fix for time attack

diff --git a/net-ftp/proftpd/ChangeLog b/net-ftp/proftpd/ChangeLog
index ad019ec4cdece52dfbb0fe9a06489a51c1eccd7b..9d1785d4e6d8e3a7cd221ef232fbb4312d9ad417 100644 (file)
--- a/net-ftp/proftpd/ChangeLog
+++ b/net-ftp/proftpd/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for net-ftp/proftpd
 # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-ftp/proftpd/ChangeLog,v 1.75 2004/11/23 00:05:33 swegener Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-ftp/proftpd/ChangeLog,v 1.76 2004/11/26 15:34:56 humpback Exp $
+
+*proftpd-1.2.10-r1 (26 Nov 2004)
+
+  26 Nov 2004; Gustavo Felisberto <humpback@gentoo.org>;
+  +proftpd-1.2.10-r1.ebuild:
+  Adding version 1.2.10-r1 with fix for time attack bug
+  #http://bugs.gentoo.org/show_bug.cgi?id=67648
 
   23 Nov 2004; Sven Wegener <swegener@gentoo.org> :
   Fixed digest.

diff --git a/net-ftp/proftpd/Manifest b/net-ftp/proftpd/Manifest
index ccc483404fb9ab5cf36b48224b7dbe89ece81ba6..d97fd37d1b30d4fb45bb2e093c55718cbca0d9f1 100644 (file)
--- a/net-ftp/proftpd/Manifest
+++ b/net-ftp/proftpd/Manifest
@@ -1,27 +1,19 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
-MD5 3a0fc9def548faa16ed6e52a3e698ab1 proftpd-1.2.8.ebuild 2729
-MD5 4cc98eb1b4b8be1479ba8965bb49bc70 proftpd-1.2.7.ebuild 3662
-MD5 50ccc531b10541be2ca6732b0889a732 proftpd-1.2.10.ebuild 4137
-MD5 0d90e8b269a1ecc98898c5ecbd14ac08 ChangeLog 12153
+MD5 98423c74d1470ceb221fa58d4298a2b7 ChangeLog 12378
 MD5 b47207aedd0149443faa2152950714ed metadata.xml 401
+MD5 3f873fa5dd7365f689ab1b565f1c4b50 proftpd-1.2.10-r1.ebuild 4397
+MD5 50ccc531b10541be2ca6732b0889a732 proftpd-1.2.10.ebuild 4137
+MD5 4cc98eb1b4b8be1479ba8965bb49bc70 proftpd-1.2.7.ebuild 3662
+MD5 3a0fc9def548faa16ed6e52a3e698ab1 proftpd-1.2.8.ebuild 2729
 MD5 a28b579450718c5bc4b60c168e015459 proftpd-1.2.9-r2.ebuild 3438
-MD5 b00999f820f1e46a501ce4fcaeb5fe23 files/proftpd-1.2.9-makefile.patch 434
-MD5 55ca24c9ee61b9ed94968c664baaeace files/proftpd.rc6 731
-MD5 b338504ed873219e368abab7df6c276d files/proftpd.conf 1704
+MD5 e558f099037d359da5f855285542246e files/1.2.9_rc3-reversedns.diff 1974
+MD5 fa041c7b343099eef454338152a04ea7 files/digest-proftpd-1.2.10 67
+MD5 52697b758d9c85e63c881592c5a8bb02 files/digest-proftpd-1.2.10-r1 213
 MD5 c1dc1d9278d5b77f53ea44ee848dafc6 files/digest-proftpd-1.2.7 211
 MD5 cb6cd6133728449d0da092b1d6147b9d files/digest-proftpd-1.2.8 66
+MD5 6c1a92fc601780a49fdfc01aaf483b69 files/digest-proftpd-1.2.9-r2 66
 MD5 0cf02f8c82f22e714b8299e7b7907d8f files/mod_sql_postgres.c.patch 275
-MD5 4d676b70c97bc6daabd8c2ba8d52d27a files/proftpd.xinetd 295
-MD5 fa041c7b343099eef454338152a04ea7 files/digest-proftpd-1.2.10 67
+MD5 b00999f820f1e46a501ce4fcaeb5fe23 files/proftpd-1.2.9-makefile.patch 434
 MD5 50955f0d375360841d50a82b9589e435 files/proftpd-1.2.9-privescal-fix.patch 588
-MD5 6c1a92fc601780a49fdfc01aaf483b69 files/digest-proftpd-1.2.9-r2 66
-MD5 e558f099037d359da5f855285542246e files/1.2.9_rc3-reversedns.diff 1974
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.9.10 (GNU/Linux)
-
-iD8DBQFBon7TI1lqEGTUzyQRAisTAJ978PiS1HUFe1NPxlEXgaHOkVmo2wCgkMTL
-7rwJuYs482mC6ZWXyKDLsb0=
-=3pkY
------END PGP SIGNATURE-----
+MD5 b338504ed873219e368abab7df6c276d files/proftpd.conf 1704
+MD5 55ca24c9ee61b9ed94968c664baaeace files/proftpd.rc6 731
+MD5 4d676b70c97bc6daabd8c2ba8d52d27a files/proftpd.xinetd 295

