CVS commit: pkgsrc/security

["Nia Alarie" <nia%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   nia
Date:           Thu Jul  2 17:46:27 UTC 2020

Modified Files:
        pkgsrc/security: Makefile
Added Files:
        pkgsrc/security/lua-arc4random: DESCR Makefile PLIST distinfo
        pkgsrc/security/lua-arc4random/patches: patch-Makefile.mess

Log Message:
security: Add lua-arc4random

The arc4random family of functions provides a cryptographic pseudorandom
number generator automatically seeded from the system entropy pool and
safe to use from multiple threads.  arc4random is designed to prevent an
adversary from guessing outputs, unlike rand(3) and random(3), and is
faster and more convenient than reading from /dev/urandom directly.

This is a Lua wrapper for arc4random(3), portable to systems that
do and don't have it natively in libc. On systems where arc4random
may be insecure it provides a replacement.


To generate a diff of this commit:
cvs rdiff -u -r1.769 -r1.770 pkgsrc/security/Makefile
cvs rdiff -u -r0 -r1.1 pkgsrc/security/lua-arc4random/DESCR \
    pkgsrc/security/lua-arc4random/Makefile \
    pkgsrc/security/lua-arc4random/PLIST \
    pkgsrc/security/lua-arc4random/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/security/lua-arc4random/patches/patch-Makefile.mess

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/Makefile
diff -u pkgsrc/security/Makefile:1.769 pkgsrc/security/Makefile:1.770
--- pkgsrc/security/Makefile:1.769      Thu Jul  2 14:02:36 2020
+++ pkgsrc/security/Makefile    Thu Jul  2 17:46:26 2020
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.769 2020/07/02 14:02:36 nia Exp $
+# $NetBSD: Makefile,v 1.770 2020/07/02 17:46:26 nia Exp $
 #
 
 COMMENT=       Security tools
@@ -206,6 +206,7 @@ SUBDIR+=    libyubikey
 SUBDIR+=       log2timeline
 SUBDIR+=       logcheck
 SUBDIR+=       lsh
+SUBDIR+=       lua-arc4random
 SUBDIR+=       lua-argon2
 SUBDIR+=       lua-sec
 SUBDIR+=       lxqt-openssh-askpass

Added files:

Index: pkgsrc/security/lua-arc4random/DESCR
diff -u /dev/null pkgsrc/security/lua-arc4random/DESCR:1.1
--- /dev/null   Thu Jul  2 17:46:27 2020
+++ pkgsrc/security/lua-arc4random/DESCR        Thu Jul  2 17:46:26 2020
@@ -0,0 +1,9 @@
+The arc4random family of functions provides a cryptographic pseudorandom
+number generator automatically seeded from the system entropy pool and
+safe to use from multiple threads.  arc4random is designed to prevent an
+adversary from guessing outputs, unlike rand(3) and random(3), and is
+faster and more convenient than reading from /dev/urandom directly.
+
+This is a Lua wrapper for arc4random(3), portable to systems that
+do and don't have it natively in libc. On systems where arc4random
+may be insecure it provides a replacement.
Index: pkgsrc/security/lua-arc4random/Makefile
diff -u /dev/null pkgsrc/security/lua-arc4random/Makefile:1.1
--- /dev/null   Thu Jul  2 17:46:27 2020
+++ pkgsrc/security/lua-arc4random/Makefile     Thu Jul  2 17:46:26 2020
@@ -0,0 +1,23 @@
+# $NetBSD: Makefile,v 1.1 2020/07/02 17:46:26 nia Exp $
+
+DISTNAME=      lua-arc4random-1.3.4
+PKGNAME=       ${DISTNAME:S/lua-/${LUA_PKGPREFIX}-/1}
+CATEGORIES=    security lua
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=mikejsavage/}
+GITHUB_PROJECT=        lua-arc4random
+GITHUB_TAG=    v1.3-4
+
+MAINTAINER=    nia%NetBSD.org@localhost
+HOMEPAGE=      https://github.com/jgm/cmark-lua
+COMMENT=       Lua wrapper for arc4random(3)
+LICENSE=       mit
+
+USE_TOOLS+=    gmake
+
+INSTALLATION_DIRS+=    ${LUA_CDIR}
+
+do-install:
+       ${INSTALL_LIB} ${WRKSRC}/arc4random.so ${DESTDIR}${PREFIX}/${LUA_CDIR}
+
+.include "../../lang/lua/module.mk"
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/lua-arc4random/PLIST
diff -u /dev/null pkgsrc/security/lua-arc4random/PLIST:1.1
--- /dev/null   Thu Jul  2 17:46:27 2020
+++ pkgsrc/security/lua-arc4random/PLIST        Thu Jul  2 17:46:26 2020
@@ -0,0 +1,2 @@
+@comment $NetBSD: PLIST,v 1.1 2020/07/02 17:46:26 nia Exp $
+${LUA_CDIR}/arc4random.so
Index: pkgsrc/security/lua-arc4random/distinfo
diff -u /dev/null pkgsrc/security/lua-arc4random/distinfo:1.1
--- /dev/null   Thu Jul  2 17:46:27 2020
+++ pkgsrc/security/lua-arc4random/distinfo     Thu Jul  2 17:46:26 2020
@@ -0,0 +1,7 @@
+$NetBSD: distinfo,v 1.1 2020/07/02 17:46:26 nia Exp $
+
+SHA1 (lua-arc4random-1.3.4.tar.gz) = 300c7397ea4bf44dd970fca9eb58c4c04f87e0c9
+RMD160 (lua-arc4random-1.3.4.tar.gz) = c4e42556458ac82cbfccecdcc0791a0509abb726
+SHA512 (lua-arc4random-1.3.4.tar.gz) = 8af54d0b44a823e39a5dfdfef0e8e74883a170cce7bf94a7093734b4a35050b5eada12b14ff17a7c3a8fb0b7849a98e8d542b25b1b4f993fd76919a52c16c87a
+Size (lua-arc4random-1.3.4.tar.gz) = 23194 bytes
+SHA1 (patch-Makefile.mess) = 8571ccd75bb392c0f595f35da53410a1a74d82cc

Index: pkgsrc/security/lua-arc4random/patches/patch-Makefile.mess
diff -u /dev/null pkgsrc/security/lua-arc4random/patches/patch-Makefile.mess:1.1
--- /dev/null   Thu Jul  2 17:46:27 2020
+++ pkgsrc/security/lua-arc4random/patches/patch-Makefile.mess  Thu Jul  2 17:46:26 2020
@@ -0,0 +1,17 @@
+$NetBSD: patch-Makefile.mess,v 1.1 2020/07/02 17:46:26 nia Exp $
+
+Use libc on NetBSD too.
+
+--- Makefile.mess.orig 2017-04-13 21:00:05.000000000 +0000
++++ Makefile.mess
+@@ -12,7 +12,9 @@ else
+       LDFLAGS += -bundle -undefined dynamic_lookup
+ endif
+ 
+-ifneq ($(uname),OpenBSD)
++ifeq ($(uname),NetBSD)
++else ifeq ($(uname),OpenBSD)
++else
+       # This is more or less what libressl does
+       # See http://openbsd.cs.toronto.edu/cgi-bin/cvsweb/src/lib/libssl/src/crypto/mem_clr.c?rev=1.4&content-type=text/x-cvsweb-markup
+       CFLAGS += -DOPENSSL_cleanse=explicit_bzero