blob: 5f5905b36e1d5f86bac8080d8fee9a6573a0e8d0 [file] [log] [blame]
Damien Miller3d673d12014-08-27 06:32:01 +10001# $Id: configure.ac,v 1.583 2014/08/26 20:32:01 djm Exp $
Damien Miller4fefe242004-03-11 14:20:10 +11002#
3# Copyright (c) 1999-2004 Damien Miller
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
Damien Millere9cf3572001-02-09 12:55:35 +110016
Tim Rice648f8762011-01-26 12:38:57 -080017AC_INIT([OpenSSH], [Portable], [openssh-unix-dev@mindrot.org])
Damien Miller3d673d12014-08-27 06:32:01 +100018AC_REVISION($Revision: 1.583 $)
Tim Rice13aae5e2001-10-21 17:53:58 -070019AC_CONFIG_SRCDIR([ssh.c])
Tim Rice648f8762011-01-26 12:38:57 -080020AC_LANG([C])
Damien Miller7f6ea021999-10-28 13:25:17 +100021
Tim Rice648f8762011-01-26 12:38:57 -080022AC_CONFIG_HEADER([config.h])
Damien Miller856799b2000-03-15 21:18:10 +110023AC_PROG_CC
Damien Miller76112de1999-12-21 11:18:08 +110024AC_CANONICAL_HOST
Damien Miller4df5c762001-02-28 08:14:22 +110025AC_C_BIGENDIAN
Damien Miller7f6ea021999-10-28 13:25:17 +100026
Damien Millera22ba012000-03-02 23:09:20 +110027# Checks for programs.
Darren Tucker167bd9c2003-09-07 12:34:54 +100028AC_PROG_AWK
Damien Millerab18c411999-11-11 10:40:23 +110029AC_PROG_CPP
Damien Miller7f6ea021999-10-28 13:25:17 +100030AC_PROG_RANLIB
Damien Millerd8087f61999-11-25 12:31:26 +110031AC_PROG_INSTALL
Tim Ricefd80ddc2006-02-02 19:11:56 -080032AC_PROG_EGREP
Tim Rice648f8762011-01-26 12:38:57 -080033AC_PATH_PROG([AR], [ar])
34AC_PATH_PROG([CAT], [cat])
35AC_PATH_PROG([KILL], [kill])
36AC_PATH_PROGS([PERL], [perl5 perl])
37AC_PATH_PROG([SED], [sed])
38AC_SUBST([PERL])
39AC_PATH_PROG([ENT], [ent])
40AC_SUBST([ENT])
41AC_PATH_PROG([TEST_MINUS_S_SH], [bash])
42AC_PATH_PROG([TEST_MINUS_S_SH], [ksh])
43AC_PATH_PROG([TEST_MINUS_S_SH], [sh])
44AC_PATH_PROG([SH], [sh])
45AC_PATH_PROG([GROFF], [groff])
46AC_PATH_PROG([NROFF], [nroff])
47AC_PATH_PROG([MANDOC], [mandoc])
48AC_SUBST([TEST_SHELL], [sh])
Damien Miller2e1b0821999-12-25 10:11:29 +110049
Damien Miller30a69e72011-01-04 08:16:27 +110050dnl select manpage formatter
51if test "x$MANDOC" != "x" ; then
52 MANFMT="$MANDOC"
53elif test "x$NROFF" != "x" ; then
54 MANFMT="$NROFF -mandoc"
55elif test "x$GROFF" != "x" ; then
56 MANFMT="$GROFF -mandoc -Tascii"
57else
58 AC_MSG_WARN([no manpage formatted found])
59 MANFMT="false"
60fi
Tim Rice648f8762011-01-26 12:38:57 -080061AC_SUBST([MANFMT])
Damien Miller30a69e72011-01-04 08:16:27 +110062
Tim Rice6f1f7582004-05-30 21:38:51 -070063dnl for buildpkg.sh
Tim Rice648f8762011-01-26 12:38:57 -080064AC_PATH_PROG([PATH_GROUPADD_PROG], [groupadd], [groupadd],
Tim Rice6f1f7582004-05-30 21:38:51 -070065 [/usr/sbin${PATH_SEPARATOR}/etc])
Tim Rice648f8762011-01-26 12:38:57 -080066AC_PATH_PROG([PATH_USERADD_PROG], [useradd], [useradd],
Tim Rice6f1f7582004-05-30 21:38:51 -070067 [/usr/sbin${PATH_SEPARATOR}/etc])
Tim Rice648f8762011-01-26 12:38:57 -080068AC_CHECK_PROG([MAKE_PACKAGE_SUPPORTED], [pkgmk], [yes], [no])
Darren Tuckerfbea7642006-01-30 00:22:39 +110069if test -x /sbin/sh; then
Tim Rice648f8762011-01-26 12:38:57 -080070 AC_SUBST([STARTUP_SCRIPT_SHELL], [/sbin/sh])
Darren Tuckerfbea7642006-01-30 00:22:39 +110071else
Tim Rice648f8762011-01-26 12:38:57 -080072 AC_SUBST([STARTUP_SCRIPT_SHELL], [/bin/sh])
Darren Tuckerfbea7642006-01-30 00:22:39 +110073fi
Tim Rice6f1f7582004-05-30 21:38:51 -070074
Damien Millere8bb4502001-09-25 16:39:35 +100075# System features
76AC_SYS_LARGEFILE
77
Damien Miller3f62aba2000-11-29 11:56:35 +110078if test -z "$AR" ; then
79 AC_MSG_ERROR([*** 'ar' missing, please install or fix your \$PATH ***])
80fi
81
Damien Millerad833b32000-08-23 10:46:23 +100082# Use LOGIN_PROGRAM from environment if possible
83if test ! -z "$LOGIN_PROGRAM" ; then
Tim Rice648f8762011-01-26 12:38:57 -080084 AC_DEFINE_UNQUOTED([LOGIN_PROGRAM_FALLBACK], ["$LOGIN_PROGRAM"],
Tim Rice7df8d392005-09-19 09:33:39 -070085 [If your header files don't define LOGIN_PROGRAM,
86 then use this (detected) from environment and PATH])
Damien Millerad833b32000-08-23 10:46:23 +100087else
88 # Search for login
Tim Rice648f8762011-01-26 12:38:57 -080089 AC_PATH_PROG([LOGIN_PROGRAM_FALLBACK], [login])
Damien Millerad833b32000-08-23 10:46:23 +100090 if test ! -z "$LOGIN_PROGRAM_FALLBACK" ; then
Tim Rice648f8762011-01-26 12:38:57 -080091 AC_DEFINE_UNQUOTED([LOGIN_PROGRAM_FALLBACK], ["$LOGIN_PROGRAM_FALLBACK"])
Damien Millerad833b32000-08-23 10:46:23 +100092 fi
93fi
94
Tim Rice648f8762011-01-26 12:38:57 -080095AC_PATH_PROG([PATH_PASSWD_PROG], [passwd])
Darren Tucker23bc8d02004-02-06 16:24:31 +110096if test ! -z "$PATH_PASSWD_PROG" ; then
Tim Rice648f8762011-01-26 12:38:57 -080097 AC_DEFINE_UNQUOTED([_PATH_PASSWD_PROG], ["$PATH_PASSWD_PROG"],
Tim Rice7df8d392005-09-19 09:33:39 -070098 [Full path of your "passwd" program])
Darren Tucker23bc8d02004-02-06 16:24:31 +110099fi
100
Damien Miller166bd442000-03-16 10:48:25 +1100101if test -z "$LD" ; then
102 LD=$CC
103fi
Tim Rice648f8762011-01-26 12:38:57 -0800104AC_SUBST([LD])
Tim Riceeae17cc2005-03-17 16:52:20 -0800105
Damien Miller166bd442000-03-16 10:48:25 +1100106AC_C_INLINE
Darren Tucker67b37032005-06-03 17:58:31 +1000107
Tim Rice648f8762011-01-26 12:38:57 -0800108AC_CHECK_DECL([LLONG_MAX], [have_llong_max=1], , [#include <limits.h>])
Damien Miller69ff1df2011-06-23 08:30:03 +1000109AC_CHECK_DECL([SYSTR_POLICY_KILL], [have_systr_policy_kill=1], , [
110 #include <sys/types.h>
111 #include <sys/param.h>
112 #include <dev/systrace.h>
113])
114AC_CHECK_DECL([RLIMIT_NPROC],
115 [AC_DEFINE([HAVE_RLIMIT_NPROC], [], [sys/resource.h has RLIMIT_NPROC])], , [
116 #include <sys/types.h>
117 #include <sys/resource.h>
118])
Damien Millere0956e32012-04-04 11:27:54 +1000119AC_CHECK_DECL([PR_SET_NO_NEW_PRIVS], [have_linux_no_new_privs=1], , [
120 #include <sys/types.h>
121 #include <linux/prctl.h>
122])
Damien Miller868ea1e2014-01-17 16:47:04 +1100123
Darren Tuckerb7918af2008-03-09 11:34:23 +1100124use_stack_protector=1
Darren Tuckerfd994372014-01-17 09:53:24 +1100125use_toolchain_hardening=1
Tim Rice648f8762011-01-26 12:38:57 -0800126AC_ARG_WITH([stackprotect],
Damien Millerda3155e2008-03-27 12:30:18 +1100127 [ --without-stackprotect Don't use compiler's stack protection], [
Darren Tuckerb7918af2008-03-09 11:34:23 +1100128 if test "x$withval" = "xno"; then
129 use_stack_protector=0
130 fi ])
Darren Tuckerfd994372014-01-17 09:53:24 +1100131AC_ARG_WITH([hardening],
132 [ --without-hardening Don't use toolchain hardening flags], [
133 if test "x$withval" = "xno"; then
Darren Tuckerfd994372014-01-17 09:53:24 +1100134 use_toolchain_hardening=0
135 fi ])
Darren Tuckerb7918af2008-03-09 11:34:23 +1100136
Darren Tuckerfd994372014-01-17 09:53:24 +1100137# We use -Werror for the tests only so that we catch warnings like "this is
138# on by default" for things like -fPIE.
139AC_MSG_CHECKING([if $CC supports -Werror])
140saved_CFLAGS="$CFLAGS"
141CFLAGS="$CFLAGS -Werror"
142AC_COMPILE_IFELSE([AC_LANG_SOURCE([[int main(void) { return 0; }]])],
143 [ AC_MSG_RESULT([yes])
144 WERROR="-Werror"],
145 [ AC_MSG_RESULT([no])
146 WERROR="" ]
147)
148CFLAGS="$saved_CFLAGS"
Damien Miller134d02a2011-01-12 16:00:37 +1100149
Damien Millera8e06ce2003-11-21 23:48:55 +1100150if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
Darren Tuckerfd994372014-01-17 09:53:24 +1100151 OSSH_CHECK_CFLAG_COMPILE([-Qunused-arguments])
152 OSSH_CHECK_CFLAG_COMPILE([-Wunknown-warning-option])
Damien Millerb1763622011-05-20 11:45:25 +1000153 OSSH_CHECK_CFLAG_COMPILE([-Wall])
154 OSSH_CHECK_CFLAG_COMPILE([-Wpointer-arith])
155 OSSH_CHECK_CFLAG_COMPILE([-Wuninitialized])
156 OSSH_CHECK_CFLAG_COMPILE([-Wsign-compare])
157 OSSH_CHECK_CFLAG_COMPILE([-Wformat-security])
Darren Tuckerabbc7a72013-05-10 13:54:23 +1000158 OSSH_CHECK_CFLAG_COMPILE([-Wsizeof-pointer-memaccess])
Damien Millerb1763622011-05-20 11:45:25 +1000159 OSSH_CHECK_CFLAG_COMPILE([-Wpointer-sign], [-Wno-pointer-sign])
160 OSSH_CHECK_CFLAG_COMPILE([-Wunused-result], [-Wno-unused-result])
161 OSSH_CHECK_CFLAG_COMPILE([-fno-strict-aliasing])
Darren Tucker4a725ef2011-11-21 16:38:48 +1100162 OSSH_CHECK_CFLAG_COMPILE([-D_FORTIFY_SOURCE=2])
Darren Tuckerfd994372014-01-17 09:53:24 +1100163 if test "x$use_toolchain_hardening" = "x1"; then
Darren Tuckerfd994372014-01-17 09:53:24 +1100164 OSSH_CHECK_LDFLAG_LINK([-Wl,-z,relro])
165 OSSH_CHECK_LDFLAG_LINK([-Wl,-z,now])
166 OSSH_CHECK_LDFLAG_LINK([-Wl,-z,noexecstack])
Damien Miller5c2ff5e2014-01-22 21:30:12 +1100167 # NB. -ftrapv expects certain support functions to be present in
168 # the compiler library (libgcc or similar) to detect integer operations
169 # that can overflow. We must check that the result of enabling it
170 # actually links. The test program compiled/linked includes a number
171 # of integer operations that should exercise this.
172 OSSH_CHECK_CFLAG_LINK([-ftrapv])
Darren Tuckerfd994372014-01-17 09:53:24 +1100173 fi
Tim Rice648f8762011-01-26 12:38:57 -0800174 AC_MSG_CHECKING([gcc version])
Darren Tucker3f9545e2005-11-12 15:20:52 +1100175 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
Tim Rice3db1e3f2005-08-23 17:11:26 -0700176 case $GCC_VER in
Darren Tucker391de5c2007-04-29 14:49:21 +1000177 1.*) no_attrib_nonnull=1 ;;
178 2.8* | 2.9*)
Darren Tucker391de5c2007-04-29 14:49:21 +1000179 no_attrib_nonnull=1
180 ;;
181 2.*) no_attrib_nonnull=1 ;;
Darren Tuckerf0324352005-11-10 21:30:36 +1100182 *) ;;
Tim Rice3db1e3f2005-08-23 17:11:26 -0700183 esac
Tim Rice648f8762011-01-26 12:38:57 -0800184 AC_MSG_RESULT([$GCC_VER])
Damien Millerde3cb0a2005-05-26 20:48:25 +1000185
Tim Rice648f8762011-01-26 12:38:57 -0800186 AC_MSG_CHECKING([if $CC accepts -fno-builtin-memset])
Darren Tucker330c93f2008-06-16 02:27:48 +1000187 saved_CFLAGS="$CFLAGS"
188 CFLAGS="$CFLAGS -fno-builtin-memset"
Tim Rice648f8762011-01-26 12:38:57 -0800189 AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <string.h> ]],
190 [[ char b[10]; memset(b, 0, sizeof(b)); ]])],
191 [ AC_MSG_RESULT([yes]) ],
192 [ AC_MSG_RESULT([no])
Darren Tucker330c93f2008-06-16 02:27:48 +1000193 CFLAGS="$saved_CFLAGS" ]
Tim Rice648f8762011-01-26 12:38:57 -0800194 )
Darren Tucker330c93f2008-06-16 02:27:48 +1000195
Darren Tuckerb7918af2008-03-09 11:34:23 +1100196 # -fstack-protector-all doesn't always work for some GCC versions
Darren Tuckerfe1cf972008-03-09 22:50:50 +1100197 # and/or platforms, so we test if we can. If it's not supported
Damien Miller7df2e402008-12-08 09:35:36 +1100198 # on a given platform gcc will emit a warning so we use -Werror.
Darren Tuckerb7918af2008-03-09 11:34:23 +1100199 if test "x$use_stack_protector" = "x1"; then
Darren Tuckerfd994372014-01-17 09:53:24 +1100200 for t in -fstack-protector-strong -fstack-protector-all \
201 -fstack-protector; do
Tim Rice648f8762011-01-26 12:38:57 -0800202 AC_MSG_CHECKING([if $CC supports $t])
Darren Tuckerb7918af2008-03-09 11:34:23 +1100203 saved_CFLAGS="$CFLAGS"
204 saved_LDFLAGS="$LDFLAGS"
Darren Tuckerfe1cf972008-03-09 22:50:50 +1100205 CFLAGS="$CFLAGS $t -Werror"
206 LDFLAGS="$LDFLAGS $t -Werror"
207 AC_LINK_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -0800208 [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
209 [[
210 char x[256];
211 snprintf(x, sizeof(x), "XXX");
212 ]])],
213 [ AC_MSG_RESULT([yes])
Darren Tuckerfe1cf972008-03-09 22:50:50 +1100214 CFLAGS="$saved_CFLAGS $t"
215 LDFLAGS="$saved_LDFLAGS $t"
Tim Rice648f8762011-01-26 12:38:57 -0800216 AC_MSG_CHECKING([if $t works])
Darren Tuckerb7918af2008-03-09 11:34:23 +1100217 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -0800218 [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
219 [[
220 char x[256];
221 snprintf(x, sizeof(x), "XXX");
222 ]])],
223 [ AC_MSG_RESULT([yes])
Darren Tuckerb7918af2008-03-09 11:34:23 +1100224 break ],
Tim Rice648f8762011-01-26 12:38:57 -0800225 [ AC_MSG_RESULT([no]) ],
Darren Tuckerb7918af2008-03-09 11:34:23 +1100226 [ AC_MSG_WARN([cross compiling: cannot test])
227 break ]
Darren Tuckerfe1cf972008-03-09 22:50:50 +1100228 )
Darren Tuckerb7918af2008-03-09 11:34:23 +1100229 ],
Tim Rice648f8762011-01-26 12:38:57 -0800230 [ AC_MSG_RESULT([no]) ]
Darren Tuckerb7918af2008-03-09 11:34:23 +1100231 )
232 CFLAGS="$saved_CFLAGS"
233 LDFLAGS="$saved_LDFLAGS"
234 done
235 fi
Darren Tucker319b3d92007-12-02 21:02:22 +1100236
Darren Tucker67b37032005-06-03 17:58:31 +1000237 if test -z "$have_llong_max"; then
238 # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
239 unset ac_cv_have_decl_LLONG_MAX
240 saved_CFLAGS="$CFLAGS"
241 CFLAGS="$CFLAGS -std=gnu99"
Tim Rice648f8762011-01-26 12:38:57 -0800242 AC_CHECK_DECL([LLONG_MAX],
Darren Tucker67b37032005-06-03 17:58:31 +1000243 [have_llong_max=1],
244 [CFLAGS="$saved_CFLAGS"],
245 [#include <limits.h>]
246 )
247 fi
Damien Miller166bd442000-03-16 10:48:25 +1100248fi
249
Darren Tucker951b53b2013-02-08 11:50:09 +1100250AC_MSG_CHECKING([if compiler allows __attribute__ on return types])
251AC_COMPILE_IFELSE(
252 [AC_LANG_PROGRAM([[
253#include <stdlib.h>
254__attribute__((__unused__)) static void foo(void){return;}]],
255 [[ exit(0); ]])],
256 [ AC_MSG_RESULT([yes]) ],
257 [ AC_MSG_RESULT([no])
258 AC_DEFINE(NO_ATTRIBUTE_ON_RETURN_TYPE, 1,
259 [compiler does not accept __attribute__ on return types]) ]
260)
261
Darren Tucker391de5c2007-04-29 14:49:21 +1000262if test "x$no_attrib_nonnull" != "x1" ; then
Tim Rice648f8762011-01-26 12:38:57 -0800263 AC_DEFINE([HAVE_ATTRIBUTE__NONNULL__], [1], [Have attribute nonnull])
Darren Tucker391de5c2007-04-29 14:49:21 +1000264fi
265
Tim Rice648f8762011-01-26 12:38:57 -0800266AC_ARG_WITH([rpath],
Tim Rice88368a32003-12-08 12:35:59 -0800267 [ --without-rpath Disable auto-added -R linker paths],
268 [
Tim Riceeae17cc2005-03-17 16:52:20 -0800269 if test "x$withval" = "xno" ; then
Tim Rice88368a32003-12-08 12:35:59 -0800270 need_dash_r=""
271 fi
272 if test "x$withval" = "xyes" ; then
273 need_dash_r=1
274 fi
275 ]
276)
277
Tim Rice1cfab232006-10-03 09:34:35 -0700278# Allow user to specify flags
Tim Rice648f8762011-01-26 12:38:57 -0800279AC_ARG_WITH([cflags],
Tim Rice1cfab232006-10-03 09:34:35 -0700280 [ --with-cflags Specify additional flags to pass to compiler],
281 [
282 if test -n "$withval" && test "x$withval" != "xno" && \
283 test "x${withval}" != "xyes"; then
284 CFLAGS="$CFLAGS $withval"
285 fi
286 ]
287)
Tim Rice648f8762011-01-26 12:38:57 -0800288AC_ARG_WITH([cppflags],
Tim Rice1cfab232006-10-03 09:34:35 -0700289 [ --with-cppflags Specify additional flags to pass to preprocessor] ,
290 [
291 if test -n "$withval" && test "x$withval" != "xno" && \
292 test "x${withval}" != "xyes"; then
293 CPPFLAGS="$CPPFLAGS $withval"
294 fi
295 ]
296)
Tim Rice648f8762011-01-26 12:38:57 -0800297AC_ARG_WITH([ldflags],
Tim Rice1cfab232006-10-03 09:34:35 -0700298 [ --with-ldflags Specify additional flags to pass to linker],
299 [
300 if test -n "$withval" && test "x$withval" != "xno" && \
301 test "x${withval}" != "xyes"; then
302 LDFLAGS="$LDFLAGS $withval"
303 fi
304 ]
305)
Tim Rice648f8762011-01-26 12:38:57 -0800306AC_ARG_WITH([libs],
Tim Rice1cfab232006-10-03 09:34:35 -0700307 [ --with-libs Specify additional libraries to link with],
308 [
309 if test -n "$withval" && test "x$withval" != "xno" && \
310 test "x${withval}" != "xyes"; then
311 LIBS="$LIBS $withval"
312 fi
313 ]
314)
Tim Rice648f8762011-01-26 12:38:57 -0800315AC_ARG_WITH([Werror],
Tim Rice1cfab232006-10-03 09:34:35 -0700316 [ --with-Werror Build main code with -Werror],
317 [
318 if test -n "$withval" && test "x$withval" != "xno"; then
319 werror_flags="-Werror"
320 if test "x${withval}" != "xyes"; then
321 werror_flags="$withval"
322 fi
323 fi
324 ]
325)
326
Tim Rice648f8762011-01-26 12:38:57 -0800327AC_CHECK_HEADERS([ \
Damien Miller1ff130d2013-12-07 11:51:51 +1100328 blf.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700329 bstring.h \
330 crypt.h \
331 crypto/sha2.h \
332 dirent.h \
333 endian.h \
Damien Miller91f40d82013-02-22 11:37:00 +1100334 elf.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700335 features.h \
336 fcntl.h \
337 floatingpoint.h \
338 getopt.h \
339 glob.h \
340 ia.h \
341 iaf.h \
Darren Tucker6d725682014-01-17 19:17:34 +1100342 inttypes.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700343 limits.h \
Darren Tuckerae133d42013-06-06 08:30:20 +1000344 locale.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700345 login.h \
346 maillock.h \
347 ndir.h \
348 net/if_tun.h \
349 netdb.h \
350 netgroup.h \
351 pam/pam_appl.h \
352 paths.h \
Darren Tuckerfebf0f52007-06-25 22:15:12 +1000353 poll.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700354 pty.h \
355 readpassphrase.h \
356 rpc/types.h \
357 security/pam_appl.h \
358 sha2.h \
359 shadow.h \
360 stddef.h \
361 stdint.h \
362 string.h \
363 strings.h \
364 sys/audit.h \
365 sys/bitypes.h \
366 sys/bsdtty.h \
Damien Millerc96d8532014-01-25 13:12:28 +1100367 sys/capability.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700368 sys/cdefs.h \
369 sys/dir.h \
370 sys/mman.h \
371 sys/ndir.h \
Darren Tucker7c92a652007-09-27 07:00:09 +1000372 sys/poll.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700373 sys/prctl.h \
374 sys/pstat.h \
375 sys/select.h \
376 sys/stat.h \
377 sys/stream.h \
378 sys/stropts.h \
379 sys/strtio.h \
Darren Tucker5b2e2ba2008-06-08 09:25:28 +1000380 sys/statvfs.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700381 sys/sysmacros.h \
382 sys/time.h \
383 sys/timers.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700384 time.h \
385 tmpdir.h \
386 ttyent.h \
Tim Riceaa8954f2007-05-09 15:57:43 -0700387 ucred.h \
Tim Rice1cfab232006-10-03 09:34:35 -0700388 unistd.h \
389 usersec.h \
390 util.h \
391 utime.h \
392 utmp.h \
393 utmpx.h \
394 vis.h \
Tim Rice648f8762011-01-26 12:38:57 -0800395])
Tim Rice1cfab232006-10-03 09:34:35 -0700396
397# lastlog.h requires sys/time.h to be included first on Solaris
Tim Rice648f8762011-01-26 12:38:57 -0800398AC_CHECK_HEADERS([lastlog.h], [], [], [
Tim Rice1cfab232006-10-03 09:34:35 -0700399#ifdef HAVE_SYS_TIME_H
400# include <sys/time.h>
401#endif
402])
403
404# sys/ptms.h requires sys/stream.h to be included first on Solaris
Tim Rice648f8762011-01-26 12:38:57 -0800405AC_CHECK_HEADERS([sys/ptms.h], [], [], [
Tim Rice1cfab232006-10-03 09:34:35 -0700406#ifdef HAVE_SYS_STREAM_H
407# include <sys/stream.h>
408#endif
409])
410
411# login_cap.h requires sys/types.h on NetBSD
Tim Rice648f8762011-01-26 12:38:57 -0800412AC_CHECK_HEADERS([login_cap.h], [], [], [
Tim Rice1cfab232006-10-03 09:34:35 -0700413#include <sys/types.h>
414])
415
Darren Tuckerc4b22ca2009-07-12 21:56:29 +1000416# older BSDs need sys/param.h before sys/mount.h
Tim Rice648f8762011-01-26 12:38:57 -0800417AC_CHECK_HEADERS([sys/mount.h], [], [], [
Darren Tuckerc4b22ca2009-07-12 21:56:29 +1000418#include <sys/param.h>
419])
420
Darren Tuckeref4901c2013-06-03 01:59:13 +1000421# Android requires sys/socket.h to be included before sys/un.h
422AC_CHECK_HEADERS([sys/un.h], [], [], [
Darren Tucker0b43ffe2013-06-03 09:30:44 +1000423#include <sys/types.h>
Darren Tucker16cac192013-06-04 12:55:24 +1000424#include <sys/socket.h>
Darren Tuckeref4901c2013-06-03 01:59:13 +1000425])
426
Damien Miller1b06dc32006-08-31 03:24:41 +1000427# Messages for features tested for in target-specific section
428SIA_MSG="no"
429SPC_MSG="no"
Darren Tucker97528352010-11-05 12:03:05 +1100430SP_MSG="no"
Damien Miller1b06dc32006-08-31 03:24:41 +1000431
Damien Millera22ba012000-03-02 23:09:20 +1100432# Check for some target-specific stuff
Damien Miller76112de1999-12-21 11:18:08 +1100433case "$host" in
Damien Miller75b1d102000-01-07 14:01:41 +1100434*-*-aix*)
Darren Tucker9216c372006-09-18 23:17:40 +1000435 # Some versions of VAC won't allow macro redefinitions at
436 # -qlanglevel=ansi, and autoconf 2.60 sometimes insists on using that
437 # particularly with older versions of vac or xlc.
438 # It also throws errors about null macro argments, but these are
439 # not fatal.
Tim Rice648f8762011-01-26 12:38:57 -0800440 AC_MSG_CHECKING([if compiler allows macro redefinitions])
Darren Tucker9216c372006-09-18 23:17:40 +1000441 AC_COMPILE_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -0800442 [AC_LANG_PROGRAM([[
Darren Tucker9216c372006-09-18 23:17:40 +1000443#define testmacro foo
Tim Rice648f8762011-01-26 12:38:57 -0800444#define testmacro bar]],
445 [[ exit(0); ]])],
446 [ AC_MSG_RESULT([yes]) ],
447 [ AC_MSG_RESULT([no])
Darren Tucker9216c372006-09-18 23:17:40 +1000448 CC="`echo $CC | sed 's/-qlanglvl\=ansi//g'`"
449 LD="`echo $LD | sed 's/-qlanglvl\=ansi//g'`"
450 CFLAGS="`echo $CFLAGS | sed 's/-qlanglvl\=ansi//g'`"
451 CPPFLAGS="`echo $CPPFLAGS | sed 's/-qlanglvl\=ansi//g'`"
452 ]
453 )
454
Damien Millera8e06ce2003-11-21 23:48:55 +1100455 AC_MSG_CHECKING([how to specify blibpath for linker ($LD)])
Damien Millereab4bae2003-04-29 23:22:40 +1000456 if (test -z "$blibpath"); then
Tim Ricefcb62202004-01-23 18:35:16 -0800457 blibpath="/usr/lib:/lib"
Damien Miller29ea30d2000-03-17 10:54:15 +1100458 fi
Damien Millereab4bae2003-04-29 23:22:40 +1000459 saved_LDFLAGS="$LDFLAGS"
Darren Tuckerbdc12122006-07-06 11:56:25 +1000460 if test "$GCC" = "yes"; then
461 flags="-Wl,-blibpath: -Wl,-rpath, -blibpath:"
462 else
463 flags="-blibpath: -Wl,-blibpath: -Wl,-rpath,"
464 fi
465 for tryflags in $flags ;do
Damien Millereab4bae2003-04-29 23:22:40 +1000466 if (test -z "$blibflags"); then
467 LDFLAGS="$saved_LDFLAGS $tryflags$blibpath"
Tim Rice648f8762011-01-26 12:38:57 -0800468 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]], [[]])],
469 [blibflags=$tryflags], [])
Damien Millereab4bae2003-04-29 23:22:40 +1000470 fi
471 done
472 if (test -z "$blibflags"); then
Tim Rice648f8762011-01-26 12:38:57 -0800473 AC_MSG_RESULT([not found])
Damien Millereab4bae2003-04-29 23:22:40 +1000474 AC_MSG_ERROR([*** must be able to specify blibpath on AIX - check config.log])
475 else
Tim Rice648f8762011-01-26 12:38:57 -0800476 AC_MSG_RESULT([$blibflags])
Damien Millereab4bae2003-04-29 23:22:40 +1000477 fi
478 LDFLAGS="$saved_LDFLAGS"
Darren Tucker5c6a91a2003-07-14 16:21:44 +1000479 dnl Check for authenticate. Might be in libs.a on older AIXes
Tim Rice648f8762011-01-26 12:38:57 -0800480 AC_CHECK_FUNC([authenticate], [AC_DEFINE([WITH_AIXAUTHENTICATE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700481 [Define if you want to enable AIX4's authenticate function])],
Tim Rice648f8762011-01-26 12:38:57 -0800482 [AC_CHECK_LIB([s], [authenticate],
483 [ AC_DEFINE([WITH_AIXAUTHENTICATE])
Tim Ricee958ed32002-07-05 07:12:33 -0700484 LIBS="$LIBS -ls"
485 ])
486 ])
Darren Tucker3c774c52005-02-16 22:49:31 +1100487 dnl Check for various auth function declarations in headers.
Darren Tucker04cfbe02005-02-20 23:27:11 +1100488 AC_CHECK_DECLS([authenticate, loginrestrictions, loginsuccess,
Darren Tuckere66519d2005-03-21 22:46:34 +1100489 passwdexpired, setauthdb], , , [#include <usersec.h>])
Darren Tucker5c6a91a2003-07-14 16:21:44 +1000490 dnl Check if loginfailed is declared and takes 4 arguments (AIX >= 5.2)
Tim Rice648f8762011-01-26 12:38:57 -0800491 AC_CHECK_DECLS([loginfailed],
492 [AC_MSG_CHECKING([if loginfailed takes 4 arguments])
493 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <usersec.h> ]],
494 [[ (void)loginfailed("user","host","tty",0); ]])],
495 [AC_MSG_RESULT([yes])
496 AC_DEFINE([AIX_LOGINFAILED_4ARG], [1],
497 [Define if your AIX loginfailed() function
498 takes 4 arguments (AIX >= 5.2)])], [AC_MSG_RESULT([no])
499 ])],
500 [],
501 [#include <usersec.h>]
Darren Tucker5c6a91a2003-07-14 16:21:44 +1000502 )
Tim Rice648f8762011-01-26 12:38:57 -0800503 AC_CHECK_FUNCS([getgrset setauthdb])
504 AC_CHECK_DECL([F_CLOSEM],
505 AC_DEFINE([HAVE_FCNTL_CLOSEM], [1], [Use F_CLOSEM fcntl for closefrom]),
Darren Tucker3083bc22006-08-17 19:35:49 +1000506 [],
507 [ #include <limits.h>
508 #include <fcntl.h> ]
509 )
Darren Tucker691d5232005-02-15 21:45:57 +1100510 check_for_aix_broken_getaddrinfo=1
Tim Rice648f8762011-01-26 12:38:57 -0800511 AC_DEFINE([BROKEN_REALPATH], [1], [Define if you have a broken realpath.])
512 AC_DEFINE([SETEUID_BREAKS_SETUID], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700513 [Define if your platform breaks doing a seteuid before a setuid])
Tim Rice648f8762011-01-26 12:38:57 -0800514 AC_DEFINE([BROKEN_SETREUID], [1], [Define if your setreuid() is broken])
515 AC_DEFINE([BROKEN_SETREGID], [1], [Define if your setregid() is broken])
andre60f3c982000-06-03 16:18:19 +0000516 dnl AIX handles lastlog as part of its login message
Tim Rice648f8762011-01-26 12:38:57 -0800517 AC_DEFINE([DISABLE_LASTLOG], [1], [Define if you don't want to use lastlog])
518 AC_DEFINE([LOGIN_NEEDS_UTMPX], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700519 [Some systems need a utmpx entry for /bin/login to work])
Tim Rice648f8762011-01-26 12:38:57 -0800520 AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV],
Tim Rice7df8d392005-09-19 09:33:39 -0700521 [Define to a Set Process Title type if your system is
522 supported by bsd-setproctitle.c])
Tim Rice648f8762011-01-26 12:38:57 -0800523 AC_DEFINE([SSHPAM_CHAUTHTOK_NEEDS_RUID], [1],
Darren Tucker91d25a02005-11-26 22:24:09 +1100524 [AIX 5.2 and 5.3 (and presumably newer) require this])
Tim Rice648f8762011-01-26 12:38:57 -0800525 AC_DEFINE([PTY_ZEROREAD], [1], [read(1) can return 0 for a non-closed fd])
Darren Tuckeraa97d132013-03-12 11:31:05 +1100526 AC_DEFINE([PLATFORM_SYS_DIR_UID], 2, [System dirs owned by bin (uid 2)])
Damien Miller75b1d102000-01-07 14:01:41 +1100527 ;;
Darren Tucker898ac932013-06-03 02:03:25 +1000528*-*-android*)
529 AC_DEFINE([DISABLE_UTMP], [1], [Define if you don't want to use utmp])
530 AC_DEFINE([DISABLE_WTMP], [1], [Define if you don't want to use wtmp])
531 ;;
Damien Millerbac2d8a2000-09-05 16:13:06 +1100532*-*-cygwin*)
Damien Millerc8936ac2003-02-11 10:04:03 +1100533 check_for_libcrypt_later=1
Darren Tucker573e3872007-03-02 17:50:03 +1100534 LIBS="$LIBS /usr/lib/textreadmode.o"
Tim Rice648f8762011-01-26 12:38:57 -0800535 AC_DEFINE([HAVE_CYGWIN], [1], [Define if you are on Cygwin])
536 AC_DEFINE([USE_PIPES], [1], [Use PIPES instead of a socketpair()])
537 AC_DEFINE([DISABLE_SHADOW], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700538 [Define if you want to disable shadow passwords])
Tim Rice648f8762011-01-26 12:38:57 -0800539 AC_DEFINE([NO_X11_UNIX_SOCKETS], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700540 [Define if X11 doesn't support AF_UNIX sockets on that system])
Tim Rice648f8762011-01-26 12:38:57 -0800541 AC_DEFINE([NO_IPPORT_RESERVED_CONCEPT], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700542 [Define if the concept of ports only accessible to
543 superusers isn't known])
Tim Rice648f8762011-01-26 12:38:57 -0800544 AC_DEFINE([DISABLE_FD_PASSING], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700545 [Define if your platform needs to skip post auth
546 file descriptor passing])
Tim Rice648f8762011-01-26 12:38:57 -0800547 AC_DEFINE([SSH_IOBUFSZ], [65535], [Windows is sensitive to read buffer size])
Darren Tuckerfdce3732014-01-18 21:12:42 +1100548 AC_DEFINE([FILESYSTEM_NO_BACKSLASH], [1], [File names may not contain backslash characters])
549 # Cygwin defines optargs, optargs as declspec(dllimport) for historical
550 # reasons which cause compile warnings, so we disable those warnings.
