Fix local privilege escaladation (#139477).

Package-Manager: portage-2.1-r1

6 files changed, 392 insertions, 15 deletions

diff --git a/net-dialup/ppp/ChangeLog b/net-dialup/ppp/ChangeLog
index 29f3c351f1ba..11c94fb5744a 100644
--- a/net-dialup/ppp/ChangeLog
+++ b/net-dialup/ppp/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for net-dialup/ppp
 # Copyright 2002-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-dialup/ppp/ChangeLog,v 1.146 2006/06/13 08:59:18 uberlord Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dialup/ppp/ChangeLog,v 1.147 2006/07/07 07:56:44 mrness Exp $
+
+*ppp-2.4.3-r16 (07 Jul 2006)
+
+  07 Jul 2006; Alin Nastac <mrness@gentoo.org> +ppp-2.4.3-r16.ebuild:
+  Fix local privilege escaladation (#139477).
 
   13 Jun 2006; <uberlord@gentoo.org> ppp-2.4.2-r15.ebuild,
   ppp-2.4.3-r15.ebuild:
diff --git a/net-dialup/ppp/Manifest b/net-dialup/ppp/Manifest
index e6d960406755..d6b9fa878980 100644
--- a/net-dialup/ppp/Manifest
+++ b/net-dialup/ppp/Manifest
@@ -1,3 +1,6 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
 AUX README.mpls 530 RMD160 4814f25fa3d788311f37045188cf285fb588da67 SHA1 fdf4abff10b2593ca9012429cf684243cc74fec6 SHA256 5ef99aba902533fe9d17b7dfaf91e72b638cc70b9f811d1e518822ee80b5ff57
 MD5 1fd88dda7f4996799c69a9501d42cc23 files/README.mpls 530
 RMD160 4814f25fa3d788311f37045188cf285fb588da67 files/README.mpls 530
@@ -62,12 +65,13 @@ AUX pppoe.html 7605 RMD160 e149a0dbac8a0ac32c02e1a4ad617572b1effbce SHA1 fd321cb
 MD5 f0ad3e0c62aec1771536caf00e28b9c6 files/pppoe.html 7605
 RMD160 e149a0dbac8a0ac32c02e1a4ad617572b1effbce files/pppoe.html 7605
 SHA256 88561486051134e35b20f9d64259854434c96cd9944c041b9779dc090511271a files/pppoe.html 7605
-DIST ppp-2.4.2-mppe-mppc-1.1.patch.gz 12532
-DIST ppp-2.4.2-patches-20060516.tar.gz 13311
-DIST ppp-2.4.2.tar.gz 774441
+DIST ppp-2.4.2-mppe-mppc-1.1.patch.gz 12532 RMD160 0c8b72528cc7828888702d81ebafa92f5f3d653e SHA1 e481dfcb9f0e0297459320495f827134bd3ba106 SHA256 e9fac630069ff1843f36ed222b3348c3a996711e6b00411aeaee7882d7e33eee
+DIST ppp-2.4.2-patches-20060516.tar.gz 13311 RMD160 163c89891cb46a8ed70720904c9861e72ff0abee SHA1 d96a251f78ab5ecad6ae6ec6620a578d51b165ce SHA256 9604cd6bafa6ee3321b0c0b6211d6d86963979cdbc6411eca0b87bc8daa544da
+DIST ppp-2.4.2.tar.gz 774441 RMD160 49a3871cb2e20e749201962df31017203603eaa5 SHA1 fc58efe96e3b8af281695d1e3a3d0c2176e8c0b7 SHA256 b54984548fd6ef47abd7f8f2d97d4c6660690b6e0e35fb30b99ef6d3cd62d35a
 DIST ppp-2.4.3-patches-20060507.tar.gz 56282 RMD160 a16180232a6dabc9e3c00af7a473576d864928d5 SHA1 8ea760f913fd6f0a535b096bdac83a078d99c4d6 SHA256 09c6103316ea5daad0ffaf6bfdefe62131a108ec071fd071e94df316ca2821f9
