Browse Source

HBSD: Disable cfi-icall for the various Kerberos executables

When I get time, I'll figure out why cfi-icall is broken for the various
Kerberos executables.

Signed-off-by:	Shawn Webb <shawn.webb@hardenedbsd.org>
MFC-to:		12-STABLE
hardened/current/master
Shawn Webb 6 months ago
parent
commit
1a88d09a37
Signed by untrusted user: shawn.webb <shawn.webb@hardenedbsd.org> GPG Key ID: FF2E67A277F8E1FA
26 changed files with 52 additions and 0 deletions
  1. +2
    -0
      kerberos5/libexec/digest-service/Makefile
  2. +2
    -0
      kerberos5/libexec/hprop/Makefile
  3. +2
    -0
      kerberos5/libexec/hpropd/Makefile
  4. +2
    -0
      kerberos5/libexec/ipropd-master/Makefile
  5. +2
    -0
      kerberos5/libexec/ipropd-slave/Makefile
  6. +2
    -0
      kerberos5/libexec/kadmind/Makefile
  7. +2
    -0
      kerberos5/libexec/kcm/Makefile
  8. +2
    -0
      kerberos5/libexec/kdc/Makefile
  9. +2
    -0
      kerberos5/libexec/kdigest/Makefile
  10. +2
    -0
      kerberos5/libexec/kfd/Makefile
  11. +2
    -0
      kerberos5/libexec/kimpersonate/Makefile
  12. +2
    -0
      kerberos5/libexec/kpasswdd/Makefile
  13. +2
    -0
      kerberos5/usr.bin/hxtool/Makefile
  14. +2
    -0
      kerberos5/usr.bin/kadmin/Makefile
  15. +2
    -0
      kerberos5/usr.bin/kcc/Makefile
  16. +2
    -0
      kerberos5/usr.bin/kdestroy/Makefile
  17. +2
    -0
      kerberos5/usr.bin/kf/Makefile
  18. +2
    -0
      kerberos5/usr.bin/kgetcred/Makefile
  19. +2
    -0
      kerberos5/usr.bin/kinit/Makefile
  20. +2
    -0
      kerberos5/usr.bin/kpasswd/Makefile
  21. +2
    -0
      kerberos5/usr.bin/ksu/Makefile
  22. +2
    -0
      kerberos5/usr.bin/string2key/Makefile
  23. +2
    -0
      kerberos5/usr.bin/verify_krb5_conf/Makefile
  24. +2
    -0
      kerberos5/usr.sbin/iprop-log/Makefile
  25. +2
    -0
      kerberos5/usr.sbin/kstash/Makefile
  26. +2
    -0
      kerberos5/usr.sbin/ktutil/Makefile

+ 2
- 0
kerberos5/libexec/digest-service/Makefile View File

@@ -12,6 +12,8 @@ CFLAGS+= -I${KRB5DIR}/kdc \
LIBADD= hdb kdc heimipcs krb5 roken asn1 crypto vers heimntlm
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kdc

+ 2
- 0
kerberos5/libexec/hprop/Makefile View File

@@ -16,6 +16,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kdc

+ 2
- 0
kerberos5/libexec/hpropd/Makefile View File

@@ -9,6 +9,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kdc

+ 2
- 0
kerberos5/libexec/ipropd-master/Makefile View File

@@ -10,6 +10,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/lib/kadm5

+ 2
- 0
kerberos5/libexec/ipropd-slave/Makefile View File

@@ -10,6 +10,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/lib/kadm5

+ 2
- 0
kerberos5/libexec/kadmind/Makefile View File

@@ -7,6 +7,8 @@ SRCS= rpc.c \
kadmind.c \
kadm_conn.c

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CFLAGS+=-I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/roken \
-I${SRCTOP}/contrib/com_err ${LDAPCFLAGS}
LIBADD= kadm5srv gssapi hdb krb5 roken vers


+ 2
- 0
kerberos5/libexec/kcm/Makefile View File

@@ -17,6 +17,8 @@ SRCS= acl.c \
sessions.c \
renew.c

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CFLAGS+=-I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/roken \
-I${KRB5DIR}/kcm -I${KRB5DIR}/lib/ipc ${LDAPCFLAGS}
LIBADD= krb5 roken heimntlm heimipcs crypto


+ 2
- 0
kerberos5/libexec/kdc/Makefile View File

@@ -8,6 +8,8 @@ SRCS= config.c \
announce.c \
main.c

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CFLAGS+=-I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/roken \
-I${KRB5DIR}/kdc -I${SRCTOP}/contrib/com_err ${LDAPCFLAGS}
LIBADD= kdc hdb krb5 roken crypt vers


+ 2
- 0
kerberos5/libexec/kdigest/Makefile View File

@@ -10,6 +10,8 @@ SRCS= kdigest.c \
kdigest-commands.c \
kdigest-commands.h

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CLEANFILES= kdigest-commands.h kdigest-commands.c

kdigest-commands.h: kdigest-commands.in


+ 2
- 0
kerberos5/libexec/kfd/Makefile View File

@@ -6,6 +6,8 @@ CFLAGS+= -I${KRB5DIR}/lib/asn1 \
-I${KRB5DIR}/lib/roken
LIBADD= krb5 roken vers

