diff options
Diffstat (limited to 'app-admin/system-tools-backends')
6 files changed, 179 insertions, 0 deletions
diff --git a/app-admin/system-tools-backends/Manifest b/app-admin/system-tools-backends/Manifest new file mode 100644 index 000000000000..1c98c56f55fb --- /dev/null +++ b/app-admin/system-tools-backends/Manifest @@ -0,0 +1,8 @@ +AUX stb.rc 418 SHA256 6276d25419fcb4921dd64649c34f9a1a8be2332bc27e4fe0ab7736e6fa58a9b7 SHA512 847f19a82ae1e2d6f0c6be1ed77c46033bba1e85b99ac3764afd285f0192f09cf5928a6214ef4266c96255c35fd902148c5f068ce914898354476636cd10646c WHIRLPOOL 7fc19ed2cbc812f28aa72076c324b5430c33f1c543574ea238397243216b84555cb4d70b26364fdcb3ec996de062bfffd17f59ec2574d8f544128e22f72c8743 +AUX system-tools-backends-2.8.2-cve-2008-4311.patch 1984 SHA256 d7ef2a15e67cd9887ad41b75f5c545f63bf5a7cd8ef8ff1bab623182039dcd4b SHA512 ec8d2f526ad16f286aeef6d521ae3f2909676b846ad2a715d23c5a30b02f0608e42d550691e0e07493d70d1141093dc59c36a55afa82032c6d28e128ab1fd49b WHIRLPOOL 1e9d7d9c23872a1268363112cb217f2bd2db4253613dc409aab869e314d6f44eee25342cf9f9331f06ad72163205d0f97a364cbb630bb156f5d9357ad6b89abe +AUX system-tools-backends-2.8.2-default-permissions.patch 945 SHA256 f2752d877938d70805d31adf113c05ce45b62255cd195c4c74abe93695ec08c6 SHA512 0225f2825928c123cde5781d8d34c64e71ac6c4349e7440bc4e37cbbaaa99b55ca86f14459477a0a4ab3bd60625f95427d3779bd167d10f721a2b2c4ca9a20ae WHIRLPOOL 7d6a1d0591c15e9e06a5023d91715cbfe2e29eaa23b849a2693732529b76233b5e0ef2e43ce4ac06a279357ae00b051ca733b21d8091db1e81c75424766646db +DIST system-tools-backends-2.10.2.tar.bz2 448939 SHA256 1dbe5177df46a9c7250735e05e77129fe7ec04840771accfa87690111ca2c670 SHA512 9ee3e0643122740493265e532350fed9056334de0ea3d6656daa1d42b97f76f0f85024ac87e732fe5122a1e31ad009a1d2f119720081673a06696b81452fb990 WHIRLPOOL 2357ca2249b8f7c7ce3fc7ffcb4c49bcd83040d77910bbb1ce19e47750da999e6d359689d14c284a84b421287d5a8d3d183fc1debd0b119aa520dd125ca1a599 +EBUILD system-tools-backends-2.10.2.ebuild 1460 SHA256 9e86fb282e2afebdb09128e7d4b536077ab51c5e030648b8df0918a1f5de785a SHA512 487b2d0918986e8b35a6af7065d27fbed62b9a0e05fb72e82c96124cb169f6d07fe162fb2374ec781e2fe3d2bf21cd5c98ad6f88491a292bf4e4f66df4e4e115 WHIRLPOOL 675361872aa3483f79618f170bca94576fa4ffdf16cc50629f8ee5238001d0464a0ab5a32347329367c03ae9779ab8739aa64ae66d83f7357e30fecb252fcd36 +MISC ChangeLog 3049 SHA256 686ec0329faf9fae0df729a1c4f6f50f8331874c29dca1bd75b97092174d62be SHA512 fbd3023ccbba593643289c915a6955ec2e6090249082b449ed83bb6ba2c492679c64935dc97dea81823ad7e01acdd422f5f6e1781cb933820cc4a3712c609815 WHIRLPOOL d287753872fe1c9feae12534c932acf285e1507a25895f86b991ab88a78ae6cf7635c4f7c8ea7336e394b8e0d3a242199783b201291a7d656fc5714969a0d983 +MISC ChangeLog-2015 14221 SHA256 0784840116b2af74fdc1897d16ff9824993cdbf6b62edcab8cd8ae1a93d02f5f SHA512 56a68622edaf62a8471335ee8e5b9bcc1819a49874c656a96aa849cafa2462d752c29b08b5dab57d8c8985394310cc50c8be42d4d3c2a6395a70cc36a700dc3b WHIRLPOOL b73e05685b1d7da51e8056b9bc97176f57d541c579e5984fb3f2d1712c31d7250e32e7e342556e895683cea596081ccdd61922313b63b4c390ef7f7a6af284fd +MISC metadata.xml 505 SHA256 adac11b9b131306055e8c9b43dcf83842f30de557710fa09864ccd2dd8057bfb SHA512 e3d52afec42d48a68f30802c50b3e7cb033100acd041706b1bbba6b6168c7dc1b2720a20a346a974acd2b82c530e41868d3bc49f89c1a469ba38e372e459e397 WHIRLPOOL eaa049120409fe4bdaf3b8b0c576fbcc3a9712bbeb4ef8c6990452b565d89900bf7db4e937993f2f8432fd764afe55f0ec3eebcd1624355da10d397b46393c88 diff --git a/app-admin/system-tools-backends/files/stb.rc b/app-admin/system-tools-backends/files/stb.rc new file mode 100644 index 000000000000..814f0d359570 --- /dev/null +++ b/app-admin/system-tools-backends/files/stb.rc @@ -0,0 +1,20 @@ +#!