net-mail/gmail-notify: Added a patch to make gmail-notify put 660 permissions on the ~/.notifier.conf file, so that the plaintext gmail password stored there isn't available for all the world to see

svn path=/sunrise/; revision=1359

4 files changed, 34 insertions, 10 deletions

diff --git a/net-mail/gmail-notify/ChangeLog b/net-mail/gmail-notify/ChangeLog
index b3d0f0af0..52f6d2f65 100644
--- a/net-mail/gmail-notify/ChangeLog
+++ b/net-mail/gmail-notify/ChangeLog
@@ -2,6 +2,12 @@
 # Copyright 1999-2006 Gentoo Foundation; Distributed under the GPL v2
 # $Header: $
 
+  28 Sep 2006; David Grant (dgrant) <davidgrant@gmail.com>
+  gmail-notify-1.6.1.ebuild, +files/gmail-notify-conf-perms.patch:
+  Added a patch to make gmail-notify put 660 permissions on the
+  ~/.notifier.conf file, so that the plaintext gmail password stored there
+  isn't available for all the world to see
+
   26 Sep 2006; David Grant (dgrant) <davidgrant@gmail.com>
   gmail-notify-1.6.1.ebuild, +files/gmail-notify-trayicon.patch,
   +files/gmail-notify-ubuntu-patches.patch:
diff --git a/net-mail/gmail-notify/Manifest b/net-mail/gmail-notify/Manifest
index caedcffd2..58051a5a3 100644
--- a/net-mail/gmail-notify/Manifest
+++ b/net-mail/gmail-notify/Manifest
@@ -1,3 +1,7 @@
+AUX gmail-notify-conf-perms.patch 571 RMD160 d4b9805cd595a9da0d7b08e534ef0f825dc682ae SHA1 afa23b7806413ed7b6a2acc8b3ba7cac8fed2895 SHA256 aef0e1e72c8037897ae1ba50bb757a1e3cb3382ea886169e1a3ecc7b47f8f48d
+MD5 b850853d757fc0c6c02242cdb3a8359d files/gmail-notify-conf-perms.patch 571
+RMD160 d4b9805cd595a9da0d7b08e534ef0f825dc682ae files/gmail-notify-conf-perms.patch 571
+SHA256 aef0e1e72c8037897ae1ba50bb757a1e3cb3382ea886169e1a3ecc7b47f8f48d files/gmail-notify-conf-perms.patch 571
 AUX gmail-notify-trayicon.patch 696 RMD160 51b69fedf84f3b9b7ad88dc70809bd1c88ef065e SHA1 89c6a6766a3a0d04de4218bddaf36746357ce067 SHA256 856e020a4604880050fea5d1137273720e75545d49cc950de75e2d90076ba1cf
 MD5 3210db0cc134101ea6068498c725423d files/gmail-notify-trayicon.patch 696
 RMD160 51b69fedf84f3b9b7ad88dc70809bd1c88ef065e files/gmail-notify-trayicon.patch 696
@@ -7,14 +11,14 @@ MD5 6d1d743598ae3f53da04913c60017456 files/gmail-notify-ubuntu-patches.patch 188
 RMD160 af0d473d2c85980d1d1d47cbda5e75a5144ee8db files/gmail-notify-ubuntu-patches.patch 1884
 SHA256 48d30024c402eea2311a4950f04bf1fde5e202a5deaae5ad160d5c9d8897bf78 files/gmail-notify-ubuntu-patches.patch 1884
 DIST gmail-notify-1.6.1.tar.gz 26348 RMD160 2589814c80d808449310315c7cb9c4c7fe01e05e SHA1 8f5c075607b3e5c4f71a7ecc8c717d8736f37462 SHA256 e97c69a60443bf24c1bc404e85f4fe2bb525e91e80e7d6b5d710b00dcc51507d
-EBUILD gmail-notify-1.6.1.ebuild 1586 RMD160 05393eb3fb52de5009bec8ccd0ab76de39aa35b7 SHA1 7821ee8de7ca4be86dd4a2d87e8d837950efe1a2 SHA256 02ef4d8af21b2a59d6918dd854544dc9069aa93673c592f0ca3f9133f890b971
-MD5 144bcf6fa3b07bea5562aef27c649325 gmail-notify-1.6.1.ebuild 1586
-RMD160 05393eb3fb52de5009bec8ccd0ab76de39aa35b7 gmail-notify-1.6.1.ebuild 1586
-SHA256 02ef4d8af21b2a59d6918dd854544dc9069aa93673c592f0ca3f9133f890b971 gmail-notify-1.6.1.ebuild 1586
