me
/
guix
Archived
1
0
Fork 0
Commit Graph

57 Commits (ddd455c0dd5a527f3c7e94b8b9056155facb37e6)

Author SHA1 Message Date
Felix Lechner d89247150f
gnu: heimdal: Drop obsolete and insecure user tools.
According to messages from the Heimdal maintainers Brian May and Nico
Williams, no one should be using their version of 'su' anymore. It was deleted
from the development branch five years ago [1] and is only being shipped
because the 7.8.0 is based on an older, stable branch.

[1] 8a77f45aff

Following the directions from the maintainers, this commit drops all
executables built from the ./appl folder via deletion of that SUBDIR from
the top-level Makefile.am.

Unfortunately, the heimdal-discuss mailing list does not appear to have a
public archive. The relevant SMTP Message-Id was:

    <MDAEMON-F202305111940.AA401569md5001000003030@sequoia-grove.ad.secure-endpoints.com>

* gnu/packages/kerberos.scm (heimdal): Drop obsolete and insecure user tools.

Signed-off-by: Josselin Poiret <dev@jpoiret.xyz>
2023-06-04 10:33:58 +02:00
Felix Lechner 94879ff743
gnu: heimdal: Run autoreconf.
* gnu/packages/kerberos.scm (heimdal): Run autoreconf.

Signed-off-by: Josselin Poiret <dev@jpoiret.xyz>
2023-06-04 10:33:57 +02:00
Maxim Cournoyer 3bacd3c76a
Merge branch 'master' into core-updates.
Conflicts:
	gnu/local.mk
	gnu/packages/build-tools.scm
	gnu/packages/certs.scm
	gnu/packages/check.scm
	gnu/packages/compression.scm
	gnu/packages/cups.scm
	gnu/packages/fontutils.scm
	gnu/packages/gnuzilla.scm
	gnu/packages/guile.scm
	gnu/packages/ibus.scm
	gnu/packages/image-processing.scm
	gnu/packages/linux.scm
	gnu/packages/music.scm
	gnu/packages/nss.scm
	gnu/packages/pdf.scm
	gnu/packages/python-xyz.scm
	gnu/packages/qt.scm
	gnu/packages/ruby.scm
	gnu/packages/shells.scm
	gnu/packages/tex.scm
	gnu/packages/video.scm
	gnu/packages/vulkan.scm
	gnu/packages/web.scm
	gnu/packages/webkit.scm
	gnu/packages/wm.scm
2023-04-14 17:15:08 -04:00
Felix Lechner 5480ba2491
gnu: heimdal: Enable OpenLDAP support.
* gnu/packages/kerberos.scm (heimdal)
[native-inputs]: Add bison, flex and pkg-config.
[inputs]: Remove mit-krb5.  Add libcap-ng and openldap.

Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
2023-04-11 11:40:16 -04:00
Felix Lechner 691f17a8cc
gnu: heimdal: Apply patch to fix CVE-2022-45142.
Several recent Heimdal releases are affected by the serious vulnerability
CVE-2022-45142, which NIST scored as "7.5 HIGH". [1]

At the time of writing, the upstream developers had not yet cut any releases
post-7.8.0, which is why the patch is being applied here.

The patch was extracted from Helmut Grohne's public vulnerability
disclosure. [2]

[1] https://nvd.nist.gov/vuln/detail/CVE-2022-45142
[2] https://www.openwall.com/lists/oss-security/2023/02/08/1

* gnu/packages/patches/heimdal-CVE-2022-45142.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/kerberos.scm (heimdal)[source]: Apply it.

Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
2023-04-11 11:39:53 -04:00
Felix Lechner 789554cb76
gnu: heimdal: Update to 7.8.0 [fixes CVE-2022-44640].
* gnu/packages/kerberos.scm (heimdal): Update to 7.8.0.
[source]: Adjust date in snippet.
[native-inputs]: Add python.  Remove perl.

Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
2023-04-11 11:39:49 -04:00
Marius Bakke 77eb3008e3
Merge branch 'staging' into core-updates 2022-08-11 23:36:10 +02:00
Efraim Flashner 6757ee9d2b
gnu: shishi: Use G-expressions.
* gnu/packages/kerberos.scm (shishi)[arguments]: Convert to list of
G-Expressions.
2022-08-07 16:20:38 +03:00
Efraim Flashner e3e33b5251
gnu: shishi: Build with newer linux-pam.
* gnu/packages/kerberos.scm (shishi)[inputs]: Replace linux-pam-1.2 with
linux-pam.
* gnu/packages/linux.scm (linux-pam-1.2): Remove variable.
2022-08-07 16:17:23 +03:00
Efraim Flashner 544ff0b6c2
gnu: shishi: Update to 1.0.3.
* gnu/packages/kerberos.scm (shishi): Update to 1.0.3.
[source]: Remove patch.
[arguments]: Remove configure flag overriding libgcrypt detection.
* gnu/packages/patches/shishi-fix-libgcrypt-detection.patch: Remove file.
* gnu/local.mk (dist_patch_DATA): Remove it.
2022-08-07 16:16:42 +03:00
Marius Bakke b148826f17
gnu: mit-krb5: Remove label usage.
* gnu/packages/kerberos.scm (mit-krb5)[arguments]: Use SEARCH-INPUT-FILE.
2022-06-26 12:06:30 +02:00
Marius Bakke a7117736e0
gnu: mit-krb5: Update to 1.20.
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.20.
2022-06-26 12:06:30 +02:00
Maxim Cournoyer cbb6f14ab3
gnu: heimdal: Unify phases, addressing TODO.
* gnu/packages/kerberos.scm (heimdal)[phases]: Unconditionally use the
%current-target-system branch.
2022-01-10 11:44:32 -05:00
Ludovic Courtès 8394619bac
gnu: Simplify package inputs.
This commit was obtained by running:

  ./pre-inst-env guix style

without any additional argument.
2021-12-13 17:48:25 +01:00
Maxim Cournoyer 0d56844268
gnu: heimdal: Fix build.
* gnu/packages/kerberos.scm (heimdal): Remove trailing #t.
[inputs]: Add mit-krb5.  Add bash-minimal inconditionally.
[native-inputs]: Add perl inconditionally.
2021-11-11 12:18:16 -05:00
Maxim Cournoyer ee394937bc
gnu: mit-krb5: Absorb 1.19.2 graft.
* gnu/packages/kerberos.scm (mit-krb5)[replacement]: Remove.
[source]: Update to 1.19.2.
(mit-krb5-1.19.2): Delete variable.
2021-11-11 12:18:16 -05:00
Maxime Devos 8bf0c60086
gnu: heimdal: Use libcom_err from input when cross-compiling.
* gnu/packages/kerberos.scm
  (heimdal)[arguments]<#:phases>{pre-configure}: Consider ${krb_cv_com_err}
  to be 'yes' when cross-compiling.
2021-09-20 11:15:07 +00:00
Maxime Devos 784865adfe
gnu: heimdal: Find tools when cross-compiling.
* gnu/packages/kerberos.scm
  (heimdal)[arguments]<#:configure-flags>: Set --with-cross-tools.
  (heimdal)[arguments]<#:phases>{pre-configure}: Override
  ac_cv_PROG_COMPILE_ET.
2021-09-20 11:15:07 +00:00
Maxime Devos 0bff68e44d
gnu: heimdal: Use the cross-compiled bash in "su".
* gnu/packages/kerberos.scm
  (heimdal)[arguments]<#:phases>{pre-configure}: Replace _PATH_BSHELL
  with the cross-compiled bin/sh when cross-compiling.
2021-09-20 11:15:07 +00:00
Maxime Devos 527455be35
gnu: heimdal: Refer to cross-compiled bash.
* gnu/packages/kerberos.scm
  (heimdal)[arguments]<#:phases>{pre-configure}: Let "appl/afsutil/pagsh.c"
  refer to the cross-compiled bash instead of the native bash when
  cross-compiling.
2021-09-20 11:15:07 +00:00
Maxime Devos f706689a8d
gnu: heimdal: Fix linking error when cross-compiling.
* gnu/packages/kerberos.scm (heimdal)[arguments]<#:configure-flags>:
  Set ac_cv_func_getpwnam_r_posix=yes when cross-compiling.
2021-09-20 11:15:06 +00:00
Maxime Devos de8ea8e827
gnu: heimdal: Fix inputs when cross-compiling.
* gnu/packages/kerberos.scm
  (heimdal)[inputs]: Add "bash-minimal" when cross-compiling.
  (heimdal)[native-inputs]: Add 'perl' when cross-compiling.
2021-09-20 11:15:06 +00:00
Marius Bakke ffa01e6885
gnu: mit-krb5: Replace with 1.19.2 [fixes CVE-2021-36222].
This is an adaptation of fdd2f57359, for the 1.19 branch of mit-krb5.

* gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field.
(mit-krb5-1.19.2): New variable.
2021-08-12 00:23:01 +02:00
Marius Bakke 0689e1abed
gnu: mit-krb5: Update to 1.19.1.
* gnu/packages/patches/mit-krb5-hurd.patch: Adjust for 1.19.1.
* gnu/packages/patches/mit-krb5-qualify-short-hostnames.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.19.1.
[source](patches): Remove obsolete patch.
[arguments]: Remove trailing #t's and one obsolete subtitution.
2021-05-09 23:43:31 +02:00
Maxim Cournoyer b843f62aad
gnu: mit-krb5: Enable TLS support.
Also enable more tests.

* gnu/packages/kerberos.scm (mit-krb5)[native-inputs]: Add tcl.
[inputs]: Add openssl.
2020-10-08 21:25:20 -04:00
Maxim Cournoyer cb6d4aff44
gnu: heimdal: Update to 7.7.0.
And fix the test suite failures as a side effect.

* gnu/packages/kerberos.scm (heimdal): Update to 7.7.0.
2020-05-17 15:16:55 +02:00
Jan Nieuwenhuizen 770ea94c9c
gnu: mit-krb5: Supprt for the Hurd.
* gnu/packages/patches/mit-krb5-hurd.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/kerberos.scm (mit-krb5): Use it.
2020-03-26 12:59:35 +01:00
Marius Bakke e59d958a9c
gnu: mit-krb5: Fix segfault in gsasl test suite.
* gnu/packages/patches/mit-krb5-qualify-short-hostnames.patch: New file.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/kerberos.scm (mit-krb5)[source](patches): New field.
2020-03-14 12:02:53 +01:00
Marius Bakke 50b99c90c8
Merge branch 'master' into core-updates 2020-03-10 20:50:02 +01:00
Tobias Geerinckx-Rice a0087cf58d
gnu: mit-krb5: Use HTTPS home page.
* gnu/packages/kerberos.scm (mit-krb5)[home-page]: Use HTTPS.
2020-03-09 16:01:18 +01:00
Marius Bakke 32d3f81a49
gnu: mit-krb5: Update to 1.18.
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.18.
2020-02-15 22:02:56 +01:00
Ricardo Wurmus 4798554038
gnu: mit-krb5: Set localstatedir to /var.
* gnu/packages/kerberos.scm (mit-krb5)[arguments]: Set localstatedir.
2020-01-17 12:57:32 +01:00
Marius Bakke 972a3e0b1e
gnu: mit-krb5: Update to 1.17.1.
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.17.1.
2020-01-08 21:56:03 +01:00
Mathieu Othacehe b5ebab8023
gnu: mit-krb5: Fix cross-compilation.
* gnu/packages/kerberos.scm (mit-krb5)[arguments]: Disable tests when
cross-compiling. Add cross-compilation specific configure-flags and
make-flags. Search for perl in native-inputs or inputs.
2019-09-24 08:12:56 +02:00
Danny Milosavljevic 2ca3fdc2db
gnu: shishi: Make shishi keys and database administrator-modifiable.
Fixes <https://bugs.gnu.org/30109>.