+DIST ppp-2.4.3-patches-20060707.tar.gz 56533 RMD160 8f1d1fc00cb304b9cadbd0a17234c7456d67f919 SHA1 18f739f0cc05b395ae4bfe024d598e80e1b2288d SHA256 80f45fa9268eec6361600cec32a647d2e89ff12b230f6b384dca09a1cc9ab9bb
 DIST ppp-2.4.3.tar.gz 688092 RMD160 845821496bacb07d93bb7572a171854853ef722b SHA1 5e2789f4dedc81943fa9f94c840cccc2407056f7 SHA256 1e0fddb5f53613dd14ab10b25435e88092fed1eff09b4ac4448d5be01f3b0b11
-DIST ppp-dhcpc.tgz 33497
+DIST ppp-dhcpc.tgz 33497 RMD160 63bf0d1cc52e91ea536fc593fb7a40502baecd90 SHA1 1a0b02788d522f2137d0b66c749ffe6c96cceb94 SHA256 977fd980bb1d285963d8e27a87b7601ea84317faadfdb40989b258d1853db644
 EBUILD ppp-2.4.2-r15.ebuild 7796 RMD160 9cb79041d388bd8367f034fb9c573926da96d0fe SHA1 cdf34f2e252779ba3b4cc24642feaa563bb3420c SHA256 ef99af8f4ce2f89b8a98442283e993f89e82a70e3f81d6bed925f1fb56edc80f
 MD5 7de81d12c980e70d16eb82f4ee1ca3f0 ppp-2.4.2-r15.ebuild 7796
 RMD160 9cb79041d388bd8367f034fb9c573926da96d0fe ppp-2.4.2-r15.ebuild 7796
@@ -76,17 +80,31 @@ EBUILD ppp-2.4.3-r15.ebuild 11515 RMD160 5618777281b889925f651d06c002b59b5741e05
 MD5 921c4dfa8459359ece0710a437219679 ppp-2.4.3-r15.ebuild 11515
 RMD160 5618777281b889925f651d06c002b59b5741e054 ppp-2.4.3-r15.ebuild 11515
 SHA256 7f914b5485d23584d21c137fd4f61046cbc3ef8514ab1892ba4a41112d84cc9e ppp-2.4.3-r15.ebuild 11515
-MISC ChangeLog 26296 RMD160 8ad62258a91f5b1f5f99bbb1d5485d2dae1462af SHA1 07fe589993181b3ed3ae351fa03dd5e7c596da98 SHA256 f1bdefb3db251dfbf22f0ce9af35758fb6b33da1bf2957a527e24577e2c0aabf
-MD5 415b461bc6ead325259b446f2052ac99 ChangeLog 26296
-RMD160 8ad62258a91f5b1f5f99bbb1d5485d2dae1462af ChangeLog 26296
-SHA256 f1bdefb3db251dfbf22f0ce9af35758fb6b33da1bf2957a527e24577e2c0aabf ChangeLog 26296
+EBUILD ppp-2.4.3-r16.ebuild 11565 RMD160 03cdf8d92d61861f84fbbec13a6ba79caec767aa SHA1 a59a64681ca2bdd2200c8b5d66f783f26cc29f14 SHA256 92af928277c715421620fe746a424969a78ef04af8b8badd6adb76ff0c8a675d
+MD5 20d65726e6776de359578cbc32ba6d2b ppp-2.4.3-r16.ebuild 11565
+RMD160 03cdf8d92d61861f84fbbec13a6ba79caec767aa ppp-2.4.3-r16.ebuild 11565
+SHA256 92af928277c715421620fe746a424969a78ef04af8b8badd6adb76ff0c8a675d ppp-2.4.3-r16.ebuild 11565
+MISC ChangeLog 26441 RMD160 e61b6eeb11c87b0fc89d5d15b91002fe59316df8 SHA1 f11153f4dcc375885d58a2647b213b7663390512 SHA256 bbeb37a36e7bc8150fbcab92134e34df3dd0134a8d1ab395cf7a60a6e934f826
+MD5 bf87cd35dc0064b7d03f5a690e9185f3 ChangeLog 26441
+RMD160 e61b6eeb11c87b0fc89d5d15b91002fe59316df8 ChangeLog 26441
+SHA256 bbeb37a36e7bc8150fbcab92134e34df3dd0134a8d1ab395cf7a60a6e934f826 ChangeLog 26441
 MISC metadata.xml 295 RMD160 1bad3fb153298ef71f80807b3d2c5563433d3408 SHA1 da321dbde1a7f7f27c13ba47469de83e05dca6fe SHA256 eb07bc1d97ef7ec44448d40ae2f081b2db28a03bb4e612b850d0cb4acbdc29a1
