Security fixes (bug 53707)

6 files changed, 20 insertions, 8 deletions

diff --git a/net-mail/dovecot/ChangeLog b/net-mail/dovecot/ChangeLog
index 2cc790537fa8..4a3f13e34870 100644
--- a/net-mail/dovecot/ChangeLog
+++ b/net-mail/dovecot/ChangeLog
@@ -1,6 +1,16 @@
 # ChangeLog for net-mail/dovecot
 # Copyright 2000-2004 Gentoo Technologies, Inc.; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/ChangeLog,v 1.8 2004/06/12 03:29:22 agriffis Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/ChangeLog,v 1.9 2004/06/12 14:46:51 g2boojum Exp $
+
+*dovecot-0.99.10.5-r1 (12 Jun 2004)
+
+  12 Jun 2004; Grant Goodyear <g2boojum@gentoo.org>
+  +dovecot-0.99.10.4-r1.ebuild, -dovecot-0.99.10.4.ebuild,
+  +dovecot-0.99.10.5-r1.ebuild, -dovecot-0.99.10.5.ebuild:
+  Security fix: old ebuilds installed /etc/dovecot.conf w/ 0644 
+  permissions, but sql passwords might be stored there.
+  
+  Thanks to Andreas Simon (Bug #53707).
 
   11 Jun 2004; Aron Griffis <agriffis@gentoo.org> dovecot-0.99.10.4.ebuild:
   Fix use invocation
diff --git a/net-mail/dovecot/Manifest b/net-mail/dovecot/Manifest
index 3b7afcaf1c6d..2fee13e150f5 100644
--- a/net-mail/dovecot/Manifest
+++ b/net-mail/dovecot/Manifest
@@ -1,8 +1,8 @@
-MD5 7c6fc16a23d73c1272c81032caeccb9b dovecot-0.99.10.4.ebuild 4039
-MD5 2682a000b32914e68752e107707591b6 dovecot-0.99.10.5.ebuild 4375
-MD5 610527e3c9c97ff74254e6ef1f2e0b79 ChangeLog 1604
+MD5 a5ab575cb7cd24fc1e7ec634e23737c7 dovecot-0.99.10.4-r1.ebuild 4107
+MD5 5f32b3183b1fc3d9a9d3f4449da33e2a ChangeLog 1976
 MD5 61e0d05b1306513aede2838fa81b05b5 metadata.xml 225
-MD5 02900826bf90ce0fcbf43a3ebbfa31cf files/digest-dovecot-0.99.10.4 69
-MD5 533a7de1250c369ae33b60c3c53586a1 files/digest-dovecot-0.99.10.5 69
+MD5 34f16f7a9a13261bf922984b27ba9278 dovecot-0.99.10.5-r1.ebuild 4412
+MD5 02900826bf90ce0fcbf43a3ebbfa31cf files/digest-dovecot-0.99.10.4-r1 69
+MD5 533a7de1250c369ae33b60c3c53586a1 files/digest-dovecot-0.99.10.5-r1 69
 MD5 55ac3fc8f2caaf3a6492cb5f2a0ccd5a files/dovecot.init 525
 MD5 1c0a9ca75cadf12377e70c2ef725ba0e files/dovecot.pam 220
diff --git a/net-mail/dovecot/dovecot-0.99.10.4.ebuild b/net-mail/dovecot/dovecot-0.99.10.4-r1.ebuild
index 909a029051f6..d8b8624d62d8 100644
--- a/net-mail/dovecot/dovecot-0.99.10.4.ebuild
+++ b/net-mail/dovecot/dovecot-0.99.10.4-r1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Technologies, Inc.
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/dovecot-0.99.10.4.ebuild,v 1.5 2004/06/12 03:29:22 agriffis Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/dovecot-0.99.10.4-r1.ebuild,v 1.1 2004/06/12 14:46:51 g2boojum Exp $
 
 IUSE="debug gnutls ipv6 ldap maildir pam postgres sasl ssl vpopmail nopop3d"
 
@@ -124,6 +124,7 @@ src_install () {
 	keepdir /var/run/dovecot/login
 	fowners root:dovecot /var/run/dovecot/login
 	fperms 0750 /var/run/dovecot/login
+	[[ -e ${D}/etc/dovecot.conf ]] && fperms 0600 /etc/dovecot.conf
 }
 
 pkg_postinst() {
diff --git a/net-mail/dovecot/dovecot-0.99.10.5.ebuild b/net-mail/dovecot/dovecot-0.99.10.5-r1.ebuild
index d8806f5c703a..b190b7dfc7f3 100644
--- a/net-mail/dovecot/dovecot-0.99.10.5.ebuild
+++ b/net-mail/dovecot/dovecot-0.99.10.5-r1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2004 Gentoo Technologies, Inc.
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/dovecot-0.99.10.5.ebuild,v 1.2 2004/06/04 08:54:36 dholm Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-mail/dovecot/dovecot-0.99.10.5-r1.ebuild,v 1.1 2004/06/12 14:46:51 g2boojum Exp $
 
 IUSE="debug ipv6 ldap mbox pam postgres sasl ssl gnutls vpopmail nopop3d"
 
@@ -138,6 +138,7 @@ src_install () {
 	keepdir /var/run/dovecot/login
 	fowners root:dovecot /var/run/dovecot/login
 	fperms 0750 /var/run/dovecot/login
+	fperms 0600 /etc/dovecot.conf
 }
 
 pkg_postinst() {
diff --git a/net-mail/dovecot/files/digest-dovecot-0.99.10.4 b/net-mail/dovecot/files/digest-dovecot-0.99.10.4-r1
index 877af0bbff55..877af0bbff55 100644
--- a/net-mail/dovecot/files/digest-dovecot-0.99.10.4
+++ b/net-mail/dovecot/files/digest-dovecot-0.99.10.4-r1
diff --git a/net-mail/dovecot/files/digest-dovecot-0.99.10.5 b/net-mail/dovecot/files/digest-dovecot-0.99.10.5-r1
index 71bfb2a284d9..71bfb2a284d9 100644
--- a/net-mail/dovecot/files/digest-dovecot-0.99.10.5
+++ b/net-mail/dovecot/files/digest-dovecot-0.99.10.5-r1