* gnu/packages/kerberos.scm (shishi)[arguments]<#:configure-flags>:
Add --with-key-dir, --with-db-dir.
<#:phases>[disable-automatic-key-generation]: New phase.
2019-04-20 17:17:56 +02:00
Marius Bakke 596c54c967
gnu: mit-krb5: Update to 1.17.
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.17.
2019-02-07 22:10:17 +01:00
Ricardo Wurmus 255d1bbe77
gnu: Move dbm databases to new module.
* gnu/packages/databases.scm (gdbm, bdb, bdb-5.3): Move from here...
* gnu/packages/dbm.scm: ...to this new module.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* gnu/packages/audio.scm,
gnu/packages/avahi.scm,
gnu/packages/backup.scm,
gnu/packages/cobol.scm,
gnu/packages/cyrus-sasl.scm,
gnu/packages/databases.scm,
gnu/packages/finance.scm,
gnu/packages/game-development.scm,
gnu/packages/gnome.scm,
gnu/packages/guile.scm,
gnu/packages/ibus.scm,
gnu/packages/kerberos.scm,
gnu/packages/linux.scm,
gnu/packages/mail.scm,
gnu/packages/man.scm,
gnu/packages/nvi.scm,
gnu/packages/openldap.scm,
gnu/packages/package-management.scm,
gnu/packages/php.scm,
gnu/packages/pulseaudio.scm,
gnu/packages/python.scm,
gnu/packages/rdf.scm,
gnu/packages/ruby.scm,
gnu/packages/sawfish.scm: Update module references.
2019-01-16 16:08:22 +01:00
Ricardo Wurmus cd0322a3ef
gnu: Move sqlite to separate module.
* gnu/packages/databases.scm (sqlite, sqlite-3.26.0, sqlite-with-fts5,
sqlite-with-column-metadata): Move variables from here...
* gnu/packages/sqlite.scm: ...to this new module.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* gnu/packages/apl.scm,
gnu/packages/bittorrent.scm,
gnu/packages/calendar.scm,
gnu/packages/code.scm,
gnu/packages/crypto.scm,
gnu/packages/databases.scm,
gnu/packages/dc.scm,
gnu/packages/disk.scm,
gnu/packages/ebook.scm,
gnu/packages/education.scm,
gnu/packages/emacs.scm,
gnu/packages/emulators.scm,
gnu/packages/file-systems.scm,
gnu/packages/freedesktop.scm,
gnu/packages/ftp.scm,
gnu/packages/games.scm,
gnu/packages/geo.scm,
gnu/packages/gnome.scm,
gnu/packages/gnunet.scm,
gnu/packages/gnupg.scm,
gnu/packages/gnuzilla.scm,
gnu/packages/gps.scm,
gnu/packages/guile.scm,
gnu/packages/ibus.scm,
gnu/packages/kerberos.scm,
gnu/packages/kodi.scm,
gnu/packages/lisp.scm,
gnu/packages/mail.scm,
gnu/packages/messaging.scm,
gnu/packages/mpd.scm,
gnu/packages/music.scm,
gnu/packages/networking.scm,
gnu/packages/nfs.scm,
gnu/packages/ocaml.scm,
gnu/packages/package-management.scm,
gnu/packages/pdf.scm,
gnu/packages/photo.scm,
gnu/packages/php.scm,
gnu/packages/python.scm,
gnu/packages/qt.scm,
gnu/packages/ruby.scm,
gnu/packages/scheme.scm,
gnu/packages/sync.scm,
gnu/packages/syndication.scm,
gnu/packages/version-control.scm,
gnu/packages/video.scm,
gnu/packages/web-browsers.scm,
gnu/packages/webkit.scm: Adjust module references.
2019-01-16 16:08:22 +01:00
Marius Bakke a44426ee01
gnu: shishi: Don't build static library.
* gnu/packages/kerberos.scm (shishi)[arguments]: Add "--disable-static" to
  #:configure-flags.
2018-07-30 16:59:33 +02:00
Ricardo Wurmus f1728d4346
Merge branch 'master' into core-updates 2018-06-29 22:51:23 +02:00
Tobias Geerinckx-Rice 5ccd6e2b53
gnu: mit-krb5: Update to 1.16.1.
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.16.1.
2018-06-12 15:06:19 +02:00
Alex Vong 09b21b77cc
gnu: heimdal: Update to 7.5.0.
* gnu/packages/kerberos.scm (heimdal): Update to 7.5.0.
[source]: Update source uri.  Remove patches.
[arguments]: Adjust #:configure-flags and build phases accordingly.
[inputs]: Add sqlite.
[native-inputs]: Add texinfo and unzip.
* gnu/packages/patches/heimdal-CVE-2017-6594.patch,
  gnu/packages/patches/heimdal-CVE-2017-11103.patch: Remove files.
* gnu/local.mk (dist_patch_DATA): Remove them.

