Local DOS attack fix.

Package-Manager: portage-2.1-r1

6 files changed, 55 insertions, 24 deletions

diff --git a/sys-cluster/heartbeat/ChangeLog b/sys-cluster/heartbeat/ChangeLog
index b1409150fc3f..090bdfa260b5 100644
--- a/sys-cluster/heartbeat/ChangeLog
+++ b/sys-cluster/heartbeat/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for sys-cluster/heartbeat
 # Copyright 2000-2006 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-cluster/heartbeat/ChangeLog,v 1.49 2006/07/20 13:11:24 xmerlin Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-cluster/heartbeat/ChangeLog,v 1.50 2006/07/24 17:59:10 xmerlin Exp $
+
+  24 Jul 2006; Christian Zoffoli <xmerlin@gentoo.org>
+  +files/heartbeat-2.0.4-fix-local-DOS-attack.patch, heartbeat-2.0.4.ebuild,
+  heartbeat-2.0.5.ebuild, heartbeat-2.0.6.ebuild:
+  Local DOS attack fix.
 
 *heartbeat-2.0.6 (20 Jul 2006)
 
diff --git a/sys-cluster/heartbeat/Manifest b/sys-cluster/heartbeat/Manifest
index d1446d212671..8993b5a47208 100644
--- a/sys-cluster/heartbeat/Manifest
+++ b/sys-cluster/heartbeat/Manifest
@@ -9,6 +9,10 @@ AUX heartbeat-1.2.3-misc_security_fixes.patch 7756 RMD160 373a1091443afdf6d2a376
 MD5 30657e79d1e3630eed837297364fe17c files/heartbeat-1.2.3-misc_security_fixes.patch 7756
 RMD160 373a1091443afdf6d2a376293b20b3e125aac982 files/heartbeat-1.2.3-misc_security_fixes.patch 7756
 SHA256 5c56152c7283f928eba5b39690bf198685447b54bcf66a25c8a9bd9543a37940 files/heartbeat-1.2.3-misc_security_fixes.patch 7756
+AUX heartbeat-2.0.4-fix-local-DOS-attack.patch 423 RMD160 19d2cea4263199ef9f9b583be5be4e4611bd7273 SHA1 98d09abf1aec1b4f1ff1ee870e67d22fa6bba9ee SHA256 74618cc8e8f08ca5a0cd2e911abc43571be4696c8259010e95d96238698ffaad
+MD5 72ae7f74f6e540b4b0348c19dea9ffce files/heartbeat-2.0.4-fix-local-DOS-attack.patch 423
+RMD160 19d2cea4263199ef9f9b583be5be4e4611bd7273 files/heartbeat-2.0.4-fix-local-DOS-attack.patch 423
+SHA256 74618cc8e8f08ca5a0cd2e911abc43571be4696c8259010e95d96238698ffaad files/heartbeat-2.0.4-fix-local-DOS-attack.patch 423
 AUX heartbeat-2.0.4-op_list.patch 326 RMD160 c9fc0884c443b9b9df72c5278f5dab70d4fcfe60 SHA1 84df35b8671efff023adc01f997acd88c5d3dd6b SHA256 c9c128dc32155698984c5af67d50d0e32222a9ff575e00e80753b8d564963c79
 MD5 d0477f83ab923e21ff1e5770fc626672 files/heartbeat-2.0.4-op_list.patch 326
 RMD160 c9fc0884c443b9b9df72c5278f5dab70d4fcfe60 files/heartbeat-2.0.4-op_list.patch 326
@@ -29,22 +33,22 @@ EBUILD heartbeat-1.2.3-r2.ebuild 2154 RMD160 6d6d68390bcac5b14faf8d4d1fece1242e1
 MD5 f2b532351a9e4594ec5489b3855a2737 heartbeat-1.2.3-r2.ebuild 2154
 RMD160 6d6d68390bcac5b14faf8d4d1fece1242e19382e heartbeat-1.2.3-r2.ebuild 2154
 SHA256 eaf875004987a4a2e8a66e075520376f24d49a12d62ab794a3cb73fac17647bc heartbeat-1.2.3-r2.ebuild 2154
-EBUILD heartbeat-2.0.4.ebuild 2757 RMD160 7f82d35dfdd4c44a0814259d600ea21b473e872c SHA1 5c8b3b67b21764f5090cc6b7a9faa40fae51e7a4 SHA256 3579cdc946cd6c4ac0391a27f5041772744de9f0f59462be176d152d78fc4f95
-MD5 d314112d65102afeb8c0ee307a040345 heartbeat-2.0.4.ebuild 2757
-RMD160 7f82d35dfdd4c44a0814259d600ea21b473e872c heartbeat-2.0.4.ebuild 2757
-SHA256 3579cdc946cd6c4ac0391a27f5041772744de9f0f59462be176d152d78fc4f95 heartbeat-2.0.4.ebuild 2757
-EBUILD heartbeat-2.0.5.ebuild 2867 RMD160 061d1474e22aae5b502fca59cabd076c5d88fc87 SHA1 2a777db8d83ec68688f773757cdf37a98d30bf18 SHA256 34651cb4791ad7fd8ff0299a293c499cdff715144a5af4db6973e2abdafc19e8
