From 17d79efe09f4cf95574fc424670e2f4219e59fee Mon Sep 17 00:00:00 2001 From: Lars Wendler Date: Fri, 14 Mar 2014 14:09:19 +0000 Subject: Version bump. Removed old Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64 Manifest-Sign-Key: 0x981CA6FC --- app-admin/sudo/ChangeLog | 8 +- app-admin/sudo/Manifest | 32 +++--- app-admin/sudo/sudo-1.8.10.ebuild | 192 ----------------------------------- app-admin/sudo/sudo-1.8.10_p1.ebuild | 192 +++++++++++++++++++++++++++++++++++ 4 files changed, 215 insertions(+), 209 deletions(-) delete mode 100644 app-admin/sudo/sudo-1.8.10.ebuild create mode 100644 app-admin/sudo/sudo-1.8.10_p1.ebuild (limited to 'app-admin') diff --git a/app-admin/sudo/ChangeLog b/app-admin/sudo/ChangeLog index 2d2bf89c48da..0ea141fc3cb7 100644 --- a/app-admin/sudo/ChangeLog +++ b/app-admin/sudo/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for app-admin/sudo # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.359 2014/03/13 15:45:10 polynomial-c Exp $ +# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.360 2014/03/14 14:09:18 polynomial-c Exp $ + +*sudo-1.8.10_p1 (14 Mar 2014) + + 14 Mar 2014; Lars Wendler -sudo-1.8.10.ebuild, + +sudo-1.8.10_p1.ebuild: + Version bump. Removed old. *sudo-1.8.10 (13 Mar 2014) diff --git a/app-admin/sudo/Manifest b/app-admin/sudo/Manifest index a28da32a9d97..cbac3c692e59 100644 --- a/app-admin/sudo/Manifest +++ b/app-admin/sudo/Manifest @@ -1,34 +1,34 @@ -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 -DIST sudo-1.8.10.tar.gz 2259801 SHA256 781296ec571e2595cfaa13846902ea03684ef826f261d61e6705da90a4f904aa SHA512 aeaa6b9d4662ca826c60a927ea951f1ce20803e4f6671c0c6f0615a98f03101580ead4d77c097b1b8b00f1d3c6dbcbc7b431b2720c0b7cc13b2982c3ff7618e3 WHIRLPOOL fb4ef579def4224f46a961e0d2da8caffec90e16690f9ed18b93cd65c27c8895c2babb4060660ce53f5c6f22b961f0754bed33a2ef42fc843a64c718081162c2 +DIST sudo-1.8.10p1.tar.gz 2260994 SHA256 bc0426b315c6e9d470b6fdb8d6afa6d924332c1ad24c8303f6b52e81fa1f32fb SHA512 4c502b214238ca0020a6716f065d4b47d1e22b47e6f20b32274b0ce589930d245c6029474867eee67e3afc5585329b114c842a9e2c7a6d7d4b0477573c16a6ec WHIRLPOOL 2c05e2f199e1c594326dc4d13884333452d78de13606d0aa7a1ab89946b8eac710c065fc6a5b1aba14ee409becb55cea55e67671e238076506403df838ba891f DIST sudo-1.8.5p2.tar.gz 1746344 SHA256 c32ae2bc3faf83444c82ca75ccb10ad3684d8222e3535f164c4a4db7cdddf8cf SHA512 616967eea79f91cda2b0cd1d13ed453d20142521ecfca289432bdf5708ac0549c7873fd80170cc0481390e82f1e60fb0bffcfc7c6b70d5d721aa98d23361c5cb WHIRLPOOL ac0d2c040935c54947571a0d4671be70aaaf7a6f69cb097acd321718656d4c569b0db4191eaf943c6b642a1d641263429287241a236a0f2a0c9edf973710bf8b DIST sudo-1.8.6p7.tar.gz 1858348 SHA256 301089edb22356f59d097f6abbe1303f03927a38691b02959d618546c2125036 SHA512 732bcbd53b77d329bbc77d3cd3644a595e938433053122fe3098385c0ad3a6a9cf4f4ab8709c7a79cad51dba77ffaa1be9ffde8e8834d3798822a1bd5b518d42 WHIRLPOOL 875984b44b571dc3765aab5ad8bd8859d0cd680e7da453109b5bee45aac336e3d0c05e1133ce0101a6dd2b9f19a26454d3e0b11c0edf32034f9fae04d3dfbb4d