This ebuild closes #41800. Thanks to condordes and mglauche for this ebuild.

5 files changed, 499 insertions, 23 deletions

diff --git a/net-fs/samba/ChangeLog b/net-fs/samba/ChangeLog
index 09d282466409..2ecc03b24562 100644
--- a/net-fs/samba/ChangeLog
+++ b/net-fs/samba/ChangeLog
@@ -1,6 +1,14 @@
 # ChangeLog for net-fs/samba
 # Copyright 2002-2004 Gentoo Technologies, Inc.; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-fs/samba/ChangeLog,v 1.64 2004/04/15 09:36:08 kumba Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-fs/samba/ChangeLog,v 1.65 2004/04/21 16:58:17 dmwaters Exp $
+
+*samba-3.0.2a-r1 (21 Apr 2004)
+
+  21 Apr 2004; Deedra Waters,,, <dmwaters@gentoo.org> samba-3.0.2a-r1.ebuild,
+  files/samba-3.0.2a-smbprint.patch:
+  committing samba-3.0.2a-r1.ebuildsamba-3.0.2a-r1.ebuild.
+  This ebuild will fix a local root exploitsee #41800 for more info.
+  Thanks to mglauche and condordes for theese fixes.
 
   15 Apr 2004; Joshua Kinard <kumba@gentoo.org> samba-3.0.2a.ebuild:
   mips needs the statfs patch too, it seems.
diff --git a/net-fs/samba/Manifest b/net-fs/samba/Manifest
index 122d2e00b96d..cd341a73e415 100644
--- a/net-fs/samba/Manifest
+++ b/net-fs/samba/Manifest
@@ -1,34 +1,37 @@
-MD5 dc2ac9c0d3216e85c0bf446d3844a9a6 ChangeLog 14192
-MD5 eeb3ec0ae25e9d4f7ce62c32b52d5996 metadata.xml 466
-MD5 a14d55690d52d6770c50855d7fd48efd samba-2.2.8a.ebuild 10853
 MD5 e49613d30093a41ce2883cf670cbe11f samba-3.0.0-r1.ebuild 10860
-MD5 70172eea79bd0ccb6f357d1dba8803a2 samba-3.0.1-r1.ebuild 11339
+MD5 ed43a15fad7475e6f490cf3a4967a630 samba-3.0.2a-r1.ebuild 12177
+MD5 a14d55690d52d6770c50855d7fd48efd samba-2.2.8a.ebuild 10853
 MD5 d5164790d64a6f7b353475b65104f1ea samba-3.0.1.ebuild 11320
+MD5 70172eea79bd0ccb6f357d1dba8803a2 samba-3.0.1-r1.ebuild 11339
 MD5 82eb0b7e2463631169db64ddfb80e32f samba-3.0.2a.ebuild 11464
-MD5 fd2382184b6a07e63cb07ff26b578fd2 files/config-svc-smbd+nmbd 784
+MD5 de64a273fa9255026741a70b56a0abf5 ChangeLog 14524
+MD5 eeb3ec0ae25e9d4f7ce62c32b52d5996 metadata.xml 466
+MD5 d95c7a841071087246ef23a1f72b890f files/winbind-init 491
 MD5 9780745de080ee53a34c1b2f9fb1f228 files/digest-samba-2.2.8a 135
-MD5 9ad118eb4f2d3eff69927ab1ab1913be files/digest-samba-3.0.0-r1 202
-MD5 f3a4b3b0a8162ae87779846d7e6adbbf files/digest-samba-3.0.1 202
-MD5 f3a4b3b0a8162ae87779846d7e6adbbf files/digest-samba-3.0.1-r1 202
 MD5 89ef79072e3e08e4caada278e2c3b280 files/digest-samba-3.0.2a 204
-MD5 b610fd35d7a0a9de510e31d85345d14a files/lmhosts 124
-MD5 f402c2c4103f4c13ac3cc5fa165940db files/nonroot-bind.diff 757
