summaryrefslogtreecommitdiff
path: root/configure
diff options
context:
space:
mode:
Diffstat (limited to 'configure')
-rwxr-xr-xconfigure525
1 files changed, 486 insertions, 39 deletions
diff --git a/configure b/configure
index c15fdc3cf..baad7eecf 100755
--- a/configure
+++ b/configure
@@ -1,5 +1,5 @@
1#! /bin/sh 1#! /bin/sh
2# From configure.ac Revision: 1.480 . 2# From configure.ac Revision: 1.489 .
3# Guess values for system-dependent variables and create Makefiles. 3# Guess values for system-dependent variables and create Makefiles.
4# Generated by GNU Autoconf 2.68 for OpenSSH Portable. 4# Generated by GNU Autoconf 2.68 for OpenSSH Portable.
5# 5#
@@ -722,6 +722,7 @@ with_zlib
722with_zlib_version_check 722with_zlib_version_check
723with_skey 723with_skey
724with_tcp_wrappers 724with_tcp_wrappers
725with_ldns
725with_libedit 726with_libedit
726with_audit 727with_audit
727with_ssl_dir 728with_ssl_dir
@@ -1411,6 +1412,7 @@ Optional Packages:
1411 --without-zlib-version-check Disable zlib version check 1412 --without-zlib-version-check Disable zlib version check
1412 --with-skey[=PATH] Enable S/Key support (optionally in PATH) 1413 --with-skey[=PATH] Enable S/Key support (optionally in PATH)
1413 --with-tcp-wrappers[=PATH] Enable tcpwrappers support (optionally in PATH) 1414 --with-tcp-wrappers[=PATH] Enable tcpwrappers support (optionally in PATH)
1415 --with-ldns[=PATH] Use ldns for DNSSEC support (optionally in PATH)
1414 --with-libedit[=PATH] Enable libedit support for sftp 1416 --with-libedit[=PATH] Enable libedit support for sftp
1415 --with-audit=module Enable audit support (modules=debug,bsm,linux) 1417 --with-audit=module Enable audit support (modules=debug,bsm,linux)
1416 --with-ssl-dir=PATH Specify path to OpenSSL installation 1418 --with-ssl-dir=PATH Specify path to OpenSSL installation
@@ -1420,7 +1422,7 @@ Optional Packages:
1420 --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool) 1422 --with-prngd-socket=FILE read entropy from PRNGD/EGD socket FILE (default=/var/run/egd-pool)
1421 --with-pam Enable PAM support 1423 --with-pam Enable PAM support
1422 --with-privsep-user=user Specify non-privileged user for privilege separation 1424 --with-privsep-user=user Specify non-privileged user for privilege separation
1423 --with-sandbox=style Specify privilege separation sandbox (no, darwin, rlimit, systrace) 1425 --with-sandbox=style Specify privilege separation sandbox (no, darwin, rlimit, systrace, seccomp_filter)
1424 --with-selinux Enable SELinux support 1426 --with-selinux Enable SELinux support
1425 --with-kerberos5=PATH Enable Kerberos 5 support 1427 --with-kerberos5=PATH Enable Kerberos 5 support
1426 --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty) 1428 --with-privsep-path=xxx Path for privilege separation chroot (default=/var/empty)
@@ -5576,6 +5578,68 @@ $as_echo "#define HAVE_RLIMIT_NPROC /**/" >>confdefs.h
5576 5578
5577fi 5579fi
5578 5580
5581ac_fn_c_check_decl "$LINENO" "PR_SET_NO_NEW_PRIVS" "ac_cv_have_decl_PR_SET_NO_NEW_PRIVS" "
5582 #include <sys/types.h>
5583 #include <linux/prctl.h>
5584
5585"
5586if test "x$ac_cv_have_decl_PR_SET_NO_NEW_PRIVS" = xyes; then :
5587 have_linux_no_new_privs=1
5588fi
5589
5590if test "x$have_linux_no_new_privs" = "x1" ; then
5591ac_fn_c_check_decl "$LINENO" "SECCOMP_MODE_FILTER" "ac_cv_have_decl_SECCOMP_MODE_FILTER" "
5592 #include <sys/types.h>
5593 #include <linux/seccomp.h>
5594
5595"
