513 changed files with 6997 additions and 1073 deletions
-
BINManifest.files.gz
-
BINapp-admin/Manifest.gz
-
2app-admin/augeas/augeas-1.11.0-r1.ebuild
-
64app-admin/puppetdb/files/puppetdb.initd-r2
-
4app-admin/puppetdb/puppetdb-6.1.0-r1.ebuild
-
1app-admin/sudo/Manifest
-
1app-admin/sudo/metadata.xml
-
243app-admin/sudo/sudo-1.8.26-r1.ebuild
-
242app-admin/sudo/sudo-1.8.27.ebuild
-
2app-admin/tmpreaper/tmpreaper-1.6.14.ebuild
-
BINapp-crypt/Manifest.gz
-
2app-crypt/acme/acme-0.28.0.ebuild
-
2app-crypt/acme/acme-0.29.1.ebuild
-
2app-crypt/acme/acme-0.30.0.ebuild
-
2app-crypt/acme/acme-9999.ebuild
-
2app-crypt/certbot-apache/certbot-apache-0.28.0.ebuild
-
2app-crypt/certbot-apache/certbot-apache-0.29.1.ebuild
-
2app-crypt/certbot-apache/certbot-apache-0.30.0.ebuild
-
2app-crypt/certbot-apache/certbot-apache-9999.ebuild
-
2app-crypt/certbot-nginx/certbot-nginx-0.28.0.ebuild
-
2app-crypt/certbot-nginx/certbot-nginx-0.29.1.ebuild
-
2app-crypt/certbot-nginx/certbot-nginx-0.30.0.ebuild
-
2app-crypt/certbot-nginx/certbot-nginx-9999.ebuild
-
2app-crypt/certbot/certbot-0.28.0.ebuild
-
2app-crypt/certbot/certbot-0.29.1.ebuild
-
2app-crypt/certbot/certbot-0.30.0.ebuild
-
2app-crypt/certbot/certbot-9999.ebuild
-
BINapp-doc/Manifest.gz
-
4app-doc/NaturalDocs/NaturalDocs-1.52-r1.ebuild
-
BINapp-emulation/Manifest.gz
-
216app-emulation/libvirt/files/libvirt-5.0.0-do-not-use-sysconf.patch
-
110app-emulation/libvirt/files/libvirt-5.0.0-fix-paths-for-apparmor.patch
-
4app-emulation/libvirt/libvirt-9999.ebuild
-
4app-emulation/x48/x48-0.6.4-r1.ebuild
-
BINapp-portage/Manifest.gz
-
4app-portage/cpuid2cpuflags/cpuid2cpuflags-5.ebuild
-
4app-portage/cpuid2cpuflags/cpuid2cpuflags-9999.ebuild
-
BINdev-lang/Manifest.gz
-
5dev-lang/mujs/mujs-1.0.5.ebuild
-
2dev-lang/php/php-5.6.40.ebuild
-
2dev-lang/php/php-7.1.26.ebuild
-
2dev-lang/php/php-7.2.14.ebuild
-
BINdev-libs/Manifest.gz
-
1dev-libs/editline/Manifest
-
37dev-libs/editline/editline-1.16.0.ebuild
-
16dev-libs/editline/files/editline-1.16.0-rename-man.patch
-
7dev-libs/editline/metadata.xml
-
2dev-libs/jansson/jansson-2.11.ebuild
-
BINdev-python/Manifest.gz
-
2dev-python/betamax/betamax-0.8.0.ebuild
-
2dev-python/josepy/josepy-1.1.0.ebuild
-
4dev-python/python-augeas/python-augeas-0.5.0.ebuild
-
1dev-python/python-glanceclient/Manifest
-
78dev-python/python-glanceclient/python-glanceclient-2.13.0.ebuild
-
4dev-python/python-glanceclient/python-glanceclient-2.13.1.ebuild
-
2dev-python/requests-toolbelt/requests-toolbelt-0.8.0.ebuild
-
BINdev-ruby/Manifest.gz
-
2dev-ruby/curb/Manifest
-
45dev-ruby/curb/curb-0.9.4.ebuild
-
45dev-ruby/curb/curb-0.9.6.ebuild
-
4dev-ruby/deep_merge/deep_merge-1.2.1.ebuild
-
4dev-ruby/hiera/hiera-3.5.0.ebuild
-
2dev-ruby/rake-compiler/rake-compiler-1.0.7.ebuild
-
6dev-ruby/redcloth/redcloth-4.3.2-r1.ebuild
-
4dev-ruby/ruby-augeas/ruby-augeas-0.5.0-r3.ebuild
-
4dev-ruby/ruby-ldap/ruby-ldap-0.9.20.ebuild
-
4dev-ruby/ruby-shadow/ruby-shadow-2.5.0.ebuild
-
4dev-ruby/semantic_puppet/semantic_puppet-1.0.2.ebuild
-
BINdev-util/Manifest.gz
-
2dev-util/bitcoin-tx/bitcoin-tx-0.17.1.ebuild
-
20dev-util/bitcoin-tx/files/0.17.1-no-libevent.patch
-
1dev-util/radare2/Manifest
-
3dev-util/radare2/metadata.xml
-
56dev-util/radare2/radare2-3.2.0.ebuild
-
15dev-util/radare2/radare2-9999.ebuild
-
2dev-util/re2c/re2c-1.1.1.ebuild
-
BINkde-frameworks/Manifest.gz
-
1kde-frameworks/attica/Manifest
-
25kde-frameworks/attica/attica-5.54.0.ebuild
-
1kde-frameworks/baloo/Manifest
-
34kde-frameworks/baloo/baloo-5.54.0.ebuild
-
1kde-frameworks/bluez-qt/Manifest
-
37kde-frameworks/bluez-qt/bluez-qt-5.54.0.ebuild
-
1kde-frameworks/breeze-icons-rcc/Manifest
-
42kde-frameworks/breeze-icons-rcc/breeze-icons-rcc-5.54.0.ebuild
-
1kde-frameworks/breeze-icons/Manifest
-