551 OSSH_CHECK_CFLAG_COMPILE([-Wno-attributes])
Damien Millerbac2d8a2000-09-05 16:13:06 +1100552 ;;
Ben Lindstrom58055132001-02-15 18:34:29 +0000553*-*-dgux*)
Tim Rice648f8762011-01-26 12:38:57 -0800554 AC_DEFINE([IP_TOS_IS_BROKEN], [1],
Tim Ricea74000e2009-03-18 11:25:02 -0700555 [Define if your system choked on IP TOS setting])
Tim Rice648f8762011-01-26 12:38:57 -0800556 AC_DEFINE([SETEUID_BREAKS_SETUID])
557 AC_DEFINE([BROKEN_SETREUID])
558 AC_DEFINE([BROKEN_SETREGID])
Ben Lindstrom58055132001-02-15 18:34:29 +0000559 ;;
Ben Lindstromfed7bb42001-07-15 18:30:42 +0000560*-*-darwin*)
Damien Miller852472a2014-01-22 16:31:18 +1100561 use_pie=auto
Tim Rice648f8762011-01-26 12:38:57 -0800562 AC_MSG_CHECKING([if we have working getaddrinfo])
563 AC_RUN_IFELSE([AC_LANG_SOURCE([[ #include <mach-o/dyld.h>
Damien Millerfc93d4b2002-09-04 23:26:29 +1000564main() { if (NSVersionOfRunTimeLibrary("System") >= (60 << 16))
565 exit(0);
566 else
567 exit(1);
Tim Rice648f8762011-01-26 12:38:57 -0800568}
569 ]])],
570 [AC_MSG_RESULT([working])],
571 [AC_MSG_RESULT([buggy])
572 AC_DEFINE([BROKEN_GETADDRINFO], [1],
573 [getaddrinfo is broken (if present)])
574 ],
575 [AC_MSG_RESULT([assume it is working])])
576 AC_DEFINE([SETEUID_BREAKS_SETUID])
577 AC_DEFINE([BROKEN_SETREUID])
578 AC_DEFINE([BROKEN_SETREGID])
579 AC_DEFINE([BROKEN_GLOB], [1], [OS X glob does not do what we expect])
580 AC_DEFINE_UNQUOTED([BIND_8_COMPAT], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700581 [Define if your resolver libs need this for getrrsetbyname])
Tim Rice648f8762011-01-26 12:38:57 -0800582 AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
583 AC_DEFINE([SSH_TUN_COMPAT_AF], [1],
Darren Tucker3eb48342006-06-23 21:05:12 +1000584 [Use tunnel device compatibility to OpenBSD])
Tim Rice648f8762011-01-26 12:38:57 -0800585 AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
Darren Tucker3eb48342006-06-23 21:05:12 +1000586 [Prepend the address family to IP tunnel traffic])
Tim Rice648f8762011-01-26 12:38:57 -0800587 m4_pattern_allow([AU_IPv])
588 AC_CHECK_DECL([AU_IPv4], [],
589 AC_DEFINE([AU_IPv4], [0], [System only supports IPv4 audit records])
Darren Tuckeracada072008-02-25 21:05:04 +1100590 [#include <bsm/audit.h>]
Tim Rice648f8762011-01-26 12:38:57 -0800591 AC_DEFINE([LASTLOG_WRITE_PUTUTXLINE], [1],
Damien Miller20e231f2009-02-12 13:12:21 +1100592 [Define if pututxline updates lastlog too])
Darren Tuckeracada072008-02-25 21:05:04 +1100593 )
Damien Millerc09182f2011-06-03 12:11:38 +1000594 AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV],
595 [Define to a Set Process Title type if your system is
596 supported by bsd-setproctitle.c])
Damien Millercd5e52e2011-06-27 07:18:18 +1000597 AC_CHECK_FUNCS([sandbox_init])
598 AC_CHECK_HEADERS([sandbox.h])
Ben Lindstromfed7bb42001-07-15 18:30:42 +0000599 ;;
Darren Tucker57b29202006-09-10 20:25:51 +1000600*-*-dragonfly*)
601 SSHDLIBS="$SSHDLIBS -lcrypt"
Darren Tucker882abfd2013-11-09 00:17:41 +1100602 TEST_MALLOC_OPTIONS="AFGJPRX"
Darren Tucker57b29202006-09-10 20:25:51 +1000603 ;;
Darren Tuckera83d90f2010-03-26 10:27:33 +1100604*-*-haiku*)
605 LIBS="$LIBS -lbsd "
Tim Rice648f8762011-01-26 12:38:57 -0800606 AC_CHECK_LIB([network], [socket])
607 AC_DEFINE([HAVE_U_INT64_T])
Darren Tuckera83d90f2010-03-26 10:27:33 +1100608 MANTYPE=man
609 ;;
Darren Tuckerfd333282005-05-28 18:31:42 +1000610*-*-hpux*)
611 # first we define all of the options common to all HP-UX releases
Kevin Steves315f8b72001-06-28 00:24:41 +0000612 CPPFLAGS="$CPPFLAGS -D_HPUX_SOURCE -D_XOPEN_SOURCE -D_XOPEN_SOURCE_EXTENDED=1"
Damien Miller9a947342000-08-30 10:03:33 +1100613 IPADDR_IN_DISPLAY=yes
Tim Rice648f8762011-01-26 12:38:57 -0800614 AC_DEFINE([USE_PIPES])
615 AC_DEFINE([LOGIN_NO_ENDOPT], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700616 [Define if your login program cannot handle end of options ("--")])
Tim Rice648f8762011-01-26 12:38:57 -0800617 AC_DEFINE([LOGIN_NEEDS_UTMPX])
618 AC_DEFINE([LOCKED_PASSWD_STRING], ["*"],
Tim Rice7df8d392005-09-19 09:33:39 -0700619 [String used in /etc/passwd to denote locked account])
Tim Rice648f8762011-01-26 12:38:57 -0800620 AC_DEFINE([SPT_TYPE], [SPT_PSTAT])
Darren Tuckeraa97d132013-03-12 11:31:05 +1100621 AC_DEFINE([PLATFORM_SYS_DIR_UID], 2, [System dirs owned by bin (uid 2)])
Tim Rice90f42b02011-06-02 18:17:49 -0700622 maildir="/var/mail"
Tim Ricef028f1e2002-07-19 12:41:10 -0700623 LIBS="$LIBS -lsec"
Tim Rice648f8762011-01-26 12:38:57 -0800624 AC_CHECK_LIB([xnet], [t_error], ,
625 [AC_MSG_ERROR([*** -lxnet needed on HP-UX - check config.log ***])])
Darren Tuckerfd333282005-05-28 18:31:42 +1000626
627 # next, we define all of the options specific to major releases
628 case "$host" in
629 *-*-hpux10*)
630 if test -z "$GCC"; then
631 CFLAGS="$CFLAGS -Ae"
632 fi
633 ;;
634 *-*-hpux11*)
Tim Rice648f8762011-01-26 12:38:57 -0800635 AC_DEFINE([PAM_SUN_CODEBASE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700636 [Define if you are using Solaris-derived PAM which
637 passes pam_messages to the conversation function
638 with an extra level of indirection])
Tim Rice648f8762011-01-26 12:38:57 -0800639 AC_DEFINE([DISABLE_UTMP], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700640 [Define if you don't want to use utmp])
Tim Rice648f8762011-01-26 12:38:57 -0800641 AC_DEFINE([USE_BTMP], [1], [Use btmp to log bad logins])
Darren Tuckerfd333282005-05-28 18:31:42 +1000642 check_for_hpux_broken_getaddrinfo=1
643 check_for_conflicting_getspnam=1
644 ;;
645 esac
646
647 # lastly, we define options specific to minor releases
648 case "$host" in
649 *-*-hpux10.26)
Tim Rice648f8762011-01-26 12:38:57 -0800650 AC_DEFINE([HAVE_SECUREWARE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700651 [Define if you have SecureWare-based
652 protected password database])
Darren Tuckerfd333282005-05-28 18:31:42 +1000653 disable_ptmx_check=yes
654 LIBS="$LIBS -lsecpw"
655 ;;
656 esac
Damien Miller1bead332000-04-30 00:47:29 +1000657 ;;
Damien Millerbeb4ba51999-12-28 15:09:35 +1100658*-*-irix5*)
Damien Miller190d5a82000-09-30 09:43:19 +1100659 PATH="$PATH:/usr/etc"
Tim Rice648f8762011-01-26 12:38:57 -0800660 AC_DEFINE([BROKEN_INET_NTOA], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700661 [Define if you system's inet_ntoa is busted
662 (e.g. Irix gcc issue)])
Tim Rice648f8762011-01-26 12:38:57 -0800663 AC_DEFINE([SETEUID_BREAKS_SETUID])
664 AC_DEFINE([BROKEN_SETREUID])
665 AC_DEFINE([BROKEN_SETREGID])
666 AC_DEFINE([WITH_ABBREV_NO_TTY], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700667 [Define if you shouldn't strip 'tty' from your
668 ttyname in [uw]tmp])
Tim Rice648f8762011-01-26 12:38:57 -0800669 AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
Damien Miller1808f382000-01-06 12:03:12 +1100670 ;;
671*-*-irix6*)
Damien Miller190d5a82000-09-30 09:43:19 +1100672 PATH="$PATH:/usr/etc"
Tim Rice648f8762011-01-26 12:38:57 -0800673 AC_DEFINE([WITH_IRIX_ARRAY], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700674 [Define if you have/want arrays
675 (cluster-wide session managment, not C arrays)])
Tim Rice648f8762011-01-26 12:38:57 -0800676 AC_DEFINE([WITH_IRIX_PROJECT], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700677 [Define if you want IRIX project management])
Tim Rice648f8762011-01-26 12:38:57 -0800678 AC_DEFINE([WITH_IRIX_AUDIT], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700679 [Define if you want IRIX audit trails])
Tim Rice648f8762011-01-26 12:38:57 -0800680 AC_CHECK_FUNC([jlimit_startjob], [AC_DEFINE([WITH_IRIX_JOBS], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700681 [Define if you want IRIX kernel jobs])])
Tim Rice648f8762011-01-26 12:38:57 -0800682 AC_DEFINE([BROKEN_INET_NTOA])
683 AC_DEFINE([SETEUID_BREAKS_SETUID])
684 AC_DEFINE([BROKEN_SETREUID])
685 AC_DEFINE([BROKEN_SETREGID])
686 AC_DEFINE([BROKEN_UPDWTMPX], [1], [updwtmpx is broken (if present)])
687 AC_DEFINE([WITH_ABBREV_NO_TTY])
688 AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
Damien Millerbeb4ba51999-12-28 15:09:35 +1100689 ;;
Damien Miller90551722009-02-16 15:37:03 +1100690*-*-k*bsd*-gnu | *-*-kopensolaris*-gnu)
691 check_for_libcrypt_later=1
Tim Rice648f8762011-01-26 12:38:57 -0800692 AC_DEFINE([PAM_TTY_KLUDGE])
693 AC_DEFINE([LOCKED_PASSWD_PREFIX], ["!"])
694 AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV])
695 AC_DEFINE([_PATH_BTMP], ["/var/log/btmp"], [log for bad login attempts])
696 AC_DEFINE([USE_BTMP], [1], [Use btmp to log bad logins])
Damien Miller90551722009-02-16 15:37:03 +1100697 ;;
Damien Millerb29ea912000-01-15 14:12:03 +1100698*-*-linux*)
699 no_dev_ptmx=1
Damien Miller852472a2014-01-22 16:31:18 +1100700 use_pie=auto
Damien Millera64b57a2001-01-17 10:44:13 +1100701 check_for_libcrypt_later=1
Darren Tucker70a3d552003-08-21 17:58:29 +1000702 check_for_openpty_ctty_bug=1
Tim Rice648f8762011-01-26 12:38:57 -0800703 AC_DEFINE([PAM_TTY_KLUDGE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700704 [Work around problematic Linux PAM modules handling of PAM_TTY])
Tim Rice648f8762011-01-26 12:38:57 -0800705 AC_DEFINE([LOCKED_PASSWD_PREFIX], ["!"],
Tim Rice7df8d392005-09-19 09:33:39 -0700706 [String used in /etc/passwd to denote locked account])
Tim Rice648f8762011-01-26 12:38:57 -0800707 AC_DEFINE([SPT_TYPE], [SPT_REUSEARGV])
708 AC_DEFINE([LINK_OPNOTSUPP_ERRNO], [EPERM],
Tim Rice7df8d392005-09-19 09:33:39 -0700709 [Define to whatever link() returns for "not supported"
710 if it doesn't return EOPNOTSUPP.])
Tim Rice648f8762011-01-26 12:38:57 -0800711 AC_DEFINE([_PATH_BTMP], ["/var/log/btmp"], [log for bad login attempts])
712 AC_DEFINE([USE_BTMP])
713 AC_DEFINE([LINUX_OOM_ADJUST], [1], [Adjust Linux out-of-memory killer])
Damien Miller7bcb0892000-03-11 20:45:40 +1100714 inet6_default_4in6=yes
Darren Tucker3c016542003-05-02 20:48:21 +1000715 case `uname -r` in
Darren Tuckerc437cda2003-05-10 17:05:46 +1000716 1.*|2.0.*)
Tim Rice648f8762011-01-26 12:38:57 -0800717 AC_DEFINE([BROKEN_CMSG_TYPE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700718 [Define if cmsg_type is not passed correctly])
Darren Tucker3c016542003-05-02 20:48:21 +1000719 ;;
Darren Tucker3c016542003-05-02 20:48:21 +1000720 esac
Damien Miller89e03ba2005-12-31 16:42:03 +1100721 # tun(4) forwarding compat code
Tim Rice648f8762011-01-26 12:38:57 -0800722 AC_CHECK_HEADERS([linux/if_tun.h])
Damien Millerbd4e4102006-01-01 21:03:30 +1100723 if test "x$ac_cv_header_linux_if_tun_h" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -0800724 AC_DEFINE([SSH_TUN_LINUX], [1],
Damien Miller89e03ba2005-12-31 16:42:03 +1100725 [Open tunnel devices the Linux tun/tap way])
Tim Rice648f8762011-01-26 12:38:57 -0800726 AC_DEFINE([SSH_TUN_COMPAT_AF], [1],
Damien Miller89e03ba2005-12-31 16:42:03 +1100727 [Use tunnel device compatibility to OpenBSD])
Tim Rice648f8762011-01-26 12:38:57 -0800728 AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
Damien Miller89e03ba2005-12-31 16:42:03 +1100729 [Prepend the address family to IP tunnel traffic])
730 fi
Darren Tucker60395f92012-07-03 14:31:18 +1000731 AC_CHECK_HEADERS([linux/seccomp.h linux/filter.h linux/audit.h], [],
732 [], [#include <linux/types.h>])
Damien Millere0956e32012-04-04 11:27:54 +1000733 AC_CHECK_FUNCS([prctl])
Damien Miller91f40d82013-02-22 11:37:00 +1100734 AC_MSG_CHECKING([for seccomp architecture])
735 seccomp_audit_arch=
Damien Millere0956e32012-04-04 11:27:54 +1000736 case "$host" in
737 x86_64-*)
Damien Miller91f40d82013-02-22 11:37:00 +1100738 seccomp_audit_arch=AUDIT_ARCH_X86_64
Damien Millere0956e32012-04-04 11:27:54 +1000739 ;;
740 i*86-*)
Damien Miller91f40d82013-02-22 11:37:00 +1100741 seccomp_audit_arch=AUDIT_ARCH_I386
Damien Millere0956e32012-04-04 11:27:54 +1000742 ;;
Damien Miller91f40d82013-02-22 11:37:00 +1100743 arm*-*)
744 seccomp_audit_arch=AUDIT_ARCH_ARM
745 ;;
Damien Millere0956e32012-04-04 11:27:54 +1000746 esac
Damien Miller91f40d82013-02-22 11:37:00 +1100747 if test "x$seccomp_audit_arch" != "x" ; then
748 AC_MSG_RESULT(["$seccomp_audit_arch"])
749 AC_DEFINE_UNQUOTED([SECCOMP_AUDIT_ARCH], [$seccomp_audit_arch],
750 [Specify the system call convention in use])
751 else
752 AC_MSG_RESULT([architecture not supported])
753 fi
Damien Millerb29ea912000-01-15 14:12:03 +1100754 ;;
Ben Lindstromb5628642000-10-18 00:02:25 +0000755mips-sony-bsd|mips-sony-newsos4)
Tim Rice648f8762011-01-26 12:38:57 -0800756 AC_DEFINE([NEED_SETPGRP], [1], [Need setpgrp to acquire controlling tty])
Ben Lindstromb5628642000-10-18 00:02:25 +0000757 SONY=1
Ben Lindstromb5628642000-10-18 00:02:25 +0000758 ;;
Damien Milleree1c0b32000-01-21 00:18:15 +1100759*-*-netbsd*)
Damien Millerfc93d4b2002-09-04 23:26:29 +1000760 check_for_libcrypt_before=1
Tim Riceeae17cc2005-03-17 16:52:20 -0800761 if test "x$withval" != "xno" ; then
Tim Rice88368a32003-12-08 12:35:59 -0800762 need_dash_r=1
763 fi
Tim Rice648f8762011-01-26 12:38:57 -0800764 AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
Damien Miller2dcddbf2006-01-01 19:47:05 +1100765 AC_CHECK_HEADER([net/if_tap.h], ,
Tim Rice648f8762011-01-26 12:38:57 -0800766 AC_DEFINE([SSH_TUN_NO_L2], [1], [No layer 2 tunnel support]))
767 AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
Damien Miller2dcddbf2006-01-01 19:47:05 +1100768 [Prepend the address family to IP tunnel traffic])
Darren Tucker882abfd2013-11-09 00:17:41 +1100769 TEST_MALLOC_OPTIONS="AJRX"
Darren Tucker42a09252014-01-23 23:14:39 +1100770 AC_DEFINE([BROKEN_STRNVIS], [1],
771 [NetBSD strnvis argument order is swapped compared to OpenBSD])
Damien Millerf5bbd3b2014-01-30 11:26:46 +1100772 AC_DEFINE([BROKEN_READ_COMPARISON], [1],
773 [NetBSD read function is sometimes redirected, breaking atomicio comparisons against it])
Damien Milleree1c0b32000-01-21 00:18:15 +1100774 ;;
Damien Millerfbd884a2001-02-27 08:39:07 +1100775*-*-freebsd*)
776 check_for_libcrypt_later=1
Tim Rice648f8762011-01-26 12:38:57 -0800777 AC_DEFINE([LOCKED_PASSWD_PREFIX], ["*LOCKED*"], [Account locked with pw(1)])
778 AC_DEFINE([SSH_TUN_FREEBSD], [1], [Open tunnel devices the FreeBSD way])
Damien Miller2dcddbf2006-01-01 19:47:05 +1100779 AC_CHECK_HEADER([net/if_tap.h], ,
Tim Rice648f8762011-01-26 12:38:57 -0800780 AC_DEFINE([SSH_TUN_NO_L2], [1], [No layer 2 tunnel support]))
781 AC_DEFINE([BROKEN_GLOB], [1], [FreeBSD glob does not do what we need])
Darren Tucker42a09252014-01-23 23:14:39 +1100782 AC_DEFINE([BROKEN_STRNVIS], [1],
783 [FreeBSD strnvis argument order is swapped compared to OpenBSD])
Darren Tucker882abfd2013-11-09 00:17:41 +1100784 TEST_MALLOC_OPTIONS="AJRX"
Damien Miller2035b222014-01-26 09:39:53 +1100785 # Preauth crypto occasionally uses file descriptors for crypto offload
786 # and will crash if they cannot be opened.
Damien Miller5b447c02014-01-26 09:46:53 +1100787 AC_DEFINE([SANDBOX_SKIP_RLIMIT_NOFILE], [1],
Tim Rice03ae0812014-02-21 09:09:34 -0800788 [define if setrlimit RLIMIT_NOFILE breaks things])
Damien Millerfbd884a2001-02-27 08:39:07 +1100789 ;;
Darren Tuckered9eb022003-09-22 11:18:47 +1000790*-*-bsdi*)
Tim Rice648f8762011-01-26 12:38:57 -0800791 AC_DEFINE([SETEUID_BREAKS_SETUID])
792 AC_DEFINE([BROKEN_SETREUID])
793 AC_DEFINE([BROKEN_SETREGID])
Darren Tuckered9eb022003-09-22 11:18:47 +1000794 ;;
Damien Miller0f91b4e2000-06-18 15:43:25 +1000795*-next-*)
Damien Miller0f91b4e2000-06-18 15:43:25 +1000796 conf_lastlog_location="/usr/adm/lastlog"
Damien Millere5192fa2000-08-29 14:30:37 +1100797 conf_utmp_location=/etc/utmp
798 conf_wtmp_location=/usr/adm/wtmp
Tim Rice90f42b02011-06-02 18:17:49 -0700799 maildir=/usr/spool/mail
Tim Rice648f8762011-01-26 12:38:57 -0800800 AC_DEFINE([HAVE_NEXT], [1], [Define if you are on NeXT])
801 AC_DEFINE([BROKEN_REALPATH])
802 AC_DEFINE([USE_PIPES])
803 AC_DEFINE([BROKEN_SAVED_UIDS], [1], [Needed for NeXT])
Damien Miller0f91b4e2000-06-18 15:43:25 +1000804 ;;
Darren Tucker4a422572005-07-14 17:22:11 +1000805*-*-openbsd*)
Damien Miller852472a2014-01-22 16:31:18 +1100806 use_pie=auto
Tim Rice648f8762011-01-26 12:38:57 -0800807 AC_DEFINE([HAVE_ATTRIBUTE__SENTINEL__], [1], [OpenBSD's gcc has sentinel])
808 AC_DEFINE([HAVE_ATTRIBUTE__BOUNDED__], [1], [OpenBSD's gcc has bounded])
809 AC_DEFINE([SSH_TUN_OPENBSD], [1], [Open tunnel devices the OpenBSD way])
810 AC_DEFINE([SYSLOG_R_SAFE_IN_SIGHAND], [1],
Damien Millerbb598142006-08-19 08:38:23 +1000811 [syslog_r function is safe to use in in a signal handler])
Darren Tucker882abfd2013-11-09 00:17:41 +1100812 TEST_MALLOC_OPTIONS="AFGJPRX"
Darren Tucker4a422572005-07-14 17:22:11 +1000813 ;;
Damien Miller75b1d102000-01-07 14:01:41 +1100814*-*-solaris*)
Tim Riceeae17cc2005-03-17 16:52:20 -0800815 if test "x$withval" != "xno" ; then
Tim Ricead4a1882004-02-29 15:53:37 -0800816 need_dash_r=1
817 fi
Tim Rice648f8762011-01-26 12:38:57 -0800818 AC_DEFINE([PAM_SUN_CODEBASE])
819 AC_DEFINE([LOGIN_NEEDS_UTMPX])
820 AC_DEFINE([LOGIN_NEEDS_TERM], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700821 [Some versions of /bin/login need the TERM supplied
822 on the commandline])
Tim Rice648f8762011-01-26 12:38:57 -0800823 AC_DEFINE([PAM_TTY_KLUDGE])
824 AC_DEFINE([SSHPAM_CHAUTHTOK_NEEDS_RUID], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700825 [Define if pam_chauthtok wants real uid set
826 to the unpriv'ed user])
Tim Rice648f8762011-01-26 12:38:57 -0800827 AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
Darren Tuckerc437cda2003-05-10 17:05:46 +1000828 # Pushing STREAMS modules will cause sshd to acquire a controlling tty.
Tim Rice648f8762011-01-26 12:38:57 -0800829 AC_DEFINE([SSHD_ACQUIRES_CTTY], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700830 [Define if sshd somehow reacquires a controlling TTY
831 after setsid()])
Tim Rice648f8762011-01-26 12:38:57 -0800832 AC_DEFINE([PASSWD_NEEDS_USERNAME], [1], [must supply username to passwd
Darren Tucker0249f932006-06-24 12:10:07 +1000833 in case the name is longer than 8 chars])
Tim Rice648f8762011-01-26 12:38:57 -0800834 AC_DEFINE([BROKEN_TCGETATTR_ICANON], [1], [tcgetattr with ICANON may hang])
Darren Tuckere1a790d2003-09-16 11:52:19 +1000835 external_path_file=/etc/default/login
andre2ff7b5d2000-06-03 14:57:40 +0000836 # hardwire lastlog location (can't detect it on some versions)
837 conf_lastlog_location="/var/adm/lastlog"
Tim Rice648f8762011-01-26 12:38:57 -0800838 AC_MSG_CHECKING([for obsolete utmp and wtmp in solaris2.x])
Damien Millera1cb6442000-06-09 11:58:35 +1000839 sol2ver=`echo "$host"| sed -e 's/.*[[0-9]]\.//'`
840 if test "$sol2ver" -ge 8; then
Tim Rice648f8762011-01-26 12:38:57 -0800841 AC_MSG_RESULT([yes])
842 AC_DEFINE([DISABLE_UTMP])
843 AC_DEFINE([DISABLE_WTMP], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700844 [Define if you don't want to use wtmp])
Damien Millera1cb6442000-06-09 11:58:35 +1000845 else
Tim Rice648f8762011-01-26 12:38:57 -0800846 AC_MSG_RESULT([no])
Damien Millera1cb6442000-06-09 11:58:35 +1000847 fi
Tim Rice648f8762011-01-26 12:38:57 -0800848 AC_ARG_WITH([solaris-contracts],
Damien Miller1b06dc32006-08-31 03:24:41 +1000849 [ --with-solaris-contracts Enable Solaris process contracts (experimental)],
850 [
Tim Rice648f8762011-01-26 12:38:57 -0800851 AC_CHECK_LIB([contract], [ct_tmpl_activate],
852 [ AC_DEFINE([USE_SOLARIS_PROCESS_CONTRACTS], [1],
Damien Miller1b06dc32006-08-31 03:24:41 +1000853 [Define if you have Solaris process contracts])
854 SSHDLIBS="$SSHDLIBS -lcontract"
Damien Miller1b06dc32006-08-31 03:24:41 +1000855 SPC_MSG="yes" ], )
856 ],
857 )
Tim Rice648f8762011-01-26 12:38:57 -0800858 AC_ARG_WITH([solaris-projects],
Darren Tucker97528352010-11-05 12:03:05 +1100859 [ --with-solaris-projects Enable Solaris projects (experimental)],
860 [
Tim Rice648f8762011-01-26 12:38:57 -0800861 AC_CHECK_LIB([project], [setproject],
862 [ AC_DEFINE([USE_SOLARIS_PROJECTS], [1],
Darren Tucker97528352010-11-05 12:03:05 +1100863 [Define if you have Solaris projects])
864 SSHDLIBS="$SSHDLIBS -lproject"
Darren Tucker97528352010-11-05 12:03:05 +1100865 SP_MSG="yes" ], )
866 ],
867 )
Tim Rice5ab9b632013-06-02 14:05:48 -0700868 TEST_SHELL=$SHELL # let configure find us a capable shell
Damien Miller75b1d102000-01-07 14:01:41 +1100869 ;;
Damien Millerdfc83f42000-05-20 15:02:59 +1000870*-*-sunos4*)
Ben Lindstrom28bfc0d2000-12-18 19:58:57 +0000871 CPPFLAGS="$CPPFLAGS -DSUNOS4"
Tim Rice648f8762011-01-26 12:38:57 -0800872 AC_CHECK_FUNCS([getpwanam])
873 AC_DEFINE([PAM_SUN_CODEBASE])
Damien Miller36ccb5c2000-08-09 16:34:27 +1000874 conf_utmp_location=/etc/utmp
875 conf_wtmp_location=/var/adm/wtmp
876 conf_lastlog_location=/var/adm/lastlog
Tim Rice648f8762011-01-26 12:38:57 -0800877 AC_DEFINE([USE_PIPES])
Damien Millerdfc83f42000-05-20 15:02:59 +1000878 ;;
Ben Lindstrom603bdfd2001-02-12 07:29:45 +0000879*-ncr-sysv*)
Tim Rice13aae5e2001-10-21 17:53:58 -0700880 LIBS="$LIBS -lc89"
Tim Rice648f8762011-01-26 12:38:57 -0800881 AC_DEFINE([USE_PIPES])
882 AC_DEFINE([SSHD_ACQUIRES_CTTY])
883 AC_DEFINE([SETEUID_BREAKS_SETUID])
884 AC_DEFINE([BROKEN_SETREUID])
885 AC_DEFINE([BROKEN_SETREGID])
Ben Lindstrom603bdfd2001-02-12 07:29:45 +0000886 ;;
Damien Miller2ae714f2000-07-11 09:29:50 +1000887*-sni-sysv*)
Tim Riceffdf4aa2001-10-27 10:45:36 -0700888 # /usr/ucblib MUST NOT be searched on ReliantUNIX
Tim Rice648f8762011-01-26 12:38:57 -0800889 AC_CHECK_LIB([dl], [dlsym], ,)
Darren Tucker79d09fa2005-11-24 22:34:54 +1100890 # -lresolv needs to be at the end of LIBS or DNS lookups break
Tim Rice648f8762011-01-26 12:38:57 -0800891 AC_CHECK_LIB([resolv], [res_query], [ LIBS="$LIBS -lresolv" ])
Damien Millerfd9885e2001-01-10 08:16:53 +1100892 IPADDR_IN_DISPLAY=yes
Tim Rice648f8762011-01-26 12:38:57 -0800893 AC_DEFINE([USE_PIPES])
894 AC_DEFINE([IP_TOS_IS_BROKEN])
895 AC_DEFINE([SETEUID_BREAKS_SETUID])
896 AC_DEFINE([BROKEN_SETREUID])
897 AC_DEFINE([BROKEN_SETREGID])
898 AC_DEFINE([SSHD_ACQUIRES_CTTY])
Darren Tuckere1a790d2003-09-16 11:52:19 +1000899 external_path_file=/etc/default/login
Tim Riceffdf4aa2001-10-27 10:45:36 -0700900 # /usr/ucblib/libucb.a no longer needed on ReliantUNIX
901 # Attention: always take care to bind libsocket and libnsl before libc,
902 # otherwise you will find lots of "SIOCGPGRP errno 22" on syslog
Damien Miller2ae714f2000-07-11 09:29:50 +1000903 ;;
Tim Rice0f83d292004-12-08 18:29:58 -0800904# UnixWare 1.x, UnixWare 2.x, and others based on code from Univel.
Damien Miller78315eb2000-09-29 23:01:36 +1100905*-*-sysv4.2*)
Tim Rice648f8762011-01-26 12:38:57 -0800906 AC_DEFINE([USE_PIPES])
907 AC_DEFINE([SETEUID_BREAKS_SETUID])
908 AC_DEFINE([BROKEN_SETREUID])
909 AC_DEFINE([BROKEN_SETREGID])
910 AC_DEFINE([PASSWD_NEEDS_USERNAME], [1], [must supply username to passwd])
911 AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
Tim Rice5ab9b632013-06-02 14:05:48 -0700912 TEST_SHELL=$SHELL # let configure find us a capable shell
Damien Miller78315eb2000-09-29 23:01:36 +1100913 ;;
Tim Rice0f83d292004-12-08 18:29:58 -0800914# UnixWare 7.x, OpenUNIX 8
Damien Miller78315eb2000-09-29 23:01:36 +1100915*-*-sysv5*)
Tim Rice641ebf12010-01-17 17:05:39 -0800916 CPPFLAGS="$CPPFLAGS -Dvsnprintf=_xvsnprintf -Dsnprintf=_xsnprintf"
Tim Rice648f8762011-01-26 12:38:57 -0800917 AC_DEFINE([UNIXWARE_LONG_PASSWORDS], [1], [Support passwords > 8 chars])
918 AC_DEFINE([USE_PIPES])
919 AC_DEFINE([SETEUID_BREAKS_SETUID])
920 AC_DEFINE([BROKEN_GETADDRINFO])
921 AC_DEFINE([BROKEN_SETREUID])
922 AC_DEFINE([BROKEN_SETREGID])
923 AC_DEFINE([PASSWD_NEEDS_USERNAME])
Tim Rice5ab9b632013-06-02 14:05:48 -0700924 TEST_SHELL=$SHELL # let configure find us a capable shell
Tim Rice4dbacff2005-06-01 20:09:28 -0700925 case "$host" in
926 *-*-sysv5SCO_SV*) # SCO OpenServer 6.x
Tim Rice90f42b02011-06-02 18:17:49 -0700927 maildir=/var/spool/mail
Tim Rice648f8762011-01-26 12:38:57 -0800928 AC_DEFINE([BROKEN_LIBIAF], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700929 [ia_uinfo routines not supported by OS yet])
Tim Rice648f8762011-01-26 12:38:57 -0800930 AC_DEFINE([BROKEN_UPDWTMPX])
931 AC_CHECK_LIB([prot], [getluid], [ LIBS="$LIBS -lprot"
932 AC_CHECK_FUNCS([getluid setluid], , , [-lprot])
933 AC_DEFINE([HAVE_SECUREWARE])
934 AC_DEFINE([DISABLE_SHADOW])
935 ], , )
Tim Rice4dbacff2005-06-01 20:09:28 -0700936 ;;
Tim Rice648f8762011-01-26 12:38:57 -0800937 *) AC_DEFINE([LOCKED_PASSWD_STRING], ["*LK*"])
Tim Rice26767912009-01-07 20:50:08 -0800938 check_for_libcrypt_later=1
Tim Rice46259d82005-11-28 18:40:34 -0800939 ;;
Tim Rice4dbacff2005-06-01 20:09:28 -0700940 esac
Damien Miller78315eb2000-09-29 23:01:36 +1100941 ;;
Damien Miller75b1d102000-01-07 14:01:41 +1100942*-*-sysv*)
Damien Miller75b1d102000-01-07 14:01:41 +1100943 ;;
Tim Rice0f83d292004-12-08 18:29:58 -0800944# SCO UNIX and OEM versions of SCO UNIX
Damien Miller78315eb2000-09-29 23:01:36 +1100945*-*-sco3.2v4*)
Tim Ricec390c8d2005-03-07 01:21:37 -0800946 AC_MSG_ERROR("This Platform is no longer supported.")
Damien Miller78315eb2000-09-29 23:01:36 +1100947 ;;
Tim Rice0f83d292004-12-08 18:29:58 -0800948# SCO OpenServer 5.x
Damien Miller78315eb2000-09-29 23:01:36 +1100949*-*-sco3.2v5*)
Tim Rice89fe3f32003-01-19 20:20:24 -0800950 if test -z "$GCC"; then
951 CFLAGS="$CFLAGS -belf"
952 fi
Damien Miller5dfe9762001-02-16 12:05:39 +1100953 LIBS="$LIBS -lprot -lx -ltinfo -lm"
Damien Millera66626b2000-06-13 18:57:53 +1000954 no_dev_ptmx=1
Tim Rice648f8762011-01-26 12:38:57 -0800955 AC_DEFINE([USE_PIPES])
956 AC_DEFINE([HAVE_SECUREWARE])
957 AC_DEFINE([DISABLE_SHADOW])
958 AC_DEFINE([DISABLE_FD_PASSING])
959 AC_DEFINE([SETEUID_BREAKS_SETUID])
960 AC_DEFINE([BROKEN_GETADDRINFO])
961 AC_DEFINE([BROKEN_SETREUID])
962 AC_DEFINE([BROKEN_SETREGID])
963 AC_DEFINE([WITH_ABBREV_NO_TTY])
964 AC_DEFINE([BROKEN_UPDWTMPX])
965 AC_DEFINE([PASSWD_NEEDS_USERNAME])
966 AC_CHECK_FUNCS([getluid setluid])
Tim Rice07183b82001-04-25 21:40:28 -0700967 MANTYPE=man
Tim Rice5ab9b632013-06-02 14:05:48 -0700968 TEST_SHELL=$SHELL # let configure find us a capable shell
Tim Riceaa86c392013-03-16 20:55:46 -0700969 SKIP_DISABLE_LASTLOG_DEFINE=yes
Damien Millera66626b2000-06-13 18:57:53 +1000970 ;;
Ben Lindstrom232ccf72002-07-22 23:34:25 +0000971*-*-unicosmk*)
Tim Rice648f8762011-01-26 12:38:57 -0800972 AC_DEFINE([NO_SSH_LASTLOG], [1],
Tim Rice7df8d392005-09-19 09:33:39 -0700973 [Define if you don't want to use lastlog in session.c])
Tim Rice648f8762011-01-26 12:38:57 -0800974 AC_DEFINE([SETEUID_BREAKS_SETUID])
975 AC_DEFINE([BROKEN_SETREUID])
976 AC_DEFINE([BROKEN_SETREGID])
977 AC_DEFINE([USE_PIPES])
978 AC_DEFINE([DISABLE_FD_PASSING])
Ben Lindstrom232ccf72002-07-22 23:34:25 +0000979 LDFLAGS="$LDFLAGS"
980 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
981 MANTYPE=cat
Ben Lindstrom762104e2002-07-23 00:00:05 +0000982 ;;
Darren Tucker9f7ffc52003-09-10 11:39:05 +1000983*-*-unicosmp*)
Tim Rice648f8762011-01-26 12:38:57 -0800984 AC_DEFINE([SETEUID_BREAKS_SETUID])
985 AC_DEFINE([BROKEN_SETREUID])
986 AC_DEFINE([BROKEN_SETREGID])
987 AC_DEFINE([WITH_ABBREV_NO_TTY])
988 AC_DEFINE([USE_PIPES])
989 AC_DEFINE([DISABLE_FD_PASSING])
Darren Tucker9f7ffc52003-09-10 11:39:05 +1000990 LDFLAGS="$LDFLAGS"
Darren Tucker2df33432004-01-30 14:34:21 +1100991 LIBS="$LIBS -lgen -lacid -ldb"
Darren Tucker9f7ffc52003-09-10 11:39:05 +1000992 MANTYPE=cat
993 ;;
Ben Lindstromd9e08242001-07-22 19:32:00 +0000994*-*-unicos*)
Tim Rice648f8762011-01-26 12:38:57 -0800995 AC_DEFINE([SETEUID_BREAKS_SETUID])
996 AC_DEFINE([BROKEN_SETREUID])
997 AC_DEFINE([BROKEN_SETREGID])
998 AC_DEFINE([USE_PIPES])
999 AC_DEFINE([DISABLE_FD_PASSING])
1000 AC_DEFINE([NO_SSH_LASTLOG])
Ben Lindstrom232ccf72002-07-22 23:34:25 +00001001 LDFLAGS="$LDFLAGS -Wl,-Dmsglevel=334:fatal"
1002 LIBS="$LIBS -lgen -lrsc -lshare -luex -lacm"
1003 MANTYPE=cat
Tim Ricee991e3c2001-08-07 15:29:07 -07001004 ;;
Damien Millerb8c656e2000-06-28 15:22:41 +10001005*-dec-osf*)
Tim Rice648f8762011-01-26 12:38:57 -08001006 AC_MSG_CHECKING([for Digital Unix SIA])
Ben Lindstrom72af2ef2001-05-08 20:42:28 +00001007 no_osfsia=""
Tim Rice648f8762011-01-26 12:38:57 -08001008 AC_ARG_WITH([osfsia],
Ben Lindstrom72af2ef2001-05-08 20:42:28 +00001009 [ --with-osfsia Enable Digital Unix SIA],
1010 [
1011 if test "x$withval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08001012 AC_MSG_RESULT([disabled])
Ben Lindstrom72af2ef2001-05-08 20:42:28 +00001013 no_osfsia=1
1014 fi
1015 ],
1016 )
1017 if test -z "$no_osfsia" ; then
Damien Millerb8c656e2000-06-28 15:22:41 +10001018 if test -f /etc/sia/matrix.conf; then
Tim Rice648f8762011-01-26 12:38:57 -08001019 AC_MSG_RESULT([yes])
1020 AC_DEFINE([HAVE_OSF_SIA], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001021 [Define if you have Digital Unix Security
1022 Integration Architecture])
Tim Rice648f8762011-01-26 12:38:57 -08001023 AC_DEFINE([DISABLE_LOGIN], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001024 [Define if you don't want to use your
1025 system's login() call])
Tim Rice648f8762011-01-26 12:38:57 -08001026 AC_DEFINE([DISABLE_FD_PASSING])
Damien Millerb8c656e2000-06-28 15:22:41 +10001027 LIBS="$LIBS -lsecurity -ldb -lm -laud"
Damien Miller1b06dc32006-08-31 03:24:41 +10001028 SIA_MSG="yes"
Damien Millerb8c656e2000-06-28 15:22:41 +10001029 else
Tim Rice648f8762011-01-26 12:38:57 -08001030 AC_MSG_RESULT([no])
1031 AC_DEFINE([LOCKED_PASSWD_SUBSTR], ["Nologin"],
Tim Rice7df8d392005-09-19 09:33:39 -07001032 [String used in /etc/passwd to denote locked account])
Damien Millerb8c656e2000-06-28 15:22:41 +10001033 fi
1034 fi
Tim Rice648f8762011-01-26 12:38:57 -08001035 AC_DEFINE([BROKEN_GETADDRINFO])
1036 AC_DEFINE([SETEUID_BREAKS_SETUID])
1037 AC_DEFINE([BROKEN_SETREUID])
1038 AC_DEFINE([BROKEN_SETREGID])
1039 AC_DEFINE([BROKEN_READV_COMPARISON], [1], [Can't do comparisons on readv])
Damien Millerb8c656e2000-06-28 15:22:41 +10001040 ;;
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00001041
Tim Rice70335a62006-02-04 17:42:58 -08001042*-*-nto-qnx*)
Tim Rice648f8762011-01-26 12:38:57 -08001043 AC_DEFINE([USE_PIPES])
1044 AC_DEFINE([NO_X11_UNIX_SOCKETS])
Tim Rice648f8762011-01-26 12:38:57 -08001045 AC_DEFINE([DISABLE_LASTLOG])
1046 AC_DEFINE([SSHD_ACQUIRES_CTTY])
1047 AC_DEFINE([BROKEN_SHADOW_EXPIRE], [1], [QNX shadow support is broken])
Tim Rice2f993462006-02-11 18:37:48 -08001048 enable_etc_default_login=no # has incompatible /etc/default/login
Darren Tucker8acb3b62007-08-10 14:36:12 +10001049 case "$host" in
1050 *-*-nto-qnx6*)
Tim Rice648f8762011-01-26 12:38:57 -08001051 AC_DEFINE([DISABLE_FD_PASSING])
Darren Tucker8acb3b62007-08-10 14:36:12 +10001052 ;;
1053 esac
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00001054 ;;
Darren Tucker2be1cbb2005-05-27 21:13:40 +10001055
1056*-*-ultrix*)
Tim Rice648f8762011-01-26 12:38:57 -08001057 AC_DEFINE([BROKEN_GETGROUPS], [1], [getgroups(0,NULL) will return -1])
1058 AC_DEFINE([BROKEN_MMAP], [1], [Ultrix mmap can't map files])
1059 AC_DEFINE([NEED_SETPGRP])
1060 AC_DEFINE([HAVE_SYS_SYSLOG_H], [1], [Force use of sys/syslog.h on Ultrix])
Tim Ricefcc7ff12005-06-02 20:28:29 -07001061 ;;
Darren Tucker93e7e8f2005-08-23 08:06:55 +10001062
1063*-*-lynxos)
1064 CFLAGS="$CFLAGS -D__NO_INCLUDE_WARN__"
Tim Rice648f8762011-01-26 12:38:57 -08001065 AC_DEFINE([BROKEN_SETVBUF], [1], [LynxOS has broken setvbuf() implementation])
Darren Tucker93e7e8f2005-08-23 08:06:55 +10001066 ;;
Damien Miller76112de1999-12-21 11:18:08 +11001067esac
1068
Tim Rice648f8762011-01-26 12:38:57 -08001069AC_MSG_CHECKING([compiler and flags for sanity])
1070AC_RUN_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]], [[ exit(0); ]])],
1071 [ AC_MSG_RESULT([yes]) ],
Darren Tucker6eb93042003-06-29 21:30:41 +10001072 [
Tim Rice648f8762011-01-26 12:38:57 -08001073 AC_MSG_RESULT([no])
Darren Tucker6eb93042003-06-29 21:30:41 +10001074 AC_MSG_ERROR([*** compiler cannot create working executables, check config.log ***])
Darren Tuckera0c2b392004-09-11 23:26:37 +10001075 ],
1076 [ AC_MSG_WARN([cross compiling: not checking compiler sanity]) ]
Darren Tucker6eb93042003-06-29 21:30:41 +10001077)
1078
Darren Tucker0c9653f2005-05-28 15:58:14 +10001079dnl Checks for header files.
