diff options
Diffstat (limited to 'app-backup/bareos')
-rw-r--r-- | app-backup/bareos/Manifest | 14 | ||||
-rw-r--r-- | app-backup/bareos/bareos-18.2.10-r2.ebuild (renamed from app-backup/bareos/bareos-18.2.10-r1.ebuild) | 0 | ||||
-rw-r--r-- | app-backup/bareos/bareos-19.2.10-r2.ebuild (renamed from app-backup/bareos/bareos-19.2.10-r1.ebuild) | 0 | ||||
-rw-r--r-- | app-backup/bareos/bareos-20.0.2-r2.ebuild (renamed from app-backup/bareos/bareos-20.0.2-r1.ebuild) | 5 | ||||
-rw-r--r-- | app-backup/bareos/files/bareos-dir.initd | 15 | ||||
-rw-r--r-- | app-backup/bareos/files/bareos-dir.service | 9 | ||||
-rw-r--r-- | app-backup/bareos/files/bareos-sd.initd | 15 | ||||
-rw-r--r-- | app-backup/bareos/files/bareos-sd.service | 9 |
8 files changed, 47 insertions, 20 deletions
diff --git a/app-backup/bareos/Manifest b/app-backup/bareos/Manifest index d84314d4489c..fb73989535ce 100644 --- a/app-backup/bareos/Manifest +++ b/app-backup/bareos/Manifest @@ -3,19 +3,19 @@ AUX bareos-cmake-gentoo.patch 516 BLAKE2B 685734517fc166413250782ed35445761b19ef AUX bareos-cmake-rados.patch 718 BLAKE2B be3c5822a122fb9d6a5bdd6cb388e3edbb59c6e2aafb9e16991bf0c62ab2dbdf0757de88382318bbd9f6b0fb7d48de11c9d0cd6ab276b6fb6c4f61f8b756237a SHA512 46b6ced3bcdf7e6a72029803a60775cfc06b2313004214dfe7d7ffa64f954fb80cb93f7374b967b33b4035aac8fce4412f13833aa57a83e4ce98c503f147918e AUX bareos-cmake-symlink-default-db-backend.patch 779 BLAKE2B edb161632215ed8bdc75cae27d54f603787d5f3cbfcf19e180cb7234f661c35527c24dfef38b7c455fd28a46539eae94d157c4777549381c0db64c5fe531d35d SHA512 f5c07d611b7e9f5dc85e0e1440b5bcf43f80a6a6a3b7aead0b88a7a924c9cc8c42bad016d81a0ad55baecc5888e850a516bc86b52a65ddf460c3059fe7f299ee AUX bareos-dir.confd 640 BLAKE2B 0c80793f66ef9f3b46995a2dcf150b3d7a8a9f53ff97896887314ab31d6082949ac3db2c260b2fc7551c035183c31558cc853f768eca5b0bebdfa483280780b5 SHA512 af71699773ade63c98e2016f48b4d108f29a419a7533444245df4507a7ad7b807948986f9f850ce1f9af58fb445ecd44a5d880f68732b371a7a87dbc5a25ec7c -AUX bareos-dir.initd 489 BLAKE2B a7ea18e373794d0c6cea9bdb0ef597ebae801f7ededfe32fa607e5541632c7284895a4a53a5edf3f1d05f95a2b0dea98ca0c16d15f27dfd1bb5329083ab25fb4 SHA512 23bc9ae363aea681b93a1737f2d2f5ec38daef1498fd4e4eac191e86ee749064e3f340d41b5888855db883a045f1170801fc135f1149cece522f9c59103f9d23 -AUX bareos-dir.service 774 BLAKE2B 32edec8dc75e0bd982a03d1734579d01bec210fa1c3b18ad80edc69b7596d48c30cb2d5ece476b0bff446f115cfa6c02cf5a3de414de2c4851a79d42eb6ea95c SHA512 559e22d1744ddee59e75902d3f8f6956b1d98570c3d98d85efd38e3e50f8d2c2bc34fd6a8e85575ed3a207d42254c20d4faf59d9bf7c0436d868069916cb8d30 +AUX bareos-dir.initd 869 BLAKE2B 80fec7cbe9b4f80f2f5b6152243ad7aa79760dc5198473515e5642ca29255f869d59b83465f87543e42ffc80ba0b3b277e437ff3446c005c5338350e1d04175f SHA512 ea54b7e569cfa69e6b2d996352dedd52487d1eb6f7776d970c3a9efa7e13f40d12b3b8d7388f035d5d84c2096c7644f5834495cc5b4084203e71b2bd0d833e8f +AUX bareos-dir.service 841 BLAKE2B