summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlexys Jacob <ultrabug@gentoo.org>2011-09-13 12:14:45 +0000
committerAlexys Jacob <ultrabug@gentoo.org>2011-09-13 12:14:45 +0000
commita663f7760e1324158e3c12f9ca5876ec8c56b47a (patch)
tree4068fc59d1be6caa9344ad35174272f4d38011e1 /app-admin/rsyslog
parentClean old entries. (diff)
downloadgentoo-2-a663f7760e1324158e3c12f9ca5876ec8c56b47a.tar.gz
gentoo-2-a663f7760e1324158e3c12f9ca5876ec8c56b47a.tar.bz2
gentoo-2-a663f7760e1324158e3c12f9ca5876ec8c56b47a.zip
Drop old vulnerable versions wrt #381637
(Portage version: 2.1.10.14/cvs/Linux x86_64)
Diffstat (limited to 'app-admin/rsyslog')
-rw-r--r--app-admin/rsyslog/ChangeLog6
-rw-r--r--app-admin/rsyslog/rsyslog-5.6.5.ebuild214
-rw-r--r--app-admin/rsyslog/rsyslog-5.8.3.ebuild228
3 files changed, 5 insertions, 443 deletions
diff --git a/app-admin/rsyslog/ChangeLog b/app-admin/rsyslog/ChangeLog
index 47118a0973ac..add68c356927 100644
--- a/app-admin/rsyslog/ChangeLog
+++ b/app-admin/rsyslog/ChangeLog
@@ -1,6 +1,10 @@
# ChangeLog for app-admin/rsyslog
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-admin/rsyslog/ChangeLog,v 1.59 2011/09/11 09:28:27 maekke Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-admin/rsyslog/ChangeLog,v 1.60 2011/09/13 12:14:45 ultrabug Exp $
+
+ 13 Sep 2011; Ultrabug <ultrabug@gentoo.org> -rsyslog-5.6.5.ebuild,
+ -rsyslog-5.8.3.ebuild:
+ Drop old vulnerable versions wrt #381637
11 Sep 2011; Markus Meier <maekke@gentoo.org> rsyslog-5.8.5.ebuild:
x86 stable, bug #381637
diff --git a/app-admin/rsyslog/rsyslog-5.6.5.ebuild b/app-admin/rsyslog/rsyslog-5.6.5.ebuild
deleted file mode 100644
index ff1bf2df95cc..000000000000
--- a/app-admin/rsyslog/rsyslog-5.6.5.ebuild
+++ /dev/null
@@ -1,214 +0,0 @@
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-admin/rsyslog/rsyslog-5.6.5.ebuild,v 1.8 2011/09/09 18:17:50 radhermit Exp $
-
-EAPI=3
-
-DESCRIPTION="An enhanced multi-threaded syslogd with database support and more."
-HOMEPAGE="http://www.rsyslog.com/"
-SRC_URI="http://www.rsyslog.com/files/download/${PN}/${P}.tar.gz"
-
-LICENSE="GPL-3 LGPL-3"
-KEYWORDS="amd64 ~arm hppa ~sparc x86"
-SLOT="0"
-IUSE="dbi debug doc extras gnutls kerberos mysql oracle postgres relp snmp static-libs zlib"
-
-RDEPEND="dbi? ( dev-db/libdbi )
- extras? ( net-libs/libnet )
- gnutls? ( net-libs/gnutls )
- kerberos? ( virtual/krb5 )
- mysql? ( virtual/mysql )
- postgres? ( dev-db/postgresql-base )
- oracle? ( dev-db/oracle-instantclient-basic )
- relp? ( >=dev-libs/librelp-0.1.3 )
- snmp? ( net-analyzer/net-snmp )
- zlib? ( sys-libs/zlib )"
-DEPEND="${RDEPEND}
- dev-util/pkgconfig"
-
-BRANCH="5-stable"
-
-# need access to certain device nodes
-RESTRICT="test"
-
-src_configure() {
- # Maintainer notes:
- # * rfc3195 needs a library and development of that library
- # is suspended, so we disable it
- # * About the java GUI:
- # The maintainer says there is no real installation support
- # for the java GUI, so we disable it for now.