41kde-frameworks/breeze-icons/breeze-icons-5.54.0.ebuild
-
1kde-frameworks/extra-cmake-modules/Manifest
-
66kde-frameworks/extra-cmake-modules/extra-cmake-modules-5.54.0.ebuild
-
1kde-frameworks/frameworkintegration/Manifest
-
53kde-frameworks/frameworkintegration/frameworkintegration-5.54.0.ebuild
-
1kde-frameworks/kactivities-stats/Manifest
-
21kde-frameworks/kactivities-stats/kactivities-stats-5.54.0.ebuild
-
1kde-frameworks/kactivities/Manifest
-
26kde-frameworks/kactivities/kactivities-5.54.0.ebuild
-
1kde-frameworks/kapidox/Manifest
-
28kde-frameworks/kapidox/kapidox-5.54.0.ebuild
-
1kde-frameworks/karchive/Manifest
-
27kde-frameworks/karchive/karchive-5.54.0.ebuild
-
1kde-frameworks/kauth/Manifest
@ -0,0 +1,64 @@ |
|||
#!/sbin/openrc-run |
|||
# Copyright 1999-2019 Gentoo Authors |
|||
# Distributed under the terms of the GNU General Public License v2 |
|||
|
|||
extra_commands="checkconfig" |
|||
|
|||
LOGDIR="/var/log/puppetlabs/puppetdb" |
|||
RUNDIR="/run/puppetlabs/puppetdb" |
|||
|
|||
checkconfig() { |
|||
if [ ! -x $JAVA_BIN ]; then |
|||
eerror "Missing JAVA_BIN." |
|||
eend 1 |
|||
fi |
|||
if [ ! -d $INSTALL_DIR ]; then |
|||
eerror "Missing INSTALL_DIR." |
|||
eend 1 |
|||
fi |
|||
if [ ! -e $BOOTSTRAP_CONFIG ]; then |
|||
eerror "Missing BOOTSTRAP_CONFIG." |
|||
eend 1 |
|||
fi |
|||
if [ ! -e $CONFIG ]; then |
|||
eerror "Missing CONFIG." |
|||
eend 1 |
|||
fi |
|||
if [ ! -n $USER ]; then |
|||
eerror "Missing USER." |
|||
eend 1 |
|||
fi |
|||
if [ ! -n $GROUP ]; then |
|||
eerror "Missing GROUP." |
|||
eend 1 |
|||
fi |
|||
|
|||
checkpath -d -m 0755 "${LOGDIR%/*}" |
|||
checkpath -d -m 0755 "${RUNDIR%/*}" |
|||
checkpath -d -m 0700 -o "${USER}:${GROUP}" "${LOGDIR}" |
|||
checkpath -d -m 0755 -o "${USER}:${GROUP}" "${RUNDIR}" |
|||
|
|||
JAVA_ARGS="${JAVA_ARGS} -cp '${INSTALL_DIR}/puppetdb.jar' clojure.main -m puppetlabs.puppetdb.cli.services --config ${CONFIG} -b '${BOOTSTRAP_CONFIG}' --restart-file /opt/puppetlabs/server/data/puppetdb/restartcounter" |
|||
EXEC="${JAVA_BIN} -XX:OnOutOfMemoryError=\"kill -9 %p\" -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/log/puppetlabs/puppetdb -Djava.security.egd=/dev/urandom ${JAVA_ARGS}" |
|||
} |
|||
|
|||
start() { |
|||
checkconfig || return 1 |
|||
|
|||
ebegin "Starting PuppetDB" |
|||
start-stop-daemon --start -u "${USER}" -g "${GROUP}" \ |
|||
-m --pidfile "${RUNDIR}/puppetdb.pid" \ |
|||
-b --exec "/bin/bash" \ |
|||
-- -c "exec ${EXEC} >> ${LOGDIR}/daemon.log 2>&1" |
|||
local retval=$? |
|||
if [ $retval -ne 0 ]; then |
|||
ewarn "Error starting puppetdb." |
|||
fi |
|||
eend $retval |
|||
} |
|||
|
|||
stop() { |
|||
ebegin "Stopping PuppetDB" |
|||
start-stop-daemon --stop --pidfile "${RUNDIR}/puppetdb.pid" |
|||
eend $? |
|||
} |
@ -1,2 +1,3 @@ |
|||
DIST sudo-1.8.25p1.tar.gz 3189951 BLAKE2B ebfedaad62e60f625db8c46a5c8f19977a5ec0a86bab3b34d91096c08e8b8ece056ba312f9fecd4cdd704fc17d49a36681b41cd40269df7c67cd66d80c0d8efb SHA512 b1445be688d3c1dd7efbdfab68977a7a9b6fd6887191dc99ca717117eec0a550492642556cd55ca5873d054ddc5ccc2b87b2c34602e1ffc729ab6fbc4e523a72 |
|||
DIST sudo-1.8.26.tar.gz 3286368 BLAKE2B 8df947f3dfa32081020b8a19921ea5daf6f9250c1ae34aa29900e85e80669223f28573217cd7e0a28393c6f30aa2117347014aa0cb554f2b85632e335ae790be SHA512 f5596cdf753ffa54f651bb30126e690640125b2ee54e8022f3740bfbe2e5a23e1bee86ce52879e863b9386babbbcf33d3e2882c573995a7d4612e9eea14d8791 |
|||
DIST sudo-1.8.27.tar.gz 3293178 BLAKE2B 174d63ece5c24309dc0d237fadfc4131243aca333491ffa6dcdb3c44b53cb8149d3bf2f3aea2aa49529ea811d4727a11ac1909305e342b858a4c14f923f12956 SHA512 0480def650ab880ab9e6c51c606a06897fd638f0381e99c038f5aa47d064aaa2fb35b73eee7f86e73185e18d5dbb8b6ba49c616b1785a1edb2dd6d7b2fa4fcac |
@ -0,0 +1,243 @@ |
|||
# Copyright 1999-2018 Gentoo Authors |
|||
