NetBSD/usr.sbin/portmap/Makefile

#	$NetBSD: Makefile,v 1.9 1999/01/11 20:51:09 jwise Exp $
#	from: @(#)Makefile	8.1 (Berkeley) 6/6/93

PROG=	portmap
MAN=	portmap.8

CPPFLAGS+=-DLIBWRAP
LDADD+= -lwrap
DPADD+= ${LIBWRAP}

.include <bsd.prog.mk>
Add four big changes: * portmap is now tcp-wrapped (i.e. obeys hosts.{allow,deny}) both for lookups (as `portmap') and for forwarded calls to specific services. * the new -l flag, analagous to inetd -l, logs all connections to portmap. * the new -s flag causes portmap to suid to the user daemon after binding it's port, so that outgoing connections do not come from privileged ports. This prevents users from using portmap to get a free privileged port. * portmap now _only_ accepts SETs and UNSETs on the loopback interface. In the past, anyone in the world could do all sorts of nasty things to your portmap tables. Note that our libc already_only_ uses the loopback interface to register rpc ports. This work is modeled after/partially taken from Wietse Venema's tcp- wrapped version of the BSD 4.3 portmap. It has benefitted greatly from my discussions with Luke, Matt and many others. 1999-01-11 23:51:09 +03:00			`# $NetBSD: Makefile,v 1.9 1999/01/11 20:51:09 jwise Exp $`
merge lite-2 1997-10-17 09:37:32 +04:00			`# from: @(#)Makefile 8.1 (Berkeley) 6/6/93`
initial import of 386bsd-0.1 sources 1993-03-21 12:45:37 +03:00
			`PROG= portmap`
specify man pages the new way. 1994-12-22 14:32:57 +03:00			`MAN= portmap.8`
initial import of 386bsd-0.1 sources 1993-03-21 12:45:37 +03:00
Add four big changes: * portmap is now tcp-wrapped (i.e. obeys hosts.{allow,deny}) both for lookups (as `portmap') and for forwarded calls to specific services. * the new -l flag, analagous to inetd -l, logs all connections to portmap. * the new -s flag causes portmap to suid to the user daemon after binding it's port, so that outgoing connections do not come from privileged ports. This prevents users from using portmap to get a free privileged port. * portmap now _only_ accepts SETs and UNSETs on the loopback interface. In the past, anyone in the world could do all sorts of nasty things to your portmap tables. Note that our libc already_only_ uses the loopback interface to register rpc ports. This work is modeled after/partially taken from Wietse Venema's tcp- wrapped version of the BSD 4.3 portmap. It has benefitted greatly from my discussions with Luke, Matt and many others. 1999-01-11 23:51:09 +03:00			`CPPFLAGS+=-DLIBWRAP`
			`LDADD+= -lwrap`
			`DPADD+= ${LIBWRAP}`

initial import of 386bsd-0.1 sources 1993-03-21 12:45:37 +03:00			`.include <bsd.prog.mk>`