NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
dac25351e6
kumquat-buildroot/package/dropbear/dropbear.mk

100 lines
3.0 KiB
Makefile
Raw Normal View History

Normalize separator size to 80 Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-06 01:53:30 +02:00
################################################################################
rename dropbear_sshd to just dropbear
2005-10-29 09:01:33 +02:00
#
# dropbear
#
Normalize separator size to 80 Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-06 01:53:30 +02:00
################################################################################
rename dropbear_sshd to just dropbear
2005-10-29 09:01:33 +02:00
dropbear: security bump to version 2017.75 Fixes: - CVE-2017-9078: A double-free in the server could be triggered by an authenticated user if dropbear is running with -a (Allow connections to forwarded ports from any host) This could potentially allow arbitrary code execution as root by an authenticated user. Affects versions 2013.56 to 2016.74. Thanks to Mark Shepard for reporting the crash. - CVE-2017-9079: Dropbear parsed authorized_keys as root, even if it were a symlink. The fix is to switch to user permissions when opening authorized_keys. A user could symlink their ~/.ssh/authorized_keys to a root-owned file they couldn't normally read. If they managed to get that file to contain valid authorized_keys with command= options it might be possible to read other contents of that file. This information disclosure is to an already authenticated user. Thanks to Jann Horn of Google Project Zero for reporting this. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-05-20 17:15:48 +02:00
DROPBEAR_VERSION = 2017.75
dropbear: use https URLs While a hash check is being done, it's still better to use a download URL with HTTPS. Signed-off-by: Danilo Bargen <mail@dbrgn.ch> Reviewed-by: Adrian Perez de Castro <aperez@igalia.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2018-02-12 09:21:50 +01:00
DROPBEAR_SITE = https://matt.ucc.asn.au/dropbear/releases
dropbear: bump to version 2013.56 Switch ECHOs to SEDs to avoid issues with defines changing after sysoptions.h was included - and it's cleaner. Enable hmac-sha2-256 and hmac-sha2-512 support for the full featured. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-03-21 09:02:23 +01:00
DROPBEAR_SOURCE = dropbear-$(DROPBEAR_VERSION).tar.bz2
boot, package: use SPDX short identifier for BSD-2c We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-2c is BSD-2-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-2c/BSD-2-Clause/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-30 15:43:39 +02:00
DROPBEAR_LICENSE = MIT, BSD-2-Clause-like, BSD-2-Clause
dropbear: add license info Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-11-13 02:05:40 +01:00
DROPBEAR_LICENSE_FILES = LICENSE
dropbear: add extra build customization options v2: only offer option to disable building SSH client. do not offer options to disable password authentication and TCP forwarding. Signed-off-by: Floris Bos <bos@je-eigen-domein.nl> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-02-04 19:33:29 +01:00
DROPBEAR_TARGET_BINS = dropbearkey dropbearconvert scp
DROPBEAR_PROGRAMS = dropbear $(DROPBEAR_TARGET_BINS)
ifeq ($(BR2_PACKAGE_DROPBEAR_CLIENT),y)
# Build dbclient, and create a convenience symlink named ssh
DROPBEAR_PROGRAMS += dbclient
DROPBEAR_TARGET_BINS += dbclient ssh
endif
DROPBEAR_MAKE = \
$(MAKE) MULTI=1 SCPPROGRESS=1 \
PROGRAMS="$(DROPBEAR_PROGRAMS)"
dropbear: add license info Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2012-11-13 02:05:40 +01:00
