-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
-MD5 b29b6b428eccb2ad6117a8d5861482d9 ChangeLog 14044
+MD5 f0da2c8a44b0d962b830cd8a6093dcc0 ChangeLog 14217
MD5 9a09f8d531c582e78977dbfd96edc1f2 metadata.xml 164
MD5 f227fddac93c5f27799b9a8c9e34cd2b shadow-4.0.4.1-r3.ebuild 6076
MD5 984c5a15d438d0d1c9c8ee3c83073508 shadow-4.0.4.1-r4.ebuild 5852
+MD5 9bd0579532e4e770a3a5351914f8c7b5 shadow-4.0.5.ebuild 4708
MD5 cef6788bc7c8c5468c1b1f68df77ed9e files/digest-shadow-4.0.4.1-r4 67
MD5 2d2faa6b9a837f9319de52a780485743 files/securetty 243
MD5 058f760e522ab65e270293003805fe61 files/shadow-4.0.4.1-userdel-missing-brackets.patch 380
MD5 a99f871c88548d503bad935d2aa6f412 files/shadow-4.0.4.1-nls-manpages.patch 355
+MD5 d8b8542a7bc013011a293732ca504a50 files/digest-shadow-4.0.5 66
+MD5 c31db5c71b0cdfca75346abc2887aa02 files/shadow-4.0.5-nls-manpages.patch 362
MD5 aaf16ddabef285df169e37254b13561c files/shadow-4.0.4.1-selinux.diff 4296
MD5 201f1321262da41ccd1a0283216ae9a7 files/shadow-4.0.4.1-su-pam_open_session.patch 4886
MD5 bb55107c3a9354ef2d1977547fdb5a83 files/shadow-4.0.4.1-useradd-manpage-update.patch 958
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.9.10 (GNU/Linux)
-iD8DBQFBgYpOHTu7gpaalycRAoILAJ9k5hA11HipTZ1yTRJl20k0gfIOJgCg7WzE
-H7nqJkmenjRKw02dkcUk63U=
-=nYf3
+iD8DBQFBgZ6EHTu7gpaalycRAkP0AKD02szVgKG2KleIRlj9NU21WlsVogCdEITS
+pVXKSsRb6I+PabvDpJasmnM=
+=MvjQ
-----END PGP SIGNATURE-----
--- /dev/null
+# Copyright 1999-2004 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.0.5.ebuild,v 1.1 2004/10/29 01:35:20 vapier Exp $
+
+inherit eutils libtool gnuconfig flag-o-matic
+
+FORCE_SYSTEMAUTH_UPDATE="no"
+SELINUX_PATCH="shadow-4.0.4.1-selinux.diff"
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/"
+SRC_URI="ftp://ftp.pld.org.pl/software/shadow/${P}.tar.bz2"
+
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="-*"
+#KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sparc ~x86"
+IUSE="pam selinux nls skey"
+
+RDEPEND=">=sys-libs/cracklib-2.7-r3
+ pam? ( >=sys-libs/pam-0.75-r4 )
+ skey? ( app-admin/skey )
+ selinux? ( sys-libs/libselinux )"
+DEPEND="${DEPEND}
+ nls? ( sys-devel/gettext )"
+PROVIDE="!pam? ( virtual/login )"
+
+pkg_preinst() {
+ rm -f ${ROOT}/etc/pam.d/system-auth.new
+}
+
+src_unpack() {
+ unpack ${A}
+ cd ${S}
+
+ # uclibc support, corrects NIS usage
+ epatch ${FILESDIR}/shadow-4.0.4.1-nonis.patch
+
+ # If su should not simulate a login shell, use '/bin/sh' as shell to enable
+ # running of commands as user with /bin/false as shell, closing bug #15015.