- econf \
- --disable-gui \
- --disable-rfc3195 \
- --enable-largefile \
- --enable-unlimited-select \
- --enable-imdiag \
- --enable-imfile \
- --enable-imtemplate \
- --enable-imptcp \
- --enable-mail \
- --enable-omprog \
- --enable-omstdout \
- --enable-omtemplate \
- --enable-omdbalerting \
- --enable-omuxsock \
- --enable-pmlastmsg \
- --enable-pmrfc3164sd \
- $(use_enable extras omudpspoof) \
- $(use_enable zlib) \
- $(use_enable mysql) \
- $(use_enable dbi libdbi) \
- $(use_enable postgres pgsql) \
- $(use_enable oracle oracle) \
- $(use_enable gnutls) \
- $(use_enable kerberos gssapi-krb5) \
- $(use_enable relp) \
- $(use_enable snmp) \
- $(use_enable debug) \
- $(use_enable debug rtinst) \
- $(use_enable debug diagtools) \
- $(use_enable debug memcheck) \
- $(use_enable debug valgrind) \
- $(use_enable static-libs static)
-}
-
-src_install() {
- emake DESTDIR="${D}" install || die "emake install failed"
-
- dodoc AUTHORS ChangeLog doc/rsyslog-example.conf || die
- use doc && dohtml -r doc/*
-
- insinto /etc
- newins "${FILESDIR}/${BRANCH}/rsyslog-gentoo.conf" rsyslog.conf || die
- newconfd "${FILESDIR}/${BRANCH}/rsyslog.confd" rsyslog || die
- newinitd "${FILESDIR}/${BRANCH}/rsyslog.initd" rsyslog || die
- keepdir /var/spool/rsyslog
- keepdir /etc/ssl/rsyslog
- keepdir /etc/rsyslog.d
-
- if use mysql; then
- insinto /usr/share/doc/${PF}/scripts/mysql
- doins plugins/ommysql/{createDB.sql,contrib/delete_mysql} || die
- fi
-
- if use postgres; then
- insinto /usr/share/doc/${PF}/scripts/pgsql
- doins plugins/ompgsql/createDB.sql || die
- fi
-
- insinto /etc/logrotate.d/
- newins "${FILESDIR}/${BRANCH}/rsyslog.logrotate" rsyslog || die
-}
-
-pkg_postinst() {
- if use mysql || use postgres; then
- echo
- elog "Sample SQL scripts for MySQL & PostgreSQL have been installed to:"
- elog " /usr/share/doc/${PF}/scripts"
- fi
-
- if use gnutls; then
- echo
- elog "To create a default CA and certificates for your server and clients, run:"
- elog " emerge --config =${PF}"
- elog "on your logging server. You can run it several times,"
- elog "once for each logging client. The client certificates will be signed"
- elog "using the CA certificate generated during the first run."
- fi
-}
-
-pkg_config() {
- if ! use gnutls ; then
- einfo "There is nothing to configure for rsyslog unless you"
- einfo "used USE=gnutls to build it."
- return 0
- fi
-
- # Make sure the certificates directory exists
- CERTDIR="${ROOT}/etc/ssl/${PN}"
- if [ ! -d "${CERTDIR}" ]; then
- mkdir "${CERTDIR}" || die
- fi
- einfo "Your certificates will be stored in ${CERTDIR}"
-
- # Create a default CA if needed
- if [ ! -f "${CERTDIR}/${PN}_ca.cert.pem" ]; then
- einfo "No CA key and certificate found in ${CERTDIR}, creating them for you..."
- certtool --generate-privkey \
- --outfile "${CERTDIR}/${PN}_ca.privkey.pem" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_ca.privkey.pem"
-
- cat > "${T}/${PF}.$$" <<_EOF
- cn = Portage automated CA
- ca
- cert_signing_key
- expiration_days = 3650
-_EOF
-
- certtool --generate-self-signed \
- --load-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \
- --outfile "${CERTDIR}/${PN}_ca.cert.pem" \
- --template "${T}/${PF}.$$" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_ca.privkey.pem"
-
- # Create the server certificate
- echo
- einfon "Please type the Common Name of the SERVER you wish to create a certificate for: "
- read -r CN
-
- einfo "Creating private key and certificate for server ${CN}..."
- certtool --generate-privkey \
- --outfile "${CERTDIR}/${PN}_${CN}.key.pem" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_${CN}.key.pem"
-
- cat > "${T}/${PF}.$$" <<_EOF
- cn = ${CN}
- tls_www_server
- dns_name = ${CN}
- expiration_days = 3650
-_EOF
-
- certtool --generate-certificate \
- --outfile "${CERTDIR}/${PN}_${CN}.cert.pem" \
- --load-privkey "${CERTDIR}/${PN}_${CN}.key.pem" \
- --load-ca-certificate "${CERTDIR}/${PN}_ca.cert.pem" \
- --load-ca-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \
- --template "${T}/${PF}.$$" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_${CN}.cert.pem"
-
- else
- einfo "Found existing ${CERTDIR}/${PN}_ca.cert.pem, skipping CA and SERVER creation."
- fi
-
- # Create a client certificate
- echo
- einfon "Please type the Common Name of the CLIENT you wish to create a certificate for: "
- read -r CN
-
- einfo "Creating private key and certificate for client ${CN}..."