Damien Millera22ba012000-03-02 23:09:20 +11001080# Checks for libraries.
Tim Rice648f8762011-01-26 12:38:57 -08001081AC_CHECK_FUNC([yp_match], , [AC_CHECK_LIB([nsl], [yp_match])])
1082AC_CHECK_FUNC([setsockopt], , [AC_CHECK_LIB([socket], [setsockopt])])
Ben Lindstrom3ad650a2001-01-03 06:02:51 +00001083
Tim Rice1e1ef642003-09-11 22:19:31 -07001084dnl IRIX and Solaris 2.5.1 have dirname() in libgen
Tim Rice648f8762011-01-26 12:38:57 -08001085AC_CHECK_FUNCS([dirname], [AC_CHECK_HEADERS([libgen.h])] , [
1086 AC_CHECK_LIB([gen], [dirname], [
Tim Rice1e1ef642003-09-11 22:19:31 -07001087 AC_CACHE_CHECK([for broken dirname],
1088 ac_cv_have_broken_dirname, [
1089 save_LIBS="$LIBS"
1090 LIBS="$LIBS -lgen"
Darren Tucker314d89e2005-10-17 23:29:23 +10001091 AC_RUN_IFELSE(
1092 [AC_LANG_SOURCE([[
Tim Rice1e1ef642003-09-11 22:19:31 -07001093#include <libgen.h>
1094#include <string.h>
1095
1096int main(int argc, char **argv) {
1097 char *s, buf[32];
1098
1099 strncpy(buf,"/etc", 32);
1100 s = dirname(buf);
1101 if (!s || strncmp(s, "/", 32) != 0) {
1102 exit(1);
1103 } else {
1104 exit(0);
1105 }
1106}
Darren Tucker314d89e2005-10-17 23:29:23 +10001107 ]])],
Tim Rice1e1ef642003-09-11 22:19:31 -07001108 [ ac_cv_have_broken_dirname="no" ],
Darren Tucker314d89e2005-10-17 23:29:23 +10001109 [ ac_cv_have_broken_dirname="yes" ],
1110 [ ac_cv_have_broken_dirname="no" ],
Tim Rice1e1ef642003-09-11 22:19:31 -07001111 )
1112 LIBS="$save_LIBS"
1113 ])
1114 if test "x$ac_cv_have_broken_dirname" = "xno" ; then
1115 LIBS="$LIBS -lgen"
Tim Rice648f8762011-01-26 12:38:57 -08001116 AC_DEFINE([HAVE_DIRNAME])
1117 AC_CHECK_HEADERS([libgen.h])
Tim Rice1e1ef642003-09-11 22:19:31 -07001118 fi
1119 ])
1120])
1121
Tim Rice648f8762011-01-26 12:38:57 -08001122AC_CHECK_FUNC([getspnam], ,
1123 [AC_CHECK_LIB([gen], [getspnam], [LIBS="$LIBS -lgen"])])
1124AC_SEARCH_LIBS([basename], [gen], [AC_DEFINE([HAVE_BASENAME], [1],
1125 [Define if you have the basename function.])])
Tim Rice1e1ef642003-09-11 22:19:31 -07001126
Tim Rice13aae5e2001-10-21 17:53:58 -07001127dnl zlib is required
Tim Rice648f8762011-01-26 12:38:57 -08001128AC_ARG_WITH([zlib],
Tim Rice13aae5e2001-10-21 17:53:58 -07001129 [ --with-zlib=PATH Use zlib in PATH],
Darren Tucker86a5f8d2005-03-21 09:55:17 +11001130 [ if test "x$withval" = "xno" ; then
1131 AC_MSG_ERROR([*** zlib is required ***])
1132 elif test "x$withval" != "xyes"; then
Tim Rice13aae5e2001-10-21 17:53:58 -07001133 if test -d "$withval/lib"; then
1134 if test -n "${need_dash_r}"; then
Tim Rice02cebcd2001-10-25 10:01:30 -07001135 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
Tim Rice13aae5e2001-10-21 17:53:58 -07001136 else
Tim Rice02cebcd2001-10-25 10:01:30 -07001137 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
Tim Rice13aae5e2001-10-21 17:53:58 -07001138 fi
1139 else
1140 if test -n "${need_dash_r}"; then
Tim Rice02cebcd2001-10-25 10:01:30 -07001141 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
Tim Rice13aae5e2001-10-21 17:53:58 -07001142 else
Tim Rice02cebcd2001-10-25 10:01:30 -07001143 LDFLAGS="-L${withval} ${LDFLAGS}"
Tim Rice13aae5e2001-10-21 17:53:58 -07001144 fi
1145 fi
1146 if test -d "$withval/include"; then
Tim Rice02cebcd2001-10-25 10:01:30 -07001147 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
Tim Rice13aae5e2001-10-21 17:53:58 -07001148 else
Tim Rice02cebcd2001-10-25 10:01:30 -07001149 CPPFLAGS="-I${withval} ${CPPFLAGS}"
Tim Rice13aae5e2001-10-21 17:53:58 -07001150 fi
Darren Tucker86a5f8d2005-03-21 09:55:17 +11001151 fi ]
Tim Rice13aae5e2001-10-21 17:53:58 -07001152)
1153
Tim Rice648f8762011-01-26 12:38:57 -08001154AC_CHECK_HEADER([zlib.h], ,[AC_MSG_ERROR([*** zlib.h missing - please install first or check config.log ***])])
1155AC_CHECK_LIB([z], [deflate], ,
Tim Ricefcb62202004-01-23 18:35:16 -08001156 [
1157 saved_CPPFLAGS="$CPPFLAGS"
1158 saved_LDFLAGS="$LDFLAGS"
1159 save_LIBS="$LIBS"
1160 dnl Check default zlib install dir
1161 if test -n "${need_dash_r}"; then
1162 LDFLAGS="-L/usr/local/lib -R/usr/local/lib ${saved_LDFLAGS}"
1163 else
1164 LDFLAGS="-L/usr/local/lib ${saved_LDFLAGS}"
1165 fi
1166 CPPFLAGS="-I/usr/local/include ${saved_CPPFLAGS}"
1167 LIBS="$LIBS -lz"
Tim Rice648f8762011-01-26 12:38:57 -08001168 AC_TRY_LINK_FUNC([deflate], [AC_DEFINE([HAVE_LIBZ])],
Tim Ricefcb62202004-01-23 18:35:16 -08001169 [
1170 AC_MSG_ERROR([*** zlib missing - please install first or check config.log ***])
1171 ]
1172 )
1173 ]
1174)
Darren Tuckerdcc736b2004-01-30 14:20:59 +11001175
Tim Rice648f8762011-01-26 12:38:57 -08001176AC_ARG_WITH([zlib-version-check],
Darren Tuckerdcc736b2004-01-30 14:20:59 +11001177 [ --without-zlib-version-check Disable zlib version check],
1178 [ if test "x$withval" = "xno" ; then
1179 zlib_check_nonfatal=1
1180 fi
1181 ]
1182)
1183
Tim Rice648f8762011-01-26 12:38:57 -08001184AC_MSG_CHECKING([for possibly buggy zlib])
1185AC_RUN_IFELSE([AC_LANG_PROGRAM([[
Darren Tucker2f0b5c42005-04-24 17:52:22 +10001186#include <stdio.h>
Darren Tuckerc8a0f272013-03-22 12:49:14 +11001187#include <stdlib.h>
Darren Tucker2dcd2392004-01-23 17:13:33 +11001188#include <zlib.h>
Tim Rice648f8762011-01-26 12:38:57 -08001189 ]],
1190 [[
Darren Tucker2f0b5c42005-04-24 17:52:22 +10001191 int a=0, b=0, c=0, d=0, n, v;
1192 n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d);
1193 if (n != 3 && n != 4)
Darren Tucker2dcd2392004-01-23 17:13:33 +11001194 exit(1);
Darren Tucker2f0b5c42005-04-24 17:52:22 +10001195 v = a*1000000 + b*10000 + c*100 + d;
1196 fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v);
1197
1198 /* 1.1.4 is OK */
1199 if (a == 1 && b == 1 && c >= 4)
Darren Tucker2dcd2392004-01-23 17:13:33 +11001200 exit(0);
Darren Tucker2f0b5c42005-04-24 17:52:22 +10001201
Darren Tucker41097ed2005-07-25 15:24:21 +10001202 /* 1.2.3 and up are OK */
1203 if (v >= 1020300)
Darren Tucker2f0b5c42005-04-24 17:52:22 +10001204 exit(0);
1205
Darren Tucker2dcd2392004-01-23 17:13:33 +11001206 exit(2);
Darren Tucker623d92f2004-09-12 22:36:15 +10001207 ]])],
Tim Rice648f8762011-01-26 12:38:57 -08001208 AC_MSG_RESULT([no]),
1209 [ AC_MSG_RESULT([yes])
Darren Tuckerdcc736b2004-01-30 14:20:59 +11001210 if test -z "$zlib_check_nonfatal" ; then
1211 AC_MSG_ERROR([*** zlib too old - check config.log ***
1212Your reported zlib version has known security problems. It's possible your
1213vendor has fixed these problems without changing the version number. If you
1214are sure this is the case, you can disable the check by running
1215"./configure --without-zlib-version-check".
Darren Tuckerac1910f2005-07-26 12:00:42 +10001216If you are in doubt, upgrade zlib to version 1.2.3 or greater.
Darren Tucker2f0b5c42005-04-24 17:52:22 +10001217See http://www.gzip.org/zlib/ for details.])
Darren Tuckerdcc736b2004-01-30 14:20:59 +11001218 else
1219 AC_MSG_WARN([zlib version may have security problems])
1220 fi
Darren Tuckera0c2b392004-09-11 23:26:37 +10001221 ],
1222 [ AC_MSG_WARN([cross compiling: not checking zlib version]) ]
Darren Tucker2dcd2392004-01-23 17:13:33 +11001223)
Damien Miller6f9c3372000-10-25 10:06:04 +11001224
Ben Lindstrom3ad650a2001-01-03 06:02:51 +00001225dnl UnixWare 2.x
Tim Rice648f8762011-01-26 12:38:57 -08001226AC_CHECK_FUNC([strcasecmp],
1227 [], [ AC_CHECK_LIB([resolv], [strcasecmp], [LIBS="$LIBS -lresolv"]) ]
Ben Lindstrom3ad650a2001-01-03 06:02:51 +00001228)
Tim Rice648f8762011-01-26 12:38:57 -08001229AC_CHECK_FUNCS([utimes],
1230 [], [ AC_CHECK_LIB([c89], [utimes], [AC_DEFINE([HAVE_UTIMES])
Tim Ricecbb90662002-07-08 19:17:10 -07001231 LIBS="$LIBS -lc89"]) ]
Ben Lindstrom3ad650a2001-01-03 06:02:51 +00001232)
Damien Millerab18c411999-11-11 10:40:23 +11001233
Tim Ricee589a292001-11-03 11:09:32 -08001234dnl Checks for libutil functions
Damien Millerb87f6b72013-02-23 09:12:23 +11001235AC_CHECK_HEADERS([bsd/libutil.h libutil.h])
Damien Miller398c0ff2012-04-19 21:46:35 +10001236AC_SEARCH_LIBS([fmt_scaled], [util bsd])
Darren Tuckere194ba42013-05-16 20:47:31 +10001237AC_SEARCH_LIBS([scan_scaled], [util bsd])
Damien Miller398c0ff2012-04-19 21:46:35 +10001238AC_SEARCH_LIBS([login], [util bsd])
1239AC_SEARCH_LIBS([logout], [util bsd])
1240AC_SEARCH_LIBS([logwtmp], [util bsd])
1241AC_SEARCH_LIBS([openpty], [util bsd])
1242AC_SEARCH_LIBS([updwtmp], [util bsd])
Darren Tuckere194ba42013-05-16 20:47:31 +10001243AC_CHECK_FUNCS([fmt_scaled scan_scaled login logout openpty updwtmp logwtmp])
Tim Ricee589a292001-11-03 11:09:32 -08001244
Damien Millerab039492014-01-28 15:07:10 +11001245# On some platforms, inet_ntop may be found in libresolv or libnsl.
1246AC_SEARCH_LIBS([inet_ntop], [resolv nsl])
1247
Ben Lindstrom8697e082001-02-24 21:41:10 +00001248AC_FUNC_STRFTIME
1249
Damien Miller3c027682001-03-14 11:39:45 +11001250# Check for ALTDIRFUNC glob() extension
Tim Rice648f8762011-01-26 12:38:57 -08001251AC_MSG_CHECKING([for GLOB_ALTDIRFUNC support])
1252AC_EGREP_CPP([FOUNDIT],
Damien Miller3c027682001-03-14 11:39:45 +11001253 [
1254 #include <glob.h>
1255 #ifdef GLOB_ALTDIRFUNC
1256 FOUNDIT
1257 #endif
Damien Millera8e06ce2003-11-21 23:48:55 +11001258 ],
Damien Miller3c027682001-03-14 11:39:45 +11001259 [
Tim Rice648f8762011-01-26 12:38:57 -08001260 AC_DEFINE([GLOB_HAS_ALTDIRFUNC], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001261 [Define if your system glob() function has
1262 the GLOB_ALTDIRFUNC extension])
Tim Rice648f8762011-01-26 12:38:57 -08001263 AC_MSG_RESULT([yes])
Damien Miller3c027682001-03-14 11:39:45 +11001264 ],
1265 [
Tim Rice648f8762011-01-26 12:38:57 -08001266 AC_MSG_RESULT([no])
Damien Miller3c027682001-03-14 11:39:45 +11001267 ]
1268)
Damien Millerab18c411999-11-11 10:40:23 +11001269
Ben Lindstrom45b14db2001-03-17 01:15:38 +00001270# Check for g.gl_matchc glob() extension
Tim Rice648f8762011-01-26 12:38:57 -08001271AC_MSG_CHECKING([for gl_matchc field in glob_t])
1272AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <glob.h> ]],
1273 [[ glob_t g; g.gl_matchc = 1; ]])],
Damien Millera8e06ce2003-11-21 23:48:55 +11001274 [
Tim Rice648f8762011-01-26 12:38:57 -08001275 AC_DEFINE([GLOB_HAS_GL_MATCHC], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001276 [Define if your system glob() function has
1277 gl_matchc options in glob_t])
Tim Rice648f8762011-01-26 12:38:57 -08001278 AC_MSG_RESULT([yes])
1279 ], [
1280 AC_MSG_RESULT([no])
1281])
Ben Lindstrom45b14db2001-03-17 01:15:38 +00001282
Damien Millera6e121a2010-10-07 21:39:17 +11001283# Check for g.gl_statv glob() extension
Tim Rice648f8762011-01-26 12:38:57 -08001284AC_MSG_CHECKING([for gl_statv and GLOB_KEEPSTAT extensions for glob])
1285AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <glob.h> ]], [[
Damien Millera6e121a2010-10-07 21:39:17 +11001286#ifndef GLOB_KEEPSTAT
1287#error "glob does not support GLOB_KEEPSTAT extension"
1288#endif
1289glob_t g;
1290g.gl_statv = NULL;
Tim Rice648f8762011-01-26 12:38:57 -08001291]])],
Damien Millera6e121a2010-10-07 21:39:17 +11001292 [
Tim Rice648f8762011-01-26 12:38:57 -08001293 AC_DEFINE([GLOB_HAS_GL_STATV], [1],
Damien Millera6e121a2010-10-07 21:39:17 +11001294 [Define if your system glob() function has
1295 gl_statv options in glob_t])
Tim Rice648f8762011-01-26 12:38:57 -08001296 AC_MSG_RESULT([yes])
1297 ], [
1298 AC_MSG_RESULT([no])
1299
1300])
Damien Millera6e121a2010-10-07 21:39:17 +11001301
Tim Rice648f8762011-01-26 12:38:57 -08001302AC_CHECK_DECLS([GLOB_NOMATCH], , , [#include <glob.h>])
Darren Tucker096faec2006-09-01 20:29:10 +10001303
Damien Miller18bb4732001-03-28 14:35:30 +10001304AC_MSG_CHECKING([whether struct dirent allocates space for d_name])
Darren Tuckera0c2b392004-09-11 23:26:37 +10001305AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001306 [AC_LANG_PROGRAM([[
Damien Miller18bb4732001-03-28 14:35:30 +10001307#include <sys/types.h>
Tim Rice648f8762011-01-26 12:38:57 -08001308#include <dirent.h>]],
1309 [[
1310 struct dirent d;
1311 exit(sizeof(d.d_name)<=sizeof(char));
Darren Tucker623d92f2004-09-12 22:36:15 +10001312 ]])],
Tim Rice648f8762011-01-26 12:38:57 -08001313 [AC_MSG_RESULT([yes])],
Damien Miller18bb4732001-03-28 14:35:30 +10001314 [
Tim Rice648f8762011-01-26 12:38:57 -08001315 AC_MSG_RESULT([no])
1316 AC_DEFINE([BROKEN_ONE_BYTE_DIRENT_D_NAME], [1],
Darren Tucker79d09fa2005-11-24 22:34:54 +11001317 [Define if your struct dirent expects you to
Tim Rice7df8d392005-09-19 09:33:39 -07001318 allocate extra space for d_name])
Darren Tuckera0c2b392004-09-11 23:26:37 +10001319 ],
Tim Riceeae17cc2005-03-17 16:52:20 -08001320 [
Darren Tuckera0c2b392004-09-11 23:26:37 +10001321 AC_MSG_WARN([cross compiling: assuming BROKEN_ONE_BYTE_DIRENT_D_NAME])
Tim Rice648f8762011-01-26 12:38:57 -08001322 AC_DEFINE([BROKEN_ONE_BYTE_DIRENT_D_NAME])
Damien Miller18bb4732001-03-28 14:35:30 +10001323 ]
1324)
1325
Damien Miller36f49652004-08-15 18:40:59 +10001326AC_MSG_CHECKING([for /proc/pid/fd directory])
1327if test -d "/proc/$$/fd" ; then
Tim Rice648f8762011-01-26 12:38:57 -08001328 AC_DEFINE([HAVE_PROC_PID], [1], [Define if you have /proc/$pid/fd])
1329 AC_MSG_RESULT([yes])
Damien Miller36f49652004-08-15 18:40:59 +10001330else
Tim Rice648f8762011-01-26 12:38:57 -08001331 AC_MSG_RESULT([no])
Damien Miller36f49652004-08-15 18:40:59 +10001332fi
1333
Damien Millerc547bf12001-02-16 10:18:12 +11001334# Check whether user wants S/Key support
Damien Millera8e06ce2003-11-21 23:48:55 +11001335SKEY_MSG="no"
Tim Rice648f8762011-01-26 12:38:57 -08001336AC_ARG_WITH([skey],
Darren Tucker1b6f2292005-02-11 16:11:49 +11001337 [ --with-skey[[=PATH]] Enable S/Key support (optionally in PATH)],
Damien Millerc547bf12001-02-16 10:18:12 +11001338 [
1339 if test "x$withval" != "xno" ; then
1340
1341 if test "x$withval" != "xyes" ; then
1342 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1343 LDFLAGS="$LDFLAGS -L${withval}/lib"
1344 fi
1345
Tim Rice648f8762011-01-26 12:38:57 -08001346 AC_DEFINE([SKEY], [1], [Define if you want S/Key support])
Damien Millerc547bf12001-02-16 10:18:12 +11001347 LIBS="-lskey $LIBS"
Damien Millera8e06ce2003-11-21 23:48:55 +11001348 SKEY_MSG="yes"
Tim Riceeae17cc2005-03-17 16:52:20 -08001349
Tim Rice4cec93f2002-02-26 08:40:48 -08001350 AC_MSG_CHECKING([for s/key support])
Darren Tucker314d89e2005-10-17 23:29:23 +10001351 AC_LINK_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001352 [AC_LANG_PROGRAM([[
Tim Rice4cec93f2002-02-26 08:40:48 -08001353#include <stdio.h>
1354#include <skey.h>
Tim Rice648f8762011-01-26 12:38:57 -08001355 ]], [[
1356 char *ff = skey_keyinfo(""); ff="";
1357 exit(0);
Darren Tucker314d89e2005-10-17 23:29:23 +10001358 ]])],
Tim Rice648f8762011-01-26 12:38:57 -08001359 [AC_MSG_RESULT([yes])],
Tim Rice4cec93f2002-02-26 08:40:48 -08001360 [
Tim Rice648f8762011-01-26 12:38:57 -08001361 AC_MSG_RESULT([no])
Damien Millerc547bf12001-02-16 10:18:12 +11001362 AC_MSG_ERROR([** Incomplete or missing s/key libraries.])
1363 ])
Tim Rice648f8762011-01-26 12:38:57 -08001364 AC_MSG_CHECKING([if skeychallenge takes 4 arguments])
1365 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1366#include <stdio.h>
1367#include <skey.h>
1368 ]], [[
1369 (void)skeychallenge(NULL,"name","",0);
1370 ]])],
1371 [
1372 AC_MSG_RESULT([yes])
1373 AC_DEFINE([SKEYCHALLENGE_4ARG], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001374 [Define if your skeychallenge()
1375 function takes 4 arguments (NetBSD)])],
Tim Rice648f8762011-01-26 12:38:57 -08001376 [
1377 AC_MSG_RESULT([no])
1378 ])
Damien Millerc547bf12001-02-16 10:18:12 +11001379 fi
1380 ]
1381)
1382
Darren Tuckeraa3cbd12011-11-04 11:25:24 +11001383# Check whether user wants to use ldns
1384LDNS_MSG="no"
1385AC_ARG_WITH(ldns,
1386 [ --with-ldns[[=PATH]] Use ldns for DNSSEC support (optionally in PATH)],
1387 [
1388 if test "x$withval" != "xno" ; then
1389
1390 if test "x$withval" != "xyes" ; then
1391 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1392 LDFLAGS="$LDFLAGS -L${withval}/lib"
1393 fi
1394
1395 AC_DEFINE(HAVE_LDNS, 1, [Define if you want ldns support])
1396 LIBS="-lldns $LIBS"
1397 LDNS_MSG="yes"
1398
1399 AC_MSG_CHECKING([for ldns support])
1400 AC_LINK_IFELSE(
1401 [AC_LANG_SOURCE([[
1402#include <stdio.h>
1403#include <stdlib.h>
1404#include <stdint.h>
1405#include <ldns/ldns.h>
1406int main() { ldns_status status = ldns_verify_trusted(NULL, NULL, NULL, NULL); status=LDNS_STATUS_OK; exit(0); }
1407 ]])
1408 ],
1409 [AC_MSG_RESULT(yes)],
1410 [
1411 AC_MSG_RESULT(no)
1412 AC_MSG_ERROR([** Incomplete or missing ldns libraries.])
1413 ])
1414 fi
1415 ]
1416)
1417
Darren Tucker16bcc1c2004-11-07 20:14:34 +11001418# Check whether user wants libedit support
1419LIBEDIT_MSG="no"
Tim Rice648f8762011-01-26 12:38:57 -08001420AC_ARG_WITH([libedit],
Darren Tucker1b6f2292005-02-11 16:11:49 +11001421 [ --with-libedit[[=PATH]] Enable libedit support for sftp],
Darren Tucker16bcc1c2004-11-07 20:14:34 +11001422 [ if test "x$withval" != "xno" ; then
Darren Tuckerc4ccb122010-04-09 14:04:35 +10001423 if test "x$withval" = "xyes" ; then
Darren Tucker59353892012-05-19 15:24:37 +10001424 AC_PATH_TOOL([PKGCONFIG], [pkg-config], [no])
Darren Tuckerc4ccb122010-04-09 14:04:35 +10001425 if test "x$PKGCONFIG" != "xno"; then
Tim Rice648f8762011-01-26 12:38:57 -08001426 AC_MSG_CHECKING([if $PKGCONFIG knows about libedit])
Darren Tuckerc4ccb122010-04-09 14:04:35 +10001427 if "$PKGCONFIG" libedit; then
Tim Rice648f8762011-01-26 12:38:57 -08001428 AC_MSG_RESULT([yes])
Darren Tuckerc4ccb122010-04-09 14:04:35 +10001429 use_pkgconfig_for_libedit=yes
1430 else
Tim Rice648f8762011-01-26 12:38:57 -08001431 AC_MSG_RESULT([no])
Darren Tuckerc4ccb122010-04-09 14:04:35 +10001432 fi
1433 fi
1434 else
Darren Tuckerc373a562005-09-22 20:15:08 +10001435 CPPFLAGS="$CPPFLAGS -I${withval}/include"
1436 if test -n "${need_dash_r}"; then
1437 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
1438 else
1439 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
1440 fi
Darren Tucker1df61452005-03-21 09:58:07 +11001441 fi
Damien Miller1f789802010-10-11 22:35:22 +11001442 if test "x$use_pkgconfig_for_libedit" = "xyes"; then
Darren Tucker8369c8e2013-12-05 11:00:16 +11001443 LIBEDIT=`$PKGCONFIG --libs libedit`
Darren Tuckerc4ccb122010-04-09 14:04:35 +10001444 CPPFLAGS="$CPPFLAGS `$PKGCONFIG --cflags libedit`"
1445 else
1446 LIBEDIT="-ledit -lcurses"
1447 fi
1448 OTHERLIBS=`echo $LIBEDIT | sed 's/-ledit//'`
Tim Rice648f8762011-01-26 12:38:57 -08001449 AC_CHECK_LIB([edit], [el_init],
1450 [ AC_DEFINE([USE_LIBEDIT], [1], [Use libedit for sftp])
Darren Tucker16bcc1c2004-11-07 20:14:34 +11001451 LIBEDIT_MSG="yes"
Tim Rice648f8762011-01-26 12:38:57 -08001452 AC_SUBST([LIBEDIT])
Darren Tucker16bcc1c2004-11-07 20:14:34 +11001453 ],
Tim Rice648f8762011-01-26 12:38:57 -08001454 [ AC_MSG_ERROR([libedit not found]) ],
Darren Tuckerc4ccb122010-04-09 14:04:35 +10001455 [ $OTHERLIBS ]
Darren Tucker16bcc1c2004-11-07 20:14:34 +11001456 )
Tim Rice648f8762011-01-26 12:38:57 -08001457 AC_MSG_CHECKING([if libedit version is compatible])
Tim Ricec1819c82005-08-15 17:48:40 -07001458 AC_COMPILE_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001459 [AC_LANG_PROGRAM([[ #include <histedit.h> ]],
1460 [[
Darren Tuckerc7572b22005-08-10 20:34:15 +10001461 int i = H_SETSIZE;
1462 el_init("", NULL, NULL, NULL);
1463 exit(0);
Tim Ricec1819c82005-08-15 17:48:40 -07001464 ]])],
Tim Rice648f8762011-01-26 12:38:57 -08001465 [ AC_MSG_RESULT([yes]) ],
1466 [ AC_MSG_RESULT([no])
1467 AC_MSG_ERROR([libedit version is not compatible]) ]
Darren Tuckerc7572b22005-08-10 20:34:15 +10001468 )
Darren Tucker16bcc1c2004-11-07 20:14:34 +11001469 fi ]
1470)
1471
Darren Tuckerd9f88912005-02-20 21:01:48 +11001472AUDIT_MODULE=none
Tim Rice648f8762011-01-26 12:38:57 -08001473AC_ARG_WITH([audit],
Darren Tuckerea52a822011-01-17 21:15:27 +11001474 [ --with-audit=module Enable audit support (modules=debug,bsm,linux)],
Darren Tuckerd9f88912005-02-20 21:01:48 +11001475 [
Tim Rice648f8762011-01-26 12:38:57 -08001476 AC_MSG_CHECKING([for supported audit module])
Darren Tuckerd9f88912005-02-20 21:01:48 +11001477 case "$withval" in
1478 bsm)
Tim Rice648f8762011-01-26 12:38:57 -08001479 AC_MSG_RESULT([bsm])
Darren Tuckerd9f88912005-02-20 21:01:48 +11001480 AUDIT_MODULE=bsm
1481 dnl Checks for headers, libs and functions
Tim Rice648f8762011-01-26 12:38:57 -08001482 AC_CHECK_HEADERS([bsm/audit.h], [],
1483 [AC_MSG_ERROR([BSM enabled and bsm/audit.h not found])],
Darren Tucker6d0d6fb2006-09-09 01:05:21 +10001484 [
1485#ifdef HAVE_TIME_H
1486# include <time.h>
1487#endif
1488 ]
1489)
Tim Rice648f8762011-01-26 12:38:57 -08001490 AC_CHECK_LIB([bsm], [getaudit], [],
1491 [AC_MSG_ERROR([BSM enabled and required library not found])])
1492 AC_CHECK_FUNCS([getaudit], [],
1493 [AC_MSG_ERROR([BSM enabled and required function not found])])
Darren Tuckerd9f88912005-02-20 21:01:48 +11001494 # These are optional
Tim Rice648f8762011-01-26 12:38:57 -08001495 AC_CHECK_FUNCS([getaudit_addr aug_get_machine])
1496 AC_DEFINE([USE_BSM_AUDIT], [1], [Use BSM audit module])
Darren Tucker1fcec9d2013-12-19 11:00:12 +11001497 if test "$sol2ver" -ge 11; then
Darren Tucker93a2d412012-02-24 10:40:41 +11001498 SSHDLIBS="$SSHDLIBS -lscf"
1499 AC_DEFINE([BROKEN_BSM_API], [1],
1500 [The system has incomplete BSM API])
1501 fi
Darren Tuckerd9f88912005-02-20 21:01:48 +11001502 ;;
Darren Tuckerea52a822011-01-17 21:15:27 +11001503 linux)
Tim Rice648f8762011-01-26 12:38:57 -08001504 AC_MSG_RESULT([linux])
Darren Tuckerea52a822011-01-17 21:15:27 +11001505 AUDIT_MODULE=linux
1506 dnl Checks for headers, libs and functions
Tim Rice648f8762011-01-26 12:38:57 -08001507 AC_CHECK_HEADERS([libaudit.h])
Darren Tuckerea52a822011-01-17 21:15:27 +11001508 SSHDLIBS="$SSHDLIBS -laudit"
Tim Rice648f8762011-01-26 12:38:57 -08001509 AC_DEFINE([USE_LINUX_AUDIT], [1], [Use Linux audit module])
Darren Tuckerea52a822011-01-17 21:15:27 +11001510 ;;
Darren Tuckerd9f88912005-02-20 21:01:48 +11001511 debug)
1512 AUDIT_MODULE=debug
Tim Rice648f8762011-01-26 12:38:57 -08001513 AC_MSG_RESULT([debug])
1514 AC_DEFINE([SSH_AUDIT_EVENTS], [1], [Use audit debugging module])
Darren Tuckerd9f88912005-02-20 21:01:48 +11001515 ;;
Tim Rice8bc6b902005-08-09 10:09:53 -07001516 no)
Tim Rice648f8762011-01-26 12:38:57 -08001517 AC_MSG_RESULT([no])
Tim Rice8bc6b902005-08-09 10:09:53 -07001518 ;;
Darren Tuckerd9f88912005-02-20 21:01:48 +11001519 *)
1520 AC_MSG_ERROR([Unknown audit module $withval])
1521 ;;
1522 esac ]
1523)
1524
Darren Tucker096118d2014-01-21 12:48:51 +11001525AC_ARG_WITH([pie],
1526 [ --with-pie Build Position Independent Executables if possible], [
1527 if test "x$withval" = "xno"; then
Damien Miller852472a2014-01-22 16:31:18 +11001528 use_pie=no
Darren Tucker096118d2014-01-21 12:48:51 +11001529 fi
1530 if test "x$withval" = "xyes"; then
Damien Miller852472a2014-01-22 16:31:18 +11001531 use_pie=yes
Darren Tucker096118d2014-01-21 12:48:51 +11001532 fi
1533 ]
1534)
Damien Miller852472a2014-01-22 16:31:18 +11001535if test "x$use_pie" = "x"; then
1536 use_pie=no
1537fi
1538if test "x$use_toolchain_hardening" != "x1" && test "x$use_pie" = "xauto"; then
1539 # Turn off automatic PIE when toolchain hardening is off.
1540 use_pie=no
1541fi
Damien Millerc161fc92014-01-29 21:01:33 +11001542if test "x$use_pie" = "xauto"; then
Damien Miller852472a2014-01-22 16:31:18 +11001543 # Automatic PIE requires gcc >= 4.x
1544 AC_MSG_CHECKING([for gcc >= 4.x])
1545 AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1546#if !defined(__GNUC__) || __GNUC__ < 4
1547#error gcc is too old
1548#endif
1549]])],
1550 [ AC_MSG_RESULT([yes]) ],
1551 [ AC_MSG_RESULT([no])
1552 use_pie=no ]
1553)
1554fi
1555if test "x$use_pie" != "xno"; then
Damien Miller5c2ff5e2014-01-22 21:30:12 +11001556 SAVED_CFLAGS="$CFLAGS"
1557 SAVED_LDFLAGS="$LDFLAGS"
Darren Tucker096118d2014-01-21 12:48:51 +11001558 OSSH_CHECK_CFLAG_COMPILE([-fPIE])
1559 OSSH_CHECK_LDFLAG_LINK([-pie])
Damien Miller5c2ff5e2014-01-22 21:30:12 +11001560 # We use both -fPIE and -pie or neither.
1561 AC_MSG_CHECKING([whether both -fPIE and -pie are supported])
1562 if echo "x $CFLAGS" | grep ' -fPIE' >/dev/null 2>&1 && \
1563 echo "x $LDFLAGS" | grep ' -pie' >/dev/null 2>&1 ; then
1564 AC_MSG_RESULT([yes])
1565 else
1566 AC_MSG_RESULT([no])
1567 CFLAGS="$SAVED_CFLAGS"
1568 LDFLAGS="$SAVED_LDFLAGS"
1569 fi
Darren Tucker096118d2014-01-21 12:48:51 +11001570fi
1571
Damien Millerfe1f1432003-02-24 15:45:42 +11001572dnl Checks for library functions. Please keep in alphabetical order
Tim Rice648f8762011-01-26 12:38:57 -08001573AC_CHECK_FUNCS([ \
Damien Miller1ff130d2013-12-07 11:51:51 +11001574 Blowfish_initstate \
1575 Blowfish_expandstate \
1576 Blowfish_expand0state \
1577 Blowfish_stream2word \
Damien Miller57f39152005-11-24 19:58:19 +11001578 asprintf \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001579 b64_ntop \
1580 __b64_ntop \
1581 b64_pton \
1582 __b64_pton \
1583 bcopy \
Damien Millera9134422013-12-07 11:35:36 +11001584 bcrypt_pbkdf \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001585 bindresvport_sa \
Damien Miller1ff130d2013-12-07 11:51:51 +11001586 blf_enc \
Damien Millerc96d8532014-01-25 13:12:28 +11001587 cap_rights_limit \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001588 clock \
1589 closefrom \
1590 dirfd \
Darren Tuckerefdf5342013-05-30 08:29:08 +10001591 endgrent \
Damien Miller1d2c4562014-02-04 11:18:20 +11001592 explicit_bzero \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001593 fchmod \
1594 fchown \
1595 freeaddrinfo \
Darren Tuckera5cf1e22014-01-17 18:10:58 +11001596 fstatfs \
Darren Tucker598eaa62008-06-09 03:32:29 +10001597 fstatvfs \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001598 futimes \
1599 getaddrinfo \
1600 getcwd \
1601 getgrouplist \
1602 getnameinfo \
1603 getopt \
1604 getpeereid \
Darren Tucker164aa302007-03-21 21:39:57 +11001605 getpeerucred \
Darren Tucker3c4a24c2013-02-15 11:41:35 +11001606 getpgid \
1607 getpgrp \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001608 _getpty \
1609 getrlimit \
1610 getttyent \
1611 glob \
Darren Tucker909a3902010-01-15 12:38:30 +11001612 group_from_gid \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001613 inet_aton \
1614 inet_ntoa \
1615 inet_ntop \
1616 innetgr \
1617 login_getcapbool \
Darren Tuckerae133d42013-06-06 08:30:20 +10001618 mblen \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001619 md5_crypt \
1620 memmove \
Damien Miller3d673d12014-08-27 06:32:01 +10001621 memset_s \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001622 mkdtemp \
1623 mmap \
1624 ngetaddrinfo \
1625 nsleep \
1626 ogetaddrinfo \
1627 openlog_r \
Darren Tuckerfebf0f52007-06-25 22:15:12 +10001628 poll \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001629 prctl \
1630 pstat \
1631 readpassphrase \
Darren Tucker642652d2014-12-10 01:32:23 +11001632 reallocarray \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001633 realpath \
1634 recvmsg \
1635 rresvport_af \
1636 sendmsg \
1637 setdtablesize \
1638 setegid \
1639 setenv \
1640 seteuid \
Darren Tucker909a3902010-01-15 12:38:30 +11001641 setgroupent \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001642 setgroups \
Darren Tucker34f702a2012-07-04 08:50:09 +10001643 setlinebuf \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001644 setlogin \
Darren Tucker909a3902010-01-15 12:38:30 +11001645 setpassent\
Darren Tucker0c9653f2005-05-28 15:58:14 +10001646 setpcred \
1647 setproctitle \
1648 setregid \
1649 setreuid \
1650 setrlimit \
1651 setsid \
1652 setvbuf \
1653 sigaction \
1654 sigvec \
1655 snprintf \
1656 socketpair \
Darren Tucker5b2e2ba2008-06-08 09:25:28 +10001657 statfs \
1658 statvfs \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001659 strdup \
1660 strerror \
1661 strlcat \
1662 strlcpy \
1663 strmode \
Darren Tuckerb54f50e2011-09-29 23:17:18 +10001664 strnlen \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001665 strnvis \
Darren Tuckeraa74f672010-08-16 13:15:23 +10001666 strptime \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001667 strtonum \
Darren Tucker81eb5d52005-06-01 21:39:33 +10001668 strtoll \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001669 strtoul \
Darren Tucker8e6fb782013-02-15 12:13:01 +11001670 strtoull \
Damien Miller34a17692007-06-11 14:15:42 +10001671 swap32 \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001672 sysconf \
1673 tcgetpgrp \
Damien Milleraa180632010-10-07 21:25:27 +11001674 timingsafe_bcmp \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001675 truncate \
1676 unsetenv \
1677 updwtmpx \
Darren Tucker909a3902010-01-15 12:38:30 +11001678 user_from_uid \
Damien Millerf4db77d2013-03-15 10:34:25 +11001679 usleep \
Damien Miller57f39152005-11-24 19:58:19 +11001680 vasprintf \
Darren Tucker0c9653f2005-05-28 15:58:14 +10001681 vsnprintf \
1682 waitpid \
Tim Rice648f8762011-01-26 12:38:57 -08001683])
Tim Rice13aae5e2001-10-21 17:53:58 -07001684
Tim Ricec7a8af02010-11-08 14:26:23 -08001685AC_LINK_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001686 [AC_LANG_PROGRAM(
1687 [[ #include <ctype.h> ]],
1688 [[ return (isblank('a')); ]])],
1689 [AC_DEFINE([HAVE_ISBLANK], [1], [Define if you have isblank(3C).])
Tim Ricec7a8af02010-11-08 14:26:23 -08001690])
1691
Damien Millerb3c9f782010-02-12 10:11:34 +11001692# PKCS#11 support requires dlopen() and co
Tim Rice648f8762011-01-26 12:38:57 -08001693AC_SEARCH_LIBS([dlopen], [dl],
1694 [AC_DEFINE([ENABLE_PKCS11], [], [Enable for PKCS#11 support])]
Damien Millerb3c9f782010-02-12 10:11:34 +11001695)
1696
Darren Tuckerd5e082f2003-09-22 12:08:23 +10001697# IRIX has a const char return value for gai_strerror()
Tim Rice648f8762011-01-26 12:38:57 -08001698AC_CHECK_FUNCS([gai_strerror], [
1699 AC_DEFINE([HAVE_GAI_STRERROR])
1700 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Darren Tuckerd5e082f2003-09-22 12:08:23 +10001701#include <sys/types.h>
1702#include <sys/socket.h>
1703#include <netdb.h>
1704
Tim Rice648f8762011-01-26 12:38:57 -08001705const char *gai_strerror(int);
1706 ]], [[
1707 char *str;
1708 str = gai_strerror(0);
1709 ]])], [
1710 AC_DEFINE([HAVE_CONST_GAI_STRERROR_PROTO], [1],
1711 [Define if gai_strerror() returns const char *])], [])])
Darren Tuckerd5e082f2003-09-22 12:08:23 +10001712
Tim Rice648f8762011-01-26 12:38:57 -08001713AC_SEARCH_LIBS([nanosleep], [rt posix4], [AC_DEFINE([HAVE_NANOSLEEP], [1],
1714 [Some systems put nanosleep outside of libc])])
Damien Millercd6853c2003-01-28 11:33:42 +11001715
Darren Tuckera7108912013-06-02 08:18:31 +10001716AC_SEARCH_LIBS([clock_gettime], [rt],
1717 [AC_DEFINE([HAVE_CLOCK_GETTIME], [1], [Have clock_gettime])])
1718
Darren Tuckerf1159b52003-07-07 19:44:01 +10001719dnl Make sure prototypes are defined for these before using them.
