Version bump, addresses cross-site request forgery security issue (bug #154574).

(Portage version: 2.1.1-r1)

4 files changed, 211 insertions, 1 deletions

diff --git a/www-apps/trac/ChangeLog b/www-apps/trac/ChangeLog
index 0324010005a1..79b6276c0a42 100644
--- a/www-apps/trac/ChangeLog
+++ b/www-apps/trac/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for www-apps/trac
 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/ChangeLog,v 1.41 2006/10/03 11:59:32 dju Exp $
+# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/ChangeLog,v 1.42 2006/11/09 23:09:39 dju Exp $
+
+*trac-0.10.1 (09 Nov 2006)
+
+  09 Nov 2006; Julien Allanos <dju@gentoo.org> +files/postinst-en.txt,
+  +trac-0.10.1.ebuild:
+  Version bump, addresses cross-site request forgery security issue (bug
+  #154574).
 
 *trac-0.10 (03 Oct 2006)
 
diff --git a/www-apps/trac/files/digest-trac-0.10.1 b/www-apps/trac/files/digest-trac-0.10.1
new file mode 100644
index 000000000000..4a24cd8c9983
--- /dev/null
+++ b/www-apps/trac/files/digest-trac-0.10.1
@@ -0,0 +1,3 @@
+MD5 55e10547c92cf39d64ab7ae4040c238d trac-0.10.1.tar.gz 439941
+RMD160 13fc90cc6023d9279721eaa583be2a09bd42737d trac-0.10.1.tar.gz 439941
+SHA256 a5528c5e5ca865842628ad5fc6984df774d61b72e13db34a525496e3136c87c7 trac-0.10.1.tar.gz 439941
diff --git a/www-apps/trac/files/postinst-en.txt b/www-apps/trac/files/postinst-en.txt
new file mode 100644
index 000000000000..a5f2f6663b19
--- /dev/null
+++ b/www-apps/trac/files/postinst-en.txt
@@ -0,0 +1,71 @@
+Install Instructions
+====================
+
+To complete the install, create your first Trac environment by running this
+command:
+
+	trac-admin /var/lib/trac/<project-name> initenv
+
+For security, trac relies on the webserver for authentication. The following
+command creates a password database for Basic Authentication with Apache 2:
+
+	htpasswd2 -c /etc/apache2/trac.htpasswd <user-name>
+
+Please adjust for the webserver of your choice, and refer to your webserver
+documentation.
+
+Now, all you need to do is to configure your webserver. The following is a
+configuration example for Apache 2 and CGI:
+
+	<Location "/cgi-bin/trac.cgi">
+		SetEnv TRAC_ENV "/var/lib/trac/<project-name>"
+	</Location>
+	<Location "/cgi-bin/trac.cgi/login">
+		AuthType Basic
+		AuthName "trac"
+		AuthUserFile /etc/apache2/trac.htpasswd
+		Require valid-user
+	</Location>
+
+Again, please adjust for the webserver of your choice.
+
+Fast-CGI users: you have to emerge and configure your Fast-CGI engine
+separately.
+
+You can also use Trac without having to install a webserver. See
+http://projects.edgewall.com/trac/wiki/TracStandalone to know more.
+
+Don't forget to update the configuration file! It is located at
+/var/lib/trac/<project-name>/conf/trac.ini. See its reference at
+http://projects.edgewall.com/trac/wiki/TracIni.
+
+More information (multiple projects setup, installation with Apache 2 and
+mod_python, lighttpd...) can be found on the Trac wiki:
+
+	http://projects.edgewall.com/trac/wiki/
+
+Upgrade Instructions
+====================
+
+If you are upgrading from a previous Trac version, please follow the
+instructions here:
+
+	http://projects.edgewall.com/trac/wiki/TracUpgrade
+
+If upgrading to Trac 0.10, you need to upgrade, resync, wiki upgrade and
+possibly review your Wiki pages for your Trac environments.
+
+Since 0.9, Trac uses sqlite-3 instead of sqlite-2. If you were using Trac 0.8.x
+or below, you have to upgrade your database files or else you won't be able to
+use Trac. You can issue the following commands, for each environment you have:
+
+	mv /var/lib/trac/<project-name>/db/trac.db \
+		/var/lib/trac/<project-name>/db/trac2.db
+	sqlite /var/lib/trac/<project-name>/db/trac2.db .dump \
+		| sqlite3 /var/lib/trac/<project-name>/db/trac.db
+	trac-admin /var/lib/trac/<project-name> upgrade
+	trac-admin /var/lib/trac/<project-name> resync
+	trac-admin /var/lib/trac/<project-name> wiki upgrade
+
+And review the trac.ini configuration file by comparing it to
+trac.ini.sample.
diff --git a/www-apps/trac/trac-0.10.1.ebuild b/www-apps/trac/trac-0.10.1.ebuild
