Workaround for CVE-2012-1836 wrt bug #409159. Fix launcher script wrt

bug #379911. Added missing use flags to metadata.

Package-Manager: portage-2.1.10.44/cvs/Linux i686

6 files changed, 297 insertions, 4 deletions

diff --git a/net-irc/inspircd/ChangeLog b/net-irc/inspircd/ChangeLog
index d9a965b68753..e8af2d24e8b8 100644
--- a/net-irc/inspircd/ChangeLog
+++ b/net-irc/inspircd/ChangeLog
@@ -1,6 +1,15 @@
 # ChangeLog for net-irc/inspircd
 # Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-irc/inspircd/ChangeLog,v 1.42 2012/03/22 15:45:15 nimiux Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-irc/inspircd/ChangeLog,v 1.43 2012/03/23 10:27:13 nimiux Exp $
+
+*inspircd-2.0.5-r1 (23 Mar 2012)
+
+  23 Mar 2012; Chema Alonso <nimiux@gentoo.org> +inspircd-2.0.5-r1.ebuild,
+  +files/inspircd-2.0.5-r1-fix-make-config.patch,
+  +files/inspircd-2.0.5-r1-init, metadata.xml:
+  Revision bump to include workaround for CVE-2012-1836 wrt bug #409159 and
+  fix inspircd launcher script wrt bug #379911. Missing use flags included
+  in metadata.
 
   22 Mar 2012; Chema Alonso <nimiux@gentoo.org> metadata.xml:
   Removed Dane Smith (c1pher) as maintainer (Proxy)
diff --git a/net-irc/inspircd/Manifest b/net-irc/inspircd/Manifest
index 5e53e70599e0..e24abb21f932 100644
--- a/net-irc/inspircd/Manifest
+++ b/net-irc/inspircd/Manifest
@@ -1,4 +1,9 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
 AUX init.d_inspircd 835 RMD160 df90290dbbf1aba7e9b24cc8467798b20c571899 SHA1 83d5e24da808993f264481945c2c37911853b6d4 SHA256 9342982271398f3572305b8bd83007d9f0aab3ee374c19044153dd5b16cf5780
+AUX inspircd-2.0.5-r1-fix-make-config.patch 3967 RMD160 189944c41944ad4e35a8d9ed5334652ad2242af4 SHA1 d0538be470e462785fe645adbe86d8fc5449b03c SHA256 2b7d9ac477190c521d1e8b2a9d1a81aa87c8f54322af68ddf31d814485f388aa
+AUX inspircd-2.0.5-r1-init 884 RMD160 ec73c88838aed3de86d74952b16846f47ec9d721 SHA1 f137809459e728d2b1861dda7aff623049faf67d SHA256 750c68cee92603b99b5f0f28ac7655555bab583b86d50f44d23676facdfe089c
 AUX inspircd-fix-config.patch 2656 RMD160 988ba38a32cc8da5c566326a02f362eaf7dc02f1 SHA1 3f94c4ea95ac5c11d717f02b82d64a398f212377 SHA256 ab88c2ef4b4670283a2e3f4c32d4fd212b508ab53899ee1694bb71df5f9d96a1
 AUX inspircd-init.d 754 RMD160 6bb390cf0bdcc10892886be7dbc7b1c40aecbe14 SHA1 fa4faa440dd85c0225ef343f12ba4e63f364bf4c SHA256 041986c91a218c1cdc4d88f78da915990dd4de565c9b3cca3cf2fb15ef38db8f
 DIST InspIRCd-1.2.8.tar.bz2 637194 RMD160 e2581b194419add2fe2918263a6d1d545cf8a4d0 SHA1 201d83459eddc899143b10c768378059c2669ae1 SHA256 fa856ddb6d7ab2b4dc6aa6b0f58bbb2360823ce296d4e9dd0f18d630d8c7cee5
@@ -8,6 +13,18 @@ DIST InspIRCd-2.0.5.tar.bz2 575852 RMD160 01c339bb2e9d7a6b0ac71b1e6e39927a29bd41
