[Excerpted from the README:] "scponly" is an alternative "shell" (of sorts)
for system administrators who would like to provide access to remote users to
both read and write local files without providing any remote execution
privileges. Functionally, it is best described as a wrapper to the
tried-and-true ssh suite.
scponly validates remote requests by examining the third argument passed to the
shell upon login. (The first argument is the shell itself, and the second is
-c.) The only commands allowed are "scp", "sftp-server" and "ls". Arguments
to these commands are passed along unmolested.
===> The following configuration options are available for scponly-4.8.20110526_8:
CHROOT=off: chroot(8) functionality
DEFAULT_CHDIR=off: Chdir(2) by default
DOCS=on: Build and/or install documentation
GFTP=off: gftp support
RSYNC=off: rsync support
SCP=off: vanilla scp support
SUBVERSION=off: Subversion version control support
SVNSERVE=off: Subversion support for svn+ssh://
UNISON=off: Unisson support
WILDCARDS=on: Wildcards processing
WINSCP=off: WinSCP support
===> Use 'make config' to modify these settings
*/*: Properly depend on Subversion LTS or latest with WITH_SUBVERSION_VER
When LTS version of Subversion is set in make.conf (WITH_SUBVERSION_VER)
depending ports will still depend on latest version (devel/subversion)
instead of LTS one (devel/subversion-lts). This will cause dependency
conflicts when packages are distributed with Poudriere, namely pkg(8)
will report them and fail to install.
Make all affected ports properly depend on the right port based on the
value set in WITH_SUBVERSION_VER.
Approved by: jrm (mentor), otis (mentor), lev (maintainer timeout)
Differential Revision: https://reviews.freebsd.org/D43864
*/*: Restore GNU_CONFIGURE on my ports
I made a mistake and changed these ports to HAS_CONFIGURE when working
on MANPREFIX sanitization. Restore proper macro usage and set
GNU_CONFIGURE_MANPREFIX properly to keep manpages installed under
${PREFIX}/share.
Reported by: danfe
Sponsored by: Rubicon Communications, LLC ("Netgate")
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
shells/scponly: fix segfault on FreeBSD 11
Patch introduced in r493861 to fix segfault on FreeBSD 12+ broke it on
FreeBSD 11. This new version fixes it on both versions.
While here, pet portlint a bit moving USES to proper place and removing
RUN_DEPENDS := BUILD_DEPENDS adding individual run depends where it's
necessary.
PR: 235810
Submitted by: Stewart Morgan <stewart.morgan@gmail.com>
Sponsored by: Rubicon Communications, LLC (Netgate)
shells/scponly: fix segfault on FreeBSD 12 and newer
On FreeBSD 12+ basename(3) writes to its argument, which in scponly isn't a
writable string, so it segfaults. This patch works around it.
PR: 235810
Submitted by: fullermd@over-yonder.net
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
multiple: avoid RUN_DEPENDS=${BUILD_DEPENDS} anti-pattern
The ports infrastructure may insert additional content into the
BUILD_DEPENDS variable which is not supposed to be a run depend.
Approved by: portmgr (bapt)
Add an @shell keyword to handle adding and remove a shell path in /etc/shell
Bump port revision of all ports that were doing it wrong prior to the keyword
CR: D208
Reviewed by: antoine
With hat: portmgr
- Work around what I believe is a bug in how binary existence in the base
system are tracked. Without this "fix", /usr/bin/sftp is not recongnized
to negate the build dependency of openssh-portable. [1]
- Bump PORTREVISION.
Discussed with: bdrewery [1]
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
-Add both versions of each configure flag (--enable-x/--disable-x) for safety
-Update to May 26, 2011 snapshot:
Add support for OpenSSH's sftp-server umask option.
Remove inline references to satisify certain compilers
Remove the now unnecessary sftp-logging compatibility mode.
When getopt_long is not available, like on AIX, use bundled NetBSD
getopt_long.
Update the SECURITY document to include a reference to /etc/popt and \
~/.popt as they relate to rsync.
Fix for rsync-3.0 which now uses a short -e option, with an optional
argument as a server side option indicating protocol compatibility.
