[gentoo-commits] gentoo-x86 commit in sys-auth/nss-ldapd: ChangeLog nss-ldapd-0.6.7-r1.ebuild nss-ldapd-0.6.7.ebuild

[Doug Goldstein (cardoe)]

cardoe      09/04/02 18:50:35

  Modified:             ChangeLog
  Added:                nss-ldapd-0.6.7-r1.ebuild
  Removed:              nss-ldapd-0.6.7.ebuild
  Log:
  Remove world read from config file to fix security issue when using bindpw field. bug #264574 CVE-2009-1073
  (Portage version: 2.1.6.11/cvs/Linux x86_64)

Revision  Changes    Path
1.4                  sys-auth/nss-ldapd/ChangeLog

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/sys-auth/nss-ldapd/ChangeLog?rev=1.4&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/sys-auth/nss-ldapd/ChangeLog?rev=1.4&content-type=text/plain
diff : http://sources.gentoo.org/viewcvs.py/gentoo-x86/sys-auth/nss-ldapd/ChangeLog?r1=1.3&r2=1.4

Index: ChangeLog
===================================================================
RCS file: /var/cvsroot/gentoo-x86/sys-auth/nss-ldapd/ChangeLog,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- ChangeLog	8 Dec 2008 03:00:49 -0000	1.3
+++ ChangeLog	2 Apr 2009 18:50:35 -0000	1.4
@@ -1,6 +1,13 @@
 # ChangeLog for sys-auth/nss-ldapd
-# Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-auth/nss-ldapd/ChangeLog,v 1.3 2008/12/08 03:00:49 jmbsvicetto Exp $
+# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-auth/nss-ldapd/ChangeLog,v 1.4 2009/04/02 18:50:35 cardoe Exp $
+
+*nss-ldapd-0.6.7-r1 (02 Apr 2009)
+
+  02 Apr 2009; Doug Goldstein <cardoe@g.o> -nss-ldapd-0.6.7.ebuild,
+  +nss-ldapd-0.6.7-r1.ebuild:
+  Remove world read from config file to fix security issue when using bindpw
+  field. bug #264574 CVE-2009-1073
 
   08 Dec 2008; Jorge Manuel B. S. Vicetto <jmbsvicetto@g.o>
   metadata.xml:



1.1                  sys-auth/nss-ldapd/nss-ldapd-0.6.7-r1.ebuild

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/sys-auth/nss-ldapd/nss-ldapd-0.6.7-r1.ebuild?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/sys-auth/nss-ldapd/nss-ldapd-0.6.7-r1.ebuild?rev=1.1&content-type=text/plain

Index: nss-ldapd-0.6.7-r1.ebuild
===================================================================
# Copyright 1999-2009 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-auth/nss-ldapd/nss-ldapd-0.6.7-r1.ebuild,v 1.1 2009/04/02 18:50:35 cardoe Exp $

inherit multilib

DESCRIPTION="NSS module for name lookups using LDAP"
HOMEPAGE="http://ch.tudelft.nl/~arthur/nss-ldapd/"
SRC_URI="http://ch.tudelft.nl/~arthur/nss-ldapd/${P}.tar.gz"

LICENSE="LGPL-2.1"
SLOT="0"
KEYWORDS="~amd64"
IUSE="debug kerberos sasl"

DEPEND="net-nds/openldap
		sasl? ( dev-libs/cyrus-sasl )
		kerberos? ( virtual/krb5 )
		!sys-auth/nss_ldap"
RDEPEND="${DEPEND}"

src_compile() {
	# nss libraries always go in /lib on Gentoo
	econf --enable-warnings --with-ldap-lib=openldap $(use_enable debug) \
		--libdir=/$(get_libdir) \
		|| die "econf failed"
	emake || die "emake failed"
}

src_install() {
	emake DESTDIR="${D}" install || die "make install failed"

	dodoc NEWS ChangeLog AUTHORS README

	# for socket and pid file
	keepdir /var/run/nslcd

	# init script
	newinitd "${FILESDIR}"/nslcd.rc nslcd

	# make an example copy
	insinto /usr/share/nss-ldapd
	doins nss-ldapd.conf

	fperms o-r /etc/nss-ldapd.conf
}

pkg_postinst() {
	elog
	elog "For this to work you must configure /etc/nss-ldapd.conf"
	elog "This configuration is similar to pam_ldap's /etc/ldap.conf"
	elog
	elog "In order to use nss-ldapd, nslcd needs to be running. You can"
	elog "start it like this:"
	elog "  # /etc/init.d/nslcd start"
	elog
	elog "You can add it to the default runlevel like so:"
	elog " # rc-update add nslcd default"
}