Initial import of Steve Bellovin's port of Matt Blaze's CFS into the

packages collection.

CFS is an encrypting file system for Unix-like OSs.  It uses NFS as
its interface, and so is reasonably portable.  The FS code dates back
to 1989, and the crypto to 1992, so it is showing signs of age.  This
code should be regarded as completely unsupported; a complete rewrite
will follow eventually. 

Please don't download this code if you're in a place that's forbidden
(under US or local law) to export cryptographic software from the US
to, or if you're on the State Department's "Denied Persons List." If
you aren't sure, ask a good lawyer. 

5 files changed, 148 insertions, 0 deletions

diff --git a/security/cfs/Makefile b/security/cfs/Makefile
new file mode 100644
index 00000000000..4154a54b039
--- /dev/null
+++ b/security/cfs/Makefile
@@ -0,0 +1,29 @@
+# $NetBSD: Makefile,v 1.1.1.1 2001/06/05 10:29:38 agc Exp $
+
+DISTNAME=		cfs-1.4.1
+CATEGORIES=		security
+MASTER_SITES=		http://www.crypto.com/software/
+
+MAINTAINER=		packages@netbsd.org
+HOMEPAGE=		http://www.crypto.com/software/
+COMMENT=		encrypting file system, using NFS as its interface
+
+CRYPTO=			yes
+
+INSTALL_TARGET=		install_cfs
+
+do-build:
+	cd ${WRKSRC} && ./netbsd_make_with_bad_rpcgen cfs
+
+post-install:
+	${BSD_INSTALL_MAN} ${WRKSRC}/cattach.1 ${PREFIX}/man/man1/
+	${BSD_INSTALL_MAN} ${WRKSRC}/cdetach.1 ${PREFIX}/man/man1/
+	${BSD_INSTALL_MAN} ${WRKSRC}/cfssh.1 ${PREFIX}/man/man1/
+	${BSD_INSTALL_MAN} ${WRKSRC}/cmkdir.1 ${PREFIX}/man/man1/
+	${BSD_INSTALL_MAN} ${WRKSRC}/cmkkey.1 ${PREFIX}/man/man1/
+	${BSD_INSTALL_MAN} ${WRKSRC}/cpasswd.1 ${PREFIX}/man/man1/
+	${BSD_INSTALL_MAN} ${WRKSRC}/ccat.8 ${PREFIX}/man/man8/
+	${BSD_INSTALL_MAN} ${WRKSRC}/cfsd.8 ${PREFIX}/man/man8/
+	${BSD_INSTALL_MAN} ${WRKSRC}/cname.8 ${PREFIX}/man/man8/
+
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/cfs/distinfo b/security/cfs/distinfo
new file mode 100644
index 00000000000..c8152e4b9bb
--- /dev/null
+++ b/security/cfs/distinfo
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1.1.1 2001/06/05 10:29:38 agc Exp $
+
+SHA1 (cfs-1.4.1.tar.gz) = be3f73b233149477b739456498c71b120d5f2fb5
+Size (cfs-1.4.1.tar.gz) = 98943 bytes
+SHA1 (patch-aa) = eb142e7e335e724d8dd254bf2b86e27ac7785846
diff --git a/security/cfs/patches/patch-aa b/security/cfs/patches/patch-aa
new file mode 100644
index 00000000000..fe813b95a75
--- /dev/null
+++ b/security/cfs/patches/patch-aa
@@ -0,0 +1,85 @@
+$NetBSD: patch-aa,v 1.1.1.1 2001/06/05 10:29:38 agc Exp $
+
+--- Makefile	2001/06/05 09:15:05	1.1
++++ Makefile	2001/06/05 10:08:08
+@@ -79,13 +79,13 @@
+ 
+ #1B: paths:
+ #some peple like /usr/local/sbin instead of /usr/local/etc
+-BINDIR=/usr/local/bin
+-ETCDIR=/usr/local/etc
++BINDIR=${PREFIX}/bin
++ETCDIR=${PREFIX}/libexec
+ PRINTCMD=enscript -Gr2
+ # you only need RSAREF for ESM
+ # these paths WILL have to be changed...
+-RSALIB=/usr/mab/rsaref/install/rsaref.a
+-RINCLUDES=/usr/mab/rsaref/source
++#RSALIB=/usr/mab/rsaref/install/rsaref.a
++#RINCLUDES=/usr/mab/rsaref/source
+ 
+ # if you're a paranoid fascist, you might want to configure
