Bastillion is an open-source web-based SSH console that centrally manages
administrative access to systems.
A bastion host for administrators with features that promote infrastructure
security, including key management and auditing.
Reason:
If you already performed the actions of the next entry, the following
action in this entry needs to be performed regardless.
If you did not already perform the actions of the next entry, only
the action of this entry needs to be performed.
The datastore of bastillion needs to be upgraded (if you do not see
users / can not login, you forgot to upgrade it):
java -jar %%PREFIX%%/jetty_bastillion/upgrade/bastillion-upgrade-4.00.01.jar %%PREFIX%%/jetty_bastillion/bastillion/WEB-INF/classes/BastillionConfig.properties
Reason:
The datastore of bastillion needs to be upgraded (if you do not see
users / can not login, you forgot to upgrade it):
java -jar %%PREFIX%%/jetty_bastillion/upgrade/bastillion-upgrade-4.00.00.jar %%PREFIX%%/jetty_bastillion/bastillion/WEB-INF/classes/BastillionConfig.properties
Mk/**java.mk: Convert bsd.java.mk to USES
The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
USES=java:build,run if NO_BUILD is undefined. Else it defaults to
USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>
Approved by: mat (portmgr), glewis
Differential Revision: https://reviews.freebsd.org/D48201
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
security/bastillion: update to 3.11.01 (log4j 2.16)
Revert my previous log4j fix (disable JNDI lookups via env variable),
the update to 3.11.01 contains the fixed log4j 2.16.
Update to 3.10.00.
This fixes some potential XSS in the included jquery, but there is no
information if bastillion is vulnerable in some place or not.
As all the action in bastillion happens after authentication, and
is limited to what you enter yourself, it looks like the impact
or attack surface of the jquery XSS on bastillion is low.
ChangeLog: https://github.com/bastillion-io/Bastillion/releases/tag/v3.10.00
CVE: CVE-2020-11022
CVE: CVE-2020-11023
Remove references to EoL'ed Java versions
* Java 9 and 10 are EoL'ed upstream and the ports for them are scheduled
for deletion, so switch the version specification here to 11+.
PR: 241022
Approved by: netchild@
Sponsored by: The FreeBSD Foundation
Add new port "Bastillion".
Bastillion is an open-source web-based SSH console that centrally manages
administrative access to systems.
A bastion host for administrators with features that promote infrastructure
security, including key management and auditing.
