freebsd-ports/mail/opensmtpd/Makefile
Dima Panov 35c76eef93 mail/opensmtpd: update to 6.6.4p1 security releaase
SECURITY RELEASE

An out of bounds read in smtpd allows an attacker to inject arbitrary commands into the envelope file which are then executed as root. Separately, missing privilege revocation in smtpctl allows arbitrary commands to be run with the _smtpq group.

MFH:		2020Q1
2020-02-24 18:36:49 +00:00

70 lines
1.9 KiB
Makefile

# Created by: Ashish SHUKLA <ashish@FreeBSD.org>
# $FreeBSD$
PORTNAME= opensmtpd
PORTVERSION= 6.6.4
DISTVERSIONSUFFIX= p1
PORTEPOCH= 1
PORTREVISION= 0
CATEGORIES= mail
MASTER_SITES= http://www.opensmtpd.org/archives/
MAINTAINER= fluffy@FreeBSD.org
COMMENT= Security- and simplicity-focused SMTP server from OpenBSD
LICENSE= ISCL
LICENSE_FILE= ${WRKSRC}/LICENSE
LIB_DEPENDS= libevent.so:devel/libevent
OPTIONS_DEFINE= CA_BUNDLE LIBASRDEVEL MAILERCONF PAM TABLE_DB
OPTIONS_DEFAULT= CA_BUNDLE PAM TABLE_DB
CA_BUNDLE_DESC= Use NSS CA bundle for SSL instead of /etc/ssl/cert.pem
LIBASRDEVEL_DESC= Use development version of libasr
MAILERCONF_DESC= Activate OpenSMTPD in mailer.conf(5)
TABLE_DB_DESC= Build table-db plugin (aliases)
USES= cpe groff libtool ssl
GNU_CONFIGURE= yes
CPE_VENDOR= openbsd
USE_RC_SUBR= smtpd
SUB_FILES= pkg-install pkg-deinstall pkg-message
CONFLICTS_INSTALL= postfix-[0-9]* sendmail-[0-9]* opensmtpd-devel-[0-9]*
USERS= _smtpd _smtpq
GROUPS= _smtpd _smtpq
OPTIONS_SUB= yes
CA_BUNDLE_CONFIGURE_WITH= path-CAfile=${LOCALBASE}/share/certs/ca-root-nss.crt
CA_BUNDLE_RUN_DEPENDS= ${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
LIBASRDEVEL_LIB_DEPENDS_OFF= libasr.so:dns/libasr
LIBASRDEVEL_LIB_DEPENDS= libasr.so:dns/libasr-devel
PAM_CONFIGURE_WITH= auth-pam=smtpd
TABLE_DB_CONFIGURE_WITH= table-db
CONFIGURE_ARGS+= --with-libasr=${LOCALBASE} \
--with-libevent=${LOCALBASE} \
--sysconfdir=${PREFIX}/etc/mail/ \
--with-user-smtpd=_smtpd \
--with-user-queue=_smtpq \
--with-group-queue=_smtpq
.include <bsd.port.pre.mk>
.if ${OPSYS} == FreeBSD && \
(${OSVERSION} < 1200084 && ${SSL_DEFAULT} == "base")
BROKEN= Openssl 1.0 API is EoL, upgrade to FreeBSD 12.x/13.x or add DEFAULT_VERSIONS+=ssl=[openssl|libressl*] to /etc/make.conf
.endif
post-install-TABLE_DB-on:
@${LN} -sf ${PREFIX}/sbin/smtpctl ${STAGEDIR}${PREFIX}/libexec/opensmtpd/makemap
.include <bsd.port.post.mk>