summaryrefslogtreecommitdiff
path: root/security/cvm
AgeCommit message (Collapse)AuthorFilesLines
2021-10-26security: Replace RMD160 checksums with BLAKE2s checksumsnia1-2/+2
All checksums have been double-checked against existing RMD160 and SHA512 hashes Unfetchable distfiles (fetched conditionally?): ./security/cyrus-sasl/distinfo cyrus-sasl-dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d.patch.v2
2021-10-07security: Remove SHA1 hashes for distfilesnia1-2/+1
2021-06-23Probably make cvm-checkpassword actually work as an alternativeschmonz2-3/+3
checkpassword. Bump PKGREVISION.
2020-11-19Remove DJB_RESTRICTED, no longer used.schmonz1-2/+1
2020-10-09Offer cvm-checkpassword as an alternative checkpassword. Bump PKGREVISION.schmonz2-2/+3
2020-06-30Modernize patch filenames. NFCI.schmonz2-4/+4
2020-06-25Retire 'djbware-errno-hack' and associated options.mk cleverness.schmonz1-2/+1
Instead: 1. Package makefiles including their own options.mk 2. Packages say "SUBST_CLASSES+=djberrno" to get the hack, if needed 3. Packages adjust SUBST_FILES.djberrno, if needed Should fix bulk build failures due to multiple inclusions of options.mk and/or incorrect definitions of DJB_ERRNO_HACK. Approved during the freeze by wiz@.
2020-03-28security/cvm: this package does not have error.hrillig1-1/+2
2020-01-26all: migrate homepages from http to httpsrillig1-2/+2
pkglint -r --network --only "migrate" As a side-effect of migrating the homepages, pkglint also fixed a few indentations in unrelated lines. These and the new homepages have been checked manually.
2019-11-04security: align variable assignmentsrillig1-3/+3
pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-05-23all: replace SUBST_SED with the simpler SUBST_VARSrillig1-2/+2
pkglint -Wall -r --only "substitution command" -F With manual review and indentation fixes since pkglint doesn't get that part correct in every case.
2018-01-07Fix indentation in buildlink3.mk files.rillig1-2/+2
The actual fix as been done by "pkglint -F */*/buildlink3.mk", and was reviewed manually. There are some .include lines that still are indented with zero spaces although the surrounding .if is indented. This is existing practice.
2017-07-31Increase default datalimit. Detach from the controlling terminalschmonz2-5/+6
with pgrphack(8). Bump PKGREVISION.
2017-06-01Use public SHLIB_TYPE instead of private _OPSYS_SHLIB_TYPE.jlam1-2/+2
2017-04-27Wrap long command line. Replace LOCALBASE with PREFIX.schmonz1-6/+10
2017-01-02Update to 0.97. From the changelog:schmonz3-9/+10
- Updated for bglibs v2
2017-01-01Fix build on OS X and quell pkglint.schmonz5-7/+42
2015-11-04Add SHA512 digests for distfiles for security categoryagc1-1/+2
Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2014-03-14Link network libs on SunOSwiedi1-1/+2
2014-03-11Remove example rc.d scripts from PLISTs.jperkin1-2/+1
These are now handled dynamically if INIT_SYSTEM is set to "rc.d", or ignored otherwise.
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2010-03-15Installs shlibs nowadays, so don't default to a build-only dependency.schmonz1-2/+1
2010-02-03Update to 0.96. From the changelog:schmonz2-6/+10
- Added support for checking permissions in cvm-qmail. See discussion of $CVM_QMAIL_CHECK_PERMS in cvm-qmail.html - Added support for I/O timeouts for cvm-local modules. - Fixed the SQLite module to copy the row data. - Fixed cvm-qmail dieing if control/locals is missing. pkgsrc changes: set LICENSE and support DESTDIR.
2009-06-30Mark packages as MAKE_JOBS_SAFE=no that failed in a bulk build withjoerg1-1/+3
MAKE_JOBS=2 and worked without.
