Add ewarn about wrong permissions when upgrading from bind 9.4.x. Comment view chaos.

Package-Manager: portage-2.2_rc67/cvs/Linux x86_64

6 files changed, 50 insertions, 13 deletions

diff --git a/net-dns/bind/ChangeLog b/net-dns/bind/ChangeLog
index 3ebd3bbba888..84e398c0a542 100644
--- a/net-dns/bind/ChangeLog
+++ b/net-dns/bind/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for net-dns/bind
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/ChangeLog,v 1.285 2010/07/20 16:59:06 idl0r Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/ChangeLog,v 1.286 2010/07/25 18:57:41 idl0r Exp $
+
+  25 Jul 2010; Christian Ruppert <idl0r@gentoo.org> bind-9.6.2_p2.ebuild,
+  bind-9.7.0_p2-r1.ebuild, bind-9.7.1_p2.ebuild, files/named.conf-r4:
+  Add ewarn about wrong permissions when upgrading from bind 9.4.x. Comment
+  view chaos.
 
   20 Jul 2010; Christian Ruppert <idl0r@gentoo.org> files/named.confd-r3:
   Fix a typo in conf.d/named, bug 329111.
diff --git a/net-dns/bind/Manifest b/net-dns/bind/Manifest
index 37ca94136a3c..f4eb0129381c 100644
--- a/net-dns/bind/Manifest
+++ b/net-dns/bind/Manifest
@@ -11,7 +11,7 @@ AUX bind-dlzmysql5-reconnect.patch 1842 RMD160 687f6128b6511dbeecdfc81b197520b1a
 AUX localhost.zone-r3 426 RMD160 b2dfe76923695e6eac49234b7e7f90fef4d1838e SHA1 b84babc535466cacc7001e4c6eb21e22ae11b22d SHA256 3f39e9b5be72435e961cd6f5acdfe396b05640bf370969acf918a939575122bc
 AUX named.cache 2941 RMD160 c29f47291496e67e72c129db488d07172fe244e6 SHA1 b1575428e8b5f513469a90a32cf163e8db46cab5 SHA256 35f7fcf2b177678cf362af7ac942f7f1a1c102c045dc3844991a411fc4c5d277
 AUX named.conf-r3 1317 RMD160 dace9861fb15a7ad415b23f2452fca5eb3ef2604 SHA1 02385c388d4ca99f68354c83f9e4cae2c2bcb034 SHA256 f431592c2441a27205e1112dcff7b9b07655007c460a309b7968c97688c8e7f4
-AUX named.conf-r4 5254 RMD160 107e4c5dd5c6dbd1bcdf1c789bc24fd8d2cf5b57 SHA1 646ea61a897ceb32be99ddadb521f0a219b29fef SHA256 b652b156e7ba169c899e08523ea506c3987562c8278db0a8234b3e82f5fce1a6
+AUX named.conf-r4 5259 RMD160 368fcafd0987b8380aed8f3e5760928130019dda SHA1 5e2a7124b88f57dfe20c55976d014067ab84c77c SHA256 b1097dd24b3f7a2987b97147ba903cb70aff5ad61aea7ae1c6aa5634924d54f1
 AUX named.confd-r2 479 RMD160 0a0452bf9bb6f18d4628ee72abe82a52d484a2cb SHA1 d0b0e2f5d72d43862c5aaff9a226fd8599992323 SHA256 bae05257852ecbc7f66bd30e452162f15b6f6e8c3fc170fb6dfdfa7d22361915
 AUX named.confd-r3 719 RMD160 813e82a611c24a0aa3aca0400f499b68727cc8ef SHA1 d4bc0d753e9ec52fa9091b10eca10aee4462b83c SHA256 b37c19dccf3af6e313b09720c12ef7de107a297d2434c78b7101cd67ba0798f6
