From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Qyft6-0003qR-Um for garchives@archives.gentoo.org; Wed, 31 Aug 2011 08:11:09 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 48CF121C177; Wed, 31 Aug 2011 08:11:01 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id 0665721C177 for ; Wed, 31 Aug 2011 08:11:00 +0000 (UTC) Received: from flycatcher.gentoo.org (flycatcher.gentoo.org [81.93.255.6]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 4D28C1B4018 for ; Wed, 31 Aug 2011 08:11:00 +0000 (UTC) Received: by flycatcher.gentoo.org (Postfix, from userid 2282) id 0F7D82004C; Wed, 31 Aug 2011 08:10:59 +0000 (UTC) From: "Eray Aslan (eras)" To: gentoo-commits@lists.gentoo.org Reply-To: gentoo-dev@lists.gentoo.org, eras@gentoo.org Subject: [gentoo-commits] gentoo-x86 commit in net-proxy/squid: ChangeLog squid-3.1.15.ebuild X-VCS-Repository: gentoo-x86 X-VCS-Files: ChangeLog squid-3.1.15.ebuild X-VCS-Directories: net-proxy/squid X-VCS-Committer: eras X-VCS-Committer-Name: Eray Aslan Content-Type: text/plain; charset=utf8 Message-Id: <20110831081059.0F7D82004C@flycatcher.gentoo.org> Date: Wed, 31 Aug 2011 08:10:59 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: X-Archives-Hash: 1be5f1eeabd6250949fec226262e432d eras 11/08/31 08:10:59 Modified: ChangeLog Added: squid-3.1.15.ebuild Log: version bump - security bug #381065 =20 (Portage version: 2.1.10.11/cvs/Linux x86_64) Revision Changes Path 1.321 net-proxy/squid/ChangeLog file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-proxy/squid/Ch= angeLog?rev=3D1.321&view=3Dmarkup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-proxy/squid/Ch= angeLog?rev=3D1.321&content-type=3Dtext/plain diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-proxy/squid/Ch= angeLog?r1=3D1.320&r2=3D1.321 Index: ChangeLog =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D RCS file: /var/cvsroot/gentoo-x86/net-proxy/squid/ChangeLog,v retrieving revision 1.320 retrieving revision 1.321 diff -u -r1.320 -r1.321 --- ChangeLog 30 Apr 2011 12:46:52 -0000 1.320 +++ ChangeLog 31 Aug 2011 08:10:58 -0000 1.321 @@ -1,6 +1,12 @@ # ChangeLog for net-proxy/squid # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-proxy/squid/ChangeLog,v 1.320 201= 1/04/30 12:46:52 flameeyes Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-proxy/squid/ChangeLog,v 1.321 201= 1/08/31 08:10:58 eras Exp $ + +*squid-3.1.15 (31 Aug 2011) + + 31 Aug 2011; Eray Aslan +squid-3.1.15.ebuild, + +files/squid-3.1.15-gentoo.patch: + version bump - security bug #381065 =20 30 Apr 2011; Diego E. Petten=C3=B2 squid-3.1.12= .ebuild: Fix install with USE=3D-pam. 1.1 net-proxy/squid/squid-3.1.15.ebuild file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-proxy/squid/sq= uid-3.1.15.ebuild?rev=3D1.1&view=3Dmarkup plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-proxy/squid/sq= uid-3.1.15.ebuild?rev=3D1.1&content-type=3Dtext/plain Index: squid-3.1.15.ebuild =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D # Copyright 1999-2011 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 # $Header: /var/cvsroot/gentoo-x86/net-proxy/squid/squid-3.1.15.ebuild,v = 1.1 2011/08/31 08:10:58 