Hi, update to latest release, some bug fixes and pledge(2) support committed upstream. Pledge(2) support is enabled only if the daemon is not run with "-o no_drop_privileges" parameter; do we want to go the way upstream goes or should we disable the possibility to disable pledge(2) ? Cheers Giovanni
Index: Makefile =================================================================== RCS file: /cvs/ports/misc/memcached/Makefile,v retrieving revision 1.39 diff -u -p -r1.39 Makefile --- Makefile 31 Oct 2017 07:39:25 -0000 1.39 +++ Makefile 22 Nov 2017 16:58:51 -0000 @@ -2,7 +2,7 @@ COMMENT= distributed memory object caching system -DISTNAME= memcached-1.5.2 +DISTNAME= memcached-1.5.3 CATEGORIES= misc HOMEPAGE= https://www.memcached.org/ Index: distinfo =================================================================== RCS file: /cvs/ports/misc/memcached/distinfo,v retrieving revision 1.25 diff -u -p -r1.25 distinfo --- distinfo 31 Oct 2017 07:39:25 -0000 1.25 +++ distinfo 22 Nov 2017 16:58:51 -0000 @@ -1,2 +1,2 @@ -SHA256 (memcached-1.5.2.tar.gz) = mskxE7210DfnnGEnc4ZWSsLl4x1J5ZTxHlVOTBSbckU= -SIZE (memcached-1.5.2.tar.gz) = 407715 +SHA256 (memcached-1.5.3.tar.gz) = JYzD3bdhNoVGWs/QIV+CciCju90Wf9LAgGMhBbLS884= +SIZE (memcached-1.5.3.tar.gz) = 409131 Index: patches/patch-memcached_c =================================================================== RCS file: patches/patch-memcached_c diff -N patches/patch-memcached_c --- patches/patch-memcached_c 31 Oct 2017 07:39:25 -0000 1.14 +++ /dev/null 1 Jan 1970 00:00:00 -0000 @@ -1,31 +0,0 @@ -$OpenBSD: patch-memcached_c,v 1.14 2017/10/31 07:39:25 giovanni Exp $ -Index: memcached.c ---- memcached.c.orig -+++ memcached.c -@@ -23,6 +23,7 @@ - #include <sys/uio.h> - #include <ctype.h> - #include <stdarg.h> -+#include <unistd.h> - - /* some POSIX systems need the following definition - * to get mlockall flags out of sys/mman.h. */ -@@ -6861,6 +6862,18 @@ int main (int argc, char **argv) { - - if (pid_file != NULL) { - save_pid(pid_file); -+ } -+ -+ if (settings.socketpath != NULL) { -+ if (pledge("stdio unix", NULL) == -1) { -+ fprintf(stderr, "%s: pledge: %s\n", argv[0], strerror(errno)); -+ exit(1); -+ } -+ } else { -+ if (pledge("stdio inet", NULL) == -1) { -+ fprintf(stderr, "%s: pledge: %s\n", argv[0], strerror(errno)); -+ exit(1); -+ } - } - - /* Drop privileges no longer needed */
