robbat2     14/09/21 01:54:22

  Modified:             cdrtools-3.01_alpha24.ebuild
                        cdrtools-3.01_alpha17.ebuild ChangeLog
  Log:
  Bug #486680: do not create group-writable directories during build that would 
fail under grsec TPE.
  
  (Portage version: 2.2.10/cvs/Linux x86_64, unsigned Manifest commit)

Revision  Changes    Path
1.3                  app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild?rev=1.3&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild?rev=1.3&content-type=text/plain
diff : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild?r1=1.2&r2=1.3

Index: cdrtools-3.01_alpha24.ebuild
===================================================================
RCS file: 
/var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- cdrtools-3.01_alpha24.ebuild        3 Aug 2014 19:12:46 -0000       1.2
+++ cdrtools-3.01_alpha24.ebuild        21 Sep 2014 01:54:22 -0000      1.3
@@ -1,6 +1,6 @@
 # Copyright 1999-2014 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: 
/var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild,v 1.2 
2014/08/03 19:12:46 tgall Exp $
+# $Header: 
/var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild,v 1.3 
2014/09/21 01:54:22 robbat2 Exp $
 
 EAPI=5
 
@@ -94,7 +94,13 @@
                -e "s|^\(INS_BASE=\).*|\1\t${ED}/usr|" \
                -e "s|^\(INS_RBASE=\).*|\1\t${ED}|" \
                -e "s|^\(DEFINSGRP=\).*|\1\t0|" \
+               -e '/^DEFUMASK/s,002,022,g' \
                Defaults.${os} || die "sed Schily make setup"
+    # re DEFUMASK above:
+    # bug 486680: grsec TPE will block the exec if the directory is
+    # group-writable. This is painful with cdrtools, because it makes a bunch 
of
+       # group-writable directories during build. Change the umask on their
+       # creation to prevent this.
 }
 
 ac_cv_sizeof() {



1.17                 app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild?rev=1.17&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild?rev=1.17&content-type=text/plain
diff : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild?r1=1.16&r2=1.17

Index: cdrtools-3.01_alpha17.ebuild
===================================================================
RCS file: 
/var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild,v
retrieving revision 1.16
retrieving revision 1.17
diff -u -r1.16 -r1.17
--- cdrtools-3.01_alpha17.ebuild        17 May 2014 12:00:17 -0000      1.16
+++ cdrtools-3.01_alpha17.ebuild        21 Sep 2014 01:54:22 -0000      1.17
@@ -1,6 +1,6 @@
 # Copyright 1999-2014 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: 
/var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild,v 1.16 
2014/05/17 12:00:17 billie Exp $
+# $Header: 
/var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild,v 1.17 
2014/09/21 01:54:22 robbat2 Exp $
 
 EAPI=5
 
@@ -87,7 +87,13 @@
                -e "s:/opt/schily:/usr:g" \
                -e "s:/usr/src/linux/include::g" \
                -e "s:bin:root:g" \
+               -e '/^DEFUMASK/s,002,022,g' \
                Defaults.${os} || die "sed Schily make setup"
+    # re DEFUMASK above:
+    # bug 486680: grsec TPE will block the exec if the directory is
+    # group-writable. This is painful with cdrtools, because it makes a bunch 
of
+       # group-writable directories during build. Change the umask on their
+       # creation to prevent this.
 }
 
 # skip obsolete configure script



1.344                app-cdr/cdrtools/ChangeLog

file : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/ChangeLog?rev=1.344&view=markup
plain: 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/ChangeLog?rev=1.344&content-type=text/plain
diff : 
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-cdr/cdrtools/ChangeLog?r1=1.343&r2=1.344

Index: ChangeLog
===================================================================
RCS file: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/ChangeLog,v
retrieving revision 1.343
retrieving revision 1.344
diff -u -r1.343 -r1.344
--- ChangeLog   3 Aug 2014 19:12:46 -0000       1.343
+++ ChangeLog   21 Sep 2014 01:54:22 -0000      1.344
@@ -1,6 +1,11 @@
 # ChangeLog for app-cdr/cdrtools
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/ChangeLog,v 1.343 
2014/08/03 19:12:46 tgall Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/ChangeLog,v 1.344 
2014/09/21 01:54:22 robbat2 Exp $
+
+  21 Sep 2014; Robin H. Johnson <[email protected]>
+  cdrtools-3.01_alpha17.ebuild, cdrtools-3.01_alpha24.ebuild:
+  Bug #486680: do not create group-writable directories during build that would
+  fail under grsec TPE.
 
   03 Aug 2014;  <[email protected]> cdrtools-3.01_alpha24.ebuild:
   arm64, initial support




Reply via email to