Commit Graph

219 Commits

Author SHA1 Message Date
tls 4147a3c54a Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry.  RedHat has
evidently built all "core system packages" with this option for some time.

This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.

This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros.  Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.

Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default.  Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.
2007-05-28 12:06:17 +00:00
taca 8ea4278bd9 printtqtable.c was added to libipf. 2007-05-16 04:26:07 +00:00
dogcow ad1da80f39 Pretty much nothing in usr.sbin/ipf compiled with the massive filename
switcheroos in dist/ipf; make things build again.
2007-04-15 05:59:04 +00:00
mrg a7416240a5 add -fno-strict-aliasing when using GCC4. 2006-05-11 07:07:08 +00:00
martti b52bb48fee Fix compilation problems. 2006-04-04 16:18:27 +00:00
martti ecde67984b Define INET6 only if ${USE_INET6} != "no" 2005-12-28 11:58:23 +00:00
martti e2030cd2f7 Define INET and INET6 or things break when linking in fil.o (hi christos!) 2005-12-28 11:54:45 +00:00
lukem 7157011597 Only compile in IPv6 support if ${USE_INET6} != "no"
MKINET6 is for providing IPv6 infrastructure.
USE_INET6 is for compiling IPv6 support into the programs (needs MKINET6).
2005-01-10 02:58:58 +00:00
martti b8573ca389 Install ipmon.5 2005-01-05 10:00:29 +00:00
martin a0b2159af7 On sparc64 u_quad_t (unsigned long) and %qd (long long int) are not
printf-format-compatible according to gcc. Add -Wno-error for printstate.c.
2005-01-03 20:49:06 +00:00
lukem 772de66405 Set -Wno-error on a per-source basis instead of the NOGCCERROR sledgehammer. 2005-01-01 13:56:21 +00:00
christos bb0410eb96 Account for ipfilter move. 2004-10-01 15:26:35 +00:00
martti 7ff15b917f Upgraded IPFilter to 4.1.3 2004-07-23 05:39:03 +00:00
lukem b817247988 Use MKPRIVATELIB=yes instead of providing an empty libinstall:: target and
setting NOLINT, NOPIC, NOPROFILE (etc)
2004-05-23 02:24:50 +00:00
mrg 625248bde9 install ippool(5) manual as well. from peter postma in PR#25053. 2004-04-04 15:59:44 +00:00
he bf8f08004d Move kvm library spec to Makefile.inc, so that it gets specified
after the ipf library, since the ipf library depends on some functions
from the kvm library.

Fixes a build problem observed when building for sun2 (though I
won't claim understanding why this doesn't show up elsewhere).
2004-04-03 22:16:27 +00:00
lukem 6c3d359a9b Simplify `bar.c: bar.y' (et al) rules by moving header dependencies which
bar.o (not bar.c) needs to DPSRCS, and using {.ALLSRC} in the target now
that only bar.y is a source.
2004-03-31 00:34:32 +00:00
jmc e971cb7b6d Add -I. to CPPFLAGS or else the generated .c files lose 2004-03-29 23:28:11 +00:00
lukem f02de56de4 use iplang_l.l instead of iplang_l.c in SRCS, and tweak appropriately 2004-03-29 05:06:44 +00:00
lukem bfd4f974d0 de-lint makefiles:
* fix -j N parallel build issues
* support MAKEVERBOSE
* move NOxxx= to before <bsd.own.mk>
* remove unnecessary -ll (except for ipsend)
* remove unnecessary CPPFLAGS
* only build libipf.a (we don't need libipf_p.a or libipf_pic.a)
* fix dependencies upon libipf.a

(more could be done, but that requires fixing dist/ipf/*)
2004-03-29 04:39:59 +00:00
jmc c1a4072ecf Don't call 'yacc'...Call ${YACC} 2004-03-29 02:30:08 +00:00
mrg 9d85438b05 give explicit dependancies where needed.. 2004-03-28 09:35:26 +00:00
martti 93c07ca49d Remove generated iplang_l.c 2004-03-28 09:21:10 +00:00
martti 84f2cae1d0 Added missing deps 2004-03-28 09:17:33 +00:00
martti 09d643ce42 Added ippool and libipf 2004-03-28 09:03:38 +00:00
martti 621e9bac7f Sync with official IPFilter 2004-03-28 09:01:26 +00:00
erh 1f5fff1c1c PR# standards/16143: hide struct uio from userland behind a __UIO_EXPOSE
ifdef.  Define this when building ipf, since it shares code between the
kernel and userland and uses struct uio.
2003-09-13 16:59:29 +00:00
lukem 17d72c8a6b use NETBSDSRCDIR as appropriate 2002-09-18 03:54:26 +00:00
lukem ed401558f2 Implement MKDYNAMICROOT, which currently defaults to "no", but will
be changed in the future to "yes".

