--- checkpw-1.02.orig/checkapoppw.c +++ checkpw-1.02/checkapoppw.c @@ -85,7 +85,7 @@ pw = getpwnam(login); if (pw) break; if (errno == error_txtbsy) die(111); - for (; ext != login && *ext != '-'; --ext); + do {--ext;} while (ext != login && *ext != '-'); if (ext == login) die(1); if (i) login[i] = '-'; i = ext - login; --- checkpw-1.02.orig/checkpw.c +++ checkpw-1.02/checkpw.c @@ -71,7 +71,7 @@ pw = getpwnam(login); if (pw) break; if (errno == error_txtbsy) die(111); - for (; ext != login && *ext != '-'; --ext); + do {--ext;} while (ext != login && *ext != '-'); if (ext == login) die(1); if (i) login[i] = '-'; i = ext - login; --- checkpw-1.02.orig/debian/README.Debian.diet +++ checkpw-1.02/debian/README.Debian.diet @@ -0,0 +1,15 @@ +Building with the diet libc +--------------------------- + +This package optionally can be built with the diet libc instead of glibc +to provide small statically linked programs. The resulting package has +no dependency on any other package. + +To use the diet libc, make sure the latest versions of the dietlibc-dev +package is installed, and set DEB_BUILD_OPTIONS=diet in the environment +when building the package, e.g.: + + # apt-get install dietlibc-dev + $ DEB_BUILD_OPTIONS=diet fakeroot apt-get source -b checkpw + + -- Gerrit Pape , Tue, 27 Sep 2005 14:23:12 +0000 --- checkpw-1.02.orig/debian/apop/log/run +++ checkpw-1.02/debian/apop/log/run @@ -0,0 +1,2 @@ +#!/bin/sh +exec setuidgid qmaill multilog t s999999 ./main --- checkpw-1.02.orig/debian/apop/run +++ checkpw-1.02/debian/apop/run @@ -0,0 +1,9 @@ +#!/bin/sh + +exec softlimit -m 4000000 tcpserver -vRH 0 110 \ +/var/qmail/bin/qmail-popup `cat /var/qmail/control/me` \ +checkapoppw sh -c ' +echo "login: $USER $TCPREMOTEIP" >&7 +if [ -n "$EXT" ]; then DASH="-"; fi +exec /var/qmail/bin/qmail-pop3d Maildir"$DASH""$EXT" +' 2>&1 7>&1 --- checkpw-1.02.orig/debian/changelog +++ checkpw-1.02/debian/changelog @@ -0,0 +1,110 @@ +checkpw (1.02-1.1) unstable; urgency=high + + * Non-maintainer upload. + * CVE-2015-0885: Fix denial of service via -- in usernames (Closes: #780139) + + -- Salvatore Bonaccorso Fri, 13 Mar 2015 14:49:55 +0100 + +checkpw (1.02-1) unstable; urgency=low + + * new upstream point release. + * debian/diff/env-MAILDIR.diff; replaced with + debian/diff/0001-bug-304737-default-Maildir-may-be-overridden-thro.diff. + * debian/checkpw.8, debian/checkapoppw.8: default 'Maildir' may be + overridden through the env variable $MAILDIR. + * debian/implicit: add proper dependencies to support 'parallel build' + through make -j (thx Daniel Schepler for the patch, closes: #445817). + * debian/rules: target patch:, clean: apply diffs from debian/diff/ with + -p1 instead of -p0. + * debian/control: Standards-Version: 3.7.2.2. + + -- Gerrit Pape Tue, 11 Dec 2007 10:21:45 +0000 + +checkpw (1.01-1) unstable; urgency=low + + * new upstream point release. + * debian/diff/errno.diff: remove; fixed upstream. + * debian/implicit: update to revision 1.10. + * debian/checkpw.README.Debian: minor cleanup. + * debian/rules: cleanup; support DEB_BUILD_OPTIONS=diet to build against + diet libc. + * debian/diff/env-MAILDIR.diff: new; default 'Maildir' may be overidden + through the environment variable $MAILDIR (closes: #304737). + * debian/README.Debian.diet: new; how to build package with the diet + libc. + * debian/checkpw.docs: add debian/README.Debian.diet. + + -- Gerrit Pape Tue, 27 Sep 2005 19:41:19 +0000 + +checkpw (1.00-3) unstable; urgency=low + + * debian/control: no longer Build-Depends: debhelper; fix typo in + Description. + * debian/rules: stop using debhelper, use implicit rules. + * debian/implicit: new; implicit Makefile rules. + * debian/README.Debian: rename to debian/checkpw.README.Debian. + * debian/dirs, debian/docs, debian/examples: remove; obsolete. + * debian/checkpw.docs, debian/checkpw.examples: new. + + -- Gerrit Pape Mon, 29 Dec 2003 13:08:16 +0000 + +checkpw (1.00-2) unstable; urgency=low + + * debian/control: Standards-Version: 3.6.1.0; minor changes to the long + description. + * debian/rules: remove target configure; add target patch: apply diffs + in debian/diff/; target clean: reverse apply debian/diff/*. + * debian/diff/errno.diff: new: extern int errno -> #include . + + -- Gerrit Pape Mon, 10 Nov 2003 08:45:34 +0000 + +checkpw (1.00-1) unstable; urgency=low + + * new upstream version. + * debian/rules: do not install /etc/checkpw plus subdirs, but install + service directories as examples; install binaries in /usr/bin/, + omit loginlog and selectcheckpw programs, install them as examples; + provide upstream run-script examples. + * debian/control: Standards-Version: 3.5.8; strip down Build-Depends + and Depends. + * debian/copyright: adapt. + * 1st official debian package (closes: #182681). + * debian/postinst, debian/postrm: remove. + + -- Gerrit Pape Tue, 4 Mar 2003 14:42:32 +0100 + +checkpw (0.70-0.5) woody; urgency=low + + * debian/postinst: change function declaration syntax (bashism?) to + support more /bin/sh shells. + + -- Gerrit Pape Mon, 8 Apr 2002 15:09:55 +0200 + +checkpw (0.70-0.4) woody; urgency=low + + * woody package. + * pop username and client ip is logged on login. + + -- Gerrit Pape Tue, 14 Aug 2001 16:06:10 +0200 + +checkpw (0.70-0.3) unstable; urgency=low + + * logs are stored in /var/log/pop/ or /var/log/apop/, accessible through + /var/service/[a]pop/log/main/. + * /etc/checkpw/.qmail-start removed. + * depends on qmail-run >= 0.2.0. + + -- Gerrit Pape Mon, 23 Apr 2001 23:47:11 +0200 + +checkpw (0.70-0.2) unstable; urgency=low + + * run tcpserver with softlimit -m 2000000. + + -- Gerrit Pape Thu, 19 Apr 2001 15:54:21 +0200 + +checkpw (0.70-0.1) unstable; urgency=low + + * Initial Release. + + -- Gerrit Pape Sat, 24 Mar 2001 19:31:31 +0100 + --- checkpw-1.02.orig/debian/checkapoppw.8 +++ checkpw-1.02/debian/checkapoppw.8 @@ -0,0 +1,85 @@ +.TH checkapoppw 8 +.SH NAME +checkapoppw - checks APOP password against the file +.I ~/Maildir/.password +.SH SYNOPSIS +.B checkapoppw +.I prog +.SH DESCRIPTION +.B checkapoppw +reads descriptor 3 through end of file +and then closes descriptor 3. +There must be at most 512 bytes of data before end of file. + +The information supplied on descriptor 3 +is a login name terminated by \\0, +a password terminated by \\0, +a timestamp terminated by \\0, +and possibly more data. +There are no other restrictions +on the form of the login name, password, and timestamp. + +If the password is unacceptable, +.B checkapoppw +exits 1. +If +.B checkapoppw +is misused, it may instead exit 2. +If there is a temporary problem checking the password, +.B checkapoppw +exits 111. + +If the password is acceptable, +.B checkapoppw +runs +.IR prog . + +.I prog +consists of one or more arguments. + +.SH Compatible tools +There are other tools that offer the same interface as +.B checkapoppw + +Note that these tools do not follow the +.I getopt +interface. +Optional features are controlled through +(1) the