From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id C56B8139085 for ; Wed, 18 Jan 2017 13:29:26 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 3BA5F234147; Wed, 18 Jan 2017 13:29:26 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 0ED8A234147 for ; Wed, 18 Jan 2017 13:29:26 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 0857034121E for ; Wed, 18 Jan 2017 13:29:25 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id C9FF52776 for ; Wed, 18 Jan 2017 13:29:23 +0000 (UTC) From: "Michael Orlitzky" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Michael Orlitzky" Message-ID: <1484746135.e24450ef08df811112ca43af2c8e2dca59b1f9b6.mjo@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: net-dns/djbdns/ X-VCS-Repository: repo/gentoo X-VCS-Files: net-dns/djbdns/djbdns-1.05-r30.ebuild X-VCS-Directories: net-dns/djbdns/ X-VCS-Committer: mjo X-VCS-Committer-Name: Michael Orlitzky X-VCS-Revision: e24450ef08df811112ca43af2c8e2dca59b1f9b6 X-VCS-Branch: master Date: Wed, 18 Jan 2017 13:29:23 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: cd534177-e5db-465d-83ff-8dd101b46194 X-Archives-Hash: 7ec4c24194b2abc39888e3aad21dc38d commit: e24450ef08df811112ca43af2c8e2dca59b1f9b6 Author: Michael Orlitzky gentoo org> AuthorDate: Wed Jan 18 13:28:33 2017 +0000 Commit: Michael Orlitzky gentoo org> CommitDate: Wed Jan 18 13:28:55 2017 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e24450ef net-dns/djbdns: remove old versions vulnerable to CVE-2012-1191. Gentoo-Bug: 404959 Package-Manager: portage-2.3.0 net-dns/djbdns/djbdns-1.05-r30.ebuild | 151 ---------------------------------- 1 file changed, 151 deletions(-) diff --git a/net-dns/djbdns/djbdns-1.05-r30.ebuild b/net-dns/djbdns/djbdns-1.05-r30.ebuild deleted file mode 100644 index 3afbb66..00000000 --- a/net-dns/djbdns/djbdns-1.05-r30.ebuild +++ /dev/null @@ -1,151 +0,0 @@ -# Copyright 1999-2015 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Id$ - -EAPI=5 -inherit eutils flag-o-matic readme.gentoo toolchain-funcs user - -DESCRIPTION="Collection of DNS client/server software" -HOMEPAGE="http://cr.yp.to/djbdns.html" -IPV6_PATCH="test27" - -SRC_URI="http://cr.yp.to/djbdns/${P}.tar.gz - http://smarden.org/pape/djb/manpages/${P}-man.tar.gz - ipv6? ( http://www.fefe.de/dns/${P}-${IPV6_PATCH}.diff.bz2 )" - -SLOT="0" -LICENSE="public-domain" -KEYWORDS="alpha amd64 hppa ~mips ppc ppc64 sparc x86" -IUSE="ipv6 selinux" - -DEPEND="" -RDEPEND="sys-apps/ucspi-tcp - virtual/daemontools - selinux? ( sec-policy/selinux-djbdns )" - -src_unpack(){ - # Unpack both djbdns and its man pages to separate directories. - default - - # Now move the man pages under ${S} so that user patches can be - # applied to them as well in src_prepare(). - mv "${PN}-man" "${P}/man" || die "failed to transplant man pages" -} - -src_prepare() { - epatch \ - "${FILESDIR}/headtail.patch" \ - "${FILESDIR}/dnsroots.patch" \ - "${FILESDIR}/dnstracesort.patch" \ - "${FILESDIR}/string_length_255.patch" \ - "${FILESDIR}/srv_record_support.patch" - - # Fix CVE2009-0858 - epatch "${FILESDIR}/CVE2009-0858_0001-check-response-domain-name-length.patch" - - if use ipv6; then - elog 'At present dnstrace does NOT support IPv6. It will'\ - 'be compiled without IPv6 support.' - - # Create a separate copy of the source tree for dnstrace. - cp -pR "${S}" "${S}-noipv6" || die - - # The big ipv6 patch. - epatch "${WORKDIR}/${P}-${IPV6_PATCH}.diff" - - # Fix CVE2008-4392 (ipv6) - epatch \ - "${FILESDIR}/CVE2008-4392_0001-dnscache-merge-similar-outgoing-queries-ipv6-test25.patch" \ - "${FILESDIR}/CVE2008-4392_0002-dnscache-cache-soa-records-ipv6.patch" \ - "${FILESDIR}/makefile-parallel-test25.patch" - - cd "${S}-noipv6" || die - fi - - # Fix CVE2008-4392 (no ipv6) - epatch \ - "${FILESDIR}/CVE2008-4392_0001-dnscache-merge-similar-outgoing-queries.patch" \ - "${FILESDIR}/CVE2008-4392_0002-dnscache-cache-soa-records.patch" - - # Later versions of the ipv6 patch include this, but even if - # USE=ipv6, we're in the ${S}-noipv6 directory at this point. - epatch "${FILESDIR}/${PV}-errno.patch" - - epatch_user -} - -src_compile() { - echo "$(tc-getCC) ${CFLAGS}" > conf-cc || die - echo "$(tc-getCC) ${LDFLAGS}" > conf-ld || die - echo "/usr" > conf-home || die - emake - - # If djbdns is compiled with IPv6 support, it breaks dnstrace. - # Therefore we must compile dnstrace separately without IPv6 - # support. - if use ipv6; then - elog 'Compiling dnstrace without ipv6 support' - cp conf-cc conf-ld conf-home "${S}-noipv6/" || die - cd "${S}-noipv6" || die - emake dnstrace - fi -} - -src_install() { - insinto /etc - doins dnsroots.global - - into /usr - dobin *-conf dnscache tinydns walldns rbldns pickdns axfrdns \ - *-get *-data *-edit dnsip dnsipq dnsname dnstxt dnsmx \ - dnsfilter random-ip dnsqr dnsq dnstrace dnstracesort - - if use ipv6; then - dobin dnsip6 dnsip6q "${S}-noipv6/dnstrace" - fi - - dodoc CHANGES README - - doman man/*.[158] - - readme.gentoo_create_doc -} - -pkg_preinst() { - # The nofiles group is no longer provided by baselayout. - # Share it with qmail if possible. - enewgroup nofiles 200 - - enewuser dnscache -1 -1 -1 nofiles - enewuser dnslog -1 -1 -1 nofiles - enewuser tinydns -1 -1 -1 nofiles -} - -DISABLE_AUTOFORMATTING=1 -DOC_CONTENTS=' -To configure djbdns, please follow the instructions at, - - http://cr.yp.to/djbdns.html - -Of particular interest are, - - axfrdns : http://cr.yp.to/djbdns/axfrdns-conf.html - dnscache: http://cr.yp.to/djbdns/run-cache-x-home.html - tinydns : http://cr.yp.to/djbdns/run-server.html - -Portage has created users for axfrdns, dnscache, and tinydns; the -commands to configure these programs are, - - 1. axfrdns-conf tinydns dnslog /var/axfrdns /var/tinydns $ip - 2. dnscache-conf dnscache dnslog /var/dnscache $ip - 3. tinydns-conf tinydns dnslog /var/tinydns $ip - -(replace $ip with the ip address on which the server will run). - -If you wish to configure rbldns or walldns, you will need to create -those users yourself (although you should still use the "dnslog" -user for the logs): - - 4. rbldns-conf $username dnslog /var/rbldns $ip $base - 5. walldns-conf $username dnslog /var/walldns $ip -'