dhcpcd is a DHCP/IPv4LL/IPv6RS/DHCPv6 client.
It can also act as a network manager, responding to new interfaces,
listening for carrier up/down events and managing routes.
dhcpcd-9 introduces a number of security improvements:
- privilege separation
operations are performed across multiple processes, and those which do
not require root privileges are run as the unprivileged _dhcp user
- sanboxed with capsicum(4)
processes run in capability mode, limiting their access and therefore
the potential impact of security vulnerabilities
===> The following configuration options are available for dhcpcd-10.5.2:
PRIVSEP=on: Enable or disable privelege seperation
===> Use 'make config' to modify these settings
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Straup Cope <ascope@cpan.org>
* Aaron Zauner <az_mail@gmx.at>
* Adam Jette <jettea46@yahoo.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Alex Bakhtin <Alex.Bakhtin@gmail.com>
* Alex Deiter <Alex.Deiter@Gmail.COM>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
(Only the first 15 lines of the commit message are shown above )
net/dhcpcd: Switch keyword from nojail to nojailvnet in rc script
The keyword was added in 2007 following git history, c7e6df59748c. This
is a remnant of the pre-VNET days. dhcpcd is perfectly capable of
running in a VNET jail so relax keyword. This allows dhcpcd to start in
a VNET jail.
PR: 258185
Approved by: 0mp (mentor), philip (mentor)
Differential Revision: https://reviews.freebsd.org/D32959
net/dhcpcd: Use HAS_CONFIGURE over GNU_CONFIGURE
Historically the port used GNU_CONFIGURE but this is not needed.
Switch to HAS_CONFIGURE and adjust the needed configure args.
While here install the sample config file under etc/.
Reported by: diizzy
Approved by: 0mp (mentor)
Differential Revision: https://reviews.freebsd.org/D32907
net/dhcpcd: Remove stale CONFLICTS_INSTALL line
net/dhcpcd-devel which conflicted was removed from the tree in
f043c1154abf.
Approved by: philip (mentor), 0mp (mentor)
Differential Revision: https://reviews.freebsd.org/D32909
*/*: Consistently use my new driesm@FreeBSD.org alias
Replace all occurences of driesm.michiels@gmail.com with
driesm@FreeBSD.org.
Approved by: philip (mentor), 0mp (mentor)
Differential Revision: https://reviews.freebsd.org/D32896
*/*: Fix ENOTIME: return my ports to the pool
Reset maintainership of my ports to ports@FreeBSD.org so others can
step in to help where I haven't been able to find the time.
net/dhcpcd: Update to 9.1.2
Also disable udev support in CONFIGURE_ARGS, given that FreeBSD has
the function udev_device_new_from_subsystem_sysname if the module
libudev-devd is installed, but it is not implemented.
PR: 247144
Reported by: Greg V <greg@unrelenting.technology>
Reviewed by: Roy Marples <roy@marples.name>
net/dhcpcd-devel: Add new port - development verion of net/dhcpcd
This is an experimental version for testing purposes.
Notably this new development version includes privilege separation;
operations which do not require root are run as the user _dhcp.
net/dhcpcd: 6.10.2 -> 6.11.0
- pidfile directory is now created correctly at startup.
- bootp "leases" are now stored so dhcpcd can dump them.
- ARP state is kept open so we can detect duplicates
(currently this is only logged, no action is taken).
- --lastleastextend allows dhcpcd to extend a DHCP lease once
it has expired. The lease is dropped if any other node
claims the address.
- Delegated Prefix reject routes will be correctly bound to the
loopback interface. If a delegated address uses the whole prefix,
then the reject route is removed. If this address is removed, the
reject route is restored.
- dhcp code has been reworked around a classic BOOTP structure
instead of a fixed size DHCP structure based on a max MTU of 1500.
Each reference to it also has a size so we know it's length.
Adding an option to a message is now guarded via easy macros.
Option concatenation buffer is no longer a fixed size.
- Many other cleanups, fully passes Coverity scan on FreeBSD!
PR: 209395
Submitted by: roy@marples.name (maintainer)
net/dhcpcd: 6.10.1 -> 6.10.2
Changes:
- Add fix for CVE-2014-7913.
- eloop performance and API improvements.
- Don't send a blank hostname.
- Prefix Delegation default value fixes.
- Prefix Delegation suffix is now configurable.
- dhcpcd.conf now allows embedded comments.
- IPv6 static address support.
- ipv6ra_accept_nopublic has been removed, all prefixes now accepted.
- Remove pidfile handling from dhcpcd and use pidfile_lock(3).
If not available, use a compat shim.
- Fix changing routes on BSD.
Specific to FreeBSD ports package:
- dhcpcd rc.d script now supports starting as a service (dhcpcd_enable=YES)
as well as handling per interface if needed from devd.
- The patch to dhcpcd.conf has been removed and the pkg-message adjusted to
match the more recent findings in bug #194485
PR: 208702
Submitted by: roy@marples.name (maintainer)
net/dhcpcd: 6.10.0 -> 6.10.1
- Add -P, --printpidfile to print the pidfile dhcpcd will use to stdout
- Fix a crash when a non active interface departs
- Add the -1, --oneshot option which causes dhcpcd to exit once an
interface has been configured
- Fix delegation activating interfaces
PR: 206459
Submitted by: roy@marples.name (maintainer)
net/dhcpcd: update 6.9.4 -> 6.10.0
Changes:
* --noption requires an argument
* optimise the ARP BPF filter, thanks to Nate Karstens
* send gratuitous ARP each time we apply our IP address
* fix truncation of hostnames based on the short hostname option
* improve routing and address management by always loading all interfaces,
routes and addresses even for interfaces we are not directly working on
* timezone, lookup-hostname, wpa_supplicant and YP hooks are no longer
installed by default but are installed to an example directory
* fix compile on kFreeBSD
thanks to Christoph Egger for providing a temporary build host
* improve error logging of packet parsing
* fix ignoring routing messages generated by dhcpcd just before forking
(Only the first 15 lines of the commit message are shown above )
net/dhcpcd: 6.9.3 -> 6.9.4
Changes:
- dhcpcd will now configure chrony if installed and ntp isn't
- replace the SixRD decode function with a generic definition
- try harder to ensure only 1 lladdr exists per interface on BSD
- change IPv6 routes on MTU change
- -p works with -x on an already running process started without -p
- fix TEST for IPv4LL
- Correct size allocation for prefix delegation, thanks to Jade
- Add an option to enable DHCPv6 Information Request without the
need for dhcpcd to recieve an IPv6 Router Advertisement with the
Other Configuration bit set.
- Introduce the optional option type, which allows embedded options
to be optional
(Only the first 15 lines of the commit message are shown above )
net/dhcpcd: update to 6.4.3
Changes:
* Correct DHCPv6 Prefix Delegation option decoding
* Ensure that a given buffer is at least BUFSIZ (for getline compat)
* Poll interfaces on BSD for IFF_RUNNING if link state cannot be obtained
* Check for an IA to use in DHCPv6 lease validation
* Fix compile on NetBSD-6 (and possibly earlier NetBSDs)
* Warn about exceeding IDGEN_RETRIES when a stable private address cannot be
obtained
* Fix DHCP option overload handling, thanks to Tobias Stoeckmann
PR: 192276
Submitted by: maintainer
net/dhcpcd: update 5.5.6 -> 6.4.2
- Update BZIP usage to new format
- Remove files/patch-configure (accomodated by upstream)
- Minor fixes in pkg-plist
PR: 191863
Submitted by: Roy Marples <roy@marples.name>
Approved by: marino (mentor)
