Added postinstall warning about the possibility of more security flaws

Package-Manager: portage-2.0.51.21

3 files changed, 26 insertions, 9 deletions

diff --git a/net-analyzer/ethereal/ChangeLog b/net-analyzer/ethereal/ChangeLog
index c7780cebbcd2..b7c5eda43397 100644
--- a/net-analyzer/ethereal/ChangeLog
+++ b/net-analyzer/ethereal/ChangeLog
@@ -1,6 +1,10 @@
 # ChangeLog for net-analyzer/ethereal
 # Copyright 2002-2005 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ethereal/ChangeLog,v 1.121 2005/05/05 15:35:43 gustavoz Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ethereal/ChangeLog,v 1.122 2005/05/06 08:32:25 dragonheart Exp $
+
+  06 May 2005; Daniel Black <dragonheart@gentoo.org>
+  ethereal-0.10.11.ebuild:
+  Added postinstall warning about the possibility of more security flaws
 
   05 May 2005; Gustavo Zacarias <gustavoz@gentoo.org>
   ethereal-0.10.11.ebuild:
diff --git a/net-analyzer/ethereal/Manifest b/net-analyzer/ethereal/Manifest
index 5f9a85cec5a2..d8e717abdd60 100644
--- a/net-analyzer/ethereal/Manifest
+++ b/net-analyzer/ethereal/Manifest
@@ -1,16 +1,16 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA1
 
-MD5 19bb05b934b4111fc101fc474b3d9093 ChangeLog 8492
 MD5 9aacfb51126057fe6f272e9e68b04823 ethereal-0.10.5-r1.ebuild 2591
 MD5 90125878d2e9c146be8cd1513584c594 ethereal-0.10.5.ebuild 2577
 MD5 42646c10b255d7b2cc1abd0ff17a854a ethereal-0.10.6.ebuild 2482
-MD5 17a9be2cf8cb9f24e7e5b398392483b4 metadata.xml 224
 MD5 5873fa93022936b5fffa46b3a2877255 ethereal-0.10.8.ebuild 2419
 MD5 9e6b5aa51a31d63877fd940420dab88c ethereal-0.10.9-r1.ebuild 2673
 MD5 2c1acb617103a36fab80ab721bff6859 ethereal-0.10.9.ebuild 2512
+MD5 17a9be2cf8cb9f24e7e5b398392483b4 metadata.xml 224
+MD5 c11e11f5eee2ecc180d08e4c2451690d ChangeLog 8649
 MD5 5b1d015f63983f50c9ed883c4ad07bc8 ethereal-0.10.10.ebuild 2524
-MD5 3d0617368afc32555aeefbf6eeec4c07 ethereal-0.10.11.ebuild 2664
+MD5 03438a757601f2fca958261139bca85a ethereal-0.10.11.ebuild 3470
 MD5 5a73274ec255373b4e618388cd057275 files/0.10.4-gcc34.patch 458
 MD5 56d5feedd5047dd2b7bcd4c9295addef files/digest-ethereal-0.10.5 69
 MD5 56d5feedd5047dd2b7bcd4c9295addef files/digest-ethereal-0.10.5-r1 69
@@ -22,9 +22,9 @@ MD5 0810d71e423428b7aefa8ce2ecb95043 files/ethereal-0.10.9-mate.h-gcc2.patch 605
 MD5 7380c9b1a24a082c69ab1bec0de907e7 files/digest-ethereal-0.10.10 70
 MD5 5f6da5f1fabdf39da22bbb5ea224fab1 files/digest-ethereal-0.10.11 70
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.1-ecc0.1.6 (GNU/Linux)
+Version: GnuPG v1.4.1 (GNU/Linux)
 
-iD8DBQFCej1gKRy60XGEcJIRApTGAJ9E34Mk8Oj8XOA/o5VpBjp9NMiR1ACePEld
-CGkuP85CmnNkXioIRBso2d4=
-=+Z05
+iD8DBQFCeyuomdTrptrqvGERAjQDAJ9i7LGBrvq61T1M6Fcu/6hn1oIQhgCfbizh
+jO1eFMuc1T4MlAvqNMBR+bM=
+=PLTu
 -----END PGP SIGNATURE-----
diff --git a/net-analyzer/ethereal/ethereal-0.10.11.ebuild b/net-analyzer/ethereal/ethereal-0.10.11.ebuild
index 1959f28d578a..eb89aca95d7c 100644
--- a/net-analyzer/ethereal/ethereal-0.10.11.ebuild
+++ b/net-analyzer/ethereal/ethereal-0.10.11.ebuild
@@ -1,6 +1,6 @@
 # Copyright 1999-2005 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ethereal/ethereal-0.10.11.ebuild,v 1.5 2005/05/05 15:35:43 gustavoz Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ethereal/ethereal-0.10.11.ebuild,v 1.6 2005/05/06 08:32:25 dragonheart Exp $
 
 inherit libtool flag-o-matic eutils
 
@@ -96,3 +96,16 @@ src_install() {
 	newins ${S}/image/hi48-app-ethereal.png ethereal.png
 	make_desktop_entry ethereal "Ethereal" ethereal
 }
+
+pkg_postinst() {
+	ewarn "Due to the significant history of security flaws in this piece of software may be riddled with more flaws."
+	ewarn "To protect yourself against malicious damage due to potential future flaws in this product we recommend"
+	ewarn "you take the following security precautions when running ethereal:"
+	ewarn "do no run any longer than you need to;"
+	ewarn "use in a root jail - prefereably one that has been hardened with grsec like rootjail protections;"
+	ewarn "use a hardened operating system;"
+	ewarn "do not listen to addition interfaces;"
+	ewarn "if possible, run behind a firewall;"
+	ewarn "take a capture with tcpdump and analylize the contents offline running as a the least priviledged user; and"
+	ewarn "subscribe to ethereal's announce list for new vulnerabilities."
+}