[gentoo-commits] repo/gentoo:master commit in: app-i18n/librime/files/, app-i18n/librime/

[Mike Gilbert]

commit:     d149e41c89b85dff47bd5cdc332e6c0817acdd72
Author:     Arfrever Frehtes Taifersar Arahesis <Arfrever <AT> Apache <DOT> Org>
AuthorDate: Mon Dec 23 21:18:36 2019 +0000
Commit:     Mike Gilbert <floppym <AT> gentoo <DOT> org>
CommitDate: Sun Dec 29 19:31:34 2019 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d149e41c

app-i18n/librime: Set secure mode of log files.

Bug: https://bugs.gentoo.org/695702
Signed-off-by: Arfrever Frehtes Taifersar Arahesis <Arfrever <AT> Apache.Org>
Signed-off-by: Mike Gilbert <floppym <AT> gentoo.org>

 app-i18n/librime/files/librime-1.5.3-log_files_mode.patch  | 14 ++++++++++++++
 .../{librime-1.5.3.ebuild => librime-1.5.3-r1.ebuild}      |  6 +++++-
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch
new file mode 100644
index 00000000000..7a36dea64d2
--- /dev/null
+++ b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch
@@ -0,0 +1,14 @@
+https://github.com/rime/librime/issues/316
+https://github.com/rime/librime/commit/90839b0b3d47cbfef715ea5f061c7505666ff75d
+
+--- /src/rime/setup.cc
++++ /src/rime/setup.cc
+@@ -35,6 +35,8 @@
+ 
+ RIME_API void SetupLogging(const char* app_name) {
+ #ifdef RIME_ENABLE_LOGGING
++  // Do not allow other users to read/write log files created by current process.
++  FLAGS_logfile_mode = 0600;
+   google::InitGoogleLogging(app_name);
+ #endif  // RIME_ENABLE_LOGGING
+ }

diff --git a/app-i18n/librime/librime-1.5.3.ebuild b/app-i18n/librime/librime-1.5.3-r1.ebuild
similarity index 95%
rename from app-i18n/librime/librime-1.5.3.ebuild
rename to app-i18n/librime/librime-1.5.3-r1.ebuild
index 9827ea65ff6..b41cd0ea439 100644
--- a/app-i18n/librime/librime-1.5.3.ebuild
+++ b/app-i18n/librime/librime-1.5.3-r1.ebuild
@@ -28,7 +28,7 @@ RESTRICT="!test? ( test )"
 
 BDEPEND=""
 RDEPEND="app-i18n/opencc:0=
-	dev-cpp/glog:0=
+	>=dev-cpp/glog-0.3.5:0=
 	dev-cpp/yaml-cpp:0=
 	dev-libs/boost:0=[nls,threads]
 	dev-libs/leveldb:0=
@@ -39,6 +39,10 @@ DEPEND="${RDEPEND}
 	x11-base/xorg-proto
 	test? ( dev-cpp/gtest )"
 
+PATCHES=(
+	"${FILESDIR}/${P}-log_files_mode.patch"
+)
+
 DOCS=(CHANGELOG.md README.md)
 
 src_prepare() {