Please refer CHANGES file for complete changes and here is quote from release announce. Introduction BIND 9.8.5-P1 is the latest production release of BIND 9.8. Security Fixes Prevents exploitation of a runtime_check which can crash named when satisfying a recursive query for particular malformed zones. (CVE-2013-3919) [RT #33690] A deliberately constructed combination of records could cause named to hang while populating the additional section of a response. (CVE-2012-5166) [RT #31090] Now supports NAPTR regular expression validation on all platforms, and avoids memory exhaustion compiling pathological regular expressions. (CVE-2013-2266) [RT #32688] Prevents named from aborting with a require assertion failure on servers with DNS64 enabled. These crashes might occur as a result of specific queries that are received. (CVE-2012-5688) [RT #30792 / #30996] Prevents an assertion failure in named when RPZ and DNS64 are used together. (CVE-2012-5689) [RT #32141] New Features Adds a new configuration option, "check-spf"; valid values are "warn" (default) and "ignore". When set to "warn", checks SPF and TXT records in spf format, warning if either resource record type occurs without a corresponding record of the other resource record type. [RT #33355] Adds support for Uniform Resource Identifier (URI) resource records. [RT #23386] Adds support for the EUI48 and EUI64 RR types. [RT #33082] Adds support for the RFC 6742 ILNP record types (NID, LP, L32, and L64). [RT #31836]
107 lines
2.8 KiB
Makefile
107 lines
2.8 KiB
Makefile
# $NetBSD: options.mk,v 1.6 2013/06/06 02:56:36 taca Exp $
|
|
|
|
PKG_OPTIONS_VAR= PKG_OPTIONS.bind98
|
|
PKG_SUPPORTED_OPTIONS= bind-dig-sigchase bind-xml-statistics-server
|
|
PKG_SUPPORTED_OPTIONS+= inet6 threads mysql pgsql ldap dlz-filesystem
|
|
PKG_SUPPORTED_OPTIONS+= rrl kerberos
|
|
|
|
.include "../../mk/pthread.buildlink3.mk"
|
|
|
|
.if defined(PTHREAD_TYPE) && (${PTHREAD_TYPE} == "none") || \
|
|
!empty(MACHINE_PLATFORM:MNetBSD-*-vax) || \
|
|
!empty(MACHINE_PLATFORM:MNetBSD-*-sparc) || \
|
|
!empty(MACHINE_PLATFORM:MNetBSD-*-sparc64) || \
|
|
!empty(MACHINE_PLATFORM:MNetBSD-*-m68k)
|
|
# don't touch PKG_SUGGESTED_OPTIONS
|
|
.else
|
|
PKG_SUGGESTED_OPTIONS+= threads
|
|
.endif
|
|
|
|
.if empty(MISSING_FEATURES:Minet6)
|
|
PKG_SUGGESTED_OPTIONS+= inet6
|
|
.endif
|
|
|
|
PKG_SUGGESTED_OPTIONS+= kerberos
|
|
|
|
.include "../../mk/bsd.options.mk"
|
|
|
|
###
|
|
### The mysql pgsql ldap dlz-filesystem options are all for BIND
|
|
### DLZ (Dynamically Loadable Zones) functionality
|
|
###
|
|
### NOTE: bdb is excluded on purpose as pkgsrc does not contain
|
|
### a bdb v4.1 or 4.2 package which is what BIND needs.
|
|
### The majority of these are compile tested only
|
|
###
|
|
|
|
.if !empty(PKG_OPTIONS:Mmysql)
|
|
.include "../../mk/mysql.buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-dlz-mysql=${BUILDLINK_PREFIX.mysql-client}
|
|
.endif
|
|
|
|
.if !empty(PKG_OPTIONS:Mpgsql)
|
|
.include "../../mk/pgsql.buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-dlz-postgres=${BUILDLINK_PREFIX.${PGSQL_TYPE}}
|
|
CONFIGURE_ENV+= ac_cv_path_PG_CONFIG=${PREFIX}/bin/pg_config
|
|
.endif
|
|
|
|
.if !empty(PKG_OPTIONS:Mldap)
|
|
.include "../../databases/openldap-client/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-dlz-ldap=${BUILDLINK_PREFIX.openldap-client}
|
|
.endif
|
|
|
|
.if !empty(PKG_OPTIONS:Mdlz-filesystem)
|
|
CONFIGURE_ARGS+= --with-dlz-filesystem
|
|
.endif
|
|
|
|
.if !empty(PKG_OPTIONS:Mrrl)
|
|
PATCHFILES=rl-9.8.5-P1.patch
|
|
PATCH_SITES=http://ss.vix.su/~vjs/
|
|
.endif
|
|
|
|
###
|
|
### The statistics server in bind98 and later needs libxml2
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mbind-xml-statistics-server)
|
|
.include "../../textproc/libxml2/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-libxml2
|
|
.else
|
|
CONFIGURE_ARGS+= --without-libxml2
|
|
.endif
|
|
|
|
###
|
|
### IPv6 support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Minet6)
|
|
CONFIGURE_ARGS+= --enable-ipv6
|
|
.else
|
|
CONFIGURE_ARGS+= --disable-ipv6
|
|
.endif
|
|
|
|
###
|
|
### pthreads support (also see magic above)
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mthreads)
|
|
CONFIGURE_ARGS+= --enable-threads
|
|
.else
|
|
CONFIGURE_ARGS+= --disable-threads
|
|
.endif
|
|
|
|
###
|
|
### dig(1) option +sigchase for DNSSEC signature chasing
|
|
###
|
|
|
|
###
|
|
### kerberos/gssapi support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mkerberos)
|
|
CONFIGURE_ARGS+= --with-gssapi=${BUILDLINK_PREFIX.${KRB5_TYPE}}
|
|
.include "../../mk/krb5.buildlink3.mk"
|
|
.else
|
|
CONFIGURE_ARGS+= --without-gssapi
|
|
.endif
|
|
.if !empty(PKG_OPTIONS:Mbind-dig-sigchase)
|
|
# If anything else needs to add entries to STD_CDEFINES, this will need
|
|
# to be changed so that the two can cooperate.
|
|
CONFIGURE_ENV+= STD_CDEFINES=-DDIG_SIGCHASE=1
|
|
.endif
|