1 |
flameeyes 13/02/28 05:58:09 |
2 |
|
3 |
Modified: ChangeLog |
4 |
Added: sudo-1.8.6_p7.ebuild |
5 |
Removed: sudo-1.8.6_p6.ebuild |
6 |
Log: |
7 |
Version bump; remove old. |
8 |
|
9 |
(Portage version: 2.2.0_alpha163/cvs/Linux x86_64, signed Manifest commit with key 1CD13C8AD4301342) |
10 |
|
11 |
Revision Changes Path |
12 |
1.342 app-admin/sudo/ChangeLog |
13 |
|
14 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/ChangeLog?rev=1.342&view=markup |
15 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/ChangeLog?rev=1.342&content-type=text/plain |
16 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/ChangeLog?r1=1.341&r2=1.342 |
17 |
|
18 |
Index: ChangeLog |
19 |
=================================================================== |
20 |
RCS file: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v |
21 |
retrieving revision 1.341 |
22 |
retrieving revision 1.342 |
23 |
diff -u -r1.341 -r1.342 |
24 |
--- ChangeLog 24 Feb 2013 18:11:43 -0000 1.341 |
25 |
+++ ChangeLog 28 Feb 2013 05:58:09 -0000 1.342 |
26 |
@@ -1,6 +1,12 @@ |
27 |
# ChangeLog for app-admin/sudo |
28 |
# Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2 |
29 |
-# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.341 2013/02/24 18:11:43 ago Exp $ |
30 |
+# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.342 2013/02/28 05:58:09 flameeyes Exp $ |
31 |
+ |
32 |
+*sudo-1.8.6_p7 (28 Feb 2013) |
33 |
+ |
34 |
+ 28 Feb 2013; Diego E. Pettenò <flameeyes@g.o> +sudo-1.8.6_p7.ebuild, |
35 |
+ -sudo-1.8.6_p6.ebuild: |
36 |
+ Version bump; remove old. |
37 |
|
38 |
24 Feb 2013; Agostino Sarubbo <ago@g.o> sudo-1.8.6_p3.ebuild: |
39 |
Stable for sh, wrt bug #452602 |
40 |
|
41 |
|
42 |
|
43 |
1.1 app-admin/sudo/sudo-1.8.6_p7.ebuild |
44 |
|
45 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/sudo-1.8.6_p7.ebuild?rev=1.1&view=markup |
46 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/sudo-1.8.6_p7.ebuild?rev=1.1&content-type=text/plain |
47 |
|
48 |
Index: sudo-1.8.6_p7.ebuild |
49 |
=================================================================== |
50 |
# Copyright 1999-2013 Gentoo Foundation |
51 |
# Distributed under the terms of the GNU General Public License v2 |
52 |
# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/sudo-1.8.6_p7.ebuild,v 1.1 2013/02/28 05:58:09 flameeyes Exp $ |
53 |
|
54 |
EAPI=4 |
55 |
|
56 |
inherit eutils pam multilib libtool |
57 |
|
58 |
MY_P=${P/_/} |
59 |
MY_P=${MY_P/beta/b} |
60 |
|
61 |
uri_prefix= |
62 |
case ${P} in |
63 |
*_beta*|*_rc*) uri_prefix=beta/ ;; |
64 |
esac |
65 |
|
66 |
DESCRIPTION="Allows users or groups to run commands as other users" |
67 |
HOMEPAGE="http://www.sudo.ws/" |
68 |
SRC_URI="http://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz |
69 |
ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz" |
70 |
|
71 |
# Basic license is ISC-style as-is, some files are released under |
72 |
# 3-clause BSD license |
73 |
LICENSE="ISC BSD" |
74 |
SLOT="0" |
75 |
KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x64-freebsd ~sparc-solaris" |
76 |
IUSE="ldap nls pam offensive selinux skey" |
77 |
|
78 |
DEPEND="pam? ( virtual/pam ) |
79 |
skey? ( >=sys-auth/skey-1.1.5-r1 ) |
80 |
ldap? ( |
81 |
>=net-nds/openldap-2.1.30-r1 |
82 |
dev-libs/cyrus-sasl |
83 |
) |
84 |
sys-libs/zlib" |
85 |
RDEPEND="${DEPEND} |
86 |
selinux? ( sec-policy/selinux-sudo ) |
87 |
ldap? ( dev-lang/perl ) |
88 |
pam? ( sys-auth/pambase ) |
89 |
>=app-misc/editor-wrapper-3 |
90 |
virtual/editor |
91 |
virtual/mta" |
92 |
DEPEND="${DEPEND} |
93 |
sys-devel/bison" |
94 |
|
95 |
S=${WORKDIR}/${MY_P} |
96 |
|
97 |
REQUIRED_USE="pam? ( !skey ) skey? ( !pam )" |
98 |
|
99 |
MAKEOPTS+=" SAMPLES=" |
100 |
|
101 |
src_prepare() { |
102 |
elibtoolize |
103 |
} |
104 |
|
105 |
set_rootpath() { |
106 |
# FIXME: secure_path is a compile time setting. using ROOTPATH |
107 |
# is not perfect, env-update may invalidate this, but until it |
108 |
# is available as a sudoers setting this will have to do. |
109 |
einfo "Setting secure_path ..." |
110 |
|
111 |
# first extract the default ROOTPATH from build env |
112 |
ROOTPATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}") |
113 |
if [[ -z ${ROOTPATH} ]] ; then |
114 |
ewarn " Failed to find ROOTPATH, please report this" |
115 |
fi |
116 |
|
117 |
