86 Commits

Author SHA1 Message Date
Przemyslaw Pawelczyk
0f920d3abe main/[various]: bump pkgrel for pre-install fixes 2016-04-25 07:11:16 +00:00
Przemyslaw Pawelczyk
da4e96aace Reorder arguments passed to addgroup/adduser in scripts.
Now all invocations have following order of arguments (if present):

    addgroup -S -g ... GROUP
    adduser -S -u ... -D -H -h ... -s ... -G ... -g ... USER
2016-04-25 06:56:47 +00:00
Przemyslaw Pawelczyk
a60b9f07de Improve consistency of scripts using adduser/addgroup.
Following rules have been applied:
- script starts with shebang !#/bin/sh followed by blank line,
- script ends with exit 0 prepended by blank line,
- only stderr of adduser, addgroup or passwd is redirected to /dev/null,
- getent passwd/group instances has been removed,
- manual checking of file and group existence has been removed,
- `|| true` instances has been removed.

Comments and line wrapping have been preserved.
2016-04-25 06:55:43 +00:00
Przemyslaw Pawelczyk
a593d306c9 Add -g option (GECOS/comment) to adduser in scripts.
This way we can avoid ugly default:

    Linux user,,,
2016-04-25 06:54:18 +00:00
Przemyslaw Pawelczyk
ccc056dbf9 Add lacking -S option (system) to adduser/addgroup in scripts.
Groups and users created by packages shouldn't use high ids by default
(unless explicitly requested), to distinguish them from groups and users
created by administrators for humans.

Following 41 files lacked -S next to addgroup:
- community/sword/sword.pre-install
- main/amavisd-new/amavisd-new.pre-install
- main/chrony/chrony.pre-install
- main/cvechecker/cvechecker.pre-install
- main/dnsmasq/dnsmasq.pre-install
- main/freeradius/freeradius.pre-install
- main/gdnsd/gdnsd.pre-install
- main/haproxy/haproxy.pre-install
- main/haproxy/haproxy.pre-upgrade
- main/kamailio/kamailio.pre-install
- main/logcheck/logcheck.pre-install
- main/mlmmj/mlmmj.pre-install
- main/nrpe/nrpe.pre-install
- main/open-vm-tools/open-vm-tools.pre-install
- main/postgrey/postgrey.pre-install
- main/privoxy/privoxy.pre-install
- main/redis/redis.pre-install
- main/samba/winbind.pre-install
- main/sircbot/sircbot.pre-install
- main/smokeping/smokeping.pre-install
- main/squark/squark.post-install
- main/squid/squid.pre-install
- main/squid/squid.pre-upgrade
- main/subversion/subversion.pre-install
- main/trac/trac.pre-install
- main/vsftpd/vsftpd.pre-install
- main/zabbix/zabbix-agent.pre-install
- testing/3proxy/3proxy.pre-install
- testing/cluster-glue/cluster-glue.pre-install
- testing/elasticsearch/elasticsearch.pre-install
- testing/emby/emby.pre-install
- testing/gdnsd/gdnsd.pre-install
- testing/icinga2/icinga2.pre-install
- testing/lusca/lusca.pre-install
- testing/lusca/lusca.pre-upgrade
- testing/mongodb/mongodb.pre-install
- testing/openxcap/openxcap.pre-install
- testing/prosody/prosody.pre-install
- testing/rancid/rancid.pre-install
- testing/rutorrent/rutorrent.pre-install
- testing/zabbix/zabbix-agent.pre-install