/sbin/openrc-run +# Copyright 1999-2007 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +depend() { + need dbus +} + +start() { + ebegin "Starting system-tools-backend" + start-stop-daemon --start --exec /usr/sbin/system-tools-backends -- -D + eend $? +} + +stop() { + ebegin "Stopping system-tools-backend" + start-stop-daemon --stop --pidfile /var/run/system-tools-backends.pid + eend $? +} + diff --git a/app-admin/system-tools-backends/files/system-tools-backends-2.8.2-cve-2008-4311.patch b/app-admin/system-tools-backends/files/system-tools-backends-2.8.2-cve-2008-4311.patch new file mode 100644 index 000000000000..47f93da74f16 --- /dev/null +++ b/app-admin/system-tools-backends/files/system-tools-backends-2.8.2-cve-2008-4311.patch @@ -0,0 +1,47 @@ +From 544d679c2796602ff277e78e238abd56d30ad633 Mon Sep 17 00:00:00 2001 +From: Gilles Dartiguelongue <eva@gentoo.org> +Date: Mon, 14 Dec 2009 20:37:58 +0100 +Subject: [PATCH 3/4] Gentoo: fix CVE-2008-4311 + +commit fd648907e46017d46c367f59c62d0b0395830903 +Author: Simon McVittie <http://smcv.pseudorandom.co.uk/> +Date: 2009-01-04 19:35:51 +0000 + + Allow root to send messages to all the system tools backends, so + they work even when CVE-2008-4311 has been fixed. + + Also disallow normal user access by destination, not by + interface (fd.o #18961). +--- + org.freedesktop.SystemToolsBackends.conf | 8 ++++---- + 1 files changed, 4 insertions(+), 4 deletions(-) + +diff --git a/org.freedesktop.SystemToolsBackends.conf b/org.freedesktop.SystemToolsBackends.conf +index 58972ee..537ef73 100644 +--- a/org.freedesktop.SystemToolsBackends.conf ++++ b/org.freedesktop.SystemToolsBackends.conf +@@ -22,8 +22,10 @@ + <allow send_interface="org.freedesktop.SystemToolsBackends.Platform" send_member="getPlatform"/> + --> + +- <!-- Only allow talking to the dispatcher --> +- <allow send_destination="org.freedesktop.SystemToolsBackends"/> ++ <!-- configuration modules can't be accessed directly... --> ++ <deny send_destination="org.freedesktop.SystemToolsBackends"/> ++ <deny send_destination="org.freedesktop.SystemToolsBackends.Platform"/> ++ <deny send_destination="org.freedesktop.SystemToolsBackends"/> + </policy> + + <policy user="0"> +@@ -45,8 +47,6 @@ + + <!-- be able to speak to configuration modules, + so any message to them has to go through the dispatcher --> +- <allow send_interface="org.freedesktop.SystemToolsBackends"/> +- <allow send_interface="org.freedesktop.SystemToolsBackends.Platform"/> + <allow send_destination="org.freedesktop.SystemToolsBackends"/> + <allow send_destination="org.freedesktop.SystemToolsBackends.Platform"/> + <allow send_destination="org.freedesktop.SystemToolsBackends.GroupsConfig"/> +-- +1.6.5.4 + diff --git a/app-admin/system-tools-backends/files/system-tools-backends-2.8.2-default-permissions.patch b/app-admin/system-tools-backends/files/system-tools-backends-2.8.2-default-permissions.patch new file mode 100644 index 000000000000..bc58ba4fb1f9 --- /dev/null +++ b/app-admin/system-tools-backends/files/system-tools-backends-2.8.2-default-permissions.patch @@ -0,0 +1,25 @@ +From ea88120dac8ba2c2dabf4c393c283f69b3d33b5a Mon