[gentoo-commits] gentoo-x86 commit in www-apache/anyterm/files: anyterm-1.1.15-postinst-en.txt anyterm-1.1.15-browser-gentoo.patch digest-anyterm-1.1.15

[Benedikt Boehm (hollow)]

hollow      07/09/08 16:30:44

  Added:                anyterm-1.1.15-postinst-en.txt
                        anyterm-1.1.15-browser-gentoo.patch
                        digest-anyterm-1.1.15
  Log:
  version bump
  (Portage version: 2.1.3.7)

Revision  Changes    Path
1.1                  www-apache/anyterm/files/anyterm-1.1.15-postinst-en.txt

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/www-apache/anyterm/files/anyterm-1.1.15-postinst-en.txt?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/www-apache/anyterm/files/anyterm-1.1.15-postinst-en.txt?rev=1.1&content-type=text/plain

Index: anyterm-1.1.15-postinst-en.txt
===================================================================
DEFAULT GENTOO INSTALLATION

The default Gentoo installation is designed to work and be as secure as
possible out-of-the box as long as you have USE="ssl pam -opera".


USE FLAGS

+ssl    forces anyterm to only run over secure (HTTPS) connections.
-ssl    disables secure connections, all data will pass over the network in
        plain text, including passwords!
+pam    enables PAM authentication, so anyone with an account on your computer
        can use anyterm without any further configuration.
-pam    means that you will have to configure your own authentication
        mechanism.
+opera  Enables a workaround for a bug in the Opera browser, but you will have
        to modify apache's logging behaviour to prevent snooping by local
        users.
-opera  Disables the Opera bug workaround.


INSTALLATION INSTRUCTIONS

1. Add the following flags to APACHE2_OPTS in /etc/init.d/apache2:
    -D ANYTERM
    -D SSL -D SSL_DEFAULT_VHOST  # if USE=ssl
    -D AUTH_PAM                  # if USE=pam

2. If you have USE=vhosts then you need to add the following directives to
   each virtual host's configuration file:
    <Directory "${MY_INSTALLDIR}">
        AllowOverride All
    </Directory>

3. If you have USE=opera then you should disable logging of some requests. In
   each apache configuration file add env=!DONTLOG to each CustomLog
   directive. For example:

   USE="ssl -vhosts": edit /etc/apache2/modules.d/41_mod_ssl.default-vhost.conf:

   CustomLog logs/ssl_request_log \
       "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" \
       env=!DONTLOG

   USE="-ssl -vhosts": edit /etc/apache2/modules.d/00_mod_log_config.conf:
       CustomLog logs/access_log common env=!DONTLOG

4. Restart apache2:
   /etc/init.d/apache2 restart

5. Browse to:
   https://${VHOST_HOSTNAME}${VHOST_APPDIR}/${PN}.html  # if USE=ssl
   http://${VHOST_HOSTNAME}${VHOST_APPDIR}/${PN}.html   # if USE=-ssl


MORE INFORMATION

http://anyterm.org/
http://anyterm.org/security.html



1.1                  www-apache/anyterm/files/anyterm-1.1.15-browser-gentoo.patch

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/www-apache/anyterm/files/anyterm-1.1.15-browser-gentoo.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/www-apache/anyterm/files/anyterm-1.1.15-browser-gentoo.patch?rev=1.1&content-type=text/plain

Index: anyterm-1.1.15-browser-gentoo.patch
===================================================================
Index: anyterm-1.1.15/browser/anyterm.js
===================================================================
--- anyterm-1.1.15.orig/browser/anyterm.js
+++ anyterm-1.1.15/browser/anyterm.js
@@ -24,16 +24,21 @@ var term;
 var open=false;
 var session;
 
-var method="POST";
-//var method="GET";
+#USE=opera#//var method="POST";
+#USE=opera#var method="GET";
+#USE=-opera#var method="POST";
+#USE=-opera#//var method="GET";
 
 // Random sequence numbers are needed to prevent Opera from caching
 // replies
 
 var is_opera = navigator.userAgent.toLowerCase().indexOf("opera") != -1;
-if (is_opera) {
-  method="GET";
-}
+#USE=opera#if (is_opera) {
+#USE=opera#  method="GET";
+#USE=opera#}
+#USE=-opera#//if (is_opera) {
+#USE=-opera#//  method="GET";
+#USE=-opera#//}
 
 var seqnum_val=Math.round(Math.random()*100000);
 function cachebust() {
Index: anyterm-1.1.15/browser/.htaccess
===================================================================
--- anyterm-1.1.15.orig/browser/.htaccess
+++ anyterm-1.1.15/browser/.htaccess
@@ -6,6 +6,8 @@
 # will be ignored if the anyterm module has not been loaded.
 
 <IfModule anyterm>
+#USE=ssl#<IfModule mod_ssl.c>
+#USE=pam#<IfModule mod_auth_pam.c>
 
 # Use an anyterm_command directive to specify the command to run
 # inside the terminal:
@@ -24,6 +26,16 @@
 # Example:
 # anyterm_command '/path/to/anygetty --remotehost "Anyterm: %h" --autologin=%u'
 
+# twp: Use ssh to avoid problems with Gentoo's /bin/login.
+anyterm_command '/usr/bin/ssh %u@localhost'
+
+#USE=ssl#SSLRequireSSL
+#USE=ssl#
+#USE=pam#AuthPAM_Enabled on
+#USE=pam#AuthType Basic
+#USE=pam#AuthName "Anyterm"
+#USE=pam#Require valid-user
+#USE=pam#
 <Files anyterm-module>
   SetHandler anyterm
 
@@ -34,9 +46,12 @@
   # CustomLog /path/to/logfile combined env=!DONTLOG
   # See the Apache documentation for details.  Note "=!" not "!=" !
 
-  # SetEnv DONTLOG
+#USE=opera#  SetEnv DONTLOG
+#USE=-opera#  # SetEnv DONTLOG
 </Files>
 
+#USE=pam#</IfModule>
+#USE=ssl#</IfModule>
 # Additional Security Issues
 
 # If you're just testing Anyterm on a machine that's not connected to



1.1                  www-apache/anyterm/files/digest-anyterm-1.1.15

file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/www-apache/anyterm/files/digest-anyterm-1.1.15?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/www-apache/anyterm/files/digest-anyterm-1.1.15?rev=1.1&content-type=text/plain

Index: digest-anyterm-1.1.15
===================================================================
MD5 12a3620e892cfbff89663a568b826911 anyterm-1.1.15.tbz2 192092
RMD160 b4ee6524a6fd4002b1e2c111382aeff392b3a554 anyterm-1.1.15.tbz2 192092
SHA256 f5c3fa8077f510ec0c17c8de107179c77bdf7f1b8328c124cb52846e9ee283e5 anyterm-1.1.15.tbz2 192092



-- 
gentoo-commits@g.o mailing list