e0d8895900
This is a bugfix release. * Fix an interop issue with Windows Server 2008 R2 Read-Only Domain Controllers. * Update a workaround for a glibc bug that would cause DNS PTR queries to occur even when rdns = false. * Fix a kadmind denial of service issue (null pointer dereference), which could only be triggered by an administrator with the "create" privilege. [CVE-2012-1013] Changes 1.10.1: This is a bugfix release. * Fix access controls for KDB string attributes [CVE-2012-1012] * Make the ASN.1 encoding of key version numbers interoperate with Windows Read-Only Domain Controllers * Avoid generating spurious password expiry warnings in cases where the KDC sends an account expiry time without a password expiry time.
101 lines
3.4 KiB
Text
101 lines
3.4 KiB
Text
$NetBSD: patch-af,v 1.5 2012/07/16 19:12:33 adam Exp $
|
|
|
|
Add --enable-pkgsrc-libtool option
|
|
Use $(ROOT_USER) in place of root
|
|
|
|
--- config/pre.in.orig 2012-05-31 23:49:44.000000000 +0000
|
|
+++ config/pre.in
|
|
@@ -172,6 +172,7 @@ PTHREAD_LIBS = @PTHREAD_LIBS@
|
|
THREAD_LINKOPTS = $(PTHREAD_CFLAGS) $(PTHREAD_LIBS)
|
|
CPPFLAGS = @CPPFLAGS@
|
|
DEFS = @DEFS@
|
|
+LIBTOOL = @LIBTOOL@
|
|
CC = @CC@
|
|
CXX = @CXX@
|
|
LD = $(PURE) @LD@
|
|
@@ -185,11 +186,12 @@ LIBS = @LIBS@
|
|
|
|
INSTALL=@INSTALL@
|
|
INSTALL_STRIP=
|
|
-INSTALL_PROGRAM=@INSTALL_PROGRAM@ $(INSTALL_STRIP)
|
|
-INSTALL_SCRIPT=@INSTALL_PROGRAM@
|
|
+INSTALL_LIBTOOL=@INSTALL_LIBTOOL@
|
|
+INSTALL_PROGRAM=$(INSTALL_LIBTOOL) @INSTALL_PROGRAM@ $(INSTALL_STRIP)
|
|
+INSTALL_SCRIPT=@INSTALL_SCRIPT@
|
|
INSTALL_DATA=@INSTALL_DATA@
|
|
INSTALL_SHLIB=@INSTALL_SHLIB@
|
|
-INSTALL_SETUID=$(INSTALL) $(INSTALL_STRIP) -m 4755 -o root
|
|
+INSTALL_SETUID=$(INSTALL_LIBTOOL) $(INSTALL) $(INSTALL_STRIP) -m 4555 -o $(ROOT_USER)
|
|
## This is needed because autoconf will sometimes define @exec_prefix@ to be
|
|
## ${prefix}.
|
|
prefix=@prefix@
|
|
@@ -320,6 +322,10 @@ PROG_RPATH_FLAGS=@PROG_RPATH_FLAGS@
|
|
# depending on whether we're building with shared libraries.
|
|
DEPLIBEXT=@DEPLIBEXT@
|
|
|
|
+# this gets set by configure to either $(STLIBEXT) or $(LALIBEXT),
|
|
+# depending on whether we're building libtool archives.
|
|
+DEPSTLIBEXT=@DEPSTLIBEXT@
|
|
+
|
|
KDB5_PLUGIN_DEPLIBS = @KDB5_PLUGIN_DEPLIBS@
|
|
KDB5_PLUGIN_LIBS = @KDB5_PLUGIN_LIBS@
|
|
|
|
@@ -337,12 +343,12 @@ COM_ERR_DEPLIB-k5 = $(TOPLIBD)/libcom_er
|
|
SUPPORT_LIBNAME=krb5support
|
|
SUPPORT_DEPLIB = $(TOPLIBD)/lib$(SUPPORT_LIBNAME)$(DEPLIBEXT)
