1 |
commit: 5a50c3c8835393a878e462614bdc162127de1d60 |
2 |
Author: Lars Wendler <polynomial-c <AT> gentoo <DOT> org> |
3 |
AuthorDate: Mon Oct 10 11:36:55 2016 +0000 |
4 |
Commit: Lars Wendler <polynomial-c <AT> gentoo <DOT> org> |
5 |
CommitDate: Mon Oct 10 11:36:55 2016 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5a50c3c8 |
7 |
|
8 |
net-misc/ntp: Security cleanup (bug #584954). |
9 |
|
10 |
Package-Manager: portage-2.3.1 |
11 |
Signed-off-by: Lars Wendler <polynomial-c <AT> gentoo.org> |
12 |
|
13 |
net-misc/ntp/Manifest | 6 -- |
14 |
net-misc/ntp/ntp-4.2.8_p3.ebuild | 128 ------------------------------------ |
15 |
net-misc/ntp/ntp-4.2.8_p6.ebuild | 133 ------------------------------------- |
16 |
net-misc/ntp/ntp-4.2.8_p7.ebuild | 137 --------------------------------------- |
17 |
4 files changed, 404 deletions(-) |
18 |
|
19 |
diff --git a/net-misc/ntp/Manifest b/net-misc/ntp/Manifest |
20 |
index 4b8d262..1b50bf8 100644 |
21 |
--- a/net-misc/ntp/Manifest |
22 |
+++ b/net-misc/ntp/Manifest |
23 |
@@ -1,8 +1,2 @@ |
24 |
-DIST ntp-4.2.8p3-manpages.tar.bz2 46419 SHA256 83f9641e52fd79ac8bd76f7d62214591389f97fed5200e8b5d85aa31070f9112 SHA512 1d15c63f5c88e0b45f5de3a35042fde9a3a01413ab460f553124ad996832b46c72212070ccbefc0e70aef8ffe4c634b7424e06ac31f62cd921a3df13b3746d6b WHIRLPOOL 92aa9cebe97454e1d7d1533546bee131795ab6f28538b0326423afbca10b83fadc8693c8148de08d7d7bed0773d462d204632ba38e16a4c442b1bae10094a501 |
25 |
-DIST ntp-4.2.8p3.tar.gz 7099575 SHA256 818ca4f2ed6ca845b1c5ec43f5e6ad905eaa0fc0aab2d509ed6b962a37fbf38f SHA512 5a628f72e900ac8c8a4754bc9620e6511f68035b3a1e1108d619b1beab307d3f6c9f5dad4f3ca3f4e252d0e7e3bf48900044df2934aa87df1f699316db5e9598 WHIRLPOOL 4d66c9403b0bf8b4a9b297bd13974f88bcdc3f524bede0e633f7ee17b688bdd60dcc4e8a23fa7a4efd82540fab515df0b40c140edbefd1bb51352edd06b08d2d |
26 |
-DIST ntp-4.2.8p6-manpages.tar.bz2 24616 SHA256 0c062d240e03320fde25b8824a5cc9b37ee9f50b84325f50b5a0d1f2278e8ee0 SHA512 63b4f6d5183c582229b898dc7799e43664c9111e7eae79e8d3a53972b822883f4ff99782598fa951957460e4d4c7308adb2deef8154a5d26ab1ebc3c18c098aa WHIRLPOOL 0f009fd3b9e6c60e7c1a2c53b4e1a8ccb0d993fde748b0b10614f01a2ea79d30721def1f8ce71285bf4bdf8065bf0458c30af570b98ea8b67ebf4b2d59a86037 |
27 |
-DIST ntp-4.2.8p6.tar.gz 7152557 SHA256 583d0e1c573ace30a9c6afbea0fc52cae9c8c916dbc15c026e485a0dda4ba048 SHA512 797d07980c0b71453f32ae821ef496add0fe712a2bf960ab1af18f0b54caa6029d65238ef7606d1ffb53e2e95c88623b4fb228399b5d4dde9a5fa1b7e256f71b WHIRLPOOL 0a320405dea0239fec9d6d6566e6e8cd7eb37a16232267f822befe4f4c8a359d672d6d58a5e755f7410234482bc7b2198649547dfb49f252b66ac7cee3351e13 |
28 |
