Commit graph

16 commits

Author SHA1 Message Date
Alexander Leidinger
64cf27c85d Say hello to the linux mega patch, it consolidates our linux bits a
little bit and allows to proceed to a more recent linux_base from
a stable (read as: the major bugs should be ironed out or identified
and most linux ports build just fine) source.

It also allows to ship 4.11 with a working linuxolator (the EOLed
linux_base is marked forbidden because of a security hole).

This is a major update, please read UPDATING (and CHANGES if you
develop linux ports).

Changes:
 - change the default linux_base from v7 to v8
 - add a newer freetype to linux_base-8 for nicer fonts display [1]
 - don't let cpio use hardlinks in the linux_base-8 port to quiet some
   warnings in some cases [2]
 - fix a cut&past error in the linux_base-8 pkg-install script [3]
 - convert the binary knob "USE_LINUX" to a version specifier, e.g.
   USE_LINUX=<value> specifies a dependency upon
   emulators/linux_base-<value>, exceptions are a value of "7" (which
   does what you want and adds a dependency to linux_base) and any
   value without a corresponding port in
   PORTSDIR/emulators/linux_base-<value> (which adds a dependency to
   the default linux_base)
 - don't implicitly add USE_LINUX with the USE_LINUX_PREFIX knob,
   this allows us to use the USE_LINUX_PREFIX knob for linux_base and
   paves the way for splitting up future linux base ports into
   individual pieces
 - remove RESTRICTED from some GPL licensed ports, even when we only
   distribute binaries, we get them from official linux sites, so
   anyone can grab them there if he needs to
 - add a dependency upon the linux X11 bits where necessary (based upon
   guesswork)
 - don't use USE_X_PREFIX in some linux ports since it adds a dependency
   to the FreeBSD X11 libs, as a workaround use PREFIX?= (the clean
   solution would be to remove the implicit USE_XLIB from USE_X_PREFIX)
 - bump the portrevision of the linux ports ("better safe than sorry"
   algorithm)
 - pass maintainership of the important linux infrastructure to a
   mailinglist, hijack freebsd-emulation@ for this purpose (if somebody
   doesn't like this: tell us your bikeshed color at freebsd-emulation@,
   my color would be "linuxolator@" in case someone cares...)
 - add a pkg-install script for linux-fontconfig, but don't use it;
   everything should work without it (the FreeBSD fc-cache program should
   do all the work), but in case we need it we just need to decomment the
   pkg-install part in the Makefile
 - fix some dependencies
 - fix some bugs
 - add some static plists
 - unbreak the ports with dependecies to more than one linux_base

This also fixes some ports which are marked BROKEN because of dependencies
to v7 and v8 of linux_base at the same time.

Known bugs:
 - the linux-mesa and linux-devtools ports install libGL*.so symlinks
 - some "minor" plist bugs (e.g. ld.so.{conf,cache} are modified by
   the linux X11 port, so linx_Base-8 moans at deinstall time)

Future work (interested souls should coordinate with freebsd-emulation@):
 - add some kind of USE_LINUX_X11 knob to streamline the X11 dependencies,
   or modify the behavior of USE_XLIB in the USE_LINUX case
   AFAIK trevor has some patches.
 - make USE_XLIB and USE_X_PREFIX orthogonal to be able to get rid of
   the PREFIX?= workaround in some linux ports
   Should be discussed/coordinated on/with x11@.
 - move the RPM bits from x11-toolkits/linux-gtk/Makefile to PORTSDIR/Mk/
 - update to a more recent linux base

PR:			69997, 70539 (and maybe others)
Discussed with/on:	java@, x11@, trevor, portmgr
Tested by:		mezz, portmgr, pointyhat
RPM hunted down by:	Joseph Gelinas <scirocco@tasam.com> [1]
Requested by:		portmgr [2]
Submitted by:		kris [3]
Approved by:		portmgr
2004-12-31 18:24:10 +00:00
Trevor Johnson
396e63911f Add sizes. 2004-02-06 01:06:40 +00:00
Trevor Johnson
4d61a0ed94 Use the latest glibc packages. Changes are described at
<URL:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0689>,
<URL:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0859>
and <URL:https://rhn.redhat.com/errata/RHSA-2003-325.html>.
2003-12-04 03:41:30 +00:00
Trevor Johnson
098ed299a5 Remove the XFree86-libs RPM from here (see ports/x11/linux-XFree86-libs). 2003-11-19 16:12:24 +00:00
Trevor Johnson
f730b9000c Add the libattr, libacl, libelf, and bzip2-libs packages, needed
by programs such as mv (used in installation); remove librpm404 and
rpm404-python which are unused.  Make rpm an EXTRACT_DEPENDS rather
than BUILD_DEPENDS, based on Phil Pennock's suggestion for the
sgifonts port.

