net-im/openfire: new revision to clean up ownership handling.
The new revision (-r2) is intended to clean up some of the ownership
and group handling that led to the security issue in bug 630914. Note
that while that *particular* bug was fixed, the ebuild was still
calling "chmod" in a user-controlled directory, which is also
exploitable. The following changes hopefully eliminate all of
those problems:
* Add /opt/openfire/conf to CONFIG_PROTECT.
* Use insopts/diropts to create everything under /opt/openfire with
the correct ownership and permissions to begin with.
* Install conf/openfire.xml and conf/security.xml in src_install(),
instead of creating (and chmod'ing) them later in pkg_postinst().
* Drop pkg_postinst() entirely now that we install {openfire,security}.xml
in src_install().
Bug: https://bugs.gentoo.org/630914
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
Package-Manager: Portage-2.3.66, Repoman-2.3.11