CVS log for pkgsrc/security/kth-krb4/Attic/Makefile

Up to [cvs.NetBSD.org] / pkgsrc / security / kth-krb4

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

At long last, remove KerberosIV support. Just use ROT13 if you need a
similar encryption strength.

Recursive PKGREVISION bump for OpenSSL API version bump.

* .include "../../devel/readline/buildlink3.mk" with USE_GNU_READLINE=yes
  are replaced with .include "../../devel/readline/buildlink3.mk", and
  USE_GNU_READLINE are removed,

* .include "../../devel/readline/buildlink3.mk" without USE_GNU_READLINE
  are replaced with .include "../../mk/readline.buildlink3.mk".

PKGREVISION bumps for the security/openssl 1.0.1d update.

Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.

USE_TOOLS+=yacc

CONFLICTS with heimdal, libdes and arla; ++pkgrevision

Add CONFLICTS with new man-pages package. For details, see
man-pages/Makefile.

security/kth-krb4: Add DragonFly and FreeBSD support

The majority of these patches were inspired from FreeBSD's ports.  FreeBSD,
along with at least Debian, have removed Kerberos4 due to secuity concerns.
From: http://web.mit.edu/kerberos/krb4-end-of-life.html :

"Serious protocol flaws[2] have been found in Kerberos 4. These flaws permit
attacks which require far less effort than an exhaustive search of the DES
key space. These flaws make Kerberos 4 cross-realm authentication an
unacceptable security risk and raise serious questions about the security of
the entire Kerberos 4 protocol.

The known insecurity of DES, combined with the recently discovered protocol
flaws, make it extremely inadvisable to rely on the security of version 4 of
the Kerberos protocol. These factors motivate the MIT Kerberos Team to remove
support for Kerberos version 4 from the MIT implementation of Kerberos."

This end-of-life announcement is dated 19 October 2006.  I think it's a
good question to ask why this package and the packages that depend on it
are still in pkgsrc.

* fix make target dependency to man page aliases (arg_printusage.3) will be
  always installed.
* add user-destdir installation support.

Recursive PKGREVISION bump for jpeg update to 8.

Recursive ABI depends update and PKGREVISION bump for readline-6.0 shlib
major change.

Reported by Robert Elz in PR 41345.

Don't put glob.h in the PLIST for NetBSD.  At least 4.0 and current do
not require this, and this fixes the build on those systems.  Not
objected to by joerg@.

Try to fix build on NetBSD.

Per the process outlined in revbump(1), perform a recursive revbump
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@

Modular Xorg support.

Update kth-krb4 to 1.2.2 (the current release).

New in 1.2.2:

    * cross-realm disabled in the server

Addresses PR pkg/31431 by Zafer Aydogan.

While there, make package pkglint-clean.

I don't see any reason for kth-krb4 to conflict with zephyr,
maintainer didn't respond to the question either. So remove the
CONFLICT and bump revision.

Don't install cat pages at all, it's not worth the trouble to get
correctly working on all platforms.

List the info pages directly in the PLIST and ensure that we honor
PKGINFODIR.

Add missing files to PLIST, sort. Bump PKGREVISION.

cat pages are not installed on DragonFly and FreeBSD, so tell
the PLIST framework that we want only man pages.

Recursive revision bump / recommended bump for gettext ABI change.

Ran "pkglint --autofix", which corrected some of the quoting issues in
CONFIGURE_ARGS.

Massive cleanup of buildlink3.mk and builtin.mk files in pkgsrc.
Several changes are involved since they are all interrelated.  These
changes affect about 1000 files.

The first major change is rewriting bsd.builtin.mk as well as all of
the builtin.mk files to follow the new example in bsd.builtin.mk.
The loop to include all of the builtin.mk files needed by the package
is moved from bsd.builtin.mk and into bsd.buildlink3.mk.  bsd.builtin.mk
is now included by each of the individual builtin.mk files and provides
some common logic for all of the builtin.mk files.  Currently, this
includes the computation for whether the native or pkgsrc version of
the package is preferred.  This causes USE_BUILTIN.* to be correctly
set when one builtin.mk file includes another.

The second major change is teach the builtin.mk files to consider
files under ${LOCALBASE} to be from pkgsrc-controlled packages.  Most
of the builtin.mk files test for the presence of built-in software by
checking for the existence of certain files, e.g. <pthread.h>, and we
now assume that if that file is under ${LOCALBASE}, then it must be
from pkgsrc.  This modification is a nod toward LOCALBASE=/usr.  The
exceptions to this new check are the X11 distribution packages, which
are handled specially as noted below.

