Import of pkgsrc-2013Q2

security/dropbear/DESCR

@@ -0,0 +1,19 @@
+The search for a small Secure Shell server to fit on a laptop with 4
+megs ram and no hard disk was fruitless, so Matt Johnston decided to
+write his own, and Dropbear is the result.  It implements various
+features of the SSH 2 protocol, including X11 and Authentication Agent
+forwarding.  Dropbear is Open Source software, distributed under a
+MIT-style license. It includes a server, client and tools to
+generate server keys and to convert OpenSSH keys for Dropbear.
+
+Features
+
+    * A small memory footprint - Dropbear can compile to a 110kB
+      statically linked binary with uClibc (and only minimal options
+      selected).
+    * Implements X11 forwarding, and authentication-agent forwarding
+      for OpenSSH clients
+    * Compatible with OpenSSH ~/.ssh/authorized_keys public key
+      authentication
+    * Features can easily be disabled when compiling to save space.
+    * Preliminary TCP forwarding support (-L style only)

security/dropbear/Makefile

@@ -0,0 +1,68 @@
+# $NetBSD: Makefile,v 1.27 2012/10/23 18:16:26 asau Exp $
+
+DISTNAME=	dropbear-2012.55
+CATEGORIES=	security
+MASTER_SITES=	http://matt.ucc.asn.au/dropbear/releases/
+
+MAINTAINER=	snj@NetBSD.org
+HOMEPAGE=	http://matt.ucc.asn.au/dropbear/dropbear.html
+COMMENT=	Small SSH2 server and client, aimed at embedded market
+
+GNU_CONFIGURE=	yes
+USE_TOOLS+=	gmake
+
+CONFIGURE_ARGS+=	--sysconfdir=${PKG_SYSCONFDIR:Q}
+
+PKG_OPTIONS_VAR=	PKG_OPTIONS.dropbear
+PKG_SUPPORTED_OPTIONS=	pam
+.include "../../mk/bsd.options.mk"
+
+.if !empty(PKG_OPTIONS:Mpam)
+.  include "../../mk/pam.buildlink3.mk"
+CONFIGURE_ARGS+=	--enable-pam
+SUBST_CLASSES+=		pam
+SUBST_MESSAGE.pam=	Enabling PAM in options.h
+SUBST_STAGE.pam=	post-patch
+SUBST_FILES.pam=	options.h
+SUBST_SED.pam=		-e "s/ENABLE_SVR_PASSWORD_AUTH/ENABLE_SVR_PAM_AUTH/"
+.endif
+
+MAKEFLAGS+=	ROOT_USER=${ROOT_USER:Q} ROOT_GROUP=${ROOT_GROUP:Q}
+
+OWN_DIRS+=		${PKG_SYSCONFDIR}/dropbear
+
+SUBST_CLASSES+=		config
+SUBST_MESSAGE.config=	Fixing path to config directory.
+SUBST_STAGE.config=	post-build
+SUBST_FILES.config=	dropbear.8 dropbearkey.8
+SUBST_SED.config=	-e "s,/etc/dropbear/,"${PKG_SYSCONFDIR:Q}"/dropbear/,g"
+
+# used by dbscp
+CPPFLAGS+=		-D_PATH_SSH_PROGRAM="\"${PREFIX}/bin/dbclient\""
+
+# XXX use base xauth if present, otherwise _ass_ume pkgsrc. better than nothing
+.if exists(${X11BASE}/bin/xauth)
+CPPFLAGS+=-DXAUTH_COMMAND="\"${X11BASE}/bin/xauth\""
+.else
+CPPFLAGS+=-DXAUTH_COMMAND="\"${X11PREFIX}/bin/xauth\""
+.endif
+
+INSTALLATION_DIRS=	share/doc/dropbear ${PKGMANDIR}/man1 ${PKGMANDIR}/man8
+
+BUILD_TARGET=		all scp
+
+post-install:
+	${INSTALL_MAN} ${WRKSRC}/dbclient.1 \
+		${DESTDIR}/${PREFIX}/${PKGMANDIR}/man1
+	${INSTALL_MAN} ${WRKSRC}/dropbear.8 \
+		${DESTDIR}/${PREFIX}/${PKGMANDIR}/man8
+	${INSTALL_MAN} ${WRKSRC}/dropbearkey.8 \
+		${DESTDIR}/${PREFIX}/${PKGMANDIR}/man8
+	${INSTALL_DATA} ${WRKSRC}/README \
+		${DESTDIR}/${PREFIX}/share/doc/dropbear
+	${INSTALL_PROGRAM} ${WRKSRC}/scp ${DESTDIR}/${PREFIX}/bin/dbscp
+
+.include "../../devel/zlib/buildlink3.mk"
+.include "../../math/ltm/buildlink3.mk"
+.include "../../security/libtomcrypt/buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"

