head 1.51; access; symbols netbsd-11-0-RC4:1.51 netbsd-11-0-RC3:1.51 netbsd-11-0-RC2:1.51 netbsd-11-0-RC1:1.51 perseant-exfatfs-base-20250801:1.51 netbsd-11:1.51.0.18 netbsd-11-base:1.51 netbsd-10-1-RELEASE:1.51 perseant-exfatfs-base-20240630:1.51 perseant-exfatfs:1.51.0.16 perseant-exfatfs-base:1.51 netbsd-8-3-RELEASE:1.50 netbsd-9-4-RELEASE:1.51 netbsd-10-0-RELEASE:1.51 netbsd-10-0-RC6:1.51 netbsd-10-0-RC5:1.51 netbsd-10-0-RC4:1.51 netbsd-10-0-RC3:1.51 netbsd-10-0-RC2:1.51 netbsd-10-0-RC1:1.51 netbsd-10:1.51.0.14 netbsd-10-base:1.51 netbsd-9-3-RELEASE:1.51 cjep_sun2x-base1:1.51 cjep_sun2x:1.51.0.12 cjep_sun2x-base:1.51 cjep_staticlib_x-base1:1.51 netbsd-9-2-RELEASE:1.51 cjep_staticlib_x:1.51.0.10 cjep_staticlib_x-base:1.51 netbsd-9-1-RELEASE:1.51 phil-wifi-20200421:1.51 phil-wifi-20200411:1.51 is-mlppp:1.51.0.8 is-mlppp-base:1.51 phil-wifi-20200406:1.51 netbsd-8-2-RELEASE:1.50 netbsd-9-0-RELEASE:1.51 netbsd-9-0-RC2:1.51 netbsd-9-0-RC1:1.51 phil-wifi-20191119:1.51 netbsd-9:1.51.0.6 netbsd-9-base:1.51 phil-wifi-20190609:1.51 netbsd-8-1-RELEASE:1.50 netbsd-8-1-RC1:1.50 pgoyette-compat-merge-20190127:1.51 pgoyette-compat-20190127:1.51 pgoyette-compat-20190118:1.51 pgoyette-compat-1226:1.51 pgoyette-compat-1126:1.51 pgoyette-compat-1020:1.51 pgoyette-compat-0930:1.51 pgoyette-compat-0906:1.51 netbsd-7-2-RELEASE:1.50 pgoyette-compat-0728:1.51 netbsd-8-0-RELEASE:1.50 phil-wifi:1.51.0.4 phil-wifi-base:1.51 pgoyette-compat-0625:1.51 netbsd-8-0-RC2:1.50 pgoyette-compat-0521:1.51 pgoyette-compat-0502:1.51 pgoyette-compat-0422:1.51 netbsd-8-0-RC1:1.50 pgoyette-compat-0415:1.51 pgoyette-compat-0407:1.51 pgoyette-compat-0330:1.51 pgoyette-compat-0322:1.51 pgoyette-compat-0315:1.51 netbsd-7-1-2-RELEASE:1.50 pgoyette-compat:1.51.0.2 pgoyette-compat-base:1.51 netbsd-7-1-1-RELEASE:1.50 matt-nb8-mediatek:1.50.0.40 matt-nb8-mediatek-base:1.50 perseant-stdc-iso10646:1.50.0.38 perseant-stdc-iso10646-base:1.50 netbsd-8:1.50.0.36 netbsd-8-base:1.50 prg-localcount2-base3:1.50 prg-localcount2-base2:1.50 prg-localcount2-base1:1.50 prg-localcount2:1.50.0.34 prg-localcount2-base:1.50 pgoyette-localcount-20170426:1.50 bouyer-socketcan-base1:1.50 pgoyette-localcount-20170320:1.50 netbsd-7-1:1.50.0.32 netbsd-7-1-RELEASE:1.50 netbsd-7-1-RC2:1.50 netbsd-7-nhusb-base-20170116:1.50 bouyer-socketcan:1.50.0.30 bouyer-socketcan-base:1.50 pgoyette-localcount-20170107:1.50 netbsd-7-1-RC1:1.50 pgoyette-localcount-20161104:1.50 netbsd-7-0-2-RELEASE:1.50 localcount-20160914:1.50 netbsd-7-nhusb:1.50.0.28 netbsd-7-nhusb-base:1.50 pgoyette-localcount-20160806:1.50 pgoyette-localcount-20160726:1.50 pgoyette-localcount:1.50.0.26 pgoyette-localcount-base:1.50 netbsd-7-0-1-RELEASE:1.50 netbsd-7-0:1.50.0.24 netbsd-7-0-RELEASE:1.50 netbsd-7-0-RC3:1.50 netbsd-7-0-RC2:1.50 netbsd-7-0-RC1:1.50 netbsd-5-2-3-RELEASE:1.49 netbsd-5-1-5-RELEASE:1.49 netbsd-6-0-6-RELEASE:1.50 netbsd-6-1-5-RELEASE:1.50 netbsd-7:1.50.0.22 netbsd-7-base:1.50 yamt-pagecache-base9:1.50 yamt-pagecache-tag8:1.50 netbsd-6-1-4-RELEASE:1.50 netbsd-6-0-5-RELEASE:1.50 tls-earlyentropy:1.50.0.20 tls-earlyentropy-base:1.50 riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.50 riastradh-drm2-base3:1.50 netbsd-6-1-3-RELEASE:1.50 netbsd-6-0-4-RELEASE:1.50 netbsd-5-2-2-RELEASE:1.49 netbsd-5-1-4-RELEASE:1.49 netbsd-6-1-2-RELEASE:1.50 netbsd-6-0-3-RELEASE:1.50 netbsd-5-2-1-RELEASE:1.49 netbsd-5-1-3-RELEASE:1.49 netbsd-6-1-1-RELEASE:1.50 riastradh-drm2-base2:1.50 riastradh-drm2-base1:1.50 riastradh-drm2:1.50.0.14 riastradh-drm2-base:1.50 netbsd-6-1:1.50.0.18 netbsd-6-0-2-RELEASE:1.50 netbsd-6-1-RELEASE:1.50 netbsd-6-1-RC4:1.50 netbsd-6-1-RC3:1.50 agc-symver:1.50.0.16 agc-symver-base:1.50 netbsd-6-1-RC2:1.50 netbsd-6-1-RC1:1.50 yamt-pagecache-base8:1.50 netbsd-5-2:1.49.0.6 netbsd-6-0-1-RELEASE:1.50 yamt-pagecache-base7:1.50 netbsd-5-2-RELEASE:1.49 netbsd-5-2-RC1:1.49 matt-nb6-plus-nbase:1.50 yamt-pagecache-base6:1.50 netbsd-6-0:1.50.0.12 netbsd-6-0-RELEASE:1.50 netbsd-6-0-RC2:1.50 tls-maxphys:1.50.0.10 tls-maxphys-base:1.50 matt-nb6-plus:1.50.0.8 matt-nb6-plus-base:1.50 netbsd-6-0-RC1:1.50 yamt-pagecache-base5:1.50 yamt-pagecache-base4:1.50 netbsd-6:1.50.0.6 netbsd-6-base:1.50 netbsd-5-1-2-RELEASE:1.49 netbsd-5-1-1-RELEASE:1.49 