 MD5 e6fdfdc4317d7fe324c50bd0477ca3f8 metadata.xml 295
 RMD160 1bad3fb153298ef71f80807b3d2c5563433d3408 metadata.xml 295
 SHA256 eb07bc1d97ef7ec44448d40ae2f081b2db28a03bb4e612b850d0cb4acbdc29a1 metadata.xml 295
-MD5 8655ab40bfaab82ff96de0e7e63ef4d4 files/digest-ppp-2.4.2-r15 271
-RMD160 b41ba65efe6f8b8c4bf9436747c4b32aff04f16e files/digest-ppp-2.4.2-r15 271
-SHA256 e5b856f029b90f5785d6e7303324592bb3e4f9e8ee5f7987fb2ab7d874195ec6 files/digest-ppp-2.4.2-r15 271
-MD5 fe5e57cadb803a33c6476462d04b5971 files/digest-ppp-2.4.3-r15 563
-RMD160 d44a6b61aec9489d0ece52f967f49b5ce476e384 files/digest-ppp-2.4.3-r15 563
-SHA256 0716322ff42fcad4d56b850773722d9ada11db5a5a7903b68ee22fb8b5f5ef91 files/digest-ppp-2.4.3-r15 563
+MD5 60e5d939fbd99b3e6e8f2e8eeebc8ddb files/digest-ppp-2.4.2-r15 997
+RMD160 cd5830afe9107524db43c2696090939142665f7e files/digest-ppp-2.4.2-r15 997
+SHA256 aca7fd4bee6f1aebfd83a7e17c47af1f751c00cc0cd51b5c0cddc5ee36b4b935 files/digest-ppp-2.4.2-r15 997
+MD5 1bd86440bb1b7479b72a8c0440cf32dc files/digest-ppp-2.4.3-r15 723
+RMD160 57087c83f2f386bdb32382ff810436761e8791ce files/digest-ppp-2.4.3-r15 723
+SHA256 8bfb1e5cda8235ac4555281a3a99e50dfb1126c41823aae2ad7eec7c588ef89e files/digest-ppp-2.4.3-r15 723
+MD5 fda919e05fe07632df11f5e5e6070b3c files/digest-ppp-2.4.3-r16 723
+RMD160 212ff730ca1ac5d98e4ddaa8d1577374a7db8d56 files/digest-ppp-2.4.3-r16 723
+SHA256 4c31a847a40f2cce88932457569ca331d4a9d1fc93711f0048e76681d01b9a40 files/digest-ppp-2.4.3-r16 723
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.3 (GNU/Linux)
+
+iD8DBQFErhPv3sf9c6kjmR8RAsR7AKC7JUccS/rlBpvaz2TTQ1WxKjp/zQCfT/F8
+hiQ5TlHdvPmVagP7M0MTNVU=
+=GNdJ
+-----END PGP SIGNATURE-----
diff --git a/net-dialup/ppp/files/digest-ppp-2.4.2-r15 b/net-dialup/ppp/files/digest-ppp-2.4.2-r15
index 10e0b464058e..c9bec411cd25 100644
--- a/net-dialup/ppp/files/digest-ppp-2.4.2-r15
+++ b/net-dialup/ppp/files/digest-ppp-2.4.2-r15
@@ -1,4 +1,12 @@
 MD5 0d2679907627f68dd6a2c32d1c7dda90 ppp-2.4.2-mppe-mppc-1.1.patch.gz 12532
+RMD160 0c8b72528cc7828888702d81ebafa92f5f3d653e ppp-2.4.2-mppe-mppc-1.1.patch.gz 12532
+SHA256 e9fac630069ff1843f36ed222b3348c3a996711e6b00411aeaee7882d7e33eee ppp-2.4.2-mppe-mppc-1.1.patch.gz 12532
 MD5 f8ea52da2dd3e7f11a4bcede9fec17c8 ppp-2.4.2-patches-20060516.tar.gz 13311
+RMD160 163c89891cb46a8ed70720904c9861e72ff0abee ppp-2.4.2-patches-20060516.tar.gz 13311
+SHA256 9604cd6bafa6ee3321b0c0b6211d6d86963979cdbc6411eca0b87bc8daa544da ppp-2.4.2-patches-20060516.tar.gz 13311
 MD5 362bcf218fba8afbb9afbee7471e5dac ppp-2.4.2.tar.gz 774441
+RMD160 49a3871cb2e20e749201962df31017203603eaa5 ppp-2.4.2.tar.gz 774441
