HBSD: Disable cfi-icall for the various Kerberos executables

When I get time, I'll figure out why cfi-icall is broken for the various
Kerberos executables.

Signed-off-by:	Shawn Webb <shawn.webb@hardenedbsd.org>
MFC-to:		12-STABLE
This commit is contained in:
Shawn Webb 2020-01-27 09:25:50 -05:00
parent f4ed63bee9
commit 1a88d09a37
No known key found for this signature in database
GPG Key ID: FF2E67A277F8E1FA
26 changed files with 52 additions and 0 deletions

View File

@ -12,6 +12,8 @@ CFLAGS+= -I${KRB5DIR}/kdc \
LIBADD= hdb kdc heimipcs krb5 roken asn1 crypto vers heimntlm
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kdc

View File

@ -16,6 +16,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kdc

View File

@ -9,6 +9,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kdc

View File

@ -10,6 +10,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/lib/kadm5

View File

@ -10,6 +10,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/lib/kadm5

View File

@ -7,6 +7,8 @@ SRCS= rpc.c \
kadmind.c \
kadm_conn.c
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CFLAGS+=-I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/roken \
-I${SRCTOP}/contrib/com_err ${LDAPCFLAGS}
LIBADD= kadm5srv gssapi hdb krb5 roken vers

View File

@ -17,6 +17,8 @@ SRCS= acl.c \
sessions.c \
renew.c
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CFLAGS+=-I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/roken \
-I${KRB5DIR}/kcm -I${KRB5DIR}/lib/ipc ${LDAPCFLAGS}
LIBADD= krb5 roken heimntlm heimipcs crypto

View File

@ -8,6 +8,8 @@ SRCS= config.c \
announce.c \
main.c
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CFLAGS+=-I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/roken \
-I${KRB5DIR}/kdc -I${SRCTOP}/contrib/com_err ${LDAPCFLAGS}
LIBADD= kdc hdb krb5 roken crypt vers

View File

@ -10,6 +10,8 @@ SRCS= kdigest.c \
kdigest-commands.c \
kdigest-commands.h
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CLEANFILES= kdigest-commands.h kdigest-commands.c
kdigest-commands.h: kdigest-commands.in

View File

@ -6,6 +6,8 @@ CFLAGS+= -I${KRB5DIR}/lib/asn1 \
-I${KRB5DIR}/lib/roken
LIBADD= krb5 roken vers
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/appl/kf

View File

@ -8,6 +8,8 @@ CFLAGS+= -I${KRB5DIR}/lib/hx509 \
-I${KRB5DIR}/lib/sl -I.
LIBADD= krb5 roken asn1 vers
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kuser

View File

@ -8,6 +8,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kpasswd

View File

@ -11,6 +11,8 @@ CFLAGS+= -I${KRB5DIR}/lib/hx509 \
LIBADD= hx509 roken asn1 crypto sl vers edit
SRCS= hxtool.c hxtool-commands.c hxtool-commands.h
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CLEANFILES= hxtool-commands.h hxtool-commands.c
hxtool-commands.h: hxtool-commands.in

View File

@ -24,6 +24,8 @@ SRCS= add_enctype.c \
stash.c \
util.c
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CFLAGS+=-I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/roken \
-I${KRB5DIR}/lib/sl -I${SRCTOP}/contrib/com_err -I. ${LDAPCFLAGS}
LIBADD= kadm5clnt kadm5srv hdb krb5 roken vers sl asn1 crypto edit

View File

@ -16,6 +16,8 @@ SRCS= kcc.c \
kswitch.c \
copy_cred_cache.c
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CLEANFILES= kcc-commands.h kcc-commands.c
kcc-commands.h: kcc-commands.in

View File

@ -5,6 +5,8 @@ CFLAGS+=-I${KRB5DIR}/lib/roken
LIBADD= kafs5 krb5 roken vers
MAN= kdestroy.1
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kuser

View File

@ -6,6 +6,8 @@ CFLAGS+= -I${KRB5DIR}/lib/asn1 \
-I${KRB5DIR}/lib/roken
LIBADD= krb5 roken vers
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/appl/kf

View File

@ -5,6 +5,8 @@ CFLAGS+= -I${KRB5DIR}/lib/asn1 \
-I${KRB5DIR}/lib/roken
LIBADD= krb5 roken asn1 vers
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kuser

View File

@ -4,6 +4,8 @@ PROG= kinit
CFLAGS+=-I${KRB5DIR}/lib/roken
LIBADD= kafs5 krb5 heimntlm roken crypto vers
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kuser

View File

@ -5,6 +5,8 @@ CFLAGS+=-I${KRB5DIR}/lib/roken
LIBADD= hdb krb5 roken vers crypto
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kpasswd

View File

@ -10,6 +10,8 @@ SRCS= su.c
CFLAGS+=-I${KRB5DIR}/lib/roken
LIBADD= kafs5 krb5 roken vers crypto crypt
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/appl/su

View File

@ -10,6 +10,8 @@ CFLAGS+= -I${KRB5DIR}/kdc \
-I${SRCTOP}/contrib/com_err
LIBADD= krb5 roken crypto vers
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kdc

View File

@ -6,6 +6,8 @@ CFLAGS+=-I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/roken \
-I${SRCTOP}/contrib/com_err
LIBADD= krb5 roken vers
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/lib/krb5

View File

@ -11,6 +11,8 @@ CFLAGS+= -I${KRB5DIR}/lib/kadm5 \
LIBADD= kadm5srv hdb krb5 roken edit sl vers
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CLEANFILES= iprop-commands.h iprop-commands.c
iprop-commands.h: iprop-commands.in

View File

@ -9,6 +9,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}
CFI_OVERRIDE= -fno-sanitize=cfi-icall
.include <bsd.prog.mk>
.PATH: ${KRB5DIR}/kdc

View File

@ -16,6 +16,8 @@ SRCS= add.c \
remove.c \
rename.c
CFI_OVERRIDE= -fno-sanitize=cfi-icall
CFLAGS+=-I${KRB5DIR}/lib/roken -I${KRB5DIR}/lib/sl -I.
LIBADD= kadm5clnt krb5 roken crypto edit sl vers