ports/161689: net/nss-pam-ldapd doesn't honor PREFIX -- DANGEROUS for remote upgrades!

Andrew Kolchoogin gadm at web.trunk-com.ru
Sat Oct 15 17:30:12 UTC 2011


>Number:         161689
>Category:       ports
>Synopsis:       net/nss-pam-ldapd doesn't honor PREFIX -- DANGEROUS for remote upgrades!
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Oct 15 17:30:11 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Andrew Kolchoogin
>Release:        FreeBSD 8.2-RELEASE-p4 amd64
>Organization:
The Avalon Project
>Environment:
System: FreeBSD web.trunk-com.ru 8.2-RELEASE-p4 FreeBSD 8.2-RELEASE-p4 #0: Fri Oct 14 23:30:58 MSD 2011 gadm at controller.trunk-com.ru:/usr/obj/usr/src/sys/GENERIC amd64


	Really non os/target/libraries-dependant
>Description:
	Error in rc.d/nslcd prevents machine from booting
>How-To-Repeat:
	DO NOT DO THAT ON REAL HARDWARE: just upgrade net/nss-pam-ldapd to latest version available from ports with LOCALBASE set to something different from /usr/local and reboot -- machine boot will never end, and you will be unable even to ssh to it.
>Fix:
    Apply the following patch:

diff -r 301a98633249 net/nss-pam-ldapd/files/nslcd.in
--- a/net/nss-pam-ldapd/files/nslcd.in	Fri Oct 14 18:30:36 2011 +0400
+++ b/net/nss-pam-ldapd/files/nslcd.in	Sat Oct 15 20:33:52 2011 +0400
@@ -21,7 +21,7 @@
 start_postcmd="nslcd_poststart"
 
 nslcd_poststart () {
-       until $(/usr/local/sbin/nslcd -c); do
+       until $(%%PREFIX%%/sbin/${name} -c); do
                echo " Waiting for nslcd to start"
                sleep 1
        done

    and rebuld the port in question.

>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list