HardenedBSD/sbin/ping/Makefile

.include <src.opts.mk>

PACKAGE=runtime
PROG=	ping
SRCS=	main.c
MAN=	ping.8
BINOWN=	root
BINMODE=4555
LIBADD=	m

.if ${MK_INET_SUPPORT}!= "no"
CFLAGS+= -DINET
SRCS+=	ping.c utils.c
.endif

.if ${MK_INET6_SUPPORT} != "no"
CFLAGS+= -DINET6 -DKAME_SCOPEID
SRCS+=	ping6.c
LIBADD+= md
LINKS=	${BINDIR}/ping ${BINDIR}/ping6
MLINKS=	ping.8 ping6.8
.endif

.if ${MK_DYNAMICROOT} == "no"
.warning ${PROG} built without libcasper support
.elif ${MK_CASPER} != "no" && !defined(RESCUE)
LIBADD+=	casper
LIBADD+=	cap_dns
CFLAGS+=-DWITH_CASPER
.endif

CFLAGS+=-DIPSEC
LIBADD+=	ipsec

CFLAGS+=	-Wno-error=unused-but-set-variable

HAS_TESTS=
SUBDIR.${MK_TESTS}+= tests

.include <bsd.prog.mk>
Use src.opts.mk in preference to bsd.own.mk except where we need stuff from the latter. 2014-05-06 06:22:01 +02:00			`.include <src.opts.mk>`
Protect ping(8) using Capsicum and Casper. This is protection against malicious network packets that we parse and not against local users trying to gain root access through ping's set-uid bit - this is handled by dropping privileges very early in ping. Submitted by: Mikhail <mp@lenta.ru> 2014-02-04 22:43:53 +01:00
Explicitly add more files to the 'runtime' package. Sponsored by: The FreeBSD Foundation 2016-02-09 21:19:31 +01:00			`PACKAGE=runtime`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00			`PROG= ping`
ping: allow building without INET support Building without INET6 support was already possible. Now it's possible to build ping with only INET6, or even with neither INET nor INET6. Reported by: bz Reviewed by: bz MFC-With: 368045 Differential Revision: https://reviews.freebsd.org/D27394 2020-11-29 00:24:19 +01:00			`SRCS= main.c`
- Backout botched attempt to introduce MANSECT feature. - MAN[1-9] -> MAN. 2001-03-26 16:33:27 +02:00			`MAN= ping.8`
Set BINOWN=root explicitly for setuid root binaries. This is not "useless", as one may have non-default setting for BINOWN in make.conf, and we still want these to be installed setuid root in this case. 2001-09-13 08:48:18 +02:00			`BINOWN= root`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00			`BINMODE=4555`
Convert sbin/ to LIBADD Reduce overlinking 2014-11-25 12:23:12 +01:00			`LIBADD= m`
Don't try to include ipsec support if we are building for the install floppy image. 2000-01-07 20:06:54 +01:00
ping: allow building without INET support Building without INET6 support was already possible. Now it's possible to build ping with only INET6, or even with neither INET nor INET6. Reported by: bz Reviewed by: bz MFC-With: 368045 Differential Revision: https://reviews.freebsd.org/D27394 2020-11-29 00:24:19 +01:00			`.if ${MK_INET_SUPPORT}!= "no"`
			`CFLAGS+= -DINET`
			`SRCS+= ping.c utils.c`
			`.endif`

