jca 172ab7deb7 SECURITY UPDATE to samba-4.15.5
Fixes for CVE-2021-44141, CVE-2021-44142 and CVE-2022-0336.
See the release notes for more information:
https://www.samba.org/samba/history/samba-4.15.4.html
https://www.samba.org/samba/history/samba-4.15.5.html

Tests by Ian and bket@, ok bket@
2022-02-02 12:33:52 +00:00

260 lines
7.6 KiB
Makefile

# $OpenBSD: Makefile,v 1.307 2022/02/02 12:33:52 jca Exp $
VERSION = 4.15.5
DISTNAME = samba-${VERSION}
EPOCH = 0
REVISION-ldb = 1
REVISION-tevent = 3
COMMENT-main = SMB and CIFS client and server for UNIX
COMMENT-ldb = LDAP-like embedded database
COMMENT-tevent = event system based on talloc
COMMENT-util = common libraries for Samba suite
COMMENT-docs = additional documentation and examples for Samba
PKGNAME-main = ${PKGNAME}
PKGNAME-ldb = ldb-${LDB_V}
PKGNAME-tevent = tevent-${TEVENT_V}
PKGNAME-util = samba-util-${VERSION}
PKGNAME-docs = samba-docs-${VERSION}
PKG_ARCH-docs = *
LDB_V = 2.4.1
TEVENT_V = 0.11.0
SHARED_LIBS = asn1-samba4 2.0 \
com_err-samba4 1.0 \
dcerpc 1.1 \
dcerpc-binding 4.0 \
dcerpc-samr 1.0 \
dcerpc-server-core 2.0 \
gssapi-samba4 1.0 \
hcrypto-samba4 1.0 \
hdb-samba4 1.0 \
heimbase-samba4 1.0 \
heimntlm-samba4 1.0 \
hx509-samba4 1.0 \
kdc-samba4 1.0 \
krb5-samba4 1.1 \
ldb 2.0 \
ndr 3.0 \
ndr-krb5pac 1.1 \
ndr-nbt 1.0 \
ndr-standard 4.0 \
netapi 3.1 \
roken-samba4 1.0 \
samba-credentials 1.1 \
samba-errors 2.1 \
samba-hostconfig 9.0 \
samba-passdb 3.0 \
samba-util 7.1 \
samdb 2.0 \
smbclient 6.1 \
smbconf 10.1 \
smbldap 1.0 \
tevent 2.0 \
tevent-util 2.0 \
wbclient 5.0 \
wind-samba4 1.0 \
replace 12.1 \
util-setid 12.0
# Those have to be handled specially, see "Python ABI" below.
SHARED_LIBS += pyldb-util.cpython-${MODPY_MAJORMINOR} 1.0
SHARED_LIBS += samba-policy.cpython-${MODPY_MAJORMINOR} 1.0
CATEGORIES = net sysutils security
HOMEPAGE = https://www.samba.org/
MAINTAINER = Ian McWilliam <kaosagnt@gmail.com>, \
Jeremie Courreges-Anglas <jca@wxcvbn.org>
# GPLv3, LGPLv3
PERMIT_PACKAGE = Yes
UTIL_LIBS = replace util-setid
# TODO WAF scripts link to those without version info, but those are
# not "plugins" or such.
UTIL_WANTLIB = ${UTIL_LIBS:S@^@lib/samba/@}
WANTLIB-main = ${MODPY_WANTLIB}
WANTLIB-main += avahi-client avahi-common cups c execinfo fam
WANTLIB-main += iconv intl jansson lber ldap pam popt pthread gnutls
WANTLIB-main += ldb pyldb-util.cpython-${MODPY_MAJORMINOR}
WANTLIB-main += pytalloc-util.cpython-${MODPY_MAJORMINOR} readline
WANTLIB-main += talloc tasn1 tevent tdb z
WANTLIB-main += ${UTIL_WANTLIB}