tool name and (2) environment variables. + +.SH The password database + +.B checkapoppw +checks the APOP password +against the content of the file +.I Maildir/.password +(not encrypted) +in the user's home directory corresponding to the login name. + +.I Maildir +may be overidden through the environment variable +.IR $MAILDIR . +.SH Process-state changes +Before invoking +.IR prog , +.B checkapoppw +sets up +.IR $USER , +.IR $HOME , +.IR $SHELL , +its supplementary groups, +its gid, +its uid, +and its working directory. + +.SH FILES +~/Maildir/.password + +.SH SEE ALSO +checkpw(8), +qmail-popup(8), +qmail-pop3d(8) + +.SH AUTHOR +This manual page was written by Gerrit Pape , for the +Debian GNU/Linux system. --- checkpw-1.02.orig/debian/checkpw.8 +++ checkpw-1.02/debian/checkpw.8 @@ -0,0 +1,84 @@ +.TH checkpw 8 +.SH NAME +checkpw - checks password against the file +.I ~/Maildir/.password +.SH SYNOPSIS +.B checkpw +.I prog +.SH DESCRIPTION +.B checkpw +reads descriptor 3 through end of file +and then closes descriptor 3. +There must be at most 512 bytes of data before end of file. + +The information supplied on descriptor 3 +is a login name terminated by \\0, +a password terminated by \\0, +a timestamp terminated by \\0, +and possibly more data. +There are no other restrictions +on the form of the login name, password, and timestamp. + +If the password is unacceptable, +.B checkpw +exits 1. +If +.B checkpw +is misused, it may instead exit 2. +If there is a temporary problem checking the password, +.B checkpw +exits 111. + +If the password is acceptable, +.B checkpw +runs +.IR prog . + +.I prog +consists of one or more arguments. + +.SH Compatible tools +There are other tools that offer the same interface as +.B checkpw + +Note that these tools do not follow the +.I getopt +interface. +Optional features are controlled through +(1) the tool name and (2) environment variables. + +.SH The password database + +.B checkpw +checks the password +against the content of the file +.I Maildir/.password +in the user's home directory corresponding to the login name. + +.I Maildir +may be overidden through the environment variable +.IR $MAILDIR . +.SH Process-state changes +Before invoking +.IR prog , +.B checkpw +sets up +.IR $USER , +.IR $HOME , +.IR $SHELL , +its supplementary groups, +its gid, +its uid, +and its working directory. + +.SH FILES +~/Maildir/.password + +.SH SEE ALSO +checkapoppw(8), +qmail-popup(8), +qmail-pop3d(8) + +.SH AUTHOR +This manual page was written by Gerrit Pape , for the +Debian GNU/Linux system. --- checkpw-1.02.orig/debian/checkpw.README.Debian +++ checkpw-1.02/debian/checkpw.README.Debian @@ -0,0 +1,13 @@ +checkpw for Debian +------------------ + +The loginlog and selectcheckpw programs are not installed in $PATH by +default. You can find them, next to some run scripts and service +directory examples, in /usr/share/doc/checkpw/examples/. + +See the README and INSTALL files in /usr/share/doc/checkpw/examples/ +for instruction on how to setup checkpw and checkapoppw. + +See interface.html for the ckeckpassword interface definition. + + -- Gerrit Pape , Mon, 23 Apr 2001 23:08:07 +0200 --- checkpw-1.02.orig/debian/checkpw.docs +++ checkpw-1.02/debian/checkpw.docs @@ -0,0 +1,4 @@ +README +INSTALL +debian/interface.html +debian/README.Debian.diet --- checkpw-1.02.orig/debian/checkpw.examples +++ checkpw-1.02/debian/checkpw.examples @@ -0,0 +1,8 @@ +loginlog +selectcheckpw +run-apop +run-both +run-multidir +run-multipw +run-pop +run-rules --- checkpw-1.02.orig/debian/control +++ checkpw-1.02/debian/control @@ -0,0 +1,19 @@ +Source: checkpw +Section: mail +Priority: optional +Maintainer: Gerrit Pape +Standards-Version: 3.7.2.2 + +Package: checkpw +Architecture: any +Depends: ${shlibs:Depends} +Description: checks password which is stored in ~/Maildir/.password + checkpw is an implementation of the checkpassword interface that checks a + password against a ``.password'' file in the user's Maildir. The password + file has read and write permissions to the user only. + . + The code is in the public domain. + . + The original checkpassword program and interface specification is written + by D. J. Bernstein: + http://cr.yp.to/checkpwd.html --- checkpw-1.02.orig/debian/copyright +++ checkpw-1.02/debian/copyright @@ -0,0 +1,11 @@ +This package was debianized by Gerrit Pape on +Sat, 24 Mar 2001 19:31:31 +0100. + +It was downloaded from: http://sourceforge.net/projects/checkpw/ + +Upstream Author: OHIRA, Shinya + +Copyright: + +The code is in the public domain. +The Debian diff is in the public domain. --- checkpw-1.02.orig/debian/diff/0001-bug-304737-default-Maildir-may-be-overridden-thro.diff +++ checkpw-1.02/debian/diff/0001-bug-304737-default-Maildir-may-be-overridden-thro.diff @@ -0,0 +1,76 @@ +From b3137da39f141aeed36a9f94d05af617645c8461 Mon Sep 17 00:00:00 2001 +From: Gerrit Pape +Date: Tue, 11 Dec 2007 10:11:38 +0000 +Subject: [PATCH] bug#304737: default 'Maildir' may be overridden through the env variable $MAILDIR + +--- + checkapoppw.c | 7 +++++-- + checkpw.c | 7 +++++-- + 2 files changed, 10 insertions(+), 4 deletions(-) + +diff --git a/checkapoppw.c b/checkapoppw.c +index 4243652..1533028 100644 +--- a/checkapoppw.c ++++ b/checkapoppw.c +@@ -43,6 +43,7 @@ main(int argc,char **argv) + char *dash; + char *ext; + char *password; ++ char *maildir; + char *timestamp; + struct stat st; + int r; +@@ -55,7 +56,9 @@ main(int argc,char **argv) + + if (!argv[1]) _exit(2); + dash = env_get("DASH"); +- ++ maildir = env_get("MAILDIR"); ++ if (!maildir) maildir = auto_maildir; ++ + uplen = 0; + for (;;) { + do +@@ -94,7 +97,7 @@ main(int argc,char **argv) + } + if (chdir(pw->pw_dir) == -1) die(111); + +- if (!stralloc_copys(&pwfile, auto_maildir)) die(111); ++ if (!stralloc_copys(&pwfile, maildir)) die(111); + if (dash && *ext) { + if (!stralloc_cats(&pwfile, dash)) die(111); + if (!stralloc_cats(&pwfile, ext)) die(111); +diff --git a/checkpw.c b/checkpw.c +index 957691a..796745e 100644 +--- a/checkpw.c ++++ b/checkpw.c +@@ -38,13 +38,16 @@ main(int argc,char **argv) + char *dash; + char *ext; + char *password; ++ char *maildir; + struct stat st; + int r; + int i; + + if (!argv[1]) _exit(2); + dash = env_get("DASH"); +- ++ maildir = env_get("MAILDIR"); ++ if (!maildir) maildir = auto_maildir; ++ + uplen = 0; + for (;;) { + do +@@ -80,7 +83,7 @@ main(int argc,char **argv) + } + if (chdir(pw->pw_dir) == -1) die(111); + +- if (!stralloc_copys(&pwfile, auto_maildir)) die(111); ++ if (!stralloc_copys(&pwfile, maildir)) die(111); + if (dash && *ext) { + if (!stralloc_cats(&pwfile, dash)) die(111); + if (!stralloc_cats(&pwfile, ext)) die(111); +-- +1.5.3.4 + --- checkpw-1.02.orig/debian/implicit +++ checkpw-1.02/debian/implicit @@ -0,0 +1,93 @@ +# $Id: 60d9070435b8d5608f20f60bc44e081960b6e39d $ + +.PHONY: deb-checkdir deb-checkuid + +deb-checkdir: + @test -e debian/control || sh -cx '! : wrong directory' +deb-checkuid: + @test "`id -u`" -eq 