HardenedBSD/sbin/ping/Makefile

#	@(#)Makefile	8.1 (Berkeley) 6/5/93
# $FreeBSD$

.include <src.opts.mk>

PROG=	ping
MAN=	ping.8
BINOWN=	root
BINMODE=4555
WARNS?=	3
LIBADD=	m

.if ${MK_CASPER} != "no" && !defined(RESCUE)
LIBADD+=	capsicum
CFLAGS+=-DHAVE_LIBCAPSICUM
.endif

.if !defined(RELEASE_CRUNCH)
CFLAGS+=-DIPSEC
LIBADD+=	ipsec
.endif

.include <bsd.prog.mk>
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00			`# @(#)Makefile 8.1 (Berkeley) 6/5/93`
$Id$ -> $FreeBSD$ 1999-08-28 02:22:10 +02:00			`# $FreeBSD$`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00
Use src.opts.mk in preference to bsd.own.mk except where we need stuff from the latter. 2014-05-06 06:22:01 +02:00			`.include <src.opts.mk>`
Protect ping(8) using Capsicum and Casper. This is protection against malicious network packets that we parse and not against local users trying to gain root access through ping's set-uid bit - this is handled by dropping privileges very early in ping. Submitted by: Mikhail <mp@lenta.ru> 2014-02-04 22:43:53 +01:00
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00			`PROG= ping`
- Backout botched attempt to introduce MANSECT feature. - MAN[1-9] -> MAN. 2001-03-26 16:33:27 +02:00			`MAN= ping.8`
Set BINOWN=root explicitly for setuid root binaries. This is not "useless", as one may have non-default setting for BINOWN in make.conf, and we still want these to be installed setuid root in this case. 2001-09-13 08:48:18 +02:00			`BINOWN= root`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00			`BINMODE=4555`
WARNS=3 and style fixes. No functionality change. 2014-10-20 02:27:40 +02:00			`WARNS?= 3`
Convert sbin/ to LIBADD Reduce overlinking 2014-11-25 12:23:12 +01:00			`LIBADD= m`
Don't try to include ipsec support if we are building for the install floppy image. 2000-01-07 20:06:54 +01:00
Protect ping(8) using Capsicum and Casper. This is protection against malicious network packets that we parse and not against local users trying to gain root access through ping's set-uid bit - this is handled by dropping privileges very early in ping. Submitted by: Mikhail <mp@lenta.ru> 2014-02-04 22:43:53 +01:00			`.if ${MK_CASPER} != "no" && !defined(RESCUE)`
Convert sbin/ to LIBADD Reduce overlinking 2014-11-25 12:23:12 +01:00			`LIBADD+= capsicum`
Protect ping(8) using Capsicum and Casper. This is protection against malicious network packets that we parse and not against local users trying to gain root access through ping's set-uid bit - this is handled by dropping privileges very early in ping. Submitted by: Mikhail <mp@lenta.ru> 2014-02-04 22:43:53 +01:00			`CFLAGS+=-DHAVE_LIBCAPSICUM`
			`.endif`

Don't try to include ipsec support if we are building for the install floppy image. 2000-01-07 20:06:54 +01:00			`.if !defined(RELEASE_CRUNCH)`
libipsec and IPsec related apps. (and some KAME related man pages) Reviewed by: freebsd-arch, cvs-committers Obtained from: KAME project 2000-01-06 13:40:54 +01:00			`CFLAGS+=-DIPSEC`
Convert sbin/ to LIBADD Reduce overlinking 2014-11-25 12:23:12 +01:00			`LIBADD+= ipsec`
Don't try to include ipsec support if we are building for the install floppy image. 2000-01-07 20:06:54 +01:00			`.endif`
BSD 4.4 Lite sbin Sources Note: XNSrouted and routed NOT imported here, they shall be imported with usr.sbin. 1994-05-26 08:35:07 +02:00
			`.include <bsd.prog.mk>`