Permalink
Browse files

HBSD: Disable PIE or RELRO + BIND_NOW for a number of ports.

Signed-off-by:	Shawn Webb <shawn.webb@hardenedbsd.org>
  • Loading branch information...
lattera committed Aug 8, 2016
1 parent 253d48a commit 930073807710bb8299896c9822e6a4be77e53501
Showing 406 changed files with 1,003 additions and 8 deletions.
View
@@ -33,6 +33,8 @@ OPENSSL_AES_CPPFLAGS= -DOPENSSL_AES -I${OPENSSLINC}
OPENSSL_AES_LDFLAGS= -L${OPENSSLLIB} -lcrypto
OPENSSL_AES_USE= OPENSSL=yes
NOPIE= yes
do-install:
${INSTALL_PROGRAM} ${WRKSRC}/unrar ${STAGEDIR}${PREFIX}/bin/
${MKDIR} ${STAGEDIR}${DOCSDIR}/
@@ -22,4 +22,6 @@ CONFIGURE_ARGS= --includedir="${LOCALBASE}/include" \
CPPFLAGS+= -I${LOCALBASE}/include/GL -I${LOCALBASE}/include
LIBS+= -L${LOCALBASE}/lib -lm -lcompat
NOPIE= yes
.include <bsd.port.mk>
View
@@ -35,6 +35,9 @@ CXXFLAGS+= -fpermissive
CPPFLAGS+= -I${LOCALBASE}/include
LDFLAGS+= -L${LOCALBASE}/lib
NOPIE= yes
NORELRO= yes
PLIST_SUB= VERSION="${PORTVERSION}"
OPTIONS_SUB= yes
View
@@ -35,6 +35,9 @@ CMAKE_ARGS= -DBUILD_CSOUNDVST:BOOL=OFF \
USE_LDCONFIG= yes
SSP_UNSAFE= yes
NOPIE= yes
NORELRO= yes
SUB_FILES= pkg-message
CONFLICTS= csound-5.*
@@ -32,6 +32,8 @@ INSTALL_TARGET= install-strip
USE_LDCONFIG= ${LOCALBASE}/lib/forked-daapd
CONFIGURE_ARGS+=--localstatedir=/var
NOPIE= yes
USE_RC_SUBR= ${PORTNAME}
SUB_FILES= pkg-message
@@ -16,6 +16,9 @@ GNU_CONFIGURE= yes
USES= gmake pkgconfig
CONFIGURE_ARGS= --exec-prefix=${PREFIX}
NOPIE= yes
NORELRO= yes
OPTIONS_DEFINE= DOCS MYSQL PGSQL
MYSQL_USE= MYSQL=YES
View
@@ -30,6 +30,8 @@ NLS_CONFIGURE_ENABLE= nls
ESOUND_USE= GNOME=esound
ESOUND_CONFIGURE_WITH= esd
NOPIE= yes
post-install:
${INSTALL_PROGRAM} ${WRKSRC}/madtime ${STAGEDIR}${PREFIX}/bin
@@ -15,6 +15,9 @@ LICENSE_FILE= ${WRKSRC}/COPYING
PLIST_FILES= bin/mp3guessenc
SRC= decode.c mp3guessenc.c bit_utils.c tags.c
NOPIE= yes
NORELRO= yes
do-build:
.for f in ${SRC}
${CC} ${CFLAGS} ${WRKSRC}/${f} -c -o ${WRKSRC}/${f:C/\.c/.o/}
View
@@ -25,6 +25,8 @@ CONFIGURE_ARGS= --disable-debug --disable-lubrify --disable-rpath
CPPFLAGS+= -I${LOCALBASE}/include -DHAVE_SYS_UIO_H
LDFLAGS+= -lpthread -L${LOCALBASE}/lib -lintl
NOPIE= yes
PORTDOCS= AUTHORS ChangeLog NEWS KNOWN-BUGS README TODO USAGE
PLIST_FILES= bin/muse man/man1/muse.1.gz
.for lang in es it
View
@@ -24,6 +24,9 @@ USE_RC_SUBR= oss
SUB_FILES= pkg-install pkg-deinstall
ONLY_FOR_ARCHS= amd64 i386
NOPIE= yes
NORELRO= yes
KMODDIR= ${PREFIX}/lib/oss/modules
OSS_CONF_FILES= oss_audigyls oss_audioloop oss_cs461x oss_emu10k1x \
View
@@ -27,6 +27,8 @@ LDFLAGS+= `fltk-config --ldflags`
USES= gmake
USE_GNOME= glib20
NOPIE= yes
post-patch:
@${REINPLACE_CMD} 's/-lssl/-lcrypto/' \
${WRKSRC}/configure ${WRKSRC}/raop_play/Makefile.in
@@ -19,6 +19,8 @@ BUILD_DEPENDS= ${LOCALBASE}/lib/libaiff.a:audio/libaiff
HAS_CONFIGURE= yes
CONFIGURE_ARGS= --prefix=${PREFIX}
NOPIE= yes
PLIST_FILES= bin/${PORTNAME} \
