the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
> -- ircd-hybrid-7.2.2 RELNOTES
> o) Added channel::disable_fake_channels config directive
> o) Fixed broken FORCEJOIN (contrib)
> o) Added missing documentation for connect::vhost
> o) Fixed problem with G-Line voting
> o) Fixed "STATS ?" so it doesn't report negative traffic statistics
> o) Fixed core in m_mkpasswd.c (contrib)
> o) Reduced memory usage for channel members
> o) Added general::stats_e_disabled which simply disables "STATS e"
> for other operators and administrators
> o) Ignore signal SIGXFSZ to prevent the daemon from dying on missconfigured
> file size limits
> o) Slight optimizations to the block allocator
> o) Fixed harmless bug that could result in incorrect bytes sent statistics
> in "STATS t"
> o) "STATS y|Y" now shows whether a class is active or disabled
> o) Added ircd-brazilian_pt.lang language file
> o) Misc. ACCEPT fixes. E.g. don't remove an accept record if a client is
> changing between equivalent nicknames like 'nick' and 'NiCk'.
> o) Minor resolv.conf parser fixes. Added missing support for ';' comments
> o) Fixed core on MODRESTART
-- ircd-hybrid-7.2.1 RELNOTES
o) Fixed build on SRV4
o) Fixed problem where ircd would disconnect all SSL connections
o) Added initial CAP support. Additional documentation can be found
in doc/technical
o) Speeded up command parsing
o) Fixed occasional core dump on UN*LINE
o) Fixed bug where particular clients would always receive
"Load is temporarily too heavy" message
o) Improved memory consumption, i.e. memory consumption has
been reduced for remote clients
o) Fixed possible core in case default_cipher_preference directive isn't set
o) Fixed "CHANSERV INVITE" bug with anope services
o) Updated example configuration files to reflect new topicburst flags
directive in connect{} blocks
o) Fixed core if using the operator{} 'umodes' directive
o) Don't allow shared k-lines to be set without a valid reason
o) Improved channel ban match processing. This also fixes CIDR bans
INSTALL/DEINSTALL script creation within pkgsrc.
If an INSTALL or DEINSTALL script is found in the package directory,
it is automatically used as a template for the pkginstall-generated
scripts. If instead, they should be used simply as the full scripts,
then the package Makefile should set INSTALL_SRC or DEINSTALL_SRC
explicitly, e.g.:
INSTALL_SRC= ${PKGDIR}/INSTALL
DEINSTALL_SRC= # emtpy
As part of the restructuring of the pkginstall framework internals,
we now *always* generate temporary INSTALL or DEINSTALL scripts. By
comparing these temporary scripts with minimal INSTALL/DEINSTALL
scripts formed from only the base templates, we determine whether or
not the INSTALL/DEINSTALL scripts are actually needed by the package
(see the generate-install-scripts target in bsd.pkginstall.mk).
In addition, more variables in the framework have been made private.
The *_EXTRA_TMPL variables have been renamed to *_TEMPLATE, which are
more sensible names given the very few exported variables in this
framework. The only public variables relating to the templates are:
INSTALL_SRC INSTALL_TEMPLATE
DEINSTALL_SRC DEINSTALL_TEMPLATE
HEADER_TEMPLATE
The packages in pkgsrc have been modified to reflect the changes in
the pkginstall framework.
> -- ircd-hybrid-7.2.0 RELNOTES
> o) Fixed broken operwall = yes;
> o) Added 'umode' directive to oper{}. List of modes to get on /OPER.
> o) Fixed a WHOIS bug
> o) Fixed bug where we would increase Count.invisi even
> if invisible_on_connect is turned off
> o) Removed invite_ops_only, controlled by paranoid (+p) now
> o) Better DDoS protection
> o) Fixed va_list bug on amd64
> o) Fixed /dev/poll
>
>
> -- ircd-hybrid-7.2rc1 RELNOTES
> o) ircd can dynamically change all its client/fd limits at runtime
> o) Added epoll as the primary I/O engine under Linux
> o) Local channels will not show up in remote /WHOIS
> o) Added hidden_name which allows customized hidden server names
> o) Added restrict_channels to define a static channel set
> o) Added --disable-gline-voting to disable G-Line votes
> for small networks or people who don't want it.
