sysutils/cfengine328: Add new port Add the latest cfengine to the ports collection. Update the sysutils/cfengine metaport to point to the new port. It becomes default.8410646fbf
cfengine -- arbitrary file overwriting vulnerabilityentered 2005-10-01
Systems administration tool for networks
gnu:cfengine from the portpkg audit reports nothing for this version.sysutils/cfengine328: Add new port Add the latest cfengine to the ports collection. Update the sysutils/cfengine metaport to point to the new port. It becomes default.8410646fbf
sysutils/cfengine: Update default cfengine to 3.27051413f2e5
sysutils/cfengine{,-masterfiles}: Point metaport to 3.26.0 ports
cfengine326 and cfengine-masterfiles326 are now default.fe81c1eb60sysutils/cfengine*: Introduce crengine325 and cfengine-masterfiles325 Add ports for the new cfengine and cfengine-masterfiles 3.25.0. Make cfengine325 and cfengine-masterfiles325 the default cfengine ports/packages.678317bb7a
sysutils/cfengine*: Introduce crengine324 and cfengine-masterfiles324 Add ports for the new cfengine and cfengine-masterfiles 3.24.0. Make cfengine324 and cfengine-masterfiles324 the default cfengine ports/packages.35ee737900
sysutils/cfengine322: Introduce cfengine323 and cfengine-masterfiles323 Add ports for the new cfengine and cfengine-masterfiles 3.23.0. Make cfengine323 and cfengine-masterfiles323 the default cfengine ports/packages.f32ce82153
sysutils/cfengine322: Introduce cfengine322 and cfengine-masterfiles322 Add ports for the new cfengine and cfengine-masterfiles 3.22.0. Make cfengine322 and cfengine-masterfiles322 the default cfengine ports/packages.e6267c489a
sysutils/cfengine321: Introduce cfengine321 and cfengine-masterfiles321 Add ports for the new cfengine and cfengine-masterfiles 3.21.0. Make cfengine321 and cfengine-masterfiles321 the default cfengine ports/packages.bee414d2c8
sysutils/cfengine*: Add cfengine320 and cfengine-masterfiles320 cfengine 3.20 and cfengine-masterfiles 3.20 are the newest to be released by the cfengine folks.4c12b5af14
sysutils/cfengine: Make cfengine319 default cfengine319 is now the default cfengine port/package. Drop cfengine316 from the selection list.cd0568b602
sysutils/cfengine: Make cfengine318 default cfengine318 is now the default cfengine port/package. Drop cfengine315 from the selection list.e1b886ebf1
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
Welcome the new cfengine317 and cfengine-masterfiles317. They become the default cfengine and cfengine-materfiles. cfengine315 and cfengine-masterfiles are deprected, expriring one year from today.15e76a7e87
Only list the offered cfengine ports/packages. Others will be expired soon or exist solely to support FreeBSD 11's old OpenSSL.5a54cb8c39
Welcome the new cfengine 3.16.0 and cfengine-masterfiles 3.16.0. Both become the default cfengine ports/packages.406567833d
cfengine315 and cfengine-masterfiles315 are now default.5ed6bf5f91
Welcome the new cfengine 3.15 and cfengine-masterfiles 3.15. Adjust cfengine and cfengine-masterfiles meta-ports to recognize the new ports.0240004191
Bump the default cfengine to current.83d1e96d73
Welcome the new cfengine 3.14 and cfengine-masterfiles 3.14. They are not the default until after a settling in period.cdede28669
accelerate the expiry and removal of old cfengine ports that are no longer supported upstream. Remove the same ports from the metaports as well.3501085411
Now that cfengine22 is gone, let's remove the option too.a31baf78d5
Set the default cfengine and masterfiles to 3.13.67b66992ca
Welcome the new cfengine313. While here use the cfengine-devel pkg-plist as it sorts entries in the correct order. Update the cfengine meta-port to include 313.09c4d156c2
Set the default cfengine and masterfiles to 3.12. cfengine releases 3.11 and older do not support OpenSSL 1.1.X which is now in HEAD.822c43800a
Welcome the new cfengine312 and cfengine-masterfiles312.3ffe95f407
cfengine311 and cfengine-masterfiles311 are now the default cfengine and cfengine-masterfiles ports.c2cf9546dc
