Attachment 180941 Details for Bug 217900 – 0001-HBSD-add-the-ability-to-use-dnsmasq-on-systems-witho.patch

[patch] 0001-HBSD-add-the-ability-to-use-dnsmasq-on-systems-witho.patch

0001-HBSD-add-the-ability-to-use-dnsmasq-on-systems-witho.patch (text/plain), 2.01 KB, created by op on 2017-03-18 21:16:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: op

Created: 2017-03-18 21:16:01 UTC

Size: 2.01 KB

patch

obsolete

>From 9098d539da9c0b1b0be51ff03e97921b826c5a7d Mon Sep 17 00:00:00 2001
>From: Oliver Pinter <oliver.pinter@hardenedbsd.org>
>Date: Sat, 18 Mar 2017 22:08:48 +0100
>Subject: [PATCH] HBSD: add the ability to use dnsmasq on systems without PF
> support
>
>The IPSET functionality in dnsmasq require /dev/pf interface, which
>is provided by the PF firewall, but on system with only IPFW enabled,
>there are no /dev/pf device. The IPSET functionality is able to
>dynamically maintain a PF table from the resolved host names.
>Without this functionality the dnsmasq is still fully functional
>(like it is on OS X/macOS).
>
>By default keep the historical state (default to enabled IPSET).
>
>Signed-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>
>---
> dns/dnsmasq/Makefile | 9 +++++++--
> 1 file changed, 7 insertions(+), 2 deletions(-)
>
>diff --git a/dns/dnsmasq/Makefile b/dns/dnsmasq/Makefile
>index 21e5587cfca7..11fbb724eba9 100644
>--- a/dns/dnsmasq/Makefile
>+++ b/dns/dnsmasq/Makefile
>@@ -24,14 +24,15 @@ CFLAGS+=	-Wall -Wno-unused-value -Wno-unused-parameter
> CPPFLAGS+=	-I${LOCALBASE}/include
> MAKE_ARGS=	CC="${CC}" CFLAGS="${CFLAGS}" PREFIX="${PREFIX}" COPTS="${CFLAGS}" LIBS="${LDFLAGS}" RPM_OPT_FLAGS="${CPPFLAGS}"
> 
>-OPTIONS_DEFINE=		IPV6 DBUS LUA DNSSEC DOCS
>-OPTIONS_DEFAULT=	DNSSEC
>+OPTIONS_DEFINE=		IPSET IPV6 DBUS LUA DNSSEC DOCS
>+OPTIONS_DEFAULT=	DNSSEC IPSET
> OPTIONS_EXCLUDE+=	EXAMPLES
> OPTIONS_RADIO=		INTL
> OPTIONS_RADIO_INTL=	IDN NLS
> INTL_DESC=	Internationalization Support Level
> NLS_DESC=	IDN+NLS: Int'l Domain Names & National Language support
> IDN_DESC=	IDN: Int'l Domain Names WITHOUT full NLS
>+IPSET_DESC=	Dynamic firewall managment of resolved names (require PF)
> LUA_DESC=	Support lease-change scripts written in Lua
> DNSSEC_DESC=	Enable DNSSEC caching and validation
> USES=		cpe shebangfix tar:xz
>@@ -45,6 +46,10 @@ CPE_VENDOR=	thekelleys
> CFLAGS+=	-DNO_IPV6
> .endif
> 
>+.if empty(PORT_OPTIONS:MIPSET)
>+CFLAGS+=	-DNO_IPSET
>+.endif
>+
> .if ${PORT_OPTIONS:MNLS}
> USES+=		gettext gmake iconv pkgconfig
> LIB_DEPENDS+=	libidn.so:dns/libidn
>-- 
>2.11.1
>

Actions: View | Diff

Attachments on bug 217900: 180941