WANTLIB-ldb = ${MODPY_WANTLIB}
WANTLIB-ldb += c lber ldap popt replace talloc tdb tevent
WANTLIB-tevent = c replace talloc
WANTLIB-util = c
WANTLIB-docs =
MASTER_SITES = https://download.samba.org/pub/samba/stable/ \
https://download.samba.org/pub/samba/old-versions/
MULTI_PACKAGES = -main -ldb -tevent -util -docs
DEBUG_PACKAGES = ${BUILD_PACKAGES}
MODULES = lang/python perl
BUILD_DEPENDS = databases/tdb,-python \
devel/bison \
devel/cmocka \
devel/p5-Parse-Yapp>=1.0.5 \
net/py-dnspython${MODPY_FLAVOR} \
textproc/docbook-xsl
RUN_DEPENDS-main = databases/tdb,-python \
net/py-dnspython${MODPY_FLAVOR}
RUN_DEPENDS-docs =
LIB_DEPENDS-main = ${BUILD_PKGPATH},-ldb>=${LDB_V} \
${BUILD_PKGPATH},-util>=${VERSION} \
converters/libiconv \
databases/openldap \
databases/tdb>=1.4.4 \
devel/gettext,-runtime \
devel/jansson \
devel/libtalloc>=2.3.3 \
devel/libtalloc,-python \
devel/popt \
net/avahi,-libs \
print/cups,-libs \
security/gnutls \
security/openpam \
sysutils/gamin
LIB_DEPENDS-ldb = ${BUILD_PKGPATH},-tevent>=${TEVENT_V} \
${BUILD_PKGPATH},-util>=${VERSION} \
devel/popt \
databases/openldap \
databases/tdb>=1.4.4 \
devel/libtalloc>=2.3.3
LIB_DEPENDS-tevent = ${BUILD_PKGPATH},-util>=${VERSION} \
devel/libtalloc>=2.3.3
LIB_DEPENDS-docs =
CONFIGURE_STYLE = simple
CONFIGURE_ARGS = --enable-fhs \
--abi-check-disable \
--bundled-libraries="!crypto,ldb,!talloc,!tdb,tevent" \
--prefix=${PREFIX} \
--destdir=${WRKINST} \
--docdir=${PREFIX}/share/doc \
--mandir=${PREFIX}/man \
--localedir=${PREFIX}/share/locale \
--localstatedir=${BASELOCALSTATEDIR} \
--private-libraries="NONE" \
--sharedstatedir=${VARBASE} \
--sysconfdir=${SYSCONFDIR} \
--with-configdir=${SYSCONFDIR}/samba \
--with-statedir=${VARBASE}/samba \
--with-privatedir=${VARBASE}/samba/private \
--with-bind-dns-dir=${VARBASE}/samba/bind-dns \
--with-lockdir=${VARBASE}/run/samba \
--with-privileged-socket-dir=${VARBASE}/samba \
--without-pie \
--pedantic \
--without-regedit \
--without-acl-support \
--without-libarchive \
--disable-rpath \
--without-ad-dc \
--without-gpgme \
--without-ldb-lmdb
# XXX Remember to remove --enable-developer, it prints passwords in logs.
#CONFIGURE_ARGS += --enable-developer
WAF = ${WRKSRC}/buildtools/bin/waf
WAF_ARGS = -v -j ${MAKE_JOBS}
CONFIGURE_ENV = LC_ALL=en_US.UTF-8 \
CFLAGS="${CFLAGS}" \
LDFLAGS="${LDFLAGS}" \
CPP="/usr/libexec/cpp" \
CPPFLAGS="-I${LOCALBASE}/include" \
LDFLAGS="-L${LOCALBASE}/lib ${LDFLAGS}"
MAKE_ENV = LC_ALL=en_US.UTF-8 \
PYTHON=${MODPY_BIN} \
WAF_ARGS="${WAF_ARGS}"
