gentoo auto-resync : 10:06:2024 - 00:08:04

3 files changed, 190 insertions, 0 deletions

diff --git a/net-dns/pdns/Manifest b/net-dns/pdns/Manifest
index f2a7e1fd758a..26271533c1e6 100644
--- a/net-dns/pdns/Manifest
+++ b/net-dns/pdns/Manifest
@@ -1,7 +1,10 @@
 AUX dnsdomain2.schema 6640 BLAKE2B d3efc6bc16390f35979f1184632e7184cf403453422888e2cb44fa4fed7891241919a39c8c6f539a61de032654650a45ea548a6983777ea1bfe029e817f2c315 SHA512 ac16f8d528d6138d3c2cbf997fd8fbb467d388aa63eb6ed4e7780a3dad11ea885b91252ff0809b1d2cf7d5200814b8963aab890af84741ea86d35b2f5955a7ea
+AUX pdns-4.9.1-lua-records-optional.patch 762 BLAKE2B c12f02962e245e05dd9a236de98470ca97bba352aa4329f9263e403419ecf1540cf277d8636f4b981ea2cbbc4c79762086fc08dfbc5bf64e019a66fef5398d75 SHA512 124b78c9d49a42f43d33330d5ce742eacf5714e60604455d602d36f886e3c1f6e29090a6e0916412fa0a28404272f0785abe0b67f0e62582814c5afcc9332238
 AUX pdns-r1 2815 BLAKE2B cd607cb30a94540eca9cfa2defb7c996f6e151875fcaad8ad3357261937868bc346962f1080ad45a0ef38c2dfc126eb11e41837ee0784f677d1e7c071589a057 SHA512 4c0442d8d92d95268d4971f80782d2772e2a22c43da00566a9328c79a834e4355b2610d133034351d7137ed6cd7fda300f3db8093b09d5852cea44d983de1e39
 DIST pdns-4.8.4.tar.bz2 1334756 BLAKE2B b92a35ee3e76806bd24bd030428e74afae19a46333d2a444e2bb822300049f3be5afa260cbdadd435f45ba1cf160481c8ccd0bd386eeb4d2679498d650fb7bf7 SHA512 1e8ec7e5ba0c8d87d273eab866890d0fa999825f2ca50127c4337a627fb1aabc6a957608fc9e60b53d5fde8b76530dc08bda4463e62e642d9b1f74f6e097c774
 DIST pdns-4.9.0.tar.bz2 1364768 BLAKE2B a018459b250f181686d2638e4487dfd18ef1173f20798039be1f8f6e7134399bada5a9bf2aab16004026630c175f363b22d7749fdbfb0b8601699b29db1b1ed2 SHA512 73dcad9a6cc80e5ca2bdd28f1c49b1acab463ec51cb181324536a566ab26ac3a236099bd4eb03fbe98748f798ad0e11270fb8e6d52a33ea106c8dd2d97013388
+DIST pdns-4.9.1.tar.bz2 1396230 BLAKE2B 810f655823dc612026ac3548cd432ea6a044ac26018ce0a1b5c29743c5e9b1df775b172dba741a79c1a0537d0d17ed4c5d9f748ac1385803ec83438f250d3cd6 SHA512 8be784615a4b35dd04af7584d1faf3e2b25665b31f83d8f64057ca164a2c4f0604c92c768b88a7b778aa13148fb2d0cedc328551b8c467b7b21011cfc3b33b1a
 EBUILD pdns-4.8.4.ebuild 4383 BLAKE2B 5f6d499b05232aef460d2429ed0745e085af8f167d72cb253567166dc63fbf57d279f85d69948e94c881df35cc44399d46a5b78a6d8fe5109e051b20e005df31 SHA512 a696bb57d1d73bd61740b7231873a89f9fc0c7230f59a374ffaccfde148084ebed26cf4b9d393afac5328cf0f270b39446ce9c5e3862568567e8a8bb632d8c37
 EBUILD pdns-4.9.0.ebuild 4385 BLAKE2B adb30b033491236fe0e1dba3bf4c33efe9b2249d47e7346db80feb8afd8bb41ed06c8cb764e1396dc0e77b40ac60d8ab68f2a250f0f9f6c27cfe0293a8dac53a SHA512 8ff5585d2484fc4bf00fa7683426503e88366a300406ae932fb6f1187cb31c94d7221dc3927c809def24a2589174d6ad6fda0fd737daa9d581581889e63b222b
+EBUILD pdns-4.9.1.ebuild 4445 BLAKE2B 3cc0e576e6cc7814f292505ad3f8f2dbaa75017385d5cbcdc6c20f85b7600394271655aa3665eafd8766c39f76e45038a189f3e02fa288ea9827b488621711ad SHA512 54385eb7bd028326b6aa864671a8e769e145a688357bebd7bdf6abc8d9f994f400b19bfd9b68aa2cd927bd8d7346a1e935084960a4951c0ea0ce863fccae144f