diff --git a/net-ftp/proftpd/files/digest-proftpd-1.2.10-r1 b/net-ftp/proftpd/files/digest-proftpd-1.2.10-r1
new file mode 100644 (file)
index 0000000..6e5808e
--- /dev/null
+++ b/net-ftp/proftpd/files/digest-proftpd-1.2.10-r1
@@ -0,0 +1,3 @@
+MD5 5feb4a7348e12faefc25e34fd92efdd6 proftpd-1.2.10.tar.bz2 920337
+MD5 ca3d63ffbc6ad5b6a9063f79b36d1b55 proftpd-mod-shaper-0.5.5.tar.gz 18090
+MD5 f1dba4f32dcabef8651bb3cd7cebb756 proftpd-mod-delay-0.4.tar.gz 7412

diff --git a/net-ftp/proftpd/proftpd-1.2.10-r1.ebuild b/net-ftp/proftpd/proftpd-1.2.10-r1.ebuild
new file mode 100644 (file)
index 0000000..a58ee03
--- /dev/null
+++ b/net-ftp/proftpd/proftpd-1.2.10-r1.ebuild
@@ -0,0 +1,160 @@
+# Copyright 1999-2004 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-ftp/proftpd/proftpd-1.2.10-r1.ebuild,v 1.1 2004/11/26 15:34:56 humpback Exp $
+
+inherit flag-o-matic eutils
+
+#Mod shaper is giving problems on some machines
+IUSE="hardened ipv6 ldap mysql pam postgres shaper softquota ssl tcpd selinux"
+#IUSE="hardened ipv6 ldap mysql pam postgres softquota ssl tcpd selinux"
+
+MY_P=${P/_/}
+S=${WORKDIR}/${MY_P}
+
+DESCRIPTION="An advanced and very configurable FTP server"
+SRC_URI="ftp://ftp.proftpd.org/distrib/source/${MY_P}.tar.bz2
+               shaper? http://www.castaglia.org/${PN}/modules/${PN}-mod-shaper-0.5.5.tar.gz
+               http://www.castaglia.org/${PN}/modules/${PN}-mod-delay-0.4.tar.gz"
+HOMEPAGE="http://www.proftpd.org/"
+
+SLOT="0"
+LICENSE="GPL-2"
+KEYWORDS="~x86 ~sparc ~hppa ~alpha ~ppc ~mips ~amd64"
+
+DEPEND="pam? ( >=sys-libs/pam-0.75 )
+       mysql? ( >=dev-db/mysql-3.23.26 )
+       ldap? ( >=net-nds/openldap-1.2.11 )
+       postgres? ( >=dev-db/postgresql-7.3 )
+       ssl? ( >=dev-libs/openssl-0.9.6f )
+       tcpd? ( >=sys-apps/tcp-wrappers-7.6-r3 )"
+
+RDEPEND="selinux? ( sec-policy/selinux-ftpd )"
+
+src_unpack() {
+       unpack ${MY_P}.tar.bz2
+       cd ${S}
+       unpack ${PN}-mod-delay-0.4.tar.gz
+       mv mod_delay/mod_delay.c contrib
+       if use shaper; then
+               unpack ${PN}-mod-shaper-0.5.5.tar.gz
+               mv mod_shaper/mod_shaper.c contrib/
+       fi
+}
+
+src_compile() {
+       local modules myconf
+
+       modules="mod_ratio:mod_readme:mod_delay"
+       use pam && modules="${modules}:mod_auth_pam"
+       use tcpd && modules="${modules}:mod_wrap"
+       use shaper && modules="${modules}:mod_shaper"
+
+       if use ldap; then
+               einfo ldap
+               modules="${modules}:mod_ldap"
+               append-ldflags "-lresolv"
+       fi
+
+       if use ssl; then
+               einfo ssl
+               # enable mod_tls
+               modules="${modules}:mod_tls"
+       fi
+
+       if use mysql && use postgres
+       then
+               ewarn "ProFTPD only supports either the MySQL or PostgreSQL modules."
+               ewarn "Presently this ebuild defaults to mysql. If you would like to"
+               ewarn "change the default behaviour, merge ProFTPD with;"
+               ewarn "USE=\"-mysql postgres\" emerge proftpd"
