--- /dev/null
+libnss-nonlocal (1.4-0debathena1) unstable; urgency=low
+
+ * Bug fixes and cleanups.
+
+ -- Anders Kaseorg <andersk@mit.edu> Fri, 15 Feb 2008 21:39:50 -0500
+
+libnss-nonlocal (1.3-0debathena2) unstable; urgency=low
+
+ * Set maintainer to debathena@mit.edu.
+
+ -- Tim Abbott <tabbott@mit.edu> Tue, 29 Jan 2008 22:18:25 -0500
+
+libnss-nonlocal (1.3-0debathena1) unstable; urgency=low
+
+ * Have initgroups() only add nonlocal groups to nonlocal users.
+ * If a group called nss-local-users exists, add local users to it.
+ * If a group called nss-nonlocal-users exists, add nonlocal users to it.
+ * Create nss-local-users and nss-nonlocal-users at installation.
+
+ -- Tim Abbott <tabbott@mit.edu> Tue, 29 Jan 2008 22:11:37 -0500
+
+libnss-nonlocal (1.2) unstable; urgency=low
+
+ * Use a magic buflen instead of thread-local variables, to avoid
+ strange problems on sarge.
+ * Don't link with pthread.
+
+ -- Anders Kaseorg <andersk@mit.edu> Tue, 07 Aug 2007 22:00:28 -0400
+
+libnss-nonlocal (1.1) unstable; urgency=low
+
+ * Link with pthread to be safe.
+
+ -- Anders Kaseorg <andersk@mit.edu> Fri, 03 Aug 2007 21:24:17 -0400
+
+libnss-nonlocal (1.0-0debathena2) unstable; urgency=low
+
+ * Section: debathena/libs.
+
+ -- Anders Kaseorg <andersk@mit.edu> Mon, 23 Jul 2007 14:14:46 -0400
+
+libnss-nonlocal (1.0-0debathena1) unstable; urgency=low
+
+ * Initial release.
+
+ -- Anders Kaseorg <andersk@mit.edu> Thu, 19 Jul 2007 21:07:50 -0400
--- /dev/null
+Source: libnss-nonlocal
+Section: debathena/libs
+Priority: optional
+Maintainer: Debian-Athena Project <debathena@mit.edu>
+Standards-Version: 3.7.2
+Build-Depends: cdbs (>= 0.4.23-1.1), debhelper (>= 4.2.0)
+
+Package: libnss-nonlocal
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: nsswitch proxy module to prevent local account spoofing
+ This nsswitch module acts as a proxy for other nsswitch modules like
+ hesiod, but prevents non-local users from potentially gaining local
+ privileges by spoofing local UIDs and GIDs.
--- /dev/null
+Source: libnss-nonlocal
+Section: debathena/libs
+Priority: optional
+Maintainer: Debian-Athena Project <debathena@mit.edu>
+Standards-Version: 3.7.2
+Build-Depends: @cdbs@
+
+Package: libnss-nonlocal
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: nsswitch proxy module to prevent local account spoofing
+ This nsswitch module acts as a proxy for other nsswitch modules like
+ hesiod, but prevents non-local users from potentially gaining local
+ privileges by spoofing local UIDs and GIDs.
--- /dev/null
+Copyright © 2007 Anders Kaseorg <andersk@mit.edu> and Tim Abbott
+<tabbott@mit.edu>
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
--- /dev/null
+#!/bin/sh
+# postrm script for libnss-nonlocal
+#
+# see: dh_installdeb(1)
+
+set -e
+
+# summary of how this script can be called:
+# * <postrm> `remove'
+# * <postrm> `purge'
+# * <old-postrm> `upgrade' <new-version>
+# * <new-postrm> `failed-upgrade' <old-version>
+# * <new-postrm> `abort-install'
+# * <new-postrm> `abort-install' <old-version>
+# * <new-postrm> `abort-upgrade' <old-version>
+# * <disappearer's-postrm> `disappear' <overwriter>
+# <overwriter-version>
+# for details, see http://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+
+case "$1" in
+ purge)
+ if getent group nss-local-users >/dev/null; then
+ delgroup --system nss-local-users || :
+ fi
+ if getent group nss-nonlocal-users >/dev/null; then
+ delgroup --system nss-nonlocal-users || :
+ fi
+ ;;
+
+ remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
+ ;;
+
+ *)
+ echo "postrm called with unknown argument \`$1'" >&2
+ exit 1
+ ;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
+
+
--- /dev/null
+#!/bin/sh
+# preinst script for debathena-liblocker
+#
+# see: dh_installdeb(1)
+
+set -e
+
+# summary of how this script can be called:
+# * <new-preinst> `install'
+# * <new-preinst> `install' <old-version>
+# * <new-preinst> `upgrade' <old-version>
+# * <old-preinst> `abort-upgrade' <new-version>
+# for details, see http://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+
+case "$1" in
+ install|upgrade)
+ if ! getent group nss-local-users >/dev/null; then
+ addgroup --system nss-local-users
+ fi
+ if ! getent group nss-nonlocal-users >/dev/null; then
+ addgroup --system nss-nonlocal-users
+ fi
+ ;;
+
+ abort-upgrade)
+ ;;
+
+ *)
+ echo "preinst called with unknown argument \`$1'" >&2
+ exit 1
+ ;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
+
+
+
+
--- /dev/null
+#!/usr/bin/make -f
+
+DEB_AUTO_UPDATE_DEBIAN_CONTROL = 1
+include /usr/share/cdbs/1/rules/debhelper.mk
+include /usr/share/cdbs/1/class/makefile.mk
+
+DEB_MAKE_INSTALL_TARGET = install DESTDIR=$(DEB_DESTDIR)
andersk / nss_nonlocal.git / commitdiff