e8c9508984f2823b334c3ef3c412f51e50666cd45aea1c5491a3ce6b1fadf09e7e0cb836d0658f5398209aa0a478c5a6b4fa1b67476e0fc317d6e25bc0fc54a8 SHA512 8f886d3c60959f009cf5f626f64071eb5d768ebf6c5ac0dd0c0c34d866d29563a2f0c68519363170ac35595cc743b432f46a54ce10bbfa530971f56b9914b0a9 AUX bareos-fd.confd 208 BLAKE2B a2c4692fd2736604ebd1f12d84f300bac8df46a08859ce61cca8417d2645f75bb14f24b5f4fcad70175b11d28a4c052116a1fe99028d634a2fe1fa89cf2c4313 SHA512 8134d37f9d74ced01e769c1a04461e0141cc88cc305441079d9e672d29083ff4ab329a2c36dd2bdc9b7f07204233ff1b6ebd72af2dcbb15af63759be9d0878bc AUX bareos-fd.initd 472 BLAKE2B d377348a0a68a31b821299c46a549e82954e7f694c1b78051b619477eb0453326c2f902f66732b88d1e6c1e6f8ff9bba944f53528512d7f8d5683b37d7f50804 SHA512 0fcbed2d1702738f30e09e8705720b84f6d098e9d4a46b7d23d397d7edc04d03c34f35519eac56f559ce5d3bf3ab185357370e6f8d66d986ca80d1ddcf7ccf30 AUX bareos-fd.service 670 BLAKE2B b6a93c1ccc74d11c744783993ac68b31ec896e2bc7464fb7295677af86cd86a45c7bdae6c597c7eb2e9fb663a4757455b324260f96503e3d1632f9534b06048b SHA512 33304e148710f3ddb90d75e8803908646e43971e01ca590bb88f3ec03fd83c848123747a86c974ef4529eaadf77a31e24f833205bf810b0803cf0e46f846f5fa AUX bareos-sd.confd 360 BLAKE2B d965bf4cf1db59982b57ee0b848f9f7156d695a37d2a3b4cb339ce5ac4b27717db6d609a71b8e318fb297a6065c6ce0c20d6e18180a9d47843de5299a43ce6cd SHA512 4077174b5b49f425d53ec36bde039cee0dc55204c1127467c01bb57c58e6495e000b032f060c5ae6d757472934127776667a78238bcc28fbbe7a713d3da18039 -AUX bareos-sd.initd 479 BLAKE2B 3354f51f7a4edbf05ad007dddf616a41cc46f27c5a7786e1cbfa261ae58b7cb28d8c66f4345addb9e40cb3dc4c319fdb106f75e38615cf14b33f0e59369ce0d8 SHA512 611fbd7b3cc8aa810eed17e45ba1a19696291a4a8057af3b7f8ba9e5c81c535074c80c399193a17804c45ae5975345dac19ddd74bc7d2cf708439611724d0eba -AUX bareos-sd.service 746 BLAKE2B 14a68ae8c56fbaf4b1d4f0bb9ee774d227b80b43e7dd7062a91948176a9625c7a4b96531e01747b56883fdce289de4f67cc9649a714546ca7f8148488f65555e SHA512 e91e315dd250df996e41e1dd0b884815a28a461416e00f5ac281bd58c294788ba344343ce05f89d6d702abefa454bb70cadd04f4b00641331dac7e9fc9859583 +AUX bareos-sd.initd 855 BLAKE2B 40ca8e89b63e67f6fa4a4f60e735bd101ce0b1ad46be07b6df2d1524cd3f3e1f2540ce4b90095168499cab82306ed3d2d1c306c2b185e22632cbd5d18c6e8f4b SHA512 d45c33374da46e53b5828b4575087d00753f4aea3af6b641933f456f2bf5ba254894fc1fc1a6641ab6ae1c3f85bcd606500d6207e23a7070c78fd4e6aa666543 +AUX bareos-sd.service 812 BLAKE2B 7ac9754d98ea177614450045fbbaf7406592b30a280646eacdf31271a0cafd63e88ac463b1d94143ccac96c289de3f88a177edab665f073e7c7692037ffedb68 SHA512 6a0fdb3af03e9f94e0d755a3286aff36b41ab1f00a82e9864f6d3de6931691f6aba79aeb7fc952cec039e4174b545f53c23e96fcfbaed71192877d201b3086ad AUX tmpfiles.d-bareos.conf 33 BLAKE2B 68feed7629dde0dad019470851cea33140be3b17186fbbee7ad6c6a591978236ec09252d890117030d8706d22ea02f9971063aa80a393d3726510128527401d0 SHA512 65d3f72e57eb3afc557ab6b56a8ec1895a679b904114fefd1c9d0ceeb6b9fa8413575591ed81e1ce6963bdaf34dad227e781865b39bb237afc6bb5652306d2ef