DIST sudo-1.8.6p8.tar.gz 1858612 SHA256 c0baaa87f59153967b650a0dde2f7d4147d358fa15f3fdabb47e84d0282fe625 SHA512 9c9d297e8cba4ae74a1358b23da15beea4649684afa09b3c3486bd25454008b4c7cd543266f8abc22aac48a56912d7174ccfc137a69670e737d6c9939708cb80 WHIRLPOOL f19c882a2b3de4f41ee97b1f26ebe284782c82500dfc2f86edd262b3ec9f10a2fb3c8b20f26cd1587910677b169ed0260a9672db4dc7b1ea8d5d817235f6197c DIST sudo-1.8.8.tar.gz 2117145 SHA256 9f911c1e9297fb8006deb52fa81197a8d06b9d54e70672f723c467ecae992fc9 SHA512 e56ea849c2e6470a3d97fc76bde6af145938cf2df4d17f3faef00368262d8e2dd5bcc7e3adf490e853e23466b15638000a527156bd694ce4980003d751c896d5 WHIRLPOOL 74fad850b4f370775f3c5611235b7f20837267f599ace4350f6498ce21cf12e94c1efb98017656106305398496c2f1ff992700fe5fbde4fcf47ca5210cddfdc6 DIST sudo-1.8.9p5.tar.gz 2179066 SHA256 bc9d5c96de5f8b4d2b014f87a37870aef60d2891c869202454069150a21a5c21 SHA512 ebd1af9724e135db2e553e59c96f22f6f25885b7ba35767657a26d319bb074987833329084cc07271946b2ef7165567f63ccad11ccf290cef3f77953a6fd7a28 WHIRLPOOL 63940daa38d7d9dea8f3ca41c637935e00fd7439a09de3300f8b875382c142e4328c3d9034273e920a9987e70358157f3fba6d5683b6b94badf00ad5aa8b8293 -EBUILD sudo-1.8.10.ebuild 5534 SHA256 5fb7dcd515c8aba39516ca98fe622660f72c9f7dbe84d0ea5eed2ebe32a7c59b SHA512 0ed64cece08af8720f4d622b870f982ebfdc0956fd7052998e8f36017ab4449e69a87ccf96c8a8e3d884fa6e38ccaf2fe590b4ebb1fe43b09a8c149c4532a7e0 WHIRLPOOL 1a4fcc6824d81547ba9b7232cab00e74286b1abb98b9921dbe56815b7f3ba2d3dc486524eadadf93c262ab2aee7c9f4d7bc85aa35f6e99c4d2da8d06912a8566 +EBUILD sudo-1.8.10_p1.ebuild 5537 SHA256 1ede0e0534b11a8e841bdf2c51bd31311a624eaffd52e2ff6783881ab348c488 SHA512 6cfeb081a5b4f4fd80a91551efb69372a113e9bf310edf00bb86d9ba0c41bd522f66b8e96ca4cb653d74197cad2cff2972e000a5df53a89e226e9fd4f0a433be WHIRLPOOL afeb31be7eba651e8b95b758bf9a4ee1ee4a4d743406131f48ff6ac32f7c323958d410db05f04b6beb6245564c3c1d00b59f288f9a2087c85d02eacd40312771 EBUILD sudo-1.8.5_p2.ebuild 5464 SHA256 5a647b0c4a2949e476277ead580f6a42747f7778b282dd1e034a2c010c784a9e SHA512 34cc788ee019ccaf8e2f74dbae5e668d8fb94dab066bea49f3a37f31210a66c9327686e5c5f44a966321f26e3ccc5e2aa47fdb46b35285e96f266eafbddbc741 WHIRLPOOL 532a4151b0acbec600552cca4b18b54afba14a48e91640dd85642c4571e993e1a8eb20e03e83ef3f901a8f6eb6c63c2a5aec7650020e5e58f0d7911790d419f5 EBUILD sudo-1.8.6_p7.ebuild 5464 SHA256 4f58dcb19ec413e99144a4806d5d7d68c5f9e3bbc4d8b0d77efb8df8dd147e57 SHA512 ed1575681e3e84d42d97f4465af3c3f33fa82d645d49a2219047728b22d0d7cbfb7c4e8a34ffce55da18ce67db84d6e40907c571231fa16acdef18bfa41cabc4 WHIRLPOOL a74177a5effbe3379a7da469f6cdaf5bd0263b777cbdecf8c02bf9956bc4cce3de35a2727f0e275f76ba94b1f0fff738d04d5102b83ac739bb99db624d919a1b EBUILD sudo-1.8.6_p8.ebuild 5474 SHA256 9a8b19e57ca0ed59d0b371352842c6539c714b8c163c97f81fbcf2f2d227cd9a SHA512 730229e13bb4b3591ab6a0a0ba3a9090d47b8cb3d425b4472ef33ca845b3522771443568fcf05f83b9cd7e465d8566a1e569de11ca0427693a74c9438118fbaf WHIRLPOOL