0 || sh -cx '! : need root privileges' + +%.deb: %.deb-docs %.deb-DEBIAN + @rm -f $*.deb $*.deb-checkdir $*.deb-docs $*.deb-docs-base \ + $*.deb-docs-docs $*.deb-docs-examples $*.deb-DEBIAN \ + $*.deb-DEBIAN-dir $*.deb-DEBIAN-scripts $*.deb-DEBIAN-md5sums + +%.udeb: %.deb-DEBIAN + @rm -f $*.deb $*.deb-checkdir $*.deb-DEBIAN $*.deb-DEBIAN-dir \ + $*.deb-DEBIAN-scripts $*.deb-DEBIAN-md5sums + +%.deb-checkdir: install + @test -d debian/$* || sh -cx '! : directory debian/$* missing' + @test "`id -u`" -eq 0 || sh -cx '! : need root privileges' + +%.deb-docs-base: install + : implicit + @rm -f debian/$*/usr/share/doc/$*/* || : + @install -d -m0755 debian/$*/usr/share/doc/$* + : debian/$*/usr/share/doc/$*/ + @sh -cx 'install -m0644 debian/copyright debian/$*/usr/share/doc/$*/' + @sh -cx 'install -m0644 debian/changelog \ + debian/$*/usr/share/doc/$*/changelog.Debian' + @test ! -r changelog || \ + sh -cx 'install -m0644 changelog debian/$*/usr/share/doc/$*/' + @test -r debian/$*/usr/share/doc/$*/changelog || \ + sh -cx 'mv debian/$*/usr/share/doc/$*/changelog.Debian \ + debian/$*/usr/share/doc/$*/changelog' + @test -s debian/$*/usr/share/doc/$*/changelog || \ + sh -cx 'rm -f debian/$*/usr/share/doc/$*/changelog' + @gzip -9 debian/$*/usr/share/doc/$*/changelog* +%.deb-docs-docs: %.deb-docs-base + @for i in `cat debian/$*.docs 2>/dev/null || :`; do \ + if test -d $$i; then \ + sh -cx "install -d -m0755 debian/$*/usr/share/doc/$*/$${i##*/}" && \ + for j in $$i/*; do \ + sh -cx "install -m0644 $$j \ + debian/$*/usr/share/doc/$*/$${i##*/}/" || exit 1; \ + done || exit 1; \ + continue; \ + fi; \ + sh -cx "install -m0644 $$i debian/$*/usr/share/doc/$*/" || exit 1; \ + done + @test ! -r debian/$*.README.Debian || \ + sh -cx 'install -m0644 debian/$*.README.Debian \ + debian/$*/usr/share/doc/$*/README.Debian' + @if test -r debian/$*.NEWS.Debian; then \ + sh -cx 'install -m0644 debian/$*.NEWS.Debian \ + debian/$*/usr/share/doc/$*/NEWS.Debian && \ + gzip -9 debian/$*/usr/share/doc/$*/NEWS.Debian'; \ + fi +%.deb-docs-examples: %.deb-docs-docs + @rm -rf debian/$*/usr/share/doc/$*/examples + : debian/$*/usr/share/doc/$*/examples/ + @test ! -r debian/$*.examples || \ + install -d -m0755 debian/$*/usr/share/doc/$*/examples + @for i in `cat debian/$*.examples 2>/dev/null || :`; do \ + sh -cx "install -m0644 $$i debian/$*/usr/share/doc/$*/examples/" \ + || exit 1; \ + done +%.deb-docs: %.deb-checkdir %.deb-docs-base %.deb-docs-docs %.deb-docs-examples + : debian/$*/usr/share/doc/$*/ ok + +%.deb-DEBIAN-base: install + @rm -rf debian/$*/DEBIAN + : debian/$*/DEBIAN/ + @install -d -m0755 debian/$*/DEBIAN + @for i in conffiles shlibs templates; do \ + test ! -r debian/$*.$$i || \ + sh -cx "install -m0644 debian/$*.$$i debian/$*/DEBIAN/$$i" \ + || exit 1; \ + done +%.deb-DEBIAN-scripts: %.deb-DEBIAN-base + @for i in preinst prerm postinst postrm config; do \ + test ! -r debian/$*.$$i || \ + sh -cx "install -m0755 debian/$*.$$i debian/$*/DEBIAN/$$i" \ + || exit 1; \ + done +%.deb-DEBIAN-md5sums: %.deb-DEBIAN-base %.deb-docs + : debian/$*/DEBIAN/md5sums + @rm -f debian/$*/DEBIAN/md5sums + @cd debian/$* && find * -path 'DEBIAN' -prune -o \ + -type f -exec md5sum {} >>DEBIAN/md5sums \; +%.deb-DEBIAN: %.deb-checkdir %.deb-DEBIAN-base %.deb-DEBIAN-scripts \ + %.deb-DEBIAN-md5sums + : debian/$*/DEBIAN/ ok --- checkpw-1.02.orig/debian/interface.html +++ checkpw-1.02/debian/interface.html @@ -0,0 +1,82 @@ + + +D. J. Bernstein +
Internet mail +
checkpassword +