Welcome the new cfengine311 and cfengine-masterfiles311.17398d76ec
Update cfengine310 and cfengine-masterfiles310 3.10.0 --> 3.10.1. cfengine310 and cfengine-masterfiles310 are now the default cfengine and cfengine-masterfiles ports.be999441b8
Welcome the new cfengine and cfengine-masterfiles 3.10. Adjust the other cfengine and cfengine-masterfiles ports CONFLICTS to recognize the new cfengine sister ports. Add cfengine and cfengine-masterfiles 310 to their respective metaports.5adedb838a
Update cfengine39 and cfengine-masterfiles39 to 3.9.1. cfengine and cfengine-masterfiles now defaults to cfengine39 and cfengine-masterfiles3989f3109dd2
Introduce new ports: - cfengine39 (3.9.0), copied from cfengine38 - cfengine-masterfiles39 (3.9.0), copied from cfengine-masterfiles38 - add cfengine39 to cfengine metaport (non-default for now) - add cfengine-masterfiles39 to cfengine-metafiles metaport (not default for now) Sort documentation files in cfengine39.8f597c05bc
Update cfengine38 3.8.0 --> 3.8.1. Update cfengine-masterfiles38 3.8.0 --> 3.8.1. Change default cfengine and cfengine-masterfiles to 38.a5b14ddca0
Introduce cfengine38 and cfengine-masterfiles38.895f95be7e
Update to version 3.7.1 change CFENGINE_VERSION to 37 in the master port Approved by: cy@ (maintainer) Differential Revision: D42786795afec25
Add new cfengine37 port.fc86aa5704
cfengine36 has been around for a while. It has proven itself. It is now the default.7f23e47989
Stagify.7ea116081b
Add cfengine36 to VERSIONS list. Approved by: cy (maintainer, implicit) Sponsored by: The FreeBSD Foundation0c9e9ae61d
Remove -devel. PR: 188134 Submitted by: skreuzerb9a8f319b3
Add NO_STAGE all over the place in preparation for the staging support (cat: sysutils)83f65384c9
cfengine/Makefile: - Add CFENGINE_VERSION 35
cfengine-devel/Makefile:
- Mark IGNORE since development has not branched yet
Add cfengine 3.5.0:
New features:
- classes promises now take an optional scope constraint.
- new built-in functions: every, none, some, nth, sublist, uniq, filter
- cf-promises flag --parse-tree is replaced by --policy-output-format=,
requiring the
user to specify the output format (none, cf, json)
- cf-promises allows partial check of policy (without body common
control) without integrity check; --full-check enforces integrity check
- agent binaries support JSON input format (.json file as generated
by cf-promises)
- cf-key: new options --trust-key/-t and --print-digest/-p
- Class "failsafe_fallback" is defined in failsafe.cf when main
policy contains errors and
failsafe is run because of this
- add scope attribute for body classes (Redmine #2013)
- Better diagnostics of parsing errors
- Error messages from parser now show the context of error
- new cf-agent option: --self-diagnostics
- new output format, and --legacy-output
- warnings for cf-promises.
- Enable zeroconf-discovery of policy hubs for automatic bootstrapping
if Avahi is present
- Support for sys.cpus on more platforms than Linux & HPUX
Changes:
- parser no longer allows ',' after promiser or promisee. must be
either ';' or lval
- Make parser output in GCC compatible format the only supported format
(remove --gcc-brief-format flag)
- Silence license warnings in Enterprise Free25 installations
- action_policy => "warn" causes not_kept classes to be set on
promise needing repair.
- command line option version (-V) now prints a shorter parsable
version without graphic
- implicit execution of server and common bundles taking arguments
is skipped in cf-serverd.
- WARNING: option --policy-server removed, require option to --bootstrap
instead
- process promises don't log if processes are out of range unless you
run in verbose mode
- reports promises are now allowed in any context (Redmine #2005)
- cf-report has been removed
- cf-execd: --once implies --no-fork
- Version info removed from mail subject in the emails sent by cf-execd.
The subject will only contain "[fqname/ipaddress]" instead of
"communnity/nova [fqname/ipaddress]".
Please change your email filters accordingly if necessary.