security/dropbear/PLIST

@@ -0,0 +1,10 @@
+@comment $NetBSD: PLIST,v 1.5 2009/08/26 21:10:11 snj Exp $
+bin/dbclient
+bin/dbscp
+bin/dropbearconvert
+bin/dropbearkey
+man/man1/dbclient.1
+man/man8/dropbear.8
+man/man8/dropbearkey.8
+sbin/dropbear
+share/doc/dropbear/README

security/dropbear/distinfo

@@ -0,0 +1,7 @@
+$NetBSD: distinfo,v 1.19 2012/08/13 17:47:26 drochner Exp $
+
+SHA1 (dropbear-2012.55.tar.gz) = 2c65dd1f423884a38079f5e4386c698015222279
+RMD160 (dropbear-2012.55.tar.gz) = 1eff6fa5260e938a4b34cf426a6d29fe1e9e4a34
+Size (dropbear-2012.55.tar.gz) = 1774927 bytes
+SHA1 (patch-aa) = 01bf4d80c4e76f9a60341b448cd7e77b2a03c286
+SHA1 (patch-ab) = 911a0525f309386901d32c23404d13ae67c2e2d1

security/dropbear/patches/patch-aa

@@ -0,0 +1,49 @@
+$NetBSD: patch-aa,v 1.8 2007/09/06 19:15:10 jlam Exp $
+
+--- Makefile.in.orig	2007-08-08 11:39:35.000000000 -0400
++++ Makefile.in
+@@ -62,6 +62,7 @@ prefix=@prefix@
+ exec_prefix=${prefix}
+ bindir=${exec_prefix}/bin
+ sbindir=${exec_prefix}/sbin
++sysconfdir=@sysconfdir@
+ 
+ CC=@CC@
+ AR=@AR@
+@@ -85,6 +86,8 @@ ifneq (,$(strip $(foreach prog, $(PROGRA
+ 	CFLAGS+= -DDROPBEAR_CLIENT
+ endif
+ 
++CFLAGS+=-DDSS_PRIV_FILENAME=\"$(sysconfdir)/dropbear/dropbear_dss_host_key\"
++CFLAGS+=-DRSA_PRIV_FILENAME=\"$(sysconfdir)/dropbear/dropbear_rsa_host_key\"
+ 
+ # these are exported so that libtomcrypt's makefile will use them
+ export CC
+@@ -137,14 +140,14 @@ insmulti%: dropbearmulti
+ inst_dropbear: dropbear
+ 	$(INSTALL) -d -m 755 $(DESTDIR)$(sbindir)
+ 	$(INSTALL) -m 755 dropbear$(EXEEXT) $(DESTDIR)$(sbindir)
+-	-chown root $(DESTDIR)$(sbindir)/dropbear$(EXEEXT)
+-	-chgrp 0 $(DESTDIR)$(sbindir)/dropbear$(EXEEXT)
++	-chown ${ROOT_USER} $(DESTDIR)$(sbindir)/dropbear$(EXEEXT)
++	-chgrp ${ROOT_GROUP} $(DESTDIR)$(sbindir)/dropbear$(EXEEXT)
+ 
+ inst_%: $*
+ 	$(INSTALL) -d -m 755 $(DESTDIR)$(bindir)
+ 	$(INSTALL) -m 755 $*$(EXEEXT) $(DESTDIR)$(bindir)
+-	-chown root $(DESTDIR)$(bindir)/$*$(EXEEXT)
+-	-chgrp 0 $(DESTDIR)$(bindir)/$*$(EXEEXT)
++	-chown ${ROOT_USER} $(DESTDIR)$(bindir)/$*$(EXEEXT)
++	-chgrp ${ROOT_GROUP} $(DESTDIR)$(bindir)/$*$(EXEEXT)
+ 
+ 
+ # for some reason the rule further down doesn't like $($@objs) as a prereq.
+@@ -181,7 +184,7 @@ link%:
+ 	-ln -s dropbearmulti$(EXEEXT) $*$(EXEEXT)
+ 
+ $(LTC): options.h
+-	cd libtomcrypt && $(MAKE) clean && $(MAKE)
++	cd libtomcrypt && $(MAKE)
+ 
+ $(LTM): options.h
+ 	cd libtommath && $(MAKE)

security/dropbear/patches/patch-ab

@@ -0,0 +1,13 @@
+$NetBSD: patch-ab,v 1.7 2009/08/26 21:10:11 snj Exp $
+
+--- options.h.orig	2009-08-26 13:15:07.000000000 -0700
++++ options.h	2009-08-26 13:15:14.000000000 -0700
+@@ -232,7 +232,7 @@ etc) slower (perhaps by 50%). Recommende
+ 
+ /* This is used by the scp binary when used as a client binary. If you're
+  * not using the Dropbear client, you'll need to change it */
+-#define _PATH_SSH_PROGRAM "/usr/bin/dbclient"
++/*#define _PATH_SSH_PROGRAM "/usr/bin/dbclient"*/
+ 
+ /* Whether to log commands executed by a client. This only logs the 
+  * (single) command sent to the server, not what a user did in a