The checkpassword interface

+
+     checkpassword prog
+
+checkpassword +reads descriptor 3 through end of file +and then closes descriptor 3. +There must be at most 512 bytes of data before end of file. +

+The information supplied on descriptor 3 +is a login name terminated by \0, +a password terminated by \0, +a timestamp terminated by \0, +and possibly more data. +There are no other restrictions +on the form of the login name, password, and timestamp. +

+If the password is unacceptable, +checkpassword exits 1. +If checkpassword is misused, it may instead exit 2. +If there is a temporary problem checking the password, +checkpassword exits 111. +

+If the password is acceptable, +checkpassword runs prog. +prog consists of one or more arguments. +

Compatible tools

+There are other tools that offer the same interface as checkpassword. +Applications that use checkpassword +are encouraged to take the checkpassword name +as an argument, +so that they can be used with different tools. +

+Note that these tools do not follow the getopt interface. +Optional features are controlled through +(1) the tool name and (2) environment variables. +

The password database

+checkpassword checks the login name and password +against /etc/passwd, +using the operating system's getpwnam and crypt functions, +supplemented by getuserpw and getspnam if necessary. +It rejects accounts with empty passwords. +It ignores the timestamp. +

+Other checkpassword-compatible tools +have different interpretations of login names, passwords, and timestamps. +Both the login name and the password +should be treated as secrets by the application calling checkpassword; +the only distinction is for administrative convenience. +The timestamp should include +any other information that the password is based on; +for example, the challenge in a challenge-response system such as APOP. +

+WARNING: +getpwnam is inherently unreliable. +It fails to distinguish between temporary errors +and nonexistent users. +Future versions of getpwnam should return ETXTBSY +to indicate temporary errors +and ESRCH to indicate nonexistent users. +

Process-state changes

+Before invoking prog, +checkpassword sets up +$USER, +$HOME, +$SHELL, +its supplementary groups, +its gid, +its uid, +and its working directory. +

