diff options
Diffstat (limited to 'sys-apps')
| -rw-r--r-- | sys-apps/shadow/ChangeLog | 7 | ||||
| -rw-r--r-- | sys-apps/shadow/Manifest | 16 | ||||
| -rw-r--r-- | sys-apps/shadow/files/digest-shadow-4.0.15 | 3 | ||||
| -rw-r--r-- | sys-apps/shadow/shadow-4.0.15.ebuild | 252 |
4 files changed, 267 insertions, 11 deletions
diff --git a/sys-apps/shadow/ChangeLog b/sys-apps/shadow/ChangeLog index efc30dbbf329..d37586b44728 100644 --- a/sys-apps/shadow/ChangeLog +++ b/sys-apps/shadow/ChangeLog @@ -1,6 +1,11 @@ # ChangeLog for sys-apps/shadow # Copyright 1999-2006 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.134 2006/03/17 01:17:16 vapier Exp $ +# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.135 2006/03/21 02:47:49 vapier Exp $ + +*shadow-4.0.15 (21 Mar 2006) + + 21 Mar 2006; Mike Frysinger <vapier@gentoo.org> +shadow-4.0.15.ebuild: + Version bump. *shadow-4.0.14-r3 (17 Mar 2006) diff --git a/sys-apps/shadow/Manifest b/sys-apps/shadow/Manifest index e67ef6374e33..831ac2a3461a 100644 --- a/sys-apps/shadow/Manifest +++ b/sys-apps/shadow/Manifest @@ -1,6 +1,3 @@ ------BEGIN PGP SIGNED MESSAGE----- -Hash: SHA1 - MD5 acd3e2aa1fd51ffa372901a8181ca032 ChangeLog 25066 RMD160 37dee98fd1f6edf4ca337f92ca47fceec2197204 ChangeLog 25066 SHA256 2e27a84fec2ca5c43925773e7aab89a234d78a01dc4afc2d72432b907fcb67f4 ChangeLog 25066 @@ -28,6 +25,9 @@ SHA256 1902d92c71601c84369242225380eea36c18bc3b7b9f676f1806f85e387614cd files/di MD5 e762a86e8069be90d8d92c729a7ea723 files/digest-shadow-4.0.14-r3 247 RMD160 538a905f79791302dcdccc7b0ea73a31bbe89f6b files/digest-shadow-4.0.14-r3 247 SHA256 1902d92c71601c84369242225380eea36c18bc3b7b9f676f1806f85e387614cd files/digest-shadow-4.0.14-r3 247 +MD5 1f78dde9910133ab48d69abc6bd19a88 files/digest-shadow-4.0.15 247 +RMD160 87f79656daa81999e698a293ad570f2ffac99768 files/digest-shadow-4.0.15 247 +SHA256 6bf4f03c338d6ca0336d92c69fe19eb6102202b60b034fd4832fb50398a8e058 files/digest-shadow-4.0.15 247 MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7-r4 66 RMD160 6b4e254fe2230dd1ad173f02310fea6b7a87d7ab files/digest-shadow-4.0.7-r4 66 SHA256 d736922bcacc93c8394219cff03d1a22dffa8b4db05bd6b188db2a2110a33ad2 files/digest-shadow-4.0.7-r4 66 @@ -214,13 +214,9 @@ SHA256 aa038dad4842cd329eafb84000f509f4fb880c9b01270fde4f06ffb96a1cb9b1 shadow-4 MD5 7258193af30043f796ba2979a106be58 shadow-4.0.14-r3.ebuild 7778 RMD160 90766f15e8a335602af5a8656ebbdc155d43bc3b shadow-4.0.14-r3.ebuild 7778 SHA256 d0e2590c629f7ff09945b2c48715f021e061260467f00469f7be8327ca55b476 shadow-4.0.14-r3.ebuild 7778 +MD5 7258193af30043f796ba2979a106be58 shadow-4.0.15.ebuild 7778 +RMD160 90766f15e8a335602af5a8656ebbdc155d43bc3b shadow-4.0.15.ebuild 7778 +SHA256 d0e2590c629f7ff09945b2c48715f021e061260467f00469f7be8327ca55b476 shadow-4.0.15.ebuild 7778 MD5 b2f49d9316731f342a8aee3d826cece9 shadow-4.0.7-r4.ebuild 7174 RMD160 7a795cc523e6d543a33837b4aa9618fe7fbea171 shadow-4.0.7-r4.ebuild 7174 SHA256 0554fbb6eb37686d54ef27c1be211595976b390f3a1a549a807225c91fc3e72a shadow-4.0.7-r4.ebuild 7174 ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1.4.2.2 (GNU/Linux) - -iD8DBQFEHIvT2+ySkm8kpY0RAgGfAKC1f9GU1nPVpdCHB6I62wAc9Ar8xQCgp/B3 -CZAh2pkZMGmq8h/A8tSIIsU= -=UDj5 ------END PGP SIGNATURE----- diff --git a/sys-apps/shadow/files/digest-shadow-4.0.15 b/sys-apps/shadow/files/digest-shadow-4.0.15 new file mode 100644 index 000000000000..13dd58252a59 --- /dev/null +++ b/sys-apps/shadow/files/digest-shadow-4.0.15 @@ -0,0 +1,3 @@ +MD5 a0452fa989f8ba45023cc5a08136568e shadow-4.0.15.tar.bz2 1294860 +RMD160 b7b9ee9469561205037a1eacaa8791f069ba124c shadow-4.0.15.tar.bz2 1294860 +SHA256 e486bdb083df453c2d15ac58887ef45a3006182c0cdb1c6092058ea588be538d shadow-4.0.15.tar.bz2 1294860 diff --git a/sys-apps/shadow/shadow-4.0.15.ebuild