NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
224187cc7c
kumquat-buildroot/package/bind/bind.mk

74 lines
2.1 KiB
Makefile
Raw Normal View History

normalize separator size to 80 Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2013-07-22 07:56:13 +02:00
################################################################################
add new package bind per case 0000507
2006-01-25 21:56:55 +01:00
#
# bind
#
Normalize separator size to 80 Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-06 01:53:30 +02:00
################################################################################
Bump bind to 9.5.2-P1 Closes #773. Unspecified vulnerability in ISC BIND 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, 9.7 beta before 9.7.0b3, and 9.0.x through 9.3.x with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks via additional sections in a response sent for resolution of a recursive client query, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)." Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2009-12-03 17:19:27 +01:00
bind: security bump to version 9.6-ESV-R9-P1 Fixes CVE-2013-3919 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-07-19 21:41:20 +02:00
BIND_VERSION = 9.6-ESV-R9-P1
bind: bump version and convert to Makefile.autotools.in Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #145. Current bind package is version 9.3.2 which is from the 9.3 branch and is EOLed. It has many security bugs probably fixed in 9.3.6-P1 but since it won't be supported for long it's probably metter to move on to a supported branch. CVE-2009-0025, CVE-2008-1447, CVE-2008-0122, CVE-2007-2926 and probably more. While at it migrate to Makefile.autotools.in too. Also introduced an option for/not to install userland tools (dig, host, nslookup, nsupdate). [ Peter: don't install into staging ]
2009-03-05 13:11:36 +01:00
BIND_SITE = ftp://ftp.isc.org/isc/bind9/$(BIND_VERSION)
bind: fix intermittent build issues with high BR2_JLEVEL Build sometimes breaks with: libtool: link: `unix/os.lo' is not a valid libtool object make[3]: *** [rndc-confgen] Error 1 make[3]: *** Waiting for unfinished jobs.... make[4]: Leaving directory `/scratch/peko/build/bind-9.6-ESV-R4/bin/rndc/unix' So disable parallel builds. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-24 14:02:25 +02:00
BIND_MAKE = $(MAKE1)
bind: install to staging Install bind to staging so other applications can use its include files and libraries. Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2013-07-24 12:34:31 +02:00
BIND_INSTALL_STAGING = YES
bind: add license information Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-01-22 04:35:47 +01:00
BIND_LICENSE = ISC
BIND_LICENSE_FILES = COPYRIGHT
bind: bump version and convert to Makefile.autotools.in Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #145. Current bind package is version 9.3.2 which is from the 9.3 branch and is EOLed. It has many security bugs probably fixed in 9.3.6-P1 but since it won't be supported for long it's probably metter to move on to a supported branch. CVE-2009-0025, CVE-2008-1447, CVE-2008-0122, CVE-2007-2926 and probably more. While at it migrate to Makefile.autotools.in too. Also introduced an option for/not to install userland tools (dig, host, nslookup, nsupdate). [ Peter: don't install into staging ]
2009-03-05 13:11:36 +01:00
BIND_TARGET_SBINS = lwresd named named-checkconf named-checkzone
bind: security bump to version 9.6-ESV-R4 Bump bind to version 9.6-ESV-R4 since the 9.5 series is no longer supported. While at it switch to the ESV (Extended Support Version) branch instead of going for the latest. Also adjust the package to build against OpenSSL when available for proper DNSSEC support and libxml2 too. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-05-03 20:33:42 +02:00
BIND_TARGET_SBINS += named-compilezone rndc rndc-confgen dnssec-dsfromkey
BIND_TARGET_SBINS += dnssec-keyfromlabel dnssec-keygen dnssec-signzone
bind: bump version and convert to Makefile.autotools.in Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #145. Current bind package is version 9.3.2 which is from the 9.3 branch and is EOLed. It has many security bugs probably fixed in 9.3.6-P1 but since it won't be supported for long it's probably metter to move on to a supported branch. CVE-2009-0025, CVE-2008-1447, CVE-2008-0122, CVE-2007-2926 and probably more. While at it migrate to Makefile.autotools.in too. Also introduced an option for/not to install userland tools (dig, host, nslookup, nsupdate). [ Peter: don't install into staging ]
