summaryrefslogtreecommitdiff
path: root/configure.ac
AgeCommit message (Collapse)AuthorFilesLines
2012-08-07autoconf: set version to 5.6.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-07-26autoconf: set version to 5.6cifs-utils-5.6Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-07-18mount.cifs: Use systemd's mechanism for getting password, if present.Ankit Jain1-0/+10
If systemd is running and /bin/systemd-ask-password if available, then use that else fallback on getpass(..). And add a --enable-systemd configure option, which defaults to yes. Signed-off-by: Ankit Jain <jankit@suse.com>
2012-07-10autoconf: Fix building with autoconf version older than 2.60.Andreas Schneider1-1/+6
AC_PROG_SED is only avaliable in recent autoconf versions. Use AC_CHECK_PROG instead if AC_PROG_SED is not present. Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
2012-07-10autoconf: add --enable-pie and --enable-relroJeff Layton1-0/+27
-pie and -fpie enable the building of position-independent executables, and -Wl,-z,relro turns on read-only relocation support in gcc. These options are important for security purposes to guard against possible buffer overflows that lead to exploits. Follow the example of samba here and enable these by default, but add configure options that allow people to turn them off at build-time if necessary. We may also want to eventually add checks to ensure that the compiler and linker understand these options, but I'll wait until we have some evidence that it's needed before I expend the effort. Reported-by: Andreas Schneider <asn@samba.org> Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-06-01autoconf: set version to 5.5.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-05-30autoconf: set version to 5.5cifs-utils-5.5Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-05-14doc: update mailing listJeff Layton1-1/+1
Signed-off-by: Luk Claes <luk@debian.org>
2012-04-20cifs.upcall: missing prototype for krb5_auth_con_set_req_cksumtype in MITLars Mueller1-0/+3
krb5 < 1.7 products coming with MIT krb5 < 1.7 (like SUSE Linux Enterprise 11 SP 1 or SP 2) suffer from the same issue as described by https://bugzilla.samba.org/show_bug.cgi?id=6918 The declaration of krb5_auth_con_set_req_cksumtype is missing. Inspiration: https://bugzilla.samba.org/show_bug.cgi?id=6918 Acked-by: Suresh Jayaraman <sjayaraman@suse.com> Signed-off-by: Lars Mueller <lmuelle@suse.com>
2012-04-19autoconf: set version to 5.4.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-04-18autoconf: set version to 5.4cifs-utils-5.4Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-04-15autoconf: fix tests for wbclient to use pkgconfigJeff Layton1-15/+1
Use the pkgconfig file that's included with wbclient to perform the test for wbclient usability, and to set the correct CFLAGS and LDADD. This is particularly necessary on recent Fedora with samba4 since it puts the wbclient.h file in a different directory than before. Also, remove a redundant test for wbclient.h from configure.ac. Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-04-02mount.cifs: don't allow unprivileged users to mount onto dirs to which theyJeff Layton1-0/+4
can't chdir If mount.cifs is installed as a setuid root program, then a user can use it to gather information about files and directories to which he does not have access. One of the first things that mount.cifs does is to chdir() into the mountpoint and then proceeds to perform the mount onto ".". A malicious user could exploit this fact to determine information about directories to which he does not have access. Specifically, whether the dentry in question is a file or directory and whether it exists at all. This patch fixes this by making the program switch the fsuid to the real uid for unprivileged users when mounting. Note that this is a behavior change. mount.cifs has in the past allowed users to mount onto any directory as long as it's listed in /etc/fstab as a user mount. With this change, the user must also be able to chdir into the mountpoint without needing special privileges. Hopefully not many people have such a pathological configuration. This patch should fix CVE-2012-1586. Reported-by: Jesus Olmos <jesus.olmos@blueliv.com> Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-02-12cifs-utils: allow specifying rootsbindir at configure timeJeff Layton1-1/+9
...via the $ROOTSBINDIR environment variable, and AC_ARG_VAR macro. The default is to use /sbin for this value, which only currently affects the installation location of mount.cifs. Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-02-12autoconf: set release to 5.3.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-01-28autoconf: set version to 5.3cifs-utils-5.3Jeff Layton1-1/+1
...and fix the URL for cifs-utils. Signed-off-by: Jeff Layton <jlayton@samba.org>
2012-01-24cifscreds: build it by defaultJeff Layton1-5/+13
...but either error out or disable it if keyutils.h isn't present. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-10contrib: add a set of sample /etc/request-key.d filesJeff Layton1-1/+1
Add a contrib directory, a set of sample /etc/request-key.d files and a README that explains what they're for. This version sets the path to the upcall programs based on the configure options. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-09autoconf: bump release to 5.2.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-09autoconf: set version to 5.2cifs-utils-5.2Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-09-23autoconf: bump version to 5.1.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-09-23autoconf: set version to 5.1cifs-utils-5.1Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-08-25autoconf: work around broken wbclient.h fileJeff Layton1-27/+32