- certtool --generate-privkey \
- --outfile "${CERTDIR}/${PN}_${CN}.key.pem" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_${CN}.key.pem"
-
- cat > "${T}/${PF}.$$" <<_EOF
- cn = ${CN}
- tls_www_client
- dns_name = ${CN}
- expiration_days = 3650
-_EOF
-
- certtool --generate-certificate \
- --outfile "${CERTDIR}/${PN}_${CN}.cert.pem" \
- --load-privkey "${CERTDIR}/${PN}_${CN}.key.pem" \
- --load-ca-certificate "${CERTDIR}/${PN}_ca.cert.pem" \
- --load-ca-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \
- --template "${T}/${PF}.$$" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_${CN}.cert.pem"
-
- rm -f "${T}/${PF}.$$"
-
- echo
- einfo "Here is the documentation on how to encrypt your log traffic:"
- einfo " http://www.rsyslog.com/doc/rsyslog_tls.html"
-}
diff --git a/app-admin/rsyslog/rsyslog-5.8.3.ebuild b/app-admin/rsyslog/rsyslog-5.8.3.ebuild
deleted file mode 100644
index ff3f93130808..000000000000
--- a/app-admin/rsyslog/rsyslog-5.8.3.ebuild
+++ /dev/null
@@ -1,228 +0,0 @@
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/app-admin/rsyslog/rsyslog-5.8.3.ebuild,v 1.2 2011/09/09 18:17:50 radhermit Exp $
-
-EAPI=4
-
-inherit autotools-utils systemd
-
-DESCRIPTION="An enhanced multi-threaded syslogd with database support and more."
-HOMEPAGE="http://www.rsyslog.com/"
-SRC_URI="http://www.rsyslog.com/files/download/${PN}/${P}.tar.gz"
-
-LICENSE="GPL-3 LGPL-3"
-KEYWORDS="~amd64 ~arm ~hppa ~sparc ~x86"
-SLOT="0"
-IUSE="dbi debug doc extras gnutls kerberos mysql oracle postgres relp snmp static-libs zlib"
-
-RDEPEND="dbi? ( dev-db/libdbi )
- extras? ( net-libs/libnet )
- gnutls? ( net-libs/gnutls )
- kerberos? ( virtual/krb5 )
- mysql? ( virtual/mysql )
- postgres? ( dev-db/postgresql-base )
- oracle? ( dev-db/oracle-instantclient-basic )
- relp? ( >=dev-libs/librelp-0.1.3 )
- snmp? ( net-analyzer/net-snmp )
- zlib? ( sys-libs/zlib )"
-DEPEND="${RDEPEND}
- dev-util/pkgconfig"
-
-BRANCH="5-stable"
-
-# need access to certain device nodes
-RESTRICT="test"
-
-# Maitainer note : open a bug to upstream
-# showing that building in a separate dir fails
-AUTOTOOLS_IN_SOURCE_BUILD=1
-
-DOCS=(AUTHORS ChangeLog doc/rsyslog-example.conf)
-
-src_configure() {
- # Maintainer notes:
- # * rfc3195 needs a library and development of that library
- # is suspended, so we disable it
- # * About the java GUI:
- # The maintainer says there is no real installation support
- # for the java GUI, so we disable it for now.
- local myeconfargs=(
- --disable-gui
- --disable-rfc3195
- --enable-largefile
- --enable-unlimited-select
- --enable-imdiag
- --enable-imfile
- --enable-impstats
- --enable-imtemplate
- --enable-imptcp
- --enable-mail
- --enable-omprog
- --enable-omstdout
- --enable-omtemplate
- --enable-omdbalerting
- --enable-omuxsock
- --enable-pmlastmsg
- --enable-pmrfc3164sd
- --enable-pmcisconames
- --enable-pmaixforwardedfrom
- --enable-pmsnare
- $(use_enable extras omudpspoof)
- $(use_enable zlib)
- $(use_enable mysql)
- $(use_enable dbi libdbi)
- $(use_enable postgres pgsql)
- $(use_enable oracle oracle)
- $(use_enable gnutls)
- $(use_enable kerberos gssapi-krb5)
- $(use_enable relp)
- $(use_enable snmp)
- $(use_enable snmp mmsnmptrapd)
- $(use_enable debug)
- $(use_enable debug rtinst)
- $(use_enable debug diagtools)
- $(use_enable debug memcheck)
- $(use_enable debug valgrind)
- )
-
- systemd_to_myeconfargs
- autotools-utils_src_configure
-}
-
-src_install() {
- use doc && HTML_DOCS=(doc/)
- autotools-utils_src_install
-
- insinto /etc
- newins "${FILESDIR}/${BRANCH}/${PN}-gentoo.conf" ${PN}.conf
- newconfd "${FILESDIR}/${BRANCH}/${PN}.confd" ${PN}
- newinitd "${FILESDIR}/${BRANCH}/${PN}.initd" ${PN}
- keepdir /var/spool/${PN}
- keepdir /etc/ssl/${PN}
- keepdir /etc/${PN}.d
-
- if use mysql; then
- insinto /usr/share/doc/${PF}/scripts/mysql
- doins plugins/ommysql/{createDB.sql,contrib/delete_mysql}
- fi
-
- if use postgres; then
- insinto /usr/share/doc/${PF}/scripts/pgsql
- doins plugins/ompgsql/createDB.sql
- fi
-
- insinto /etc/logrotate.d/
- newins "${FILESDIR}/${BRANCH}/${PN}.logrotate" ${PN}
-}
-
-pkg_postinst() {
- if use mysql || use postgres; then
- echo
- elog "Sample SQL scripts for MySQL & PostgreSQL have been installed to:"
- elog " /usr/share/doc/${PF}/scripts"
- fi
-
- if use gnutls; then
- echo
- elog "To create a default CA and certificates for your server and clients, run:"
- elog " emerge --config =${PF}"
- elog "on your logging server. You can run it several times,"
- elog "once for each logging client. The client certificates will be signed"
- elog "using the CA certificate generated during the first run."