The third major change is providing builtin.mk and version.mk files
for each of the X11 distribution packages in pkgsrc.  The builtin.mk
file can detect whether the native X11 distribution is the same as
the one provided by pkgsrc, and the version.mk file computes the
version of the X11 distribution package, whether it's built-in or not.

The fourth major change is that the buildlink3.mk files for X11 packages
that install parts which are part of X11 distribution packages, e.g.
Xpm, Xcursor, etc., now use imake to query the X11 distribution for
whether the software is already provided by the X11 distribution.
This is more accurate than grepping for a symbol name in the imake
config files.  Using imake required sprinkling various builtin-imake.mk
helper files into pkgsrc directories.  These files are used as input
to imake since imake can't use stdin for that purpose.

The fifth major change is in how packages note that they use X11.
Instead of setting USE_X11, package Makefiles should now include
x11.buildlink3.mk instead.  This causes the X11 package buildlink3
and builtin logic to be executed at the correct place for buildlink3.mk
and builtin.mk files that previously set USE_X11, and fixes packages
that relied on buildlink3.mk files to implicitly note that X11 is
needed.  Package buildlink3.mk should also include x11.buildlink3.mk
when linking against the package libraries requires also linking
against the X11 libraries.  Where it was obvious, redundant inclusions
of x11.buildlink3.mk have been removed.

Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.

Libtool fix for PR pkg/26633, and other issues.  Update libtool to 1.5.10
in the process.  (More information on tech-pkg.)

Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.

Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.

Remove some obsolete comments, ok wennmach.

AUTOMAKE_REQD should only be set to 1.4 in the few cases where needed,
otherwise the default is better (and the variable doesn't need to be set).
Remove a few cases where it was set unnecessarily.

Convert to buildlink3.

PKGREVISION bump after openssl-security-fix-update to 0.9.6m.
Buildlink files: RECOMMENDED version changed to current version.

LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globs
relative to ${WRKSRC}.  Remove redundant LIBTOOL_OVERRIDE settings that
are automatically handled by the default setting in bsd.pkg.mk.

Pull in value of KRB4_PREFIX_CMDS from KERBEROS_PREFIX_CMDS.

This provides both, simple and fine-grained control over the Kerberos
prefix. If not specified, KRB4_PREFIX_CMDS will default to the value
of KERBEROS_PREFIX_CMDS. If specified, it overrides KERBEROS_PREFIX_CMDS.

Do not install bin/ftp (this will overwrite the ftp installed as part
of bootstrap-pkgsrc).

ftp is now always installed as bin/k4ftp. In addition, if the variable
KRB4_PREFIX_CMDS is set to YES, rcp, rlogin, rsh, su, and telnet will
be installed with a "k4" prefix.

This has been achieved by stealing the transform code from security/heimdal
and by tayloring it a bit.

Closes PR pkg/24354 by Tracy Di Marco White.

kth-krb4: add CONFLICT on tnftp.
tnftp: add CONFLICT on lukemftp, kth-krb4.

PKGREVISION++ after openssl update.

USE_NEW_TEXINFO is unnecessary now.

Convert to USE_NEW_TEXINFO.

s/netbsd.org/NetBSD.org/

Whitespace fix

Update to version 1.2.1.

Changes in release 1.2.1:
* kadmind: fix remote exploit

Changes in release 1.2:
* fix buffer overrun in ftp
* fix openssl building
* don't try to force encryption in telnet if not talking to a default
  telnet port
* recognise AIX 5
* should work with more DB libraries

Convert comments to use automake.mk.

buildlink1 -> buildlink2

Merge changes in packages from the buildlink2 branch that have
buildlink2.mk files back into the main trunk.

Merge changes from pkgsrc-current into the buildlink2 branch for the
packages that have buildlink2.mk files.

Even though it's commented out, correct the pre-configure target for
package views

Deprecate IS_INTERACTIVE.

The correct way to mark this package as broken on sparc64 is to use
the BROKEN definition.

Update kth-krb4 to 1.1.1.

This is a prerequisite step for the new arla version (0.35.7).
While here, buildlinkify.

Mark this package as interactive on sparc64. Compiling it needs attention
so the compiler is killed when it spins.

XXX needs fixing

Introduce new framework for handling info files generation and installation.

