Bump for security fixes, bug #206847 and part of bug #209889, aka http://security.freebsd.org/advisories/FreeBSD-SA-08:01.pty.asc and http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc

Package-Manager: portage-2.1.5

5 files changed, 441 insertions, 3 deletions

diff --git a/sys-freebsd/freebsd-lib/ChangeLog b/sys-freebsd/freebsd-lib/ChangeLog
index 73c0310e0866..2cf851d35c85 100644
--- a/sys-freebsd/freebsd-lib/ChangeLog
+++ b/sys-freebsd/freebsd-lib/ChangeLog
@@ -1,6 +1,15 @@
 # ChangeLog for sys-freebsd/freebsd-lib
-# Copyright 1999-2007 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-lib/ChangeLog,v 1.58 2007/11/03 02:24:26 uberlord Exp $
+# Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-lib/ChangeLog,v 1.59 2008/05/17 21:55:58 aballier Exp $
+
+*freebsd-lib-6.2-r4 (17 May 2008)
+
+  17 May 2008; Alexis Ballier <aballier@gentoo.org>
+  +files/freebsd-lib-6.2-libc.patch, +files/freebsd-lib-6.2-pty6.patch,
+  +freebsd-lib-6.2-r4.ebuild:
+  Bump for security fixes, bug #206847 and part of bug #209889, aka
+  http://security.freebsd.org/advisories/FreeBSD-SA-08:01.pty.asc and
+  http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc
 
   03 Nov 2007; Roy Marples <uberlord@gentoo.org> freebsd-lib-6.2-r3.ebuild:
   Remove the internal hesiod support and use the ebuild instead.
diff --git a/sys-freebsd/freebsd-lib/Manifest b/sys-freebsd/freebsd-lib/Manifest
index 6cda874987c2..26ea21e8ea1c 100644
--- a/sys-freebsd/freebsd-lib/Manifest
+++ b/sys-freebsd/freebsd-lib/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX freebsd-lib-6.0-binutils-asm.patch 1096 RMD160 1d2c2e60f2c8ca49fb8b01c65aca65b5cd59ea23 SHA1 1533aef95476da5b631d2ffb9b4892773ee5b2ae SHA256 5794228b1754d0b0a9a46fbae7e117ca91ca7da1d842339b279a4185014cbfd9
 AUX freebsd-lib-6.0-flex-2.5.31.patch 421 RMD160 6ef83c6b09e31a81ba3c25772b02aef34540dbe8 SHA1 1408a36a967b0ff5ba94e23921357f4296e31bc2 SHA256 1d46cf13e1059ae3731ba5555764e020fcf4de7db5abf039fac83423e05d53c4
 AUX freebsd-lib-6.0-gccfloat.patch 542 RMD160 564f5a1b1aba59479c22f91570635de717e8b7bf SHA1 94f463f123fdc3009d4ca1d5ab351aa76d768c6b SHA256 d549125f174c86c2d5e7e1f1c99cf1303b84e91ce8ee51db8c962be48b7a7951
@@ -8,7 +11,9 @@ AUX freebsd-lib-6.2-as-needed.patch 943 RMD160 830e0216750b2cd6537ae926c8d09f71f
 AUX freebsd-lib-6.2-bluetooth.patch 243 RMD160 eaaeafc3f8305d4755070d9d1354289a140bf6a1 SHA1 6988dfc998b18efd7a91e86a827e921cdabf4997 SHA256 4c90cb6d45fa24a07e21255949f219cc561a94011f645c58bce2a68027db6658
 AUX freebsd-lib-6.2-dl_iterate_phdr.patch 726 RMD160 a70918ba5660f7f034b1893cdd8f61e991e7e842 SHA1 43bc3308c255a8db22e880113c903c855d06810d SHA256 9b77c8ac298b457ae468ece5d9e74009180afffce208f70240ecaa8188af3037
 AUX freebsd-lib-6.2-gcc41.patch 890 RMD160 231bf22bade53a71364c18a00cecaf702cd8803d SHA1 2f26428988501fc9e6b8d0d493e39366d0cf46f7 SHA256 a5aba66f97f445f7d6c6dbfd2ec15506a922b0a38e1ae9ac951767cdf3777651
