From: Mike Frysinger Date: Thu, 11 Nov 2004 23:41:41 +0000 (+0000) Subject: old X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=ecd282de3e2ed1a1412c997955ea578548d816e0;p=gentoo.git old --- diff --git a/sys-apps/shadow/Manifest b/sys-apps/shadow/Manifest index 5ad91b70656d..798d25ee34e6 100644 --- a/sys-apps/shadow/Manifest +++ b/sys-apps/shadow/Manifest @@ -1,18 +1,14 @@ MD5 3f73ef5f61bceb1904a8ccc166423c29 ChangeLog 16055 MD5 9a09f8d531c582e78977dbfd96edc1f2 metadata.xml 164 MD5 23ef7363bf5ffa1d0f3343ff2a618e5d shadow-4.0.4.1-r4.ebuild 5943 -MD5 226400fa60e88f85f3185e36b4aab178 shadow-4.0.5-r1.ebuild 5235 MD5 8cd71974166efd4fef349e19012808c8 shadow-4.0.5-r2.ebuild 5474 -MD5 f967b8c89896d0101831a6548ce94a52 shadow-4.0.5.ebuild 5099 MD5 8655bf935e05a93cb06eb04c3186f8a4 shadow-4.0.5-r3.ebuild 5560 MD5 cef6788bc7c8c5468c1b1f68df77ed9e files/digest-shadow-4.0.4.1-r4 67 MD5 2d2faa6b9a837f9319de52a780485743 files/securetty 243 MD5 058f760e522ab65e270293003805fe61 files/shadow-4.0.4.1-userdel-missing-brackets.patch 380 MD5 a99f871c88548d503bad935d2aa6f412 files/shadow-4.0.4.1-nls-manpages.patch 355 -MD5 d8b8542a7bc013011a293732ca504a50 files/digest-shadow-4.0.5 66 MD5 c31db5c71b0cdfca75346abc2887aa02 files/shadow-4.0.5-nls-manpages.patch 362 MD5 636f233fa173a998195016c3808173d4 files/shadow-4.0.5-skey.patch 395 -MD5 d8b8542a7bc013011a293732ca504a50 files/digest-shadow-4.0.5-r1 66 MD5 aaf16ddabef285df169e37254b13561c files/shadow-4.0.4.1-selinux.diff 4296 MD5 201f1321262da41ccd1a0283216ae9a7 files/shadow-4.0.4.1-su-pam_open_session.patch 4886 MD5 bb55107c3a9354ef2d1977547fdb5a83 files/shadow-4.0.4.1-useradd-manpage-update.patch 958 diff --git a/sys-apps/shadow/files/digest-shadow-4.0.5 b/sys-apps/shadow/files/digest-shadow-4.0.5 deleted file mode 100644 index 00b3a379adf1..000000000000 --- a/sys-apps/shadow/files/digest-shadow-4.0.5 +++ /dev/null @@ -1 +0,0 @@ -MD5 cca17a4843a3b5b324a5398faf81c3b4 shadow-4.0.5.tar.bz2 1012361 diff --git a/sys-apps/shadow/files/digest-shadow-4.0.5-r1 b/sys-apps/shadow/files/digest-shadow-4.0.5-r1 deleted file mode 100644 index 00b3a379adf1..000000000000 --- a/sys-apps/shadow/files/digest-shadow-4.0.5-r1 +++ /dev/null @@ -1 +0,0 @@ -MD5 cca17a4843a3b5b324a5398faf81c3b4 shadow-4.0.5.tar.bz2 1012361 diff --git a/sys-apps/shadow/shadow-4.0.5-r1.ebuild b/sys-apps/shadow/shadow-4.0.5-r1.ebuild deleted file mode 100644 index b5b3376dab94..000000000000 --- a/sys-apps/shadow/shadow-4.0.5-r1.ebuild +++ /dev/null @@ -1,183 +0,0 @@ -# Copyright 1999-2004 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.0.5-r1.ebuild,v 1.2 2004/11/03 18:17:04 vapier Exp $ - -inherit eutils libtool gnuconfig flag-o-matic - -FORCE_SYSTEMAUTH_UPDATE="no" -SELINUX_PATCH="shadow-4.0.4.1-selinux.diff" - -DESCRIPTION="Utilities to deal with user accounts" -HOMEPAGE="http://shadow.pld.org.pl/" -SRC_URI="ftp://ftp.pld.org.pl/software/shadow/${P}.tar.bz2" - -LICENSE="BSD" -SLOT="0" -KEYWORDS="alpha amd64 arm hppa ia64 ~mips ppc ppc64 s390 sparc x86" -IUSE="pam selinux nls skey" - -RDEPEND=">=sys-libs/cracklib-2.7-r3 - pam? ( >=sys-libs/pam-0.75-r4 ) - !pam? ( !virtual/login ) - skey? ( app-admin/skey ) - selinux? ( sys-libs/libselinux )" -DEPEND="${DEPEND} - >=sys-apps/portage-2.0.51-r2 - nls? ( sys-devel/gettext )" -#this