+SHA256 b54984548fd6ef47abd7f8f2d97d4c6660690b6e0e35fb30b99ef6d3cd62d35a ppp-2.4.2.tar.gz 774441
 MD5 9d2f3febf510c5b0cbb4dacba713a217 ppp-dhcpc.tgz 33497
+RMD160 63bf0d1cc52e91ea536fc593fb7a40502baecd90 ppp-dhcpc.tgz 33497
+SHA256 977fd980bb1d285963d8e27a87b7601ea84317faadfdb40989b258d1853db644 ppp-dhcpc.tgz 33497
diff --git a/net-dialup/ppp/files/digest-ppp-2.4.3-r15 b/net-dialup/ppp/files/digest-ppp-2.4.3-r15
index c573d52ef8d5..3ee12d415983 100644
--- a/net-dialup/ppp/files/digest-ppp-2.4.3-r15
+++ b/net-dialup/ppp/files/digest-ppp-2.4.3-r15
@@ -5,3 +5,5 @@ MD5 848f6c3cafeb6074ffeb293c3af79b7c ppp-2.4.3.tar.gz 688092
 RMD160 845821496bacb07d93bb7572a171854853ef722b ppp-2.4.3.tar.gz 688092
 SHA256 1e0fddb5f53613dd14ab10b25435e88092fed1eff09b4ac4448d5be01f3b0b11 ppp-2.4.3.tar.gz 688092
 MD5 9d2f3febf510c5b0cbb4dacba713a217 ppp-dhcpc.tgz 33497
+RMD160 63bf0d1cc52e91ea536fc593fb7a40502baecd90 ppp-dhcpc.tgz 33497
+SHA256 977fd980bb1d285963d8e27a87b7601ea84317faadfdb40989b258d1853db644 ppp-dhcpc.tgz 33497
diff --git a/net-dialup/ppp/files/digest-ppp-2.4.3-r16 b/net-dialup/ppp/files/digest-ppp-2.4.3-r16
new file mode 100644
index 000000000000..a6504c9cccd1
--- /dev/null
+++ b/net-dialup/ppp/files/digest-ppp-2.4.3-r16
@@ -0,0 +1,9 @@
+MD5 fa95166a95283db0909e80111017bb7f ppp-2.4.3-patches-20060707.tar.gz 56533
+RMD160 8f1d1fc00cb304b9cadbd0a17234c7456d67f919 ppp-2.4.3-patches-20060707.tar.gz 56533
+SHA256 80f45fa9268eec6361600cec32a647d2e89ff12b230f6b384dca09a1cc9ab9bb ppp-2.4.3-patches-20060707.tar.gz 56533
+MD5 848f6c3cafeb6074ffeb293c3af79b7c ppp-2.4.3.tar.gz 688092
+RMD160 845821496bacb07d93bb7572a171854853ef722b ppp-2.4.3.tar.gz 688092
+SHA256 1e0fddb5f53613dd14ab10b25435e88092fed1eff09b4ac4448d5be01f3b0b11 ppp-2.4.3.tar.gz 688092
+MD5 9d2f3febf510c5b0cbb4dacba713a217 ppp-dhcpc.tgz 33497
+RMD160 63bf0d1cc52e91ea536fc593fb7a40502baecd90 ppp-dhcpc.tgz 33497
+SHA256 977fd980bb1d285963d8e27a87b7601ea84317faadfdb40989b258d1853db644 ppp-dhcpc.tgz 33497
diff --git a/net-dialup/ppp/ppp-2.4.3-r16.ebuild b/net-dialup/ppp/ppp-2.4.3-r16.ebuild
new file mode 100644
index 000000000000..6974babb3c05
--- /dev/null
+++ b/net-dialup/ppp/ppp-2.4.3-r16.ebuild
@@ -0,0 +1,335 @@
+# Copyright 1999-2006 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-dialup/ppp/ppp-2.4.3-r16.ebuild,v 1.1 2006/07/07 07:56:44 mrness Exp $
+
+inherit eutils flag-o-matic toolchain-funcs linux-info
+
+DESCRIPTION="Point-to-Point Protocol (PPP)"
+HOMEPAGE="http://www.samba.org/ppp"
+SRC_URI="ftp://ftp.samba.org/pub/ppp/${P}.tar.gz
+	mirror://gentoo/${P}-patches-20060707.tar.gz
+	dhcp? ( http://www.netservers.co.uk/gpl/ppp-dhcpc.tgz )"
+
+LICENSE="BSD GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~sh ~sparc ~x86"