Rename BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS Since a while, the semantic of BR2_PREFER_STATIC_LIB has been changed from "prefer static libraries when possible" to "use only static libraries". The former semantic didn't make much sense, since the user had absolutely no control/idea of which package would use static libraries, and which packages would not. Therefore, for quite some time, we have been starting to enforce that BR2_PREFER_STATIC_LIB should really build everything with static libraries. As a consequence, this patch renames BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS, and adjust the Config.in option accordingly. This also helps preparing the addition of other options to select shared, shared+static or just static. Note that we have verified that this commit can be reproduced by simply doing a global rename of BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS plus adding BR2_PREFER_STATIC_LIB to Config.in.legacy. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
2014-12-03 22:41:29 +01:00
ifeq ($(BR2_STATIC_LIBS),y)
dropbear: link statically if BR2_PREFER_STATIC_LIB Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-05-13 12:04:10 +02:00
DROPBEAR_MAKE += STATIC=1
endif
dropbear: fix xauth tweak since dbcec2b2 The recent conversion to new-style hooks didn't actually enable the xauth tweaking. Also rename to FIX_XAUTH as it just tweaks the path, it doesn't disable anything. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-09-28 09:22:19 +02:00
define DROPBEAR_FIX_XAUTH
dropbear: convert old-style hook and commands to new-style Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 22:42:27 +02:00
$(SED) 's,^#define XAUTH_COMMAND.*/xauth,#define XAUTH_COMMAND "/usr/bin/xauth,g' $(@D)/options.h
endef
dropbear: really fix xauth tweak since dbcec2b2 Commit d5576fd2 tried to fix this, but introduced a new typo. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-10-06 09:45:12 +02:00
DROPBEAR_POST_EXTRACT_HOOKS += DROPBEAR_FIX_XAUTH
dropbear: convert old-style hook and commands to new-style Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 22:42:27 +02:00
dropbear: bump to version 2013.62 Bump to version 2013.62 with ECC support. Switch the initscript to on-demand key generation and add systemd unit file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-12-04 14:24:00 +01:00
define DROPBEAR_ENABLE_REVERSE_DNS
$(SED) 's:.*\(#define DO_HOST_LOOKUP\).*:\1:' $(@D)/options.h
dropbear: convert old-style hook and commands to new-style Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 22:42:27 +02:00
endef
rename dropbear_sshd to just dropbear
2005-10-29 09:01:33 +02:00
dropbear: bump to version 0.53.1 Changelog @ http://matt.ucc.asn.au/dropbear/CHANGES Since some build-time defaults have changed that make dropbear somewhat bigger we introduce a new option to optimize dropbear for size. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-03-04 15:22:26 +01:00
define DROPBEAR_BUILD_SMALL
dropbear: bump to version 2013.56 Switch ECHOs to SEDs to avoid issues with defines changing after sysoptions.h was included - and it's cleaner. Enable hmac-sha2-256 and hmac-sha2-512 support for the full featured. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-03-21 09:02:23 +01:00
$(SED) 's:.*\(#define NO_FAST_EXPTMOD\).*:\1:' $(@D)/options.h
dropbear: bump to version 0.53.1 Changelog @ http://matt.ucc.asn.au/dropbear/CHANGES Since some build-time defaults have changed that make dropbear somewhat bigger we introduce a new option to optimize dropbear for size. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-03-04 15:22:26 +01:00
endef
define DROPBEAR_BUILD_FEATURED
dropbear: bump to version 2015.67 Switch sed options around since defaults have changed. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-01-28 17:43:50 +01:00
$(SED) 's:^#define DROPBEAR_SMALL_CODE::' $(@D)/options.h
dropbear: bump to version 2013.56 Switch ECHOs to SEDs to avoid issues with defines changing after sysoptions.h was included - and it's cleaner. Enable hmac-sha2-256 and hmac-sha2-512 support for the full featured. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-03-21 09:02:23 +01:00
$(SED) 's:.*\(#define DROPBEAR_BLOWFISH\).*:\1:' $(@D)/options.h
dropbear: bump to version 2015.67 Switch sed options around since defaults have changed. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-01-28 17:43:50 +01:00
