Checked with upstream .. SUPATH and PATH valid again for PAM (bug #101047).

Fix building on UCLIBC.

(Portage version: 2.0.51.22-r2)

16 files changed, 754 insertions, 71 deletions

diff --git a/sys-apps/pam-login/ChangeLog b/sys-apps/pam-login/ChangeLog
index 62cfc1e350ab..fa215dc4cb41 100644
--- a/sys-apps/pam-login/ChangeLog
+++ b/sys-apps/pam-login/ChangeLog
@@ -1,6 +1,16 @@
 # ChangeLog for sys-apps/pam-login
 # Copyright 2002-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-apps/pam-login/ChangeLog,v 1.53 2005/08/01 13:40:01 azarah Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/pam-login/ChangeLog,v 1.54 2005/08/03 18:57:22 azarah Exp $
+
+*pam-login-4.0.11.1-r2 (03 Aug 2005)
+
+  03 Aug 2005; Martin Schlemmer <azarah@gentoo.org> files/login.defs-4.0,
+  +files/pam-login-4.0.5-skey.patch, +files/pam-login-4.0.11.1-SUPATH.patch,
+  +files/pam-login-4.0.11.1-ngettext.patch,
+  +files/pam-login-4.0.11.1-uclibc-missing-l64a.patch,
+  +pam-login-4.0.11.1-r2.ebuild:
+  Checked with upstream .. SUPATH and PATH valid again for PAM (bug #101047).
+  Fix building on UCLIBC.
 
 *pam-login-4.0.11.1-r1 (01 Aug 2005)
 
diff --git a/sys-apps/pam-login/Manifest b/sys-apps/pam-login/Manifest
index bf53c712eee7..0f001874f8dd 100644
--- a/sys-apps/pam-login/Manifest
+++ b/sys-apps/pam-login/Manifest
@@ -1,28 +1,25 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
 MD5 dcdb08f3063aa2ddfdaa38fe69bf20a9 pam-login-4.0.11.1-r1.ebuild 3553
+MD5 54c5710b5ff87e75989f22a5d41245be pam-login-4.0.11.1-r2.ebuild 3940
 MD5 c1a4d7808f13b9eb272ef64bb9266e29 ChangeLog 7716
 MD5 2595d9d5d585309a961d44bb056d46fe pam-login-3.17.ebuild 2876
 MD5 f6a4f4c2e8300f1db0e4daf8fc8999b6 pam-login-3.14.ebuild 2801
 MD5 1d05f0436f1c273d7862099f309afe4d metadata.xml 156
+MD5 e62336f0f353f9235606a9dcbe9b7e34 .pam-login-4.0.11.1-r2.ebuild.swp 20480
 MD5 21df4caf263fa2ed75e574f9a067b72e files/login.defs 3229
 MD5 bd631a67641c2ecb9f2da34226ca80a8 files/digest-pam-login-3.14 67
 MD5 128c7d12948df01d7348a7edede0c2fb files/pam-login-3.14-query_user_context.diff 635
-MD5 68c71aba21339235407b7b913885d667 files/login.defs-4.0 6041
+MD5 c87c0968ace90b32753b91f93ad7bab1 files/pam-login-4.0.11.1-uclibc-missing-l64a.patch 1269
+MD5 e69667a1d5dae1183fc9edd70f6f1a98 files/login.defs-4.0 6255
 MD5 97fac4bd3167fadfc2abaeaa819ccbde files/pam_login-Werror-off-ppc64.patch 511
 MD5 95f7b8980169e81352229bd548909ea7 files/pam-login-4.0.10-fix-configure.patch 579
 MD5 e01e197ed3b6d2ec6ae83d23b33088b8 files/login.pamd-4.0 1019
+MD5 44f064b586ea49c8e2dc1fca8b9e4599 files/pam-login-4.0.11.1-SUPATH.patch 1614
 MD5 0021ec2d8f5fc517f0e74f7233fc16c9 files/pam-login-3.11-gcc33.patch 527
 MD5 9375147f78a25196b654616c969af9a5 files/digest-pam-login-4.0.11.1-r1 69
 MD5 2fdbabc344539e9dfd4955c061596a27 files/pam-login-3.17-query_user_context.patch 423
+MD5 450a2289f2a383296ad9af005e46da74 files/pam-login-4.0.11.1-ngettext.patch 1038
 MD5 2e7603feaff187884dd9b1e66601f02b files/login.pamd 382
+MD5 636f233fa173a998195016c3808173d4 files/pam-login-4.0.5-skey.patch 395
+MD5 9375147f78a25196b654616c969af9a5 files/digest-pam-login-4.0.11.1-r2 69
 MD5 7761083b62bdcb822f1b9533aab2e06c files/pam-login-3.11-lastlog-fix.patch 362
 MD5 e7f9dde204926c73a570b344556e4b1e files/digest-pam-login-3.17 67
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.1 (GNU/Linux)
-
-iD8DBQFC7ieG1ZcsMnZjRyIRArjIAJ0RfV2BzI6ZGobWoU0Sr4cJjzKxqQCfeIGE
-Hfc0bFx3MJ+Vk9YKSPatwt4=
-=E9Zc
------END PGP SIGNATURE-----
diff --git a/sys-apps/pam-login/files/digest-pam-login-4.0.11.1-r2 b/sys-apps/pam-login/files/digest-pam-login-4.0.11.1-r2
new file mode 100644
index 000000000000..797d6633880d
--- /dev/null
+++ b/sys-apps/pam-login/files/digest-pam-login-4.0.11.1-r2
@@ -0,0 +1 @@
+MD5 e60b7b16128b9e00576073389a0ff1e6 shadow-4.0.11.1.tar.bz2 1056103
diff --git a/sys-apps/pam-login/files/login.defs-4.0 b/sys-apps/pam-login/files/login.defs-4.0
index a59ba6834b26..c173b2ff1fe4 100644
--- a/sys-apps/pam-login/files/login.defs-4.0
+++ b/sys-apps/pam-login/files/login.defs-4.0
@@ -1,7 +1,7 @@
 #
 # /etc/login.defs - Configuration control definitions for the login package.
 #
-#	$Id: login.defs-4.0,v 1.1 2005/08/01 11:48:13 azarah Exp $
+#	$Id: login.defs-4.0,v 1.2 2005/08/03 18:57:22 azarah Exp $
 #
 # Three items must be defined:  MAIL_DIR, ENV_SUPATH, and ENV_PATH.
 # If unspecified, some arbitrary (and possibly incorrect) value will
@@ -78,6 +78,13 @@ HUSHLOGIN_FILE	.hushlogin
 #HUSHLOGIN_FILE	/etc/hushlogins
 
 #
+# *REQUIRED*  The default PATH settings, for superuser and normal users.