 EBUILD inspircd-1.2.8.ebuild 3372 RMD160 c11629cadbd2454297cbb24de8a24f6933f9692c SHA1 abbda33b957474fe66a17bd799e3cfea840d5ad0 SHA256 221f5ec40bf3b23bfffd85059509aa8819ad6c332dd18b4148035caeebc0063b
 EBUILD inspircd-2.0.3.ebuild 3517 RMD160 15739f4de675339089e81bb1b7867e9ce6a982fd SHA1 b73bf1e6e573a3a7123c8df33a27fd2758f64d31 SHA256 7a8c434d8e354fceb267ac22adc5ca233d591abda4afccadb387b47c2d612ecb
 EBUILD inspircd-2.0.4.ebuild 3517 RMD160 28b949471498f488313d1550247195a80ca2fc28 SHA1 61f767c47825715f5ff5769eea394ac1d27118f4 SHA256 28123b7d4aee666617fa4efcb736eedbb94936fcc24fb09f0a2179ae09f1685c
+EBUILD inspircd-2.0.5-r1.ebuild 2822 RMD160 8e7ac6c8341a0c3b3f4838108b51866138ca0be5 SHA1 4f12e7a832452aebab5491ad1e41bac20255ac6d SHA256 d955ecb8f387dcd8f07e442b82b4abe886d638481b7b4d2882eded56cb3872bc
 EBUILD inspircd-2.0.5.ebuild 3230 RMD160 03a18afeb1b6128e2d32cecd0d5c2d5f88739324 SHA1 5b6d1ce6605826d14f851454e842be35df26239f SHA256 83bb52a4f4ffc57ecc89493389e6679d9304c746827e7b76ecfdf054e855913a
-MISC ChangeLog 7673 RMD160 be018175cd33a74af6732cfa731b755cd872b427 SHA1 693f8296a7e039cf5b7a1e114eb5a77f49708f88 SHA256 fcfe2918179aa0cdcfe2a25251bd5e17950fee0197920915af5f3af1e1a06ef8
-MISC metadata.xml 549 RMD160 10afe1e1ce17d9db50ef34eeb1ec4c9f10ce43cd SHA1 6712ff4904889f2c9747d620ff22734a244bd91a SHA256 8de3db8557d24a585db0ee029231fe1ce883c2d178fd1e3315557aedd40db1ab
+MISC ChangeLog 8046 RMD160 448f41b9145d83edb9d5d2fce46ad425e0ede0f5 SHA1 581689cd02f3089d19b4073007093d98f36b4e9c SHA256 09c24e95b69fb9b67bd212713a1529b2123bdf0db09cd303f82efc968d8fe8fb
+MISC metadata.xml 910 RMD160 4d07c259e86ccc476ac921bee4cd0fdeac8379f9 SHA1 e42067b72bca0590cbde7212990c5de279083382 SHA256 77777a194d0e0eb697a0f0dd57b9bdc3b64dae3c021930f77035611b4fdda9f7
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.17 (GNU/Linux)
+
+iQEcBAEBCAAGBQJPbE+9AAoJEA2sAkrWKOU2EQ8IAJEdca1ROpfLrLfMHZJcqvJ9
+4F0niVvx/BiDduyksYIsu7exLoNHhL6UpI4Y3M2Nu7iLsLNKt1RNTAmva5Yh5hJ7
+0I5e7ISpkDbYDfw4k5e0v4O16pLL+Lcb6mEUzdvS2BfPdGqc6Za/5DmN7Eqm7+yx
+DE7QykDlomKGRvuSUahairMYftG3Ms/HDKGqdqarDLPwIoQac2/FGeoPaHIuyStI
+GWXgaScjZGyJH/4vYgY2KpRiQtuHyJrxVV1OGhAVbFcx7PeqlANyKRXhcYIDRZfR
+kSK2iVYOh1QgAJNAQUUCkLf99HrhGDJoTOWMJb2RXIkJllVvjhE9PIlQ8alCERM=
+=XNdd
+-----END PGP SIGNATURE-----
diff --git a/net-irc/inspircd/files/inspircd-2.0.5-r1-fix-make-config.patch b/net-irc/inspircd/files/inspircd-2.0.5-r1-fix-make-config.patch
new file mode 100644
index 000000000000..b87b3f72e320
--- /dev/null
+++ b/net-irc/inspircd/files/inspircd-2.0.5-r1-fix-make-config.patch
@@ -0,0 +1,112 @@
+diff -Nur a/docs/inspircd.conf.example b/docs/inspircd.conf.example
+--- a/docs/inspircd.conf.example	2011-06-24 03:21:01.000000000 +0200
++++ b/docs/inspircd.conf.example	2012-03-22 18:22:49.139949317 +0100
+@@ -401,11 +401,11 @@
+ 
+ # This file has all the information about oper classes, types and o:lines.
