summaryrefslogtreecommitdiffstats
path: root/libexec/Makefile
Commit message (Collapse)AuthorAgeFilesLines
* Separate BLACKLIST vs BLACKLIST_SUPPORT properlylidl2016-06-071-1/+1
| | | | Sponsored by: The FreeBSD Foundation
* Add basic blacklist build supportlidl2016-06-021-0/+5
| | | | | | | | Reviewed by: rpaulo Approved by: rpaulo Relnotes: YES Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D5913
* Convert casperd(8) daemon to the libcasper.oshogbo2016-02-251-5/+0
| | | | | | | | | | | | | | | | | | | | After calling the cap_init(3) function Casper will fork from it's original process, using pdfork(2). Forking from a process has a lot of advantages: 1. We have the same cwd as the original process. 2. The same uid, gid and groups. 3. The same MAC labels. 4. The same descriptor table. 5. The same routing table. 6. The same umask. 7. The same cpuset(1). From now services are also in form of libraries. We also removed libcapsicum at all and converts existing program using Casper to new architecture. Discussed with: pjd, jonathan, ed, drysdale@google.com, emaste Partially reviewed by: drysdale@google.com, bdrewery Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4277
* Fix installation of makewhatis.local(1) since r283777.bdrewery2016-02-181-0/+5
| | | | | | | | The wrapper script has moved to libexec/makewhatis.local since it is not directlry related to the older makewhatis(1) utility that has been replaced by the usr.bin/mandoc version. Reported by: vangyzen
* Move all the dma(8) components into one single directorybapt2015-10-091-2/+0
| | | | | | | Simplifying maintainance and options (only one place to deal with MK_DMAGENT) This also makes packaging base less intrusive by getting a single point where to add tags.
* Add the following options to enable/disable several features in the base systemngie2015-02-041-6/+24
| | | | | | | | | | | | | | | WITHOUT_BOOTPARAMD - bootparamd WITHOUT_BOOTPD - bootpd WITHOUT_FINGER - finger, fingerd WITHOUT_FTP - ftp, ftpd WITHOUT_INETD - inetd WITHOUT_RBOOTD - rbootd WITHOUT_TCP_WRAPPERS - tcpd, et al WITHOUT_TFTP - tftp, tftp-server WITHOUT_TIMED - timed MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* Add MK_TALK knob for building the talk and talkdngie2015-01-251-1/+4
| | | | | MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* HYPERV isn't available on all architectures, but just on by defaultimp2014-10-161-5/+2
| | | | | | | | for i386/amd64. Rather, it only works on i386/amd64 and should only be built there. Rather than change the default based on which architecutre, do things more directly by only building it on i386/amd64 and having it always on. This is how we handle other options that are relevant only for a few architectures.
* Import HyperV Key-Value Pair (KVP) driver and daemon code by Microsoft,delphij2014-09-131-0/+5
| | | | | | | | | | | | | | many thanks for their continued support of FreeBSD. While I'm there, also implement a new build knob, WITHOUT_HYPERV to disable building and installing of the HyperV utilities when necessary. The HyperV utilities are only built for i386 and amd64 targets. This is a stable/10 candidate for inclusion with 10.1-RELEASE. Submitted by: Wei Hu <weh microsoft com> MFC after: 1 week
* Use src.opts.mk in preference to bsd.own.mk except where we need stuffimp2014-05-061-1/+1
| | | | from the latter.
