Security update
authorDaniel Ahlberg <aliz@gentoo.org>
Fri, 18 Oct 2002 20:23:26 +0000 (20:23 +0000)
committerDaniel Ahlberg <aliz@gentoo.org>
Fri, 18 Oct 2002 20:23:26 +0000 (20:23 +0000)
app-text/tetex/ChangeLog
app-text/tetex/files/digest-tetex-1.0.7-r11 [new file with mode: 0644]
app-text/tetex/files/tetex-1.0.7-r11-gentoo.diff [new file with mode: 0644]
app-text/tetex/tetex-1.0.7-r11.ebuild [new file with mode: 0644]

index c691ffd8767b0955b645dccd06872b3e2776079c..9c4f12a733b118cfd01aa1845446ba91c702be85 100644 (file)
@@ -1,6 +1,11 @@
 # ChangeLog for app-text/tetex
 # Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
-# $Header: /var/cvsroot/gentoo-x86/app-text/tetex/ChangeLog,v 1.14 2002/09/21 10:19:33 azarah Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-text/tetex/ChangeLog,v 1.15 2002/10/18 20:23:26 aliz Exp $
+
+*tetex-1.0.7-r11 (18 Oct 2002)
+
+  18 Oct 2002; Daniel Ahlberg <aliz@gentoo.org> :
+  Security update.
 
   21 Sep 2002; Martin Schlemmer <azarah@gentoo.org> tetex-1.0.7-r10.ebuild :
 
diff --git a/app-text/tetex/files/digest-tetex-1.0.7-r11 b/app-text/tetex/files/digest-tetex-1.0.7-r11
new file mode 100644 (file)
index 0000000..b0dad12
--- /dev/null
@@ -0,0 +1,4 @@
+MD5 2c6da2a45096c2fdc41b8de6a8af1a52 teTeX-src-1.0.7.tar.gz 8040192
+MD5 984530be5cc0dd73738de9d0067bc130 teTeX-texmf-gg-1.0.3.tar.bz2 35037546
+MD5 12925188fdadcd6a970c21bba3269fc2 ec-ready-mf-tfm.tar.gz 386630
+MD5 37393316b285926214c247acd55db743 teTeX-french.tar.gz 268161
diff --git a/app-text/tetex/files/tetex-1.0.7-r11-gentoo.diff b/app-text/tetex/files/tetex-1.0.7-r11-gentoo.diff
new file mode 100644 (file)
index 0000000..b4ebc61
--- /dev/null
@@ -0,0 +1,34 @@
+--- teTeX-1.0/texk/dvipsk/dvips.c.secure       2002-05-28 12:18:55.000000000 +0100
++++ teTeX-1.0/texk/dvipsk/dvips.c      2002-05-28 12:26:38.000000000 +0100
+@@ -64,7 +64,7 @@
+ Boolean cropmarks ;           /* add cropmarks? */
+ Boolean abspage = 0 ;         /* are page numbers absolute? */
+ Boolean tryepsf = 0 ;         /* should we try to make it espf? */
+-Boolean secure = 0 ;          /* make safe for suid */
++Boolean secure = 1 ;          /* make safe for suid */
+ int collatedcopies = 1 ;      /* how many collated copies? */
+ int sectioncopies = 1 ;       /* how many times to repeat each section? */
+ integer pagecopies = 1 ;          /* how many times to repeat each page? */
+@@ -280,7 +280,7 @@
+ "p # First page                     P s Load config.$s                  ",
+ #endif
+ "q*  Run quietly                                                        ",
+-"r*  Reverse order of pages         R   Run securely                    ",
++"r*  Reverse order of pages         R   Run securely (default)          ",
+ "s*  Enclose output in save/restore S # Max section size in pages       ",
+ "t s Paper format                   T c Specify desired page size       ",  
+ "u s PS mapfile                     U*  Disable string param trick      ",
+--- teTeX-1.0/texk/dvipsk/dvips.1.secure       2002-05-28 12:28:59.000000000 +0100
++++ teTeX-1.0/texk/dvipsk/dvips.1      2002-05-28 12:30:59.000000000 +0100
+@@ -328,7 +328,9 @@
+ .I \\\special{psfile="`zcat foo.ps.Z"}
+ or
+ .I \epsffile[72 72 540 720]{"`zcat screendump.ps.gz"}
+-are not executed.