# Distributed under the terms of the GNU General Public License v2 |
|||
|
|||
EAPI=6 |
|||
|
|||
inherit eutils pam multilib libtool tmpfiles |
|||
if [[ ${PV} == "9999" ]] ; then |
|||
EHG_REPO_URI="https://www.sudo.ws/repos/sudo" |
|||
inherit mercurial |
|||
fi |
|||
|
|||
MY_P=${P/_/} |
|||
MY_P=${MY_P/beta/b} |
|||
|
|||
uri_prefix= |
|||
case ${P} in |
|||
*_beta*|*_rc*) uri_prefix=beta/ ;; |
|||
esac |
|||
|
|||
DESCRIPTION="Allows users or groups to run commands as other users" |
|||
HOMEPAGE="https://www.sudo.ws/" |
|||
if [[ ${PV} != "9999" ]] ; then |
|||
SRC_URI="https://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz |
|||
ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz" |
|||
if [[ ${PV} != *_beta* ]] && [[ ${PV} != *_rc* ]] ; then |
|||
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~x86-fbsd ~sparc-solaris" |
|||
fi |
|||
fi |
|||
|
|||
# Basic license is ISC-style as-is, some files are released under |
|||
# 3-clause BSD license |
|||
LICENSE="ISC BSD" |
|||
SLOT="0" |
|||
IUSE="gcrypt ldap nls offensive openssl pam sasl +secure-path selinux +sendmail skey sssd" |
|||
|
|||
CDEPEND=" |
|||
sys-libs/zlib:= |
|||
gcrypt? ( dev-libs/libgcrypt:= ) |
|||
ldap? ( |
|||
>=net-nds/openldap-2.1.30-r1 |
|||
dev-libs/cyrus-sasl |
|||
) |
|||
openssl? ( dev-libs/openssl:0= ) |
|||
pam? ( virtual/pam ) |
|||
sasl? ( dev-libs/cyrus-sasl ) |
|||
skey? ( >=sys-auth/skey-1.1.5-r1 ) |
|||
sssd? ( sys-auth/sssd[sudo] ) |
|||
" |
|||
RDEPEND=" |
|||
${CDEPEND} |
|||
>=app-misc/editor-wrapper-3 |
|||
virtual/editor |
|||
ldap? ( dev-lang/perl ) |
|||
pam? ( sys-auth/pambase ) |
|||
selinux? ( sec-policy/selinux-sudo ) |
|||
sendmail? ( virtual/mta ) |
|||
" |
|||
DEPEND=" |
|||
${CDEPEND} |
|||
sys-devel/bison |
|||
" |
|||
|
|||
S="${WORKDIR}/${MY_P}" |
|||
|
|||
REQUIRED_USE=" |
|||
pam? ( !skey ) |
|||
skey? ( !pam ) |
|||
?? ( gcrypt openssl ) |
|||
" |
|||
|
|||
MAKEOPTS+=" SAMPLES=" |
|||
|
|||
src_prepare() { |
|||
default |
|||
elibtoolize |
|||
} |
|||
|
|||
set_secure_path() { |
|||
# FIXME: secure_path is a compile time setting. using PATH or |
|||
# ROOTPATH is not perfect, env-update may invalidate this, but until it |
|||
# is available as a sudoers setting this will have to do. |
|||
einfo "Setting secure_path ..." |
|||
|
|||
# first extract the default ROOTPATH from build env |
|||
SECURE_PATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; |
|||
echo "${ROOTPATH}") |
|||
case "${SECURE_PATH}" in |
|||
*/usr/sbin*) ;; |
|||
*) SECURE_PATH=$(unset PATH; |
|||
. "${EPREFIX}"/etc/profile.env; echo "${PATH}") |
|||
;; |
|||
esac |
|||
if [[ -z ${SECURE_PATH} ]] ; then |
|||
ewarn " Failed to detect SECURE_PATH, please report this" |
|||
fi |
|||
|
|||
# then remove duplicate path entries |
|||
cleanpath() { |
|||
local newpath thisp IFS=: |
|||
for thisp in $1 ; do |
|||
if [[ :${newpath}: != *:${thisp}:* ]] ; then |
|||
newpath+=:$thisp |
|||
else |
|||
einfo " Duplicate entry ${thisp} removed..." |
|||
fi |
|||
done |
|||
SECURE_PATH=${newpath#:} |
|||
} |
|||
cleanpath /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin${SECURE_PATH:+:${SECURE_PATH}} |
|||
|
|||
# finally, strip gcc paths #136027 |
|||
rmpath() { |
|||
local e newpath thisp IFS=: |
|||
for thisp in ${SECURE_PATH} ; do |
|||
for e ; do [[ $thisp == $e ]] && continue 2 ; done |
|||
newpath+=:$thisp |
|||
done |
|||
SECURE_PATH=${newpath#:} |
|||
} |
|||
rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' |
|||
|
|||
einfo "... done" |
|||
} |
|||
|
|||
src_configure() { |
|||
local SECURE_PATH |
|||
set_secure_path |
|||
|
|||
# audit: somebody got to explain me how I can test this before I |
|||
# enable it.. - Diego |
|||
# plugindir: autoconf code is crappy and does not delay evaluation |
|||
