This is CFS, Matt Blaze's Cryptographic File System. It provides
transparent encryption and decryption of selected directory trees.
It is implemented as a user-level NFS server and thus does not
require any kernel modifications.
For an overview of how to use it, read "${PREFIX}/share/doc/cfs/notes.ms"
and the manual pages. There is a paper describing CFS at:
https://www.scs.stanford.edu/nyu/02fa/lab/cfs.pdf
filesystems: add new category for file systems and related utilities
The filesystems category houses file systems and file system utilities.
It is added mainly to turn the sysutils/fusefs-* pseudo-category into
a proper one, but is also useful for the sundry of other file systems
related ports found in the tree.
Ports that seem like they belong there are moved to the new category.
Two ports, sysutils/fusefs-funionfs and sysutils/fusefs-fusepak are
not moved as they currently don't fetch and don't have TIMESTAMP set
in their distinfo, but that is required to be able to push a rename
of the port by the pre-receive hook.
Approved by: portmgr (rene)
Reviewed by: mat
Pull Request: https://github.com/freebsd/freebsd-ports/pull/302
PR: 281988
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/cfs: Website updated
When I first set up the repo with CFS in, I noted on the site that
it was deprecated at the time, and simply forgot to update the
description.
security/*: Deprecate and mark ports BROKEN that are dead upstream and/or
abandonware
security/afl - Migrate to security/afl++
security/amap - Abandoned upstream, last release 10+ years ago
security/amavis-stats - Upstream is dead and last release was back in 2005
security/arirang - Abandoned (website also refers to Ruby 1.9) and a 9+ year
old webserver security scanner isn't useful today
security/axTLS - Very outdated and abandoned, current version in tree was
released in 2013 and last by upstream in 2019
security/base - Broken with PHP 7+, forked here
https://github.com/NathanGibbs3/BASE/
security/bruteforceblocker - Abandonware, please consider using
security/sshguard
security/cfs - Deprecated upstream, reference:
https://www.bayofrum.net/cgi-bin/fossil/cfs/index
security/cisco-torch - Unfetchable, dead upstream
security/cp2fwb - Used with deprecated software Firewall Builder
security/dcetest - Targets deprecated protocol by Microsoft in favour of .NET
security/doscan - Abandonware, last release in 2014. Please consider using
security/masscan or sysutils/pnscan
security/find-zlib - Deprecated, no longer relevant
(Only the first 15 lines of the commit message are shown above )
Remove indefinite articles and trailing periods from COMMENT, plus
minor COMMENT typos and surrounding whitespace fixes. A few Makefiles
where not included as they contain Latin-1 characters that break
the Phabricator workflow. Categories P-S.
CR: D422
Approved by: portmgr (bapt)
Use explicit IP for localhost rather than DNS name; this causes ipv6 attempts
PR: ports/155788
Submitted by: System Administrator <root@naboo.vindaloo.com>
Pass flag to mount to disable lockd
PR: ports/137378
Submitted by: kib
security/cfs: Resurrect and maintain CFS.
The referenced security issues have been fixed in this version (1.5.0 beta), and
some small bugs have been found too, with many fixes from Debian's Gerrit Pape.
Obtained from: Debian (parts)
Security: CVE-2002-0351
Security: CVE-2006-3123
- After more research, mark FORBIDDEN -- vulnerable to buffer overflows.
- As per policy on security issues, shorten removal date to one month.
Security: CVE-2002-0351
Security: DSA-116-1
For ports maintained by ports@FreeBSD.org, remove names and/or
e-mail addresses from the pkg-descr file that could reasonably
be mistaken for maintainer contact information in order to avoid
confusion on the part of users looking for support. As a pleasant
side effect this also avoids confusion and/or frustration for people
who are no longer maintaining those ports.
- convert cfsd.sh to rcNG
- add a CFS bootstrap directory to the port (${PREFIX}/cfsd-bootstrap)
- mount that CFS bootstrap directory in cfsd.sh (default mountpoint is /crypt,
configurable in /etc/rc.conf)
- explain how to quickly setup cfsd in pkg-message
- do display pkg-message
- while here, use USE_RC_SUBR
PR: ports/18800
Submitted by: Louis Mamakos <louie@TransSys.COM>, myself
Approved by: green (maintainer)
Revamp cfssh(1) so that it creates the attach points randomly again.
It used $RANDOM when it was a ksh script, but here it had always
been broken because ash (/bin/sh) doesn't have it.
Also, make the cfssh manpage refer to itself as cfssh instead of ssh.
Submitted by: Martin Kammerhofer <dada@sbox.tugraz.at>
PR: 65620
Previously, cfsd would screw up if you used 8-bit filenames. Fix the
checksum mechanism for pathnames so that it works for those paths.
Submitted by: Olof Samuelsson <olof@s8n.pp.se>
PR: 35353
Notify users of security/cfs that rpcbind may need -L to accept
connections to register cfs with it.
Determined by: Brad Forschinger <freebsd@bnjf.id.au>
Strategically change a couple malloc() calls to calloc() calls so that every
request doesn't return NFSERR_STALE. This CFS bug brought to light by the
letters p, h, and k :)
