From: "Joonas Niilola" <juippis@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] repo/gentoo:master commit in: net-mail/cmd5checkpw/
Date: Thu, 21 Nov 2019 13:16:18 +0000 (UTC) [thread overview]
Message-ID: <1574342170.8d7838512d6b7d92ab2029830c7bff198a30654e.juippis@gentoo> (raw)
commit: 8d7838512d6b7d92ab2029830c7bff198a30654e
Author: Rolf Eike Beer <eike <AT> sf-mail <DOT> de>
AuthorDate: Wed Nov 20 18:49:19 2019 +0000
Commit: Joonas Niilola <juippis <AT> gentoo <DOT> org>
CommitDate: Thu Nov 21 13:16:10 2019 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8d783851
net-mail/cmd5checkpw: use a special group instead of a user
This allows that whoever calls the binary to read the password database without
the possibility to alter it.
Signed-off-by: Rolf Eike Beer <eike <AT> sf-mail.de>
Closes: https://github.com/gentoo/gentoo/pull/13723
Signed-off-by: Joonas Niilola <juippis <AT> gentoo.org>
net-mail/cmd5checkpw/cmd5checkpw-0.30-r3.ebuild | 65 +++++++++++++++++++++++++
1 file changed, 65 insertions(+)
diff --git a/net-mail/cmd5checkpw/cmd5checkpw-0.30-r3.ebuild b/net-mail/cmd5checkpw/cmd5checkpw-0.30-r3.ebuild
new file mode 100644
index 00000000000..38ddd2149fd
--- /dev/null
+++ b/net-mail/cmd5checkpw/cmd5checkpw-0.30-r3.ebuild
@@ -0,0 +1,65 @@
+# Copyright 1999-2019 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit fixheadtails
+
+MY_VER=$(ver_rs 1- "")
+
+DESCRIPTION="A checkpassword compatible authentication program that used CRAM-MD5 authentication mode"
+SRC_URI="https://www.fehcom.de/qmail/auth/${PN}-${MY_VER}_tgz.bin -> ${P}.tar.gz"
+HOMEPAGE="https://www.fehcom.de/qmail/smtpauth.html"
+
+LICENSE="public-domain RSA"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE=""
+
+DEPEND="acct-group/cmd5checkpw"
+RDEPEND="${DEPEND}"
+
+pkg_setup() {
+ if has_version "<net-mail/cmd5checkpw-0.30"; then
+ ewarn
+ ewarn "this version is in NO WAY COMPATIBLE with cmd5checkpw-0.2x"
+ ewarn "it actually receives the authentication credentials"
+ ewarn "in a different order then the old implementation"
+ ewarn "see bug #100693 for details"
+ ewarn "this version IS needed by >=qmail-1.03-r16"
+ ewarn
+ fi
+}
+
+PATCHES=(
+ "${FILESDIR}"/euid_${MY_VER}.diff
+ "${FILESDIR}"/reloc.diff
+)
+
+src_prepare() {
+ default
+
+ ht_fix_file Makefile
+}
+
+src_compile() {
+ emake CFLAGS="${CFLAGS}" LDFLAGS="${LDFLAGS} -o cmd5checkpw"
+}
+
+src_install() {
+ insinto /etc
+ insopts -m 640 -o root -g cmd5checkpw
+ doins "${FILESDIR}"/poppasswd
+
+ exeinto /usr/bin
+ exeopts -o root -g cmd5checkpw -m 2755
+ doexe cmd5checkpw
+
+ doman cmd5checkpw.8
+ einstalldocs
+}
+
+pkg_postinst() {
+ chmod 640 "${EROOT}"/etc/poppasswd || die
+ chown root:cmd5checkpw "${EROOT}"/etc/poppasswd || die
+}
next reply other threads:[~2019-11-21 13:16 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2019-11-21 13:16 Joonas Niilola [this message]
-- strict thread matches above, loose matches on Subject: below --
2022-04-14 3:47 [gentoo-commits] repo/gentoo:master commit in: net-mail/cmd5checkpw/ Joonas Niilola
2019-11-10 16:38 Aaron Bauman
2019-11-10 16:38 Aaron Bauman
2019-11-07 6:08 Joonas Niilola
2019-11-07 6:08 Joonas Niilola
2017-06-19 14:03 Alexis Ballier
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1574342170.8d7838512d6b7d92ab2029830c7bff198a30654e.juippis@gentoo \
--to=juippis@gentoo.org \
--cc=gentoo-commits@lists.gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox