CVS commit: pkgsrc/net/tcpdump

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Wed Feb 22 19:05:44 UTC 2017

Modified Files:
        pkgsrc/net/tcpdump: Makefile

Log Message:
tcpdump: when running, drop privileges to a _tcpdump user and run in a chroot

remove duplicate openssl include (it's also in options.mk depending on
ssl option) pointed out by pkglint

PKGREVISION->1


To generate a diff of this commit:
cvs rdiff -u -r1.43 -r1.44 pkgsrc/net/tcpdump/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/tcpdump/Makefile
diff -u pkgsrc/net/tcpdump/Makefile:1.43 pkgsrc/net/tcpdump/Makefile:1.44
--- pkgsrc/net/tcpdump/Makefile:1.43    Thu Feb  2 18:08:29 2017
+++ pkgsrc/net/tcpdump/Makefile Wed Feb 22 19:05:44 2017
@@ -1,6 +1,7 @@
-# $NetBSD: Makefile,v 1.43 2017/02/02 18:08:29 maya Exp $
+# $NetBSD: Makefile,v 1.44 2017/02/22 19:05:44 maya Exp $
 
 DISTNAME=      tcpdump-4.9.0
+PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  http://www.tcpdump.org/release/
 
@@ -12,8 +13,15 @@ LICENSE=     modified-bsd
 GNU_CONFIGURE=         yes
 CONFIGURE_ARGS.Darwin+=        --disable-universal
 
+BUILD_DEFS+=           VARBASE
+PKG_USERS=             _tcpdump
+OWN_DIRS=              ${VARBASE}/tcpdump
+
+# drop privileges when running
+CONFIGURE_ARGS+=       --with-user=_tcpdump
+CONFIGURE_ARGS+=       --with-chroot=${VARBASE}/tcpdump
+
 .include "options.mk"
 
 .include "../../net/libpcap/buildlink3.mk"
-.include "../../security/openssl/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"