Dont export MAIL if MAIL_CHECK_ENAB is disabled.

Package-Manager: portage-2.1_pre10-r3

5 files changed, 319 insertions, 5 deletions

diff --git a/sys-apps/shadow/ChangeLog b/sys-apps/shadow/ChangeLog
index 4bfdcc1b847d..ea3ec7697ab7 100644
--- a/sys-apps/shadow/ChangeLog
+++ b/sys-apps/shadow/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sys-apps/shadow
 # Copyright 1999-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.138 2006/04/27 22:41:02 antarus Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.139 2006/05/07 19:11:26 vapier Exp $
+
+*shadow-4.0.15-r1 (07 May 2006)
+
+  07 May 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.15-no-default-MAIL.patch, +shadow-4.0.15-r1.ebuild:
+  Dont export MAIL if MAIL_CHECK_ENAB is disabled.
 
   27 Apr 2006; Alec Warner <antarus@gentoo.org>
   files/digest-shadow-4.0.7-r4, files/digest-shadow-4.0.11.1-r1,
diff --git a/sys-apps/shadow/Manifest b/sys-apps/shadow/Manifest
index 4bf28ee6a9d3..76921f6fbd92 100644
--- a/sys-apps/shadow/Manifest
+++ b/sys-apps/shadow/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX default/useradd 96 RMD160 55c38953c800c6aae1ebe4312028560f77e7414f SHA1 348916abd4f794ee99310e1c006fbf00296ea2d7 SHA256 31aa2cbe4a34a9f7d4d134c1fecd007c9bbf4d40e19d0dcddbcd396f1853b490 size 96
 MD5 6e0bc0211949c624da0ea08d994a7038 files/default/useradd 96
 RMD160 55c38953c800c6aae1ebe4312028560f77e7414f files/default/useradd 96
@@ -162,6 +165,10 @@ AUX shadow-4.0.14-userdel-group-remove.patch 3043 RMD160 f1fdcc15eb7172ad852a207
 MD5 98a04c2b05e656367aa6e2abbebd32cb files/shadow-4.0.14-userdel-group-remove.patch 3043
 RMD160 f1fdcc15eb7172ad852a20784233182206c3cab3 files/shadow-4.0.14-userdel-group-remove.patch 3043
 SHA256 fb8d16b18b94b4878b7303b5ee0a0071a393975b0cc50404896de438b802a0e9 files/shadow-4.0.14-userdel-group-remove.patch 3043
+AUX shadow-4.0.15-no-default-MAIL.patch 879 RMD160 c380e0a00ef0be8a99927de8bb6cf70f1dfd33ce SHA1 fc30b336b7f22c76ee2276d6b6d8cf361bdfffea SHA256 57aa93bae1cbaffc51250bc415384991992e6ebb6cc5bb1f3c0dc90bb3dd0354 size 879
+MD5 3ce54cb32b7564df1386544bf3d1e035 files/shadow-4.0.15-no-default-MAIL.patch 879
+RMD160 c380e0a00ef0be8a99927de8bb6cf70f1dfd33ce files/shadow-4.0.15-no-default-MAIL.patch 879
+SHA256 57aa93bae1cbaffc51250bc415384991992e6ebb6cc5bb1f3c0dc90bb3dd0354 files/shadow-4.0.15-no-default-MAIL.patch 879
 AUX shadow-4.0.4.1-nonis.patch 1504 RMD160 f8e5fc3fb33c2d57206d813e88abe6a7d6198ed7 SHA1 2f05f7dcd62248c974b58909c8951a7eeb64f7a4 SHA256 3e126ef9e1e9b7d95297e2e1dd450557438f9a7f13a120fae8863e3d80534e08 size 1504
 MD5 020e030c2d09b206e88cf9051ced6244 files/shadow-4.0.4.1-nonis.patch 1504
 RMD160 f8e5fc3fb33c2d57206d813e88abe6a7d6198ed7 files/shadow-4.0.4.1-nonis.patch 1504
@@ -248,6 +255,10 @@ EBUILD shadow-4.0.14-r3.ebuild 7767 RMD160 1747afff427f284d232cac9ebf0b66c092ecf
