Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 Nov 2005 13:34:04 +1000
From:      Joel Hatton <freebsd-stable@auscert.org.au>
To:        freebsd-stable@freebsd.org
Subject:   cvsup flags in /usr/src/Makefile.inc1 outdated?
Message-ID:  <200511220334.jAM3Y4ZV040878@app.auscert.org.au>

next in thread | raw e-mail | index | archive | help
Hi,

I've just noticed that cvsup flags in my RELENG_6 Makefile.inc1 are still:

SUPFLAGS?=      -g -L 2 -P -

But, from man CVSUP(1):

     -P m|a|port|lo-hi|-
                 Controls the establishment of the auxiliary TCP connection(s)
                 used to carry information between the client and the server.
                 Altogether, the client and server require four unidirectional
                 channels to communicate: two from the client to the server,
                 and two from the server to the client.  These four unidirec-
                 tional channels can be set up in different ways, to support
                 various firewall setups.  The modes provided for this are
                 multiplexed mode, passive mode, and active mode.  All but
                                                                   ^^^^^^^
                 multiplexed mode are deprecated.  Multiplexed mode can handle
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                 any situation that the other modes can handle.


This means that if I don't specify any overrides in /etc/make.conf or my
supfile, running 'make update' in /usr/src will cause cvsup to try to use
passive mode and, in my firewalled environment, fail. Yep, I found this
out by accident :)

regards,
-- Joel Hatton --
Security Analyst                    | Hotline: +61 7 3365 4417
AusCERT - Australia's national CERT | Fax:     +61 7 3365 7031
The University of Queensland        | WWW:     www.auscert.org.au
Qld 4072 Australia                  | Email:   auscert@auscert.org.au




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200511220334.jAM3Y4ZV040878>