+AUX freebsd-lib-6.2-libc.patch 654 RMD160 daef5893b1459364ec74aa66230834fe96971ad2 SHA1 51ce76d819a11ba1d7ac052f2c3f08a009929534 SHA256 4f22cc1d5fa5f8d0bedcd5f8e584624ee33b1c153de47c54a111d825833fa286
 AUX freebsd-lib-6.2-libthr.patch 421 RMD160 8f85cbea02252425c624f0d3d7720dca53e1cbe4 SHA1 dd0d8a2ba63c6951380a5f277ba3b2add5ee5433 SHA256 ba4a3e4bce8a1add38275451eb4ab80df8e415f78fc8eb235ec94f60b28da558
+AUX freebsd-lib-6.2-pty6.patch 2633 RMD160 7519e6c12ac385f91f8b09d6eb2bdcb428b51b59 SHA1 444100331a1890ea6491015d42e11b4824025edc SHA256 acddf6cfd103267d94e267688a1e3c4d0546c84a2c30e4edd7c8f35dfac5c639
 AUX freebsd-lib-bsdxml.patch 339 RMD160 27b501cda2ac76230a72dfc3ee6593cb50f8d4b0 SHA1 3b456d272de5d0c56bc650fe60f38524857f8b31 SHA256 c1ac47d6c7176475f0f4b86bb17288a980b44a799fb6f4e7b1920f69e0447dc9
 AUX libmap.conf 201 RMD160 ad0ab6c08b5c541e0e45636dcbbaa468bbae2f95 SHA1 df81db07a94d988f1c41b4696b4d3b0058e73f83 SHA256 36a1bd56965f171cbb058f6e1762801e3b92c083fe36f6fe046bd669beed9742
 DIST freebsd-contrib-6.2.tar.bz2 36594160 RMD160 8b89f1ac72ba0054efe1aec2d747ecd33789fde3 SHA1 02493b8d90b0e1bb4304ce6466203135bf5709b1 SHA256 dbbd9198597e176242806329242d0e12181820a921e5da42aadefaacda1b6277
@@ -21,5 +26,13 @@ DIST freebsd-sys-6.2.tar.bz2 18344936 RMD160 784230e22ccaf09933ef3f053ff29cc3e57
 DIST freebsd-usbin-6.2.tar.bz2 2695872 RMD160 ea6104fcfbf6c0be511a80d0475e5a8f716292be SHA1 4772ed5fdc591273887fc7a2e97bddf7a1669b5d SHA256 6195301d39e7bc7fa00f6dec71479b1800ea5c3dc9d3ea375dafe4e71e6485f0
 EBUILD freebsd-lib-6.2-r2.ebuild 8616 RMD160 de6bb6b7ef38810680cef1519fa40b8e2945509e SHA1 ee1fce74f294e8971495f23f854a0d5ab5c3c93f SHA256 0daec66251c195bfe5eeb4ab959335900790e026cb185691b555df37644135b1
 EBUILD freebsd-lib-6.2-r3.ebuild 9434 RMD160 d11640d976717e1f50157e6285b0d85dddf89f72 SHA1 08102d2ca2e3b572aad17987922676cb3e441ff7 SHA256 d514348023cf49851e235f3317f0c6e122d39f89e1079f2347468a9caffd5e43
-MISC ChangeLog 15412 RMD160 b50b2c50964dea0c83b1562a4254e56514870c73 SHA1 eed54d07f6f815953bbcbd43e31cf111bf1b2c5f SHA256 d8c9b46a755f3dc9437a4b6d92e3b5701dc617a166172599a520a9663f3e0069
+EBUILD freebsd-lib-6.2-r4.ebuild 9502 RMD160 71686e89edd72a819df375ef94e8139641da46fe SHA1 d48b645e35d752cde3dcb2922662ec88abddc9f1 SHA256 911f7bc5b01467c710d0a6ddfa3abbbd02ccafcd98080e9c6fc62f0e8d666fa6
+MISC ChangeLog 15807 RMD160 15303bc074d8f4c344a107d4e172cdeae90b4c20 SHA1 69a1d9b74f795704d98041af9e956b8a3d743d7b SHA256 05cc2f0b90578c3aefd91ccf945ad0c52163dd6ee4e353cdb56e97a86709e933
 MISC metadata.xml 156 RMD160 60b5820a08275f307e5bd936d78f5afd1f141086 SHA1 d9d9d4f2b5afc58339ea3e562fca490156935f1f SHA256 30ab515d6ac492d3d6c36ac3c675511742c2149e56a6b3228c8d22ab8edb3ff7
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.9 (GNU/Linux)
+
+iEYEARECAAYFAkgvVHwACgkQvFcC4BYPU0pIJACfQsp2VEF2Ic+ZZ9dvCY2pmM59
+9goAniw/gLcFye3i1oprl+HKUi2L3Nm0
+=Rox6
+-----END PGP SIGNATURE-----
diff --git a/sys-freebsd/freebsd-lib/files/freebsd-lib-6.2-libc.patch b/sys-freebsd/freebsd-lib/files/freebsd-lib-6.2-libc.patch