Summary of changes:
- removal of USE_GTEXINFO
- addition of mk/texinfo.mk
- inclusion of this file in package Makefiles requiring it
- `install-info' substituted by `${INSTALL_INFO}' in PLISTs
- tuning of mk/bsd.pkg.mk:
    removal of USE_GTEXINFO
    INSTALL_INFO added to PLIST_SUBST
    `${INSTALL_INFO}' replace `install-info' in target rules
    print-PLIST target now generate `${INSTALL_INFO}' instead of `install-info'
- a couple of new patch files added for a handful of packages
- setting of the TEXINFO_OVERRIDE "switch" in packages Makefiles requiring it
- devel/cssc marked requiring texinfo 4.0
- a couple of packages Makefiles were tuned with respect of INFO_FILES and
  makeinfo command usage

See -newly added by this commit- section 10.24 of Packages.txt for
further information.

Mechanical changes to 375 files to change dependency patterns of the form
foo-* to foo-[0-9]*.  This is to cause the dependencies to match only the
packages whose base package name is "foo", and not those named "foo-bar".
A concrete example is p5-Net-* matching p5-Net-DNS as well as p5-Net.  Also
change dependency examples in Packages.txt to reflect this.

The telnetd in kth-krb4-1.0.1 seems to be vulnerable to the buffer overflow
attack described in SA2001-12 (noted by T. M. Pederson <salvage@plethora.net>
in PR pkg/13610).

Instead of applying the patch submitted by T. M. Pederson, we upgrade
kth-krb4 to 1.0.9 where the vulnerability has been fixed.

The upgrade to 1.0.9 was provided by Assar Westerlund <assar@netbsd.org>
and slightly modified by myself.

Also included is diff file for /etc/services for NetBSD-1.5 (and 1.5.1)
also submitted by T. M. Pederson <salvage@plethora.net> in PR 12540.

Note: files/services.diff resurfaces as files/services-1.4.2.diff.

Closes PR 13610 and PR 12540.

Do not install man/man5/krb.equiv.5 to avoid a conflict with
cyrus-imapd. kth-krb4 thus no longer conflicts with cyrus-imapd.

Added CONFLICTS to cyrus-imapd, lukemftp, zephyr, and libdes.

This conflicts with wu-ftpd.

Cleanup MKDIR usage => INSTALL_*_DIR
XXX need to teach pkglint to be more picky about this

Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT.

Add automatic ${VARIABLE} handling for MESSAGE files.
Convert most MESSAGE files to new syntax (${VARIABLE} gets replaced,
not @VARIABLE@, nor @@VARIABLE@@).
By default, substitutions are done for LOCALBASE, PKGNAME, PREFIX,
X11BASE, X11PREFIX; additional patterns can be added via MESSAGE_SUBST.
Clean up some packages while I'm there; add RCS tags to most MESSAGEs.
Remove some uninteresting MESSAGEs.

Do not install bin/des in order to avoid a conflict with the
openssl package (close to nobody is using this program anyways).

Reorganize crypto handling, as discussed on tech-pkg. Remove all
RESTRICTED= variables that were predicated on former U.S. export
regulations. Add CRYPTO=, as necessary, so it's still possible to
exclude all crypto packages from a build by setting MKCRYPTO=no
(but "lintpkgsrc -R" will no longer catch them).

Specifically,

- - All packages which set USE_SSL just lose their RESTRICTED
    variable, since MKCRYPTO responds to USE_SSL directly.
- - realplayer7 and ns-flash keep their RESTRICTED, which is based
    on license terms, but also gain the CRYPTO variable.
- - srp-client is now marked broken, since the distfile is evidently
    no longer available. On this, we're no worse off than before.
    [We haven't been mirroring the distfile, or testing the build!]
- - isakmpd gets CRYPTO for RESTRICTED, but remains broken.
- - crack loses all restrictions, as it does not evidently empower
    a user to utilize strong encryption (working definition: ability
    to encode a message that requires a secret key plus big number
    arithmetic to decode).

Replace MIRROR_DISTFILES and NO_CDROM with the more descriptive and
more fine-grained NO_{BIN,SRC}_ON_{FTP,CDROM} definitions.

MIRROR_DISTFILES and NO_CDROM are now dead.

Reflect new location of services.diff.

Added descriptions of what exactly each patch does.
Inserted placeholders into MESSAGE which get replaced during pre-install.
Enhanced MESSAGE text.

Initial import of kth-krb4-1.0.1: Kerberos IV distribution from KTH

Initial revision