-MD5 5d3129a0f6bcbec6ec91d217881a34e1 files/nsswitch.conf-winbind 298
-MD5 092f8dd0b4f6f5da13ce2daafb534978 files/nsswitch.conf-wins 390
+MD5 ba636412fdffb621dcd28e79fb247d7c files/swat.xinetd 525
 MD5 20997c75e29fec20efbb2cd6695cd3a9 files/recycle.conf 776
+MD5 cf9aae0d1cf55f47d1434f6bf1cee52e files/smbldap_conf.pm 7093
 MD5 cbaa5a39d9bd67b13f8131b426a4256b files/samba-2.2.5-gp-reloc-fix.patch 431
-MD5 8289eda694b35875eec6df5cc3f50c86 files/samba-2.2.6-libresolv.patch 540
-MD5 60e527174c1b2c53126dbbedb3cae0f7 files/samba-2.2.8-statfs.patch 209
-MD5 516ca38dfc67b7cd7356f93ad2cf75b9 files/samba-3.0.0-python-setup.patch 767
+MD5 092f8dd0b4f6f5da13ce2daafb534978 files/nsswitch.conf-wins 390
 MD5 934e6115a71e2969b6d3f9dac091f52a files/samba-init 882
-MD5 9560b7e29d3a65db029fc1800e84abcc files/samba-pdb_ldap-exop.patch 3921
-MD5 9faccd0fa1bfb58b4ffa0e9dd01e1ec6 files/samba-slapd-include.conf 497
-MD5 a4597c467bc5322bfba790e526867ae0 files/samba-svc 982
-MD5 b6cdc1468e45f92f19873e0c6c5b6e94 files/samba.pam 332
+MD5 fd2382184b6a07e63cb07ff26b578fd2 files/config-svc-smbd+nmbd 784
+MD5 f402c2c4103f4c13ac3cc5fa165940db files/nonroot-bind.diff 757
+MD5 5d3129a0f6bcbec6ec91d217881a34e1 files/nsswitch.conf-winbind 298
+MD5 b610fd35d7a0a9de510e31d85345d14a files/lmhosts 124
+MD5 516ca38dfc67b7cd7356f93ad2cf75b9 files/samba-3.0.0-python-setup.patch 767
 MD5 2a8e771c143fc19819c4b6bd022f12ed files/smb.conf.example 16181
+MD5 9faccd0fa1bfb58b4ffa0e9dd01e1ec6 files/samba-slapd-include.conf 497
+MD5 60e527174c1b2c53126dbbedb3cae0f7 files/samba-2.2.8-statfs.patch 209
+MD5 f3a4b3b0a8162ae87779846d7e6adbbf files/digest-samba-3.0.1 202
+MD5 9ad118eb4f2d3eff69927ab1ab1913be files/digest-samba-3.0.0-r1 202
+MD5 f3a4b3b0a8162ae87779846d7e6adbbf files/digest-samba-3.0.1-r1 202
 MD5 8c1f1e3655e12b85102ce257f3efad62 files/smb.conf.example-samba3 20762
-MD5 cf9aae0d1cf55f47d1434f6bf1cee52e files/smbldap_conf.pm 7093
+MD5 9560b7e29d3a65db029fc1800e84abcc files/samba-pdb_ldap-exop.patch 3921
 MD5 3721b81198a029319546e6ef56e5c493 files/smbusers 202
-MD5 ba636412fdffb621dcd28e79fb247d7c files/swat.xinetd 525
 MD5 ce5400ed75143be061711d2c1d51a081 files/system-auth-winbind 867
-MD5 d95c7a841071087246ef23a1f72b890f files/winbind-init 491
+MD5 990fe15ff8a0e79f39069fff6475536d files/samba-3.0.2a-smbprint.patch 1224
+MD5 a4597c467bc5322bfba790e526867ae0 files/samba-svc 982
+MD5 b6cdc1468e45f92f19873e0c6c5b6e94 files/samba.pam 332
+MD5 85dd3b63caca9eada060118fc1477192 files/digest-samba-3.0.2a-r1 66
+MD5 8289eda694b35875eec6df5cc3f50c86 files/samba-2.2.6-libresolv.patch 540