new file mode 100644
index 000000000000..fc94cb7ae7d7
--- /dev/null
+++ b/sys-freebsd/freebsd-lib/files/freebsd-lib-6.2-libc.patch
@@ -0,0 +1,21 @@
+http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc
+
+Index: lib/libc/inet/inet_network.c
+===================================================================
+RCS file: /home/ncvs/src/lib/libc/inet/inet_network.c,v
+retrieving revision 1.4
+diff -u -u -r1.4 inet_network.c
+--- lib/libc/inet/inet_network.c	3 Jun 2007 17:20:26 -0000	1.4
++++ lib/libc/inet/inet_network.c	6 Jan 2008 15:38:28 -0000
+@@ -82,9 +82,9 @@
+ 	}
+ 	if (!digit)
+ 		return (INADDR_NONE);
++	if (pp >= parts + 4 || val > 0xffU)
++		return (INADDR_NONE);
+ 	if (*cp == '.') {
+-		if (pp >= parts + 4 || val > 0xffU)
+-			return (INADDR_NONE);
+ 		*pp++ = val, cp++;
+ 		goto again;
+ 	}
diff --git a/sys-freebsd/freebsd-lib/files/freebsd-lib-6.2-pty6.patch b/sys-freebsd/freebsd-lib/files/freebsd-lib-6.2-pty6.patch
new file mode 100644
index 000000000000..8b4bb780d541
--- /dev/null
+++ b/sys-freebsd/freebsd-lib/files/freebsd-lib-6.2-pty6.patch
@@ -0,0 +1,95 @@
+http://security.freebsd.org/advisories/FreeBSD-SA-08:01.pty.asc
+
+Index: lib/libc/stdlib/grantpt.c
+===================================================================
+RCS file: /home/ncvs/src/lib/libc/stdlib/grantpt.c,v
+retrieving revision 1.4.10.1
+diff -u -I__FBSDID -I$FreeBSD -r1.4.10.1 grantpt.c
+--- lib/libc/stdlib/grantpt.c	18 Dec 2007 00:36:21 -0000	1.4.10.1
++++ lib/libc/stdlib/grantpt.c	10 Jan 2008 20:54:30 -0000
+@@ -214,24 +214,30 @@
+ ptsname(int fildes)
+ {
+ 	static char slave[] = _PATH_DEV PTS_PREFIX "XY";
+-	char *retval;
++	const char *master;
+ 	struct stat sbuf;
+ 
+-	retval = NULL;
+-
+-	if (_fstat(fildes, &sbuf) == 0) {
+-		if (!ISPTM(sbuf))
+-			errno = EINVAL;
+-		else {
+-			(void)snprintf(slave, sizeof(slave),
+-				       _PATH_DEV PTS_PREFIX "%s",
+-				       devname(sbuf.st_rdev, S_IFCHR) +
+-				       strlen(PTM_PREFIX));
+-			retval = slave;
+-		}
+-	}
+-
+-	return (retval);
++	/* All master pty's must be char devices. */
++	if (_fstat(fildes, &sbuf) == -1)
++		goto invalid;
++	if (!S_ISCHR(sbuf.st_mode))
++		goto invalid;
++
++	/* Check to see if this device is a pty(4) master. */
++	master = devname(sbuf.st_rdev, S_IFCHR);
++	if (strlen(master) != strlen(PTM_PREFIX "XY"))
++		goto invalid;
++	if (strncmp(master, PTM_PREFIX, strlen(PTM_PREFIX)) != 0)
++		goto invalid;
++
++	/* It is, so generate the corresponding pty(4) slave name. */
++	(void)snprintf(slave, sizeof(slave), _PATH_DEV PTS_PREFIX "%s",
++	    master + strlen(PTM_PREFIX));
++	return (slave);
++
++invalid:
++	errno = EINVAL;
++	return (NULL);
+ }
+ 
+ /*
+@@ -240,18 +246,14 @@
+ int
+ unlockpt(int fildes)
+ {
+-	int retval;
+-	struct stat sbuf;
+ 
+ 	/*
+ 	 * Unlocking a master/slave pseudo-terminal pair has no meaning in a
+ 	 * non-streams PTY environment.  However, we do ensure fildes is a
+ 	 * valid master pseudo-terminal device.