+IUSE="activefilter atm dhcp eap-tls gtk ipv6 mppe-mppc pam radius"
+
+DEPEND="activefilter? ( >=virtual/libpcap-0.9.3 )
+	atm? ( net-dialup/linux-atm )
+	pam? ( sys-libs/pam )
+	gtk? ( =x11-libs/gtk+-1* )
+	eap-tls? ( net-misc/curl >=dev-libs/openssl-0.9.7 )"
+
+pkg_setup() {
+	if use mppe-mppc; then
+		echo
+		ewarn "The mppe-mppc flag overwrites the pppd native MPPE support with MPPE-MPPC"
+		ewarn "patch developed by Jan Dubiec."
+		ewarn "The resulted pppd will work only with patched kernels with version <= 2.6.14."
+		einfo "You could obtain the kernel patch from MPPE-MPPC homepage:"
+		einfo "   http://mppe-mppc.alphacron.de/"
+		ewarn "CAUTION: MPPC is a U.S. patented algorithm!"
+		ewarn "Ask yourself if you really need it and, if you do, consult your lawyer first."
+		ebeep
+	fi
+
+	if has_version "<${CATEGORY}/${PF}"; then
+		local files=""
+		[ -f "${ROOT}/etc/conf.d/net.ppp0" ] && files=( "${ROOT}/etc/conf.d/net.ppp0" )
+		if [ -f "${ROOT}/etc/init.d/net.ppp0" ]; then
+			local x y
+			x=$(<"${ROOT}/etc/init.d/net.ppp0")
+			y=$(<"${ROOT}/etc/init.d/net.lo")
+			#It should be symlink to net.lo or at least have the same content
+			if [ "$x" != "$y" ] ; then
+				files=( ${files[@]} "${ROOT}/etc/init.d/net.ppp0" )
+			fi
+		fi
+
+		if [[ -n "${files[@]}" ]]; then
+			local f
+			einfo "Gentoo is moving toward common configuration file for all network"
+			einfo "interfaces. Thus starting from >=ppp-2.4.3-r10 the following files"
+			einfo "are obsoleted and should be removed to avoid future confusion:"
+			for f in ${files[@]} ; do
+				eerror "    ${f//\/\///} - conflict with baselayout"
+			done
+			for f in chat-default options-pppoe options-pptp ; do
+				f="${ROOT}/etc/ppp/${f}"
+				if [ -f "${f}" ] ; then
+					ewarn "    ${f//\/\///} - unused by this version"
+					files=( ${files[@]} "${f}" )
+				fi
+			done
+			echo
+			einfo "If you use the old net.ppp0 script, you need to:"
+			einfo "   - upgrade to >=sys-apps/baselayout-1.12.0_pre11"
+			einfo "   - set ppp0 parameters in /etc/conf.d/net (see example file)"
+			einfo "   - remove conflicting files"
+			einfo "   - upgrade net-dialup/ppp"
+			echo
+			einfo "If you never used net.ppp0 script, just run the following commands:"
+			einfo "    rm ${files[@]}"
+			einfo "    emerge --resume"
+			die "Conflicts with baselayout support detected"
+		fi
+	fi
+}
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+
+	epatch "${WORKDIR}/patch/make-vars.patch"
+	epatch "${WORKDIR}/patch/mpls.patch"
+	epatch "${WORKDIR}/patch/killaddr-smarter.patch"
+	epatch "${WORKDIR}/patch/upstream-fixes.patch"
+	epatch "${WORKDIR}/patch/rp-pppoe-any-interface.patch"
