diff options
| author |   Sergei Trofimovich <slyfox@gentoo.org> | 2017-11-13 23:23:10 +0000 |
|---|---|---|
| committer | Sergei Trofimovich <slyfox@gentoo.org> | 2017-11-13 23:25:59 +0000 |
| commit | 66b10cf352d69a96824cba2c2a2bdea8e8094d7b (patch) | |
| tree | 5e02b01fd7fb45f036c8c70e11d6c77fa3f752ae /sys-libs | |
| parent | games-arcade/supertux: update HOMEPAGE (diff) | |
| download | gentoo-66b10cf352d69a96824cba2c2a2bdea8e8094d7b.tar.gz gentoo-66b10cf352d69a96824cba2c2a2bdea8e8094d7b.tar.bz2 gentoo-66b10cf352d69a96824cba2c2a2bdea8e8094d7b.zip | |
sys-libs/glibc: guard against rendering system unusable, bug #627338
For cases like FEATURES=config-protect-if-modified
or custom /etc/nsswitch.conf with only 'compat' resolver
and external providers glibc upgrade will break local
user resolution when switching from older glibc.
Bad /etc/nsswitch.conf:
passwd: compat
shadow: compat
group: compat
Good /etc/nsswitch.conf:
passwd: files
shadow: files
group: files
Ok /etc/nsswitch.conf:
passwd: compat files
shadow: compat files
group: compat files
More up-to-date doc:
https://wiki.gentoo.org/wiki/Project:Toolchain/nsswitch.conf_in_glibc-2.26
Bug: https://bugs.gentoo.org/627338
Package-Manager: Portage-2.3.13, Repoman-2.3.4
Diffstat (limited to 'sys-libs')
| -rw-r--r-- | sys-libs/glibc/glibc-2.26-r3.ebuild | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/sys-libs/glibc/glibc-2.26-r3.ebuild b/sys-libs/glibc/glibc-2.26-r3.ebuild index 2234b26a0844..98ab050e12fb 100644 --- a/sys-libs/glibc/glibc-2.26-r3.ebuild +++ b/sys-libs/glibc/glibc-2.26-r3.ebuild @@ -189,6 +189,21 @@ pkg_pretend() { die "old __guard detected" fi fi + + # Check for sanity of /etc/nsswitch.conf + if [[ -e ${EROOT}/etc/nsswitch.conf ]] ; then + local entry + for entry in passwd group shadow; do + if ! egrep -q "[ \t]*${entry}:.*files" "${EROOT}"/etc/nsswitch.conf; then + eerror "Your ${EROOT}/etc/nsswitch.conf is out of date." + eerror "Please make sure you have 'files' entries for" + eerror "'passwd:', 'group:' and 'shadow:' databases." + eerror "For more details see:" + eerror " https://wiki.gentoo.org/wiki/Project:Toolchain/nsswitch.conf_in_glibc-2.26" + die "nsswitch.conf has no 'files' provider in '${entry}'." + fi + done + fi } src_unpack() { |