1 |
commit: 6bbef22015f3243fc012becd396e145981eb6c05 |
2 |
Author: Lars Wendler <polynomial-c <AT> gentoo <DOT> org> |
3 |
AuthorDate: Fri Sep 18 06:09:20 2020 +0000 |
4 |
Commit: Lars Wendler <polynomial-c <AT> gentoo <DOT> org> |
5 |
CommitDate: Fri Sep 18 06:09:29 2020 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6bbef220 |
7 |
|
8 |
net-fs/cifs-utils: Security bump to version 6.11 |
9 |
|
10 |
Bug: https://bugs.gentoo.org/743211 |
11 |
Package-Manager: Portage-3.0.7, Repoman-3.0.1 |
12 |
Signed-off-by: Lars Wendler <polynomial-c <AT> gentoo.org> |
13 |
|
14 |
net-fs/cifs-utils/Manifest | 1 + |
15 |
net-fs/cifs-utils/cifs-utils-6.11.ebuild | 126 +++++++++++++++++++++++++++++++ |
16 |
2 files changed, 127 insertions(+) |
17 |
|
18 |
diff --git a/net-fs/cifs-utils/Manifest b/net-fs/cifs-utils/Manifest |
19 |
index 6571c0d3ac2..91cd6be06ba 100644 |
20 |
--- a/net-fs/cifs-utils/Manifest |
21 |
+++ b/net-fs/cifs-utils/Manifest |
22 |
@@ -1,2 +1,3 @@ |
23 |
DIST cifs-utils-6.10.tar.bz2 364221 BLAKE2B 45b692fb85217a25b7042fbe7e40cc8c4fe0d6cc9c905acde2c6fc9c3048343064e376f47128bcacba88f745452148040ad3f5e8ca15e297531f0dc868e1b75b SHA512 e19ca69b7948f01c1fd6a4ed069e00511588b903a5b8b0dc35ac1e00743170b9ca180b747c47d56cfacf273b296da21df60e1957404f26ebf2ba80bfa7e275cc |
24 |
+DIST cifs-utils-6.11.tar.bz2 408903 BLAKE2B 5ee7cd87b54a266750bf938396ee90b3f20c2a3446aca295ccb58cb667fbfb68be9aa0e2bbc20aa5e18ffd7f1fcd5fbb0aef3bc25fd13bb96abc5a57a0b45b4b SHA512 064c0ac75572fb44908390508462e4fdfe0686751149fd8b656a209dd961a5a24a7d9774c38c0e72fa5f9875b43aea7bf2de038c4e4a63a11664e71d9003100e |
25 |
DIST cifs-utils-6.9.tar.bz2 400430 BLAKE2B fc8cc55fae54d84fc1f1d4a14a9d666d87a3da78d1502f0d72ac9cb44ff1424ca2c5b15b0be510579d4c9f5181980627efedd00e0e5cfb1b3e47188ba307ad28 SHA512 b92e4e39eeed1032bb175659296cde034703fb3ca63aae00419d46a33dadf821fedaf03734128112c164c84bcbb48d92d03cdc275c4a7cba26f984aeca40a40a |
26 |
|
27 |
diff --git a/net-fs/cifs-utils/cifs-utils-6.11.ebuild b/net-fs/cifs-utils/cifs-utils-6.11.ebuild |
28 |
new file mode 100644 |
29 |
index 00000000000..18fc41eaf8c |
30 |
--- /dev/null |
31 |
+++ b/net-fs/cifs-utils/cifs-utils-6.11.ebuild |
32 |
@@ -0,0 +1,126 @@ |
33 |
+# Copyright 1999-2020 Gentoo Authors |
34 |
+# Distributed under the terms of the GNU General Public License v2 |
35 |
+ |
36 |
+EAPI=7 |
37 |
+ |
38 |
+inherit autotools bash-completion-r1 linux-info multilib pam |
39 |
+ |
40 |
+DESCRIPTION="Tools for Managing Linux CIFS Client Filesystems" |
41 |
+HOMEPAGE="https://wiki.samba.org/index.php/LinuxCIFS_utils" |
42 |
+SRC_URI="https://ftp.samba.org/pub/linux-cifs/${PN}/${P}.tar.bz2" |
43 |
+ |
44 |
+LICENSE="GPL-3" |
45 |
+SLOT="0" |
46 |
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sparc ~x86 ~x86-linux" |
47 |
+IUSE="+acl +ads +caps creds pam systemd" |
48 |
+ |
49 |
+RDEPEND=" |
50 |
+ !net-fs/mount-cifs |
51 |
+ sys-apps/keyutils:= |
52 |
+ ads? ( |
53 |
+ sys-libs/talloc |
54 |
+ virtual/krb5 |
55 |
+ ) |
56 |
+ caps? ( sys-libs/libcap-ng ) |
57 |
+ pam? ( sys-libs/pam ) |
58 |
+" |
59 |
+DEPEND="${RDEPEND}" |
60 |
+BDEPEND="dev-python/docutils" |
61 |
+PDEPEND=" |
62 |
+ acl? ( >=net-fs/samba-4.0.0_alpha1 ) |
63 |
+" |
64 |
+ |
