blob: 695633f76dd553016537cad85e821486156a12f1 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
|
# New ports collection makefile for: cgiwrap
# Date created: 30 July 1998
# Whom: Brent J. Nordquist <bjn@visi.com>
#
# $FreeBSD$
#
PORTNAME= cgiwrap
PORTVERSION= 4.0
PORTREVISION= 2
CATEGORIES= www security
MASTER_SITES= ${MASTER_SITE_SOURCEFORGE}
MASTER_SITE_SUBDIR= ${PORTNAME}
MAINTAINER= freebsd@jdc.parodius.com
COMMENT= Securely execute Web CGI scripts
WRKSRC= ${WRKDIR}/${PORTNAME}-${PORTVERSION}
PKGMESSAGE= ${WRKDIR}/pkg-message
OPTIONS= CGI_OWNER "Check CGI file owner" on \
CGI_GROUP "Check CGI file group" on \
CGI_SETUID "Check CGI file setuid permissions" on \
CGI_SETGID "Check CGI file setgid permissions" on \
CGI_GROUP_WRITABLE "Check CGI g+w file permissions" on \
CGI_WORLD_WRITABLE "Check CGI o+w file permissions" on \
USE_SCRIPT_URL "Use REDIRECT_URL to build SCRIPT_NAME" off \
USE_SCRIPT_URL "Use SCRIPT_URL to build SCRIPT_NAME" off \
NPH "Enable nph binaries" off \
DEBUG "Enable cgiwrapd binaries" off
##
# INSTALL_DIR
#
# Specify the location of the cgiwrap binaries. This is the directory
# where the cgiwrap binaries get installed in.
#
INSTALL_DIR?= ${PREFIX}/www/cgi-bin
##
# USER_CGIDIR
#
# Specify the location of the CGI directory ~user accounts will store
# CGIs in. This is "home directory relative". Alternatives include
# "www/cgi-bin" and "cgi-bin".
#
USER_CGIDIR?= public_html/cgi-bin
##
# ALLOW_FILE
# DENY_FILE
#
# Full path to the allow and deny files for CGI access. These files
# contain the username of the UNIX account who will be allowed/denied
# using the cgiwrap binary.
#
ALLOW_FILE?= ${PREFIX}/etc/${PORTNAME}.allow
DENY_FILE?= ${PREFIX}/etc/${PORTNAME}.deny
GNU_CONFIGURE= yes
CONFIGURE_ARGS= --with-httpd-user=${WWWOWN} \
--with-install-group=${WWWGRP} \
--with-install-dir=${INSTALL_DIR} \
--with-cgi-dir=${USER_CGIDIR} \
--with-allow-file=${ALLOW_FILE} \
--with-deny-file=${DENY_FILE} \
--with-check-shell \
--with-wall
.include <bsd.port.pre.mk>
##
# LOG_FILE
#
# Enables cgiwrap logging (when a user called cgiwrap, its arguments,
# and who ran it). Specify the full path to the logfile.
#
.if defined(LOG_FILE)
CONFIGURE_ARGS+= --with-logging-file=${LOG_FILE}
.else
CONFIGURE_ARGS+= --without-logging-file
.endif
.if !defined(WITH_CGI_OWNER)
CONFIGURE_ARGS+= --without-check-owner
.endif
.if !defined(WITH_CGI_GROUP)
CONFIGURE_ARGS+= --without-check-group
.endif
.if !defined(WITH_CGI_SETUID)
CONFIGURE_ARGS+= --without-check-setuid
.endif
.if !defined(WITH_CGI_SETGID)
CONFIGURE_ARGS+= --without-check-setgid
.endif
.if !defined(WITH_CGI_GROUP_WRITABLE)
CONFIGURE_ARGS+= --without-check-group-writable
.endif
.if !defined(WITH_CGI_WORLD_WRITABLE)
CONFIGURE_ARGS+= --without-check-world-writable
.endif
.if defined(WITH_USE_REDIRECT_URL)
CONFIGURE_ARGS+= --with-use-redirect-url
.endif
.if defined(WITH_USE_SCRIPT_URL)
CONFIGURE_ARGS+= --with-use-script-url
.endif
.if !defined(WITH_NPH)
PLIST_SUB+= NPHFLAG="@comment "
CONFIGURE_ARGS+= --without-nph
.else
PLIST_SUB+= NPHFLAG=
.endif
.if defined(WITH_DEBUG)
PLIST_SUB+= DEBUGFLAG=
CONFIGURE_ARGS+= --with-cgiwrapd
.else
PLIST_SUB+= DEBUGFLAG="@comment "
.endif
.if !defined(NOPORTDOCS)
PORTDOCS= accesscontrol.html afs.html changes.html \
chroot.html comments.html download.html faq.html \
index.html install.html intro.html maillist.html \
notes.html pubs.html quickref.html setup.html \
thanks.html todo.html tricks.html y2k.html
.endif
pre-install:
@${MKDIR} ${INSTALL_DIR}
post-install:
@${STRIP_CMD} ${INSTALL_DIR}/cgiwrap
@${CHMOD} 4550 ${INSTALL_DIR}/cgiwrap
.if defined(WITH_DEBUG)
@${STRIP_CMD} ${INSTALL_DIR}/cgiwrapd
@${CHMOD} 4550 ${INSTALL_DIR}/cgiwrapd
.if defined(WITH_NPH)
@${STRIP_CMD} ${INSTALL_DIR}/nph-cgiwrapd
@${CHMOD} 4550 ${INSTALL_DIR}/nph-cgiwrapd
.endif
.endif
.if !defined(NOPORTDOCS)
@${MKDIR} ${DOCSDIR}
.for f in ${PORTDOCS}
@${INSTALL_DATA} ${WRKSRC}/htdocs/${f} ${DOCSDIR}
.endfor
.endif
@${SED} -e's,%%INSTALL_DIR%%,${INSTALL_DIR},g' \
-e's,%%ALLOW_FILE%%,${ALLOW_FILE},g' \
-e's,%%DENY_FILE%%,${DENY_FILE},g' \
${MASTERDIR}/pkg-message > ${PKGMESSAGE}
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>
|