# until `make` time, so we have to use a full path here rather than |
|||
# basing off other values. |
|||
myeconfargs=( |
|||
--enable-zlib=system |
|||
--enable-tmpfiles.d="${EPREFIX}"/usr/lib/tmpfiles.d |
|||
--with-editor="${EPREFIX}"/usr/libexec/editor |
|||
--with-env-editor |
|||
--with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo |
|||
--with-rundir="${EPREFIX}"/run/sudo |
|||
$(use_with secure-path secure-path ${SECURE_PATH}) |
|||
--with-secure-path="${SECURE_PATH}" |
|||
--with-vardir="${EPREFIX}"/var/db/sudo |
|||
--without-linux-audit |
|||
--without-opie |
|||
$(use_enable gcrypt) |
|||
$(use_enable nls) |
|||
$(use_enable openssl) |
|||
$(use_enable sasl) |
|||
$(use_with offensive insults) |
|||
$(use_with offensive all-insults) |
|||
$(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) |
|||
$(use_with ldap) |
|||
$(use_with pam) |
|||
$(use_with skey) |
|||
$(use_with sssd) |
|||
$(use_with selinux) |
|||
$(use_with sendmail) |
|||
) |
|||
econf "${myeconfargs[@]}" |
|||
} |
|||
|
|||
src_install() { |
|||
default |
|||
|
|||
if use ldap ; then |
|||
dodoc README.LDAP |
|||
|
|||
cat <<-EOF > "${T}"/ldap.conf.sudo |
|||
# See ldap.conf(5) and README.LDAP for details |
|||
# This file should only be readable by root |
|||
|
|||
# supported directives: host, port, ssl, ldap_version |
|||
# uri, binddn, bindpw, sudoers_base, sudoers_debug |
|||
# tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key} |
|||
EOF |
|||
|
|||
insinto /etc |
|||
doins "${T}"/ldap.conf.sudo |
|||
fperms 0440 /etc/ldap.conf.sudo |
|||
|
|||
insinto /etc/openldap/schema |
|||
newins doc/schema.OpenLDAP sudo.schema |
|||
fi |
|||
|
|||
pamd_mimic system-auth sudo auth account session |
|||
|
|||
keepdir /var/db/sudo/lectured |
|||
fperms 0700 /var/db/sudo/lectured |
|||
fperms 0711 /var/db/sudo #652958 |
|||
|
|||
# Don't install into /run as that is a tmpfs most of the time |
|||
# (bug #504854) |
|||
rm -rf "${ED%/}"/run |
|||
} |
|||
|
|||
pkg_postinst() { |
|||
tmpfiles_process sudo.conf |
|||
|
|||
#652958 |
|||
local sudo_db="${EROOT}/var/db/sudo" |
|||
if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then |
|||
chmod 711 "${sudo_db}" || die |
|||
fi |
|||
|
|||
if use ldap ; then |
|||
ewarn |
|||
ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration." |
|||
ewarn |
|||
if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then |
|||
ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" |
|||
ewarn "configured in /etc/nsswitch.conf." |
|||
ewarn |
|||
ewarn "To make use of LDAP, add this line to your /etc/nsswitch.conf:" |
|||
ewarn " sudoers: ldap files" |
|||
ewarn |
|||
fi |
|||
fi |
|||
if use prefix ; then |
|||
ewarn |
|||
ewarn "To use sudo, you need to change file ownership and permissions" |
|||
ewarn "with root privileges, as follows:" |
|||
ewarn |
|||
ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" |
|||
ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" |
|||
ewarn " # chown root:root ${EPREFIX}/etc/sudoers" |
|||
ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" |
|||
ewarn " # chown root:root ${EPREFIX}/var/db/sudo" |
|||
ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" |
|||
ewarn |
|||
fi |
|||
|
|||
elog "To use the -A (askpass) option, you need to install a compatible" |
|||
elog "password program from the following list. Starred packages will" |
|||
elog "automatically register for the use with sudo (but will not force" |
|||
elog "the -A option):" |
|||
elog "" |
|||
elog " [*] net-misc/ssh-askpass-fullscreen" |
|||
elog " net-misc/x11-ssh-askpass" |
|||
elog "" |
|||
elog "You can override the choice by setting the SUDO_ASKPASS environmnent" |
|||
elog "variable to the program you want to use." |
|||