++are not executed.  This is the default; to run insecurely use the
++.B -R0
++option.
+ .TP
+ .B -s
+ Causes the entire global output to be enclosed in a save/restore pair.
+
diff --git a/app-text/tetex/tetex-1.0.7-r11.ebuild b/app-text/tetex/tetex-1.0.7-r11.ebuild
new file mode 100644 (file)
index 0000000..1a40989
--- /dev/null
@@ -0,0 +1,184 @@
+# Copyright 1999-2002 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-text/tetex/tetex-1.0.7-r11.ebuild,v 1.3 2002/10/18 20:23:26 aliz Exp $
+
+IUSE="ncurses X libwww png"
+
+TEXMFSRC="teTeX-texmf-gg-1.0.3.tar.bz2"
+
+S=${WORKDIR}/teTeX-1.0
+DESCRIPTION="teTeX is a complete TeX distribution"
+SRC_URI="ftp://sunsite.informatik.rwth-aachen.de/pub/comp/tex/teTeX/1.0/distrib/sources/teTeX-src-${PV}.tar.gz
+        ftp://ftp.dante.de/pub/tex/systems/unix/teTeX/1.0/contrib/ghibo/${TEXMFSRC}
+        http://www.ibiblio.org/gentoo/distfiles/ec-ready-mf-tfm.tar.gz
+        http://www.ibiblio.org/gentoo/distfiles/teTeX-french.tar.gz"
+HOMEPAGE="http://tug.cs.umb.edu/tetex/"
+
+KEYWORDS="x86 ppc sparc sparc64"
+SLOT="0"
+LICENSE="GPL-2"
+
+DEPEND="sys-apps/ed
+       sys-libs/zlib 
+       X? ( virtual/x11 )
+       png? ( >=media-libs/libpng-1.2.1 )
+       ncurses? ( sys-libs/ncurses )
+       libwww? ( >=net-libs/libwww-5.3.2-r1 )"
+
+RDEPEND=">=sys-devel/perl-5.2
+       dev-util/dialog"
+
+
+src_unpack() {
+
+       unpack teTeX-src-1.0.7.tar.gz
+
+       cd ${S}
+       patch -p1 < ${FILESDIR}/${PF}-gentoo.diff
+       
+       mkdir ${S}/texmf
+       cd ${S}/texmf
+       umask 022
+       echo ">>> Unpacking ${TEXMFSRC}"
+       tar --no-same-owner -xjf ${DISTDIR}/${TEXMFSRC} || die
+       echo ">>> Unpacking ec-ready-mf-tfm.tar.gz"
+       tar --no-same-owner -xzf ${DISTDIR}/ec-ready-mf-tfm.tar.gz -C .. || die
+       echo ">>> Unpacking teTeX-french.tar.gz"
+       tar --no-same-owner -xzf ${DISTDIR}/teTeX-french.tar.gz || die
+
+       # Fixes from way back ... not sure even Achim will
+       # still know why :/
+       cd ${WORKDIR}
+       patch -p0 < ${FILESDIR}/teTeX-1.0-gentoo.diff || die
+       cd ${S}
+       patch -p0 < ${FILESDIR}/teTeX-1.0.dif || die
+
+       # Do not run config stuff
+       patch -p1 < ${FILESDIR}/${P}-dont-run-config.diff || die
+
+       # Fix problem where the *.fmt files are not generated due to the LaTeX
+       # source being older than a year.
