Edit

IABSD.fr/src/sbin/unwind/Makefile

Branch :

  • Show log

    Commit

  • Author : deraadt
    Date : 2022-08-29 17:00:29
    Hash : 46ebbf29
    Message : Dynamically link these /sbin daemons: dhcpleased, mountd, nfsd, pflogd, resolvd, slaacd, unwind. The mitigation story is way better: syscalls are in a randomly located libc, and every syscall stub is randomly located inside that due to random relinking. As opposed to fixed offset inside a release binary. There is one known consequence: /usr nfs mounting must use statically configured IP addresses. ok kettenis florian, others

  • sbin/unwind/Makefile
  • #	$OpenBSD: Makefile,v 1.9 2022/08/29 17:00:30 deraadt Exp $
    
    PROG=	unwind
    SRCS=	control.c resolver.c frontend.c log.c unwind.c parse.y printconf.c
    SRCS+=	dns64_synth.c
    MAN=	unwind.8 unwind.conf.5
    
    .include "${.CURDIR}/libunbound/Makefile.inc"
    
    #DEBUG=	-g -DDEBUG=3 -O0
    CFLAGS+= -Wall -I${.CURDIR} -I ${.CURDIR}/libunbound/libunbound
    CFLAGS+= -I ${.CURDIR}/libunbound
    CFLAGS+= -Wstrict-prototypes -Wmissing-prototypes
    CFLAGS+= -Wmissing-declarations
    CFLAGS+= -Wshadow -Wpointer-arith
    CFLAGS+= -Wsign-compare
    YFLAGS=
    LDADD+=	-levent -lutil -lssl -lcrypto
    DPADD+= ${LIBEVENT} ${LIBUTIL} ${LIBSSL} ${LIBCRYPTO}
    
    .include <bsd.prog.mk>
    
    # Don't compile unwind as static binary by default
    LDSTATIC=