Tim Rice648f8762011-01-26 12:38:57 -08001720AC_CHECK_DECL([getrusage], [AC_CHECK_FUNCS([getrusage])])
1721AC_CHECK_DECL([strsep],
1722 [AC_CHECK_FUNCS([strsep])],
Darren Tucker390b6d52005-05-28 16:54:36 +10001723 [],
1724 [
1725#ifdef HAVE_STRING_H
1726# include <string.h>
1727#endif
1728 ])
Ben Lindstrom3e006472002-10-16 00:24:03 +00001729
Darren Tuckerb2427c82003-09-10 15:22:44 +10001730dnl tcsendbreak might be a macro
Tim Rice648f8762011-01-26 12:38:57 -08001731AC_CHECK_DECL([tcsendbreak],
1732 [AC_DEFINE([HAVE_TCSENDBREAK])],
1733 [AC_CHECK_FUNCS([tcsendbreak])],
Darren Tuckerb2427c82003-09-10 15:22:44 +10001734 [#include <termios.h>]
1735)
1736
Tim Rice648f8762011-01-26 12:38:57 -08001737AC_CHECK_DECLS([h_errno], , ,[#include <netdb.h>])
Darren Tucker5bb14002004-04-23 18:53:10 +10001738
Tim Rice648f8762011-01-26 12:38:57 -08001739AC_CHECK_DECLS([SHUT_RD], , ,
Darren Tucker128a0892006-07-12 19:02:56 +10001740 [
1741#include <sys/types.h>
1742#include <sys/socket.h>
1743 ])
Darren Tucker248469b2006-07-12 14:14:31 +10001744
Tim Rice648f8762011-01-26 12:38:57 -08001745AC_CHECK_DECLS([O_NONBLOCK], , ,
Darren Tucker248469b2006-07-12 14:14:31 +10001746 [
1747#include <sys/types.h>
1748#ifdef HAVE_SYS_STAT_H
1749# include <sys/stat.h>
1750#endif
1751#ifdef HAVE_FCNTL_H
1752# include <fcntl.h>
1753#endif
1754 ])
1755
Tim Rice648f8762011-01-26 12:38:57 -08001756AC_CHECK_DECLS([writev], , , [
Darren Tuckered0b5922006-09-03 22:44:49 +10001757#include <sys/types.h>
1758#include <sys/uio.h>
1759#include <unistd.h>
1760 ])
1761
Tim Rice648f8762011-01-26 12:38:57 -08001762AC_CHECK_DECLS([MAXSYMLINKS], , , [
Darren Tucker6d862a52007-04-29 14:39:02 +10001763#include <sys/param.h>
1764 ])
1765
Tim Rice648f8762011-01-26 12:38:57 -08001766AC_CHECK_DECLS([offsetof], , , [
Darren Tuckerdca0edf2007-04-29 15:06:44 +10001767#include <stddef.h>
1768 ])
1769
Darren Tuckerc7aad002013-06-02 07:18:47 +10001770# extra bits for select(2)
1771AC_CHECK_DECLS([howmany, NFDBITS], [], [], [[
1772#include <sys/param.h>
1773#include <sys/types.h>
1774#ifdef HAVE_SYS_SYSMACROS_H
1775#include <sys/sysmacros.h>
1776#endif
1777#ifdef HAVE_SYS_SELECT_H
1778#include <sys/select.h>
1779#endif
1780#ifdef HAVE_SYS_TIME_H
1781#include <sys/time.h>
1782#endif
1783#ifdef HAVE_UNISTD_H
1784#include <unistd.h>
1785#endif
1786 ]])
1787AC_CHECK_TYPES([fd_mask], [], [], [[
1788#include <sys/param.h>
1789#include <sys/types.h>
1790#ifdef HAVE_SYS_SELECT_H
1791#include <sys/select.h>
1792#endif
1793#ifdef HAVE_SYS_TIME_H
1794#include <sys/time.h>
1795#endif
1796#ifdef HAVE_UNISTD_H
1797#include <unistd.h>
1798#endif
1799 ]])
1800
Tim Rice648f8762011-01-26 12:38:57 -08001801AC_CHECK_FUNCS([setresuid], [
Darren Tucker2a6b0292003-12-31 14:59:17 +11001802 dnl Some platorms have setresuid that isn't implemented, test for this
Tim Rice648f8762011-01-26 12:38:57 -08001803 AC_MSG_CHECKING([if setresuid seems to work])
Darren Tucker623d92f2004-09-12 22:36:15 +10001804 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001805 [AC_LANG_PROGRAM([[
Darren Tuckere937be32003-12-17 18:53:26 +11001806#include <stdlib.h>
1807#include <errno.h>
Tim Rice648f8762011-01-26 12:38:57 -08001808 ]], [[
1809 errno=0;
1810 setresuid(0,0,0);
1811 if (errno==ENOSYS)
1812 exit(1);
1813 else
1814 exit(0);
Darren Tucker623d92f2004-09-12 22:36:15 +10001815 ]])],
Tim Rice648f8762011-01-26 12:38:57 -08001816 [AC_MSG_RESULT([yes])],
1817 [AC_DEFINE([BROKEN_SETRESUID], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001818 [Define if your setresuid() is broken])
Tim Rice648f8762011-01-26 12:38:57 -08001819 AC_MSG_RESULT([not implemented])],
Darren Tuckera0c2b392004-09-11 23:26:37 +10001820 [AC_MSG_WARN([cross compiling: not checking setresuid])]
Darren Tucker2a6b0292003-12-31 14:59:17 +11001821 )
1822])
Darren Tuckere937be32003-12-17 18:53:26 +11001823
Tim Rice648f8762011-01-26 12:38:57 -08001824AC_CHECK_FUNCS([setresgid], [
Darren Tucker2a6b0292003-12-31 14:59:17 +11001825 dnl Some platorms have setresgid that isn't implemented, test for this
Tim Rice648f8762011-01-26 12:38:57 -08001826 AC_MSG_CHECKING([if setresgid seems to work])
Darren Tucker623d92f2004-09-12 22:36:15 +10001827 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001828 [AC_LANG_PROGRAM([[
Darren Tuckere937be32003-12-17 18:53:26 +11001829#include <stdlib.h>
1830#include <errno.h>
Tim Rice648f8762011-01-26 12:38:57 -08001831 ]], [[
1832 errno=0;
1833 setresgid(0,0,0);
1834 if (errno==ENOSYS)
1835 exit(1);
1836 else
1837 exit(0);
Darren Tucker623d92f2004-09-12 22:36:15 +10001838 ]])],
Tim Rice648f8762011-01-26 12:38:57 -08001839 [AC_MSG_RESULT([yes])],
1840 [AC_DEFINE([BROKEN_SETRESGID], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001841 [Define if your setresgid() is broken])
Tim Rice648f8762011-01-26 12:38:57 -08001842 AC_MSG_RESULT([not implemented])],
Darren Tuckera0c2b392004-09-11 23:26:37 +10001843 [AC_MSG_WARN([cross compiling: not checking setresuid])]
Darren Tucker2a6b0292003-12-31 14:59:17 +11001844 )
1845])
Darren Tuckere937be32003-12-17 18:53:26 +11001846
Damien Millerad833b32000-08-23 10:46:23 +10001847dnl Checks for time functions
Tim Rice648f8762011-01-26 12:38:57 -08001848AC_CHECK_FUNCS([gettimeofday time])
Damien Millerad833b32000-08-23 10:46:23 +10001849dnl Checks for utmp functions
Tim Rice648f8762011-01-26 12:38:57 -08001850AC_CHECK_FUNCS([endutent getutent getutid getutline pututline setutent])
1851AC_CHECK_FUNCS([utmpname])
Damien Millerad833b32000-08-23 10:46:23 +10001852dnl Checks for utmpx functions
Tim Rice648f8762011-01-26 12:38:57 -08001853AC_CHECK_FUNCS([endutxent getutxent getutxid getutxline getutxuser pututxline])
1854AC_CHECK_FUNCS([setutxdb setutxent utmpxname])
Damien Miller20e231f2009-02-12 13:12:21 +11001855dnl Checks for lastlog functions
Tim Rice648f8762011-01-26 12:38:57 -08001856AC_CHECK_FUNCS([getlastlogxbyname])
Damien Millercedfecc1999-11-15 14:36:53 +11001857
Tim Rice648f8762011-01-26 12:38:57 -08001858AC_CHECK_FUNC([daemon],
1859 [AC_DEFINE([HAVE_DAEMON], [1], [Define if your libraries define daemon()])],
1860 [AC_CHECK_LIB([bsd], [daemon],
1861 [LIBS="$LIBS -lbsd"; AC_DEFINE([HAVE_DAEMON])])]
Damien Miller04f80141999-11-19 15:32:34 +11001862)
1863
Tim Rice648f8762011-01-26 12:38:57 -08001864AC_CHECK_FUNC([getpagesize],
1865 [AC_DEFINE([HAVE_GETPAGESIZE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001866 [Define if your libraries define getpagesize()])],
Tim Rice648f8762011-01-26 12:38:57 -08001867 [AC_CHECK_LIB([ucb], [getpagesize],
1868 [LIBS="$LIBS -lucb"; AC_DEFINE([HAVE_GETPAGESIZE])])]
Damien Miller9fb07e42000-03-05 16:22:59 +11001869)
1870
Damien Millercb170cb2000-07-01 16:52:55 +10001871# Check for broken snprintf
1872if test "x$ac_cv_func_snprintf" = "xyes" ; then
1873 AC_MSG_CHECKING([whether snprintf correctly terminates long strings])
Darren Tuckera0c2b392004-09-11 23:26:37 +10001874 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001875 [AC_LANG_PROGRAM([[ #include <stdio.h> ]],
1876 [[
1877 char b[5];
1878 snprintf(b,5,"123456789");
1879 exit(b[4]!='\0');
Darren Tucker623d92f2004-09-12 22:36:15 +10001880 ]])],
Tim Rice648f8762011-01-26 12:38:57 -08001881 [AC_MSG_RESULT([yes])],
Damien Millercb170cb2000-07-01 16:52:55 +10001882 [
Tim Rice648f8762011-01-26 12:38:57 -08001883 AC_MSG_RESULT([no])
1884 AC_DEFINE([BROKEN_SNPRINTF], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07001885 [Define if your snprintf is busted])
Damien Millercb170cb2000-07-01 16:52:55 +10001886 AC_MSG_WARN([****** Your snprintf() function is broken, complain to your vendor])
Darren Tuckera0c2b392004-09-11 23:26:37 +10001887 ],
1888 [ AC_MSG_WARN([cross compiling: Assuming working snprintf()]) ]
Damien Millercb170cb2000-07-01 16:52:55 +10001889 )
1890fi
1891
Damien Millerd244a582014-08-23 17:06:49 +10001892# We depend on vsnprintf returning the right thing on overflow: the
1893# number of characters it tried to create (as per SUSv3)
1894if test "x$ac_cv_func_vsnprintf" = "xyes" ; then
Damien Miller57f39152005-11-24 19:58:19 +11001895 AC_MSG_CHECKING([whether vsnprintf returns correct values on overflow])
1896 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001897 [AC_LANG_PROGRAM([[
Damien Miller57f39152005-11-24 19:58:19 +11001898#include <sys/types.h>
1899#include <stdio.h>
1900#include <stdarg.h>
1901
Damien Millerd244a582014-08-23 17:06:49 +10001902int x_snprintf(char *str, size_t count, const char *fmt, ...)
Damien Miller57f39152005-11-24 19:58:19 +11001903{
Damien Millerd244a582014-08-23 17:06:49 +10001904 size_t ret;
1905 va_list ap;
1906
1907 va_start(ap, fmt);
1908 ret = vsnprintf(str, count, fmt, ap);
1909 va_end(ap);
Damien Miller57f39152005-11-24 19:58:19 +11001910 return ret;
1911}
Tim Rice648f8762011-01-26 12:38:57 -08001912 ]], [[
Damien Millerd244a582014-08-23 17:06:49 +10001913char x[1];
1914if (x_snprintf(x, 1, "%s %d", "hello", 12345) != 11)
1915 return 1;
1916if (x_snprintf(NULL, 0, "%s %d", "hello", 12345) != 11)
1917 return 1;
1918return 0;
Tim Rice648f8762011-01-26 12:38:57 -08001919 ]])],
1920 [AC_MSG_RESULT([yes])],
Damien Miller57f39152005-11-24 19:58:19 +11001921 [
Tim Rice648f8762011-01-26 12:38:57 -08001922 AC_MSG_RESULT([no])
1923 AC_DEFINE([BROKEN_SNPRINTF], [1],
Damien Miller57f39152005-11-24 19:58:19 +11001924 [Define if your snprintf is busted])
1925 AC_MSG_WARN([****** Your vsnprintf() function is broken, complain to your vendor])
1926 ],
1927 [ AC_MSG_WARN([cross compiling: Assuming working vsnprintf()]) ]
1928 )
1929fi
1930
Darren Tuckerd40c66c2005-12-17 22:32:03 +11001931# On systems where [v]snprintf is broken, but is declared in stdio,
1932# check that the fmt argument is const char * or just char *.
1933# This is only useful for when BROKEN_SNPRINTF
1934AC_MSG_CHECKING([whether snprintf can declare const char *fmt])
Tim Rice648f8762011-01-26 12:38:57 -08001935AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1936#include <stdio.h>
1937int snprintf(char *a, size_t b, const char *c, ...) { return 0; }
1938 ]], [[
1939 snprintf(0, 0, 0);
1940 ]])],
1941 [AC_MSG_RESULT([yes])
1942 AC_DEFINE([SNPRINTF_CONST], [const],
Darren Tuckerd40c66c2005-12-17 22:32:03 +11001943 [Define as const if snprintf() can declare const char *fmt])],
Tim Rice648f8762011-01-26 12:38:57 -08001944 [AC_MSG_RESULT([no])
1945 AC_DEFINE([SNPRINTF_CONST], [/* not const */])])
Darren Tuckerd40c66c2005-12-17 22:32:03 +11001946
Damien Millerb4097182004-05-23 14:09:40 +10001947# Check for missing getpeereid (or equiv) support
1948NO_PEERCHECK=""
Darren Tucker164aa302007-03-21 21:39:57 +11001949if test "x$ac_cv_func_getpeereid" != "xyes" -a "x$ac_cv_func_getpeerucred" != "xyes"; then
Damien Millerb4097182004-05-23 14:09:40 +10001950 AC_MSG_CHECKING([whether system supports SO_PEERCRED getsockopt])
Tim Rice648f8762011-01-26 12:38:57 -08001951 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1952#include <sys/types.h>
1953#include <sys/socket.h>]], [[int i = SO_PEERCRED;]])],
1954 [ AC_MSG_RESULT([yes])
1955 AC_DEFINE([HAVE_SO_PEERCRED], [1], [Have PEERCRED socket option])
1956 ], [AC_MSG_RESULT([no])
1957 NO_PEERCHECK=1
1958 ])
Damien Millerb4097182004-05-23 14:09:40 +10001959fi
1960
Damien Millere8328192003-01-07 15:18:32 +11001961dnl see whether mkstemp() requires XXXXXX
1962if test "x$ac_cv_func_mkdtemp" = "xyes" ; then
1963AC_MSG_CHECKING([for (overly) strict mkstemp])
Darren Tucker314d89e2005-10-17 23:29:23 +10001964AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001965 [AC_LANG_PROGRAM([[
Damien Millere8328192003-01-07 15:18:32 +11001966#include <stdlib.h>
Tim Rice648f8762011-01-26 12:38:57 -08001967 ]], [[
1968 char template[]="conftest.mkstemp-test";
1969 if (mkstemp(template) == -1)
1970 exit(1);
1971 unlink(template);
1972 exit(0);
Darren Tucker314d89e2005-10-17 23:29:23 +10001973 ]])],
Damien Millere8328192003-01-07 15:18:32 +11001974 [
Tim Rice648f8762011-01-26 12:38:57 -08001975 AC_MSG_RESULT([no])
Damien Millere8328192003-01-07 15:18:32 +11001976 ],
Damien Millera8e06ce2003-11-21 23:48:55 +11001977 [
Tim Rice648f8762011-01-26 12:38:57 -08001978 AC_MSG_RESULT([yes])
1979 AC_DEFINE([HAVE_STRICT_MKSTEMP], [1], [Silly mkstemp()])
Damien Millere8328192003-01-07 15:18:32 +11001980 ],
1981 [
Tim Rice648f8762011-01-26 12:38:57 -08001982 AC_MSG_RESULT([yes])
1983 AC_DEFINE([HAVE_STRICT_MKSTEMP])
Damien Millera8e06ce2003-11-21 23:48:55 +11001984 ]
Damien Millere8328192003-01-07 15:18:32 +11001985)
1986fi
1987
Darren Tucker70a3d552003-08-21 17:58:29 +10001988dnl make sure that openpty does not reacquire controlling terminal
1989if test ! -z "$check_for_openpty_ctty_bug"; then
Tim Rice648f8762011-01-26 12:38:57 -08001990 AC_MSG_CHECKING([if openpty correctly handles controlling tty])
Darren Tucker314d89e2005-10-17 23:29:23 +10001991 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08001992 [AC_LANG_PROGRAM([[
Darren Tucker70a3d552003-08-21 17:58:29 +10001993#include <stdio.h>
1994#include <sys/fcntl.h>
1995#include <sys/types.h>
1996#include <sys/wait.h>
Tim Rice648f8762011-01-26 12:38:57 -08001997 ]], [[
Darren Tucker70a3d552003-08-21 17:58:29 +10001998 pid_t pid;
1999 int fd, ptyfd, ttyfd, status;
2000
2001 pid = fork();
2002 if (pid < 0) { /* failed */
2003 exit(1);
2004 } else if (pid > 0) { /* parent */
2005 waitpid(pid, &status, 0);
Damien Millera8e06ce2003-11-21 23:48:55 +11002006 if (WIFEXITED(status))
Darren Tucker70a3d552003-08-21 17:58:29 +10002007 exit(WEXITSTATUS(status));
2008 else
2009 exit(2);
2010 } else { /* child */
2011 close(0); close(1); close(2);
2012 setsid();
2013 openpty(&ptyfd, &ttyfd, NULL, NULL, NULL);
2014 fd = open("/dev/tty", O_RDWR | O_NOCTTY);
2015 if (fd >= 0)
2016 exit(3); /* Acquired ctty: broken */
2017 else
2018 exit(0); /* Did not acquire ctty: OK */
2019 }
Darren Tucker314d89e2005-10-17 23:29:23 +10002020 ]])],
Darren Tucker70a3d552003-08-21 17:58:29 +10002021 [
Tim Rice648f8762011-01-26 12:38:57 -08002022 AC_MSG_RESULT([yes])
Darren Tucker70a3d552003-08-21 17:58:29 +10002023 ],
2024 [
Tim Rice648f8762011-01-26 12:38:57 -08002025 AC_MSG_RESULT([no])
2026 AC_DEFINE([SSHD_ACQUIRES_CTTY])
Darren Tucker314d89e2005-10-17 23:29:23 +10002027 ],
2028 [
Tim Rice648f8762011-01-26 12:38:57 -08002029 AC_MSG_RESULT([cross-compiling, assuming yes])
Darren Tucker70a3d552003-08-21 17:58:29 +10002030 ]
2031 )
2032fi
2033
Tim Rice8bb561b2005-03-17 16:23:19 -08002034if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
2035 test "x$check_for_hpux_broken_getaddrinfo" = "x1"; then
Tim Rice648f8762011-01-26 12:38:57 -08002036 AC_MSG_CHECKING([if getaddrinfo seems to work])
Darren Tucker314d89e2005-10-17 23:29:23 +10002037 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002038 [AC_LANG_PROGRAM([[
Darren Tucker4398cf52004-04-06 21:39:02 +10002039#include <stdio.h>
2040#include <sys/socket.h>
2041#include <netdb.h>
2042#include <errno.h>
2043#include <netinet/in.h>
2044
2045#define TEST_PORT "2222"
Tim Rice648f8762011-01-26 12:38:57 -08002046 ]], [[
Darren Tucker4398cf52004-04-06 21:39:02 +10002047 int err, sock;
2048 struct addrinfo *gai_ai, *ai, hints;
2049 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
2050
2051 memset(&hints, 0, sizeof(hints));
2052 hints.ai_family = PF_UNSPEC;
2053 hints.ai_socktype = SOCK_STREAM;
2054 hints.ai_flags = AI_PASSIVE;
2055
2056 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
2057 if (err != 0) {
2058 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
2059 exit(1);
2060 }
2061
2062 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
2063 if (ai->ai_family != AF_INET6)
2064 continue;
2065
2066 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
2067 sizeof(ntop), strport, sizeof(strport),
2068 NI_NUMERICHOST|NI_NUMERICSERV);
2069
2070 if (err != 0) {
2071 if (err == EAI_SYSTEM)
2072 perror("getnameinfo EAI_SYSTEM");
2073 else
2074 fprintf(stderr, "getnameinfo failed: %s\n",
2075 gai_strerror(err));
2076 exit(2);
2077 }
2078
2079 sock = socket(ai->ai_family, ai->ai_socktype, ai->ai_protocol);
2080 if (sock < 0)
2081 perror("socket");
2082 if (bind(sock, ai->ai_addr, ai->ai_addrlen) < 0) {
2083 if (errno == EBADF)
2084 exit(3);
2085 }
2086 }
2087 exit(0);
Darren Tucker314d89e2005-10-17 23:29:23 +10002088 ]])],
Darren Tucker4398cf52004-04-06 21:39:02 +10002089 [
Tim Rice648f8762011-01-26 12:38:57 -08002090 AC_MSG_RESULT([yes])
Darren Tucker4398cf52004-04-06 21:39:02 +10002091 ],
2092 [
Tim Rice648f8762011-01-26 12:38:57 -08002093 AC_MSG_RESULT([no])
2094 AC_DEFINE([BROKEN_GETADDRINFO])
Darren Tucker314d89e2005-10-17 23:29:23 +10002095 ],
2096 [
Tim Rice648f8762011-01-26 12:38:57 -08002097 AC_MSG_RESULT([cross-compiling, assuming yes])
Darren Tucker4398cf52004-04-06 21:39:02 +10002098 ]
2099 )
2100fi
2101
Tim Rice8bb561b2005-03-17 16:23:19 -08002102if test "x$ac_cv_func_getaddrinfo" = "xyes" && \
2103 test "x$check_for_aix_broken_getaddrinfo" = "x1"; then
Tim Rice648f8762011-01-26 12:38:57 -08002104 AC_MSG_CHECKING([if getaddrinfo seems to work])
Darren Tucker314d89e2005-10-17 23:29:23 +10002105 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002106 [AC_LANG_PROGRAM([[
Darren Tucker691d5232005-02-15 21:45:57 +11002107#include <stdio.h>
2108#include <sys/socket.h>
2109#include <netdb.h>
2110#include <errno.h>
2111#include <netinet/in.h>
2112
2113#define TEST_PORT "2222"
Tim Rice648f8762011-01-26 12:38:57 -08002114 ]], [[
Darren Tucker691d5232005-02-15 21:45:57 +11002115 int err, sock;
2116 struct addrinfo *gai_ai, *ai, hints;
2117 char ntop[NI_MAXHOST], strport[NI_MAXSERV], *name = NULL;
2118
2119 memset(&hints, 0, sizeof(hints));
2120 hints.ai_family = PF_UNSPEC;
2121 hints.ai_socktype = SOCK_STREAM;
2122 hints.ai_flags = AI_PASSIVE;
2123
2124 err = getaddrinfo(name, TEST_PORT, &hints, &gai_ai);
2125 if (err != 0) {
2126 fprintf(stderr, "getaddrinfo failed (%s)", gai_strerror(err));
2127 exit(1);
2128 }
2129
2130 for (ai = gai_ai; ai != NULL; ai = ai->ai_next) {
2131 if (ai->ai_family != AF_INET && ai->ai_family != AF_INET6)
2132 continue;
2133
2134 err = getnameinfo(ai->ai_addr, ai->ai_addrlen, ntop,
2135 sizeof(ntop), strport, sizeof(strport),
2136 NI_NUMERICHOST|NI_NUMERICSERV);
2137
2138 if (ai->ai_family == AF_INET && err != 0) {
2139 perror("getnameinfo");
2140 exit(2);
2141 }
2142 }
2143 exit(0);
Darren Tucker314d89e2005-10-17 23:29:23 +10002144 ]])],
Darren Tucker691d5232005-02-15 21:45:57 +11002145 [
Tim Rice648f8762011-01-26 12:38:57 -08002146 AC_MSG_RESULT([yes])
2147 AC_DEFINE([AIX_GETNAMEINFO_HACK], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07002148 [Define if you have a getaddrinfo that fails
2149 for the all-zeros IPv6 address])
Darren Tucker691d5232005-02-15 21:45:57 +11002150 ],
2151 [
Tim Rice648f8762011-01-26 12:38:57 -08002152 AC_MSG_RESULT([no])
2153 AC_DEFINE([BROKEN_GETADDRINFO])
Darren Tucker314d89e2005-10-17 23:29:23 +10002154 ],
Darren Tucker8b272ab2006-06-27 11:20:28 +10002155 [
Tim Rice648f8762011-01-26 12:38:57 -08002156 AC_MSG_RESULT([cross-compiling, assuming no])
Darren Tucker691d5232005-02-15 21:45:57 +11002157 ]
2158 )
2159fi
2160
Darren Tuckera56f1912004-11-02 20:30:54 +11002161if test "x$check_for_conflicting_getspnam" = "x1"; then
Tim Rice648f8762011-01-26 12:38:57 -08002162 AC_MSG_CHECKING([for conflicting getspnam in shadow.h])
2163 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <shadow.h> ]],
2164 [[ exit(0); ]])],
Darren Tuckera56f1912004-11-02 20:30:54 +11002165 [
Tim Rice648f8762011-01-26 12:38:57 -08002166 AC_MSG_RESULT([no])
Darren Tuckera56f1912004-11-02 20:30:54 +11002167 ],
2168 [
Tim Rice648f8762011-01-26 12:38:57 -08002169 AC_MSG_RESULT([yes])
2170 AC_DEFINE([GETSPNAM_CONFLICTING_DEFS], [1],
Darren Tuckera56f1912004-11-02 20:30:54 +11002171 [Conflicting defs for getspnam])
2172 ]
2173 )
2174fi
2175
Damien Miller606f8802000-09-16 15:39:56 +11002176AC_FUNC_GETPGRP
2177
Tim Riceaef73712002-05-11 13:17:42 -07002178# Search for OpenSSL
2179saved_CPPFLAGS="$CPPFLAGS"
2180saved_LDFLAGS="$LDFLAGS"
Tim Rice648f8762011-01-26 12:38:57 -08002181AC_ARG_WITH([ssl-dir],
Damien Millera22ba012000-03-02 23:09:20 +11002182 [ --with-ssl-dir=PATH Specify path to OpenSSL installation ],
2183 [
Ben Lindstrom23e13712000-10-29 22:49:19 +00002184 if test "x$withval" != "xno" ; then
Darren Tuckerc7e38d52005-02-09 22:12:30 +11002185 case "$withval" in
2186 # Relative paths
2187 ./*|../*) withval="`pwd`/$withval"
2188 esac
Tim Riceaef73712002-05-11 13:17:42 -07002189 if test -d "$withval/lib"; then
2190 if test -n "${need_dash_r}"; then
2191 LDFLAGS="-L${withval}/lib -R${withval}/lib ${LDFLAGS}"
2192 else
2193 LDFLAGS="-L${withval}/lib ${LDFLAGS}"
2194 fi
Darren Tucker9f8703b2010-04-23 11:12:06 +10002195 elif test -d "$withval/lib64"; then
2196 if test -n "${need_dash_r}"; then
2197 LDFLAGS="-L${withval}/lib64 -R${withval}/lib64 ${LDFLAGS}"
2198 else
2199 LDFLAGS="-L${withval}/lib64 ${LDFLAGS}"
2200 fi
Tim Riceaef73712002-05-11 13:17:42 -07002201 else
2202 if test -n "${need_dash_r}"; then
2203 LDFLAGS="-L${withval} -R${withval} ${LDFLAGS}"
2204 else
2205 LDFLAGS="-L${withval} ${LDFLAGS}"
2206 fi
2207 fi
2208 if test -d "$withval/include"; then
2209 CPPFLAGS="-I${withval}/include ${CPPFLAGS}"
2210 else
2211 CPPFLAGS="-I${withval} ${CPPFLAGS}"
2212 fi
Damien Millera22ba012000-03-02 23:09:20 +11002213 fi
2214 ]
2215)
Tim Rice3d5352e2004-02-12 09:27:21 -08002216LIBS="-lcrypto $LIBS"
Tim Rice648f8762011-01-26 12:38:57 -08002217AC_TRY_LINK_FUNC([RAND_add], [AC_DEFINE([HAVE_OPENSSL], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07002218 [Define if your ssl headers are included
Tim Rice648f8762011-01-26 12:38:57 -08002219 with #include <openssl/header.h>])],
Damien Miller3b512e12000-05-17 23:29:18 +10002220 [
Tim Riceaef73712002-05-11 13:17:42 -07002221 dnl Check default openssl install dir
2222 if test -n "${need_dash_r}"; then
2223 LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib ${saved_LDFLAGS}"
Damien Miller3b512e12000-05-17 23:29:18 +10002224 else
Tim Riceaef73712002-05-11 13:17:42 -07002225 LDFLAGS="-L/usr/local/ssl/lib ${saved_LDFLAGS}"
Damien Miller3b512e12000-05-17 23:29:18 +10002226 fi
Tim Riceaef73712002-05-11 13:17:42 -07002227 CPPFLAGS="-I/usr/local/ssl/include ${saved_CPPFLAGS}"
Darren Tucker83d8f282009-08-17 09:35:22 +10002228 AC_CHECK_HEADER([openssl/opensslv.h], ,
Tim Rice648f8762011-01-26 12:38:57 -08002229 [AC_MSG_ERROR([*** OpenSSL headers missing - please install first or check config.log ***])])
2230 AC_TRY_LINK_FUNC([RAND_add], [AC_DEFINE([HAVE_OPENSSL])],
Tim Riceaef73712002-05-11 13:17:42 -07002231 [
2232 AC_MSG_ERROR([*** Can't find recent OpenSSL libcrypto (see config.log for details) ***])
2233 ]
2234 )
2235 ]
2236)
2237
Tim Riced730b782002-08-13 18:52:10 -07002238# Determine OpenSSL header version
2239AC_MSG_CHECKING([OpenSSL header version])
Darren Tuckera0c2b392004-09-11 23:26:37 +10002240AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002241 [AC_LANG_PROGRAM([[
Tim Riced730b782002-08-13 18:52:10 -07002242#include <stdio.h>
2243#include <string.h>
2244#include <openssl/opensslv.h>
2245#define DATA "conftest.sslincver"
Tim Rice648f8762011-01-26 12:38:57 -08002246 ]], [[
Damien Millera8e06ce2003-11-21 23:48:55 +11002247 FILE *fd;
2248 int rc;
Tim Riced730b782002-08-13 18:52:10 -07002249
Damien Millera8e06ce2003-11-21 23:48:55 +11002250 fd = fopen(DATA,"w");
2251 if(fd == NULL)
2252 exit(1);
Tim Riced730b782002-08-13 18:52:10 -07002253
Damien Miller6d627842014-08-22 17:36:19 +10002254 if ((rc = fprintf(fd ,"%08x (%s)\n", OPENSSL_VERSION_NUMBER, OPENSSL_VERSION_TEXT)) <0)
Tim Riced730b782002-08-13 18:52:10 -07002255 exit(1);
2256
2257 exit(0);
Darren Tucker623d92f2004-09-12 22:36:15 +10002258 ]])],
Tim Riced730b782002-08-13 18:52:10 -07002259 [
2260 ssl_header_ver=`cat conftest.sslincver`
Tim Rice648f8762011-01-26 12:38:57 -08002261 AC_MSG_RESULT([$ssl_header_ver])
Tim Riced730b782002-08-13 18:52:10 -07002262 ],
2263 [
Tim Rice648f8762011-01-26 12:38:57 -08002264 AC_MSG_RESULT([not found])
2265 AC_MSG_ERROR([OpenSSL version header not found.])
Darren Tuckera0c2b392004-09-11 23:26:37 +10002266 ],
2267 [
2268 AC_MSG_WARN([cross compiling: not checking])
Tim Riced730b782002-08-13 18:52:10 -07002269 ]
2270)
2271
2272# Determine OpenSSL library version
2273AC_MSG_CHECKING([OpenSSL library version])
Darren Tuckera0c2b392004-09-11 23:26:37 +10002274AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002275 [AC_LANG_PROGRAM([[
Tim Riced730b782002-08-13 18:52:10 -07002276#include <stdio.h>
2277#include <string.h>
2278#include <openssl/opensslv.h>
2279#include <openssl/crypto.h>
2280#define DATA "conftest.ssllibver"
Tim Rice648f8762011-01-26 12:38:57 -08002281 ]], [[
Damien Millera8e06ce2003-11-21 23:48:55 +11002282 FILE *fd;
2283 int rc;
Tim Riced730b782002-08-13 18:52:10 -07002284
Damien Millera8e06ce2003-11-21 23:48:55 +11002285 fd = fopen(DATA,"w");
2286 if(fd == NULL)
2287 exit(1);
Tim Riced730b782002-08-13 18:52:10 -07002288
Damien Miller6d627842014-08-22 17:36:19 +10002289 if ((rc = fprintf(fd ,"%08x (%s)\n", SSLeay(),
Damien Miller21958472014-08-20 11:05:03 +10002290 SSLeay_version(SSLEAY_VERSION))) <0)
Tim Riced730b782002-08-13 18:52:10 -07002291 exit(1);
2292
2293 exit(0);
Darren Tucker623d92f2004-09-12 22:36:15 +10002294 ]])],
Tim Riced730b782002-08-13 18:52:10 -07002295 [
2296 ssl_library_ver=`cat conftest.ssllibver`
Damien Miller21958472014-08-20 11:05:03 +10002297 # Check version is supported.
2298 case "$ssl_library_ver" in
Damien Miller394a60f2014-08-22 18:06:20 +10002299 0090[[0-7]]*|009080[[0-5]]*)
Damien Miller7d0ba532014-10-30 10:45:41 +11002300 AC_MSG_ERROR([OpenSSL >= 0.9.8f required (have "$ssl_library_ver")])
Damien Miller21958472014-08-20 11:05:03 +10002301 ;;
2302 *) ;;
2303 esac
Tim Rice648f8762011-01-26 12:38:57 -08002304 AC_MSG_RESULT([$ssl_library_ver])
Tim Riced730b782002-08-13 18:52:10 -07002305 ],
2306 [
Tim Rice648f8762011-01-26 12:38:57 -08002307 AC_MSG_RESULT([not found])
2308 AC_MSG_ERROR([OpenSSL library not found.])
Darren Tuckera0c2b392004-09-11 23:26:37 +10002309 ],
2310 [
2311 AC_MSG_WARN([cross compiling: not checking])
Tim Riced730b782002-08-13 18:52:10 -07002312 ]
2313)
Damien Millera22ba012000-03-02 23:09:20 +11002314
Damien Millerb9c56672014-05-15 14:43:37 +10002315# XXX make --without-openssl work
2316AC_DEFINE_UNQUOTED([WITH_OPENSSL], [1], [use libcrypto for cryptography])
Damien Millere5b9f0f2014-05-15 14:58:07 +10002317AC_DEFINE_UNQUOTED([WITH_SSH1], [1], [include SSH protocol version 1 support])
Damien Millerb9c56672014-05-15 14:43:37 +10002318
Tim Rice648f8762011-01-26 12:38:57 -08002319AC_ARG_WITH([openssl-header-check],
Damien Miller9975e482007-03-05 11:51:27 +11002320 [ --without-openssl-header-check Disable OpenSSL version consistency check],
2321 [ if test "x$withval" = "xno" ; then
2322 openssl_check_nonfatal=1
2323 fi
2324 ]
2325)
2326
Damien Millerec932372002-01-22 22:16:03 +11002327# Sanity check OpenSSL headers
2328AC_MSG_CHECKING([whether OpenSSL's headers match the library])
Darren Tuckera0c2b392004-09-11 23:26:37 +10002329AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002330 [AC_LANG_PROGRAM([[
Damien Millerec932372002-01-22 22:16:03 +11002331#include <string.h>
2332#include <openssl/opensslv.h>
Tim Rice648f8762011-01-26 12:38:57 -08002333 ]], [[
2334 exit(SSLeay() == OPENSSL_VERSION_NUMBER ? 0 : 1);
Darren Tucker623d92f2004-09-12 22:36:15 +10002335 ]])],
Damien Millerec932372002-01-22 22:16:03 +11002336 [
Tim Rice648f8762011-01-26 12:38:57 -08002337 AC_MSG_RESULT([yes])
Damien Millerec932372002-01-22 22:16:03 +11002338 ],
2339 [
Tim Rice648f8762011-01-26 12:38:57 -08002340 AC_MSG_RESULT([no])
Damien Miller9975e482007-03-05 11:51:27 +11002341 if test "x$openssl_check_nonfatal" = "x"; then
2342 AC_MSG_ERROR([Your OpenSSL headers do not match your
2343library. Check config.log for details.
2344If you are sure your installation is consistent, you can disable the check
2345by running "./configure --without-openssl-header-check".
2346Also see contrib/findssl.sh for help identifying header/library mismatches.
2347])
2348 else
2349 AC_MSG_WARN([Your OpenSSL headers do not match your
2350library. Check config.log for details.
Darren Tuckera0472e02003-06-24 20:22:09 +10002351Also see contrib/findssl.sh for help identifying header/library mismatches.])