2009-06-14Remove @dirrm entries from PLISTsjoerg1-2/+1
2009-04-07Update to 0.95. From the changelog:schmonz2-6/+6
- Added a "lookaside" mode to cvm-qmail, to assist with proper chaining to cvm-vmailmgr or other modules. - Fixed failure in cvm-qmail when virtualdomains did not exist. - Fixed client.h symlink to point to v2client.h to match the library. - Fixed cvm-vmailmgr to fail with OUTOFSCOPE=1 when the virtual password table file does not exist, instead of failing with an I/O error. This should improve its ability to chain with other modules. - Added cvm-sqlite from Wayne Marshall
2009-03-20Simply and speed up buildlink3.mk files and processing.joerg1-13/+6
This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time.
2008-04-13Update to 0.90. From the changelog:schmonz5-10/+40
- Added support for chaining modules within the version client library. To use this, specify the module string as a list of modules separated with commas. For example: cvm-command:/path/to/module,cvm-local:/path/to/socket This enhancement deprecates the cvm-chain module. - Introduced an "out of scope" fact, to be used on credential rejection results when the supplied credentials are outside of the scope of authority of the module. The cvm-vmailmgr and cvm-qmail modules report this fact as appropriate, and cvm-chain copies it as appropriate from the modules it invokes. - A random anti-spoofing tag is added to all version 2 client requests. Its length is set by $CVM_RANDOM_BYTES and defaults to 8. - Fixed a bug that caused the domain output to be set incorrectly when doing qmail lookups with a domain not in the control files with $CVM_QMAIL_ASSUME_LOCAL set.
2007-03-24Quell pkglint: add QMAILDIR to BUILD_DEFS.schmonz1-1/+3
2006-11-07Update to 0.82. From the changelog:schmonz2-6/+6
- Fixed handling of user/domain name splitting in the client library when the caller doesn't initially provide a domain name. - cvm_client_setenv now also sets $MAILDIR for use with Courier IMAP.
2006-07-31Bump default dependency so dependent packages get shared cvm libs.schmonz1-2/+2
2006-07-31Update to 0.81. From the changelog:schmonz3-14/+18
- Fixed a typo in the INSTHIER file that caused incomplete installations.
2006-07-29Update to 0.80. From the changelog:schmonz2-6/+8
- Modified the build procedures to use libtool to produce and install shared libraries. - No other code changes.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-04-23Modify packages that set PKG_USERS and PKG_GROUPS to follow the newjlam1-2/+2
syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47.
2006-04-22Removed the superfluous "quotes" and 'quotes' from variables that don'trillig1-2/+2
need them, for example RESTRICTED and SUBST_MESSAGE.*.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-2/+2
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-19Since the usergroup frameworks requires explicit groups for each users,joerg1-2/+3
just create a cvmlog group as well.
2006-03-07Let usergroupadd assign a default group, "users" is the default onjoerg1-2/+2
NetBSD, but doesn't exist e.g. on DragonFly and FreeBSD.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-08-30Update to 0.76. From the changelog:schmonz2-6/+6
- Fixed the autoconvert feature of cvm-vmailmgr to set the permissions and ownership of the created password table to that of the original. - Added a feature to all qmail-based modules to treat all domains as local if $CVM_QMAIL_ASSUME_LOCAL is set.
2005-08-24Update to 0.75. From the changelog:schmonz3-13/+11
- Added an "autoconvert" mode to cvm-vmailmgr, which converts encrypted passwords to plain-text on successful authentication if $VMAILMGR_AUTOCONVERT is set.
2005-07-20Initial import of Credential Validation Modules. This package contains:schmonz6-0/+149
- The reference source for the CVM interface. - Diagnostic and benchmark CVM clients. - A checkpassword interface CVM client. - A UNIX/POSIX system module (uses getpwnam). - A flat-file module. - A vmailmgr module. - MySQL and PgSQL modules. - A library for client writers. - A set of libraries for module writers.