b/sys-apps/shadow/shadow-4.0.15.ebuild new file mode 100644 index 000000000000..44003ec8a93a --- /dev/null +++ b/sys-apps/shadow/shadow-4.0.15.ebuild @@ -0,0 +1,252 @@ +# Copyright 1999-2006 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.0.15.ebuild,v 1.1 2006/03/21 02:47:49 vapier Exp $ + +inherit eutils libtool toolchain-funcs flag-o-matic autotools pam + +# We should remove this login after pam-0.78 goes stable. +FORCE_SYSTEMAUTH_UPDATE="no" + +DESCRIPTION="Utilities to deal with user accounts" +HOMEPAGE="http://shadow.pld.org.pl/" +SRC_URI="ftp://ftp.pld.org.pl/software/${PN}/${P}.tar.bz2" + +LICENSE="BSD" +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86" +IUSE="nls pam selinux skey nousuid" + +RDEPEND=">=sys-libs/cracklib-2.7-r3 + pam? ( virtual/pam ) + !sys-apps/pam-login + skey? ( app-admin/skey ) + selinux? ( >=sys-libs/libselinux-1.28 ) + nls? ( virtual/libintl )" +DEPEND="${RDEPEND} + >=sys-apps/portage-2.0.51-r2 + nls? ( sys-devel/gettext )" + +src_unpack() { + unpack ${A} + cd "${S}" + + # uclibc support, corrects NIS usage + epatch "${FILESDIR}"/${PN}-4.0.13-nonis.patch + + # If su should not simulate a login shell, use '/bin/sh' as shell to enable + # running of commands as user with /bin/false as shell, closing bug #15015. + # *** This one could be a security hole; disable for now *** + #epatch "${FILESDIR}"/${P}-nologin-run-sh.patch + + # tweak the default login.defs + epatch "${FILESDIR}"/${PN}-4.0.13-login.defs.patch + + # Make user/group names more flexible #3485 / #22920 + epatch "${FILESDIR}"/${PN}-4.0.13-dots-in-usernames.patch + epatch "${FILESDIR}"/${PN}-4.0.13-long-groupnames.patch + + # Fix compiling with gcc-2.95.x + epatch "${FILESDIR}"/${PN}-4.0.12-gcc2.patch + + # Patch from upstream enables the new environment too early for PAM + epatch "${FILESDIR}"/${PN}-4.0.14-su-fix-environment.patch + + # Some UCLIBC patches + epatch "${FILESDIR}"/${PN}-4.0.11.1-uclibc-missing-l64a.patch + + # lock down setuid perms #47208 + epatch "${FILESDIR}"/${PN}-4.0.11.1-perms.patch + + # Needed by the UCLIBC patches + eautoconf || die + + elibtoolize + epunt_cxx +} + +src_compile() { + append-ldflags $(bindnow-flags) + tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes + econf \ + --disable-desrpc \ + --with-libcrypt \ + --with-libcrack \ + --enable-shared=no \ + --enable-static=yes \ + $(use_with pam libpam) \ + $(use_with skey) \ + $(use_with selinux) \ + $(use_enable nls) \ + || die "bad configure" + emake || die "compile problem" +} + +src_install() { + local perms=4711 + use nousuid && perms=711 + make DESTDIR=${D} suiduperms=${perms} install || die "install problem" + dosym useradd /usr/sbin/adduser + + # Remove libshadow and libmisc; see bug 37725 and the following + # comment from shadow's README.linux: + # Currently, libshadow.a is for internal use only, so if you see + # -lshadow in a Makefile of some other package, it is safe to + # remove it. + rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la} + + insinto /etc + # Using a securetty with devfs device names added + # (compat names kept for non-devfs compatibility) + insopts -m0600 ; doins "${FILESDIR}"/securetty + if ! use pam; then + insopts -m0600 + doins etc/login.access etc/limits + else + newpamd "${FILESDIR}/login.pamd" login + use selinux || sed -i -e '/@selinux@/d' ${D}/etc/pam.d/login + use selinux && sed -i -e 's:@selinux@::g' ${D}/etc/pam.d/login + + insinto /etc + insopts -m0644 + newins "${FILESDIR}/login.defs" login.defs + + # Also install another one that we can use to check if + # we need to update it if FORCE_LOGIN_DEFS = "yes" + [ "${FORCE_LOGIN_DEFS}" = "yes" ] \ + && newins "${FILESDIR}/login.defs" login.defs.new + fi + # Output arch-specific cruft + case $(tc-arch) in + ppc*) echo "hvc0" >> "${D}"/etc/securetty + echo "hvsi0" >> "${D}"/etc/securetty;; + hppa) echo "ttyB0" >> "${D}"/etc/securetty;; + arm) echo "ttyFB0" >> "${D}"/etc/securetty;; + esac + + # needed for 'adduser -D' + insinto /etc/default + insopts -m0600 + doins "${FILESDIR}"/default/useradd + + # move passwd to / to help recover broke systems #64441 + mv "${D}"/usr/bin/passwd "${D}"/bin/ + dosym /bin/passwd /usr/bin/passwd + + if use pam ; then + local INSTALL_SYSTEM_PAMD="yes" + + # Do not install below pam.d files if we have pam-0.78 or later + portageq has_version / '>=sys-libs/pam-0.78' && \ + INSTALL_SYSTEM_PAMD="no" + + for x in "${FILESDIR}"/pam.d-include/*; do + case "${x##*/}" in + "login") + # We do no longer install this one, as its from + # pam-login now. + ;; + "system-auth"|"system-auth-1.1"|"other") + # These we only install if we do not have pam-0.78 + # or later. + [ "${INSTALL_SYSTEM_PAMD}" = "yes" ] && [ -f ${x} ] && \ + dopamd ${x} + ;; + "su") + # Disable support for pam_env and pam_wheel on openpam + has_version sys-libs/pam && dopamd ${x} + ;; + "su-openpam") + has_version sys-libs/openpam && newpamd ${x} su + ;; + *) + [ -f ${x} ] && dopamd ${x} + ;; + esac + done + for x in chage chsh chfn chpasswd newusers \ + user{add,del,mod} group{add,del,mod} ; do + newpamd "${FILESDIR}"/pam.d-include/shadow ${x} + done + + # Only add this one if needed. + if [ "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ]; then + newpamd "${FILESDIR}"/pam.d-include/system-auth-1.1 system-auth.new || \ + die "Failed to install system-auth.new!" + fi + + # remove manpages that pam will install for us + # and/or don't apply when using pam + + find "${D}"/usr/share/man \ + '(' -name 'limits.5*' -o -name 'suauth.5*' ')' \ + -exec rm {} \; + else + insinto /etc + insopts -m0644 + newins etc/login.defs login.defs + fi + + # Remove manpages that are handled by other packages + find "${D}"/usr/share/man \ + '(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \ + -exec rm {} \; + + cd "${S}" + dodoc ChangeLog NEWS TODO + newdoc README README.download + cd doc + dodoc HOWTO LSM README* WISHLIST *.txt +} + +pkg_preinst() { + rm -f "${ROOT}"/etc/pam.d/system-auth.new \ + "${ROOT}/etc/login.defs.new" +} + +pkg_postinst() { + use pam || return 0 + + if [ "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ]; then + local CHECK1=$(md5sum "${ROOT}"/etc/pam.d/system-auth | cut -d ' ' -f 1) + local CHECK2=$(md5sum "${ROOT}"/etc/pam.d/system-auth.new | cut -d ' ' -f 1) + + if [ "${CHECK1}" != "${CHECK2}" ]; then + ewarn "Due to a security issue, ${ROOT}etc/pam.d/system-auth " + ewarn "is being updated automatically. Your old " + ewarn "system-auth will be backed up as:" + ewarn + ewarn " ${ROOT}etc/pam.d/system-auth.bak" + echo + + cp -pPR "${ROOT}"/etc/pam.d/system-auth \ + "${ROOT}"/etc/pam.d/system-auth.bak; + mv -f "${ROOT}"/etc/pam.d/system-auth.new \ + "${ROOT}"/etc/pam.d/system-auth + rm -f "${ROOT}"/etc/pam.d/._cfg????_system-auth + else + rm -f "${ROOT}"/etc/pam.d/system-auth.new + fi + fi + + [ "${FORCE_LOGIN_DEFS}" != "yes" ] && return 0 + + ewarn "Due to a compatibility issue, ${ROOT}etc/login.defs " + ewarn "is being updated automatically. Your old login.defs" + ewarn "will be backed up as: ${ROOT}etc/login.defs.bak" + echo + + local CHECK1="`md5sum ${ROOT}/etc/login.defs | cut -d ' ' -f 1`" + local CHECK2="`md5sum ${ROOT}/etc/login.defs.new | cut -d ' ' -f 1`" + + if [ "${CHECK1}" != "${CHECK2}" ] + then + cp -pPR ${ROOT}/etc/login.defs ${ROOT}/etc/login.defs.bak + mv -f ${ROOT}/etc/login.defs.new ${ROOT}/etc/login.defs + elif [ ! -f ${ROOT}/etc/login.defs ] + then + mv -f ${ROOT}/etc/login.defs.new ${ROOT}/etc/login.defs + else + rm -f ${ROOT}/etc/login.defs.new + fi +} + |