Sep 17 00:00:00 2001 +From: Gilles Dartiguelongue <eva@gentoo.org> +Date: Mon, 14 Dec 2009 20:37:15 +0100 +Subject: [PATCH 2/4] Gentoo: restrict access to stb to users in stb-admin group + +--- + org.freedesktop.SystemToolsBackends.conf | 4 ++++ + 1 files changed, 4 insertions(+), 0 deletions(-) + +diff --git a/org.freedesktop.SystemToolsBackends.conf b/org.freedesktop.SystemToolsBackends.conf +index d031525..58972ee 100644 +--- a/org.freedesktop.SystemToolsBackends.conf ++++ b/org.freedesktop.SystemToolsBackends.conf +@@ -60,4 +60,8 @@ + <allow send_destination="org.freedesktop.SystemToolsBackends.UserConfig"/> + <allow send_destination="org.freedesktop.SystemToolsBackends.UsersConfig"/> + </policy> ++ <policy group="stb-admin"> ++ <!-- be able to speak to the dispatcher --> ++ <allow send_destination="org.freedesktop.SystemToolsBackends"/> ++ </policy> + </busconfig> +-- +1.6.5.4 + diff --git a/app-admin/system-tools-backends/metadata.xml b/app-admin/system-tools-backends/metadata.xml new file mode 100644 index 000000000000..a8fccb3731a6 --- /dev/null +++ b/app-admin/system-tools-backends/metadata.xml @@ -0,0 +1,13 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd"> +<pkgmetadata> +<maintainer type="project"> + <email>lxqt@gentoo.org</email> + <name>LXQt</name> +</maintainer> +<longdescription lang="en"> +The System Tools Backends are a set of cross-platform modules for Linux, +FreeBSD, Solaris and other Unix systems. The backends provide an common DBus +interface to all distros for modifying or reading the system configuration. +</longdescription> +</pkgmetadata> diff --git a/app-admin/system-tools-backends/system-tools-backends-2.10.2.ebuild b/app-admin/system-tools-backends/system-tools-backends-2.10.2.ebuild new file mode 100644 index 000000000000..436bb9c06c14 --- /dev/null +++ b/app-admin/system-tools-backends/system-tools-backends-2.10.2.ebuild @@ -0,0 +1,66 @@ +# Copyright 1999-2015 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI="5" +GCONF_DEBUG="no" +GNOME_TARBALL_SUFFIX="bz2" + +inherit eutils gnome2 readme.gentoo user + +DESCRIPTION="Tools aimed to make easy the administration of UNIX systems" +HOMEPAGE="https://projects.gnome.org/gst/" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="alpha amd64 ~arm ~arm64 ia64 ppc sparc x86" +IUSE="" + +RDEPEND=" + !<app-admin/gnome-system-tools-1.1.91 + >=sys-apps/dbus-1.1.2 + >=dev-libs/dbus-glib-0.74 + >=dev-libs/glib-2.15.2:2 + >=dev-perl/Net-DBus-0.33.4 + dev-lang/perl + >=sys-auth/polkit-0.94 + userland_GNU? ( virtual/shadow ) +" +DEPEND="${RDEPEND} + virtual/pkgconfig + >=dev-util/intltool-0.40" + +DISABLE_AUTOFORMATTING="yes" +DOC_CONTENTS="You need to add yourself to the group stb-admin and +add system-tools-backends to the default runlevel. +You can do this as root like so: +# rc-update add system-tools-backends default +" + +pkg_setup() { + enewgroup stb-admin +} + +src_prepare() { + # Change default permission, only people in stb-admin is allowed + # to speak to the dispatcher. + epatch "${FILESDIR}/${PN}-2.8.2-default-permissions.patch" + + # Apply fix from ubuntu for CVE 2008 4311 + epatch "${FILESDIR}/${PN}-2.8.2-cve-2008-4311.patch" + + gnome2_src_prepare +} + +src_configure() { + gnome2_src_configure --localstatedir=/var +} + +src_install() { + gnome2_src_install + readme.gentoo_create_doc +} + +pkg_postinst() { + gnome2_pkg_postinst + readme.gentoo_print_elog +} |