 MD5 b9e0df4af9449f1fe46e7661dc216405 shadow-4.0.14-r3.ebuild 7767
 RMD160 1747afff427f284d232cac9ebf0b66c092ecf178 shadow-4.0.14-r3.ebuild 7767
 SHA256 2663b6964a5b25b3e95d1d11939faba04cbd64e932cdeffd25d96f1688f23d6d shadow-4.0.14-r3.ebuild 7767
+EBUILD shadow-4.0.15-r1.ebuild 7442 RMD160 00c6fc9fa89521b8eefd6c36af52150680743d1d SHA1 0409b74140bfa1350462e591caa9c5c57a06f084 SHA256 c8fbcd40e5a60c31cb79e34385ea1592e1a9fe6554f347d65321960f89db2515 size 7442
+MD5 2d98370517796d065d15f4a7e5ee6190 shadow-4.0.15-r1.ebuild 7442
+RMD160 00c6fc9fa89521b8eefd6c36af52150680743d1d shadow-4.0.15-r1.ebuild 7442
+SHA256 c8fbcd40e5a60c31cb79e34385ea1592e1a9fe6554f347d65321960f89db2515 shadow-4.0.15-r1.ebuild 7442
 EBUILD shadow-4.0.15.ebuild 7381 RMD160 1c7e6e9121f50c3c95574bb80276e40fde1e8f77 SHA1 77f7eaf8ba2fff618bcd50fe46c33cf6a4b49a69 SHA256 6312212d7e5547d940ae2254966e2808bc861ae6263291d58e0a7fe882a1d729 size 7381
 MD5 7c680b08d906f9d4c044fdd536a6cbf5 shadow-4.0.15.ebuild 7381
 RMD160 1c7e6e9121f50c3c95574bb80276e40fde1e8f77 shadow-4.0.15.ebuild 7381
@@ -256,10 +267,10 @@ EBUILD shadow-4.0.7-r4.ebuild 7163 RMD160 0622f67c225f3cb59116708993ac7d269fd4b8
 MD5 550a7571df41e2be2d4808f6a2ba51a7 shadow-4.0.7-r4.ebuild 7163
 RMD160 0622f67c225f3cb59116708993ac7d269fd4b868 shadow-4.0.7-r4.ebuild 7163
 SHA256 e6b7becb236cbba5362ebc9475b6974893c3c90164384ba572be273966e1ba48 shadow-4.0.7-r4.ebuild 7163
-MISC ChangeLog 25646 RMD160 d0873d8f440edbbd01464c3ed3e37840bb5952ca SHA1 115e819923d4b90b1f7c2a7f8cd63cbcc3df3d1b SHA256 7872648a10cffacbabb82174a3a24de2c46092a4249183a639df509ad669ad74 size 25646
-MD5 cfdd66ceb09d62d11c62f4552c6de11c ChangeLog 25646
-RMD160 d0873d8f440edbbd01464c3ed3e37840bb5952ca ChangeLog 25646
-SHA256 7872648a10cffacbabb82174a3a24de2c46092a4249183a639df509ad669ad74 ChangeLog 25646
+MISC ChangeLog 25852 RMD160 8a780cf0dc545f183c0fc1584b5e98219ed09d40 SHA1 0d29337693b675d940568cb8a29f1d5aa4dba2af SHA256 750b28f35b2083f861d7a6ddaa576e1fa006bba370487a4d75ce9120e8321412 size 25852
+MD5 b4988bdde3ce0f5cede83926a46553a6 ChangeLog 25852
+RMD160 8a780cf0dc545f183c0fc1584b5e98219ed09d40 ChangeLog 25852
+SHA256 750b28f35b2083f861d7a6ddaa576e1fa006bba370487a4d75ce9120e8321412 ChangeLog 25852
 MISC metadata.xml 164 RMD160 f43cbec30b7074319087c9acffdb9354b17b0db3 SHA1 9c213f5803676c56439df3716be07d6692588856 SHA256 f5f2891f2a4791cd31350bb2bb572131ad7235cd0eeb124c9912c187ac10ce92 size 164
 MD5 9a09f8d531c582e78977dbfd96edc1f2 metadata.xml 164
 RMD160 f43cbec30b7074319087c9acffdb9354b17b0db3 metadata.xml 164
@@ -288,6 +299,16 @@ SHA256 5210b269d7a062b2eb8f39cf076802210b525c8eccd18c4dc382049cfee7aba3 files/di
 MD5 1f78dde9910133ab48d69abc6bd19a88 files/digest-shadow-4.0.15 247
 RMD160 87f79656daa81999e698a293ad570f2ffac99768 files/digest-shadow-4.0.15 247
 SHA256 10c8764de8a7feb230419e232290d7f8c35a28ad69e7174b509fcd358aeed237 files/digest-shadow-4.0.15 247