-DIST ntp-4.2.8p7-manpages.tar.xz 24988 SHA256 fead8e2c2c7db74c12ba145725932e94595469e128443c01df692889a6efcf33 SHA512 0753c44a51d19af3d6ad24b757a8ebcdaec107cc2d976599d0af15d8e1b91b02223e2af9a78dd8ded22bb041821dee1381db8342679b5e58b65fa3a8916b7f79 WHIRLPOOL 666ffac116a52efb25e6ea072c5fbc79d26181d20f5aa4d2ff9c02056de67d3d2276e593942cc91804e21ddb5660734c9bfe76f60d0c33844cb2d45899c28d17 |
29 |
-DIST ntp-4.2.8p7.tar.gz 7175313 SHA256 81d20c06a0b01abe3b84fac092185bf014252d38fe5e7b2758f604680a0220dc SHA512 7b80192f0e3c4a05cc05f167ab85593acca685d514dcd46fb8f42b4cd2a5525e76ba5e15fd7ff13220e4155de6aab5661554e0ded60bfb1d27a969c589958f55 WHIRLPOOL 858f9f0f22ece06c304f2e19cfd3743facc5f2794d758f88528f2cebbb68f8d7d93dd93d976c1bdb912ad8f7ec4c5c2d6b669d3b2f7723337a70c50da033a323 |
30 |
DIST ntp-4.2.8p8-manpages.tar.xz 24992 SHA256 d1c349c970280b2bdb8ba197b1229c0c909a59782b76f3d650a9d2663e8a4d36 SHA512 1a2b71d66ee9e6f03bfbb8f2c4ab1ed30cb2a5a0673e9769749569aa55e8994bacbef399c4b67da265a9673195618df63d84eafbeb37bef30aea302ab99653ef WHIRLPOOL ec62bc2d01c2494727e385fab4dd40581e69806e5ee7b97dd8cb30c44331386c96650358ff09414536d4b74b8178b0e85a3c436673282f228200b9df863c1890 |
31 |
DIST ntp-4.2.8p8.tar.gz 7205710 SHA256 2ab3d0b5f0456e6311dda1cc27ab75da108762773a19e46abd938bd9407b97ee SHA512 253675667f78ad8855e961d02f6a120b68b75233c18ddb92cb6c9510fb3847f1672d0d6f93ad1eb11b14e3bdf78fdbc1458e516d906b763e8599490da6a4f225 WHIRLPOOL cc054a550e59b44428989a183978ea59c7f1bc2ed9514e7d1cf82127f3188f73edb3521ee5b215438368a3c22b8cae09a78174e943195ddd752f0571335adb9e |
32 |
|
33 |
diff --git a/net-misc/ntp/ntp-4.2.8_p3.ebuild b/net-misc/ntp/ntp-4.2.8_p3.ebuild |
34 |
deleted file mode 100644 |
35 |
index 09663d7..00000000 |
36 |
--- a/net-misc/ntp/ntp-4.2.8_p3.ebuild |
37 |
+++ /dev/null |
38 |
@@ -1,128 +0,0 @@ |
39 |
-# Copyright 1999-2015 Gentoo Foundation |
40 |
-# Distributed under the terms of the GNU General Public License v2 |
41 |
-# $Id$ |
42 |
- |
43 |
-EAPI="5" |
44 |
- |
45 |
-inherit autotools eutils toolchain-funcs flag-o-matic user systemd |
46 |
- |
47 |
-MY_P=${P/_p/p} |
48 |
-DESCRIPTION="Network Time Protocol suite/programs" |
49 |
-HOMEPAGE="http://www.ntp.org/" |
50 |
-SRC_URI="http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-${PV:0:3}/${MY_P}.tar.gz |
51 |
- mirror://gentoo/${MY_P}-manpages.tar.bz2" |
52 |
- |
53 |
-LICENSE="HPND BSD ISC" |
54 |
-SLOT="0" |
55 |
-KEYWORDS="alpha amd64 arm arm64 hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x86-freebsd ~amd64-linux ~ia64-linux ~x86-linux ~m68k-mint" |
56 |
-IUSE="caps debug ipv6 openntpd parse-clocks readline samba selinux snmp ssl +threads vim-syntax zeroconf" |
57 |
- |
58 |
-CDEPEND="readline? ( >=sys-libs/readline-4.1:0= ) |
59 |
