mirror of
https://git.FreeBSD.org/ports.git
synced 2024-12-25 04:43:33 +00:00
a64769fcfc
A vulnerability allows suppressing the normal checks that a SQL function returns the data type it's declared to do. These errors can easily be exploited to cause a backend crash, and in principle might be used to read database content that the user should not be able to access. [CVE-2007-0555] The release includes a set of other fixes as well. Please see the release information at http://www.postgresql.org/docs/7.3/static/release.html#RELEASE-7-3-18 Security: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0555
269 lines
8.8 KiB
Makefile
269 lines
8.8 KiB
Makefile
# New ports collection makefile for: PostgreSQL
|
|
# Date created: November 13, 1998
|
|
# Whom: Marc G. Fournier <scrappy@FreeBSD.org>
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
PORTNAME?= postgresql
|
|
PORTVERSION?= 7.3.18
|
|
PORTREVISION?= 0
|
|
CATEGORIES?= databases
|
|
MASTER_SITES= ${MASTER_SITE_PGSQL}
|
|
MASTER_SITE_SUBDIR= source/v${PORTVERSION}
|
|
PKGNAMESUFFIX?= -server
|
|
DISTFILES?= postgresql-base-${PORTVERSION}${EXTRACT_SUFX} \
|
|
postgresql-opt-${PORTVERSION}${EXTRACT_SUFX}
|
|
|
|
MAINTAINER?= girgen@FreeBSD.org
|
|
COMMENT?= The most advanced open-source database available anywhere
|
|
|
|
CONFLICTS?= ${PORTNAME}${PKGNAMESUFFIX}-7.[0-24-9]* \
|
|
${PORTNAME}${PKGNAMESUFFIX}-8.* \
|
|
${PORTNAME}-client-7.[0-24-9]* \
|
|
${PORTNAME}-client-8.*
|
|
|
|
WRKSRC= ${WRKDIR}/postgresql-${PORTVERSION}
|
|
DIST_SUBDIR= postgresql
|
|
|
|
UNIQUENAME?= ${PORTNAME}73
|
|
LATEST_LINK?= ${PKGNAMEPREFIX}${UNIQUENAME}${PKGNAMESUFFIX}
|
|
|
|
PKGINSTALL?= ${PKGDIR}/pkg-install${PKGNAMESUFFIX}
|
|
USE_BZIP2= YES
|
|
USE_GMAKE= YES
|
|
GNU_CONFIGURE= YES
|
|
.if defined(NO_BUILD)
|
|
.undef USE_GMAKE
|
|
.undef GNU_CONFIGURE
|
|
.endif
|
|
|
|
CONFIGURE_ARGS+=--with-libraries=${LOCALBASE}/lib \
|
|
--docdir=${DOCSDIR}
|
|
CONFIGURE_ENV+= LDFLAGS="${LDFLAGS}"
|
|
|
|
PLIST= ${PKGDIR}/pkg-plist${PKGNAMESUFFIX}
|
|
|
|
BUILD_DIRS?= src/backend src/backend/utils/mb/conversion_procs \
|
|
src/bin/initdb src/bin/initlocation src/bin/ipcclean \
|
|
src/bin/pg_controldata src/bin/pg_ctl src/bin/pg_id \
|
|
src/bin/pg_resetxlog src/bin/postgres src/bin/postmaster \
|
|
src/pl
|
|
|
|
INSTALL_DIRS?= ${BUILD_DIRS}
|
|
|
|
.if !defined(CLIENT_ONLY) && !defined(SLAVE_ONLY)
|
|
SERVER_ONLY= yes
|
|
USE_RC_SUBR= postgresql
|
|
SUB_FILES+= dot.cshrc dot.profile
|
|
USE_PGSQL= yes
|
|
WANT_PGSQL_VER= ${PORTVERSION:C/([0-9][0-9]*)\.([0-9][0-9]*).*/\1\2/g}
|
|
.endif
|
|
|
|
.if !defined(SLAVE_ONLY)