$(SED) 's:.*\(#define DROPBEAR_TWOFISH128\).*:\1:' $(@D)/options.h
$(SED) 's:.*\(#define DROPBEAR_TWOFISH256\).*:\1:' $(@D)/options.h
dropbear: bump to version 0.53.1 Changelog @ http://matt.ucc.asn.au/dropbear/CHANGES Since some build-time defaults have changed that make dropbear somewhat bigger we introduce a new option to optimize dropbear for size. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-03-04 15:22:26 +01:00
endef
dropbear: disable standalone mode for nommu dropbear for nommu targets must disable the standalone (non-inetd) mode since the platform lacks fork(), fixes: http://autobuild.buildroot.net/results/ecbdfab10f54bec75c112bbf005bba9ae2b18dc8/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-05-07 05:45:50 +02:00
define DROPBEAR_DISABLE_STANDALONE
$(SED) 's:\(#define NON_INETD_MODE\):/*\1 */:' $(@D)/options.h
endef
dropbear: bump to version 2013.62 Bump to version 2013.62 with ECC support. Switch the initscript to on-demand key generation and add systemd unit file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-12-04 14:24:00 +01:00
define DROPBEAR_INSTALL_INIT_SYSTEMD
$(INSTALL) -D -m 644 package/dropbear/dropbear.service \
dropbear: move systemd service file to /usr/lib Signed-off-by: Mike Williams <mike@mikebwilliams.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-20 20:14:01 +01:00
$(TARGET_DIR)/usr/lib/systemd/system/dropbear.service
dropbear: bump to version 2013.62 Bump to version 2013.62 with ECC support. Switch the initscript to on-demand key generation and add systemd unit file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-12-04 14:24:00 +01:00
mkdir -p $(TARGET_DIR)/etc/systemd/system/multi-user.target.wants
dropbear: move systemd service file to /usr/lib Signed-off-by: Mike Williams <mike@mikebwilliams.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-03-20 20:14:01 +01:00
ln -fs ../../../../usr/lib/systemd/system/dropbear.service \
dropbear: bump to version 2013.62 Bump to version 2013.62 with ECC support. Switch the initscript to on-demand key generation and add systemd unit file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-12-04 14:24:00 +01:00
$(TARGET_DIR)/etc/systemd/system/multi-user.target.wants/dropbear.service
endef
dropbear: disable standalone mode for nommu dropbear for nommu targets must disable the standalone (non-inetd) mode since the platform lacks fork(), fixes: http://autobuild.buildroot.net/results/ecbdfab10f54bec75c112bbf005bba9ae2b18dc8/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-05-07 05:45:50 +02:00
ifeq ($(BR2_USE_MMU),y)
define DROPBEAR_INSTALL_INIT_SYSV
$(INSTALL) -D -m 755 package/dropbear/S50dropbear \
$(TARGET_DIR)/etc/init.d/S50dropbear
endef
else
DROPBEAR_POST_EXTRACT_HOOKS += DROPBEAR_DISABLE_STANDALONE
endif
dropbear: bump to version 2013.62 Bump to version 2013.62 with ECC support. Switch the initscript to on-demand key generation and add systemd unit file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2013-12-04 14:24:00 +01:00
ifeq ($(BR2_PACKAGE_DROPBEAR_DISABLE_REVERSEDNS),)
DROPBEAR_POST_EXTRACT_HOOKS += DROPBEAR_ENABLE_REVERSE_DNS
dropbear: add option to disable reverse DNS lookups Add option to disable reverse DNS lookups on client connection, as connections otherwise stall until DNS times out in configurations without working reverse DNS. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2010-09-06 14:37:22 +02:00
endif
dropbear: convert old-style hook and commands to new-style Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 22:42:27 +02:00
dropbear: bump to version 0.53.1 Changelog @ http://matt.ucc.asn.au/dropbear/CHANGES Since some build-time defaults have changed that make dropbear somewhat bigger we introduce a new option to optimize dropbear for size. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-03-04 15:22:26 +01:00
ifeq ($(BR2_PACKAGE_DROPBEAR_SMALL),y)
DROPBEAR_POST_EXTRACT_HOOKS += DROPBEAR_BUILD_SMALL