-MISC ChangeLog 746 RMD160 b6ed8214c7f888e41c2289d5421fa2aac1d92bc5 SHA1 eca937016a15a9a83134ea0c23a179c26eb3e109 SHA256 03037eefc655a5f9051dc46df1331048b475f60cf79b7dc93c0028de1442f05c
-MD5 5ba71ab4fea5927c8f9ccae692a2bc89 ChangeLog 746
-RMD160 b6ed8214c7f888e41c2289d5421fa2aac1d92bc5 ChangeLog 746
-SHA256 03037eefc655a5f9051dc46df1331048b475f60cf79b7dc93c0028de1442f05c ChangeLog 746
+EBUILD gmail-notify-1.6.1.ebuild 1506 RMD160 c13e2ad6ef9c3049c10882419d39909dad8788cb SHA1 9eeb1f72a18796d891653c7b36bd39310d4c3a70 SHA256 e2f6b2636ae6ec729d1f1fe5538c99f5384ce8f25aef6d5dd807a48093c74aee
+MD5 fb55d37fdf8c04202823ffcc1ae8e584 gmail-notify-1.6.1.ebuild 1506
+RMD160 c13e2ad6ef9c3049c10882419d39909dad8788cb gmail-notify-1.6.1.ebuild 1506
+SHA256 e2f6b2636ae6ec729d1f1fe5538c99f5384ce8f25aef6d5dd807a48093c74aee gmail-notify-1.6.1.ebuild 1506
+MISC ChangeLog 1055 RMD160 54c77aa6043a41670b6c8002e4f6fb078059eb6b SHA1 0169a053a016f257fa4042751b0bc93b48e5d4ef SHA256 235280d5bf841355d8d44caf32123fa1cbe9a547de00c905b094703b781eaf65
+MD5 e0253b506da07b13e4b4f7dbfbd930d3 ChangeLog 1055
+RMD160 54c77aa6043a41670b6c8002e4f6fb078059eb6b ChangeLog 1055
+SHA256 235280d5bf841355d8d44caf32123fa1cbe9a547de00c905b094703b781eaf65 ChangeLog 1055
 MISC metadata.xml 170 RMD160 645927a396fdc21cdeb089fe42c5397332420ea6 SHA1 ac7f48a14fec325926f9ce1be8fbf1f311b4f2e4 SHA256 d797a2ec6f9dc516c9f9c1a758ee87ad3e8c43101b5dc76c2f872d5bd4639b42
 MD5 1e678929a9fec6632e227bdf2262e9a1 metadata.xml 170
 RMD160 645927a396fdc21cdeb089fe42c5397332420ea6 metadata.xml 170
diff --git a/net-mail/gmail-notify/files/gmail-notify-conf-perms.patch b/net-mail/gmail-notify/files/gmail-notify-conf-perms.patch
new file mode 100644
index 000000000..2aff2e5f6
--- /dev/null
+++ b/net-mail/gmail-notify/files/gmail-notify-conf-perms.patch
@@ -0,0 +1,15 @@
+diff -u gmail-notify.orig/GmailConfig.py gmail-notify/GmailConfig.py
+--- gmail-notify.orig/GmailConfig.py	2006-09-25 23:23:50.000000000 -0700
++++ gmail-notify/GmailConfig.py	2006-09-27 20:51:03.000000000 -0700
+@@ -237,7 +237,10 @@
+ 				self.config.remove_option( "options", "gmailusername" )
+ 				self.config.remove_option( "options", "gmailpassword" )
+ 
+-			self.config.write( open( self.loadedConfig, 'w' ) )
++			fp=open(self.loadedConfig, 'w')
++			self.config.write(fp)
++			os.chmod(self.loadedConfig, 0600)
++			fp.close()
+ 			gtk.main_quit()
+ 			self.hide()
+ 		else:
diff --git a/net-mail/gmail-notify/gmail-notify-1.6.1.ebuild b/net-mail/gmail-notify/gmail-notify-1.6.1.ebuild
index bcb4acd0b..1e676e026 100644
--- a/net-mail/gmail-notify/gmail-notify-1.6.1.ebuild
+++ b/net-mail/gmail-notify/gmail-notify-1.6.1.ebuild
@@ -23,6 +23,7 @@ S=${WORKDIR}/${PN}
 src_unpack() {
 	python_version
 	unpack ${A}
+	epatch "${FILESDIR}/${PN}-conf-perms.patch"
 	epatch "${FILESDIR}/${PN}-trayicon.patch"
 	epatch "${FILESDIR}/${PN}-ubuntu-patches.patch"
 	cd ${S}
@@ -49,8 +50,6 @@ pkg_postinst() {
 	elog ""
 	elog "Warning: if you check the 'save username and password' option"
 	elog "your password will be stored in plaintext in ~/.notifier.conf"
-	elog "with world-readable permissions. If this concerns you, do not"
-	elog "check the 'save username and password' option."
 }
 
 pkg_postrm() {