|
|
|
|
-# These are forced to use ".a" as an extension because they're never
|
|
+# These are forced to use "@DEPSTLIBEXT" as an extension because they're never
|
|
# built shared.
|
|
SS_DEPLIB = $(SS_DEPLIB-@SS_VERSION@)
|
|
-SS_DEPLIB-k5 = $(TOPLIBD)/libss.a
|
|
+SS_DEPLIB-k5 = $(TOPLIBD)/libss$(DEPSTLIBEXT)
|
|
SS_DEPLIB-sys =
|
|
-APPUTILS_DEPLIB = $(TOPLIBD)/libapputils.a
|
|
+APPUTILS_DEPLIB = $(TOPLIBD)/libapputils$(DEPSTLIBEXT)
|
|
|
|
KRB5_BASE_DEPLIBS = $(KRB5_DEPLIB) $(CRYPTO_DEPLIB) $(COM_ERR_DEPLIB) $(SUPPORT_DEPLIB)
|
|
KDB5_DEPLIBS = $(KDB5_DEPLIB) $(KDB5_PLUGIN_DEPLIBS)
|
|
@@ -384,7 +390,7 @@ RL_LIBS = @RL_LIBS@
|
|
|
|
SS_LIB = $(SS_LIB-@SS_VERSION@)
|
|
SS_LIB-sys = @SS_LIB@
|
|
-SS_LIB-k5 = $(TOPLIBD)/libss.a $(RL_LIBS)
|
|
+SS_LIB-k5 = $(TOPLIBD)/libss$(DEPSTLIBEXT) $(RL_LIBS)
|
|
KDB5_LIB = -lkdb5 $(KDB5_PLUGIN_LIBS)
|
|
|
|
VERTO_DEPLIB = $(VERTO_DEPLIB-@VERTO_VERSION@)
|
|
@@ -552,6 +558,9 @@ MAKE_DYNOBJ_COMMAND=@MAKE_DYNOBJ_COMMAND
|
|
DYNOBJ_EXPDEPS=@DYNOBJ_EXPDEPS@
|
|
DYNOBJ_EXPFLAGS=@DYNOBJ_EXPFLAGS@
|
|
|
|
+# usually .la
|
|
+LALIBEXT=@LALIBEXT@
|
|
+
|
|
# File with symbol names to be exported, both functions and data,
|
|
# currently not distinguished.
|
|
SHLIB_EXPORT_FILE=$(srcdir)/$(LIBPREFIX)$(LIBBASE).exports
|
|
@@ -573,6 +582,7 @@ SHLIB_RPATH_FLAGS=@SHLIB_RPATH_FLAGS@
|
|
# flags for explicit libraries depending on this one,
|
|
# e.g. "$(SHLIB_RPATH_FLAGS) $(SHLIB_SHLIB_DIRFLAGS) $(SHLIB_EXPLIBS)"
|
|
SHLIB_EXPFLAGS=@SHLIB_EXPFLAGS@
|
|
+LALIB_EXPFLAGS=@LALIB_EXPFLAGS@
|
|
|
|
## Parameters to be set by configure for use in libobj.in:
|
|
|
|
@@ -584,10 +594,15 @@ OBJLISTS=@OBJLISTS@
|
|
# the suffix substitution will break on some platforms!
|
|
SHLIBOBJS=$(STLIBOBJS:.o=@SHOBJEXT@)
|
|
PFLIBOBJS=$(STLIBOBJS:.o=@PFOBJEXT@)
|
|
+LALIBOBJS=$(STLIBOBJS:.o=@LAOBJEXT@)
|
|
|
|
# "$(CC) -G", "$(LD) -Bshareable", etc.
|
|
LDCOMBINE=@LDCOMBINE@
|
|
|
|
+# Args to tack on the tail of LIBTOOL to generate versioned, installable
|
|
+# libtool archives.
|
|
+LIBTOOL_TAIL=@LIBTOOL_TAIL@
|
|
+
|
|
#
|
|
# rules to make various types of object files
|
|
#
|