yamt-pagecache-base3:1.50 yamt-pagecache-base2:1.50 yamt-pagecache:1.50.0.4 yamt-pagecache-base:1.50 cherry-xenmp:1.50.0.2 cherry-xenmp-base:1.50 bouyer-quota2-nbase:1.49 bouyer-quota2:1.49.0.20 bouyer-quota2-base:1.49 matt-mips64-premerge-20101231:1.49 matt-nb5-mips64-premerge-20101231:1.49 matt-nb5-pq3:1.49.0.18 matt-nb5-pq3-base:1.49 netbsd-5-1:1.49.0.16 netbsd-5-1-RELEASE:1.49 netbsd-5-1-RC4:1.49 matt-nb5-mips64-k15:1.49 netbsd-5-1-RC3:1.49 netbsd-5-1-RC2:1.49 netbsd-5-1-RC1:1.49 netbsd-5-0-2-RELEASE:1.49 matt-nb5-mips64-premerge-20091211:1.49 matt-premerge-20091211:1.49 matt-nb5-mips64-u2-k2-k4-k7-k8-k9:1.49 matt-nb4-mips64-k7-u2a-k9b:1.49 matt-nb5-mips64-u1-k1-k5:1.49 matt-nb5-mips64:1.49.0.14 netbsd-5-0-1-RELEASE:1.49 jym-xensuspend-nbase:1.49 netbsd-5-0:1.49.0.12 netbsd-5-0-RELEASE:1.49 netbsd-5-0-RC4:1.49 netbsd-5-0-RC3:1.49 netbsd-5-0-RC2:1.49 jym-xensuspend:1.49.0.10 jym-xensuspend-base:1.49 netbsd-5-0-RC1:1.49 netbsd-5:1.49.0.8 netbsd-5-base:1.49 matt-mips64-base2:1.49 matt-mips64:1.46.0.6 netbsd-4-0-1-RELEASE:1.45 wrstuden-revivesa-base-3:1.49 wrstuden-revivesa-base-2:1.49 wrstuden-fixsa-newbase:1.45 wrstuden-revivesa-base-1:1.49 yamt-pf42-base4:1.49 yamt-pf42-base3:1.49 hpcarm-cleanup-nbase:1.49 yamt-pf42-baseX:1.49 yamt-pf42-base2:1.49 wrstuden-revivesa:1.49.0.4 wrstuden-revivesa-base:1.49 yamt-pf42:1.49.0.2 yamt-pf42-base:1.49 keiichi-mipv6-nbase:1.48 keiichi-mipv6:1.48.0.4 keiichi-mipv6-base:1.48 matt-armv6-nbase:1.48 matt-armv6-prevmlocking:1.46.4.1 wrstuden-fixsa-base-1:1.45 netbsd-4-0:1.45.0.8 netbsd-4-0-RELEASE:1.45 cube-autoconf:1.48.0.2 cube-autoconf-base:1.48 netbsd-4-0-RC5:1.45 netbsd-4-0-RC4:1.45 netbsd-4-0-RC3:1.45 netbsd-4-0-RC2:1.45 netbsd-4-0-RC1:1.45 matt-armv6:1.46.0.4 matt-armv6-base:1.48 matt-mips64-base:1.46 hpcarm-cleanup:1.46.0.2 hpcarm-cleanup-base:1.48 netbsd-3-1-1-RELEASE:1.42.2.1 netbsd-3-0-3-RELEASE:1.42.2.1 wrstuden-fixsa:1.45.0.6 wrstuden-fixsa-base:1.45 abandoned-netbsd-4-base:1.45 abandoned-netbsd-4:1.45.0.2 netbsd-3-1:1.42.2.1.0.4 netbsd-3-1-RELEASE:1.42.2.1 netbsd-3-0-2-RELEASE:1.42.2.1 netbsd-3-1-RC4:1.42.2.1 netbsd-3-1-RC3:1.42.2.1 netbsd-3-1-RC2:1.42.2.1 netbsd-3-1-RC1:1.42.2.1 netbsd-4:1.45.0.4 netbsd-4-base:1.45 chap-midi-nbase:1.44 netbsd-3-0-1-RELEASE:1.42.2.1 chap-midi:1.44.0.2 chap-midi-base:1.44 netbsd-3-0:1.42.2.1.0.2 netbsd-3-0-RELEASE:1.42.2.1 netbsd-3-0-RC6:1.42 netbsd-3-0-RC5:1.42 netbsd-3-0-RC4:1.42 netbsd-3-0-RC3:1.42 netbsd-3-0-RC2:1.42 netbsd-3-0-RC1:1.42 netbsd-2-0-3-RELEASE:1.34 netbsd-2-1:1.34.0.6 netbsd-2-1-RELEASE:1.34 netbsd-2-1-RC6:1.34 netbsd-2-1-RC5:1.34 netbsd-2-1-RC4:1.34 netbsd-2-1-RC3:1.34 netbsd-2-1-RC2:1.34 netbsd-2-1-RC1:1.34 netbsd-2-0-2-RELEASE:1.34 netbsd-3:1.42.0.2 netbsd-3-base:1.42 netbsd-2-0-1-RELEASE:1.34 netbsd-2:1.34.0.4 netbsd-2-base:1.34 netbsd-2-0-RELEASE:1.34 netbsd-2-0-RC5:1.34 netbsd-2-0-RC4:1.34 netbsd-2-0-RC3:1.34 netbsd-2-0-RC2:1.34 netbsd-2-0-RC1:1.34 netbsd-2-0:1.34.0.2 netbsd-2-0-base:1.34 netbsd-1-6-PATCH002-RELEASE:1.27 netbsd-1-6-PATCH002:1.27 netbsd-1-6-PATCH002-RC4:1.27 netbsd-1-6-PATCH002-RC3:1.27 netbsd-1-6-PATCH002-RC2:1.27 netbsd-1-6-PATCH002-RC1:1.27 netbsd-1-6-PATCH001:1.27 netbsd-1-6-PATCH001-RELEASE:1.27 netbsd-1-6-PATCH001-RC3:1.27 netbsd-1-6-PATCH001-RC2:1.27 netbsd-1-6-PATCH001-RC1:1.27 fvdl_fs64_base:1.28 netbsd-1-6-RELEASE:1.27 netbsd-1-6-RC3:1.27 netbsd-1-6-RC2:1.27 netbsd-1-6-RC1:1.27 netbsd-1-6:1.27.0.2 netbsd-1-6-base:1.27 netbsd-1-5-PATCH003:1.18.2.3 netbsd-1-5-PATCH002:1.18.2.3 netbsd-1-5-PATCH001:1.18.2.3 netbsd-1-5-RELEASE:1.18.2.3 netbsd-1-5-BETA2:1.18.2.3 netbsd-1-5-BETA:1.18.2.3 netbsd-1-4-PATCH003:1.13.2.1 netbsd-1-5-ALPHA2:1.18.2.2 netbsd-1-5:1.18.0.2 netbsd-1-5-base:1.18 minoura-xpg4dl-base:1.17 minoura-xpg4dl:1.17.0.2 netbsd-1-4-PATCH002:1.13.2.1 wrstuden-devbsize-19991221:1.16 wrstuden-devbsize:1.16.0.4 wrstuden-devbsize-base:1.16 comdex-fall-1999:1.16.0.2 comdex-fall-1999-base:1.16 netbsd-1-4-PATCH001:1.13 netbsd-1-4-RELEASE:1.13 netbsd-1-4:1.13.0.2 netbsd-1-4-base:1.13 netbsd-1-3-PATCH003:1.12 netbsd-1-3-PATCH003-CANDIDATE2:1.12 netbsd-1-3-PATCH003-CANDIDATE1:1.12 netbsd-1-3-PATCH003-CANDIDATE0:1.12 netbsd-1-3-PATCH002:1.12 netbsd-1-3-PATCH001:1.12 netbsd-1-3-RELEASE:1.12 