+#
+# (they are minimal, add the rest in the shell startup files)
+ENV_SUPATH	PATH=/sbin:/bin:/usr/sbin:/usr/bin
+ENV_PATH	PATH=/bin:/usr/bin
+
+#
 # Terminal permissions
 #
 #	TTYGROUP	Login tty will be assigned this group ownership.
diff --git a/sys-apps/pam-login/files/pam-login-4.0.11.1-SUPATH.patch b/sys-apps/pam-login/files/pam-login-4.0.11.1-SUPATH.patch
new file mode 100644
index 000000000000..7cbb8b73f8c2
--- /dev/null
+++ b/sys-apps/pam-login/files/pam-login-4.0.11.1-SUPATH.patch
@@ -0,0 +1,45 @@
+diff -urp shadow-4.0.11.1/lib/getdef.c shadow-4.0.11.1.az/lib/getdef.c
+--- shadow-4.0.11.1/lib/getdef.c	2005-07-12 20:54:39.000000000 +0200
++++ shadow-4.0.11.1.az/lib/getdef.c	2005-08-03 20:35:10.000000000 +0200
+@@ -61,9 +61,7 @@ static struct itemdef def_table[] = {
+ 	{"CHSH_AUTH", NULL},
+ 	{"CRACKLIB_DICTPATH", NULL},
+ 	{"ENV_HZ", NULL},
+-	{"ENV_PATH", NULL},
+ 	{"ENV_ROOTPATH", NULL},	/* SuSE compatibility? */
+-	{"ENV_SUPATH", NULL},
+ 	{"ENV_TZ", NULL},
+ 	{"ENVIRON_FILE", NULL},
+ 	{"FAILLOG_ENAB", NULL},
+@@ -87,6 +85,8 @@ static struct itemdef def_table[] = {
+ 	{"QUOTAS_ENAB", NULL},
+ 	{"ULIMIT", NULL},
+ #endif
++	{"ENV_PATH", NULL},
++	{"ENV_SUPATH", NULL},
+ 	{"CONSOLE_GROUPS", NULL},
+ 	{"CONSOLE", NULL},
+ 	{"CREATE_HOME", NULL},
+diff -urp shadow-4.0.11.1/src/su.c shadow-4.0.11.1.az/src/su.c
+--- shadow-4.0.11.1/src/su.c	2005-07-18 12:14:39.000000000 +0200
++++ shadow-4.0.11.1.az/src/su.c	2005-08-03 20:34:02.000000000 +0200
+@@ -584,10 +584,8 @@ int main (int argc, char **argv)
+ #endif				/* !USE_PAM */
+ 
+ 	signal (SIGINT, SIG_DFL);
+-#ifndef USE_PAM
+-	cp = getdef_str ((pwent.pw_uid == 0) ? "ENV_SUPATH" : "ENV_PATH");
+ 
+-	/* XXX very similar code duplicated in libmisc/setupenv.c */
++	cp = getdef_str ((pwent.pw_uid == 0) ? "ENV_SUPATH" : "ENV_PATH");
+ 	if (!cp) {
+ 		addenv ("PATH=/bin:/usr/bin", NULL);
+ 	} else if (strchr (cp, '=')) {
+@@ -597,7 +595,6 @@ int main (int argc, char **argv)
+ 	}
+ 
+ 	environ = newenvp;	/* make new environment active */
+-#endif				/* !USE_PAM */
+ 
+ 	if (getenv ("IFS"))	/* don't export user IFS ... */
+ 		addenv ("IFS= \t\n", NULL);	/* ... instead, set a safe IFS */
diff --git a/sys-apps/pam-login/files/pam-login-4.0.11.1-ngettext.patch b/sys-apps/pam-login/files/pam-login-4.0.11.1-ngettext.patch
new file mode 100644
index 000000000000..9eba2c07220a
--- /dev/null
+++ b/sys-apps/pam-login/files/pam-login-4.0.11.1-ngettext.patch
@@ -0,0 +1,28 @@
+New ngettext stuff borks on UCLIBC, as ngettext do not have a !ENABLE_NLS
+define.  Add a check for ngettext and add the ngettext define.  Both was
+inspired by coreutils.
+
+diff -urp shadow-4.0.11.1/configure.in shadow-4.0.11.1.az/configure.in
+--- shadow-4.0.11.1/configure.in	2005-08-03 00:59:56.000000000 +0200
++++ shadow-4.0.11.1.az/configure.in	2005-08-03 12:04:55.000000000 +0200
+@@ -280,6 +280,6 @@ if test "$with_libskey" = "yes"; then
+ fi
+ 
+ AM_GNU_GETTEXT_VERSION(0.12.1)
+-AM_GNU_GETTEXT([external])
++AM_GNU_GETTEXT([external], [need-ngettext])
+ 
+ AC_CONFIG_FILES([
+ 	Makefile
+diff -urp shadow-4.0.11.1/lib/defines.h shadow-4.0.11.1.az/lib/defines.h
+--- shadow-4.0.11.1/lib/defines.h	2005-06-14 22:27:48.000000000 +0200
++++ shadow-4.0.11.1.az/lib/defines.h	2005-08-03 12:06:42.000000000 +0200
+@@ -24,6 +24,8 @@
+ # undef textdomain
+ # define textdomain(Domain)	/* empty */
+ # define _(Text) Text
++# define ngettext(Msgid1, Msgid2, N) \
++    ((N) == 1 ? (const char *) (Msgid1) : (const char *) (Msgid2))
+ #endif
+ 
+ #if STDC_HEADERS
diff --git a/sys-apps/pam-login/files/pam-login-4.0.11.1-uclibc-missing-l64a.patch b/sys-apps/pam-login/files/pam-login-4.0.11.1-uclibc-missing-l64a.patch
new file mode 100644
index 000000000000..8b6b87d8385f
--- /dev/null
+++ b/sys-apps/pam-login/files/pam-login-4.0.11.1-uclibc-missing-l64a.patch
@@ -0,0 +1,64 @@
+UCLIBC have the prototypes in stdlib.h, but not the actual functions (yes, you
+guys sucks once again.  The better way might be rather to add lib/rad64.c back,
+but its higher maintainence our side at least.
