From aac5e1b02ac846f5e1ce85f4f66fdec46aa9b0d1 Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Fri, 1 Nov 2024 03:04:34 +0000 Subject: gentoo auto-resync : 01:11:2024 - 03:04:33 --- app-admin/Manifest.gz | Bin 32218 -> 32205 bytes app-admin/awscli/Manifest | 2 + app-admin/awscli/awscli-1.35.18.ebuild | 98 +++++++++ app-admin/hcloud/Manifest | 2 +- app-admin/hcloud/hcloud-1.48.0-r1.ebuild | 35 +++ app-admin/hcloud/hcloud-1.48.0.ebuild | 31 --- app-admin/linode-cli/Manifest | 2 + app-admin/linode-cli/linode-cli-5.54.0.ebuild | 45 ++++ app-admin/stow/Manifest | 2 +- app-admin/stow/stow-2.4.1.ebuild | 2 +- app-admin/sudo/Manifest | 6 +- app-admin/sudo/sudo-1.9.15_p5.ebuild | 2 +- app-admin/sudo/sudo-1.9.16-r1.ebuild | 293 ++++++++++++++++++++++++++ app-admin/sudo/sudo-1.9.16.ebuild | 293 -------------------------- app-admin/sudo/sudo-9999.ebuild | 4 +- 15 files changed, 484 insertions(+), 333 deletions(-) create mode 100644 app-admin/awscli/awscli-1.35.18.ebuild create mode 100644 app-admin/hcloud/hcloud-1.48.0-r1.ebuild delete mode 100644 app-admin/hcloud/hcloud-1.48.0.ebuild create mode 100644 app-admin/linode-cli/linode-cli-5.54.0.ebuild create mode 100644 app-admin/sudo/sudo-1.9.16-r1.ebuild delete mode 100644 app-admin/sudo/sudo-1.9.16.ebuild (limited to 'app-admin') diff --git a/app-admin/Manifest.gz b/app-admin/Manifest.gz index 7a4ff4a2759e..1f26bdf13828 100644 Binary files a/app-admin/Manifest.gz and b/app-admin/Manifest.gz differ diff --git a/app-admin/awscli/Manifest b/app-admin/awscli/Manifest index 03674c7502b3..bd94c31f25bb 100644 --- a/app-admin/awscli/Manifest +++ b/app-admin/awscli/Manifest @@ -2,10 +2,12 @@ DIST aws-cli-1.35.10.gh.tar.gz 2811446 BLAKE2B 3151e107099821ffa3978d4a0175bf96a DIST aws-cli-1.35.15.gh.tar.gz 2810766 BLAKE2B 18a8464acede1801a533da89191c31309944123f092a08790d79f1a05d57be9540385e9acac75240c6595573685fbb3046ff3e85530881e25f54bc4213b944c6 SHA512 def601f10f9e4afe3b17b98bdeab58b3fe78b2171d5cc4bbe5892ae8fc348a1bb3467ef8051f6005091708df3c9e3bd85751cedf372f8730ee3197b6e833a652 DIST aws-cli-1.35.16.gh.tar.gz 2811312 BLAKE2B 0d3a243ecd9b1759fcecdb427693270136e6c00b6eeae592481eaf8a32bbf641659e096c7eb19fe550b05a1c2f4f79300191c3716c551bf0dd25a9bd41d6aeb6 SHA512 02caaac48ca08a97a3cd82a672fb2dcd4b66666a7b4de34c3420ee66c10c79aa10672603997f941a8c462c8094cc6c014aefbba5109f6cee75a546426ea00439 DIST aws-cli-1.35.17.gh.tar.gz 2814594 BLAKE2B 031bfa16aa8d1478a2c1b146a38182ee776869b3c512c51e4ae234f495c538cd941c7853ede3b28ef262637e56ffa32c95c130f4ece3d2495d2e993a5f4840fe SHA512 e0a873df808e2bfac61e2ed3b56c7da8d9f0b975839f9cad7dc4df5f2bb8c68d200694053b00da203fd5a4fb80cbd61742f0f2ec0cb544aa037e82b95466f99b +DIST aws-cli-1.35.18.gh.tar.gz 2816574 BLAKE2B 79f4fce1109cfc15248fa7c1aefc4c99127b881077c33204934a088ebf095745a1a7144a51c1e02acd3171ce207455fb47124508df30c2714b61109454e60157 SHA512 426bd2e2a8bb71c450fc90887096adebedc0ed885a9450d960b5d3ba7c335fcfbd18cb358c0b3f6b204568ac84804ec8ae36f4517e0dc6e78bd286c342d2de86 DIST aws-cli-1.35.5.gh.tar.gz 2808789 BLAKE2B 545c76bd349485fbf2dc5565317678904c99443e2e6dc2e12fa9de122327d8aa0e8b9579cec37afe2e949a0c31c48e0977e52d701ffc212182c692769c35a948 SHA512 2a9c86f1a63b657d3c95f8a65020ea7837ded9f5147ce31a535f59b9d9c1c91c3354a82286c25252da7d5b7c48c1898f594be0cb9e1ba54c6768133543fcba50 EBUILD awscli-1.35.10.ebuild 3247 BLAKE2B 563e1df537df7a081ac11e541ee21cea26a8799434021b9f814dc2e4a46704be1f2edf529ac225e8a9f6b3a4a81815b30d2d25f782f3b9e1dbcc098367ab769f SHA512 cb54a636f6b46f0956577c1141d9f1f7f2887c0bd53c1eca061f214dfe88591ca2ab9e7e96daa9f9c2b2b14b969c1effd8085928db3d5fcfd61463da871dbdb2 EBUILD awscli-1.35.15.ebuild 3247 BLAKE2B 563e1df537df7a081ac11e541ee21cea26a8799434021b9f814dc2e4a46704be1f2edf529ac225e8a9f6b3a4a81815b30d2d25f782f3b9e1dbcc098367ab769f SHA512 cb54a636f6b46f0956577c1141d9f1f7f2887c0bd53c1eca061f214dfe88591ca2ab9e7e96daa9f9c2b2b14b969c1effd8085928db3d5fcfd61463da871dbdb2 EBUILD awscli-1.35.16.ebuild 3247 BLAKE2B 563e1df537df7a081ac11e541ee21cea26a8799434021b9f814dc2e4a46704be1f2edf529ac225e8a9f6b3a4a81815b30d2d25f782f3b9e1dbcc098367ab769f SHA512 cb54a636f6b46f0956577c1141d9f1f7f2887c0bd53c1eca061f214dfe88591ca2ab9e7e96daa9f9c2b2b14b969c1effd8085928db3d5fcfd61463da871dbdb2 EBUILD awscli-1.35.17.ebuild 3247 BLAKE2B 563e1df537df7a081ac11e541ee21cea26a8799434021b9f814dc2e4a46704be1f2edf529ac225e8a9f6b3a4a81815b30d2d25f782f3b9e1dbcc098367ab769f SHA512 cb54a636f6b46f0956577c1141d9f1f7f2887c0bd53c1eca061f214dfe88591ca2ab9e7e96daa9f9c2b2b14b969c1effd8085928db3d5fcfd61463da871dbdb2 +EBUILD awscli-1.35.18.ebuild 3247 BLAKE2B 563e1df537df7a081ac11e541ee21cea26a8799434021b9f814dc2e4a46704be1f2edf529ac225e8a9f6b3a4a81815b30d2d25f782f3b9e1dbcc098367ab769f SHA512 cb54a636f6b46f0956577c1141d9f1f7f2887c0bd53c1eca061f214dfe88591ca2ab9e7e96daa9f9c2b2b14b969c1effd8085928db3d5fcfd61463da871dbdb2 EBUILD awscli-1.35.5.ebuild 3134 BLAKE2B