Index: head/net/dhcpcd-devel/Makefile =================================================================== --- head/net/dhcpcd-devel/Makefile (revision 535190) +++ head/net/dhcpcd-devel/Makefile (revision 535191) @@ -1,35 +1,34 @@ # Created by: Roy Marples # $FreeBSD$ PORTNAME= dhcpcd -PORTVERSION= g20200512 -PORTREVISION= 1 +PORTVERSION= g20200513 CATEGORIES= net MASTER_SITES= https://roy.marples.name/cgit/dhcpcd.git/snapshot/ PKGNAMESUFFIX= -devel DISTNAME= ${PORTNAME}-${GITTAG} -GITTAG= d0a186d +GITTAG= 574535f MAINTAINER= woodsb02@FreeBSD.org COMMENT= DHCP/IPv4LL/IPv6RS/DHCPv6 client LICENSE= BSD2CLAUSE LICENSE_FILE= ${WRKSRC}/LICENSE CONFLICTS_INSTALL= dhcpcd USES= compiler:c11 cpe tar:xz CPE_VENDOR= dhcpcd_project GNU_CONFIGURE= yes CONFIGURE_ARGS= --datadir=${PREFIX}/share/examples \ --privsepuser="_dhcp" USE_RC_SUBR= dhcpcd post-install: ${MV} ${STAGEDIR}${PREFIX}/etc/dhcpcd.conf \ ${STAGEDIR}${PREFIX}/share/examples/dhcpcd @${STRIP_CMD} ${STAGEDIR}${PREFIX}/sbin/dhcpcd ${MKDIR} ${STAGEDIR}/var/db/dhcpcd .include Index: head/net/dhcpcd-devel/distinfo =================================================================== --- head/net/dhcpcd-devel/distinfo (revision 535190) +++ head/net/dhcpcd-devel/distinfo (revision 535191) @@ -1,3 +1,3 @@ -TIMESTAMP = 1589324017 -SHA256 (dhcpcd-d0a186d.tar.xz) = d9dfc05e99eff09d6df1418ac809b3932a3cdaff4182bc05970f1bf6229f9ecc -SIZE (dhcpcd-d0a186d.tar.xz) = 246176 +TIMESTAMP = 1589409546 +SHA256 (dhcpcd-574535f.tar.xz) = c8a2a64b0a2cc9f1a72424e5a78af04a297e31089af56b57027d628767899724 +SIZE (dhcpcd-574535f.tar.xz) = 247004 Index: head/net/dhcpcd-devel/pkg-descr =================================================================== --- head/net/dhcpcd-devel/pkg-descr (revision 535190) +++ head/net/dhcpcd-devel/pkg-descr (revision 535191) @@ -1,13 +1,15 @@ dhcpcd is a DHCP/IPv4LL/IPv6RS/DHCPv6 client. It can also act as a network manager, responding to new interfaces, listening for carrier up/down events and managing routes. dhcpcd-9 introduces a number of security improvements: -- privilege separation; operations which do not require root privileges - are run as the unprivileged user _dhcp -- capsicumized all network facing processes; all fd's in network facing - processes are fully limited +- privilege separation + operations are performed across multiple processes, and those which do + not require root privileges are run as the unprivileged _dhcp user +- sanboxed with capsicum(4) + processes run in capability mode, limiting their access and therefore + the potential impact of security vulnerabilities This is an experimental version for testing purposes. WWW: https://roy.marples.name/projects/dhcpcd