-MD5 8fefdb5ab2e498468a2367d4283b2505 heartbeat-2.0.5.ebuild 2867
-RMD160 061d1474e22aae5b502fca59cabd076c5d88fc87 heartbeat-2.0.5.ebuild 2867
-SHA256 34651cb4791ad7fd8ff0299a293c499cdff715144a5af4db6973e2abdafc19e8 heartbeat-2.0.5.ebuild 2867
-EBUILD heartbeat-2.0.6.ebuild 2867 RMD160 0ad346dad3b7bdc51485b5f818d04d82e562b6ff SHA1 fcb853ad072078f4db516e6de2c4594d5f9fb8b7 SHA256 ad57766f11061a1cbe4b059a5e9ac58e671ebab3d4f62ee4765ed245d88c25b9
-MD5 6038dd2531c7839a1edac66b6fd17137 heartbeat-2.0.6.ebuild 2867
-RMD160 0ad346dad3b7bdc51485b5f818d04d82e562b6ff heartbeat-2.0.6.ebuild 2867
-SHA256 ad57766f11061a1cbe4b059a5e9ac58e671ebab3d4f62ee4765ed245d88c25b9 heartbeat-2.0.6.ebuild 2867
-MISC ChangeLog 8177 RMD160 57c467d0e9b168b7c0e454725346f055205fa35d SHA1 00f49224e122d94cfe08285ce47dcfddfb12560c SHA256 14b1e2af35544ee72fbb4760e037242d98934af4ff428c5dcbb3fc02cfa1795f
-MD5 7a8fe5b1ef0049c238526fc807dd8940 ChangeLog 8177
-RMD160 57c467d0e9b168b7c0e454725346f055205fa35d ChangeLog 8177
-SHA256 14b1e2af35544ee72fbb4760e037242d98934af4ff428c5dcbb3fc02cfa1795f ChangeLog 8177
+EBUILD heartbeat-2.0.4.ebuild 2823 RMD160 a2c46fe158e29b5573565cf32ebe19b3e0df6cba SHA1 4e0b764d08bd0763f54d94fe4fe0ea703c1fb6c6 SHA256 8a2637d768da02a9bc5356f1fe1c6806b7d1f8536357bcdf1667f79c6939e6a6
+MD5 cb573327b4551846e34531944140f5b4 heartbeat-2.0.4.ebuild 2823
+RMD160 a2c46fe158e29b5573565cf32ebe19b3e0df6cba heartbeat-2.0.4.ebuild 2823
+SHA256 8a2637d768da02a9bc5356f1fe1c6806b7d1f8536357bcdf1667f79c6939e6a6 heartbeat-2.0.4.ebuild 2823
+EBUILD heartbeat-2.0.5.ebuild 2972 RMD160 e1f5db48df6e73c5ec96364d7c94760c90144056 SHA1 288953e349ac1377c60a7906837bde4de69f1925 SHA256 5d3a269c645e272898281c0d63e977c3bb5425ff32f3a7e594fe69f576150c46
+MD5 03a1aca7825f9a4f834948f5b2296db4 heartbeat-2.0.5.ebuild 2972
+RMD160 e1f5db48df6e73c5ec96364d7c94760c90144056 heartbeat-2.0.5.ebuild 2972
+SHA256 5d3a269c645e272898281c0d63e977c3bb5425ff32f3a7e594fe69f576150c46 heartbeat-2.0.5.ebuild 2972
+EBUILD heartbeat-2.0.6.ebuild 2980 RMD160 780849dc0944dfeb621eaa92db3d2d6297cd35d8 SHA1 644e00dd2be68de6bd2b62e13bac0a52b7160c5a SHA256 e2a7f762c96a7e38f64573c62c90d54921e181583aa15363f77b32d3ba7895fb
+MD5 da6d07db04a56877c60c799d65e69c32 heartbeat-2.0.6.ebuild 2980
+RMD160 780849dc0944dfeb621eaa92db3d2d6297cd35d8 heartbeat-2.0.6.ebuild 2980
+SHA256 e2a7f762c96a7e38f64573c62c90d54921e181583aa15363f77b32d3ba7895fb heartbeat-2.0.6.ebuild 2980
+MISC ChangeLog 8383 RMD160 f439ee299b24d64adc07383a79d2d526796201c2 SHA1 949bad2f864ac4d90b2d125c5e51e7c1e618d1af SHA256 e151e3c9ba3d4e2e0dfe54045acb070f4ef7f169dd4f1e6c5aec26be622ee363
+MD5 3280d0f224c33240e109073b0cc41fec ChangeLog 8383
+RMD160 f439ee299b24d64adc07383a79d2d526796201c2 ChangeLog 8383
+SHA256 e151e3c9ba3d4e2e0dfe54045acb070f4ef7f169dd4f1e6c5aec26be622ee363 ChangeLog 8383
 MISC metadata.xml 339 RMD160 503ff4e79821bcf9851a8a6f8df0d43b3be8aa99 SHA1 7af6b38347db8330de0f27dbe2677156b524ebf9 SHA256 bb453c6b308cf1dfcbd818320ea43b654620a2b28dc24296c35367d803062635
 MD5 469a4f6cad0c54b4faed31a2852af816 metadata.xml 339
 RMD160 503ff4e79821bcf9851a8a6f8df0d43b3be8aa99 metadata.xml 339
@@ -67,7 +71,7 @@ SHA256 6f0be48042c62aa3e5eeaeac5bda7b7b4ce55011a097472354fe24ee98d0e0c0 files/di
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.4 (GNU/Linux)
 