+MD5 1f78dde9910133ab48d69abc6bd19a88 files/digest-shadow-4.0.15-r1 247
+RMD160 87f79656daa81999e698a293ad570f2ffac99768 files/digest-shadow-4.0.15-r1 247
+SHA256 10c8764de8a7feb230419e232290d7f8c35a28ad69e7174b509fcd358aeed237 files/digest-shadow-4.0.15-r1 247
 MD5 9130da1995073352cee951d0a18ad227 files/digest-shadow-4.0.7-r4 244
 RMD160 6c749ed8204533cd854c78251f158c2bd1d3a555 files/digest-shadow-4.0.7-r4 244
 SHA256 6945583c30661308f30bd36bf7e5e64c0b923a06914def8622b702b447daf849 files/digest-shadow-4.0.7-r4 244
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.3 (GNU/Linux)
+
+iD8DBQFEXkai2+ySkm8kpY0RAifQAJ9vn0RVwZMxOLo3xf0WRbjFRUCIKwCgrQpV
+sWPVHB31pte8hv7JRyN5Ilw=
+=xo8n
+-----END PGP SIGNATURE-----
diff --git a/sys-apps/shadow/files/digest-shadow-4.0.15-r1 b/sys-apps/shadow/files/digest-shadow-4.0.15-r1
new file mode 100644
index 000000000000..13dd58252a59
--- /dev/null
+++ b/sys-apps/shadow/files/digest-shadow-4.0.15-r1
@@ -0,0 +1,3 @@
+MD5 a0452fa989f8ba45023cc5a08136568e shadow-4.0.15.tar.bz2 1294860
+RMD160 b7b9ee9469561205037a1eacaa8791f069ba124c shadow-4.0.15.tar.bz2 1294860
+SHA256 e486bdb083df453c2d15ac58887ef45a3006182c0cdb1c6092058ea588be538d shadow-4.0.15.tar.bz2 1294860
diff --git a/sys-apps/shadow/files/shadow-4.0.15-no-default-MAIL.patch b/sys-apps/shadow/files/shadow-4.0.15-no-default-MAIL.patch
new file mode 100644
index 000000000000..f7972933aabe
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.0.15-no-default-MAIL.patch
@@ -0,0 +1,30 @@
+if MAIL_CHECK_ENAB is disabled, then don't export the MAIL envvar
+
+--- libmisc/setupenv.c
++++ libmisc/setupenv.c
+@@ -265,16 +265,18 @@
+ 	 * knows the prefix.
+ 	 */
+ 
+-	if ((cp = getdef_str ("MAIL_DIR")))
+-		addenv_path ("MAIL", cp, info->pw_name);
+-	else if ((cp = getdef_str ("MAIL_FILE")))
+-		addenv_path ("MAIL", info->pw_dir, cp);
+-	else {
++	if (getdef_bool ("MAIL_CHECK_ENAB")) {
++		if ((cp = getdef_str ("MAIL_DIR")))
++			addenv_path ("MAIL", cp, info->pw_name);
++		else if ((cp = getdef_str ("MAIL_FILE")))
++			addenv_path ("MAIL", info->pw_dir, cp);
++		else {
+ #if defined(MAIL_SPOOL_FILE)
+-		addenv_path ("MAIL", info->pw_dir, MAIL_SPOOL_FILE);
++			addenv_path ("MAIL", info->pw_dir, MAIL_SPOOL_FILE);
+ #elif defined(MAIL_SPOOL_DIR)
+-		addenv_path ("MAIL", MAIL_SPOOL_DIR, info->pw_name);
++			addenv_path ("MAIL", MAIL_SPOOL_DIR, info->pw_name);
+ #endif
++		}
+ 	}
+ 
+ 	/*
diff --git a/sys-apps/shadow/shadow-4.0.15-r1.ebuild b/sys-apps/shadow/shadow-4.0.15-r1.ebuild
new file mode 100644
index 000000000000..7256dc25550e
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.0.15-r1.ebuild
@@ -0,0 +1,254 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.0.15-r1.ebuild,v 1.1 2006/05/07 19:11:26 vapier Exp $
+
+inherit eutils libtool toolchain-funcs flag-o-matic autotools pam
+
+# We should remove this login after pam-0.78 goes stable.