+ # default timeouts on the attach command.  If you do,
+@@ -104,6 +104,8 @@
+ # Uncomment the options for the your local platform.
+ # You'll need to figure out how to install man pages yourself.
+ 
++OS!= uname -s
++
+ ## Use these for vanilla SUNOS 4.x .
+ #CFLAGS=$(COPT) -I$(RINCLUDES) -DSUN
+ #LIBS=
+@@ -116,10 +118,12 @@
+ ## Linux dists).
+ ## See NOTE TO LINUX USERS above, and also README.linux,
+ ## if you can't make things work.
+-#CFLAGS=$(COPT) -U__STDC__ -Dd_fileno=d_ino -I$(RINCLUDES)
+-#LIBS=
+-#COMPAT=
+-#RPCOPTS= -k -b
++.if ${OS} == "Linux"
++CFLAGS=$(COPT) -U__STDC__ -Dd_fileno=d_ino -I$(RINCLUDES)
++LIBS=
++COMPAT=
++RPCOPTS= -k -b
++.endif
+ 
+ ## A few Linux users have reported success with these
+ ## options:
+@@ -211,15 +215,18 @@
+ #* Use these for NetBSD 1.5
+ ## For mounting, use
+ ##	mount -o intr,-2 127.0.0.1:/null /crypt
+-#CFLAGS=$(COPT) -DBSD44 -DANYPORT -DCFS_PORT=2049 -DSHORTLINKS -I$(RINCLUDES) -traditional
+-#COMPAT=-lcompat
+-#RPCOPTS=-b
+-
+-## Solaris 2.3 / SUNOS 5.x
+-#CFLAGS=$(COPT) -DSOLARIS2X -DPORTMAP -I$(RINCLUDES) -DPTMX
+-#LIBS=-lsocket -lnsl
+-#COMPAT=
+-#RPCOPTS=
++.if ${OS} == "NetBSD"
++CFLAGS=$(COPT) -DBSD44 -DANYPORT -DCFS_PORT=2049 -DSHORTLINKS -I$(RINCLUDES) -traditional
++COMPAT=-lcompat
++RPCOPTS=-b
++.endif
++
++.if ${OS} == "SunOS"
++CFLAGS=$(COPT) -DSOLARIS2X -DPORTMAP -I$(RINCLUDES) -DPTMX
++LIBS=-lsocket -lnsl
++COMPAT=
++RPCOPTS=
++.endif
+ 
+ ## not sure what to do for NeXT.  I think this works:
+ #CFLAGS=$(COPT) -posix -D_BSD -DANYPORT -I$(RINCLUDES)
+@@ -229,7 +236,7 @@
+ # (3/3) CONFIGURE: one last thing
+ #==========================================================================
+ # finally, comment out the next line:
+-CC=you_forgot_to_edit_the_makefile
++#CC=you_forgot_to_edit_the_makefile
+ 
+ # now you're done with local configuration.
+ 
diff --git a/security/cfs/pkg/DESCR b/security/cfs/pkg/DESCR
new file mode 100644
index 00000000000..27d401c4196
--- /dev/null
+++ b/security/cfs/pkg/DESCR
@@ -0,0 +1,10 @@
+CFS is an encrypting file system for Unix-like OSs.  It uses NFS as
+its interface, and so is reasonably portable.  The FS code dates back
+to 1989, and the crypto to 1992, so it is showing signs of age.  This
+code should be regarded as completely unsupported; a complete rewrite
+will follow eventually. 
+
+Please don't download this code if you're in a place that's forbidden
+(under US or local law) to export cryptographic software from the US
+to, or if you're on the State Department's "Denied Persons List." If
+you aren't sure, ask a good lawyer. 
diff --git a/security/cfs/pkg/PLIST b/security/cfs/pkg/PLIST
new file mode 100644
index 00000000000..93c8bf62b66
--- /dev/null
+++ b/security/cfs/pkg/PLIST
@@ -0,0 +1,19 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2001/06/05 10:29:38 agc Exp $
+libexec/cfsd
+bin/cattach
+bin/cdetach
+bin/cmkdir
+bin/cpasswd
+bin/cfssh
+bin/cname
+bin/ccat
+bin/cmkkey
+man/man1/cattach.1
+man/man8/ccat.8
+man/man1/cdetach.1
+man/man8/cfsd.8
+man/man1/cfssh.1
+man/man1/cmkdir.1
+man/man1/cmkkey.1
+man/man8/cname.8
+man/man1/cpasswd.1