c2ddd86359d913936a50c8800f366e44108dcfe932ee27ce6749120f8c99299386663d819486e9c20c11933170bea250e601505dd12504d39802b36f3f6e7d68 SHA512 58b0c974de9872309ad7f53bc515855f8755d468d4cdd42f7f04d2e9e22c2a410a8fcedda4d1c1b87a7d342f89056b75bc0d704eeef9fc93c699bb8bcadc14f2 MISC metadata.xml 385 BLAKE2B 5accfb180a91179cc6df539d42d1de06be3ebfec73f3edb719f5d59576103b9a8cb0c7c524c1042630e0cf99f068939a19f04c7b1b4a2acf9e072369df80d913 SHA512 ccb3d516326c5dbdf53068372ce25baecc137d21a04516374362212b969cc928dacbf743b4953da33f28482905798f069d09d19c88d9913f2b32648db25115ab diff --git a/app-admin/awscli/awscli-1.35.18.ebuild b/app-admin/awscli/awscli-1.35.18.ebuild new file mode 100644 index 000000000000..0fc6192a8587 --- /dev/null +++ b/app-admin/awscli/awscli-1.35.18.ebuild @@ -0,0 +1,98 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +DISTUTILS_USE_PEP517=setuptools +PYTHON_COMPAT=( python3_{10..13} ) + +inherit bash-completion-r1 distutils-r1 + +MY_P=aws-cli-${PV} +DESCRIPTION="Universal Command Line Environment for AWS" +HOMEPAGE=" + https://github.com/aws/aws-cli/ + https://pypi.org/project/awscli/ +" +SRC_URI=" + https://github.com/aws/aws-cli/archive/${PV}.tar.gz + -> ${MY_P}.gh.tar.gz +" +S=${WORKDIR}/${MY_P} + +LICENSE="Apache-2.0" +SLOT="0" +KEYWORDS="~amd64 ~arm ~arm64 ~ppc ~ppc64 ~riscv ~sparc ~x86" + +# botocore is x.y.(z+34) +BOTOCORE_PV="$(ver_cut 1).$(ver_cut 2).$(( $(ver_cut 3-) + 34 ))" +RDEPEND=" + >=dev-python/botocore-${BOTOCORE_PV}[${PYTHON_USEDEP}] + dev-python/colorama[${PYTHON_USEDEP}] + dev-python/docutils[${PYTHON_USEDEP}] + dev-python/rsa[${PYTHON_USEDEP}] + >=dev-python/s3transfer-0.10.0[${PYTHON_USEDEP}] + dev-python/pyyaml[${PYTHON_USEDEP}] + !app-admin/awscli-bin +" +BDEPEND=" + test? ( + dev-python/packaging[${PYTHON_USEDEP}] + dev-python/pytest-forked[${PYTHON_USEDEP}] + ) +" + +EPYTEST_XDIST=1 +distutils_enable_tests pytest + +src_prepare() { + # do not rely on bundled deps in botocore (sic!) + find -name '*.py' -exec sed -i \ + -e 's:from botocore[.]vendored import:import:' \ + -e 's:from botocore[.]vendored[.]:from :' \ + {} + || die + # strip overzealous upper bounds on requirements + sed -i -e 's:,<[0-9.]*::' -e 's:==:>=:' setup.py || die + distutils-r1_src_prepare +} + +python_test() { + local serial_tests=( + tests/functional/ecs/test_execute_command.py::TestExecuteCommand::test_execute_command_success + tests/functional/ssm/test_start_session.py::TestSessionManager::test_start_session_{fails,success} + tests/functional/ssm/test_start_session.py::TestSessionManager::test_start_session_with_new_version_plugin_success + tests/unit/customizations/codeartifact/test_adapter_login.py::TestDotNetLogin::test_login_dotnet_sources_listed_with_backtracking + tests/unit/customizations/codeartifact/test_adapter_login.py::TestDotNetLogin::test_login_dotnet_sources_listed_with_backtracking_windows + tests/unit/customizations/codeartifact/test_adapter_login.py::TestNuGetLogin::test_login_nuget_sources_listed_with_backtracking + tests/unit/customizations/ecs/test_executecommand_startsession.py::TestExecuteCommand::test_execute_command_success + tests/unit/customizations/test_sessionmanager.py + tests/unit/test_compat.py::TestIgnoreUserSignals + tests/unit/test_help.py + tests/unit/test_utils.py::TestIgnoreCtrlC::test_ctrl_c_is_ignored + ) + local -x PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 + EPYTEST_XDIST= epytest "${serial_tests[@]}" + + local EPYTEST_DESELECT=( "${serial_tests[@]}" ) + case ${EPYTHON} in + python3.13*) + EPYTEST_DESELECT+=( + # flaky (some ordering?) + tests/functional/s3/test_cp_command.py::TestCPCommand::test_multipart_upload_with_checksum_algorithm_crc32 + ) + ;; + esac + # integration tests require AWS credentials and Internet access + epytest tests/{functional,unit} +} + +python_install_all() { + newbashcomp bin/aws_bash_completer aws + + insinto /usr/share/zsh/site-functions + newins bin/aws_zsh_completer.sh _aws + + distutils-r1_python_install_all + + rm "${ED}"/usr/bin/{aws.cmd,aws_bash_completer,aws_zsh_completer.sh} || die +} diff --git a/app-admin/hcloud/Manifest b/app-admin/hcloud/Manifest index 960450c3e3e3..5daa399df6cb 100644 --- a/app-admin/hcloud/Manifest +++ b/app-admin/hcloud/Manifest @@ -1,5 +1,5 @@ DIST hcloud-1.47.0.tar.xz 2199764 BLAKE2B 02c06449ab62904b3f21ddaadc6182a965488e72f453b8d03d73b4be8a585ae42a7f1db4012588b8983e77cb181fa1aeff1a778205fc23731bc12565cdea1d7b SHA512 ca5999ef59a3b11e589a6c199f87ff2487b1384dfb6244adf286b84ee7de9dc6cbc4879dc72b6a5196c0f067efa7d3202110471debc4fe020114bf97ea10f9c8 DIST hcloud-1.48.0.tar.xz 2365360 BLAKE2B d5c50ba117c20f93ffca713142e622ca6069cbcd591553344d32baedf0d522688851bddb524c8976d9a08fe5ea81fecc10c24f2c88e5610ea26a86036159b4e0 SHA512 f3e119e2a4016489df1cb5116ff21608fb8188671c625596bfbd7342a51f70e26f9a79f059dd1919bac2a3d1aadcff94166ef7ee8640fd0df3e13ccb770b3fa2 EBUILD hcloud-1.47.0.ebuild 644 BLAKE2B 30273b4b3244eca66768acebc13756f702912728e8e42aaa66b17ae72956d79e99e80b3a2a0bf667589b931eaef0b53178ac1384499df33485ce2c039f6bb89d