Following 60 files lacked -S next to adduser:
- community/caddy/caddy.pre-install
- community/domoticz/domoticz.pre-install
- community/minetest/minetest-server.pre-install
- community/oscam/oscam.pre-install
- community/seafile/seafile-server.pre-install
- community/syncthing/syncthing.pre-install
- main/apache2/apache2.pre-install
- main/aports-build/aports-build.pre-install
- main/atheme-iris/atheme-iris.pre-install
- main/bind/bind.pre-install
- main/clamav/clamav-db.pre-install
- main/clamsmtp/clamsmtp.pre-install
- main/clamsmtp/clamsmtp.pre-upgrade
- main/coova-chilli/coova-chilli.pre-install
- main/cvechecker/cvechecker.pre-install
- main/dhcp/dhcp.pre-install
- main/distcc/distcc.pre-install
- main/djbdns/dnscache.pre-install
- main/djbdns/tinydns.pre-install
- main/dovecot/dovecot.pre-install
- main/ez-ipupdate/ez-ipupdate.pre-install
- main/fetchmail/fetchmail.pre-install
- main/freeswitch/freeswitch.pre-install
- main/gitolite/gitolite.pre-install
- main/gnats/gnats.pre-install
- main/gross/gross.pre-install
- main/icecast/icecast.pre-install
- main/kamailio/kamailio.pre-install
- main/lighttpd/lighttpd.pre-install
- main/mariadb/mariadb.pre-install
- main/memcached/memcached.pre-install
- main/ngircd/ngircd.pre-install
- main/nrpe/nrpe.pre-install
- main/openntpd/openntpd.pre-install
- main/postgrey/postgrey.pre-install
- main/snort/snort.pre-install
- main/squid/squid.pre-install
- main/squid/squid.pre-upgrade
- main/subversion/subversion.pre-install
- main/trac/trac.pre-install
- main/transmission/transmission-daemon.pre-install
- main/ympd/ympd.pre-install
- main/znc/znc.pre-install
- testing/at/at.pre-install
- testing/buildbot-slave/buildbot-slave.pre-install
- testing/buildbot/buildbot.pre-install
- testing/clapf/clapf.pre-install
- testing/cluster-glue/cluster-glue.pre-install
- testing/dbmail/dbmail.pre-install
- testing/dspam/dspam.pre-install
- testing/ejabberd/ejabberd.pre-install
- testing/emby/emby.pre-install
- testing/mongodb/mongodb.pre-install
- testing/opensips/opensips.pre-install
- testing/pdns/pdns.pre-install
- testing/prosody/prosody.pre-install
- testing/qpage/qpage.pre-install
- testing/rrdbot/rrdbot.pre-install
- testing/wt/wt.pre-install
- unmaintained/ejabberd-git/ejabberd-git.pre-install
2016-04-25 06:53:54 +00:00
Leonardo Arena
dc80b0ed2b main/freeradius: tell install that we are building a package 2016-02-19 12:58:19 +00:00
Leonardo Arena
a3d9d59c03 main/freeradius: upgrade to 3.0.11 2016-01-26 07:29:00 +00:00
Natanael Copa
2a1eba8eca main/freeradius: rebuild against krb5-1.14 2015-12-02 12:14:56 +00:00
Leonardo Arena
25b1fd3abb main/freeradius: send accounting pings to accounting port
https://github.com/FreeRADIUS/freeradius-server/issues/1364
2015-10-30 14:05:24 +00:00
Leonardo Arena
4211b9d1e3 main/freeradius: fix EAP-TLS with OpenSSL 1.0.2
http://lists.freeradius.org/pipermail/freeradius-users/2015-October/080276.html
2015-10-16 14:58:07 +00:00
Leonardo Arena
f6ad38d226 Revert "main/freeradius: fix EAP-TLS with OpenSSL 1.0.2"
This reverts commit 86b7a9ed542ecd1d3d6d030a080af20d8c6d1dcd.
2015-10-16 14:56:22 +00:00
Leonardo Arena
86b7a9ed54 main/freeradius: fix EAP-TLS with OpenSSL 1.0.2
http://lists.freeradius.org/pipermail/freeradius-users/2015-October/080276.html
2015-10-16 14:13:19 +00:00
Leonardo Arena
e3c14b289b main/freeradius: upgrade to 3.0.10 2015-10-06 07:04:11 +00:00
Timo Teräs
b78ae487fb main/freeradius: fix to initialize ipv6 scope always 2015-09-11 11:12:45 +03:00
Bartłomiej Piotrowski
b4a13e7314 Do not delete *.la files manually
Since abuild v2.22.0, these are removed automatically unless 'libtool'
option has been specified.
2015-09-10 13:59:03 +02:00
Natanael Copa
a3954bdb6a main/freeradius: fix use of strerror_r
upstream report:
https://github.com/FreeRADIUS/freeradius-server/issues/1222
2015-09-10 11:24:02 +02:00
Natanael Copa
8be40b15b6 main/freeradius: add json support to rest module
it needs an ugly hack to find the header

