1 |
flameeyes 14/10/30 16:22:39 |
2 |
|
3 |
Modified: ChangeLog |
4 |
Added: sudo-1.8.11_p2.ebuild |
5 |
Removed: sudo-1.8.5_p2.ebuild |
6 |
Log: |
7 |
Version bump; remove one old. |
8 |
|
9 |
(Portage version: 2.2.14/cvs/Linux x86_64, signed Manifest commit with key 1CD13C8AD4301342) |
10 |
|
11 |
Revision Changes Path |
12 |
1.376 app-admin/sudo/ChangeLog |
13 |
|
14 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/ChangeLog?rev=1.376&view=markup |
15 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/ChangeLog?rev=1.376&content-type=text/plain |
16 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/ChangeLog?r1=1.375&r2=1.376 |
17 |
|
18 |
Index: ChangeLog |
19 |
=================================================================== |
20 |
RCS file: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v |
21 |
retrieving revision 1.375 |
22 |
retrieving revision 1.376 |
23 |
diff -u -r1.375 -r1.376 |
24 |
--- ChangeLog 29 Oct 2014 09:25:12 -0000 1.375 |
25 |
+++ ChangeLog 30 Oct 2014 16:22:39 -0000 1.376 |
26 |
@@ -1,6 +1,12 @@ |
27 |
# ChangeLog for app-admin/sudo |
28 |
# Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2 |
29 |
-# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.375 2014/10/29 09:25:12 ago Exp $ |
30 |
+# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.376 2014/10/30 16:22:39 flameeyes Exp $ |
31 |
+ |
32 |
+*sudo-1.8.11_p2 (30 Oct 2014) |
33 |
+ |
34 |
+ 30 Oct 2014; Diego E. Pettenò <flameeyes@g.o> +sudo-1.8.11_p2.ebuild, |
35 |
+ -sudo-1.8.5_p2.ebuild: |
36 |
+ Version bump; remove one old. |
37 |
|
38 |
29 Oct 2014; Agostino Sarubbo <ago@g.o> sudo-1.8.11_p1.ebuild: |
39 |
Stable for sparc, wrt bug #524752 |
40 |
|
41 |
|
42 |
|
43 |
1.1 app-admin/sudo/sudo-1.8.11_p2.ebuild |
44 |
|
45 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/sudo-1.8.11_p2.ebuild?rev=1.1&view=markup |
46 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/app-admin/sudo/sudo-1.8.11_p2.ebuild?rev=1.1&content-type=text/plain |
47 |
|
48 |
Index: sudo-1.8.11_p2.ebuild |
49 |
=================================================================== |
50 |
# Copyright 1999-2014 Gentoo Foundation |
51 |
# Distributed under the terms of the GNU General Public License v2 |
52 |
# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/sudo-1.8.11_p2.ebuild,v 1.1 2014/10/30 16:22:39 flameeyes Exp $ |
53 |
|
54 |
EAPI=5 |
55 |
|
56 |
inherit eutils pam multilib libtool |
57 |
|
58 |
MY_P=${P/_/} |
59 |
MY_P=${MY_P/beta/b} |
60 |
|
61 |
uri_prefix= |
62 |
case ${P} in |
63 |
*_beta*|*_rc*) uri_prefix=beta/ ;; |
64 |
esac |
65 |
|
66 |
DESCRIPTION="Allows users or groups to run commands as other users" |
67 |
HOMEPAGE="http://www.sudo.ws/" |
68 |
SRC_URI="http://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz |
69 |
ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz" |
70 |
|
71 |
# Basic license is ISC-style as-is, some files are released under |
72 |
# 3-clause BSD license |
73 |
LICENSE="ISC BSD" |
74 |
SLOT="0" |
75 |
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x64-freebsd ~sparc-solaris" |
76 |
IUSE="ldap nls pam offensive selinux skey +sendmail" |
77 |
|
78 |
DEPEND="pam? ( virtual/pam ) |
79 |
skey? ( >=sys-auth/skey-1.1.5-r1 ) |
80 |
ldap? ( |
81 |
>=net-nds/openldap-2.1.30-r1 |
82 |
dev-libs/cyrus-sasl |
83 |
) |
84 |
sys-libs/zlib" |
85 |
RDEPEND="${DEPEND} |
86 |
selinux? ( sec-policy/selinux-sudo ) |
87 |
ldap? ( dev-lang/perl ) |
88 |
pam? ( sys-auth/pambase ) |
89 |
>=app-misc/editor-wrapper-3 |
90 |
virtual/editor |
91 |
sendmail? ( virtual/mta )" |
92 |
DEPEND="${DEPEND} |
93 |
sys-devel/bison" |
94 |
|
95 |
S=${WORKDIR}/${MY_P} |
96 |
|
97 |
REQUIRED_USE="pam? ( !skey ) skey? ( !pam )" |
98 |
|
99 |
MAKEOPTS+=" SAMPLES=" |
100 |
|
101 |
src_prepare() { |
102 |
elibtoolize |
103 |
} |
104 |
|
105 |
set_rootpath() { |
106 |
# FIXME: secure_path is a compile time setting. using ROOTPATH |
107 |
# is not perfect, env-update may invalidate this, but until it |
108 |
# is available as a sudoers setting this will have to do. |
109 |
einfo "Setting secure_path ..." |
110 |
|
111 |
# first extract the default ROOTPATH from build env |
112 |
ROOTPATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}") |
113 |
if [[ -z ${ROOTPATH} ]] ; then |
114 |
ewarn " Failed to find ROOTPATH, please report this" |
115 |
fi |
116 |
|
117 |
# then remove duplicate path entries |
118 |
cleanpath() { |
119 |
local newpath thisp IFS=: |
120 |
