Remove poor approach to kernel headers

(Portage version: 2.1.10.44/cvs/Linux x86_64)

3 files changed, 5 insertions, 270 deletions

diff --git a/net-firewall/ipsec-tools/ChangeLog b/net-firewall/ipsec-tools/ChangeLog
index 1ccc71119ff5..e3e9ac77b7d3 100644
--- a/net-firewall/ipsec-tools/ChangeLog
+++ b/net-firewall/ipsec-tools/ChangeLog
@@ -1,6 +1,10 @@
 # ChangeLog for net-firewall/ipsec-tools
 # Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/ChangeLog,v 1.87 2012/03/08 12:03:24 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/ChangeLog,v 1.88 2012/03/08 12:06:50 blueness Exp $
+
+  08 Mar 2012; Anthony G. Basile <blueness@gentoo.org>
+  -ipsec-tools-0.8.0-r2.ebuild, -files/ipsec-tools-system-kernel-headers.patch:
+  Remove poor approach to kernel headers
 
 *ipsec-tools-0.8.0-r3 (08 Mar 2012)
 
diff --git a/net-firewall/ipsec-tools/files/ipsec-tools-system-kernel-headers.patch b/net-firewall/ipsec-tools/files/ipsec-tools-system-kernel-headers.patch
deleted file mode 100644
index 91e7e6194e99..000000000000
--- a/net-firewall/ipsec-tools/files/ipsec-tools-system-kernel-headers.patch
+++ /dev/null
@@ -1,34 +0,0 @@
-From: Anthony G. Basile <blueness@gentoo.org>
-
-ipsec-tools tries to make use of the kernel headers in /usr/src/linux/include/linux.
-This is not a good idea because these are not the system exported linux header files.
-Unfortunately the configure.ac option which says where to look for these headers
-doesn't point to the directory itself, usually /usr/include/linux, but to its parent!
-
-Our solution then, although less than satifying, is to remove the --with-kernel-headers
-switch and hard code KERNEL_INCLUDE="/usr/include".
-
-diff -Naur ipsec-tools-0.8.0.orig/configure.ac ipsec-tools-0.8.0/configure.ac
---- ipsec-tools-0.8.0.orig/configure.ac	2012-03-05 18:46:54.000000000 -0500
-+++ ipsec-tools-0.8.0/configure.ac	2012-03-05 18:53:56.000000000 -0500
-@@ -66,18 +66,11 @@
- 
- case "$host_os" in
-  *linux*)
--    AC_ARG_WITH(kernel-headers,
--	AC_HELP_STRING([--with-kernel-headers=/lib/modules/<uname>/build/include],
--		       [where your Linux Kernel headers are installed]),
--	    [ KERNEL_INCLUDE="$with_kernel_headers" 
--	      CONFIGURE_AMFLAGS="--with-kernel-headers=$with_kernel_headers"
--	      AC_SUBST(CONFIGURE_AMFLAGS) ],
--	    [ KERNEL_INCLUDE="/lib/modules/`uname -r`/build/include" ])
--
-+    KERNEL_INCLUDE="/usr/include"
-     AC_CHECK_HEADER($KERNEL_INCLUDE/linux/pfkeyv2.h, ,
- 	[ AC_CHECK_HEADER(/usr/src/linux/include/linux/pfkeyv2.h,
- 	  KERNEL_INCLUDE=/usr/src/linux/include ,
--	  [ AC_MSG_ERROR([Unable to find linux-2.6 kernel headers. Aborting.]) ] ) ] )
-+	  [ AC_MSG_ERROR([Unable to find linux kernel headers. Aborting.]) ] ) ] )
-     AC_SUBST(KERNEL_INCLUDE)
-     # We need the configure script to run with correct kernel headers.
-     # However we don't want to point to kernel source tree in compile time,
diff --git a/net-firewall/ipsec-tools/ipsec-tools-0.8.0-r2.ebuild b/net-firewall/ipsec-tools/ipsec-tools-0.8.0-r2.ebuild
deleted file mode 100644
index dc5c9d59ef72..000000000000
--- a/net-firewall/ipsec-tools/ipsec-tools-0.8.0-r2.ebuild