# then remove duplicate path entries |
118 |
cleanpath() { |
119 |
local newpath thisp IFS=: |
120 |
for thisp in $1 ; do |
121 |
if [[ :${newpath}: != *:${thisp}:* ]] ; then |
122 |
newpath+=:$thisp |
123 |
else |
124 |
einfo " Duplicate entry ${thisp} removed..." |
125 |
fi |
126 |
done |
127 |
ROOTPATH=${newpath#:} |
128 |
} |
129 |
cleanpath /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin${ROOTPATH:+:${ROOTPATH}} |
130 |
|
131 |
# finally, strip gcc paths #136027 |
132 |
rmpath() { |
133 |
local e newpath thisp IFS=: |
134 |
for thisp in ${ROOTPATH} ; do |
135 |
for e ; do [[ $thisp == $e ]] && continue 2 ; done |
136 |
newpath+=:$thisp |
137 |
done |
138 |
ROOTPATH=${newpath#:} |
139 |
} |
140 |
rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' |
141 |
|
142 |
einfo "... done" |
143 |
} |
144 |
|
145 |
src_configure() { |
146 |
local ROOTPATH |
147 |
set_rootpath |
148 |
|
149 |
# audit: somebody got to explain me how I can test this before I |
150 |
# enable it.. - Diego |
151 |
# plugindir: autoconf code is crappy and does not delay evaluation |
152 |
# until `make` time, so we have to use a full path here rather than |
153 |
# basing off other values. |
154 |
econf \ |
155 |
--enable-zlib=system \ |
156 |
--with-secure-path="${ROOTPATH}" \ |
157 |
--with-editor="${EPREFIX}"/usr/libexec/editor \ |
158 |
--with-env-editor \ |
159 |
$(use_with offensive insults) \ |
160 |
$(use_with offensive all-insults) \ |
161 |
$(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) \ |
162 |
$(use_with ldap) \ |
163 |
$(use_enable nls) \ |
164 |
$(use_with pam) \ |
165 |
$(use_with skey) \ |
166 |
$(use_with selinux) \ |
167 |
--without-opie \ |
168 |
--without-linux-audit \ |
169 |
--with-timedir="${EPREFIX}"/var/db/sudo \ |
170 |
--with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo \ |
171 |
--docdir="${EPREFIX}"/usr/share/doc/${PF} |
172 |
} |
173 |
|
174 |
src_install() { |
175 |
default |
176 |
|
177 |
if use ldap ; then |
178 |
dodoc README.LDAP doc/schema.OpenLDAP |
179 |
dosbin plugins/sudoers/sudoers2ldif |
180 |
|
181 |
cat <<-EOF > "${T}"/ldap.conf.sudo |
182 |
# See ldap.conf(5) and README.LDAP for details |
183 |
# This file should only be readable by root |
184 |
|
185 |
# supported directives: host, port, ssl, ldap_version |
186 |
# uri, binddn, bindpw, sudoers_base, sudoers_debug |
187 |
# tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key |
188 |
EOF |
189 |
|
190 |
insinto /etc |
191 |
doins "${T}"/ldap.conf.sudo |
192 |
fperms 0440 /etc/ldap.conf.sudo |
193 |
fi |
194 |
|
195 |
pamd_mimic system-auth sudo auth account session |
196 |
|
197 |
keepdir /var/db/sudo |
198 |
fperms 0700 /var/db/sudo |
199 |
} |
200 |
|
201 |
pkg_postinst() { |
202 |
if use ldap ; then |
203 |
ewarn |
204 |
ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration." |
205 |
ewarn |
206 |
if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then |
207 |
ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" |
208 |
ewarn "configured in /etc/nsswitch.conf." |
209 |
ewarn |
210 |
ewarn "To make use of LDAP, add this line to your /etc/nsswitch.conf:" |
211 |
ewarn " sudoers: ldap files" |
212 |
ewarn |
213 |
fi |
214 |
fi |
215 |
if use prefix ; then |
216 |
ewarn |
217 |
ewarn "To use sudo, you need to change file ownership and permissions" |
218 |
ewarn "with root privileges, as follows:" |
219 |
ewarn |
220 |
ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" |
221 |
ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" |
222 |
ewarn " # chown root:root ${EPREFIX}/etc/sudoers" |
223 |
ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" |
224 |
ewarn " # chown root:root ${EPREFIX}/var/db/sudo" |
225 |
ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" |
226 |
ewarn |
227 |
fi |
228 |
|
229 |
elog "To use the -A (askpass) option, you need to install a compatible" |
230 |
elog "password program from the following list. Starred packages will" |
231 |
elog "automatically register for the use with sudo (but will not force" |
232 |
elog "the -A option):" |
233 |
elog "" |
234 |
elog " [*] net-misc/ssh-askpass-fullscreen" |
235 |
elog " net-misc/x11-ssh-askpass" |
236 |
elog "" |
237 |
elog "You can override the choice by setting the SUDO_ASKPASS environmnent" |
238 |
elog "variable to the program you want to use." |
239 |
} |