NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
a75ee0e812
kumquat-buildroot/package/tinc/tinc.mk

26 lines
711 B
Makefile
Raw Normal View History

tinc: new package [Thomas: - fix license from GPLv2 to 'GPLv2+ with OpenSSL exception' - add -std=c99 to CFLAGS, otherwise it doesn't build with a minimal toolchain configuration - add BR2_USE_MMU dependency since fork() is used.] Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-16 15:47:58 +01:00
################################################################################
#
# tinc
#
################################################################################
tinc: security bump to version 1.0.35 Fixes the following security issues: CVE-2018-16758: Michael Yonli discovered that tinc 1.0.34 and earlier allow a man-in-the-middle attack that, even if the MITM cannot decrypt the traffic sent between the two endpoints, when the MITM can correctly predict when an ephemeral key exchange message is sent in a TCP connection between two nodes, allows the MITM to force one node to send UDP packets in plaintext. The tinc 1.1pre versions are not affected by this. CVE-2018-16738: Michael Yonli discoverd that tinc versions 1.0.30 to 1.0.34 allow an oracle attack, similar to CVE-2018-16737, but due to the mitigations put in place for the Sweet32 attack in tinc 1.0.30, it now requires a timing attack that has only a limited time to complete. Tinc 1.1pre16 and earlier are also affected if there are nodes on the same VPN that still use the legacy protocol from tinc version 1.0.x. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-10-09 10:39:59 +02:00
TINC_VERSION = 1.0.35
tinc: new package [Thomas: - fix license from GPLv2 to 'GPLv2+ with OpenSSL exception' - add -std=c99 to CFLAGS, otherwise it doesn't build with a minimal toolchain configuration - add BR2_USE_MMU dependency since fork() is used.] Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-16 15:47:58 +01:00
TINC_SITE = http://www.tinc-vpn.org/packages
TINC_DEPENDENCIES = lzo openssl zlib
boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+ We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-30 15:43:32 +02:00
TINC_LICENSE = GPL-2.0+ with OpenSSL exception
tinc: new package [Thomas: - fix license from GPLv2 to 'GPLv2+ with OpenSSL exception' - add -std=c99 to CFLAGS, otherwise it doesn't build with a minimal toolchain configuration - add BR2_USE_MMU dependency since fork() is used.] Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-16 15:47:58 +01:00
TINC_LICENSE_FILES = COPYING COPYING.README
TINC_CONF_ENV = CFLAGS="$(TARGET_CFLAGS) -std=c99"
toolchain: add hidden symbol for PIE support uClibc-ng does not support PIE for some architectures as arc and m68k. It isn't implemented in the static linking case, too. With musl toolchains you might have static PIE support with little patching of gcc. Static linking for GNU libc isn't enabled in buildroot. Fixup any package using special treatment of PIE. (grep -ir pie package/*/*.mk) Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> [Thomas: use positive logic.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-07-11 16:35:14 +02:00
ifeq ($(BR2_TOOLCHAIN_SUPPORTS_PIE),)
tinc: disable PIE on ARC Even though ARC gcc understands "-pie" option and attempts to generate PIE binaries as of today PIE is not really supported for user-space applications. So we disable PIE detection if building for ARC. That fixes http://autobuild.buildroot.net/results/2b1/2b1aa474fc432f3f79b03c4577d68642bb7e0f9c and also prevents execution of non-supported PIE binary in runtime. [Thomas: fix indentation.] Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-08-10 15:36:36 +02:00
TINC_CONF_ENV += \
ax_cv_check_cflags___fPIE=no \
ax_cv_check_ldflags___pie=no
endif
package/tinc: upgrade to 1.0.33, install upstream's systemd files Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-01-26 19:54:44 +01:00
ifeq ($(BR2_INIT_SYSTEMD),y)
TINC_DEPENDENCIES += systemd
TINC_CONF_OPTS += --with-systemdsystemunitdir=/usr/lib/systemd/system
endif
tinc: new package [Thomas: - fix license from GPLv2 to 'GPLv2+ with OpenSSL exception' - add -std=c99 to CFLAGS, otherwise it doesn't build with a minimal toolchain configuration - add BR2_USE_MMU dependency since fork() is used.] Signed-off-by: Zoltan Gyarmati <mr.zoltan.gyarmati@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-12-16 15:47:58 +01:00
$(eval $(autotools-package))
Reference in New Issue Copy Permalink