Version bump for kernel attribute vulnerabilities, bug #56479.

4 files changed, 32 insertions, 2 deletions

diff --git a/sys-kernel/pac-sources/ChangeLog b/sys-kernel/pac-sources/ChangeLog
index 5d1a7dfa5144..20cb440c5c21 100644
--- a/sys-kernel/pac-sources/ChangeLog
+++ b/sys-kernel/pac-sources/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sys-kernel/pac-sources
 # Copyright 2002-2004 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/pac-sources/ChangeLog,v 1.11 2004/06/25 19:36:56 plasmaroo Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/pac-sources/ChangeLog,v 1.12 2004/07/09 15:43:46 plasmaroo Exp $
+
+*pac-sources-2.4.23-r9 (09 Jul 2004)
+
+  09 Jul 2004; <plasmaroo@gentoo.org> -pac-sources-2.4.23-r8.ebuild,
+  +pac-sources-2.4.23-r9.ebuild, +files/pac-sources.CAN-2004-0497.patch:
+  Version bump for kernel attribute vulnerabilities, bug #56479.
 
 *pac-sources-2.4.23-r8 (25 Jun 2004)
 
diff --git a/sys-kernel/pac-sources/files/digest-pac-sources-2.4.23-r8 b/sys-kernel/pac-sources/files/digest-pac-sources-2.4.23-r9
index 75e05aae1086..75e05aae1086 100644
--- a/sys-kernel/pac-sources/files/digest-pac-sources-2.4.23-r8
+++ b/sys-kernel/pac-sources/files/digest-pac-sources-2.4.23-r9
diff --git a/sys-kernel/pac-sources/files/pac-sources.CAN-2004-0497.patch b/sys-kernel/pac-sources/files/pac-sources.CAN-2004-0497.patch
new file mode 100644
index 000000000000..9503e9efe57b
--- /dev/null
+++ b/sys-kernel/pac-sources/files/pac-sources.CAN-2004-0497.patch
@@ -0,0 +1,23 @@
+# ChangeSet
+#
+# fs/attr.c
+#   2004/07/03 18:28:30-03:00 marcelo@logos.cnet +1 -0
+#   Thomas Biege: Fix missing DAC check on sys_chown
+# 
+# fs/attr.c
+#   2004/07/03 19:28:29-03:00 marcelo@logos.cnet +1 -1
+#   Add missing bracket to inode_change_ok() fix
+# 
+diff -Nru a/fs/attr.c b.plasmaroo/fs/attr.c
+--- a/fs/attr.c	2004-07-08 17:05:20 -07:00
++++ b.plasmaroo/fs/attr.c	2004-07-08 17:05:20 -07:00
+@@ -35,7 +35,8 @@
+ 
+ 	/* Make sure caller can chgrp. */
+ 	if ((ia_valid & ATTR_GID) &&
+-	    (!in_group_p(attr->ia_gid) && attr->ia_gid != inode->i_gid) &&
++	    (current->fsuid != inode->i_uid ||
++	    (!in_group_p(attr->ia_gid) && attr->ia_gid != inode->i_gid)) &&
+ 	    !capable(CAP_CHOWN))
+ 		goto error;
+ 
diff --git a/sys-kernel/pac-sources/pac-sources-2.4.23-r8.ebuild b/sys-kernel/pac-sources/pac-sources-2.4.23-r9.ebuild
index a611f2653e73..8af307180924 100644
--- a/sys-kernel/pac-sources/pac-sources-2.4.23-r8.ebuild
+++ b/sys-kernel/pac-sources/pac-sources-2.4.23-r9.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-kernel/pac-sources/pac-sources-2.4.23-r8.ebuild,v 1.1 2004/06/25 19:36:56 plasmaroo Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/pac-sources/pac-sources-2.4.23-r9.ebuild,v 1.1 2004/07/09 15:43:46 plasmaroo Exp $
 
 IUSE="build"
 ETYPE="sources"
@@ -67,6 +67,7 @@ src_unpack() {
 	epatch ${FILESDIR}/${PN}.CAN-2004-0394.patch || die "Failed to add the CAN-2004-0394 patch!"
 	epatch ${FILESDIR}/${PN}.CAN-2004-0427.patch || die "Failed to add the CAN-2004-0427 patch!"
 	epatch ${FILESDIR}/${PN}.CAN-2004-0495.patch || die "Failed to add the CAN-2004-0495 patch!"
+	epatch ${FILESDIR}/${PN}.CAN-2004-0497.patch || die "Failed to add the CAN-2004-0497 patch!"
 	epatch ${FILESDIR}/${PN}.CAN-2004-0535.patch || die "Failed to add the CAN-2004-0535 patch!"
 	epatch ${FILESDIR}/${PN}.FPULockup-53804.patch || die "Failed to apply FPU-lockup patch!"
 	kernel_universal_unpack