# ChangeLog for sys-freebsd/freebsd-pam-modules
-# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/ChangeLog,v 1.24 2009/05/22 13:38:33 aballier Exp $
+# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/ChangeLog,v 1.25 2010/03/11 11:31:46 aballier Exp $
+
+ 11 Mar 2010; Alexis Ballier <aballier@gentoo.org> -files/5.4/README.pamd,
+ -files/5.4/convert.pl, -files/5.4/pam.d/other, -files/5.4/pam.d/system,
+ -files/5.4/pam.d/system-auth, -freebsd-pam-modules-6.2-r1.ebuild,
+ -freebsd-pam-modules-7.1.ebuild:
+ remove old
*freebsd-pam-modules-7.2 (22 May 2009)
+++ /dev/null
-/etc/pam.d
-
-This directory contains configuration files for the Pluggable
-Authentication Modules (PAM) library.
-
-Each file details the module chain for a single service, and must be
-named after that service. If no configuration file is found for a
-particular service, the /etc/pam.d/other is used instead. If that
-file does not exist, /etc/pam.conf is searched for entries matching
-the specified service or, failing that, the "other" service.
-
-See the pam(8) manual page for an explanation of the workings of the
-PAM library and descriptions of the various files and modules. Below
-is a summary of the format for the pam.conf and /etc/pam.d/* files.
-
-Configuration lines take the following form:
-
-module-type control-flag module-path arguments
-
-Comments are introduced with a hash mark ('#'). Blank lines and lines
-consisting entirely of comments are ignored.
-
-The meanings of the different fields are as follows:
-
- module-type:
- auth: prompt for a password to authenticate that the user is
- who they say they are, and set any credentials.
- account: non-authentication based authorization, based on time,
- resources, etc.
- session: housekeeping before and/or after login.
- password: update authentication tokens.
-
- control-flag: How libpam handles success or failure of the module.
- required: success is required; on failure all remaining
- modules are run, but the request will be denied.
- requisite: success is required, and on failure no remaining
- modules are run.
- sufficient: success is sufficient, and if no previous required
- module failed, no remaining modules are run.
- binding: success is sufficient; on failure all remaining
- modules are run, but the request will be denied.
- optional: ignored unless the other modules return PAM_IGNORE.
-
- arguments: Module-specific options, plus some generic ones:
- debug: syslog debug info.
- no_warn: return no warning messages to the application.
- Remove this to feed back to the user the
- reason(s) they are being rejected.
- use_first_pass: try authentication using password from the
- preceding auth module.
- try_first_pass: first try authentication using password from
- the preceding auth module, and if that fails
- prompt for a new password.
- use_mapped_pass: convert cleartext password to a crypto key.
- expose_account: allow printing more info about the user when
- prompting.
-
-Note that having a "sufficient" module as the last entry for a
-particular service and module type may result in surprising behaviour.
-To get the intended semantics, add a "required" entry listing the
-pam_deny module at the end of the chain.
-
-$Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/files/5.4/README.pamd,v 1.1 2006/04/01 16:43:51 flameeyes Exp $
+++ /dev/null
-#!/usr/bin/perl -w
-#-
-# Copyright (c) 2001,2002 Networks Associates Technologies, Inc.
-# All rights reserved.
-#
-# This software was developed for the FreeBSD Project by ThinkSec AS and
-# NAI Labs, the Security Research Division of Network Associates, Inc.
-# under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the
-# DARPA CHATS research program.
-#
-# Redistribution and use in source and binary forms, with or without
-# modification, are permitted provided that the following conditions
-# are met:
-# 1. Redistributions of source code must retain the above copyright
-# notice, this list of conditions and the following disclaimer.
-# 2. Redistributions in binary form must reproduce the above copyright
-# notice, this list of conditions and the following disclaimer in the
-# documentation and/or other materials provided with the distribution.
-# 3. The name of the author may not be used to endorse or promote
-# products derived from this software without specific prior written
-# permission.
-#
-# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
-# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
-# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
-# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
-# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
-# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
-# SUCH DAMAGE.
