From ee080d713de91f83b1f3a5897758faef21f9e7b3 Mon Sep 17 00:00:00 2001 From: Mike Frysinger Date: Fri, 29 Oct 2004 01:35:20 +0000 Subject: [PATCH] ver bump --- sys-apps/shadow/ChangeLog | 8 +- sys-apps/shadow/Manifest | 11 +- sys-apps/shadow/files/digest-shadow-4.0.5 | 1 + .../files/shadow-4.0.5-nls-manpages.patch | 14 ++ sys-apps/shadow/shadow-4.0.5.ebuild | 167 ++++++++++++++++++ 5 files changed, 196 insertions(+), 5 deletions(-) create mode 100644 sys-apps/shadow/files/digest-shadow-4.0.5 create mode 100644 sys-apps/shadow/files/shadow-4.0.5-nls-manpages.patch create mode 100644 sys-apps/shadow/shadow-4.0.5.ebuild diff --git a/sys-apps/shadow/ChangeLog b/sys-apps/shadow/ChangeLog index fa21660be124..0f3394608433 100644 --- a/sys-apps/shadow/ChangeLog +++ b/sys-apps/shadow/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for sys-apps/shadow # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.73 2004/10/16 20:47:20 vapier Exp $ +# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.74 2004/10/29 01:35:20 vapier Exp $ + +*shadow-4.0.5 (28 Oct 2004) + + 28 Oct 2004; Mike Frysinger + +files/shadow-4.0.5-nls-manpages.patch, +shadow-4.0.5.ebuild: + Version bump #69212 by me. 16 Oct 2004; Mike Frysinger +files/shadow-4.0.4.1-nls-manpages.patch: diff --git a/sys-apps/shadow/Manifest b/sys-apps/shadow/Manifest index 4602faef3c70..8e24b7a09d3d 100644 --- a/sys-apps/shadow/Manifest +++ b/sys-apps/shadow/Manifest @@ -1,14 +1,17 @@ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 -MD5 b29b6b428eccb2ad6117a8d5861482d9 ChangeLog 14044 +MD5 f0da2c8a44b0d962b830cd8a6093dcc0 ChangeLog 14217 MD5 9a09f8d531c582e78977dbfd96edc1f2 metadata.xml 164 MD5 f227fddac93c5f27799b9a8c9e34cd2b shadow-4.0.4.1-r3.ebuild 6076 MD5 984c5a15d438d0d1c9c8ee3c83073508 shadow-4.0.4.1-r4.ebuild 5852 +MD5 9bd0579532e4e770a3a5351914f8c7b5 shadow-4.0.5.ebuild 4708 MD5 cef6788bc7c8c5468c1b1f68df77ed9e files/digest-shadow-4.0.4.1-r4 67 MD5 2d2faa6b9a837f9319de52a780485743 files/securetty 243 MD5 058f760e522ab65e270293003805fe61 files/shadow-4.0.4.1-userdel-missing-brackets.patch 380 MD5 a99f871c88548d503bad935d2aa6f412 files/shadow-4.0.4.1-nls-manpages.patch 355 +MD5 d8b8542a7bc013011a293732ca504a50 files/digest-shadow-4.0.5 66 +MD5 c31db5c71b0cdfca75346abc2887aa02 files/shadow-4.0.5-nls-manpages.patch 362 MD5 aaf16ddabef285df169e37254b13561c files/shadow-4.0.4.1-selinux.diff 4296 MD5 201f1321262da41ccd1a0283216ae9a7 files/shadow-4.0.4.1-su-pam_open_session.patch 4886 MD5 bb55107c3a9354ef2d1977547fdb5a83 files/shadow-4.0.4.1-useradd-manpage-update.patch 958 @@ -26,7 +29,7 @@ MD5 1baa646400c4a596290e9d4b9e1c09b2 files/pam.d/system-auth-1.1 491 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.9.10 (GNU/Linux) -iD8DBQFBgYpOHTu7gpaalycRAoILAJ9k5hA11HipTZ1yTRJl20k0gfIOJgCg7WzE -H7nqJkmenjRKw02dkcUk63U= -=nYf3 +iD8DBQFBgZ6EHTu7gpaalycRAkP0AKD02szVgKG2KleIRlj9NU21WlsVogCdEITS +pVXKSsRb6I+PabvDpJasmnM= +=MvjQ -----END PGP