for thisp in $1 ; do |
121 |
if [[ :${newpath}: != *:${thisp}:* ]] ; then |
122 |
newpath+=:$thisp |
123 |
else |
124 |
einfo " Duplicate entry ${thisp} removed..." |
125 |
fi |
126 |
done |
127 |
ROOTPATH=${newpath#:} |
128 |
} |
129 |
cleanpath /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin${ROOTPATH:+:${ROOTPATH}} |
130 |
|
131 |
# finally, strip gcc paths #136027 |
132 |
rmpath() { |
133 |
local e newpath thisp IFS=: |
134 |
for thisp in ${ROOTPATH} ; do |
135 |
for e ; do [[ $thisp == $e ]] && continue 2 ; done |
136 |
newpath+=:$thisp |
137 |
done |
138 |
ROOTPATH=${newpath#:} |
139 |
} |
140 |
rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' |
141 |
|
142 |
einfo "... done" |
143 |
} |
144 |
|
145 |
src_configure() { |
146 |
local ROOTPATH |
147 |
set_rootpath |
148 |
|
149 |
# audit: somebody got to explain me how I can test this before I |
150 |
# enable it.. - Diego |
151 |
# plugindir: autoconf code is crappy and does not delay evaluation |
152 |
# until `make` time, so we have to use a full path here rather than |
153 |
# basing off other values. |
154 |
econf \ |
155 |
--enable-zlib=system \ |
156 |
--with-secure-path="${ROOTPATH}" \ |
157 |
--with-editor="${EPREFIX}"/usr/libexec/editor \ |
158 |
--with-env-editor \ |
159 |
$(use_with offensive insults) \ |
160 |
$(use_with offensive all-insults) \ |
161 |
$(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) \ |
162 |
$(use_with ldap) \ |
163 |
$(use_enable nls) \ |
164 |
$(use_with pam) \ |
165 |
$(use_with skey) \ |
166 |
$(use_with selinux) \ |
167 |
$(use_with sendmail) \ |
168 |
--without-opie \ |
169 |
--without-linux-audit \ |
170 |
--with-rundir="${EPREFIX}"/var/run/sudo \ |
171 |
--with-vardir="${EPREFIX}"/var/db/sudo \ |
172 |
--with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo \ |
173 |
--docdir="${EPREFIX}"/usr/share/doc/${PF} |
174 |
} |
175 |
|
176 |
src_install() { |
177 |
default |
178 |
|
179 |
if use ldap ; then |
180 |
dodoc README.LDAP doc/schema.OpenLDAP |
181 |
dosbin plugins/sudoers/sudoers2ldif |
182 |
|
183 |
cat <<-EOF > "${T}"/ldap.conf.sudo |
184 |
# See ldap.conf(5) and README.LDAP for details |
185 |
# This file should only be readable by root |
186 |
|
187 |
# supported directives: host, port, ssl, ldap_version |
188 |
# uri, binddn, bindpw, sudoers_base, sudoers_debug |
189 |
# tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key |
190 |
EOF |
191 |
|
192 |
insinto /etc |
193 |
doins "${T}"/ldap.conf.sudo |
194 |
fperms 0440 /etc/ldap.conf.sudo |
195 |
fi |
196 |
|
197 |
pamd_mimic system-auth sudo auth account session |
198 |
|
199 |
keepdir /var/db/sudo |
200 |
fperms 0700 /var/db/sudo |
201 |
|
202 |
# Don't install into /var/run as that is a tmpfs most of the time |
203 |
# (bug #504854) |
204 |
rm -rf "${D}"/var/run |
205 |
} |
206 |
|
207 |
pkg_postinst() { |
208 |
if use ldap ; then |
209 |
ewarn |
210 |
ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration." |
211 |
ewarn |
212 |
if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then |
213 |
ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" |
214 |
ewarn "configured in /etc/nsswitch.conf." |
215 |
ewarn |
216 |
ewarn "To make use of LDAP, add this line to your /etc/nsswitch.conf:" |
217 |
ewarn " sudoers: ldap files" |
218 |
ewarn |
219 |
fi |
220 |
fi |
221 |
if use prefix ; then |
222 |
ewarn |
223 |
ewarn "To use sudo, you need to change file ownership and permissions" |
224 |
ewarn "with root privileges, as follows:" |
225 |
ewarn |
226 |
ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" |
227 |
ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" |
228 |
ewarn " # chown root:root ${EPREFIX}/etc/sudoers" |
229 |
ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" |
230 |
ewarn " # chown root:root ${EPREFIX}/var/db/sudo" |
231 |
ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" |
232 |
ewarn |
233 |
fi |
234 |
|
235 |
elog "To use the -A (askpass) option, you need to install a compatible" |
236 |
elog "password program from the following list. Starred packages will" |
237 |
elog "automatically register for the use with sudo (but will not force" |
238 |
elog "the -A option):" |
239 |
elog "" |
240 |
elog " [*] net-misc/ssh-askpass-fullscreen" |
241 |
elog " net-misc/x11-ssh-askpass" |
242 |
elog "" |
243 |
elog "You can override the choice by setting the SUDO_ASKPASS environmnent" |
244 |
elog "variable to the program you want to use." |
245 |
} |