new file mode 100644
index 000000000000..204121c5a31c
--- /dev/null
+++ b/www-apps/trac/trac-0.10.1.ebuild
@@ -0,0 +1,129 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/www-apps/trac/trac-0.10.1.ebuild,v 1.1 2006/11/09 23:09:39 dju Exp $
+
+inherit distutils webapp
+
+DESCRIPTION="Trac is a minimalistic web-based project management, wiki and bug/issue tracking system."
+HOMEPAGE="http://trac.edgewall.com/"
+SRC_URI="http://ftp.edgewall.com/pub/trac/${P}.tar.gz"
+
+LICENSE="trac"
+KEYWORDS="~amd64 ~ppc ~sparc ~x86"
+IUSE="cgi fastcgi mysql postgres sqlite enscript silvercity"
+
+# doing so because utils (such as trac-admin), manpages... overlap
+SLOT="0"
+WEBAPP_MANUAL_SLOT="yes"
+
+# we need to depend on virtual/httpd-cgi to pull apache/lighttpd/whatever in when USE cgi
+# we need to depend on virtual/httpd-fcgi to pull mod_fastcgi/lighttpd/whatever in when USE fastcgi
+# we need to depend on virtual/httpd-python to pull mod_python/whatever in when USE python (python
+# is rather confusing here, as dev-lang/python is a required dependency, but httpd-python isn't)
+DEPEND="${DEPEND}
+	>=dev-lang/python-2.3
+	app-text/pytextile
+	>=dev-python/docutils-0.3.9
+	dev-libs/clearsilver
+	>=dev-util/subversion-1.3.2
+	mysql? (
+		>=dev-db/mysql-4.1
+		>=dev-python/mysql-python-1.2.1
+	)
+	sqlite? (
+		>=dev-db/sqlite-3.3.4
+		>=dev-python/pysqlite-2.3
+	)
+	postgres? ( >=dev-python/psycopg-2 )
+	enscript? ( app-text/enscript )
+	silvercity? ( app-text/silvercity )"
+
+# The following function should be added to eutils.eclass (see bug #143572):
+
+# Generate an standard error message for missing USE flags
+# in existing packages, and die.
+#
+# Usage: built_with_use_error <category/package> <functionality> [<USE flag>]
+#    ex: built_with_use_error dev-util/subversion python
+#    or: built_with_use_error net-www/apache LDAP ldap
+#
+# Typical usage:
+#	if ! built_with_use dev-util/subversion python ; then
+#        built_with_use_error dev-util/subversion python
+#   fi
+#
+# Note: when <USE flag> is not specified, <functionality> is used for the USE flag name.
+built_with_use_error_msg() {
+	local package=$1
+	local func=$2
+	local use_flag=$3
+
+	[[ -z ${use_flag} ]] && use_flag=${func}
+
+	eerror "Your ${package} package has been built without"
+	eerror "${func} support, please enable the '${use_flag}' USE flag and"
+	eerror "re-emerge ${package}."
+	einfo "You can enable this USE flag either globally in /etc/make.conf,"
+	einfo "or just for specific packages in /etc/portage/package.use."
+	die "${package} missing ${func} support"
+}
+
+pkg_setup () {
+	if ! use mysql && ! use postgres && ! use sqlite ; then
+		eerror "You must select at least one database backend, by enabling"
+		eerror "at least one of the 'mysql', 'postgres' or 'sqlite' USE flags."
+		die "no database backend selected"
+	fi
+
+	if ! built_with_use dev-util/subversion python ; then
+		built_with_use_error dev-util/subversion python
+	fi
+
+	if ! built_with_use dev-libs/clearsilver python ; then
+		built_with_use_error dev-libs/clearsilver python
+	fi
+
+	ebegin "Creating tracd group and user"
+	enewgroup tracd
+	enewuser tracd -1 -1 -1 tracd
+	eend ${?}
+
+	webapp_pkg_setup
+}
+
+src_install () {
+	# project environments might go in here
+	keepdir /var/lib/trac
+
+	webapp_src_preinst
+	distutils_src_install
+
+	dodoc AUTHORS INSTALL RELEASE THANKS UPGRADE
+	rm ${D}/usr/share/doc/${P}/MANIFEST.in.gz
+	rm ${D}/usr/share/doc/${P}/PKG-INFO.gz
+
+	docinto contrib
+	dodoc contrib/*
+
+	# if needed, install cgi/fcgi scripts for webapp-config
+	local my_dir=${D}/usr/share/trac
+	if use cgi ; then
+		mv ${my_dir}/cgi-bin/trac.cgi ${D}${MY_CGIBINDIR} || die
+	fi
+	if use fastcgi ; then
+		mv ${my_dir}/cgi-bin/trac.fcgi ${D}${MY_CGIBINDIR} || die
+	fi
+	rm -rf ${my_dir}/cgi-bin || die
+
+	for lang in en; do
+		webapp_postinst_txt ${lang} ${FILESDIR}/postinst-${lang}.txt
+	done
+
+	# copy graphics, css & js
+	cp -r htdocs/* ${D}/${MY_HTDOCSDIR}
+
+	webapp_src_install
+
+	newconfd "${FILESDIR}"/tracd.confd tracd
+	newinitd "${FILESDIR}"/tracd.initd tracd
+}