65 |
+REQUIRED_USE="acl? ( ads )" |
66 |
+ |
67 |
+DOCS="doc/linux-cifs-client-guide.odt" |
68 |
+ |
69 |
+PATCHES=( "${FILESDIR}/${PN}-6.10-ln_in_destdir.patch" ) |
70 |
+ |
71 |
+pkg_setup() { |
72 |
+ linux-info_pkg_setup |
73 |
+ |
74 |
+ if ! linux_config_exists || ! linux_chkconfig_present CIFS; then |
75 |
+ ewarn "You must enable CIFS support in your kernel config, " |
76 |
+ ewarn "to be able to mount samba shares. You can find it at" |
77 |
+ ewarn |
78 |
+ ewarn " File systems" |
79 |
+ ewarn " Network File Systems" |
80 |
+ ewarn " CIFS support" |
81 |
+ ewarn |
82 |
+ ewarn "and recompile your kernel ..." |
83 |
+ fi |
84 |
+} |
85 |
+ |
86 |
+src_prepare() { |
87 |
+ default |
88 |
+ |
89 |
+ if has_version app-crypt/heimdal ; then |
90 |
+ # https://bugs.gentoo.org/612584 |
91 |
+ eapply "${FILESDIR}/${PN}-6.7-heimdal.patch" |
92 |
+ fi |
93 |
+ |
94 |
+ eautoreconf |
95 |
+} |
96 |
+ |
97 |
+src_configure() { |
98 |
+ local myeconfargs=( |
99 |
+ --enable-man |
100 |
+ --enable-smbinfo |
101 |
+ $(use_enable acl cifsacl cifsidmap) |
102 |
+ $(use_enable ads cifsupcall) |
103 |
+ $(use_with caps libcap) |
104 |
+ $(use_enable creds cifscreds) |
105 |
+ $(use_enable pam) |
106 |
+ $(use_with pam pamdir $(getpam_mod_dir)) |
107 |
+ # mount.cifs can get passwords from systemd |
108 |
+ $(use_enable systemd) |
109 |
+ ) |
110 |
+ ROOTSBINDIR="${EPREFIX}"/sbin \ |
111 |
+ econf "${myeconfargs[@]}" |
112 |
+} |
113 |
+ |
114 |
+src_install() { |
115 |
+ default |
116 |
+ |
117 |
+ # remove empty directories |
118 |
+ find "${ED}" -type d -empty -delete || die |
119 |
+ |
120 |
+ if use acl ; then |
121 |
+ dodir /etc/cifs-utils |
122 |
+ dosym ../../usr/$(get_libdir)/cifs-utils/idmapwb.so \ |
123 |
+ /etc/cifs-utils/idmap-plugin |
124 |
+ dodir /etc/request-key.d |
125 |
+ echo 'create cifs.idmap * * /usr/sbin/cifs.idmap %k' \ |
126 |
+ > "${ED}/etc/request-key.d/cifs.idmap.conf" |
127 |
+ fi |
128 |
+ |
129 |
+ if use ads ; then |
130 |
+ dodir /etc/request-key.d |
131 |
+ echo 'create dns_resolver * * /usr/sbin/cifs.upcall %k' \ |
132 |
+ > "${ED}/etc/request-key.d/cifs.upcall.conf" |
133 |
+ echo 'create cifs.spnego * * /usr/sbin/cifs.upcall %k' \ |
134 |
+ > "${ED}/etc/request-key.d/cifs.spnego.conf" |
135 |
+ fi |
136 |
+ |
137 |
+ dobashcomp bash-completion/smbinfo |
138 |
+} |
139 |
+ |
140 |
+pkg_postinst() { |
141 |
+ # Inform about set-user-ID bit of mount.cifs |
142 |
+ ewarn "setuid use flag was dropped due to multiple security implications" |
143 |
+ ewarn "such as CVE-2009-2948, CVE-2011-3585 and CVE-2012-1586" |
144 |
+ ewarn "You are free to set setuid flags by yourself" |
145 |
+ |
146 |
+ # Inform about upcall usage |
147 |
+ if use acl ; then |
148 |
+ einfo "The cifs.idmap utility has been enabled by creating the" |
149 |
+ einfo "configuration file /etc/request-key.d/cifs.idmap.conf" |
150 |
+ einfo "This enables you to get and set CIFS acls." |
151 |
+ fi |
152 |
+ |
153 |
+ if use ads ; then |
154 |
+ einfo "The cifs.upcall utility has been enabled by creating the" |
155 |
+ einfo "configuration file /etc/request-key.d/cifs.upcall.conf" |
156 |
+ einfo "This enables you to mount DFS shares." |
157 |
+ fi |
158 |
+} |