+#        local x
+#        for x in `find ${S}/texmf/ -type f -name '*.ini'`
+#        do
+#                cp ${x} ${x}.orig
+#                sed -e '1i \\scrollmode' ${x}.orig > ${x}
+#                rm -f ${x}.orig
+#        done
+
+}
+
+src_compile() {
+
+       local myconf=""
+       use X \
+               && myconf="--with-x" \
+               || myconf="--without-x"
+
+       use libwww \
+               && myconf="${myconf} --with-system-wwwlib \
+                                    --with-libwww-include=/usr/include"
+
+       use png \
+               && myconf="${myconf} --with-system-pnglib"
+
+       
+       use ncurses \
+               && myconf="${myconf} --with-system-ncurses"
+
+       
+       # Does it make sense to compile the included libwww with mysql ?
+
+       ./configure --host=${CHOST} \
+               --prefix=/usr \
+               --bindir=/usr/bin \
+               --datadir=/usr/share \
+               --mandir=/usr/share/man \
+               --infodir=/usr/share/info \
+               --datadir=${S} \
+               --without-texinfo \
+               --without-dialog \
+               --with-system-zlib \
+               --disable-multiplatform \
+               --with-epsfwin \
+               --with-mftalkwin \
+               --with-regiswin \
+               --with-tektronixwin \
+               --with-unitermwin \
+               --with-ps=gs \
+               --enable-ipc \
+               --with-etex \
+               ${myconf} || die
+
+       make texmf=/usr/share/texmf || die
+}
+
+src_install() {
+
+       dodir /usr/share/
+    # Install texmf files
+       einfo "Installing texmf..."
+    mv -f texmf ${D}/usr/share
+               
+       make prefix=${D}/usr \
+               bindir=${D}/usr/bin \
+               datadir=${D}/usr/share \
+               mandir=${D}/usr/share/man/man1 \
+               infodir=${D}/usr/share/info \
+               texmf=${D}/usr/share/texmf \
+               install || die
+
+       dodoc PROBLEMS README
+       docinto texk
+       dodoc texk/ChangeLog texk/README
+       docinto kpathesa
+       cd ${S}/texk/kpathsea
+       dodoc README* NEWS PROJECTS HIER
+       docinto dviljk
+       cd ${S}/texk/dviljk
+       dodoc AUTHORS README NEWS
+       docinto dvipsk
+       cd ${S}/texk/dvipsk
+       dodoc AUTHORS ChangeLog INSTALLATION README
+       docinto makeindexk
+       cd ${S}/texk/makeindexk
+       dodoc CONTRIB COPYING NEWS NOTES PORTING README
+       docinto ps2pkm
+       cd ${S}/texk/ps2pkm
+       dodoc ChangeLog CHANGES.type1 INSTALLATION README* 
+       docinto web2c
+       cd ${S}/texk/web2c
+       dodoc AUTHORS ChangeLog NEWS PROJECTS README
+       docinto xdvik
+       cd ${S}/texk/xdvik
+       dodoc BUGS FAQ README* 
+
+       #fix for conflicting readlink binary:
+       rm -f ${D}/bin/readlink
+       rm -f ${D}/usr/bin/readlink
+       #add /var/cache/fonts directory
+       dodir /var/cache/fonts
+
+       #fix for lousy upstream permisssions on /usr/share/texmf files
+       #NOTE: do not use fowners, as its not recursive ...
+       einfo "Fixing permissions..."
+       chown -R root.root ${D}/usr/share/texmf
+}
+
+pkg_postinst() {
+
+       if [ $ROOT = "/" ]
+       then
+               einfo "Configuring teTeX..."
+               mktexlsr &>/dev/null
+               texlinks &>/dev/null
+               texconfig init &>/dev/null
+               texconfig confall &>/dev/null
+               texconfig font vardir /var/cache/fonts &>/dev/null
+               
+               echo
+               einfo "*** use 'texconfig font rw' to allow all users to generate fonts ***"
+               echo
+       fi
+}
+