netbsd-1-3-BETA:1.12 netbsd-1-3:1.12.0.2 netbsd-1-3-base:1.12 netbsd-1-2-PATCH001:1.6 lite-2:1.1.1.2 netbsd-1-2-RELEASE:1.6 netbsd-1-2-BETA:1.6 netbsd-1-2:1.6.0.8 netbsd-1-2-base:1.6 netbsd-1-1-PATCH001:1.6 netbsd-1-1-RELEASE:1.6 netbsd-1-1:1.6.0.4 netbsd-1-1-base:1.6 lite-1:1.1.1.2 CSRG:1.1.1 netbsd-1-0-PATCH06:1.6 netbsd-1-0-PATCH05:1.6 netbsd-1-0-PATCH04:1.6 netbsd-1-0-PATCH03:1.6 netbsd-1-0-PATCH02:1.6 netbsd-1-0-PATCH1:1.6 netbsd-1-0-PATCH0:1.6 netbsd-1-0-RELEASE:1.6 netbsd-1-0:1.6.0.2 netbsd-1-0-base:1.6 netbsd-0-9-RELEASE:1.3 netbsd-0-9-BETA:1.3 netbsd-0-9-ALPHA2:1.3 netbsd-0-9-ALPHA:1.3 netbsd-0-9:1.3.0.2 netbsd-0-9-base:1.3 netbsd-0-8:1.2 netbsd-alpha-1:1.2 patchkit-0-2-2:1.1.1.1 WFJ-386bsd-01:1.1.1.1 WFJ-920714:1.1.1; locks; strict; comment @# @; 1.51 date 2018.02.25.00.16.49; author mrg; state Exp; branches; next 1.50; commitid FMQljqHCqB9ELasA; 1.50 date 2011.04.24.21.42.06; author elric; state Exp; branches; next 1.49; 1.49 date 2008.04.06.09.54.37; author lukem; state Exp; branches; next 1.48; 1.48 date 2007.10.27.15.37.45; author christos; state Exp; branches; next 1.47; 1.47 date 2007.10.17.21.05.39; author christos; state Exp; branches; next 1.46; 1.46 date 2007.05.28.12.06.31; author tls; state Exp; branches 1.46.4.1; next 1.45; 1.45 date 2006.07.13.18.18.09; author christos; state Exp; branches; next 1.44; 1.44 date 2006.03.20.04.03.23; author christos; state Exp; branches; next 1.43; 1.43 date 2005.12.15.14.03.34; author christos; state Exp; branches; next 1.42; 1.42 date 2005.03.04.20.41.09; author he; state Exp; branches 1.42.2.1; next 1.41; 1.41 date 2005.01.13.00.13.33; author thorpej; state Exp; branches; next 1.40; 1.40 date 2005.01.12.01.46.03; author christos; state Exp; branches; next 1.39; 1.39 date 2005.01.12.01.45.32; author christos; state Exp; branches; next 1.38; 1.38 date 2005.01.10.23.31.34; author christos; state Exp; branches; next 1.37; 1.37 date 2005.01.10.03.11.50; author christos; state Exp; branches; next 1.36; 1.36 date 2005.01.08.09.54.36; author lukem; state Exp; branches; next 1.35; 1.35 date 2005.01.07.22.34.20; author manu; state Exp; branches; next 1.34; 1.34 date 2003.12.11.09.46.27; author dyoung; state Exp; branches; next 1.33; 1.33 date 2003.08.23.23.03.44; author lha; state Exp; branches; next 1.32; 1.32 date 2003.08.20.14.11.17; author christos; state Exp; branches; next 1.31; 1.31 date 2003.07.24.16.18.21; author tron; state Exp; branches; next 1.30; 1.30 date 2003.07.24.16.06.45; author tron; state Exp; branches; next 1.29; 1.29 date 2003.07.23.08.01.37; author itojun; state Exp; branches; next 1.28; 1.28 date 2002.10.23.01.25.39; author itojun; state Exp; branches; next 1.27; 1.27 date 2002.03.22.18.10.24; author thorpej; state Exp; branches; next 1.26; 1.26 date 2001.01.11.00.54.57; author sjg; state Exp; branches; next 1.25; 1.25 date 2001.01.10.21.33.13; author sjg; state Exp; branches; next 1.24; 1.24 date 2000.10.18.00.24.19; author simonb; state Exp; branches; next 1.23; 1.23 date 2000.08.03.22.56.30; author assar; state Exp; branches; next 1.22; 1.22 date 2000.08.03.04.02.33; author assar; state Exp; branches; next 1.21; 1.21 date 2000.07.23.22.23.26; author mycroft; state Exp; branches; next 1.20; 1.20 date 2000.07.10.02.09.15; author assar; state Exp; branches; next 1.19; 1.19 date 2000.06.23.06.01.17; author thorpej; state Exp; branches; next 1.18; 1.18 date 2000.06.20.06.00.38; author thorpej; state Exp; branches 1.18.2.1; next 1.17; 1.17 date 2000.01.14.02.39.14; author mjl; state Exp; branches 1.17.2.1; next 1.16; 1.16 date 99.07.20.09.35.21; author mrg; state Exp; branches; next 1.15; 1.15 date 99.07.12.22.11.38; author thorpej; state Exp; branches; next 1.14; 1.14 date 99.07.11.23.41.10; author kim; state Exp; branches; next 1.13; 1.13 date 99.02.18.21.22.52; author scottr; state Exp; branches 1.13.2.1; next 1.12; 1.12 date 97.10.12.13.11.13; author mycroft; state Exp; branches; next 1.11; 1.11 date 97.10.12.12.54.20; author mycroft; state Exp; branches; next 1.10; 1.10 date 97.07.02.05.42.11; author lukem; state Exp; branches; next 1.9; 1.9 date 97.01.09.20.21.40; author tls; state Exp; branches; next 1.8; 1.8 date 97.01.09.11.43.05; author tls; state