- fi
-}
-
-pkg_config() {
- if ! use gnutls ; then
- einfo "There is nothing to configure for rsyslog unless you"
- einfo "used USE=gnutls to build it."
- return 0
- fi
-
- # Make sure the certificates directory exists
- CERTDIR="${ROOT}/etc/ssl/${PN}"
- if [ ! -d "${CERTDIR}" ]; then
- mkdir "${CERTDIR}" || die
- fi
- einfo "Your certificates will be stored in ${CERTDIR}"
-
- # Create a default CA if needed
- if [ ! -f "${CERTDIR}/${PN}_ca.cert.pem" ]; then
- einfo "No CA key and certificate found in ${CERTDIR}, creating them for you..."
- certtool --generate-privkey \
- --outfile "${CERTDIR}/${PN}_ca.privkey.pem" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_ca.privkey.pem"
-
- cat > "${T}/${PF}.$$" <<_EOF
- cn = Portage automated CA
- ca
- cert_signing_key
- expiration_days = 3650
-_EOF
-
- certtool --generate-self-signed \
- --load-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \
- --outfile "${CERTDIR}/${PN}_ca.cert.pem" \
- --template "${T}/${PF}.$$" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_ca.privkey.pem"
-
- # Create the server certificate
- echo
- einfon "Please type the Common Name of the SERVER you wish to create a certificate for: "
- read -r CN
-
- einfo "Creating private key and certificate for server ${CN}..."
- certtool --generate-privkey \
- --outfile "${CERTDIR}/${PN}_${CN}.key.pem" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_${CN}.key.pem"
-
- cat > "${T}/${PF}.$$" <<_EOF
- cn = ${CN}
- tls_www_server
- dns_name = ${CN}
- expiration_days = 3650
-_EOF
-
- certtool --generate-certificate \
- --outfile "${CERTDIR}/${PN}_${CN}.cert.pem" \
- --load-privkey "${CERTDIR}/${PN}_${CN}.key.pem" \
- --load-ca-certificate "${CERTDIR}/${PN}_ca.cert.pem" \
- --load-ca-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \
- --template "${T}/${PF}.$$" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_${CN}.cert.pem"
-
- else
- einfo "Found existing ${CERTDIR}/${PN}_ca.cert.pem, skipping CA and SERVER creation."
- fi
-
- # Create a client certificate
- echo
- einfon "Please type the Common Name of the CLIENT you wish to create a certificate for: "
- read -r CN
-
- einfo "Creating private key and certificate for client ${CN}..."
- certtool --generate-privkey \
- --outfile "${CERTDIR}/${PN}_${CN}.key.pem" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_${CN}.key.pem"
-
- cat > "${T}/${PF}.$$" <<_EOF
- cn = ${CN}
- tls_www_client
- dns_name = ${CN}
- expiration_days = 3650
-_EOF
-
- certtool --generate-certificate \
- --outfile "${CERTDIR}/${PN}_${CN}.cert.pem" \
- --load-privkey "${CERTDIR}/${PN}_${CN}.key.pem" \
- --load-ca-certificate "${CERTDIR}/${PN}_ca.cert.pem" \
- --load-ca-privkey "${CERTDIR}/${PN}_ca.privkey.pem" \
- --template "${T}/${PF}.$$" &>/dev/null
- chmod 400 "${CERTDIR}/${PN}_${CN}.cert.pem"
-
- rm -f "${T}/${PF}.$$"
-
- echo
- einfo "Here is the documentation on how to encrypt your log traffic:"
- einfo " http://www.rsyslog.com/doc/rsyslog_tls.html"
-}