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/appl/kf

+ 2
- 0
kerberos5/libexec/kimpersonate/Makefile View File

@@ -8,6 +8,8 @@ CFLAGS+= -I${KRB5DIR}/lib/hx509 \
-I${KRB5DIR}/lib/sl -I.
LIBADD= krb5 roken asn1 vers

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kuser

+ 2
- 0
kerberos5/libexec/kpasswdd/Makefile View File

@@ -8,6 +8,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kpasswd

+ 2
- 0
kerberos5/usr.bin/hxtool/Makefile View File

@@ -11,6 +11,8 @@ CFLAGS+= -I${KRB5DIR}/lib/hx509 \
LIBADD= hx509 roken asn1 crypto sl vers edit
SRCS= hxtool.c hxtool-commands.c hxtool-commands.h

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CLEANFILES= hxtool-commands.h hxtool-commands.c

hxtool-commands.h: hxtool-commands.in


+ 2
- 0
kerberos5/usr.bin/kadmin/Makefile View File

@@ -24,6 +24,8 @@ SRCS= add_enctype.c \
stash.c \
util.c

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CFLAGS+=-I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/roken \
-I${KRB5DIR}/lib/sl -I${SRCTOP}/contrib/com_err -I. ${LDAPCFLAGS}
LIBADD= kadm5clnt kadm5srv hdb krb5 roken vers sl asn1 crypto edit


+ 2
- 0
kerberos5/usr.bin/kcc/Makefile View File

@@ -16,6 +16,8 @@ SRCS= kcc.c \
kswitch.c \
copy_cred_cache.c

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CLEANFILES= kcc-commands.h kcc-commands.c

kcc-commands.h: kcc-commands.in


+ 2
- 0
kerberos5/usr.bin/kdestroy/Makefile View File

@@ -5,6 +5,8 @@ CFLAGS+=-I${KRB5DIR}/lib/roken
LIBADD= kafs5 krb5 roken vers
MAN= kdestroy.1

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kuser

+ 2
- 0
kerberos5/usr.bin/kf/Makefile View File

@@ -6,6 +6,8 @@ CFLAGS+= -I${KRB5DIR}/lib/asn1 \
-I${KRB5DIR}/lib/roken
LIBADD= krb5 roken vers

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/appl/kf

+ 2
- 0
kerberos5/usr.bin/kgetcred/Makefile View File

@@ -5,6 +5,8 @@ CFLAGS+= -I${KRB5DIR}/lib/asn1 \
-I${KRB5DIR}/lib/roken
LIBADD= krb5 roken asn1 vers

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kuser

+ 2
- 0
kerberos5/usr.bin/kinit/Makefile View File

@@ -4,6 +4,8 @@ PROG= kinit
CFLAGS+=-I${KRB5DIR}/lib/roken
LIBADD= kafs5 krb5 heimntlm roken crypto vers

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kuser

+ 2
- 0
kerberos5/usr.bin/kpasswd/Makefile View File

@@ -5,6 +5,8 @@ CFLAGS+=-I${KRB5DIR}/lib/roken
LIBADD= hdb krb5 roken vers crypto
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kpasswd

+ 2
- 0
kerberos5/usr.bin/ksu/Makefile View File

@@ -10,6 +10,8 @@ SRCS= su.c
CFLAGS+=-I${KRB5DIR}/lib/roken
LIBADD= kafs5 krb5 roken vers crypto crypt

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/appl/su

+ 2
- 0
kerberos5/usr.bin/string2key/Makefile View File

@@ -10,6 +10,8 @@ CFLAGS+= -I${KRB5DIR}/kdc \
-I${SRCTOP}/contrib/com_err
LIBADD= krb5 roken crypto vers

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kdc

+ 2
- 0
kerberos5/usr.bin/verify_krb5_conf/Makefile View File

@@ -6,6 +6,8 @@ CFLAGS+=-I${KRB5DIR}/lib/asn1 -I${KRB5DIR}/lib/krb5 -I${KRB5DIR}/lib/roken \
-I${SRCTOP}/contrib/com_err
LIBADD= krb5 roken vers

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/lib/krb5

+ 2
- 0
kerberos5/usr.sbin/iprop-log/Makefile View File

@@ -11,6 +11,8 @@ CFLAGS+= -I${KRB5DIR}/lib/kadm5 \
LIBADD= kadm5srv hdb krb5 roken edit sl vers
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CLEANFILES= iprop-commands.h iprop-commands.c

iprop-commands.h: iprop-commands.in


+ 2
- 0
kerberos5/usr.sbin/kstash/Makefile View File

@@ -9,6 +9,8 @@ DPADD= ${LDAPDPADD}
LDADD= ${LDAPLDADD}
LDFLAGS=${LDAPLDFLAGS}

CFI_OVERRIDE= -fno-sanitize=cfi-icall

.include <bsd.prog.mk>

.PATH: ${KRB5DIR}/kdc

+ 2
- 0
kerberos5/usr.sbin/ktutil/Makefile View File

@@ -16,6 +16,8 @@ SRCS= add.c \
remove.c \
rename.c

CFI_OVERRIDE= -fno-sanitize=cfi-icall

CFLAGS+=-I${KRB5DIR}/lib/roken -I${KRB5DIR}/lib/sl -I.
LIBADD= kadm5clnt krb5 roken crypto edit sl vers



Loading…
Cancel
Save