libicon

[Mike Pechkin]

hi,

address@hidden said write to this list.
This is from OpenBSD-CURRENT ports tree.
This patch shows mini-secure-hole, I don't believe we need 777 there. 
 
Index: converters/libiconv/patches/patch-autoconf_ltmain_sh
===================================================================
RCS file: /cvs/ports/converters/libiconv/patches/patch-autoconf_ltmain_sh,v
retrieving revision 1.6
diff -u -p -r1.6 patch-autoconf_ltmain_sh
--- converters/libiconv/patches/patch-autoconf_ltmain_sh        10 Jun 2002 
04:41:48 -0000      1.6
+++ converters/libiconv/patches/patch-autoconf_ltmain_sh        1 Aug 2002 
20:57:55 -0000
@@ -1,5 +1,27 @@
---- autoconf/ltmain.sh.orig    Fri Jun  7 17:50:58 2002
-+++ autoconf/ltmain.sh Fri Jun  7 17:51:37 2002
+--- autoconf/ltmain.sh.orig    Wed Feb  6 14:11:25 2002
++++ autoconf/ltmain.sh Thu Aug  1 23:52:06 2002
+@@ -546,8 +546,8 @@ compiler."
+         if test $status -ne 0 && test ! -d $dir; then
+           exit $status
+         fi
+-        $show "chmod 777 $dir"
+-        $run chmod 777 $dir
++        $show "chmod 755 $dir"
++        $run chmod 755 $dir
+       fi
+       fi
+       if test "$compiler_o_lo" = yes; then
+@@ -1312,8 +1312,8 @@ compiler."
+       if test $status -ne 0 && test ! -d $output_objdir; then
+       exit $status
+       fi
+-      $show "chmod 777 $output_objdir"
+-      $run chmod 777 $output_objdir
++      $show "chmod 755 $output_objdir"
++      $run chmod 755 $output_objdir
+     fi
+ 
+     # Determine the type of output
 @@ -4465,40 +4465,6 @@ relink_command=\"$relink_command\""
      # Exit here if they wanted silent mode.
      test "$show" = ":" && exit 0
Index: converters/libiconv/patches/patch-libcharset_autoconf_ltmain_sh
===================================================================
RCS file: 
/cvs/ports/converters/libiconv/patches/patch-libcharset_autoconf_ltmain_sh,v
retrieving revision 1.6
diff -u -p -r1.6 patch-libcharset_autoconf_ltmain_sh
--- converters/libiconv/patches/patch-libcharset_autoconf_ltmain_sh     10 Jun 
2002 04:41:48 -0000      1.6
+++ converters/libiconv/patches/patch-libcharset_autoconf_ltmain_sh     1 Aug 
2002 20:57:55 -0000
@@ -1,5 +1,27 @@
---- libcharset/autoconf/ltmain.sh.orig Wed Feb  6 05:11:25 2002
-+++ libcharset/autoconf/ltmain.sh      Fri Jun  7 17:53:35 2002
+--- libcharset/autoconf/ltmain.sh.orig Wed Feb  6 14:11:25 2002
++++ libcharset/autoconf/ltmain.sh      Thu Aug  1 23:55:08 2002
+@@ -546,8 +546,8 @@ compiler."
+         if test $status -ne 0 && test ! -d $dir; then
+           exit $status
+         fi
+-        $show "chmod 777 $dir"
+-        $run chmod 777 $dir
++        $show "chmod 755 $dir"
++        $run chmod 755 $dir
+       fi
+       fi
+       if test "$compiler_o_lo" = yes; then
+@@ -1312,8 +1312,8 @@ compiler."
+       if test $status -ne 0 && test ! -d $output_objdir; then
+       exit $status
+       fi
+-      $show "chmod 777 $output_objdir"
+-      $run chmod 777 $output_objdir
++      $show "chmod 755 $output_objdir"
++      $run chmod 755 $output_objdir
+     fi
+ 
+     # Determine the type of output
 @@ -4465,40 +4465,6 @@ relink_command=\"$relink_command\""
      # Exit here if they wanted silent mode.
      test "$show" = ":" && exit 0
Index: converters/libiconv/patches/patch-src_Makefile_in
===================================================================
RCS file: /cvs/ports/converters/libiconv/patches/patch-src_Makefile_in,v
retrieving revision 1.1
diff -u -p -r1.1 patch-src_Makefile_in
--- converters/libiconv/patches/patch-src_Makefile_in   13 Jun 2002 03:45:57 
-0000      1.1
+++ converters/libiconv/patches/patch-src_Makefile_in   1 Aug 2002 20:57:55 
-0000
@@ -1,6 +1,15 @@
 $OpenBSD: patch-src_Makefile_in,v 1.1 2002/06/13 03:45:57 brad Exp $
---- src/Makefile.in.orig       Mon Jun 10 20:22:26 2002
-+++ src/Makefile.in    Mon Jun 10 20:22:55 2002
+--- src/Makefile.in.orig       Wed May 29 17:04:10 2002
++++ src/Makefile.in    Thu Aug  1 23:42:42 2002
+@@ -51,7 +51,7 @@ top_builddir = ..
+ # without internationalization and not linked with libintl.
+ 
+ all : iconv_no_i18n address@hidden@
+-      chmod 777 .
++      chmod 755 .
+ 
+ # This is the temporary iconv executable, without internationalization.
+ iconv_no_i18n : address@hidden@ ../lib/libiconv.la
 @@ -78,7 +78,7 @@ install : all force
        if [ ! -d $(DESTDIR)$(bindir) ] ; then mkdir $(DESTDIR)$(bindir) ; fi
        case "@host_os@" in \

--mpech
address@hidden