| 1 |
commit: 0dccf910fa8936f6d02499f785f105fe0ec3c3fa |
| 2 |
Author: Dennis Eisele <kernlpanic <AT> dennis-eisele <DOT> de> |
| 3 |
AuthorDate: Wed Jan 26 22:27:35 2022 +0000 |
| 4 |
Commit: Florian Schmaus <flow <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Thu Jan 27 15:32:12 2022 +0000 |
| 6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0dccf910 |
| 7 |
|
| 8 |
net-vpn/strongswan: change postemerge message for non-root |
| 9 |
|
| 10 |
Thanks-to: Ronald <ronald654 <AT> gmail.com> |
| 11 |
Closes: 424373,468674 |
| 12 |
Package-Manager: Portage-3.0.28, Repoman-3.0.3 |
| 13 |
Signed-off-by: Dennis Eisele <kernlpanic <AT> dennis-eisele.de> |
| 14 |
Closes: https://github.com/gentoo/gentoo/pull/23976 |
| 15 |
Signed-off-by: Florian Schmaus <flow <AT> gentoo.org> |
| 16 |
|
| 17 |
net-vpn/strongswan/strongswan-5.9.2-r2.ebuild | 15 +++++---------- |
| 18 |
net-vpn/strongswan/strongswan-5.9.4-r1.ebuild | 11 +++-------- |
| 19 |
2 files changed, 8 insertions(+), 18 deletions(-) |
| 20 |
|
| 21 |
diff --git a/net-vpn/strongswan/strongswan-5.9.2-r2.ebuild b/net-vpn/strongswan/strongswan-5.9.2-r2.ebuild |
| 22 |
index b537c194e061..8d920548b62e 100644 |
| 23 |
--- a/net-vpn/strongswan/strongswan-5.9.2-r2.ebuild |
| 24 |
+++ b/net-vpn/strongswan/strongswan-5.9.2-r2.ebuild |
| 25 |
@@ -276,18 +276,13 @@ pkg_postinst() { |
| 26 |
if use non-root; then |
| 27 |
elog |
| 28 |
elog "${PN} has been installed without superuser privileges (USE=non-root)." |
| 29 |
- elog "This imposes several limitations mainly to the IKEv1 daemon 'pluto'" |
| 30 |
- elog "but also a few to the IKEv2 daemon 'charon'." |
| 31 |
+ elog "This imposes a few limitations mainly to the daemon 'charon' in" |
| 32 |
+ elog "regards of the use of iptables." |
| 33 |
elog |
| 34 |
- elog "Please carefully read: http://wiki.strongswan.org/wiki/nonRoot" |
| 35 |
+ elog "Please carefully read: https://wiki.strongswan.org/projects/strongswan/wiki/ReducedPrivileges" |
| 36 |
elog |
| 37 |
- elog "pluto uses a helper script by default to insert/remove routing and" |
| 38 |
- elog "policy rules upon connection start/stop which requires superuser" |
| 39 |
- elog "privileges. charon in contrast does this internally and can do so" |
| 40 |
- elog "even with reduced (user) privileges." |
| 41 |
- elog |
| 42 |
- elog "Thus if you require IKEv1 (pluto) or need to specify a custom updown" |
| 43 |
- elog "script to pluto or charon which requires superuser privileges, you" |
| 44 |
+ elog "Thus if you require to specify a custom updown" |
| 45 |
+ elog "script to charon which requires superuser privileges, you" |
| 46 |
elog "can work around this limitation by using sudo to grant the" |
| 47 |
elog "user \"ipsec\" the appropriate rights." |
| 48 |
elog "For example (the default case):" |
| 49 |
|
| 50 |
diff --git a/net-vpn/strongswan/strongswan-5.9.4-r1.ebuild b/net-vpn/strongswan/strongswan-5.9.4-r1.ebuild |
| 51 |
index 5d6ceeabdccc..32650ad0af2b 100644 |
| 52 |
--- a/net-vpn/strongswan/strongswan-5.9.4-r1.ebuild |
| 53 |
+++ b/net-vpn/strongswan/strongswan-5.9.4-r1.ebuild |
| 54 |
@@ -282,15 +282,10 @@ pkg_postinst() { |
| 55 |
elog "This imposes several limitations mainly to the IKEv1 daemon 'pluto'" |
| 56 |
elog "but also a few to the IKEv2 daemon 'charon'." |
| 57 |
elog |
| 58 |
- elog "Please carefully read: http://wiki.strongswan.org/wiki/nonRoot" |
| 59 |
+ elog "Please carefully read: http://wiki.strongswan.org/projects/strongswan/wiki/ReducedPrivileges" |
| 60 |
elog |
| 61 |
- elog "pluto uses a helper script by default to insert/remove routing and" |
| 62 |
- elog "policy rules upon connection start/stop which requires superuser" |
| 63 |
- elog "privileges. charon in contrast does this internally and can do so" |
| 64 |
- elog "even with reduced (user) privileges." |
| 65 |
- elog |
| 66 |
- elog "Thus if you require IKEv1 (pluto) or need to specify a custom updown" |
| 67 |
- elog "script to pluto or charon which requires superuser privileges, you" |
| 68 |
+ elog "Thus if you require to specify a custom updown" |
| 69 |
+ elog "script to charon which requires superuser privileges, you" |
| 70 |
elog "can work around this limitation by using sudo to grant the" |
| 71 |
elog "user \"ipsec\" the appropriate rights." |
| 72 |
elog "For example (the default case):" |
Archives