+ # You *MUST* edit it.
+-<include file="conf/opers.conf.example">
++<include file="/etc/inspircd/opers.conf.example">
+ 
+ # This file has all the information about server links and ulined servers.
+ # You *MUST* edit it if you intend to link servers.
+-<include file="conf/links.conf.example">
++<include file="/etc/inspircd/links.conf.example">
+ 
+ #-#-#-#-#-#-#-#-#-#-  MISCELLANEOUS CONFIGURATION  -#-#-#-#-#-#-#-#-#-#
+ #                                                                     #
+@@ -415,7 +415,8 @@
+ #   motd - displayed on connect and when a user executes /MOTD
+ #   rules - displayed when the user executes /RULES
+ # Modules can also define their own files
+-<files motd="conf/inspircd.motd.example" rules="conf/inspircd.rules.example">
++<files motd="/etc/inspircd/inspircd.motd.example"
++       rules="/etc/inspircd/inspircd.rules.example">
+ 
+ # Example of an executable file include. Note this will be read on rehash,
+ # not when the command is run.
+@@ -461,7 +462,7 @@
+ # the default of 'inspircd.pid' is used.                              #
+ #                                                                     #
+ 
+-#<pid file="/path/to/inspircd.pid">
++<pid file="/var/run/inspircd/inspircd.pid">
+ 
+ #-#-#-#-#-#-#-#-#-#-#-#-#- BANLIST LIMITS #-#-#-#-#-#-#-#-#-#-#-#-#-#-#
+ #                                                                     #
+@@ -629,7 +630,8 @@
+ 
+              # nouserdns: If enabled, no DNS lookups will be performed on
+              # connecting users. This can save a lot of resources on very busy servers.
+-             nouserdns="no">
++	     # Set nouserdns to yes as a workaround for CVE-2012-1836.
++             nouserdns="yes">
+ 
+ #-#-#-#-#-#-#-#-#-#-#-# SECURITY CONFIGURATION  #-#-#-#-#-#-#-#-#-#-#-#
+ #                                                                     #
+@@ -907,7 +909,7 @@
+ # provide almost all the features of InspIRCd. :)                     #
+ #                                                                     #
+ # The default does nothing -- we include it for simplicity for you.   #
+-<include file="conf/modules.conf.example">
++<include file="/etc/inspircd/modules.conf.example">
+ 
+ # Here are some pre-built modules.conf files that closely match the
+ # default configurations of some popular IRCd's. You still may want to
+@@ -919,10 +921,10 @@
+ # recommended that you make your own modules file based on modules.conf.example.
+ 
+ # Settings similar to UnrealIRCd defaults.
+-#<include file="conf/modules/modules.conf.unreal">
++#<include file="/etc/inspircd/modules/modules.conf.unreal">
+ 
+ # Settings similar to Charybdis IRCd defaults.