ff4756e3505a293bbc67ae2933414b3c42b0cb5006bded4e280d97487f593cc288dddaa1b196137bebc03f97c928528226d52f06f170304dba3b868b0a8ef291 EBUILD sudo-1.8.8.ebuild 5474 SHA256 597d3cfa588d3e47d07be11cd2aa6df137951167c27043ce5ac06f710f49fdaf SHA512 223c0b1caf6797242a0db709eef46a5951959ed83aaeb25624c47ca39b76d2922ea79e8b8b1204195ad6bf7ec1ab4985770552d26be2a57728767ece2ce9bd43 WHIRLPOOL 7dad9dfaaf610212bbc5c1d6f133f1761885757df32cc3bb1166a29910a68089281c84b256d2b61bf3bf150e3bd458081f7039ff697a9b20bc5e86d36d8c1309 EBUILD sudo-1.8.9_p5.ebuild 5481 SHA256 8705bae8d24b7730840b2897846a72bbe031fe2d1c50284e87785ec3353bf7d2 SHA512 5a83aadb46ecd1076f486a3a9dcc5f7cbfe244de49bc2413a2cdfb80c2eccfe4e1db767099db29bd4bd311ecd469ceec7c1a2ac3c60fa71fb3639ac48cc84075 WHIRLPOOL 21bb3e3e0eb7fd828afc3e4bc122843642844c7c6d9046382daac52f28bf10cac57aa08dbc37e9bc48c41d2955736698c53f1a39e0801b3efa801ca7d44e643c -MISC ChangeLog 52041 SHA256 936461412ea20bee43be6ded5d3fdd786ba266b2a595e768bb34ff3e2f2b1fe5 SHA512 8595b3546bd5253705d34a5eb5b62b480836956c217a6471341c85b1d44c30c4fc7802d872135f52004ffec20d9d1f08349df7e3931edfb0ba7897a256ab482a WHIRLPOOL d5c3e83e087b139e86d07dd7f98875a5d4f3fe33226809895336828406917d3c46edbe287b8810a5cea062b46d02267b53c2b05b2c39bc242beca1a01b76f9f3 +MISC ChangeLog 52203 SHA256 9482faf5bb0008afb1a092e0d7a5e4d8d0d5ac5c4bfae70a78a21cdbf1e4f7fa SHA512 ce4d7fd0a4f3877f48207818c6576baa2742c6d2266c8794b1aee0774860274c16471cc3a8067579e31cfd573ab5cfeeee47456ad7305bf0fe73449a204e212b WHIRLPOOL 6cc477910a3a3ed2acad20f08d67e49fa14432138ae42f7a334406b749391d1dddb8a67d1bf6aa89797ffadbf73408fd1524fd7d9e093657d4280535ce6d4a88 MISC metadata.xml 726 SHA256 242e8a573d76b2163a928259e5226fff2c237b3e9c244860a1430fa79c5b390e SHA512 d0a7e5f53ec823d84e3c38c2bd64ba566d7cbd08c12ebf3e9b9fed10b77ce2e3e951e262f1a307aa8f0819a662559ca6f9bcf86cf05088480413e4534ce299d3 WHIRLPOOL b919b1825e68eb3285523f057fc42b5fde9e59a738ecdb1de0835af827db6284fc66848a10517a215389c4466f21b70e376f3fffc993aa338e47fca971d0af83 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) -iQIcBAEBCAAGBQJTIdKHAAoJEPiazRVxLXTFmdwP/0LLKSJ4JP+5Tq6ak7+GHleB -kpn7UyXR9VNR9cm8Mjj7GcWpTgUisTpxwT9BunUGyCIwjrWbT+t4nVkZWiAHCCUn -OHBEEyh10TSktmhA5whES72rgMusjx1HXkMwJhGWiZDJcRboNSVKRQAhQ9iYMVB5 -QzpWfPa2eOPk2ACiSj5JQavwvHwQGZi2yyov4T+KYXZm2ouxDjGXtQsA5ReCqPnj -357RSZ3tlgADHrJRIPO4vuxq22VSy0WfEa0HyGwrZBUA/9tBW+9nZWmKpKbUv5IO -q33vPEOdNHtjYepX3JIh/yUFCKTGo1pbdTdr88HcGJlzwoocWHn4J1AEJ/i/V6ad -kzr/1GVq5OWZ9RCJVWGMykA4OAwzQ015DFYMoIQ6cNrcOBmwyhSEbc/KAGjmEYnk -TxjE7gjOF6+WHrFKb5uAPFiFVXY3XHR/jGt5erDRPg8J459snJb7l6wxjY6wVMCr -l4ookdk8WFieCaer2bxmIyf93f+UkeZtENHRgJgVxXpCX5KXaMIErobwIAswXrqW -wkmFcEV5De1NHsZuNVCDf7aCasJQcqPkAHZCoO6wGxrmGGWvBm5OygqB4Jn1nE+F -jMu8GusfRXppoMx6FiVxCEf+AiSyIAVGWNGHyYlHp/4BOzMYiKE9T0zA9QOhvVfW -wbCiAMvEfctfJ0OrH+tQ -=OxQD +iQIcBAEBCAAGBQJTIw2PAAoJEPiazRVxLXTFAl8QAIFFq373Xlqh6/6MWG8pxprS +OSUnRm5NQSoSvLdhblHdEHtmyiSwoPMXnQ/mP3yPVWTgniAepoprMWnjYDJxHS2g +WYC6BCl1SOHLxIGGikav9mog50RPxmf18HUFNWlkX2efIjlK75GcmsIvFlYppku5 +f6YtBPIYa9ltLxSKSArjmc4Ta3ugW2gr42P9qYAhphLNqbd9mTDjbzwuvLpH61zm +vB93jbZ6dYOPehkEjN7ArZVN4rMDsPUhhhkRzVIL1E197FgMz+k+aGomWuQZQnn0 +bejqmBFMer2orwLrFBxCYOctESDznvdS8ul6rK8HO6tHUhQCCd3YbV5rbyex7Nrw +uGMdG4R7WJ/EG83aLVy57/U7BSBEbjSRw4IMZfKIu1i1rhN+L8Pc28e3FsLpEScT +RTB9C2LW7Xz7rFbTDDMpp0zewnO0VwoaqSL+e77h9BJu4VZlepw9AaKuIZ14Dyu4 +MckN1+KuwLYyK93WTQnNtdfQr1s6M4uKxmLKxg8l1AfYwoT/NJJ+66r+EvT2ysIk +3zIFuhNRr0przD09dzSms8TK9uPrWDOCojGuEjUZCX+WZk1Ghp1kgrIyP2lrWqjk +pfMRtMB7rSHEU3300nvidpc+Z/F3xLMXMEqSarlt7y4pXl+FZWN112NFVU/xK/El +ZETEgfpVCjEIKK7oGUUs +=z1Yo -----END PGP SIGNATURE----- diff --git a/app-admin/sudo/sudo-1.8.10.ebuild b/app-admin/sudo/sudo-1.8.10.ebuild deleted file mode 100644 index ff35d0a04fce..000000000000 --- a/app-admin/sudo/sudo-1.8.10.ebuild +++ /dev/null @@ -1,192 +0,0 @@ -# Copyright 1999-2014 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/sudo-1.8.10.ebuild,v 1.1 2014/03/13 15:45:10 polynomial-c Exp $ - -EAPI=5 - -inherit eutils pam multilib libtool versionator - -MY_P=${P/_/} -MY_P=${MY_P/beta/b} - -uri_prefix= -case ${P} in -*_beta*|*_rc*) uri_prefix=beta/ ;; -esac - -DESCRIPTION="Allows users or groups to run commands as other users" -HOMEPAGE="http://www.sudo.ws/" -SRC_URI="http://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz - ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz" - -# Basic license is ISC-style as-is, some files are released under -# 3-clause BSD license -LICENSE="ISC BSD" -SLOT="0" -KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x64-freebsd ~sparc-solaris" -IUSE="ldap nls pam offensive selinux skey +sendmail" - -DEPEND="pam? ( virtual/pam ) - skey? ( >=sys-auth/skey-1.1.5-r1 ) - ldap? ( - >=net-nds/openldap-2.1.30-r1 - dev-libs/cyrus-sasl - ) - sys-libs/zlib" -RDEPEND="${DEPEND} - selinux? ( sec-policy/selinux-sudo ) - ldap? ( dev-lang/perl ) - pam? ( sys-auth/pambase ) - >=app-misc/editor-wrapper-3 - virtual/editor - sendmail? ( virtual/mta )" -DEPEND="${DEPEND} - sys-devel/bison" - -S=${WORKDIR}/${MY_P} - -REQUIRED_USE="pam? ( !skey ) skey? ( !pam )" - -MAKEOPTS+=" SAMPLES=" - -src_prepare() { - elibtoolize -} - -set_rootpath() { - # FIXME: secure_path is a compile time setting. using ROOTPATH - # is not perfect, env-update may invalidate this, but until it - # is available as a sudoers setting this will have to do. - einfo "Setting secure_path ..." - - # first extract the default ROOTPATH from build env - ROOTPATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}") - if [[ -z ${ROOTPATH} ]] ; then - ewarn " Failed to find ROOTPATH, please report this" - fi - - # then remove duplicate path entries - cleanpath() { - local newpath thisp IFS=: - for thisp in $1 ; do - if [[ :${newpath}: != *:${thisp}:* ]] ; then - newpath+=:$thisp - else - einfo " Duplicate entry ${thisp} removed..." - fi - done - ROOTPATH=${newpath#:} - } - cleanpath /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin${ROOTPATH:+:${ROOTPATH}} - - # finally, strip gcc paths #136027 - rmpath() { - local e newpath thisp IFS=: - for thisp in ${ROOTPATH} ; do - for e ; do [[ $thisp == $e ]] && continue 2 ; done - newpath+=:$thisp - done - ROOTPATH=${newpath#:} - } - rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' - - einfo "... done" -} - -src_configure() { - local ROOTPATH - set_rootpath - - # audit: somebody got to explain me how I can test this before I - # enable it.. - Diego - # plugindir: autoconf code is crappy and does not delay evaluation - # until `make` time, so we have to use a full path here rather than - # basing off other values. - econf \ - --enable-zlib=system \ - --with-secure-path="${ROOTPATH}" \ - --with-editor="${EPREFIX}"/usr/libexec/editor \ - --with-env-editor \ - $(use_with offensive insults) \ - $(use_with offensive all-insults) \ - $(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) \ - $(use_with ldap) \ - $(use_enable nls) \ - $(use_with pam) \ - $(use_with skey) \ - $(use_with selinux) \ - $(use_with sendmail) \ - --without-opie \ - --without-linux-audit \ - --with-rundir="${EPREFIX}"/var/run/sudo \ - --with-vardir="${EPREFIX}"/var/db/sudo \ - --with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo \ - --docdir="${EPREFIX}"/usr/share/doc/${PF} -} - -src_install() { - default - - if use ldap ; then - dodoc README.LDAP doc/schema.OpenLDAP - dosbin plugins/sudoers/sudoers2ldif - - cat <<-EOF > "${T}"/ldap.conf.sudo - # See ldap.conf(5) and README.LDAP for details - # This file should only be readable by root - - # supported directives: host, port, ssl, ldap_version - # uri, binddn, bindpw, sudoers_base, sudoers_debug - # tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key - EOF - - insinto /etc - doins "${T}"/ldap.conf.sudo - fperms 0440 /etc/ldap.conf.sudo - fi - - pamd_mimic system-auth sudo auth account session - - keepdir /var/db/sudo - fperms 0700 /var/db/sudo -} - -pkg_postinst() { - if use ldap ; then - ewarn - ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration." - ewarn - if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then - ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" - ewarn "configured in /etc/nsswitch.conf." - ewarn - ewarn "To make use of LDAP, add this line to your /etc/nsswitch.conf:" - ewarn " sudoers: ldap files" - ewarn - fi - fi - if use prefix ; then - ewarn - ewarn "To use sudo, you need to change file ownership and permissions" - ewarn "with root privileges, as follows:" - ewarn - ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" - ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" - ewarn " # chown root:root ${EPREFIX}/etc/sudoers" - ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" - ewarn " # chown root:root ${EPREFIX}/var/db/sudo" - ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" - ewarn - fi - - elog "To use the -A (askpass) option, you need to install a compatible" - elog "password program from the following list. Starred packages will" - elog "automatically register for the use with sudo (but will not force" - elog "the -A option):" - elog "" - elog " [*] net-misc/ssh-askpass-fullscreen" - elog " net-misc/x11-ssh-askpass" - elog "" - elog "You can override the choice by setting the SUDO_ASKPASS environmnent" - elog "variable to the program you want to use." -} diff --git a/app-admin/sudo/sudo-1.8.10_p1.ebuild b/app-admin/sudo/sudo-1.8.10_p1.ebuild new file mode 100644 index 000000000000..c5d63af38793 --- /dev/null +++ b/app-admin/sudo/sudo-1.8.10_p1.ebuild @@ -0,0 +1,192 @@ +# Copyright 1999-2014 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/sudo-1.8.10_p1.ebuild,v 1.1 2014/03/14 14:09:18 polynomial-c Exp $ + +EAPI=5 + +inherit eutils pam multilib libtool versionator + +MY_P=${P/_/} +MY_P=${MY_P/beta/b} + +uri_prefix= +case ${P} in +*_beta*|*_rc*) uri_prefix=beta/ ;; +esac + +DESCRIPTION="Allows users or groups to run commands as other users" +HOMEPAGE="http://www.sudo.ws/" +SRC_URI="http://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz + ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz" + +# Basic license is ISC-style as-is, some files are released under +# 3-clause BSD license +LICENSE="ISC BSD" +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x64-freebsd ~sparc-solaris" +IUSE="ldap nls pam offensive selinux skey +sendmail" + +DEPEND="pam? ( virtual/pam ) + skey? ( >=sys-auth/skey-1.1.5-r1 ) + ldap? ( + >=net-nds/openldap-2.1.30-r1 + dev-libs/cyrus-sasl + ) + sys-libs/zlib" +RDEPEND="${DEPEND} + selinux? ( sec-policy/selinux-sudo ) + ldap? ( dev-lang/perl ) + pam? ( sys-auth/pambase ) + >=app-misc/editor-wrapper-3 + virtual/editor + sendmail? ( virtual/mta )" +DEPEND="${DEPEND} + sys-devel/bison" + +S=${WORKDIR}/${MY_P} + +REQUIRED_USE="pam? ( !skey ) skey? ( !pam )" + +MAKEOPTS+=" SAMPLES=" + +src_prepare() { + elibtoolize +} + +set_rootpath() { + # FIXME: secure_path is a compile time setting. using ROOTPATH + # is not perfect, env-update may invalidate this, but until it + # is available as a sudoers setting this will have to do. + einfo "Setting secure_path ..." + + # first extract the default ROOTPATH from build env + ROOTPATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}") + if [[ -z ${ROOTPATH} ]] ; then + ewarn " Failed to find ROOTPATH, please report this" + fi + + # then remove duplicate path entries + cleanpath() { + local newpath thisp IFS=: + for thisp in $1 ; do + if [[ :${newpath}: != *:${thisp}:* ]] ; then + newpath+=:$thisp + else + einfo " Duplicate entry ${thisp} removed..." + fi + done + ROOTPATH=${newpath#:} + } + cleanpath /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin${ROOTPATH:+:${ROOTPATH}} + + # finally, strip gcc paths #136027 + rmpath() { + local e newpath thisp IFS=: + for thisp in ${ROOTPATH} ; do + for e ; do [[ $thisp == $e ]] && continue 2 ; done + newpath+=:$thisp + done + ROOTPATH=${newpath#:} + } + rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' + + einfo "... done" +} + +src_configure() { + local ROOTPATH + set_rootpath + + # audit: somebody got to explain me how I can test this before I + # enable it.. - Diego + # plugindir: autoconf code is crappy and does not delay evaluation + # until `make` time, so we have to use a full path here rather than + # basing off other values. + econf \ + --enable-zlib=system \ + --with-secure-path="${ROOTPATH}" \ + --with-editor="${EPREFIX}"/usr/libexec/editor \ + --with-env-editor \ + $(use_with offensive insults) \ + $(use_with offensive all-insults) \ + $(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) \ + $(use_with ldap) \ + $(use_enable nls) \ + $(use_with pam) \ + $(use_with skey) \ + $(use_with selinux) \ + $(use_with sendmail) \ + --without-opie \ + --without-linux-audit \ + --with-rundir="${EPREFIX}"/var/run/sudo \ + --with-vardir="${EPREFIX}"/var/db/sudo \ + --with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo \ + --docdir="${EPREFIX}"/usr/share/doc/${PF} +} + +src_install() { + default + + if use ldap ; then + dodoc README.LDAP doc/schema.OpenLDAP + dosbin plugins/sudoers/sudoers2ldif + + cat <<-EOF > "${T}"/ldap.conf.sudo + # See ldap.conf(5) and README.LDAP for details + # This file should only be readable by root + + # supported directives: host, port, ssl, ldap_version + # uri, binddn, bindpw, sudoers_base, sudoers_debug + # tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key + EOF + + insinto /etc + doins "${T}"/ldap.conf.sudo + fperms 0440 /etc/ldap.conf.sudo + fi + + pamd_mimic system-auth sudo auth account session + + keepdir /var/db/sudo + fperms 0700 /var/db/sudo +} + +pkg_postinst() { + if use ldap ; then + ewarn + ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration." + ewarn + if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then + ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" + ewarn "configured in /etc/nsswitch.conf." + ewarn + ewarn "To make use of LDAP, add this line to your /etc/nsswitch.conf:" + ewarn " sudoers: ldap files" + ewarn + fi + fi + if use prefix ; then + ewarn + ewarn "To use sudo, you need to change file ownership and permissions" + ewarn "with root privileges, as follows:" + ewarn + ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" + ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" + ewarn " # chown root:root ${EPREFIX}/etc/sudoers" + ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" + ewarn " # chown root:root ${EPREFIX}/var/db/sudo" + ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" + ewarn + fi + + elog "To use the -A (askpass) option, you need to install a compatible" + elog "password program from the following list. Starred packages will" + elog "automatically register for the use with sudo (but will not force" + elog "the -A option):" + elog "" + elog " [*] net-misc/ssh-askpass-fullscreen" + elog " net-misc/x11-ssh-askpass" + elog "" + elog "You can override the choice by setting the SUDO_ASKPASS environmnent" + elog "variable to the program you want to use." +} -- cgit v1.2.3-65-gdbad