DIST bareos-18.2.10.tar.gz 10558902 BLAKE2B ffeac4169131dfc28ec0c9cd9816962492a920b3309ba41a48eec37641fc35027e5f1d1f7d9bf3a7fc2ce2982899e991f4d846f42852e7fbf0643090cccf7096 SHA512 2c31029fdcabe26d36d5aab5ed91686bb0b497eef707ca8fbf82a72a62259651aae4a7516a8812141f6a8e0e2de97e16e5f008d11bb1e483f176f67397e5f69e DIST bareos-19.2.10.tar.gz 12893797 BLAKE2B 49493acab4fbd26a4ef9aa2f9c19df8a535460596d8206a4d15fedeaace420b7ba948505d7b74ef65aeb94bb8bfa77cf392babeb3e6509839ac418d935fa7070 SHA512 946b1dc5709696363d2ffa3d890fa662976690723ab8054d827c930f27757a22af44b83915ce2a4f198a7d0c2a71bb19b4597141afd31b9809bd6b214237d475 DIST bareos-20.0.2.tar.gz 13333946 BLAKE2B f035fc8b98bf176bd675895b459ac78fa43575a686af11d5c43ff6b86451894d9aaa53600f87253da29dac06271c01bb269777284d903001821918405499e536 SHA512 f3a0f481a2c9b3a422f4db3e094587c97fe10e2ea5e7a8ba44e9971b0a11746ae4ad598ea469d5c8ec0dfb962e4104c00931397905aebbf3e22af49834043994 -EBUILD bareos-18.2.10-r1.ebuild 11166 BLAKE2B 0ea402d3feb5ee0d88d9b3743bedd1145c9a199b637f97144543ed60da5cb87a76e35be077002f323ab9dccbb79ee2978197fcba5d91bb067d2fd45eda7b1ff9 SHA512 ac89c1c9830743210c9a83fa6b7afbd67c8bfeec8a2002394fd4bd4f68695b75b21a64d96bf0ca91798b38612c339b9a4da0593c964310ea9ff5693256cd08e6 -EBUILD bareos-19.2.10-r1.ebuild 10913 BLAKE2B 53f53486f4a38da837dc2a611468bf4cc8539b6c98bfa4c8f7de35567a0e18e3e8aae666a44e094735ff7a1d41b7ebd27df97b7004a0b2489b6ac5d0d604c038 SHA512 4deece9d0a99038ae170f9a3187cbfd660ac87d61e48b062f249cba4ea3588569d5cbe8624ffde60f2f649b395d67595e25b69b7c5e207bad418cf40862bc648 -EBUILD bareos-20.0.2-r1.ebuild 11274 BLAKE2B f314f54fb790262fbe836d6ca2bdf36303981228eb22372dcb67c9822bee6c9eb519ea0cf849d5dbf01d6a4eee64d2ba183edf9fb2ec98a65608191b052fad2f SHA512 2121ef4f9d2b19a368e7d5b47b2895aa70c31b165abe08de1b047b5cbc7d88b6bb453c3e050815e2bd39dc6b080f5536ee765a3dc972ad58457d50e3bd5df7d3 +EBUILD bareos-18.2.10-r2.ebuild 11166 BLAKE2B 0ea402d3feb5ee0d88d9b3743bedd1145c9a199b637f97144543ed60da5cb87a76e35be077002f323ab9dccbb79ee2978197fcba5d91bb067d2fd45eda7b1ff9 SHA512 ac89c1c9830743210c9a83fa6b7afbd67c8bfeec8a2002394fd4bd4f68695b75b21a64d96bf0ca91798b38612c339b9a4da0593c964310ea9ff5693256cd08e6 +EBUILD bareos-19.2.10-r2.ebuild 10913 BLAKE2B 53f53486f4a38da837dc2a611468bf4cc8539b6c98bfa4c8f7de35567a0e18e3e8aae666a44e094735ff7a1d41b7ebd27df97b7004a0b2489b6ac5d0d604c038 SHA512 4deece9d0a99038ae170f9a3187cbfd660ac87d61e48b062f249cba4ea3588569d5cbe8624ffde60f2f649b395d67595e25b69b7c5e207bad418cf40862bc648 +EBUILD bareos-20.0.2-r2.ebuild 11368 BLAKE2B 631d15f7125a5aad10400f76bbc080fd451fa5b28992aa0bcc79223bcdc3ca9e2c7a2e206ff035d078cd607dd59dbf0796ad783fcd9f1036d26c63b6c221cb55 SHA512 5a90972b274d08f102d9a2892f2630828c25e16c732942b93385f6db7ffe6d97e54dae3b9472e82661ae7e4fcdc4f35238c2ee5a83c51b78c8277ca0a0331820 MISC metadata.xml 1551 BLAKE2B 