ref #4511
2015-08-06 12:04:36 +00:00
Natanael Copa
55054f5ba2 main/freeradius: upgrade to 3.0.9 and enable rest and redis
ref #4449
2015-07-16 12:54:45 +00:00
Natanael Copa
1314c0d82f main/freeradius: security fix for CVE-2015-4680
ref #4377
2015-07-07 14:49:00 +00:00
Natanael Copa
69ea0b70bc main/freeradius: another rebuild to fix provides 2015-06-11 12:06:39 +00:00
Natanael Copa
7a5aabc51e main/freeradius: fix incomplete freeradius3 provides
we need provides for subpackages as well
2015-06-09 09:50:47 +00:00
Natanael Copa
6737e62af8 main/freeradius: make dependencies cleaner
- versioned depends in subpackages
- let abuild figure out the so depends
2015-06-08 07:35:55 +00:00
Jeff Bilyk
1022340ce2 main/freeradius: add provides for freeradius3 2015-06-05 14:18:29 +00:00
Leonardo Arena
4e25c30f28 main/freeradius: remove conflicts, fix subpkgs depends 2015-05-14 10:01:33 +00:00
Leonardo Arena
3a4970a797 main/freeradius: nuke freeradius2 and replace it with new stable branch freeradius 3.0.x 2015-05-14 09:54:19 +00:00
Natanael Copa
6bf81f56e8 main/*: replace all sbin/runscript with sbin/openrc-run 2015-04-28 14:34:51 +00:00
Łukasz Jendrysik
48b2a90c0b main/freeradius: upgrade to 2.2.6, rebuild against mariadb 2015-01-26 14:21:29 +00:00
Natanael Copa
26b1a36cb9 main/freeradius: use threadsafe getgrnam in rlm_linelog and rlm_detail
should fix potensial craches in freeradius
2015-01-01 16:19:10 +00:00
Natanael Copa
78e8088bf5 main/freeradius: linux-headers build fix 2015-01-01 16:15:56 +00:00
Natanael Copa
a2039cacbd main/freeradius: fix configure check for TLS
Fix the configure script to correctly detect if TLS is available. TLS is
needed for rlm_unix to work without segfaulting.

(cherry picked from commit d698c183c3183ce3772c4b833c0c4971394942fd)
2014-10-17 06:08:05 +00:00
Natanael Copa
cd34a7d66f main/freeradius: fix segfault in rlm_unix
rlm_unix can segfault if you require group name lookup (eg user needs
to be in a given system group) and 2 users are authenticating at the
same time.

Upstream has choosed to fix it differently and has added backport for
v3.0.x, but has not cherry-picked it for v2.x.x branch.

We use my proposed fix for v2.x.

upstream bug is https://github.com/FreeRADIUS/freeradius-server/issues/767
2014-09-04 14:43:34 +00:00
Natanael Copa
140f3f7a5e main/freeradius: rebuild against perl-5.20 2014-07-15 09:33:37 +00:00
Natanael Copa
d618cb16c4 main/freeradius: cleanup. replace exit 1 with return 1
so abuild gets a chance to clean up on build failures
2014-07-09 09:47:11 +00:00
Natanael Copa
a8c99d2649 main/freeradius: upgrade to 2.2.5 2014-06-25 14:31:45 +00:00
Timo Teräs
94983a506d main/freeradius: fix openssl version check
Make sure ABI version is correct, and that we are linked at least
to the version compled against. This allows openssl security upgrades
that are ABI stable without recompiling freeradius.
2014-06-12 10:57:04 +03:00
Natanael Copa
a03dc7063a main/freeradius: rebuild due to openssl upgrade
ref #3007
2014-06-09 13:55:35 +00:00
Leonardo Arena
b58ac471f7 main/freeradius: rebuild against new openssl. Fixes #2835 2014-04-08 14:43:16 +00:00
Natanael Copa
80837ce1a1 main/freeradius: upgrade to 2.2.4 2014-04-04 12:29:34 +00:00
Leonardo Arena
a2173b1aaa main/freeradius: security fix (CVE-2014-2015). Fixes #2717 2014-03-04 07:45:13 +00:00
Natanael Copa
1c1f57f719 main/freeradius: add -dbg subpackage with debufg symbols 2014-03-03 15:41:53 +00:00
Leonardo Arena
7fb2891f1a main/freeradius: fix initd checkpath 2014-02-28 14:22:46 +00:00
Leonardo Arena
899733ab8c main/freeradius: make sure krb5 is not enabled. Enable parrallel building 2014-02-26 08:40:58 +00:00
Leonardo Arena
62b83e4645 main/freeradius: remove mysql configuration directives from default config 2014-02-26 07:51:42 +00:00
Leonardo Arena
f07325909c main/freeradius: add sqlite support 2014-01-17 08:26:36 +00:00
Leonardo Arena
351f68d924 main/freeradius: upgrade to 2.2.3 2014-01-17 07:52:23 +00:00
Leonardo Arena
469837bce3 main/freeradius: fix depends 2013-11-22 08:27:51 +00:00
Leonardo Arena
0771864542 main/freeradius: use default user/group radius 2013-11-15 12:00:53 +00:00
Leonardo Arena
1f203f63ec main/freeradius: upgrade to 2.2.2 2013-11-12 12:47:24 +00:00
Timo Teräs
c8fe1d6239 main/freeradius: upgrade to 2.2.1 2013-10-19 13:30:02 +03:00
Timo Teräs
ec1c0313f0 main/[various]: update config.sub 2013-10-09 11:26:48 +00:00