net-misc/peervpn: 0.044-r1 revbump for bug 602550

Fix the openrc init script start_post function to use the chown
--no-dereference option in order to prevent privilege escalation
attacks.

X-Gentoo-bug: 602550
X-Gentoo-bug-url: https://bugs.gentoo.org/show_bug.cgi?id=602550

Package-Manager: portage-2.3.3

diff --git a/net-misc/peervpn/files/peervpn.initd b/net-misc/peervpn/files/peervpn.initd
index 3174dc67f683f366b0e9ed5b4a4a27653530986c..0f891b3222184335304f9b7080aa3cf3d032c633 100644 (file)
--- a/net-misc/peervpn/files/peervpn.initd
+++ b/net-misc/peervpn/files/peervpn.initd
@@ -27,5 +27,7 @@ start_pre() {
 }
 
 start_post() {
-       chown "${user}":"${group}" "${logfile}"
+       # Use --no-dereference to prevent privilege escalation
+       # attacks. Fixes bug #602550.
+       chown --no-dereference "${user}":"${group}" "${logfile}"
 }

diff --git a/net-misc/peervpn/peervpn-0.044.ebuild b/net-misc/peervpn/peervpn-0.044-r1.ebuild
similarity index 100%
rename from net-misc/peervpn/peervpn-0.044.ebuild
rename to net-misc/peervpn/peervpn-0.044-r1.ebuild