diff --git a/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-fs/cifs-utils-6.4 b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-fs/cifs-utils-6.4 new file mode 100644 index 0000000000..572dd1d900 --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-fs/cifs-utils-6.4 @@ -0,0 +1,14 @@ +DEFINED_PHASES=configure install postinst setup +DEPEND=!net-fs/mount-cifs !=net-fs/samba-4.0.0_alpha1 ) ) +REQUIRED_USE=acl? ( ads ) +SLOT=0 +SRC_URI=https://www.samba.org/ftp/pub/linux-cifs/cifs-utils/cifs-utils-6.4.tar.bz2 +_eclasses_=desktop 1b286a7e7143d8c4ec89cd0d2743a097 epatch 9a5f039771f143195164a15a4faa41a1 estack 43ddf5aaffa7a8d0482df54d25a66a1f eutils 5b8ce72259e08104b337fe28c6de5dbc linux-info aedb720bff5a5dec9b87edd351382bfc ltprune 607e058da37aa6dabfa408b7d61da72e multilib 97f470f374f2e94ccab04a2fb21d811e preserve-libs ef207dc62baddfddfd39a164d9797648 toolchain-funcs 1e35303c63cd707f6c3422b4493d5607 vcs-clean 2a0f74a496fa2b1552c4f3398258b7bf versionator 26ca8a8bd95d6a74122c08ba98a4ee72 +_md5_=b8337886583f23d65660184207abd84b diff --git a/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-fs/cifs-utils-6.7 b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-fs/cifs-utils-6.7 new file mode 100644 index 0000000000..6c5edb0e6f --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/metadata/md5-cache/net-fs/cifs-utils-6.7 @@ -0,0 +1,15 @@ +DEFINED_PHASES=configure install postinst prepare setup +DEPEND=!net-fs/mount-cifs !=app-portage/elt-patches-20170422 !=sys-devel/automake-1.16.1:1.16 >=sys-devel/automake-1.15.1:1.15 ) >=sys-devel/autoconf-2.69 >=sys-devel/libtool-2.4 +DESCRIPTION=Tools for Managing Linux CIFS Client Filesystems +EAPI=6 +HOMEPAGE=https://wiki.samba.org/index.php/LinuxCIFS_utils +IUSE=+acl +ads +caps +caps-ng creds pam +KEYWORDS=alpha amd64 arm ~arm64 ~hppa ia64 ~mips ppc ppc64 ~s390 ~sh sparc x86 ~arm-linux ~x86-linux +LICENSE=GPL-3 +PDEPEND=acl? ( >=net-fs/samba-4.0.0_alpha1 ) +RDEPEND=!net-fs/mount-cifs !=app-portage/elt-patches-20170422 !=sys-devel/automake-1.16.1:1.16 >=sys-devel/automake-1.15.1:1.15 ) >=sys-devel/autoconf-2.69 >=sys-devel/libtool-2.4 +DESCRIPTION=Tools for Managing Linux CIFS Client Filesystems +EAPI=6 +HOMEPAGE=https://wiki.samba.org/index.php/LinuxCIFS_utils +IUSE=+acl +ads +caps +caps-ng creds pam +KEYWORDS=~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~arm-linux ~x86-linux +LICENSE=GPL-3 +PDEPEND=acl? ( >=net-fs/samba-4.0.0_alpha1 ) +RDEPEND=!net-fs/mount-cifs !/dev/null + + if use acl ; then + dodir /etc/cifs-utils + dosym /usr/$(get_libdir)/cifs-utils/idmapwb.so \ + /etc/cifs-utils/idmap-plugin + dodir /etc/request-key.d + echo 'create cifs.idmap * * /usr/sbin/cifs.idmap %k' \ + > "${ED}/etc/request-key.d/cifs.idmap.conf" + fi + + if use ads ; then + dodir /etc/request-key.d + echo 'create dns_resolver * * /usr/sbin/cifs.upcall %k' \ + > "${ED}/etc/request-key.d/cifs.upcall.conf" + echo 'create cifs.spnego * * /usr/sbin/cifs.upcall %k' \ + > "${ED}/etc/request-key.d/cifs.spnego.conf" + fi +} + +pkg_postinst() { + # Inform about set-user-ID bit of mount.cifs + ewarn "setuid use flag was dropped due to multiple security implications" + ewarn "such as CVE-2009-2948, CVE-2011-3585 and CVE-2012-1586" + ewarn "You are free to set setuid flags by yourself" + + # Inform about upcall usage + if use acl ; then + einfo "The cifs.idmap utility has been enabled by creating the" + einfo "configuration file /etc/request-key.d/cifs.idmap.conf" + einfo "This enables you to get and set CIFS acls." + fi + + if use ads ; then + einfo "The cifs.upcall utility has been enabled by creating the" + einfo "configuration file /etc/request-key.d/cifs.upcall.conf" + einfo "This enables you to mount DFS shares." + fi +} diff --git a/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/cifs-utils-6.7.ebuild b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/cifs-utils-6.7.ebuild new file mode 100644 index 0000000000..db70c62afe --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/cifs-utils-6.7.ebuild @@ -0,0 +1,123 @@ +# Copyright 1999-2018 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +inherit autotools eutils linux-info multilib pam + +DESCRIPTION="Tools for Managing Linux CIFS Client Filesystems" +HOMEPAGE="https://wiki.samba.org/index.php/LinuxCIFS_utils" +SRC_URI="https://ftp.samba.org/pub/linux-cifs/${PN}/${P}.tar.bz2" + +LICENSE="GPL-3" +SLOT="0" +KEYWORDS="alpha amd64 arm ~arm64 ~hppa ia64 ~mips ppc ppc64 ~s390 ~sh sparc x86 ~arm-linux ~x86-linux" +IUSE="+acl +ads +caps +caps-ng creds pam" + +RDEPEND=" + !net-fs/mount-cifs + !/dev/null + + if use acl ; then + dodir /etc/cifs-utils + dosym /usr/$(get_libdir)/cifs-utils/idmapwb.so \ + /etc/cifs-utils/idmap-plugin + dodir /etc/request-key.d + echo 'create cifs.idmap * * /usr/sbin/cifs.idmap %k' \ + > "${ED}/etc/request-key.d/cifs.idmap.conf" + fi + + if use ads ; then + dodir /etc/request-key.d + echo 'create dns_resolver * * /usr/sbin/cifs.upcall %k' \ + > "${ED}/etc/request-key.d/cifs.upcall.conf" + echo 'create cifs.spnego * * /usr/sbin/cifs.upcall %k' \ + > "${ED}/etc/request-key.d/cifs.spnego.conf" + fi +} + +pkg_postinst() { + # Inform about set-user-ID bit of mount.cifs + ewarn "setuid use flag was dropped due to multiple security implications" + ewarn "such as CVE-2009-2948, CVE-2011-3585 and CVE-2012-1586" + ewarn "You are free to set setuid flags by yourself" + + # Inform about upcall usage + if use acl ; then + einfo "The cifs.idmap utility has been enabled by creating the" + einfo "configuration file /etc/request-key.d/cifs.idmap.conf" + einfo "This enables you to get and set CIFS acls." + fi + + if use ads ; then + einfo "The cifs.upcall utility has been enabled by creating the" + einfo "configuration file /etc/request-key.d/cifs.upcall.conf" + einfo "This enables you to mount DFS shares." + fi +} diff --git a/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/cifs-utils-6.8.ebuild b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/cifs-utils-6.8.ebuild new file mode 100644 index 0000000000..63b3e7afe4 --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/cifs-utils-6.8.ebuild @@ -0,0 +1,121 @@ +# Copyright 1999-2018 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 + +EAPI=6 + +inherit autotools eutils linux-info multilib pam + +DESCRIPTION="Tools for Managing Linux CIFS Client Filesystems" +HOMEPAGE="https://wiki.samba.org/index.php/LinuxCIFS_utils" +SRC_URI="https://ftp.samba.org/pub/linux-cifs/${PN}/${P}.tar.bz2" + +LICENSE="GPL-3" +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~arm-linux ~x86-linux" +IUSE="+acl +ads +caps +caps-ng creds pam" + +RDEPEND=" + !net-fs/mount-cifs + !/dev/null + + if use acl ; then + dodir /etc/cifs-utils + dosym /usr/$(get_libdir)/cifs-utils/idmapwb.so \ + /etc/cifs-utils/idmap-plugin + dodir /etc/request-key.d + echo 'create cifs.idmap * * /usr/sbin/cifs.idmap %k' \ + > "${ED}/etc/request-key.d/cifs.idmap.conf" + fi + + if use ads ; then + dodir /etc/request-key.d + echo 'create dns_resolver * * /usr/sbin/cifs.upcall %k' \ + > "${ED}/etc/request-key.d/cifs.upcall.conf" + echo 'create cifs.spnego * * /usr/sbin/cifs.upcall %k' \ + > "${ED}/etc/request-key.d/cifs.spnego.conf" + fi +} + +pkg_postinst() { + # Inform about set-user-ID bit of mount.cifs + ewarn "setuid use flag was dropped due to multiple security implications" + ewarn "such as CVE-2009-2948, CVE-2011-3585 and CVE-2012-1586" + ewarn "You are free to set setuid flags by