From: Mike Gilbert <floppym@gentoo.org>
Date: Fri, 18 Dec 2015 16:54:42 +0000 (-0500)
Subject: sys-boot/grub: Add postinst warning about security bug
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=293b4ac4d038f4c00cc19a92af728a0fa06edfa2;p=gentoo.git

sys-boot/grub: Add postinst warning about security bug

Package-Manager: portage-2.2.26_p32
---

diff --git a/sys-boot/grub/grub-2.02_beta2-r8.ebuild b/sys-boot/grub/grub-2.02_beta2-r8.ebuild
index abfeffba89f8..90e03995228d 100644
--- a/sys-boot/grub/grub-2.02_beta2-r8.ebuild
+++ b/sys-boot/grub/grub-2.02_beta2-r8.ebuild
@@ -309,5 +309,14 @@ pkg_postinst() {
 		optfeature "Detect other operating systems (grub-mkconfig)" sys-boot/os-prober
 		optfeature "Create rescue media (grub-mkrescue)" dev-libs/libisoburn
 		optfeature "Enable RAID device detection" sys-fs/mdadm
+	else
+		local v
+		for v in ${REPLACING_VERSIONS}; do
+			if ! version_is_at_least 2.02_beta2-r8 ${v}; then
+				ewarn "Please re-run grub2-install to address a security flaw when using"
+				ewarn "username/password authentication in grub."
+				ewarn "See bug 568326 for more information."
+			fi
+		done
 	fi
 }