+-#<include file="conf/modules/modules.conf.charybdis">
++#<include file="/etc/inspircd/modules/modules.conf.charybdis">
+ 
+ 
+ #########################################################################
+diff -Nur a/make/template/main.mk b/make/template/main.mk
+--- a/make/template/main.mk	2011-06-24 03:21:01.000000000 +0200
++++ b/make/template/main.mk	2012-03-22 18:20:21.659950155 +0100
+@@ -54,22 +54,22 @@
+   CXXFLAGS += -D_ALL_SOURCE -I/usr/local/include
+ @ENDIF
+ 
+-@IFNDEF D
+-  D=0
++@IFNDEF DEBUGLEVEL
++  DEBUGLEVEL=0
+ @ENDIF
+ 
+ DBGOK=0
+-@IFEQ $(D) 0
++@IFEQ $(DEBUGLEVEL) 0
+   CXXFLAGS += -O2 -g1
+   HEADER = std-header
+   DBGOK=1
+ @ENDIF
+-@IFEQ $(D) 1
++@IFEQ $(DEBUGLEVEL) 1
+   CXXFLAGS += -O0 -g3 -Werror
+   HEADER = debug-header
+   DBGOK=1
+ @ENDIF
+-@IFEQ $(D) 2
++@IFEQ $(DEBUGLEVEL) 2
+   CXXFLAGS += -O2 -g3
+   HEADER = debug-header
+   DBGOK=1
+@@ -111,10 +111,10 @@
+     @GNU_ONLY TARGET = modules/$(M:.so=).so
+ @ENDIF
+ 
+-@IFDEF T
++@IFDEF TGT
+     HEADER =
+     FOOTER = target
+-    TARGET = $(T)
++    TARGET = $(TGT)
+ @ENDIF
+ 
+ @IFEQ $(DBGOK) 0
diff --git a/net-irc/inspircd/files/inspircd-2.0.5-r1-init b/net-irc/inspircd/files/inspircd-2.0.5-r1-init
new file mode 100644
index 000000000000..70956d657151
--- /dev/null
+++ b/net-irc/inspircd/files/inspircd-2.0.5-r1-init
@@ -0,0 +1,38 @@
+#!/sbin/runscript
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-irc/inspircd/files/inspircd-2.0.5-r1-init,v 1.1 2012/03/23 10:27:13 nimiux Exp $
+
+extra_commands="rehash version"
+
+depend() {
+	need net
+	provide ircd
+}
+
+start() {
+	ebegin "Starting InspIRCd"
+	start-stop-daemon --start --quiet --user inspircd \
+		--exec /usr/bin/inspircd -- \
+		--config /etc/inspircd/inspircd.conf \
+		--logfile /var/log/inspircd/ircd.log &> /dev/null
+	eend $?
+}
+
+stop() {
+	ebegin "Stopping InspIRCd"
+	start-stop-daemon --stop --quiet --exec /usr/bin/inspircd
+	eend $?
+}
+
+rehash() {
+	ebegin "Rehashing InspIRCd"
+	/usr/lib/inspircd/inspircd.launcher/inspircd rehash &> /dev/null
+	eend $?
+}
+
+version() {
+	ebegin "Retrieve InspIRCd version"
+	/usr/lib/inspircd/inspircd.launcher/inspircd version
+	eend $?
+}
diff --git a/net-irc/inspircd/inspircd-2.0.5-r1.ebuild b/net-irc/inspircd/inspircd-2.0.5-r1.ebuild
new file mode 100644
index 000000000000..6c6cb5039dd6
--- /dev/null
+++ b/net-irc/inspircd/inspircd-2.0.5-r1.ebuild
@@ -0,0 +1,110 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-irc/inspircd/inspircd-2.0.5-r1.ebuild,v 1.1 2012/03/23 10:27:13 nimiux Exp $
+
+EAPI=4
+
+inherit eutils flag-o-matic multilib
+
+DESCRIPTION="Inspire IRCd - The Stable, High-Performance Modular IRCd"
+HOMEPAGE="http://www.inspircd.org/"
+SRC_URI="http://www.inspircd.org/downloads/InspIRCd-${PV}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="gnutls ipv6 ldap mysql postgres sqlite ssl"
+
+RDEPEND="
+	dev-lang/perl
+	ssl? ( dev-libs/openssl )
+	gnutls? ( net-libs/gnutls )
+	ldap? ( net-nds/openldap )
+	mysql? ( virtual/mysql )
+	postgres? ( dev-db/postgresql-server )