- "outputs" promise type is retired. Their semantics was not clear,
and the functionality
is better suited for control body setting, not a promise.
- Tokyo Cabinet databases are now automatically checked for
correctness during opening. It should prevent a number of issues
with corrupted TC databases causing binaries to hang.
- Improved ACL handling on Windows, which led to some syntax changes.
We now consistently use the term "default" to describe ACLs that
can be inherited by child objects. These keywords have received new names:
acl_directory_inherit -> acl_default
specify_inherit_aces -> specify_default_aces
The old keywords are deprecated, but still valid. In addition, a new
keyword "acl_inherit" controls inheritance behavior on Windows. This
feature does not exist on Unix platforms. (Redmine #1832)
- Networking code is moved from libpromises to its own library,
libcfnet. Work has begun on making the API more sane and thread-safe.
Lots of legacy code was removed.
- Add getaddrinfo() replacement in libcompat (borrowed from PostgreSQL).
- Replace old deprecated and non thread-safe resolver calls with
getaddrinfo() and getnameinfo().
- Hostname2IPString(), IPString2Hostname() are now thread-safe, and are
returning error when resolution fails.
- Running cf-execd --once now implies --no-fork, and also does not wait
for splaytime to pass.
- execresult(), returnszero() and commands promises no longer requires
the first word
word to be an absolute path when using the shell. (Part of Redmine #2143)
- commands promises useshell attribute now accepts "noshell" and
"useshell" values. Boolean values are accepted but deprecated. (Part of
Redmine #2143)
- returnszero() now correctly sets the class name in this scenario (Part of
Redmine #2143):
classes:
"commandfailed" not => returnszero("/bin/nosuchcommand", "noshell");
Bugfixes:
- bundles are allowed to be empty (Redmine #2411)
- Fixed '.' and '-' not being accepted by a commands module. (Redmine #2384)
- Correct parsing of list variables by a command module. (Redmine #2239)
- Fixed issue with package management and warn. (Redmine #1831)
- Fixed JSON crash. (Redmine #2151)
- Improved error checking when using fgets(). (Redmine #2451)
- Fixed error message when deleting nonexistent files. (Redmine #2448)
- Honor warn-only when purging from local directory. (Redmine #2162)
- Make sure "restart" and "reload" are recognized keywords in
packages. (Redmine #2468)
- Allocate memory dynamically to avoid out-of-buffer or out-of-hash
situations
- fix edit_xml update of existing attributes (Redmine #2034)
- use failsafe policy from compile-time specified workdir (Redmine #1991)
- ifvarclass checked from classes promises in common bundles
- do not wait for splaytime when executing only once
- disable xml editing functionality when libxml2 doesn't provide
necessary APIs (Redmine #1937)
- Out-of-tree builds should work again, fixed a bunch of related bugs.
- Fixed race condition in file editing. (Redmine #2545)
- Fixed memory leak in cf-serverd and others (Redmine #1758)
Approved by: cy (maintainer, implicit)ef33475c14Implement the concept of a "master" port for the set of sysutils/cfengine* ports.
The idea here is two-fold:
1.) Users should not need to ever change port origins
for a default software version bump;
2.) Users should expect to exist an unversioned port
directory to reflect the latest major version (and
they should be correct in this expectation).
With this change, users can install the sysutils/cfengine
port, and by default track the latest major version of the
software. Subsequent version releases, for example the 3.5
branch, will not require any interaction from user side.
Additionally, users can stay on a certain branch release by
adding, in this case, CFENGINE_VERSION version to make.conf
or specifying the branch during build time with:
# make CFENGINE_VERSION=NN
The list of available CFENGINE_VERSION values are listed
with:
# make -V VERSIONS
Discussed with: cy0fda4454c6Move cfengine ports to standardize namaing. Submitted by: gjb8402c86ad4
gjb@ and I will commit to the cfengine* ports. Both of us can be blamed for the goings on in this place.59b496fc28
Record conflict with cfengine 3.3.0.ca935c286c
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.83eb2c3700- Get Rid MD5 supporta9481afc8a
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#1d6b4b3f91
Update 2.2.9 --> 2.2.10 Take on maintainership of the port as the maintainer, Jo Rhett <jrhett@netconsonance.com>, can no longer maintain this port.e0ea97caa2