Damien Miller9975e482007-03-05 11:51:27 +11002352 fi
Darren Tuckera0c2b392004-09-11 23:26:37 +10002353 ],
2354 [
2355 AC_MSG_WARN([cross compiling: not checking])
Damien Millerec932372002-01-22 22:16:03 +11002356 ]
2357)
2358
Darren Tucker639bbe82006-08-20 20:17:53 +10002359AC_MSG_CHECKING([if programs using OpenSSL functions will link])
2360AC_LINK_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002361 [AC_LANG_PROGRAM([[ #include <openssl/evp.h> ]],
2362 [[ SSLeay_add_all_algorithms(); ]])],
Darren Tucker639bbe82006-08-20 20:17:53 +10002363 [
Tim Rice648f8762011-01-26 12:38:57 -08002364 AC_MSG_RESULT([yes])
Darren Tucker639bbe82006-08-20 20:17:53 +10002365 ],
2366 [
Tim Rice648f8762011-01-26 12:38:57 -08002367 AC_MSG_RESULT([no])
Darren Tucker639bbe82006-08-20 20:17:53 +10002368 saved_LIBS="$LIBS"
2369 LIBS="$LIBS -ldl"
2370 AC_MSG_CHECKING([if programs using OpenSSL need -ldl])
2371 AC_LINK_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002372 [AC_LANG_PROGRAM([[ #include <openssl/evp.h> ]],
2373 [[ SSLeay_add_all_algorithms(); ]])],
Darren Tucker639bbe82006-08-20 20:17:53 +10002374 [
Tim Rice648f8762011-01-26 12:38:57 -08002375 AC_MSG_RESULT([yes])
Darren Tucker639bbe82006-08-20 20:17:53 +10002376 ],
2377 [
Tim Rice648f8762011-01-26 12:38:57 -08002378 AC_MSG_RESULT([no])
Darren Tucker639bbe82006-08-20 20:17:53 +10002379 LIBS="$saved_LIBS"
2380 ]
2381 )
2382 ]
2383)
2384
Darren Tuckerc5487222014-01-17 15:12:16 +11002385AC_CHECK_FUNCS([ \
2386 BN_is_prime_ex \
2387 DSA_generate_parameters_ex \
Darren Tuckerd23a91f2014-01-17 17:32:30 +11002388 EVP_DigestInit_ex \
2389 EVP_DigestFinal_ex \
2390 EVP_MD_CTX_init \
2391 EVP_MD_CTX_cleanup \
Darren Tucker4a209592014-02-13 16:38:32 +11002392 EVP_MD_CTX_copy_ex \
Darren Tuckerc5487222014-01-17 15:12:16 +11002393 HMAC_CTX_init \
2394 RSA_generate_key_ex \
2395 RSA_get_default_method \
2396])
Darren Tuckerebdef762010-12-04 23:20:50 +11002397
Tim Rice648f8762011-01-26 12:38:57 -08002398AC_ARG_WITH([ssl-engine],
Darren Tuckerfabdb6c2006-02-20 20:17:35 +11002399 [ --with-ssl-engine Enable OpenSSL (hardware) ENGINE support ],
2400 [ if test "x$withval" != "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08002401 AC_MSG_CHECKING([for OpenSSL ENGINE support])
2402 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2403#include <openssl/engine.h>
2404 ]], [[
2405 ENGINE_load_builtin_engines();
2406 ENGINE_register_all_complete();
2407 ]])],
2408 [ AC_MSG_RESULT([yes])
2409 AC_DEFINE([USE_OPENSSL_ENGINE], [1],
Darren Tuckerfabdb6c2006-02-20 20:17:35 +11002410 [Enable OpenSSL engine support])
Tim Rice648f8762011-01-26 12:38:57 -08002411 ], [ AC_MSG_ERROR([OpenSSL ENGINE support not found])
2412 ])
Darren Tuckerfabdb6c2006-02-20 20:17:35 +11002413 fi ]
2414)
2415
Darren Tucker129d0bb2005-12-19 17:40:40 +11002416# Check for OpenSSL without EVP_aes_{192,256}_cbc
2417AC_MSG_CHECKING([whether OpenSSL has crippled AES support])
Darren Tuckerf1f4bdd2006-08-04 19:44:23 +10002418AC_LINK_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002419 [AC_LANG_PROGRAM([[
Darren Tucker129d0bb2005-12-19 17:40:40 +11002420#include <string.h>
2421#include <openssl/evp.h>
Tim Rice648f8762011-01-26 12:38:57 -08002422 ]], [[
2423 exit(EVP_aes_192_cbc() == NULL || EVP_aes_256_cbc() == NULL);
Darren Tucker129d0bb2005-12-19 17:40:40 +11002424 ]])],
2425 [
Tim Rice648f8762011-01-26 12:38:57 -08002426 AC_MSG_RESULT([no])
Darren Tucker129d0bb2005-12-19 17:40:40 +11002427 ],
2428 [
Tim Rice648f8762011-01-26 12:38:57 -08002429 AC_MSG_RESULT([yes])
2430 AC_DEFINE([OPENSSL_LOBOTOMISED_AES], [1],
Darren Tucker129d0bb2005-12-19 17:40:40 +11002431 [libcrypto is missing AES 192 and 256 bit functions])
2432 ]
2433)
2434
Damien Miller25a02b02012-12-13 08:18:56 +11002435# Check for OpenSSL with EVP_aes_*ctr
2436AC_MSG_CHECKING([whether OpenSSL has AES CTR via EVP])
2437AC_LINK_IFELSE(
2438 [AC_LANG_PROGRAM([[
2439#include <string.h>
2440#include <openssl/evp.h>
2441 ]], [[
2442 exit(EVP_aes_128_ctr() == NULL ||
2443 EVP_aes_192_cbc() == NULL ||
2444 EVP_aes_256_cbc() == NULL);
2445 ]])],
2446 [
2447 AC_MSG_RESULT([yes])
2448 AC_DEFINE([OPENSSL_HAVE_EVPCTR], [1],
2449 [libcrypto has EVP AES CTR])
2450 ],
2451 [
2452 AC_MSG_RESULT([no])
2453 ]
2454)
2455
Damien Millerd522c682013-01-09 16:42:47 +11002456# Check for OpenSSL with EVP_aes_*gcm
2457AC_MSG_CHECKING([whether OpenSSL has AES GCM via EVP])
2458AC_LINK_IFELSE(
2459 [AC_LANG_PROGRAM([[
2460#include <string.h>
2461#include <openssl/evp.h>
2462 ]], [[
2463 exit(EVP_aes_128_gcm() == NULL ||
Damien Millerb6f73b32013-02-11 10:39:12 +11002464 EVP_aes_256_gcm() == NULL ||
2465 EVP_CTRL_GCM_SET_IV_FIXED == 0 ||
2466 EVP_CTRL_GCM_IV_GEN == 0 ||
2467 EVP_CTRL_GCM_SET_TAG == 0 ||
2468 EVP_CTRL_GCM_GET_TAG == 0 ||
2469 EVP_CIPHER_CTX_ctrl(NULL, 0, 0, NULL) == 0);
Damien Millerd522c682013-01-09 16:42:47 +11002470 ]])],
2471 [
2472 AC_MSG_RESULT([yes])
2473 AC_DEFINE([OPENSSL_HAVE_EVPGCM], [1],
2474 [libcrypto has EVP AES GCM])
2475 ],
2476 [
2477 AC_MSG_RESULT([no])
Darren Tucker6d8bd572013-06-11 11:26:10 +10002478 unsupported_algorithms="$unsupported_cipers \
2479 aes128-gcm@openssh.com aes256-gcm@openssh.com"
Damien Millerd522c682013-01-09 16:42:47 +11002480 ]
2481)
2482
Damien Millerb6f73b32013-02-11 10:39:12 +11002483AC_SEARCH_LIBS([EVP_CIPHER_CTX_ctrl], [crypto],
2484 [AC_DEFINE([HAVE_EVP_CIPHER_CTX_CTRL], [1],
2485 [Define if libcrypto has EVP_CIPHER_CTX_ctrl])])
2486
Darren Tucker3e7e15f2009-03-07 22:22:35 +11002487AC_MSG_CHECKING([if EVP_DigestUpdate returns an int])
2488AC_LINK_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002489 [AC_LANG_PROGRAM([[
Darren Tucker3e7e15f2009-03-07 22:22:35 +11002490#include <string.h>
2491#include <openssl/evp.h>
Tim Rice648f8762011-01-26 12:38:57 -08002492 ]], [[
2493 if(EVP_DigestUpdate(NULL, NULL,0))
2494 exit(0);
Darren Tucker3e7e15f2009-03-07 22:22:35 +11002495 ]])],
2496 [
Tim Rice648f8762011-01-26 12:38:57 -08002497 AC_MSG_RESULT([yes])
Darren Tucker3e7e15f2009-03-07 22:22:35 +11002498 ],
2499 [
Tim Rice648f8762011-01-26 12:38:57 -08002500 AC_MSG_RESULT([no])
2501 AC_DEFINE([OPENSSL_EVP_DIGESTUPDATE_VOID], [1],
Darren Tucker3e7e15f2009-03-07 22:22:35 +11002502 [Define if EVP_DigestUpdate returns void])
2503 ]
2504)
2505
Tim Rice3d5352e2004-02-12 09:27:21 -08002506# Some systems want crypt() from libcrypt, *not* the version in OpenSSL,
2507# because the system crypt() is more featureful.
2508if test "x$check_for_libcrypt_before" = "x1"; then
Tim Rice648f8762011-01-26 12:38:57 -08002509 AC_CHECK_LIB([crypt], [crypt])
Tim Rice3d5352e2004-02-12 09:27:21 -08002510fi
2511
Damien Millera8e06ce2003-11-21 23:48:55 +11002512# Some Linux systems (Slackware) need crypt() from libcrypt, *not* the
Tim Rice43fa5572004-02-11 14:46:40 -08002513# version in OpenSSL.
Damien Miller4f9f42a2003-05-10 19:28:02 +10002514if test "x$check_for_libcrypt_later" = "x1"; then
Tim Rice648f8762011-01-26 12:38:57 -08002515 AC_CHECK_LIB([crypt], [crypt], [LIBS="$LIBS -lcrypt"])
Damien Millera64b57a2001-01-17 10:44:13 +11002516fi
Darren Tuckerc0c33732013-06-02 06:28:03 +10002517AC_CHECK_FUNCS([crypt DES_crypt])
Damien Millera64b57a2001-01-17 10:44:13 +11002518
Damien Milleraf87af12006-03-15 13:02:28 +11002519# Search for SHA256 support in libc and/or OpenSSL
Darren Tucker4bf7e502013-11-07 22:33:48 +11002520AC_CHECK_FUNCS([SHA256_Update EVP_sha256], ,
2521 [unsupported_algorithms="$unsupported_algorithms \
Darren Tucker6d8bd572013-06-11 11:26:10 +10002522 hmac-sha2-256 hmac-sha2-512 \
2523 diffie-hellman-group-exchange-sha256 \
2524 hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com"
2525 ]
2526)
Damien Miller8da0fa22014-07-03 11:54:19 +10002527# Search for RIPE-MD support in OpenSSL
2528AC_CHECK_FUNCS([EVP_ripemd160], ,
2529 [unsupported_algorithms="$unsupported_algorithms \
2530 hmac-ripemd160
2531 hmac-ripemd160@openssh.com
2532 hmac-ripemd160-etm@openssh.com"
2533 ]
2534)
Damien Milleraf87af12006-03-15 13:02:28 +11002535
Damien Miller6af914a2010-09-10 11:39:26 +10002536# Check complete ECC support in OpenSSL
Darren Tucker37bcef52013-11-09 18:39:25 +11002537AC_MSG_CHECKING([whether OpenSSL has NID_X9_62_prime256v1])
2538AC_LINK_IFELSE(
2539 [AC_LANG_PROGRAM([[
2540#include <openssl/ec.h>
2541#include <openssl/ecdh.h>
2542#include <openssl/ecdsa.h>
2543#include <openssl/evp.h>
2544#include <openssl/objects.h>
2545#include <openssl/opensslv.h>
2546#if OPENSSL_VERSION_NUMBER < 0x0090807f /* 0.9.8g */
2547# error "OpenSSL < 0.9.8g has unreliable ECC code"
2548#endif
2549 ]], [[
2550 EC_KEY *e = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
2551 const EVP_MD *m = EVP_sha256(); /* We need this too */
2552 ]])],
2553 [ AC_MSG_RESULT([yes])
2554 enable_nistp256=1 ],
2555 [ AC_MSG_RESULT([no]) ]
2556)
2557
2558AC_MSG_CHECKING([whether OpenSSL has NID_secp384r1])
2559AC_LINK_IFELSE(
2560 [AC_LANG_PROGRAM([[
2561#include <openssl/ec.h>
2562#include <openssl/ecdh.h>
2563#include <openssl/ecdsa.h>
2564#include <openssl/evp.h>
2565#include <openssl/objects.h>
2566#include <openssl/opensslv.h>
2567#if OPENSSL_VERSION_NUMBER < 0x0090807f /* 0.9.8g */
2568# error "OpenSSL < 0.9.8g has unreliable ECC code"
2569#endif
2570 ]], [[
2571 EC_KEY *e = EC_KEY_new_by_curve_name(NID_secp384r1);
2572 const EVP_MD *m = EVP_sha384(); /* We need this too */
2573 ]])],
2574 [ AC_MSG_RESULT([yes])
2575 enable_nistp384=1 ],
2576 [ AC_MSG_RESULT([no]) ]
2577)
2578
2579AC_MSG_CHECKING([whether OpenSSL has NID_secp521r1])
Damien Miller6af914a2010-09-10 11:39:26 +10002580AC_LINK_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002581 [AC_LANG_PROGRAM([[
Damien Miller6af914a2010-09-10 11:39:26 +10002582#include <openssl/ec.h>
Damien Millere323ebc2011-01-19 23:12:27 +11002583#include <openssl/ecdh.h>
2584#include <openssl/ecdsa.h>
Damien Miller6af914a2010-09-10 11:39:26 +10002585#include <openssl/evp.h>
2586#include <openssl/objects.h>
Damien Millere323ebc2011-01-19 23:12:27 +11002587#include <openssl/opensslv.h>
2588#if OPENSSL_VERSION_NUMBER < 0x0090807f /* 0.9.8g */
2589# error "OpenSSL < 0.9.8g has unreliable ECC code"
2590#endif
Tim Rice648f8762011-01-26 12:38:57 -08002591 ]], [[
Damien Miller6af914a2010-09-10 11:39:26 +10002592 EC_KEY *e = EC_KEY_new_by_curve_name(NID_secp521r1);
2593 const EVP_MD *m = EVP_sha512(); /* We need this too */
Damien Miller6af914a2010-09-10 11:39:26 +10002594 ]])],
Darren Tucker37bcef52013-11-09 18:39:25 +11002595 [ AC_MSG_RESULT([yes])
2596 AC_MSG_CHECKING([if OpenSSL's NID_secp521r1 is functional])
2597 AC_RUN_IFELSE(
2598 [AC_LANG_PROGRAM([[
2599#include <openssl/ec.h>
2600#include <openssl/ecdh.h>
2601#include <openssl/ecdsa.h>
2602#include <openssl/evp.h>
2603#include <openssl/objects.h>
2604#include <openssl/opensslv.h>
2605 ]],[[
2606 EC_KEY *e = EC_KEY_new_by_curve_name(NID_secp521r1);
2607 const EVP_MD *m = EVP_sha512(); /* We need this too */
2608 exit(e == NULL || m == NULL);
2609 ]])],
2610 [ AC_MSG_RESULT([yes])
2611 enable_nistp521=1 ],
2612 [ AC_MSG_RESULT([no]) ],
Darren Tucker95cb2d42013-11-09 22:02:31 +11002613 [ AC_MSG_WARN([cross-compiling: assuming yes])
Darren Tucker37bcef52013-11-09 18:39:25 +11002614 enable_nistp521=1 ]
Darren Tucker95cb2d42013-11-09 22:02:31 +11002615 )],
Darren Tucker37bcef52013-11-09 18:39:25 +11002616 AC_MSG_RESULT([no])
Damien Miller6af914a2010-09-10 11:39:26 +10002617)
Darren Tucker37bcef52013-11-09 18:39:25 +11002618
2619COMMENT_OUT_ECC="#no ecc#"
2620TEST_SSH_ECC=no
2621
2622if test x$enable_nistp256 = x1 || test x$enable_nistp384 = x1 || \
Darren Tuckerdd5264d2013-11-09 22:32:51 +11002623 test x$enable_nistp521 = x1; then
Darren Tucker37bcef52013-11-09 18:39:25 +11002624 AC_DEFINE(OPENSSL_HAS_ECC, [1], [OpenSSL has ECC])
2625fi
2626if test x$enable_nistp256 = x1; then
2627 AC_DEFINE([OPENSSL_HAS_NISTP256], [1],
2628 [libcrypto has NID_X9_62_prime256v1])
2629 TEST_SSH_ECC=yes
2630 COMMENT_OUT_ECC=""
2631else
2632 unsupported_algorithms="$unsupported_algorithms ecdsa-sha2-nistp256 \
2633 ecdh-sha2-nistp256 ecdsa-sha2-nistp256-cert-v01@openssh.com"
2634fi
2635if test x$enable_nistp384 = x1; then
2636 AC_DEFINE([OPENSSL_HAS_NISTP384], [1], [libcrypto has NID_secp384r1])
2637 TEST_SSH_ECC=yes
2638 COMMENT_OUT_ECC=""
2639else
2640 unsupported_algorithms="$unsupported_algorithms ecdsa-sha2-nistp384 \
2641 ecdh-sha2-nistp384 ecdsa-sha2-nistp384-cert-v01@openssh.com"
2642fi
2643if test x$enable_nistp521 = x1; then
2644 AC_DEFINE([OPENSSL_HAS_NISTP521], [1], [libcrypto has NID_secp521r1])
2645 TEST_SSH_ECC=yes
2646 COMMENT_OUT_ECC=""
2647else
2648 unsupported_algorithms="$unsupported_algorithms ecdh-sha2-nistp521 \
2649 ecdsa-sha2-nistp521 ecdsa-sha2-nistp521-cert-v01@openssh.com"
2650fi
2651
Tim Rice648f8762011-01-26 12:38:57 -08002652AC_SUBST([TEST_SSH_ECC])
2653AC_SUBST([COMMENT_OUT_ECC])
Damien Miller6af914a2010-09-10 11:39:26 +10002654
Damien Miller00f9cd22014-07-15 10:41:38 +10002655AC_CHECK_FUNCS([ \
2656 arc4random \
2657 arc4random_buf \
2658 arc4random_stir \
2659 arc4random_uniform \
2660])
2661
Tim Rice99203ec2007-03-26 09:35:28 -07002662saved_LIBS="$LIBS"
Tim Rice648f8762011-01-26 12:38:57 -08002663AC_CHECK_LIB([iaf], [ia_openinfo], [
Tim Rice99203ec2007-03-26 09:35:28 -07002664 LIBS="$LIBS -liaf"
Tim Rice648f8762011-01-26 12:38:57 -08002665 AC_CHECK_FUNCS([set_id], [SSHDLIBS="$SSHDLIBS -liaf"
2666 AC_DEFINE([HAVE_LIBIAF], [1],
Tim Rice0eeaf122007-09-10 16:24:17 -07002667 [Define if system has libiaf that supports set_id])
2668 ])
Tim Rice99203ec2007-03-26 09:35:28 -07002669])
2670LIBS="$saved_LIBS"
Damien Miller6c21c512002-01-22 21:57:53 +11002671
2672### Configure cryptographic random number support
2673
2674# Check wheter OpenSSL seeds itself
2675AC_MSG_CHECKING([whether OpenSSL's PRNG is internally seeded])
Darren Tuckera0c2b392004-09-11 23:26:37 +10002676AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08002677 [AC_LANG_PROGRAM([[
Damien Miller6c21c512002-01-22 21:57:53 +11002678#include <string.h>
2679#include <openssl/rand.h>
Tim Rice648f8762011-01-26 12:38:57 -08002680 ]], [[
2681 exit(RAND_status() == 1 ? 0 : 1);
Darren Tucker623d92f2004-09-12 22:36:15 +10002682 ]])],
Damien Miller6c21c512002-01-22 21:57:53 +11002683 [
2684 OPENSSL_SEEDS_ITSELF=yes
Tim Rice648f8762011-01-26 12:38:57 -08002685 AC_MSG_RESULT([yes])
Damien Miller6c21c512002-01-22 21:57:53 +11002686 ],
2687 [
Tim Rice648f8762011-01-26 12:38:57 -08002688 AC_MSG_RESULT([no])
Darren Tuckera0c2b392004-09-11 23:26:37 +10002689 ],
2690 [
2691 AC_MSG_WARN([cross compiling: assuming yes])
Damien Millerf22019b2011-05-05 13:48:37 +10002692 # This is safe, since we will fatal() at runtime if
2693 # OpenSSL is not seeded correctly.
Darren Tuckera0c2b392004-09-11 23:26:37 +10002694 OPENSSL_SEEDS_ITSELF=yes
Damien Miller6c21c512002-01-22 21:57:53 +11002695 ]
2696)
2697
Damien Millerf22019b2011-05-05 13:48:37 +10002698# PRNGD TCP socket
2699AC_ARG_WITH([prngd-port],
2700 [ --with-prngd-port=PORT read entropy from PRNGD/EGD TCP localhost:PORT],
2701 [
2702 case "$withval" in
2703 no)
2704 withval=""
2705 ;;
2706 [[0-9]]*)
2707 ;;
2708 *)
2709 AC_MSG_ERROR([You must specify a numeric port number for --with-prngd-port])
2710 ;;
2711 esac
2712 if test ! -z "$withval" ; then
2713 PRNGD_PORT="$withval"
2714 AC_DEFINE_UNQUOTED([PRNGD_PORT], [$PRNGD_PORT],
2715 [Port number of PRNGD/EGD random number socket])
2716 fi
2717 ]
2718)
2719
2720# PRNGD Unix domain socket
2721AC_ARG_WITH([prngd-socket],
2722 [ --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)],
2723 [
2724 case "$withval" in
2725 yes)
2726 withval="/var/run/egd-pool"
2727 ;;
2728 no)
2729 withval=""
2730 ;;
2731 /*)
2732 ;;
2733 *)
2734 AC_MSG_ERROR([You must specify an absolute path to the entropy socket])
2735 ;;
2736 esac
2737
2738 if test ! -z "$withval" ; then
2739 if test ! -z "$PRNGD_PORT" ; then
2740 AC_MSG_ERROR([You may not specify both a PRNGD/EGD port and socket])
2741 fi
2742 if test ! -r "$withval" ; then
2743 AC_MSG_WARN([Entropy socket is not readable])
2744 fi
2745 PRNGD_SOCKET="$withval"
2746 AC_DEFINE_UNQUOTED([PRNGD_SOCKET], ["$PRNGD_SOCKET"],
2747 [Location of PRNGD/EGD random number socket])
2748 fi
2749 ],
2750 [
2751 # Check for existing socket only if we don't have a random device already
2752 if test "x$OPENSSL_SEEDS_ITSELF" != "xyes" ; then
2753 AC_MSG_CHECKING([for PRNGD/EGD socket])
2754 # Insert other locations here
2755 for sock in /var/run/egd-pool /dev/egd-pool /etc/entropy; do
2756 if test -r $sock && $TEST_MINUS_S_SH -c "test -S $sock -o -p $sock" ; then
2757 PRNGD_SOCKET="$sock"
2758 AC_DEFINE_UNQUOTED([PRNGD_SOCKET], ["$PRNGD_SOCKET"])
2759 break;
2760 fi
2761 done
2762 if test ! -z "$PRNGD_SOCKET" ; then
2763 AC_MSG_RESULT([$PRNGD_SOCKET])
2764 else
2765 AC_MSG_RESULT([not found])
2766 fi
2767 fi
2768 ]
2769)
2770
2771# Which randomness source do we use?
2772if test ! -z "$PRNGD_PORT" ; then
2773 RAND_MSG="PRNGd port $PRNGD_PORT"
2774elif test ! -z "$PRNGD_SOCKET" ; then
2775 RAND_MSG="PRNGd socket $PRNGD_SOCKET"
2776elif test ! -z "$OPENSSL_SEEDS_ITSELF" ; then
2777 AC_DEFINE([OPENSSL_PRNG_ONLY], [1],
2778 [Define if you want OpenSSL's internally seeded PRNG only])
2779 RAND_MSG="OpenSSL internal ONLY"
2780else
2781 AC_MSG_ERROR([OpenSSH has no source of random numbers. Please configure OpenSSL with an entropy source or re-run configure using one of the --with-prngd-port or --with-prngd-socket options])
2782fi
2783
Darren Tucker3e6bde42006-08-20 20:03:50 +10002784# Check for PAM libs
2785PAM_MSG="no"
Tim Rice648f8762011-01-26 12:38:57 -08002786AC_ARG_WITH([pam],
Darren Tucker3e6bde42006-08-20 20:03:50 +10002787 [ --with-pam Enable PAM support ],
2788 [
2789 if test "x$withval" != "xno" ; then
2790 if test "x$ac_cv_header_security_pam_appl_h" != "xyes" && \
2791 test "x$ac_cv_header_pam_pam_appl_h" != "xyes" ; then
2792 AC_MSG_ERROR([PAM headers not found])
2793 fi
2794
2795 saved_LIBS="$LIBS"
Tim Rice648f8762011-01-26 12:38:57 -08002796 AC_CHECK_LIB([dl], [dlopen], , )
2797 AC_CHECK_LIB([pam], [pam_set_item], , [AC_MSG_ERROR([*** libpam missing])])
2798 AC_CHECK_FUNCS([pam_getenvlist])
2799 AC_CHECK_FUNCS([pam_putenv])
Darren Tucker3e6bde42006-08-20 20:03:50 +10002800 LIBS="$saved_LIBS"
2801
2802 PAM_MSG="yes"
2803
Darren Tucker20e9f972007-03-25 18:26:01 +10002804 SSHDLIBS="$SSHDLIBS -lpam"
Tim Rice648f8762011-01-26 12:38:57 -08002805 AC_DEFINE([USE_PAM], [1],
Darren Tucker3e6bde42006-08-20 20:03:50 +10002806 [Define if you want to enable PAM support])
Darren Tucker639bbe82006-08-20 20:17:53 +10002807
Darren Tucker3e6bde42006-08-20 20:03:50 +10002808 if test $ac_cv_lib_dl_dlopen = yes; then
Darren Tucker639bbe82006-08-20 20:17:53 +10002809 case "$LIBS" in
2810 *-ldl*)
2811 # libdl already in LIBS
2812 ;;
2813 *)
Darren Tucker20e9f972007-03-25 18:26:01 +10002814 SSHDLIBS="$SSHDLIBS -ldl"
Darren Tucker639bbe82006-08-20 20:17:53 +10002815 ;;
2816 esac
Darren Tucker3e6bde42006-08-20 20:03:50 +10002817 fi
Darren Tucker3e6bde42006-08-20 20:03:50 +10002818 fi
2819 ]
2820)
2821
2822# Check for older PAM
2823if test "x$PAM_MSG" = "xyes" ; then
2824 # Check PAM strerror arguments (old PAM)
2825 AC_MSG_CHECKING([whether pam_strerror takes only one argument])
Tim Rice648f8762011-01-26 12:38:57 -08002826 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Darren Tucker3e6bde42006-08-20 20:03:50 +10002827#include <stdlib.h>
2828#if defined(HAVE_SECURITY_PAM_APPL_H)
2829#include <security/pam_appl.h>
2830#elif defined (HAVE_PAM_PAM_APPL_H)
2831#include <pam/pam_appl.h>
2832#endif
Tim Rice648f8762011-01-26 12:38:57 -08002833 ]], [[
2834(void)pam_strerror((pam_handle_t *)NULL, -1);
2835 ]])], [AC_MSG_RESULT([no])], [
2836 AC_DEFINE([HAVE_OLD_PAM], [1],
Darren Tucker3e6bde42006-08-20 20:03:50 +10002837 [Define if you have an old version of PAM
2838 which takes only one argument to pam_strerror])
Tim Rice648f8762011-01-26 12:38:57 -08002839 AC_MSG_RESULT([yes])
Darren Tucker3e6bde42006-08-20 20:03:50 +10002840 PAM_MSG="yes (old library)"
Tim Rice648f8762011-01-26 12:38:57 -08002841
2842 ])
Darren Tucker3e6bde42006-08-20 20:03:50 +10002843fi
Damien Miller6c21c512002-01-22 21:57:53 +11002844
Damien Miller6482d902014-05-27 14:34:42 +10002845case "$host" in
2846*-*-cygwin*)
2847 SSH_PRIVSEP_USER=CYGWIN_SSH_PRIVSEP_USER
2848 ;;
2849*)
2850 SSH_PRIVSEP_USER=sshd
2851 ;;
2852esac
Tim Rice648f8762011-01-26 12:38:57 -08002853AC_ARG_WITH([privsep-user],
Kevin Stevesc81e1292002-05-13 03:51:40 +00002854 [ --with-privsep-user=user Specify non-privileged user for privilege separation],
Kevin Steves7ff91122002-04-07 19:22:54 +00002855 [
Tim Rice35cc69d2005-03-17 16:44:25 -08002856 if test -n "$withval" && test "x$withval" != "xno" && \
2857 test "x${withval}" != "xyes"; then
Damien Millerd3f6ad22002-06-25 10:24:47 +10002858 SSH_PRIVSEP_USER=$withval
Kevin Steves7ff91122002-04-07 19:22:54 +00002859 fi
Tim Riceeae17cc2005-03-17 16:52:20 -08002860 ]
Kevin Steves7ff91122002-04-07 19:22:54 +00002861)
Damien Miller6482d902014-05-27 14:34:42 +10002862if test "x$SSH_PRIVSEP_USER" = "xCYGWIN_SSH_PRIVSEP_USER" ; then
2863 AC_DEFINE_UNQUOTED([SSH_PRIVSEP_USER], [CYGWIN_SSH_PRIVSEP_USER],
2864 [Cygwin function to fetch non-privileged user for privilege separation])
2865else
2866 AC_DEFINE_UNQUOTED([SSH_PRIVSEP_USER], ["$SSH_PRIVSEP_USER"],
2867 [non-privileged user for privilege separation])
2868fi
Tim Rice648f8762011-01-26 12:38:57 -08002869AC_SUBST([SSH_PRIVSEP_USER])
Kevin Steves7ff91122002-04-07 19:22:54 +00002870
Damien Miller91f40d82013-02-22 11:37:00 +11002871if test "x$have_linux_no_new_privs" = "x1" ; then
2872AC_CHECK_DECL([SECCOMP_MODE_FILTER], [have_seccomp_filter=1], , [
2873 #include <sys/types.h>
2874 #include <linux/seccomp.h>
2875])
2876fi
2877if test "x$have_seccomp_filter" = "x1" ; then
2878AC_MSG_CHECKING([kernel for seccomp_filter support])
2879AC_LINK_IFELSE([AC_LANG_PROGRAM([[
2880 #include <errno.h>
2881 #include <elf.h>
2882 #include <linux/audit.h>
2883 #include <linux/seccomp.h>
2884 #include <stdlib.h>
2885 #include <sys/prctl.h>
2886 ]],
2887 [[ int i = $seccomp_audit_arch;
2888 errno = 0;
2889 prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, NULL, 0, 0);
2890 exit(errno == EFAULT ? 0 : 1); ]])],
2891 [ AC_MSG_RESULT([yes]) ], [
2892 AC_MSG_RESULT([no])
2893 # Disable seccomp filter as a target
2894 have_seccomp_filter=0
2895 ]
2896)
2897fi
2898
Damien Miller69ff1df2011-06-23 08:30:03 +10002899# Decide which sandbox style to use
2900sandbox_arg=""
2901AC_ARG_WITH([sandbox],
Damien Miller868ea1e2014-01-17 16:47:04 +11002902 [ --with-sandbox=style Specify privilege separation sandbox (no, darwin, rlimit, systrace, seccomp_filter, capsicum)],
Damien Miller69ff1df2011-06-23 08:30:03 +10002903 [
2904 if test "x$withval" = "xyes" ; then
2905 sandbox_arg=""
2906 else
2907 sandbox_arg="$withval"
2908 fi
2909 ]
2910)
Darren Tucker60395f92012-07-03 14:31:18 +10002911
2912# Some platforms (seems to be the ones that have a kernel poll(2)-type
2913# function with which they implement select(2)) use an extra file descriptor
2914# when calling select(2), which means we can't use the rlimit sandbox.
2915AC_MSG_CHECKING([if select works with descriptor rlimit])
2916AC_RUN_IFELSE(
2917 [AC_LANG_PROGRAM([[
2918#include <sys/types.h>
2919#ifdef HAVE_SYS_TIME_H
2920# include <sys/time.h>
2921#endif
2922#include <sys/resource.h>
2923#ifdef HAVE_SYS_SELECT_H
2924# include <sys/select.h>
2925#endif
2926#include <errno.h>
2927#include <fcntl.h>
2928#include <stdlib.h>
2929 ]],[[
2930 struct rlimit rl_zero;
2931 int fd, r;
2932 fd_set fds;
Damien Millere4f43472013-03-08 12:14:22 +11002933 struct timeval tv;
Darren Tucker60395f92012-07-03 14:31:18 +10002934
2935 fd = open("/dev/null", O_RDONLY);
2936 FD_ZERO(&fds);
2937 FD_SET(fd, &fds);
2938 rl_zero.rlim_cur = rl_zero.rlim_max = 0;
2939 setrlimit(RLIMIT_FSIZE, &rl_zero);
2940 setrlimit(RLIMIT_NOFILE, &rl_zero);
Damien Millere4f43472013-03-08 12:14:22 +11002941 tv.tv_sec = 1;
2942 tv.tv_usec = 0;
2943 r = select(fd+1, &fds, NULL, NULL, &tv);
Darren Tucker60395f92012-07-03 14:31:18 +10002944 exit (r == -1 ? 1 : 0);
2945 ]])],
2946 [AC_MSG_RESULT([yes])
2947 select_works_with_rlimit=yes],
2948 [AC_MSG_RESULT([no])
2949 select_works_with_rlimit=no],
2950 [AC_MSG_WARN([cross compiling: assuming yes])]
2951)
2952
Darren Tuckerff008de2013-03-06 17:48:48 +11002953AC_MSG_CHECKING([if setrlimit(RLIMIT_NOFILE,{0,0}) works])
2954AC_RUN_IFELSE(
2955 [AC_LANG_PROGRAM([[
2956#include <sys/types.h>
2957#ifdef HAVE_SYS_TIME_H
2958# include <sys/time.h>
2959#endif
2960#include <sys/resource.h>
2961#include <errno.h>
2962#include <stdlib.h>
2963 ]],[[
2964 struct rlimit rl_zero;
2965 int fd, r;
2966 fd_set fds;
2967
2968 rl_zero.rlim_cur = rl_zero.rlim_max = 0;
2969 r = setrlimit(RLIMIT_NOFILE, &rl_zero);
2970 exit (r == -1 ? 1 : 0);
2971 ]])],
2972 [AC_MSG_RESULT([yes])
2973 rlimit_nofile_zero_works=yes],
2974 [AC_MSG_RESULT([no])
2975 rlimit_nofile_zero_works=no],
2976 [AC_MSG_WARN([cross compiling: assuming yes])]
2977)
2978
Darren Tuckerd545a4b2012-07-03 22:48:31 +10002979AC_MSG_CHECKING([if setrlimit RLIMIT_FSIZE works])
2980AC_RUN_IFELSE(
2981 [AC_LANG_PROGRAM([[
2982#include <sys/types.h>
2983#include <sys/resource.h>
2984#include <stdlib.h>
2985 ]],[[
2986 struct rlimit rl_zero;
2987
2988 rl_zero.rlim_cur = rl_zero.rlim_max = 0;
2989 exit(setrlimit(RLIMIT_FSIZE, &rl_zero) != 0);
2990 ]])],
2991 [AC_MSG_RESULT([yes])],
2992 [AC_MSG_RESULT([no])
2993 AC_DEFINE(SANDBOX_SKIP_RLIMIT_FSIZE, 1,
2994 [setrlimit RLIMIT_FSIZE works])],
2995 [AC_MSG_WARN([cross compiling: assuming yes])]
2996)
2997
Damien Miller69ff1df2011-06-23 08:30:03 +10002998if test "x$sandbox_arg" = "xsystrace" || \
2999 ( test -z "$sandbox_arg" && test "x$have_systr_policy_kill" = "x1" ) ; then
Damien Miller1a91c0f2011-08-17 11:59:25 +10003000 test "x$have_systr_policy_kill" != "x1" && \
3001 AC_MSG_ERROR([systrace sandbox requires systrace headers and SYSTR_POLICY_KILL support])
Damien Miller69ff1df2011-06-23 08:30:03 +10003002 SANDBOX_STYLE="systrace"
3003 AC_DEFINE([SANDBOX_SYSTRACE], [1], [Sandbox using systrace(4)])
Damien Millercd5e52e2011-06-27 07:18:18 +10003004elif test "x$sandbox_arg" = "xdarwin" || \
3005 ( test -z "$sandbox_arg" && test "x$ac_cv_func_sandbox_init" = "xyes" && \
3006 test "x$ac_cv_header_sandbox_h" = "xyes") ; then
Damien Miller1a91c0f2011-08-17 11:59:25 +10003007 test "x$ac_cv_func_sandbox_init" != "xyes" -o \
3008 "x$ac_cv_header_sandbox_h" != "xyes" && \
3009 AC_MSG_ERROR([Darwin seatbelt sandbox requires sandbox.h and sandbox_init function])
Damien Millercd5e52e2011-06-27 07:18:18 +10003010 SANDBOX_STYLE="darwin"
3011 AC_DEFINE([SANDBOX_DARWIN], [1], [Sandbox using Darwin sandbox_init(3)])
Damien Millere0956e32012-04-04 11:27:54 +10003012elif test "x$sandbox_arg" = "xseccomp_filter" || \
3013 ( test -z "$sandbox_arg" && \
Darren Tuckerd0494fd2012-05-19 14:25:39 +10003014 test "x$have_seccomp_filter" = "x1" && \
Damien Miller91f40d82013-02-22 11:37:00 +11003015 test "x$ac_cv_header_elf_h" = "xyes" && \
Damien Millere0956e32012-04-04 11:27:54 +10003016 test "x$ac_cv_header_linux_audit_h" = "xyes" && \
Damien Miller91f40d82013-02-22 11:37:00 +11003017 test "x$ac_cv_header_linux_filter_h" = "xyes" && \
3018 test "x$seccomp_audit_arch" != "x" && \
Damien Millere0956e32012-04-04 11:27:54 +10003019 test "x$have_linux_no_new_privs" = "x1" && \
3020 test "x$ac_cv_func_prctl" = "xyes" ) ; then
Damien Miller91f40d82013-02-22 11:37:00 +11003021 test "x$seccomp_audit_arch" = "x" && \
Damien Millere0956e32012-04-04 11:27:54 +10003022 AC_MSG_ERROR([seccomp_filter sandbox not supported on $host])
3023 test "x$have_linux_no_new_privs" != "x1" && \
3024 AC_MSG_ERROR([seccomp_filter sandbox requires PR_SET_NO_NEW_PRIVS])
3025 test "x$have_seccomp_filter" != "x1" && \
3026 AC_MSG_ERROR([seccomp_filter sandbox requires seccomp headers])
3027 test "x$ac_cv_func_prctl" != "xyes" && \
3028 AC_MSG_ERROR([seccomp_filter sandbox requires prctl function])
3029 SANDBOX_STYLE="seccomp_filter"
3030 AC_DEFINE([SANDBOX_SECCOMP_FILTER], [1], [Sandbox using seccomp filter])
Damien Millerf62ecef2014-01-25 12:34:38 +11003031elif test "x$sandbox_arg" = "xcapsicum" || \
3032 ( test -z "$sandbox_arg" && \
Damien Miller603b8f42014-01-25 13:16:59 +11003033 test "x$ac_cv_header_sys_capability_h" = "xyes" && \
3034 test "x$ac_cv_func_cap_rights_limit" = "xyes") ; then
3035 test "x$ac_cv_header_sys_capability_h" != "xyes" && \
Damien Millerc96d8532014-01-25 13:12:28 +11003036 AC_MSG_ERROR([capsicum sandbox requires sys/capability.h header])
Damien Miller603b8f42014-01-25 13:16:59 +11003037 test "x$ac_cv_func_cap_rights_limit" != "xyes" && \
Damien Millerc96d8532014-01-25 13:12:28 +11003038 AC_MSG_ERROR([capsicum sandbox requires cap_rights_limit function])
Damien Millerf62ecef2014-01-25 12:34:38 +11003039 SANDBOX_STYLE="capsicum"
3040 AC_DEFINE([SANDBOX_CAPSICUM], [1], [Sandbox using capsicum])
Damien Miller69ff1df2011-06-23 08:30:03 +10003041elif test "x$sandbox_arg" = "xrlimit" || \
Darren Tucker60395f92012-07-03 14:31:18 +10003042 ( test -z "$sandbox_arg" && test "x$ac_cv_func_setrlimit" = "xyes" && \
Darren Tuckerff008de2013-03-06 17:48:48 +11003043 test "x$select_works_with_rlimit" = "xyes" && \
3044 test "x$rlimit_nofile_zero_works" = "xyes" ) ; then
Damien Miller1a91c0f2011-08-17 11:59:25 +10003045 test "x$ac_cv_func_setrlimit" != "xyes" && \
3046 AC_MSG_ERROR([rlimit sandbox requires setrlimit function])
Darren Tucker60395f92012-07-03 14:31:18 +10003047 test "x$select_works_with_rlimit" != "xyes" && \
3048 AC_MSG_ERROR([rlimit sandbox requires select to work with rlimit])
Damien Miller69ff1df2011-06-23 08:30:03 +10003049 SANDBOX_STYLE="rlimit"
3050 AC_DEFINE([SANDBOX_RLIMIT], [1], [Sandbox using setrlimit(2)])
3051elif test -z "$sandbox_arg" || test "x$sandbox_arg" = "xno" || \
3052 test "x$sandbox_arg" = "xnone" || test "x$sandbox_arg" = "xnull" ; then
3053 SANDBOX_STYLE="none"
3054 AC_DEFINE([SANDBOX_NULL], [1], [no privsep sandboxing])
3055else
Tim Ricea6e60612011-08-17 21:48:22 -07003056 AC_MSG_ERROR([unsupported --with-sandbox])
Damien Miller69ff1df2011-06-23 08:30:03 +10003057fi
3058
Ben Lindstromb5628642000-10-18 00:02:25 +00003059# Cheap hack to ensure NEWS-OS libraries are arranged right.
