summaryrefslogtreecommitdiff
path: root/security
AgeCommit message (Collapse)AuthorFilesLines
1999-02-22Explain what the package does, rather than just using the acronym.agc2-2/+2
1999-02-20Fix CONFLICTS (remove redundancy, mostly)hubertf3-9/+3
1999-02-11Use install-info in $PATH, so that systems with it in base will work too.tv1-3/+3
1999-02-10pkglint: cleanup Makefile and add missing rcs id.frueauf2-2/+4
1999-02-08Network security scannerhubertf6-0/+238
1999-02-08add and enable nessushubertf1-1/+2
1999-02-03Oops! In Makefile, tabs != spaces. Comment lines need spaces, indentedwrstuden1-6/+6
commands need tabs.
1999-01-30Make the ssh package 68060 aware.is1-1/+7
Like for the pgp2 package, we avoid 68020-40 tuned assembler code that makes heavy use of the 32<->64bit mul or div, which is emulated on the 68060. Currently, we do this by using the --disable-asm configure option and passing -m68060 to the compiler. I couldn't figure out how to pass host=m68060--netbsd to the gmp subconfigure. Even this way, there is a speedup of about 6 for the sshd or ssh startup. To enable, set M68060=yes in your /etc/mk.conf, when building this package.
1999-01-30Back out (unrelated and experimental) part of last commit that shouldn't ↵is1-6/+1
have gone in.
1999-01-30use the RSAREF2 legal notice from the PGP2 package. (Outside of the USA, thereis1-6/+11
are "people", too.)
1999-01-19Fix linker directives for ELF platforms, as per PR 6439.hubertf1-2/+2
(Inputs from Ty Sarna and Bill Coldwell - thanks guys!)
1999-01-05Add patch that fixes bus error caused by alignment failures on NetBSD/Sparc.frueauf1-0/+91
Provided by Julian Coleman <J.D.Coleman@newcastle.ac.uk>.
1998-12-31Ok, cause I am to lame to teach cvs not so substitute $Id$, I trick itfrueauf3-100/+147
by using a different diff format. No damn $Id$ anymore.
1998-12-31I hope the patches are sane now...frueauf2-0/+90
1998-12-31Gna, $Id$ where changed, maybe cvs add -ko fixes sustition *sigh*frueauf2-90/+0
1998-12-31Add and enable pgp5.frueauf1-1/+2
1998-12-31Initial import of pgp-5.0i, PGP 5i (international version).frueauf12-0/+239
Based on pr 6684 by Martin J. Laubach with heavy refining/fixing by myself. XXX This package needs still some tweaking to work with rsaref. XXX Maybe some US citizen developer can take over? XXX At least its usefull to non-US ppl.
1998-12-18Re-enable on alphatsarna1-3/+1
1998-12-14pkglint: move WRKSRC where it belongs.frueauf1-2/+2
1998-12-13Update sudo to 1.5.7p4.frueauf4-836/+1850
Changes since 1.5.6: - Various bug fixes (not security related). - All compile-time options are now set via options to the configure script. - visudo is now installed in /usr/local/sbin where it belongs. [of course this is ${PREFIX}/sbin in our package for a long time - TF] - two problems with tgetpass() have been fixed. In one case the user was not always given a chance to enter a password. In the other a newline was not always printed after the password was entered on Linux. - Added support for Digital UNIX SIA (Security Integration Architecture). - %groups now work as RunAs specifiers like the man page says. - Sudo now sets the USER environment variable to the target user (root unless -u is specified). - Sudo will print "command not found" unless configure was run with --disable-path-info. Also, tell user when we ignore '.' in their path and it would have been used but for --with-ignore-dot. This means that sudo can be used to gather information about the existence of executable in directories not accessible by a normal user. If this bothers you, run configure with --disable-path-info. [in our package --disable-path-info is default - TF] - A longstanding bug wrt "sudo -l" has been fixed that could cause "sudo -l" to complain about non-existent syntax errors. - When configured with --with-tty-tickets the filename is now "user:tty" (was "user.tty") since a username could have a '.' in it.