diff --git a/net-fs/samba/files/digest-samba-3.0.2a-r1 b/net-fs/samba/files/digest-samba-3.0.2a-r1
new file mode 100644
index 000000000000..5d703e544bfa
--- /dev/null
+++ b/net-fs/samba/files/digest-samba-3.0.2a-r1
@@ -0,0 +1 @@
+MD5 72979a30ac450c8b0567c1ac9886884a samba-3.0.2a.tar.bz2 9289178
diff --git a/net-fs/samba/files/samba-3.0.2a-smbprint.patch b/net-fs/samba/files/samba-3.0.2a-smbprint.patch
new file mode 100644
index 000000000000..c5f3080bb335
--- /dev/null
+++ b/net-fs/samba/files/samba-3.0.2a-smbprint.patch
@@ -0,0 +1,26 @@
+diff -r -u samba-3.0.2a/examples/printing/smbprint samba-3.0.2a-patched/examples/printing/smbprint
+--- samba-3.0.2a/examples/printing/smbprint	2004-04-09 13:33:17.304613696 -0700
++++ samba-3.0.2a-patched/examples/printing/smbprint	2004-04-09 14:01:05.817961112 -0700
+@@ -109,6 +109,9 @@
+         if [ $debug -eq 0 ] ; then
+ 		debugfile=/dev/null debugargs=
+ 	else
++        if [ -h "$debugfile" -o ! -f "$debugfile" ]; then
++            debugfile="/dev/null"
++        fi
+ 		set -x; exec >>$debugfile 2>&1
+ 		debugargs="$debugfile."
+ 		#[ "x$debugsmb" == "x" ] || debugargs="$debugargs -d $debugsmb"
+diff -r -u samba-3.0.2a/examples/printing/smbprint-new.sh samba-3.0.2a-patched/examples/printing/smbprint-new.sh
+--- samba-3.0.2a/examples/printing/smbprint-new.sh	2004-04-09 13:33:24.086582680 -0700
++++ samba-3.0.2a-patched/examples/printing/smbprint-new.sh	2004-04-09 14:01:32.791860456 -0700
+@@ -109,6 +109,9 @@
+         if [ $debug -eq 0 ] ; then
+ 		debugfile=/dev/null debugargs=
+ 	else
++        if [ -h "$debugfile" -o ! -f "$debugfile" ]; then
++            debugfile="/dev/null"
++        fi
+ 		set -x; exec >>$debugfile 2>&1
+ 		debugargs="$debugfile."
+ 		#[ "x$debugsmb" == "x" ] || debugargs="$debugargs -d $debugsmb"
diff --git a/net-fs/samba/samba-3.0.2a-r1.ebuild b/net-fs/samba/samba-3.0.2a-r1.ebuild
new file mode 100644
index 000000000000..8a7f1f15c07a
--- /dev/null
+++ b/net-fs/samba/samba-3.0.2a-r1.ebuild
@@ -0,0 +1,438 @@
+# Copyright 1999-2004 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-fs/samba/samba-3.0.2a-r1.ebuild,v 1.1 2004/04/21 16:58:17 dmwaters Exp $
+
+inherit eutils
+
+IUSE="kerberos mysql xml acl cups ldap pam readline python"
+IUSE="${IUSE} oav"
+
+DESCRIPTION="SAMBA is a suite of SMB and CIFS client/server programs for UNIX"
+HOMEPAGE="http://www.samba.org/
+	http://www.openantivirus.org/projects.php"
+
+SMBLDAP_TOOLS_VER=0.8.4
+VSCAN_VER=0.3.4
+VSCAN_MODS=${VSCAN_MODS:=fprot mks openantivirus sophos trend icap clamav} #kapersky
+# To build the "kapersky" plugin, the kapersky lib must be installed.
