Bug 34087

	The Listar port was recently disabled at my request (as Ecartis core member) for
a remotely exploitable buffer overflow via mail. This port replaces it. The problem
has been fixed, however I am going through the code and looking at it more closely.

	We would like to replace (maybe put a pointer in the Forbidden message to
this port) the Listar port (mail/listar) with this one.

	That being said, there will probably be many changes in the near future
 and I would like to be able to maintain this directly so we won't have to wait
 for commits to it in case of more issues :) Yes, consider this an application
 for commit access as well for this and Listar port, which I have taken over
 from Peter Losher (plosher@wwiv.com).

-Trish Lynch , Ecartis Core Team

Shell Archive submitted below:

# This is a shell archive.  Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file".  Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
#       ecartis
#       ecartis/Makefile
#       ecartis/distinfo
#       ecartis/files
#       ecartis/files/patch-aa
#       ecartis/pkg-comment
#       ecartis/pkg-descr
#       ecartis/pkg-install
#       ecartis/pkg-plist
#
echo c - ecartis
mkdir -p ecartis > /dev/null 2>&1
echo x - ecartis/Makefile
sed 's/^X//' >ecartis/Makefile << 'END-of-ecartis/Makefile'
X# New ports collection makefile for: ecartis
X# Date created:                20 January 2002
X# Whom:                        Trish Lynch <trish@bsdunix.net>
X#
X# $FreeBSD$
X#
X
XPORTNAME=      ecartis
XPORTVERSION=   1.0.0b
XCATEGORIES=    mail
XMASTER_SITES=  ftp://ftp.ecartis.org/pub/ecartis/snapshots/tar/
XDISTFILES=     ecartis-1.0.0-snap20020118${EXTRACT_SUFX}
X
XMAINTAINER=    trish@bsdunix.net
X
XUSE_GMAKE=     yes
X
XNO_PACKAGE=    "Requires ecartis uid"
XWRKSRC=                ${WRKDIR}/ecartis-1.0.0/src
X
Xpre-patch:
X
X       @ ${CP} ${WRKSRC}/Makefile.dist ${WRKSRC}/Makefile
X
Xpre-install:
X
X       @PKG_PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} PRE-INSTALL
X       @ ${MKDIR} ${PREFIX}/${PORTNAME}
X       @ ${CP} -R ${WRKDIR}/${PORTNAME}-1.0.0/* ${PREFIX}/ecartis
X       @ ${RM} -R ${PREFIX}/${PORTNAME}/src/
X       @ ${RM} -R ${PREFIX}/${PORTNAME}/debian/
X       @ ${CHOWN} -R ecartis:ecartis ${PREFIX}/${PORTNAME}/*
X
Xpost-install:
X
X       @${ECHO_MSG} "---------------------------------------------------"
X       @${ECHO_MSG} "- Thank You for installing the Ecartis Listserver -"
X       @${ECHO_MSG} "- package.  Please read the documentation located -"
X       @${ECHO_MSG} "- in ${PREFIX}/ecartis/, or online at:            -"
X       @${ECHO_MSG} "-                                                 -"
X       @${ECHO_MSG} "- http://www.listar.org/                          -"
X       @${ECHO_MSG} "-                                                 -"
X       @${ECHO_MSG} "- -The Listar/Ecartis Developers                          -"
X       @${ECHO_MSG} "---------------------------------------------------"
X
X.include <bsd.port.mk>
END-of-ecartis/Makefile
echo x - ecartis/distinfo
sed 's/^X//' >ecartis/distinfo << 'END-of-ecartis/distinfo'
XMD5 (ecartis-1.0.0-snap20020118.tar.gz) = 9f3c60e2786212f73feb2f9366f491f3
END-of-ecartis/distinfo
echo c - ecartis/files
mkdir -p ecartis/files > /dev/null 2>&1
echo x - ecartis/files/patch-aa