+	epatch "${WORKDIR}/patch/quiet-pppoatm-modprobe.patch"
+	epatch "${WORKDIR}/patch/wait-children.patch"
+	epatch "${WORKDIR}/patch/winbind-drop-privs.patch"
+
+	use eap-tls && {
+		# see http://eaptls.spe.net/index.html for more info
+		einfo "Enabling EAP-TLS support"
+		epatch "${WORKDIR}/patch/eaptls-0.7-gentoo.patch"
+		use mppe-mppc || epatch "${WORKDIR}/patch/eaptls-mppe-0.7.patch"
+	}
+
+	use mppe-mppc && {
+		einfo "Enabling MPPE-MPPC support"
+		epatch "${WORKDIR}/patch/mppe-mppc-1.1.patch"
+		use eap-tls && epatch "${WORKDIR}/patch/eaptls-mppe-0.7-with-mppc.patch"
+	}
+
+	use atm && {
+		einfo "Enabling PPPoATM support"
+		sed -i "s/^#HAVE_LIBATM=yes/HAVE_LIBATM=yes/" pppd/plugins/pppoatm/Makefile.linux
+	}
+
+	use activefilter || {
+		einfo "Disabling active filter"
+		sed -i "s/^FILTER=y/#FILTER=y/" pppd/Makefile.linux
+	}
+
+	use pam && {
+		einfo "Enabling PAM"
+		sed -i "s/^#USE_PAM=y/USE_PAM=y/" pppd/Makefile.linux
+	}
+
+	use ipv6 && {
+		einfo "Enabling IPv6"
+		sed -i "s/#HAVE_INET6/HAVE_INET6/" pppd/Makefile.linux
+	}
+
+	einfo "Enabling CBCP"
+	sed -i "s/^#CBCP=y/CBCP=y/" pppd/Makefile.linux
+
+	use dhcp && {
+		# copy the ppp-dhcp plugin files
+		einfo "Copying ppp-dhcp plugin files..."
+		tar -xzf "${DISTDIR}/ppp-dhcpc.tgz" -C pppd/plugins/ \
+			&& sed -i -e 's/SUBDIRS := rp-pppoe/SUBDIRS := rp-pppoe dhcp/' pppd/plugins/Makefile.linux \
+			|| die "ppp-dhcp plugin addition failed"
+		epatch "${WORKDIR}/patch/dhcp-make-vars.patch"
+		epatch "${WORKDIR}/patch/dhcp-sys_error_to_strerror.patch"
+	}
+
+	# Set correct libdir
+	sed -i -e "s:/lib/pppd:/$(get_libdir)/pppd:" \
+		pppd/{pathnames.h,pppd.8}
+
+	use radius && {
+		#set the right paths in radiusclient.conf
+		sed -i -e "s:/usr/local/etc:/etc:" \
+			-e "s:/usr/local/sbin:/usr/sbin:" pppd/plugins/radius/etc/radiusclient.conf
+		#set config dir to /etc/ppp/radius
+		sed -i -e "s:/etc/radiusclient:/etc/ppp/radius:g" \
+			pppd/plugins/radius/{*.8,*.c,*.h} \
+			pppd/plugins/radius/etc/*
+	}
+}
+
+src_compile() {
+	export CC="$(tc-getCC)"
+	export AR="$(tc-getAR)"
+	append-ldflags $(bindnow-flags)
+	econf || die "configuration failed"
+	emake COPTS="${CFLAGS}" || die "compile failed"
+
+	#build pppgetpass
+	cd contrib/pppgetpass
+	if use gtk; then
+		emake -f Makefile.linux || die "failed to build pppgetpass"
+	else
+		emake pppgetpass.vt || die "failed to build pppgetpass"
+	fi
+}
+
+pkg_preinst() {
+	if use radius && [ -d "${ROOT}/etc/radiusclient" ] && has_version "<${CATEGORY}/${PN}-2.4.3-r5"; then
+		ebegin "Copy /etc/radiusclient to /etc/ppp/radius"
+		cp -pPR "${ROOT}/etc/radiusclient" "${ROOT}/etc/ppp/radius"
+		eend $?
