[gentoo-commits] repo/gentoo:master commit in: sys-fs/ecryptfs-utils/

[Sam James]

commit:     4542f5205ad1bc953e54ccbc487f5e6ebe3a5f8c
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Mon Aug 17 00:50:54 2020 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Mon Aug 17 00:50:54 2020 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4542f520

sys-fs/ecryptfs-utils: forcibly disable Python bindings

From Tiago's original PR:
"This package only supports Python 2, so disable the bindings with
--disable-pywrap and remove the USE flag. The tools themselves don't
require Python, they're either binaries or shell scripts."

Committing separately because I want to do this in a revbump
due to other cleanups and in case someone wants to shout
about the Python bindings being somehow useful.

Thanks-to: Tiago Sousa <tiagosousa <AT> gmail.com>
Bug: https://bugs.gentoo.org/735486
Package-Manager: Portage-3.0.2, Repoman-2.3.23
Signed-off-by: Sam James <sam <AT> gentoo.org>

 .../ecryptfs-utils-111_p20170609-r1.ebuild         | 82 ++++++++++++++++++++++
 1 file changed, 82 insertions(+)

diff --git a/sys-fs/ecryptfs-utils/ecryptfs-utils-111_p20170609-r1.ebuild b/sys-fs/ecryptfs-utils/ecryptfs-utils-111_p20170609-r1.ebuild
new file mode 100644
index 00000000000..10553c846c2
--- /dev/null
+++ b/sys-fs/ecryptfs-utils/ecryptfs-utils-111_p20170609-r1.ebuild
@@ -0,0 +1,82 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit autotools flag-o-matic linux-info pam
+
+MY_PN=${PN/-utils//}
+DESCRIPTION="eCryptfs userspace utilities"
+HOMEPAGE="https://launchpad.net/ecryptfs"
+SRC_URI="https://dev.gentoo.org/~bkohler/dist/${P}.tar.gz"
+S="${WORKDIR}/~${MY_PN}/${MY_PN}/trunk/"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~arm ~ppc ~ppc64 ~x86"
+IUSE="doc gpg gtk nls openssl pam pkcs11 suid tpm"
+
+BDEPEND="
+	>=dev-util/intltool-0.41.0
+	sys-devel/gettext
+	virtual/pkgconfig
+"
+RDEPEND="
+	>=dev-libs/libgcrypt-1.2.0:0=
+	dev-libs/nss
+	>=sys-apps/keyutils-1.5.11-r1:=
+	gpg? ( app-crypt/gpgme:= )
+	gtk? ( x11-libs/gtk+:2 )
+	openssl? ( >=dev-libs/openssl-0.9.7:= )
+	pam? ( sys-libs/pam )
+	pkcs11? (
+		>=dev-libs/openssl-0.9.7:=
+		>=dev-libs/pkcs11-helper-1.04
+	)
+	tpm? ( app-crypt/trousers )"
+DEPEND="${RDEPEND}"
+
+pkg_setup() {
+	CONFIG_CHECK="~ECRYPT_FS"
+	linux-info_pkg_setup
+}
+
+src_prepare() {
+	default
+	eautoreconf
+}
+
+src_configure() {
+	append-cppflags -D_FILE_OFFSET_BITS=64
+
+	econf \
+		--enable-nss \
+		--with-pamdir=$(getpam_mod_dir) \
+		--disable-pywrap \
+		$(use_enable doc docs) \
+		$(use_enable gpg) \
+		$(use_enable gtk gui) \
+		$(use_enable nls) \
+		$(use_enable openssl) \
+		$(use_enable pam) \
+		$(use_enable pkcs11 pkcs11-helper) \
+		$(use_enable tpm tspi)
+}
+
+src_install() {
+	emake DESTDIR="${D}" install
+
+	use suid && fperms u+s /sbin/mount.ecryptfs_private
+
+	find "${ED}" -name '*.la' -exec rm -f '{}' + || die
+}
+
+pkg_postinst() {
+	if use suid; then
+		ewarn
+		ewarn "You have chosen to install ${PN} with the binary setuid root. This"
+		ewarn "means that if there are any undetected vulnerabilities in the binary,"
+		ewarn "then local users may be able to gain root access on your machine."
+		ewarn
+	fi
+}