CVE-2020-28012: Missing close-on-exec flag for privileged pipe

[exim.git] / src / OS / Makefile-Base

diff --git a/src/OS/Makefile-Base b/src/OS/Makefile-Base
index 1f42e0ec39476a0e680564bbec907c7070e86207..c7bb116ab6b2e97efa21308bc0a0742daa24b2b1 100644 (file)
--- a/src/OS/Makefile-Base
+++ b/src/OS/Makefile-Base
@@ -6,6 +6,7 @@
 # build directory.
 #
 # Copyright (c) The Exim Maintainers 1995 - 2018
 # build directory.
 #
 # Copyright (c) The Exim Maintainers 1995 - 2018

+# Copyright (c) The Exim Maintainers 2020

 
 SHELL      = $(MAKE_SHELL)
 SCRIPTS    = ../scripts
 
 SHELL      = $(MAKE_SHELL)
 SCRIPTS    = ../scripts


@@ -82,6 +83,7 @@ Makefile: ../OS/Makefile-Base ../OS/Makefile-Default \
 os.h:  $(SCRIPTS)/Configure-os.h \
        $(O)/os.h-Darwin        \
        $(O)/os.h-FreeBSD       \
 os.h:  $(SCRIPTS)/Configure-os.h \
        $(O)/os.h-Darwin        \
        $(O)/os.h-FreeBSD       \

+       $(O)/os.h-GNU           \

        $(O)/os.h-Linux         \
        $(O)/os.h-OpenBSD       \
        $(O)/os.h-SunOS5
        $(O)/os.h-Linux         \
        $(O)/os.h-OpenBSD       \
        $(O)/os.h-SunOS5


@@ -92,6 +94,7 @@ os.h: $(SCRIPTS)/Configure-os.h \
 os.c:   ../src/os.c \
        $(SCRIPTS)/Configure-os.c \
        $(O)/os.c-FreeBSD       \
 os.c:   ../src/os.c \
        $(SCRIPTS)/Configure-os.c \
        $(O)/os.c-FreeBSD       \

+       $(O)/os.c-GNU           \

        $(O)/os.c-Linux         \
        $(O)/os.c-SunOS5
        $(SHELL) $(SCRIPTS)/Configure-os.c
        $(O)/os.c-Linux         \
        $(O)/os.c-SunOS5
        $(SHELL) $(SCRIPTS)/Configure-os.c


@@ -483,7 +486,7 @@ OBJ_EXIM = acl.o base64.o child.o crypt16.o daemon.o dbfn.o debug.o deliver.o \
         directory.o dns.o drtables.o enq.o exim.o expand.o filter.o \
         filtertest.o globals.o dkim.o dkim_transport.o hash.o \
         header.o host.o ip.o log.o lss.o match.o md5.o moan.o \
         directory.o dns.o drtables.o enq.o exim.o expand.o filter.o \
         filtertest.o globals.o dkim.o dkim_transport.o hash.o \
         header.o host.o ip.o log.o lss.o match.o md5.o moan.o \

-        os.o parse.o queue.o \
+        os.o parse.o priv.o queue.o \

         rda.o readconf.o receive.o retry.o rewrite.o rfc2047.o \
         route.o search.o sieve.o smtp_in.o smtp_out.o spool_in.o spool_out.o \
         std-crypto.o store.o string.o tls.o tod.o transport.o tree.o verify.o \
         rda.o readconf.o receive.o retry.o rewrite.o rfc2047.o \
         route.o search.o sieve.o smtp_in.o smtp_out.o spool_in.o spool_out.o \
         std-crypto.o store.o string.o tls.o tod.o transport.o tree.o verify.o \


@@ -659,11 +662,14 @@ PHDRS = ../config.h \
 .c.o:;  @echo "$(CC) $*.c"
        $(FE)$(CC) -c $(CFLAGS) -I. $(INCLUDE) $(IPV6_INCLUDE) $(TLS_INCLUDE) $*.c
 
 .c.o:;  @echo "$(CC) $*.c"
        $(FE)$(CC) -c $(CFLAGS) -I. $(INCLUDE) $(IPV6_INCLUDE) $(TLS_INCLUDE) $*.c
 

-# Update Exim's version information and build the version object.
+# Update Exim's version information and build the version object.  The dependency
+# chain here avoids problems under parallel-make.

 
 

-version.h version.sh::
+version.sh:

        @../scripts/reversion
 
        @../scripts/reversion
 

+version.h: version.sh
+

 cnumber.h: version.h
 
 version.o: $(HDRS) cnumber.h version.h version.c
 cnumber.h: version.h
 
 version.o: $(HDRS) cnumber.h version.h version.c


@@ -786,6 +792,7 @@ md5.o:           $(HDRS) md5.c
 moan.o:          $(HDRS) moan.c
 os.o:            $(HDRS) $(OS_C_INCLUDES) os.c
 parse.o:         $(HDRS) parse.c
 moan.o:          $(HDRS) moan.c
 os.o:            $(HDRS) $(OS_C_INCLUDES) os.c
 parse.o:         $(HDRS) parse.c

+priv.o:          $(HDRS) priv.c

 queue.o:         $(HDRS) queue.c
 rda.o:           $(HDRS) rda.c
 readconf.o:      $(HDRS) readconf.c
 queue.o:         $(HDRS) queue.c
 rda.o:           $(HDRS) rda.c
 readconf.o:      $(HDRS) readconf.c


@@ -868,9 +875,9 @@ em_text.o:       ../exim_monitor/em_text.c    ../exim_monitor/em_hdr.h
 em_xs.o:         ../exim_monitor/em_xs.c      ../exim_monitor/em_hdr.h
 em_version.o:    ../exim_monitor/em_version.c ../exim_monitor/em_hdr.h
 $(MONBIN): $(HDRS)
 em_xs.o:         ../exim_monitor/em_xs.c      ../exim_monitor/em_hdr.h
 em_version.o:    ../exim_monitor/em_version.c ../exim_monitor/em_hdr.h
 $(MONBIN): $(HDRS)

-                @echo "$(CC) exim_monitor/`echo $@ | sed 's/o$$/c/'`"
-                $(FE)$(CC) -o $@ -c $(CFLAGS) -I. -I../exim_monitor $(INCLUDE) $(XINCLUDE) \
-                  ../exim_monitor/`echo $@ | sed 's/o$$/c/'`
+                @echo "$(CC) exim_monitor/$(@:.o=.c)"
+                $(FE)$(CC) -o $@ -c $(CFLAGS) -DCOMPILE_UTILITY -I. -I../exim_monitor $(INCLUDE) $(XINCLUDE) \
+                  ../exim_monitor/$(@:.o=.c)

 
 
 # Targets for the various libraries that Exim uses.
 
 
 # Targets for the various libraries that Exim uses.