freebsd-dev/sbin/ping/Makefile

#	@(#)Makefile	8.1 (Berkeley) 6/5/93
# $FreeBSD$

.include <src.opts.mk>

PACKAGE=runtime
PROG=	ping
MAN=	ping.8
BINOWN=	root
BINMODE=4555
WARNS?=	3
LIBADD=	m

.if ${MK_CASPER} != "no" && !defined(RESCUE)
LIBADD+=	casper
LIBADD+=	cap_dns
CFLAGS+=-DWITH_CASPER
.endif

.if !defined(RELEASE_CRUNCH)
CFLAGS+=-DIPSEC
LIBADD+=	ipsec
.endif

.include <bsd.prog.mk>
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 06:35:07 +00:00			`# @(#)Makefile 8.1 (Berkeley) 6/5/93`
$Id$ -> $FreeBSD$ 1999-08-28 00:22:10 +00:00			`# $FreeBSD$`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 06:35:07 +00:00
Use src.opts.mk in preference to bsd.own.mk except where we need stuff from the latter. 2014-05-06 04:22:01 +00:00			`.include <src.opts.mk>`
Protect ping(8) using Capsicum and Casper. This is protection against malicious network packets that we parse and not against local users trying to gain root access through ping's set-uid bit - this is handled by dropping privileges very early in ping. Submitted by: Mikhail <mp@lenta.ru> 2014-02-04 21:43:53 +00:00
Explicitly add more files to the 'runtime' package. Sponsored by: The FreeBSD Foundation 2016-02-09 20:19:31 +00:00			`PACKAGE=runtime`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 06:35:07 +00:00			`PROG= ping`
- Backout botched attempt to introduce MANSECT feature. - MAN[1-9] -> MAN. 2001-03-26 14:33:27 +00:00			`MAN= ping.8`
Set BINOWN=root explicitly for setuid root binaries. This is not "useless", as one may have non-default setting for BINOWN in make.conf, and we still want these to be installed setuid root in this case. 2001-09-13 06:48:18 +00:00			`BINOWN= root`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 06:35:07 +00:00			`BINMODE=4555`
WARNS=3 and style fixes. No functionality change. 2014-10-20 00:27:40 +00:00			`WARNS?= 3`
Convert sbin/ to LIBADD Reduce overlinking 2014-11-25 11:23:12 +00:00			`LIBADD= m`
Don't try to include ipsec support if we are building for the install floppy image. 2000-01-07 19:06:54 +00:00
Protect ping(8) using Capsicum and Casper. This is protection against malicious network packets that we parse and not against local users trying to gain root access through ping's set-uid bit - this is handled by dropping privileges very early in ping. Submitted by: Mikhail <mp@lenta.ru> 2014-02-04 21:43:53 +00:00			`.if ${MK_CASPER} != "no" && !defined(RESCUE)`
Convert casperd(8) daemon to the libcasper. After calling the cap_init(3) function Casper will fork from it's original process, using pdfork(2). Forking from a process has a lot of advantages: 1. We have the same cwd as the original process. 2. The same uid, gid and groups. 3. The same MAC labels. 4. The same descriptor table. 5. The same routing table. 6. The same umask. 7. The same cpuset(1). From now services are also in form of libraries. We also removed libcapsicum at all and converts existing program using Casper to new architecture. Discussed with: pjd, jonathan, ed, drysdale@google.com, emaste Partially reviewed by: drysdale@google.com, bdrewery Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4277 2016-02-25 18:23:40 +00:00			`LIBADD+= casper`
			`LIBADD+= cap_dns`
We use a few different ifdef's names to check if we are using Casper or not, let's standardize this. Now we are always use WITH_CASPER name. Discussed with: emaste@ MFC after: 1 month 2017-09-21 14:41:41 +00:00			`CFLAGS+=-DWITH_CASPER`
Protect ping(8) using Capsicum and Casper. This is protection against malicious network packets that we parse and not against local users trying to gain root access through ping's set-uid bit - this is handled by dropping privileges very early in ping. Submitted by: Mikhail <mp@lenta.ru> 2014-02-04 21:43:53 +00:00			`.endif`

Don't try to include ipsec support if we are building for the install floppy image. 2000-01-07 19:06:54 +00:00			`.if !defined(RELEASE_CRUNCH)`
libipsec and IPsec related apps. (and some KAME related man pages) Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project 2000-01-06 12:40:54 +00:00			`CFLAGS+=-DIPSEC`
Convert sbin/ to LIBADD Reduce overlinking 2014-11-25 11:23:12 +00:00			`LIBADD+= ipsec`
Don't try to include ipsec support if we are building for the install floppy image. 2000-01-07 19:06:54 +00:00			`.endif`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 06:35:07 +00:00
			`.include <bsd.prog.mk>`