pkgsrc/net/ntp4/Makefile
taca 8f9ed0fefb Update ntp4 to 4.2.8p3.
Please refer NEWS and ChangeLog for full changes.

NTP 4.2.8p3 (Harlan Stenn <stenn@ntp.org>, 2015/06/29)

Focus: 1 Security fix.  Bug fixes and enhancements.  Leap-second improvements.

Severity: MEDIUM

Security Fix:

* [Sec 2853] Crafted remote config packet can crash some versions of
  ntpd.  Aleksis Kauppinen, Juergen Perlinger, Harlan Stenn.

Under specific circumstances an attacker can send a crafted packet to
cause a vulnerable ntpd instance to crash. This requires each of the
following to be true:

1) ntpd set up to allow remote configuration (not allowed by default), and
2) knowledge of the configuration password, and
3) access to a computer entrusted to perform remote configuration.

This vulnerability is considered low-risk.

New features in this release:

Optional (disabled by default) support to have ntpd provide smeared
leap second time.  A specially built and configured ntpd will only
offer smeared time in response to client packets.  These response
packets will also contain a "refid" of 254.a.b.c, where the 24 bits
of a, b, and c encode the amount of smear in a 2:22 integer:fraction
format.  See README.leapsmear and http://bugs.ntp.org/2855 for more
information.

   *IF YOU CHOOSE TO CONFIGURE NTPD TO PROVIDE LEAP SMEAR TIME*
   *BE SURE YOU DO NOT OFFER THAT TIME ON PUBLIC TIMESERVERS.*

We've imported the Unity test framework, and have begun converting
the existing google-test items to this new framework.  If you want
to write new tests or change old ones, you'll need to have ruby
installed.  You don't need ruby to run the test suite.
2015-06-30 16:08:21 +00:00

70 lines
1.9 KiB
Makefile

# $NetBSD: Makefile,v 1.87 2015/06/30 16:08:21 taca Exp $
#
DISTNAME= ntp-4.2.8p3
PKGNAME= ${DISTNAME:S/-dev-/-/}
CATEGORIES= net time
MASTER_SITES= http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/
MAINTAINER= pkgsrc-users@NetBSD.org
HOMEPAGE= http://www.ntp.org/
COMMENT= Network Time Protocol Version 4
CONFLICTS+= openntpd-[0-9]*
GNU_CONFIGURE= YES
USE_LIBTOOL= YES
USE_TOOLS+= pax perl:run
CONFIGURE_ARGS+=--sysconfdir=${PKG_SYSCONFDIR}
CONFIGURE_ARGS+=--with-locfile=loc/pkgsrc
CONFIGURE_ENV+= PATH_PERL=${PERL5}
OVERRIDE_DIRDEPTH= 4
DOCDIR= ${DESTDIR}${PREFIX}/share/doc/ntp
EXAMPLESDIR= ${DESTDIR}${PREFIX}/share/examples/ntp4
ALL_NTP_DOCS= ${DOCDIR} ${EXAMPLESDIR}
RCD_SCRIPTS= ntpd ntpdate
post-install:
${MKDIR} ${DOCDIR}
${MKDIR} ${EXAMPLESDIR}
cd ${WRKSRC}/html && pax -rw -pm . ${DOCDIR}
cd ${WRKSRC}/conf && pax -rw -pm . ${EXAMPLESDIR}
${CHOWN} -R ${SHAREOWN}:${SHAREGRP} ${ALL_NTP_DOCS}
${FIND} ${ALL_NTP_DOCS} -type d -print | ${XARGS} ${CHMOD} ${PKGDIRMODE}
${FIND} ${ALL_NTP_DOCS} -type f -print | ${XARGS} ${CHMOD} ${SHAREMODE}
.include "../../mk/bsd.prefs.mk"
.include "options.mk"
PLIST_VARS+= ntptime tickadj timetrim
.if ${OPSYS} == "NetBSD" || ${OPSYS} == "FreeBSD" || ${OPSYS} == "DragonFly" || ${OPSYS} == "Linux" || ${OPSYS} == "SunOS"
PLIST.ntptime= yes
PLIST.tickadj= yes
.elif ${OPSYS} == "IRIX"
PLIST.timetrim= yes
.endif
# chroot jail support
.if ${OPSYS} == "NetBSD"
CONFIGURE_ARGS+= --enable-clockctl
.elif ${OPSYS} == "Linux" && exists(/usr/include/sys/capability.h)
CONFIGURE_ARGS+= --enable-linuxcaps
.else
# no chroot/privilege drop supported
.endif
CPPFLAGS.Linux+= -D_GNU_SOURCE # for struct in6_pktinfo
.include "../../security/openssl/buildlink3.mk"
CONFIGURE_ARGS+= --with-openssl-incdir=${SSLBASE}/include
CONFIGURE_ARGS+= --with-openssl-libdir=${SSLBASE}/lib
CONFIGURE_ARGS+= --with-crypto=openssl
.include "../../mk/readline.buildlink3.mk"
.include "../../mk/bsd.pkg.mk"