commit: 90898938b0b3defca76f5b383386c6ad987feb36 Author: Aaron Bauman <bman <AT> gentoo <DOT> org> AuthorDate: Thu Apr 4 19:43:04 2019 +0000 Commit: Aaron Bauman <bman <AT> gentoo <DOT> org> CommitDate: Thu Apr 4 19:43:04 2019 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=90898938
app-backup/tsm: drop vulnerable wrt bug #644496 Signed-off-by: Aaron Bauman <bman <AT> gentoo.org> app-backup/tsm/Manifest | 1 - app-backup/tsm/tsm-7.1.4.4-r3.ebuild | 231 ----------------------------------- 2 files changed, 232 deletions(-) diff --git a/app-backup/tsm/Manifest b/app-backup/tsm/Manifest index b35b13df6d7..6fcba5100fe 100644 --- a/app-backup/tsm/Manifest +++ b/app-backup/tsm/Manifest @@ -1,3 +1,2 @@ -DIST 7.1.4.4-TIV-TSMBAC-LinuxX86.tar 220456960 BLAKE2B 1deb7f40b0db899dba475d83d4f22d602563b30c491d280f478e69c558677b9d09e49050eace4275e083eeeb670df2e545ad65abc2abf9dade1e35c947e581f6 SHA512 5f0b0262ad4b8f1dc6d9763735c3390a9ea0d559a3efd08593c6aa81e89978387906ff728a5dee575725da7d0b7e4f4e6d207111b79625c6487b6e8d56d767de DIST 7.1.8.0-TIV-TSMBAC-LinuxX86.tar 221849600 BLAKE2B a57d15885c802925e92afca45bfd25c1aa56c33329f03d3de89f00dd139239da3b835ef514dd8d881e76e04e84656d3d630b8e8e44fe8ef331c3f2c5d6acf816 SHA512 68dce2463554b7bd6100d5bf6a617316a04898b747fcaec182c9c4870c34bceb16eea47d073c587c7184945a3cef0f6c98d9a59364589a4745fd1fdc195e3af9 DIST 8.1.6.0-TIV-TSMBAC-LinuxX86.tar 215961600 BLAKE2B de7e3083a87e72763ffee5adbabc20f546edbc771a9ea0017af591b677cb55832c366ec42da6258ccbb81368f7934acfd116eee77236737d8015cc7588d95d3e SHA512 82897f8af6e1408b25eb95206500fa2e05f17983843de3a3456d71ee3cc25188e31a0a2b11c7ee5cf02c3a6aa46fbba03e2a31e697868905739e97c75bfd5984 diff --git a/app-backup/tsm/tsm-7.1.4.4-r3.ebuild b/app-backup/tsm/tsm-7.1.4.4-r3.ebuild deleted file mode 100644 index ef3867988c2..00000000000 --- a/app-backup/tsm/tsm-7.1.4.4-r3.ebuild +++ /dev/null @@ -1,231 +0,0 @@ -# Copyright 1999-2018 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=5 - -inherit versionator multilib eutils readme.gentoo rpm systemd user pax-utils - -DESCRIPTION="Tivoli Storage Manager (TSM) Backup/Archive (B/A) Client and API" -HOMEPAGE="http://www.tivoli.com/"; - -MY_PV_MAJOR=$(get_major_version) -MY_PV_MINOR=$(get_version_component_range 2) -MY_PV_TINY=$(get_version_component_range 3) -MY_PV_PATCH=$(get_version_component_range 4) - -MY_PV_NODOTS="${MY_PV_MAJOR}${MY_PV_MINOR}${MY_PV_TINY}" -MY_PVR_ALLDOTS=${PV} - -if [[ ${MY_PV_PATCH} == 0 ]]; then - MY_RELEASE_PATH=maintenance -else - MY_RELEASE_PATH=patches -fi -BASE_URI="ftp://ftp.software.ibm.com/storage/tivoli-storage-management/"; -BASE_URI+="${MY_RELEASE_PATH}/client/v${MY_PV_MAJOR}r${MY_PV_MINOR}/" -BASE_URI+="Linux/LinuxX86/BA/v${MY_PV_NODOTS}/" -SRC_TAR="${MY_PVR_ALLDOTS}-TIV-TSMBAC-LinuxX86.tar" -SRC_URI="${BASE_URI}${SRC_TAR}" - -RESTRICT="strip" # Breaks libPiIMG.so and libPiSNAP.so -LICENSE="Apache-1.1 Apache-2.0 JDOM BSD-2 CC-PD Boost-1.0 MIT CPL-1.0 HPND Exolab - dom4j EPL-1.0 FTL icu unicode IBM Info-ZIP LGPL-2 LGPL-2.1 openafs-krb5-a - ZLIB MPL-1.0 MPL-1.1 NPL-1.1 openssl OPENLDAP RSA public-domain W3C - || ( BSD GPL-2+ ) gSOAP libpng tsm" - -SLOT="0" -KEYWORDS="-* ~amd64" -IUSE="acl java +tsm_cit +tsm_hw" -QA_PREBUILT="*" - -# not available (yet?) -#MY_LANGS="cs:CS_CZ de:DE_DE es:ES_ES fr:FR_FR hu:HU_HU it:IT_IT ja:JA_JP -# ko:KO_KR pl:PL_PL pt-BR:PT_BR ru:RU_RU zh-CN:ZH_CN zh-TW:ZH_TW" -MY_LANG_PV="${MY_PVR_ALLDOTS}-" -for lang in ${MY_LANGS}; do - IUSE="${IUSE} l10n_${lang%:*}" - SRC_URI="${SRC_URI} l10n_${lang%:*}? ( \ -${BASE_URI}TIVsm-msg.${lang#*:}.x86_64.rpm -> \ -${MY_LANG_PV}TIVsm-msg.${lang#*:}.x86_64.rpm )" -done -unset lang - -DEPEND="" -RDEPEND=" - dev-libs/expat - dev-libs/libxml2 - sys-fs/fuse:0 - acl? ( sys-apps/acl ) - java? ( >=virtual/jre-1.7 ) -" - -S="${WORKDIR}/bacli" - -pkg_setup() { - enewgroup tsm - DOC_CONTENTS=" - Note that you have to be either root or member of the group tsm to - be able to use the Tivoli Storage Manager client." -} - -src_unpack() { - local rpm rpms lang - unpack ${SRC_TAR} - - cd "${S}" - for rpm in *.rpm; do - case ${rpm} in - TIVsm-APIcit.*|TIVsm-BAcit.*) - use tsm_cit && rpms="${rpms} ./${rpm}" - ;; - TIVsm-BAhdw.*) - use tsm_hw && rpms="${rpms} ./${rpm}" - ;; - TIVsm-JBB.*|*-filepath-*) - # "journal based backup" for all filesystems - # requires a kernel module. - # "Linux Filepath source code" available - # by request from vendor - ;; - *) - rpms="${rpms} ./${rpm}" - ;; - esac - done - for rpm in ${A}; do - case ${rpm} in - *.rpm) - rpms="${rpms} ${rpm}" - ;; - esac - done - - rpm_unpack ${rpms} - - # Avoid strange error messages caused by read-only files - chmod -R u+w "${S}" || die -} - -src_install(){ - cp -a opt "${D}" || die - cp -a usr "${D}" || die - - # The RPM files contain postinstall scripts which can be extracted - # e.g. using https://bugs.gentoo.org/attachment.cgi?id=234663 . - # Below we try to mimic the behaviour of these scripts. - # We don't deal with SELinux compliance (yet), though. - local RPM_INSTALL_PREFIX CLIENTDIR i - RPM_INSTALL_PREFIX=/opt - CLIENTDIR=$RPM_INSTALL_PREFIX/tivoli/tsm/client - - # Create links for messages; this is spread over several postin scripts. - #for i in $(cd "${D}"${CLIENTDIR}/lang; ls -1d ??_??); do - # dosym ../../lang/${i} $CLIENTDIR/ba/bin/${i} - # dosym ../../lang/${i} $CLIENTDIR/api/bin64/${i} - #done - - # Mimic TIVsm-API64 postinstall script - for i in libgpfs.so libdmapi.so; do - dosym ../..$CLIENTDIR/api/bin64/${i} /usr/lib64/${i} - done - - # The TIVsm-BA postinstall script only does messages and ancient upgrades - - # The gscrypt64 postinstall script only deals with s390[x] SELinux - # and the symlink for the iccs library which we handle in the loop below. - - # Move stuff from /usr/local to /opt, #452332 - mv "${D}"/usr/local/ibm "${D}"/opt/ || die - rmdir "${D}"/usr/local || die - - # Mimic gskssl64 postinstall script - for i in sys p11 km ssl drld kicc ldap cms acmeidup valn dbfl iccs; do - dosym ../../opt/ibm/gsk8_64/lib64/libgsk8${i}_64.so \ - /usr/lib64/libgsk8${i}_64.so - done - for i in capicmd ver; do - dosym ../../opt/ibm/gsk8_64/bin/gsk8${i}_64 /usr/bin/gsk${i}_64 - done - - # Done with the postinstall scripts as the RPMs contain them. - # Now on to some more Gentoo-specific installation. - - [[ -d "${D}usr/lib" ]] && die "Using 32bit lib dir in 64bit only system" - - # Avoid "QA Notice: Found an absolute symlink in a library directory" - local target - find "${D}"usr/lib* -lname '/*' | while read i; do - target=$(readlink "${i}") - rm -v "${i}" || die - dosym "../..${target}" "${i#${D}}" - done - - fowners :tsm /opt/tivoli/tsm/client/ba/bin/dsmtca - fperms 4710 /opt/tivoli/tsm/client/ba/bin/dsmtca - - keepdir /var/log/tsm - insinto /etc/logrotate.d - newins "${FILESDIR}/tsm.logrotate" tsm - - keepdir /etc/tivoli - - cp -a "${S}/opt/tivoli/tsm/client/ba/bin/dsm.sys.smp" "${D}/etc/tivoli/dsm.sys" || die - echo ' PasswordDir "/etc/tivoli/"' >> ${D}/etc/tivoli/dsm.sys - echo ' PasswordAccess generate' >> ${D}/etc/tivoli/dsm.sys - - # Added the hostname to be more friendly, the admin will need to edit this file anyway - echo ' NodeName' `hostname` >> ${D}/etc/tivoli/dsm.sys - echo ' ErrorLogName "/var/log/tsm/dsmerror.log"' >> ${D}/etc/tivoli/dsm.sys - echo ' SchedLogName "/var/log/tsm/dsmsched.log"' >> ${D}/etc/tivoli/dsm.sys - dosym ../../../../../../etc/tivoli/dsm.sys /opt/tivoli/tsm/client/ba/bin/dsm.sys - - cp -a "${S}/opt/tivoli/tsm/client/ba/bin/dsm.opt.smp" "${D}/etc/tivoli/dsm.opt" - dosym ../../../../../../etc/tivoli/dsm.opt /opt/tivoli/tsm/client/ba/bin/dsm.opt - - # Setup the env - dodir /etc/env.d - ENV_FILE="${D}/etc/env.d/80tivoli" - echo 'DSM_CONFIG="/etc/tivoli/dsm.opt"' >> ${ENV_FILE} - echo 'DSM_DIR="/opt/tivoli/tsm/client/ba/bin"' >> ${ENV_FILE} - echo 'DSM_LOG="/var/log/tsm"' >> ${ENV_FILE} - echo 'ROOTPATH="/opt/tivoli/tsm/client/ba/bin"' >> ${ENV_FILE} - - echo 'SEARCH_DIRS_MASK="/opt/tivoli/tsm/client/ba/bin"' > "${T}/80${PN}" || die - insinto "/etc/revdep-rebuild" - doins "${T}/80${PN}" - - newconfd "${FILESDIR}/dsmc.conf.d" dsmc - newinitd "${FILESDIR}/dsmc.init.d" dsmc - newinitd "${FILESDIR}/dsmcad.init.d-r1" dsmcad - - # Need this for hardened, otherwise a cryptic "connection to server lost" message appears - pax-mark -m "${D}/opt/tivoli/tsm/client/ba/bin/dsmc" - - systemd_dounit "${FILESDIR}/dsmc.service" - systemd_dounit "${FILESDIR}/dsmcad.service" - - readme.gentoo_create_doc -} - -pkg_postinst() { - local i dirs - for i in /var/log/tsm/dsm{error,sched,j,webcl}.log; do - if [[ ! -e $i ]]; then - touch $i || die - chown :tsm $i || die - chmod 0660 $i || die - fi - done - - # Bug #375041: the log directory itself should not be world writable. - # Have to do this in postinst due to bug #141619 - chown root:tsm /var/log/tsm || die - chmod 0750 /var/log/tsm || die - - # Bug 508052: directories used to be too restrictive, have to widen perms. - dirs=( /opt/tivoli $(find /opt/tivoli/tsm -type d) ) - chown root:root "${dirs[@]}" || die - chmod 0755 "${dirs[@]}" || die - - readme.gentoo_print_elog -}
