net-im/openfire: new revision to clean up ownership handling.
authorMichael Orlitzky <mjo@gentoo.org>
Sun, 23 Jun 2019 17:13:53 +0000 (13:13 -0400)
committerMichael Orlitzky <mjo@gentoo.org>
Sun, 23 Jun 2019 17:15:16 +0000 (13:15 -0400)
commitc32aef5d13c57017978860eb65c1c4f5ce88721c
tree3b0d4fb1b2204f63741f2872db911710dbac3abc
parentb8163a1828bcf65ede1b6e55f99d926147575f2f
net-im/openfire: new revision to clean up ownership handling.

The new revision (-r2) is intended to clean up some of the ownership
and group handling that led to the security issue in bug 630914. Note
that while that *particular* bug was fixed, the ebuild was still
calling "chmod" in a user-controlled directory, which is also
exploitable. The following changes hopefully eliminate all of
those problems:

  * Add /opt/openfire/conf to CONFIG_PROTECT.

  * Use insopts/diropts to create everything under /opt/openfire with
    the correct ownership and permissions to begin with.

  * Install conf/openfire.xml and conf/security.xml in src_install(),
    instead of creating (and chmod'ing) them later in pkg_postinst().

  * Drop pkg_postinst() entirely now that we install {openfire,security}.xml
    in src_install().

Bug: https://bugs.gentoo.org/630914
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
Package-Manager: Portage-2.3.66, Repoman-2.3.11
net-im/openfire/openfire-4.2.3-r2.ebuild [new file with mode: 0644]