2009-03-05 13:11:36 +01:00
BIND_TARGET_BINS = dig host nslookup nsupdate
bind: security bump to version 9.6-ESV-R4 Bump bind to version 9.6-ESV-R4 since the 9.5 series is no longer supported. While at it switch to the ESV (Extended Support Version) branch instead of going for the latest. Also adjust the package to build against OpenSSL when available for proper DNSSEC support and libxml2 too. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-05-03 20:33:42 +02:00
BIND_TARGET_LIBS = libbind9.* libdns.* libisc.* libisccc.* libisccfg.* liblwres.*
bind: bump version and convert to Makefile.autotools.in Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #145. Current bind package is version 9.3.2 which is from the 9.3 branch and is EOLed. It has many security bugs probably fixed in 9.3.6-P1 but since it won't be supported for long it's probably metter to move on to a supported branch. CVE-2009-0025, CVE-2008-1447, CVE-2008-0122, CVE-2007-2926 and probably more. While at it migrate to Makefile.autotools.in too. Also introduced an option for/not to install userland tools (dig, host, nslookup, nsupdate). [ Peter: don't install into staging ]
2009-03-05 13:11:36 +01:00
BIND_CONF_ENV = BUILD_CC="$(TARGET_CC)" \
BUILD_CFLAGS="$(TARGET_CFLAGS)"
bind: security bump to version 9.6-ESV-R4 Bump bind to version 9.6-ESV-R4 since the 9.5 series is no longer supported. While at it switch to the ESV (Extended Support Version) branch instead of going for the latest. Also adjust the package to build against OpenSSL when available for proper DNSSEC support and libxml2 too. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-05-03 20:33:42 +02:00
BIND_CONF_OPT = --sysconfdir=/etc \
add new package bind per case 0000507
2006-01-25 21:56:55 +01:00
--localstatedir=/var \
bind: bump version and convert to Makefile.autotools.in Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #145. Current bind package is version 9.3.2 which is from the 9.3 branch and is EOLed. It has many security bugs probably fixed in 9.3.6-P1 but since it won't be supported for long it's probably metter to move on to a supported branch. CVE-2009-0025, CVE-2008-1447, CVE-2008-0122, CVE-2007-2926 and probably more. While at it migrate to Makefile.autotools.in too. Also introduced an option for/not to install userland tools (dig, host, nslookup, nsupdate). [ Peter: don't install into staging ]
2009-03-05 13:11:36 +01:00
--with-randomdev=/dev/urandom \
bind: security bump to version 9.6-ESV-R4 Bump bind to version 9.6-ESV-R4 since the 9.5 series is no longer supported. While at it switch to the ESV (Extended Support Version) branch instead of going for the latest. Also adjust the package to build against OpenSSL when available for proper DNSSEC support and libxml2 too. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-05-03 20:33:42 +02:00
--enable-epoll --with-libtool
ifeq ($(BR2_PACKAGE_LIBXML2),y)
BIND_CONF_OPT += --with-libxml2=$(STAGING_DIR)/usr
BIND_DEPENDENCIES += libxml2
else
BIND_CONF_OPT += --with-libxml2=no
endif
ifeq ($(BR2_PACKAGE_OPENSSL),y)
BIND_DEPENDENCIES += openssl
bind: fix build failure for static+openssl Bind just links to openssl libraries without checking it's dependencies. This works when doing shared builds since the linker picks the deps up, but fails badly on static builds. So just define LIBS="-lz" when openssl is enabled. Fixes: http://autobuild.buildroot.net/results/a9a166f932e0b6727ae8e470ce748418797875b9/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-05-05 12:54:11 +02:00
BIND_CONF_OPT += --with-openssl=$(STAGING_DIR)/usr LIBS="-lz"
bind: security bump to version 9.6-ESV-R4 Bump bind to version 9.6-ESV-R4 since the 9.5 series is no longer supported. While at it switch to the ESV (Extended Support Version) branch instead of going for the latest. Also adjust the package to build against OpenSSL when available for proper DNSSEC support and libxml2 too. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-05-03 20:33:42 +02:00
else
BIND_CONF_OPT += --with-openssl=no
endif
add new package bind per case 0000507
2006-01-25 21:56:55 +01:00
bind: security bump to version 9.6-ESV-R9-P1 Fixes CVE-2013-3919 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-07-19 21:41:20 +02:00
define BIND_INSTALL_INIT_SYSV
$(INSTALL) -m 0755 -D package/bind/S81named \
$(TARGET_DIR)/etc/init.d/S81named
endef
bind: remove old-style hook usage and step override Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 17:04:32 +02:00
define BIND_TARGET_INSTALL_FIXES