+ 	 */
+-	if ((retval = _fstat(fildes, &sbuf)) == 0 && !ISPTM(sbuf)) {
+-		errno = EINVAL;
+-		retval = -1;
+-	}
++	if (ptsname(fildes) == NULL)
++		return (-1);
+ 
+-	return (retval);
++	return (0);
+ }
+Index: lib/libutil/pty.c
+===================================================================
+RCS file: /home/ncvs/src/lib/libutil/pty.c,v
+retrieving revision 1.15.20.1
+diff -u -I__FBSDID -I$FreeBSD -r1.15.20.1 pty.c
+--- lib/libutil/pty.c	27 Nov 2007 18:43:09 -0000	1.15.20.1
++++ lib/libutil/pty.c	10 Jan 2008 20:54:30 -0000
+@@ -76,8 +76,7 @@
+ 					break; /* try the next pty group */
+ 			} else {
+ 				line[5] = 't';
+-				(void) chown(line, getuid(), ttygid);
+-				(void) chmod(line, S_IRUSR|S_IWUSR|S_IWGRP);
++				(void) grantpt(master);
+ 				(void) revoke(line);
+ 				if ((slave = open(line, O_RDWR, 0)) != -1) {
+ 					*amaster = master;
diff --git a/sys-freebsd/freebsd-lib/freebsd-lib-6.2-r4.ebuild b/sys-freebsd/freebsd-lib/freebsd-lib-6.2-r4.ebuild
new file mode 100644
index 000000000000..edd3808a4c94
--- /dev/null
+++ b/sys-freebsd/freebsd-lib/freebsd-lib-6.2-r4.ebuild
@@ -0,0 +1,300 @@
+# Copyright 1999-2008 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-freebsd/freebsd-lib/freebsd-lib-6.2-r4.ebuild,v 1.1 2008/05/17 21:55:58 aballier Exp $
+
+inherit bsdmk freebsd flag-o-matic toolchain-funcs
+
+DESCRIPTION="FreeBSD's base system libraries"
+SLOT="6.0"
+KEYWORDS="~sparc-fbsd ~x86-fbsd"
+
+IUSE="atm bluetooth ssl hesiod ipv6 kerberos nis gpib build bootstrap"
+
+# Crypto is needed to have an internal OpenSSL header
+# sys is needed for libalias, probably we can just extract that instead of
+# extracting the whole tarball
+SRC_URI="mirror://gentoo/${LIB}.tar.bz2
+		mirror://gentoo/${CONTRIB}.tar.bz2
+		mirror://gentoo/${CRYPTO}.tar.bz2
+		mirror://gentoo/${LIBEXEC}.tar.bz2
+		mirror://gentoo/${ETC}.tar.bz2
+		mirror://gentoo/${INCLUDE}.tar.bz2
+		nis? ( mirror://gentoo/${USBIN}.tar.bz2 )
+		build? (
+			mirror://gentoo/${SYS}.tar.bz2 )"
+
+if [ "${CATEGORY#*cross-}" = "${CATEGORY}" ]; then
+	RDEPEND="ssl? ( dev-libs/openssl )
+		hesiod? ( net-dns/hesiod )
+		kerberos? ( virtual/krb5 )
+		!sys-freebsd/freebsd-headers"
+	DEPEND="${RDEPEND}
+		>=sys-devel/flex-2.5.31-r2
+		=sys-freebsd/freebsd-sources-${RV}*
+		!bootstrap? ( app-arch/bzip2 )"
+
+	PROVIDE="virtual/libc
+		virtual/os-headers"
+
+else
+	SRC_URI="${SRC_URI}
+			mirror://gentoo/${SYS}.tar.bz2"
+fi
+
+DEPEND="${DEPEND}
+		=sys-freebsd/freebsd-mk-defs-${RV}*"
+
+S="${WORKDIR}/lib"
+
+export CTARGET=${CTARGET:-${CHOST}}
+if [ "${CTARGET}" = "${CHOST}" -a "${CATEGORY#*cross-}" != "${CATEGORY}" ]; then
+	export CTARGET=${CATEGORY/cross-}
+fi
+
+pkg_setup() {
+	[ -c /dev/zero ] || \
+		die "You forgot to mount /dev; the compiled libc would break."