+++ /dev/null
@@ -1,235 +0,0 @@
-# Copyright 1999-2012 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/ipsec-tools-0.8.0-r2.ebuild,v 1.1 2012/03/06 00:12:41 blueness Exp $
-
-EAPI="4"
-
-inherit eutils flag-o-matic autotools linux-info pam
-
-DESCRIPTION="A port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation"
-HOMEPAGE="http://ipsec-tools.sourceforge.net/"
-SRC_URI="mirror://sourceforge/${PN}/${P}.tar.bz2"
-
-LICENSE="BSD"
-SLOT="0"
-KEYWORDS="~amd64 ~x86"
-IUSE="rc5 idea kerberos stats ipv6 nat selinux readline pam hybrid ldap"
-
-RDEPEND="
-	kerberos? ( virtual/krb5 )
-	selinux? (
-		sys-libs/libselinux
-		sec-policy/selinux-ipsec-tools
-	)
-	readline? ( sys-libs/readline )
-	pam? ( sys-libs/pam )
-	ldap? ( net-nds/openldap )
-	dev-libs/openssl
-	virtual/libiconv"
-#	iconv? ( virtual/libiconv )
-#	radius? ( net-dialup/gnuradius )
-
-DEPEND="${RDEPEND}
-	>=sys-kernel/linux-headers-2.6.30"
-
-pkg_setup() {
-	linux-info_pkg_setup
-
-	get_version
-
-	if linux_config_exists && kernel_is -ge 2 6 19; then
-		ewarn
-		ewarn "\033[1;33m**************************************************\033[1;33m"
-		ewarn
-		ewarn "Checking kernel configuration in /usr/src/linux or"
-		ewarn "or /proc/config.gz for compatibility with ${PN}."
-		ewarn
-		ewarn "WARNING: If your *configured* and *running* kernel"
-		ewarn "differ either now or in the future, then these checks"
-		ewarn "may lead to misleading results."
-
-		# Check options for all flavors of IPSec
-		local msg=""
-		for i in XFRM_USER NET_KEY; do
-			if ! linux_chkconfig_present ${i}; then
-				msg="${msg} ${i}"
-			fi
-		done
-		if [[ ! -z "$msg" ]]; then
-			ewarn
-			ewarn "ALL IPSec may fail. CHECK:"
-			ewarn "${msg}"
-		fi
-
-		# Check unencrypted IPSec
-		if ! linux_chkconfig_present CRYPTO_NULL; then
-			ewarn
-			ewarn "Unencrypted IPSec may fail. CHECK:"
-			ewarn " CRYPTO_NULL"
-		fi
-
-		# Check IPv4 IPSec
-		msg=""
-		for i in \
-			INET_IPCOMP INET_AH INET_ESP \
-			INET_XFRM_MODE_TRANSPORT \
-			INET_XFRM_MODE_TUNNEL \
-			INET_XFRM_MODE_BEET
-		do
-			if ! linux_chkconfig_present ${i}; then
-				msg="${msg} ${i}"
-			fi
-		done
-		if [[ ! -z "$msg" ]]; then
-			ewarn
-			ewarn "IPv4 IPSec may fail. CHECK:"
-			ewarn "${msg}"
-		fi
-
-		# Check IPv6 IPSec
-		if use ipv6; then
-			msg=""
-			for i in INET6_IPCOMP INET6_AH INET6_ESP \
-				INET6_XFRM_MODE_TRANSPORT \
-				INET6_XFRM_MODE_TUNNEL \
-				INET6_XFRM_MODE_BEET
-			do
-				if ! linux_chkconfig_present ${i}; then
-					msg="${msg} ${i}"
-				fi
-			done
-			if [[ ! -z "$msg" ]]; then
-				ewarn
-				ewarn "IPv6 IPSec may fail. CHECK:"
-				ewarn "${msg}"
-			fi
-		fi
-
-		# Check IPSec behind NAT
-		if use nat; then
-			if ! linux_chkconfig_present NETFILTER_XT_MATCH_POLICY; then
-				ewarn
-				ewarn "IPSec behind NAT may fail.  CHECK:"
-				ewarn " NETFILTER_XT_MATCH_POLICY"
-			fi
-		fi
-
-		ewarn
-		ewarn "\033[1;33m**************************************************\033[1;33m"
-		ewarn
-	else
-		eerror
-		eerror "\033[1;31m**************************************************\033[1;31m"
-		eerror "Make sure that your *running* kernel is/will be >=2.6.19."