3060if test ! -z "$SONY" ; then
3061 LIBS="$LIBS -liberty";
3062fi
3063
Damien Miller57f39152005-11-24 19:58:19 +11003064# Check for long long datatypes
3065AC_CHECK_TYPES([long long, unsigned long long, long double])
3066
3067# Check datatype sizes
Tim Rice648f8762011-01-26 12:38:57 -08003068AC_CHECK_SIZEOF([short int], [2])
3069AC_CHECK_SIZEOF([int], [4])
3070AC_CHECK_SIZEOF([long int], [4])
3071AC_CHECK_SIZEOF([long long int], [8])
Damien Millerc6398ef1999-11-20 12:18:40 +11003072
Damien Millerfa2bb692002-04-23 23:22:25 +10003073# Sanity check long long for some platforms (AIX)
3074if test "x$ac_cv_sizeof_long_long_int" = "x4" ; then
3075 ac_cv_sizeof_long_long_int=0
3076fi
3077
Darren Tucker537f1ed2005-10-25 18:38:33 +10003078# compute LLONG_MIN and LLONG_MAX if we don't know them.
3079if test -z "$have_llong_max"; then
3080 AC_MSG_CHECKING([for max value of long long])
3081 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08003082 [AC_LANG_PROGRAM([[
Darren Tucker537f1ed2005-10-25 18:38:33 +10003083#include <stdio.h>
3084/* Why is this so damn hard? */
3085#ifdef __GNUC__
3086# undef __GNUC__
3087#endif
3088#define __USE_ISOC99
3089#include <limits.h>
3090#define DATA "conftest.llminmax"
Darren Tuckerd1450db2006-03-13 19:06:51 +11003091#define my_abs(a) ((a) < 0 ? ((a) * -1) : (a))
3092
3093/*
3094 * printf in libc on some platforms (eg old Tru64) does not understand %lld so
3095 * we do this the hard way.
3096 */
3097static int
3098fprint_ll(FILE *f, long long n)
3099{
3100 unsigned int i;
3101 int l[sizeof(long long) * 8];
3102
3103 if (n < 0)
3104 if (fprintf(f, "-") < 0)
3105 return -1;
3106 for (i = 0; n != 0; i++) {
3107 l[i] = my_abs(n % 10);
3108 n /= 10;
3109 }
3110 do {
3111 if (fprintf(f, "%d", l[--i]) < 0)
3112 return -1;
3113 } while (i != 0);
3114 if (fprintf(f, " ") < 0)
3115 return -1;
3116 return 0;
3117}
Tim Rice648f8762011-01-26 12:38:57 -08003118 ]], [[
Darren Tucker537f1ed2005-10-25 18:38:33 +10003119 FILE *f;
3120 long long i, llmin, llmax = 0;
3121
3122 if((f = fopen(DATA,"w")) == NULL)
3123 exit(1);
3124
3125#if defined(LLONG_MIN) && defined(LLONG_MAX)
3126 fprintf(stderr, "Using system header for LLONG_MIN and LLONG_MAX\n");
3127 llmin = LLONG_MIN;
3128 llmax = LLONG_MAX;
3129#else
3130 fprintf(stderr, "Calculating LLONG_MIN and LLONG_MAX\n");
3131 /* This will work on one's complement and two's complement */
3132 for (i = 1; i > llmax; i <<= 1, i++)
3133 llmax = i;
3134 llmin = llmax + 1LL; /* wrap */
3135#endif
3136
3137 /* Sanity check */
3138 if (llmin + 1 < llmin || llmin - 1 < llmin || llmax + 1 > llmax
Darren Tuckerd1450db2006-03-13 19:06:51 +11003139 || llmax - 1 > llmax || llmin == llmax || llmin == 0
3140 || llmax == 0 || llmax < LONG_MAX || llmin > LONG_MIN) {
Darren Tucker537f1ed2005-10-25 18:38:33 +10003141 fprintf(f, "unknown unknown\n");
3142 exit(2);
3143 }
3144
Darren Tuckerd1450db2006-03-13 19:06:51 +11003145 if (fprint_ll(f, llmin) < 0)
Darren Tucker537f1ed2005-10-25 18:38:33 +10003146 exit(3);
Darren Tuckerd1450db2006-03-13 19:06:51 +11003147 if (fprint_ll(f, llmax) < 0)
3148 exit(4);
3149 if (fclose(f) < 0)
3150 exit(5);
Darren Tucker537f1ed2005-10-25 18:38:33 +10003151 exit(0);
Darren Tucker537f1ed2005-10-25 18:38:33 +10003152 ]])],
3153 [
3154 llong_min=`$AWK '{print $1}' conftest.llminmax`
3155 llong_max=`$AWK '{print $2}' conftest.llminmax`
3156
Tim Rice648f8762011-01-26 12:38:57 -08003157 AC_MSG_RESULT([$llong_max])
3158 AC_DEFINE_UNQUOTED([LLONG_MAX], [${llong_max}LL],
Darren Tucker537f1ed2005-10-25 18:38:33 +10003159 [max value of long long calculated by configure])
3160 AC_MSG_CHECKING([for min value of long long])
Tim Rice648f8762011-01-26 12:38:57 -08003161 AC_MSG_RESULT([$llong_min])
3162 AC_DEFINE_UNQUOTED([LLONG_MIN], [${llong_min}LL],
Darren Tucker537f1ed2005-10-25 18:38:33 +10003163 [min value of long long calculated by configure])
3164 ],
3165 [
Tim Rice648f8762011-01-26 12:38:57 -08003166 AC_MSG_RESULT([not found])
Darren Tucker537f1ed2005-10-25 18:38:33 +10003167 ],
3168 [
3169 AC_MSG_WARN([cross compiling: not checking])
3170 ]
3171 )
3172fi
3173
3174
Damien Millera22ba012000-03-02 23:09:20 +11003175# More checks for data types
Damien Millercaf6dd62000-08-29 11:33:50 +11003176AC_CACHE_CHECK([for u_int type], ac_cv_have_u_int, [
Tim Rice648f8762011-01-26 12:38:57 -08003177 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3178 [[ u_int a; a = 1;]])],
3179 [ ac_cv_have_u_int="yes" ], [ ac_cv_have_u_int="no"
3180 ])
Damien Millercaf6dd62000-08-29 11:33:50 +11003181])
3182if test "x$ac_cv_have_u_int" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003183 AC_DEFINE([HAVE_U_INT], [1], [define if you have u_int data type])
Damien Millercaf6dd62000-08-29 11:33:50 +11003184 have_u_int=1
3185fi
3186
Damien Miller61e50f12000-05-08 20:49:37 +10003187AC_CACHE_CHECK([for intXX_t types], ac_cv_have_intxx_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003188 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3189 [[ int8_t a; int16_t b; int32_t c; a = b = c = 1;]])],
3190 [ ac_cv_have_intxx_t="yes" ], [ ac_cv_have_intxx_t="no"
3191 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003192])
3193if test "x$ac_cv_have_intxx_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003194 AC_DEFINE([HAVE_INTXX_T], [1], [define if you have intxx_t data type])
Damien Miller61e50f12000-05-08 20:49:37 +10003195 have_intxx_t=1
3196fi
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003197
3198if (test -z "$have_intxx_t" && \
Damien Millera8e06ce2003-11-21 23:48:55 +11003199 test "x$ac_cv_header_stdint_h" = "xyes")
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003200then
3201 AC_MSG_CHECKING([for intXX_t types in stdint.h])
Tim Rice648f8762011-01-26 12:38:57 -08003202 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <stdint.h> ]],
3203 [[ int8_t a; int16_t b; int32_t c; a = b = c = 1;]])],
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003204 [
Tim Rice648f8762011-01-26 12:38:57 -08003205 AC_DEFINE([HAVE_INTXX_T])
3206 AC_MSG_RESULT([yes])
3207 ], [ AC_MSG_RESULT([no])
3208 ])
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003209fi
3210
Damien Miller578783e2000-09-23 14:12:24 +11003211AC_CACHE_CHECK([for int64_t type], ac_cv_have_int64_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003212 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Tim Rice907881e2002-07-18 11:44:50 -07003213#include <sys/types.h>
3214#ifdef HAVE_STDINT_H
3215# include <stdint.h>
3216#endif
3217#include <sys/socket.h>
3218#ifdef HAVE_SYS_BITYPES_H
3219# include <sys/bitypes.h>
3220#endif
Tim Rice648f8762011-01-26 12:38:57 -08003221 ]], [[
3222int64_t a; a = 1;
3223 ]])],
3224 [ ac_cv_have_int64_t="yes" ], [ ac_cv_have_int64_t="no"
3225 ])
Damien Miller578783e2000-09-23 14:12:24 +11003226])
3227if test "x$ac_cv_have_int64_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003228 AC_DEFINE([HAVE_INT64_T], [1], [define if you have int64_t data type])
Tim Rice4cec93f2002-02-26 08:40:48 -08003229fi
3230
Damien Miller61e50f12000-05-08 20:49:37 +10003231AC_CACHE_CHECK([for u_intXX_t types], ac_cv_have_u_intxx_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003232 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3233 [[ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;]])],
3234 [ ac_cv_have_u_intxx_t="yes" ], [ ac_cv_have_u_intxx_t="no"
3235 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003236])
3237if test "x$ac_cv_have_u_intxx_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003238 AC_DEFINE([HAVE_U_INTXX_T], [1], [define if you have u_intxx_t data type])
Damien Miller61e50f12000-05-08 20:49:37 +10003239 have_u_intxx_t=1
3240fi
Damien Millerc6398ef1999-11-20 12:18:40 +11003241
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003242if test -z "$have_u_intxx_t" ; then
3243 AC_MSG_CHECKING([for u_intXX_t types in sys/socket.h])
Tim Rice648f8762011-01-26 12:38:57 -08003244 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/socket.h> ]],
3245 [[ u_int8_t a; u_int16_t b; u_int32_t c; a = b = c = 1;]])],
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003246 [
Tim Rice648f8762011-01-26 12:38:57 -08003247 AC_DEFINE([HAVE_U_INTXX_T])
3248 AC_MSG_RESULT([yes])
3249 ], [ AC_MSG_RESULT([no])
3250 ])
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003251fi
3252
Damien Miller578783e2000-09-23 14:12:24 +11003253AC_CACHE_CHECK([for u_int64_t types], ac_cv_have_u_int64_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003254 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3255 [[ u_int64_t a; a = 1;]])],
3256 [ ac_cv_have_u_int64_t="yes" ], [ ac_cv_have_u_int64_t="no"
3257 ])
Damien Miller578783e2000-09-23 14:12:24 +11003258])
3259if test "x$ac_cv_have_u_int64_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003260 AC_DEFINE([HAVE_U_INT64_T], [1], [define if you have u_int64_t data type])
Damien Miller578783e2000-09-23 14:12:24 +11003261 have_u_int64_t=1
3262fi
3263
Damien Millerc2868192014-01-30 10:21:19 +11003264if (test -z "$have_u_int64_t" && \
3265 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
3266then
Tim Rice4cec93f2002-02-26 08:40:48 -08003267 AC_MSG_CHECKING([for u_int64_t type in sys/bitypes.h])
Tim Rice648f8762011-01-26 12:38:57 -08003268 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/bitypes.h> ]],
3269 [[ u_int64_t a; a = 1]])],
Tim Rice4cec93f2002-02-26 08:40:48 -08003270 [
Tim Rice648f8762011-01-26 12:38:57 -08003271 AC_DEFINE([HAVE_U_INT64_T])
3272 AC_MSG_RESULT([yes])
3273 ], [ AC_MSG_RESULT([no])
3274 ])
Tim Rice4cec93f2002-02-26 08:40:48 -08003275fi
3276
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003277if test -z "$have_u_intxx_t" ; then
3278 AC_CACHE_CHECK([for uintXX_t types], ac_cv_have_uintxx_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003279 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003280#include <sys/types.h>
Tim Rice648f8762011-01-26 12:38:57 -08003281 ]], [[
3282 uint8_t a;
3283 uint16_t b;
3284 uint32_t c;
3285 a = b = c = 1;
3286 ]])],
3287 [ ac_cv_have_uintxx_t="yes" ], [ ac_cv_have_uintxx_t="no"
3288 ])
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003289 ])
3290 if test "x$ac_cv_have_uintxx_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003291 AC_DEFINE([HAVE_UINTXX_T], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003292 [define if you have uintxx_t data type])
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003293 fi
3294fi
3295
Damien Millerc2868192014-01-30 10:21:19 +11003296if (test -z "$have_uintxx_t" && \
3297 test "x$ac_cv_header_stdint_h" = "xyes")
3298then
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003299 AC_MSG_CHECKING([for uintXX_t types in stdint.h])
Tim Rice648f8762011-01-26 12:38:57 -08003300 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <stdint.h> ]],
3301 [[ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;]])],
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003302 [
Tim Rice648f8762011-01-26 12:38:57 -08003303 AC_DEFINE([HAVE_UINTXX_T])
3304 AC_MSG_RESULT([yes])
3305 ], [ AC_MSG_RESULT([no])
3306 ])
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00003307fi
3308
Damien Millerc2868192014-01-30 10:21:19 +11003309if (test -z "$have_uintxx_t" && \
3310 test "x$ac_cv_header_inttypes_h" = "xyes")
3311then
Darren Tucker6d725682014-01-17 19:17:34 +11003312 AC_MSG_CHECKING([for uintXX_t types in inttypes.h])
3313 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <inttypes.h> ]],
3314 [[ uint8_t a; uint16_t b; uint32_t c; a = b = c = 1;]])],
3315 [
3316 AC_DEFINE([HAVE_UINTXX_T])
3317 AC_MSG_RESULT([yes])
3318 ], [ AC_MSG_RESULT([no])
3319 ])
3320fi
3321
Damien Milleredb82922000-06-20 13:25:52 +10003322if (test -z "$have_u_intxx_t" || test -z "$have_intxx_t" && \
Damien Millera8e06ce2003-11-21 23:48:55 +11003323 test "x$ac_cv_header_sys_bitypes_h" = "xyes")
Damien Millerb29ea912000-01-15 14:12:03 +11003324then
3325 AC_MSG_CHECKING([for intXX_t and u_intXX_t types in sys/bitypes.h])
Tim Rice648f8762011-01-26 12:38:57 -08003326 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller61e50f12000-05-08 20:49:37 +10003327#include <sys/bitypes.h>
Tim Rice648f8762011-01-26 12:38:57 -08003328 ]], [[
Damien Miller70494d12000-04-03 15:57:06 +10003329 int8_t a; int16_t b; int32_t c;
3330 u_int8_t e; u_int16_t f; u_int32_t g;
3331 a = b = c = e = f = g = 1;
Tim Rice648f8762011-01-26 12:38:57 -08003332 ]])],
Damien Millerb29ea912000-01-15 14:12:03 +11003333 [
Tim Rice648f8762011-01-26 12:38:57 -08003334 AC_DEFINE([HAVE_U_INTXX_T])
3335 AC_DEFINE([HAVE_INTXX_T])
3336 AC_MSG_RESULT([yes])
3337 ], [AC_MSG_RESULT([no])
3338 ])
Damien Millerb29ea912000-01-15 14:12:03 +11003339fi
3340
Damien Miller58be7382001-09-15 21:31:54 +10003341
3342AC_CACHE_CHECK([for u_char], ac_cv_have_u_char, [
Tim Rice648f8762011-01-26 12:38:57 -08003343 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3344 [[ u_char foo; foo = 125; ]])],
3345 [ ac_cv_have_u_char="yes" ], [ ac_cv_have_u_char="no"
3346 ])
Damien Miller58be7382001-09-15 21:31:54 +10003347])
3348if test "x$ac_cv_have_u_char" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003349 AC_DEFINE([HAVE_U_CHAR], [1], [define if you have u_char data type])
Damien Miller58be7382001-09-15 21:31:54 +10003350fi
3351
Darren Tucker007e3b32013-11-03 18:43:55 +11003352AC_CHECK_TYPES([intmax_t, uintmax_t], , , [
3353#include <sys/types.h>
3354#include <stdint.h>
3355])
3356
Tim Rice13aae5e2001-10-21 17:53:58 -07003357TYPE_SOCKLEN_T
Damien Miller74d0d4a1999-12-29 02:24:35 +11003358
Tim Rice648f8762011-01-26 12:38:57 -08003359AC_CHECK_TYPES([sig_atomic_t], , , [#include <signal.h>])
3360AC_CHECK_TYPES([fsblkcnt_t, fsfilcnt_t], , , [
Darren Tucker598eaa62008-06-09 03:32:29 +10003361#include <sys/types.h>
3362#ifdef HAVE_SYS_BITYPES_H
3363#include <sys/bitypes.h>
3364#endif
3365#ifdef HAVE_SYS_STATFS_H
3366#include <sys/statfs.h>
3367#endif
3368#ifdef HAVE_SYS_STATVFS_H
3369#include <sys/statvfs.h>
3370#endif
3371])
Tim Rice4cec93f2002-02-26 08:40:48 -08003372
Tim Rice648f8762011-01-26 12:38:57 -08003373AC_CHECK_TYPES([in_addr_t, in_port_t], , ,
Damien Miller848b9932005-02-24 12:12:34 +11003374[#include <sys/types.h>
3375#include <netinet/in.h>])
Darren Tuckerd9f88912005-02-20 21:01:48 +11003376
Damien Miller61e50f12000-05-08 20:49:37 +10003377AC_CACHE_CHECK([for size_t], ac_cv_have_size_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003378 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3379 [[ size_t foo; foo = 1235; ]])],
3380 [ ac_cv_have_size_t="yes" ], [ ac_cv_have_size_t="no"
3381 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003382])
3383if test "x$ac_cv_have_size_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003384 AC_DEFINE([HAVE_SIZE_T], [1], [define if you have size_t data type])
Damien Miller61e50f12000-05-08 20:49:37 +10003385fi
Damien Miller95058511999-12-29 10:36:45 +11003386
Damien Miller615f9392000-05-17 22:53:33 +10003387AC_CACHE_CHECK([for ssize_t], ac_cv_have_ssize_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003388 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3389 [[ ssize_t foo; foo = 1235; ]])],
3390 [ ac_cv_have_ssize_t="yes" ], [ ac_cv_have_ssize_t="no"
3391 ])
Damien Miller615f9392000-05-17 22:53:33 +10003392])
3393if test "x$ac_cv_have_ssize_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003394 AC_DEFINE([HAVE_SSIZE_T], [1], [define if you have ssize_t data type])
Damien Miller615f9392000-05-17 22:53:33 +10003395fi
3396
Ben Lindstrom0d5af602001-01-09 00:50:29 +00003397AC_CACHE_CHECK([for clock_t], ac_cv_have_clock_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003398 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <time.h> ]],
3399 [[ clock_t foo; foo = 1235; ]])],
3400 [ ac_cv_have_clock_t="yes" ], [ ac_cv_have_clock_t="no"
3401 ])
Ben Lindstrom0d5af602001-01-09 00:50:29 +00003402])
3403if test "x$ac_cv_have_clock_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003404 AC_DEFINE([HAVE_CLOCK_T], [1], [define if you have clock_t data type])
Ben Lindstrom0d5af602001-01-09 00:50:29 +00003405fi
3406
Damien Millerb54b40e2000-06-23 08:23:34 +10003407AC_CACHE_CHECK([for sa_family_t], ac_cv_have_sa_family_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003408 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Millerb54b40e2000-06-23 08:23:34 +10003409#include <sys/types.h>
3410#include <sys/socket.h>
Tim Rice648f8762011-01-26 12:38:57 -08003411 ]], [[ sa_family_t foo; foo = 1235; ]])],
3412 [ ac_cv_have_sa_family_t="yes" ],
3413 [ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller78315eb2000-09-29 23:01:36 +11003414#include <sys/types.h>
3415#include <sys/socket.h>
3416#include <netinet/in.h>
Tim Rice648f8762011-01-26 12:38:57 -08003417 ]], [[ sa_family_t foo; foo = 1235; ]])],
Damien Miller78315eb2000-09-29 23:01:36 +11003418 [ ac_cv_have_sa_family_t="yes" ],
Damien Millerb54b40e2000-06-23 08:23:34 +10003419 [ ac_cv_have_sa_family_t="no" ]
3420 )
Tim Rice648f8762011-01-26 12:38:57 -08003421 ])
Damien Millerb54b40e2000-06-23 08:23:34 +10003422])
3423if test "x$ac_cv_have_sa_family_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003424 AC_DEFINE([HAVE_SA_FAMILY_T], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003425 [define if you have sa_family_t data type])
Damien Millerb54b40e2000-06-23 08:23:34 +10003426fi
3427
Damien Miller0f91b4e2000-06-18 15:43:25 +10003428AC_CACHE_CHECK([for pid_t], ac_cv_have_pid_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003429 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3430 [[ pid_t foo; foo = 1235; ]])],
3431 [ ac_cv_have_pid_t="yes" ], [ ac_cv_have_pid_t="no"
3432 ])
Damien Miller0f91b4e2000-06-18 15:43:25 +10003433])
3434if test "x$ac_cv_have_pid_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003435 AC_DEFINE([HAVE_PID_T], [1], [define if you have pid_t data type])
Damien Miller0f91b4e2000-06-18 15:43:25 +10003436fi
3437
3438AC_CACHE_CHECK([for mode_t], ac_cv_have_mode_t, [
Tim Rice648f8762011-01-26 12:38:57 -08003439 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/types.h> ]],
3440 [[ mode_t foo; foo = 1235; ]])],
3441 [ ac_cv_have_mode_t="yes" ], [ ac_cv_have_mode_t="no"
3442 ])
Damien Miller0f91b4e2000-06-18 15:43:25 +10003443])
3444if test "x$ac_cv_have_mode_t" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003445 AC_DEFINE([HAVE_MODE_T], [1], [define if you have mode_t data type])
Damien Miller0f91b4e2000-06-18 15:43:25 +10003446fi
3447
Damien Miller61e50f12000-05-08 20:49:37 +10003448
3449AC_CACHE_CHECK([for struct sockaddr_storage], ac_cv_have_struct_sockaddr_storage, [
Tim Rice648f8762011-01-26 12:38:57 -08003450 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller81171112000-04-23 11:14:01 +10003451#include <sys/types.h>
3452#include <sys/socket.h>
Tim Rice648f8762011-01-26 12:38:57 -08003453 ]], [[ struct sockaddr_storage s; ]])],
3454 [ ac_cv_have_struct_sockaddr_storage="yes" ],
3455 [ ac_cv_have_struct_sockaddr_storage="no"
3456 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003457])
3458if test "x$ac_cv_have_struct_sockaddr_storage" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003459 AC_DEFINE([HAVE_STRUCT_SOCKADDR_STORAGE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003460 [define if you have struct sockaddr_storage data type])
Damien Miller61e50f12000-05-08 20:49:37 +10003461fi
Damien Miller34132e52000-01-14 15:45:46 +11003462
Damien Miller61e50f12000-05-08 20:49:37 +10003463AC_CACHE_CHECK([for struct sockaddr_in6], ac_cv_have_struct_sockaddr_in6, [
Tim Rice648f8762011-01-26 12:38:57 -08003464 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller7b22d652000-06-18 14:07:04 +10003465#include <sys/types.h>
Damien Miller61e50f12000-05-08 20:49:37 +10003466#include <netinet/in.h>
Tim Rice648f8762011-01-26 12:38:57 -08003467 ]], [[ struct sockaddr_in6 s; s.sin6_family = 0; ]])],
3468 [ ac_cv_have_struct_sockaddr_in6="yes" ],
3469 [ ac_cv_have_struct_sockaddr_in6="no"
3470 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003471])
3472if test "x$ac_cv_have_struct_sockaddr_in6" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003473 AC_DEFINE([HAVE_STRUCT_SOCKADDR_IN6], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003474 [define if you have struct sockaddr_in6 data type])
Damien Miller61e50f12000-05-08 20:49:37 +10003475fi
Damien Miller34132e52000-01-14 15:45:46 +11003476
Damien Miller61e50f12000-05-08 20:49:37 +10003477AC_CACHE_CHECK([for struct in6_addr], ac_cv_have_struct_in6_addr, [
Tim Rice648f8762011-01-26 12:38:57 -08003478 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller7b22d652000-06-18 14:07:04 +10003479#include <sys/types.h>
Damien Miller61e50f12000-05-08 20:49:37 +10003480#include <netinet/in.h>
Tim Rice648f8762011-01-26 12:38:57 -08003481 ]], [[ struct in6_addr s; s.s6_addr[0] = 0; ]])],
3482 [ ac_cv_have_struct_in6_addr="yes" ],
3483 [ ac_cv_have_struct_in6_addr="no"
3484 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003485])
3486if test "x$ac_cv_have_struct_in6_addr" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003487 AC_DEFINE([HAVE_STRUCT_IN6_ADDR], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003488 [define if you have struct in6_addr data type])
Tim Rice0f4d2c02008-11-18 21:26:41 -08003489
3490dnl Now check for sin6_scope_id
Tim Rice648f8762011-01-26 12:38:57 -08003491 AC_CHECK_MEMBERS([struct sockaddr_in6.sin6_scope_id], , ,
Tim Rice0f4d2c02008-11-18 21:26:41 -08003492 [
3493#ifdef HAVE_SYS_TYPES_H
3494#include <sys/types.h>
3495#endif
3496#include <netinet/in.h>
3497 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003498fi
Damien Miller34132e52000-01-14 15:45:46 +11003499
Damien Miller61e50f12000-05-08 20:49:37 +10003500AC_CACHE_CHECK([for struct addrinfo], ac_cv_have_struct_addrinfo, [
Tim Rice648f8762011-01-26 12:38:57 -08003501 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller81171112000-04-23 11:14:01 +10003502#include <sys/types.h>
3503#include <sys/socket.h>
3504#include <netdb.h>
Tim Rice648f8762011-01-26 12:38:57 -08003505 ]], [[ struct addrinfo s; s.ai_flags = AI_PASSIVE; ]])],
3506 [ ac_cv_have_struct_addrinfo="yes" ],
3507 [ ac_cv_have_struct_addrinfo="no"
3508 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003509])
3510if test "x$ac_cv_have_struct_addrinfo" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003511 AC_DEFINE([HAVE_STRUCT_ADDRINFO], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003512 [define if you have struct addrinfo data type])
Damien Miller61e50f12000-05-08 20:49:37 +10003513fi
3514
Ben Lindstrom42202bc2001-01-15 02:34:37 +00003515AC_CACHE_CHECK([for struct timeval], ac_cv_have_struct_timeval, [
Tim Rice648f8762011-01-26 12:38:57 -08003516 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <sys/time.h> ]],
3517 [[ struct timeval tv; tv.tv_sec = 1;]])],
3518 [ ac_cv_have_struct_timeval="yes" ],
3519 [ ac_cv_have_struct_timeval="no"
3520 ])
Ben Lindstrom42202bc2001-01-15 02:34:37 +00003521])
3522if test "x$ac_cv_have_struct_timeval" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003523 AC_DEFINE([HAVE_STRUCT_TIMEVAL], [1], [define if you have struct timeval])
Ben Lindstrom42202bc2001-01-15 02:34:37 +00003524 have_struct_timeval=1
3525fi
3526
Tim Rice648f8762011-01-26 12:38:57 -08003527AC_CHECK_TYPES([struct timespec])
Tim Rice4e4dc562003-03-18 10:21:40 -08003528
Ben Lindstrom5bd6eb72003-03-21 00:34:34 +00003529# We need int64_t or else certian parts of the compile will fail.
Tim Rice8bb561b2005-03-17 16:23:19 -08003530if test "x$ac_cv_have_int64_t" = "xno" && \
3531 test "x$ac_cv_sizeof_long_int" != "x8" && \
3532 test "x$ac_cv_sizeof_long_long_int" = "x0" ; then
Ben Lindstrom5bd6eb72003-03-21 00:34:34 +00003533 echo "OpenSSH requires int64_t support. Contact your vendor or install"
3534 echo "an alternative compiler (I.E., GCC) before continuing."
3535 echo ""
3536 exit 1;
Tim Ricebee3f222001-03-11 17:32:12 -08003537else
3538dnl test snprintf (broken on SCO w/gcc)
Darren Tuckera0c2b392004-09-11 23:26:37 +10003539 AC_RUN_IFELSE(
Darren Tucker623d92f2004-09-12 22:36:15 +10003540 [AC_LANG_SOURCE([[
Tim Ricebee3f222001-03-11 17:32:12 -08003541#include <stdio.h>
3542#include <string.h>
3543#ifdef HAVE_SNPRINTF
3544main()
3545{
3546 char buf[50];
3547 char expected_out[50];
3548 int mazsize = 50 ;
3549#if (SIZEOF_LONG_INT == 8)
3550 long int num = 0x7fffffffffffffff;
3551#else
Kevin Steves6482ec82001-07-15 02:09:28 +00003552 long long num = 0x7fffffffffffffffll;
Tim Ricebee3f222001-03-11 17:32:12 -08003553#endif
3554 strcpy(expected_out, "9223372036854775807");
3555 snprintf(buf, mazsize, "%lld", num);
3556 if(strcmp(buf, expected_out) != 0)
Damien Millera8e06ce2003-11-21 23:48:55 +11003557 exit(1);
Tim Ricebee3f222001-03-11 17:32:12 -08003558 exit(0);
3559}
3560#else
3561main() { exit(0); }
3562#endif
Tim Rice648f8762011-01-26 12:38:57 -08003563 ]])], [ true ], [ AC_DEFINE([BROKEN_SNPRINTF]) ],
Darren Tuckera0c2b392004-09-11 23:26:37 +10003564 AC_MSG_WARN([cross compiling: Assuming working snprintf()])
Tim Ricebee3f222001-03-11 17:32:12 -08003565 )
Ben Lindstrom3ad650a2001-01-03 06:02:51 +00003566fi
3567
Damien Miller78315eb2000-09-29 23:01:36 +11003568dnl Checks for structure members
Tim Rice648f8762011-01-26 12:38:57 -08003569OSSH_CHECK_HEADER_FOR_FIELD([ut_host], [utmp.h], [HAVE_HOST_IN_UTMP])
3570OSSH_CHECK_HEADER_FOR_FIELD([ut_host], [utmpx.h], [HAVE_HOST_IN_UTMPX])
3571OSSH_CHECK_HEADER_FOR_FIELD([syslen], [utmpx.h], [HAVE_SYSLEN_IN_UTMPX])
3572OSSH_CHECK_HEADER_FOR_FIELD([ut_pid], [utmp.h], [HAVE_PID_IN_UTMP])
3573OSSH_CHECK_HEADER_FOR_FIELD([ut_type], [utmp.h], [HAVE_TYPE_IN_UTMP])
3574OSSH_CHECK_HEADER_FOR_FIELD([ut_type], [utmpx.h], [HAVE_TYPE_IN_UTMPX])
3575OSSH_CHECK_HEADER_FOR_FIELD([ut_tv], [utmp.h], [HAVE_TV_IN_UTMP])
3576OSSH_CHECK_HEADER_FOR_FIELD([ut_id], [utmp.h], [HAVE_ID_IN_UTMP])
3577OSSH_CHECK_HEADER_FOR_FIELD([ut_id], [utmpx.h], [HAVE_ID_IN_UTMPX])
3578OSSH_CHECK_HEADER_FOR_FIELD([ut_addr], [utmp.h], [HAVE_ADDR_IN_UTMP])
3579OSSH_CHECK_HEADER_FOR_FIELD([ut_addr], [utmpx.h], [HAVE_ADDR_IN_UTMPX])
3580OSSH_CHECK_HEADER_FOR_FIELD([ut_addr_v6], [utmp.h], [HAVE_ADDR_V6_IN_UTMP])
3581OSSH_CHECK_HEADER_FOR_FIELD([ut_addr_v6], [utmpx.h], [HAVE_ADDR_V6_IN_UTMPX])
3582OSSH_CHECK_HEADER_FOR_FIELD([ut_exit], [utmp.h], [HAVE_EXIT_IN_UTMP])
3583OSSH_CHECK_HEADER_FOR_FIELD([ut_time], [utmp.h], [HAVE_TIME_IN_UTMP])
3584OSSH_CHECK_HEADER_FOR_FIELD([ut_time], [utmpx.h], [HAVE_TIME_IN_UTMPX])
3585OSSH_CHECK_HEADER_FOR_FIELD([ut_tv], [utmpx.h], [HAVE_TV_IN_UTMPX])
Tim Rice13aae5e2001-10-21 17:53:58 -07003586
3587AC_CHECK_MEMBERS([struct stat.st_blksize])
Damien Miller6332da22013-04-23 14:25:52 +10003588AC_CHECK_MEMBERS([struct passwd.pw_gecos, struct passwd.pw_class,
3589struct passwd.pw_change, struct passwd.pw_expire],
3590[], [], [[
3591#include <sys/types.h>
3592#include <pwd.h>
3593]])
3594
Tim Rice648f8762011-01-26 12:38:57 -08003595AC_CHECK_MEMBER([struct __res_state.retrans], [], [AC_DEFINE([__res_state], [state],
Darren Tucker58e298d2005-11-25 13:14:58 +11003596 [Define if we don't have struct __res_state in resolv.h])],
Damien Miller6332da22013-04-23 14:25:52 +10003597[[
Darren Tucker58e298d2005-11-25 13:14:58 +11003598#include <stdio.h>
3599#if HAVE_SYS_TYPES_H
3600# include <sys/types.h>
3601#endif
3602#include <netinet/in.h>
3603#include <arpa/nameser.h>
3604#include <resolv.h>
Damien Miller6332da22013-04-23 14:25:52 +10003605]])
andre2ff7b5d2000-06-03 14:57:40 +00003606
Damien Miller61e50f12000-05-08 20:49:37 +10003607AC_CACHE_CHECK([for ss_family field in struct sockaddr_storage],
3608 ac_cv_have_ss_family_in_struct_ss, [
Tim Rice648f8762011-01-26 12:38:57 -08003609 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller81171112000-04-23 11:14:01 +10003610#include <sys/types.h>
3611#include <sys/socket.h>
Tim Rice648f8762011-01-26 12:38:57 -08003612 ]], [[ struct sockaddr_storage s; s.ss_family = 1; ]])],
3613 [ ac_cv_have_ss_family_in_struct_ss="yes" ],
3614 [ ac_cv_have_ss_family_in_struct_ss="no" ])
Damien Miller61e50f12000-05-08 20:49:37 +10003615])
3616if test "x$ac_cv_have_ss_family_in_struct_ss" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003617 AC_DEFINE([HAVE_SS_FAMILY_IN_SS], [1], [Fields in struct sockaddr_storage])
Damien Miller61e50f12000-05-08 20:49:37 +10003618fi
3619
Damien Miller61e50f12000-05-08 20:49:37 +10003620AC_CACHE_CHECK([for __ss_family field in struct sockaddr_storage],
3621 ac_cv_have___ss_family_in_struct_ss, [
Tim Rice648f8762011-01-26 12:38:57 -08003622 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller81171112000-04-23 11:14:01 +10003623#include <sys/types.h>
3624#include <sys/socket.h>
Tim Rice648f8762011-01-26 12:38:57 -08003625 ]], [[ struct sockaddr_storage s; s.__ss_family = 1; ]])],
3626 [ ac_cv_have___ss_family_in_struct_ss="yes" ],
3627 [ ac_cv_have___ss_family_in_struct_ss="no"
3628 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003629])
3630if test "x$ac_cv_have___ss_family_in_struct_ss" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003631 AC_DEFINE([HAVE___SS_FAMILY_IN_SS], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003632 [Fields in struct sockaddr_storage])
Damien Miller61e50f12000-05-08 20:49:37 +10003633fi
Damien Millerbf1c9b21999-12-09 10:16:54 +11003634
Tim Rice28bbb0c2002-05-27 17:37:32 -07003635dnl make sure we're using the real structure members and not defines
Kevin Steves939c9db2002-03-22 17:23:25 +00003636AC_CACHE_CHECK([for msg_accrights field in struct msghdr],
3637 ac_cv_have_accrights_in_msghdr, [
Tim Rice648f8762011-01-26 12:38:57 -08003638 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Tim Riceae49fe62002-04-12 10:26:21 -07003639#include <sys/types.h>
Kevin Steves939c9db2002-03-22 17:23:25 +00003640#include <sys/socket.h>
3641#include <sys/uio.h>
Tim Rice648f8762011-01-26 12:38:57 -08003642 ]], [[
Tim Rice28bbb0c2002-05-27 17:37:32 -07003643#ifdef msg_accrights
Darren Tuckera0c2b392004-09-11 23:26:37 +10003644#error "msg_accrights is a macro"
Tim Rice28bbb0c2002-05-27 17:37:32 -07003645exit(1);
3646#endif
3647struct msghdr m;
3648m.msg_accrights = 0;
3649exit(0);
Tim Rice648f8762011-01-26 12:38:57 -08003650 ]])],
Kevin Steves939c9db2002-03-22 17:23:25 +00003651 [ ac_cv_have_accrights_in_msghdr="yes" ],
3652 [ ac_cv_have_accrights_in_msghdr="no" ]
3653 )
3654])
3655if test "x$ac_cv_have_accrights_in_msghdr" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003656 AC_DEFINE([HAVE_ACCRIGHTS_IN_MSGHDR], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003657 [Define if your system uses access rights style
3658 file descriptor passing])
Kevin Steves939c9db2002-03-22 17:23:25 +00003659fi
3660
Tim Rice648f8762011-01-26 12:38:57 -08003661AC_MSG_CHECKING([if struct statvfs.f_fsid is integral type])
3662AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Darren Tuckere1a3ddf2012-05-04 11:05:45 +10003663#include <sys/param.h>
Darren Tucker32780622009-06-16 16:11:02 +10003664#include <sys/stat.h>
3665#ifdef HAVE_SYS_TIME_H
3666# include <sys/time.h>
3667#endif
3668#ifdef HAVE_SYS_MOUNT_H
3669#include <sys/mount.h>
3670#endif
3671#ifdef HAVE_SYS_STATVFS_H
3672#include <sys/statvfs.h>
3673#endif
Tim Rice648f8762011-01-26 12:38:57 -08003674 ]], [[ struct statvfs s; s.f_fsid = 0; ]])],
3675 [ AC_MSG_RESULT([yes]) ],
3676 [ AC_MSG_RESULT([no])
Darren Tucker32780622009-06-16 16:11:02 +10003677
Tim Rice648f8762011-01-26 12:38:57 -08003678 AC_MSG_CHECKING([if fsid_t has member val])
3679 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Darren Tucker32780622009-06-16 16:11:02 +10003680#include <sys/types.h>
