kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
freebsd-ports/sysutils/pefs-kmod/Makefile

36 lines
833 B
Makefile
Raw Normal View History

SSP support has been added to ports with WITH_SSP for i386 and amd64 on FreeBSD 10, and amd64 on earlier versions. SSP_UNSAFE is added to disable in a port if it fails to build, but this should only be used in rare circumstances such as kernel modules. Otherwise, the port may just be failing due to lack of respecting LDFLAGS. On FreeBSD 10, this uses an ldscript in /usr/lib/libc.so to pull in libssp_nonshared.a to address issues linking on i386 [1]. On earlier FreeBSD versions the WITH_SSP knob will add -lssp_nonshared to LDFLAGS on i386. This is not needed on amd64. However, several hundred ports do not currently respect LDFLAGS, so this support is disabled currently as it causes build failures if a dependency is looking for the stack_chk symbols. Many thanks to jlh@ for this as he had many years of patience in getting all of the necessary pieces [1][2] in. [1] http://svnweb.freebsd.org/base/head/lib/libc/libc.ldscript?revision=251668&view=markup PR: ports/138228 [2] Submitted by: jlh (bsd.ssp.mk based on) Reviewed by: bapt With hat: portmgr exp-runs done: 37 over a month on 91i386,91amd64,10i386,10amd64
2013-09-20 14:54:54 +02:00
# Created by: Gleb Kurtsou <gleb@FreeBSD.org>
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
# $FreeBSD$
PORTNAME= pefs
- Update to 2013-09-14 Submitted by: gleb (maintainer)
2013-09-15 23:37:31 +02:00
DISTVERSION= 2013-09-14
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
CATEGORIES= sysutils kld
- Update to 2012-11-12 Submitted by: gleb (maintainer)
2012-12-26 19:47:05 +01:00
MASTER_SITES= https://pefs.googlecode.com/files/
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
PKGNAMESUFFIX= -kmod
- Update to 2011-12-25 Submitted by: gleb (maintainer)
2011-12-26 18:13:39 +01:00
MAINTAINER= gleb@FreeBSD.org
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
COMMENT= PEFS kernel level stacked cryptographic filesystem
LICENSE= BSD
SSP support has been added to ports with WITH_SSP for i386 and amd64 on FreeBSD 10, and amd64 on earlier versions. SSP_UNSAFE is added to disable in a port if it fails to build, but this should only be used in rare circumstances such as kernel modules. Otherwise, the port may just be failing due to lack of respecting LDFLAGS. On FreeBSD 10, this uses an ldscript in /usr/lib/libc.so to pull in libssp_nonshared.a to address issues linking on i386 [1]. On earlier FreeBSD versions the WITH_SSP knob will add -lssp_nonshared to LDFLAGS on i386. This is not needed on amd64. However, several hundred ports do not currently respect LDFLAGS, so this support is disabled currently as it causes build failures if a dependency is looking for the stack_chk symbols. Many thanks to jlh@ for this as he had many years of patience in getting all of the necessary pieces [1][2] in. [1] http://svnweb.freebsd.org/base/head/lib/libc/libc.ldscript?revision=251668&view=markup PR: ports/138228 [2] Submitted by: jlh (bsd.ssp.mk based on) Reviewed by: bapt With hat: portmgr exp-runs done: 37 over a month on 91i386,91amd64,10i386,10amd64
2013-09-20 14:54:54 +02:00
SSP_UNSAFE= kernel module does not support ssp
- Update to 2013.03.02 Submitted by: gleb (maintainer)
2013-02-06 19:32:58 +01:00
FETCH_ARGS= -Fpr # work around 302 redirect
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
KMODDIR?= /boot/modules
PLIST_SUB= KMODDIR=${KMODDIR}
MAKE_ENV= BINDIR="${PREFIX}/sbin" MANDIR="${MANPREFIX}/man/man" \
NO_MANCOMPRESS= \
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead PR: 157936 Submitted by: myself Exp-runs by: pav Approved by: pav
2011-09-24 00:26:39 +02:00
KMODDIR="${KMODDIR}" SYSDIR="${SRC_BASE}/sys"
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
- Update to 2011-12-25 Submitted by: gleb (maintainer)
2011-12-26 18:13:39 +01:00
MAN8= pam_pefs.8 pefs.8
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
ONLY_FOR_ARCHS= i386 amd64 # not tested on other archs
Add NO_STAGE all over the place in preparation for the staging support (cat: sysutils)
2013-09-21 01:05:58 +02:00
NO_STAGE= yes
PEFS is a kernel level stacked cryptographic filesystem for FreeBSD. Key features: * Transparently runs on top of existing file systems * Random per file tweak value for encryption * Stores metadata only in encrypted file name * Arbitrary number of keys per file system, mixing keys in same directory and key chains * Modern cryptographic algorithms: AES and Camellia in XTS mode, PKCS#5v2 and HKDF for key generation. WWW: http://github.com/glk/pefs WWW: http://wiki.freebsd.org/PEFS PR: ports/156002 Submitted by: Gleb Kurtsou <gk@freebsd.org> Approved by: jadawin@ (mentor)
2011-09-01 16:21:11 +02:00
.include <bsd.port.pre.mk>
.if ${OSVERSION} < 800000
BROKEN= requires fairly recent FreeBSD-STABLE, or FreeBSD-CURRENT
.endif
.include <bsd.port.post.mk>
Reference in a new issue Copy permalink