+
+--- shadow-4.0.11.1/libmisc/salt.c	2005-08-03 12:50:45.000000000 +0200
++++ shadow-4.0.11.1.az/libmisc/salt.c	2005-08-03 13:07:03.000000000 +0200
+@@ -14,6 +14,57 @@
+ #include "prototypes.h"
+ #include "defines.h"
+ #include "getdef.h"
++
++#ifndef HAVE_A64L
++
++/*
++ * i64c - convert an integer to a radix 64 character
++ */
++
++int
++i64c(int i)
++{
++	if (i <= 0)
++		return ('.');
++
++	if (i == 1)
++		return ('/');
++
++	if (i >= 2 && i < 12)
++		return ('0' - 2 + i);
++
++	if (i >= 12 && i < 38)
++		return ('A' - 12 + i);
++
++	if (i >= 38 && i < 63)
++		return ('a' - 38 + i);
++
++	return ('z');
++}
++
++/*
++ * l64a - convert a long to a string of radix 64 characters
++ */
++
++char *
++l64a(long l)
++{
++	static	char	buf[8];
++	int	i = 0;
++
++	if (l < 0L)
++		return ((char *) 0);
++
++	do {
++		buf[i++] = i64c ((int) (l % 64));
++		buf[i] = '\0';
++	} while (l /= 64L, l > 0 && i < 6);
++
++	return (buf);
++}
++
++#endif /* !HAVE_A64L */
++
+ /*
+  * Generate 8 base64 ASCII characters of random salt.  If MD5_CRYPT_ENAB
+  * in /etc/login.defs is "yes", the salt string will be prefixed by "$1$"
diff --git a/sys-apps/pam-login/files/pam-login-4.0.5-skey.patch b/sys-apps/pam-login/files/pam-login-4.0.5-skey.patch
new file mode 100644
index 000000000000..14626b0a2330
--- /dev/null
+++ b/sys-apps/pam-login/files/pam-login-4.0.5-skey.patch
@@ -0,0 +1,11 @@
+--- shadow-4.0.5.orig/lib/pwauth.c	2004-11-01 12:14:40.254524181 -0800
++++ shadow-4.0.5/lib/pwauth.c	2004-11-01 12:15:13.426532987 -0800
+@@ -152,7 +152,7 @@
+ 	 * If there is no SKEY information we default to not using SKEY.
+ 	 */
+ 
+-	if (skeychallenge (&skey, user, challenge_info) == 0)
++	if (skeychallenge (&skey, user, challenge_info, sizeof(challenge_info)) == 0)
+ 		use_skey = 1;
+ #endif
+ 
diff --git a/sys-apps/pam-login/pam-login-4.0.11.1-r2.ebuild b/sys-apps/pam-login/pam-login-4.0.11.1-r2.ebuild
new file mode 100644
index 000000000000..8a12f243d7d3
--- /dev/null
+++ b/sys-apps/pam-login/pam-login-4.0.11.1-r2.ebuild
@@ -0,0 +1,141 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/pam-login/pam-login-4.0.11.1-r2.ebuild,v 1.1 2005/08/03 18:57:22 azarah Exp $
+
+inherit eutils libtool flag-o-matic pam
+
+# Do we want to backup an old login.defs, and forcefully
+# install a new version?
+FORCE_LOGIN_DEFS="no"
+
+MY_PN="shadow"
+S="${WORKDIR}/${MY_PN}-${PV}"
+DESCRIPTION="Login, lastlog and faillog for PAM based systems"
+HOMEPAGE="http://shadow.pld.org.pl/"
+SRC_URI="ftp://ftp.pld.org.pl/software/${MY_PN}/${MY_PN}-${PV}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="livecd nls selinux"
+
+DEPEND="virtual/libc
+	sys-libs/pam
+	>=sys-apps/shadow-4.0.11.1-r1
+	skey? ( app-admin/skey )
+	selinux? ( sys-libs/libselinux )"
+# We need sys-apps/shadow-4.0.7-r1, as that no longer installs login.pamd
+
+src_unpack() {
+	unpack ${A}
+
+	cd ${S}
+
+	# The new configure changes do not detect utmp/logdir properly
+	epatch "${FILESDIR}"/${PN}-4.0.10-fix-configure.patch
+
+	# skeychallenge call needs updating #69741
+	epatch "${FILESDIR}"/${PN}-4.0.5-skey.patch
+
+	# Checked with upstream .. SUPATH and PATH valid again for PAM (bug #101047)
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-SUPATH.patch
+
+	# Some UCLIBC patches
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-ngettext.patch
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-uclibc-missing-l64a.patch
+
+	elibtoolize
+	epunt_cxx
+
+	# Needed by the UCLIBC patches
+	autoconf
+}
+
+src_compile() {
+	append-ldflags -Wl,-z,now
+	[[ ${CTARGET:-${CHOST}} != ${CHOST} ]] \
+		&& export ac_cv_func_setpgrp_void=yes
+	econf \
+		--disable-desrpc \
+		--with-libcrypt \
+		--with-libcrack \
+		--enable-shared=no \
+		--enable-static=yes \
+		--with-libpam \
+		$(use_with skey libskey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		|| die "bad configure"
+
+	cd ${S}/man
+	emake SUBDIRS="" \
+	      man_XMANS="faillog.5.xml faillog.8.xml lastlog.8.xml \
+	                 login.1.xml login.access.5.xml login.defs.5.xml" \
+	      man_MANS="faillog.5 faillog.8 lastlog.8 \
+	                login.1 login.access.5 login.defs.5" \
+		|| die "emake man failed"
+	cd ${S}/libmisc
+	emake || die "emake libmisc failed"
+	cd ${S}/lib
+	emake || die "emake lib failed"
+	cd ${S}/src
+	emake faillog lastlog login || die "emake faillog lastlog login failed"
+}
+
+src_install() {
+	cd ${S}/man
+	make SUBDIRS="" \
+	     man_XMANS="faillog.5.xml faillog.8.xml lastlog.8.xml \
+	                login.1.xml login.defs.5.xml" \
+	     man_MANS="faillog.5 faillog.8 lastlog.8 \
+	               login.1 login.defs.5" \
+	     DESTDIR=${D} install || die "emake man failed"
+	cd ${S}/src
+
+	into /