eras Exp $ EAPI=3D4 inherit eutils pam toolchain-funcs autotools linux-info DESCRIPTION=3D"A full-featured web proxy cache" HOMEPAGE=3D"http://www.squid-cache.org/" SRC_URI=3D"http://www.squid-cache.org/Versions/v3/3.1/${P}.tar.gz" LICENSE=3D"GPL-2" SLOT=3D"0" KEYWORDS=3D"~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~sparc ~x86 = ~x86-fbsd" IUSE=3D"caps ipv6 pam ldap samba sasl kerberos nis radius ssl snmp selinu= x logrotate test \ ecap icap-client \ mysql postgres sqlite \ zero-penalty-hit \ pf-transparent ipf-transparent kqueue \ elibc_uclibc kernel_linux +epoll tproxy" COMMON_DEPEND=3D"caps? ( >=3Dsys-libs/libcap-2.16 ) pam? ( virtual/pam ) ldap? ( net-nds/openldap ) kerberos? ( virtual/krb5 ) ssl? ( dev-libs/openssl ) sasl? ( dev-libs/cyrus-sasl ) ecap? ( net-libs/libecap ) selinux? ( sec-policy/selinux-squid ) !x86-fbsd? ( logrotate? ( app-admin/logrotate ) ) >=3Dsys-libs/db-4 dev-lang/perl" DEPEND=3D"${COMMON_DEPEND} sys-apps/ed test? ( dev-util/cppunit )" RDEPEND=3D"${COMMON_DEPEND} samba? ( net-fs/samba ) mysql? ( dev-perl/DBD-mysql ) postgres? ( dev-perl/DBD-Pg ) sqlite? ( dev-perl/DBD-SQLite )" REQUIRED_USE=3D"tproxy? ( caps )" pkg_pretend() { if grep -qs '^[[:space:]]*cache_dir[[:space:]]\+coss' "${ROOT}"etc/squid= /squid.conf; then eerror "coss store IO has been disabled by upstream due to stability is= sues!" eerror "If you want to install this version, switch the store type to s= omething else" eerror "before attempting to install this version again." die "/etc/squid/squid.conf: cache_dir uses a disabled store type" fi if use tproxy; then echo elog "Checking kernel configuration for full Tproxy4 support" local CONFIG_CHECK=3D"~NF_CONNTRACK ~NETFILTER_TPROXY ~NETFILTER_XT_MAT= CH_SOCKET ~NETFILTER_XT_TARGET_TPROXY" linux-info_pkg_setup echo fi } pkg_setup() { enewgroup squid 31 enewuser squid 31 -1 /var/cache/squid squid } src_prepare() { epatch "${FILESDIR}"/${P}-gentoo.patch eautoreconf } src_configure() { local myconf=3D"" local basic_modules=3D"getpwnam,NCSA,MSNT" use samba && basic_modules=3D"SMB,multi-domain-NTLM,${basic_modules}" use ldap && basic_modules=3D"LDAP,${basic_modules}" use pam && basic_modules=3D"PAM,${basic_modules}" use sasl && basic_modules=3D"SASL,${basic_modules}" use nis && ! use elibc_uclibc && basic_modules=3D"YP,${basic_modules}" use radius && basic_modules=3D"squid_radius_auth,${basic_modules}" if use mysql || use postgres || use sqlite ; then basic_modules=3D"DB,${basic_modules}" fi local digest_modules=3D"password" use ldap && digest_modules=3D"ldap,${digest_modules}" local ext_helpers=3D"ip_user,session,unix_group" use samba && ext_helpers=3D"wbinfo_group,${ext_helpers}" use ldap && ext_helpers=3D"ldap_group,${ext_helpers}" local ntlm_helpers=3D"fakeauth" use samba && ntlm_helpers=3D"smb_lm,${ntlm_helpers}" local negotiate_helpers=3D if use kerberos; then negotiate_helpers=3D"squid_kerb_auth" if has_version app-crypt/mit-krb5; then myconf=3D"--enable-mit --disable-heimdal" elif has_version app-crypt/heimdal; then myconf=3D"--disable-mit --enable-heimdal" fi else myconf=3D"--disable-mit --disable-heimdal" fi # coss support has been disabled # If it is re-enabled again, make sure you don't enable it for elibc_ucl= ibc (#61175) myconf=3D"${myconf} --enable-storeio=3Dufs,diskd,aufs" if use kernel_linux; then myconf=3D"${myconf} --enable-linux-netfilter \ $(use_enable tproxy linux-tproxy) \ $(use_enable epoll)" elif use kernel_FreeBSD || use kernel_OpenBSD || use kernel_NetBSD ; the= n myconf=3D"${myconf} $(use_enable kqueue)" if use pf-transparent; then myconf=3D"${myconf} --enable-pf-transparent" elif use ipf-transparent; then myconf=3D"${myconf} --enable-ipf-transparent" fi fi export CC=3D$(tc-getCC) econf \ --sysconfdir=3D/etc/squid \ --libexecdir=3D/usr/libexec/squid \ --localstatedir=3D/var \ --with-pidfile=3D/var/run/squid.pid \ --datadir=3D/usr/share/squid \ --with-logdir=3D/var/log/squid \ --with-default-user=3Dsquid \ --enable-auth=3D"basic,digest,negotiate,ntlm" \ --enable-removal-policies=3D"lru,heap" \ --enable-digest-auth-helpers=3D"${digest_modules}" \ --enable-basic-auth-helpers=3D"${basic_modules}" \ --enable-external-acl-helpers=3D"${ext_helpers}" \ --enable-ntlm-auth-helpers=3D"${ntlm_helpers}" \ --enable-negotiate-auth-helpers=3D"${negotiate_helpers}" \ --enable-useragent-log \ --enable-cache-digests \ --enable-delay-pools \ --enable-referer-log \ --enable-arp-acl \ --with-large-files \ --with-filedescriptors=3D8192 \ --disable-strict-error-checking \ $(use_with caps libcap) \ $(use_enable ipv6) \ $(use_enable snmp) \ $(use_enable ssl) \ $(use_enable icap-client) \ $(use_enable ecap) \ $(use_enable zero-penalty-hit zph-qos) \ ${myconf} } src_install() { emake DESTDIR=3D"${D}" install || die "emake install failed" # need suid root for looking into /etc/shadow fowners root:squid /usr/libexec/squid/ncsa_auth fperms 4750 /usr/libexec/squid/ncsa_auth if use pam; then fowners root:squid /usr/libexec/squid/pam_auth fperms 4750 /usr/libexec/squid/pam_auth fi # some cleanups rm -f "${D}"/usr/bin/Run* dodoc CONTRIBUTORS CREDITS ChangeLog QUICKSTART SPONSORS doc/*.txt \ helpers/ntlm_auth/no_check/README.no_check_ntlm_auth newdoc helpers/basic_auth/SMB/README README.auth_smb dohtml helpers/basic_auth/MSNT/README.html RELEASENOTES.html newdoc helpers/basic_auth/LDAP/README README.auth_ldap doman helpers/basic_auth/LDAP/*.8 dodoc helpers/basic_auth/SASL/squid_sasl_auth* newpamd "${FILESDIR}/squid.pam" squid newconfd "${FILESDIR}/squid.confd" squid if use logrotate; then newinitd "${FILESDIR}/squid.initd-logrotate" squid insinto /etc/logrotate.d newins "${FILESDIR}/squid.logrotate" squid else newinitd "${FILESDIR}/squid.initd" squid exeinto /etc/cron.weekly newexe "${FILESDIR}/squid.cron" squid.cron fi rm -rf "${D}"/var diropts -m0755 -o squid -g squid keepdir /var/cache/squid /var/log/squid } pkg_postinst() { echo elog "Squid authentication helpers have been installed suid root." elog "This allows shadow based authentication (see bug #52977 for more).= " echo elog "Be careful what type of cache_dir you select!" elog " 'diskd' is optimized for high levels of traffic, but it might s= eem slow" elog "when there isn't sufficient traffic to keep squid reasonably busy.= " elog " If your traffic level is low to moderate, use 'aufs' or 'ufs'." }