+FORCE_SYSTEMAUTH_UPDATE="no"
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/"
+SRC_URI="ftp://ftp.pld.org.pl/software/${PN}/${P}.tar.bz2"
+
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="nls pam selinux skey nousuid"
+
+RDEPEND=">=sys-libs/cracklib-2.7-r3
+	pam? ( virtual/pam )
+	!sys-apps/pam-login
+	skey? ( app-admin/skey )
+	selinux? ( >=sys-libs/libselinux-1.28 )
+	nls? ( virtual/libintl )"
+DEPEND="${RDEPEND}
+	>=sys-apps/portage-2.0.51-r2
+	nls? ( sys-devel/gettext )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+
+	# uclibc support, corrects NIS usage
+	epatch "${FILESDIR}"/${PN}-4.0.13-nonis.patch
+
+	# If su should not simulate a login shell, use '/bin/sh' as shell to enable
+	# running of commands as user with /bin/false as shell, closing bug #15015.
+	# *** This one could be a security hole; disable for now ***
+	#epatch "${FILESDIR}"/${P}-nologin-run-sh.patch
+
+	# tweak the default login.defs
+	epatch "${FILESDIR}"/${PN}-4.0.13-login.defs.patch
+
+	# Make user/group names more flexible #3485 / #22920
+	epatch "${FILESDIR}"/${PN}-4.0.13-dots-in-usernames.patch
+	epatch "${FILESDIR}"/${PN}-4.0.13-long-groupnames.patch
+
+	# Fix compiling with gcc-2.95.x
+	epatch "${FILESDIR}"/${PN}-4.0.12-gcc2.patch
+
+	# Patch from upstream enables the new environment too early for PAM
+	epatch "${FILESDIR}"/${PN}-4.0.14-su-fix-environment.patch
+
+	# Some UCLIBC patches
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-uclibc-missing-l64a.patch
+
+	# lock down setuid perms #47208
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-perms.patch
+
+	epatch "${FILESDIR}"/${PN}-4.0.15-no-default-MAIL.patch
+
+	# Needed by the UCLIBC patches
+	eautoconf || die
+
+	elibtoolize
+	epunt_cxx
+}
+
+src_compile() {
+	append-ldflags $(bindnow-flags)
+	tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes
+	econf \
+		--disable-desrpc \
+		--with-libcrypt \
+		--with-libcrack \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with pam libpam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		|| die "bad configure"
+	emake || die "compile problem"
+}
+
+src_install() {
+	local perms=4711
+	use nousuid && perms=711
+	make DESTDIR=${D} suiduperms=${perms} install || die "install problem"
+	dosym useradd /usr/sbin/adduser
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	if ! use pam; then
+		insopts -m0600
+		doins etc/login.access etc/limits
+	else
+		newpamd "${FILESDIR}/login.pamd" login
+		use selinux || sed -i -e '/@selinux@/d' ${D}/etc/pam.d/login
+		use selinux && sed -i -e 's:@selinux@::g' ${D}/etc/pam.d/login
+
+		insinto /etc
+		insopts -m0644
+		newins "${FILESDIR}/login.defs" login.defs
+
+		# Also install another one that we can use to check if
+		# we need to update it if FORCE_LOGIN_DEFS = "yes"
+		[ "${FORCE_LOGIN_DEFS}" = "yes" ] \
+			&& newins "${FILESDIR}/login.defs" login.defs.new
+	fi
+	# Output arch-specific cruft
+	case $(tc-arch) in
+		ppc*)  echo "hvc0" >> "${D}"/etc/securetty
+		       echo "hvsi0" >> "${D}"/etc/securetty;;
+		hppa)  echo "ttyB0" >> "${D}"/etc/securetty;;
+		arm)   echo "ttyFB0" >> "${D}"/etc/securetty;;
+	esac
+
+	# needed for 'adduser -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${D}"/usr/bin/passwd "${D}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	if use pam ; then
+		local INSTALL_SYSTEM_PAMD="yes"
+
+		# Do not install below pam.d files if we have pam-0.78 or later
+		has_version '>=sys-libs/pam-0.78' && \
+			INSTALL_SYSTEM_PAMD="no"
+
+		for x in "${FILESDIR}"/pam.d-include/*; do
+			case "${x##*/}" in
+				"login")
+					# We do no longer install this one, as its from
+					# pam-login now.