+	dobin ${S}/src/login
+	into /usr
+	dobin ${S}/src/{last,fail}log
+
+	newpamd "${FILESDIR}/login.pamd-4.0" login
+	use selinux || dosed -e '/@selinux@/d' /etc/pam.d/login
+	use selinux && dosed -e 's:@selinux@::g' /etc/pam.d/login
+
+	insinto /etc
+	insopts -m0644
+	newins "${FILESDIR}/login.defs-4.0" login.defs
+
+	# Also install another one that we can use to check if
+	# we need to update it if FORCE_LOGIN_DEFS = "yes"
+	[ "${FORCE_LOGIN_DEFS}" = "yes" ] \
+		&& newins "${FILESDIR}/login.defs" login.defs.new
+
+	dodoc ChangeLog NEWS README TODO
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}/etc/login.defs.new"
+}
+
+pkg_postinst() {
+	[ "${FORCE_LOGIN_DEFS}" != "yes" ] && return 0
+
+	ewarn "Due to a compatibility issue, ${ROOT}etc/login.defs "
+	ewarn "is being updated automatically. Your old login.defs"
+	ewarn "will be backed up as:  ${ROOT}etc/login.defs.bak"
+	echo
+
+	local CHECK1="`md5sum ${ROOT}/etc/login.defs | cut -d ' ' -f 1`"
+	local CHECK2="`md5sum ${ROOT}/etc/login.defs.new | cut -d ' ' -f 1`"
+
+	if [ "${CHECK1}" != "${CHECK2}" ]
+	then
+		cp -a ${ROOT}/etc/login.defs ${ROOT}/etc/login.defs.bak
+		mv -f ${ROOT}/etc/login.defs.new ${ROOT}/etc/login.defs
+	elif [ ! -f ${ROOT}/etc/login.defs ]
+	then
+		mv -f ${ROOT}/etc/login.defs.new ${ROOT}/etc/login.defs
+	else
+		rm -f ${ROOT}/etc/login.defs.new
+	fi
+}
diff --git a/sys-apps/shadow/ChangeLog b/sys-apps/shadow/ChangeLog
index 013df13b66f4..3bb6d846b320 100644
--- a/sys-apps/shadow/ChangeLog
+++ b/sys-apps/shadow/ChangeLog
@@ -1,6 +1,16 @@
 # ChangeLog for sys-apps/shadow
 # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.116 2005/08/01 11:47:37 azarah Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.117 2005/08/03 18:56:46 azarah Exp $
+
+*shadow-4.0.11.1-r1 (03 Aug 2005)
+
+  03 Aug 2005; Martin Schlemmer <azarah@gentoo.org>
+  +files/shadow-4.0.11.1-SUPATH.patch,
+  +files/shadow-4.0.11.1-ngettext.patch,
+  +files/shadow-4.0.11.1-uclibc-missing-l64a.patch,
+  +shadow-4.0.11.1-r1.ebuild:
+  Checked with upstream .. SUPATH and PATH valid again for PAM (bug #101047).
+  Fix building on UCLIBC.
 
 *shadow-4.0.11.1 (01 Aug 2005)
 
diff --git a/sys-apps/shadow/Manifest b/sys-apps/shadow/Manifest
index a1ae8bcab93b..8f7191039887 100644
--- a/sys-apps/shadow/Manifest
+++ b/sys-apps/shadow/Manifest
@@ -1,79 +1,73 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
-MD5 ac3c5c29460f248d06d4ef83c96ca912 shadow-4.0.7-r1.ebuild 6602
 MD5 2581b4daddefcf73a30d69ac42fdfd1a shadow-4.0.5-r3.ebuild 5614
-MD5 0faad34d69a5e1bba61af947618ae795 shadow-4.0.7-r4.ebuild 7206
-MD5 9a09f8d531c582e78977dbfd96edc1f2 metadata.xml 164
-MD5 c2ab407aa2ff8ce76a2600f2d4c6a3b2 shadow-4.0.7-r3.ebuild 7074
+MD5 db870979ea0f600d0bd8137520e2251a shadow-4.0.4.1-r4.ebuild 5961
 MD5 a51d02eb155feb33913816239bb3cf57 shadow-4.0.7.ebuild 5602
-MD5 45dacbf514dc7fc556ac8088d18ceda2 shadow-4.0.11.1.ebuild 6787
-MD5 06049e2959c62c88aee32422a37bf07f shadow-4.0.6-r1.ebuild 5641
-MD5 fad39eceb7fd04f2805c6acc16c59d57 shadow-4.0.5-r2.ebuild 5440
+MD5 c2ab407aa2ff8ce76a2600f2d4c6a3b2 shadow-4.0.7-r3.ebuild 7074
+MD5 0faad34d69a5e1bba61af947618ae795 shadow-4.0.7-r4.ebuild 7206
 MD5 5c67a171ae58363c905c519129df38c4 ChangeLog 21557
-MD5 db870979ea0f600d0bd8137520e2251a shadow-4.0.4.1-r4.ebuild 5961
+MD5 fe05ae3df6e7ba8f80c93d14ed85ab2a shadow-4.0.11.1-r1.ebuild 6969
 MD5 ad25974e54da8203a96dddffef6a46ce shadow-4.0.10.ebuild 6753
-MD5 962e753a4789598d75532745e1f3e6cf files/digest-shadow-4.0.10 67
-MD5 e32464f2df5a85f4f6c67bc78e9a23d1 files/shadow-4.0.7-nscd-socket-path.patch 1081
+MD5 ac3c5c29460f248d06d4ef83c96ca912 shadow-4.0.7-r1.ebuild 6602
+MD5 fad39eceb7fd04f2805c6acc16c59d57 shadow-4.0.5-r2.ebuild 5440
+MD5 06049e2959c62c88aee32422a37bf07f shadow-4.0.6-r1.ebuild 5641
+MD5 9a09f8d531c582e78977dbfd96edc1f2 metadata.xml 164
 MD5 20fd2dc35b8671b91e120b90281b4cf3 files/shadow-4.0.5-hack-X-envvars.patch 521
+MD5 d06833980d79d4f001b6064a3f52f938 files/shadow-4.0.7-iswheel.patch 416
+MD5 70b7c7f1725841e335e5f2361fc9ebab files/shadow-4.0.7-nscd-EPIPE-failure.patch 947
+MD5 d14e133da535d64d1b397784e17c213a files/shadow-4.0.5-login.defs.patch 766
+MD5 b4d0fc0f54800978591791493d6b2ec3 files/shadow-4.0.6-dots-in-usernames.patch 1993
+MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7-r4 66
+MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7-r3 66
+MD5 e983d3bcaf48f607dc79c9c69b5238a5 files/shadow-4.0.11.1-SUPATH.patch 878
+MD5 6355d65b618395c4adf46f733269546c files/shadow-4.0.10-dots-in-usernames.patch 1894
+MD5 d8b8542a7bc013011a293732ca504a50 files/digest-shadow-4.0.5-r2 66
+MD5 3a50ee0f5e03479ab7db7f3987cd8107 files/shadow-4.0.11.1-ngettext.patch 1064