packages: rename FOO_CONF_OPT into FOO_CONF_OPTS To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-09-27 21:32:44 +02:00
DROPBEAR_CONF_OPTS += --disable-zlib
dropbear: bump to version 0.53.1 Changelog @ http://matt.ucc.asn.au/dropbear/CHANGES Since some build-time defaults have changed that make dropbear somewhat bigger we introduce a new option to optimize dropbear for size. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-03-04 15:22:26 +01:00
else
DROPBEAR_POST_EXTRACT_HOOKS += DROPBEAR_BUILD_FEATURED
dropbear: disable zlib support when built with small option Closes #3733 Signed-off-by: Alexander Clouter <alex@digriz.org.uk> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-05-16 22:41:54 +02:00
DROPBEAR_DEPENDENCIES += zlib
dropbear: bump to version 0.53.1 Changelog @ http://matt.ucc.asn.au/dropbear/CHANGES Since some build-time defaults have changed that make dropbear somewhat bigger we introduce a new option to optimize dropbear for size. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-03-04 15:22:26 +01:00
endif
dropbear: add options to disable wtmp / lastlog logging Buildroot does not have wtmp or lastlog support by default so allow dropbear to be configured to stop using them and hence to stop generating system log error messages. [Peter: invert to positive options, and disable by default] Signed-off-by: Will Moore <will.moore@beraninstruments.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-10-25 14:22:18 +02:00
ifneq ($(BR2_PACKAGE_DROPBEAR_WTMP),y)
packages: rename FOO_CONF_OPT into FOO_CONF_OPTS To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-09-27 21:32:44 +02:00
DROPBEAR_CONF_OPTS += --disable-wtmp
dropbear: add options to disable wtmp / lastlog logging Buildroot does not have wtmp or lastlog support by default so allow dropbear to be configured to stop using them and hence to stop generating system log error messages. [Peter: invert to positive options, and disable by default] Signed-off-by: Will Moore <will.moore@beraninstruments.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-10-25 14:22:18 +02:00
endif
ifneq ($(BR2_PACKAGE_DROPBEAR_LASTLOG),y)
packages: rename FOO_CONF_OPT into FOO_CONF_OPTS To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2014-09-27 21:32:44 +02:00
DROPBEAR_CONF_OPTS += --disable-lastlog
dropbear: add options to disable wtmp / lastlog logging Buildroot does not have wtmp or lastlog support by default so allow dropbear to be configured to stop using them and hence to stop generating system log error messages. [Peter: invert to positive options, and disable by default] Signed-off-by: Will Moore <will.moore@beraninstruments.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-10-25 14:22:18 +02:00
endif
dropbear: convert old-style hook and commands to new-style Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 22:42:27 +02:00
define DROPBEAR_INSTALL_TARGET_CMDS
$(INSTALL) -m 755 $(@D)/dropbearmulti $(TARGET_DIR)/usr/sbin/dropbear
for f in $(DROPBEAR_TARGET_BINS); do \
ln -snf ../sbin/dropbear $(TARGET_DIR)/usr/bin/$$f ; \
done
package/dropbear: fix when readlink is from busybox Busybox "readlink -f" does not canonicalise paths when the target is missing, while coreutils do. Fix that by: - making an absolute symlink - dropping "-f" when calling readlink Fixes #8276. Reported-by: Jason Tang <tang@jtang.org> Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Paul Cercueil <paul@crapouillou.net> Cc: Alexandre Belloni <alexandre.belloni@free-electrons.com> Tested-by: Jason Tang <tang@jtang.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-08-18 21:25:53 +02:00
ln -snf /var/run/dropbear $(TARGET_DIR)/etc/dropbear
dropbear: convert old-style hook and commands to new-style Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2010-09-01 22:42:27 +02:00
endef
rename dropbear_sshd to just dropbear
2005-10-29 09:01:33 +02:00
all packages: rename XXXTARGETS to xxx-package Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-07-03 00:07:32 +02:00
$(eval $(autotools-package))
Reference in New Issue Copy Permalink