Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/usr.bin/su/Makefile

48 lines
926 B
Makefile
Raw Normal View History

SU_INDIRECT_GROUP should not be on by default.
2001-01-11 03:54:57 +03:00
# $NetBSD: Makefile,v 1.26 2001/01/11 00:54:57 sjg Exp $
Sync to 4.4BSD-Lite2
1997-01-09 14:43:05 +03:00
# from: @(#)Makefile 8.1 (Berkeley) 7/19/93
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
Add MK... variables to enable/disable various aspects of building crypto support into the system. See share/mk/bsd.README for more a full description.
2000-06-23 10:01:10 +04:00
.include <bsd.own.mk>
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
PROG= su
Make this compile without SKEY.
1997-10-12 16:54:20 +04:00
DPADD+= ${LIBCRYPT}
Implement login_cap capability lookup.
2000-01-14 05:39:14 +03:00
LDADD+= -lcrypt -lutil
initial import of 386bsd-0.1 sources
1993-03-21 12:45:37 +03:00
BINOWN= root
BINMODE=4555
Implement login_cap capability lookup.
2000-01-14 05:39:14 +03:00
CPPFLAGS+=-DLOGIN_CAP
Fix PR/2837: su [login [args]] had the wrong usage and did not work properly. Build the correct argument list and add -c for the shells. Fix PR/2839: su will not build with Kerberos. - Also: -Don't coredump when $TERM is not set. -Add prototypes, remove local old style declarations of system functions. -Recognize shells that contain "csh" as being csh alike. -Don't build with SKEY unconditionally. Obey bsd.own.mk.
1996-10-13 03:54:38 +04:00
As per discussion with mrg, back out parts of previous change. The appropriate entry in /etc/group as returned by getgrnam() is used to determine if 'su root' may be permitted, rather than checking if membership exists in the result of getgroups(). The following changes were made regarding the behaviour of the special group for 'su root' * allow for definition of SUGROUP (defaults to "wheel") to override group name. * use getgrnam(SUGROUP) instead of getgrgid(0). * only scan getgrnam(SUGROUP)->gr_mem when checking for group membership. * be more specific as to why 'su root' failed NOTE: If a user's primary group is SUGROUP, and they're not a member of SUGROUP in /etc/group, they will not be able to su.
1997-07-02 09:42:11 +04:00
# Uncomment the following line to change the group that may su root to "sugroup"
#
Make this compile without SKEY.
1997-10-12 16:54:20 +04:00
#CPPFLAGS+=-DSUGROUP=\"sugroup\"
As per discussion with mrg, back out parts of previous change. The appropriate entry in /etc/group as returned by getgrnam() is used to determine if 'su root' may be permitted, rather than checking if membership exists in the result of getgroups(). The following changes were made regarding the behaviour of the special group for 'su root' * allow for definition of SUGROUP (defaults to "wheel") to override group name. * use getgrnam(SUGROUP) instead of getgrgid(0). * only scan getgrnam(SUGROUP)->gr_mem when checking for group membership. * be more specific as to why 'su root' failed NOTE: If a user's primary group is SUGROUP, and they're not a member of SUGROUP in /etc/group, they will not be able to su.
1997-07-02 09:42:11 +04:00
SU_INDIRECT_GROUP should not be on by default.
2001-01-11 03:54:57 +03:00
# Uncomment the following line to make su
# treat group wheel (SUGROUP) and/or ROOTAUTH as an indirect
If SU_INDIRECT_GROUP is defined (it is by default), then su will consider that SUGROUP and ROOTAUTH group contain the names of users and groups. If user is not found in the list check_ingroup() recurses on each member until either user is found or end of chain is reached. The above allows su's use of the wheel group to be extended to a large number of users without necessarily putting them in group wheel, and in a way that will work over NIS that simply extending the line length limit in getgrent.c cannot.
2001-01-11 00:33:13 +03:00
# list of groups.
SU_INDIRECT_GROUP should not be on by default.