requires a newer portage (>2.0.51-r2) -#PROVIDE="!pam? ( virtual/login )" - -pkg_preinst() { - rm -f ${ROOT}/etc/pam.d/system-auth.new -} - -src_unpack() { - unpack ${A} - cd ${S} - - # uclibc support, corrects NIS usage - epatch ${FILESDIR}/shadow-4.0.4.1-nonis.patch - - # If su should not simulate a login shell, use '/bin/sh' as shell to enable - # running of commands as user with /bin/false as shell, closing bug #15015. - # *** This one could be a security hole; disable for now *** - #epatch ${FILESDIR}/${P}-nologin-run-sh.patch - - # don't install manpages if USE=-nls - epatch ${FILESDIR}/shadow-${PV}-nls-manpages.patch - - # tweak the default login.defs - epatch ${FILESDIR}/shadow-${PV}-login.defs.patch - - # fix small graphical typo in passwd.1 #68150 - epatch ${FILESDIR}/shadow-4.0.4.1-passwd-typo.patch - - # skeychallenge call needs updating #69741 - epatch ${FILESDIR}/shadow-${PV}-skey.patch - - # remove an extra else #69212 - epatch ${FILESDIR}/shadow-${PV}-remove-else.patch - - # Allows shadow configure detect newer systems properly - gnuconfig_update - elibtoolize -} - -src_compile() { - append-ldflags -Wl,-z,now - econf \ - --disable-desrpc \ - --with-libcrypt \ - --with-libcrack \ - --enable-shared=no \ - --enable-static=yes \ - $(use_with pam libpam) \ - $(use_with skey libskey) \ - $(use_with selinux) \ - $(use_enable nls) \ - || die "bad configure" - emake || die "compile problem" -} - -src_install() { - make DESTDIR=${D} install || die "install problem" - dosym useradd /usr/sbin/adduser - - # lock down setuid perms #47208 - fperms go-r /bin/su /usr/bin/ch{fn,sh,age} \ - /usr/bin/{expiry,newgrp,passwd,gpasswd} || die "fperms" - - # Remove libshadow and libmisc; see bug 37725 and the following - # comment from shadow's README.linux: - # Currently, libshadow.a is for internal use only, so if you see - # -lshadow in a Makefile of some other package, it is safe to - # remove it. - rm -f ${D}/lib/lib{misc,shadow}.{a,la} - - # Do not install this login, but rather the one from - # pam-login, as this one have a serious root exploit - # with pam support enabled. - use pam && rm ${D}/bin/login - - insinto /etc - # Using a securetty with devfs device names added - # (compat names kept for non-devfs compatibility) - insopts -m0600 ; doins ${FILESDIR}/securetty - insopts -m0600 ; doins etc/login.access - insopts -m0644 ; doins etc/limits - - # needed for 'adduser -D' - insinto /etc/default - insopts -m0600 - doins ${FILESDIR}/default/useradd - - # move passwd to / to help recover broke systems #64441 - mv ${D}/usr/bin/passwd ${D}/bin/ - dosym /bin/passwd /usr/bin/passwd - - if use pam ; then - insinto /etc/pam.d ; insopts -m0644 - for x in ${FILESDIR}/pam.d/*; do - [ -f ${x} ] && doins ${x} - done - cd ${FILESDIR}/pam.d - # Make sure /etc/pam.d/system-auth is the new version .. - mv ${D}/etc/pam.d/system-auth-1.1 ${D}/etc/pam.d/system-auth - newins system-auth-1.1 system-auth.new || die - for x in chage chsh chfn chpasswd newusers \ - user{add,del,mod} group{add,del,mod} ; do - newins shadow ${x} - done - - # remove manpages that pam will install for us - # and/or don't apply when using pam - - find ${D}/usr/share/man \ - '(' -name 'login.1' -o -name 'suauth.5' ')' \ - -exec rm {} \; - else - insinto /etc - insopts -m0644 - newins etc/login.defs.linux login.defs - fi - - # Remove manpages that are handled by other packages - find ${D}/usr/share/man \ - '(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \ - -exec rm {} \; - - cd ${S}/doc - dodoc INSTALL README WISHLIST - docinto txt - dodoc HOWTO LSM README.