Fix scponly crash on Solaris
Fix detection and inclusion of getopt on certain platforms
Document risks associated with popt reading /etc/popt and ~/.popt
Document getopt requirement (when certain configure options are enabled)
- cleanup redundant BUILD_DEPENDS+= [1]
PR: ports/157804
Submitted by: Rob Farmer <rfarmer _at_ predatorlabs.net> (maintainer), ohauer
[1]
Approved by: maintainer
-Patch SECURITY doc to include note about bypassing rsync argument checking with
popt (from upstream) and tell people to read it
-Drop long comment describing knobs - it just duplicates OPTIONS
-For SCPONLY_DEFAULT_CHDIR, print a note about setting it. I'm not sure if
post-patch is the best place for this, though?
-Drop dead site and just use Sourceforge
-Use the PORTDOCS variable
-Install some useful docs and drop useless one (TODO)
-Drop pre-everything message about defaults changing; that was 5 years ago
-LOCALBASE vs. PREFIX correction
-Add post-install messages to the plist so package users see them too
PR: ports/153115
Submitted by: Rob Farmer <rfarmer@predatorlabs.net> (maintainer)
- Fix support for rsync 3.0
Rsync 3 needs the "-e" option, which is blocked without this patch by scponly
Patch pulled from upstream CVS, which states a full release will come soon:
http://lists.ccs.neu.edu/pipermail/scponly/2010-November/002170.html
Reported by: Frank Bartels <knarf _at_ knarf.de>
PR: 152869
Submitted by: Rob Farmer <rfarmer _at_ predatorlabs.net> (maintainer)
Make notes for setting up a chroot cage a bit more precise.
PR: 144059
Submitted by: Michael Meelis <m.meelis@easybow.com>
Patch by: Rob Farmer <rfarmer@predatorlabs.net> (maintainer)
Feature safe: yes
- Fix rc.d script for chroot functionality (thanks to Doug Barton for help with
this)
- Switch an empty #elif to #else to please GCC 4.4
- Submitter is now MAINTAINER
PR: ports/142764
Submitted by: Rob Farmer <rfarmer@predatorlabs.net>
For ports maintained by ports@FreeBSD.org, remove names and/or
e-mail addresses from the pkg-descr file that could reasonably
be mistaken for maintainer contact information in order to avoid
confusion on the part of users looking for support. As a pleasant
side effect this also avoids confusion and/or frustration for people
who are no longer maintaining those ports.
scponlyc sftp support doesn't work without minimal devfs in chroot dir
I'm finding that recently-created scponlyc chroots do not
provide a sufficient environment for /usr/libexec/sftp-server
to run. The sftp client symptom is just:
$ sftp user@www
Connecting to www...
Password:
Connection closed
$
The cause appears to be that recent versions of
/usr/libexec/sftp-server will complain about of lack of
access to /dev/null and exit, resulting in the closed
(Only the first 15 lines of the commit message are shown above )
shells/scponly cannot work with rsync
From: Hideyuki KURASHINA <rushani@FreeBSD.org>
I've confirmed the rsync compatibility in scponly 4.4 is broken.
Unfortunately, at this moment I don't have enough time to
test the patch you showed us...
PR: ports/96295
Submitted by: UEDA Hiroyuki <ueda@drweb.jp>
- Update to 4.4
o fixes that hopefully improve the optarg compilation situation
o UNISON $HOME environment fix
o fixes to setup_chroot.sh.in
PR: ports/92587
Submitted by: rushani (maintainer)
[Maintainer update] shells/scponly: Update to 4.3.
Update to 4.3. Highlights in this release,
- Compatibility of WinSCP in SCP mode improved.
- The scponlyc (chroot'ed version of scponly) works again.
PR: ports/91039
Submitted by: Hideyuki KURASHINA <rushani@FreeBSD.org>
[Maintainer update] shells/scponly: Fix WinSCP compativility and etc
1. Fix WinSCP compativility in SCP mode. PORTREVISION bumped.
2. Add sourceforge mirrors to ${MASTER_SITES}.
3. From scponly 4.2, scp & WinSCP compatibilities are not enabled
by default. Notice this at pre-everything target as well as
UPDATING.
PR: ports/90983
Submitted by: Hideyuki KURASHINA <rushani@FreeBSD.org>
scponly dist includes a script which setup chroot cage, which
depends a location of run-time link-editor. Since FreeBSD has
dynamic root capability from __FreeBSD_version == 501105, we
should add new location to unbreak the script.
PR: 59511
Submintted by: MAINTAINER
o Respect scponly default configuration.
o Introduce WITH_SCPONLY_CHROOT knob.
o Use ${DOCSDIR} in Makefile.
PR: ports/56300
Submitted by: rushani (maintainer)
