e4464fabb6
In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
61 lines
1.6 KiB
Makefile
61 lines
1.6 KiB
Makefile
################################################################################
|
|
#
|
|
# keepalived
|
|
#
|
|
################################################################################
|
|
|
|
KEEPALIVED_VERSION = 2.1.4
|
|
KEEPALIVED_SITE = http://www.keepalived.org/software
|
|
KEEPALIVED_DEPENDENCIES = host-pkgconf openssl
|
|
KEEPALIVED_LICENSE = GPL-2.0+
|
|
KEEPALIVED_LICENSE_FILES = COPYING
|
|
KEEPALIVED_CPE_ID_VENDOR = keepalived
|
|
KEEPALIVED_CONF_OPTS = --disable-hardening
|
|
|
|
# 0002-dbus-fix-policy-to-not-be-overly-broad.patch
|
|
KEEPALIVED_IGNORE_CVES += CVE-2021-44225
|
|
|
|
ifeq ($(BR2_PACKAGE_JSON_C),y)
|
|
KEEPALIVED_DEPENDENCIES += json-c
|
|
KEEPALIVED_CONF_OPTS += --enable-json
|
|
else
|
|
KEEPALIVED_CONF_OPTS += --disable-json
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBGLIB2),y)
|
|
KEEPALIVED_DEPENDENCIES += libglib2
|
|
KEEPALIVED_CONF_OPTS += --enable-dbus
|
|
else
|
|
KEEPALIVED_CONF_OPTS += --disable-dbus
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBNL)$(BR2_PACKAGE_LIBNFNETLINK),yy)
|
|
KEEPALIVED_DEPENDENCIES += libnl libnfnetlink
|
|
KEEPALIVED_CONF_OPTS += --enable-libnl
|
|
else
|
|
KEEPALIVED_CONF_OPTS += --disable-libnl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_IPTABLES),y)
|
|
KEEPALIVED_DEPENDENCIES += iptables
|
|
KEEPALIVED_CONF_OPTS += --enable-iptables
|
|
# ipset support only makes sense when iptables support is enabled.
|
|
ifeq ($(BR2_PACKAGE_IPSET),y)
|
|
KEEPALIVED_DEPENDENCIES += ipset
|
|
KEEPALIVED_CONF_OPTS += --enable-libipset
|
|
else
|
|
KEEPALIVED_CONF_OPTS += --disable-libipset
|
|
endif
|
|
else
|
|
KEEPALIVED_CONF_OPTS += --disable-iptables
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBNFTNL),y)
|
|
KEEPALIVED_DEPENDENCIES += libnftnl
|
|
KEEPALIVED_CONF_OPTS += --enable-nftables
|
|
else
|
|
KEEPALIVED_CONF_OPTS += --disable-nftables
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|