- >=dev-libs/libevent-2.0.9[threads?] |
60 |
- kernel_linux? ( caps? ( sys-libs/libcap ) ) |
61 |
- zeroconf? ( net-dns/avahi[mdnsresponder-compat] ) |
62 |
- !openntpd? ( !net-misc/openntpd ) |
63 |
- snmp? ( net-analyzer/net-snmp ) |
64 |
- ssl? ( dev-libs/openssl:0= ) |
65 |
- parse-clocks? ( net-misc/pps-tools )" |
66 |
-DEPEND="${CDEPEND} |
67 |
- virtual/pkgconfig" |
68 |
-RDEPEND="${CDEPEND} |
69 |
- selinux? ( sec-policy/selinux-ntp ) |
70 |
- vim-syntax? ( app-vim/ntp-syntax )" |
71 |
-PDEPEND="openntpd? ( net-misc/openntpd )" |
72 |
- |
73 |
-S=${WORKDIR}/${MY_P} |
74 |
- |
75 |
-pkg_setup() { |
76 |
- enewgroup ntp 123 |
77 |
- enewuser ntp 123 -1 /dev/null ntp |
78 |
-} |
79 |
- |
80 |
-src_prepare() { |
81 |
- epatch "${FILESDIR}"/${PN}-4.2.8-ipc-caps.patch #533966 |
82 |
- append-cppflags -D_GNU_SOURCE #264109 |
83 |
- # Make sure every build uses the same install layout. #539092 |
84 |
- find sntp/loc/ -type f '!' -name legacy -delete || die |
85 |
- # Disable pointless checks. |
86 |
- touch .checkChangeLog .gcc-warning FRC.html html/.datecheck |
87 |
-} |
88 |
- |
89 |
-src_configure() { |
90 |
- # avoid libmd5/libelf |
91 |
- export ac_cv_search_MD5Init=no ac_cv_header_md5_h=no |
92 |
- export ac_cv_lib_elf_nlist=no |
93 |
- # blah, no real configure options #176333 |
94 |
- export ac_cv_header_dns_sd_h=$(usex zeroconf) |
95 |
- export ac_cv_lib_dns_sd_DNSServiceRegister=${ac_cv_header_dns_sd_h} |
96 |
- # Increase the default memlimit from 32MiB to 128MiB. #533232 |
97 |
- econf \ |
98 |
- --with-lineeditlibs=readline,edit,editline \ |
99 |
- --with-yielding-select \ |
100 |
- --disable-local-libevent \ |
101 |
- --docdir='$(datarootdir)'/doc/${PF} \ |
102 |
- --htmldir='$(docdir)/html' \ |
103 |
- --with-memlock=256 \ |
104 |
- $(use_enable caps linuxcaps) \ |
105 |
- $(use_enable parse-clocks) \ |
106 |
- $(use_enable ipv6) \ |
107 |
- $(use_enable debug debugging) \ |
108 |
- $(use_with readline lineeditlibs readline) \ |
109 |
- $(use_enable samba ntp-signd) \ |
110 |
- $(use_with snmp ntpsnmpd) \ |
111 |
- $(use_with ssl crypto) \ |
112 |
- $(use_enable threads thread-support) |
113 |
-} |
114 |
- |
115 |
-src_install() { |
116 |
- default |
117 |
- # move ntpd/ntpdate to sbin #66671 |
118 |
- dodir /usr/sbin |
119 |
- mv "${ED}"/usr/bin/{ntpd,ntpdate} "${ED}"/usr/sbin/ || die "move to sbin" |
120 |
- |
121 |
- dodoc INSTALL WHERE-TO-START |
122 |
- doman "${WORKDIR}"/man/*.[58] |
123 |
- |
124 |
- insinto /etc |
125 |
- doins "${FILESDIR}"/ntp.conf |
126 |
- use ipv6 || sed -i '/^restrict .*::1/d' "${ED}"/etc/ntp.conf #524726 |
127 |
- newinitd "${FILESDIR}"/ntpd.rc-r1 ntpd |
128 |
- newconfd "${FILESDIR}"/ntpd.confd ntpd |
129 |
- newinitd "${FILESDIR}"/ntp-client.rc ntp-client |
130 |
- newconfd "${FILESDIR}"/ntp-client.confd ntp-client |
131 |
- newinitd "${FILESDIR}"/sntp.rc sntp |
132 |
- newconfd "${FILESDIR}"/sntp.confd sntp |
133 |
- if ! use caps ; then |
134 |
- sed -i "s|-u ntp:ntp||" "${ED}"/etc/conf.d/ntpd || die |
135 |
- fi |
136 |
- sed -i "s:/usr/bin:/usr/sbin:" "${ED}"/etc/init.d/ntpd || die |
137 |
- |
138 |
- keepdir /var/lib/ntp |
139 |
- use prefix || fowners ntp:ntp /var/lib/ntp |
140 |
- |
141 |
- if use openntpd ; then |
142 |
- cd "${ED}" |
143 |
- rm usr/sbin/ntpd || die |
144 |
- rm -r var/lib |
145 |
- rm etc/{conf,init}.d/ntpd |
146 |
- rm usr/share/man/*/ntpd.8 || die |
147 |
- else |
148 |
- systemd_newunit "${FILESDIR}"/ntpd.service-r2 ntpd.service |
149 |
- use caps && sed -i '/ExecStart/ s|$| -u ntp:ntp|' "${ED}"/usr/lib/systemd/system/ntpd.service |
150 |
- systemd_enable_ntpunit 60-ntpd ntpd.service |
151 |
- fi |
152 |
- |
153 |
- systemd_newunit "${FILESDIR}"/ntpdate.service-r1 ntpdate.service |
154 |
- systemd_install_serviced "${FILESDIR}"/ntpdate.service.conf |
155 |
- systemd_newunit "${FILESDIR}"/sntp.service-r2 sntp.service |
156 |
- systemd_install_serviced "${FILESDIR}"/sntp.service.conf |
157 |
-} |
158 |
- |
159 |
-pkg_postinst() { |
160 |
- if grep -qs '^[^#].*notrust' "${EROOT}"/etc/ntp.conf ; then |
161 |
- eerror "The notrust option was found in your /etc/ntp.conf!" |
162 |
- ewarn "If your ntpd starts sending out weird responses," |
163 |
- ewarn "then make sure you have keys properly setup and see" |
164 |
- ewarn "https://bugs.gentoo.org/41827" |
165 |
- fi |
166 |
-} |
167 |
|
168 |
diff --git a/net-misc/ntp/ntp-4.2.8_p6.ebuild b/net-misc/ntp/ntp-4.2.8_p6.ebuild |
169 |
deleted file mode 100644 |
170 |
index 0905567..00000000 |
171 |
--- a/net-misc/ntp/ntp-4.2.8_p6.ebuild |
172 |
+++ /dev/null |
173 |
@@ -1,133 +0,0 @@ |
174 |
-# Copyright 1999-2016 Gentoo Foundation |
175 |
-# Distributed under the terms of the GNU General Public License v2 |
176 |
-# $Id$ |
177 |
- |
178 |
-EAPI="5" |
179 |
- |
180 |
-inherit eutils toolchain-funcs flag-o-matic user systemd |
181 |
- |
182 |
-MY_P=${P/_p/p} |
183 |
-DESCRIPTION="Network Time Protocol suite/programs" |
184 |
-HOMEPAGE="http://www.ntp.org/" |
185 |
-SRC_URI="http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-${PV:0:3}/${MY_P}.tar.gz |
186 |
- https://dev.gentoo.org/~polynomial-c/${MY_P}-manpages.tar.bz2" |
187 |
- |
188 |
-LICENSE="HPND BSD ISC" |
189 |
-SLOT="0" |
190 |
-KEYWORDS="alpha amd64 arm ~arm64 hppa ia64 ~m68k ~mips ppc ppc64 ~s390 ~sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x86-freebsd ~amd64-linux ~ia64-linux ~x86-linux ~m68k-mint" |
