freebsd-skq/etc/periodic/security/Makefile

# $FreeBSD$

.include <src.opts.mk>

FILES=	100.chksetuid \
	110.neggrpperm \
	200.chkmounts \
	300.chkuid0 \
	400.passwdless \
	410.logincheck \
	700.kernelmsg \
	800.loginfail \
	900.tcpwrap \
	security.functions

# NB: keep these sorted by MK_* knobs

.if ${MK_IPFILTER} != "no"
FILES+=	510.ipfdenied
FILES+=	610.ipf6denied
.endif

.if ${MK_IPFW} != "no"
FILES+=	500.ipfwdenied \
	550.ipfwlimit
.endif

.if ${MK_PF} != "no"
FILES+=	520.pfdenied
.endif

.include <bsd.prog.mk>
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00			`# $FreeBSD$`

Use src.opts.mk in preference to bsd.own.mk except where we need stuff from the latter. 2014-05-06 04:22:01 +00:00			`.include <src.opts.mk>`
add new build knobs and jigger some existing controls to improve control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month 2008-09-21 22:02:26 +00:00
Install scripts via FILES (purposedly not via SCRIPTS that would strip the suffixes). 2002-07-18 12:33:01 +00:00			`FILES= 100.chksetuid \`
Add an (off by default) check for negative permissions (where the group on a object has less permissions that everyone). These permissions will not work reliably over NFS if you have more than 14 supplemental groups and are usually not what you mean. MFC after: 1 week 2010-11-13 00:40:43 +00:00			`110.neggrpperm \`
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00			`200.chkmounts \`
			`300.chkuid0 \`
			`400.passwdless \`
Add login.conf checking to periodic security scripts. If the login.conf file is not UID/GID 0, limits will be ignored and a strange error sent to auth.log. Head nod: ru, rwatson 2006-08-25 07:34:36 +00:00			`410.logincheck \`
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00			`700.kernelmsg \`
			`800.loginfail \`
Add newly-added sripts to FILES. Reviewed by: roberto 2002-10-25 15:23:26 +00:00			`900.tcpwrap \`
			`security.functions`
Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00
add new build knobs and jigger some existing controls to improve control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month 2008-09-21 22:02:26 +00:00			`# NB: keep these sorted by MK_* knobs`

			`.if ${MK_IPFILTER} != "no"`
			`FILES+= 510.ipfdenied`
Hook the 220.backup-pkgdb script I added to the build unconditionally Hook up 610.ipf6denied based on MK_IPFILTER as 510.ipfdenied is now Poked by: Andrzej Tobola <ato@iem.pw.edu.pl> 2011-03-27 03:06:58 +00:00			`FILES+= 610.ipf6denied`
add new build knobs and jigger some existing controls to improve control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month 2008-09-21 22:02:26 +00:00			`.endif`

			`.if ${MK_IPFW} != "no"`
			`FILES+= 500.ipfwdenied \`
			`550.ipfwlimit`
			`.endif`

			`.if ${MK_PF} != "no"`
			`FILES+= 520.pfdenied`
			`.endif`

Long ago, there was just /etc/daily. Then /etc/security was split out of /etc/daily. Some time later, /etc/daily became a set of periodic(8) scripts. Now, this evolution continues, and /etc/security has been broken into periodic(8) scripts to make local customization easier and more maintainable. Reviewed by: ru Approved by: ru 2001-12-07 23:57:39 +00:00			`.include <bsd.prog.mk>`