Bug #486680: do not create group-writable directories during build that would fail under grsec TPE.

Package-Manager: portage-2.2.10/cvs/Linux x86_64

4 files changed, 23 insertions, 27 deletions

diff --git a/app-cdr/cdrtools/ChangeLog b/app-cdr/cdrtools/ChangeLog
index 51e28aba1011..7ea2e3bd483e 100644
--- a/app-cdr/cdrtools/ChangeLog
+++ b/app-cdr/cdrtools/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for app-cdr/cdrtools
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/ChangeLog,v 1.343 2014/08/03 19:12:46 tgall Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/ChangeLog,v 1.344 2014/09/21 01:54:22 robbat2 Exp $
+
+  21 Sep 2014; Robin H. Johnson <robbat2@gentoo.org>
+  cdrtools-3.01_alpha17.ebuild, cdrtools-3.01_alpha24.ebuild:
+  Bug #486680: do not create group-writable directories during build that would
+  fail under grsec TPE.
 
   03 Aug 2014;  <tgall@gentoo.org> cdrtools-3.01_alpha24.ebuild:
   arm64, initial support
diff --git a/app-cdr/cdrtools/Manifest b/app-cdr/cdrtools/Manifest
index d20b8833e154..c7520239f6d7 100644
--- a/app-cdr/cdrtools/Manifest
+++ b/app-cdr/cdrtools/Manifest
@@ -1,27 +1,6 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA256
-
 DIST cdrtools-3.01a17.tar.bz2 2061522 SHA256 3d613965b213ad83e4be0ba2535e784901839ea4d11a20a2beb6765f0eb76dfa SHA512 34a0579c536028b030cf828441ad55a705472646bc3a1ae962aad234fbe0b12c2bcb670511487c17086f5ba7643d1b8ae42a4a86bfe2940dc94f9744377daa8b WHIRLPOOL b718d559e0b36a576a42a38f84b3917891450d0bbab47b084eb1e906a396cf28ce47b79fd16565d4e0697311ee0c3d5abdd95b52ba2d7ae4e9f32d9b26bc26e1
 DIST cdrtools-3.01a24.tar.bz2 2075400 SHA256 4d9907b84f5b65dc6ca278b6202b90b8eb68652b01aa4dda978ffede8bdd4a5b SHA512 19be30de77fca00bb06fa6325149421304c1d5ff7d40a9d842496058494fcf0e798678c661ff3ae9ebc9e4c5971917f7aabfd813a6d88ff863d7e2e5f1456766 WHIRLPOOL 4533288dffef2b702eeef2a44fd702aff3e66283d5d90c810eb177ee4f1f1aa7cfd75238bf1f2a406e9b8ccaa43c7a77fb401825f8ce806e73fdc80abcc0a45a
-EBUILD cdrtools-3.01_alpha17.ebuild 4912 SHA256 dc7171009190c3c77c953ff5991b01d69b6e6347e9109eb857b1105679349c02 SHA512 6ddfb431369aed416ca58b3ba76ebe6441a98039cd7f4977c3b831162c1312b15dd75704a7468c5b4fdcc108f19dc1b2bb017b90473baca3e03e9346c98c379c WHIRLPOOL 0ed49f6899ebc1e124a5a634b09949ba60ea0febbe2485f533a45522cdd17bef0c8f566112524bcc4f31e98fc5a159f99a57128da0ae48d6c9785e11f5ab2ddb
-EBUILD cdrtools-3.01_alpha24.ebuild 7673 SHA256 3b1f28ca5b563bcbdc3168a0af89380ca50090bd1ed59ba3d998bb5d8d5740b2 SHA512 f41c047ed85a93f0f0858346af668b69eccfdd0880daabeaabc461d9c0e690be3e87ce88d302578cb43556e976f6be7b6c1db84556e1eea4d6a812b37afaa49a WHIRLPOOL 631bc4c0e022b46821742d8ea9fe30eaec07e8c4da6133dfdcfa2af1b5aead40e50ab3adfc6d602dad5d8710d0b25a34a30b7d6349364a3c79f0d8dc1944a623
-MISC ChangeLog 52501 SHA256 43bfebd1452fa99ed11ee7bd7ca252065e36f6c6ba5f4fad1a9efb469faafdc2 SHA512 8934eac6eb2ced7523fc6034ffd8de7820b047f14c5bc1ac4b2bb09a2cc19f7e050dcb9325b43adefa712f8b984e24e5b0719515e429e65cc26e642a5ad0db90 WHIRLPOOL 375c7d05fc488fd99b6896cd73495d003b85baa038de38a6acc82d6bc045a63bf4249c916358603879cb348effcc2c7b851eca5af80f95fec29a7baaaf4cc794
+EBUILD cdrtools-3.01_alpha17.ebuild 5218 SHA256 22516bf9c09c80dd52a505d36b850ef0ea1dac19caec2a724b358d3d239c156a SHA512 2bbffd045c21cacf07a77aac437fe444b579301c4ae8aac92d1d09aa66e795f029d317807e5d503677044c9e3e7936e036c499aff7488ef13591f3678ab19dbc WHIRLPOOL 535396003f36710b2385e83135f93751612f7200f755ec9fe5ba367ca931ad920292e82f921b216888f3d9fb22bd94cf9cdc3a465f39c6adb9a75cef4fc86627
+EBUILD cdrtools-3.01_alpha24.ebuild 7980 SHA256 1db64f99385da3e371d26b3cda9f883767f3b4a7744646b79b12daeed4f50d13 SHA512 186c4fda4f6143dac75c5ec391462e28fee9cb52db6eb336af78a02baaf4292324b3daac91e0de896081e7bd77a339ced7352a4ef515579066569db94dac926f WHIRLPOOL cbaca3473e46a97336b806d811123ad5c7ffe3b291a7418929063c6bf61a61fada39e6355a2976527d9d1678941165a22cd85c14e18f2b54ec259321a454f93b
+MISC ChangeLog 52723 SHA256 4795071e10f074ac79268c49ca0088de4643703e369300b612b49d90f0f6ef0b SHA512 efd43decc68fa607c204d7069bd947bd46e926541cf23d901d430e613330ddce8e3ff274046ba51af351e50be6d8ff33ea79360d69713ee059e1dcb42bbbf9d7 WHIRLPOOL e318dead6cfe76debf152a4045afbd3ccfdbd95e0616f77d1eebb40d9daf17ac2ebe7200866a28bb4801fc528de6ced86efa5a2a0bd2a52e1fbbfa0abdc446c2
 MISC metadata.xml 507 SHA256 f1086372c5bae26f9438544c1102cbadc619718b163392cbe35f3b359560ef3b SHA512 77aef4353064a013d1944ee796b1a6cb9a8a60c698d53df46cac7be17c556d9a495c71b9578a536c61c429a0c87e894e962bdca9167bbc60522ef25aeab756a6 WHIRLPOOL 0771499480bc135391ab921f22aba47f9966b68c79083f29f9df8c185919b65422f69953cc876d7dca8a2af5539b85e0c592f4521f5b4034ca5cb6035dc7c28b
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2
-Comment: GPGTools - https://gpgtools.org
-
-iQIcBAEBCAAGBQJT3onfAAoJED/EDWHtqUmqdxgP/jysPxy1avZpgTODOpyPBaMH
-CskGDw7x6En1EeENGNVdkIbAChAq34UyzQ4ippv43nXbMx4cZVAo2wlMqvz+tAKr
-qSDnUAs1R/vI+v4EXeL8QefrDCQoq6IMibAP7GT0Tcde3Fi5r77UjdAWWLy+vEST
-6iS/gwXwyTY0svWTeEdxTfKCxmRHIgUuvEvFcJpIr6a/zhJR9tC1D/SfTrVwRuS/
-e+TXQHX/2TMd6nsMvbqmljMUIf0Veeag6lJJV0jAUSzYDLa4pwoQo+RTG9pk37F7
-Ob4Rrwx/V91wdUADwu98nc6bTiQ5BqQfbZydh2sLxTaANh3wCGltegnOULjRiaax
-9nd2K1+VRJMwQuLxAvQZ1EAQzMWvBuqgzsjz+bR5rrP/NV4Crroan+BqOI3MiGvc
-z9Fx/bSido722djBGCzS85ANQ591FX7/t4dODq1vE+UxM8IGQKeJTPpGHfUGTgvK
-xM/++Ddf/HxpOFwihWesO4JmHGpAjWL1VtLvvgudW4W+ZKzVPvPQFdjcU7EAC/ym
-p2/FPJRblyI/DqCTwwBfnx3GSHPNQ23/2VoNwBceQjlE91lqDsUL4onRPgwRl2hs
-CIoVyxIdNF4JWflAX1QVDEkBzAOakrq86X0fWHnRFEJ5IlVh9fdPCmgo68/ftzG7
-7ElLE+yu7fqvKtCDIKza
-=oiKK
------END PGP SIGNATURE-----
diff --git a/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild b/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild
index e9435930e2b5..2bbef1077a23 100644
--- a/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild
+++ b/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2014 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild,v 1.16 2014/05/17 12:00:17 billie Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha17.ebuild,v 1.17 2014/09/21 01:54:22 robbat2 Exp $
 
 EAPI=5
 
@@ -87,7 +87,13 @@ src_prepare() {
 		-e "s:/opt/schily:/usr:g" \
 		-e "s:/usr/src/linux/include::g" \
 		-e "s:bin:root:g" \
+		-e '/^DEFUMASK/s,002,022,g' \
 		Defaults.${os} || die "sed Schily make setup"
+    # re DEFUMASK above:
+    # bug 486680: grsec TPE will block the exec if the directory is
+    # group-writable. This is painful with cdrtools, because it makes a bunch of
+	# group-writable directories during build. Change the umask on their
+	# creation to prevent this.
 }
 
 # skip obsolete configure script
diff --git a/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild b/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild
index 2da53847c084..bbbebe22b893 100644
--- a/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild
+++ b/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2014 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild,v 1.2 2014/08/03 19:12:46 tgall Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-cdr/cdrtools/cdrtools-3.01_alpha24.ebuild,v 1.3 2014/09/21 01:54:22 robbat2 Exp $
 
 EAPI=5
 
@@ -94,7 +94,13 @@ src_prepare() {
 		-e "s|^\(INS_BASE=\).*|\1\t${ED}/usr|" \
 		-e "s|^\(INS_RBASE=\).*|\1\t${ED}|" \
 		-e "s|^\(DEFINSGRP=\).*|\1\t0|" \
+		-e '/^DEFUMASK/s,002,022,g' \
 		Defaults.${os} || die "sed Schily make setup"
+    # re DEFUMASK above:
+    # bug 486680: grsec TPE will block the exec if the directory is
+    # group-writable. This is painful with cdrtools, because it makes a bunch of
+	# group-writable directories during build. Change the umask on their
+	# creation to prevent this.
 }
 
 ac_cv_sizeof() {