sed 's/^X//' >ecartis/files/patch-aa << 'END-of-ecartis/files/patch-aa'
X--- Makefile.orig      Sun Jun 17 22:13:03 2001
X+++ Makefile   Sun Jun 17 22:14:19 2001
X@@ -6,8 +6,8 @@
X # they should be set.  All of them are conditional on options set in this
X # file, so it should be relatively easy to determine which branch is correct
X 
X-BINDIR = ..
X-MODDIR = ../modules
X+BINDIR = ${PREFIX}/ecartis
X+MODDIR = ${PREFIX}/ecartis/modules
X 
X # First things first we need to set up some various options since OS's aren't
X # as nice about things are they could be.
X@@ -38,7 +38,7 @@
X # Uncomment this if you are on a BSD system AND you want dynamic modules
X # SunOS (4 and 5 both) also needs this setting.
X #
X-#BSDMOD = 1
X+BSDMOD = 1
X 
X # Uncomment this if you are compiling on OpenBSD with modules (BSDMOD = 1)
X #OBSDMOD = 1
X@@ -60,7 +60,7 @@
X # Uncomment this if you have the GNU strftime() function.  This version
X # of the function understands %z to return the numerical offset.  It's better
X # to use that if it's available for RFC822 date headers
X-GNU_STRFTIME=-DGNU_STRFTIME
X+#GNU_STRFTIME=-DGNU_STRFTIME
X 
X # Uncomment this if you are on a machine that doesn't have strerror()
X #
X@@ -125,7 +125,6 @@
X ifdef BSDIMOD
X CC=shlicc
X else
X-CC=gcc
X endif
X 
X # Warning-level flags.  Under SunOS (4 and 5), this NEEDS TO BE BLANK.
X@@ -134,7 +133,7 @@
X #
X # It appears that IRIX is also rather stupid, and may require this
X # to be removed.
X-WFLAGS=-Wall -Werror
X+WFLAGS:=${CFLAGS}
X 
X # Now set up the initial command line.  SUNOS_5 makes this a bit wierd.
X ifndef SUNOS_5
X@@ -321,6 +320,7 @@
X install: targets
X       cp build/ecartis ${BINDIR}
X       chmod ug+s ${BINDIR}/ecartis
X+      chown -R ecartis:ecartis ${BINDIR}
X ifdef DYNMOD
X       @for dir in ${MODULES}; do \
X               cp build/$${dir}.lpm ${MODDIR}/$${dir}.lpm; \
END-of-ecartis/files/patch-aa
echo x - ecartis/pkg-comment
sed 's/^X//' >ecartis/pkg-comment << 'END-of-ecartis/pkg-comment'
XThe Ecartis Listserver \ Mailing List Manager
END-of-ecartis/pkg-comment
echo x - ecartis/pkg-descr
sed 's/^X//' >ecartis/pkg-descr << 'END-of-ecartis/pkg-descr'
XListar is a open-source (GNU Licence) software package that adminsters 
Xmailing lists (similar to Majordomo and Listserv).  Some of Listar's
Xfeatures include:
X
X       - A modular design structure, so that you can compile what you
X         need (and don't)
X       - The ability to strip down MIME messages and remove their
X         attachments.
X       - Ability to be run in a multi-Virtual Host configuration.
X
XTake a look at Listar's website to get a full feature list:
X 
XWWW: http://www.listar.org/
END-of-ecartis/pkg-descr
echo x - ecartis/pkg-install
sed 's/^X//' >ecartis/pkg-install << 'END-of-ecartis/pkg-install'
X#!/bin/sh
X
Xuser=ecartis
Xgroup=ecartis
X
Xask() {
X    local question default answer
X
X    question=$1
X    default=$2
X    if [ -z "${PACKAGE_BUILDING}" ]; then
X        read -p "${question} [${default}]? " answer
X    fi
X    if [ x${answer} = x ]; then
X        answer=${default}
X    fi
X    echo ${answer}
X}
X
Xyesno() {
X    local dflt question answer
X
X    question=$1
X    dflt=$2
X    while :; do
X        answer=$(ask "${question}" "${dflt}")
X        case "${answer}" in