5596if test "x$ac_cv_have_decl_SECCOMP_MODE_FILTER" = xyes; then :
5597 have_seccomp_filter=1
5598fi
5599
5600fi
5601if test "x$have_seccomp_filter" = "x1" ; then
5602{ $as_echo "$as_me:${as_lineno-$LINENO}: checking kernel for seccomp_filter support" >&5
5603$as_echo_n "checking kernel for seccomp_filter support... " >&6; }
5604if test "$cross_compiling" = yes; then :
5605 { $as_echo "$as_me:${as_lineno-$LINENO}: result: cross-compiling, assuming yes" >&5
5606$as_echo "cross-compiling, assuming yes" >&6; }
5607
5608else
5609 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5610/* end confdefs.h. */
5611
5612 #include <errno.h>
5613 #include <linux/seccomp.h>
5614 #include <stdlib.h>
5615 #include <sys/prctl.h>
5616
5617int
5618main ()
5619{
5620 errno = 0;
5621 prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, NULL, 0, 0);
5622 exit(errno == EFAULT ? 0 : 1);
5623 ;
5624 return 0;
5625}
5626_ACEOF
5627if ac_fn_c_try_run "$LINENO"; then :
5628 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5629$as_echo "yes" >&6; }
5630else
5631
5632 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5633$as_echo "no" >&6; }
5634 # Disable seccomp filter as a target
5635 have_seccomp_filter=0
5636
5637fi
5638rm -f core *.core core.conftest.* gmon.out bb.out conftest$ac_exeext \
5639 conftest.$ac_objext conftest.beam conftest.$ac_ext
5640fi
5641
5642fi
5579 5643
5580use_stack_protector=1 5644use_stack_protector=1
5581 5645
@@ -5774,6 +5838,29 @@ $as_echo "no" >&6; }
5774fi 5838fi
5775rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext 5839rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5776} 5840}
5841 {
5842 { $as_echo "$as_me:${as_lineno-$LINENO}: checking if $CC supports -D_FORTIFY_SOURCE=2" >&5
5843$as_echo_n "checking if $CC supports -D_FORTIFY_SOURCE=2... " >&6; }
5844 saved_CFLAGS="$CFLAGS"
5845 CFLAGS="$CFLAGS -D_FORTIFY_SOURCE=2"
5846 _define_flag=""
5847 test "x$_define_flag" = "x" && _define_flag="-D_FORTIFY_SOURCE=2"
5848 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
5849/* end confdefs.h. */
5850int main(void) { return 0; }
5851_ACEOF
5852if ac_fn_c_try_compile "$LINENO"; then :
5853 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
5854$as_echo "yes" >&6; }
5855 CFLAGS="$saved_CFLAGS $_define_flag"
5856else
5857 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
5858$as_echo "no" >&6; }
5859 CFLAGS="$saved_CFLAGS"
5860
5861fi
5862rm -f core conftest.err conftest.$ac_objext conftest.$ac_ext
5863}
5777 { $as_echo "$as_me:${as_lineno-$LINENO}: checking gcc version" >&5 5864 { $as_echo "$as_me:${as_lineno-$LINENO}: checking gcc version" >&5
5778$as_echo_n "checking gcc version... " >&6; } 5865$as_echo_n "checking gcc version... " >&6; }
5779 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'` 5866 GCC_VER=`$CC -v 2>&1 | $AWK '/gcc version /{print $3}'`
@@ -6894,6 +6981,46 @@ $as_echo "#define SSH_TUN_COMPAT_AF 1" >>confdefs.h
6894$as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h 6981$as_echo "#define SSH_TUN_PREPEND_AF 1" >>confdefs.h
6895 6982
6896 fi 6983 fi
6984 for ac_header in linux/seccomp.h linux/filter.h linux/audit.h
6985do :
6986 as_ac_Header=`$as_echo "ac_cv_header_$ac_header" | $as_tr_sh`
6987ac_fn_c_check_header_mongrel "$LINENO" "$ac_header" "$as_ac_Header" "$ac_includes_default"
6988if eval test \"x\$"$as_ac_Header"\" = x"yes"; then :
6989 cat >>confdefs.h <<_ACEOF
6990#define `$as_echo "HAVE_$ac_header" | $as_tr_cpp` 1
6991_ACEOF