+
+	if ! use ssl && use kerberos; then
+		eerror "If you want kerberos support you need to enable ssl support, too."
+	fi
+
+	use atm || mymakeopts="${mymakeopts} NO_ATM= "
+	use bluetooth || mymakeopts="${mymakeopts} NO_BLUETOOTH= "
+	use hesiod || mymakeopts="${mymakeopts} NO_HESIOD_LIBC= "
+	use ssl || mymakeopts="${mymakeopts} NO_OPENSSL= NO_CRYPT= "
+	use ipv6 || mymakeopts="${mymakeopts} NO_INET6= "
+	use kerberos || mymakeopts="${mymakeopts} NO_KERBEROS= "
+	use nis || mymakeopts="${mymakeopts} NO_NIS= "
+	use gpib || mymakeopts="${mymakeopts} NO_GPIB= "
+
+	mymakeopts="${mymakeopts} NO_OPENSSH= NO_BIND= NO_SENDMAIL= NO_LIBC_R= NO_LIBPTHREAD="
+
+	if [ "${CTARGET}" != "${CHOST}" ]; then
+		mymakeopts="${mymakeopts} MACHINE=$(tc-arch-kernel ${CTARGET})"
+		mymakeopts="${mymakeopts} MACHINE_ARCH=$(tc-arch-kernel ${CTARGET})"
+	fi
+}
+
+PATCHES="${FILESDIR}/${PN}-bsdxml.patch
+	${FILESDIR}/${PN}-6.0-pmc.patch
+	${FILESDIR}/${PN}-6.0-gccfloat.patch
+	${FILESDIR}/${PN}-6.0-flex-2.5.31.patch
+	${FILESDIR}/${PN}-6.0-binutils-asm.patch
+	${FILESDIR}/${PN}-6.0-ssp.patch
+	${FILESDIR}/${PN}-6.1-csu.patch
+	${FILESDIR}/${PN}-6.2-bluetooth.patch
+	${FILESDIR}/${PN}-6.2-gcc41.patch
+	${FILESDIR}/${PN}-6.2-dl_iterate_phdr.patch
+	${FILESDIR}/${PN}-6.2-as-needed.patch
+	${FILESDIR}/${PN}-6.2-libthr.patch
+	${FILESDIR}/${PN}-6.2-libc.patch
+	${FILESDIR}/${PN}-6.2-pty6.patch"
+
+# Here we disable and remove source which we don't need or want
+# In order:
+# - ncurses stuff
+# - archiving libraries (have their own ebuild)
+# - sendmail libraries (they are installed by sendmail)
+# - SNMP library and dependency (have their own ebuilds)
+#
+# The rest are libraries we already have somewhere else because
+# they are contribution.
+# Note: libtelnet is an internal lib used by telnet and telnetd programs
+# as it's not used in freebsd-lib package itself, it's pointless building
+# it here.