Exp; branches; next 1.7; 1.7 date 96.10.12.23.54.38; author christos; state Exp; branches; next 1.6; 1.6 date 94.05.24.06.52.17; author deraadt; state Exp; branches; next 1.5; 1.5 date 93.10.07.02.20.19; author cgd; state Exp; branches; next 1.4; 1.4 date 93.07.30.23.50.50; author mycroft; state Exp; branches; next 1.3; 1.3 date 93.04.26.14.42.54; author cgd; state Exp; branches; next 1.2; 1.2 date 93.03.22.23.27.40; author cgd; state Exp; branches; next 1.1; 1.1 date 93.03.21.09.45.37; author cgd; state Exp; branches 1.1.1.1; next ; 1.46.4.1 date 2007.11.06.23.36.15; author matt; state Exp; branches; next ; 1.42.2.1 date 2005.12.16.12.00.05; author tron; state Exp; branches; next ; 1.18.2.1 date 2000.06.20.06.00.38; author thorpej; state dead; branches; next 1.18.2.2; 1.18.2.2 date 2000.06.24.06.59.36; author thorpej; state Exp; branches; next 1.18.2.3; 1.18.2.3 date 2000.10.18.04.21.47; author tv; state Exp; branches; next ; 1.17.2.1 date 2000.06.23.16.39.56; author minoura; state Exp; branches; next ; 1.13.2.1 date 2000.01.08.18.35.13; author he; state Exp; branches; next ; 1.1.1.1 date 93.03.21.09.45.37; author cgd; state Exp; branches; next 1.1.1.2; 1.1.1.2 date 94.12.10.12.09.59; author jtc; state Exp; branches; next ; desc @@ 1.51 log @add LIBKRB5_LDADD/LIBKRB5_DPADD and their static counterparts to bsd.prog.mk. use them instead of hard coding various lists of libraries for krb5. this fixes static builds. @ text @# $NetBSD: Makefile,v 1.50 2011/04/24 21:42:06 elric Exp $ # from: @@(#)Makefile 8.1 (Berkeley) 7/19/93 .include USE_FORT?= yes # setuid PROG= su BINOWN= root BINMODE=4555 .PATH.c: ${.CURDIR}/../newgrp CPPFLAGS+=-I${.CURDIR}/../newgrp CPPFLAGS+=-DLOGIN_CAP CPPFLAGS+=-DALLOW_GROUP_CHANGE CPPFLAGS+=-DALLOW_EMPTY_USER CPPFLAGS+=-DGRUTIL_SETGROUPS_MAKESPACE .if ${USE_PAM} != "no" CPPFLAGS+=-DUSE_PAM # XXX: Need libcrypt here, because libcrypto defines it too. DPADD+= ${LIBPAM} ${LIBCRYPT} ${LIBUTIL} ${PAM_STATIC_DPADD} LDADD+= -lpam -lcrypt -lutil ${PAM_STATIC_LDADD} SRCS=su_pam.c grutil.c suutil.c .else # USE_PAM == no SRCS=su.c grutil.c suutil.c LDADD+= -lcrypt -lutil DPADD+= ${LIBCRYPT} ${LIBUTIL} # Uncomment the following line to change the group that may su root to "sugroup" # #CPPFLAGS+=-DSU_GROUP=\"sugroup\" # Uncomment the following line to make su # treat group wheel (SUGROUP) and/or ROOTAUTH as an indirect # list of groups. #CPPFLAGS+=-DSU_INDIRECT_GROUP .if (${USE_KERBEROS} != "no") .ifdef AFS LDADD+= -lkafs DPADD+= ${LIBKAFS} .endif CPPFLAGS+=-DKERBEROS5 LDADD+= ${LIBKRB5_LDADD} DPADD+= ${LIBKRB5_DPADD} .endif .if (${USE_SKEY} != "no") CPPFLAGS+=-DSKEY LDADD+= -lskey DPADD+= ${LIBSKEY} .endif .ifdef SU_ROOTAUTH CPPFLAGS+=-DSU_ROOTAUTH=\"${SU_ROOTAUTH}\" .endif .endif # USE_PAM == no .include @ 1.50 log @We no longer need -I/usr/include/krb5. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.49 2008/04/06 09:54:37 lukem Exp $ d30 1 a31 1 LDADD+= -lcrypt -lutil d44 1 a45 1 LDADD+= -lkafs d49 2 a50 5 DPADD+= ${LIBKRB5} ${LIBASN1} LDADD+= -lkrb5 -lasn1 DPADD+= ${LIBCRYPTO} ${LIBROKEN} ${LIBCOM_ERR} LDADD+= -lcrypto -lroken -lcom_err d55 1 a56 1 LDADD+= -lskey @ 1.49 log @Be consistent about making USE_PAM!=no be exclusive to USE_SKEY!=no. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.48 2007/10/27 15:37:45 christos Exp $ d48 1 a48 1 CPPFLAGS+=-DKERBEROS5 -I${DESTDIR}/usr/include/krb5 @ 1.48 log @- move grutil code to newgrp. - enable user:group and :group code. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.47 2007/10/17 21:05:39 christos Exp $ d26 1 a26 1 .else d66 1 a66 1 .endif @ 1.47 log @From Anon Ymous: - general cleanup [e-funcs, lint fixes, exit values, more error checking] - add the ability to change the primary group group as login:group, or :group *disabled*, until it is discussed. - remove krb4 code since there is no more krb4 code in the tree. - also make the old su behave like the pam su: su to the same user, does not ask for a password. - split out shared code into a separate file. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.46 2007/05/28 12:06:31 tls Exp $ d11 2 d14 3 a16 2 #CPPFLAGS+=-DALLOW_GROUP_CHANGE #CPPFLAGS+=-DALLOW_EMPTY_USER @ 1.46 log @Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to various string and memory copy and set functions (as well as a few system calls and other miscellany) where known at function entry. RedHat has evidently built all "core system packages" with this option for some time. This option should be used at the top of Makefiles (or Makefile.inc where this is used for subdirectories) but after any setting of LIB. This is only useful for userland code, and cannot be used in libc or in any code which includes the libc internals, because it overrides certain libc functions with macros. Some effort has been made to make USE_FORT=yes work correctly for a full-system build by having the bsd.sys.mk logic disable the feature where it should not be used (libc, libssp iteself, the kernel) but no attempt has been made to build the entire system with USE_FORT and doing so will doubtless expose numerous bugs and misfeatures. Adjust the system build so that all programs and libraries that are setuid, directly handle network data (including serial comm data), perform authentication, or appear likely to have (or have a history of having) data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default, with the exception of libc, which cannot use USE_FORT and thus uses only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no per-directory or in a system build will disable if desired. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.45 2006/07/13 18:18:09 christos Exp $ d12 2 d21 1 a21 1 SRCS=su_pam.c d25 1 a25 1 SRCS=su.c a52 1 @ 1.46.4.1 log @sync with HEAD @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.48 2007/10/27 15:37:45 christos Exp $ a10 2 .PATH.c: ${.CURDIR}/../newgrp CPPFLAGS+=-I${.CURDIR}/../newgrp a11 3 CPPFLAGS+=-DALLOW_GROUP_CHANGE CPPFLAGS+=-DALLOW_EMPTY_USER CPPFLAGS+=-DGRUTIL_SETGROUPS_MAKESPACE d19 1 a19 1 SRCS=su_pam.c grutil.c suutil.c d23 1 a23 1 SRCS=su.c grutil.c suutil.c d51 1 @ 1.45 log @remove PAM_DEBUG @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.44 2006/03/20 04:03:23 christos Exp $ d6 1 @ 1.44 log @Goodbye KerberosIV @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.43 2005/12/15 14:03:34 christos Exp $ d14 1 a14 1 CPPFLAGS+=-DUSE_PAM -DPAM_DEBUG @ 1.43 log @Use LOGIN_CAP even in the pam case. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.42 2005/03/04 20:41:09 he Exp $ a45 6 .if (${USE_KERBEROS4} != "no") CPPFLAGS+=-DKERBEROS -I${DESTDIR}/usr/include/kerberosIV DPADD+= ${LIBKRB} ${LIBDES} LDADD+= -lkrb -ldes .endif @ 1.42 log @Introduce PAM_STATIC_LDADD and PAM_STATIC_DPADD. When compiling with MKPIC=no, possibly because the target does not support shared libraries, these include libraries required to resolve all symbols which end up referenced from PAM-using applications. The libraries presently required are -lcrypt, -lrpcsvc and -lutil. Add use of these variables which are currently set up to use PAM, so that they compile when MKPIC=no. Also, in the telnetd case, reorder the order of the libraries, so that libtelnet.a comes before -ltermcap and -lutil, again to fix link error when MKPIC=no. Discussed with thorpej and christos. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.41 2005/01/13 00:13:33 thorpej Exp $ d10 2 a23 2 CPPFLAGS+=-DLOGIN_CAP @ 1.42.2.1 log @Pull up following revision(s) (requested by hubertf in ticket #1061): usr.bin/su/Makefile: revision 1.43 Use LOGIN_CAP even in the pam case. @ text @d1 1 a1 1 # $NetBSD$ a9 2 CPPFLAGS+=-DLOGIN_CAP d22 2 @ 1.41 log @Test USE_PAM, not MKPAM. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.40 2005/01/12 01:46:03 christos Exp $ d14 2 a15 2 DPADD+= ${LIBPAM} ${LIBCRYPT} ${LIBUTIL} LDADD+= -lpam -lcrypt -lutil @ 1.40 log @undo accidental commit with MKPAM=yes @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.39 2005/01/12 01:45:32 christos Exp $ a4 1 MKPAM=no d10 1 a10 1 .if ${MKPAM} != "no" @ 1.39 log @:x @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.38 2005/01/10 23:31:34 christos Exp $ d5 1 a5 1 MKPAM=yes @ 1.38 log @LOGIN_CAP is mandatory for PAM. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.37 2005/01/10 03:11:50 christos Exp $ d5 1 a5 1 MKPAM=no @ 1.37 log @Restore su.c to version 1.58, plus minor prototyping. Split pam into su_pam.c, and turn it off by default in the Makefile until it is tested and actually works. The current pam version does not set ruid properly anymore. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.36 2005/01/08 09:54:36 lukem Exp $ a7 1 CPPFLAGS+=-DLOGIN_CAP d23 2 @ 1.36 log @add DPADD @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.35 2005/01/07 22:34:20 manu Exp $ d5 1 d8 1 a8 2 DPADD+= ${LIBCRYPT} LDADD+= -lcrypt -lutil d11 15 a25 1 CPPFLAGS+=-DLOGIN_CAP a55 1 .include a66 4 .if (${USE_PAM} != "no") CPPFLAGS+=-DUSE_PAM DPADD+= ${LIBPAM} LDADD+= -lpam d68 2 @ 1.35 log @Add PAM support to su @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.34 2003/12/11 09:46:27 dyoung Exp $ d56 1 @ 1.34 log @Fix the checkflist for builds without Kerberos 4 (MKKERBEROS4=no) and without Kerberos 4 & 5 (MKKERBEROS=no). Previously checkflist complained of missing files. * move kerberos- and kerberos 4-only files into new flists, distrib/sets/lists/*/krb.* * make the flist generators grok MKKERBEROS{,4} variables * fix Makefiles which treat MKKERBEROS=no as MKKERBEROS5=no. 9 out of 10 experts agree that it is ludicrous to build w/ KERBEROS4 and w/o KERBEROS5. * fix header files, also, which treat MKKERBEROS=no as MKKERBEROS5=no. * omit some Kerberos-only subdirectories from the build as MKKERBEROS{,4} indicate (I acknowledge the sentiment that flists are the wrong way to go, and that the makefiles should produce the metalog directly. That sounds to me like the right way to go, but I am not prepared to do revamp all the makefiles. While my approach is expedient, it fits painlessly within the current build architecture until we are delivered from flist purgatory, and it does not postpone our delivery. Fair enough?) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.33 2003/08/23 23:03:44 lha Exp $ d53 5 @ 1.33 log @libkrb depends on libdes, patch in private mail from Harold Gutch logix at foobar franken de @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.32 2003/08/20 14:11:17 christos Exp $ d22 1 a22 1 .if (${USE_KERBEROS} != "no" || ${USE_KERBEROS4} != "no") a27 1 .if (${USE_KERBEROS} != "no") a30 1 .endif @ 1.32 log @Normalize the program's compilation options so they are all of the form SU_ and document them. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.31 2003/07/24 16:18:21 tron Exp $ d36 2 a37 2 DPADD+= ${LIBKRB} LDADD+= -lkrb @ 1.31 log @Backout previous and revert su(1) to dynamic linking instead. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.30 2003/07/24 16:06:45 tron Exp $ d15 1 a15 1 #CPPFLAGS+=-DSUGROUP=\"sugroup\" d52 2 a53 2 .ifdef SUROOTAUTH CPPFLAGS+=-DROOTAUTH=\"${SUROOTAUTH}\" @ 1.30 log @Link with "libdes" if Kerberos IV support is enabled. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.29 2003/07/23 08:01:37 itojun Exp $ d37 1 a37 1 LDADD+= -lkrb -ldes a54 2 LDSTATIC=-static @ 1.29 log @split MKKERBEROS4 from MKKERBEROS. based on work by lha at stacken.kth.se (build confirmed with both MKKERBEROS4=yes and MKKERBEROS4=no) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.28 2002/10/23 01:25:39 itojun Exp $ d37 1 a37 1 LDADD+= -lkrb @ 1.28 log @add DPADD. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.27 2002/03/22 18:10:24 thorpej Exp $ d22 1 a22 1 .if (${USE_KERBEROS} != "no") d28 1 d32 1 d34 1 d38 1 @ 1.27 log @Split the notion of building Hesiod, Kerberos, S/key, and YP infrastructure and using that infrastructure in programs. * MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building of the infratsructure (libraries, support programs, etc.) * USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control building of support for using the corresponding API in various libraries/programs that can use it. As discussed on tech-toolchain. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2001/01/11 00:54:57 sjg Exp $ d29 1 d33 1 d36 1 d51 2 @ 1.26 log @SU_INDIRECT_GROUP should not be on by default. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2001/01/10 21:33:13 sjg Exp $ d22 1 a22 1 .if (${MKKERBEROS} != "no") d39 1 a39 1 .ifdef SKEY @ 1.25 log @If SU_INDIRECT_GROUP is defined (it is by default), then su will consider that SUGROUP and ROOTAUTH group contain the names of users and groups. If user is not found in the list check_ingroup() recurses on each member until either user is found or end of chain is reached. The above allows su's use of the wheel group to be extended to a large number of users without necessarily putting them in group wheel, and in a way that will work over NIS that simply extending the line length limit in getgrent.c cannot. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2000/10/18 00:24:19 simonb Exp $ d17 2 a18 2 # Comment out the following line to prevent su # from assuming that group wheel (or SUGROUP) can be an indirect d20 1 a20 1 CPPFLAGS+=-DSU_INDIRECT_GROUP @ 1.24 log @Remove INSTALLFLAGS=-fschg, as per change to usr.bin/ssh/ssh/Makefile. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2000/08/03 22:56:30 assar Exp $ d16 5 @ 1.23 log @remove -lvers, it's not used @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2000/08/03 04:02:33 assar Exp $ a10 1 INSTALLFLAGS=-fschg @ 1.22 log @update build infrastructure for heimdal 0.3a @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2000/07/23 22:23:26 mycroft Exp $ d30 1 a30 1 LDADD+= -lcrypto -lvers -lroken -lcom_err @ 1.21 log @Fix library order. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2000/07/10 02:09:15 assar Exp $ d30 1 a30 1 LDADD+= -lcrypto -lroken -lcom_err @ 1.20 log @add Kerberos5 support @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2000/06/23 06:01:17 thorpej Exp $ d25 1 a25 1 LDADD+= -lkrb5 -lcrypto -lasn1 -lcom_err -lroken d30 1 @ 1.19 log @Add MK... variables to enable/disable various aspects of building crypto support into the system. See share/mk/bsd.README for more a full description. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2000/06/20 06:00:38 thorpej Exp $ d24 3 d28 2 a29 2 DPADD+= ${LIBKRB} ${LIBDES} ${LIBCOM_ERR} ${LIBROKEN} LDADD+= -lkrb -ldes -lcom_err -lroken @ 1.18 log @Merge a bunch of things from crypto-us and crypto-intl into basesrc, adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate bsd.crypto.mk. There is still a bunch more work to do, but crypto is now more-or-less fully merged into the base NetBSD distribution. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2000/01/14 02:39:14 mjl Exp $ d4 2 d18 1 d27 1 @ 1.18.2.1 log @file Makefile was added on branch netbsd-1-5 on 2000-06-24 06:59:36 +0000 @ text @d1 35 @ 1.18.2.2 log @Update from trunk: Add MK... variables to enable/disable various aspects of building crypto support into the system. See share/mk/bsd.README for more a full description. @ text @a0 39 # $NetBSD: Makefile,v 1.18.2.1 2000/06/24 06:59:36 thorpej Exp $ # from: @@(#)Makefile 8.1 (Berkeley) 7/19/93 .include PROG= su DPADD+= ${LIBCRYPT} LDADD+= -lcrypt -lutil BINOWN= root BINMODE=4555 INSTALLFLAGS=-fschg CPPFLAGS+=-DLOGIN_CAP # Uncomment the following line to change the group that may su root to "sugroup" # #CPPFLAGS+=-DSUGROUP=\"sugroup\" .if (${MKKERBEROS} != "no") .ifdef AFS DPADD+= ${LIBKAFS} LDADD+= -lkafs .endif CPPFLAGS+=-DKERBEROS -I${DESTDIR}/usr/include/kerberosIV DPADD+= ${LIBKRB} ${LIBDES} ${LIBCOM_ERR} ${LIBROKEN} LDADD+= -lkrb -ldes -lcom_err -lroken .endif .include .ifdef SKEY CPPFLAGS+=-DSKEY DPADD+= ${LIBSKEY} LDADD+= -lskey .endif .ifdef SUROOTAUTH CPPFLAGS+=-DROOTAUTH=\"${SUROOTAUTH}\" .endif @ 1.18.2.3 log @Pull up 1.24 [simonb]: Remove INSTALLFLAGS=-fschg. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18.2.2 2000/10/18 04:21:47 tv Exp $ d11 1 @ 1.17 log @Implement login_cap capability lookup. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 1999/07/20 09:35:21 mrg Exp $ a3 3 SRCTOP= ../.. .include d16 3 a18 2 .if defined(CRYPTOPATH) .sinclude "${CRYPTOPATH}/usr.bin/su/Makefile.frag" d20 4 @ 1.17.2.1 log @Sync w/ netbsd-1-5-base. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2000/06/20 06:00:38 thorpej Exp $ d4 3 d19 2 a20 3 .ifdef AFS DPADD+= ${LIBKAFS} LDADD+= -lkafs a21 4 CPPFLAGS+=-DKERBEROS -I${DESTDIR}/usr/include/kerberosIV DPADD+= ${LIBKRB} ${LIBDES} ${LIBCOM_ERR} ${LIBROKEN} LDADD+= -lkrb -ldes -lcom_err -lroken @ 1.16 log @optionally include CRYPTOPATH Makefile.frag files. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 1999/07/12 22:11:38 thorpej Exp $ d9 1 a9 1 LDADD+= -lcrypt d13 1 @ 1.15 log @Use bsd.crypto.mk. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 1999/07/11 23:41:10 kim Exp $ d19 1 a19 1 .include "${CRYPTOPATH}/usr.bin/su/Makefile.frag" @ 1.14 log @Allow people in group wheel to use the ROOTAUTH group. Pick up SUROOTAUTH (presumably from /etc/mk.conf). @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 1999/02/18 21:22:52 scottr Exp $ d4 3 d17 4 @ 1.13 log @Remove the crypto-related bits until such time as we have a fully- integrated source tree. Export-controlled versions of these are now built during the domestic build process. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 1997/10/12 13:11:13 mycroft Exp $ d21 4 @ 1.13.2.1 log @Pull up revision 1.14 (requested by kim): Allow the make variable SUROOTAUTH to be set to a group where the members can use their own password to authenticate to su to root. By default this is not set, retaining the traditional behaviour. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 1999/02/18 21:22:52 scottr Exp $ a20 4 .endif .ifdef SUROOTAUTH CPPFLAGS+=-DROOTAUTH=\"${SUROOTAUTH}\" @ 1.12 log @Minor changes. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 1997/10/12 12:54:20 mycroft Exp $ a20 10 .endif .ifdef KERBEROS .ifdef AFS DPADD+= ${LIBKAFS} LDADD+= -lkafs .endif CPPFLAGS+=-DKERBEROS DPADD+= ${LIBKRB} ${LIBDES} LDADD+= -lkrb -ldes @ 1.11 log @Make this compile without SKEY. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 1997/07/02 05:42:11 lukem Exp $ d28 1 a30 1 CPPFLAGS+=-DKERBEROS @ 1.10 log @As per discussion with mrg, back out parts of previous change. The appropriate entry in /etc/group as returned by getgrnam() is used to determine if 'su root' may be permitted, rather than checking if membership exists in the result of getgroups(). The following changes were made regarding the behaviour of the special group for 'su root' * allow for definition of SUGROUP (defaults to "wheel") to override group name. * use getgrnam(SUGROUP) instead of getgrgid(0). * only scan getgrnam(SUGROUP)->gr_mem when checking for group membership. * be more specific as to why 'su root' failed NOTE: If a user's primary group is SUGROUP, and they're not a member of SUGROUP in /etc/group, they will not be able to su. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 1997/01/09 20:21:40 tls Exp $ d5 2 d13 1 a13 1 #CFLAGS+=-DSUGROUP=\"sugroup\" d18 3 a20 3 CFLAGS+=-DSKEY LDADD+= -lcrypt -lskey DPADD+= ${LIBCRYPT} ${LIBSKEY} d25 1 a26 1 DPADD+= ${LIBKAFS} d28 1 a28 1 CFLAGS+=-DKERBEROS d30 1 a30 1 DPADD+= ${LIBKRB} ${LIBDES} @ 1.9 log @RCS ID police @ text @d1 1 a1 1 # $NetBSD$ d8 4 @ 1.8 log @Sync to 4.4BSD-Lite2 @ text @d1 1 a2 1 # $Id: Makefile,v 1.7 1996/10/12 23:54:38 christos Exp $ @ 1.7 log @Fix PR/2837: su [login [args]] had the wrong usage and did not work properly. Build the correct argument list and add -c for the shells. Fix PR/2839: su will not build with Kerberos. - Also: -Don't coredump when $TERM is not set. -Add prototypes, remove local old style declarations of system functions. -Recognize shells that contain "csh" as being csh alike. -Don't build with SKEY unconditionally. Obey bsd.own.mk. @ text @d1 2 a2 2 # from: @@(#)Makefile 5.5 (Berkeley) 5/11/90 # $Id: Makefile,v 1.6 1994/05/24 06:52:17 deraadt Exp $ d7 1 d18 4 @ 1.6 log @add skey support @ text @d2 1 a2 1 # $Id: Makefile,v 1.5 1993/10/07 02:20:19 cgd Exp $ d7 4 d14 1 d16 5 a20 1 .include @ 1.5 log @always use libcrypt @ text @d2 1 a2 1 # $Id: Makefile,v 1.4 1993/07/30 23:50:50 mycroft Exp $ d7 3 a9 2 LDADD+= -lcrypt DPADD+= ${LIBCRYPT} @ 1.4 log @Add RCS identifiers. @ text @d2 1 a2 1 # $Id: $ d7 1 a7 1 .ifndef EXPORTABLE_SYSTEM a8 2 LDADD+= -lcrypt .endif @ 1.3 log @changed to use new libcrypt scheme. @ text @d1 2 a2 1 # @@(#)Makefile 5.5 (Berkeley) 5/11/90 @ 1.2 log @added support for using real crypt @ text @a3 1 CFLAGS+=-DDES d6 4 @ 1.1 log @Initial revision @ text @d4 1 @ 1.1.1.1 log @initial import of 386bsd-0.1 sources @ text @@ 1.1.1.2 log @imported from 4.4lite @ text @d1 1 a1 1 # @@(#)Makefile 8.1 (Berkeley) 7/19/93 a3 3 CFLAGS+=-DKERBEROS DPADD= ${LIBKRB} ${LIBDES} LDADD= -lkrb -ldes a5 1 INSTALLFLAGS=-fschg @