net-firewall/nftables: Fix permissions for rules.save
authorFrancisco Blas (klondike) Izquierdo Riera <klondike@gentoo.org>
Sat, 7 Sep 2019 20:38:38 +0000 (22:38 +0200)
committerMatthew Thode <prometheanfire@gentoo.org>
Sat, 7 Sep 2019 21:24:11 +0000 (16:24 -0500)
commit73598a5e25d6583dde4f08a34df5073817c5a391
tree7a1a91aef3385617e709c20b7bc0625769162231
parentc5db6bba3492f151a0c52988943287c8cf05fbc1
net-firewall/nftables: Fix permissions for rules.save

Due to a bug, the rules.save file was created with the wrong
permissions which allowed all users to read the file with the
system rules although root privileges are usually required to
do so.

To fix this issue, the following measures have been taken:
* The umask on nftables-mk.sh is now correctly set to 177
* nftables.sh now also sets the umask before saving the rules
* The ebuilds will warn on post installation if the rules.save
  has insecure permissions
* The ebuilds have been bumped to ensure these changes are
  applied

Bug: https://bugs.gentoo.org/691326
Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org>
Package-Manager: Portage-2.3.69, Repoman-2.3.11
Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
net-firewall/nftables/files/libexec/nftables-mk.sh
net-firewall/nftables/files/libexec/nftables.sh
net-firewall/nftables/nftables-0.9.0-r5.ebuild [new file with mode: 0644]
net-firewall/nftables/nftables-0.9.1-r1.ebuild [moved from net-firewall/nftables/nftables-0.9.1.ebuild with 88% similarity]
net-firewall/nftables/nftables-0.9.2-r1.ebuild [moved from net-firewall/nftables/nftables-0.9.2.ebuild with 88% similarity]