+Other checkpassword-compatible tools +may make different changes to the process state. +It is crucial for these effects to be documented; +different applications have different requirements. + + --- checkpw-1.02.orig/debian/pop/log/run +++ checkpw-1.02/debian/pop/log/run @@ -0,0 +1,2 @@ +#!/bin/sh +exec setuidgid qmaill multilog t s999999 ./main --- checkpw-1.02.orig/debian/pop/run +++ checkpw-1.02/debian/pop/run @@ -0,0 +1,9 @@ +#!/bin/sh + +exec softlimit -m 4000000 tcpserver -vRH 0 110 \ +/var/qmail/bin/qmail-popup `cat /var/qmail/control/me` \ +checkpw sh -c ' +echo "login: $USER $TCPREMOTEIP" >&7 +if [ -n "$EXT" ]; then DASH="-"; fi +exec /var/qmail/bin/qmail-pop3d Maildir"$DASH""$EXT" +' 2>&1 7>&1 --- checkpw-1.02.orig/debian/rules +++ checkpw-1.02/debian/rules @@ -0,0 +1,88 @@ +#!/usr/bin/make -f + +CC =gcc +CFLAGS =-g -O2 -Wall +LDFLAGS = +STRIP =strip + +DIET_ARCHS =alpha amd64 arm hppa i386 ia64 mips mipsel powerpc ppc64 s390 sparc +ARCH ?=$(shell dpkg-architecture -qDEB_HOST_ARCH) + +ifneq (,$(findstring diet,$(DEB_BUILD_OPTIONS))) + CC =diet -v -Os gcc + CFLAGS =-nostdinc -Wall +endif + +ifneq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) + STRIP =: nostrip +endif + +DIR =$(shell pwd)/debian/checkpw + +patch: deb-checkdir patch-stamp +patch-stamp: + for i in `ls -1 debian/diff/*.diff || :`; do \ + patch -p1 <$$i || exit 1; \ + done + touch patch-stamp + +build: deb-checkdir build-stamp +build-stamp: patch-stamp + for i in conf-*; do \ + test -e $${i%'{orig}'}'{orig}' || cp -v $$i $$i'{orig}'; \ + done + echo '$(CC) $(CFLAGS)' >conf-cc + echo '$(CC) $(LDFLAGS)' >conf-ld + echo /usr >conf-home + $(MAKE) + touch build-stamp + +clean: deb-checkdir deb-checkuid + rm -f `cat TARGETS` + test ! -e patch-stamp || \ + for i in `ls -1r debian/diff/*.diff || :`; do patch -p1 -R <$$i; done + for i in `ls *'{orig}' || :`; do mv -vf $$i $${i%'{orig}'}; done + rm -f build-stamp patch-stamp + rm -rf '$(DIR)' '$(DIR)'-run + rm -f debian/files debian/substvars changelog + +install: deb-checkdir deb-checkuid build-stamp + rm -rf '$(DIR)' + install -d -m0755 '$(DIR)'/usr/bin + echo '$(DIR)'/usr >conf-home + rm -f install instcheck auto_home.o auto_home.c + $(MAKE) install instcheck + ./install + ./instcheck + rm -f '$(DIR)'/usr/bin/loginlog + rm -f '$(DIR)'/usr/bin/selectcheckpw + chmod 0755 '$(DIR)'/usr/bin/* + $(STRIP) -R .comment -R .note '$(DIR)'/usr/bin/* + # man pages + install -d -m0755 '$(DIR)'/usr/share/man/man8 + install -m0644 debian/checkpw.8 debian/checkapoppw.8 \ + '$(DIR)'/usr/share/man/man8/ + gzip -9 '$(DIR)'/usr/share/man/man8/*.8 + # service directories + for i in pop apop; do \ + install -d -m0755 '$(DIR)'/usr/share/doc/checkpw/etc/$$i/log && \ + install -m0644 debian/$$i/run \ + '$(DIR)'/usr/share/doc/checkpw/etc/$$i/run && \ + install -m0644 debian/$$i/log/run \ + '$(DIR)'/usr/share/doc/checkpw/etc/$$i/log/run || exit 1; \ + done + # upstream changelog + test -r changelog || ln -s CHANGES changelog + +binary-indep: + +binary-arch: deb-checkdir deb-checkuid install checkpw.deb + test '$(CC)' != 'gcc' || dpkg-shlibdeps '$(DIR)'/usr/bin/* + dpkg-gencontrol -isp -pcheckpw -P'$(DIR)' + dpkg -b '$(DIR)' .. + +binary: binary-indep binary-arch + +.PHONY: patch build clean install binary-indep binary-arch binary + +include debian/implicit