X        [Yy]*)          return 0;;
X        [Nn]*)          return 1;;
X        esac
X        echo "Please answer yes or no."
X    done
X}
X
Xif [ x"$2" = xPRE-INSTALL ]; then
X    if pw groupshow "${group}" 2>/dev/null; then
X        echo "You already have a group \"${group}\", so I will use it."
X    else
X        echo "You need a group \"${group}\"."
X        if yesno "Would you like me to create it" y; then
X            pw groupadd ${group} -h - || exit
X            echo "Done."
X        else
X            echo "Please create it, and try again."
X            exit 1
X        fi
X    fi
X
X    if pw user show "${user}" 2>/dev/null; then
X        echo "You already have a user \"${user}\", so I will use it."
X    else
X        echo "You need a user \"${user}\"."
X        if yesno "Would you like me to create it" y; then
X            pw useradd ${user} -g ${group} -h - -d /nonexistent \
X                -s /nonexistent -c "Listar Listserver" || exit
X            echo "Done."
X        else
X            echo "Please create it, and try again."
X            exit 1
X        fi
X    fi
X
Xfi
X
END-of-ecartis/pkg-install
echo x - ecartis/pkg-plist
sed 's/^X//' >ecartis/pkg-plist << 'END-of-ecartis/pkg-plist'
Xecartis/ecartis
Xecartis/banned
Xecartis/queue/README
Xecartis/modules/README
Xecartis/modules/bouncer.lpm
Xecartis/modules/listarchive.lpm
Xecartis/modules/filearchive.lpm
Xecartis/modules/admin.lpm
Xecartis/modules/acctmgr.lpm
Xecartis/modules/stat.lpm
Xecartis/modules/send.lpm
Xecartis/modules/base.lpm
Xecartis/modules/digest.lpm
Xecartis/modules/antispam.lpm
Xecartis/modules/administrivia.lpm
Xecartis/modules/toolbox.lpm
Xecartis/modules/pantomime.lpm
Xecartis/modules/lsg2.lpm
Xecartis/modules/password.lpm
Xecartis/modules/peruser.lpm
Xecartis/scripts/lsg2.cgi.dist
Xecartis/lists/test/text/blacklist.txt
Xecartis/lists/test/text/closed-post.txt
Xecartis/lists/test/text/footer.txt
Xecartis/lists/test/text/intro.txt
Xecartis/lists/test/config
Xecartis/lists/test/cookies
Xecartis/lists/test/users
Xecartis/templates/userlist.lsc
Xecartis/templates/admin-usersetinfo.lsc
Xecartis/templates/adminmenu.lsc
Xecartis/templates/config.lsc
Xecartis/templates/error.lsc
Xecartis/templates/fileedit.lsc
Xecartis/templates/flagedit.lsc
Xecartis/templates/footer.lsc
Xecartis/templates/frontpage.lsc
Xecartis/templates/generic.lsc
Xecartis/templates/header.lsc
Xecartis/templates/listmenu.lsc
Xecartis/templates/logincookie.lsc
Xecartis/templates/mainmenu.lsc
Xecartis/templates/subscribe.lsc
Xecartis/templates/textfile.lsc
Xecartis/templates/unsubscribe.lsc
Xecartis/templates/userinfo.lsc
Xecartis/templates/userlist-deny.lsc
Xecartis/templates/admin-userinfo.lsc
Xecartis/README.LISTS
Xecartis/README.DIGEST
Xecartis/README.ANTISPAM
Xecartis/README
Xecartis/NOTE
Xecartis/LICENSE
Xecartis/ECARTIS.TODO
Xecartis/COPYRIGHT
Xecartis/spam-regexp.sample
Xecartis/ecartis.spec
Xecartis/ecartis.hlp
Xecartis/ecartis.cfg.dist
Xecartis/ecartis.aliases.dist
X@dirrm ecartis/lists/test/text
X@dirrm ecartis/lists/test
X@dirrm ecartis/lists
X@dirrm ecartis/templates
X@dirrm ecartis/scripts
X@dirrm ecartis/queue
X@dirrm ecartis/modules
X@dirrm ecartis
END-of-ecartis/pkg-plist
exit

Fix: 

put pointer to ecartis port in mail/listar port, commit ecartis port
How-To-Repeat: 	no need to repeat.