+               epause 5
+       fi
+
+       if use mysql; then
+               modules="${modules}:mod_sql:mod_sql_mysql"
+               myconf="--with-includes=/usr/include/mysql"
+       elif use postgres; then
+               modules="${modules}:mod_sql:mod_sql_postgres"
+               myconf="--with-includes=/usr/include/postgresql"
+       fi
+
+       if use softquota; then
+               modules="${modules}:mod_quotatab"
+               if use mysql || use postgres; then
+                       modules="${modules}:mod_quotatab_sql"
+               elif use ldap; then
+                       modules="${modules}:mod_quotatab_file:mod_quotatab_ldap"
+               else
+                       modules="${modules}:mod_quotatab_file"
+               fi
+       fi
+
+       # New modules for 1.2.9
+       # Not sure how these should be enabled yet as no use variables
+       # apply currently.  Uncomment if you want to use them though.
+       # -raker 06/16/2003
+       #
+       # modules="${modules}:mod_ifsession"
+       # modules="${modules}:mod_radius"
+       # modules="${modules}:mod_rewrite"
+
+       # bug #30359
+       use hardened && echo > lib/libcap/cap_sys.c
+       has_pic && echo > lib/libcap/cap_sys.c
+
+       econf \
+               --sbindir=/usr/sbin \
+               --localstatedir=/var/run \
+               --sysconfdir=/etc/proftpd \
+               --enable-shadow \
+               --disable-sendfile \
+               --enable-autoshadow \
+               --enable-ctrls \
+               --with-modules=${modules} \
+               ${myconf} $( use_enable ipv6 ) || die "bad ./configure"
+
+       emake || die "compile problem"
+}
+
+src_install() {
+       # Note rundir needs to be specified to avoid sandbox violation
+       # on initial install. See Make.rules
+       make DESTDIR=${D} install || die
+
+       keepdir /home/ftp
+       keepdir /var/run/proftpd
+
+       dodoc contrib/README.mod_sql ${FILESDIR}/proftpd.conf \
+               COPYING CREDITS ChangeLog NEWS README* \
+               doc/{license.txt,GetConf}
+       dohtml doc/*.html
+       dohtml mod_delay/mod_delay.html
+       use shaper && dohtml mod_shaper/mod_shaper.html
+       docinto rfc
+       dodoc doc/rfc/*.txt
+
+       mv ${D}/etc/proftpd/proftpd.conf ${D}/etc/proftpd/proftpd.conf.distrib
+
+       insinto /etc/proftpd
+       newins ${FILESDIR}/proftpd.conf proftpd.conf.sample
+
+       if use pam; then
+               insinto /etc/pam.d
+               newins ${S}/contrib/dist/rpm/ftp.pamd ftp
+       fi
+
+       insinto /etc/xinetd.d
+       newins ${FILESDIR}/proftpd.xinetd proftpd
+
+       exeinto /etc/init.d ; newexe ${FILESDIR}/proftpd.rc6 proftpd
+}
+
+pkg_postinst() {
+       groupadd proftpd &>/dev/null
+       id proftpd &>/dev/null || \
+               useradd -g proftpd -d /home/ftp -s /bin/false proftpd
+       einfo
+       einfo 'You can find the config files in /etc/proftpd'
+       einfo
+       einfo 'For info on the mod_delay please read mod_delay.html in the doc dir'
+}