6992
6993fi
6994
6995done
6996
6997 for ac_func in prctl
6998do :
6999 ac_fn_c_check_func "$LINENO" "prctl" "ac_cv_func_prctl"
7000if test "x$ac_cv_func_prctl" = xyes; then :
7001 cat >>confdefs.h <<_ACEOF
7002#define HAVE_PRCTL 1
7003_ACEOF
7004
7005fi
7006done
7007
7008 have_seccomp_audit_arch=1
7009 case "$host" in
7010 x86_64-*)
7011
7012$as_echo "#define SECCOMP_AUDIT_ARCH AUDIT_ARCH_X86_64" >>confdefs.h
7013
7014 ;;
7015 i*86-*)
7016
7017$as_echo "#define SECCOMP_AUDIT_ARCH AUDIT_ARCH_I386" >>confdefs.h
7018
7019 ;;
7020 *)
7021 have_seccomp_audit_arch=0
7022 ;;
7023 esac
6897 ;; 7024 ;;
6898mips-sony-bsd|mips-sony-newsos4) 7025mips-sony-bsd|mips-sony-newsos4)
6899 7026
@@ -8271,6 +8398,62 @@ fi
8271 8398
8272done 8399done
8273 8400
8401{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing fmt_scaled" >&5
8402$as_echo_n "checking for library containing fmt_scaled... " >&6; }
8403if ${ac_cv_search_fmt_scaled+:} false; then :
8404 $as_echo_n "(cached) " >&6
8405else
8406 ac_func_search_save_LIBS=$LIBS
8407cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8408/* end confdefs.h. */
8409
8410/* Override any GCC internal prototype to avoid an error.
8411 Use char because int might match the return type of a GCC
8412 builtin and then its argument prototype would still apply. */
8413#ifdef __cplusplus
8414extern "C"
8415#endif
8416char fmt_scaled ();
8417int
8418main ()
8419{
8420return fmt_scaled ();
8421 ;
8422 return 0;
8423}
8424_ACEOF
8425for ac_lib in '' util bsd; do
8426 if test -z "$ac_lib"; then
8427 ac_res="none required"
8428 else
8429 ac_res=-l$ac_lib
8430 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8431 fi
8432 if ac_fn_c_try_link "$LINENO"; then :
8433 ac_cv_search_fmt_scaled=$ac_res
8434fi
8435rm -f core conftest.err conftest.$ac_objext \
8436 conftest$ac_exeext
8437 if ${ac_cv_search_fmt_scaled+:} false; then :
8438 break
8439fi
8440done
8441if ${ac_cv_search_fmt_scaled+:} false; then :
8442
8443else
8444 ac_cv_search_fmt_scaled=no
8445fi
8446rm conftest.$ac_ext
8447LIBS=$ac_func_search_save_LIBS
8448fi
8449{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_fmt_scaled" >&5
8450$as_echo "$ac_cv_search_fmt_scaled" >&6; }
8451ac_res=$ac_cv_search_fmt_scaled
8452if test "$ac_res" != no; then :
8453 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8454
8455fi
8456
8274{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing login" >&5 8457{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing login" >&5
8275$as_echo_n "checking for library containing login... " >&6; } 8458$as_echo_n "checking for library containing login... " >&6; }
8276if ${ac_cv_search_login+:} false; then : 8459if ${ac_cv_search_login+:} false; then :
@@ -8325,11 +8508,233 @@ ac_res=$ac_cv_search_login
8325if test "$ac_res" != no; then : 8508if test "$ac_res" != no; then :
8326 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS" 8509 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8327 8510
8328$as_echo "#define HAVE_LOGIN 1" >>confdefs.h 8511fi
8512
8513{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing logout" >&5
8514$as_echo_n "checking for library containing logout... " >&6; }
8515if ${ac_cv_search_logout+:} false; then :
8516 $as_echo_n "(cached) " >&6
8517else
8518 ac_func_search_save_LIBS=$LIBS
8519cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8520/* end confdefs.h. */
8521
8522/* Override any GCC internal prototype to avoid an error.