+MD5 c5e9081ed43837797e2f1617b7ce1c24 files/shadow-4.0.5-fix-adding-of-pam_env-set-env-vars.patch 285
+MD5 c87c0968ace90b32753b91f93ad7bab1 files/shadow-4.0.11.1-uclibc-missing-l64a.patch 1269
+MD5 391991f50203bd8b7738474051befdee files/shadow-4.0.5-remove-else.patch 531
+MD5 ae5d078bc6b651b5f081dcfc64b5df69 files/shadow-4.0.11.1-perms.patch 1659
+MD5 e32464f2df5a85f4f6c67bc78e9a23d1 files/shadow-4.0.7-nscd-socket-path.patch 1081
+MD5 aaf16ddabef285df169e37254b13561c files/shadow-4.0.4.1-selinux.diff 4296
+MD5 fda41657b856ffaeec5a2734b312409b files/shadow-4.0.5-fix-mail-configure.patch 5452
+MD5 e9ac6a566b65499773437ce98911a046 files/digest-shadow-4.0.6-r1 66
+MD5 201f1321262da41ccd1a0283216ae9a7 files/shadow-4.0.4.1-su-pam_open_session.patch 4886
+MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7 66
+MD5 c31db5c71b0cdfca75346abc2887aa02 files/shadow-4.0.5-nls-manpages.patch 362
+MD5 aaedecd7edcccff66f962fd82928eec9 files/shadow-4.0.10-long-groupnames.patch 1205
+MD5 a99f871c88548d503bad935d2aa6f412 files/shadow-4.0.4.1-nls-manpages.patch 355
+MD5 d8b8542a7bc013011a293732ca504a50 files/digest-shadow-4.0.5-r3 66
 MD5 8bf11ce0e8ee683fe290462473871dab files/shadow-4.0.6-long-groupnames.patch 1625
-MD5 9375147f78a25196b654616c969af9a5 files/digest-shadow-4.0.11.1 69
+MD5 a744152ec905f4c06f3b92142b7fec8a files/securetty 253
 MD5 020e030c2d09b206e88cf9051ced6244 files/shadow-4.0.4.1-nonis.patch 1504
-MD5 aaf16ddabef285df169e37254b13561c files/shadow-4.0.4.1-selinux.diff 4296
-MD5 c5e9081ed43837797e2f1617b7ce1c24 files/shadow-4.0.5-fix-adding-of-pam_env-set-env-vars.patch 285
-MD5 7becc41b4f7264483ee3ff0ca8277084 files/shadow-4.0.4.1-passwd-typo.patch 438
+MD5 bb55107c3a9354ef2d1977547fdb5a83 files/shadow-4.0.4.1-useradd-manpage-update.patch 958
+MD5 9375147f78a25196b654616c969af9a5 files/digest-shadow-4.0.11.1 69
 MD5 f9846ea2aeefba54443ef5d6796f0bbc files/shadow-4.0.10-nls-manpages.patch 367
+MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7-r1 66
+MD5 058f760e522ab65e270293003805fe61 files/shadow-4.0.4.1-userdel-missing-brackets.patch 380
 MD5 b8efca60a25e256eebe54c3d0db0760f files/shadow-4.0.4.1-gcc34-xmalloc.patch 361
 MD5 90e2ab53494f677dc23b5137d6e39110 files/shadow-4.0.6-fix-configure.patch 3047
-MD5 13cddd2e24cbcaf5164e13f9105c222c files/shadow-4.0.7-perms.patch 1768
-MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7-r1 66
+MD5 636f233fa173a998195016c3808173d4 files/shadow-4.0.5-skey.patch 395
 MD5 fdb23bff28b70bd53f200379c33dd27c files/shadow-4.0.10-nonis.patch 1434
+MD5 13cddd2e24cbcaf5164e13f9105c222c files/shadow-4.0.7-perms.patch 1768
+MD5 962e753a4789598d75532745e1f3e6cf files/digest-shadow-4.0.10 67
 MD5 cef6788bc7c8c5468c1b1f68df77ed9e files/digest-shadow-4.0.4.1-r4 67
-MD5 a99f871c88548d503bad935d2aa6f412 files/shadow-4.0.4.1-nls-manpages.patch 355
-MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7-r4 66
-MD5 d14e133da535d64d1b397784e17c213a files/shadow-4.0.5-login.defs.patch 766
-MD5 058f760e522ab65e270293003805fe61 files/shadow-4.0.4.1-userdel-missing-brackets.patch 380
-MD5 aaedecd7edcccff66f962fd82928eec9 files/shadow-4.0.10-long-groupnames.patch 1205
-MD5 a744152ec905f4c06f3b92142b7fec8a files/securetty 253
-MD5 b4d0fc0f54800978591791493d6b2ec3 files/shadow-4.0.6-dots-in-usernames.patch 1993
-MD5 bb55107c3a9354ef2d1977547fdb5a83 files/shadow-4.0.4.1-useradd-manpage-update.patch 958
-MD5 e9ac6a566b65499773437ce98911a046 files/digest-shadow-4.0.6-r1 66
-MD5 d8b8542a7bc013011a293732ca504a50 files/digest-shadow-4.0.5-r2 66
-MD5 201f1321262da41ccd1a0283216ae9a7 files/shadow-4.0.4.1-su-pam_open_session.patch 4886
+MD5 95f7b8980169e81352229bd548909ea7 files/shadow-4.0.10-fix-configure.patch 579
 MD5 d15398f7d8c06b906abdf73ae3a55f54 files/shadow-4.0.6-manpages.patch 564
-MD5 636f233fa173a998195016c3808173d4 files/shadow-4.0.5-skey.patch 395
-MD5 d8b8542a7bc013011a293732ca504a50 files/digest-shadow-4.0.5-r3 66
-MD5 391991f50203bd8b7738474051befdee files/shadow-4.0.5-remove-else.patch 531
-MD5 ae5d078bc6b651b5f081dcfc64b5df69 files/shadow-4.0.11.1-perms.patch 1659
-MD5 c31db5c71b0cdfca75346abc2887aa02 files/shadow-4.0.5-nls-manpages.patch 362
-MD5 6355d65b618395c4adf46f733269546c files/shadow-4.0.10-dots-in-usernames.patch 1894
-MD5 fda41657b856ffaeec5a2734b312409b files/shadow-4.0.5-fix-mail-configure.patch 5452
-MD5 70b7c7f1725841e335e5f2361fc9ebab files/shadow-4.0.7-nscd-EPIPE-failure.patch 947
-MD5 d06833980d79d4f001b6064a3f52f938 files/shadow-4.0.7-iswheel.patch 416
 MD5 a63ee37286c486567191c7c6b24432e2 files/shadow-4.0.7-lastlog.patch 455
-MD5 95f7b8980169e81352229bd548909ea7 files/shadow-4.0.10-fix-configure.patch 579
-MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7-r3 66