-#
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/files/5.4/convert.pl,v 1.1 2006/04/01 16:43:51 flameeyes Exp $
-#
-
-use strict;
-use Fcntl;
-use vars qw(%SERVICES);
-
-MAIN:{
- my $line;
- my $service;
- my $version;
- my $type;
- local *FILE;
-
- while (<>) {
- chomp();
- s/\s*$//;
- next unless m/^(\#*)(\w+)\s+(auth|account|session|password)\s+(\S.*)$/;
- $line = $1.$3;
- $line .= "\t" x ((16 - length($line) + 7) / 8);
- $line .= $4;
- push(@{$SERVICES{$2}->{$3}}, $line);
- }
-
- foreach $service (keys(%SERVICES)) {
- $version = '$' . 'FreeBSD' . '$';
- if (sysopen(FILE, $service, O_RDONLY)) {
- while (<FILE>) {
- next unless (m/(\$[F]reeBSD.*?\$)/);
- $version = $1;
- last;
- }
- close(FILE);
- }
- sysopen(FILE, $service, O_RDWR|O_CREAT|O_TRUNC)
- or die("$service: $!\n");
- print(FILE "#\n");
- print(FILE "# $version\n");
- print(FILE "#\n");
- print(FILE "# PAM configuration for the \"$service\" service\n");
- print(FILE "#\n");
- foreach $type (qw(auth account session password)) {
- next unless exists($SERVICES{$service}->{$type});
- print(FILE "\n");
- print(FILE "# $type\n");
- print(FILE join("\n", @{$SERVICES{$service}->{$type}}, ""));
- }
- close(FILE);
- warn("$service\n");
- }
-
- exit(0);
-}
+++ /dev/null
-#
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/files/5.4/pam.d/other,v 1.1 2006/04/01 16:43:51 flameeyes Exp $
-#
-# PAM configuration for the "other" service
-#
-
-# auth
-auth required pam_nologin.so no_warn
-auth sufficient pam_opie.so no_warn no_fake_prompts
-auth requisite pam_opieaccess.so no_warn allow_local
-#auth sufficient pam_krb5.so no_warn try_first_pass
-#auth sufficient pam_ssh.so no_warn try_first_pass
-auth required pam_unix.so no_warn try_first_pass
-
-# account
-#account required pam_krb5.so
-account required pam_login_access.so
-account required pam_unix.so
-
-# session
-#session optional pam_ssh.so
-session required pam_permit.so
-
-# password
-password required pam_permit.so
+++ /dev/null
-#
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/files/5.4/pam.d/system,v 1.1 2006/04/01 16:43:51 flameeyes Exp $
-#
-# System-wide defaults
-#
-
-# auth
-auth sufficient pam_opie.so no_warn no_fake_prompts
-auth requisite pam_opieaccess.so no_warn allow_local
-#auth sufficient pam_krb5.so no_warn try_first_pass
-#auth sufficient pam_ssh.so no_warn try_first_pass
-auth required pam_unix.so no_warn try_first_pass nullok
-
-# account
-#account required pam_krb5.so
-account required pam_login_access.so
-account required pam_unix.so
-
-# session
-#session optional pam_ssh.so
-session required pam_lastlog.so no_fail
-
-# password
-#password sufficient pam_krb5.so no_warn try_first_pass
-password required pam_unix.so no_warn try_first_pass
+++ /dev/null
-# Copyright 2005 Gentoo Foundation.
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/files/5.4/pam.d/system-auth,v 1.2 2007/04/23 19:41:07 swegener Exp $
-
-auth include system
-account include system
-session include system
-password include system
+++ /dev/null
-# Copyright 1999-2008 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/freebsd-pam-modules-6.2-r1.ebuild,v 1.2 2008/06/09 21:13:21 the_paya Exp $
-
-inherit bsdmk freebsd multilib pam
-
-DESCRIPTION="FreeBSD's PAM authentication modules"
-SLOT="0"
-KEYWORDS="~sparc-fbsd ~x86-fbsd"
-
-IUSE="kerberos nis"
-
-SRC_URI="mirror://gentoo/${LIB}.tar.bz2"
-
-RDEPEND=">=sys-auth/openpam-20050201-r1
- kerberos? ( dev-libs/openssl
- virtual/krb5 )"
-DEPEND="${RDEPEND}
- =sys-freebsd/freebsd-mk-defs-${RV}*
- =sys-freebsd/freebsd-sources-${RV}*"
-
-S=${WORKDIR}/lib/libpam/modules
-
-pkg_setup() {
- # Avoid installing pam_ssh as that has its own ebuild.