8523 Use char because int might match the return type of a GCC
8524 builtin and then its argument prototype would still apply. */
8525#ifdef __cplusplus
8526extern "C"
8527#endif
8528char logout ();
8529int
8530main ()
8531{
8532return logout ();
8533 ;
8534 return 0;
8535}
8536_ACEOF
8537for ac_lib in '' util bsd; do
8538 if test -z "$ac_lib"; then
8539 ac_res="none required"
8540 else
8541 ac_res=-l$ac_lib
8542 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8543 fi
8544 if ac_fn_c_try_link "$LINENO"; then :
8545 ac_cv_search_logout=$ac_res
8546fi
8547rm -f core conftest.err conftest.$ac_objext \
8548 conftest$ac_exeext
8549 if ${ac_cv_search_logout+:} false; then :
8550 break
8551fi
8552done
8553if ${ac_cv_search_logout+:} false; then :
8554
8555else
8556 ac_cv_search_logout=no
8557fi
8558rm conftest.$ac_ext
8559LIBS=$ac_func_search_save_LIBS
8560fi
8561{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_logout" >&5
8562$as_echo "$ac_cv_search_logout" >&6; }
8563ac_res=$ac_cv_search_logout
8564if test "$ac_res" != no; then :
8565 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8566
8567fi
8568
8569{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing logwtmp" >&5
8570$as_echo_n "checking for library containing logwtmp... " >&6; }
8571if ${ac_cv_search_logwtmp+:} false; then :
8572 $as_echo_n "(cached) " >&6
8573else
8574 ac_func_search_save_LIBS=$LIBS
8575cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8576/* end confdefs.h. */
8577
8578/* Override any GCC internal prototype to avoid an error.
8579 Use char because int might match the return type of a GCC
8580 builtin and then its argument prototype would still apply. */
8581#ifdef __cplusplus
8582extern "C"
8583#endif
8584char logwtmp ();
8585int
8586main ()
8587{
8588return logwtmp ();
8589 ;
8590 return 0;
8591}
8592_ACEOF
8593for ac_lib in '' util bsd; do
8594 if test -z "$ac_lib"; then
8595 ac_res="none required"
8596 else
8597 ac_res=-l$ac_lib
8598 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8599 fi
8600 if ac_fn_c_try_link "$LINENO"; then :
8601 ac_cv_search_logwtmp=$ac_res
8602fi
8603rm -f core conftest.err conftest.$ac_objext \
8604 conftest$ac_exeext
8605 if ${ac_cv_search_logwtmp+:} false; then :
8606 break
8607fi
8608done
8609if ${ac_cv_search_logwtmp+:} false; then :
8610
8611else
8612 ac_cv_search_logwtmp=no
8613fi
8614rm conftest.$ac_ext
8615LIBS=$ac_func_search_save_LIBS
8616fi
8617{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_logwtmp" >&5
8618$as_echo "$ac_cv_search_logwtmp" >&6; }
8619ac_res=$ac_cv_search_logwtmp
8620if test "$ac_res" != no; then :
8621 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8622
8623fi
8624
8625{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing openpty" >&5
8626$as_echo_n "checking for library containing openpty... " >&6; }
8627if ${ac_cv_search_openpty+:} false; then :
8628 $as_echo_n "(cached) " >&6
8629else
8630 ac_func_search_save_LIBS=$LIBS
8631cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8632/* end confdefs.h. */
8633
8634/* Override any GCC internal prototype to avoid an error.