191 |
-IUSE="caps debug ipv6 libressl openntpd parse-clocks readline samba selinux snmp ssl +threads vim-syntax zeroconf" |
192 |
- |
193 |
-CDEPEND="readline? ( >=sys-libs/readline-4.1:0= ) |
194 |
- >=dev-libs/libevent-2.0.9[threads?] |
195 |
- kernel_linux? ( caps? ( sys-libs/libcap ) ) |
196 |
- zeroconf? ( net-dns/avahi[mdnsresponder-compat] ) |
197 |
- !openntpd? ( !net-misc/openntpd ) |
198 |
- snmp? ( net-analyzer/net-snmp ) |
199 |
- ssl? ( |
200 |
- !libressl? ( dev-libs/openssl:0= ) |
201 |
- libressl? ( dev-libs/libressl ) |
202 |
- ) |
203 |
- parse-clocks? ( net-misc/pps-tools )" |
204 |
-DEPEND="${CDEPEND} |
205 |
- virtual/pkgconfig" |
206 |
-RDEPEND="${CDEPEND} |
207 |
- selinux? ( sec-policy/selinux-ntp ) |
208 |
- vim-syntax? ( app-vim/ntp-syntax )" |
209 |
-PDEPEND="openntpd? ( net-misc/openntpd )" |
210 |
- |
211 |
-S=${WORKDIR}/${MY_P} |
212 |
- |
213 |
-pkg_setup() { |
214 |
- enewgroup ntp 123 |
215 |
- enewuser ntp 123 -1 /dev/null ntp |
216 |
-} |
217 |
- |
218 |
-src_prepare() { |
219 |
- epatch "${FILESDIR}"/${PN}-4.2.8-ipc-caps.patch #533966 |
220 |
- epatch "${FILESDIR}"/${PN}-4.2.8-sntp-test-pthreads.patch #563922 |
221 |
- epatch "${FILESDIR}"/${PN}-4.2.8-ntpd-test-signd.patch |
222 |
- append-cppflags -D_GNU_SOURCE #264109 |
223 |
- # Make sure every build uses the same install layout. #539092 |
224 |
- find sntp/loc/ -type f '!' -name legacy -delete || die |
225 |
- # Disable pointless checks. |
226 |
- touch .checkChangeLog .gcc-warning FRC.html html/.datecheck |
227 |
-} |
228 |
- |
229 |
-src_configure() { |
230 |
- # avoid libmd5/libelf |
231 |
- export ac_cv_search_MD5Init=no ac_cv_header_md5_h=no |
232 |
- export ac_cv_lib_elf_nlist=no |
233 |
- # blah, no real configure options #176333 |
234 |
- export ac_cv_header_dns_sd_h=$(usex zeroconf) |
235 |
- export ac_cv_lib_dns_sd_DNSServiceRegister=${ac_cv_header_dns_sd_h} |
236 |
- # Increase the default memlimit from 32MiB to 128MiB. #533232 |
237 |
- econf \ |
238 |
- --with-lineeditlibs=readline,edit,editline \ |
239 |
- --with-yielding-select \ |
240 |
- --disable-local-libevent \ |
241 |
- --docdir='$(datarootdir)'/doc/${PF} \ |
242 |
- --htmldir='$(docdir)/html' \ |
243 |
- --with-memlock=256 \ |
244 |
- $(use_enable caps linuxcaps) \ |
245 |
- $(use_enable parse-clocks) \ |
246 |
- $(use_enable ipv6) \ |
247 |
- $(use_enable debug debugging) \ |
248 |
- $(use_with readline lineeditlibs readline) \ |
249 |
- $(use_enable samba ntp-signd) \ |
250 |
- $(use_with snmp ntpsnmpd) \ |
251 |
- $(use_with ssl crypto) \ |
252 |
- $(use_enable threads thread-support) |
253 |
-} |
254 |
- |
255 |
-src_install() { |
256 |
- default |