 AUX named.init-r5 1620 RMD160 37279362e437241188a07e5f274730e68645827e SHA1 00a14819a322b391183084c79cc9a4dc04d0d484 SHA256 07fb9d653f086319680d04abde0218495ed09d3528087257788bf294252a0bad
@@ -25,15 +25,15 @@ DIST bind-geoip-1.3.patch 54070 RMD160 5d01a20104b572588507aea4b8f6cbf66f68a973
 DIST bind-sdb-ldap-1.1.0.tar.bz2 5883 RMD160 ec2f684f278e5fa72158486a14dfce3005a62602 SHA1 fae539a29615fda56a2dcb55a1e01d335835b980 SHA256 afe9cc6a99c20f1dc1929b0a30ff815b0aac509a6c12f8df432853c856d35754
 DIST dyndns-samples.tbz2 22866 RMD160 27d5b2d0edb8e1ff16b3f980c38d7af33ccf0c7d SHA1 0a62e9458d0e16b67a3a2f63ea485ce969f1fb4d SHA256 92fb06a92ca99cbbe96b90bcca229ef9c12397db57ae17e199dad9f1218fdbe8
 EBUILD bind-9.4.3_p5.ebuild 9208 RMD160 6e7ff13da934a07ba7973e886b0ac03aa7033fb0 SHA1 8320223ec6b82e8988ca23f994457175c25caef0 SHA256 ae0e300cc78a666ef49c7f84432c14f4238b7017e7b579054e54397c28946e3e
-EBUILD bind-9.6.2_p2.ebuild 9745 RMD160 cc78d959e951bdc6aaa7f4cd7706fe51bbffe44d SHA1 07fa15edfeb243242be36014869cc1553b0e75c9 SHA256 a1c28c61dc2f17939006f50c7e78827fdb8a654485da3e14544780a07195a020
-EBUILD bind-9.7.0_p2-r1.ebuild 9770 RMD160 d3b2c9eec19753c52f084f2e97e8b43cb1d54973 SHA1 fddf2f3049ef9d7513be785b3e806773f201a3c3 SHA256 43305ee456423f4782b5cd948feacd4c080253de6db06309dcebb6da202d75e2
-EBUILD bind-9.7.1_p2.ebuild 9834 RMD160 a73b416c1a88635773ea1b84b9ed68e53412108e SHA1 4cd196494c5c029f80b1904787f9bb0d843dbc46 SHA256 2d1a3238c014f5af62c38ddba119ada70c7807ba0fc1ce14d184f0c1864eeb61
-MISC ChangeLog 47247 RMD160 03346db8b8ccb3a022b5cd4821fec286cb41dcad SHA1 9185832ae33273e1a9546520eaad706c7688ec84 SHA256 927cfcfa3b2145514aa862b5ea286d1238df97cd433a80bec81dff4abc84300d
+EBUILD bind-9.6.2_p2.ebuild 10300 RMD160 0632305621aabcdea14f644d704bb1c5b3ee2435 SHA1 53747f94f81f6e0d24b60923d924678ed1740c42 SHA256 5b6ea3b10bf8ef926dc846fe95a5f5ee21aeba5e01470d8c50880e1dc3624056
+EBUILD bind-9.7.0_p2-r1.ebuild 10325 RMD160 993638e00a778a96ac2fdd0bac788dcfd266e8d0 SHA1 312e523b1fb6231c4ea6cec867b2bef2a0860598 SHA256 2f6335c781414bb198182af9da345184bed424d949488372aaa74ee10c88d46b
+EBUILD bind-9.7.1_p2.ebuild 10389 RMD160 4c7be953cd85d2360b0c610b3f6bc59b7b63f440 SHA1 8a4761a0045a1c8d21e89e5084a522ebbb7f4e5a SHA256 503610c6f1f7a7cd516e7bddd749ea24b9c4498d8922b51279ac35f9d4ada639
+MISC ChangeLog 47482 RMD160 0928f56809e292209bccda65f6b13d5288a00fbd SHA1 9b798ac22487c0881bda510b433bc79c64fb37e9 SHA256 9036ce65d0ebf37c8cb634a5e92cc36a946725ec8690447304a9406ab9633f1f
 MISC metadata.xml 788 RMD160 bf52f4f66dbf21e131ef2e8f3d4066cc61ba5aee SHA1 30c5619a8831a452fe6881e46f0082fdca6f1664 SHA256 a698cbceada96d79667f8eb109f1ea14ab0fd0590276c8eab1d2abc2f28ab438
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.15 (GNU/Linux)
 