SIGNATURE----- diff --git a/sys-apps/shadow/files/digest-shadow-4.0.5 b/sys-apps/shadow/files/digest-shadow-4.0.5 new file mode 100644 index 000000000000..00b3a379adf1 --- /dev/null +++ b/sys-apps/shadow/files/digest-shadow-4.0.5 @@ -0,0 +1 @@ +MD5 cca17a4843a3b5b324a5398faf81c3b4 shadow-4.0.5.tar.bz2 1012361 diff --git a/sys-apps/shadow/files/shadow-4.0.5-nls-manpages.patch b/sys-apps/shadow/files/shadow-4.0.5-nls-manpages.patch new file mode 100644 index 000000000000..39228d0ecc01 --- /dev/null +++ b/sys-apps/shadow/files/shadow-4.0.5-nls-manpages.patch @@ -0,0 +1,14 @@ +--- man/Makefile.in.orig 2004-10-16 16:44:32.554707920 -0400 ++++ man/Makefile.in 2004-10-16 16:44:52.870619432 -0400 +@@ -153,7 +153,11 @@ + target_alias = @target_alias@ + + # subdirectories for translated manual pages ++ifeq ($(USE_NLS),no) ++SUBDIRS = ++else + SUBDIRS = cs de es fr hu id it ja ko pl pt_BR ru zh_CN zh_TW ++endif + man_MANS = \ + chage.1 \ + chfn.1 \ diff --git a/sys-apps/shadow/shadow-4.0.5.ebuild b/sys-apps/shadow/shadow-4.0.5.ebuild new file mode 100644 index 000000000000..1a2f748974d9 --- /dev/null +++ b/sys-apps/shadow/shadow-4.0.5.ebuild @@ -0,0 +1,167 @@ +# Copyright 1999-2004 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.0.5.ebuild,v 1.1 2004/10/29 01:35:20 vapier Exp $ + +inherit eutils libtool gnuconfig flag-o-matic + +FORCE_SYSTEMAUTH_UPDATE="no" +SELINUX_PATCH="shadow-4.0.4.1-selinux.diff" + +DESCRIPTION="Utilities to deal with user accounts" +HOMEPAGE="http://shadow.pld.org.pl/" +SRC_URI="ftp://ftp.pld.org.pl/software/shadow/${P}.tar.bz2" + +LICENSE="BSD" +SLOT="0" +KEYWORDS="-*" +#KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sparc ~x86" +IUSE="pam selinux nls skey" + +RDEPEND=">=sys-libs/cracklib-2.7-r3 + pam? ( >=sys-libs/pam-0.75-r4 ) + skey? ( app-admin/skey ) + selinux? ( sys-libs/libselinux )" +DEPEND="${DEPEND} + nls? ( sys-devel/gettext )" +PROVIDE="!pam? ( virtual/login )" + +pkg_preinst() { + rm -f ${ROOT}/etc/pam.d/system-auth.new +} + +src_unpack() { + unpack ${A} + cd ${S} + + # uclibc support, corrects NIS usage + epatch ${FILESDIR}/shadow-4.0.4.1-nonis.patch + + # If su should not simulate a login shell, use '/bin/sh' as shell to enable + # running of commands as user with /bin/false as shell, closing bug #15015. + # *** This one could be a security hole; disable for now *** + #epatch ${FILESDIR}/${P}-nologin-run-sh.patch + + # don't install manpages if USE=-nls + epatch ${FILESDIR}/shadow-${PV}-nls-manpages.patch + + # Allows shadow configure detect newer systems properly + gnuconfig_update + elibtoolize +} + +src_compile() { + append-ldflags -Wl,-z,now + econf \ + --disable-desrpc \ + --with-libcrypt \ + --with-libcrack \ + --enable-shared=no \ + --enable-static=yes \ + $(use_with pam libpam) \ + $(use_with skey libskey) \ + $(use_with selinux) \ + $(use_enable nls) \ + || die "bad configure" + emake || die "compile problem" +} + +src_install() { + make DESTDIR=${D} install || die "install problem" + dosym useradd /usr/sbin/adduser + + # lock down setuid perms #47208 + fperms go-r /bin/su /usr/bin/ch{fn,sh,age} \ + /usr/bin/{expiry,newgrp,passwd,gpasswd} || die "fperms" + + # Remove libshadow and libmisc; see bug 37725 and the following + # comment from shadow's README.linux: + # Currently, libshadow.a is for internal use only, so if you see + # -lshadow in a Makefile of some other package, it is safe to + # remove it. + rm -f ${D}/lib/lib{misc,shadow}.{a,la} + + # Do not install this login, but rather the one from + # pam-login, as this one have a serious root exploit + # with pam support enabled. + use pam && rm ${D}/bin/login + + insinto /etc + # Using a securetty with devfs device names added + # (compat names kept for non-devfs compatibility) + insopts -m0600 ; doins ${FILESDIR}/securetty + insopts -m0600 ; doins etc/login.access + insopts -m0644 ; doins etc/limits + + # needed for 'adduser -D' + insinto /etc/default + insopts -m0600 + doins ${FILESDIR}/default/useradd + + # move passwd to / to help recover broke systems #64441 + mv ${D}/usr/bin/passwd ${D}/bin/ + dosym /bin/passwd /usr/bin/passwd + + if use pam ; then + insinto /etc/pam.d ; insopts -m0644 + for x in ${FILESDIR}/pam.d/*; do + [ -f ${x} ] && doins ${x} + done + cd ${FILESDIR}/pam.d + # Make sure /etc/pam.d/system-auth is the new version .. + mv ${D}/etc/pam.d/system-auth-1.1 ${D}/etc/pam.d/system-auth + newins system-auth-1.1 system-auth.new || die + for x in chage chsh chfn useradd groupadd ; do + newins shadow ${x} + done + + # remove manpages that pam will install for us + # and/or don't apply when using pam + + find ${D}/usr/share/man \ + '(' -name 'login.1' -o -name 'suauth.5' ')' \ + -exec rm {} \; + else + insopts -m0644 + doins ${FILESDIR}/login.defs + fi + + # Remove manpages that are handled by other packages + find ${D}/usr/share/man \ + '(' -name 'id.1' -o -name 'passwd.5' ')' \ + -exec rm {} \; + + cd ${S}/doc + dodoc INSTALL README WISHLIST + docinto txt + dodoc HOWTO LSM README.* *.txt + + # ttyB0 is the PDC software console + if [ "${ARCH}" = "hppa" ] + then + echo "ttyB0" >> ${D}/etc/securetty + fi +} + +pkg_postinst() { + use pam || return 0; + local CHECK1="$(md5sum ${ROOT}/etc/pam.d/system-auth | cut -d ' ' -f 1)" + local CHECK2="$(md5sum ${ROOT}/etc/pam.d/system-auth.new | cut -d ' ' -f 1)" + + if [ "${CHECK1}" != "${CHECK2}" -a "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ] + then + ewarn "Due to a security issue, ${ROOT}etc/pam.d/system-auth " + ewarn "is being updated automatically. Your old " + ewarn "system-auth will be backed up as:" + ewarn + ewarn " ${ROOT}etc/pam.d/system-auth.bak" + echo + + cp -a ${ROOT}/etc/pam.d/system-auth \ + ${ROOT}/etc/pam.d/system-auth.bak; + mv -f ${ROOT}/etc/pam.d/system-auth.new \ + ${ROOT}/etc/pam.d/system-auth + rm -f ${ROOT}/etc/pam.d/._cfg????_system-auth + else + rm -f ${ROOT}/etc/pam.d/system-auth.new + fi +} -- 2.26.2