+
+_CVS="-${PV/_/}"
+S=${WORKDIR}/${PN}${_CVS}
+
+SRC_URI="mirror://samba/${PN}${_CVS}.tar.bz2
+	oav? mirror://sourceforge/openantivirus/${PN}-vscan-${VSCAN_VER}.tar.bz2
+	ldap? http://samba.idealx.org/dist/smbldap-tools-${SMBLDAP_TOOLS_VER}.tgz"
+
+_COMMON_DEPS="dev-libs/popt
+	readline? sys-libs/readline
+	ldap? ( kerberos? ( app-crypt/mit-krb5 ) )
+	mysql? ( dev-db/mysql sys-libs/zlib )
+	xml? ( dev-libs/libxml2 sys-libs/zlib )
+	acl? sys-apps/acl
+	cups? net-print/cups
+	ldap? net-nds/openldap
+	pam? sys-libs/pam
+	python? dev-lang/python"
+DEPEND="sys-devel/autoconf
+	>=sys-apps/sed-4
+	${_COMMON_DEPS}"
+#IDEALX scripts are now using Net::LDAP
+RDEPEND="ldap? dev-perl/perl-ldap ${_COMMON_DEPS}"
+
+KEYWORDS="~x86 ~ppc ~sparc mips ~hppa amd64 ~ia64 ~alpha"
+LICENSE="GPL-2"
+SLOT="0"
+
+src_unpack() {
+	local i
+	unpack ${A} || die
+	cd ${S} || die
+
+	# Clean up CVS
+	find . -name .cvsignore | xargs rm -f
+	find . -name CVS | xargs rm -rf
+
+	# Add patch(es)
+	#Next one is from eger@cc.gatech.edu :)
+	patch -p1 <${FILESDIR}/samba-3.0.0-python-setup.patch || die
+	#Fix for bug #27858
+	if [ "${ARCH}" = "sparc" -o "${ARCH}" = "ppc" ]
+	then
+		cd ${S}/source/include
+		epatch ${FILESDIR}/samba-2.2.8-statfs.patch
+	fi
+	# bug 45965; smbprint tmpfile vulnerability
+	# NOTE that this should be removed for Samba 3.0.3, as it will be included
+	# in that release.
+	epatch ${FILESDIR}/samba-3.0.2a-smbprint.patch
+
+	#Bug #36200; sys-kernel/linux-headers dependent
+	sed -i -e 's:#define LINUX_QUOTAS_2:#define LINUX_QUOTAS_1:' \
+		-e 's:<linux/quota.h>:<sys/quota.h>:' \
+		${S}/source/smbd/quotas.c
+
+	# For clean docs packaging sake.
+	rm -rf ${S}/examples.bin
+	cp -a ${S}/examples ${S}/examples.bin
+
+	# Prep samba-vscan source.
+	if use oav
+	then
+		cp -a ${WORKDIR}/${PN}-vscan-${VSCAN_VER} \
+			${S}/examples.bin/VFS
+	fi
+
+	cd ${S}/source
+	echo "Running autoconf ..."
+	autoconf || die
+}
+
+src_compile() {
+	local i
+	local myconf
+	local mymods
+
+	#this is deprecated...
+	#mymods="nisplussam"
+	use xml && mymods="xml,${mymods}"
+	use mysql && mymods="mysql,${mymods}"
+
+	myconf="--with-expsam=${mymods}"
+
+	use acl \
+		&& myconf="${myconf} --with-acl-support" \
+		|| myconf="${myconf} --without-acl-support"
+
+	use pam \
+		&& myconf="${myconf} --with-pam --with-pam_smbpass" \
+		|| myconf="${myconf} --without-pam --without-pam_smbpass"
+
+	use cups \
+		&& myconf="${myconf} --enable-cups" \
+		|| myconf="${myconf} --disable-cups"
+
+	use ldap \
+		&& myconf="${myconf} --with-ldap" \
+		|| myconf="${myconf} --without-ldap"
+		#this is for old samba 2.x compat
+		#myconf="${myconf} --with-ldapsam" 
+		myconf="${myconf} --without-ldapsam"
+
+	if [ "${ARCH}" != "amd64" ]
+	then
+		use kerberos && use ldap \
+			&& myconf="${myconf} --with-ads" \
+			|| myconf="${myconf} --without-ads"
+	else
+		myconf="${myconf} --without-ads"
+	fi
+
+	use python \
+		&& myconf="${myconf} --with-python=yes" \
+		|| myconf="${myconf} --with-python=no"
+
+	use readline \