0bcfa9e7cb3230427a0450befedddc11667eaea56aedd72d4c724e204493c16084db0096d1eb3740dfd06f0c8dee2dbb5f0c507e67e17487d6ad0d67efdef04f SHA512 2deb20bc5ea932ab2604bb40fac06f8d75256ff32b439c49ee242d6336bc76d8246ddeaefb11ed537871e06656204bef32f84d27e1de0ffd48084bed3b2f790c diff --git a/app-backup/bareos/bareos-18.2.10-r1.ebuild b/app-backup/bareos/bareos-18.2.10-r2.ebuild index 996c4c35ce13..996c4c35ce13 100644 --- a/app-backup/bareos/bareos-18.2.10-r1.ebuild +++ b/app-backup/bareos/bareos-18.2.10-r2.ebuild diff --git a/app-backup/bareos/bareos-19.2.10-r1.ebuild b/app-backup/bareos/bareos-19.2.10-r2.ebuild index a9e76afe1016..a9e76afe1016 100644 --- a/app-backup/bareos/bareos-19.2.10-r1.ebuild +++ b/app-backup/bareos/bareos-19.2.10-r2.ebuild diff --git a/app-backup/bareos/bareos-20.0.2-r1.ebuild b/app-backup/bareos/bareos-20.0.2-r2.ebuild index edf65d1c2d93..0e4e0741a3cb 100644 --- a/app-backup/bareos/bareos-20.0.2-r1.ebuild +++ b/app-backup/bareos/bareos-20.0.2-r2.ebuild @@ -19,7 +19,7 @@ SLOT="0" KEYWORDS="~amd64 ~x86" IUSE="X acl ceph clientonly +director glusterfs ipv6 jansson lmdb logwatch mysql ndmp +postgres readline scsi-crypto - sqlite static +storage-daemon systemd tcpd vim-syntax -vmware xattr" + sqlite static +storage-daemon systemd tcpd vim-syntax vmware xattr" # get cmake variables from core/cmake/BareosSetVariableDefaults.cmake DEPEND=" @@ -194,6 +194,9 @@ src_install() { # remove upstream init scripts and systemd units rm -f "${D}"/etc/init.d/bareos-* "${D}"/lib/systemd/system/bareos-*.service + # remove misc stuffwe do not need in production + rm -f "${D}"/etc/bareos/bareos-regress.conf + # get rid of py2 stuff if USE=-vmware if ! use vmware; then rm -f "$D"/usr/lib64/bareos/plugin/{BareosFdPluginVMware.py,bareos-fd-vmware.py,python-fd.so} diff --git a/app-backup/bareos/files/bareos-dir.initd b/app-backup/bareos/files/bareos-dir.initd index 9f17f212e4a4..462ff07843a2 100644 --- a/app-backup/bareos/files/bareos-dir.initd +++ b/app-backup/bareos/files/bareos-dir.initd @@ -1,5 +1,5 @@ #!/sbin/openrc-run -# Copyright 1999-2014 Gentoo Foundation +# Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 depend() { @@ -8,14 +8,23 @@ depend() { start() { ebegin "Starting bareos director" - checkpath -d -m 0750 -o root:bareos /run/bareos + # g+w until #631598 is resolved + checkpath -d -m 0770 -o root:bareos /run/bareos start-stop-daemon --start --quiet --exec /usr/sbin/bareos-dir \ -- ${DIR_OPTIONS} + # harden pid file until #631598 is resolved + ewaitfile 10 /run/bareos/bareos-dir.9101.pid + chown root:bareos /run/bareos/bareos-dir.9101.pid eend $? } stop() { ebegin "Stopping bareos director" - start-stop-daemon --stop --quiet --pidfile /run/bareos/bareos-dir.