>Number:         18537
>Category:       pkg
>Synopsis:       Maintainer update port net/ipa 1.2.7 -> 1.2.8
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sat Oct 05 02:11:00 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     Andrey Simonenko
>Release:        NetBSD 1.6
>Organization:
>Environment:

Ports collection for NetBSD 1.6 release
Release: NetBSD 1.6
Architecture: i386
Machine: i386

>Description:

Please update port net/ipa from 1.2.7 to 1.2.8 version.

I made following changes:

- added some HTTP and FTP mirrors;

- removed installation of ${DSTEXAMPLEDIR} directory, because it is
  installed from the port's Makefile;

- removed changes for deinstall: target from patch-aa for the original
  Makefile (Why we should change something there? A port does not use
  this section, isn't it?);

- removed patch-ac, because original source file was fixed;

- updated DESCR to reflect current state of IPA.

In the file
ftp://ftp.netbsd.org/pub/NetBSD/packages/pkgsrc/net/ipa/README.html
it is noted that ipa<1.2.7 has remote-access exploit, really I reported
about local-access exploit. Please fix this sentence.

>How-To-Repeat:
>Fix:
diff -ruN ipa.orig/DESCR ipa/DESCR
--- ipa.orig/DESCR	Sun Jun 30 03:57:52 2002
+++ ipa/DESCR	Fri Oct  4 13:47:48 2002
@@ -1,13 +1,12 @@
-IPA allows to make IP accounting (network accounting) based on
-IPv4/v6 Firewall (FreeBSD only) and/or IP Filter accounting rules
-on NetBSD, OpenBSD and FreeBSD.
+IPA(8) allows to make IP accounting (network accounting) based on
+FreeBSD IPv4/v6 Firewall, OpenBSD Packet Filter and IP Filter
+accounting rules on FreeBSD, NetBSD and OpenBSD.

 It supports limits for accounting rules and limits events as "limit is
 reached", "reached limit is expired", etc. It understands time intervals
 like "end of day", "end of week", "end of month", etc.

-There is special viewer for accounting database and access control lists,
-which allow or disallow one to view accounting information for rules.
+IPASTAT(8) is a viewer for IP accounting database made by IPA(8).

 - Andrey Simonenko
 simon@simon.org.ua
diff -ruN ipa.orig/Makefile ipa/Makefile
--- ipa.orig/Makefile	Sun Jun 30 03:47:52 2002
+++ ipa/Makefile	Fri Oct  4 13:37:45 2002
@@ -1,9 +1,12 @@
 # $NetBSD: Makefile,v 1.3 2002/06/30 03:47:53 jlam Exp $

-DISTNAME=	ipa-1.2.7
+DISTNAME=	ipa-1.2.8
 CATEGORIES=	net sysutils
 MASTER_SITES=	http://www.simon.org.ua/ipa/ \
-		http://www.mirrors.wiretapped.net/security/network-monitoring/ipa/
+		http://www.mirrors.wiretapped.net/security/network-monitoring/ipa/ \
+		ftp://ftp.mirrors.wiretapped.net/pub/security/network-monitoring/ipa/ \
+		http://www.outloud.org/ipa/ \
+		http://ipa.it-ss.be/

 MAINTAINER=	simon@simon.org.ua
 HOMEPAGE=	http://www.simon.org.ua/ipa/
diff -ruN ipa.orig/distinfo ipa/distinfo
--- ipa.orig/distinfo	Sun Jun 30 13:13:48 2002
+++ ipa/distinfo	Fri Oct  4 16:42:17 2002
@@ -1,7 +1,6 @@
 $NetBSD: distinfo,v 1.5 2002/06/30 13:13:48 dmcmahill Exp $

-SHA1 (ipa-1.2.7.tar.gz) = 73799bf16be637b4d683ec86b9943177856349dc
-Size (ipa-1.2.7.tar.gz) = 137825 bytes
-SHA1 (patch-aa) = 6b7a63768c673eebb76b2a9c4cfe2eaf40287c8f
+SHA1 (ipa-1.2.8.tar.gz) = aa83f3e2d23c70073748d28b11bf487f806756e5
+Size (ipa-1.2.8.tar.gz) = 132234 bytes
+SHA1 (patch-aa) = 7d867aee3b1eb49869c6af0e86c6dee05898c678
 SHA1 (patch-ab) = edce3d9d03ee7456c440ce4179e1e8c39bb516f2
-SHA1 (patch-ac) = 8b7fd122923082a4916f3b46bbfb8475a19f5dd6
diff -ruN ipa.orig/patches/patch-aa ipa/patches/patch-aa
--- ipa.orig/patches/patch-aa	Sun Jun 30 03:47:54 2002
+++ ipa/patches/patch-aa	Fri Oct  4 16:41:50 2002
@@ -1,7 +1,7 @@
 $NetBSD: patch-aa,v 1.4 2002/06/30 03:47:54 jlam Exp $

---- Makefile.orig	Sat Jun 29 21:14:15 2002
-+++ Makefile
+--- Makefile.orig	Fri Sep 27 23:24:32 2002
++++ Makefile	Fri Oct  4 16:40:51 2002
 @@ -38,7 +38,7 @@
  #	-Ox   - optimize;
  #	-g    - produce debugging information.
@@ -20,7 +20,7 @@