257 |
- # move ntpd/ntpdate to sbin #66671 |
258 |
- dodir /usr/sbin |
259 |
- mv "${ED}"/usr/bin/{ntpd,ntpdate} "${ED}"/usr/sbin/ || die "move to sbin" |
260 |
- |
261 |
- dodoc INSTALL WHERE-TO-START |
262 |
- doman "${WORKDIR}"/man/*.[58] |
263 |
- |
264 |
- insinto /etc |
265 |
- doins "${FILESDIR}"/ntp.conf |
266 |
- use ipv6 || sed -i '/^restrict .*::1/d' "${ED}"/etc/ntp.conf #524726 |
267 |
- newinitd "${FILESDIR}"/ntpd.rc-r1 ntpd |
268 |
- newconfd "${FILESDIR}"/ntpd.confd ntpd |
269 |
- newinitd "${FILESDIR}"/ntp-client.rc ntp-client |
270 |
- newconfd "${FILESDIR}"/ntp-client.confd ntp-client |
271 |
- newinitd "${FILESDIR}"/sntp.rc sntp |
272 |
- newconfd "${FILESDIR}"/sntp.confd sntp |
273 |
- if ! use caps ; then |
274 |
- sed -i "s|-u ntp:ntp||" "${ED}"/etc/conf.d/ntpd || die |
275 |
- fi |
276 |
- sed -i "s:/usr/bin:/usr/sbin:" "${ED}"/etc/init.d/ntpd || die |
277 |
- |
278 |
- keepdir /var/lib/ntp |
279 |
- use prefix || fowners ntp:ntp /var/lib/ntp |
280 |
- |
281 |
- if use openntpd ; then |
282 |
- cd "${ED}" |
283 |
- rm usr/sbin/ntpd || die |
284 |
- rm -r var/lib |
285 |
- rm etc/{conf,init}.d/ntpd |
286 |
- rm usr/share/man/*/ntpd.8 || die |
287 |
- else |
288 |
- systemd_newunit "${FILESDIR}"/ntpd.service-r2 ntpd.service |
289 |
- use caps && sed -i '/ExecStart/ s|$| -u ntp:ntp|' "${ED}"/usr/lib/systemd/system/ntpd.service |
290 |
- systemd_enable_ntpunit 60-ntpd ntpd.service |
291 |
- fi |
292 |
- |
293 |
- systemd_newunit "${FILESDIR}"/ntpdate.service-r1 ntpdate.service |
294 |
- systemd_install_serviced "${FILESDIR}"/ntpdate.service.conf |
295 |
- systemd_newunit "${FILESDIR}"/sntp.service-r2 sntp.service |
296 |
- systemd_install_serviced "${FILESDIR}"/sntp.service.conf |
297 |
-} |
298 |
- |
299 |
-pkg_postinst() { |
300 |
- if grep -qs '^[^#].*notrust' "${EROOT}"/etc/ntp.conf ; then |
301 |
- eerror "The notrust option was found in your /etc/ntp.conf!" |
302 |
- ewarn "If your ntpd starts sending out weird responses," |
303 |
- ewarn "then make sure you have keys properly setup and see" |
304 |
- ewarn "https://bugs.gentoo.org/41827" |
305 |
- fi |
306 |
-} |
307 |
|
308 |
diff --git a/net-misc/ntp/ntp-4.2.8_p7.ebuild b/net-misc/ntp/ntp-4.2.8_p7.ebuild |
309 |
deleted file mode 100644 |
310 |
index b82171e..00000000 |
311 |
--- a/net-misc/ntp/ntp-4.2.8_p7.ebuild |
312 |
+++ /dev/null |
313 |
@@ -1,137 +0,0 @@ |
314 |
-# Copyright 1999-2016 Gentoo Foundation |
315 |
-# Distributed under the terms of the GNU General Public License v2 |
316 |
-# $Id$ |
317 |
- |
318 |
-EAPI="5" |
319 |
- |
320 |
-inherit eutils toolchain-funcs flag-o-matic user systemd |
321 |
- |
322 |
-MY_P=${P/_p/p} |
323 |