+		&& myconf="${myconf} --with-readline" \
+		|| myconf="${myconf} --without-readline"
+
+	einfo "\$myconf is: $myconf"
+
+	#default_{static,shared}_modules|source/configure
+	#/usr/lib/samba/auth/.............      AUTH_MODULES
+	#/usr/lib/samba/charset/                CHARSET_MODULES
+	#/usr/lib/samba/pdb/..............      PDB_MODULES
+	#/usr/lib/samba/rpc/                    RPC_MODULES
+	#/usr/lib/samba/vfs/..............      VFS_MODULES|source/Makefile
+	#/usr/lib/samba/lowcase.dat
+	#/usr/lib/samba/upcase.dat
+	#/usr/lib/samba/valid.dat
+
+	cd source
+	./configure \
+		--prefix=/usr \
+		--sysconfdir=/etc/samba \
+		--localstatedir=/var \
+		--libdir=/usr/lib/samba \
+		--with-privatedir=/etc/samba/private \
+		--with-lockdir=/var/cache/samba \
+		--with-piddir=/var/run/samba \
+		--with-swatdir=/usr/share/swat \
+		--with-configdir=/etc/samba \
+		--with-logfilebase=/var/log/samba \
+		\
+		--enable-static --enable-shared \
+		--with-manpages-langs=en \
+		--without-spinlocks \
+		--with-libsmbclient \
+		--with-automount \
+		--with-smbmount \
+		--with-winbind \
+		--with-quotas \
+		--with-syslog \
+		--with-idmap \
+		--host=${CHOST} ${myconf} || die
+
+	# Compile main SAMBA pieces.
+	make everything || die "SAMBA pieces"
+	make rpctorture || ewarn "rpctorture didnt build"
+
+	# Build selected samba-vscan plugins.
+	if use oav
+	then
+		cd ${S}/examples.bin/VFS/${PN}-vscan-${VSCAN_VER}
+		./configure
+		assert "bad ${PN}-vscan-${VSCAN_VER} ./configure"
+
+		for i in ${VSCAN_MODS}
+		do
+			cd ${S}/examples.bin/VFS/${PN}-vscan-${VSCAN_VER}/$i
+			make USE_INCLMKSDLIB=1 #needed for the mks build
+			assert "problem building $i vscan module"
+		done
+	fi
+
+	# Build mkntpasswd from the smbldap-tools.
+	if use ldap
+	then
+		cd ${WORKDIR}/smbldap-tools-${SMBLDAP_TOOLS_VER}
+		tar --no-same-owner -zxf mkntpwd.tar.gz
+		cd mkntpwd
+		VISUAL="" make || die "mkntpwd compile problem"
+	fi
+
+	# Build mount.cifs
+	cd ${S}/source
+	gcc ${CFLAGS} client/mount.cifs.c -o bin/mount.cifs
+	assert "mount.cifs compile problem"
+}
+
+src_install() {
+# For testing brokeness of make install
+#	cd source
+#	make DESTDIR=${D} install installmodules install_python
+#	assert "It would be nice if that just worked."
+
+	# Install standard binary files.
+	for i in smbclient net smbspool testparm testprns smbstatus \
+		smbcontrol smbtree tdbbackup nmblookup pdbedit \
+		smbpasswd rpcclient smbcacls profiles ntlm_auth \
+		smbcquotas smbmount smbmnt smbumount wbinfo \
+		debug2html smbfilter talloctort mount.cifs #smbsh editreg
+	do
+		exeinto /usr/bin
+		doexe source/bin/${i}
+	done
+	doexe source/script/{smbtar,findsmb}
+
+	# TORTURE_PROGS / Testing stuff, if they built they will come.
+	for i in smbtorture msgtest masktest locktest locktest2 \
+		nsstest vfstest rpctorture
+	do
+		if [ -x source/bin/${i} ]
+		then
+			exeinto /usr/bin
+			doexe source/bin/${i}
+		fi
+	done
+
+	# Installing these setuid-root allows users to (un)mount smbfs/cifs.
+	# ... But this is bad.  See bug 41800.
