will be linked against it anyway, not against a system one.
PR: ports/101439
Submitted by: Stanislav Sedov <ssedov at mbsd.msk.ru>
Approved by: David Thiel <lx at redundancy.redundancy.org> (maintainer)
the format string exploit fixes that were also in the patch in 4.2.0_1 (hence
removed).
- Also updating master site to the new official one.
PR: ports/100952
Submitted by: David Thiel (maintainer)
"Ulf Harnhammar and Max Vozeler from the Debian Security Audit Project
have found several format string security bugs in osiris, a network-wide
system integrity monitor control interface. A remote attacker could
exploit them and cause a denial of service or execute arbitrary code."
PR: ports/100793
Submitted by: David Thiel (maintainer)
Security: CVE-2006-3120
scan command now pushes baseline database to host.
added import-filters command (developer submission).
auth.db passwords are now encrypted (hashed).
mod_ports has new params to ignore certain port numbers.
added -q option to console, to not log to system log.
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
- fixed notification email bug with url not being added to email.
- fixed http_host field not being used for log reports URLs.
PR: ports/77522
Submitted by: David Thiel (maintainer)
because of the lack of a ${PREFIX}/osiris directory. This is now created no
matter what options are set.
PR: ports/77221
Submitted by: David Thiel <lx@redundancy.redundancy.org> (maintainer)
Updating the Osiris integrity checker to 4.0.8. From changelog:
FIXED:
: updated copyrights.
: cli stat of editor incorrect.
: utilities.c, escape filename bug in octal handling.
: fixed memory leak in regex file filter hs_regfree missing.
FEATURES:
: port of host.conf config keyword from the 4.1 branch.
PR: ports/76481
Submitted by: David Thiel <lx@redundancy.redundancy.org>
Updating the Osiris integrity checking system to 4.0.6. PDF
and RTF docs were removed from the plist and makefile, as
they were removed from the distribution. They are available
in HTML format on the Osiris homepage.
Code changes:
FIXED:
: typo in generic osirismd rc script.
: changed verify cert depth to 10, from 4.
: moved 'continue' prompt to beginning of installer, where it should be.
: fixed regular expression filter value bug with parens.
FEATURES:
: added default config for Linksys WRT54G(S).
: changed notification subject lines for easier parsing.
PR: ports/74336
Submitted by: David Thiel <lx@redundancy.redundancy.org>
(now unsupported) 2.x.x series, including a more modular design, support
for monitoring user/group databases and kernel extensions, more flexible
configuration syntax, and improved logging.
PR: ports/68790
Submitted by: maintainer
- Pass maintainership to the submitter
PR: ports/63077
Submitted by: David Thiel <lx@redundancy.redundancy.org>
Approved by: Nicolas Jombart (current maintainer)
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
