aboutsummaryrefslogtreecommitdiff
path: root/sbin/ipf
Commit message (Collapse)AuthorAgeFilesLines
* META_MODE: For some reason meta mode cannot generate the intermediate tab.cBryan Drewery2015-10-021-6/+18
| | | | | | | | | | | files. Split up all of the targets to be more clear on how they are generated to fix the problem. MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=288477
* Add SUBDIR_PARALLEL.Bryan Drewery2015-09-261-1/+2
| | | | | | | | MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=288249
* Remove disconnected directories.Bryan Drewery2015-09-264-68/+0
| | | | | | | | | These were added disconnected in 2005 in r145524. Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=288248
* Update META_MODE dependencies.Bryan Drewery2015-09-171-0/+6
| | | | Notes: svn path=/head/; revision=287905
* Add META_MODE support.Simon J. Gerraty2015-06-139-0/+261
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | Off by default, build behaves normally. WITH_META_MODE we get auto objdir creation, the ability to start build from anywhere in the tree. Still need to add real targets under targets/ to build packages. Differential Revision: D2796 Reviewed by: brooks imp Notes: svn path=/head/; revision=284345
| * dirdeps.mk now sets DEP_RELDIRSimon J. Gerraty2015-06-089-18/+0
| | | | | | | | Notes: svn path=/projects/bmake/; revision=284172
| * Merge sync of headSimon J. Gerraty2015-05-2710-10/+9
| |\ | |/ |/| | | Notes: svn path=/projects/bmake/; revision=283595
| * Merge from head@274682Simon J. Gerraty2014-11-198-14/+8
| |\ | | | | | | | | | Notes: svn path=/projects/bmake/; revision=274683
| * \ Merge head from 7/28Simon J. Gerraty2014-08-197-0/+14
| |\ \ | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=270164
| * | | Updated dependenciesSimon J. Gerraty2014-05-168-8/+0
| | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=266219
| * | | Updated dependenciesSimon J. Gerraty2014-05-108-0/+16
| | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=265802
| * | | Merge headSimon J. Gerraty2013-09-113-18/+42
| |\ \ \ | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=255477
| * | | | Updated dependenciesSimon J. Gerraty2013-03-118-0/+8
| | | | | | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=248169
| * | | | Updated dependenciesSimon J. Gerraty2013-02-169-18/+0
| | | | | | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=246868
| * | | | Sync from headSimon J. Gerraty2012-11-041-2/+2
| |\ \ \ \ | | | | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=242545
| * | | | | Sync FreeBSD's bmake branch with Juniper's internal bmake branch.Marcel Moolenaar2012-08-229-0/+268
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Requested by: Simon Gerraty <sjg@juniper.net> Notes: svn path=/projects/bmake/; revision=239572
* | | | | | Convert sbin/ to LIBADDBaptiste Daroussin2014-11-254-9/+4
| |_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reduce overlinking Notes: svn path=/head/; revision=275030
* | | | | Revert r267233 for now. PIE support needs to be reworked.Bryan Drewery2014-08-197-14/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. 50+% of NO_PIE use is fixed by adding -fPIC to INTERNALLIB and other build-only utility libraries. 2. Another 40% is fixed by generating _pic.a variants of various libraries. 3. Some of the NO_PIE use is a bit absurd as it is disabling PIE (and ASLR) where it never would work anyhow, such as csu or loader. This suggests there may be better ways of adding support to the tree. Many of these cases can be fixed such that -fPIE will work but there is really no reason to have it in those cases. 4. Some of the uses are working around hacks done to some Makefiles that are really building libraries but have been using bsd.prog.mk because the code is cleaner. Had they been using bsd.lib.mk then NO_PIE would not have been needed. We likely do want to enable PIE by default (opt-out) for non-tree consumers (such as ports). For in-tree though we probably want to only enable PIE (opt-in) for common attack targets such as remote service daemons and setuid utilities. This is also a great performance compromise since ASLR is expected to reduce performance. As such it does not make sense to enable it in all utilities such as ls(1) that have little benefit to having it enabled. Reported by: kib Notes: svn path=/head/; revision=270168
* | | | | Honour WITH and WITHOUT_INET6_SUPPORT.Cy Schubert2014-08-051-0/+8
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | Approved by: glebius (mentor) MFC after: 3 days Notes: svn path=/head/; revision=269585
* | | | In preparation for ASLR [1] support add WITH_PIE to support building with -fPIE.Bryan Drewery2014-06-087-0/+14
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is currently an opt-in build flag. Once ASLR support is ready and stable it should changed to opt-out and be enabled by default along with ASLR. Each application Makefile uses opt-out to ensure that ASLR will be enabled by default in new directories when the system is compiled with PIE/ASLR. [2] Mark known build failures as NO_PIE for now. The only known runtime failure was rtld. [1] http://www.bsdcan.org/2014/schedule/events/452.en.html Submitted by: Shawn Webb <lattera@gmail.com> Discussed between: des@ and Shawn Webb [2] Notes: svn path=/head/; revision=267233
* | | Update ipfilter 4.1.28 --> 5.1.2.Cy Schubert2013-09-063-18/+42