+	fperms 0111 /usr/bin/smbumount
+	fperms 0111 /usr/bin/smbmnt
+	fperms 0111 /usr/bin/mount.cifs
+
+	# Install server binaries.
+	for i in smbd nmbd swat winbindd # wrepld
+	do
+		exeinto /usr/sbin
+		doexe source/bin/${i}
+	done
+
+	# Libraries.
+	exeinto /usr/lib
+	#broken for a while now with some wacky glibc issue
+	#doexe source/bin/smbwrapper.so
+	doexe source/bin/libsmbclient.so
+	insinto /usr/lib
+	doins source/bin/libsmbclient.a
+	insinto /usr/include
+	doins source/include/libsmbclient.h
+	exeinto /lib/security
+	doexe source/nsswitch/pam_winbind.so
+	use pam && doexe source/bin/pam_smbpass.so
+
+	# Nsswitch extensions.
+	for i in wins winbind
+	do
+		exeinto /lib
+		doexe source/nsswitch/libnss_${i}.so
+	done
+	# make link for wins and winbind resolvers..
+	( cd ${D}/lib ; ln -s libnss_wins.so libnss_wins.so.2 )
+	( cd ${D}/lib ; ln -s libnss_winbind.so libnss_winbind.so.2 )
+
+	# Python extensions.
+	if use python
+	then
+		cd source
+		python python/setup.py install --root=${D} || die
+		cd ..
+	fi
+
+	# VFS plugin modules.
+	exeinto /usr/lib/samba/vfs
+	if use oav
+	then
+		doexe examples.bin/VFS/${PN}-vscan-${VSCAN_VER}/*/vscan-*.so
+	fi
+	for i in audit cap default_quota extd_audit fake_perms \
+		netatalk readonly recycle
+	do
+		if [ -x source/bin/${i}.so ]
+		then
+			doexe source/bin/${i}.so
+		fi
+	done
+
+	# Passdb modules.
+	exeinto /usr/lib/samba/pdb
+	use mysql && doexe source/bin/mysql.so
+	use xml && doexe source/bin/xml.so
+
+	# Install codepage data files.
+	insinto /usr/lib/samba
+	doins source/codepages/*.dat
+
+	# Install SWAT helper files.
+	for i in swat/help/*.html docs/htmldocs/*.html
+	do
+		insinto /usr/share/swat/help
+		doins ${i}
+	done
+	for i in swat/images/*.gif
+	do
+		insinto /usr/share/swat/images
+		doins ${i}
+	done
+	for i in swat/include/*.html
+	do
+		insinto /usr/share/swat/include
+		doins ${i}
+	done
+
+	# Install IDEALX scripts for LDAP backend administration.
+	if use ldap; then
+		cd ${WORKDIR}/smbldap-tools-${SMBLDAP_TOOLS_VER}
+		exeinto /usr/share/samba/scripts ; doexe smbldap-*.pl
+		exeinto /usr/sbin ; doexe mkntpwd/mkntpwd
+		insinto /etc/samba ; doins smbldap_conf.pm
+		exeinto /etc/samba ; doexe smbldap_tools.pm
+		eval `perl '-V:installarchlib'`
+		dodir ${installarchlib}
+		dosym /etc/samba/smbldap_conf.pm ${installarchlib}
+		dosym /etc/samba/smbldap_conf.pm /usr/share/samba/scripts
+		dosym /etc/samba/smbldap_tools.pm ${installarchlib}
+		dosym /etc/samba/smbldap_tools.pm /usr/share/samba/scripts
+		cd ${S}
+	fi
+
+	# Install man pages.
+	doman docs/manpages/*
+
+	# SAMBA has a lot of docs, so this just basically
+	# installs them all!  We don't want two copies of
+	# the book or manpages though, so:
+	rm -rf docs/htmldocs/using_samba docs/manpages
+	#
+	dodoc COPYING Manifest README Roadmap WHATSNEW.txt
+	docinto full_docs
+	cp -a docs/* ${D}/usr/share/doc/${PF}/full_docs
+	docinto examples
+	dodoc ${FILESDIR}/nsswitch.conf-{wins,winbind}
+	cp -a examples/* ${D}/usr/share/doc/${PF}/examples
+	prepalldocs
+	# and we should unzip the html docs..