If MKDYNAMICROOT == "no", there is no change from existing behaviour
of a static /bin and /sbin (and a few programs in elsewhere).

If MKDYNAMICROOT == "yes", the following changes occur:
    in <bsd.own.mk>:
	SHLIBDIR?=     /lib
	SHLINKDIR?=	/lib
    in various Makefiles, the following entry is DISABLED.
	LDSTATIC?=-static
This results in all programs (except those "standalone" programs built
in sys/arch/*/stand) are linked dynamically, the shared linker is moved
from /usr/libexec to /lib (with a compat symlink), and the shared
libraries used by /bin and /sbin programs are moved from /usr/lib to
/lib (with compat symlinks).
2002-08-27 14:46:11 +00:00
martti 67c70b98e1 ipf regression tests are in regress/sys/kern/ipf 2002-05-13 06:35:47 +00:00
lukem 2c1cfc8e8c - in <bsd.files.mk>, don't clear FILES after using it, as that prevents
make -V FILES
  from being useful (and given that every other variable can be
  extracted using make -V, the behaviour was unusually inconsistent
  given that the original reason for clearing it doesn't seem to be
  relevant anymore)
- use <bsd.prog.mk> instead of directly including <bsd.files.mk>
  (and possibly <bsd.man.mk> or <bsd.own.mk>)
- remove obsolete NOPROG
2002-04-24 08:18:45 +00:00
jdolecek 7ddad9fe53 ignore potential error return from rm -rf results
this fixes part of misc/16227 by Stoned Elipot
2002-04-09 17:17:24 +00:00
martti 30aa77c1c5 Added ip_log.c and few CPPFLAGS flags 2002-03-14 12:34:33 +00:00
martti 53a8f3ca45 Added few ipf examples 2002-01-26 09:30:53 +00:00
martti bdbbd6ee47 Fixed link between ipf.5 and ipf6.conf.5 2002-01-24 14:48:37 +00:00
martti c2d00e7ce1 Added missing libraries, filenames and man pages 2002-01-24 08:24:38 +00:00
christos 4b374bca7a add -lcurses 2001-03-13 16:30:13 +00:00
christos c4e5d9e2b5 add -DSTATETOP to enable top(1) style display for ipfstat. 2001-03-13 16:29:42 +00:00
jhawk a022cf9d37 Use
${MAKE}
instead of
  make
2000-08-30 23:51:46 +00:00
matt 3ab02a8704 More #include <stdlib.h> string, etc. cleanup 2000-07-04 20:27:35 +00:00
veego af650398d9 Reverse the order for bsd.subdir.mk and bsd.prog.mk. 2000-06-12 21:32:25 +00:00
veego 0f5588e203 Make it possible to use obj dirs for the 'make tests' in the test subdir. 2000-06-12 13:35:49 +00:00
veego f517f20387 Add the regress tests for n5, n6 and n7. 2000-06-12 10:45:32 +00:00
veego 7134832d9a Update for IP Filter 3.4.1 2000-05-03 11:40:53 +00:00
veego c4b5806fb2 First cut to make it work again.
TODO: make it work with obj dirs.
2000-02-06 13:05:25 +00:00
cgd 9a222ad604 remove .cvsignore files; if the tree doesn't clean completely, that's a bug 2000-01-16 08:27:40 +00:00
veego 9c9aae0fda Use the new IP Filter dist layout for.
We are now at version 3.3.5.
1999-12-12 11:29:55 +00:00
veego 10a4c3c374 Updated to the new NetBSD source layout with basesrc and syssrc.
Apply the MKMAN and MKSHARE changes which someone changed in the Makefiles
but did not apply them here.
Add the mediaone example.
Changes for the new ipfilter version 3.3.3.
1999-10-24 19:56:31 +00:00
msaitoh 0fcbe067c6 s/ the the / the / 1999-10-08 20:13:42 +00:00
kleink 99c164dd65 Need <sys/param.h> for MAXHOSTNAMELEN. 1999-09-26 10:27:40 +00:00