From: Zac Medico <zmedico@gentoo.org>
Date: Tue, 13 Dec 2016 17:07:46 +0000 (-0800)
Subject: net-misc/peervpn: 0.044-r1 revbump for bug 602550
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=012351c00a0b366bbf052222306cf939e9471db1;p=gentoo.git

net-misc/peervpn: 0.044-r1 revbump for bug 602550

Fix the openrc init script start_post function to use the chown
--no-dereference option in order to prevent privilege escalation
attacks.

X-Gentoo-bug: 602550
X-Gentoo-bug-url: https://bugs.gentoo.org/show_bug.cgi?id=602550

Package-Manager: portage-2.3.3
---

diff --git a/net-misc/peervpn/files/peervpn.initd b/net-misc/peervpn/files/peervpn.initd
index 3174dc67f683..0f891b322218 100644
--- a/net-misc/peervpn/files/peervpn.initd
+++ b/net-misc/peervpn/files/peervpn.initd
@@ -27,5 +27,7 @@ start_pre() {
 }
 
 start_post() {
-	chown "${user}":"${group}" "${logfile}"
+	# Use --no-dereference to prevent privilege escalation
+	# attacks. Fixes bug #602550.
+	chown --no-dereference "${user}":"${group}" "${logfile}"
 }
diff --git a/net-misc/peervpn/peervpn-0.044.ebuild b/net-misc/peervpn/peervpn-0.044-r1.ebuild
similarity index 100%
rename from net-misc/peervpn/peervpn-0.044.ebuild
rename to net-misc/peervpn/peervpn-0.044-r1.ebuild