40f7adae3c
I was trying to make the ISC dhcp daemon more secure by using the -user and -group option to let dhcp server run as non-root user. Unfortunately these options are not available when building ISC dhcp server with buildroot. The reason is, that the configure script must be called with the option --enable-paranoia to activate these options. But this option is not set in the dhcp.mk file. To be backward compatible I added a new option to the dhcp's Config.in file to enable this feature when desired and parse this option in dhcp.mk. Signed-off-by: Andreas Ehmanns <universeiii@gmx.de> [yann.morin.1998@free.fr: fix check-package] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
47 lines
1.2 KiB
Plaintext
47 lines
1.2 KiB
Plaintext
config BR2_PACKAGE_DHCP
|
|
bool "dhcp (ISC)"
|
|
# fork()
|
|
depends on BR2_USE_MMU
|
|
depends on BR2_PACKAGE_BUSYBOX_SHOW_OTHERS
|
|
help
|
|
DHCP relay agent from the ISC DHCP distribution.
|
|
|
|
https://www.isc.org/downloads/dhcp/
|
|
|
|
if BR2_PACKAGE_DHCP
|
|
|
|
config BR2_PACKAGE_DHCP_SERVER
|
|
bool "dhcp server"
|
|
help
|
|
DHCP server from the ISC DHCP distribution.
|
|
|
|
This also installs omshell, an interactive tool to connect to,
|
|
query, and possibly change, the server's state via the Object
|
|
Management API (OMAPI).
|
|
|
|
config BR2_PACKAGE_DHCP_SERVER_DELAYED_ACK
|
|
bool "Enable delayed ACK feature"
|
|
depends on BR2_PACKAGE_DHCP_SERVER
|
|
help
|
|
Enable delayed ACK feature in the ISC DHCP server.
|
|
|
|
config BR2_PACKAGE_DHCP_SERVER_ENABLE_PARANOIA
|
|
bool "Enable paranoia options"
|
|
depends on BR2_PACKAGE_DHCP_SERVER
|
|
help
|
|
Add option --enable-paranoia to configure script. This
|
|
activates additional server options (-user, -group and
|
|
-chroot) to make dhcp server more secure.
|
|
|
|
config BR2_PACKAGE_DHCP_RELAY
|
|
bool "dhcp relay"
|
|
help
|
|
DHCP relay agent from the ISC DHCP distribution.
|
|
|
|
config BR2_PACKAGE_DHCP_CLIENT
|
|
bool "dhcp client"
|
|
help
|
|
DHCP client from the ISC DHCP distribution.
|
|
|
|
endif
|