From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E732A1396D9 for ; Mon, 13 Nov 2017 23:26:11 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 4D3F0E0FD2; Mon, 13 Nov 2017 23:26:11 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 2EB92E0FD2 for ; Mon, 13 Nov 2017 23:26:10 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id BF39133BEBE for ; Mon, 13 Nov 2017 23:26:08 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 54AD494BF for ; Mon, 13 Nov 2017 23:26:07 +0000 (UTC) From: "Sergei Trofimovich" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sergei Trofimovich" Message-ID: <1510615559.66b10cf352d69a96824cba2c2a2bdea8e8094d7b.slyfox@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: sys-libs/glibc/ X-VCS-Repository: repo/gentoo X-VCS-Files: sys-libs/glibc/glibc-2.26-r3.ebuild X-VCS-Directories: sys-libs/glibc/ X-VCS-Committer: slyfox X-VCS-Committer-Name: Sergei Trofimovich X-VCS-Revision: 66b10cf352d69a96824cba2c2a2bdea8e8094d7b X-VCS-Branch: master Date: Mon, 13 Nov 2017 23:26:07 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 7f327c61-7b31-4d1f-a6c1-db94a8c42dc8 X-Archives-Hash: 546981ede2c7edb8138d1b72e1faa84d commit: 66b10cf352d69a96824cba2c2a2bdea8e8094d7b Author: Sergei Trofimovich gentoo org> AuthorDate: Mon Nov 13 23:23:10 2017 +0000 Commit: Sergei Trofimovich gentoo org> CommitDate: Mon Nov 13 23:25:59 2017 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=66b10cf3 sys-libs/glibc: guard against rendering system unusable, bug #627338 For cases like FEATURES=config-protect-if-modified or custom /etc/nsswitch.conf with only 'compat' resolver and external providers glibc upgrade will break local user resolution when switching from older glibc. Bad /etc/nsswitch.conf: passwd: compat shadow: compat group: compat Good /etc/nsswitch.conf: passwd: files shadow: files group: files Ok /etc/nsswitch.conf: passwd: compat files shadow: compat files group: compat files More up-to-date doc: https://wiki.gentoo.org/wiki/Project:Toolchain/nsswitch.conf_in_glibc-2.26 Bug: https://bugs.gentoo.org/627338 Package-Manager: Portage-2.3.13, Repoman-2.3.4 sys-libs/glibc/glibc-2.26-r3.ebuild | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/sys-libs/glibc/glibc-2.26-r3.ebuild b/sys-libs/glibc/glibc-2.26-r3.ebuild index 2234b26a084..98ab050e12f 100644 --- a/sys-libs/glibc/glibc-2.26-r3.ebuild +++ b/sys-libs/glibc/glibc-2.26-r3.ebuild @@ -189,6 +189,21 @@ pkg_pretend() { die "old __guard detected" fi fi + + # Check for sanity of /etc/nsswitch.conf + if [[ -e ${EROOT}/etc/nsswitch.conf ]] ; then + local entry + for entry in passwd group shadow; do + if ! egrep -q "[ \t]*${entry}:.*files" "${EROOT}"/etc/nsswitch.conf; then + eerror "Your ${EROOT}/etc/nsswitch.conf is out of date." + eerror "Please make sure you have 'files' entries for" + eerror "'passwd:', 'group:' and 'shadow:' databases." + eerror "For more details see:" + eerror " https://wiki.gentoo.org/wiki/Project:Toolchain/nsswitch.conf_in_glibc-2.26" + die "nsswitch.conf has no 'files' provider in '${entry}'." + fi + done + fi } src_unpack() {