-		eerror "Building ${PN} now, assuming that you know what you're doing."
-		eerror "\033[1;31m**************************************************\033[1;31m"
-		eerror
-	fi
-}
-
-src_prepare() {
-	# fix for bug #76741
-	sed -i 's:#include <sys/sysctl.h>::' src/racoon/pfkey.c src/setkey/setkey.c || die
-	# fix for bug #124813
-	sed -i 's:-Werror::g' "${S}"/configure.ac || die
-	# fix for building with gcc-4.6
-	sed -i 's: -R: -Wl,-R:' "${S}"/configure.ac || die
-
-	epatch "${FILESDIR}/${PN}-def-psk.patch"
-	epatch "${FILESDIR}/${PN}-include-vendoridh.patch"
-	epatch "${FILESDIR}/${PN}-system-kernel-headers.patch"
-
-	AT_M4DIR="${S}" eautoreconf
-	epunt_cxx
-}
-
-src_configure() {
-	# fix for bug #61025
-	filter-flags -march=c3
-
-	local myconf
-	myconf="--with-kernel-headers=/usr/include \
-			--enable-adminport \
-			--enable-frag \
-			--enable-dpd \
-			--enable-dependency-tracking \
-			$(use_enable rc5) \
-			$(use_enable idea) \
-			$(use_enable kerberos gssapi) \
-			$(use_enable stats) \
-			$(use_enable ipv6) \
-			$(use_enable nat natt) \
-			$(use_enable selinux security-context) \
-			$(use_with readline) \
-			$(use_with pam libpam) \
-			$(use_with ldap libldap)"
-
-	use nat && myconf="${myconf} --enable-natt-versions=yes"
-
-	# enable mode-cfg and xauth support
-	if use pam; then
-		myconf="${myconf} --enable-hybrid"
-	else
-		myconf="${myconf} $(use_enable hybrid)"
-	fi
-
-	# dev-libs/libiconv is hard masked
-	#use iconv && myconf="${myconf} $(use_with iconv libiconv)"
-
-	# the default (/usr/include/openssl/) is OK for Gentoo, leave it
-	# myconf="${myconf} $(use_with ssl openssl )"
-
-	# No way to get it compiling with freeradius or gnuradius
-	# We would need libradius which only exists on FreeBSD
-
-	# See bug #77369
-	#myconf="${myconf} --enable-samode-unspec"
-
-	econf ${myconf}
-}
-
-src_install() {
-	emake DESTDIR="${D}" install
-	keepdir /var/lib/racoon
-	newconfd "${FILESDIR}"/racoon.conf.d racoon
-	newinitd "${FILESDIR}"/racoon.init.d racoon
-	use pam && newpamd "${FILESDIR}"/racoon.pam.d racoon
-
-	dodoc ChangeLog README NEWS
-	dodoc -r src/racoon/samples
-	dodoc -r src/racoon/doc
-
-	docinto setkey
-	dodoc src/setkey/sample.cf
-
-	dodir /etc/racoon
-}
-
-pkg_postinst() {
-	if use nat; then
-		elog
-		elog "You have enabled the nat traversal functionnality."
-		elog "Nat versions wich are enabled by default are 00,02,rfc"
-		elog "you can find those drafts in the CVS repository:"
-		elog "cvs -d anoncvs@anoncvs.netbsd.org:/cvsroot co ipsec-tools"
-		elog
-		elog "If you feel brave enough and you know what you are"
-		elog "doing, you can consider emerging this ebuild with"
-		elog "EXTRA_ECONF=\"--enable-natt-versions=08,07,06\""
-		elog
-	fi
-
-	if use ldap; then
-		elog
-		elog "You have enabled ldap support with {$PN}."
-		elog "The man page does NOT contain any information on it yet."
-		elog "Consider using a more recent version or CVS."
-		elog
-	fi
-
-	elog
-	elog "Please have a look in /usr/share/doc/${P} and visit"
-	elog "http://www.netbsd.org/Documentation/network/ipsec/"
-	elog "to find more information on how to configure this tool."
-	elog
-}