8635 Use char because int might match the return type of a GCC
8636 builtin and then its argument prototype would still apply. */
8637#ifdef __cplusplus
8638extern "C"
8639#endif
8640char openpty ();
8641int
8642main ()
8643{
8644return openpty ();
8645 ;
8646 return 0;
8647}
8648_ACEOF
8649for ac_lib in '' util bsd; do
8650 if test -z "$ac_lib"; then
8651 ac_res="none required"
8652 else
8653 ac_res=-l$ac_lib
8654 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8655 fi
8656 if ac_fn_c_try_link "$LINENO"; then :
8657 ac_cv_search_openpty=$ac_res
8658fi
8659rm -f core conftest.err conftest.$ac_objext \
8660 conftest$ac_exeext
8661 if ${ac_cv_search_openpty+:} false; then :
8662 break
8663fi
8664done
8665if ${ac_cv_search_openpty+:} false; then :
8666
8667else
8668 ac_cv_search_openpty=no
8669fi
8670rm conftest.$ac_ext
8671LIBS=$ac_func_search_save_LIBS
8672fi
8673{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_openpty" >&5
8674$as_echo "$ac_cv_search_openpty" >&6; }
8675ac_res=$ac_cv_search_openpty
8676if test "$ac_res" != no; then :
8677 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8329 8678
8330fi 8679fi
8331 8680
8332for ac_func in fmt_scaled logout updwtmp logwtmp 8681{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for library containing updwtmp" >&5
8682$as_echo_n "checking for library containing updwtmp... " >&6; }
8683if ${ac_cv_search_updwtmp+:} false; then :
8684 $as_echo_n "(cached) " >&6
8685else
8686 ac_func_search_save_LIBS=$LIBS
8687cat confdefs.h - <<_ACEOF >conftest.$ac_ext
8688/* end confdefs.h. */
8689
8690/* Override any GCC internal prototype to avoid an error.
8691 Use char because int might match the return type of a GCC
8692 builtin and then its argument prototype would still apply. */
8693#ifdef __cplusplus
8694extern "C"
8695#endif
8696char updwtmp ();
8697int
8698main ()
8699{
8700return updwtmp ();
8701 ;
8702 return 0;
8703}
8704_ACEOF
8705for ac_lib in '' util bsd; do
8706 if test -z "$ac_lib"; then
8707 ac_res="none required"
8708 else
8709 ac_res=-l$ac_lib
8710 LIBS="-l$ac_lib $ac_func_search_save_LIBS"
8711 fi
8712 if ac_fn_c_try_link "$LINENO"; then :
8713 ac_cv_search_updwtmp=$ac_res
8714fi
8715rm -f core conftest.err conftest.$ac_objext \
8716 conftest$ac_exeext
8717 if ${ac_cv_search_updwtmp+:} false; then :
8718 break
8719fi
8720done
8721if ${ac_cv_search_updwtmp+:} false; then :
8722
8723else
8724 ac_cv_search_updwtmp=no
8725fi
8726rm conftest.$ac_ext
8727LIBS=$ac_func_search_save_LIBS
8728fi
8729{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_search_updwtmp" >&5
8730$as_echo "$ac_cv_search_updwtmp" >&6; }
8731ac_res=$ac_cv_search_updwtmp
8732if test "$ac_res" != no; then :
8733 test "$ac_res" = "none required" || LIBS="$ac_res $LIBS"
8734
8735fi
8736
8737for ac_func in fmt_scaled login logout openpty updwtmp logwtmp
8333do : 8738do :
8334 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh` 8739 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
8335ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var" 8740ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
@@ -8732,6 +9137,56 @@ rm -f core conftest.err conftest.$ac_objext \
8732fi 9137fi
8733 9138
8734 9139
9140# Check whether user wants to use ldns
9141LDNS_MSG="no"
9142
9143# Check whether --with-ldns was given.