-MD5 46c2be2ed8b26ec007e3ed1f476491d8 files/digest-shadow-4.0.7 66
-MD5 6e0bc0211949c624da0ea08d994a7038 files/default/useradd 96
-MD5 4b7d75b12f1bea9f349dff4c48c18b8b files/pam.d-include/login 245
-MD5 97b4f01b65fd3b8caa8983489e9b6848 files/pam.d-include/su 1059
+MD5 7becc41b4f7264483ee3ff0ca8277084 files/shadow-4.0.4.1-passwd-typo.patch 438
+MD5 9375147f78a25196b654616c969af9a5 files/digest-shadow-4.0.11.1-r1 69
 MD5 33d9efd092b6999143ea42c99a59bfb1 files/pam.d-include/system-auth-1.1 365
 MD5 e3a7d5b7abee1ba6e7f09ee607da87ba files/pam.d-include/su-openpam 249
-MD5 5df27e06de913de76e24790642eecfd2 files/pam.d-include/passwd 104
-MD5 5bff4f2134b72dabc4afa5bb296e874d files/pam.d-include/other 142
 MD5 caa5f36d54cb7a75ce5728f7f1badafb files/pam.d-include/system-auth 380
+MD5 4b7d75b12f1bea9f349dff4c48c18b8b files/pam.d-include/login 245
+MD5 97b4f01b65fd3b8caa8983489e9b6848 files/pam.d-include/su 1059
 MD5 50d7c96eab701fd6ddbf4b283e493b4c files/pam.d-include/shadow 152
+MD5 5df27e06de913de76e24790642eecfd2 files/pam.d-include/passwd 104
+MD5 5bff4f2134b72dabc4afa5bb296e874d files/pam.d-include/other 142
+MD5 6e0bc0211949c624da0ea08d994a7038 files/default/useradd 96
+MD5 33d9efd092b6999143ea42c99a59bfb1 files/pam.d/system-auth-1.1 365
+MD5 deed69f8fa52ca844f3669414bd5cf01 files/pam.d/system-auth 373
 MD5 987d0bd2e5dd1f96dc28ae2963054022 files/pam.d/login 333
 MD5 a1fc81dbd0d41face776fba4ca929d8f files/pam.d/su 1142
-MD5 33d9efd092b6999143ea42c99a59bfb1 files/pam.d/system-auth-1.1 365
+MD5 a5721c39446539b751dceae4b054542b files/pam.d/shadow 171
 MD5 8a59937d720a19824db6e4a8cd173a4b files/pam.d/passwd 172
 MD5 5bff4f2134b72dabc4afa5bb296e874d files/pam.d/other 142
-MD5 deed69f8fa52ca844f3669414bd5cf01 files/pam.d/system-auth 373
-MD5 a5721c39446539b751dceae4b054542b files/pam.d/shadow 171
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.1 (GNU/Linux)
-
-iD8DBQFC8BzCgIKl8Uu19MoRAu/sAJ9X8LBRcORZ3mxBDoKvzsqq8ka/0QCeORBB
-Q6ZdoNqHzQqCgZ0VSqLCJi0=
-=Mbf6
------END PGP SIGNATURE-----
diff --git a/sys-apps/shadow/files/digest-shadow-4.0.11.1-r1 b/sys-apps/shadow/files/digest-shadow-4.0.11.1-r1
new file mode 100644
index 000000000000..797d6633880d
--- /dev/null
+++ b/sys-apps/shadow/files/digest-shadow-4.0.11.1-r1
@@ -0,0 +1 @@
+MD5 e60b7b16128b9e00576073389a0ff1e6 shadow-4.0.11.1.tar.bz2 1056103
diff --git a/sys-apps/shadow/files/shadow-4.0.11.1-SUPATH.patch b/sys-apps/shadow/files/shadow-4.0.11.1-SUPATH.patch
new file mode 100644
index 000000000000..7cbb8b73f8c2
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.0.11.1-SUPATH.patch
@@ -0,0 +1,45 @@
+diff -urp shadow-4.0.11.1/lib/getdef.c shadow-4.0.11.1.az/lib/getdef.c
+--- shadow-4.0.11.1/lib/getdef.c	2005-07-12 20:54:39.000000000 +0200
++++ shadow-4.0.11.1.az/lib/getdef.c	2005-08-03 20:35:10.000000000 +0200
+@@ -61,9 +61,7 @@ static struct itemdef def_table[] = {
+ 	{"CHSH_AUTH", NULL},
+ 	{"CRACKLIB_DICTPATH", NULL},
+ 	{"ENV_HZ", NULL},
+-	{"ENV_PATH", NULL},
+ 	{"ENV_ROOTPATH", NULL},	/* SuSE compatibility? */
+-	{"ENV_SUPATH", NULL},
+ 	{"ENV_TZ", NULL},
+ 	{"ENVIRON_FILE", NULL},
+ 	{"FAILLOG_ENAB", NULL},
+@@ -87,6 +85,8 @@ static struct itemdef def_table[] = {
+ 	{"QUOTAS_ENAB", NULL},
+ 	{"ULIMIT", NULL},
+ #endif
++	{"ENV_PATH", NULL},
++	{"ENV_SUPATH", NULL},
+ 	{"CONSOLE_GROUPS", NULL},
+ 	{"CONSOLE", NULL},
+ 	{"CREATE_HOME", NULL},
+diff -urp shadow-4.0.11.1/src/su.c shadow-4.0.11.1.az/src/su.c
+--- shadow-4.0.11.1/src/su.c	2005-07-18 12:14:39.000000000 +0200
++++ shadow-4.0.11.1.az/src/su.c	2005-08-03 20:34:02.000000000 +0200
+@@ -584,10 +584,8 @@ int main (int argc, char **argv)
+ #endif				/* !USE_PAM */
+ 
+ 	signal (SIGINT, SIG_DFL);
+-#ifndef USE_PAM
+-	cp = getdef_str ((pwent.pw_uid == 0) ? "ENV_SUPATH" : "ENV_PATH");
+ 
+-	/* XXX very similar code duplicated in libmisc/setupenv.c */
++	cp = getdef_str ((pwent.pw_uid == 0) ? "ENV_SUPATH" : "ENV_PATH");
+ 	if (!cp) {
+ 		addenv ("PATH=/bin:/usr/bin", NULL);
+ 	} else if (strchr (cp, '=')) {
+@@ -597,7 +595,6 @@ int main (int argc, char **argv)
+ 	}
+ 
+ 	environ = newenvp;	/* make new environment active */
+-#endif				/* !USE_PAM */
+ 
+ 	if (getenv ("IFS"))	/* don't export user IFS ... */
+ 		addenv ("IFS= \t\n", NULL);	/* ... instead, set a safe IFS */
diff --git a/sys-apps/shadow/files/shadow-4.0.11.1-ngettext.patch b/sys-apps/shadow/files/shadow-4.0.11.1-ngettext.patch
new file mode 100644
index 000000000000..9eba2c07220a
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.0.11.1-ngettext.patch
@@ -0,0 +1,28 @@
+New ngettext stuff borks on UCLIBC, as ngettext do not have a !ENABLE_NLS
+define.  Add a check for ngettext and add the ngettext define.  Both was
+inspired by coreutils.