Co-authored-by: 宋文武 <iyzsong@member.fsf.org>
2018-06-10 16:00:45 +08:00
Mark H Weaver 6cbee49d66
gnu: All snippets report errors using exceptions, else return #t.
* gnu/packages/admin.scm, gnu/packages/algebra.scm, gnu/packages/audio.scm,
gnu/packages/backup.scm, gnu/packages/base.scm,
gnu/packages/bioinformatics.scm, gnu/packages/cdrom.scm,
gnu/packages/chez.scm, gnu/packages/code.scm, gnu/packages/compression.scm,
gnu/packages/cross-base.scm, gnu/packages/crypto.scm, gnu/packages/cups.scm,
gnu/packages/databases.scm, gnu/packages/dns.scm, gnu/packages/emacs.scm,
gnu/packages/emulators.scm, gnu/packages/engineering.scm,
gnu/packages/enlightenment.scm, gnu/packages/fpga.scm,
gnu/packages/freedesktop.scm, gnu/packages/ftp.scm, gnu/packages/games.scm,
gnu/packages/gcc.scm, gnu/packages/geo.scm, gnu/packages/ghostscript.scm,
gnu/packages/gl.scm, gnu/packages/glib.scm, gnu/packages/gnome.scm,
gnu/packages/gnuzilla.scm, gnu/packages/graphics.scm, gnu/packages/gtk.scm,
gnu/packages/guile.scm, gnu/packages/irc.scm, gnu/packages/java.scm,
gnu/packages/kerberos.scm, gnu/packages/linux.scm, gnu/packages/lisp.scm,
gnu/packages/lxde.scm, gnu/packages/machine-learning.scm,
gnu/packages/mail.scm, gnu/packages/maths.scm, gnu/packages/messaging.scm,
gnu/packages/monitoring.scm, gnu/packages/mp3.scm, gnu/packages/music.scm,
gnu/packages/netpbm.scm, gnu/packages/networking.scm, gnu/packages/node.scm,
gnu/packages/nvi.scm, gnu/packages/ocaml.scm, gnu/packages/pdf.scm,
gnu/packages/perl.scm, gnu/packages/php.scm, gnu/packages/plotutils.scm,
gnu/packages/pretty-print.scm, gnu/packages/profiling.scm,
gnu/packages/pulseaudio.scm, gnu/packages/python-crypto.scm,
gnu/packages/python.scm, gnu/packages/qt.scm, gnu/packages/robotics.scm,
gnu/packages/sawfish.scm, gnu/packages/scanner.scm, gnu/packages/scheme.scm,
gnu/packages/scribus.scm, gnu/packages/sdl.scm,
gnu/packages/serialization.scm, gnu/packages/shells.scm,
gnu/packages/slang.scm, gnu/packages/smalltalk.scm, gnu/packages/ssh.scm,
gnu/packages/sync.scm, gnu/packages/syncthing.scm, gnu/packages/tbb.scm,
gnu/packages/terminals.scm, gnu/packages/texinfo.scm,
gnu/packages/text-editors.scm, gnu/packages/textutils.scm,
gnu/packages/tls.scm, gnu/packages/unrtf.scm,
gnu/packages/version-control.scm, gnu/packages/video.scm,
gnu/packages/vpn.scm, gnu/packages/web.scm, gnu/packages/wm.scm,
gnu/packages/wxwidgets.scm, gnu/packages/xdisorg.scm, gnu/packages/xorg.scm:
In all snippets, report errors using exceptions, or else return #t.
2018-03-16 09:08:31 -04:00
Marius Bakke 6ac46bfa41
gnu: mit-krb5: Update to 1.16.
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.16.
[source](uri): Add kerberos.org mirror.  Use HTTPS on web.mit.edu.
2017-12-13 08:01:52 +01:00
Marius Bakke cbbd0148e8
gnu: mit-krb5: Remove graft for 1.15.2.
* gnu/packages/kerberos.scm (mit-krb5): Update to 1.15.2.
[replacement]: Remove field.
(mit-krb5-1.15.2): Remove variable.
2017-10-22 20:18:22 +02:00
Leo Famulari 719f353405
gnu: mit-krb5: Replace with 1.15.2 [fixes CVE-2017-{11368,11462}].
* gnu/packages/kerberos.scm (mit-krb5)[replacement]: New field.
(mit-krb5-1.15.2): New variable.
2017-10-09 13:30:01 -04:00
Leo Famulari 6c1a317e29
Merge branch 'master' into core-updates 2017-07-23 03:42:12 -04:00
Alex Vong 81c35029d4
gnu: heimdal: Fix CVE-2017-{6594,11103}.
* gnu/packages/patches/heimdal-CVE-2017-6594.patch,
gnu/packages/patches/heimdal-CVE-2017-11103.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/kerberos.scm (heimdal)[source]: Use them.
2017-07-20 15:33:53 -04:00
Tobias Geerinckx-Rice 5e57867491
gnu: mit-krb5: Add ‘cpe-name’.
* gnu/packages/kerberos.scm (mit-krb5)[properties]: New field.
2017-07-14 09:47:34 +02:00
Leo Famulari 1abc08a8f4
gnu: shishi: Build with latest libgcrypt.
* gnu/packages/patches/shishi-fix-libgcrypt-detection.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/kerberos.scm (shishi)[source]: Use it.
[inputs]: Use libgcrypt instead of libgcrypt-1.5.
[arguments]: Set 'ac_cv_libgcrypt=yes' in #:configure-flags.
* gnu/packages/gnupg.scm (libgcrypt-1.5): Remove variable.
2017-06-30 02:32:57 -04:00