+REMOVE_SUBDIRS="libncurses libform libmenu libpanel libedit \
+	libz libbz2 libarchive \
+	libsm libsmdb libsmutil \
+	libbegemot libbsnmp \
+	libpam libpcap bind libwrap libmagic \
+	libcom_err libtelnet"
+
+src_unpack() {
+	freebsd_src_unpack
+
+	sed -i.bak -e 's:-o/dev/stdout:-t:' "${S}/libc/net/Makefile.inc"
+	sed -i.bak -e 's:histedit.h::' "${WORKDIR}/include/Makefile"
+
+	# Upstream Display Managers default to using VT7
+	# We should make FreeBSD allow this by default
+	local x=
+	for x in "${WORKDIR}"/etc/etc.*/ttys ; do
+		sed -i.bak \
+			-e '/ttyv5[[:space:]]/ a\
+# Display Managers default to VT7.\
+# If you use the xdm init script, keep ttyv6 commented out\
+# unless you force a different VT for the DM being used.' \
+			-e '/^ttyv[678][[:space:]]/ s/^/# /' "${x}" \
+			|| die "Failed to sed ${x}"
+		rm "${x}".bak
+	done
+
+	# Don't install the hesiod man page or header
+	rm "${WORKDIR}"/include/hesiod.h || die
+	sed -i.bak -e 's:hesiod.h::' "${WORKDIR}"/include/Makefile || die
+	sed -i.bak -e 's:hesiod.c::' -e 's:hesiod.3::' \
+	"${WORKDIR}"/lib/libc/net/Makefile.inc || die
+
+	# Apply this patch for Gentoo/FreeBSD/SPARC64 to build correctly
+	# from catalyst, then don't do anything else
+	if use build; then
+		cd "${WORKDIR}"
+		# We may need this patch again if it uses the linker instructions
+		# remove this when tested
+		# epatch "${FILESDIR}/freebsd-sources-6.2-sparc64.patch"
+		return 0
+	fi
+
+	if [ "${CTARGET}" = "${CHOST}" ]; then
+		ln -s "/usr/src/sys-${RV}" "${WORKDIR}/sys"
+	else
+		sed -i.bak -e "s:/usr/include:/usr/${CTARGET}/usr/include:g" \
+			"${S}/libc/rpc/Makefile.inc" \
+			"${S}/libc/yp/Makefile.inc"
+	fi
+
+	if install --version 2> /dev/null | grep -q GNU; then
+		sed -i.bak -e 's:${INSTALL} -C:${INSTALL}:' "${WORKDIR}/include/Makefile"
+	fi
+
+	# Let arch-specific includes to be found
+	local machine
+	machine=$(tc-arch-kernel ${CTARGET})
+	ln -s "${WORKDIR}/sys/${machine}/include" "${WORKDIR}/include/machine"
+
+	use bootstrap && dummy_mk libstand
+}
+
+src_compile() {
+	cd "${WORKDIR}/include"
+	$(freebsd_get_bmake) CC=$(tc-getCC) || die "make include failed"
+
+	use crosscompile_opts_headers-only && return 0
+
+	# Don't use ssp until properly fixed
+	append-flags $(test-flags -fno-stack-protector -fno-stack-protector-all)
+
+	strip-flags
+	if [ "${CTARGET}" != "${CHOST}" ]; then
+		export YACC='yacc -by'
+		CHOST=${CTARGET} tc-export CC LD CXX
+
+		local machine
+		machine=$(tc-arch-kernel ${CTARGET})
+
+		local csudir
+		if [ -d "${S}/csu/${machine}-elf" ]; then
+			csudir="${S}/csu/${machine}-elf"
+		else
+			csudir="${S}/csu/${machine}"
+		fi
+		cd "${csudir}"
+		$(freebsd_get_bmake) ${mymakeopts} || die "make csu failed"
+
+		append-flags "-isystem /usr/${CTARGET}/usr/include"
+		append-flags "-B ${csudir}"
+		append-ldflags "-B ${csudir}"
+		cd "${S}/libc"
+		$(freebsd_get_bmake) ${mymakeopts} || die "make libc failed"
+
+		append-flags "-isystem ${WORKDIR}/lib/msun/${machine/i386/i387}"
+		cd "${S}/msun"
+		$(freebsd_get_bmake) ${mymakeopts} || die "make libc failed"
+	else
+		# Forces to use the local copy of headers as they might be outdated in
+		# the system
+		append-flags "-isystem '${WORKDIR}/sys' -isystem '${WORKDIR}/include'"
+
+		cd "${S}"
+		NOFLAGSTRIP=yes freebsd_src_compile
+	fi
+}
+
+src_install() {
+	cd "${WORKDIR}/include"
+
+	[ "${CTARGET}" = "${CHOST}" ] \
+		&& INCLUDEDIR="/usr/include" \
+		|| INCLUDEDIR="/usr/${CTARGET}/usr/include"
+
+	einfo "Installing for ${CTARGET} in ${CHOST}.."