|
|
OPTIONS= NLS "Use internationalized messages" on
|
|
.endif
|
|
|
|
# Cannot check this with standard OPTION due to a catch-22.
|
|
# USE_OPENSSL must precede bsd.port.pre.mk, but then we don't know
|
|
# what OPTIONS are set.
|
|
#
|
|
# If you *don't* want SSL, set WITHOUT_SSL=YES when making
|
|
.if !defined(WITHOUT_SSL)
|
|
USE_OPENSSL= yes
|
|
CONFIGURE_ARGS+=--with-openssl
|
|
.endif
|
|
|
|
.include <bsd.port.pre.mk>
|
|
|
|
.if !defined(SLAVE_ONLY)
|
|
# gnugetopt will always be used if already installed
|
|
. if ( ${OSVERSION} < 500041 ) && !exists(${LOCALBASE}/include/getopt.h)
|
|
OPTIONS+= GNUGETOPT "Use GNU getopt" on
|
|
. endif
|
|
# Note: server only options are no-ops for the client
|
|
OPTIONS+= PAM "Build with PAM support (server only)" off
|
|
OPTIONS+= MIT_KRB5 "Build with MIT's kerberos support" off
|
|
OPTIONS+= HEIMDAL_KRB5 "Builds with Heimdal kerberos support" off
|
|
OPTIONS+= OPTIMIZED_CFLAGS "Builds with compiler optimizations (-O3)" off
|
|
OPTIONS+= LIBC_R "Link w/ libc_r, used by plpython (server)" off
|
|
# to run regression tests:
|
|
OPTIONS+= TESTS "Allows the use of a \"check\" target (server)" off
|
|
OPTIONS+= DEBUG "Builds with debugging symbols" off
|
|
|
|
. if defined(SERVER_ONLY) && defined(WITH_PAM)
|
|
CONFIGURE_ARGS+=--with-pam
|
|
. endif
|
|
|
|
. if !defined(WITHOUT_GNUGETOPT) || exists(${LOCALBASE}/include/getopt.h)
|
|
USE_GETOPT_LONG=yes
|
|
. endif
|
|
|
|
. if !(defined(WITHOUT_GETTEXT) || defined(WITHOUT_NLS))
|
|
CONFIGURE_ARGS+=--enable-nls --with-includes=${LOCALBASE}/include
|
|
PLIST_SUB+= GETTEXT=""
|
|
USE_GETTEXT= YES
|
|
. else
|
|
CONFIGURE_ARGS+=--disable-nls
|
|
PLIST_SUB+= GETTEXT="@comment "
|
|
. endif
|
|
|
|
. if defined(WITH_OPTIMIZED_CFLAGS)
|
|
CFLAGS+= -O3 -funroll-loops
|
|
. endif
|
|
|
|
. if defined(WITH_DEBUG)
|
|
CONFIGURE_ARGS+= --enable-debug
|
|
INSTALL_TARGET= install
|
|
. else
|
|
INSTALL_TARGET= install-strip
|
|
. endif
|
|
|
|
. if defined(WITH_MIT_KRB5)
|
|
. if exists(/usr/lib/libkrb5.so) || exists(/usr/bin/krb5-config)
|
|
BROKEN= "You must remove heimdal's /usr/bin/krb5-config and /usr/lib/libkrb5.so*, and set NO_KERBEROS=true in /etc/make.conf to build successfully with MIT-KRB"
|
|
. endif
|
|
# Allow defining a home built MIT Kerberos by setting KRB5_HOME
|
|
. if defined(KRB5_HOME) && exists(${KRB5_HOME}/lib/libgssapi_krb5.a) && exists(${KRB5_HOME}/bin/krb5-config)
|
|
CONFIGURE_ARGS+=--with-krb5=${KRB5_HOME}
|
|
. else
|
|
LIB_DEPENDS+= krb5.3:${PORTSDIR}/security/krb5
|
|
CONFIGURE_ARGS+=--with-krb5=${LOCALBASE}
|
|
. endif
|
|
. endif
|
|
|
|
. if defined(WITH_HEIMDAL_KRB5)
|
|
# Allow defining a home built Heimdal Kerberos by setting HEIMDAL_HOME
|
|
. if defined(HEIMDAL_HOME) && exists(${HEIMDAL_HOME}/lib/libgssapi.a) && exists(${HEIMDAL_HOME}/bin/krb5-config)