Tim Rice648f8762011-01-26 12:38:57 -08003681#include <sys/statvfs.h>
3682 ]], [[ fsid_t t; t.val[0] = 0; ]])],
3683 [ AC_MSG_RESULT([yes])
3684 AC_DEFINE([FSID_HAS_VAL], [1], [fsid_t has member val]) ],
3685 [ AC_MSG_RESULT([no]) ])
Darren Tucker32780622009-06-16 16:11:02 +10003686
Tim Rice648f8762011-01-26 12:38:57 -08003687 AC_MSG_CHECKING([if f_fsid has member __val])
3688 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Darren Tucker32780622009-06-16 16:11:02 +10003689#include <sys/types.h>
Tim Rice648f8762011-01-26 12:38:57 -08003690#include <sys/statvfs.h>
3691 ]], [[ fsid_t t; t.__val[0] = 0; ]])],
3692 [ AC_MSG_RESULT([yes])
3693 AC_DEFINE([FSID_HAS___VAL], [1], [fsid_t has member __val]) ],
3694 [ AC_MSG_RESULT([no]) ])
Darren Tucker32780622009-06-16 16:11:02 +10003695])
Darren Tucker77001382008-06-09 06:17:53 +10003696
Kevin Stevesa44e0352002-04-07 16:18:03 +00003697AC_CACHE_CHECK([for msg_control field in struct msghdr],
3698 ac_cv_have_control_in_msghdr, [
Tim Rice648f8762011-01-26 12:38:57 -08003699 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Tim Riceae49fe62002-04-12 10:26:21 -07003700#include <sys/types.h>
Kevin Stevesa44e0352002-04-07 16:18:03 +00003701#include <sys/socket.h>
3702#include <sys/uio.h>
Tim Rice648f8762011-01-26 12:38:57 -08003703 ]], [[
Tim Rice28bbb0c2002-05-27 17:37:32 -07003704#ifdef msg_control
Darren Tuckera0c2b392004-09-11 23:26:37 +10003705#error "msg_control is a macro"
Tim Rice28bbb0c2002-05-27 17:37:32 -07003706exit(1);
3707#endif
3708struct msghdr m;
3709m.msg_control = 0;
3710exit(0);
Tim Rice648f8762011-01-26 12:38:57 -08003711 ]])],
Kevin Stevesa44e0352002-04-07 16:18:03 +00003712 [ ac_cv_have_control_in_msghdr="yes" ],
3713 [ ac_cv_have_control_in_msghdr="no" ]
3714 )
3715])
3716if test "x$ac_cv_have_control_in_msghdr" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003717 AC_DEFINE([HAVE_CONTROL_IN_MSGHDR], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003718 [Define if your system uses ancillary data style
3719 file descriptor passing])
Kevin Stevesa44e0352002-04-07 16:18:03 +00003720fi
3721
Damien Miller61e50f12000-05-08 20:49:37 +10003722AC_CACHE_CHECK([if libc defines __progname], ac_cv_libc_defines___progname, [
Tim Rice648f8762011-01-26 12:38:57 -08003723 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
3724 [[ extern char *__progname; printf("%s", __progname); ]])],
3725 [ ac_cv_libc_defines___progname="yes" ],
3726 [ ac_cv_libc_defines___progname="no"
3727 ])
Damien Miller61e50f12000-05-08 20:49:37 +10003728])
3729if test "x$ac_cv_libc_defines___progname" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003730 AC_DEFINE([HAVE___PROGNAME], [1], [Define if libc defines __progname])
Damien Miller61e50f12000-05-08 20:49:37 +10003731fi
3732
Kevin Steves4846f4a2002-03-22 18:19:53 +00003733AC_CACHE_CHECK([whether $CC implements __FUNCTION__], ac_cv_cc_implements___FUNCTION__, [
Tim Rice648f8762011-01-26 12:38:57 -08003734 AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]],
3735 [[ printf("%s", __FUNCTION__); ]])],
3736 [ ac_cv_cc_implements___FUNCTION__="yes" ],
3737 [ ac_cv_cc_implements___FUNCTION__="no"
3738 ])
Kevin Steves4846f4a2002-03-22 18:19:53 +00003739])
3740if test "x$ac_cv_cc_implements___FUNCTION__" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003741 AC_DEFINE([HAVE___FUNCTION__], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003742 [Define if compiler implements __FUNCTION__])
Kevin Steves4846f4a2002-03-22 18:19:53 +00003743fi
3744
3745AC_CACHE_CHECK([whether $CC implements __func__], ac_cv_cc_implements___func__, [
Tim Rice648f8762011-01-26 12:38:57 -08003746 AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <stdio.h> ]],
3747 [[ printf("%s", __func__); ]])],
3748 [ ac_cv_cc_implements___func__="yes" ],
3749 [ ac_cv_cc_implements___func__="no"
3750 ])
Kevin Steves4846f4a2002-03-22 18:19:53 +00003751])
3752if test "x$ac_cv_cc_implements___func__" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003753 AC_DEFINE([HAVE___func__], [1], [Define if compiler implements __func__])
Kevin Steves4846f4a2002-03-22 18:19:53 +00003754fi
3755
Damien Miller57f39152005-11-24 19:58:19 +11003756AC_CACHE_CHECK([whether va_copy exists], ac_cv_have_va_copy, [
Tim Rice648f8762011-01-26 12:38:57 -08003757 AC_LINK_IFELSE([AC_LANG_PROGRAM([[
3758#include <stdarg.h>
3759va_list x,y;
3760 ]], [[ va_copy(x,y); ]])],
3761 [ ac_cv_have_va_copy="yes" ],
3762 [ ac_cv_have_va_copy="no"
3763 ])
Damien Miller57f39152005-11-24 19:58:19 +11003764])
3765if test "x$ac_cv_have_va_copy" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003766 AC_DEFINE([HAVE_VA_COPY], [1], [Define if va_copy exists])
Damien Miller57f39152005-11-24 19:58:19 +11003767fi
3768
3769AC_CACHE_CHECK([whether __va_copy exists], ac_cv_have___va_copy, [
Tim Rice648f8762011-01-26 12:38:57 -08003770 AC_LINK_IFELSE([AC_LANG_PROGRAM([[
3771#include <stdarg.h>
3772va_list x,y;
3773 ]], [[ __va_copy(x,y); ]])],
3774 [ ac_cv_have___va_copy="yes" ], [ ac_cv_have___va_copy="no"
3775 ])
Damien Miller57f39152005-11-24 19:58:19 +11003776])
3777if test "x$ac_cv_have___va_copy" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003778 AC_DEFINE([HAVE___VA_COPY], [1], [Define if __va_copy exists])
Damien Miller57f39152005-11-24 19:58:19 +11003779fi
3780
Damien Miller4f8e6692001-07-14 13:22:53 +10003781AC_CACHE_CHECK([whether getopt has optreset support],
3782 ac_cv_have_getopt_optreset, [
Tim Rice648f8762011-01-26 12:38:57 -08003783 AC_LINK_IFELSE([AC_LANG_PROGRAM([[ #include <getopt.h> ]],
3784 [[ extern int optreset; optreset = 0; ]])],
3785 [ ac_cv_have_getopt_optreset="yes" ],
3786 [ ac_cv_have_getopt_optreset="no"
3787 ])
Damien Miller4f8e6692001-07-14 13:22:53 +10003788])
3789if test "x$ac_cv_have_getopt_optreset" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003790 AC_DEFINE([HAVE_GETOPT_OPTRESET], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003791 [Define if your getopt(3) defines and uses optreset])
Damien Miller4f8e6692001-07-14 13:22:53 +10003792fi
Damien Millera22ba012000-03-02 23:09:20 +11003793
Damien Millerecbb26d2000-07-15 14:59:14 +10003794AC_CACHE_CHECK([if libc defines sys_errlist], ac_cv_libc_defines_sys_errlist, [
Tim Rice648f8762011-01-26 12:38:57 -08003795 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
3796[[ extern const char *const sys_errlist[]; printf("%s", sys_errlist[0]);]])],
3797 [ ac_cv_libc_defines_sys_errlist="yes" ],
3798 [ ac_cv_libc_defines_sys_errlist="no"
3799 ])
Damien Millerecbb26d2000-07-15 14:59:14 +10003800])
3801if test "x$ac_cv_libc_defines_sys_errlist" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003802 AC_DEFINE([HAVE_SYS_ERRLIST], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003803 [Define if your system defines sys_errlist[]])
Damien Millerecbb26d2000-07-15 14:59:14 +10003804fi
3805
3806
Damien Miller11fa2cc2000-08-16 10:35:58 +10003807AC_CACHE_CHECK([if libc defines sys_nerr], ac_cv_libc_defines_sys_nerr, [
Tim Rice648f8762011-01-26 12:38:57 -08003808 AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],
3809[[ extern int sys_nerr; printf("%i", sys_nerr);]])],
3810 [ ac_cv_libc_defines_sys_nerr="yes" ],
3811 [ ac_cv_libc_defines_sys_nerr="no"
3812 ])
Damien Miller11fa2cc2000-08-16 10:35:58 +10003813])
3814if test "x$ac_cv_libc_defines_sys_nerr" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08003815 AC_DEFINE([HAVE_SYS_NERR], [1], [Define if your system defines sys_nerr])
Damien Miller11fa2cc2000-08-16 10:35:58 +10003816fi
3817
Darren Tucker5f88d342003-10-15 16:57:57 +10003818# Check libraries needed by DNS fingerprint support
Tim Rice648f8762011-01-26 12:38:57 -08003819AC_SEARCH_LIBS([getrrsetbyname], [resolv],
3820 [AC_DEFINE([HAVE_GETRRSETBYNAME], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003821 [Define if getrrsetbyname() exists])],
Damien Miller7abe09b2003-05-15 10:53:49 +10003822 [
Darren Tucker5f88d342003-10-15 16:57:57 +10003823 # Needed by our getrrsetbyname()
Tim Rice648f8762011-01-26 12:38:57 -08003824 AC_SEARCH_LIBS([res_query], [resolv])
3825 AC_SEARCH_LIBS([dn_expand], [resolv])
3826 AC_MSG_CHECKING([if res_query will link])
3827 AC_LINK_IFELSE([AC_LANG_PROGRAM([[
Darren Tuckere02b49a2009-09-11 14:56:08 +10003828#include <sys/types.h>
3829#include <netinet/in.h>
3830#include <arpa/nameser.h>
3831#include <netdb.h>
3832#include <resolv.h>
Tim Rice648f8762011-01-26 12:38:57 -08003833 ]], [[
Darren Tuckere02b49a2009-09-11 14:56:08 +10003834 res_query (0, 0, 0, 0, 0);
Tim Rice648f8762011-01-26 12:38:57 -08003835 ]])],
3836 AC_MSG_RESULT([yes]),
3837 [AC_MSG_RESULT([no])
Darren Tucker8e968a52004-05-13 11:56:16 +10003838 saved_LIBS="$LIBS"
3839 LIBS="$LIBS -lresolv"
Tim Rice648f8762011-01-26 12:38:57 -08003840 AC_MSG_CHECKING([for res_query in -lresolv])
3841 AC_LINK_IFELSE([AC_LANG_PROGRAM([[
Darren Tuckere02b49a2009-09-11 14:56:08 +10003842#include <sys/types.h>
3843#include <netinet/in.h>
3844#include <arpa/nameser.h>
3845#include <netdb.h>
Darren Tucker8e968a52004-05-13 11:56:16 +10003846#include <resolv.h>
Tim Rice648f8762011-01-26 12:38:57 -08003847 ]], [[
Darren Tucker8e968a52004-05-13 11:56:16 +10003848 res_query (0, 0, 0, 0, 0);
Tim Rice648f8762011-01-26 12:38:57 -08003849 ]])],
3850 [AC_MSG_RESULT([yes])],
Darren Tucker8e968a52004-05-13 11:56:16 +10003851 [LIBS="$saved_LIBS"
Tim Rice648f8762011-01-26 12:38:57 -08003852 AC_MSG_RESULT([no])])
Darren Tucker8e968a52004-05-13 11:56:16 +10003853 ])
Tim Rice648f8762011-01-26 12:38:57 -08003854 AC_CHECK_FUNCS([_getshort _getlong])
Darren Tuckerd886e1c2005-06-01 18:57:45 +10003855 AC_CHECK_DECLS([_getshort, _getlong], , ,
Tim Ricefcc7ff12005-06-02 20:28:29 -07003856 [#include <sys/types.h>
3857 #include <arpa/nameser.h>])
Tim Rice648f8762011-01-26 12:38:57 -08003858 AC_CHECK_MEMBER([HEADER.ad],
3859 [AC_DEFINE([HAVE_HEADER_AD], [1],
3860 [Define if HEADER.ad exists in arpa/nameser.h])], ,
Darren Tucker5f88d342003-10-15 16:57:57 +10003861 [#include <arpa/nameser.h>])
3862 ])
Damien Miller7abe09b2003-05-15 10:53:49 +10003863
Tim Rice648f8762011-01-26 12:38:57 -08003864AC_MSG_CHECKING([if struct __res_state _res is an extern])
3865AC_LINK_IFELSE([AC_LANG_PROGRAM([[
Darren Tuckercc40d5e2007-04-29 13:58:06 +10003866#include <stdio.h>
3867#if HAVE_SYS_TYPES_H
3868# include <sys/types.h>
3869#endif
3870#include <netinet/in.h>
3871#include <arpa/nameser.h>
3872#include <resolv.h>
3873extern struct __res_state _res;
Tim Rice648f8762011-01-26 12:38:57 -08003874 ]], [[ ]])],
3875 [AC_MSG_RESULT([yes])
3876 AC_DEFINE([HAVE__RES_EXTERN], [1],
Darren Tuckercc40d5e2007-04-29 13:58:06 +10003877 [Define if you have struct __res_state _res as an extern])
3878 ],
Tim Rice648f8762011-01-26 12:38:57 -08003879 [ AC_MSG_RESULT([no]) ]
Darren Tuckercc40d5e2007-04-29 13:58:06 +10003880)
3881
Damien Miller73b42d22006-04-22 21:26:08 +10003882# Check whether user wants SELinux support
3883SELINUX_MSG="no"
3884LIBSELINUX=""
Tim Rice648f8762011-01-26 12:38:57 -08003885AC_ARG_WITH([selinux],
Damien Miller5b1c8b32008-03-27 12:33:07 +11003886 [ --with-selinux Enable SELinux support],
Damien Miller73b42d22006-04-22 21:26:08 +10003887 [ if test "x$withval" != "xno" ; then
Darren Tucker20e9f972007-03-25 18:26:01 +10003888 save_LIBS="$LIBS"
Tim Rice648f8762011-01-26 12:38:57 -08003889 AC_DEFINE([WITH_SELINUX], [1],
3890 [Define if you want SELinux support.])
Damien Miller73b42d22006-04-22 21:26:08 +10003891 SELINUX_MSG="yes"
3892 AC_CHECK_HEADER([selinux/selinux.h], ,
Tim Rice648f8762011-01-26 12:38:57 -08003893 AC_MSG_ERROR([SELinux support requires selinux.h header]))
3894 AC_CHECK_LIB([selinux], [setexeccon],
Damien Miller1d2bfc42010-02-10 10:19:29 +11003895 [ LIBSELINUX="-lselinux"
3896 LIBS="$LIBS -lselinux"
3897 ],
Tim Rice648f8762011-01-26 12:38:57 -08003898 AC_MSG_ERROR([SELinux support requires libselinux library]))
Damien Miller71adf122011-01-25 12:16:15 +11003899 SSHLIBS="$SSHLIBS $LIBSELINUX"
Darren Tucker20e9f972007-03-25 18:26:01 +10003900 SSHDLIBS="$SSHDLIBS $LIBSELINUX"
Tim Rice648f8762011-01-26 12:38:57 -08003901 AC_CHECK_FUNCS([getseuserbyname get_default_context_with_level])
Darren Tuckeradc947d2006-10-07 09:07:20 +10003902 LIBS="$save_LIBS"
Damien Miller73b42d22006-04-22 21:26:08 +10003903 fi ]
3904)
Tim Rice648f8762011-01-26 12:38:57 -08003905AC_SUBST([SSHLIBS])
3906AC_SUBST([SSHDLIBS])
Damien Miller73b42d22006-04-22 21:26:08 +10003907
Damien Millerfd4c9ee2002-04-13 11:04:40 +10003908# Check whether user wants Kerberos 5 support
Damien Millera8e06ce2003-11-21 23:48:55 +11003909KRB5_MSG="no"
Tim Rice648f8762011-01-26 12:38:57 -08003910AC_ARG_WITH([kerberos5],
Damien Millera8e06ce2003-11-21 23:48:55 +11003911 [ --with-kerberos5=PATH Enable Kerberos 5 support],
Darren Tucker1d3ca582004-01-22 12:05:34 +11003912 [ if test "x$withval" != "xno" ; then
3913 if test "x$withval" = "xyes" ; then
3914 KRB5ROOT="/usr/local"
3915 else
3916 KRB5ROOT=${withval}
3917 fi
3918
Tim Rice648f8762011-01-26 12:38:57 -08003919 AC_DEFINE([KRB5], [1], [Define if you want Kerberos 5 support])
Darren Tucker1d3ca582004-01-22 12:05:34 +11003920 KRB5_MSG="yes"
3921
Tim Rice648f8762011-01-26 12:38:57 -08003922 AC_PATH_PROG([KRB5CONF], [krb5-config],
Darren Tuckerdad48e72009-09-01 18:26:00 +10003923 [$KRB5ROOT/bin/krb5-config],
3924 [$KRB5ROOT/bin:$PATH])
3925 if test -x $KRB5CONF ; then
Darren Tucker964de182013-02-22 10:39:59 +11003926 K5CFLAGS="`$KRB5CONF --cflags`"
3927 K5LIBS="`$KRB5CONF --libs`"
3928 CPPFLAGS="$CPPFLAGS $K5CFLAGS"
Darren Tucker1d3ca582004-01-22 12:05:34 +11003929
Tim Rice648f8762011-01-26 12:38:57 -08003930 AC_MSG_CHECKING([for gssapi support])
Darren Tucker1d3ca582004-01-22 12:05:34 +11003931 if $KRB5CONF | grep gssapi >/dev/null ; then
Tim Rice648f8762011-01-26 12:38:57 -08003932 AC_MSG_RESULT([yes])
3933 AC_DEFINE([GSSAPI], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07003934 [Define this if you want GSSAPI
3935 support in the version 2 protocol])
Darren Tucker964de182013-02-22 10:39:59 +11003936 GSSCFLAGS="`$KRB5CONF --cflags gssapi`"
3937 GSSLIBS="`$KRB5CONF --libs gssapi`"
3938 CPPFLAGS="$CPPFLAGS $GSSCFLAGS"
Damien Millera8e06ce2003-11-21 23:48:55 +11003939 else
Tim Rice648f8762011-01-26 12:38:57 -08003940 AC_MSG_RESULT([no])
Damien Millera8e06ce2003-11-21 23:48:55 +11003941 fi
Tim Rice648f8762011-01-26 12:38:57 -08003942 AC_MSG_CHECKING([whether we are using Heimdal])
3943 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <krb5.h>
3944 ]], [[ char *tmp = heimdal_version; ]])],
3945 [ AC_MSG_RESULT([yes])
3946 AC_DEFINE([HEIMDAL], [1],
3947 [Define this if you are using the Heimdal
3948 version of Kerberos V5]) ],
3949 [AC_MSG_RESULT([no])
3950 ])
Darren Tucker1d3ca582004-01-22 12:05:34 +11003951 else
Damien Millerfd4c9ee2002-04-13 11:04:40 +10003952 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include"
Damien Millera8e06ce2003-11-21 23:48:55 +11003953 LDFLAGS="$LDFLAGS -L${KRB5ROOT}/lib"
Tim Rice648f8762011-01-26 12:38:57 -08003954 AC_MSG_CHECKING([whether we are using Heimdal])
3955 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[ #include <krb5.h>
3956 ]], [[ char *tmp = heimdal_version; ]])],
3957 [ AC_MSG_RESULT([yes])
3958 AC_DEFINE([HEIMDAL])
Damien Miller41bccf72011-01-02 21:53:07 +11003959 K5LIBS="-lkrb5"
Damien Miller5561e0b2004-04-20 20:28:55 +10003960 K5LIBS="$K5LIBS -lcom_err -lasn1"
Tim Rice648f8762011-01-26 12:38:57 -08003961 AC_CHECK_LIB([roken], [net_write],
Damien Miller5561e0b2004-04-20 20:28:55 +10003962 [K5LIBS="$K5LIBS -lroken"])
Tim Rice648f8762011-01-26 12:38:57 -08003963 AC_CHECK_LIB([des], [des_cbc_encrypt],
Damien Miller41bccf72011-01-02 21:53:07 +11003964 [K5LIBS="$K5LIBS -ldes"])
Tim Rice648f8762011-01-26 12:38:57 -08003965 ], [ AC_MSG_RESULT([no])
Damien Millera8e06ce2003-11-21 23:48:55 +11003966 K5LIBS="-lkrb5 -lk5crypto -lcom_err"
Tim Rice648f8762011-01-26 12:38:57 -08003967
3968 ])
3969 AC_SEARCH_LIBS([dn_expand], [resolv])
Damien Millerfd4c9ee2002-04-13 11:04:40 +10003970
Tim Rice648f8762011-01-26 12:38:57 -08003971 AC_CHECK_LIB([gssapi_krb5], [gss_init_sec_context],
3972 [ AC_DEFINE([GSSAPI])
Darren Tucker964de182013-02-22 10:39:59 +11003973 GSSLIBS="-lgssapi_krb5" ],
Tim Rice648f8762011-01-26 12:38:57 -08003974 [ AC_CHECK_LIB([gssapi], [gss_init_sec_context],
3975 [ AC_DEFINE([GSSAPI])
Darren Tucker964de182013-02-22 10:39:59 +11003976 GSSLIBS="-lgssapi" ],
Darren Tuckera2b5a4c2013-02-22 10:43:15 +11003977 [ AC_CHECK_LIB([gss], [gss_init_sec_context],
3978 [ AC_DEFINE([GSSAPI])
3979 GSSLIBS="-lgss" ],
3980 AC_MSG_WARN([Cannot find any suitable gss-api library - build may fail]))
3981 ])
Darren Tucker964de182013-02-22 10:39:59 +11003982 ])
Tim Riceeae17cc2005-03-17 16:52:20 -08003983
Tim Rice648f8762011-01-26 12:38:57 -08003984 AC_CHECK_HEADER([gssapi.h], ,
Darren Tucker49aaf4a2003-08-26 11:58:16 +10003985 [ unset ac_cv_header_gssapi_h
Damien Millera8e06ce2003-11-21 23:48:55 +11003986 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
Tim Rice648f8762011-01-26 12:38:57 -08003987 AC_CHECK_HEADERS([gssapi.h], ,
Darren Tucker49aaf4a2003-08-26 11:58:16 +10003988 AC_MSG_WARN([Cannot find any suitable gss-api header - build may fail])
Damien Millera8e06ce2003-11-21 23:48:55 +11003989 )
Darren Tucker49aaf4a2003-08-26 11:58:16 +10003990 ]
3991 )
3992
3993 oldCPP="$CPPFLAGS"
3994 CPPFLAGS="$CPPFLAGS -I${KRB5ROOT}/include/gssapi"
Tim Rice648f8762011-01-26 12:38:57 -08003995 AC_CHECK_HEADER([gssapi_krb5.h], ,
Darren Tucker49aaf4a2003-08-26 11:58:16 +10003996 [ CPPFLAGS="$oldCPP" ])
3997
Damien Millera8e06ce2003-11-21 23:48:55 +11003998 fi
Darren Tucker1d3ca582004-01-22 12:05:34 +11003999 if test ! -z "$need_dash_r" ; then
4000 LDFLAGS="$LDFLAGS -R${KRB5ROOT}/lib"
4001 fi
4002 if test ! -z "$blibpath" ; then
4003 blibpath="$blibpath:${KRB5ROOT}/lib"
4004 fi
Tim Ricefd9e9e32005-09-12 17:36:10 -07004005
Tim Rice648f8762011-01-26 12:38:57 -08004006 AC_CHECK_HEADERS([gssapi.h gssapi/gssapi.h])
4007 AC_CHECK_HEADERS([gssapi_krb5.h gssapi/gssapi_krb5.h])
4008 AC_CHECK_HEADERS([gssapi_generic.h gssapi/gssapi_generic.h])
Tim Ricefd9e9e32005-09-12 17:36:10 -07004009
Tim Rice648f8762011-01-26 12:38:57 -08004010 AC_SEARCH_LIBS([k_hasafs], [kafs], [AC_DEFINE([USE_AFS], [1],
4011 [Define this if you want to use libkafs' AFS support])])
Darren Tucker03978c62013-02-25 11:24:44 +11004012
4013 AC_CHECK_DECLS([GSS_C_NT_HOSTBASED_SERVICE], [], [], [[
4014#ifdef HAVE_GSSAPI_H
4015# include <gssapi.h>
4016#elif defined(HAVE_GSSAPI_GSSAPI_H)
4017# include <gssapi/gssapi.h>
4018#endif
4019
4020#ifdef HAVE_GSSAPI_GENERIC_H
4021# include <gssapi_generic.h>
4022#elif defined(HAVE_GSSAPI_GSSAPI_GENERIC_H)
4023# include <gssapi/gssapi_generic.h>
4024#endif
4025 ]])
Darren Tuckerf3ab2c52013-08-04 21:48:41 +10004026 saved_LIBS="$LIBS"
4027 LIBS="$LIBS $K5LIBS"
4028 AC_CHECK_FUNCS([krb5_cc_new_unique krb5_get_error_message krb5_free_error_message])
4029 LIBS="$saved_LIBS"
4030
Darren Tucker0d27ed12004-02-24 10:37:33 +11004031 fi
Darren Tucker0d27ed12004-02-24 10:37:33 +11004032 ]
Damien Millerfd4c9ee2002-04-13 11:04:40 +10004033)
Darren Tucker964de182013-02-22 10:39:59 +11004034AC_SUBST([GSSLIBS])
4035AC_SUBST([K5LIBS])
Damien Millerc79bc0d2001-03-28 13:03:42 +10004036
Damien Millera22ba012000-03-02 23:09:20 +11004037# Looking for programs, paths and files
Damien Millera22ba012000-03-02 23:09:20 +11004038
Damien Millerf58c6722002-05-13 13:15:42 +10004039PRIVSEP_PATH=/var/empty
Tim Rice648f8762011-01-26 12:38:57 -08004040AC_ARG_WITH([privsep-path],
Tim Ricecbb90662002-07-08 19:17:10 -07004041 [ --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)],
Damien Millerf58c6722002-05-13 13:15:42 +10004042 [
Tim Rice35cc69d2005-03-17 16:44:25 -08004043 if test -n "$withval" && test "x$withval" != "xno" && \
4044 test "x${withval}" != "xyes"; then
Damien Millerf58c6722002-05-13 13:15:42 +10004045 PRIVSEP_PATH=$withval
4046 fi
4047 ]
4048)
Tim Rice648f8762011-01-26 12:38:57 -08004049AC_SUBST([PRIVSEP_PATH])
Damien Millerf58c6722002-05-13 13:15:42 +10004050
Tim Rice648f8762011-01-26 12:38:57 -08004051AC_ARG_WITH([xauth],
Damien Millera22ba012000-03-02 23:09:20 +11004052 [ --with-xauth=PATH Specify path to xauth program ],
4053 [
Tim Rice35cc69d2005-03-17 16:44:25 -08004054 if test -n "$withval" && test "x$withval" != "xno" && \
4055 test "x${withval}" != "xyes"; then
Damien Miller7b22d652000-06-18 14:07:04 +10004056 xauth_path=$withval
Damien Millera22ba012000-03-02 23:09:20 +11004057 fi
4058 ],
4059 [
Tim Ricee22be3b2002-07-17 19:20:07 -07004060 TestPath="$PATH"
4061 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X/bin"
4062 TestPath="${TestPath}${PATH_SEPARATOR}/usr/bin/X11"
4063 TestPath="${TestPath}${PATH_SEPARATOR}/usr/X11R6/bin"
4064 TestPath="${TestPath}${PATH_SEPARATOR}/usr/openwin/bin"
Tim Rice648f8762011-01-26 12:38:57 -08004065 AC_PATH_PROG([xauth_path], [xauth], , [$TestPath])
Damien Milleredb82922000-06-20 13:25:52 +10004066 if (test ! -z "$xauth_path" && test -x "/usr/openwin/bin/xauth") ; then
Damien Millera22ba012000-03-02 23:09:20 +11004067 xauth_path="/usr/openwin/bin/xauth"
4068 fi
4069 ]
4070)
4071
Damien Miller7d901272003-01-13 16:55:22 +11004072STRIP_OPT=-s
Tim Rice648f8762011-01-26 12:38:57 -08004073AC_ARG_ENABLE([strip],
Damien Miller7d901272003-01-13 16:55:22 +11004074 [ --disable-strip Disable calling strip(1) on install],
4075 [
4076 if test "x$enableval" = "xno" ; then
4077 STRIP_OPT=
4078 fi
4079 ]
4080)
Tim Rice648f8762011-01-26 12:38:57 -08004081AC_SUBST([STRIP_OPT])
Damien Miller7d901272003-01-13 16:55:22 +11004082
Damien Millera19cf472000-11-29 13:28:50 +11004083if test -z "$xauth_path" ; then
4084 XAUTH_PATH="undefined"
Tim Rice648f8762011-01-26 12:38:57 -08004085 AC_SUBST([XAUTH_PATH])
Damien Millera19cf472000-11-29 13:28:50 +11004086else
Tim Rice648f8762011-01-26 12:38:57 -08004087 AC_DEFINE_UNQUOTED([XAUTH_PATH], ["$xauth_path"],
Tim Rice7df8d392005-09-19 09:33:39 -07004088 [Define if xauth is found in your path])
Damien Millera19cf472000-11-29 13:28:50 +11004089 XAUTH_PATH=$xauth_path
Tim Rice648f8762011-01-26 12:38:57 -08004090 AC_SUBST([XAUTH_PATH])
Damien Millera22ba012000-03-02 23:09:20 +11004091fi
Damien Millera22ba012000-03-02 23:09:20 +11004092
Tim Rice90f42b02011-06-02 18:17:49 -07004093dnl # --with-maildir=/path/to/mail gets top priority.
4094dnl # if maildir is set in the platform case statement above we use that.
4095dnl # Otherwise we run a program to get the dir from system headers.
4096dnl # We first look for _PATH_MAILDIR then MAILDIR then _PATH_MAIL
4097dnl # If we find _PATH_MAILDIR we do nothing because that is what
4098dnl # session.c expects anyway. Otherwise we set to the value found
4099dnl # stripping any trailing slash. If for some strage reason our program
4100dnl # does not find what it needs, we default to /var/spool/mail.
4101# Check for mail directory
4102AC_ARG_WITH([maildir],
4103 [ --with-maildir=/path/to/mail Specify your system mail directory],
4104 [
4105 if test "X$withval" != X && test "x$withval" != xno && \
4106 test "x${withval}" != xyes; then
4107 AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$withval"],
4108 [Set this to your mail directory if you do not have _PATH_MAILDIR])
4109 fi
4110 ],[
4111 if test "X$maildir" != "X"; then
4112 AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$maildir"])
4113 else
4114 AC_MSG_CHECKING([Discovering system mail directory])
4115 AC_RUN_IFELSE(
4116 [AC_LANG_PROGRAM([[
4117#include <stdio.h>
4118#include <string.h>
4119#ifdef HAVE_PATHS_H
4120#include <paths.h>
4121#endif
4122#ifdef HAVE_MAILLOCK_H
4123#include <maillock.h>
4124#endif
4125#define DATA "conftest.maildir"
4126 ]], [[
4127 FILE *fd;
4128 int rc;
4129
4130 fd = fopen(DATA,"w");
4131 if(fd == NULL)
4132 exit(1);
4133
4134#if defined (_PATH_MAILDIR)
4135 if ((rc = fprintf(fd ,"_PATH_MAILDIR:%s\n", _PATH_MAILDIR)) <0)
4136 exit(1);
4137#elif defined (MAILDIR)
4138 if ((rc = fprintf(fd ,"MAILDIR:%s\n", MAILDIR)) <0)
4139 exit(1);
4140#elif defined (_PATH_MAIL)
4141 if ((rc = fprintf(fd ,"_PATH_MAIL:%s\n", _PATH_MAIL)) <0)
4142 exit(1);
4143#else
4144 exit (2);
4145#endif
4146
4147 exit(0);
4148 ]])],
4149 [
4150 maildir_what=`awk -F: '{print $1}' conftest.maildir`
4151 maildir=`awk -F: '{print $2}' conftest.maildir \
4152 | sed 's|/$||'`
4153 AC_MSG_RESULT([Using: $maildir from $maildir_what])
4154 if test "x$maildir_what" != "x_PATH_MAILDIR"; then
4155 AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["$maildir"])
4156 fi
4157 ],
4158 [
4159 if test "X$ac_status" = "X2";then
4160# our test program didn't find it. Default to /var/spool/mail
4161 AC_MSG_RESULT([Using: default value of /var/spool/mail])
4162 AC_DEFINE_UNQUOTED([MAIL_DIRECTORY], ["/var/spool/mail"])
4163 else
4164 AC_MSG_RESULT([*** not found ***])
4165 fi
4166 ],
4167 [
4168 AC_MSG_WARN([cross compiling: use --with-maildir=/path/to/mail])
4169 ]
4170 )
4171 fi
4172 ]
4173) # maildir
Damien Millera22ba012000-03-02 23:09:20 +11004174
Darren Tucker623d92f2004-09-12 22:36:15 +10004175if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes"; then
Darren Tuckera0c2b392004-09-11 23:26:37 +10004176 AC_MSG_WARN([cross compiling: Disabling /dev/ptmx test])
4177 disable_ptmx_check=yes
4178fi
Damien Millera22ba012000-03-02 23:09:20 +11004179if test -z "$no_dev_ptmx" ; then
Kevin Steves0ea1d9d2002-04-25 18:17:04 +00004180 if test "x$disable_ptmx_check" != "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004181 AC_CHECK_FILE(["/dev/ptmx"],
Kevin Steves0ea1d9d2002-04-25 18:17:04 +00004182 [
Tim Rice648f8762011-01-26 12:38:57 -08004183 AC_DEFINE_UNQUOTED([HAVE_DEV_PTMX], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004184 [Define if you have /dev/ptmx])
Kevin Steves0ea1d9d2002-04-25 18:17:04 +00004185 have_dev_ptmx=1
4186 ]
4187 )
4188 fi
Damien Millera22ba012000-03-02 23:09:20 +11004189fi
Darren Tuckera0c2b392004-09-11 23:26:37 +10004190
Darren Tucker623d92f2004-09-12 22:36:15 +10004191if test ! -z "$cross_compiling" && test "x$cross_compiling" != "xyes"; then
Tim Rice648f8762011-01-26 12:38:57 -08004192 AC_CHECK_FILE(["/dev/ptc"],
Darren Tuckera0c2b392004-09-11 23:26:37 +10004193 [
Tim Rice648f8762011-01-26 12:38:57 -08004194 AC_DEFINE_UNQUOTED([HAVE_DEV_PTS_AND_PTC], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004195 [Define if you have /dev/ptc])
Darren Tuckera0c2b392004-09-11 23:26:37 +10004196 have_dev_ptc=1
4197 ]
4198 )
4199else
4200 AC_MSG_WARN([cross compiling: Disabling /dev/ptc test])
4201fi
Damien Miller204ad072000-03-02 23:56:12 +11004202
Damien Millera22ba012000-03-02 23:09:20 +11004203# Options from here on. Some of these are preset by platform above
Tim Rice648f8762011-01-26 12:38:57 -08004204AC_ARG_WITH([mantype],
Damien Miller897741e2001-04-16 10:41:46 +10004205 [ --with-mantype=man|cat|doc Set man page type],
Damien Miller670a4b82000-01-22 13:53:11 +11004206 [
Damien Miller897741e2001-04-16 10:41:46 +10004207 case "$withval" in
4208 man|cat|doc)
4209 MANTYPE=$withval
4210 ;;
4211 *)
Tim Rice648f8762011-01-26 12:38:57 -08004212 AC_MSG_ERROR([invalid man type: $withval])
Damien Miller897741e2001-04-16 10:41:46 +10004213 ;;
4214 esac
Damien Miller670a4b82000-01-22 13:53:11 +11004215 ]
4216)
Ben Lindstrombc709922001-04-18 18:04:21 +00004217if test -z "$MANTYPE"; then
Tim Ricee22be3b2002-07-17 19:20:07 -07004218 TestPath="/usr/bin${PATH_SEPARATOR}/usr/ucb"
Tim Rice648f8762011-01-26 12:38:57 -08004219 AC_PATH_PROGS([NROFF], [nroff awf], [/bin/false], [$TestPath])
Ben Lindstrombc709922001-04-18 18:04:21 +00004220 if ${NROFF} -mdoc ${srcdir}/ssh.1 >/dev/null 2>&1; then
4221 MANTYPE=doc
4222 elif ${NROFF} -man ${srcdir}/ssh.1 >/dev/null 2>&1; then
4223 MANTYPE=man
4224 else
4225 MANTYPE=cat
4226 fi
4227fi
Tim Rice648f8762011-01-26 12:38:57 -08004228AC_SUBST([MANTYPE])
Ben Lindstrombc709922001-04-18 18:04:21 +00004229if test "$MANTYPE" = "doc"; then
4230 mansubdir=man;
4231else
4232 mansubdir=$MANTYPE;
4233fi
Tim Rice648f8762011-01-26 12:38:57 -08004234AC_SUBST([mansubdir])
Damien Miller8bdeee21999-12-30 15:50:54 +11004235
Damien Millera22ba012000-03-02 23:09:20 +11004236# Check whether to enable MD5 passwords
Damien Millera8e06ce2003-11-21 23:48:55 +11004237MD5_MSG="no"
Tim Rice648f8762011-01-26 12:38:57 -08004238AC_ARG_WITH([md5-passwords],
Damien Millerdd1c7ba1999-11-19 15:53:20 +11004239 [ --with-md5-passwords Enable use of MD5 passwords],
Damien Miller8bdeee21999-12-30 15:50:54 +11004240 [
Damien Millerb85dcad2000-03-11 11:37:00 +11004241 if test "x$withval" != "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004242 AC_DEFINE([HAVE_MD5_PASSWORDS], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004243 [Define if you want to allow MD5 passwords])
Damien Millera8e06ce2003-11-21 23:48:55 +11004244 MD5_MSG="yes"
Damien Miller8bdeee21999-12-30 15:50:54 +11004245 fi
4246 ]
Damien Millerdd1c7ba1999-11-19 15:53:20 +11004247)
4248
Damien Millera22ba012000-03-02 23:09:20 +11004249# Whether to disable shadow password support
Tim Rice648f8762011-01-26 12:38:57 -08004250AC_ARG_WITH([shadow],
Damien Miller76112de1999-12-21 11:18:08 +11004251 [ --without-shadow Disable shadow password support],
4252 [
Tim Riceeae17cc2005-03-17 16:52:20 -08004253 if test "x$withval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004254 AC_DEFINE([DISABLE_SHADOW])
Damien Miller1f335fb2000-06-26 11:31:33 +10004255 disable_shadow=yes
Damien Miller76112de1999-12-21 11:18:08 +11004256 fi
4257 ]
4258)
4259
Damien Miller1f335fb2000-06-26 11:31:33 +10004260if test -z "$disable_shadow" ; then
4261 AC_MSG_CHECKING([if the systems has expire shadow information])
Tim Rice648f8762011-01-26 12:38:57 -08004262 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller1f335fb2000-06-26 11:31:33 +10004263#include <sys/types.h>
4264#include <shadow.h>
Tim Rice648f8762011-01-26 12:38:57 -08004265struct spwd sp;
4266 ]], [[ sp.sp_expire = sp.sp_lstchg = sp.sp_inact = 0; ]])],
4267 [ sp_expire_available=yes ], [
4268 ])
Damien Miller1f335fb2000-06-26 11:31:33 +10004269
4270 if test "x$sp_expire_available" = "xyes" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004271 AC_MSG_RESULT([yes])
4272 AC_DEFINE([HAS_SHADOW_EXPIRE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004273 [Define if you want to use shadow password expire field])
Damien Miller1f335fb2000-06-26 11:31:33 +10004274 else
Tim Rice648f8762011-01-26 12:38:57 -08004275 AC_MSG_RESULT([no])
Damien Miller1f335fb2000-06-26 11:31:33 +10004276 fi
4277fi
4278
Damien Millera22ba012000-03-02 23:09:20 +11004279# Use ip address instead of hostname in $DISPLAY
Damien Miller9a947342000-08-30 10:03:33 +11004280if test ! -z "$IPADDR_IN_DISPLAY" ; then
4281 DISPLAY_HACK_MSG="yes"
Tim Rice648f8762011-01-26 12:38:57 -08004282 AC_DEFINE([IPADDR_IN_DISPLAY], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004283 [Define if you need to use IP address
4284 instead of hostname in $DISPLAY])
Damien Miller9a947342000-08-30 10:03:33 +11004285else
Damien Millera8e06ce2003-11-21 23:48:55 +11004286 DISPLAY_HACK_MSG="no"
Tim Rice648f8762011-01-26 12:38:57 -08004287 AC_ARG_WITH([ipaddr-display],
Damien Miller9a947342000-08-30 10:03:33 +11004288 [ --with-ipaddr-display Use ip address instead of hostname in \$DISPLAY],
4289 [
Tim Riceeae17cc2005-03-17 16:52:20 -08004290 if test "x$withval" != "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004291 AC_DEFINE([IPADDR_IN_DISPLAY])
Damien Millera8e06ce2003-11-21 23:48:55 +11004292 DISPLAY_HACK_MSG="yes"
Damien Miller9a947342000-08-30 10:03:33 +11004293 fi
4294 ]
4295 )
4296fi
Damien Miller76112de1999-12-21 11:18:08 +11004297
Darren Tuckere1a790d2003-09-16 11:52:19 +10004298# check for /etc/default/login and use it if present.