+	sqlite? ( >=dev-db/sqlite-3.0 )"
+DEPEND="${RDEPEND}"
+
+S="${WORKDIR}/${PN}"
+
+pkg_setup() {
+	enewgroup ${PN}
+	enewuser ${PN} -1 -1 -1 ${PN}
+}
+
+src_prepare() {
+	# Patch the inspircd launcher with the inspircd user
+	sed -i -e "s/@UID@/${PN}/" "${S}/make/template/${PN}" || die
+
+	epatch "${FILESDIR}"/${PF}-fix-make-config.patch
+}
+
+src_configure() {
+	local extras=""
+	local dipv6="--disable-ipv6"
+
+	use openssl && extras="${extras}m_ssl_openssl.cpp,"
+	use gnutls && extras="${extras}m_ssl_gnutls.cpp,"
+	use ldap && extras="${extras}m_ldapauth.cpp,"
+	use mysql && extras="${extras}m_mysql.cpp,"
+	use postgres && extras="${extras}m_pgsql.cpp,"
+	use sqlite && extras="${extras}m_sqlite3.cpp,"
+
+	use ipv6 && dipv6=""
+
+	# allow inspircd to be built by root
+	touch .force-root-ok || die
+
+	if [ -n "${extras}" ]; then
+		./configure --disable-interactive \
+			--enable-extras=${extras} || die
+	fi
+
+	./configure \
+		--disable-interactive \
+		--uid=${INSPIRCDUSER} \
+		$(use_enable openssl) \
+		$(use_enable gnutls) \
+		--prefix="/usr/$(get_libdir)/inspircd" \
+		--config-dir="/etc/inspircd" \
+		--binary-dir="/usr/bin" \
+		--module-dir="/usr/$(get_libdir)/inspircd/modules" \
+		${dipv6} || die
+}
+
+src_compile() {
+	append-cxxflags -Iinclude -fPIC
+	emake LDFLAGS="${LDFLAGS}" CXXFLAGS="${CXXFLAGS}"
+}
+
+src_install() {
+	emake INSTUID=inspircd \
+		BINPATH="${D}/usr/bin" \
+		BASE="${D}/usr/$(get_libdir)/inspircd/inspircd.launcher" \
+		MODPATH="${D}/usr/$(get_libdir)/inspircd/modules/" \
+		CONPATH="${D}/etc/inspircd" install
+
+	insinto /etc/inspircd/modules
+	doins docs/modules/*
+
+	insinto /etc/inspircd/aliases
+	doins docs/aliases/*
+
+	insinto /usr/include/inspircd/
+	doins include/*
+
+	diropts -oinspircd -ginspircd
+	dodir "/var/run/inspircd"
+
+	newinitd "${FILESDIR}/${PF}-init" "${PN}"
+	keepdir "/var/log/inspircd/"
+}
+
+pkg_postinst() {
+	elog "Before starting inspircd the first time you should create"
+	elog "the /etc/inspircd/inspircd.conf file."
+	elog "You can find example configuration files under /etc/inspircd."
+	elog "Read the inspircd.conf.example file carefully before starting "
+	elog "the service."
+	elog
+}
diff --git a/net-irc/inspircd/metadata.xml b/net-irc/inspircd/metadata.xml
index 2aceaf989cee..771c8e57f2a1 100644
--- a/net-irc/inspircd/metadata.xml
+++ b/net-irc/inspircd/metadata.xml
@@ -12,6 +12,13 @@
 looking for a new proxy maintainer</description>
     </maintainer>
 	<use>
-		<flag name='openssl'>Build <pkg>dev-libs/openssl</pkg> module</flag>
+		<flag name='gnutls'>Enable TLS support</flag>
+		<flag name='ipv6'>Enable support for IP version 6</flag>
+		<flag name='ldap'>Enable LDAP support</flag>
+		<flag name='mysql'>Enable MySQL database backend</flag>
+		<flag name='openssl'>Enable SSL support</flag>
+		<flag name='postgres'>Enable PostgreSQL database backend</flag>
+		<flag name='sqlite'>Enable Sqlite database backend</flag>
+		<flag name='ssl'>Enable SSL support</flag>
 	</use>
 </pkgmetadata>