1998-12-03Add LICENSE=no-commercial-use.tv1-2/+3
1998-12-03- libtoolize for use by mod_ssl (name is now "ssleay" and not "SSLeay" totv13-152/+333
match directory name and to differentiate from previous version) - remove md5 symlink to ssleay (conflicts with /usr/bin/md5) - move all include files to $PREFIX/include/ssleay (too much conflict potential in $PREFIX/include, not the least of which is md5.h) - link rsaref glue goop right into libcrypto, only as required - turn asm off on alpha temporarily while trying to find source of math errors on LP64 - set NOT_FOR_ARCHS=alpha *64 to prevent compiling on LP64 platforms
1998-11-24And and enable rc5des.agc1-1/+2
1998-11-24Initial import of rc5des, the distributed client for rc5-64 challenge.agc7-0/+79
This is a package of binaries, as compiled by Michael Graff (explorer@flame.org), and I have not even tried to run these binaries, let alone seen the source, and so cannot vouch for them. Binaries are provided for Alpha, i386 and arm32 architectures.
1998-11-17Enable tripwire.agc1-2/+2
1998-11-17Initial import of tripwire-1.2, a file and directory integrity checker,agc11-0/+390
into the NetBSD Packages Collection.
1998-11-12Some pkglint nits and add all missing rcs ids.frueauf5-3/+14
1998-11-04Add necessary security patches from PR pkg/6392 by Wolfgang Rupprechttron8-241/+246
and convert old patch files to unified output format.
1998-10-10add nfsbughubertf1-1/+2
1998-10-08NFS security verification suitehubertf6-0/+216
1998-10-08NFS security verification suitehubertf2-0/+21
1998-10-05Describing the ssleay package as "SSL" is not much help - expand the acronym.agc1-1/+1
1998-10-02Get libtool from the right place.tv2-5/+5
Nuke the README before refetching.
1998-10-02Clean up:tv7-77/+68
- make this work on all arches (use C where no equivalent asm is available). Since the arch specifics are determined by `uname', set ONLY_FOR_ARCHS to the full list of current architectures. - don't use various methods of editing (patch, sed) where pulling values from the environment and using CONFIGURE_ENV/MAKE_ENV will suffice. - use %D to get the value of $PREFIX in the PLIST; the PLIST doesn't need to be sed edited to get this as part of an @exec! - use pmake's += construct to add rsaref-specific stuff, instead of adding "extra" patches. Now works on arm32, but probably not on alpha and sparc64 (tests fail on alpha; likely type-sizing problems, and still looking at that).
1998-10-02Don't overwrite the ssleay.cnf in /usr/pkg/lib if it already exists.cjs4-20/+13
Don't remove it on de-install. Put the example config file (ssleay.cnf.eg) in lib right beside the real config. Yes, this file really should be in etc, but the programs have several different routines that look for the config files, at least one of which has the use of lib hard-coded. This would be pretty messy to fix.
1998-10-01Don't hardcode /usr/pkg, use ${PREFIX}, closes pr 6190 by Chris Yokum.frueauf1-2/+2
1998-09-30This now requires USE_RSAREF2 to be set to YES or NO, and builds accordingly.cjs8-47/+72
1998-09-28Update sudo to 1.5.6p2.frueauf5-41/+1899
1998-09-27Tim tested some of these, but I don't know which. Since at least one oftsarna1-1/+3
the pkgs broke on Alpha that was not expected to, disable them all for the 1.3.3 tag to be on the safe side :-(
1998-09-24Some read-only pkgsrc fixups..garbled1-4/+4
1998-09-22alpha->vax, since Alpha now works for Python dynamicly loaded modules,tsarna1-2/+2
but VAX never has.
1998-09-21Fix up a little rpath ELF lossage. Now this works on alpha.garbled3-6/+15
1998-09-21Remove the exec/unexec stuff for links and just list them as normal files.frueauf1-148/+73
Remove the bogus ranlib calls.
1998-09-17Don't hardcode install path in NetBSD.sh to /usr/pkg. Run perl fromfrueauf2-5/+7
${PREFIX}/bin/perl.
1998-09-17Make this pkg compile on alpha. (thanks to Ross for the asm) Clean outgarbled6-22/+56
the Makefile.patch, there is a better way..
1998-09-10No US sites, yes sir. Replaced with a German site. Since ftp.cs.hut.fikim1-2/+2
and ftp.funet.fi are on the same campus, I just wanted to add a site I can reach when FUNET/CSC/HUT and/or NORDUNET have problems...
1998-09-10Don't write truncated hostnames in utmp, use IP addresses instead.kim3-2/+74
Don't immediately timeout sessions as idle just because an actual idle check had not been done yet (so last_idle_time was zero, and the difference to current time is way over your idle time limit). Also added the first US mirror of ssh into MASTER_SITES.
1998-09-05clean up some nitsexplorer5-3/+9
1998-09-05clean up how arch's are dealt with by adding ONLY_FOR_ARCHS= andexplorer2-2/+4
passing the MACHINE_ARCH off to the config script
1998-09-04enable ssleayexplorer1-2/+2