SHA512 f2b86d28d88c28ea3eda268c1ec8f6fb0ec356af0693278e8fdda80f5929b3f3fd745837d7b3f78853ba7e36644f7fb66cca60699ba3fabfdafe58560923b778 -EBUILD hcloud-1.48.0.ebuild 645 BLAKE2B 479b4959afc11357387cc1cec715f31e8b63f2d66e9fade3e0916e9133c41e9726c345615828b4b547a2512892f3ec54c615e0ed1b64c69dee0f95b33fe680c2 SHA512 91df85323ebcef2444b5e983b584dfa5d039e3e87d7bafe90f40f1376918dfd780a6d8afe639ac517d8f149cc398abf7072dfd0f3436b72474949f9ccc4232bc +EBUILD hcloud-1.48.0-r1.ebuild 801 BLAKE2B 61d05d68daf4a346752ddbee9a579ff7dfc8aa2c7e82af0c95c2537a6456313b1f91e9322c224ff95166fd650985f1b2c167f2a50c528c3d39c7c6de6abbd645 SHA512 e9f876d9329731f9ef7d3dadaee285a97b9602551e7a3883dbb0458fa74ccdb429f49ccee97453a72e171fa25864fc5dd2b6a6cae5f8920af680c171708524e2 MISC metadata.xml 338 BLAKE2B 6ba2cbe509581ac35dabd93abe166f960d69d1f14336779848483386d28e22dd06e5d196061312827b7a945369f05a466417a1636b607e138515957a75db6f84 SHA512 cc69ce0ab7ba3a9af94ef1918738074cdd725bef2ff70d6c19e46d07bb9514d05ef6415c7ba5b372e7a98902a8440cdb9f7b14a848c3ff2f054863356971ddde diff --git a/app-admin/hcloud/hcloud-1.48.0-r1.ebuild b/app-admin/hcloud/hcloud-1.48.0-r1.ebuild new file mode 100644 index 000000000000..49cedeae2460 --- /dev/null +++ b/app-admin/hcloud/hcloud-1.48.0-r1.ebuild @@ -0,0 +1,35 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit go-module + +DESCRIPTION="A command-line interface for Hetzner Cloud" +HOMEPAGE="https://github.com/hetznercloud/cli" +SRC_URI="https://dev.gentoo.org/~ago/distfiles/${P}.tar.xz" + +LICENSE="MIT" +SLOT="0" +KEYWORDS="~amd64" + +src_compile() { + ego build -o ${PN} -ldflags "-w -X github.com/hetznercloud/cli/internal/version.versionPrerelease=gentoo" ./cmd/${PN} +} + +src_test() { + ./hcloud version + if [[ $? -ne 0 ]] + then + die "hcloud version test failed" + fi + + # Avoid error like: + # -buildmode=pie not supported when -race is enabled on linux/amd64 + GOFLAGS=${GOFLAGS//-buildmode=pie} + ego test -coverpkg=./... -coverprofile=coverage.txt -v -race ./... +} + +src_install() { + dobin ${PN} +} diff --git a/app-admin/hcloud/hcloud-1.48.0.ebuild b/app-admin/hcloud/hcloud-1.48.0.ebuild deleted file mode 100644 index c4449b25b091..000000000000 --- a/app-admin/hcloud/hcloud-1.48.0.ebuild +++ /dev/null @@ -1,31 +0,0 @@ -# Copyright 1999-2024 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -inherit go-module - -DESCRIPTION="A command-line interface for Hetzner Cloud" -HOMEPAGE="https://github.com/hetznercloud/cli" -SRC_URI="https://dev.gentoo.org/~ago/distfiles/${P}.tar.xz" - -LICENSE="MIT" -SLOT="0" -KEYWORDS="~amd64" - -src_compile() { - ego build -o ${PN} -ldflags "-w -X github.com/hetznercloud/cli/internal/version.versionPrerelease=gentoo" ./cmd/${PN} -} - -src_test() { - # For upstream a simple test is run 'hcloud version' - ./hcloud version - if [[ $? -ne 0 ]] - then - die "Test failed" - fi -} - -src_install() { - dobin ${PN} -} diff --git a/app-admin/linode-cli/Manifest b/app-admin/linode-cli/Manifest index 37954b52f891..0cc7b76cbb80 100644 --- a/app-admin/linode-cli/Manifest +++ b/app-admin/linode-cli/Manifest @@ -1,5 +1,7 @@ DIST linode_cli-5.52.0.tar.gz 160729 BLAKE2B dc0a4c30dcaab3c07c64aa519786f461a79e6f532ebfcc9917e6654b6a8bd32b2cfa2f323036d3870555b7b91620121264877a0fbae4b1bc2a71e885558bb261 SHA512 26c774e0936e16f391c5b028ffc91370d6401e85e92f08ce2e3b2435be3a8230d0d8edd3904ff0514c76b135a3ff88fae27e5e452d0aae534b0deb6f9fc8a2ff DIST linode_cli-5.53.1.tar.gz 154260 BLAKE2B c2c9d00f0686bcd4d083974c7c2e167963a6af2d04c244c854937e2301de6df62cf82d872aa53f01150bb657895bccedba1df2ce4d6d091ce27c7abd599d2250 SHA512 ea7b8cf42f041deca2e745d4e8113beb2c46a3a79e5a56b57a24379581eca793e2f3e0d0b5821e3644450eb4da207c3884098ad33e9ec62775657a625ed4a849 +DIST linode_cli-5.54.0.tar.gz 153961 BLAKE2B ae147c7c29532d53e8230e8374acb5727791f07f3177720637d7b23d1169821b2a65975b6e22f45bb53f69d241525ecb081a18f854d3d904da9de406f27f146f SHA512 7cad0e899ebced5c27923f4b8ea6fc4c854f90f7925ff5e8e010565ec51f20c75976a0efacfebceb78c4befa0e64ea0a2c896bb82f541903413fe96c8b0c68e1 EBUILD linode-cli-5.52.0.ebuild 1338 BLAKE2B 8cdcd6d7ad933ac3ee00ad19a9f900961de75404b4e9b36f8043cca9e76e6db846c1ec4a9490901edd15cba501fcf9671a808444f144962b63574c60281343cd SHA512 396a0108dfddab2e2c5ba57caec6d599d3723807cce301a2545415f0e0c625e6f0c0e846b2b243bba459695928c360c35ed04ea027ac236c450530458c6893d9 EBUILD linode-cli-5.53.1.ebuild 1338 BLAKE2B 8cdcd6d7ad933ac3ee00ad19a9f900961de75404b4e9b36f8043cca9e76e6db846c1ec4a9490901edd15cba501fcf9671a808444f144962b63574c60281343cd SHA512 396a0108dfddab2e2c5ba57caec6d599d3723807cce301a2545415f0e0c625e6f0c0e846b2b243bba459695928c360c35ed04ea027ac236c450530458c6893d9 +EBUILD linode-cli-5.54.0.ebuild 1338 BLAKE2B 8cdcd6d7ad933ac3ee00ad19a9f900961de75404b4e9b36f8043cca9e76e6db846c1ec4a9490901edd15cba501fcf9671a808444f144962b63574c60281343cd SHA512 