# Copyright 1999-2018 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 EAPI=6 inherit ssl-cert systemd user versionator MY_P="${P/_/.}" major_minor="$(get_version_component_range 1-2)" sieve_version="0.4.21" if [[ ${PV} == *_rc* ]] ; then rc_dir="rc/" else rc_dir="" fi SRC_URI="https://dovecot.org/releases/${major_minor}/${rc_dir}${MY_P}.tar.gz sieve? ( https://pigeonhole.dovecot.org/releases/${major_minor}/${PN}-${major_minor}-pigeonhole-${sieve_version}.tar.gz ) managesieve? ( https://pigeonhole.dovecot.org/releases/${major_minor}/${PN}-${major_minor}-pigeonhole-${sieve_version}.tar.gz ) " DESCRIPTION="An IMAP and POP3 server written with security primarily in mind" HOMEPAGE="https://www.dovecot.org/" SLOT="0" LICENSE="LGPL-2.1 MIT" KEYWORDS="~alpha amd64 ~arm ~hppa ia64 ~ppc ~ppc64 ~s390 ~sparc x86" IUSE_DOVECOT_AUTH="kerberos ldap mysql pam postgres sqlite vpopmail" IUSE_DOVECOT_COMPRESS="bzip2 lzma lz4 zlib" IUSE_DOVECOT_OTHER="caps doc ipv6 libressl lucene managesieve selinux sieve solr +ssl static-libs suid tcpd textcat" IUSE="${IUSE_DOVECOT_AUTH} ${IUSE_DOVECOT_STORAGE} ${IUSE_DOVECOT_COMPRESS} ${IUSE_DOVECOT_OTHER}" DEPEND="bzip2? ( app-arch/bzip2 ) caps? ( sys-libs/libcap ) kerberos? ( virtual/krb5 ) ldap? ( net-nds/openldap ) lucene? ( >=dev-cpp/clucene-2.3 ) lzma? ( app-arch/xz-utils ) lz4? ( app-arch/lz4 ) mysql? ( virtual/mysql ) pam? ( virtual/pam ) postgres? ( dev-db/postgresql:* !dev-db/postgresql[ldap,threads] ) selinux? ( sec-policy/selinux-dovecot ) solr? ( net-misc/curl dev-libs/expat ) sqlite? ( dev-db/sqlite:* ) ssl? ( !libressl? ( dev-libs/openssl:0 ) libressl? ( dev-libs/libressl ) ) tcpd? ( sys-apps/tcp-wrappers ) textcat? ( app-text/libexttextcat ) vpopmail? ( net-mail/vpopmail ) zlib? ( sys-libs/zlib ) virtual/libiconv dev-libs/icu:=" RDEPEND="${DEPEND} net-mail/mailbase" # Dovecot does not support building without ssl. Force it for now REQUIRED_USE="ssl" S=${WORKDIR}/${MY_P} pkg_setup() { if use managesieve && ! use sieve; then ewarn "managesieve USE flag selected but sieve USE flag unselected" ewarn "sieve USE flag will be turned on" fi # default internal user enewgroup dovecot 97 enewuser dovecot 97 -1 /dev/null dovecot # default login user enewuser dovenull -1 -1 /dev/null # add "mail" group for suid'ing. Better security isolation. if use suid; then enewgroup mail fi } src_prepare() { eapply -p0 "${FILESDIR}/${PN}-10-ssl.patch" eapply "${FILESDIR}/${PN}-2.2.33.2-CVE-2017-15132.patch" eapply "${FILESDIR}/${PN}-2.2.33.2-CVE-2017-15132-fixup.patch" eapply_user } src_configure() { local conf="" if use postgres || use mysql || use sqlite; then conf="${conf} --with-sql" fi # turn valgrind tests off. Bug #340791 VALGRIND=no econf \ --localstatedir="${EPREFIX}/var" \ --runstatedir="${EPREFIX}/run" \ --with-moduledir="${EPREFIX}/usr/$(get_libdir)/dovecot" \ --without-stemmer \ --disable-rpath \ --with-icu \ --with-systemdsystemunitdir="$(systemd_get_systemunitdir)" \ $( use_with bzip2 bzlib ) \ $( use_with caps libcap ) \ $( use_with kerberos gssapi ) \ $( use_with ldap ) \ $( use_with lucene ) \ $( use_with lz4 ) \ $( use_with lzma ) \ $( use_with mysql ) \ $( use_with pam ) \ $( use_with postgres pgsql ) \ $( use_with sqlite ) \ $( use_with solr ) \ $( use_with ssl ) \ $( use_with tcpd libwrap ) \ $( use_with textcat ) \ $( use_with vpopmail ) \ $( use_with zlib ) \ $( use_enable static-libs static ) \ ${conf} if use sieve || use managesieve ; then # The sieve plugin needs this file to be build to determine the plugin # directory and the list of libraries to link to. emake dovecot-config cd "../dovecot-${major_minor}-pigeonhole-${sieve_version}" || die "cd failed" econf \ $( use_enable static-libs static ) \ --localstatedir="${EPREFIX}/var" \ --enable-shared \ --with-dovecot="../${MY_P}" \ $( use_with managesieve ) fi } src_compile() { default if use sieve || use managesieve ; then cd "../dovecot-${major_minor}-pigeonhole-${sieve_version}" || die "cd failed" emake CC="$(tc-getCC)" CFLAGS="${CFLAGS}" fi } src_test() { default if use sieve || use managesieve ; then cd "../dovecot-${major_minor}-pigeonhole-${sieve_version}" || die "cd failed" default fi } src_install () { default # insecure: # use suid && fperms u+s /usr/libexec/dovecot/deliver # better: if use suid;then einfo "Changing perms to allow deliver to be suided" fowners root:mail "${EPREFIX}/usr/libexec/dovecot/dovecot-lda" fperms 4750 "${EPREFIX}/usr/libexec/dovecot/dovecot-lda" fi newinitd "${FILESDIR}"/dovecot.init-r4 dovecot rm -rf "${ED}"/usr/share/doc/dovecot dodoc AUTHORS NEWS README TODO dodoc doc/*.{txt,cnf,xml,sh} docinto example-config dodoc doc/example-config/*.{conf,ext} docinto example-config/conf.d dodoc doc/example-config/conf.d/*.{conf,ext} docinto wiki dodoc doc/wiki/* doman doc/man/*.{1,7} # Create the dovecot.conf file from the dovecot-example.conf file that # the dovecot folks nicely left for us.... local conf="${ED}/etc/dovecot/dovecot.conf" local confd="${ED}/etc/dovecot/conf.d" insinto /etc/dovecot doins doc/example-config/*.{conf,ext} insinto /etc/dovecot/conf.d doins doc/example-config/conf.d/*.{conf,ext} fperms 0600 "${EPREFIX}"/etc/dovecot/dovecot-{ldap,sql}.conf.ext rm -f "${confd}/../README" # .maildir is the Gentoo default local mail_location="maildir:~/.maildir" sed -i -e \ "s|#mail_location =|mail_location = ${mail_location}|" \ "${confd}/10-mail.conf" \ || die "failed to update mail location settings in 10-mail.conf" # We're using pam files (imap and pop3) provided by mailbase if use pam; then sed -i -e '/driver = pam/,/^[ \t]*}/ s|#args = dovecot|args = "\*"|' \ "${confd}/auth-system.conf.ext" \ || die "failed to update PAM settings in auth-system.conf.ext" # mailbase does not provide a sieve pam file use managesieve && dosym imap /etc/pam.d/sieve sed -i -e \ 's/#!include auth-system.conf.ext/!include auth-system.conf.ext/' \ "${confd}/10-auth.conf" \ || die "failed to update PAM settings in 10-auth.conf" fi # Disable ipv6 if necessary if ! use ipv6; then sed -i -e 's/^#listen = \*, ::/listen = \*/g' "${conf}" \ || die "failed to update listen settings in dovecot.conf" fi # Update ssl cert locations if use ssl; then sed -i -e 's:^#ssl = yes:ssl = yes:' "${confd}/10-ssl.conf" \ || die "ssl conf failed" sed -i -e 's:^ssl_cert =.*:ssl_cert =