| |/ |/| | | | | | | | | | | | | Approved by: glebius (mentor) BSD Licensed by: Darren Reed <darrenr@reed.wattle.id.au> (author) Notes: svn path=/head/; revision=255332
* | Link ipfilter(4) and ipfilter(5) to the build to stop the wrong man pageIsabell Long2012-08-281-2/+2
|/ | | | | | | | | | | displaying for 'man 4 ipfilter'. PR: docs/118020 Approved by: gjb (mentor) MFC after: 5 days Notes: svn path=/head/; revision=239775
* Use both NO_WFORMAT and NO_WARRAY_BOUNDS for sbin/ipf, it would be tooDimitry Andric2011-12-171-0/+2
| | | | | | | | | | disruptive to actually fix all the warnings, and the code hasn't been maintained for several years. MFC after: 1 week Notes: svn path=/head/; revision=228612
* Always assign WARNS using ?=Ulrich Spörlein2010-03-021-2/+1
| | | | | | | | | | - fix some nearby style bugs - include Makefile.inc where it makes sense and reduces duplication Approved by: ed (co-mentor) Notes: svn path=/head/; revision=204585
* Switch the default WARNS level for sbin/ to 6.Ruslan Ermilov2009-10-191-0/+2
| | | | | | | Submitted by: Ulrich Spörlein Notes: svn path=/head/; revision=198236
* This makefile builds contrib code, so I won't try to fix all theJohn Birrell2007-11-181-0/+2
| | | | | | | casts from pointer to int here. Notes: svn path=/head/; revision=173722
* Exclude inet_addr.c from the build.Olivier Houchard2007-06-111-1/+1
| | | | | | | | | | It only provides inet_aton(), which is already provided by the libc. This causes multiple symbol definitions when linking statically. Reviewed by: darrenr Notes: svn path=/head/; revision=170575
* Merge IPFilter 4.1.23 back to HEADDarren Reed2007-06-041-22/+22
| | | | | | | See src/contrib/ipfilter/HISTORY for details of changes since 4.1.13 Notes: svn path=/head/; revision=170268
* Fix the manual build.David E. O'Brien2006-09-105-24/+23
| | | | Notes: svn path=/head/; revision=162199
* Regularly scheduled patch to unbreak regularly scheduled post-ipfilterAlexander Kabaev2006-08-171-1/+1
| | | | | | | | | | buildworld breakage. Exclude loglevel.c from the build. It does not appear to be used by anything in the tree and buildworld succeeds just fine without it. Notes: svn path=/head/; revision=161387
* Adapt to ipf 4.1.13Guido van Rooij2006-08-161-2/+2
| | | | Notes: svn path=/head/; revision=161358
* fix style nitDavid E. O'Brien2006-05-071-1/+1
| | | | Notes: svn path=/head/; revision=158343
* Add missing library dependencies.Ruslan Ermilov2006-04-131-0/+1
| | | | Notes: svn path=/head/; revision=157721
* Add printproto.c to libipfGuido van Rooij2005-12-301-2/+2
| | | | Notes: svn path=/head/; revision=153883
* Fix the contents of the underneath .depend files and "make checkdpadd".Ruslan Ermilov2005-05-171-8/+4
| | | | Notes: svn path=/head/; revision=146321
* Enable building /sbin/ipf (but not the rescue version) with the ability toDarren Reed2005-05-161-2/+4
| | | | | | | parse bpf strings for filter rules in ipf.conf Notes: svn path=/head/; revision=146277
* Patches from Ruslam Ermilov to remove NetBSD bits from Makefiles and cleanupDarren Reed2005-04-288-38/+4
| | | | | | | build problems with rescue. Notes: svn path=/head/; revision=145630
* Not looking for ipfilter source files in the right placeDarren Reed2005-04-261-1/+1
| | | | Notes: svn path=/head/; revision=145555
* create a new build heirarchy for ipfilter toolsDarren Reed2005-04-2514-16/+418
| | | | Notes: svn path=/head/; revision=145524
* Link a couple of missing manpagesGuido van Rooij2005-01-071-0/+2
| | | | | | | | Submitted by: Hideyuki KURASHINA <rushani@FreeBSD.org> MFC after: 1 week Notes: svn path=/head/; revision=139847
* style.Makefile(5):Johan Karlsson2004-02-231-1/+1
| | | | | | | Use WARNS?= instead of WARNS=. Notes: svn path=/head/; revision=126178
* Move my maintainership of parts of ipfilter back to Darren ReedGuido van Rooij2003-06-061-1/+1
| | | | Notes: svn path=/head/; revision=115895
* * add extra -I path to get the "matching" header files.Darren Reed2002-03-201-0/+1
| | | | Notes: svn path=/head/; revision=92774
* Default to WARNS=2.David E. O'Brien2001-12-041-0/+1
| | | | | | | | | Binary builds that cannot handle this must explicitly set WARNS=0. Reviewed by: mike Notes: svn path=/head/; revision=87325
* Pick up the correct headers from sys/contrib/ipfilter/netinet.Ruslan Ermilov2001-06-181-1/+3
| | | | Notes: svn path=/head/; revision=78416
* Backout previous change (removal of -I${.CURDIR}/../../sys/netinet).Ruslan Ermilov2001-06-111-1/+1
| | | | | | | | | | | | | This is needed to pick up the right headers. Wrong headers from src/contrib/ipfilter are used otherwise. The right fix would be to fix contrib/ipfilter C sources to pick up headers from <sys/netinet>. Noticed by: peter Notes: svn path=/head/; revision=78080
* Removed -I${.CURDIR}/.../sys from CFLAGS.Ruslan Ermilov2001-05-181-1/+1
| | | | Notes: svn path=/head/; revision=76812
* - Backout botched attempt to introduce MANSECT feature.Ruslan Ermilov2001-03-261-3/+1
| | | | | | | - MAN[1-9] -> MAN. Notes: svn path=/head/; revision=74815
* Build with -DUSE_INET6 so that we can actually use the IPv6 support inJacques Vidrine2000-10-311-1/+1
| | | | | | | | | IPFilter 3.4.x. Approved by: darrenr, guido Notes: svn path=/head/; revision=68111
* add common.c to SRCS to fix compile problemsDarren Reed2000-05-241-1/+1
| | | | Notes: svn path=/head/; revision=60885
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-01 13:45:11 +0000