} |
@ -0,0 +1,242 @@ |
|||
# Copyright 1999-2019 Gentoo Authors |
|||
# Distributed under the terms of the GNU General Public License v2 |
|||
|
|||
EAPI=6 |
|||
|
|||
inherit eutils pam multilib libtool tmpfiles |
|||
if [[ ${PV} == "9999" ]] ; then |
|||
EHG_REPO_URI="https://www.sudo.ws/repos/sudo" |
|||
inherit mercurial |
|||
fi |
|||
|
|||
MY_P=${P/_/} |
|||
MY_P=${MY_P/beta/b} |
|||
|
|||
uri_prefix= |
|||
case ${P} in |
|||
*_beta*|*_rc*) uri_prefix=beta/ ;; |
|||
esac |
|||
|
|||
DESCRIPTION="Allows users or groups to run commands as other users" |
|||
HOMEPAGE="https://www.sudo.ws/" |
|||
if [[ ${PV} != "9999" ]] ; then |
|||
SRC_URI="https://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz |
|||
ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz" |
|||
if [[ ${PV} != *_beta* ]] && [[ ${PV} != *_rc* ]] ; then |
|||
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~x86-fbsd ~sparc-solaris" |
|||
fi |
|||
fi |
|||
|
|||
# Basic license is ISC-style as-is, some files are released under |
|||
# 3-clause BSD license |
|||
LICENSE="ISC BSD" |
|||
SLOT="0" |
|||
IUSE="gcrypt ldap nls offensive openssl pam sasl selinux +sendmail skey sssd" |
|||
|
|||
CDEPEND=" |
|||
sys-libs/zlib:= |
|||
gcrypt? ( dev-libs/libgcrypt:= ) |
|||
ldap? ( |
|||
>=net-nds/openldap-2.1.30-r1 |
|||
dev-libs/cyrus-sasl |
|||
) |
|||
openssl? ( dev-libs/openssl:0= ) |
|||
pam? ( virtual/pam ) |
|||
sasl? ( dev-libs/cyrus-sasl ) |
|||
skey? ( >=sys-auth/skey-1.1.5-r1 ) |
|||
sssd? ( sys-auth/sssd[sudo] ) |
|||
" |
|||
RDEPEND=" |
|||
${CDEPEND} |
|||
>=app-misc/editor-wrapper-3 |
|||
virtual/editor |
|||
ldap? ( dev-lang/perl ) |
|||
pam? ( sys-auth/pambase ) |
|||
selinux? ( sec-policy/selinux-sudo ) |
|||
sendmail? ( virtual/mta ) |
|||
" |
|||
DEPEND=" |
|||
${CDEPEND} |
|||
sys-devel/bison |
|||
" |
|||
|
|||
S="${WORKDIR}/${MY_P}" |
|||
|
|||
REQUIRED_USE=" |
|||
pam? ( !skey ) |
|||
skey? ( !pam ) |
|||
?? ( gcrypt openssl ) |
|||
" |
|||
|
|||
MAKEOPTS+=" SAMPLES=" |
|||
|
|||
src_prepare() { |
|||
default |
|||
elibtoolize |
|||
} |
|||
|
|||
set_secure_path() { |
|||
# FIXME: secure_path is a compile time setting. using PATH or |
|||
# ROOTPATH is not perfect, env-update may invalidate this, but until it |
|||
# is available as a sudoers setting this will have to do. |
|||
einfo "Setting secure_path ..." |
|||
|
|||
# first extract the default ROOTPATH from build env |
|||
SECURE_PATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; |
|||
echo "${ROOTPATH}") |
|||
case "${SECURE_PATH}" in |
|||
*/usr/sbin*) ;; |
|||
*) SECURE_PATH=$(unset PATH; |
|||
. "${EPREFIX}"/etc/profile.env; echo "${PATH}") |
|||
;; |
|||
esac |
|||
if [[ -z ${SECURE_PATH} ]] ; then |
|||
ewarn " Failed to detect SECURE_PATH, please report this" |
|||
fi |
|||
|
|||
# then remove duplicate path entries |
|||
cleanpath() { |
|||
local newpath thisp IFS=: |
|||
for thisp in $1 ; do |
|||
if [[ :${newpath}: != *:${thisp}:* ]] ; then |
|||
newpath+=:$thisp |
|||
else |
|||
einfo " Duplicate entry ${thisp} removed..." |
|||
fi |
|||
done |
|||
SECURE_PATH=${newpath#:} |
|||
} |
|||
cleanpath /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin${SECURE_PATH:+:${SECURE_PATH}} |
|||
|
|||
# finally, strip gcc paths #136027 |
|||
rmpath() { |
|||
local e newpath thisp IFS=: |
|||
for thisp in ${SECURE_PATH} ; do |
|||
for e ; do [[ $thisp == $e ]] && continue 2 ; done |
|||
newpath+=:$thisp |
|||
done |
|||
SECURE_PATH=${newpath#:} |
|||
} |
|||
rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*' |
|||
|
|||
einfo "... done" |
|||
} |
|||
|
|||
src_configure() { |
|||
local SECURE_PATH |
|||
set_secure_path |
|||
|
|||
# audit: somebody got to explain me how I can test this before I |
|||
# enable it.. - Diego |
|||