man/man1/${PORTNAME}.1.gz
View
@@ -14,6 +14,8 @@ PORTDOCS= ALGORITHMS AUTHORS ChangeLog COPYING INSTALL KNOWN_BUGS \
LICENSE NEWS README THANKS TODO
MAKEFILE= Makefile.bsd
NOPIE= yes
OPTIONS_DEFINE= DOCS
post-install-DOCS-on:
@@ -16,6 +16,9 @@ USE_GCC= any
CONFIGURE_ARGS= --disable-nas
NOPIE= yes
NORELRO= yes
DESCR= ${.CURDIR}/pkg-descr
PLIST= ${.CURDIR}/pkg-plist
View
@@ -19,6 +19,9 @@ USE_LDCONFIG= yes
GNU_CONFIGURE= yes
CONFIGURE_ARGS= --disable-static
NOPIE= yes
NORELRO= yes
PLIST_FILES= lib/xmms/Output/libnas.so
post-install:
@@ -16,6 +16,8 @@ USES= gmake pkgconfig
GNU_CONFIGURE= yes
USE_GNOME= gtk20 gnomeprefix
NOPIE= yes
OPTIONS_DEFINE= NLS
OPTIONS_SUB= yes
@@ -20,6 +20,8 @@ USE_PERL5= run
SHEBANG_FILES= scripts/getresults
PLIST_SUB= LMBENCH_OS=${ARCH}-${OPSYS:tl}${OSREL}
NOPIE= yes
test: build
@(cd ${WRKSRC}; make results)
View
@@ -17,6 +17,8 @@ USES= cmake:outsource compiler:c++11-lang
CFLAGS+= -DNDEBUG
NOPIE= yes
USE_GITHUB= yes
GH_ACCOUNT= bbuchfink
View
@@ -21,6 +21,9 @@ INSTALL_WRKSRC= ${WRKSRC}/core
USES= gmake shebangfix tar:tgz
NOPIE= yes
NORELRO= yes
SHEBANG_FILES= core/*.tmpl
MAKE_ENV= INSTALL_LIB="${INSTALL_LIB}" \
View
@@ -19,6 +19,8 @@ GNU_CONFIGURE= yes
INSTALL_TARGET= install-strip
USE_LDCONFIG= yes
NOPIE= yes
CPPFLAGS+= -I${LOCALBASE}/include
LDFLAGS+= -L${LOCALBASE}/lib
@@ -28,6 +28,8 @@ SHEBANG_FILES= src/app/blast/legacy_blast.pl \
src/app/blast/update_blastdb.pl \
src/app/winmasker/windowmasker_2.2.22_adapter.py
NOPIE= yes
# Requires openmp
USE_GCC= yes
USE_LDCONFIG= yes
View
@@ -17,6 +17,8 @@ MAKE_ARGS= CC="${CC}" CPP="${CXX}"
WRKSRC= ${WRKDIR}/${PORTNAME}-${PORTVERSION}/src
PLIST_FILES= bin/primer3
NOPIE= yes
post-patch:
@${REINPLACE_CMD} \
-e 's#^CFLAGS.*#CFLAGS += \$$\(CC_OPTS\)#;' \
View
@@ -21,6 +21,8 @@ PORTEXAMPLES= *
OPTIONS_DEFINE= DOCS EXAMPLES
NOPIE= yes
post-patch:
@${REINPLACE_CMD} -e 's/f77/$${FC}/' -e 's/LFLAGS/LDFLAGS/' \
${WRKSRC}/src/makefile
View
@@ -32,6 +32,9 @@ EXTRACT_AFTER_ARGS=--exclude fftw --exclude windows --exclude macosx
SUB_FILES= pkg-message
NOPIE= yes
NORELRO= yes
.include <bsd.port.options.mk>
.if ${PORT_OPTIONS:MOPTIMIZED_FFLAGS}
View
@@ -22,6 +22,8 @@ PKGMESSAGE= ${WRKDIR}/pkg-message
USES= bison gmake libtool motif
NOPIE= yes
USE_GCC= any
HAS_CONFIGURE= yes
INSTALL_TARGET= install-strip
View
@@ -36,6 +36,9 @@ USE_GCC= yes
USE_XORG= xmu
USE_GL= glut
NOPIE= yes
NORELRO= yes
BROWSER?= firefox
PSVIEWER?= gv
View
@@ -23,6 +23,8 @@ USE_GNOME= gtk20
GNU_CONFIGURE= yes
LDFLAGS+= -lm
NOPIE= yes
DESKTOP_ENTRIES="pdnMesh" "${COMMENT}" "" "${PORTNAME}" "" true
ATLAS_USES= blaslapack:atlas
View
@@ -16,6 +16,8 @@ LIB_DEPENDS= libmp3lame.so:audio/lame \
OPTIONS_DEFINE= DOCS EXAMPLES
NOPIE= yes
post-patch:
@${REINPLACE_CMD} -e 's|%%PREFIX%%|${PREFIX}|'g \
${WRKSRC}/Makefile
@@ -16,6 +16,8 @@ RUN_DEPENDS= ebook2cw:comms/ebook2cw
USE_WX= 2.8
WX_UNICODE= yes
NOPIE= yes
PORTDOCS= *
