d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
628683cb81
freebsd-dev/etc/periodic/security/Makefile

35 lines
507 B
Makefile
Raw Normal View History

Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru
2001-12-07 23:57:39 +00:00
# $FreeBSD$
Use src.opts.mk in preference to bsd.own.mk except where we need stuff from the latter.
2014-05-06 04:22:01 +00:00
.include <src.opts.mk>
add new build knobs and jigger some existing controls to improve control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month
2008-09-21 22:02:26 +00:00
Avoid installing security.functions with executable bits, periodic(8) will try to execute all files with an executable bit in /etc/periodic/*/ while this file is supposed only to be sourced by others MFC after: 1 week
2014-11-05 06:42:07 +00:00
FILESGROUPS= FILES DATA
Install scripts via FILES (purposedly not via SCRIPTS that would strip the suffixes).
2002-07-18 12:33:01 +00:00
FILES= 100.chksetuid \
Add an (off by default) check for negative permissions (where the group on a object has less permissions that everyone). These permissions will not work reliably over NFS if you have more than 14 supplemental groups and are usually not what you mean. MFC after: 1 week
2010-11-13 00:40:43 +00:00
110.neggrpperm \
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru
2001-12-07 23:57:39 +00:00
200.chkmounts \
300.chkuid0 \
400.passwdless \
Add login.conf checking to periodic security scripts. If the login.conf file is not UID/GID 0, limits will be ignored and a strange error sent to auth.log. Head nod: ru, rwatson
2006-08-25 07:34:36 +00:00
410.logincheck \
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru
2001-12-07 23:57:39 +00:00
700.kernelmsg \
800.loginfail \
Avoid installing security.functions with executable bits, periodic(8) will try to execute all files with an executable bit in /etc/periodic/*/ while this file is supposed only to be sourced by others MFC after: 1 week
2014-11-05 06:42:07 +00:00
900.tcpwrap
DATA= security.functions
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru
2001-12-07 23:57:39 +00:00
add new build knobs and jigger some existing controls to improve control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month
2008-09-21 22:02:26 +00:00
# NB: keep these sorted by MK_* knobs
.if ${MK_IPFILTER} != "no"
FILES+= 510.ipfdenied
Hook the 220.backup-pkgdb script I added to the build unconditionally Hook up 610.ipf6denied based on MK_IPFILTER as 510.ipfdenied is now Poked by: Andrzej Tobola <ato@iem.pw.edu.pl>
2011-03-27 03:06:58 +00:00
FILES+= 610.ipf6denied
add new build knobs and jigger some existing controls to improve control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month
2008-09-21 22:02:26 +00:00
.endif
.if ${MK_IPFW} != "no"
FILES+= 500.ipfwdenied \
550.ipfwlimit
.endif
.if ${MK_PF} != "no"
FILES+= 520.pfdenied
.endif
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru
2001-12-07 23:57:39 +00:00
.include <bsd.prog.mk>
Reference in New Issue Copy Permalink