Merge ping6 to ping There is now a single ping binary, which chooses to use ICMP or ICMPv4 based on the -4 and -6 options, and the format of the address. Submitted by: Ján Sučan <sucanjan@gmail.com> Sponsored by: Google LLC (Google Summer of Code 2019) MFC after: Never Differential Revision: https://reviews.freebsd.org/D21377 2020-11-26 05:29:30 +01:00			`.if ${MK_INET6_SUPPORT} != "no"`
			`CFLAGS+= -DINET6 -DKAME_SCOPEID`
			`SRCS+= ping6.c`
			`LIBADD+= md`
ping: add a ping6 hard link for backwards compatibility When invoked as "ping6", ping will now attempt to use ICMPv6 for hostnames that resolve both IPv4 and IPv6 addresses. Reviewed by: bz, manu MFC-With: r368045 Differential Revision: https://reviews.freebsd.org/D27384 2020-11-26 19:33:04 +01:00			`LINKS= ${BINDIR}/ping ${BINDIR}/ping6`
ping6(8): Add ping6(8) as MLINK to ping(8) Reviewed by: chuck MFC after: 3 days Differential Revision: https://reviews.freebsd.org/D42203 2023-11-07 22:14:59 +01:00			`MLINKS= ping.8 ping6.8`
Merge ping6 to ping There is now a single ping binary, which chooses to use ICMP or ICMPv4 based on the -4 and -6 options, and the format of the address. Submitted by: Ján Sučan <sucanjan@gmail.com> Sponsored by: Google LLC (Google Summer of Code 2019) MFC after: Never Differential Revision: https://reviews.freebsd.org/D21377 2020-11-26 05:29:30 +01:00			`.endif`

Allow dhclient and ping to build WITHOUT_DYNAMICROOT dhclient and ping normally use libcasper services. These are not available in statically-linked binaries, so when WITHOUT_DYNAMICROOT is set disable libcasper use, as with rescue builds. Also emit a warning as it's undesirable to build this way. Reported by: Michael Dexter Reviewed by: rgrimes Tested by: Michael Dexter Approved by: re (kib) Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D17074 2018-09-09 19:26:44 +02:00			`.if ${MK_DYNAMICROOT} == "no"`
			`.warning ${PROG} built without libcasper support`
			`.elif ${MK_CASPER} != "no" && !defined(RESCUE)`
Convert casperd(8) daemon to the libcasper. After calling the cap_init(3) function Casper will fork from it's original process, using pdfork(2). Forking from a process has a lot of advantages: 1. We have the same cwd as the original process. 2. The same uid, gid and groups. 3. The same MAC labels. 4. The same descriptor table. 5. The same routing table. 6. The same umask. 7. The same cpuset(1). From now services are also in form of libraries. We also removed libcapsicum at all and converts existing program using Casper to new architecture. Discussed with: pjd, jonathan, ed, drysdale@google.com, emaste Partially reviewed by: drysdale@google.com, bdrewery Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4277 2016-02-25 19:23:40 +01:00			`LIBADD+= casper`
			`LIBADD+= cap_dns`
We use a few different ifdef's names to check if we are using Casper or not, let's standardize this. Now we are always use WITH_CASPER name. Discussed with: emaste@ MFC after: 1 month 2017-09-21 16:41:41 +02:00			`CFLAGS+=-DWITH_CASPER`
Protect ping(8) using Capsicum and Casper. This is protection against malicious network packets that we parse and not against local users trying to gain root access through ping's set-uid bit - this is handled by dropping privileges very early in ping. Submitted by: Mikhail <mp@lenta.ru> 2014-02-04 22:43:53 +01:00			`.endif`

libipsec and IPsec related apps. (and some KAME related man pages) Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project 2000-01-06 13:40:54 +01:00			`CFLAGS+=-DIPSEC`
Convert sbin/ to LIBADD Reduce overlinking 2014-11-25 12:23:12 +01:00			`LIBADD+= ipsec`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00
ping: low-effort fix to make it compilable without inet6 2023-07-05 11:59:40 +02:00			`CFLAGS+= -Wno-error=unused-but-set-variable`

ping: Add tests of the Internet checksum function Submitted by: Ján Sučan <sucanjan@gmail.com> MFC after: 2 weeks Sponsored by: Google LLC (Google Summer of Code 2019) Differential Revision: https://reviews.freebsd.org/D21340 2019-08-20 23:59:48 +02:00			`HAS_TESTS=`
			`SUBDIR.${MK_TESTS}+= tests`

BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00			`.include <bsd.prog.mk>`