- mymakeopts="${mymakeopts} NO_OPENSSH= "
- use kerberos || mymakeopts="${mymakeopts} NO_KERBEROS= "
- use nis || mymakeopts="${mymakeopts} NO_NIS= "
-}
-
-src_unpack() {
- unpack ${A}
-
- cd "${WORKDIR}"/lib
-
- for module in pam_deny pam_passwdqc pam_permit; do
- sed -i -e "s:${module}::" "${S}"/modules.inc
- done
-
- # Avoid using static versions; use gentoo /lib/security dir
- epatch "${FILESDIR}"/${PN}-6.0-gentoo.patch
-}
-
-src_install() {
- mkinstall "LIBDIR=/$(get_libdir)/security" || die "install failed"
-
- dodoc "${FILESDIR}/5.4/README.pamd"
-}
+++ /dev/null
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-pam-modules/freebsd-pam-modules-7.1.ebuild,v 1.1 2009/01/22 21:03:18 the_paya Exp $
-
-inherit bsdmk freebsd multilib pam
-
-DESCRIPTION="FreeBSD's PAM authentication modules"
-SLOT="0"
-KEYWORDS="~x86-fbsd ~sparc-fbsd"
-
-IUSE="kerberos nis"
-
-SRC_URI="mirror://gentoo/${LIB}.tar.bz2"
-
-RDEPEND=">=sys-auth/openpam-20050201-r1
- kerberos? ( dev-libs/openssl
- virtual/krb5 )"
-DEPEND="${RDEPEND}
- =sys-freebsd/freebsd-mk-defs-${RV}*
- =sys-freebsd/freebsd-sources-${RV}*"
-
-S=${WORKDIR}/lib/libpam/modules
-
-pkg_setup() {
- # Avoid installing pam_ssh as that has its own ebuild.
- mymakeopts="${mymakeopts} NO_OPENSSH= "
- use kerberos || mymakeopts="${mymakeopts} NO_KERBEROS= "
- use nis || mymakeopts="${mymakeopts} NO_NIS= "
-}
-
-src_unpack() {
- unpack ${A}
-
- cd "${WORKDIR}"/lib
-
- for module in pam_deny pam_passwdqc pam_permit; do
- sed -i -e "s:${module}::" "${S}"/modules.inc
- done
-
- # Avoid using static versions; use gentoo /lib/security dir
- epatch "${FILESDIR}"/${PN}-6.0-gentoo.patch
-}
-
-src_install() {
- mkinstall "LIBDIR=/$(get_libdir)/security" || die "install failed"
-
- dodoc "${FILESDIR}/README.pamd"
-}
# ChangeLog for sys-freebsd/freebsd-sources
# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-sources/ChangeLog,v 1.53 2010/01/09 16:38:37 aballier Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-sources/ChangeLog,v 1.54 2010/03/11 11:33:21 aballier Exp $
+
+ 11 Mar 2010; Alexis Ballier <aballier@gentoo.org>
+ -freebsd-sources-7.2-r2.ebuild:
+ remove old
*freebsd-sources-7.2-r3 (09 Jan 2010)
+++ /dev/null
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-sources/freebsd-sources-7.2-r2.ebuild,v 1.1 2009/10/16 13:05:27 aballier Exp $
-
-inherit bsdmk freebsd flag-o-matic
-
-DESCRIPTION="FreeBSD kernel sources"
-SLOT="${PVR}"
-KEYWORDS="~sparc-fbsd ~x86-fbsd"
-
-IUSE="symlink"
-
-SRC_URI="mirror://gentoo/${SYS}.tar.bz2"
-
-RDEPEND=">=sys-freebsd/freebsd-mk-defs-7.0"
-DEPEND=""
-
-RESTRICT="strip binchecks"
-
-S="${WORKDIR}/sys"
-
-MY_PVR="${PVR}"
-
-[[ ${MY_PVR} == "${RV}" ]] && MY_PVR="${MY_PVR}-r0"
-
-src_unpack() {
- unpack ${A}
- cd "${S}"
-
- # This replaces the gentoover patch, it doesn't need reapply every time.
- sed -i -e 's:^REVISION=.*:REVISION="'${PVR}'":' \
- -e 's:^BRANCH=.*:BRANCH="Gentoo":' \
- -e 's:^VERSION=.*:VERSION="${TYPE} ${BRANCH} ${REVISION}":' \
- "${S}/conf/newvers.sh"
-
- # __FreeBSD_cc_version comes from FreeBSD's gcc.
- # on 7.0-RELEASE it's 700003.