yourself" + + # Inform about upcall usage + if use acl ; then + einfo "The cifs.idmap utility has been enabled by creating the" + einfo "configuration file /etc/request-key.d/cifs.idmap.conf" + einfo "This enables you to get and set CIFS acls." + fi + + if use ads ; then + einfo "The cifs.upcall utility has been enabled by creating the" + einfo "configuration file /etc/request-key.d/cifs.upcall.conf" + einfo "This enables you to mount DFS shares." + fi +} diff --git a/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/files/cifs-utils-6.7-heimdal.patch b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/files/cifs-utils-6.7-heimdal.patch new file mode 100644 index 0000000000..f8fea48fb4 --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/files/cifs-utils-6.7-heimdal.patch @@ -0,0 +1,27 @@ +https://bugs.gentoo.org/612584 + +--- cifs-utils-6.7/cifs.upcall.c ++++ cifs-utils-6.7/cifs.upcall.c +@@ -75,11 +75,13 @@ + #define KRB5_KEY_LENGTH(k) ((k)->keyvalue.length) + #define KRB5_KEY_DATA(k) ((k)->keyvalue.data) + #define KRB5_KEY_DATA_CAST void ++#define KRB5_FREE_STRING(c,k) krb5_xfree(k) + #else /* MIT */ + #define KRB5_KEY_TYPE(k) ((k)->enctype) + #define KRB5_KEY_LENGTH(k) ((k)->length) + #define KRB5_KEY_DATA(k) ((k)->contents) + #define KRB5_KEY_DATA_CAST krb5_octet ++#define KRB5_FREE_STRING(c,k) krb5_free_string(c,k) + #endif + + #ifdef HAVE_LIBCAP_NG +@@ -358,7 +360,7 @@ + syslog(LOG_DEBUG, "%s: krb5_cc_get_full_name failed: %d\n", __func__, ret); + } else { + syslog(LOG_DEBUG, "%s: default ccache is %s\n", __func__, cachename); +- krb5_free_string(context, cachename); ++ KRB5_FREE_STRING(context, cachename); + } + + if (!get_tgt_time(cc)) { diff --git a/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/files/cifs-utils-6.7-talloc.patch b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/files/cifs-utils-6.7-talloc.patch new file mode 100644 index 0000000000..7e3418631b --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/files/cifs-utils-6.7-talloc.patch @@ -0,0 +1,29 @@ +https://bugs.gentoo.org/show_bug.cgi?id=612018 + +From: Thomas Witt +Date: Wed, 15 Mar 2017 20:20:44 +0000 (+0000) +Subject: mount.cifs: Remove data_blob.h include +X-Git-Url: https://git.samba.org/?p=cifs-utils.git;a=commitdiff_plain;h=272d523a57a4e8791d625a479128613be5e401f5 + +mount.cifs: Remove data_blob.h include + +data_blob.h includes talloc.h from libtalloc, but that is only marked as +a dependency for cifs.upcall. No symbols from that header are used by +cifs.mount, so remove it to avoid the libtalloc dependency + +Signed-off-by: Thomas Witt +--- + +diff --git a/mount.cifs.c b/mount.cifs.c +index 13b71ef..2612feb 100644 +--- a/mount.cifs.c ++++ b/mount.cifs.c +@@ -61,7 +61,6 @@ + #include "mount.h" + #include "util.h" + #include "resolve_host.h" +-#include "data_blob.h" + + #ifndef MS_MOVE + #define MS_MOVE 8192 + diff --git a/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/metadata.xml b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/metadata.xml new file mode 100644 index 0000000000..d5117586f4 --- /dev/null +++ b/sdk_container/src/third_party/portage-stable/net-fs/cifs-utils/metadata.xml @@ -0,0 +1,15 @@ + + + + + samba@gentoo.org + Samba Team + + The in-kernel CIFS filesystem relies on a set of user-space tools. That package of tools is called cifs-utils. Although not really part of Samba proper, these tools were originally part of the Samba package. For several reasons, shipping these tools as part of Samba was problematic and it was deemed better to split them off into their own package + + Enable Active Directory support and create cifs.idmap binary - idmap support + libcap support + libcap-ng support + cifs credentials support + +