> o) Allow accumulating more ip= entries in an exempt{} block
> o) Various improvements and bugfixes
> o) Make win32 build usable
> o) Fixed ban caching bug
> o) Cosmetical fixes to TIME
> o) Get "KLINE nick" to work with clients that have a spoof
> o) Fixed RESV/XLINE bug in conjunction with names that include escaped
> characters such as \*, \?, \#.
>
>
> -- ircd-hybrid-7.2beta1 RELNOTES
> o) Usermode +G, like +g, but allow messaging from people on common channels
> o) Usermode +D - "deaf", don't receive channel messages
> o) RXLINE and RKLINE - commands for setting regexp K/X lines
> o) Join flood is now detected and reported to +b opers
> o) Re-added REJECT_HOLD - lock clients for a while before throwing away
> o) ping_warning, a class{} option to notify opers before "Ping timeout"
> o) New hooking system, modularised: usermodes, iauth, message filtering etc.
> o) Network I/O speedups
> o) Various cleanups and bugfixes
> o) Support for client SSL
> o) Support for services (contrib/m_services.c)
> o) IP cloaking module (contrib/ip_cloaking.c)
> o) Native win32 build
In brief:
- We now support a completely new platform, Tru64 UNIX
- We have mostly revamped the Windows Cygwin port
- The IRIX port has been brought up to date
- The HPUX port has been retested and minor warnings have been fixed
- The configure script has been massively revamped
- Most noticeable is that we generate make dependencies on the fly now
- We now use our own .lang files to provide translated numeric messages
- IPv6 support is now automatically enabled/disabled
- Cryptlinks now use Nagle's TCP_NODELAY algorithm
- X-line (gecos ban) support has been added
- Nick and channel RESVs are now stored in nresv.conf and cresv.conf
backslashes anymore. A single backslash is enough. Changed the
definition in all affected packages. For those that are not caught, an
additional check is placed into bsd.pkginstall.mk.
as the INSTALL and DEINSTALL scripts no longer distinguish between
the two types of files. Drop SUPPORT_FILES{,_PERMS} and modify the
packages in pkgsrc accordingly.
And always is defined as share/examples/rc.d
which was the default before.
This rc.d scripts are not automatically added to PLISTs now also.
So add to each corresponding PLIST as required.
This was discussed on tech-pkg in late January and late April.
Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere
and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
under share/examples/rc.d. The variable name already was named
RCD_SCRIPTS_EXAMPLEDIR.
This is from ideas from Greg Woods and others.
Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism
(as requested by wiz).
in the process. (More information on tech-pkg.)
Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.
Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.
the RCD_SCRIPTS rc.d script(s) to the PLIST.
This GENERATE_PLIST idea is part of Greg A. Woods'
PR #22954.
This helps when the RC_SCRIPTS are installed to
a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later,
the default RCD_SCRIPTS_EXAMPLEDIR will be changed
to be more clear that they are the examples.)
These patches also remove the etc/rc.d/ scripts from PLISTs
(of packages that use RCD_SCRIPTS). (This also removes
now unused references from openssh* makefiles. Note that
qmail package has not been changed yet.)
I have been doing automatic PLIST registration for RC_SCRIPTS
for over a year. Not all of these packages have been tested,
but many have been tested and used.
Somethings maybe to do:
- a few packages still manually install the rc.d scripts to
hard-coded etc/rc.d. These need to be fixed.
- maybe remove from mk/${OPSYS}.pkg.dist mtree specifications too.
Remove IRCD_HYBRID_DPATH from bsd.pkg.defaults.mk and BUILD_DEFS,
set PKG_SYSCONFSUBDIR to 'ircd-hybrid' instead: the package builder is
now expected to adjust Ircd Hybrid configuration directory with
PKG_SYSCONFBASE(.${PKG_SYSCONFVAR}).
Replace local DOC_SUBST stuff with FILES_SUBST from bsd.pkg.install.mk.
Go with the previous PKGREVISION bump.
XXX Having the log files as SUPPORT_FILES is not optimal.
XXX I really should update this package.