-iD8DBQFEv5CFgMUyd/cdjWsRAsfXAJ9aK0EKSdMLZXVtX+Hf4jSR7WlUBgCfXeA2
-dpVSbBYsVbbQrOcA3aMEM38=
-=lqYn
+iD8DBQFExRmpgMUyd/cdjWsRAkYjAKCPzbYdo+4PeGF7aQfdGtLiGX2J0wCfY3g5
+4u16qJz/WNj4j7k+uTUU85E=
+=a/x4
 -----END PGP SIGNATURE-----
diff --git a/sys-cluster/heartbeat/files/heartbeat-2.0.4-fix-local-DOS-attack.patch b/sys-cluster/heartbeat/files/heartbeat-2.0.4-fix-local-DOS-attack.patch
new file mode 100644
index 000000000000..c688e2964661
--- /dev/null
+++ b/sys-cluster/heartbeat/files/heartbeat-2.0.4-fix-local-DOS-attack.patch
@@ -0,0 +1,11 @@
+--- heartbeat-2.0.4/heartbeat/heartbeat.c.orig	2006-02-24 17:52:26.000000000 +0100
++++ heartbeat-2.0.4/heartbeat/heartbeat.c	2006-07-24 20:11:14.000000000 +0200
+@@ -502,7 +502,7 @@
+ 	int	ipcid;
+ 	struct pstat_shm *	shm;
+ 
+-	if ((ipcid = shmget(IPC_PRIVATE, sizeof(*procinfo), 0666)) < 0) {
++	if ((ipcid = shmget(IPC_PRIVATE, sizeof(*procinfo), 0600)) < 0) {
+ 		cl_perror("Cannot shmget for process status");
+ 		return;
+ 	}
diff --git a/sys-cluster/heartbeat/heartbeat-2.0.4.ebuild b/sys-cluster/heartbeat/heartbeat-2.0.4.ebuild
index 66458263d704..cc22e290bdd2 100644
--- a/sys-cluster/heartbeat/heartbeat-2.0.4.ebuild
+++ b/sys-cluster/heartbeat/heartbeat-2.0.4.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2006 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-cluster/heartbeat/heartbeat-2.0.4.ebuild,v 1.5 2006/07/14 17:41:48 xmerlin Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-cluster/heartbeat/heartbeat-2.0.4.ebuild,v 1.6 2006/07/24 17:59:10 xmerlin Exp $
 