|
|
CONFIGURE_ARGS+=--with-krb5=${HEIMDAL_HOME}
|
|
. else
|
|
# Postgresql apps will not link properly when libpq is linked with base heimdal in /usr,
|
|
# so we always use the heimdal port. See
|
|
# http://lists.freebsd.org/pipermail/freebsd-stable/2005-October/018809.html
|
|
LIB_DEPENDS+= krb5.20:${PORTSDIR}/security/heimdal
|
|
CONFIGURE_ARGS+=--with-krb5=${LOCALBASE}
|
|
. endif
|
|
. endif
|
|
|
|
. if (defined(SERVER_ONLY) && defined(WITH_TESTS)) || make(makesum)
|
|
DISTFILES+= postgresql-test-${PORTVERSION}${EXTRACT_SUFX}
|
|
EXTRA_PATCHES= ${FILESDIR}/regresspatch-src-test-regress-pgregress-sh
|
|
. endif
|
|
|
|
. ifmake makesum
|
|
DISTFILES+= postgresql-docs-${PORTVERSION}${EXTRACT_SUFX}
|
|
. endif
|
|
|
|
. if defined(SERVER_ONLY) && defined(WITH_LIBC_R)
|
|
CFLAGS+= ${PTHREAD_CFLAGS}
|
|
LDFLAGS+= ${PTHREAD_LIBS}
|
|
. endif
|
|
.endif # !SLAVE_ONLY
|
|
|
|
.if defined(CLIENT_ONLY)
|
|
MAN1= clusterdb.1 createdb.1 createlang.1 createuser.1 dropdb.1 \
|
|
droplang.1 dropuser.1 ecpg.1 initdb.1 initlocation.1 ipcclean.1 \
|
|
pg_config.1 pg_controldata.1 pg_ctl.1 pg_dump.1 pg_dumpall.1 \
|
|
pg_resetxlog.1 pg_restore.1 pgtclsh.1 pgtksh.1 postgres.1 \
|
|
postmaster.1 psql.1 vacuumdb.1
|
|
|
|
MAN7= abort.7 alter_database.7 alter_group.7 alter_table.7 \
|
|
alter_trigger.7 alter_user.7 analyze.7 begin.7 checkpoint.7 \
|
|
close.7 cluster.7 comment.7 commit.7 copy.7 create_aggregate.7 \
|
|
create_cast.7 create_constraint_trigger.7 create_conversion.7 \
|
|
create_database.7 create_domain.7 create_function.7 create_group.7 \
|
|
create_index.7 create_language.7 create_operator.7 \
|
|
create_operator_class.7 create_rule.7 create_schema.7 \
|
|
create_sequence.7 create_table.7 create_table_as.7 \
|
|
create_trigger.7 create_type.7 create_user.7 create_view.7 \
|
|
deallocate.7 declare.7 delete.7 drop_aggregate.7 \
|
|
drop_cast.7 drop_conversion.7 drop_database.7 drop_domain.7 \
|
|
drop_function.7 drop_group.7 drop_index.7 drop_language.7 \
|
|
drop_operator.7 drop_operator_class.7 drop_rule.7 drop_schema.7 \
|
|
drop_sequence.7 \
|
|
drop_table.7 drop_trigger.7 drop_type.7 drop_user.7 \
|
|
drop_view.7 end.7 execute.7 explain.7 fetch.7 grant.7 insert.7 \
|
|
listen.7 load.7 lock.7 move.7 notify.7 prepare.7 reindex.7 \
|
|
reset.7 revoke.7 rollback.7 select.7 select_into.7 \
|
|
set.7 set_constraints.7 set_transaction.7 show.7 \
|
|
set_session_authorization.7 start_transaction.7 \
|
|
truncate.7 unlisten.7 update.7 vacuum.7
|
|
.endif
|
|
|
|
.if defined(SERVER_ONLY)
|
|
pre-everything::
|
|
@${SH} ${PKGINSTALL} ${PORTNAME} BACKUPWARNING
|
|
.endif
|
|
|
|
.if !defined(NO_BUILD)
|
|
|
|
pre-configure:
|
|
. if defined(WITH_MIT_KRB5) && defined(WITH_HEIMDAL_KRB5)
|
|
@${ECHO} "MIT's and Heimdal Kerberos are mutually exclusive."
