
app-forensics/rekall-core"
RDEPEND=""
DEPEND="${RDEPEND}
>=app-forensics/rekall-core-1.5[${PYTHON_USEDEP}]
>=dev-python/codegen-1.0[${PYTHON_USEDEP}]
>=dev-python/flask-0.10.1[${PYTHON_USEDEP}]
>=dev-python/gevent-1.0.2[${PYTHON_USEDEP}]
>=dev-python/gevent-websocket-0.9.3[${PYTHON_USEDEP}]
dev-python/flask-sockets[${PYTHON_USEDEP}]
"
src_prepare() {
eapply "${FILESDIR}/rekall-gui-1.7.1-fix-setup.patch"
eapply_user
}

View file

@ -0,0 +1 @@
DIST acora-2.0.tar.gz 19900 BLAKE2B f17cf50cd337e909b86b73951fa854350336dca3f2b5fbe52b5d3f9525be44360c2af3ea6a61f77d1644915527a89ce2983060c007688a5066848b69aabc6afe SHA512 4a9522f858cffde3267c6d9ae0b515f2406c2cfbbf0c30381e07ab235a4724820974ea2db97265e75e7344031d713e9f80d178b7f57380136a3599e608273fb2

View file

@ -0,0 +1,35 @@
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
PYTHON_COMPAT=( python3_{6,7} )
inherit distutils-r1
MY_PV="acora-${PV}"
if [[ ${PV} = *9999* ]]; then
inherit git-r3
EGIT_REPO_URI="https://github.com/scoder/acora.git"
else
HASH_COMMIT="${MY_PV}"
SRC_URI="https://github.com/scoder/acora/archive/${HASH_COMMIT}.tar.gz -> ${P}.tar.gz"
fi
DESCRIPTION="Fast multi-keyword search engine for text strings"
HOMEPAGE="https://github.com/scoder/acora"
LICENSE="public-domain"
SLOT="0"
#KEYWORDS="~amd64 ~x86"
# Commented out KEYWORDS because this dep doesn't install yet due to compile
# errors:
#
# Traceback (most recent call last):
# File "setup.py", line 28, in <module>
# sys.argv.remove('--no-compile')
# ValueError: list.remove(x): x not in list
S="${WORKDIR}/${PN}-${MY_PV}"

View file

@ -0,0 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>proxy-maint@gentoo.org</email>
<name>Proxy Maintainers</name>
</maintainer>
</pkgmetadata>

View file

@ -0,0 +1 @@
DIST artifacts-20200515.tar.gz 92266 BLAKE2B 10d052b83d353e0f25b5d4f7c9d7a0283838c97b4510b4ab4074f4d9188f6ba821bdd5267f387c0ab0724234c953ff013037024c99e04f744cba50ec7d0068e9 SHA512 4bf66b5da409ecd8a8b1d74652a423211ae10dab2ab9c909d76a25009cdd2ff4e2646f65aa92986aa5719728080e1eb370cfc9400c8406d8fcd8cfc813d6db3a

View file

@ -0,0 +1,23 @@
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
PYTHON_COMPAT=( python3_{6,7} )
inherit distutils-r1
if [[ ${PV} = *9999* ]]; then
inherit git-r3
EGIT_REPO_URI="https://github.com/ForensicArtifacts/artifacts.git"
else
HASH_COMMIT="${PV}"
SRC_URI="https://github.com/ForensicArtifacts/artifacts/archive/${HASH_COMMIT}.tar.gz -> ${P}.tar.gz"
fi
DESCRIPTION="Digital Forensics Artifact Repository"
HOMEPAGE="https://github.com/ForensicArtifacts/artifacts"
LICENSE="Apache-2.0"
SLOT="0"
KEYWORDS="~amd64 ~x86"

View file

@ -0,0 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>proxy-maint@gentoo.org</email>
<name>Proxy Maintainers</name>
</maintainer>
</pkgmetadata>

View file

@ -0,0 +1 @@
DIST codegen-1.0.tar.gz 4933 BLAKE2B 1b3a5abc520a8add52af161f7b4898528d880bccf443ba9cdae672509a1f2c2f44bec3877b86f64ec65c786ba89880ca1b572313a13682d6bae22ed370647f96 SHA512 d159ef65a4af2d415965147085d4a062d128643f254dfa9c3252827fd323c2e4548ee74750e4fb7ef54b35e804f4084a4ff1f363be183c534b36c16692320136