396a0108dfddab2e2c5ba57caec6d599d3723807cce301a2545415f0e0c625e6f0c0e846b2b243bba459695928c360c35ed04ea027ac236c450530458c6893d9 MISC metadata.xml 483 BLAKE2B 7b3a4b824e16ba32424777359d0daf09d17cc498a06f9ce5acfd7baec80ffea26220145676f37edfe46302257fd0a2bc5071d60f955dc19cda582419b2027f5c SHA512 33c8fae2235a7a6d2653a4db3341b2d69e390ed6dfa33868dd7e6b3a384f78013ae3c42a91d8eddd25929086f7705ce0869a34e28eedadb497e286ae59570be4 diff --git a/app-admin/linode-cli/linode-cli-5.54.0.ebuild b/app-admin/linode-cli/linode-cli-5.54.0.ebuild new file mode 100644 index 000000000000..21d1ca44d811 --- /dev/null +++ b/app-admin/linode-cli/linode-cli-5.54.0.ebuild @@ -0,0 +1,45 @@ +# Copyright 2023-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +PYTHON_COMPAT=( python3_{10..12} ) +DISTUTILS_USE_PEP517=setuptools +inherit distutils-r1 pypi shell-completion + +DESCRIPTION="Official command-line interface for interacting with the Linode API" +HOMEPAGE="https://github.com/linode/linode-cli https://www.linode.com/" + +LICENSE="BSD" +SLOT="0" +KEYWORDS="~amd64" + +# Tests require network, a linode account and an API key. +# WARNING: tests will incur costs and will wipe the account. +RESTRICT="test" + +RDEPEND=" + dev-python/boto3[${PYTHON_USEDEP}] + >=dev-python/linode-metadata-0.3[${PYTHON_USEDEP}] + dev-python/openapi3[${PYTHON_USEDEP}] + dev-python/packaging[${PYTHON_USEDEP}] + dev-python/pyyaml[${PYTHON_USEDEP}] + dev-python/requests[${PYTHON_USEDEP}] + dev-python/rich[${PYTHON_USEDEP}] + "${T}/${PN}".bash || die + PYTHONPATH=. ${EPYTHON} linodecli completion fish > "${T}/${PN}".fish || die + + newbashcomp "${T}/${PN}".bash ${PN} + newfishcomp "${T}/${PN}".fish ${PN} + + dosym ${PN} "$(get_bashcompdir)"/linode + dosym ${PN} "$(get_bashcompdir)"/lin + dosym ${PN} "$(get_fishcompdir)"/linode + dosym ${PN} "$(get_fishcompdir)"/lin +} diff --git a/app-admin/stow/Manifest b/app-admin/stow/Manifest index 1b184cea3c1d..e57f572a26ae 100644 --- a/app-admin/stow/Manifest +++ b/app-admin/stow/Manifest @@ -6,5 +6,5 @@ DIST stow-2.4.1.tar.bz2 650655 BLAKE2B 075b32fff4db357fe1311c68435bd8153f22f7d5f DIST stow-2.4.1.tar.bz2.sig 833 BLAKE2B 49a48913615bd29784019ec6406a22636214025211b287b949fb3fcd15244d3a8de7499ad0b87c9f6b46eee1bd1c460c518960cfd3b9b26c30a37ee12e578e32 SHA512 66cd8e98770c340e599ed3f5af3c55fbeb687ba6903d3cf00c4a68ee069f6628625f9b7d9cbceb6965c43f75523e98c8da6eae82f07bad7d3d5354b3a8402e89 EBUILD stow-2.3.1.ebuild 900 BLAKE2B 94bf4542b2fd8b1d9efad974f05429029fe105ca125c33db333dd7e968034d9d358a16b2bc5cc5540d41427b050c36388db94476af181ca95119666ae0c1cb7d SHA512 1d8b134e26469f13b70617c5c2b05787f4a106bb5d68f82a87d35afbf62ceaa3c59435b45a95d745e98ef1fe322ca1585910a702c3c4b3a3d864d0a545277e03 EBUILD stow-2.4.0.ebuild 900 BLAKE2B f5ee91a9ccb9d816710e4cc6db004fc55dd33ddf0b3261e780812d3332851c359cf60c5277522ae0290676e412d6939d877dcfa3363f0ee2fe8fa5321fa21dbb SHA512 200b6c5986a05f2696949606e12de4e2e1667cd2604a97193424c1a847095ec312e84b112596974fd3d06d83729db4f727b3501dedb19329012654b8551e6c6a -EBUILD stow-2.4.1.ebuild 901 BLAKE2B a89e1061b38b7ce1fb9bbb6b3b997dda175ca6444a28a0562c657342dd971e204c12cb0d2bb1e0970f234abe92337da3a3c451a50c78e25cbd591ad92138e280 SHA512 a0e61683e03e193abc234be9f420bded3207337ac6dd4146e99bb436756d8251c9a17724c452f5e2fcf3389335806b4e9f23d80f59cf07221ce3886e84361189 +EBUILD stow-2.4.1.ebuild 900 BLAKE2B f5ee91a9ccb9d816710e4cc6db004fc55dd33ddf0b3261e780812d3332851c359cf60c5277522ae0290676e412d6939d877dcfa3363f0ee2fe8fa5321fa21dbb SHA512 200b6c5986a05f2696949606e12de4e2e1667cd2604a97193424c1a847095ec312e84b112596974fd3d06d83729db4f727b3501dedb19329012654b8551e6c6a MISC metadata.xml 321 BLAKE2B 6c48c1b0f2712dfe4d98286b1056b52315800609ddb3a17d7b6c13f582a09af037d3a559b735b9d986beb30144423effa66e0aa9d43b0505d6e8777d90b6ae2d SHA512 9f9ffbbde5faad7037655d2269cc5b857a5aab45fe01444292cb56d8d38c278a487c93c192753de72afba2589f299337c8ef71c180df80cae56bad3c2c3dd786 diff --git a/app-admin/stow/stow-2.4.1.ebuild b/app-admin/stow/stow-2.4.1.ebuild index 36106823a4fa..99d81a9e7808 100644 --- a/app-admin/stow/stow-2.4.1.ebuild +++ b/app-admin/stow/stow-2.4.1.ebuild @@ -13,7 +13,7 @@ SRC_URI+=" verify-sig? ( mirror://gnu/stow/${P}.tar.bz2.sig )" LICENSE="GPL-3+" SLOT="0" -KEYWORDS="amd64 ~arm arm64 ~hppa ~mips ~ppc ~riscv ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos" +KEYWORDS="amd64 arm arm64 ~hppa ~mips ~ppc ~riscv ~sparc x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos" IUSE="test" RESTRICT="!test? ( test )" diff --git a/app-admin/sudo/Manifest b/app-admin/sudo/Manifest index 8000720d6434..d618b6a63e38 100644 --- a/app-admin/sudo/Manifest +++ b/app-admin/sudo/Manifest @@ -3,7 +3,7 @@ DIST sudo-1.9.15p5.tar.gz 5306611 BLAKE2B 73ee598c2a2848d5be24f97492b13eba2f326c DIST sudo-1.9.15p5.tar.gz.sig 566 BLAKE2B ddd8fed1b3721aafdb32b762834168063c3f0f003ef5d83f1883615320da6fe89b08d72c8e893c8b2bf9fd892a40e47cc77d72672e43b5a24db50e7194d9bc4c SHA512 97480a3d27b546a93e997c3a1e8169904a7625ab8fa6198d0b7e1d2d040f55b2d58462cd08e5cc97c2f1c817b12343e35cdd7db207aee42785f2b95b17c600b0 