<div dir="ltr"><div><span style="font-family:arial,sans-serif;font-size:13px">Apologies, gmail is the greatest for (antiquated ;-) ) mailing lists.</span></div><span style="font-family:arial,sans-serif;font-size:13px"><div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div>@Coop,</span><div style="font-family:arial,sans-serif;font-size:13px">I saw your thread from 2013, and was able to get it to build on a test system. Unfortunately, I don't have access to the actual target system, but the same should work on there (same OS). Although, neither is hardened.</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">Thanks.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Nov 25, 2014 at 11:03 AM, Cooper F. Nelson <span dir="ltr"><<a href="mailto:cnelson@ucsd.edu" target="_blank">cnelson@ucsd.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
I've had that problem for over a year on my hardened gentoo sensor, I<br>
think its due to gentoo setting the _FORTIFY_SOURCE flag by default and<br>
it gets set again during the suri build process.<br>
<br>
I've fixed it by adding this bit to my build script:<br>
<br>
> find libhtp/ -name Makefile -exec sed -i -e 's/-D_FORTIFY_SOURCE=2//' {} \;<br>
><br>
> sed -i -e 's/\, _FORTIFY_SOURCE/\, 2/' src/suricata.c<br>
<br>
There actually seem to be a couple problems like this with libhtp/suri,<br>
in that the build process doesn't check/honor local environmental<br>
variables. For example, despite setting my CFLAGS to include '-O3' I<br>
still see the '-O2' flag (twice!) during the build process. In this<br>
case it doesn't matter as the '-O3' directive makes it redundant.<br>
<br>
Anyways I always felt this was kinda a hacky fix for this problem so I<br>
looked up a better one; this seems to work on my system (when added to<br>
the top of my build script):<br>
<br>
> export CPPFLAGS="-U_FORTIFY_SOURCE"<br>
<br>
This tells the C pre-processor to unset that variable before setting the<br>
one defined in the oisf makefiles.<br>
<br>
- -Coop<br>
<div><div class="h5"><br>
On 11/24/2014 4:34 PM, Data King wrote:<br>
> Hello,<br>
><br>
> I'm trying to build suricata from source on a gentoo linux system. I've<br>
> tried stable (2.0.4) and development (2.1beta) sources, and sources from<br>
> git. All versions fail with the same error:<br>
><br>
> CC suricata.o<br>
> suricata.c: In function 'SCPrintBuildInfo':<br>
> suricata.c:795:50: error: 'defined' undeclared (first use in this function)<br>
> printf("compiled with _FORTIFY_SOURCE=%d\n", _FORTIFY_SOURCE);<br>
> ^<br>
> suricata.c:795:50: note: each undeclared identifier is reported only<br>
> once for each function it appears in<br>
> suricata.c:795:50: error: expected ')' before numeric constant<br>
> printf("compiled with _FORTIFY_SOURCE=%d\n", _FORTIFY_SOURCE);<br>
> ^<br>
> Makefile:1421: recipe for target 'suricata.o' failed<br>
> make[3]: *** [suricata.o] Error 1<br>
> make[3]: Leaving directory '/root/suricata-git/oisf/src'<br>
> Makefile:951: recipe for target 'all' failed<br>
> make[2]: *** [all] Error 2<br>
> make[2]: Leaving directory '/root/suricata-git/oisf/src'<br>
> Makefile:446: recipe for target 'all-recursive' failed<br>
> make[1]: *** [all-recursive] Error 1<br>
> make[1]: Leaving directory '/root/suricata-git/oisf'<br>
> Makefile:375: recipe for target 'all' failed<br>
> make: *** [all] Error 2<br>
><br>
><br>
> TIA for your assistance.<br>
> D<br>
><br>
><br>
</div></div>> _______________________________________________<br>
> Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@openinfosecfoundation.org</a><br>
> Site: <a href="http://suricata-ids.org" target="_blank">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/" target="_blank">http://suricata-ids.org/support/</a><br>
> List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a><br>
> Training now available: <a href="http://suricata-ids.org/training/" target="_blank">http://suricata-ids.org/training/</a><br>
><br>
<br>
<br>
- --<br>
Cooper Nelson<br>
Network Security Analyst<br>
UCSD ACT Security Team<br>
<a href="mailto:cnelson@ucsd.edu">cnelson@ucsd.edu</a> x41042<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2.0.17 (MingW32)<br>
<br>
iQEcBAEBAgAGBQJUdNJ6AAoJEKIFRYQsa8FWLeQIAIiruJW6ZOcjEcHMpGr3HGvz<br>
CH/L7BT8z5rFQ6z+WYKjNa1Gc4DN2HPmJcZmgMELTYSD9NLuIsiHAXmZC8vEz5I7<br>
rhMo0GyhyHfA6jwe6Wq9QrO7gyt3hKtaTDdGv3aJb2HC7o0b9eTx+Ey6yV1yKsCz<br>
74heM3bTCFtiTIyLeFUgxFrbXEjaRUswyl0FD0nbqY9eoq/wlmxoWFbHhzjLIRXx<br>
KwiZq40NsO6aUnmjWLfQWd6oaBJEkVoiNuodm1ryv+F9iVbCarLoubFWn3FQCfxa<br>
gRiFf/v0ShL1aNC69QAow6gFdmf7wcujvxbQYxL3iRFp2iIi1JXZdev00urVYLY=<br>
=NzgW<br>
-----END PGP SIGNATURE-----<br>
</blockquote></div><br></div>