Miroirs/slackbuilds_ponce
1
0
Fork 0
mirror of https://github.com/Ponce/slackbuilds synced 2024-11-22 19:44:21 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

system/sleuthkit: Fix external type errors with EWF

Browse source 
Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
This commit is contained in:
Barry J. Grundy 2014-12-24 13:07:54 -06:00 committed by Robby Workman
parent ba6b0592db
commit eebfe3d580
3 changed files with 21 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
system/sleuthkit/README
View file

@ -9,3 +9,7 @@ the command line tools can be directly used to find evidence.
Sleuthkit can optionally use libewf (for Expert Witness files) Sleuthkit can optionally use libewf (for Expert Witness files)
and afflib (for Advanced Forensic Format files). and afflib (for Advanced Forensic Format files).
Note: If you are building TSK for use with Plaso or the DFVFS, it is
strongly recommended that you build libewf support into TSK by
installing libewf first.

8
system/sleuthkit/sleuthkit.SlackBuild
View file

@ -22,11 +22,12 @@
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF # OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. # ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
# Updated v4.1.3 Feb 2014 Barry J. Grundy <bgrundy(at)linuxleo.com> # Updated v4.1.3 (external type patch) December 2014
# Barry J. Grundy <bgrundy(at)linuxleo.com>
PRGNAM=sleuthkit PRGNAM=sleuthkit
VERSION=${VERSION:-4.1.3} VERSION=${VERSION:-4.1.3}
BUILD=${BUILD:-1} BUILD=${BUILD:-2}
TAG=${TAG:-_SBo} TAG=${TAG:-_SBo}
if [ -z "$ARCH" ]; then if [ -z "$ARCH" ]; then
@ -71,6 +72,9 @@ find -L . \
\( -perm 666 -o -perm 664 -o -perm 640 -o -perm 600 -o -perm 444 \ \( -perm 666 -o -perm 664 -o -perm 640 -o -perm 600 -o -perm 444 \
-o -perm 440 -o -perm 400 \) -exec chmod 644 {} \; -o -perm 440 -o -perm 400 \) -exec chmod 644 {} \;
# Fix external type errors with EWF, external and unsupported types:
patch -p0 < $CWD/tsk4.1.3_external_type.patch
CFLAGS="$SLKCFLAGS" \ CFLAGS="$SLKCFLAGS" \
CXXFLAGS="$SLKCFLAGS" \ CXXFLAGS="$SLKCFLAGS" \
./configure \ ./configure \

11
system/sleuthkit/tsk4.1.3_external_type.patch Normal file
View file

@ -0,0 +1,11 @@
--- tsk/img/tsk_img.h.orig 2014-02-02 09:56:12.947709027 +0100
+++ tsk/img/tsk_img.h 2014-02-02 09:55:34.569701897 +0100
@@ -66,6 +66,8 @@
TSK_IMG_TYPE_EWF_EWF = 0x0040, ///< EWF version
+ TSK_IMG_TYPE_EXTERNAL = 0x1000, ///< external defined format which at least implements TSK_IMG_INFO, used by pytsk
+
TSK_IMG_TYPE_UNSUPP = 0xffff, ///< Unsupported disk image type
} TSK_IMG_TYPE_ENUM;