Tim Rice648f8762011-01-26 12:38:57 -08004299AC_ARG_ENABLE([etc-default-login],
Darren Tucker1b6f2292005-02-11 16:11:49 +11004300 [ --disable-etc-default-login Disable using PATH from /etc/default/login [no]],
Darren Tucker2f9573d2005-02-10 22:28:54 +11004301 [ if test "x$enableval" = "xno"; then
4302 AC_MSG_NOTICE([/etc/default/login handling disabled])
4303 etc_default_login=no
4304 else
4305 etc_default_login=yes
4306 fi ],
Darren Tucker314d89e2005-10-17 23:29:23 +10004307 [ if test ! -z "$cross_compiling" && test "x$cross_compiling" = "xyes";
4308 then
4309 AC_MSG_WARN([cross compiling: not checking /etc/default/login])
4310 etc_default_login=no
4311 else
4312 etc_default_login=yes
4313 fi ]
Darren Tucker2f9573d2005-02-10 22:28:54 +11004314)
Darren Tuckere1a790d2003-09-16 11:52:19 +10004315
Darren Tucker2f9573d2005-02-10 22:28:54 +11004316if test "x$etc_default_login" != "xno"; then
Tim Rice648f8762011-01-26 12:38:57 -08004317 AC_CHECK_FILE(["/etc/default/login"],
Darren Tucker2f9573d2005-02-10 22:28:54 +11004318 [ external_path_file=/etc/default/login ])
Darren Tucker314d89e2005-10-17 23:29:23 +10004319 if test "x$external_path_file" = "x/etc/default/login"; then
Tim Rice648f8762011-01-26 12:38:57 -08004320 AC_DEFINE([HAVE_ETC_DEFAULT_LOGIN], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004321 [Define if your system has /etc/default/login])
Darren Tuckera0c2b392004-09-11 23:26:37 +10004322 fi
Darren Tucker2f9573d2005-02-10 22:28:54 +11004323fi
Darren Tuckere1a790d2003-09-16 11:52:19 +10004324
Tim Rice43a1c132002-04-17 21:19:14 -07004325dnl BSD systems use /etc/login.conf so --with-default-path= has no effect
Tim Rice8bb561b2005-03-17 16:23:19 -08004326if test $ac_cv_func_login_getcapbool = "yes" && \
4327 test $ac_cv_header_login_cap_h = "yes" ; then
Darren Tuckere1a790d2003-09-16 11:52:19 +10004328 external_path_file=/etc/login.conf
Tim Rice43a1c132002-04-17 21:19:14 -07004329fi
Darren Tuckere1a790d2003-09-16 11:52:19 +10004330
Damien Millera22ba012000-03-02 23:09:20 +11004331# Whether to mess with the default path
Damien Millera8e06ce2003-11-21 23:48:55 +11004332SERVER_PATH_MSG="(default)"
Tim Rice648f8762011-01-26 12:38:57 -08004333AC_ARG_WITH([default-path],
Damien Millerf71d2a52002-05-13 15:14:08 +10004334 [ --with-default-path= Specify default \$PATH environment for server],
Damien Miller5a3e6831999-12-27 09:48:56 +11004335 [
Darren Tuckere1a790d2003-09-16 11:52:19 +10004336 if test "x$external_path_file" = "x/etc/login.conf" ; then
Tim Rice43a1c132002-04-17 21:19:14 -07004337 AC_MSG_WARN([
4338--with-default-path=PATH has no effect on this system.
4339Edit /etc/login.conf instead.])
Tim Riceeae17cc2005-03-17 16:52:20 -08004340 elif test "x$withval" != "xno" ; then
Tim Riceb925b4b2003-09-15 22:40:49 -07004341 if test ! -z "$external_path_file" ; then
Darren Tuckere1a790d2003-09-16 11:52:19 +10004342 AC_MSG_WARN([
4343--with-default-path=PATH will only be used if PATH is not defined in
4344$external_path_file .])
4345 fi
Tim Rice59ea0a02001-03-10 13:50:45 -08004346 user_path="$withval"
Damien Millera8e06ce2003-11-21 23:48:55 +11004347 SERVER_PATH_MSG="$withval"
Damien Miller5a3e6831999-12-27 09:48:56 +11004348 fi
Tim Rice59ea0a02001-03-10 13:50:45 -08004349 ],
Darren Tuckere1a790d2003-09-16 11:52:19 +10004350 [ if test "x$external_path_file" = "x/etc/login.conf" ; then
4351 AC_MSG_WARN([Make sure the path to scp is in /etc/login.conf])
Tim Rice43a1c132002-04-17 21:19:14 -07004352 else
Tim Riceb925b4b2003-09-15 22:40:49 -07004353 if test ! -z "$external_path_file" ; then
Darren Tuckere1a790d2003-09-16 11:52:19 +10004354 AC_MSG_WARN([
4355If PATH is defined in $external_path_file, ensure the path to scp is included,
4356otherwise scp will not work.])
4357 fi
Darren Tucker314d89e2005-10-17 23:29:23 +10004358 AC_RUN_IFELSE(
Tim Rice648f8762011-01-26 12:38:57 -08004359 [AC_LANG_PROGRAM([[
Tim Rice59ea0a02001-03-10 13:50:45 -08004360/* find out what STDPATH is */
4361#include <stdio.h>
Tim Rice59ea0a02001-03-10 13:50:45 -08004362#ifdef HAVE_PATHS_H
4363# include <paths.h>
4364#endif
4365#ifndef _PATH_STDPATH
Tim Rice1c9e6882002-11-22 13:29:01 -08004366# ifdef _PATH_USERPATH /* Irix */
4367# define _PATH_STDPATH _PATH_USERPATH
4368# else
4369# define _PATH_STDPATH "/usr/bin:/bin:/usr/sbin:/sbin"
4370# endif
Tim Rice59ea0a02001-03-10 13:50:45 -08004371#endif
4372#include <sys/types.h>
4373#include <sys/stat.h>
4374#include <fcntl.h>
4375#define DATA "conftest.stdpath"
Tim Rice648f8762011-01-26 12:38:57 -08004376 ]], [[
Tim Rice59ea0a02001-03-10 13:50:45 -08004377 FILE *fd;
4378 int rc;
Tim Riceeae17cc2005-03-17 16:52:20 -08004379
Tim Rice59ea0a02001-03-10 13:50:45 -08004380 fd = fopen(DATA,"w");
4381 if(fd == NULL)
4382 exit(1);
Tim Riceeae17cc2005-03-17 16:52:20 -08004383
Tim Rice59ea0a02001-03-10 13:50:45 -08004384 if ((rc = fprintf(fd,"%s", _PATH_STDPATH)) < 0)
4385 exit(1);
4386
4387 exit(0);
Darren Tucker314d89e2005-10-17 23:29:23 +10004388 ]])],
4389 [ user_path=`cat conftest.stdpath` ],
Tim Rice59ea0a02001-03-10 13:50:45 -08004390 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ],
4391 [ user_path="/usr/bin:/bin:/usr/sbin:/sbin" ]
4392 )
4393# make sure $bindir is in USER_PATH so scp will work
Damien Miller77eab7b2012-07-06 11:49:28 +10004394 t_bindir="${bindir}"
4395 while echo "${t_bindir}" | egrep '\$\{|NONE/' >/dev/null 2>&1; do
4396 t_bindir=`eval echo ${t_bindir}`
4397 case $t_bindir in
4398 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$prefix~"` ;;
4399 esac
4400 case $t_bindir in
4401 NONE/*) t_bindir=`echo $t_bindir | sed "s~NONE~$ac_default_prefix~"` ;;
4402 esac
4403 done
Tim Rice59ea0a02001-03-10 13:50:45 -08004404 echo $user_path | grep ":$t_bindir" > /dev/null 2>&1
4405 if test $? -ne 0 ; then
4406 echo $user_path | grep "^$t_bindir" > /dev/null 2>&1
4407 if test $? -ne 0 ; then
4408 user_path=$user_path:$t_bindir
Tim Rice648f8762011-01-26 12:38:57 -08004409 AC_MSG_RESULT([Adding $t_bindir to USER_PATH so scp will work])
Tim Rice59ea0a02001-03-10 13:50:45 -08004410 fi
4411 fi
Tim Rice43a1c132002-04-17 21:19:14 -07004412 fi ]
Damien Miller5a3e6831999-12-27 09:48:56 +11004413)
Darren Tuckere1a790d2003-09-16 11:52:19 +10004414if test "x$external_path_file" != "x/etc/login.conf" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004415 AC_DEFINE_UNQUOTED([USER_PATH], ["$user_path"], [Specify default $PATH])
4416 AC_SUBST([user_path])
Tim Rice43a1c132002-04-17 21:19:14 -07004417fi
Damien Miller5a3e6831999-12-27 09:48:56 +11004418
Damien Millera18bbd32002-05-13 10:48:57 +10004419# Set superuser path separately to user path
Tim Rice648f8762011-01-26 12:38:57 -08004420AC_ARG_WITH([superuser-path],
Damien Millera18bbd32002-05-13 10:48:57 +10004421 [ --with-superuser-path= Specify different path for super-user],
4422 [
Tim Rice35cc69d2005-03-17 16:44:25 -08004423 if test -n "$withval" && test "x$withval" != "xno" && \
4424 test "x${withval}" != "xyes"; then
Tim Rice648f8762011-01-26 12:38:57 -08004425 AC_DEFINE_UNQUOTED([SUPERUSER_PATH], ["$withval"],
Tim Rice7df8d392005-09-19 09:33:39 -07004426 [Define if you want a different $PATH
4427 for the superuser])
Damien Millera18bbd32002-05-13 10:48:57 +10004428 superuser_path=$withval
4429 fi
4430 ]
4431)
4432
4433
Damien Miller61e50f12000-05-08 20:49:37 +10004434AC_MSG_CHECKING([if we need to convert IPv4 in IPv6-mapped addresses])
Damien Millera8e06ce2003-11-21 23:48:55 +11004435IPV4_IN6_HACK_MSG="no"
Damien Miller7bcb0892000-03-11 20:45:40 +11004436AC_ARG_WITH(4in6,
4437 [ --with-4in6 Check for and convert IPv4 in IPv6 mapped addresses],
4438 [
4439 if test "x$withval" != "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004440 AC_MSG_RESULT([yes])
4441 AC_DEFINE([IPV4_IN_IPV6], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004442 [Detect IPv4 in IPv6 mapped addresses
4443 and treat as IPv4])
Damien Millera8e06ce2003-11-21 23:48:55 +11004444 IPV4_IN6_HACK_MSG="yes"
Damien Miller7bcb0892000-03-11 20:45:40 +11004445 else
Tim Rice648f8762011-01-26 12:38:57 -08004446 AC_MSG_RESULT([no])
Damien Miller7bcb0892000-03-11 20:45:40 +11004447 fi
Tim Rice648f8762011-01-26 12:38:57 -08004448 ], [
Damien Miller7bcb0892000-03-11 20:45:40 +11004449 if test "x$inet6_default_4in6" = "xyes"; then
4450 AC_MSG_RESULT([yes (default)])
Tim Rice648f8762011-01-26 12:38:57 -08004451 AC_DEFINE([IPV4_IN_IPV6])
Damien Millera8e06ce2003-11-21 23:48:55 +11004452 IPV4_IN6_HACK_MSG="yes"
Damien Miller7bcb0892000-03-11 20:45:40 +11004453 else
4454 AC_MSG_RESULT([no (default)])
4455 fi
4456 ]
4457)
4458
Damien Miller60396b02001-02-18 17:01:00 +11004459# Whether to enable BSD auth support
Damien Miller6c21c512002-01-22 21:57:53 +11004460BSD_AUTH_MSG=no
Tim Rice648f8762011-01-26 12:38:57 -08004461AC_ARG_WITH([bsd-auth],
Damien Miller60396b02001-02-18 17:01:00 +11004462 [ --with-bsd-auth Enable BSD auth support],
4463 [
Tim Riceeae17cc2005-03-17 16:52:20 -08004464 if test "x$withval" != "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004465 AC_DEFINE([BSD_AUTH], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004466 [Define if you have BSD auth support])
Damien Miller6c21c512002-01-22 21:57:53 +11004467 BSD_AUTH_MSG=yes
Damien Miller60396b02001-02-18 17:01:00 +11004468 fi
4469 ]
4470)
4471
Damien Millera22ba012000-03-02 23:09:20 +11004472# Where to place sshd.pid
Damien Millerb13c73e2000-01-17 22:02:17 +11004473piddir=/var/run
Damien Miller78315eb2000-09-29 23:01:36 +11004474# make sure the directory exists
Tim Riceeae17cc2005-03-17 16:52:20 -08004475if test ! -d $piddir ; then
Damien Miller78315eb2000-09-29 23:01:36 +11004476 piddir=`eval echo ${sysconfdir}`
4477 case $piddir in
Damien Millera8e06ce2003-11-21 23:48:55 +11004478 NONE/*) piddir=`echo $piddir | sed "s~NONE~$ac_default_prefix~"` ;;
Damien Miller78315eb2000-09-29 23:01:36 +11004479 esac
4480fi
4481
Tim Rice648f8762011-01-26 12:38:57 -08004482AC_ARG_WITH([pid-dir],
Tim Rice88f2ab52002-03-17 12:17:34 -08004483 [ --with-pid-dir=PATH Specify location of ssh.pid file],
4484 [
Tim Rice35cc69d2005-03-17 16:44:25 -08004485 if test -n "$withval" && test "x$withval" != "xno" && \
4486 test "x${withval}" != "xyes"; then
Tim Rice88f2ab52002-03-17 12:17:34 -08004487 piddir=$withval
Tim Riceeae17cc2005-03-17 16:52:20 -08004488 if test ! -d $piddir ; then
Tim Rice88f2ab52002-03-17 12:17:34 -08004489 AC_MSG_WARN([** no $piddir directory on this system **])
4490 fi
4491 fi
4492 ]
4493)
4494
Tim Rice648f8762011-01-26 12:38:57 -08004495AC_DEFINE_UNQUOTED([_PATH_SSH_PIDDIR], ["$piddir"],
4496 [Specify location of ssh.pid])
4497AC_SUBST([piddir])
Damien Miller5eed6a22000-01-16 12:05:18 +11004498
andre2ff7b5d2000-06-03 14:57:40 +00004499dnl allow user to disable some login recording features
Tim Rice648f8762011-01-26 12:38:57 -08004500AC_ARG_ENABLE([lastlog],
andre43ca7e22000-06-19 08:23:46 +00004501 [ --disable-lastlog disable use of lastlog even if detected [no]],
Darren Tuckera3020db2003-06-28 12:54:33 +10004502 [
4503 if test "x$enableval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004504 AC_DEFINE([DISABLE_LASTLOG])
Darren Tuckera3020db2003-06-28 12:54:33 +10004505 fi
4506 ]
andre2ff7b5d2000-06-03 14:57:40 +00004507)
Tim Rice648f8762011-01-26 12:38:57 -08004508AC_ARG_ENABLE([utmp],
andre43ca7e22000-06-19 08:23:46 +00004509 [ --disable-utmp disable use of utmp even if detected [no]],
Darren Tuckera3020db2003-06-28 12:54:33 +10004510 [
4511 if test "x$enableval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004512 AC_DEFINE([DISABLE_UTMP])
Darren Tuckera3020db2003-06-28 12:54:33 +10004513 fi
4514 ]
andre2ff7b5d2000-06-03 14:57:40 +00004515)
Tim Rice648f8762011-01-26 12:38:57 -08004516AC_ARG_ENABLE([utmpx],
andre43ca7e22000-06-19 08:23:46 +00004517 [ --disable-utmpx disable use of utmpx even if detected [no]],
Darren Tuckera3020db2003-06-28 12:54:33 +10004518 [
4519 if test "x$enableval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004520 AC_DEFINE([DISABLE_UTMPX], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004521 [Define if you don't want to use utmpx])
Darren Tuckera3020db2003-06-28 12:54:33 +10004522 fi
4523 ]
andre2ff7b5d2000-06-03 14:57:40 +00004524)
Tim Rice648f8762011-01-26 12:38:57 -08004525AC_ARG_ENABLE([wtmp],
andre43ca7e22000-06-19 08:23:46 +00004526 [ --disable-wtmp disable use of wtmp even if detected [no]],
Darren Tuckera3020db2003-06-28 12:54:33 +10004527 [
4528 if test "x$enableval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004529 AC_DEFINE([DISABLE_WTMP])
Darren Tuckera3020db2003-06-28 12:54:33 +10004530 fi
4531 ]
andre2ff7b5d2000-06-03 14:57:40 +00004532)
Tim Rice648f8762011-01-26 12:38:57 -08004533AC_ARG_ENABLE([wtmpx],
andre43ca7e22000-06-19 08:23:46 +00004534 [ --disable-wtmpx disable use of wtmpx even if detected [no]],
Darren Tuckera3020db2003-06-28 12:54:33 +10004535 [
4536 if test "x$enableval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004537 AC_DEFINE([DISABLE_WTMPX], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004538 [Define if you don't want to use wtmpx])
Darren Tuckera3020db2003-06-28 12:54:33 +10004539 fi
4540 ]
andre2ff7b5d2000-06-03 14:57:40 +00004541)
Tim Rice648f8762011-01-26 12:38:57 -08004542AC_ARG_ENABLE([libutil],
andre43ca7e22000-06-19 08:23:46 +00004543 [ --disable-libutil disable use of libutil (login() etc.) [no]],
Darren Tuckera3020db2003-06-28 12:54:33 +10004544 [
4545 if test "x$enableval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004546 AC_DEFINE([DISABLE_LOGIN])
Darren Tuckera3020db2003-06-28 12:54:33 +10004547 fi
4548 ]
andre2ff7b5d2000-06-03 14:57:40 +00004549)
Tim Rice648f8762011-01-26 12:38:57 -08004550AC_ARG_ENABLE([pututline],
andre43ca7e22000-06-19 08:23:46 +00004551 [ --disable-pututline disable use of pututline() etc. ([uw]tmp) [no]],
Darren Tuckera3020db2003-06-28 12:54:33 +10004552 [
4553 if test "x$enableval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004554 AC_DEFINE([DISABLE_PUTUTLINE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004555 [Define if you don't want to use pututline()
4556 etc. to write [uw]tmp])
Darren Tuckera3020db2003-06-28 12:54:33 +10004557 fi
4558 ]
andre2ff7b5d2000-06-03 14:57:40 +00004559)
Tim Rice648f8762011-01-26 12:38:57 -08004560AC_ARG_ENABLE([pututxline],
andre43ca7e22000-06-19 08:23:46 +00004561 [ --disable-pututxline disable use of pututxline() etc. ([uw]tmpx) [no]],
Darren Tuckera3020db2003-06-28 12:54:33 +10004562 [
4563 if test "x$enableval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004564 AC_DEFINE([DISABLE_PUTUTXLINE], [1],
Tim Rice7df8d392005-09-19 09:33:39 -07004565 [Define if you don't want to use pututxline()
4566 etc. to write [uw]tmpx])
Darren Tuckera3020db2003-06-28 12:54:33 +10004567 fi
4568 ]
andre2ff7b5d2000-06-03 14:57:40 +00004569)
Tim Rice648f8762011-01-26 12:38:57 -08004570AC_ARG_WITH([lastlog],
andre43ca7e22000-06-19 08:23:46 +00004571 [ --with-lastlog=FILE|DIR specify lastlog location [common locations]],
Damien Miller709528a2001-01-31 09:57:55 +11004572 [
Tim Riceeae17cc2005-03-17 16:52:20 -08004573 if test "x$withval" = "xno" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004574 AC_DEFINE([DISABLE_LASTLOG])
Tim Rice35cc69d2005-03-17 16:44:25 -08004575 elif test -n "$withval" && test "x${withval}" != "xyes"; then
Damien Miller709528a2001-01-31 09:57:55 +11004576 conf_lastlog_location=$withval
4577 fi
4578 ]
4579)
andre2ff7b5d2000-06-03 14:57:40 +00004580
4581dnl lastlog, [uw]tmpx? detection
4582dnl NOTE: set the paths in the platform section to avoid the
4583dnl need for command-line parameters
4584dnl lastlog and [uw]tmp are subject to a file search if all else fails
4585
4586dnl lastlog detection
4587dnl NOTE: the code itself will detect if lastlog is a directory
4588AC_MSG_CHECKING([if your system defines LASTLOG_FILE])
Tim Rice648f8762011-01-26 12:38:57 -08004589AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
andre2ff7b5d2000-06-03 14:57:40 +00004590#include <sys/types.h>
4591#include <utmp.h>
4592#ifdef HAVE_LASTLOG_H
4593# include <lastlog.h>
4594#endif
Damien Miller2994e082000-06-04 15:51:47 +10004595#ifdef HAVE_PATHS_H
andre2ff7b5d2000-06-03 14:57:40 +00004596# include <paths.h>
4597#endif
Ben Lindstrom19d7b8d2001-08-16 00:09:49 +00004598#ifdef HAVE_LOGIN_H
4599# include <login.h>
4600#endif
Tim Rice648f8762011-01-26 12:38:57 -08004601 ]], [[ char *lastlog = LASTLOG_FILE; ]])],
4602 [ AC_MSG_RESULT([yes]) ],
4603 [
4604 AC_MSG_RESULT([no])
Damien Miller2994e082000-06-04 15:51:47 +10004605 AC_MSG_CHECKING([if your system defines _PATH_LASTLOG])
Tim Rice648f8762011-01-26 12:38:57 -08004606 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
Damien Miller2994e082000-06-04 15:51:47 +10004607#include <sys/types.h>
4608#include <utmp.h>
4609#ifdef HAVE_LASTLOG_H
4610# include <lastlog.h>
4611#endif
4612#ifdef HAVE_PATHS_H
4613# include <paths.h>
4614#endif
Tim Rice648f8762011-01-26 12:38:57 -08004615 ]], [[ char *lastlog = _PATH_LASTLOG; ]])],
4616 [ AC_MSG_RESULT([yes]) ],
Damien Miller2994e082000-06-04 15:51:47 +10004617 [
Tim Rice648f8762011-01-26 12:38:57 -08004618 AC_MSG_RESULT([no])
Damien Miller2994e082000-06-04 15:51:47 +10004619 system_lastlog_path=no
4620 ])
Tim Rice648f8762011-01-26 12:38:57 -08004621])
Damien Miller2994e082000-06-04 15:51:47 +10004622
andre2ff7b5d2000-06-03 14:57:40 +00004623if test -z "$conf_lastlog_location"; then
4624 if test x"$system_lastlog_path" = x"no" ; then
4625 for f in /var/log/lastlog /usr/adm/lastlog /var/adm/lastlog /etc/security/lastlog ; do
Damien Milleredb82922000-06-20 13:25:52 +10004626 if (test -d "$f" || test -f "$f") ; then
andre2ff7b5d2000-06-03 14:57:40 +00004627 conf_lastlog_location=$f
4628 fi
4629 done
4630 if test -z "$conf_lastlog_location"; then
andre45cad512000-06-12 23:27:31 +00004631 AC_MSG_WARN([** Cannot find lastlog **])
4632 dnl Don't define DISABLE_LASTLOG - that means we don't try wtmp/wtmpx
andre2ff7b5d2000-06-03 14:57:40 +00004633 fi
4634 fi
4635fi
4636
4637if test -n "$conf_lastlog_location"; then
Tim Rice648f8762011-01-26 12:38:57 -08004638 AC_DEFINE_UNQUOTED([CONF_LASTLOG_FILE], ["$conf_lastlog_location"],
Tim Rice7df8d392005-09-19 09:33:39 -07004639 [Define if you want to specify the path to your lastlog file])
Tim Riceeae17cc2005-03-17 16:52:20 -08004640fi
andre2ff7b5d2000-06-03 14:57:40 +00004641
4642dnl utmp detection
4643AC_MSG_CHECKING([if your system defines UTMP_FILE])
Tim Rice648f8762011-01-26 12:38:57 -08004644AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
andre2ff7b5d2000-06-03 14:57:40 +00004645#include <sys/types.h>
4646#include <utmp.h>
Damien Miller2994e082000-06-04 15:51:47 +10004647#ifdef HAVE_PATHS_H
andre2ff7b5d2000-06-03 14:57:40 +00004648# include <paths.h>
4649#endif
Tim Rice648f8762011-01-26 12:38:57 -08004650 ]], [[ char *utmp = UTMP_FILE; ]])],
4651 [ AC_MSG_RESULT([yes]) ],
4652 [ AC_MSG_RESULT([no])
4653 system_utmp_path=no
4654])
andre2ff7b5d2000-06-03 14:57:40 +00004655if test -z "$conf_utmp_location"; then
4656 if test x"$system_utmp_path" = x"no" ; then
4657 for f in /etc/utmp /usr/adm/utmp /var/run/utmp; do
4658 if test -f $f ; then
4659 conf_utmp_location=$f
4660 fi
4661 done
4662 if test -z "$conf_utmp_location"; then
Tim Rice648f8762011-01-26 12:38:57 -08004663 AC_DEFINE([DISABLE_UTMP])
andre2ff7b5d2000-06-03 14:57:40 +00004664 fi
4665 fi
4666fi
4667if test -n "$conf_utmp_location"; then
Tim Rice648f8762011-01-26 12:38:57 -08004668 AC_DEFINE_UNQUOTED([CONF_UTMP_FILE], ["$conf_utmp_location"],
Tim Rice7df8d392005-09-19 09:33:39 -07004669 [Define if you want to specify the path to your utmp file])
Tim Riceeae17cc2005-03-17 16:52:20 -08004670fi
andre2ff7b5d2000-06-03 14:57:40 +00004671
4672dnl wtmp detection
4673AC_MSG_CHECKING([if your system defines WTMP_FILE])
Tim Rice648f8762011-01-26 12:38:57 -08004674AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
andre2ff7b5d2000-06-03 14:57:40 +00004675#include <sys/types.h>
4676#include <utmp.h>
Damien Miller2994e082000-06-04 15:51:47 +10004677#ifdef HAVE_PATHS_H
andre2ff7b5d2000-06-03 14:57:40 +00004678# include <paths.h>
4679#endif
Tim Rice648f8762011-01-26 12:38:57 -08004680 ]], [[ char *wtmp = WTMP_FILE; ]])],
4681 [ AC_MSG_RESULT([yes]) ],
4682 [ AC_MSG_RESULT([no])
4683 system_wtmp_path=no
4684])
andre2ff7b5d2000-06-03 14:57:40 +00004685if test -z "$conf_wtmp_location"; then
4686 if test x"$system_wtmp_path" = x"no" ; then
4687 for f in /usr/adm/wtmp /var/log/wtmp; do
4688 if test -f $f ; then
4689 conf_wtmp_location=$f
4690 fi
4691 done
4692 if test -z "$conf_wtmp_location"; then
Tim Rice648f8762011-01-26 12:38:57 -08004693 AC_DEFINE([DISABLE_WTMP])
andre2ff7b5d2000-06-03 14:57:40 +00004694 fi
4695 fi
4696fi
4697if test -n "$conf_wtmp_location"; then
Tim Rice648f8762011-01-26 12:38:57 -08004698 AC_DEFINE_UNQUOTED([CONF_WTMP_FILE], ["$conf_wtmp_location"],
Tim Rice7df8d392005-09-19 09:33:39 -07004699 [Define if you want to specify the path to your wtmp file])
Tim Riceeae17cc2005-03-17 16:52:20 -08004700fi
andre2ff7b5d2000-06-03 14:57:40 +00004701
andre2ff7b5d2000-06-03 14:57:40 +00004702dnl wtmpx detection
4703AC_MSG_CHECKING([if your system defines WTMPX_FILE])
Tim Rice648f8762011-01-26 12:38:57 -08004704AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
andre2ff7b5d2000-06-03 14:57:40 +00004705#include <sys/types.h>
4706#include <utmp.h>
4707#ifdef HAVE_UTMPX_H
4708#include <utmpx.h>
4709#endif
Damien Miller2994e082000-06-04 15:51:47 +10004710#ifdef HAVE_PATHS_H
andre2ff7b5d2000-06-03 14:57:40 +00004711# include <paths.h>
4712#endif
Tim Rice648f8762011-01-26 12:38:57 -08004713 ]], [[ char *wtmpx = WTMPX_FILE; ]])],
4714 [ AC_MSG_RESULT([yes]) ],
4715 [ AC_MSG_RESULT([no])
4716 system_wtmpx_path=no
4717])
andre2ff7b5d2000-06-03 14:57:40 +00004718if test -z "$conf_wtmpx_location"; then
4719 if test x"$system_wtmpx_path" = x"no" ; then
Tim Rice648f8762011-01-26 12:38:57 -08004720 AC_DEFINE([DISABLE_WTMPX])
andre2ff7b5d2000-06-03 14:57:40 +00004721 fi
4722else
Tim Rice648f8762011-01-26 12:38:57 -08004723 AC_DEFINE_UNQUOTED([CONF_WTMPX_FILE], ["$conf_wtmpx_location"],
Tim Rice7df8d392005-09-19 09:33:39 -07004724 [Define if you want to specify the path to your wtmpx file])
Tim Riceeae17cc2005-03-17 16:52:20 -08004725fi
andre2ff7b5d2000-06-03 14:57:40 +00004726
Damien Miller4018c192000-04-30 09:30:44 +10004727
Damien Miller29ea30d2000-03-17 10:54:15 +11004728if test ! -z "$blibpath" ; then
Damien Millereab4bae2003-04-29 23:22:40 +10004729 LDFLAGS="$LDFLAGS $blibflags$blibpath"
4730 AC_MSG_WARN([Please check and edit blibpath in LDFLAGS in Makefile])
Damien Miller29ea30d2000-03-17 10:54:15 +11004731fi
4732
Damien Millera2438bb2013-03-15 10:23:07 +11004733AC_CHECK_MEMBER([struct lastlog.ll_line], [], [
Tim Riceaa86c392013-03-16 20:55:46 -07004734 if test x$SKIP_DISABLE_LASTLOG_DEFINE != "xyes" ; then
Damien Millera2438bb2013-03-15 10:23:07 +11004735 AC_DEFINE([DISABLE_LASTLOG])
Tim Riceaa86c392013-03-16 20:55:46 -07004736 fi
Damien Millera2438bb2013-03-15 10:23:07 +11004737 ], [
4738#ifdef HAVE_SYS_TYPES_H
4739#include <sys/types.h>
4740#endif
4741#ifdef HAVE_UTMP_H
4742#include <utmp.h>
4743#endif
4744#ifdef HAVE_UTMPX_H
4745#include <utmpx.h>
4746#endif
4747#ifdef HAVE_LASTLOG_H
4748#include <lastlog.h>
4749#endif
4750 ])
4751
4752AC_CHECK_MEMBER([struct utmp.ut_line], [], [
4753 AC_DEFINE([DISABLE_UTMP])
4754 AC_DEFINE([DISABLE_WTMP])
4755 ], [
4756#ifdef HAVE_SYS_TYPES_H
4757#include <sys/types.h>
4758#endif
4759#ifdef HAVE_UTMP_H
4760#include <utmp.h>
4761#endif
4762#ifdef HAVE_UTMPX_H
4763#include <utmpx.h>
4764#endif
4765#ifdef HAVE_LASTLOG_H
4766#include <lastlog.h>
4767#endif
4768 ])
4769
Darren Tucker7da23cb2005-08-03 00:20:15 +10004770dnl Adding -Werror to CFLAGS early prevents configure tests from running.
4771dnl Add now.
4772CFLAGS="$CFLAGS $werror_flags"
4773
Darren Tucker627337d2010-04-10 22:58:01 +10004774if test "x$ac_cv_func_getaddrinfo" != "xyes" ; then
4775 TEST_SSH_IPV6=no
4776else
4777 TEST_SSH_IPV6=yes
4778fi
Tim Rice648f8762011-01-26 12:38:57 -08004779AC_CHECK_DECL([BROKEN_GETADDRINFO], [TEST_SSH_IPV6=no])
4780AC_SUBST([TEST_SSH_IPV6], [$TEST_SSH_IPV6])
Darren Tucker882abfd2013-11-09 00:17:41 +11004781AC_SUBST([TEST_MALLOC_OPTIONS], [$TEST_MALLOC_OPTIONS])
Darren Tucker6d8bd572013-06-11 11:26:10 +10004782AC_SUBST([UNSUPPORTED_ALGORITHMS], [$unsupported_algorithms])
Darren Tucker5d376902008-06-11 04:15:05 +10004783
Damien Millerbac2d8a2000-09-05 16:13:06 +11004784AC_EXEEXT
Damien Miller223897a2006-09-12 21:54:10 +10004785AC_CONFIG_FILES([Makefile buildpkg.sh opensshd.init openssh.xml \
4786 openbsd-compat/Makefile openbsd-compat/regress/Makefile \
Damien Millerf22019b2011-05-05 13:48:37 +10004787 survey.sh])
Tim Rice13aae5e2001-10-21 17:53:58 -07004788AC_OUTPUT
Damien Miller0437b332000-05-02 09:56:41 +10004789
Damien Miller7b22d652000-06-18 14:07:04 +10004790# Print summary of options
4791
Damien Miller7b22d652000-06-18 14:07:04 +10004792# Someone please show me a better way :)
4793A=`eval echo ${prefix}` ; A=`eval echo ${A}`
4794B=`eval echo ${bindir}` ; B=`eval echo ${B}`
4795C=`eval echo ${sbindir}` ; C=`eval echo ${C}`
4796D=`eval echo ${sysconfdir}` ; D=`eval echo ${D}`
Kevin Stevese0f49142000-10-14 17:51:48 +00004797E=`eval echo ${libexecdir}/ssh-askpass` ; E=`eval echo ${E}`
Ben Lindstrombc709922001-04-18 18:04:21 +00004798F=`eval echo ${mandir}/${mansubdir}X` ; F=`eval echo ${F}`
Damien Miller7b22d652000-06-18 14:07:04 +10004799G=`eval echo ${piddir}` ; G=`eval echo ${G}`
Damien Millerf58c6722002-05-13 13:15:42 +10004800H=`eval echo ${PRIVSEP_PATH}` ; H=`eval echo ${H}`
4801I=`eval echo ${user_path}` ; I=`eval echo ${I}`
4802J=`eval echo ${superuser_path}` ; J=`eval echo ${J}`
Damien Miller7b22d652000-06-18 14:07:04 +10004803
4804echo ""
Kevin Steves393d2f72001-04-08 22:50:43 +00004805echo "OpenSSH has been configured with the following options:"
Damien Millerf58c6722002-05-13 13:15:42 +10004806echo " User binaries: $B"
4807echo " System binaries: $C"
4808echo " Configuration files: $D"
4809echo " Askpass program: $E"
4810echo " Manual pages: $F"
4811echo " PID file: $G"
4812echo " Privilege separation chroot path: $H"
Darren Tuckere1a790d2003-09-16 11:52:19 +10004813if test "x$external_path_file" = "x/etc/login.conf" ; then
4814echo " At runtime, sshd will use the path defined in $external_path_file"
4815echo " Make sure the path to scp is present, otherwise scp will not work"
Tim Rice43a1c132002-04-17 21:19:14 -07004816else
Damien Millerf58c6722002-05-13 13:15:42 +10004817echo " sshd default user PATH: $I"
Tim Riceb925b4b2003-09-15 22:40:49 -07004818 if test ! -z "$external_path_file"; then
Darren Tuckere1a790d2003-09-16 11:52:19 +10004819echo " (If PATH is set in $external_path_file it will be used instead. If"
4820echo " used, ensure the path to scp is present, otherwise scp will not work.)"
4821 fi
Tim Rice43a1c132002-04-17 21:19:14 -07004822fi
Damien Millera18bbd32002-05-13 10:48:57 +10004823if test ! -z "$superuser_path" ; then
Damien Millerf58c6722002-05-13 13:15:42 +10004824echo " sshd superuser user PATH: $J"
Damien Millera18bbd32002-05-13 10:48:57 +10004825fi
Damien Millerf58c6722002-05-13 13:15:42 +10004826echo " Manpage format: $MANTYPE"
Damien Miller7abe09b2003-05-15 10:53:49 +10004827echo " PAM support: $PAM_MSG"
Damien Miller1b06dc32006-08-31 03:24:41 +10004828echo " OSF SIA support: $SIA_MSG"
Damien Millerf58c6722002-05-13 13:15:42 +10004829echo " KerberosV support: $KRB5_MSG"
Damien Miller73b42d22006-04-22 21:26:08 +10004830echo " SELinux support: $SELINUX_MSG"
Damien Millerf58c6722002-05-13 13:15:42 +10004831echo " Smartcard support: $SCARD_MSG"
Damien Millerf58c6722002-05-13 13:15:42 +10004832echo " S/KEY support: $SKEY_MSG"
Damien Millerf58c6722002-05-13 13:15:42 +10004833echo " MD5 password support: $MD5_MSG"
Darren Tucker16bcc1c2004-11-07 20:14:34 +11004834echo " libedit support: $LIBEDIT_MSG"
Damien Miller1b06dc32006-08-31 03:24:41 +10004835echo " Solaris process contract support: $SPC_MSG"
Darren Tucker97528352010-11-05 12:03:05 +11004836echo " Solaris project support: $SP_MSG"
Damien Miller903e1152002-05-13 14:41:31 +10004837echo " IP address in \$DISPLAY hack: $DISPLAY_HACK_MSG"
Damien Millerf58c6722002-05-13 13:15:42 +10004838echo " Translate v4 in v6 hack: $IPV4_IN6_HACK_MSG"
4839echo " BSD Auth support: $BSD_AUTH_MSG"
4840echo " Random number source: $RAND_MSG"
Damien Miller69ff1df2011-06-23 08:30:03 +10004841echo " Privsep sandbox style: $SANDBOX_STYLE"
Damien Miller60396b02001-02-18 17:01:00 +11004842
Damien Miller7b22d652000-06-18 14:07:04 +10004843echo ""
4844
Ben Lindstrom28bfc0d2000-12-18 19:58:57 +00004845echo " Host: ${host}"
4846echo " Compiler: ${CC}"
4847echo " Compiler flags: ${CFLAGS}"
4848echo "Preprocessor flags: ${CPPFLAGS}"
4849echo " Linker flags: ${LDFLAGS}"
Darren Tucker20e9f972007-03-25 18:26:01 +10004850echo " Libraries: ${LIBS}"
4851if test ! -z "${SSHDLIBS}"; then
4852echo " +for sshd: ${SSHDLIBS}"
4853fi
Damien Miller71adf122011-01-25 12:16:15 +11004854if test ! -z "${SSHLIBS}"; then
4855echo " +for ssh: ${SSHLIBS}"
4856fi
Damien Miller7b22d652000-06-18 14:07:04 +10004857
4858echo ""
4859
Tim Rice6f1f7582004-05-30 21:38:51 -07004860if test "x$MAKE_PACKAGE_SUPPORTED" = "xyes" ; then
Darren Tuckercf59d312004-08-29 21:18:09 +10004861 echo "SVR4 style packages are supported with \"make package\""
4862 echo ""
Tim Rice6f1f7582004-05-30 21:38:51 -07004863fi
4864
Damien Miller82cf0ce2000-12-20 13:34:48 +11004865if test "x$PAM_MSG" = "xyes" ; then
Damien Miller6c21c512002-01-22 21:57:53 +11004866 echo "PAM is enabled. You may need to install a PAM control file "
4867 echo "for sshd, otherwise password authentication may fail. "
Damien Millera8e06ce2003-11-21 23:48:55 +11004868 echo "Example PAM control files can be found in the contrib/ "
Damien Miller6c21c512002-01-22 21:57:53 +11004869 echo "subdirectory"
Damien Miller6f9c3372000-10-25 10:06:04 +11004870 echo ""
4871fi
Ben Lindstrom3ad650a2001-01-03 06:02:51 +00004872
Damien Millerb4097182004-05-23 14:09:40 +10004873if test ! -z "$NO_PEERCHECK" ; then
Darren Tucker164aa302007-03-21 21:39:57 +11004874 echo "WARNING: the operating system that you are using does not"
4875 echo "appear to support getpeereid(), getpeerucred() or the"
4876 echo "SO_PEERCRED getsockopt() option. These facilities are used to"
4877 echo "enforce security checks to prevent unauthorised connections to"
4878 echo "ssh-agent. Their absence increases the risk that a malicious"
4879 echo "user can connect to your agent."
Damien Millerb4097182004-05-23 14:09:40 +10004880 echo ""
4881fi
4882
Darren Tuckerd9f88912005-02-20 21:01:48 +11004883if test "$AUDIT_MODULE" = "bsm" ; then
4884 echo "WARNING: BSM audit support is currently considered EXPERIMENTAL."
4885 echo "See the Solaris section in README.platform for details."
4886fi