+
+	dodir "${INCLUDEDIR}"
+	$(freebsd_get_bmake) installincludes \
+		MACHINE=$(tc-arch-kernel) \
+		DESTDIR="${D}" INCLUDEDIR="${INCLUDEDIR}" || die "Install failed"
+
+	# Install math.h when crosscompiling, at this point
+	if [ "${CHOST}" != "${CTARGET}" ]; then
+		insinto "/usr/${CTARGET}/usr/include"
+		doins "${S}/msun/src/math.h"
+	fi
+
+	use crosscompile_opts_headers-only && return 0
+
+	if [ "${CTARGET}" != "${CHOST}" ]; then
+		local csudir
+		if [ -d "${S}/csu/$(tc-arch-kernel ${CTARGET})-elf" ]; then
+			csudir="${S}/csu/$(tc-arch-kernel ${CTARGET})-elf"
+		else
+			csudir="${S}/csu/$(tc-arch-kernel ${CTARGET})"
+		fi
+		cd "${csudir}"
+		$(freebsd_get_bmake) ${mymakeopts} DESTDIR="${D}" install \
+			FILESDIR="/usr/${CTARGET}/usr/lib" LIBDIR="/usr/${CTARGET}/usr/lib" || die "Install csu failed"
+
+		cd "${S}/libc"
+		$(freebsd_get_bmake) ${mymakeopts} DESTDIR="${D}" install NO_MAN= \
+			SHLIBDIR="/usr/${CTARGET}/lib" LIBDIR="/usr/${CTARGET}/usr/lib" || die "Install failed"
+
+		cd "${S}/msun"
+		$(freebsd_get_bmake) ${mymakeopts} DESTDIR="${D}" install NO_MAN= \
+			INCLUDEDIR="/usr/${CTARGET}/usr/include" \
+			SHLIBDIR="/usr/${CTARGET}/lib" LIBDIR="/usr/${CTARGET}/usr/lib" || die "Install failed"
+
+		dosym "usr/include" "/usr/${CTARGET}/sys-include"
+	else
+		cd "${S}"
+		mkinstall || die "Install failed"
+	fi
+
+	# Don't install the rest of the configuration files if crosscompiling
+	[ "${CTARGET}" != "${CHOST}" ] && return 0
+
+	# Add symlinks (-> libthr) for legacy threading libraries, since these are
+	# not built by us (they are disabled in FreeBSD-7 anyway).
+	dosym libthr.a /usr/lib/libpthread.a
+	dosym libthr.so /usr/lib/libpthread.so
+	dosym libthr.a /usr/lib/libc_r.a
+	dosym libthr.so /usr/lib/libc_r.so
+
+	# Add symlink (-> libthr) so previously built binaries still work.
+	dosym libthr.so.2 /lib/libpthread.so.2
+	dosym libthr.so.2 /lib/libc_r.so.6
+
+	# Compatibility symlinks to run FreeBSD 5.x binaries (ABI is mostly
+	# identical, remove when problems will actually happen)
+	dosym /lib/libc.so.6 /usr/lib/libc.so.5
+	dosym /lib/libm.so.4 /usr/lib/libm.so.3
+
+	# install libstand files
+	dodir /usr/include/libstand
+	insinto /usr/include/libstand
+	doins "${S}"/libstand/*.h
+
+	cd "${WORKDIR}/etc/"
+	insinto /etc
+	doins auth.conf nls.alias mac.conf netconfig
+
+	# Install ttys file
+	doins "etc.$(tc-arch-kernel)"/*
+
+	dodir /etc/sandbox.d
+	cat - > "${D}"/etc/sandbox.d/00freebsd <<EOF
+# /dev/crypto is used mostly by OpenSSL on *BSD platforms
+# leave it available as packages might use OpenSSL commands
+# during compile or install phase.
+SANDBOX_PREDICT="/dev/crypto"
+EOF
+}