+
+diff -urp shadow-4.0.11.1/configure.in shadow-4.0.11.1.az/configure.in
+--- shadow-4.0.11.1/configure.in	2005-08-03 00:59:56.000000000 +0200
++++ shadow-4.0.11.1.az/configure.in	2005-08-03 12:04:55.000000000 +0200
+@@ -280,6 +280,6 @@ if test "$with_libskey" = "yes"; then
+ fi
+ 
+ AM_GNU_GETTEXT_VERSION(0.12.1)
+-AM_GNU_GETTEXT([external])
++AM_GNU_GETTEXT([external], [need-ngettext])
+ 
+ AC_CONFIG_FILES([
+ 	Makefile
+diff -urp shadow-4.0.11.1/lib/defines.h shadow-4.0.11.1.az/lib/defines.h
+--- shadow-4.0.11.1/lib/defines.h	2005-06-14 22:27:48.000000000 +0200
++++ shadow-4.0.11.1.az/lib/defines.h	2005-08-03 12:06:42.000000000 +0200
+@@ -24,6 +24,8 @@
+ # undef textdomain
+ # define textdomain(Domain)	/* empty */
+ # define _(Text) Text
++# define ngettext(Msgid1, Msgid2, N) \
++    ((N) == 1 ? (const char *) (Msgid1) : (const char *) (Msgid2))
+ #endif
+ 
+ #if STDC_HEADERS
diff --git a/sys-apps/shadow/files/shadow-4.0.11.1-uclibc-missing-l64a.patch b/sys-apps/shadow/files/shadow-4.0.11.1-uclibc-missing-l64a.patch
new file mode 100644
index 000000000000..8b6b87d8385f
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.0.11.1-uclibc-missing-l64a.patch
@@ -0,0 +1,64 @@
+UCLIBC have the prototypes in stdlib.h, but not the actual functions (yes, you
+guys sucks once again.  The better way might be rather to add lib/rad64.c back,
+but its higher maintainence our side at least.
+
+--- shadow-4.0.11.1/libmisc/salt.c	2005-08-03 12:50:45.000000000 +0200
++++ shadow-4.0.11.1.az/libmisc/salt.c	2005-08-03 13:07:03.000000000 +0200
+@@ -14,6 +14,57 @@
+ #include "prototypes.h"
+ #include "defines.h"
+ #include "getdef.h"
++
++#ifndef HAVE_A64L
++
++/*
++ * i64c - convert an integer to a radix 64 character
++ */
++
++int
++i64c(int i)
++{
++	if (i <= 0)
++		return ('.');
++
++	if (i == 1)
++		return ('/');
++
++	if (i >= 2 && i < 12)
++		return ('0' - 2 + i);
++
++	if (i >= 12 && i < 38)
++		return ('A' - 12 + i);
++
++	if (i >= 38 && i < 63)
++		return ('a' - 38 + i);
++
++	return ('z');
++}
++
++/*
++ * l64a - convert a long to a string of radix 64 characters
++ */
++
++char *
++l64a(long l)
++{
++	static	char	buf[8];
++	int	i = 0;
++
++	if (l < 0L)
++		return ((char *) 0);
++
++	do {
++		buf[i++] = i64c ((int) (l % 64));
++		buf[i] = '\0';
++	} while (l /= 64L, l > 0 && i < 6);
++
++	return (buf);
++}
++
++#endif /* !HAVE_A64L */
++
+ /*
+  * Generate 8 base64 ASCII characters of random salt.  If MD5_CRYPT_ENAB
+  * in /etc/login.defs is "yes", the salt string will be prefixed by "$1$"
diff --git a/sys-apps/shadow/shadow-4.0.11.1-r1.ebuild b/sys-apps/shadow/shadow-4.0.11.1-r1.ebuild
new file mode 100644
index 000000000000..18a9d86a6b84
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.0.11.1-r1.ebuild
@@ -0,0 +1,237 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.0.11.1-r1.ebuild,v 1.1 2005/08/03 18:56:46 azarah Exp $
+
+inherit eutils libtool toolchain-funcs flag-o-matic
+
+# We should remove this login after pam-0.78 goes stable.
+FORCE_SYSTEMAUTH_UPDATE="no"
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/"
+SRC_URI="ftp://ftp.pld.org.pl/software/${PN}/${P}.tar.bz2"
+
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="nls pam selinux skey nousuid"
+
+RDEPEND=">=sys-libs/cracklib-2.7-r3
+	pam? ( virtual/pam )
+	!pam? ( !sys-apps/pam-login )
+	skey? ( app-admin/skey )
+	selinux? ( sys-libs/libselinux )"
+DEPEND="${RDEPEND}
+	>=sys-apps/portage-2.0.51-r2
+	nls? ( sys-devel/gettext )"
+# We moved /etc/pam.d/login to pam-login
+PDEPEND="pam? ( >=sys-apps/pam-login-4.0.11.1-r2 )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+
+	# uclibc support, corrects NIS usage
+	epatch "${FILESDIR}"/${PN}-4.0.10-nonis.patch
+
+	# If su should not simulate a login shell, use '/bin/sh' as shell to enable
+	# running of commands as user with /bin/false as shell, closing bug #15015.