# plugindir: autoconf code is crappy and does not delay evaluation |
|||
# until `make` time, so we have to use a full path here rather than |
|||
# basing off other values. |
|||
myeconfargs=( |
|||
--enable-zlib=system |
|||
--enable-tmpfiles.d="${EPREFIX}"/usr/lib/tmpfiles.d |
|||
--with-editor="${EPREFIX}"/usr/libexec/editor |
|||
--with-env-editor |
|||
--with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo |
|||
--with-rundir="${EPREFIX}"/run/sudo |
|||
--with-secure-path="${SECURE_PATH}" |
|||
--with-vardir="${EPREFIX}"/var/db/sudo |
|||
--without-linux-audit |
|||
--without-opie |
|||
$(use_enable gcrypt) |
|||
$(use_enable nls) |
|||
$(use_enable openssl) |
|||
$(use_enable sasl) |
|||
$(use_with offensive insults) |
|||
$(use_with offensive all-insults) |
|||
$(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) |
|||
$(use_with ldap) |
|||
$(use_with pam) |
|||
$(use_with skey) |
|||
$(use_with sssd) |
|||
$(use_with selinux) |
|||
$(use_with sendmail) |
|||
) |
|||
econf "${myeconfargs[@]}" |
|||
} |
|||
|
|||
src_install() { |
|||
default |
|||
|
|||
if use ldap ; then |
|||
dodoc README.LDAP |
|||
|
|||
cat <<-EOF > "${T}"/ldap.conf.sudo |
|||
# See ldap.conf(5) and README.LDAP for details |
|||
# This file should only be readable by root |
|||
|
|||
# supported directives: host, port, ssl, ldap_version |
|||
# uri, binddn, bindpw, sudoers_base, sudoers_debug |
|||
# tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key} |
|||
EOF |
|||
|
|||
insinto /etc |
|||
doins "${T}"/ldap.conf.sudo |
|||
fperms 0440 /etc/ldap.conf.sudo |
|||
|
|||
insinto /etc/openldap/schema |
|||
newins doc/schema.OpenLDAP sudo.schema |
|||
fi |
|||
|
|||
pamd_mimic system-auth sudo auth account session |
|||
|
|||
keepdir /var/db/sudo/lectured |
|||
fperms 0700 /var/db/sudo/lectured |
|||
fperms 0711 /var/db/sudo #652958 |
|||
|
|||
# Don't install into /run as that is a tmpfs most of the time |
|||
# (bug #504854) |
|||
rm -rf "${ED%/}"/run |
|||
} |
|||
|
|||
pkg_postinst() { |
|||
tmpfiles_process sudo.conf |
|||
|
|||
#652958 |
|||
local sudo_db="${EROOT}/var/db/sudo" |
|||
if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then |
|||
chmod 711 "${sudo_db}" || die |
|||
fi |
|||
|
|||
if use ldap ; then |
|||
ewarn |
|||
ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration." |
|||
ewarn |
|||
if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then |
|||
ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly" |
|||
ewarn "configured in /etc/nsswitch.conf." |
|||
ewarn |
|||
ewarn "To make use of LDAP, add this line to your /etc/nsswitch.conf:" |
|||
ewarn " sudoers: ldap files" |
|||
ewarn |
|||
fi |
|||
fi |
|||
if use prefix ; then |
|||
ewarn |
|||
ewarn "To use sudo, you need to change file ownership and permissions" |
|||
ewarn "with root privileges, as follows:" |
|||
ewarn |
|||
ewarn " # chown root:root ${EPREFIX}/usr/bin/sudo" |
|||
ewarn " # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so" |
|||
ewarn " # chown root:root ${EPREFIX}/etc/sudoers" |
|||
ewarn " # chown root:root ${EPREFIX}/etc/sudoers.d" |
|||
ewarn " # chown root:root ${EPREFIX}/var/db/sudo" |
|||
ewarn " # chmod 4111 ${EPREFIX}/usr/bin/sudo" |
|||
ewarn |
|||
fi |
|||
|
|||
elog "To use the -A (askpass) option, you need to install a compatible" |
|||
elog "password program from the following list. Starred packages will" |
|||
elog "automatically register for the use with sudo (but will not force" |
|||
elog "the -A option):" |
|||
elog "" |
|||
elog " [*] net-misc/ssh-askpass-fullscreen" |
|||
elog " net-misc/x11-ssh-askpass" |
|||
elog "" |
|||
elog "You can override the choice by setting the SUDO_ASKPASS environmnent" |
|||
elog "variable to the program you want to use." |
|||
} |
@ -0,0 +1,216 @@ |