Submitted by:	Frank Reppin (adding libattr and libacl)
2003-07-21 00:44:28 +00:00
Trevor Johnson
43a3ce9a00 security fix: update the XFree86 libraries to 4.2.1 because of
what is described at <URL:http://www.xfree86.org/security/> as "an
Xlib problem that made it possible to load (and execute) arbitrary
code in privileged clients"

"local users [may] gain root privileges via a modified LD_PRELOAD
environment variable that points to a malicious module"
--CAN-2002-1472
<URL:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-1472>

The hash matches the one in RHSA-2003:067-19 at
<URL:http://rhn.redhat.com/errata/RHSA-2003-067.html>.
2003-07-03 16:35:54 +00:00
Trevor Johnson
a62f32ec86 new i386-only linux_base port, which installs bits from release 8.0
of a Linux distribution
2003-07-03 14:29:29 +00:00
Trevor Johnson
885cb8d505 security update:
The function gzprintf within zlib, when called with a string
	longer than Z_PRINTF_BUFZISE (= 4096 bytes), can overflow
	without giving a warning.  zlib-1.1.4 and earlier exhibit
	this behavior. There are no known exploits of the gzprintf
	overrun, and only a few programs, including rpm2html and
	gimp-print, are known to use the gzprintf function.  The
	problem has been fixed by checking the length of the output
	string within gzprintf.

--<URL:http://rhn.redhat.com/errata/RHSA-2003-079.html>
2003-06-01 08:23:28 +00:00
Trevor Johnson
f0b43969f2 For i386, update glibc and for the Alpha, mark forbidden due to
remotely exploitable RPC bug (Red Hat advisory RHSA-2003-089 and
CERT advisory CA-2003-10).

According to <URL:http://www.redhat.com/apps/support/errata/>, "all
errata support for Alpha products, Sparc products, and Powertools
products have reached end of life."

I didn't do proper run-time testing of this, but "make package
deinstall" leaves a clean /compat/linux/ behind.
2003-04-08 21:22:45 +00:00
Marcel Moolenaar
ee41069f85 Duplicate the two different MD5 checksums for redhat-release-*.rpm
in both distinfo files. The alpha and i386 versions are identical
except for some meta-data.

Requested by: trevor
2002-12-10 03:04:57 +00:00
Marcel Moolenaar
950671e1f4 Fix both alpha and i386. The major change is that glibc has been
updated.

Reviewed by: kris
2002-12-03 06:27:50 +00:00
Trevor Johnson
e7bfaf6db7 The redhat-release-7.1-1.noarch.rpm from Red Hat 7.1/Alpha has a
different MD5 hash from the corresponding package from 7.1/i386.
The contained etc/redhat-release files have the same contents but
different time stamps.  By having both hashes in both distinfo
files, installation can proceed for users who share the same distfile
cache for both architectures.
2002-09-26 16:21:32 +00:00
Trevor Johnson
48f343aba0 Update glibc to 2.2.4-29, to avoid resolver and RPC security bugs. 2002-08-28 11:43:54 +00:00
David E. O'Brien
02709ab678 Upgrade to Red Hat 7.x support. Many binary-only packages are now requiring
Red Hat 7.x to run.
2002-05-28 02:35:23 +00:00
Trevor Johnson
48d1b32f61 Update for zlib "double free" security bug
(http://www.redhat.com/support/errata/RHSA-2002-026.html).  I only
tested this on i386.
2002-03-12 13:44:43 +00:00
Marcel Moolenaar
9782a69b13 Upgrade to Red Hat 6.1. The port also allows installing updates,
which makes it easier to keep it up to date.

Thanks to: Sean O'Connell (sean@stat.duke.edu) for his support.
2000-01-05 23:25:43 +00:00