 inherit flag-o-matic eutils
 
@@ -40,6 +40,7 @@ src_unpack() {
 	unpack ${A}
 	cd ${S}
 	epatch ${FILESDIR}/${P}-op_list.patch || die
+	epatch ${FILESDIR}/${PN}-2.0.4-fix-local-DOS-attack.patch || die
 }
 
 src_compile() {
diff --git a/sys-cluster/heartbeat/heartbeat-2.0.5.ebuild b/sys-cluster/heartbeat/heartbeat-2.0.5.ebuild
index e1f256a31a83..17b2c40b114a 100644
--- a/sys-cluster/heartbeat/heartbeat-2.0.5.ebuild
+++ b/sys-cluster/heartbeat/heartbeat-2.0.5.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2006 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-cluster/heartbeat/heartbeat-2.0.5.ebuild,v 1.2 2006/07/13 13:07:20 xmerlin Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-cluster/heartbeat/heartbeat-2.0.5.ebuild,v 1.3 2006/07/24 17:59:10 xmerlin Exp $
 
 inherit flag-o-matic
 
@@ -41,6 +41,11 @@ DEPEND="
 	)
 	"
 
+src_unpack() {
+	unpack ${A}
+	cd ${S}
+	epatch ${FILESDIR}/${PN}-2.0.4-fix-local-DOS-attack.patch || die
+}
 
 src_compile() {
 	append-ldflags $(bindnow-flags)
diff --git a/sys-cluster/heartbeat/heartbeat-2.0.6.ebuild b/sys-cluster/heartbeat/heartbeat-2.0.6.ebuild
index 2f34329e38ba..26cc3bf3dd55 100644
--- a/sys-cluster/heartbeat/heartbeat-2.0.6.ebuild
+++ b/sys-cluster/heartbeat/heartbeat-2.0.6.ebuild
@@ -1,8 +1,8 @@
 # Copyright 1999-2006 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sys-cluster/heartbeat/heartbeat-2.0.6.ebuild,v 1.1 2006/07/20 13:11:24 xmerlin Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-cluster/heartbeat/heartbeat-2.0.6.ebuild,v 1.2 2006/07/24 17:59:10 xmerlin Exp $
 
-inherit flag-o-matic
+inherit flag-o-matic eutils
 
 DESCRIPTION="Heartbeat high availability cluster manager"
 HOMEPAGE="http://www.linux-ha.org"
@@ -41,6 +41,11 @@ DEPEND="
 	)
 	"
 
+src_unpack() {
+	unpack ${A}
+	cd ${S}
+	#epatch ${FILESDIR}/${PN}-2.0.4-fix-local-DOS-attack.patch || die
+}
 
 src_compile() {
 	append-ldflags $(bindnow-flags)