+ # *** This one could be a security hole; disable for now ***
+ #epatch ${FILESDIR}/${P}-nologin-run-sh.patch
+
+ # don't install manpages if USE=-nls
+ epatch ${FILESDIR}/shadow-${PV}-nls-manpages.patch
+
+ # Allows shadow configure detect newer systems properly
+ gnuconfig_update
+ elibtoolize
+}
+
+src_compile() {
+ append-ldflags -Wl,-z,now
+ econf \
+ --disable-desrpc \
+ --with-libcrypt \
+ --with-libcrack \
+ --enable-shared=no \
+ --enable-static=yes \
+ $(use_with pam libpam) \
+ $(use_with skey libskey) \
+ $(use_with selinux) \
+ $(use_enable nls) \
+ || die "bad configure"
+ emake || die "compile problem"
+}
+
+src_install() {
+ make DESTDIR=${D} install || die "install problem"
+ dosym useradd /usr/sbin/adduser
+
+ # lock down setuid perms #47208
+ fperms go-r /bin/su /usr/bin/ch{fn,sh,age} \
+ /usr/bin/{expiry,newgrp,passwd,gpasswd} || die "fperms"
+
+ # Remove libshadow and libmisc; see bug 37725 and the following
+ # comment from shadow's README.linux:
+ # Currently, libshadow.a is for internal use only, so if you see
+ # -lshadow in a Makefile of some other package, it is safe to
+ # remove it.
+ rm -f ${D}/lib/lib{misc,shadow}.{a,la}
+
+ # Do not install this login, but rather the one from
+ # pam-login, as this one have a serious root exploit
+ # with pam support enabled.
+ use pam && rm ${D}/bin/login
+
+ insinto /etc
+ # Using a securetty with devfs device names added
+ # (compat names kept for non-devfs compatibility)
+ insopts -m0600 ; doins ${FILESDIR}/securetty
+ insopts -m0600 ; doins etc/login.access
+ insopts -m0644 ; doins etc/limits
+
+ # needed for 'adduser -D'
+ insinto /etc/default
+ insopts -m0600
+ doins ${FILESDIR}/default/useradd
+
+ # move passwd to / to help recover broke systems #64441
+ mv ${D}/usr/bin/passwd ${D}/bin/
+ dosym /bin/passwd /usr/bin/passwd
+
+ if use pam ; then
+ insinto /etc/pam.d ; insopts -m0644
+ for x in ${FILESDIR}/pam.d/*; do
+ [ -f ${x} ] && doins ${x}
+ done
+ cd ${FILESDIR}/pam.d
+ # Make sure /etc/pam.d/system-auth is the new version ..
+ mv ${D}/etc/pam.d/system-auth-1.1 ${D}/etc/pam.d/system-auth
+ newins system-auth-1.1 system-auth.new || die
+ for x in chage chsh chfn useradd groupadd ; do
+ newins shadow ${x}
+ done
+
+ # remove manpages that pam will install for us
+ # and/or don't apply when using pam
+
+ find ${D}/usr/share/man \
+ '(' -name 'login.1' -o -name 'suauth.5' ')' \
+ -exec rm {} \;
+ else
+ insopts -m0644
+ doins ${FILESDIR}/login.defs
+ fi
+
+ # Remove manpages that are handled by other packages
+ find ${D}/usr/share/man \
+ '(' -name 'id.1' -o -name 'passwd.5' ')' \
+ -exec rm {} \;
+
+ cd ${S}/doc
+ dodoc INSTALL README WISHLIST
+ docinto txt
+ dodoc HOWTO LSM README.* *.txt
+
+ # ttyB0 is the PDC software console
+ if [ "${ARCH}" = "hppa" ]
+ then
+ echo "ttyB0" >> ${D}/etc/securetty
+ fi
+}
+
+pkg_postinst() {
+ use pam || return 0;
+ local CHECK1="$(md5sum ${ROOT}/etc/pam.d/system-auth | cut -d ' ' -f 1)"
+ local CHECK2="$(md5sum ${ROOT}/etc/pam.d/system-auth.new | cut -d ' ' -f 1)"
+
+ if [ "${CHECK1}" != "${CHECK2}" -a "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ]
+ then
+ ewarn "Due to a security issue, ${ROOT}etc/pam.d/system-auth "
+ ewarn "is being updated automatically. Your old "
+ ewarn "system-auth will be backed up as:"
+ ewarn
+ ewarn " ${ROOT}etc/pam.d/system-auth.bak"
+ echo
+
+ cp -a ${ROOT}/etc/pam.d/system-auth \
+ ${ROOT}/etc/pam.d/system-auth.bak;
+ mv -f ${ROOT}/etc/pam.d/system-auth.new \
+ ${ROOT}/etc/pam.d/system-auth
+ rm -f ${ROOT}/etc/pam.d/._cfg????_system-auth
+ else
+ rm -f ${ROOT}/etc/pam.d/system-auth.new
+ fi
+}
projects / gentoo.git / commitdiff