d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Turn on the set-user-ID bit for k5su if ENABLE_SUID_K5SU is defined.

Browse Source
This commit is contained in:
Jacques Vidrine 2002-05-12 03:17:31 +00:00
parent 96044fe8c3
commit 95ba43303b
5 changed files with 21 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
UPDATING
View File

@ -22,6 +22,12 @@ NOTE TO PEOPLE WHO THINK THAT 5.0-CURRENT IS SLOW:
integrity. Re-enabling write caching can substantially improve
performance.
20020511:
The k5su utility installed as part of Kerberos 5 is no longer
installed with the set-user-ID bit set by default. Add
ENABLE_SUID_K5SU=yes to /etc/make.conf to have it installed
with the set-user-ID bit set.
20020510:
Due to the way CVS works, it may not properly update src/contrib/gcc
to the 3.1 sources. The easiest fix is to `rm -rf' src/contrib/gcc

4
kerberos5/usr.bin/k5su/Makefile
View File

@ -22,7 +22,9 @@ LDADD= -L${KRB5OBJDIR} -lkrb5 \
-L${ASN1OBJDIR} -lasn1 -lcrypto -lmd -lcrypt -lcom_err
DPADD= ${LIBKRB5} ${LIBKAFS5} ${LIBROKEN} ${_krb4deps} \
${LIBASN1} ${LIBCRYPTO} ${LIBMD} ${LIBCRYPT} ${LIBCOM_ERR}
#BINMODE=4555
.if defined(ENABLE_SUID_K5SU)
BINMODE=4555
.endif
INSTALLFLAGS=-fschg
.include <bsd.prog.mk>

4
kerberos5/usr.bin/ksu/Makefile
View File

@ -22,7 +22,9 @@ LDADD= -L${KRB5OBJDIR} -lkrb5 \
-L${ASN1OBJDIR} -lasn1 -lcrypto -lmd -lcrypt -lcom_err
DPADD= ${LIBKRB5} ${LIBKAFS5} ${LIBROKEN} ${_krb4deps} \
${LIBASN1} ${LIBCRYPTO} ${LIBMD} ${LIBCRYPT} ${LIBCOM_ERR}
#BINMODE=4555
.if defined(ENABLE_SUID_K5SU)
BINMODE=4555
.endif
INSTALLFLAGS=-fschg
.include <bsd.prog.mk>

5
share/examples/etc/make.conf
View File

@ -213,6 +213,11 @@
#
#MAKE_KERBEROS5= yes
#
# Kerberos 5 su (k5su)
# If you want to use the k5su utility, define this to have it installed
# set-user-ID.
#ENABLE_SUID_K5SU= yes
#
#
# Kerberos5
# If you want to install MIT Kerberos5 port somewhere other than /usr/local,

4
share/man/man5/make.conf.5
View File

@ -353,6 +353,10 @@ Set this to build Kerberos5 (KTH Heimdal).
This is still experimental code.
If you need stable Kerberos5, use the
port(s).
.It Va ENABLE_SUID_K5SU
.Pq Vt bool
Set this if you wish to use the k5su utility. Otherwise, it will be
installed without the set-user-ID bit set.
.It Va MODULES_WITH_WORLD
.Pq Vt bool
Set to build modules with the system instead of the kernel.