[patch] Patch to change ebuild such that with use flag "setuid" set, the mount.cifs program is allowed to work with setuid

samba-3.5.2_to_r1.patch (text/plain), 1.49 KB, created by Jacob Middag on 2010-04-15 12:16:29 UTC

--- /usr/portage/net-fs/samba/samba-3.5.2.ebuild	2010-04-08 12:07:11.000000000 +0200
+++ /usr/local/portage/net-fs/samba/samba-3.5.2-r1.ebuild	2010-04-15 13:58:36.691222274 +0200
@@ -16,8 +16,8 @@
 SLOT="0"
 KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
 IUSE="acl addns ads aio avahi caps +client cluster cups debug doc examples fam
-	ldap ldb +netapi pam quota +readline +server +smbclient smbsharemodes swat
-	syslog winbind "
+	ldap ldb +netapi pam quota +readline +server setuid +smbclient
+	smbsharemodes swat syslog winbind "
 
 DEPEND="dev-libs/popt
 	!net-fs/samba-client
@@ -93,6 +93,13 @@
 	sed -i \
 		-e 's|LDSHFLAGS="|LDSHFLAGS="\\${LDFLAGS} |g' \
 		configure || die "sed failed"
+	
+	# Enable setuid on cifs
+	if use client && use setuid ; then
+		cd "${S}/.."
+		epatch "${FILESDIR}/3.5.2-cifs_enable_setuid.patch"
+		cd "$OLDPWD"
+	fi
 }
 
 src_configure() {
@@ -366,3 +373,14 @@
 		"${D}/var"/{run,lib/samba/private,lib/samba,lib,cache/samba,cache,} \
 	#	|| die "tried to remove non-empty dirs, this seems like a bug in the ebuild"
 }
+
+pkg_postinst() {
+	# Set set-user-ID bit of mount.cifs and umount.cifs
+	if use client && use setuid ; then
+		#chmod u+s /sbin/umount.cifs /sbin/mount.cifs
+		ewarn "mount.cifs and umount.cifs are capable of working with the"
+		ewarn "set-user-id bit. However you have to set it manually. Using the"
+		ewarn "bits means severe securuty implications. Also see:"
+		ewarn "http://samba.org/samba/security/CVE-2009-2948.html"
+	fi
+}