  #
  # DSTRCDIR - where to install sample rc-script
-@@ -97,10 +97,10 @@
+@@ -96,10 +96,10 @@
  #
  # Some INSTALL_* variables
  #
@@ -35,31 +35,22 @@
  INSTALL_MAN_DIR=	${INSTALL} -d -m 0555 -g wheel -o root
  INSTALL_DATA_DIR=	${INSTALL} -d -m 0555 -g wheel -o root

-@@ -219,7 +219,7 @@
- 	${RM} -r ${DSTEXAMPLEDIR}
- 	${RM} ${DSTMANDIR}/man5/ipa.conf.5 ${DSTMANDIR}/man5/ipa.5 ${DSTMANDIR}/man8/ipa.8 ${DSTMANDIR}/man8/ipastat.8
- 	${RM} ${DSTMANDIR}/ru_SU.KOI8-R/man5/ipa.conf.5 ${DSTMANDIR}/ru_SU.KOI8-R/man5/ipa.5 ${DSTMANDIR}/ru_SU.KOI8-R/man8/ipa.8 ${DSTMANDIR}/ru_SU.KOI8-R/man8/ipastat.8
--	${RM} ${DSTETCDIR}/ipa.conf.default ${DSTRCDIR}/ipa.sh.sample
-+	${RM} ${DSTETCDIR}/ipa.conf.default ${DSTRCDIR}/ipa
-
- install:
- .if !exists(./ipa) || !exists(./ipastat)
-@@ -231,21 +231,10 @@
+@@ -230,21 +230,9 @@
  	${INSTALL_PROGRAM} ipa ipastat ${DSTBINDIR}
  	${INSTALL_MAN} man/ipa.5 man/ipa.conf.5 ${DSTMANDIR}/man5
  	${INSTALL_MAN} man/ipa.8 man/ipastat.8 ${DSTMANDIR}/man8
--.if !exists(${DSTMANDIR}/ru_SU.KOI8-R/man5)
--	${INSTALL_MAN_DIR} ${DSTMANDIR}/ru_SU.KOI8-R/man5
+-.if !exists(${DSTMANDIR}/ru_RU.KOI8-R/man5)
+-	${INSTALL_MAN_DIR} ${DSTMANDIR}/ru_RU.KOI8-R/man5
 -.endif
--.if !exists(${DSTMANDIR}/ru_SU.KOI8-R/man8)
--	${INSTALL_MAN_DIR} ${DSTMANDIR}/ru_SU.KOI8-R/man8
+-.if !exists(${DSTMANDIR}/ru_RU.KOI8-R/man8)
+-	${INSTALL_MAN_DIR} ${DSTMANDIR}/ru_RU.KOI8-R/man8
 -.endif
--.if !exists(${DSTMANDIR}/ru_RU.KOI8-R)
--	${LN} -s ${DSTMANDIR}/ru_SU.KOI8-R ${DSTMANDIR}/ru_RU.KOI8-R
+-.if !exists(${DSTMANDIR}/ru_SU.KOI8-R)
+-	${LN} -s ${DSTMANDIR}/ru_RU.KOI8-R ${DSTMANDIR}/ru_SU.KOI8-R
 -.endif
 -	${INSTALL_MAN} man/ru_RU.KOI8-R/ipa.5 man/ru_RU.KOI8-R/ipa.conf.5 ${DSTMANDIR}/ru_SU.KOI8-R/man5
 -	${INSTALL_MAN} man/ru_RU.KOI8-R/ipa.8 man/ru_RU.KOI8-R/ipastat.8 ${DSTMANDIR}/ru_SU.KOI8-R/man8
- 	${INSTALL_DATA_DIR} ${DSTEXAMPLEDIR}
+-	${INSTALL_DATA_DIR} ${DSTEXAMPLEDIR}
  	${INSTALL_DATA} examples/* ${DSTEXAMPLEDIR}
  .if exists(${DSTRCDIR})
 -	${INSTALL_SCRIPT} etc/ipa.sh.sample ${DSTRCDIR}
@@ -67,11 +58,3 @@
  .else
  	@${ECHO}
  	@${ECHO} ">> Can't find directory ${DSTRCDIR}, skip installing of ipa.sh.sample"
-@@ -254,7 +243,6 @@
- .endif
- .if exists(${DSTETCDIR})
- 	${INSTALL_DATA} etc/ipa.conf.default ${DSTETCDIR}
--	${CHMOD} 0400 ${DSTETCDIR}/ipa.conf.default
- .else
- 	@${ECHO}
- 	@${ECHO} ">> Can't find directory ${DSTETCDIR}, skip installing of ipa.conf.default"
diff -ruN ipa.orig/patches/patch-ac ipa/patches/patch-ac
--- ipa.orig/patches/patch-ac	Sun Jun 30 13:13:48 2002
+++ ipa/patches/patch-ac	Thu Jan  1 00:00:00 1970
@@ -1,10 +0,0 @@
-$NetBSD: patch-ac,v 1.1 2002/06/30 13:13:49 dmcmahill Exp $
-
---- db.c.orig	Wed Jun 19 08:10:20 2002
-+++ db.c	Sun Jun 30 09:07:42 2002
-@@ -36,4 +36,5 @@
- #include <stdio.h>
- #include <stdlib.h>
-+#include <string.h>
- #include <syslog.h>
- #include <time.h>

>Release-Note:
>Audit-Trail:
>Unformatted:
 To: gnats-bugs@gnats.netbsd.org
 Subject: Maintainer update port net/ipa 1.2.7 -> 1.2.8
 From: simon@simon.org.ua
 Reply-To: simon@simon.org.ua
 X-send-pr-version: 3.95