# Maintainer: Enodia
pkgname=enodia-sentinel
pkgver=0.1.0
pkgrel=1
pkgdesc="Host intrusion-detection daemon — signature-based detection of reverse shells, LD_PRELOAD rootkits, fileless malware, and persistence tampering"
arch=('any')
url="https://github.com/Enodia/enodia-sentinel"
license=('MIT')
depends=('bash' 'iproute2' 'procps-ng')
optdepends=('bpftrace: execve tracing of short-lived processes in snapshots'
            'libnotify: desktop notifications on alert')
backup=('etc/enodia-sentinel.conf')
source=()
sha256sums=()

package() {
    cd "$startdir/.."
    install -Dm755 src/sentinel.sh      "$pkgdir/usr/bin/sentinel.sh"
    install -Dm755 src/sentinel-redteam "$pkgdir/usr/bin/sentinel-redteam"
    install -Dm644 systemd/enodia-sentinel.service "$pkgdir/usr/lib/systemd/system/enodia-sentinel.service"
    install -Dm644 config/enodia-sentinel.conf "$pkgdir/etc/enodia-sentinel.conf"
    install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    install -dm750 "$pkgdir/var/log/enodia-sentinel"
}
