app-admin/tenshi: new revision with tenshi.conf owned by root:root.

The tenshi.conf file was owned by the "tenshi" user in previous
revisions. This was open to exploitation because that conf file
contains two important settings:

  1. The UID that the daemon will run as.
  2. The "tail" command to be run on the logfiles.

If the "tenshi" user can write to it, he can specify an arbitrary
command to be run as an arbitrary UID the next time the daemon is
started.

Thanks to Brian De Wolf for noticing the problem.

Package-Manager: Portage-2.3.6, Repoman-2.3.1

diff --git a/app-admin/tenshi/tenshi-0.16.ebuild b/app-admin/tenshi/tenshi-0.16-r1.ebuild
similarity index 96%
rename from app-admin/tenshi/tenshi-0.16.ebuild
rename to app-admin/tenshi/tenshi-0.16-r1.ebuild
index 5ea26981d82ed4099878a19534de5629e8eddbb5..45059dc892f45e556039f19cd1ca5253f259fcff 100644 (file)
--- a/app-admin/tenshi/tenshi-0.16.ebuild
+++ b/app-admin/tenshi/tenshi-0.16-r1.ebuild
@@ -32,7 +32,6 @@ src_prepare() {
 
 src_install() {
        emake DESTDIR="${D}" install
-       fowners tenshi:root /etc/tenshi/tenshi.conf
        doman tenshi.8
        newinitd tenshi.openrc-init tenshi