Some versions of wbclient.h have function declarations with bool type args, but they don't include stdbool.h themselves. Make sure that we can deal with that by telling the autoconf test to include stdbool.h explicitly. In order to do that properly we need to move some of the standard header and type tests up in the file. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-08-25cifsacl: Add configure and make directives for cifsacl (try #2)Shirish Pargaonkar1-0/+17
Add configure directives for option cifsacl. The default action is to enable cifsacl option. cifsacl option is enabled or disabled in a similar way to cifs.idmap in the same function. In addition, for cifsacl, check for sys/xattr.h is done in the smae .m4 file. Add directives to build getcifsacl in Makefile. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-23autoconf: fix help message for --enable-cifsidmapJeff Layton1-1/+1
It currently says "no" is the default, but it should be "yes". Reported-by: Elias Pipping <pipping@lavabit.com> Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-07-08autoconf: bump release number to 5.0.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-06-01autoconf: bump release to 5.0cifs-utils-5.0Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-06-01cifs-utils: Create man pages for cifs.idmap program (try #2)Shirish Pargaonkar1-2/+5
Create man pages for program cifs.idmap Enable cifs.idmap config option by default. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-05-24cifs-utils: Create new binary cifs.idmap for sid to uid/gid mapping (try #4)Shirish Pargaonkar1-2/+15
Handle cifs.idmap type of key. Extract a SID string from the description and map it to either an uid or gid using winbind APIs. If that fails (e.g. because winbind is not installed/running or winbind returns an error), kernel assigns uid and gid (from mount superblock). Enable including winbind header files and idmapping code conditional to winbind devel rpms (header and library). An entry such as this create cifs.idmap * * /usr/sbin/cifs.idmap %k is needed in the file /etc/request-key.conf. [Note: Modified to not build new tool by default, and to fix up some whitespace munging] Modified-by: Jeff Layton <jlayton@redhat.com> Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-03-15autoconf: bump version to 4.9.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-03-04autoconf: bump release to 4.9cifs-utils-4.9Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-01-31autoconf: bump release to 4.8.2 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-01-21autoconf: bump release to 4.8.1cifs-utils-4.8.1Jeff Layton1-1/+1
The 4.8 release had mis-generated autoconf files (they didn't include the libcap-ng autoconf goop). 4.8.1 will have that fixed. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-01-15autoconf: bump release to 4.8cifs-utils-4.8Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-12-28cifs.upcall: use krb5_auth_con_set_req_cksumtype() and pass a GSSAPI ↵Stefan Metzmacher1-0/+1
checksum (bug #7890) Some closed source SMB servers doesn't support all checksum types, so we should try to match windows clients. This is almost the same logic which is used by Samba. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-12-09cifs-utils: rewrite hardcoded paths in manpagesJeff Layton1-0/+1
Currently the manpages (particularly cifs.upcall.8) have hardcoded paths in them that need to be manually adjusted. Replace those paths with @sbindir@ and add a makefile target that will use sed to replace those paths with the ones set by autoconf. Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-12-09cifs-utils: bump version number to 4.7.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-10-19autoconf: bump release to 4.7cifs-utils-4.7Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-08-24autoconf: add checks for clock_gettimeBjörn Jacke1-0/+10
2010-08-20cifs-utils: infrastructure for stashing passwords in keyringIgor Druzhinin1-2/+13
It is a userspace part of a new infrastructure for stashing passwords in kernel keyring per user basis. The patch adds the "cifscreds" utility for management keys with credentials. Assembling of the utility from the distribution is possible with --enable-cifscreds=yes option of configure script. Signed-off-by: Igor Druzhinin <jaxbrigs@gmail.com>
2010-08-04autoconf: bump version number to 4.6.1 for non-release buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-07-30autoconf: bump version to 4.6cifs-utils-4.6Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-07-27autoconf: bump version to 4.5.2Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-06-06cifs-utils: bump version number to 4.5.1Jeff Layton1-1/+1
...to distinguish interim builds from official releases. Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-05-21cifs-utils: bump version number to 4.5cifs-utils-4.5Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-05-02cifs-utils: bump version number to 4.4.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-04-28cifs-utils: bump version number to 4.4Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-04-12cifs: enable CAP_DAC_READ_SEARCH before chdir() and realpath() callsJeff Layton1-1/+1
It's possible that root won't have privileges to chdir or evaluate the paths without that capability. Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-04-09cifs-utils: bump version number to 4.3cifs-utils-4.3Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2010-04-09autoconf: remove explicit check for prctlJeff Layton1-3/+0
...it's already checked in AC_LIBCAP Signed-off-by: Jeff Layton <jlayton@samba.org>