-DESCRIPTION="Network Time Protocol suite/programs" |
324 |
-HOMEPAGE="http://www.ntp.org/" |
325 |
-SRC_URI="http://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-${PV:0:3}/${MY_P}.tar.gz |
326 |
- https://dev.gentoo.org/~polynomial-c/${MY_P}-manpages.tar.xz" |
327 |
- |
328 |
-LICENSE="HPND BSD ISC" |
329 |
-SLOT="0" |
330 |
-KEYWORDS="alpha amd64 arm ~arm64 hppa ia64 ~m68k ~mips ppc ppc64 ~s390 ~sh sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x86-freebsd ~amd64-linux ~ia64-linux ~x86-linux ~m68k-mint" |
331 |
-IUSE="caps debug ipv6 libressl openntpd parse-clocks readline samba selinux snmp ssl +threads vim-syntax zeroconf" |
332 |
- |
333 |
-CDEPEND="readline? ( >=sys-libs/readline-4.1:0= ) |
334 |
- >=dev-libs/libevent-2.0.9[threads?] |
335 |
- kernel_linux? ( caps? ( sys-libs/libcap ) ) |
336 |
- zeroconf? ( net-dns/avahi[mdnsresponder-compat] ) |
337 |
- !openntpd? ( !net-misc/openntpd ) |
338 |
- snmp? ( net-analyzer/net-snmp ) |
339 |
- ssl? ( |
340 |
- !libressl? ( dev-libs/openssl:0= ) |
341 |
- libressl? ( dev-libs/libressl ) |
342 |
- ) |
343 |
- parse-clocks? ( net-misc/pps-tools )" |
344 |
-DEPEND="${CDEPEND} |
345 |
- virtual/pkgconfig" |
346 |
-RDEPEND="${CDEPEND} |
347 |
- selinux? ( sec-policy/selinux-ntp ) |
348 |
- vim-syntax? ( app-vim/ntp-syntax )" |
349 |
-PDEPEND="openntpd? ( net-misc/openntpd )" |
350 |
- |
351 |
-S=${WORKDIR}/${MY_P} |
352 |
- |
353 |
-PATCHES=( |
354 |
- "${FILESDIR}"/${PN}-4.2.8-ipc-caps.patch #533966 |
355 |
- "${FILESDIR}"/${PN}-4.2.8-sntp-test-pthreads.patch #563922 |
356 |
- "${FILESDIR}"/${PN}-4.2.8-ntpd-test-signd.patch |
357 |
-) |
358 |
- |
359 |
-pkg_setup() { |
360 |
- enewgroup ntp 123 |
361 |
- enewuser ntp 123 -1 /dev/null ntp |
362 |
-} |
363 |
- |
364 |
-src_prepare() { |
365 |
- epatch "${PATCHES[@]}" |
366 |
- append-cppflags -D_GNU_SOURCE #264109 |
367 |
- # Make sure every build uses the same install layout. #539092 |
368 |
- find sntp/loc/ -type f '!' -name legacy -delete || die |
369 |
- # Disable pointless checks. |
370 |
- touch .checkChangeLog .gcc-warning FRC.html html/.datecheck |
371 |
-} |
372 |
- |
373 |
-src_configure() { |
374 |
- # avoid libmd5/libelf |
375 |
- export ac_cv_search_MD5Init=no ac_cv_header_md5_h=no |
376 |
- export ac_cv_lib_elf_nlist=no |
377 |
- # blah, no real configure options #176333 |
378 |
- export ac_cv_header_dns_sd_h=$(usex zeroconf) |
379 |
- export ac_cv_lib_dns_sd_DNSServiceRegister=${ac_cv_header_dns_sd_h} |
380 |
- # Increase the default memlimit from 32MiB to 128MiB. #533232 |
381 |
- econf \ |
382 |
- --with-lineeditlibs=readline,edit,editline \ |
383 |
- --with-yielding-select \ |
384 |
- --disable-local-libevent \ |