+	gunzip ${D}/usr/share/doc/${PF}/full_docs/faq/*
+	gunzip ${D}/usr/share/doc/${PF}/full_docs/htmldocs/*
+	if use oav; then
+		docinto ${PN}-vscan-${VSCAN_VER}
+		cd ${WORKDIR}/${PN}-vscan-${VSCAN_VER}
+		dodoc AUTHORS COPYING ChangeLog FAQ INSTALL NEWS README TODO
+		dodoc */*.conf
+		cd ${S}
+	fi
+	if use ldap; then
+		docinto smbldap-tools-${SMBLDAP_TOOLS_VER}
+		cd ${WORKDIR}/smbldap-tools-${SMBLDAP_TOOLS_VER}
+		dodoc CONTRIBUTORS COPYING ChangeLog FILES INFRA INSTALL README TODO
+		cd ${S}
+	fi
+	chown -R root:root ${D}/usr/share/doc/${PF}
+
+	# link /usr/bin/smbmount to /sbin/mount.smbfs which allows it
+	# to work transparently with the standard 'mount' command..
+	dodir /sbin
+	dosym /usr/bin/smbmount /sbin/mount.smbfs
+
+	# make the smb backend symlink for cups printing support..
+	if use cups; then
+		dodir /usr/lib/cups/backend
+		dosym /usr/bin/smbspool /usr/lib/cups/backend/smb
+	fi
+
+	# Now the config files.
+	insinto /etc
+	insinto /etc/samba
+	doins ${FILESDIR}/smbusers
+	newins ${FILESDIR}/smb.conf.example-samba3 smb.conf.example
+	doins ${FILESDIR}/lmhosts
+	doins ${FILESDIR}/recycle.conf
+
+	insinto /etc/pam.d
+	newins ${FILESDIR}/samba.pam samba
+	doins ${FILESDIR}/system-auth-winbind
+
+	exeinto /etc/init.d
+	newexe ${FILESDIR}/samba-init samba
+	newexe ${FILESDIR}/winbind-init winbind
+
+	insinto /etc/xinetd.d
+	newins ${FILESDIR}/swat.xinetd swat
+
+	if use ldap; then
+		insinto /etc/openldap/schema
+		doins examples/LDAP/samba.schema
+	fi
+}
+
+pkg_postinst() {
+	# touch /etc/samba/smb.conf so that people installing samba just
+	# to mount smb shares don't get annoying warnings all the time..
+	if [ ! -e ${ROOT}/etc/samba/smb.conf ] ; then
+		touch ${ROOT}/etc/samba/smb.conf
+	fi
+
+	# empty dirs..
+	install -m0700 -o root -g root -d ${ROOT}/etc/samba/private
+	install -m1777 -o root -g root -d ${ROOT}/var/spool/samba
+	install -m0755 -o root -g root -d ${ROOT}/var/log/samba
+	install -m0755 -o root -g root -d ${ROOT}/var/log/samba3
+	install -m0755 -o root -g root -d ${ROOT}/var/run/samba
+	install -m0755 -o root -g root -d ${ROOT}/var/cache/samba
+	install -m0755 -o root -g root -d ${ROOT}/var/lib/samba/{netlogon,profiles}
+	install -m0755 -o root -g root -d \
+		${ROOT}/var/lib/samba/printers/{W32X86,WIN40,W32ALPHA,W32MIPS,W32PPC}
+
+	ewarn ""
+	ewarn "The smbmount, smbmnt and mount.cifs programs are no longer installed"
+	ewarn "setuid root.  This is a workaround for a security vulnerability"
+	ewarn "in the Samba code of 2.6 kernels."
+	ewarn ""
+	ewarn "If normal users need to be able to mount Samba filesystems, you"
+	ewarn "will need to turn setuid back on.  But BE WARNED, you're giving them"
+	ewarn "a chance to gain root."
+	ewarn ""
+	ewarn "More information:"
+	ewarn "http://bugs.gentoo.org/show_bug.cgi?id=41800"
+	ewarn ""
+}