* *.txt - - # ttyB0 is the PDC software console - if [ "${ARCH}" = "hppa" ] - then - echo "ttyB0" >> ${D}/etc/securetty - fi -} - -pkg_postinst() { - use pam || return 0; - local CHECK1="$(md5sum ${ROOT}/etc/pam.d/system-auth | cut -d ' ' -f 1)" - local CHECK2="$(md5sum ${ROOT}/etc/pam.d/system-auth.new | cut -d ' ' -f 1)" - - if [ "${CHECK1}" != "${CHECK2}" -a "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ] - then - ewarn "Due to a security issue, ${ROOT}etc/pam.d/system-auth " - ewarn "is being updated automatically. Your old " - ewarn "system-auth will be backed up as:" - ewarn - ewarn " ${ROOT}etc/pam.d/system-auth.bak" - echo - - cp -a ${ROOT}/etc/pam.d/system-auth \ - ${ROOT}/etc/pam.d/system-auth.bak; - mv -f ${ROOT}/etc/pam.d/system-auth.new \ - ${ROOT}/etc/pam.d/system-auth - rm -f ${ROOT}/etc/pam.d/._cfg????_system-auth - else - rm -f ${ROOT}/etc/pam.d/system-auth.new - fi -} diff --git a/sys-apps/shadow/shadow-4.0.5.ebuild b/sys-apps/shadow/shadow-4.0.5.ebuild deleted file mode 100644 index 0d85a5e41136..000000000000 --- a/sys-apps/shadow/shadow-4.0.5.ebuild +++ /dev/null @@ -1,179 +0,0 @@ -# Copyright 1999-2004 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.0.5.ebuild,v 1.14 2004/11/03 18:17:04 vapier Exp $ - -inherit eutils libtool gnuconfig flag-o-matic - -FORCE_SYSTEMAUTH_UPDATE="no" -SELINUX_PATCH="shadow-4.0.4.1-selinux.diff" - -DESCRIPTION="Utilities to deal with user accounts" -HOMEPAGE="http://shadow.pld.org.pl/" -SRC_URI="ftp://ftp.pld.org.pl/software/shadow/${P}.tar.bz2" - -LICENSE="BSD" -SLOT="0" -KEYWORDS="alpha amd64 arm hppa ia64 ~mips ppc ppc64 s390 sparc x86" -IUSE="pam selinux nls skey" - -RDEPEND=">=sys-libs/cracklib-2.7-r3 - pam? ( >=sys-libs/pam-0.75-r4 ) - !pam? ( !virtual/login ) - skey? ( app-admin/skey ) - selinux? ( sys-libs/libselinux )" -DEPEND="${DEPEND} - >=sys-apps/portage-2.0.51-r2 - nls? ( sys-devel/gettext )" -#this requires a newer portage (>2.0.51-r2) -#PROVIDE="!pam? ( virtual/login )" - -pkg_preinst() { - rm -f ${ROOT}/etc/pam.d/system-auth.new -} - -src_unpack() { - unpack ${A} - cd ${S} - - # uclibc support, corrects NIS usage - epatch ${FILESDIR}/shadow-4.0.4.1-nonis.patch - - # If su should not simulate a login shell, use '/bin/sh' as shell to enable - # running of commands as user with /bin/false as shell, closing bug #15015. - # *** This one could be a security hole; disable for now *** - #epatch ${FILESDIR}/${P}-nologin-run-sh.patch - - # don't install manpages if USE=-nls - epatch ${FILESDIR}/shadow-${PV}-nls-manpages.patch - - # tweak the default login.defs - epatch ${FILESDIR}/shadow-${PV}-login.defs.patch - - # fix small graphical typo in passwd.1 #68150 - epatch ${FILESDIR}/shadow-4.0.4.1-passwd-typo.patch - - # skeychallenge call needs updating #69741 - epatch ${FILESDIR}/shadow-${PV}-skey.patch - - # Allows shadow configure detect newer systems properly - gnuconfig_update - elibtoolize -} - -src_compile() { - append-ldflags -Wl,-z,now - econf \ - --disable-desrpc \ - --with-libcrypt \ - --with-libcrack \ - --enable-shared=no \ - --enable-static=yes \ - $(use_with pam libpam) \ - $(use_with skey libskey) \ - $(use_with selinux) \ - $(use_enable nls) \ - || die "bad configure" - emake || die "compile problem" -} - -src_install() { - make DESTDIR=${D} install || die "install problem" - dosym useradd /usr/sbin/adduser - - # lock down setuid perms #47208 - fperms go-r /bin/su /usr/bin/ch{fn,sh,age} \ - /usr/bin/{expiry,newgrp,passwd,gpasswd} || die "fperms" - - # Remove libshadow and libmisc; see bug 37725 and the following - # comment from shadow's README.linux: - # Currently, libshadow.a is for internal use only, so if you see - # -lshadow in a Makefile of some other package, it is safe to - # remove it. - rm -f ${D}/lib/lib{misc,shadow}.{a,la} - - # Do not install this login, but rather the one from - # pam-login, as this one have a serious root exploit - # with pam support enabled. - use pam && rm ${D}/bin/login - - insinto /etc - # Using a securetty with devfs device names added - # (compat names kept for non-devfs compatibility) - insopts -m0600 ; doins ${FILESDIR}/securetty - insopts -m0600 ; doins etc/login.access - insopts -m0644 ; doins etc/limits - - # needed for 'adduser -D' - insinto /etc/default - insopts -m0600 - doins ${FILESDIR}/default/useradd - - # move passwd to / to help recover broke systems #64441 - mv ${D}/usr/bin/passwd ${D}/bin/ - dosym /bin/passwd /usr/bin/passwd - - if use pam ; then - insinto /etc/pam.d ; insopts -m0644 - for x in ${FILESDIR}/pam.d/*; do - [ -f ${x} ] && doins ${x} - done - cd ${FILESDIR}/pam.d - # Make sure /etc/pam.d/system-auth is the new version .. - mv ${D}/etc/pam.d/system-auth-1.1 ${D}/etc/pam.d/system-auth - newins system-auth-1.1 system-auth.new || die - for x in chage chsh chfn useradd groupadd ; do - newins shadow ${x} - done - - # remove manpages that pam will install for us - # and/or don't apply when using pam - - find ${D}/usr/share/man \ - '(' -name 'login.1' -o -name 'suauth.5' ')' \ - -exec rm {} \; - else - insinto /etc - insopts -m0644 - newins etc/login.defs.linux login.defs - fi - - # Remove manpages that are handled by other packages - find ${D}/usr/share/man \ - '(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \ - -exec rm {} \; - - cd ${S}/doc - dodoc INSTALL README WISHLIST - docinto txt - dodoc HOWTO LSM README.* *.txt - - # ttyB0 is the PDC software console - if [ "${ARCH}" = "hppa" ] - then - echo "ttyB0" >> ${D}/etc/securetty - fi -} - -pkg_postinst() { - use pam || return 0; - local CHECK1="$(md5sum ${ROOT}/etc/pam.d/system-auth | cut -d ' ' -f 1)" - local CHECK2="$(md5sum ${ROOT}/etc/pam.d/system-auth.new | cut -d ' ' -f 1)" - - if [ "${CHECK1}" != "${CHECK2}" -a "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ] - then - ewarn "Due to a security issue, ${ROOT}etc/pam.d/system-auth " - ewarn "is being updated automatically. Your old " - ewarn "system-auth will be backed up as:" - ewarn - ewarn " ${ROOT}etc/pam.d/system-auth.bak" - echo - - cp -a ${ROOT}/etc/pam.d/system-auth \ - ${ROOT}/etc/pam.d/system-auth.bak; - mv -f ${ROOT}/etc/pam.d/system-auth.new \ - ${ROOT}/etc/pam.d/system-auth - rm -f ${ROOT}/etc/pam.d/._cfg????_system-auth - else - rm -f ${ROOT}/etc/pam.d/system-auth.new - fi -}