+	# *** This one could be a security hole; disable for now ***
+	#epatch "${FILESDIR}"/${P}-nologin-run-sh.patch
+
+	# don't install manpages if USE=-nls
+	epatch "${FILESDIR}"/${PN}-4.0.10-nls-manpages.patch
+
+	# tweak the default login.defs
+	epatch "${FILESDIR}"/${PN}-4.0.5-login.defs.patch
+
+	# The new configure changes do not detect utmp/logdir properly
+	epatch "${FILESDIR}"/${PN}-4.0.10-fix-configure.patch
+
+	# skeychallenge call needs updating #69741
+	epatch "${FILESDIR}"/shadow-4.0.5-skey.patch
+
+	# Make user/group names more flexible #3485 / #22920
+	epatch "${FILESDIR}"/${PN}-4.0.10-dots-in-usernames.patch
+	epatch "${FILESDIR}"/${PN}-4.0.10-long-groupnames.patch
+
+	# Checked with upstream .. SUPATH and PATH valid again for PAM (bug #101047)
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-SUPATH.patch
+
+	# Some UCLIBC patches
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-ngettext.patch
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-uclibc-missing-l64a.patch
+
+	# lock down setuid perms #47208
+	epatch "${FILESDIR}"/${PN}-4.0.11.1-perms.patch
+
+	elibtoolize
+	epunt_cxx
+
+	# Needed by the UCLIBC patches
+	autoconf
+}
+
+src_compile() {
+	append-ldflags -Wl,-z,now
+	[[ ${CTARGET:-${CHOST}} != ${CHOST} ]] \
+		&& export ac_cv_func_setpgrp_void=yes
+	econf \
+		--disable-desrpc \
+		--with-libcrypt \
+		--with-libcrack \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with pam libpam) \
+		$(use_with skey libskey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		|| die "bad configure"
+	emake || die "compile problem"
+}
+
+src_install() {
+	local perms=4711
+	use nousuid && perms=711
+	make DESTDIR=${D} suiduperms=${perms} install || die "install problem"
+	dosym useradd /usr/sbin/adduser
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	if use pam; then
+		# These is now shipped with pam-login, and login
+		# had/have a serious root exploit with pam support
+		# enabled.
+		for x in "${D}"/bin/login \
+		         "${D}"/usr/bin/faillog "${D}"/usr/bin/lastlog \
+		         "${D}"/usr/share/man/man1/login.1* \
+		         "${D}"/usr/share/man/man5/login.{access,defs}.5* \
+		         "${D}"/usr/share/man/man5/faillog.5* \
+		         "${D}"/usr/share/man/man8/lastlog.8* \
+		         "${D}"/usr/share/man/man8/faillog.8*; do
+				 [[ -f ${x} ]] && rm -f ${x}
+		done
+	fi
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	use pam || { insopts -m0600 ; doins etc/login.access ; }
+	use pam || { insopts -m0600 ; doins etc/limits ; }
+	# Output arch-specific cruft
+	case $(tc-arch) in
+		ppc64) echo "hvc0" >> "${D}"/etc/securetty
+		       echo "hvsi0" >> "${D}"/etc/securetty;;
+		hppa)  echo "ttyB0" >> "${D}"/etc/securetty;;
+		arm)   echo "ttyFB0" >> "${D}"/etc/securetty;;
+	esac
+
+	# needed for 'adduser -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${D}"/usr/bin/passwd "${D}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	if use pam ; then
+		local INSTALL_SYSTEM_PAMD="yes"
+
+		# Do not install below pam.d files if we have pam-0.78 or later
+		portageq has_version / '>=sys-libs/pam-0.78' && \
+			INSTALL_SYSTEM_PAMD="no"
+
+		for x in "${FILESDIR}"/pam.d-include/*; do
+			case "${x##*/}" in
+				"login")
+					# We do no longer install this one, as its from
+					# pam-login now.
+					;;
+				"system-auth"|"system-auth-1.1"|"other")
+					# These we only install if we do not have pam-0.78
+					# or later.
+					[ "${INSTALL_SYSTEM_PAMD}" = "yes" ] && [ -f ${x} ] && \
+						dopamd ${x}
+					;;
+				"su")
+					# Disable support for pam_env and pam_wheel on openpam
+					has_version sys-libs/pam && dopamd ${x}
+					;;
+				"su-openpam")
+					has_version sys-libs/openpam && newpamd ${x} su
+					;;
+				*)
+					[ -f ${x} ] && dopamd ${x}
+					;;
+			esac
+		done
+		for x in chage chsh chfn chpasswd newusers \
+		         user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x}
+		done
+
+		# Only add this one if needed.
+		if [ "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ]; then
+			newpamd "${FILESDIR}"/pam.d-include/system-auth-1.1 system-auth.new || \
+				die "Failed to install system-auth.new!"
+		fi
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+
+		find "${D}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} \;
+	else
+		insinto /etc
+		insopts -m0644
+		newins etc/login.defs.linux login.defs
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${D}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} \;
+
+	cd "${S}"/doc
+	dodoc INSTALL README WISHLIST
+	docinto txt
+	dodoc HOWTO LSM README.* *.txt
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}"/etc/pam.d/system-auth.new
+}
+
+pkg_postinst() {
+	use pam || return 0;
+
+	if [ "${FORCE_SYSTEMAUTH_UPDATE}" = "yes" ]; then
+		local CHECK1="$(md5sum ${ROOT}/etc/pam.d/system-auth | cut -d ' ' -f 1)"
+		local CHECK2="$(md5sum ${ROOT}/etc/pam.d/system-auth.new | cut -d ' ' -f 1)"
+
+		if [ "${CHECK1}" != "${CHECK2}" ]; then
+			ewarn "Due to a security issue, ${ROOT}etc/pam.d/system-auth "
+			ewarn "is being updated automatically. Your old "
+			ewarn "system-auth will be backed up as:"
+			ewarn
+			ewarn "  ${ROOT}etc/pam.d/system-auth.bak"
+			echo
+
+			cp -a ${ROOT}/etc/pam.d/system-auth \
+				${ROOT}/etc/pam.d/system-auth.bak;
+			mv -f ${ROOT}/etc/pam.d/system-auth.new \
+				${ROOT}/etc/pam.d/system-auth
+			rm -f ${ROOT}/etc/pam.d/._cfg????_system-auth
+		else
+			rm -f ${ROOT}/etc/pam.d/system-auth.new
+		fi
+	fi
+}