From owner-freebsd-ports-bugs@FreeBSD.ORG Fri Jun 24 15:50:11 2005 Return-Path: X-Original-To: freebsd-ports-bugs@hub.freebsd.org Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CB56D16A41C for ; Fri, 24 Jun 2005 15:50:11 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id A074F43D53 for ; Fri, 24 Jun 2005 15:50:11 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j5OFoBE8027502 for ; Fri, 24 Jun 2005 15:50:11 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j5OFoBmD027501; Fri, 24 Jun 2005 15:50:11 GMT (envelope-from gnats) Resent-Date: Fri, 24 Jun 2005 15:50:11 GMT Resent-Message-Id: <200506241550.j5OFoBmD027501@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "Daniel Blankensteiner" Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4B92316A41C for ; Fri, 24 Jun 2005 15:41:53 +0000 (GMT) (envelope-from db@trunet.dk) Received: from cicero1.cybercity.dk (cicero1.cybercity.dk [212.242.40.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id CCCB643D1F for ; Fri, 24 Jun 2005 15:41:52 +0000 (GMT) (envelope-from db@trunet.dk) Received: from user5.cybercity.dk (user5.cybercity.dk [212.242.41.51]) by cicero1.cybercity.dk (Postfix) with ESMTP id B032E7E48D3 for ; Fri, 24 Jun 2005 17:41:50 +0200 (CEST) Received: from work.trunet.dk (port132.ds1-arsy.adsl.cybercity.dk [212.242.239.73]) by user5.cybercity.dk (Postfix) with ESMTP id 39E963A1BFA for ; Fri, 24 Jun 2005 17:41:50 +0200 (CEST) Message-Id: <1119634987.0@work.trunet.dk> Date: Fri, 24 Jun 2005 17:43:07 -0000 From: "Daniel Blankensteiner" To: "FreeBSD gnats submit" X-Send-Pr-Version: gtk-send-pr 0.4.6 Cc: Subject: ports/82614: Update port: security/lockdown 1.0.1 -> 2.0.0 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jun 2005 15:50:11 -0000 >Number: 82614 >Category: ports >Synopsis: Update port: security/lockdown 1.0.1 -> 2.0.0 >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: maintainer-update >Submitter-Id: current-users >Arrival-Date: Fri Jun 24 15:50:11 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Daniel Blankensteiner >Release: FreeBSD 5.4-RELEASE i386 >Organization: >Environment: System: FreeBSD 5.4-RELEASE #0: Sun May 8 10:21:06 UTC 2005 root@harlow.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC >Description: >How-To-Repeat: >Fix: diff -ruN /usr/ports/security/lockdown/Makefile security/lockdown/Makefile --- /usr/ports/security/lockdown/Makefile Mon May 10 13:14:21 2004 +++ security/lockdown/Makefile Fri Jun 24 17:39:05 2005 @@ -6,21 +6,36 @@ # PORTNAME= lockdown -PORTVERSION= 1.0.1 +PORTVERSION= 2.0.0 CATEGORIES= security MASTER_SITES= http://lockdown.trunet.dk/ \ http://lockdown.loproc.dk/ MAINTAINER= db@TruNet.dk -COMMENT= Hardening system for FreeBSD +COMMENT= Hardening script for FreeBSD -MAN1= lockdown.1 +MAN1= editfile.1 +MAN1= editfstab.1 +MAN1= editkernel.1 +MAN1= editlogin.1 +MAN1= editttys.1 + +INSTALLS_SHLIB= yes WRKSRC= ${WRKDIR}/lockdown do-install: - ${INSTALL_PROGRAM} ${WRKSRC}/lockdown ${PREFIX}/bin/lockdown - ${INSTALL_MAN} ${WRKSRC}/lockdown.1 ${PREFIX}/man/man1/lockdown.1 - ${INSTALL_DATA} ${WRKSRC}/lockdown.conf.sample ${PREFIX}/etc/lockdown.conf.sample + ${INSTALL_DATA} ${WRKSRC}/cppe/src/cppe.so ${PREFIX}/lib/libcppe.so + ${INSTALL_PROGRAM} ${WRKSRC}/edittools/editfile/src/editfile ${PREFIX}/bin/editfile + ${INSTALL_MAN} ${WRKSRC}/edittools/editfile/doc/editfile.1 ${PREFIX}/man/man1/editfile.1 + ${INSTALL_PROGRAM} ${WRKSRC}/edittools/editfstab/src/editfstab ${PREFIX}/bin/editfstab + ${INSTALL_MAN} ${WRKSRC}/edittools/editfstab/doc/editfstab.1 ${PREFIX}/man/man1/editfstab.1 + ${INSTALL_PROGRAM} ${WRKSRC}/edittools/editkernel/src/editkernel ${PREFIX}/bin/editkernel + ${INSTALL_MAN} ${WRKSRC}/edittools/editkernel/doc/editkernel.1 ${PREFIX}/man/man1/editkernel.1 + ${INSTALL_PROGRAM} ${WRKSRC}/edittools/editlogin/src/editlogin ${PREFIX}/bin/editlogin + ${INSTALL_MAN} ${WRKSRC}/edittools/editlogin/doc/editlogin.1 ${PREFIX}/man/man1/editlogin.1 + ${INSTALL_PROGRAM} ${WRKSRC}/edittools/editttys/src/editttys ${PREFIX}/bin/editttys + ${INSTALL_MAN} ${WRKSRC}/edittools/editttys/doc/editttys.1 ${PREFIX}/man/man1/editttys.1 + ${INSTALL_SCRIPT} ${WRKSRC}/lockdown ${PREFIX}/bin/lockdown .include diff -ruN /usr/ports/security/lockdown/distinfo security/lockdown/distinfo --- /usr/ports/security/lockdown/distinfo Mon May 10 13:14:21 2004 +++ security/lockdown/distinfo Fri Jun 24 17:37:09 2005 @@ -1,2 +1,2 @@ -MD5 (lockdown-1.0.1.tar.gz) = c8b0a81e691c11bf75699ec270b780fa -SIZE (lockdown-1.0.1.tar.gz) = 13532 +MD5 (lockdown-2.0.0.tar.gz) = 340786366b916aefc1b08d258e0add4a +SIZE (lockdown-2.0.0.tar.gz) = 63364 diff -ruN /usr/ports/security/lockdown/pkg-descr security/lockdown/pkg-descr --- /usr/ports/security/lockdown/pkg-descr Mon May 10 13:14:21 2004 +++ security/lockdown/pkg-descr Fri Jun 24 17:27:25 2005 @@ -1,12 +1,4 @@ -Lockdown is a hardening system written in C++ for FreeBSD -and released under the BSD license. - -Lockdown was designed to harden FreeBSD's base system. It does -so by editing the systems configuration files and set -permissions, flags and ownership on SUID, GID and "information" -files. Lockdown was meant to be run only once (after a system -install or upgrade), so you can quickly and without forgetting -something, get a secure system. +Lockdown is a script designed to harden a FreeBSD system by editing the system's configuration files and set permissions, flags and ownership on SUID, GID and "information" files. However, the main goal of lockdown is to centralize knowledge on how much you can harden the system without breaking it. Mirror: http://lockdown.loproc.dk/ WWW: http://lockdown.TruNet.dk/ diff -ruN /usr/ports/security/lockdown/pkg-plist security/lockdown/pkg-plist --- /usr/ports/security/lockdown/pkg-plist Sun Feb 29 23:22:12 2004 +++ security/lockdown/pkg-plist Thu Jun 23 00:48:29 2005 @@ -1,3 +1,7 @@ @comment $FreeBSD: ports/security/lockdown/pkg-plist,v 1.1 2004/02/29 23:22:12 sergei Exp $ bin/lockdown -etc/lockdown.conf.sample +bin/editfile +bin/editfstab +bin/editkernel +bin/editlogin +bin/editttys >Release-Note: >Audit-Trail: >Unformatted: