www-misc/shellinabox: Version bump. Fixes security bug 567316.

Package-Manager: portage-2.2.20.1
Signed-off-by: Patrice Clement <monsieurp@gentoo.org>

2 files changed, 109 insertions, 0 deletions

diff --git a/www-misc/shellinabox/Manifest b/www-misc/shellinabox/Manifest
index 85f28cdd8761..9c848839997b 100644
--- a/www-misc/shellinabox/Manifest
+++ b/www-misc/shellinabox/Manifest
@@ -1 +1,2 @@
 DIST shellinabox-2.18.zip 328195 SHA256 0a3572268b7f42e402cd2fc48ca1f9d1dad6d27d6209ca19923a60f4ee5cb5f8 SHA512 a036131d48d7e1b2e69e128d509a755978bbeb13ebac82212b225d3b0eafea8420ecbb830ea85a75e870814bf20c446ca1642fe59da516f74e0e439a3a41fe24 WHIRLPOOL 903195402af196b55dafcf7f261bc291c5fdd690c3a40ca09578c58d307a6b75e38bbb5316995708e078a6bab6a36de1e2ae9722142bf97b948de2c1dbcf2e52
+DIST shellinabox-2.19.zip 790437 SHA256 1897ec000bb05f8ded07ffb3092c4b43232b8695d8a656985ccae45bebd922e9 SHA512 e6f09679282fd1f23abb272082ca9983df217ad017cad4fdb04d5fa4f93124bfea4b5f12cedb17571e56770ee8b0a4cca1492aff144df5458ed7c1a4ee6a1838 WHIRLPOOL b887101335a48789041574e948a67cf24dd9b269e68481861ff7f4c0ededb4bceae0cc36c11870675597b9c5f3be2d84d824a2c882515b719e4e244c2c93f711
diff --git a/www-misc/shellinabox/shellinabox-2.19.ebuild b/www-misc/shellinabox/shellinabox-2.19.ebuild
new file mode 100644
index 000000000000..fb9d66a7a196
--- /dev/null
+++ b/www-misc/shellinabox/shellinabox-2.19.ebuild
@@ -0,0 +1,108 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI=5
+
+AUTOTOOLS_AUTORECONF="yes"
+AUTOTOOLS_IN_SOURCE_BUILD="yes"
+
+inherit user autotools-utils
+
+DESCRIPTION="Web server that can export arbitrary command line tools to a web based terminal emulator"
+HOMEPAGE="https://github.com/shellinabox/shellinabox"
+SRC_URI="https://github.com/${PN}/${PN}/archive/v${PV}.zip -> ${P}.zip"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~ppc ~ppc64 ~x86"
+IUSE="+ssl +pam"
+
+RDEPEND="${DEPEND}"
+DEPEND="${RDEPEND}
+	ssl? ( dev-libs/openssl:0= )
+	pam? ( virtual/pam )"
+
+SIAB_CERT_DIR="/etc/shellinabox/cert"
+SIAB_SSL_BASH="${SIAB_CERT_DIR}/gen_ssl_cert.bash"
+SIAB_DAEMON="${PN}d"
+
+shellinbox_gen_ssl_setup() {
+	read -r -d '' SIAB_SSL_SETUP << EOF
+cd ${SIAB_CERT_DIR}
+openssl genrsa -des3 -out server.key 1024
+openssl req -new -key server.key -out server.csr
+cp server.key server.key.org
+openssl rsa -in server.key.org -out server.key
+openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
+cat server.crt server.key > certificate.pem
+EOF
+}
+
+pkg_setup() {
+	enewgroup "${SIAB_DAEMON}"
+	enewuser "${SIAB_DAEMON}" -1 -1 -1 "${SIAB_DAEMON}"
+}
+
+src_configure() {
+	local myeconf="--disable-runtime-loading"
+
+	econf \
+		$(use_enable ssl) \
+		$(use_enable pam) \
+		"${myeconf}"
+}
+
+src_install() {
+	emake DESTDIR="${D}" install || die
+
+	# make installs the binary in bin.
+	rm -rf "${D}/usr/bin" || die
+
+	# whereas it should put it in sbin.
+	dosbin "${SIAB_DAEMON}"
+
+	# Install init+conf files.
+	newinitd "${FILESDIR}/${SIAB_DAEMON}.init" "${SIAB_DAEMON}"
+	newconfd "${FILESDIR}/${SIAB_DAEMON}.conf" "${SIAB_DAEMON}"
+
+	# Install CSS files.
+	insinto "/usr/share/${PN}-resources"
+	doins -r "${PN}"/*.css
+
+	if use ssl; then
+		# Create directory where SSL certificates will be generated.
+		dodir "${SIAB_CERT_DIR}"
+		fowners "${SIAB_DAEMON}:${SIAB_DAEMON}" "${SIAB_CERT_DIR}"
+
+		# Generate set up variable.
+		shellinbox_gen_ssl_setup
+
+		# Dump it in a bash script.
+		echo "#!/usr/bin/env bash" > "${D}/${SIAB_SSL_BASH}" ||die
+		echo "${SIAB_SSL_SETUP}" >> "${D}/${SIAB_SSL_BASH}" || die
+		chmod +x "${D}/${SIAB_SSL_BASH}" || die
+	fi
+}
+
+pkg_postinst() {
+	ewarn
+	ewarn "The default configuration expose a login shell"
+	ewarn "with SSL disabled on the localhost interface only."
+	ewarn
+
+	if use ssl; then
+		shellinbox_gen_ssl_setup
+
+		einfo
+		einfo "To generate self-signed SSL certificates"
+		einfo "please read the following procedure"
+		einfo "explained here: https://code.google.com/p/shellinabox/issues/detail?id=59#c15"
+		einfo
+		einfo "${SIAB_SSL_SETUP}"
+		einfo
+		einfo "This walkthrough has been written in ${SIAB_SSL_BASH} for your convenience."
+		einfo "Make sure to execute this script."
+		einfo
+	fi
+}