+	fi
+}
+
+src_install() {
+	local y
+	for y in chat pppd pppdump pppstats
+	do
+		doman ${y}/${y}.8
+		dosbin ${y}/${y}
+	done
+	chmod u+s-w "${D}/usr/sbin/pppd"
+
+	dosbin pppd/plugins/rp-pppoe/pppoe-discovery
+
+	dodir /etc/ppp/peers
+	insinto /etc/ppp
+	insopts -m0600
+	newins etc.ppp/pap-secrets pap-secrets.example
+	newins etc.ppp/chap-secrets chap-secrets.example
+
+	insopts -m0644
+	doins etc.ppp/options
+
+	insopts -m0755
+	newins "${FILESDIR}/ip-up.baselayout" ip-up
+	newins "${FILESDIR}/ip-down.baselayout" ip-down
+
+	if use pam; then
+		insinto /etc/pam.d
+		insopts -m0644
+		newins pppd/ppp.pam ppp || die "not found ppp.pam"
+	fi
+
+	local PLUGINS_DIR=/usr/$(get_libdir)/pppd/$(awk -F '"' '/VERSION/ {print $2}' pppd/patchlevel.h)
+	#closing " for syntax coloring
+	dodir "${PLUGINS_DIR}"
+	insinto "${PLUGINS_DIR}"
+	insopts -m0755
+	doins pppd/plugins/minconn.so || die "minconn.so not build"
+	doins pppd/plugins/passprompt.so || die "passprompt.so not build"
+	doins pppd/plugins/passwordfd.so || die "passwordfd.so not build"
+	doins pppd/plugins/winbind.so || die "winbind.so not build"
+	doins pppd/plugins/rp-pppoe/rp-pppoe.so || die "rp-pppoe.so not build"
+	if use atm; then
+		doins pppd/plugins/pppoatm/pppoatm.so || die "pppoatm.so not build"
+	fi
+	if use dhcp; then
+		doins pppd/plugins/dhcp/dhcpc.so || die "dhcpc.so not build"
+	fi
+	if use radius; then
+		doins pppd/plugins/radius/radius.so || die "radius.so not build"
+		doins pppd/plugins/radius/radattr.so || die "radattr.so not build"
+		doins pppd/plugins/radius/radrealms.so || die "radrealms.so not build"
+
+		#Copy radiusclient configuration files (#92878)
+		insinto /etc/ppp/radius
+		insopts -m0644
+		doins pppd/plugins/radius/etc/{dictionary*,issue,port-id-map,radiusclient.conf,realms,servers}
+
+		doman pppd/plugins/radius/pppd-radius.8
+		doman pppd/plugins/radius/pppd-radattr.8
+	fi
+
+	insinto /etc/modules.d
+	insopts -m0644
+	newins "${FILESDIR}/modules.ppp" ppp
+	if use mppe-mppc; then
+		sed -i -e 's/ppp_mppe/ppp_mppe_mppc/' "${D}/etc/modules.d/ppp"
+	fi
+
+	dodoc PLUGINS README* SETUP Changes-2.3 FAQ
+	dodoc "${FILESDIR}/README.mpls"
+
+	dosbin scripts/pon
+	dosbin scripts/poff
+	dosbin scripts/plog
+	doman scripts/pon.1
+
+	# Adding misc. specialized scripts to doc dir
+	dodir /usr/share/doc/${PF}/scripts/chatchat
+	insinto /usr/share/doc/${PF}/scripts/chatchat
+	doins scripts/chatchat/*
+	insinto /usr/share/doc/${PF}/scripts
+	doins scripts/*
+
+	if use gtk; then
+		dosbin contrib/pppgetpass/{pppgetpass.vt,pppgetpass.gtk}
+		newsbin contrib/pppgetpass/pppgetpass.sh pppgetpass
+	else
+		newsbin contrib/pppgetpass/pppgetpass.vt pppgetpass
+	fi
+	doman contrib/pppgetpass/pppgetpass.8
+}
+
+pkg_postinst() {
+	if get_version ; then
+		echo
+		ewarn "If the following test report contains a missing kernel configuration option that you need,"
+		ewarn "you should reconfigure and rebuild your kernel before running pppd."
