svn commit: r535191 - head/net/dhcpcd-devel

[Ben Woods]

Author: woodsb02
Date: Wed May 13 23:00:27 2020
New Revision: 535191
URL: https://svnweb.freebsd.org/changeset/ports/535191

Log:
  net/dhcpcd-devel: Update to 2020-05-13
  
  This change capsicumizes the master dhcpcd process

Modified:
  head/net/dhcpcd-devel/Makefile
  head/net/dhcpcd-devel/distinfo
  head/net/dhcpcd-devel/pkg-descr

Modified: head/net/dhcpcd-devel/Makefile
==============================================================================
--- head/net/dhcpcd-devel/Makefile	Wed May 13 22:13:43 2020	(r535190)
+++ head/net/dhcpcd-devel/Makefile	Wed May 13 23:00:27 2020	(r535191)
@@ -2,13 +2,12 @@
 # $FreeBSD$
 
 PORTNAME=	dhcpcd
-PORTVERSION=	g20200512
-PORTREVISION=	1
+PORTVERSION=	g20200513
 CATEGORIES=	net
 MASTER_SITES=	https://roy.marples.name/cgit/dhcpcd.git/snapshot/
 PKGNAMESUFFIX=	-devel
 DISTNAME=	${PORTNAME}-${GITTAG}
-GITTAG=		d0a186d
+GITTAG=		574535f
 
 MAINTAINER=	woodsb02 at FreeBSD.org
 COMMENT=	DHCP/IPv4LL/IPv6RS/DHCPv6 client

Modified: head/net/dhcpcd-devel/distinfo
==============================================================================
--- head/net/dhcpcd-devel/distinfo	Wed May 13 22:13:43 2020	(r535190)
+++ head/net/dhcpcd-devel/distinfo	Wed May 13 23:00:27 2020	(r535191)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1589324017
-SHA256 (dhcpcd-d0a186d.tar.xz) = d9dfc05e99eff09d6df1418ac809b3932a3cdaff4182bc05970f1bf6229f9ecc
-SIZE (dhcpcd-d0a186d.tar.xz) = 246176
+TIMESTAMP = 1589409546
+SHA256 (dhcpcd-574535f.tar.xz) = c8a2a64b0a2cc9f1a72424e5a78af04a297e31089af56b57027d628767899724
+SIZE (dhcpcd-574535f.tar.xz) = 247004

Modified: head/net/dhcpcd-devel/pkg-descr
==============================================================================
--- head/net/dhcpcd-devel/pkg-descr	Wed May 13 22:13:43 2020	(r535190)
+++ head/net/dhcpcd-devel/pkg-descr	Wed May 13 23:00:27 2020	(r535191)
@@ -3,10 +3,12 @@ It can also act as a network manager, responding to ne
 listening for carrier up/down events and managing routes.
 
 dhcpcd-9 introduces a number of security improvements:
-- privilege separation; operations which do not require root privileges
-  are run as the unprivileged user _dhcp
-- capsicumized all network facing processes; all fd's in network facing
-  processes are fully limited
+- privilege separation
+  operations are performed across multiple processes, and those which do
+  not require root privileges are run as the unprivileged _dhcp user
+- sanboxed with capsicum(4)
+  processes run in capability mode, limiting their access and therefore
+  the potential impact of security vulnerabilities
 
 This is an experimental version for testing purposes.