From eb73292bb30493564f53f8f97fdb05fbf88ce794 Mon Sep 17 00:00:00 2001 From: reed Date: Fri, 7 Mar 2008 23:40:06 +0000 Subject: New package from pkgsrc-wip: portmap (I have been using this for years.) This is an RPC portmapper that prevents theft of NIS (YP), NFS, and other sensitive information via the portmapper. As an option, the program supports access control in the style of the TCP Wrappers (log_tcp) package. Daemons that offer RPC services tell the portmapper on what port they listen. And clients asks the portmapper what port the daemon is using. RPC network port numbers may change each time the system is booted. This is Wietse Venema's fourth replacement portmapper. It is derived from source code in the RPCSRC 4.0 and the TIRPC source distributions. --- net/portmap/DESCR | 13 +++++++++++++ net/portmap/Makefile | 30 ++++++++++++++++++++++++++++++ net/portmap/PLIST | 7 +++++++ net/portmap/distinfo | 7 +++++++ net/portmap/files/portmap.sh | 16 ++++++++++++++++ net/portmap/patches/patch-aa | 36 ++++++++++++++++++++++++++++++++++++ net/portmap/patches/patch-ab | 29 +++++++++++++++++++++++++++++ 7 files changed, 138 insertions(+) create mode 100644 net/portmap/DESCR create mode 100644 net/portmap/Makefile create mode 100644 net/portmap/PLIST create mode 100644 net/portmap/distinfo create mode 100755 net/portmap/files/portmap.sh create mode 100644 net/portmap/patches/patch-aa create mode 100644 net/portmap/patches/patch-ab (limited to 'net/portmap') diff --git a/net/portmap/DESCR b/net/portmap/DESCR new file mode 100644 index 00000000000..7f1b09b17f8 --- /dev/null +++ b/net/portmap/DESCR @@ -0,0 +1,13 @@ +This is an RPC portmapper that prevents theft of NIS (YP), NFS, +and other sensitive information via the portmapper. As an option, +the program supports access control in the style of the TCP Wrappers +(log_tcp) package. + +Daemons that offer RPC services tell the portmapper on what port +they listen. And clients asks the portmapper what port the daemon +is using. RPC network port numbers may change each time the system +is booted. + +This is Wietse Venema's fourth replacement portmapper. It is +derived from source code in the RPCSRC 4.0 and the TIRPC source +distributions. diff --git a/net/portmap/Makefile b/net/portmap/Makefile new file mode 100644 index 00000000000..5305d431d6f --- /dev/null +++ b/net/portmap/Makefile @@ -0,0 +1,30 @@ +# $NetBSD: Makefile,v 1.1.1.1 2008/03/07 23:40:06 reed Exp $ + +DISTNAME= portmap_4 +PKGNAME= portmap-4 +PKGREVISION= 3 +CATEGORIES= net +MASTER_SITES= ftp://ftp.porcupine.org/pub/security/ + +MAINTAINER= reed@reedmedia.net +HOMEPAGE= ftp://ftp.porcupine.org/pub/security/index.html +COMMENT= RPC portmapper with access control + +# TODO: maybe look at portmap_5beta ? + +# XXX allow this to install on NetBSD, because this also +# XXX provides pmap_dump and pmap_set + +INSTALLATION_DIRS+= sbin share/doc/portmap +MAKE_FLAGS+= WRAP_DIR=${BUILDLINK_PREFIX.tcp_wrappers}/lib +NO_CONFIGURE= yes +RCD_SCRIPTS= portmap + +do-install: + ${INSTALL_PROGRAM} ${WRKSRC}/portmap ${PREFIX}/sbin/ + ${INSTALL_PROGRAM} ${WRKSRC}/pmap_dump ${PREFIX}/sbin/ + ${INSTALL_PROGRAM} ${WRKSRC}/pmap_set ${PREFIX}/sbin/ + ${INSTALL_DATA} ${WRKSRC}/README ${PREFIX}/share/doc/portmap/ + +.include "../../security/tcp_wrappers/buildlink3.mk" +.include "../../mk/bsd.pkg.mk" diff --git a/net/portmap/PLIST b/net/portmap/PLIST new file mode 100644 index 00000000000..94775e16e9f --- /dev/null +++ b/net/portmap/PLIST @@ -0,0 +1,7 @@ +@comment $NetBSD: PLIST,v 1.1.1.1 2008/03/07 23:40:06 reed Exp $ +sbin/pmap_dump +sbin/pmap_set +sbin/portmap +share/doc/portmap/README +share/examples/rc.d/portmap +@dirrm share/doc/portmap diff --git a/net/portmap/distinfo b/net/portmap/distinfo new file mode 100644 index 00000000000..599f9355625 --- /dev/null +++ b/net/portmap/distinfo @@ -0,0 +1,7 @@ +$NetBSD: distinfo,v 1.1.1.1 2008/03/07 23:40:06 reed Exp $ + +SHA1 (portmap_4.tar.gz) = 02e32c98040da21dfa965a0468e4f561f3ad08a1 +RMD160 (portmap_4.tar.gz) = 3559e1652b04a34ac8814243b70069fd64a2f68e +Size (portmap_4.tar.gz) = 16152 bytes +SHA1 (patch-aa) = f26735fc93188c8f1d4503bab7e9ccb616847743 +SHA1 (patch-ab) = ebc8a440384f93724dfba10df4f4583b78af4b5d diff --git a/net/portmap/files/portmap.sh b/net/portmap/files/portmap.sh new file mode 100755 index 00000000000..fbbbd7af01e --- /dev/null +++ b/net/portmap/files/portmap.sh @@ -0,0 +1,16 @@ +#!@RCD_SCRIPTS_SHELL@ +# +# $NetBSD: portmap.sh,v 1.1.1.1 2008/03/07 23:40:06 reed Exp $ +# + +# PROVIDE: portmap +# REQUIRE: NETWORKING ntpdate syslogd named ppp + +. /etc/rc.subr + +name="portmap" +rcvar=$name +command="@PREFIX@/sbin/${name}" + +load_rc_config $name +run_rc_command "$1" diff --git a/net/portmap/patches/patch-aa b/net/portmap/patches/patch-aa new file mode 100644 index 00000000000..c8e761fe956 --- /dev/null +++ b/net/portmap/patches/patch-aa @@ -0,0 +1,36 @@ +$NetBSD: patch-aa,v 1.1.1.1 2008/03/07 23:40:06 reed Exp $ + +--- Makefile.orig 1996-05-31 06:50:40.000000000 -0700 ++++ Makefile +@@ -8,7 +8,7 @@ + # if you disagree. See `man 3 syslog' for examples. Some syslog versions + # do not provide this flexibility. + # +-FACILITY=LOG_MAIL ++FACILITY=LOG_AUTH + + # To disable host access control, comment out the following macro definition. + # Note: host access control requires the strtok() and strchr() routines. +@@ -36,7 +36,7 @@ CHECK_PORT = -DCHECK_PORT + # With verbose logging on, HP-UX 9.x and AIX 4.1 leave zombies behind when + # SIGCHLD is not ignored. Enable next macro for a fix. + # +-# ZOMBIES = -DIGNORE_SIGCHLD # AIX 4.x, HP-UX 9.x ++ZOMBIES = -DIGNORE_SIGCHLD # AIX 4.x, HP-UX 9.x + + # Uncomment the following macro if your system does not have u_long. + # +@@ -46,11 +46,11 @@ CHECK_PORT = -DCHECK_PORT + # libwrap.a object library. WRAP_DIR should specify the directory with + # that library. + +-WRAP_DIR= ../tcp_wrappers ++#WRAP_DIR= ../tcp_wrappers + + # Auxiliary object files that may be missing from your C library. + # +-AUX = daemon.o strerror.o ++AUX = daemon.o + + # NEXTSTEP is a little different. The following seems to work with NS 3.2 + # diff --git a/net/portmap/patches/patch-ab b/net/portmap/patches/patch-ab new file mode 100644 index 00000000000..57a9463f40e --- /dev/null +++ b/net/portmap/patches/patch-ab @@ -0,0 +1,29 @@ +$NetBSD: patch-ab,v 1.1.1.1 2008/03/07 23:40:06 reed Exp $ + +--- portmap.c.orig 2003-03-19 23:42:46.000000000 -0800 ++++ portmap.c 2003-03-19 23:44:06.000000000 -0800 +@@ -85,6 +85,7 @@ + #include + #include + #include ++#include + #include + #include + #include +@@ -124,7 +125,6 @@ + static void callit(); + struct pmaplist *pmaplist; + int debugging = 0; +-extern int errno; + + #include "pmap_check.h" + +@@ -235,7 +235,7 @@ + /* need to override perror calls in rpc library */ + void + perror(what) +- const char *what; ++ __const char *what; + { + + syslog(LOG_ERR, "%s: %m", what); -- cgit v1.2.3