openbsd-ports/www/zope/Makefile
naddy 3ef18e1e59 SECURITY: Add hotfix; from matt@
The issue involves a vulnerability involving "through the web code"
inadvertently allowing an untrusted user to remotely shut down a
Zope server by allowing the user to inject special headers into the
response. If you allow untrusted users to write "through the web"
code like Python Scripts, DTML Methods, or Page Templates, your
Zope server is vulnerable.
2002-04-17 16:04:01 +00:00

95 lines
3.0 KiB
Makefile

# $OpenBSD: Makefile,v 1.10 2002/04/17 16:04:01 naddy Exp $
COMMENT= "object-oriented web application server"
VERSION= 2.5.1b1
PORT_VERSION= ${VERSION}.1
DISTNAME= Zope-${VERSION}-src
PKGNAME= zope-${PORT_VERSION}
CATEGORIES= www
NEED_VERSION= 1.516
HOMEPAGE= http://www.zope.org/
MAINTAINER= Matt Behrens <matt@openbsd.org>
PERMIT_PACKAGE_CDROM= Yes
PERMIT_PACKAGE_FTP= Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= Yes
MASTER_SITES= http://www.zope.org/Products/Zope/${VERSION}/
EXTRACT_SUFX= .tgz
EXTRACT_CASES= *.tgz) gtar zxf ${FULLDISTDIR}/$$archive ;;
MASTER_SITES0= http://www.zope.org/Members/zigg/UnixSecurityPatch/
PATCHFILES= Zope-${VERSION}-unix-security.patch:0
PATCH_DIST_STRIP=-p1
HOTFIX_DATE1= 2002-04-15
MASTER_SITES1= http://www.zope.org/Products/Zope/Hotfix_${HOTFIX_DATE1}/
DISTFILES= ${DISTNAME}${EXTRACT_SUFX} \
Hotfix_${HOTFIX_DATE1}.tgz:1
BUILD_DEPENDS= :python->=2.1.2,<2.2:lang/python/2.1 \
:gtar-*:archivers/gtar
RUN_DEPENDS= :python->=2.1.2,<2.2:lang/python/2.1
# Note that the configure script is really just for pcgi, but it's
# the only one in the package.
CONFIGURE_STYLE=gnu
WRKBUILD= ${WRKSRC}/pcgi
MODGNU_CONFIG_GUESS_DIRS= ${WRKBUILD}
ZOPEHOME= ${PREFIX}/lib/zope
PRODUCTSDIR= ${ZOPEHOME}/lib/python/Products
do-build:
cd ${WRKSRC} && \
ZDIR=${ZOPEHOME} python2.1 w_pcgi.py && \
ZDIR=${ZOPEHOME} python2.1 -O inst/compilezpy.py
sed -e "s%@@PREFIX@@%${PREFIX}%g" \
-e "s%@@LOCALBASE@@%${LOCALBASE}%g" \
< ${FILESDIR}/zope-instance > ${WRKSRC}/zope-instance
# All this should give us what closely resembles a zope.org binary
# installation and allow us to rely as much as possible on make
# plist to update to newer versions.
do-install:
${INSTALL_SCRIPT} ${WRKSRC}/zope-instance ${PREFIX}/bin
${INSTALL_PROGRAM_DIR} ${ZOPEHOME}
cp -Rp ${WRKSRC}/* ${ZOPEHOME}
chown -R 0:0 ${ZOPEHOME}
cd ${ZOPEHOME}/lib && ln -s ../../python2.1
rm -r ${ZOPEHOME}/*.txt ${ZOPEHOME}/doc ${ZOPEHOME}/lib/Components \
${ZOPEHOME}/pcgi/Win32
find ${ZOPEHOME} -name \*.orig -or -name \*.o -or -name .cvsignore \
-or -name sedscript -or -name \*.old | xargs rm
find ${ZOPEHOME}/lib/python -name config.c -or -name Makefile \
-or -name Makefile.pre -or -name Makefile.pre.in | xargs rm
rm ${ZOPEHOME}/lib/python/Setup ${ZOPEHOME}/pcgi/Makefile \
${ZOPEHOME}/pcgi/config.log ${ZOPEHOME}/pcgi/config.status \
${ZOPEHOME}/pcgi/config.cache ${ZOPEHOME}/zope-instance \
${ZOPEHOME}/w*_pcgi.py*
${INSTALL_DATA_DIR} ${PREFIX}/share/doc/zope/changenotes
${INSTALL_DATA} ${WRKSRC}/*.txt ${WRKSRC}/doc/*.txt \
${PREFIX}/share/doc/zope
${INSTALL_DATA} ${WRKSRC}/doc/changenotes/* \
${PREFIX}/share/doc/zope/changenotes
echo "Zope ${VERSION} (OpenBSD package zope-${PORT_VERSION})" \
> ${PREFIX}/lib/zope/lib/python/version.txt
${INSTALL_DATA_DIR} ${PRODUCTSDIR}/Hotfix_${HOTFIX_DATE1}
${INSTALL_DATA} \
${WRKDIR}/lib/python/Products/Hotfix_${HOTFIX_DATE1}/* \
${PRODUCTSDIR}/Hotfix_${HOTFIX_DATE1}
do-regress:
cd ${WRKSRC} && python2.1 utilities/testrunner.py -a
.include <bsd.port.mk>