 MISC metadata.xml 951 BLAKE2B 37f168bd4a7db2c11c6da9d5a07abc506c5b7115f10512b0e500cb3c3ea64758cd44d4222b2d750be3a731e8a6d12dee922f829ee5beb11eb1bd5c01f0827af1 SHA512 70612d620009416b680dc442cc0cfe7ea903f87a27f9b2e76fe77ad14eb1428f5a0133eb9e393bd286f404a755246250feeb5f5da63772aa2be2c5db4bc11ee9
diff --git a/net-dns/pdns/files/pdns-4.9.1-lua-records-optional.patch b/net-dns/pdns/files/pdns-4.9.1-lua-records-optional.patch
new file mode 100644
index 000000000000..6a90e0d14cd4
--- /dev/null
+++ b/net-dns/pdns/files/pdns-4.9.1-lua-records-optional.patch
@@ -0,0 +1,18 @@
+--- a/pdns/pdnsutil.cc
++++ b/pdns/pdnsutil.cc
+@@ -378,6 +378,7 @@ static int checkZone(DNSSECKeeper &dk, UeberBackend &B, const DNSName& zone, con
+     if(rr.qtype.getCode() == QType::A || rr.qtype.getCode() == QType::AAAA) {
+       addresses.insert(rr.qname);
+     }
++#ifdef HAVE_LUA_RECORDS
+     if(rr.qtype.getCode() == QType::LUA) {
+       shared_ptr<DNSRecordContent> drc(DNSRecordContent::make(rr.qtype.getCode(), QClass::IN, rr.content));
+       auto luarec = std::dynamic_pointer_cast<LUARecordContent>(drc);
+@@ -386,6 +387,7 @@ static int checkZone(DNSSECKeeper &dk, UeberBackend &B, const DNSName& zone, con
+         addresses.insert(rr.qname);
+       }
+     }
++#endif
+     if(rr.qtype.getCode() == QType::A) {
+       arecords.insert(rr.qname);
+     }
diff --git a/net-dns/pdns/pdns-4.9.1.ebuild b/net-dns/pdns/pdns-4.9.1.ebuild
new file mode 100644
index 000000000000..aea5effc117f
--- /dev/null
+++ b/net-dns/pdns/pdns-4.9.1.ebuild
@@ -0,0 +1,169 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+LUA_COMPAT=( lua5-{1..4} luajit )
+PYTHON_COMPAT=( python3_{10..12} )
+
+inherit flag-o-matic lua-single python-any-r1
+
+DESCRIPTION="The PowerDNS Daemon"
+HOMEPAGE="https://www.powerdns.com/"
+SRC_URI="https://downloads.powerdns.com/releases/${P/_/-}.tar.bz2"
+
+PATCHES=(
+	"${FILESDIR}"/${P}-lua-records-optional.patch
+)
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+
+IUSE="debug doc geoip ldap lmdb lua-records mysql odbc postgres remote sodium sqlite systemd tools tinydns test"
+RESTRICT="!test? ( test )"
+
+REQUIRED_USE="${LUA_REQUIRED_USE}"
+
+DEPEND="${LUA_DEPS}
+	dev-libs/openssl:=
+	dev-libs/boost:=
+	lmdb? ( >=dev-db/lmdb-0.9.29 )
+	lua-records? ( >=net-misc/curl-7.21.3 )
+	mysql? ( dev-db/mysql-connector-c:= )
+	postgres? ( dev-db/postgresql:= )
+	ldap? ( >=net-nds/openldap-2.0.27-r4:= app-crypt/mit-krb5 )
+	odbc? ( dev-db/unixODBC )
+	sqlite? ( dev-db/sqlite:3 )
+	geoip? ( >=dev-cpp/yaml-cpp-0.5.1:= dev-libs/geoip )
+	sodium? ( dev-libs/libsodium:= )
+	tinydns? ( >=dev-db/tinycdb-0.77 )
+	elibc_glibc? ( x86? ( >=sys-libs/glibc-2.34 ) )"
+RDEPEND="${DEPEND}
+	acct-user/pdns
+	acct-group/pdns"
+
+BDEPEND="${PYTHON_DEPS}
+	virtual/pkgconfig
+	doc? ( app-text/doxygen[dot] )"
+
+S="${WORKDIR}"/${P/_/-}
+
+pkg_setup() {
+	lua-single_pkg_setup
+	python-any-r1_pkg_setup
+	append-lfs-flags
+	append-cppflags -D_TIME_BITS=64
+}
+
+src_configure() {
+	local cnf_dynmodules="bind lua2 pipe" # the default backends, always enabled