|||
From 947ef7a44e94989f324e0d533499454d540fdef9 Mon Sep 17 00:00:00 2001 |
|||
Message-Id: <947ef7a44e94989f324e0d533499454d540fdef9.1547196492.git.mprivozn@redhat.com> |
|||
From: Michal Privoznik <mprivozn@redhat.com> |
|||
Date: Tue, 26 Jun 2018 06:51:06 +0200 |
|||
Subject: [PATCH] gentoo: do not use sysconf |
|||
|
|||
Signed-off-by: Michal Privoznik <mprivozn@redhat.com> |
|||
---
|
|||
src/Makefile.am | 29 ++++++----------------------- |
|||
src/locking/virtlockd.service.in | 3 +-- |
|||
src/logging/virtlogd.service.in | 3 +-- |
|||
src/remote/libvirtd.service.in | 3 +-- |
|||
tools/Makefile.am | 17 ++++------------- |
|||
tools/libvirt-guests.service.in | 2 +- |
|||
tools/libvirt-guests.sysconf | 7 +++++++ |
|||
7 files changed, 21 insertions(+), 43 deletions(-) |
|||
|
|||
diff --git a/src/Makefile.am b/src/Makefile.am
|
|||
index cd386297ed..52a63885d6 100644
|
|||
--- a/src/Makefile.am
|
|||
+++ b/src/Makefile.am
|
|||
@@ -756,23 +756,6 @@ endif WITH_SETUID_RPC_CLIENT
|
|||
|
|||
EXTRA_DIST += $(SYSCONF_FILES) |
|||
|
|||
-install-sysconfig:
|
|||
- $(MKDIR_P) $(DESTDIR)$(sysconfdir)/sysconfig
|
|||
- for f in $(SYSCONF_FILES:%.sysconf=%) ; \
|
|||
- do \
|
|||
- tgt=`basename $$f`; \
|
|||
- $(INSTALL_DATA) $(srcdir)/$$f.sysconf \
|
|||
- $(DESTDIR)$(sysconfdir)/sysconfig/$$tgt; \
|
|||
- done
|
|||
-
|
|||
-uninstall-sysconfig:
|
|||
- for f in $(SYSCONF_FILES:%.sysconf=%) ; \
|
|||
- do \
|
|||
- tgt=`basename $$f`; \
|
|||
- rm -f $(DESTDIR)$(sysconfdir)/sysconfig/$$tgt; \
|
|||
- done
|
|||
- rmdir $(DESTDIR)$(sysconfdir)/sysconfig || :
|
|||
-
|
|||
SYSVINIT_FILES_IN += \ |
|||
locking/virtlockd.init.in \ |
|||
$(NULL) |
|||
@@ -816,14 +799,14 @@ if WITH_LIBVIRTD
|
|||
if LIBVIRT_INIT_SCRIPT_RED_HAT |
|||
initdir = $(sysconfdir)/rc.d/init.d |
|||
|
|||
-install-init:: $(SYSVINIT_FILES) install-sysconfig
|
|||
+install-init:: $(SYSVINIT_FILES)
|
|||
$(MKDIR_P) $(DESTDIR)$(initdir) |
|||
for f in $(SYSVINIT_FILES:%.init=%) ; \ |
|||
do \ |
|||
$(INSTALL_SCRIPT) $$f.init $(DESTDIR)$(initdir)/$$f; \ |
|||
done |
|||
|
|||
-uninstall-init:: uninstall-sysconfig
|
|||
+uninstall-init::
|
|||
rm -f $(SYSVINIT_FILES:%.init=$(DESTDIR)$(initdir)/%) |
|||
rmdir $(DESTDIR)$(initdir) || : |
|||
|
|||
@@ -862,14 +845,14 @@ SYSTEMD_UNIT_FILES = $(notdir $(SYSTEMD_UNIT_FILES_IN:%.in=%))
|
|||
BUILT_SOURCES += $(SYSTEMD_UNIT_FILES) |
|||
DISTCLEANFILES += $(SYSTEMD_UNIT_FILES) |
|||
|
|||
-install-systemd: $(SYSTEMD_UNIT_FILES) install-sysconfig
|
|||
+install-systemd: $(SYSTEMD_UNIT_FILES)
|
|||
$(MKDIR_P) $(DESTDIR)$(SYSTEMD_UNIT_DIR) |
|||
for f in $(SYSTEMD_UNIT_FILES); \ |
|||
do \ |
|||
$(INSTALL_DATA) $$f $(DESTDIR)$(SYSTEMD_UNIT_DIR)/ ; \ |
|||
done |
|||
|
|||
-uninstall-systemd: uninstall-sysconfig
|
|||
+uninstall-systemd:
|
|||
rm -f $(SYSTEMD_UNIT_FILES:%=$(DESTDIR)$(SYSTEMD_UNIT_DIR)/%) |
|||
rmdir $(DESTDIR)$(SYSTEMD_UNIT_DIR) || : |
|||
|
|||
@@ -884,7 +867,7 @@ EXTRA_DIST += $(UPSTART_FILES)
|
|||
if WITH_LIBVIRTD |
|||
if LIBVIRT_INIT_SCRIPT_UPSTART |
|||
|
|||
-install-upstart: install-sysconfig
|
|||
+install-upstart:
|
|||
$(MKDIR_P) $(DESTDIR)$(sysconfdir)/event.d |
|||
for f in $(UPSTART_FILES:%.upstart=%); \ |
|||
do \ |
|||
@@ -893,7 +876,7 @@ install-upstart: install-sysconfig
|
|||
$(DESTDIR)$(sysconfdir)/event.d/$$tgt ; \ |
|||
done |
|||
|
|||
-uninstall-upstart: uninstall-sysconfig
|
|||
+uninstall-upstart:
|
|||
for f in $(UPSTART_FILES:%.upstart=%); \ |
|||
do \ |
|||
tgt=`basename $$f` ; \ |
|||
diff --git a/src/locking/virtlockd.service.in b/src/locking/virtlockd.service.in
|
|||
index 3c9d587032..2449b201d9 100644
|
|||
--- a/src/locking/virtlockd.service.in
|
|||
+++ b/src/locking/virtlockd.service.in
|
|||
@@ -7,8 +7,7 @@ Documentation=man:virtlockd(8)