* Rename WITHOUT_DMA into WITHOUT_DMAGENT to avoid confusionbapt2014-02-221-1/+1
| | | | Requested by: ian
* Import Dragonfly Mail Agent into base systembapt2014-02-211-0/+7
| | | | | | | | | | | | It is a small and lightweight Mail Transport Agent. It accepts mails from locally installed Mail User Agents (MUA) and delivers the mails either locally or to a remote destination. Remote delivery includes several features like TLS/SSL support, SMTP authentication and NULLCLIENT. Make dma conditional to new WITHOUT_DMA option and make it respect WITHOUT_MAIL Reviewed by: peter Discussed with: emaste, bz, peter
* Please welcome casperd daemon. It (and its services) will be responsible forpjd2013-12-021-0/+5
| | | | | | | | | | | | | | | | | | | giving access to functionality that is not available in capability mode sandbox. The functionality can be precisely restricted. Start with the following services: - system.dns - provides API compatible to: - gethostbyname(3), - gethostbyname2(3), - gethostbyaddr(3), - getaddrinfo(3), - getnameinfo(3), - system.grp - provides getgrent(3)-compatible API, - system.pwd - provides getpwent(3)-compatible API, - system.random - allows to obtain entropy from /dev/random, - system.sysctl - provides sysctlbyname(3-compatible API. Sponsored by: The FreeBSD Foundation
* Build and install the atf tests.jmmv2013-11-081-0/+2
| | | | | Reviewed by: freebsd-testing Approved by: rpaulo (mentor)
* Subsume the functionality of MK_ATF into MK_TESTS.jmmv2013-11-081-4/+4
| | | | | | | | | | There is no reason to keep the two knobs separate: if tests are enabled, the ATF libraries are required; and if tests are disabled, the ATF libraries are not necessary. Keeping the two just serves to complicate the build. Reviewed by: freebsd-testing Approved by: rpaulo (mentor)
* By popular demand, move freebsd-version(1) from /libexec to /bin.des2013-10-091-1/+0
| | | | Approved by: re (gjb)
* Introduce the /libexec/freebsd-version script, which is intended to bedes2013-10-071-0/+1
| | | | | | | | | | used by auditing tools to determine the userland patch level when it differs from what `uname -r` reports. This can happen when the system is kept up-to-date using freebsd-update and the last SA did not touch the kernel, or when a new kernel has been installed but the system has not yet rebooted. Approved by: re (glebius)
* Add ATF to the build. This is may be a bit rought around the egdes,marcel2012-10-221-1/+6
| | | | | | | | | | | | | | | | | but committing it helps to get everyone on the same page and makes sure we make progress. Tinderbox breakages that are the result of this commit are entirely the committer's fault -- in other words: buildworld testing on amd64 only. Credits follow: Submitted by: Garrett Cooper <yanegomi@gmail.com> Sponsored by: Isilon Systems Based on work by: keramida@ Thanks to: gnn@, mdf@, mlaier@, sjg@ Special thanks to: keramida@
* Add a new library: libulog.ed2009-12-031-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | One of the things I really want to do, is to get rid of the limitations of our current utmp(5) mechanism: - It only allows 8 byte TTY device names. - The hostname only allows 16 bytes of storage. I'm not a big fan of <utmpx.h>, but I think we should at least try to add parts of it. Unfortunately we cannot implement <utmpx.h>, because we miss various fields, such as ut_id, ut_pid, etc. The API provided by libulog shares some similarities with <utmpx.h>, so it shouldn't be too hard to port these applications eventually. In most simple cases, it should just be a matter of removing the ulog_ prefix everywhere. As a bonus, it also implements a function called ulog_login_pseudo(), which allows unprivileged applications to write log entries, provided they have a valid file descriptor to a pseudo-terminal master device. libulog will allow a smoother transition to a new file format by adding a library interface to deal with utmp/wtmp/lastlog files. I initially thought about adding the functionality to libutil, but because I'm not planning on keeping this library around forever, we'd better keep it separated. Next items on the todo list: 1. Port applications in the base system (and ports) to libulog, instead of letting them use <utmp.h>. 2. Remove <utmp.h>, implement <utmpx.h> and reimplement this library on top. 3. Port as many applications as possible back to <utmpx.h>.
* Do the first step in removing lukemftpd from the base system. Disconnectremko2009-09-031-1/+0
| | | | | | | | | | | | | | | it from the build. If you are using the FTP daemon, please consider using the port ftp/tnftpd which is the same FTP server, but newer and might have more/better functionality. This results in us providing only one ftp daemon by default. Reviewed by: bz Approved by: imp (mentor, implicit) MFC after: 3 days Silence from: obrien
* Per the man page:dougb2009-05-261-1/+0
| | | | | | | | | The makekey utility has been deprecated and will be removed in a future release of FreeBSD. Actually removing it was approved back on 10/29/2007 by re (kensmith) but I dropped the ball on actually removing it. It's doubtful that it's become more relevant/useful in the intervening time.
