--- courieruserinfo-1.1.2.orig/debian/control +++ courieruserinfo-1.1.2/debian/control @@ -0,0 +1,17 @@ +Source: courieruserinfo +Section: mail +Priority: optional +Maintainer: Charles Fry +Build-Depends: cdbs, debhelper (>= 5), autotools-dev, courier-authlib-dev +Standards-Version: 3.7.2 + +Package: courieruserinfo +Architecture: any +Depends: ${shlibs:Depends}, ${misc:Depends} +Description: Retrieve courier user account information + Courieruserinfo works with the Courier mail server user authentication + mechanism to allow user account information to be retrieved. The specific + types of information which can be retrieved are: uid, home directory, name, + address, mail directory, quota, and options. + . + Homepage: http://www.arda.homeunix.net/store/ --- courieruserinfo-1.1.2.orig/debian/dirs +++ courieruserinfo-1.1.2/debian/dirs @@ -0,0 +1 @@ +usr/sbin --- courieruserinfo-1.1.2.orig/debian/compat +++ courieruserinfo-1.1.2/debian/compat @@ -0,0 +1 @@ +5 --- courieruserinfo-1.1.2.orig/debian/watch +++ courieruserinfo-1.1.2/debian/watch @@ -0,0 +1,2 @@ +version=3 +http://www.arda.homeunix.net/store/courieruserinfo-([\d\.]+)\.tar\.gz debian svn-upgrade --- courieruserinfo-1.1.2.orig/debian/changelog +++ courieruserinfo-1.1.2/debian/changelog @@ -0,0 +1,12 @@ +courieruserinfo (1.1.2-1) unstable; urgency=low + + * New upstream release + + -- Charles Fry Tue, 25 Jul 2006 08:59:26 -0400 + +courieruserinfo (1.1.1-1) unstable; urgency=low + + * Initial release (Closes: 378568) + + -- Charles Fry Mon, 17 Jul 2006 11:07:32 -0400 + --- courieruserinfo-1.1.2.orig/debian/copyright +++ courieruserinfo-1.1.2/debian/copyright @@ -0,0 +1,32 @@ +This package was debianized by Charles Fry on +Fri, 14 Jul 2006 13:51:54 -0400. + +It was downloaded from http://www.arda.homeunix.net/store/ + + +The following copyright notice applies to courieruserinfo itself: + +Copyright (c) Andrew St. Jean 2002-2005 + +You are free to distribute this software under the terms of the GNU +General Public License. On Debian systems, the complete text of the GNU +General Public License can be found in the file +`/usr/share/common-licenses/GPL'. + + +The following copyright notice applies to strlcpy, used internally by +courieruserinfo: + +Copyright (c) 1998 Todd C. Miller + +Permission to use, copy, modify, and distribute this software for any +purpose with or without fee is hereby granted, provided that the above +copyright notice and this permission notice appear in all copies. + +THE SOFTWARE IS PROVIDED "AS IS" AND TODD C. MILLER DISCLAIMS ALL +WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES +OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL TODD C. MILLER BE LIABLE +FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES +WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION +OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN +CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. --- courieruserinfo-1.1.2.orig/debian/rules +++ courieruserinfo-1.1.2/debian/rules @@ -0,0 +1,4 @@ +#!/usr/bin/make -f + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/class/autotools.mk --- courieruserinfo-1.1.2.orig/debian/shlibs.local +++ courieruserinfo-1.1.2/debian/shlibs.local @@ -0,0 +1 @@ +libcourierauth 0 courier-authlib (>= 0.58-3) --- courieruserinfo-1.1.2.orig/debian/README.Debian +++ courieruserinfo-1.1.2/debian/README.Debian @@ -0,0 +1,47 @@ +courieruserinfo for Debian +-------------------------- + +The following is straight from courieruserinfo's INSTALL file: + +SECURITY CONSIDERATIONS: + +In order to use courieruserinfo, it must be able to access the +authdaemon domain socket, named 'socket'. When courieruserinfo runs as +root, this presents no problem. However, if you need to run courieruserinfo +as a non-root user, you have three options, both of which require some +manual work. + +Option 1: Add the user courieruserinfo will run as to the group that +owns the authdaemon socket directory in /etc/group. More than one user +can be added to the group vector in this way. This arrangement works +well if courieruserinfo will be run by only a small number of users. +If the authdaemon socket directory is owned by courier:courier and you +run courieruserinfo as user vmail, your /etc/group file will have a line +something like this: + + courier:x:465:vmail + +Option 2: Some programs, such as tcpserver, allow you to separately set +the uid and gid of programs they call but don't honour the group vector +found in /etc/group. If you invoke courieruserinfo from such a program, +set the gid to the group ownership of the authdaemon socket directory. + +Option 3: Change the permissions on courieruserinfo to set gid to the +group ownership of the socket directory. Again, if the socket directory +is owned by courier:courier, change the ownership and permissions +of courieruserinfo like so: + + chgrp courier courieruserinfo + chmod g+s courieruserinfo + +Be aware that this will allow any user on the system to access user +account information through courieruserinfo. + +To mitigate possible security risks posed by running courieruserinfo +setgid, courieruserinfo cannot retrieve passwords. + +The location of the authdaemon domain socket is listed in the +authdaemonrc configuration file as the parameter authdaemonvar. + + + -- Charles Fry , Tue Jul 25 08:59:05 EDT 2006