bind: isc-config.sh gets installed into usr/bin, not /
2009-03-05 14:33:11 +01:00
rm -f $(TARGET_DIR)/usr/bin/isc-config.sh
bind: remove old-style hook usage and step override Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 17:04:32 +02:00
endef
BIND_POST_INSTALL_TARGET_HOOKS += BIND_TARGET_INSTALL_FIXES
bind: version bump to 9.6-ESV-R5 and server option Bump to version 9.6-ESV-R5. Also add the server option in case users just want the tools. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-10-15 05:07:31 +02:00
define BIND_TARGET_REMOVE_SERVER
rm -rf $(addprefix $(TARGET_DIR)/usr/sbin/, $(BIND_TARGET_SBINS))
endef
bind: remove old-style hook usage and step override Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 17:04:32 +02:00
define BIND_TARGET_REMOVE_TOOLS
bind: bump version and convert to Makefile.autotools.in Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #145. Current bind package is version 9.3.2 which is from the 9.3 branch and is EOLed. It has many security bugs probably fixed in 9.3.6-P1 but since it won't be supported for long it's probably metter to move on to a supported branch. CVE-2009-0025, CVE-2008-1447, CVE-2008-0122, CVE-2007-2926 and probably more. While at it migrate to Makefile.autotools.in too. Also introduced an option for/not to install userland tools (dig, host, nslookup, nsupdate). [ Peter: don't install into staging ]
2009-03-05 13:11:36 +01:00
rm -rf $(addprefix $(TARGET_DIR)/usr/bin/, $(BIND_TARGET_BINS))
bind: remove old-style hook usage and step override Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 17:04:32 +02:00
endef
bind: version bump to 9.6-ESV-R5 and server option Bump to version 9.6-ESV-R5. Also add the server option in case users just want the tools. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-10-15 05:07:31 +02:00
ifneq ($(BR2_PACKAGE_BIND_SERVER),y)
BIND_POST_INSTALL_TARGET_HOOKS += BIND_TARGET_REMOVE_SERVER
endif
bind: remove old-style hook usage and step override Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 17:04:32 +02:00
ifneq ($(BR2_PACKAGE_BIND_TOOLS),y)
BIND_POST_INSTALL_TARGET_HOOKS += BIND_TARGET_REMOVE_TOOLS
bind: bump version and convert to Makefile.autotools.in Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #145. Current bind package is version 9.3.2 which is from the 9.3 branch and is EOLed. It has many security bugs probably fixed in 9.3.6-P1 but since it won't be supported for long it's probably metter to move on to a supported branch. CVE-2009-0025, CVE-2008-1447, CVE-2008-0122, CVE-2007-2926 and probably more. While at it migrate to Makefile.autotools.in too. Also introduced an option for/not to install userland tools (dig, host, nslookup, nsupdate). [ Peter: don't install into staging ]
2009-03-05 13:11:36 +01:00
endif
add new package bind per case 0000507
2006-01-25 21:56:55 +01:00
bind: remove old-style hook usage and step override Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 17:04:32 +02:00
define BIND_UNINSTALL_TARGET_CMDS
bind: version bump to 9.6-ESV-R5 and server option Bump to version 9.6-ESV-R5. Also add the server option in case users just want the tools. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-10-15 05:07:31 +02:00
$(BIND_TARGET_REMOVE_SERVER)
$(BIND_TARGET_REMOVE_TOOLS)
bind: bump version and convert to Makefile.autotools.in Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #145. Current bind package is version 9.3.2 which is from the 9.3 branch and is EOLed. It has many security bugs probably fixed in 9.3.6-P1 but since it won't be supported for long it's probably metter to move on to a supported branch. CVE-2009-0025, CVE-2008-1447, CVE-2008-0122, CVE-2007-2926 and probably more. While at it migrate to Makefile.autotools.in too. Also introduced an option for/not to install userland tools (dig, host, nslookup, nsupdate). [ Peter: don't install into staging ]
2009-03-05 13:11:36 +01:00
rm -f $(TARGET_DIR)/etc/init.d/S81named
bind: security bump to version 9.6-ESV-R9-P1 Fixes CVE-2013-3919 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-07-19 21:41:20 +02:00
rm -rf $(addprefix $(TARGET_DIR)/usr/lib/, $(BIND_TARGET_LIBS))
bind: remove old-style hook usage and step override Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 17:04:32 +02:00
endef
add new package bind per case 0000507
2006-01-25 21:56:55 +01:00
all packages: rename XXXTARGETS to xxx-package Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-07-03 00:07:32 +02:00
$(eval $(autotools-package))
Reference in New Issue Copy Permalink