5d50183d2c
Discussing with our upstream, he is aware of CVE-2023-3326. Work to add generalized anti-spoofing is planned. In the mean time he recommends using FAST (anon_fast) to mitigate CVE-2023-3326. anon_fast already includes built-in anti-spoofing. More discussion is here: https://github.com/rra/pam-krb5/blob/main/docs/pam_krb5.pod#L53 This reverts commit 41afd03d9c8e76fe42c555b1274fec069f83ecae.
48 lines
1.2 KiB
Makefile
48 lines
1.2 KiB
Makefile
PORTNAME= pam_krb5
|
|
PORTVERSION= 4.11
|
|
PORTREVISION= 1
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://archives.eyrie.org/software/kerberos/ \
|
|
http://archives.eyrie.org/software/ARCHIVE/pam-krb5/
|
|
DISTNAME= pam-krb5-${PORTVERSION:S/.r/-rc/}
|
|
|
|
MAINTAINER= cy@FreeBSD.org
|
|
COMMENT= Pluggable Authentication Module for ${FLAVOR:U} Kerberos 5
|
|
WWW= https://www.eyrie.org/~eagle/software/pam-krb5/
|
|
|
|
LICENSE= BSD3CLAUSE GPLv1+
|
|
LICENSE_COMB= dual
|
|
LICENSE_FILE= ${WRKSRC}/LICENSE
|
|
|
|
USES= gmake libtool perl5
|
|
USE_PERL5= build
|
|
|
|
CONFLICTS= pam_krb5-rh-2.*
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ARGS+= --with-krb5="${GSSAPIBASEDIR}" \
|
|
--with-krb5-include="${GSSAPIINCDIR}" \
|
|
--with-krb5-lib="${GSSAPILIBDIR}"
|
|
CONFIGURE_ENV= PATH_KRB5_CONFIG="${KRB5CONFIG}"
|
|
INSTALL_TARGET= install-strip
|
|
|
|
FLAVORS= mit heimdal_base heimdal_port
|
|
FLAVOR?= ${FLAVORS:[1]}
|
|
|
|
.for f in ${FLAVORS:Nmit}
|
|
${f}_PKGNAMESUFFIX= -${f}
|
|
.endfor
|
|
|
|
.if ${FLAVOR:U} == mit
|
|
USES+= gssapi:mit
|
|
.elif ${FLAVOR:U} == heimdal_port
|
|
USES+= gssapi:heimdal
|
|
.elif ${FLAVOR:U} == heimdal_base
|
|
USES+= gssapi:base
|
|
.endif
|
|
|
|
.include <bsd.port.pre.mk>
|
|
|
|
post-install:
|
|
cd ${WRKSRC} && ${MAKE_CMD} install-man DESTDIR=${STAGEDIR}
|
|
|
|
.include <bsd.port.post.mk>
|