Usermin is a web interface that can be used by any user on a Unix
system to easily perform tasks like reading mail, setting up SSH
or configuring mail forwarding. It can be thought of as a simplified
version of Webmin designed for use by normal users rather than
system administrators.
sysutils/usermin: Update to 2.560
Upstream replaced the blue-theme directory with a symlink to gray-theme.
Use ${CP} -R instead of -r in do-install so the symlink is preserved
rather than expanded into a second copy of the theme, and regenerate
pkg-plist accordingly.
sysutils/usermin: Fix interactive prompts during install
Replace read statements with auto-answers in setup.sh patch to prevent
the installer from blocking on stdin for config_dir, var_dir, and perl
path inputs.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
Update sysutils/usermin to version 1.780.
Contains fix for CVE-2019-15107.
From https://virtualmin.com/node/66890:
To exploit the malicious code, your Webmin installation must have Webmin ->
Webmin Configuration -> Authentication -> Password expiry policy set to
Prompt users with expired passwords to enter a new one. This option is not
set by default, but if it is set, it allows remote code execution.
PR: 239957
Submitted by: Bert JW Regeer <xistence@0x58.com>
Security: CVE-2019-15107
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Fix a few "bad example" problems in the rc.d scripts that have been
propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.
Chase checksum.
* mailbox/CHANGELOG - add missing header for 1.270;
* miniserv.pl - handle login failures from handle_login;
* uconfig.cgi - use module_root_directory to locate modules, check if a module
function is defined before calling it;
* uconfig_save.cgi - module_root_directory;
* web-lib-funcs.pl - solaris fix.