.for _l _v in ${SHARED_LIBS}
MAKE_ENV += LIB${_l:S/-/_/g}_VERSION=${_v}
.endfor
## Python ABI
# The samba project decided to also encode the python ABI name into shared
# libraries that link against libpython. Our ports infrastructure barely
# copes.
# 1. Those shared libraries names contain a variable whose value is not yet
# known by the time the .for loop runs
MAKE_ENV += LIBpyldb_util_cpython_${MODPY_MAJORMINOR}_VERSION=${LIBpyldb-util.cpython-${MODPY_MAJORMINOR}_VERSION}
MAKE_ENV += LIBsamba_policy_cpython_${MODPY_MAJORMINOR}_VERSION=${LIBsamba-policy.cpython-${MODPY_MAJORMINOR}_VERSION}
# 2. Said libraries end up as such in pkg/PLIST-foo:
# @lib lib/libbar.${MODPY_PYC_MAGIC_TAG}so.${LIBbar.cpython-XY_VERSION}
# We don't want to hardcode the XY version number in the PLIST.
PYLDB_UTIL_LIBSUFFIX = cpython-${MODPY_MAJORMINOR}.so.${LIBpyldb-util.cpython-${MODPY_MAJORMINOR}_VERSION}
SUBST_VARS += PYLDB_UTIL_LIBSUFFIX
SAMBA_POLICY_LIBSUFFIX= cpython-${MODPY_MAJORMINOR}.so.${LIBsamba-policy.cpython-${MODPY_MAJORMINOR}_VERSION}
SUBST_VARS += SAMBA_POLICY_LIBSUFFIX
# 3. Some samba python extension modules don't follow the same naming
# pattern as the usual python extension modules.
SAMBA_PYTHON_MAGIC_TAG= ${MODPY_PYC_MAGIC_TAG:S/./-samba4/}
SUBST_VARS += SAMBA_PYTHON_MAGIC_TAG
SAMBA_CONFIG = ${PREFIX}/share/examples/samba/smb.conf.default
SAMBA_LOGDIR = ${VARBASE}/log/samba
SUBST_VARS += SAMBA_LOGDIR
post-patch:
find ${WRKSRC} -type f -exec ${MODPY_BIN_ADJ} {} +
post-install:
# removing extra files
find ${PREFIX} \( \
-name '*${PATCHORIG}' -o \
-name '*.beforesubst' -o \
-name '*.deconforig' \) \
-delete
# precompiling Python modules
${MODPY_BIN} ${MODPY_LIBDIR}/compileall.py ${WRKINST}${MODPY_SITEPKG}
${MODPY_BIN} -O ${MODPY_LIBDIR}/compileall.py ${WRKINST}${MODPY_SITEPKG}
# removing extra symlinks
find ${PREFIX}/lib -type l -name '*.so' -delete
# creating library symlinks
.for _l in ${UTIL_LIBS}
cd ${PREFIX}/lib && ln -fs samba/lib${_l}.so.${LIB${_l}_VERSION}
.endfor
# install samba docs and sample config
${INSTALL_DATA_DIR} ${PREFIX}/share/{doc,examples}/samba
cp -R ${WRKDIST}/examples/* ${PREFIX}/share/examples/samba
chown -R ${SHAREOWN}:${SHAREGRP} ${PREFIX}/share/examples/samba
find ${PREFIX}/share/examples/samba \
-type f -exec chmod ${SHAREMODE} {} + -o \
-type d -exec chmod ${DIRMODE} {} +
sed -e 's:/usr/spool/samba:/var/spool/samba:g' \
-e 's:/usr/local/samba/var/log:${SAMBA_LOGDIR}/smbd:g' \
-e 's:MYGROUP:WORKGROUP:' \
${WRKDIST}/examples/smb.conf.default > ${SAMBA_CONFIG}.tmp && \
mv ${SAMBA_CONFIG}.tmp ${SAMBA_CONFIG}
.include <bsd.port.mk>