diff options
| author |   Doug Goldstein <cardoe@gentoo.org> | 2009-04-02 18:50:35 +0000 |
|---|---|---|
| committer | Doug Goldstein <cardoe@gentoo.org> | 2009-04-02 18:50:35 +0000 |
| commit | ce44db93617f7052433ea8d18ec39c7969732562 (patch) | |
| tree | 2160144eb9e07384794e22af34aba72b649140b8 /sys-auth | |
| parent | Marking openssh-5.2_p1-r1 ppc64 and ppc for bug 247466 (diff) | |
| download | gentoo-2-ce44db93617f7052433ea8d18ec39c7969732562.tar.gz gentoo-2-ce44db93617f7052433ea8d18ec39c7969732562.tar.bz2 gentoo-2-ce44db93617f7052433ea8d18ec39c7969732562.zip | |
Remove world read from config file to fix security issue when using bindpw field. bug #264574 CVE-2009-1073
(Portage version: 2.1.6.11/cvs/Linux x86_64)
Diffstat (limited to 'sys-auth')
| -rw-r--r-- | sys-auth/nss-ldapd/ChangeLog | 11 | ||||
| -rw-r--r-- | sys-auth/nss-ldapd/nss-ldapd-0.6.7-r1.ebuild (renamed from sys-auth/nss-ldapd/nss-ldapd-0.6.7.ebuild) | 6 |
2 files changed, 13 insertions, 4 deletions
diff --git a/sys-auth/nss-ldapd/ChangeLog b/sys-auth/nss-ldapd/ChangeLog index 66ce958f810f..d3942f527562 100644 --- a/sys-auth/nss-ldapd/ChangeLog +++ b/sys-auth/nss-ldapd/ChangeLog @@ -1,6 +1,13 @@ # ChangeLog for sys-auth/nss-ldapd -# Copyright 1999-2008 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sys-auth/nss-ldapd/ChangeLog,v 1.3 2008/12/08 03:00:49 jmbsvicetto Exp $ +# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2 +# $Header: /var/cvsroot/gentoo-x86/sys-auth/nss-ldapd/ChangeLog,v 1.4 2009/04/02 18:50:35 cardoe Exp $ + +*nss-ldapd-0.6.7-r1 (02 Apr 2009) + + 02 Apr 2009; Doug Goldstein <cardoe@gentoo.org> -nss-ldapd-0.6.7.ebuild, + +nss-ldapd-0.6.7-r1.ebuild: + Remove world read from config file to fix security issue when using bindpw + field. bug #264574 CVE-2009-1073 08 Dec 2008; Jorge Manuel B. S. Vicetto <jmbsvicetto@gentoo.org> metadata.xml: diff --git a/sys-auth/nss-ldapd/nss-ldapd-0.6.7.ebuild b/sys-auth/nss-ldapd/nss-ldapd-0.6.7-r1.ebuild index 8499cbdc91cd..f25e159cf8ca 100644 --- a/sys-auth/nss-ldapd/nss-ldapd-0.6.7.ebuild +++ b/sys-auth/nss-ldapd/nss-ldapd-0.6.7-r1.ebuild @@ -1,6 +1,6 @@ -# Copyright 1999-2008 Gentoo Foundation +# Copyright 1999-2009 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/sys-auth/nss-ldapd/nss-ldapd-0.6.7.ebuild,v 1.3 2009/01/03 22:37:58 mr_bones_ Exp $ +# $Header: /var/cvsroot/gentoo-x86/sys-auth/nss-ldapd/nss-ldapd-0.6.7-r1.ebuild,v 1.1 2009/04/02 18:50:35 cardoe Exp $ inherit multilib @@ -41,6 +41,8 @@ src_install() { # make an example copy insinto /usr/share/nss-ldapd doins nss-ldapd.conf + + fperms o-r /etc/nss-ldapd.conf } pkg_postinst() { |