From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id DE83E158020 for ; Thu, 24 Nov 2022 09:50:58 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E207AE0905; Thu, 24 Nov 2022 09:50:57 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id C84B7E0905 for ; Thu, 24 Nov 2022 09:50:57 +0000 (UTC) Received: from oystercatcher.gentoo.org (oystercatcher.gentoo.org [148.251.78.52]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id AC55B340F1F for ; Thu, 24 Nov 2022 09:50:56 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 0CFC673B for ; Thu, 24 Nov 2022 09:50:55 +0000 (UTC) From: "Sam James" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Sam James" Message-ID: <1669283424.72b1e774c4f1559b276f6441b1288b6bb0d9c3a0.sam@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: net-fs/samba/ X-VCS-Repository: repo/gentoo X-VCS-Files: net-fs/samba/samba-4.15.12-r1.ebuild net-fs/samba/samba-4.15.12-r2.ebuild net-fs/samba/samba-4.16.7-r1.ebuild net-fs/samba/samba-4.16.7-r2.ebuild X-VCS-Directories: net-fs/samba/ X-VCS-Committer: sam X-VCS-Committer-Name: Sam James X-VCS-Revision: 72b1e774c4f1559b276f6441b1288b6bb0d9c3a0 X-VCS-Branch: master Date: Thu, 24 Nov 2022 09:50:55 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 4f693585-cbcf-4032-a40c-ff0ad774dfa0 X-Archives-Hash: 4f4bbbe1197f24c2475eebadba56df0d commit: 72b1e774c4f1559b276f6441b1288b6bb0d9c3a0 Author: Joakim Tjernlund infinera com> AuthorDate: Thu Nov 17 09:04:25 2022 +0000 Commit: Sam James gentoo org> CommitDate: Thu Nov 24 09:50:24 2022 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=72b1e774 net-fs/samba: Make smbspool_krb5_wrapper accessible to root only For CUPS to exec an plugin as root, group and others must not have privs. Closes: https://bugs.gentoo.org/880739 Signed-off-by: Joakim Tjernlund infinera.com> Closes: https://github.com/gentoo/gentoo/pull/28307 Signed-off-by: Sam James gentoo.org> net-fs/samba/{samba-4.15.12-r1.ebuild => samba-4.15.12-r2.ebuild} | 2 ++ net-fs/samba/{samba-4.16.7-r1.ebuild => samba-4.16.7-r2.ebuild} | 2 ++ 2 files changed, 4 insertions(+) diff --git a/net-fs/samba/samba-4.15.12-r1.ebuild b/net-fs/samba/samba-4.15.12-r2.ebuild similarity index 98% rename from net-fs/samba/samba-4.15.12-r1.ebuild rename to net-fs/samba/samba-4.15.12-r2.ebuild index 9d2737f68680..2b804ec1862d 100644 --- a/net-fs/samba/samba-4.15.12-r1.ebuild +++ b/net-fs/samba/samba-4.15.12-r2.ebuild @@ -266,6 +266,8 @@ multilib_src_install() { # Make all .so files executable find "${ED}" -type f -name "*.so" -exec chmod +x {} + || die + # smbspool_krb5_wrapper must only be accessible to root, bug #880739 + find "${ED}" -type f -name "smbspool_krb5_wrapper" -exec chmod go-rwx {} + || die if multilib_is_native_abi ; then # install ldap schema for server (bug #491002) diff --git a/net-fs/samba/samba-4.16.7-r1.ebuild b/net-fs/samba/samba-4.16.7-r2.ebuild similarity index 98% rename from net-fs/samba/samba-4.16.7-r1.ebuild rename to net-fs/samba/samba-4.16.7-r2.ebuild index 36cf60e8eed0..81857fb18f5b 100644 --- a/net-fs/samba/samba-4.16.7-r1.ebuild +++ b/net-fs/samba/samba-4.16.7-r2.ebuild @@ -307,6 +307,8 @@ multilib_src_install() { # Make all .so files executable find "${ED}" -type f -name "*.so" -exec chmod +x {} + || die + # smbspool_krb5_wrapper must only be accessible to root, bug #880739 + find "${ED}" -type f -name "smbspool_krb5_wrapper" -exec chmod go-rwx {} + || die if multilib_is_native_abi ; then # Install ldap schema for server (bug #491002)