Like for the pgp2 package, we avoid 68020-40 tuned assembler code
that makes heavy use of the 32<->64bit mul or div, which is emulated
on the 68060.
Currently, we do this by using the --disable-asm configure option and
passing -m68060 to the compiler.
I couldn't figure out how to pass host=m68060--netbsd to the gmp
subconfigure. Even this way, there is a speedup of about 6 for the
sshd or ssh startup.
To enable, set M68060=yes in your /etc/mk.conf, when building this
package.
Based on pr 6684 by Martin J. Laubach with heavy refining/fixing by myself.
XXX This package needs still some tweaking to work with rsaref.
XXX Maybe some US citizen developer can take over?
XXX At least its usefull to non-US ppl.
Changes since 1.5.6:
- Various bug fixes (not security related).
- All compile-time options are now set via options to the configure script.
- visudo is now installed in /usr/local/sbin where it belongs.
[of course this is ${PREFIX}/sbin in our package for a long time - TF]
- two problems with tgetpass() have been fixed. In one case the user was
not always given a chance to enter a password. In the other a newline
was not always printed after the password was entered on Linux.
- Added support for Digital UNIX SIA (Security Integration Architecture).
- %groups now work as RunAs specifiers like the man page says.
- Sudo now sets the USER environment variable to the target user
(root unless -u is specified).
- Sudo will print "command not found" unless configure was run with
--disable-path-info. Also, tell user when we ignore '.' in their path and
it would have been used but for --with-ignore-dot. This means that sudo can
be used to gather information about the existence of executable in
directories not accessible by a normal user. If this bothers you, run
configure with --disable-path-info.
[in our package --disable-path-info is default - TF]
- A longstanding bug wrt "sudo -l" has been fixed that could cause "sudo -l"
to complain about non-existent syntax errors.
- When configured with --with-tty-tickets the filename is now "user:tty"
(was "user.tty") since a username could have a '.' in it.
match directory name and to differentiate from previous version)
- remove md5 symlink to ssleay (conflicts with /usr/bin/md5)
- move all include files to $PREFIX/include/ssleay (too much conflict
potential in $PREFIX/include, not the least of which is md5.h)
- link rsaref glue goop right into libcrypto, only as required
- turn asm off on alpha temporarily while trying to find source of math
errors on LP64
- set NOT_FOR_ARCHS=alpha *64 to prevent compiling on LP64 platforms
This is a package of binaries, as compiled by Michael Graff
(explorer@flame.org), and I have not even tried to run these binaries,
let alone seen the source, and so cannot vouch for them.
Binaries are provided for Alpha, i386 and arm32 architectures.
