diff options
| author | Reyk Floeter <reyk@cvs.openbsd.org> | 2015-10-22 15:14:28 +0000 |
|---|---|---|
| committer | Reyk Floeter <reyk@cvs.openbsd.org> | 2015-10-22 15:14:28 +0000 |
| commit | 27124c6fc75b347f67f045b50ed80cd558a4ace1 (patch) | |
| tree | 9ef24209f9981085e8f6753d8b2ef7059ea8f297 /sbin/iked/Makefile | |
| parent | f18de0779776e3ee49531b16eee4e549b683c6d0 (diff) | |
Stop linking iked -static: It was inherited from isakmpd that is
-static for NFS-over-IPsec that might mount the libraries after /usr.
The benefit of linking iked dynamic outweighs the historic reason, eg.
to get full address space randomization and to benefit from libcrypto
updates, so we turn it into a dynamic binary.
OK deraadt@ naddy@
Diffstat (limited to 'sbin/iked/Makefile')
| -rw-r--r-- | sbin/iked/Makefile | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/sbin/iked/Makefile b/sbin/iked/Makefile index 2194a950e07..77a79a9e371 100644 --- a/sbin/iked/Makefile +++ b/sbin/iked/Makefile @@ -1,4 +1,4 @@ -# $OpenBSD: Makefile,v 1.13 2015/10/19 11:25:35 reyk Exp $ +# $OpenBSD: Makefile,v 1.14 2015/10/22 15:14:27 reyk Exp $ PROG= iked SRCS= ca.c chap_ms.c config.c control.c crypto.c dh.c \ @@ -10,6 +10,9 @@ SRCS+= parse.y MAN= iked.conf.5 iked.8 #NOMAN= yes +# Don't compile iked as static binary by default +LDSTATIC= + LDADD= -lutil -levent -lcrypto DPADD= ${LIBUTIL} ${LIBEVENT} ${LIBCRYPTO} CFLAGS+= -Wall -I${.CURDIR} |