Changes in Makefile

Changes in Makefile http://nxr.netbsd.org/rss/src/usr.bin/passwd/Makefile en Copyright 2005 Java add LIBKRB5_LDADD/LIBKRB5_DPADD and their static counterparts to bsd.prog.mk. use them instead of hard coding various lists of libraries for krb5. this fixes static builds. /src/usr.bin/passwd/Makefile - 1.46 Sun Feb 25 00:16:49 UTC 2018 mrg add sqlite3 /src/usr.bin/passwd/Makefile - 1.45 Sat Jan 28 23:44:51 UTC 2017 christos branches: 1.44.8; 1.44.10; 1.44.12; 1.44.16; 1.44.18; Keep the built-in support for passwd -k, but don't make the kpasswd link or install the kpasswd man page since these are provided by heimdal. I ifdef'ed them so that the code to install them is still with the Makefile. /src/usr.bin/passwd/Makefile - 1.44 Wed Feb 13 23:19:14 UTC 2013 christos don't build kpasswd; heimdal does it for us. /src/usr.bin/passwd/Makefile - 1.43 Mon Feb 11 23:11:48 UTC 2013 christos branches: 1.42.4; 1.42.6; 1.42.10; 1.42.12; 1.42.14; We no longer need -I/usr/include/krb5. /src/usr.bin/passwd/Makefile - 1.42 Sun Apr 24 21:42:06 UTC 2011 elric Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to various string and memory copy and set functions (as well as a few system calls and other miscellany) where known at function entry. RedHat has evidently built all "core system packages" with this option for some time. This option should be used at the top of Makefiles (or Makefile.inc where this is used for subdirectories) but after any setting of LIB. This is only useful for userland code, and cannot be used in libc or in any code which includes the libc internals, because it overrides certain libc functions with macros. Some effort has been made to make USE_FORT=yes work correctly for a full-system build by having the bsd.sys.mk logic disable the feature where it should not be used (libc, libssp iteself, the kernel) but no attempt has been made to build the entire system with USE_FORT and doing so will doubtless expose numerous bugs and misfeatures. Adjust the system build so that all programs and libraries that are setuid, directly handle network data (including serial comm data), perform authentication, or appear likely to have (or have a history of having) data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default, with the exception of libc, which cannot use USE_FORT and thus uses only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no per-directory or in a system build will disable if desired. /src/usr.bin/passwd/Makefile - 1.41 Mon May 28 00:06:29 UTC 2007 tls Introduce PAM_STATIC_LDADD and PAM_STATIC_DPADD. When compiling with MKPIC=no, possibly because the target does not support shared libraries, these include libraries required to resolve all symbols which end up referenced from PAM-using applications. The libraries presently required are -lcrypt, -lrpcsvc and -lutil. Add use of these variables which are currently set up to use PAM, so that they compile when MKPIC=no. Also, in the telnetd case, reorder the order of the libraries, so that libtelnet.a comes before -ltermcap and -lutil, again to fix link error when MKPIC=no. Discussed with thorpej and christos. /src/usr.bin/passwd/Makefile - 1.40 Fri Mar 04 20:41:09 UTC 2005 he Remove COPTS+=-g. /src/usr.bin/passwd/Makefile - 1.39 Mon Feb 28 10:37:49 UTC 2005 wiz Magor rework of passwd(1) for the PAM case. Add "-d <database>" option, similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>", to select the password database (files, nis, krb5). Otherwise, we default to using whatever PAM decides. /src/usr.bin/passwd/Makefile - 1.38 Sat Feb 26 07:19:25 UTC 2005 thorpej Add a PAM passwd module. XXX: This avoids the issue of supporting separate -l -y -k, but is the behavior correct? Should passwd -p disable all other passwd methods? Should it become the default if compiled in? /src/usr.bin/passwd/Makefile - 1.37 Tue Feb 22 01:08:43 UTC 2005 christos use pw_gensalt() and don't dig into libcrypt. /src/usr.bin/passwd/Makefile - 1.36 Tue Jan 11 22:42:30 UTC 2005 christos Add support for SHA1 hashed passwords. The algorithm used is essentially PBKDF1 from RFC 2898 but using hmac_sha1 rather than SHA1 directly (suggested by smb@research.att.com). * The format of the encrypted password is: * $<tag>$<iterations>$<salt>$<digest> * * where: * <tag> is "sha1" * <iterations> is an unsigned int identifying how many rounds * have been applied to <digest>. The number * should vary slightly for each password to make * it harder to generate a dictionary of * pre-computed hashes. See crypt_sha1_iterations. * <salt> up to 64 bytes of random data, 8 bytes is * currently considered more than enough. * <digest> the hashed password. hmac.c implementes HMAC as defined in RFC 2104 and includes a unit test for both hmac_sha1 and hmac_sha1 using a selection of the Known Answer Tests from RFC 2202. It is worth noting that to be FIPS compliant the hmac key (password) should be 10-20 chars. /src/usr.bin/passwd/Makefile - 1.35 Fri Jul 02 00:05:23 UTC 2004 sjg remove unnecessary rules /src/usr.bin/passwd/Makefile - 1.34 Tue Jul 22 00:34:40 UTC 2003 lukem Don't build a separate kpasswd program, passwd can handle Kerberos password changing. Fixes last part of bin/14988. /src/usr.bin/passwd/Makefile - 1.33 Sun Apr 06 16:35:38 UTC 2003 lha add DPADD. /src/usr.bin/passwd/Makefile - 1.32 Wed Oct 23 01:25:38 UTC 2002 itojun Split the notion of building Hesiod, Kerberos, S/key, and YP infrastructure and using that infrastructure in programs. * MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building of the infratsructure (libraries, support programs, etc.) * USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control building of support for using the corresponding API in various libraries/programs that can use it. As discussed on tech-toolchain. /src/usr.bin/passwd/Makefile - 1.31 Fri Mar 22 18:10:23 UTC 2002 thorpej Remove INSTALLFLAGS=-fschg, as per change to usr.bin/ssh/ssh/Makefile. /src/usr.bin/passwd/Makefile - 1.30 Wed Oct 18 00:24:19 UTC 2000 simonb remove -lvers, it's not used /src/usr.bin/passwd/Makefile - 1.29 Thu Aug 03 22:56:29 UTC 2000 assar update build infrastructure for heimdal 0.3a /src/usr.bin/passwd/Makefile - 1.28 Thu Aug 03 04:02:32 UTC 2000 assar Add pwd_gensalt() - generates password salt/setting for crypt(), based upon target user and information obtained from passwd.conf. From OpenBSD. /src/usr.bin/passwd/Makefile - 1.27 Thu Jul 06 11:16:50 UTC 2000 ad