Gentoo Archives: gentoo-commits

From: Mike Frysinger <vapier@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: sys-process/audit/
Date: Fri, 10 Feb 2017 01:49:17
Message-Id: 1486691324.7e61da823863ce1e9b55facc356b043d073f1349.vapier@gentoo
1 commit: 7e61da823863ce1e9b55facc356b043d073f1349
2 Author: Mike Frysinger <vapier <AT> gentoo <DOT> org>
3 AuthorDate: Fri Feb 10 01:02:46 2017 +0000
4 Commit: Mike Frysinger <vapier <AT> gentoo <DOT> org>
5 CommitDate: Fri Feb 10 01:48:44 2017 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7e61da82
7
8 sys-process/audit: use prefix vars for base paths
9
10 sys-process/audit/audit-2.6.4.ebuild | 16 ++++++++--------
11 1 file changed, 8 insertions(+), 8 deletions(-)
12
13 diff --git a/sys-process/audit/audit-2.6.4.ebuild b/sys-process/audit/audit-2.6.4.ebuild
14 index 34c881cdfd..0f4ddd8ceb 100644
15 --- a/sys-process/audit/audit-2.6.4.ebuild
16 +++ b/sys-process/audit/audit-2.6.4.ebuild
17 @@ -76,7 +76,7 @@ src_prepare() {
18 multilib_src_configure() {
19 local ECONF_SOURCE=${S}
20 econf \
21 - --sbindir=/sbin \
22 + --sbindir="${EPREFIX}/sbin" \
23 --enable-systemd \
24 --without-python \
25 --without-python3
26 @@ -192,9 +192,9 @@ multilib_src_install_all() {
27
28 fperms 644 "$(systemd_get_systemunitdir)"/auditd.service # 556436
29
30 - [ -f "${D}"/sbin/audisp-remote ] && \
31 + [ -f "${ED}"/sbin/audisp-remote ] && \
32 dodir /usr/sbin && \
33 - mv "${D}"/{sbin,usr/sbin}/audisp-remote || die
34 + mv "${ED}"/{sbin,usr/sbin}/audisp-remote || die
35
36 # Gentoo rules
37 insinto /etc/audit/
38 @@ -205,7 +205,7 @@ multilib_src_install_all() {
39 keepdir /var/log/audit/
40
41 # Security
42 - lockdown_perms "${D}"
43 + lockdown_perms "${ED}"
44
45 prune_libtool_files --modules
46 }
47 @@ -216,15 +216,15 @@ pkg_preinst() {
48 }
49
50 pkg_postinst() {
51 - lockdown_perms "${ROOT}"
52 + lockdown_perms "${EROOT}"
53 # Preserve from the audit-1 series
54 preserve_old_lib_notify /$(get_libdir)/libaudit.so.0
55 }
56
57 lockdown_perms() {
58 - # upstream wants these to have restrictive perms
59 - # should not || die, maybe not all paths exist
60 - basedir="$1"
61 + # Upstream wants these to have restrictive perms.
62 + # Should not || die as not all paths may exist.
63 + local basedir="$1"
64 chmod 0750 "${basedir}"/sbin/au{ditctl,report,dispd,ditd,search,trace} 2>/dev/null
65 chmod 0750 "${basedir}"/var/log/audit/ 2>/dev/null
66 chmod 0640 "${basedir}"/etc/{audit/,}{auditd.conf,audit.rules*} 2>/dev/null