* add new build knobs and jigger some existing controls to improvesam2008-09-211-5/+21
| | | | | | | | control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month
* Remove the now unneeded pt_chown utility.ed2008-08-241-1/+0
| | | | | | | | | | | | | | | | | | | | | | | Before we had a posix_openpt() that allocated PTY's with proper permissions in place, we used this set-uid utility to change the ownership of PTY slave devices to the real user ID of the process. This utility was used to implement grantpt(). In my first designs of the MPSAFE TTY layer, I replaced this by adding an ioctl() called TIOCGRANTPT, which was used to change the ownership. I left the pt_chown utility, because older C libraries needed it to work properly. After some discussions back in June I changed the PTY code to set permissions properly upon creation. Fortunately the previous grantpt() implementation changed permissions by hand when pt_chown is not installed, which always succeeds. This means grantpt() still works properly, even though the set-uid utility is missing. I've done tests with FreeBSD 5.2.1, FreeBSD 6.3 and FreeBSD 7.0 jails. All of them still work if I remove pt_chown. Reviewed by: philip (ex-mentor)
* Add a hackish knob to skip rtld, NO_RTLD. In conjunction withyar2007-10-311-1/+1
| | | | | | | | | | | | | | | | | src/Makefile.inc1 rev. 1.590, it can allow installing a world cross-built for a different arch over the live system. The procedure is more or less as follows: cp -R /rescue /rescue.old make installkernel TARGET_ARCH=foo make -DNO_RTLD installworld TARGET_ARCH=foo ^^^^^^^^^ PATH=/rescue.old chflags noschg /libexec/ld-elf.so.1 cp /usr/obj/foo/usr/src/libexec/rtld/ld-elf.so.1 /libexec chflags schg /libexec/ld-elf.so.1 <ditto for ld-elf32.so.1 if installing for amd64> reboot
* Link pf 4.1 to the build:mlaier2007-07-031-2/+2
| | | | | | | | - move ftp-proxy from libexec to usr.sbin - add tftp-proxy - new altq mtag link Approved by: re (kensmith)
* Reimplementation of world/kernel build options. For details, see:ru2006-03-171-4/+6
| | | | | | | | http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html The src.conf(5) manpage is to follow in a few days. Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)
* Remove rexecd(8), a server that implements a particularly insecurenectar2005-06-101-2/+0
| | | | | | | method of executing commands remotely. There are no rexec clients in the FreeBSD tree, and the client function rexec(3) is present only in libcompat. It has been documented as "obsolete" since 4.3BSD, and its use has been discouraged in the man page for over 10 years.
* Enable lukemftpd for 6.0-RELEASE.obrien2005-05-161-5/+1
|
* Install rlogind(8). Pointy hat is available on request.ru2005-03-031-1/+1
|
* Wrap BSD r* commands in NO_RCMDS.trhodes2005-03-021-3/+9
| | | | | | Change NO_RCMDNS to NO_RCMDS and do the switch in bsd.compat.mk. Discussed with: ru, nectar
* The only user of this utility (share/man/man0) was removed 2+ years ago.ru2005-02-091-1/+0
|
* NODOCCOMPRESS -> NO_DOCCOMPRESSru2004-12-211-1/+1
| | | | | | | | NOINFO -> NO_INFO NOINFOCOMPRESS -> NO_INFOCOMPRESS NOLINT -> NO_LINT NOPIC -> NO_PIC NOPROFILE -> NO_PROFILE
* Add knob NO_NIS (fka NO_YP_LIBC) and make world compileable when set.bz2004-11-131-2/+7
| | | | | | | | | | | If turned on no NIS support and related programs will be built. Lost parts rediscovered by: Danny Braniss <danny at cs.huji.ac.il> PR: bin/68303 No objections: des, gshapiro, nectar Reviewed by: ru Approved by: rwatson (mentor) MFC after: 2 weeks
* Switch from BIND 8 to BIND 9.des2004-09-211-5/+0
| | | | | | Submitted by: (in part) dougb@, trhodes@ Reviewed by: dougb@, trhodes@, re@ MFC after: 5 days
* Commit a crude hack so we get sparc64 snapshots working again with aobrien2004-06-171-3/+0
| | | | | | stable ld.so. We need to revisit the rtld-elf/sparc64/rtld_start.S rev. 1.5 and rtld-elf/sparc64/rtld_machdep.h rev. 1.5, which was suppose to allow stock Binutils 2.13 (and later) to be used.