|
|
@${ECHO} "Please choose one or the other."
|
|
@exit 1
|
|
. endif
|
|
|
|
do-build:
|
|
@ cd ${WRKSRC}/src/backend ;\
|
|
${GMAKE} ../../src/include/parser/parse.h ../../src/include/utils/fmgroids.h
|
|
@ for dir in ${BUILD_DIRS}; do \
|
|
cd ${WRKSRC}/$${dir} && ${SETENV} ${MAKE_ENV} ${GMAKE}; \
|
|
done
|
|
|
|
. if exists(${FILESDIR}/pkg-message${PKGNAMESUFFIX}.in)
|
|
SUB_FILES+= pkg-message${PKGNAMESUFFIX}
|
|
PKGMESSAGE= ${WRKSRC}/pkg-message${PKGNAMESUFFIX}
|
|
. endif
|
|
.endif
|
|
|
|
.if defined(SERVER_ONLY)
|
|
pre-su-install:
|
|
@ ${SETENV} PKG_PREFIX=${PREFIX} \
|
|
${SH} ${PKGINSTALL} ${PORTNAME} PRE-INSTALL
|
|
.endif
|
|
|
|
.if !defined(NO_BUILD)
|
|
do-install:
|
|
@for dir in ${INSTALL_DIRS}; do \
|
|
cd ${WRKSRC}/$${dir} && \
|
|
${SETENV} ${MAKE_ENV} ${GMAKE} ${INSTALL_TARGET}; \
|
|
done
|
|
. if defined(CLIENT_ONLY)
|
|
@ cd ${WRKSRC} && ${SETENV} ${MAKE_ENV} ${GMAKE} install-all-headers
|
|
. elif defined(SERVER_ONLY)
|
|
@ ${MKDIR} ${PREFIX}/share/postgresql
|
|
. for i in profile cshrc
|
|
${INSTALL_DATA} ${WRKDIR}/dot.$i ${PREFIX}/share/postgresql/dot.$i.dist; \
|
|
${INSTALL_DATA} -o pgsql -g pgsql ${WRKDIR}/dot.$i ~pgsql/dot.$i.dist ; \
|
|
if [ ! -f ~pgsql/.$i ]; then \
|
|
${CP} -p ~pgsql/dot.$i.dist ~pgsql/.$i; \
|
|
fi
|
|
. endfor
|
|
@ ${CHOWN} -R pgsql:pgsql ~pgsql/. ;\
|
|
${MKDIR} ${PREFIX}/etc/periodic/daily ;\
|
|
${INSTALL_SCRIPT} ${FILESDIR}/502.pgsql \
|
|
${PREFIX}/etc/periodic/daily
|
|
. endif # SERVER_ONLY
|
|
@ if [ -r ${PKGMESSAGE} ]; then \
|
|
${MKDIR} ${DOCSDIR} ;\
|
|
${INSTALL_DATA} ${PKGMESSAGE} ${DOCSDIR}/README${PKGNAMESUFFIX} ;\
|
|
${ECHO} "======================================================================" ;\
|
|
${CAT} ${PKGMESSAGE} ;\
|
|
${ECHO} "======================================================================" ;\
|
|
fi
|
|
.endif # !NO_BUILD
|
|
|
|
.if defined(SERVER_ONLY) && defined(WITH_TESTS)
|
|
check:
|
|
@if [ `id -u` != 0 ] ; then \
|
|
${ECHO} "Running postgresql regressions tests" ;\
|
|
cd ${WRKSRC}; ${GMAKE} check ;\
|
|
else \
|
|
${ECHO} "You cannot run regression tests when postgresql is built as user root." ; \
|
|
${ECHO} "Clean and rebuild the port as a regular user to run the tests." ;\
|
|
fi
|
|
.endif
|
|
|
|
.include <bsd.port.post.mk>
|