+
+	use geoip && cnf_dynmodules+=" geoip"
+	use ldap && cnf_dynmodules+=" ldap"
+	use lmdb && cnf_dynmodules+=" lmdb"
+	use mysql && cnf_dynmodules+=" gmysql"
+	use odbc && cnf_dynmodules+=" godbc"
+	use postgres && cnf_dynmodules+=" gpgsql"
+	use remote && cnf_dynmodules+=" remote"
+	use sqlite && cnf_dynmodules+=" gsqlite3"
+	use tinydns && cnf_dynmodules+=" tinydns"
+
+	econf \
+		--disable-static \
+		--sysconfdir=/etc/powerdns \
+		--libdir=/usr/$(get_libdir)/powerdns \
+		--with-service-user=pdns \
+		--with-service-group=pdns \
+		--with-modules= \
+		--with-dynmodules="${cnf_dynmodules}" \
+		--with-mysql-lib=/usr/$(get_libdir) \
+		--with-lua="${ELUA}" \
+		$(use_enable debug verbose-logging) \
+		$(use_enable lua-records) \
+		$(use_enable test unit-tests) \
+		$(use_enable tools) \
+		$(use_enable systemd) \
+		$(use_with sodium libsodium) \
+		${myconf}
+}
+
+src_compile() {
+	default
+	use doc && emake -C codedocs codedocs
+}
+
+src_install() {
+	default
+
+	mv "${D}"/etc/powerdns/pdns.conf{-dist,}
+
+	fperms 0700 /etc/powerdns
+	fperms 0600 /etc/powerdns/pdns.conf
+
+	# set defaults: setuid=pdns, setgid=pdns
+	sed -i \
+		-e 's/^# set\([ug]\)id=$/set\1id=pdns/g' \
+		"${D}"/etc/powerdns/pdns.conf
+
+	newinitd "${FILESDIR}"/pdns-r1 pdns
+
+	keepdir /var/empty
+
+	if use doc; then
+		docinto html
+		dodoc -r codedocs/html/.
+	fi
+
+	# Install development headers
+	insinto /usr/include/pdns
+	doins pdns/*.hh
+	insinto /usr/include/pdns/backends/gsql
+	doins pdns/backends/gsql/*.hh
+
+	if use ldap ; then
+		insinto /etc/openldap/schema
+		doins "${FILESDIR}"/dnsdomain2.schema
+	fi
+
+	find "${D}" -name '*.la' -delete || die
+}
+
+pkg_postinst() {
+	elog "PowerDNS provides multiple instances support. You can create more instances"
+	elog "by symlinking the pdns init script to another name."
+	elog
+	elog "The name must be in the format pdns.<suffix> and PowerDNS will use the"
+	elog "/etc/powerdns/pdns-<suffix>.conf configuration file instead of the default."
+
+	local old
+	for old in ${REPLACING_VERSIONS}; do
+		ver_test ${old} -lt 3.2 || continue
+
+		echo
+		ewarn "To fix a security bug (bug #458018) had the following"
+		ewarn "files/directories the world-readable bit removed (if set):"
+		ewarn "  ${EPREFIX}/etc/powerdns"
+		ewarn "  ${EPREFIX}/etc/powerdns/pdns.conf"
+		ewarn "Check if this is correct for your setup"
+		ewarn "This is a one-time change and will not happen on subsequent updates."
+		chmod o-rwx "${EPREFIX}"/etc/powerdns/{,pdns.conf}
+
+		break
+	done
+
+	if use postgres; then
+		for old in ${REPLACING_VERSIONS}; do
+			ver_test ${old} -lt 4.1.11-r1 || continue
+
+			echo
+			ewarn "PowerDNS 4.1.11 contains a security fix for the PostgreSQL backend."
+			ewarn "This security fix needs to be applied manually to the database schema."
+			ewarn "Please refer to the official security advisory for more information:"
+			ewarn
+			ewarn "  https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-06.html"
+
+			break
+		done
+	fi
+}