*.pid + # check pid file until #631598 is resolved + if [[ $(stat -c %U /run/bareos/bareos-dir.9101.pid) != "root" ]]; then + eerror "SECURITY ALERT: pid file is not root owned anymore?! (see #631598)" + else + start-stop-daemon --stop --quiet --pidfile /run/bareos/bareos-dir.9101.pid + fi eend $? } diff --git a/app-backup/bareos/files/bareos-dir.service b/app-backup/bareos/files/bareos-dir.service index a342671d0d00..f0a611715487 100644 --- a/app-backup/bareos/files/bareos-dir.service +++ b/app-backup/bareos/files/bareos-dir.service @@ -11,14 +11,17 @@ After=nss-lookup.target network.target remote-fs.target time-sync.target postgre ConditionPathIsDirectory=/var/lib/bareos [Service] -Type=forking +# see bug #631598 +#Type=forking +Type=simple User=bareos Group=bareos WorkingDirectory=/var/lib/bareos -PIDFile=/run/bareos/bareos-dir.9101.pid +#PIDFile=/run/bareos/bareos-dir.9101.pid StandardError=journal ExecStartPre=/usr/sbin/bareos-dir -t -f -ExecStart=/usr/sbin/bareos-dir +#ExecStart=/usr/sbin/bareos-dir +ExecStart=/usr/sbin/bareos-dir -f SuccessExitStatus=0 1 15 #Restart=on-failure diff --git a/app-backup/bareos/files/bareos-sd.initd b/app-backup/bareos/files/bareos-sd.initd index 4f7fbcb52bf2..97b9ccdc92f1 100644 --- a/app-backup/bareos/files/bareos-sd.initd +++ b/app-backup/bareos/files/bareos-sd.initd @@ -1,5 +1,5 @@ #!/sbin/openrc-run -# Copyright 1999-2014 Gentoo Foundation +# Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 depend() { @@ -8,14 +8,23 @@ depend() { start() { ebegin "Starting bareos storage daemon" - checkpath -d -m 0750 -o root:bareos /run/bareos + # g+w until #631598 is resolved + checkpath -d -m 0770 -o root:bareos /run/bareos start-stop-daemon --start --quiet --exec /usr/sbin/bareos-sd \ -- ${SD_OPTIONS} + # harden pid file until #631598 is resolved + ewaitfile 10 /run/bareos/bareos-sd.9103.pid + chown root:bareos /run/bareos/bareos-sd.9103.pid eend $? } stop() { ebegin "Stopping bareos storage daemon" - start-stop-daemon --stop --quiet --pidfile /run/bareos/bareos-sd.*.pid + # check pid file until #631598 is resolved + if [[ $(stat -c %U /run/bareos/bareos-sd.9103.pid) != "root" ]]; then + eerror "SECURITY ALERT: pid file is not root owned anymore?! (see #631598)" + else + start-stop-daemon --stop --quiet --pidfile /run/bareos/bareos-sd.9103.pid + fi eend $? } diff --git a/app-backup/bareos/files/bareos-sd.service b/app-backup/bareos/files/bareos-sd.service index 80d9edbc9734..acf8cb0156e1 100644 --- a/app-backup/bareos/files/bareos-sd.service +++ b/app-backup/bareos/files/bareos-sd.service @@ -10,14 +10,17 @@ Requires=nss-lookup.target network.target remote-fs.target time-sync.target After=nss-lookup.target network.target remote-fs.target time-sync.target [Service] -Type=forking +# see bug #631598 +#Type=forking +Type=simple User=root Group=bareos WorkingDirectory=/var/lib/bareos -PIDFile=/run/bareos/bareos-sd.9103.pid +#PIDFile=/run/bareos/bareos-sd.9103.pid StandardError=journal ExecStartPre=/usr/sbin/bareos-sd -t -f -ExecStart=/usr/sbin/bareos-sd +#ExecStart=/usr/sbin/bareos-sd +ExecStart=/usr/sbin/bareos-sd -f # enable this for scsicrypto-sd # CapabilityBoundingSet=cap_sys_rawio+ep SuccessExitStatus=0 15 |