- sed -e "s:-D_KERNEL:-D_KERNEL -D__FreeBSD_cc_version=700004:g" \
- -i "${S}/conf/kern.pre.mk" \
- -i "${S}/conf/kmod.mk" || die "Couldn't set __FreeBSD_cc_version"
-
- epatch "${FILESDIR}/${PN}-7.0-gentoo.patch"
- epatch "${FILESDIR}/${PN}-6.0-flex-2.5.31.patch"
- epatch "${FILESDIR}/${PN}-7.1-asm.patch"
- epatch "${FILESDIR}/${PN}-7.0-werror.patch"
- epatch "${FILESDIR}/${PN}-7.2-sparc64.patch"
- epatch "${FILESDIR}/${PN}-6.1-ntfs.patch"
- epatch "${FILESDIR}/${PN}-7.2-debug-O2.patch"
- epatch "${FILESDIR}/${PN}-7.1-types.h-fix.patch"
- epatch "${FILESDIR}/${PN}-7.1-subnet-route-pr40133.patch"
- epatch "${FILESDIR}/${PN}-7.1-includes.patch"
- epatch "${FILESDIR}/${PN}-7.2-pipe.patch"
- epatch "${FILESDIR}/${PN}-7.2-ipv6.patch"
- epatch "${FILESDIR}/${PN}-7.2-devfs7.patch"
- epatch "${FILESDIR}/${PN}-7.2-null.patch"
-
- # Disable SSP for the kernel
- grep -Zlr -- -ffreestanding "${S}" | xargs -0 sed -i -e \
- "s:-ffreestanding:-ffreestanding $(test-flags -fno-stack-protector -fno-stack-protector-all):g"
-
- # By adding -DGENTOO_LIVECD to CFLAGS activate this stub
- # vop_whiteout to tmpfs, so it can be used as an overlay
- # unionfs filesystem over the cd9660 readonly filesystem.
- epatch "${FILESDIR}/${PN}-7.0-tmpfs_whiteout_stub.patch"
-
- # See http://sourceware.org/bugzilla/show_bug.cgi?id=5391
- # ld doesn't provide symbols constructed as the __start_set_(s) ones
- # are on FreeBSD modules.
- # This patch adds code to generate a list of these and adds them
- # as undefined references to ld's commandline to get them.
- # Without this kernel modules will not load.
- epatch "${FILESDIR}/${PN}-7.1-binutils_link.patch"
-}
-
-src_compile() {
- einfo "Nothing to compile.."
-}
-
-src_install() {
- insinto "/usr/src/sys-${MY_PVR}"
- doins -r "${S}/"*
-}
-
-pkg_postinst() {
- if [[ ! -L "${ROOT}/usr/src/sys" ]]; then
- einfo "/usr/src/sys symlink doesn't exist; creating symlink to sys-${MY_PVR}..."
- ln -sf "sys-${MY_PVR}" "${ROOT}/usr/src/sys" || \
- eerror "Couldn't create ${ROOT}/usr/src/sys symlink."
- # just in case...
- [[ -L ""${ROOT}/usr/src/sys-${RV}"" ]] && rm "${ROOT}/usr/src/sys-${RV}"
- ln -sf "sys-${MY_PVR}" "${ROOT}/usr/src/sys-${RV}" || \
- eerror "Couldn't create ${ROOT}/usr/src/sys-${RV} symlink."
- elif use symlink; then
- einfo "Updating /usr/src/sys symlink to sys-${MY_PVR}..."
- rm "${ROOT}/usr/src/sys" "${ROOT}/usr/src/sys-${RV}" || \
- eerror "Couldn't remove previous symlinks, please fix manually."
- ln -sf "sys-${MY_PVR}" "${ROOT}/usr/src/sys" || \
- eerror "Couldn't create ${ROOT}/usr/src/sys symlink."
- ln -sf "sys-${MY_PVR}" "${ROOT}/usr/src/sys-${RV}" || \
- eerror "Couldn't create ${ROOT}/usr/src/sys-${RV} symlink."
- fi
-
- if use sparc-fbsd ; then
- ewarn "WARNING: kldload currently causes kernel panics"
- ewarn "on sparc64. This is probably a gcc-4.1 issue, but"
- ewarn "we need gcc-4.1 to compile the kernel correctly :/"
- ewarn "Please compile all modules you need into the kernel"
- fi
-}
projects / gentoo.git / commitdiff