DIST sudo-1.9.16.tar.gz 5392026 BLAKE2B 19daa789af3ca2c4832950f0dd6f26a97285fdc155f0d7c18ec1f1accafce9b86f2f5730d3bb0b8e7717c0c55f4079928e03acb3974cb2652c58d4bcb2f74a12 SHA512 1b0254eb5b75422bffd31a2ae8c56cb4e8e2ecc08e2fa687eddb638d4f2de2585fa7621c868c03423e9d636bfb5679a3758d504155dbdfd3eebfbdcbd8b58f7c DIST sudo-1.9.16.tar.gz.sig 566 BLAKE2B 9eb9fd2db0de5b9ce965c2109a9722e0b5f0793b7c9003123b1540d7cb5b8178043221296fd51c7f0b24ce1b1cda9f196a6d50083da172ca2afcb8f130d8eae1 SHA512 edf066f9ffdf2653468f8b45866a65214f0dff0164318d5f6bd9252f6211e82522161b1b9621798fbc9112253e6940d7137d18e8b42e8c6e5ba52ccac64d99cf -EBUILD sudo-1.9.15_p5.ebuild 7386 BLAKE2B 9e017f33111d9bc24e5984b5dd85993da98286996b137bdca45f301a882527655663be33ec005a93e104fedeecd0294ce511b2885bbf9fe955a0b408dcf6b24b SHA512 4533fc3b1ee429d174e0304e07d6d12beb5576d4f28d21f73b3f2ce61fc191f9f2213a282f2bc88a76195c2ae524e6f9118955b2dfe208d78bd35ef497a06663 -EBUILD sudo-1.9.16.ebuild 7614 BLAKE2B 6635075dbaad409becabcee878295e08ad2e126c8ff896733ec95a10bb15d2d342b4939f3d7dd39c9115637621af5ff785163fbdab5cc279c8c65f96323eed3c SHA512 93f8e759192d6330e42111399ff9d88720ca915ccb3d0eea2d8a80b21d0157c0345f09250b2d326284b7263fc17d3a1719018f22c737f45fbb58ef689e30cfd2 -EBUILD sudo-9999.ebuild 7614 BLAKE2B 6635075dbaad409becabcee878295e08ad2e126c8ff896733ec95a10bb15d2d342b4939f3d7dd39c9115637621af5ff785163fbdab5cc279c8c65f96323eed3c SHA512 93f8e759192d6330e42111399ff9d88720ca915ccb3d0eea2d8a80b21d0157c0345f09250b2d326284b7263fc17d3a1719018f22c737f45fbb58ef689e30cfd2 +EBUILD sudo-1.9.15_p5.ebuild 7388 BLAKE2B cd48d8c514c86908fb01f10037c82a75385a718207bfcf0539e4f8d6f5d385f00dcfe7e82ba31402fcb2519f9c8f552a5ddb613ad37775ec7f806d6424db174f SHA512 07ea0b437edec0110292d13f6e954314eafabcd21979844c91bb8553742b2813037d5ef553d0946e31644137a4b74cc5a3829f4528d76c64747400cf21cb384a +EBUILD sudo-1.9.16-r1.ebuild 7625 BLAKE2B 9503977cb1a6daea79b5f111f9dabf2dd5450f34200cb6e5529fd23598067fa317457a3effe02ee2d45110546f464bae3ebee62c2fcdc825db7cf778ad8b6fb8 SHA512 9675bbfb42aed9d68478b8b87dc2e72687ab462c8e08bc40ee10fc529a68984d52acfdad2c98eab2b004793d292b59d6a05530502aa14c803e2abfe5ff149f6c +EBUILD sudo-9999.ebuild 7625 BLAKE2B 9503977cb1a6daea79b5f111f9dabf2dd5450f34200cb6e5529fd23598067fa317457a3effe02ee2d45110546f464bae3ebee62c2fcdc825db7cf778ad8b6fb8 SHA512 9675bbfb42aed9d68478b8b87dc2e72687ab462c8e08bc40ee10fc529a68984d52acfdad2c98eab2b004793d292b59d6a05530502aa14c803e2abfe5ff149f6c MISC metadata.xml 1107 BLAKE2B a18b1d280445ea98ba686021abf08ab47a5ac590795018c125008f2a8e44f7ea45e256e32a737781030960cb984bc16d8fd23175fd1e88b294e5036c86085367 SHA512 8cacbd9a1a23fc7734c5ad8b95c769b8506ec35490b5e3f69439bf71bd51d1eaf04fe699a82cbb3ac56182195fff570d75e3b20c33d86774480a2939122752a6 diff --git a/app-admin/sudo/sudo-1.9.15_p5.ebuild b/app-admin/sudo/sudo-1.9.15_p5.ebuild index 7255a97cc5a7..70d37ba4d885 100644 --- a/app-admin/sudo/sudo-1.9.15_p5.ebuild +++ b/app-admin/sudo/sudo-1.9.15_p5.ebuild @@ -178,7 +178,7 @@ src_configure() { $(use_with offensive all-insults) $(use_with pam) $(use_with pam pam-login) - $(use_with secure-path secure-path "${SECURE_PATH}") + "$(use_with secure-path secure-path "${SECURE_PATH}")" $(use_with selinux) $(use_with sendmail) $(use_with skey) diff --git a/app-admin/sudo/sudo-1.9.16-r1.ebuild b/app-admin/sudo/sudo-1.9.16-r1.ebuild new file mode 100644 index 000000000000..6e25ed577a92 --- /dev/null +++ b/app-admin/sudo/sudo-1.9.16-r1.ebuild @@ -0,0 +1,293 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +inherit autotools pam tmpfiles toolchain-funcs + +MY_P="${P/_/}" +MY_P="${MY_P/beta/b}" + +DESCRIPTION="Allows users or groups to run commands as other users" +HOMEPAGE="https://www.sudo.ws/" + +if [[ ${PV} == 9999 ]] ; then + inherit mercurial + EHG_REPO_URI="https://www.sudo.ws/repos/sudo" +else + VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/sudo.ws.asc + inherit verify-sig + + uri_prefix= + case ${P} in + *_beta*|*_rc*) uri_prefix=beta/ ;; + esac + + SRC_URI=" + https://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz + ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz + verify-sig? ( + https://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz.sig + ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz.sig + ) + " + + if [[ ${PV} != *_beta* && ${PV} != *_rc* ]] ; then + KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86" + fi + + BDEPEND="verify-sig? ( sec-keys/openpgp-keys-sudo )" +fi + +S="${WORKDIR}/${MY_P}" + +# Basic license is ISC-style as-is, some files are released under +# 3-clause BSD license +LICENSE="ISC BSD" +SLOT="0" +IUSE="gcrypt ldap nls offensive pam sasl +secure-path selinux +sendmail skey ssl sssd" + +DEPEND=" + sys-libs/zlib:= + virtual/libcrypt:= + gcrypt? ( dev-libs/libgcrypt:= ) + ldap? ( + >=net-nds/openldap-2.1.30-r1:= + sasl? ( + dev-libs/cyrus-sasl + net-nds/openldap:=[sasl] + ) + ) + pam? ( sys-libs/pam ) + sasl? ( dev-libs/cyrus-sasl ) + selinux? ( sys-libs/libselinux ) + skey? ( >=sys-auth/skey-1.1.5-r1 ) + ssl? ( dev-libs/openssl:= ) + sssd? ( sys-auth/sssd[sudo] ) +" +RDEPEND=" + ${DEPEND} + >=app-misc/editor-wrapper-3 + virtual/editor + ldap? ( dev-lang/perl ) + pam? ( sys-auth/pambase ) + selinux? ( sec-policy/selinux-sudo ) + sendmail? ( virtual/mta ) +" +BDEPEND+=" + app-alternatives/yacc + virtual/pkgconfig +" + +REQUIRED_USE=" + ?? ( pam skey ) + ?? ( gcrypt ssl ) +" + +MAKEOPTS+=" SAMPLES=" + +PATCHES=( + "${FILESDIR}"/${PN}-1.9.16-allow-disabling-secure-path.patch +) + +src_prepare() { + default + + # eautoreconf temporarily for allow-disabling-secure-path patch + # in 1.9.16; revert to elibtoolize once that is gone. + eautoreconf +} + +set_secure_path() { + # First extract the default ROOTPATH from build env + SECURE_PATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}") + + case "${SECURE_PATH}" in + */usr/sbin*) + ;; + *) + SECURE_PATH=$(unset PATH; . "${EPREFIX}"/etc/profile.env; echo "${PATH}") + ;; + esac + + if [[ -z ${SECURE_PATH} ]] ; then + ewarn " Failed to detect SECURE_PATH, please report this" + fi + + # Then remove duplicate path entries + cleanpath() { + local newpath thisp IFS=: + for thisp in $1 ; do + if [[ :${newpath}: != *:${thisp}:* ]] ; then + newpath+=:${thisp} + else + einfo " Duplicate entry ${thisp} removed..." + fi + done + SECURE_PATH=${newpath#:} + } + cleanpath /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin${SECURE_PATH:+:${SECURE_PATH}} + + # Finally, strip gcc paths, bug #136027 + rmpath() { + local e newpath thisp IFS=: + for thisp in ${SECURE_PATH} ; do + for e ; do + [[ ${thisp} == ${e} ]] && continue 2 ; + done + newpath+=:${thisp} + done + SECURE_PATH=${newpath#:} + } + rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' +} + +src_configure() { + local SECURE_PATH + + set_secure_path + + # bug #767712 + tc-export PKG_CONFIG + + # - audit: somebody got to explain me how I can test this before I + # enable it.. - Diego + # - plugindir: autoconf code is crappy and does not delay evaluation + # until `make` time, so we have to use a full path here rather than + # basing off other values. + local myeconfargs=( + # We set all of the relevant options by ourselves (patched + # into the toolchain) and setting these in the build system + # actually causes a downgrade when using e.g. -D_FORTIFY_SOURCE=3 + # (it'll downgrade to =2). So, this has no functional effect on + # the hardening for users. It's safe. + --disable-hardening + + # requires some python eclass + --disable-python + --enable-tmpfiles.d="${EPREFIX}"/usr/lib/tmpfiles.d + --enable-zlib=system + --with-editor="${EPREFIX}"/usr/libexec/editor + --with-env-editor + --with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo + --with-rundir="${EPREFIX}"/run/sudo + --with-vardir="${EPREFIX}"/var/db/sudo + --without-linux-audit + --without-opie + $(use_enable gcrypt) + $(use_enable nls) + $(use_enable sasl) + $(use_enable ssl openssl) + $(use_with ldap) + $(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) + $(use_with offensive insults) + $(use_with offensive all-insults) + $(use_with pam) + $(use_with pam pam-login) + $(use_with secure-path) + "$(use_with secure-path secure-path-value "${SECURE_PATH}")" + $(use_with selinux) + $(use_with sendmail) + $(use_with skey) + $(use_with sssd) + ) + + econf "${myeconfargs[@]}" +} + +src_install() { + default + + if use ldap ; then + dodoc README.LDAP.md + + cat <<-EOF > "${T}"/ldap.conf.sudo + # See ldap.conf(5) and README.LDAP.md for details + # This file should only be readable by root + + # supported directives: host, port, ssl, ldap_version + # uri, binddn, bindpw, sudoers_base, sudoers_debug + # tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key} + EOF + + if use sasl ; then + cat <<-EOF >> "${T}"/ldap.conf.sudo + + # SASL directives: use_sasl, sasl_mech, sasl_auth_id + # sasl_secprops, rootuse_sasl, rootsasl_auth_id, krb5_ccname + EOF + fi + + insinto /etc + doins "${T}"/ldap.conf.sudo + fperms 0440 /etc/ldap.conf.sudo + + insinto /etc/openldap/schema + newins docs/schema.OpenLDAP sudo.schema + fi + + if use pam ; then + pamd_mimic system-auth sudo auth account session + pamd_mimic system-auth sudo-i auth account session + fi + + keepdir /var/db/sudo/lectured + fperms 0700 /var/db/sudo/lectured + # bug #652958 + fperms 0711 /var/db/sudo + + # Don't install into /run as that is a tmpfs most of the time + # (bug #504854) + rm -rf "${ED}"/run || die + + # bug #697812 + find "${ED}" -type f -name "*.la" -delete || die +} + +pkg_postinst() { + tmpfiles_process sudo.conf + + # bug #652958 + local sudo_db="${EROOT}/var/db/sudo" + if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then + chmod 711 "${sudo_db}" || die + fi + + if use ldap ; then + ewarn + ewarn "sudo uses the ${ROOT}/etc/ldap.conf.sudo file for ldap configuration." + ewarn + if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then + ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" + ewarn "configured in ${ROOT}/etc/nsswitch.conf." + ewarn + ewarn "To make use of LDAP, add this line to your ${ROOT}/etc/nsswitch.conf:" + ewarn " sudoers: ldap files" + ewarn + fi + fi + if use prefix ; then + ewarn + ewarn "To use sudo on Prefix, you need to change file ownership and permissions" + ewarn "with root privileges, as follows:" + ewarn + ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" + ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" + ewarn " # chown root:root ${EPREFIX}/etc/sudoers" + ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" + ewarn " # chown root:root ${EPREFIX}/var/db/sudo" + ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" + ewarn + fi + + elog "To use the -A (askpass) option, you need to install a compatible" + elog "password program from the following list. Starred packages will" + elog "automatically register for the use with sudo (but will not force" + elog "the -A option):" + elog "" + elog " [*] net-misc/ssh-askpass-fullscreen" + elog " net-misc/x11-ssh-askpass" + elog "" + elog "You can override the choice by setting the SUDO_ASKPASS environmnent" + elog "variable to the program you want to use." +} diff --git a/app-admin/sudo/sudo-1.9.16.ebuild b/app-admin/sudo/sudo-1.9.16.ebuild deleted file mode 100644 index 868cb8e860d0..000000000000 --- a/app-admin/sudo/sudo-1.9.16.ebuild +++ /dev/null @@ -1,293 +0,0 @@ -# Copyright 1999-2024 Gentoo Authors -# Distributed under the terms of the GNU General Public License v2 - -EAPI=8 - -inherit autotools pam libtool tmpfiles toolchain-funcs - -MY_P="${P/_/}" -MY_P="${MY_P/beta/b}" - -DESCRIPTION="Allows users or groups to run commands as other users" -HOMEPAGE="https://www.sudo.ws/" - -if [[ ${PV} == 9999 ]] ; then - inherit mercurial - EHG_REPO_URI="https://www.sudo.ws/repos/sudo" -else - VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/sudo.ws.asc - inherit verify-sig - - uri_prefix= - case ${P} in - *_beta*|*_rc*) uri_prefix=beta/ ;; - esac - - SRC_URI=" - https://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz - ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz - verify-sig? ( - https://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz.sig - ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz.sig - ) - " - - if [[ ${PV} != *_beta* && ${PV} != *_rc* ]] ; then - KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86" - fi - - BDEPEND="verify-sig? ( sec-keys/openpgp-keys-sudo )" -fi - -S="${WORKDIR}/${MY_P}" - -# Basic license is ISC-style as-is, some files are released under -# 3-clause BSD license -LICENSE="ISC BSD" -SLOT="0" -IUSE="gcrypt ldap nls offensive pam sasl +secure-path selinux +sendmail skey ssl sssd" - -DEPEND=" - sys-libs/zlib:= - virtual/libcrypt:= - gcrypt? ( dev-libs/libgcrypt:= ) - ldap? ( - >=net-nds/openldap-2.1.30-r1:= - sasl? ( - dev-libs/cyrus-sasl - net-nds/openldap:=[sasl] - ) - ) - pam? ( sys-libs/pam ) - sasl? ( dev-libs/cyrus-sasl ) - selinux? ( sys-libs/libselinux ) - skey? ( >=sys-auth/skey-1.1.5-r1 ) - ssl? ( dev-libs/openssl:= ) - sssd? ( sys-auth/sssd[sudo] ) -" -RDEPEND=" - ${DEPEND} - >=app-misc/editor-wrapper-3 - virtual/editor - ldap? ( dev-lang/perl ) - pam? ( sys-auth/pambase ) - selinux? ( sec-policy/selinux-sudo ) - sendmail? ( virtual/mta ) -" -BDEPEND+=" - app-alternatives/yacc - virtual/pkgconfig -" - -REQUIRED_USE=" - ?? ( pam skey ) - ?? ( gcrypt ssl ) -" - -MAKEOPTS+=" SAMPLES=" - -PATCHES=( - "${FILESDIR}"/${PN}-1.9.16-allow-disabling-secure-path.patch -) - -src_prepare() { - default - - # eautoreconf temporarily for allow-disabling-secure-path patch - # in 1.9.16; revert to elibtoolize once that is gone. - eautoreconf -} - -set_secure_path() { - # First extract the default ROOTPATH from build env - SECURE_PATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}") - - case "${SECURE_PATH}" in - */usr/sbin*) - ;; - *) - SECURE_PATH=$(unset PATH; . "${EPREFIX}"/etc/profile.env; echo "${PATH}") - ;; - esac - - if [[ -z ${SECURE_PATH} ]] ; then - ewarn " Failed to detect SECURE_PATH, please report this" - fi - - # Then remove duplicate path entries - cleanpath() { - local newpath thisp IFS=: - for thisp in $1 ; do - if [[ :${newpath}: != *:${thisp}:* ]] ; then - newpath+=:${thisp} - else - einfo " Duplicate entry ${thisp} removed..." - fi - done - SECURE_PATH=${newpath#:} - } - cleanpath /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin${SECURE_PATH:+:${SECURE_PATH}} - - # Finally, strip gcc paths, bug #136027 - rmpath() { - local e newpath thisp IFS=: - for thisp in ${SECURE_PATH} ; do - for e ; do - [[ ${thisp} == ${e} ]] && continue 2 ; - done - newpath+=:${thisp} - done - SECURE_PATH=${newpath#:} - } - rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' -} - -src_configure() { - local SECURE_PATH - - set_secure_path - - # bug #767712 - tc-export PKG_CONFIG - - # - audit: somebody got to explain me how I can test this before I - # enable it.. - Diego - # - plugindir: autoconf code is crappy and does not delay evaluation - # until `make` time, so we have to use a full path here rather than - # basing off other values. - local myeconfargs=( - # We set all of the relevant options by ourselves (patched - # into the toolchain) and setting these in the build system - # actually causes a downgrade when using e.g. -D_FORTIFY_SOURCE=3 - # (it'll downgrade to =2). So, this has no functional effect on - # the hardening for users. It's safe. - --disable-hardening - - # requires some python eclass - --disable-python - --enable-tmpfiles.d="${EPREFIX}"/usr/lib/tmpfiles.d - --enable-zlib=system - --with-editor="${EPREFIX}"/usr/libexec/editor - --with-env-editor - --with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo - --with-rundir="${EPREFIX}"/run/sudo - --with-vardir="${EPREFIX}"/var/db/sudo - --without-linux-audit - --without-opie - $(use_enable gcrypt) - $(use_enable nls) - $(use_enable sasl) - $(use_enable ssl openssl) - $(use_with ldap) - $(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) - $(use_with offensive insults) - $(use_with offensive all-insults) - $(use_with pam) - $(use_with pam pam-login) - $(use_with secure-path) - --with-secure-path-value="${SECURE_PATH}" - $(use_with selinux) - $(use_with sendmail) - $(use_with skey) - $(use_with sssd) - ) - - econf "${myeconfargs[@]}" -} - -src_install() { - default - - if use ldap ; then - dodoc README.LDAP.md - - cat <<-EOF > "${T}"/ldap.conf.sudo - # See ldap.conf(5) and README.LDAP.md for details - # This file should only be readable by root - - # supported directives: host, port, ssl, ldap_version - # uri, binddn, bindpw, sudoers_base, sudoers_debug - # tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key} - EOF - - if use sasl ; then - cat <<-EOF >> "${T}"/ldap.conf.sudo - - # SASL directives: use_sasl, sasl_mech, sasl_auth_id - # sasl_secprops, rootuse_sasl, rootsasl_auth_id, krb5_ccname - EOF - fi - - insinto /etc - doins "${T}"/ldap.conf.sudo - fperms 0440 /etc/ldap.conf.sudo - - insinto /etc/openldap/schema - newins docs/schema.OpenLDAP sudo.schema - fi - - if use pam ; then - pamd_mimic system-auth sudo auth account session - pamd_mimic system-auth sudo-i auth account session - fi - - keepdir /var/db/sudo/lectured - fperms 0700 /var/db/sudo/lectured - # bug #652958 - fperms 0711 /var/db/sudo - - # Don't install into /run as that is a tmpfs most of the time - # (bug #504854) - rm -rf "${ED}"/run || die - - # bug #697812 - find "${ED}" -type f -name "*.la" -delete || die -} - -pkg_postinst() { - tmpfiles_process sudo.conf - - # bug #652958 - local sudo_db="${EROOT}/var/db/sudo" - if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then - chmod 711 "${sudo_db}" || die - fi - - if use ldap ; then - ewarn - ewarn "sudo uses the ${ROOT}/etc/ldap.conf.sudo file for ldap configuration." - ewarn - if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then - ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" - ewarn "configured in ${ROOT}/etc/nsswitch.conf." - ewarn - ewarn "To make use of LDAP, add this line to your ${ROOT}/etc/nsswitch.conf:" - ewarn " sudoers: ldap files" - ewarn - fi - fi - if use prefix ; then - ewarn - ewarn "To use sudo on Prefix, you need to change file ownership and permissions" - ewarn "with root privileges, as follows:" - ewarn - ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" - ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" - ewarn " # chown root:root ${EPREFIX}/etc/sudoers" - ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" - ewarn " # chown root:root ${EPREFIX}/var/db/sudo" - ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" - ewarn - fi - - elog "To use the -A (askpass) option, you need to install a compatible" - elog "password program from the following list. Starred packages will" - elog "automatically register for the use with sudo (but will not force" - elog "the -A option):" - elog "" - elog " [*] net-misc/ssh-askpass-fullscreen" - elog " net-misc/x11-ssh-askpass" - elog "" - elog "You can override the choice by setting the SUDO_ASKPASS environmnent" - elog "variable to the program you want to use." -} diff --git a/app-admin/sudo/sudo-9999.ebuild b/app-admin/sudo/sudo-9999.ebuild index 868cb8e860d0..6e25ed577a92 100644 --- a/app-admin/sudo/sudo-9999.ebuild +++ b/app-admin/sudo/sudo-9999.ebuild @@ -3,7 +3,7 @@ EAPI=8 -inherit autotools pam libtool tmpfiles toolchain-funcs +inherit autotools pam tmpfiles toolchain-funcs MY_P="${P/_/}" MY_P="${MY_P/beta/b}" @@ -185,7 +185,7 @@ src_configure() { $(use_with pam) $(use_with pam pam-login) $(use_with secure-path) - --with-secure-path-value="${SECURE_PATH}" + "$(use_with secure-path secure-path-value "${SECURE_PATH}")" $(use_with selinux) $(use_with sendmail) $(use_with skey) -- cgit v1.2.3