post-patch:
View
@@ -15,6 +15,8 @@ LICENSE= GPLv3
LIB_DEPENDS= libfltk.so:x11-toolkits/fltk
NOPIE= yes
DESKTOP_ENTRIES= "Fl_MoxGen" "${COMMENT}" "" "${PORTNAME}" \
"Network;HamRadio;" false
View
@@ -18,6 +18,8 @@ LIB_DEPENDS= libfltk.so:x11-toolkits/fltk
USES= gmake
MAKEFILE= makefile
NOPIE= yes
post-patch:
@${REINPLACE_CMD} -e \
's|%%PREFIX%%|${PREFIX}|g' ${WRKSRC}/geoid.cxx
View
@@ -17,6 +17,8 @@ NO_WRKSUBDIR= yes
USES= dos2unix uidfix zip
DOS2UNIX_GLOB= *.c *.h
NOPIE= yes
post-patch:
@${REINPLACE_CMD} -e '/int main/s/short argc/int argc/' \
${WRKSRC}/apps/gethumd/gethumd.c ${WRKSRC}/apps/shaapp/shaapp.c
View
@@ -19,4 +19,6 @@ LIBS+= -L${LOCALBASE}/lib
PLIST_FILES= bin/nokryptia man/man1/${PORTNAME}.1.gz
NOPIE= yes
.include <bsd.port.mk>
View
@@ -22,4 +22,6 @@ PLIST_FILES= bin/sdr-wspr share/applications/sdr-wspr.desktop \
share/icons/sdr-wspr.svg
CMAKE_ARGS= -DCMAKE_INSTALL_RPATH:STRING="${LOCALBASE}/lib/gcc${_GCC_VER}"
NOPIE= yes
.include <bsd.port.mk>
View
@@ -26,6 +26,9 @@ PLIST_FILES+= ${KMODDIR}/${PORTNAME}.ko
CFLAGS+= ${DEBUG_FLAGS}
NOPIE= yes
NORELRO= yes
.include <bsd.port.options.mk>
.if ${ARCH} == "powerpc" || ${ARCH} == "sparc64"
View
@@ -24,6 +24,8 @@ INSTALL_TARGET= install-strip
OPTIONS_DEFINE= GTKDOC
GTKDOC_DESC= Enable GTK html documentation
NOPIE= yes
.include <bsd.port.options.mk>
.if ${PORT_OPTIONS:MGTKDOC}
@@ -22,6 +22,8 @@ LICENSE_FILE_IPL= ${WRKSRC}/builds/install/misc/IPLicense.txt
LICENSE_PERMS_IDPL= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
LICENSE_PERMS_IPL= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
NOPIE= yes
LIB_DEPENDS= libicuuc.so:devel/icu
USES= gmake pkgconfig tar:bzip2
@@ -17,6 +17,9 @@ USE_GITHUB= yes
GH_ACCOUNT= mongodb
GH_PROJECT= mongo-tools
NOPIE= yes
NORELRO= yes
OPTIONS_DEFINE= SSL SASL
OPTIONS_DEFAULT= SSL
@@ -19,6 +19,9 @@ WRKSRC= ${WRKDIR}/${PORTNAME}-${PORTVERSION}
SLAVEDIRS= databases/mysql57-client
USES= bison:build cmake:outsource compiler:c11 compiler:c++11-lib cpe libedit localbase perl5 shebangfix
NOPIE= yes
NORELRO= yes
USE_OPENSSL= yes
USE_PERL5= run
@@ -18,6 +18,9 @@ BROKEN_powerpc64= Does not build
USES= cpe shebangfix tar:xz
CPE_PRODUCT= ${PORTNAME:tl}
NOPIE= yes
NORELRO= yes
NO_BUILD= yes
.if !defined(WITHOUT_PHP_DEPENDS)
IGNORE_WITH_PHP=5 54
@@ -29,6 +29,9 @@ USE_GNOME= libxml2
USE_LDCONFIG= yes
USE_PERL5= build
NOPIE= yes
NORELRO= yes
OPTIONS_DEFINE= LOADERGUI RASTER TOPOLOGY SFCGAL ADDRSTD
OPTIONS_DEFAULT= TOPOLOGY ADDRSTD
NO_OPTIONS_SORT= yes
View
@@ -30,6 +30,8 @@ SHEBANG_FILES= deps/eper/priv/bin/* \
USE_RC_SUBR= riak
USE_GCC= yes
NOPIE= yes
BROKEN_i386= does not build
USERS= riak
@@ -15,6 +15,8 @@ LICENSE_FILE= ${WRKSRC}/LICENSE
LIB_DEPENDS= libgflags.so:devel/gflags \
libsnappy.so:archivers/snappy
NOPIE= yes
BROKEN_powerpc64= does not build
OPTIONS_DEFINE= DEBUG
Oops, something went wrong.

0 comments on commit 9300738

Please sign in to comment.