9144if test "${with_ldns+set}" = set; then :
9145 withval=$with_ldns;
9146 if test "x$withval" != "xno" ; then
9147
9148 if test "x$withval" != "xyes" ; then
9149 CPPFLAGS="$CPPFLAGS -I${withval}/include"
9150 LDFLAGS="$LDFLAGS -L${withval}/lib"
9151 fi
9152
9153
9154$as_echo "#define HAVE_LDNS 1" >>confdefs.h
9155
9156 LIBS="-lldns $LIBS"
9157 LDNS_MSG="yes"
9158
9159 { $as_echo "$as_me:${as_lineno-$LINENO}: checking for ldns support" >&5
9160$as_echo_n "checking for ldns support... " >&6; }
9161 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
9162/* end confdefs.h. */
9163
9164#include <stdio.h>
9165#include <stdlib.h>
9166#include <stdint.h>
9167#include <ldns/ldns.h>
9168int main() { ldns_status status = ldns_verify_trusted(NULL, NULL, NULL, NULL); status=LDNS_STATUS_OK; exit(0); }
9169
9170
9171_ACEOF
9172if ac_fn_c_try_link "$LINENO"; then :
9173 { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
9174$as_echo "yes" >&6; }
9175else
9176
9177 { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
9178$as_echo "no" >&6; }
9179 as_fn_error $? "** Incomplete or missing ldns libraries." "$LINENO" 5
9180
9181fi
9182rm -f core conftest.err conftest.$ac_objext \
9183 conftest$ac_exeext conftest.$ac_ext
9184 fi
9185
9186
9187fi
9188
9189
8735# Check whether user wants libedit support 9190# Check whether user wants libedit support
8736LIBEDIT_MSG="no" 9191LIBEDIT_MSG="no"
8737 9192
@@ -8995,6 +9450,12 @@ done
8995 9450
8996$as_echo "#define USE_BSM_AUDIT 1" >>confdefs.h 9451$as_echo "#define USE_BSM_AUDIT 1" >>confdefs.h
8997 9452
9453 if test "$sol2ver" -eq 11; then
9454 SSHDLIBS="$SSHDLIBS -lscf"
9455
9456$as_echo "#define BROKEN_BSM_API 1" >>confdefs.h
9457
9458 fi
8998 ;; 9459 ;;
8999 linux) 9460 linux)
9000 { $as_echo "$as_me:${as_lineno-$LINENO}: result: linux" >&5 9461 { $as_echo "$as_me:${as_lineno-$LINENO}: result: linux" >&5
@@ -9081,7 +9542,6 @@ for ac_func in \
9081 nsleep \ 9542 nsleep \
9082 ogetaddrinfo \ 9543 ogetaddrinfo \
9083 openlog_r \ 9544 openlog_r \
9084 openpty \
9085 poll \ 9545 poll \
9086 prctl \ 9546 prctl \
9087 pstat \ 9547 pstat \
@@ -9116,6 +9576,7 @@ for ac_func in \
9116 strlcat \ 9576 strlcat \
9117 strlcpy \ 9577 strlcpy \
9118 strmode \ 9578 strmode \
9579 strnlen \
9119 strnvis \ 9580 strnvis \
9120 strptime \ 9581 strptime \
9121 strtonum \ 9582 strtonum \
@@ -10647,7 +11108,7 @@ fi
10647rm -f core conftest.err conftest.$ac_objext \ 11108rm -f core conftest.err conftest.$ac_objext \
10648 conftest$ac_exeext conftest.$ac_ext 11109 conftest$ac_exeext conftest.$ac_ext
10649 11110
10650for ac_func in RSA_generate_key_ex DSA_generate_parameters_ex BN_is_prime_ex RSA_get_default_method 11111for ac_func in RSA_generate_key_ex DSA_generate_parameters_ex BN_is_prime_ex RSA_get_default_method HMAC_CTX_init
10651do : 11112do :
10652 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh` 11113 as_ac_var=`$as_echo "ac_cv_func_$ac_func" | $as_tr_sh`
10653ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var" 11114ac_fn_c_check_func "$LINENO" "$ac_func" "$as_ac_var"
@@ -11398,6 +11859,25 @@ elif test "x$sandbox_arg" = "xdarwin" || \
11398 11859
11399$as_echo "#define SANDBOX_DARWIN 1" >>confdefs.h 11860$as_echo "#define SANDBOX_DARWIN 1" >>confdefs.h
11400 11861