2001-01-11 03:54:57 +03:00
#CPPFLAGS+=-DSU_INDIRECT_GROUP
If SU_INDIRECT_GROUP is defined (it is by default), then su will consider that SUGROUP and ROOTAUTH group contain the names of users and groups. If user is not found in the list check_ingroup() recurses on each member until either user is found or end of chain is reached. The above allows su's use of the wheel group to be extended to a large number of users without necessarily putting them in group wheel, and in a way that will work over NIS that simply extending the line length limit in getgrent.c cannot.
2001-01-11 00:33:13 +03:00
Add MK... variables to enable/disable various aspects of building crypto support into the system. See share/mk/bsd.README for more a full description.
2000-06-23 10:01:10 +04:00
.if (${MKKERBEROS} != "no")
Merge a bunch of things from crypto-us and crypto-intl into basesrc, adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate bsd.crypto.mk. There is still a bunch more work to do, but crypto is now more-or-less fully merged into the base NetBSD distribution.
2000-06-20 10:00:24 +04:00
.ifdef AFS
DPADD+= ${LIBKAFS}
LDADD+= -lkafs
Use bsd.crypto.mk.
1999-07-13 02:11:37 +04:00
.endif
add Kerberos5 support
2000-07-10 06:09:15 +04:00
CPPFLAGS+=-DKERBEROS5 -I${DESTDIR}/usr/include/krb5
Fix library order.
2000-07-24 02:23:14 +04:00
LDADD+= -lkrb5 -lasn1
add Kerberos5 support
2000-07-10 06:09:15 +04:00
Merge a bunch of things from crypto-us and crypto-intl into basesrc, adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate bsd.crypto.mk. There is still a bunch more work to do, but crypto is now more-or-less fully merged into the base NetBSD distribution.
2000-06-20 10:00:24 +04:00
CPPFLAGS+=-DKERBEROS -I${DESTDIR}/usr/include/kerberosIV
add Kerberos5 support
2000-07-10 06:09:15 +04:00
LDADD+= -lkrb
remove -lvers, it's not used
2000-08-04 02:56:29 +04:00
LDADD+= -lcrypto -lroken -lcom_err
Add MK... variables to enable/disable various aspects of building crypto support into the system. See share/mk/bsd.README for more a full description.
2000-06-23 10:01:10 +04:00
.endif
Merge a bunch of things from crypto-us and crypto-intl into basesrc, adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate bsd.crypto.mk. There is still a bunch more work to do, but crypto is now more-or-less fully merged into the base NetBSD distribution.
2000-06-20 10:00:24 +04:00
Fix PR/2837: su [login [args]] had the wrong usage and did not work properly. Build the correct argument list and add -c for the shells. Fix PR/2839: su will not build with Kerberos. - Also: -Don't coredump when $TERM is not set. -Add prototypes, remove local old style declarations of system functions. -Recognize shells that contain "csh" as being csh alike. -Don't build with SKEY unconditionally. Obey bsd.own.mk.
1996-10-13 03:54:38 +04:00
.include <bsd.prog.mk>
.ifdef SKEY
Make this compile without SKEY.
1997-10-12 16:54:20 +04:00
CPPFLAGS+=-DSKEY
DPADD+= ${LIBSKEY}
LDADD+= -lskey
Fix PR/2837: su [login [args]] had the wrong usage and did not work properly. Build the correct argument list and add -c for the shells. Fix PR/2839: su will not build with Kerberos. - Also: -Don't coredump when $TERM is not set. -Add prototypes, remove local old style declarations of system functions. -Recognize shells that contain "csh" as being csh alike. -Don't build with SKEY unconditionally. Obey bsd.own.mk.
1996-10-13 03:54:38 +04:00
.endif
Allow people in group wheel to use the ROOTAUTH group. Pick up SUROOTAUTH (presumably from /etc/mk.conf).
1999-07-12 03:41:10 +04:00
.ifdef SUROOTAUTH
CPPFLAGS+=-DROOTAUTH=\"${SUROOTAUTH}\"
.endif