* Fall out from Binutils 2.15: don't bulid the ld.so on Sparc64.obrien2004-06-171-0/+3
|
* Link pf to the build and install:mlaier2004-03-081-0/+5
| | | | | | | | | | | | | | | | This adds the former ports registered groups: proxy and authpf as well as the proxy user. Make sure to run mergemaster -p in oder to complete make installworld without errors. This also provides the passive OS fingerprints from OpenBSD (pf.os) and an example pf.conf. For those who want to go without pf; it provides a NO_PF knob to make.conf. __FreeBSD_version will be bumped soon to reflect this and to be able to change ports accordingly. Approved by: bms(mentor)
* - Build things in pure dictionary order (see sort(1)).ru2004-01-161-6/+12
| | | | | | | | | | - Unify the conditional assignments section so that architectural exclusions come first, then options and !options, sorted by the option name, also in directory order, then architecture specific sections, sorted by the architecture name, with i386 being a traditional exception. Prodded by: bde
* Very big makeover in the way telnet, telnetd and libtelnet are built.markm2003-07-161-8/+1
| | | | | | | | | | | | | | | | | | | | | | | Previously, there were two copies of telnet; a non-crypto version that lived in the usual places, and a crypto version that lived in crypto/telnet/. The latter was built in a broken manner somewhat akin to other "contribified" sources. This meant that there were 4 telnets competing with each other at build time - KerberosIV, Kerberos5, plain-old-secure and base. KerberosIV is no longer in the running, but the other three took it in turns to jump all over each other during a "make buildworld". As the crypto issue has been clarified, and crypto _calls_ are not a problem, crypto/telnet has been repo-copied to contrib/telnet, and with this commit, all telnets are now "contribified". The contrib path was chosen to not destroy history in the repository, and differs from other contrib/ entries in that it may be worked on as "normal" BSD code. There is no dangerous crypto in these sources, only a very weak system less strong than enigma(1). Kerberos5 telnet and Secure telnet are now selected by using the usual macros in /etc/make.conf, and the build process is unsurprising and less treacherous.
* Do not exclude amd64 from rtld-elf builds.peter2003-05-241-1/+1
| | | | Approved by: re (safe amd64 support commits)
* Retire the useless NOSECURE knob.des2003-05-191-2/+1
| | | | Approved by: re (scottl)
* Allow a NOPIC "make world" to complete.markm2003-05-111-1/+1
| | | | OK'ed by: re(scottl)
* Exclude rtld-elf for amd64. More porting is still needed.peter2003-05-081-1/+4
| | | | Approved by: re (scottl)
* Turn MAKE_KERBEROS5 into NO_KERBEROS by negating the logic. Some extramarkm2003-05-051-1/+1
| | | | | cleanups were necessary in release/Makefile, and the tinderbox code was syntax checked, not run checked.
* Build non-crypto telnet(1) and telnetd(8) if NO_OPENSSL is defined.ru2003-05-011-1/+1
| | | | Submitted by: Marius Strobl <marius@alchemy.franken.de>
* Don't clobber Kerberos5 telnet(1) and telnetd(8) with non-crypto versions.ru2003-04-301-3/+3
|
* Add back # accidentally deleted in 1.54imp2003-04-271-1/+1
|
* This is no longer needed after tw is gone.imp2003-04-271-2/+1
| | | | Approved by: re@ (scottl)
* Implement POSIX grantpt(3) functionality, and add a pt_chown utility (akinjmallett2003-01-021-0/+1
| | | | | | | | to Solaris, it is in /usr/libexec) to perform the handing over of tty nodes to the user being granted the pty. Submitted by: Ryan Younce <ryany@pobox.com> Reviewed by: security-officer@, standards@, mike@
* [DAIVD O'BRIEN's OPINION]obrien2002-11-121-1/+4
| | | | Head off what I think is an abuse of the TRB, and disable lukemftpd.
OpenPOWER on IntegriCloud