-iEYEARECAAYFAkxF1eQACgkQixe2jn+ufTgPSACeK2f0OSah2PL5b+ZtU4upI6Ve
-alQAnjqI4Cb4z5DRx6ehkB7MXZj5BSXE
-=36Ll
+iEYEARECAAYFAkxMiS8ACgkQixe2jn+ufTje4gCeLgyFz1ucN1uV/WhXH1A7RfBm
+fPYAmwUE+fLveaSX+wH0UtUr6oSUEoa9
+=UWTy
 -----END PGP SIGNATURE-----
diff --git a/net-dns/bind/bind-9.6.2_p2.ebuild b/net-dns/bind/bind-9.6.2_p2.ebuild
index 3d4c4e44fd39..2e110bd28ad7 100644
--- a/net-dns/bind/bind-9.6.2_p2.ebuild
+++ b/net-dns/bind/bind-9.6.2_p2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.6.2_p2.ebuild,v 1.8 2010/06/29 16:02:32 idl0r Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.6.2_p2.ebuild,v 1.9 2010/07/25 18:57:41 idl0r Exp $
 
 EAPI="3"
 
@@ -275,6 +275,16 @@ pkg_postinst() {
 	if [[ -n ${CHROOT} && -d ${CHROOT} ]]; then
 		ewarn "NOTE: as of 'bind-9.6.1' the chroot part of the init-script got some major changes."
 	fi
+
+	ewarn
+	ewarn "NOTE: If you upgrade from net-dns/bind-9.4.x, you may encounter permission problems"
+	ewarn "To fix the permissions do:"
+	ewarn "chown root:named /{etc,var}/bind /var/{run,log}/named /var/bind/{sec,pri}"
+	ewarn "chown root:named /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0640 /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0750 /etc/bind /var/bind/pri"
+	ewarn "chmod 0770 /var/{run,log}/named /var/bind/{,sec}"
+	ewarn
 }
 
 pkg_config() {
diff --git a/net-dns/bind/bind-9.7.0_p2-r1.ebuild b/net-dns/bind/bind-9.7.0_p2-r1.ebuild
index f517aa754d63..ac2ba61613ae 100644
--- a/net-dns/bind/bind-9.7.0_p2-r1.ebuild
+++ b/net-dns/bind/bind-9.7.0_p2-r1.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.7.0_p2-r1.ebuild,v 1.8 2010/06/29 16:02:32 idl0r Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.7.0_p2-r1.ebuild,v 1.9 2010/07/25 18:57:41 idl0r Exp $
 
 EAPI="3"
 
@@ -275,6 +275,16 @@ pkg_postinst() {
 	if [[ -n ${CHROOT} && -d ${CHROOT} ]]; then
 		ewarn "NOTE: as of 'bind-9.6.1' the chroot part of the init-script got some major changes."
 	fi
+
+	ewarn
+	ewarn "NOTE: If you upgrade from net-dns/bind-9.4.x, you may encounter permission problems"
+	ewarn "To fix the permissions do:"
+	ewarn "chown root:named /{etc,var}/bind /var/{run,log}/named /var/bind/{sec,pri}"
+	ewarn "chown root:named /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0640 /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0750 /etc/bind /var/bind/pri"
+	ewarn "chmod 0770 /var/{run,log}/named /var/bind/{,sec}"
+	ewarn
 }
 
 pkg_config() {
diff --git a/net-dns/bind/bind-9.7.1_p2.ebuild b/net-dns/bind/bind-9.7.1_p2.ebuild
index b15fcfe0e74f..f87c423023ab 100644
--- a/net-dns/bind/bind-9.7.1_p2.ebuild
+++ b/net-dns/bind/bind-9.7.1_p2.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2010 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.7.1_p2.ebuild,v 1.1 2010/07/15 20:27:20 idl0r Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dns/bind/bind-9.7.1_p2.ebuild,v 1.2 2010/07/25 18:57:41 idl0r Exp $
 
 EAPI="3"
 
@@ -276,6 +276,16 @@ pkg_postinst() {
 	if [[ -n ${CHROOT} && -d ${CHROOT} ]]; then
 		ewarn "NOTE: as of 'bind-9.6.1' the chroot part of the init-script got some major changes."
 	fi
+
+	ewarn
+	ewarn "NOTE: If you upgrade from net-dns/bind-9.4.x, you may encounter permission problems"
+	ewarn "To fix the permissions do:"
+	ewarn "chown root:named /{etc,var}/bind /var/{run,log}/named /var/bind/{sec,pri}"
+	ewarn "chown root:named /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0640 /var/bind/named.cache /var/bind/pri/{127,localhost}.zone /etc/bind/{bind.keys,named.conf}"
+	ewarn "chmod 0750 /etc/bind /var/bind/pri"
+	ewarn "chmod 0770 /var/{run,log}/named /var/bind/{,sec}"
+	ewarn
 }
 
 pkg_config() {
diff --git a/net-dns/bind/files/named.conf-r4 b/net-dns/bind/files/named.conf-r4
index c82d13b06ced..d302794bc16c 100644
--- a/net-dns/bind/files/named.conf-r4
+++ b/net-dns/bind/files/named.conf-r4
@@ -33,7 +33,7 @@ options {
 	/* https://www.isc.org/solutions/dlv >=bind-9.7.x only */
 	//bindkeys-file "/etc/bind/bind.keys";
 
-	listen-on-v6 { none; };
+	listen-on-v6 { ::1; };
 	listen-on { 127.0.0.1; };
 
 	allow-query {
@@ -203,6 +203,7 @@ view "public" in {
 };
 
 /* Hide the bind version */
+/*
 view "chaos" chaos {
 	match-clients { any; };
 	allow-query { none; };
@@ -211,3 +212,4 @@ view "chaos" chaos {
 		file "/dev/null";  // or any empty file
 	};
 };
+*/