11862elif test "x$sandbox_arg" = "xseccomp_filter" || \
11863 ( test -z "$sandbox_arg" && \
11864 test "x$have_seccomp_filter" == "x1" && \
11865 test "x$ac_cv_header_linux_audit_h" = "xyes" && \
11866 test "x$have_seccomp_audit_arch" = "x1" && \
11867 test "x$have_linux_no_new_privs" = "x1" && \
11868 test "x$ac_cv_func_prctl" = "xyes" ) ; then
11869 test "x$have_seccomp_audit_arch" != "x1" && \
11870 as_fn_error $? "seccomp_filter sandbox not supported on $host" "$LINENO" 5
11871 test "x$have_linux_no_new_privs" != "x1" && \
11872 as_fn_error $? "seccomp_filter sandbox requires PR_SET_NO_NEW_PRIVS" "$LINENO" 5
11873 test "x$have_seccomp_filter" != "x1" && \
11874 as_fn_error $? "seccomp_filter sandbox requires seccomp headers" "$LINENO" 5
11875 test "x$ac_cv_func_prctl" != "xyes" && \
11876 as_fn_error $? "seccomp_filter sandbox requires prctl function" "$LINENO" 5
11877 SANDBOX_STYLE="seccomp_filter"
11878
11879$as_echo "#define SANDBOX_SECCOMP_FILTER 1" >>confdefs.h
11880
11401elif test "x$sandbox_arg" = "xrlimit" || \ 11881elif test "x$sandbox_arg" = "xrlimit" || \
11402 ( test -z "$sandbox_arg" && test "x$ac_cv_func_setrlimit" = "xyes" ) ; then 11882 ( test -z "$sandbox_arg" && test "x$ac_cv_func_setrlimit" = "xyes" ) ; then
11403 test "x$ac_cv_func_setrlimit" != "xyes" && \ 11883 test "x$ac_cv_func_setrlimit" != "xyes" && \
@@ -11456,39 +11936,6 @@ fi
11456# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects 11936# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
11457# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'. 11937# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
11458# This bug is HP SR number 8606223364. 11938# This bug is HP SR number 8606223364.
11459{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of char" >&5
11460$as_echo_n "checking size of char... " >&6; }
11461if ${ac_cv_sizeof_char+:} false; then :
11462 $as_echo_n "(cached) " >&6
11463else
11464 if ac_fn_c_compute_int "$LINENO" "(long int) (sizeof (char))" "ac_cv_sizeof_char" "$ac_includes_default"; then :
11465
11466else
11467 if test "$ac_cv_type_char" = yes; then
11468 { { $as_echo "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
11469$as_echo "$as_me: error: in \`$ac_pwd':" >&2;}
11470as_fn_error 77 "cannot compute sizeof (char)
11471See \`config.log' for more details" "$LINENO" 5; }
11472 else
11473 ac_cv_sizeof_char=0
11474 fi
11475fi
11476
11477fi
11478{ $as_echo "$as_me:${as_lineno-$LINENO}: result: $ac_cv_sizeof_char" >&5
11479$as_echo "$ac_cv_sizeof_char" >&6; }
11480
11481
11482
11483cat >>confdefs.h <<_ACEOF
11484#define SIZEOF_CHAR $ac_cv_sizeof_char
11485_ACEOF
11486
11487
11488# The cast to long int works around a bug in the HP C Compiler
11489# version HP92453-01 B.11.11.23709.GP, which incorrectly rejects
11490# declarations like `int a3[[(sizeof (unsigned char)) >= 0]];'.
11491# This bug is HP SR number 8606223364.
11492{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of short int" >&5 11939{ $as_echo "$as_me:${as_lineno-$LINENO}: checking size of short int" >&5
11493$as_echo_n "checking size of short int... " >&6; } 11940$as_echo_n "checking size of short int... " >&6; }
11494if ${ac_cv_sizeof_short_int+:} false; then : 11941if ${ac_cv_sizeof_short_int+:} false; then :