+					;;
+				"system-auth"|"system-auth-1.1"|"other")
+					# These we only install if we do not have pam-0.78
+					# or later.
+					[ "${INSTALL_SYSTEM_PAMD}" = "yes" ] && [ -f ${x} ] && \
+						dopamd ${x}
+					;;
+				"su")
+					# Disable support for pam_env and pam_wheel on openpam
+					has_version sys-libs/pam && dopamd ${x}
+					;;
+				"su-openpam")
+					has_version sys-libs/openpam && newpamd ${x} su
+					;;
+				*)
+					[ -f ${x} ] && dopamd ${x}
+					;;
+			esac
+		done
+		for x in chage chsh chfn chpasswd newusers \
+		         user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x}
+		done
+
+		# Only add this one if needed.
+		if [ "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ]; then
+			newpamd "${FILESDIR}"/pam.d-include/system-auth-1.1 system-auth.new || \
+				die "Failed to install system-auth.new!"
+		fi
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+
+		find "${D}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} \;
+	else
+		insinto /etc
+		insopts -m0644
+		newins etc/login.defs login.defs
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${D}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} \;
+
+	cd "${S}"
+	dodoc ChangeLog NEWS TODO
+	newdoc README README.download
+	cd doc
+	dodoc HOWTO LSM README* WISHLIST *.txt
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}"/etc/pam.d/system-auth.new \
+		"${ROOT}/etc/login.defs.new"
+}
+
+pkg_postinst() {
+	use pam || return 0
+
+	if [ "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ]; then
+		local CHECK1=$(md5sum "${ROOT}"/etc/pam.d/system-auth | cut -d ' ' -f 1)
+		local CHECK2=$(md5sum "${ROOT}"/etc/pam.d/system-auth.new | cut -d ' ' -f 1)
+
+		if [ "${CHECK1}" != "${CHECK2}" ]; then
+			ewarn "Due to a security issue, ${ROOT}etc/pam.d/system-auth "
+			ewarn "is being updated automatically. Your old "
+			ewarn "system-auth will be backed up as:"
+			ewarn
+			ewarn "  ${ROOT}etc/pam.d/system-auth.bak"
+			echo
+
+			cp -pPR "${ROOT}"/etc/pam.d/system-auth \
+				"${ROOT}"/etc/pam.d/system-auth.bak;
+			mv -f "${ROOT}"/etc/pam.d/system-auth.new \
+				"${ROOT}"/etc/pam.d/system-auth
+			rm -f "${ROOT}"/etc/pam.d/._cfg????_system-auth
+		else
+			rm -f "${ROOT}"/etc/pam.d/system-auth.new
+		fi
+	fi
+
+	[ "${FORCE_LOGIN_DEFS}" != "yes" ] && return 0
+
+	ewarn "Due to a compatibility issue, ${ROOT}etc/login.defs "
+	ewarn "is being updated automatically. Your old login.defs"
+	ewarn "will be backed up as:  ${ROOT}etc/login.defs.bak"
+	echo
+
+	local CHECK1="`md5sum ${ROOT}/etc/login.defs | cut -d ' ' -f 1`"
+	local CHECK2="`md5sum ${ROOT}/etc/login.defs.new | cut -d ' ' -f 1`"
+
+	if [ "${CHECK1}" != "${CHECK2}" ]
+	then
+		cp -pPR ${ROOT}/etc/login.defs ${ROOT}/etc/login.defs.bak
+		mv -f ${ROOT}/etc/login.defs.new ${ROOT}/etc/login.defs
+	elif [ ! -f ${ROOT}/etc/login.defs ]
+	then
+		mv -f ${ROOT}/etc/login.defs.new ${ROOT}/etc/login.defs
+	else
+		rm -f ${ROOT}/etc/login.defs.new
+	fi
+}
+