View file

@ -0,0 +1,23 @@
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
PYTHON_COMPAT=( python3_{6,7} )
inherit distutils-r1
if [[ ${PV} = *9999* ]]; then
inherit git-r3
EGIT_REPO_URI="https://github.com/andreif/codegen.git"
else
HASH_COMMIT="${PV}"
SRC_URI="https://github.com/andreif/codegen/archive/${HASH_COMMIT}.tar.gz -> ${P}.tar.gz"
fi
DESCRIPTION="Extension to ast that allow ast -> python code generation"
HOMEPAGE="https://github.com/andreif/codegen"
LICENSE="public-domain"
SLOT="0"
KEYWORDS="~amd64 ~x86"

View file

@ -0,0 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>proxy-maint@gentoo.org</email>
<name>Proxy Maintainers</name>
</maintainer>
</pkgmetadata>

View file

@ -0,0 +1 @@
DIST dotty-1.5.tar.gz 14002703 BLAKE2B 183a61ddf7593dc9dc448b885ac82b81450947c427c797872915ac0c1aee4ec9d0ef3735be59b42af2f5985e477e62236087b3c2d203eebc9516c531607e6bb5 SHA512 edf45bd8d8ec87860fa8581b8f6bbfeb6ce505f434c5f60e3da59b8b5e274c64eeee6cd064128188969b18bf47265b8e72f7f029bcae8fdc7293b0c668a0d3d4

View file

@ -0,0 +1,23 @@
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
PYTHON_COMPAT=( python3_{6,7} )
inherit distutils-r1
if [[ ${PV} = *9999* ]]; then
inherit git-r3
EGIT_REPO_URI="https://github.com/google/dotty.git"
else
HASH_COMMIT="v${PV}"
SRC_URI="https://github.com/google/dotty/archive/${HASH_COMMIT}.tar.gz -> ${P}.tar.gz"
fi
DESCRIPTION="EFILTER query language"
HOMEPAGE="https://github.com/google/dotty"
LICENSE="Apache-2.0"
SLOT="0"
KEYWORDS="~amd64 ~x86"

View file

@ -0,0 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>proxy-maint@gentoo.org</email>
<name>Proxy Maintainers</name>
</maintainer>
</pkgmetadata>

View file

@ -0,0 +1 @@
DIST flask-sockets-0.2.1.tar.gz 4224 BLAKE2B be9fd4cd1f0b96c642d136c3e3bb50fbe6a9d35a8d9c6474e1df5be3e713932448ecfa1dc7ef012ed4f659c355fe815c5e9e9f9acc0cf7de5af9941ede40a980 SHA512 71f48665928a0712abf440bb577221ccf0c5b27c9f2fa31c2b3cc7bd8c4a5a301783ca1355e484d11a7a3cfd4b119e5a6b3580660eddd9471db32de67eb271fb

View file

@ -0,0 +1,30 @@
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
PYTHON_COMPAT=( python3_{6,7} )
inherit distutils-r1
if [[ ${PV} = *9999* ]]; then
inherit git-r3
EGIT_REPO_URI="https://github.com/heroku-python/flask-sockets.git"
else
HASH_COMMIT="v${PV}"
SRC_URI="https://github.com/heroku-python/flask-sockets/archive/${HASH_COMMIT}.tar.gz -> ${P}.tar.gz"
fi
DESCRIPTION="Elegant WebSockets for your Flask apps"
HOMEPAGE="https://github.com/heroku-python/flask-sockets"
LICENSE="MIT"
SLOT="0"
KEYWORDS="~amd64 ~x86"
RDEPEND=""
DEPEND="${RDEPEND}
dev-python/flask[${PYTHON_USEDEP}]
dev-python/gevent[${PYTHON_USEDEP}]
dev-python/gevent-websocket[${PYTHON_USEDEP}]
"

View file

@ -0,0 +1,8 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<maintainer type="project">
<email>proxy-maint@gentoo.org</email>
<name>Proxy Maintainers</name>
</maintainer>
</pkgmetadata>

View file

@ -0,0 +1 @@
DIST pyaff4-0.27.tar.gz 72850 BLAKE2B 24cb68e7bc5a8b7d81882b6c7f813a24351cabbd4dbefe0b364ba4d04de9e7fd58202341889a5fb625322a58826ad1d3c883ca4c5300def8bf969f9175e02692 SHA512 05e5b74c2bdb20060d4131bac180360123abf9e5a245b5003f054423a3d81cd2ba078c2495699fa08263b01057727ebcfbd2da457a455ee15522e6eecda21d75

View file

@ -0,0 +1,16 @@
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
PYTHON_COMPAT=( python3_{6,7} )
inherit distutils-r1
DESCRIPTION="Python Advanced Forensic Format Version 4 library"
HOMEPAGE="https://pypi.org/project/pyaff4/"
SRC_URI="mirror://pypi/${PN:0:1}/${PN}/${P}.tar.gz"
LICENSE="public-domain"
SLOT="0"
KEYWORDS="~amd64 ~x86"