+		CONFIG_CHECK="~PPP ~PPP_ASYNC ~PPP_SYNC_TTY"
+		local ERROR_PPP="CONFIG_PPP:\t missing PPP support (REQUIRED)"
+		local ERROR_PPP_ASYNC="CONFIG_PPP_ASYNC:\t missing asynchronous serial line discipline (optional, but highly recommended)"
+		local WARNING_PPP_SYNC_TTY="CONFIG_PPP_SYNC_TTY:\t missing synchronous serial line discipline (optional; used by 'sync' pppd option)"
+		if use activefilter ; then
+			CONFIG_CHECK="${CONFIG_CHECK} ~PPP_FILTER"
+			local ERROR_PPP_FILTER="CONFIG_PPP_FILTER:\t missing PPP filtering support (REQUIRED)"
+		fi
+		CONFIG_CHECK="${CONFIG_CHECK} ~PPP_DEFLATE ~PPP_BSDCOMP"
+		local ERROR_PPP_DEFLATE="CONFIG_PPP_DEFLATE:\t missing Deflate compression (optional, but highly recommended)"
+		local ERROR_PPP_BSDCOMP="CONFIG_PPP_BSDCOMP:\t missing BSD-Compress compression (optional, but highly recommended)"
+		if use mppe-mppc ; then
+			CONFIG_CHECK="${CONFIG_CHECK} ~PPP_MPPE_MPPC"
+			local WARNING_PPP_MPPE_MPPC="CONFIG_PPP_MPPE_MPPC:\t missing MPPE/MPPC encryption/compression (optional, mostly used by PPTP links)"
+		else
+			CONFIG_CHECK="${CONFIG_CHECK} ~PPP_MPPE"
+			local WARNING_PPP_MPPE="CONFIG_PPP_MPPE:\t missing MPPE encryption (optional, mostly used by PPTP links)"
+		fi
+		CONFIG_CHECK="${CONFIG_CHECK} ~PPPOE"
+		local WARNING_PPPOE="CONFIG_PPPOE:\t missing PPPoE support (optional needed by rp-pppoe plugin)"
+		if use atm ; then
+			CONFIG_CHECK="${CONFIG_CHECK} ~PPPOATM"
+			local WARNING_PPPOATM="CONFIG_PPPOATM:\t missing PPPoA support (optional, needed by pppoatm plugin)"
+		fi
+		check_extra_config
+	fi
+
+	if [ ! -e "${ROOT}/dev/.devfsd" ] && [ ! -e "${ROOT}/dev/.udev" ] && [ ! -e "${ROOT}/dev/ppp" ]; then
+		mknod "${ROOT}/dev/ppp" c 108 0
+	fi
+	if [ "$ROOT" = "/" ]; then
+		/sbin/modules-update
+	fi
+
+	#create *-secrets files if not exists
+	[ -f "${ROOT}/etc/ppp/pap-secrets" ] || \
+		cp -pP "${ROOT}/etc/ppp/pap-secrets.example" "${ROOT}/etc/ppp/pap-secrets"
+	[ -f "${ROOT}/etc/ppp/chap-secrets" ] || \
+		cp -pP "${ROOT}/etc/ppp/chap-secrets.example" "${ROOT}/etc/ppp/chap-secrets"
+
+	# lib name has changed
+	sed -i -e "s:^pppoe.so:rp-pppoe.so:" "${ROOT}/etc/ppp/options"
+
+	if use radius && has_version "<${CATEGORY}/${PN}-2.4.3-r5"; then
+		echo
+		ewarn "As of ${PN}-2.4.3-r5, the RADIUS configuration files have moved from"
+		ewarn "   /etc/radiusclient to /etc/ppp/radius."
+		einfo "For your convenience, radiusclient directory was copied to the new location."
+	fi
+
+	echo
+	einfo "Pon, poff and plog scripts have been supplied for experienced users."
+	einfo "Users needing particular scripts (ssh,rsh,etc.) should check out the"
+	einfo "/usr/share/doc/ppp*/scripts directory."
+
+	echo
+	ewarn "The old /etc/init.d/net.ppp0 script has gone!"
+	einfo "The new way of handling PPP connections of any kind (PPPoE, PPPoA, etc)"
+	einfo "is through the baselayout's pppd net module."
+	einfo "Make sure you have a supported version of baselayout by running:"
+	einfo "   emerge -u '>=sys-apps/baselayout-1.12.0_pre11'"
+}