385 |
- --docdir='$(datarootdir)'/doc/${PF} \ |
386 |
- --htmldir='$(docdir)/html' \ |
387 |
- --with-memlock=256 \ |
388 |
- $(use_enable caps linuxcaps) \ |
389 |
- $(use_enable parse-clocks) \ |
390 |
- $(use_enable ipv6) \ |
391 |
- $(use_enable debug debugging) \ |
392 |
- $(use_with readline lineeditlibs readline) \ |
393 |
- $(use_enable samba ntp-signd) \ |
394 |
- $(use_with snmp ntpsnmpd) \ |
395 |
- $(use_with ssl crypto) \ |
396 |
- $(use_enable threads thread-support) |
397 |
-} |
398 |
- |
399 |
-src_install() { |
400 |
- default |
401 |
- # move ntpd/ntpdate to sbin #66671 |
402 |
- dodir /usr/sbin |
403 |
- mv "${ED}"/usr/bin/{ntpd,ntpdate} "${ED}"/usr/sbin/ || die "move to sbin" |
404 |
- |
405 |
- dodoc INSTALL WHERE-TO-START |
406 |
- doman "${WORKDIR}"/man/*.[58] |
407 |
- |
408 |
- insinto /etc |
409 |
- doins "${FILESDIR}"/ntp.conf |
410 |
- use ipv6 || sed -i '/^restrict .*::1/d' "${ED}"/etc/ntp.conf #524726 |
411 |
- newinitd "${FILESDIR}"/ntpd.rc-r1 ntpd |
412 |
- newconfd "${FILESDIR}"/ntpd.confd ntpd |
413 |
- newinitd "${FILESDIR}"/ntp-client.rc ntp-client |
414 |
- newconfd "${FILESDIR}"/ntp-client.confd ntp-client |
415 |
- newinitd "${FILESDIR}"/sntp.rc sntp |
416 |
- newconfd "${FILESDIR}"/sntp.confd sntp |
417 |
- if ! use caps ; then |
418 |
- sed -i "s|-u ntp:ntp||" "${ED}"/etc/conf.d/ntpd || die |
419 |
- fi |
420 |
- sed -i "s:/usr/bin:/usr/sbin:" "${ED}"/etc/init.d/ntpd || die |
421 |
- |
422 |
- keepdir /var/lib/ntp |
423 |
- use prefix || fowners ntp:ntp /var/lib/ntp |
424 |
- |
425 |
- if use openntpd ; then |
426 |
- cd "${ED}" |
427 |
- rm usr/sbin/ntpd || die |
428 |
- rm -r var/lib |
429 |
- rm etc/{conf,init}.d/ntpd |
430 |
- rm usr/share/man/*/ntpd.8 || die |
431 |
- else |
432 |
- systemd_newunit "${FILESDIR}"/ntpd.service-r2 ntpd.service |
433 |
- use caps && sed -i '/ExecStart/ s|$| -u ntp:ntp|' "${ED}"/usr/lib/systemd/system/ntpd.service |
434 |
- systemd_enable_ntpunit 60-ntpd ntpd.service |
435 |
- fi |
436 |
- |
437 |
- systemd_newunit "${FILESDIR}"/ntpdate.service-r1 ntpdate.service |
438 |
- systemd_install_serviced "${FILESDIR}"/ntpdate.service.conf |
439 |
- systemd_newunit "${FILESDIR}"/sntp.service-r2 sntp.service |
440 |
- systemd_install_serviced "${FILESDIR}"/sntp.service.conf |
441 |
-} |
442 |
- |
443 |
-pkg_postinst() { |
444 |
- if grep -qs '^[^#].*notrust' "${EROOT}"/etc/ntp.conf ; then |
445 |
- eerror "The notrust option was found in your /etc/ntp.conf!" |
446 |
- ewarn "If your ntpd starts sending out weird responses," |
447 |
- ewarn "then make sure you have keys properly setup and see" |
448 |
- ewarn "https://bugs.gentoo.org/41827" |
449 |
- fi |
450 |
-} |