mirror of
https://git.FreeBSD.org/ports.git
synced 2024-12-12 03:00:28 +00:00
9fe42d2948
Contains fix for CVE-2019-15107. From https://virtualmin.com/node/66890: To exploit the malicious code, your Webmin installation must have Webmin -> Webmin Configuration -> Authentication -> Password expiry policy set to Prompt users with expired passwords to enter a new one. This option is not set by default, but if it is set, it allows remote code execution. PR: 239957 Submitted by: Bert JW Regeer <xistence@0x58.com> Security: CVE-2019-15107
60 lines
1.8 KiB
Makefile
60 lines
1.8 KiB
Makefile
# $FreeBSD$
|
|
|
|
PORTNAME= usermin
|
|
PORTVERSION= 1.780
|
|
CATEGORIES= sysutils
|
|
MASTER_SITES= http://www.webmin.com/uupdates/:up \
|
|
SF/webadmin/${PORTNAME}/${PORTVERSION}:sf \
|
|
LOCAL/olgeni/:up
|
|
DISTFILES= ${DISTNAME}${EXTRACT_SUFX}:sf ${USERMIN_MODULES:S/gz$/gz:up/}
|
|
EXTRACT_ONLY= ${DISTNAME}${EXTRACT_SUFX}
|
|
|
|
MAINTAINER= olgeni@FreeBSD.org
|
|
COMMENT= Web-based interface for performing some user tasks
|
|
|
|
LICENSE= BSD3CLAUSE
|
|
|
|
RUN_DEPENDS= p5-Net-SSLeay>=0:security/p5-Net-SSLeay \
|
|
p5-IO-Tty>=0:devel/p5-IO-Tty \
|
|
p5-Authen-PAM>=0:security/p5-Authen-PAM
|
|
|
|
NO_ARCH= yes
|
|
NO_BUILD= yes
|
|
USES= cpe perl5
|
|
CPE_VENDOR= webmin
|
|
USE_RC_SUBR= usermin
|
|
SUB_LIST= PERL=${PERL}
|
|
SUB_FILES= pkg-message
|
|
|
|
USERMIN_MODULES=
|
|
|
|
post-extract:
|
|
@if [ "${USERMIN_MODULES}" != "" ]; then \
|
|
for usermin_module in ${USERMIN_MODULES}; do \
|
|
${ECHO} "===> Unpacking updated module: $${usermin_module}"; \
|
|
${TAR} --unlink -xzf ${DISTDIR}/$${usermin_module} -C ${WRKSRC}; \
|
|
done; \
|
|
fi
|
|
|
|
post-patch:
|
|
@${REINPLACE_CMD} -e "s=%%PREFIX%%=${PREFIX}=" ${WRKSRC}/setup.sh
|
|
|
|
.for file in filter/config commands/config htaccess/config
|
|
@${REINPLACE_CMD} -i '' -e 's|=/etc/webmin|=${PREFIX}/etc/webmin|' ${WRKSRC}/${file}
|
|
.endfor
|
|
|
|
@${FIND} ${WRKSRC} \( -type f -and \( -name config-freebsd\* -or -name config \) \) \
|
|
-exec ${REINPLACE_CMD} -e "s@/usr/local@${PREFIX}@g" {} \; \
|
|
-exec ${REINPLACE_CMD} -e "s@%%PREFIX%%@${PREFIX}@g" {} \;
|
|
|
|
@${FIND} ${WRKSRC} \( -name "*.cgi" -or -name "*.pl" -or -name "*.sh" \) -exec \
|
|
${REINPLACE_CMD} -e "s@%%PERL%%@${PERL}@g; s@#!/usr/bin/perl@#!${PERL}@; s@#!/usr/local/bin/perl@#!${PERL}@" {} \;
|
|
|
|
@${FIND} ${WRKSRC} \( -name "*.orig" -or -name "*.bak" -or -name "*.pyc" \) -delete
|
|
|
|
do-install:
|
|
@${MKDIR} ${STAGEDIR}${PREFIX}/lib/usermin
|
|
${CP} -r ${WRKSRC}/* ${STAGEDIR}${PREFIX}/lib/usermin
|
|
|
|
.include <bsd.port.mk>
|