|
|||
Documentation=https://libvirt.org |
|||
|
|||
[Service] |
|||
-EnvironmentFile=-/etc/sysconfig/virtlockd
|
|||
-ExecStart=@sbindir@/virtlockd $VIRTLOCKD_ARGS
|
|||
+ExecStart=@sbindir@/virtlockd
|
|||
ExecReload=/bin/kill -USR1 $MAINPID |
|||
# Loosing the locks is a really bad thing that will |
|||
# cause the machine to be fenced (rebooted), so make |
|||
diff --git a/src/logging/virtlogd.service.in b/src/logging/virtlogd.service.in
|
|||
index 3d9ae36150..43736191d5 100644
|
|||
--- a/src/logging/virtlogd.service.in
|
|||
+++ b/src/logging/virtlogd.service.in
|
|||
@@ -7,8 +7,7 @@ Documentation=man:virtlogd(8)
|
|||
Documentation=https://libvirt.org |
|||
|
|||
[Service] |
|||
-EnvironmentFile=-/etc/sysconfig/virtlogd
|
|||
-ExecStart=@sbindir@/virtlogd $VIRTLOGD_ARGS
|
|||
+ExecStart=@sbindir@/virtlogd
|
|||
ExecReload=/bin/kill -USR1 $MAINPID |
|||
# Loosing the logs is a really bad thing that will |
|||
# cause the machine to be fenced (rebooted), so make |
|||
diff --git a/src/remote/libvirtd.service.in b/src/remote/libvirtd.service.in
|
|||
index 7f689e08a8..239beeced9 100644
|
|||
--- a/src/remote/libvirtd.service.in
|
|||
+++ b/src/remote/libvirtd.service.in
|
|||
@@ -22,8 +22,7 @@ Documentation=https://libvirt.org
|
|||
|
|||
[Service] |
|||
Type=notify |
|||
-EnvironmentFile=-/etc/sysconfig/libvirtd
|
|||
-ExecStart=@sbindir@/libvirtd $LIBVIRTD_ARGS
|
|||
+ExecStart=@sbindir@/libvirtd
|
|||
ExecReload=/bin/kill -HUP $MAINPID |
|||
KillMode=process |
|||
Restart=on-failure |
|||
diff --git a/tools/Makefile.am b/tools/Makefile.am
|
|||
index 613c9a77f0..224b511074 100644
|
|||
--- a/tools/Makefile.am
|
|||
+++ b/tools/Makefile.am
|
|||
@@ -339,15 +339,6 @@ install-data-local: install-init install-systemd install-nss \
|
|||
uninstall-local: uninstall-init uninstall-systemd uninstall-nss \ |
|||
uninstall-bash-completion |
|||
|
|||
-install-sysconfig:
|
|||
- $(MKDIR_P) $(DESTDIR)$(sysconfdir)/sysconfig
|
|||
- $(INSTALL_DATA) $(srcdir)/libvirt-guests.sysconf \
|
|||
- $(DESTDIR)$(sysconfdir)/sysconfig/libvirt-guests
|
|||
-
|
|||
-uninstall-sysconfig:
|
|||
- rm -f $(DESTDIR)$(sysconfdir)/sysconfig/libvirt-guests
|
|||
- rmdir $(DESTDIR)$(sysconfdir)/sysconfig ||:
|
|||
-
|
|||
EXTRA_DIST += libvirt-guests.sh.in libvirt-guests.init.in |
|||
|
|||
install-initscript: libvirt-guests.init |
|||
@@ -362,8 +353,8 @@ uninstall-initscript:
|
|||
|
|||
if LIBVIRT_INIT_SCRIPT_RED_HAT |
|||
BUILT_SOURCES += libvirt-guests.init |
|||
-install-init: install-sysconfig install-initscript
|
|||
-uninstall-init: uninstall-sysconfig uninstall-initscript
|
|||
+install-init: install-initscript
|
|||
+uninstall-init: uninstall-initscript
|
|||
else ! LIBVIRT_INIT_SCRIPT_RED_HAT |
|||
install-init: |
|||
uninstall-init: |
|||
@@ -394,12 +385,12 @@ EXTRA_DIST += libvirt-guests.service.in
|
|||
SYSTEMD_UNIT_DIR = $(prefix)/lib/systemd/system |
|||
|
|||
if LIBVIRT_INIT_SCRIPT_SYSTEMD |
|||
-install-systemd: libvirt-guests.service install-sysconfig libvirt-guests.sh
|
|||
+install-systemd: libvirt-guests.service libvirt-guests.sh
|
|||
$(MKDIR_P) $(DESTDIR)$(SYSTEMD_UNIT_DIR) |
|||
$(INSTALL_DATA) libvirt-guests.service \ |
|||
$(DESTDIR)$(SYSTEMD_UNIT_DIR)/libvirt-guests.service |
|||
|
|||
-uninstall-systemd: uninstall-sysconfig
|
|||
+uninstall-systemd:
|
|||
rm -f $(DESTDIR)$(SYSTEMD_UNIT_DIR)/libvirt-guests.service |
|||
rmdir $(DESTDIR)$(SYSTEMD_UNIT_DIR) ||: |
|||
|
|||
diff --git a/tools/libvirt-guests.service.in b/tools/libvirt-guests.service.in
|
|||
index 491ca62138..f0f417bffb 100644
|
|||
--- a/tools/libvirt-guests.service.in
|
|||
+++ b/tools/libvirt-guests.service.in
|
|||
@@ -10,7 +10,7 @@ Documentation=man:libvirtd(8)
|
|||
Documentation=https://libvirt.org |
|||
|
|||
[Service] |
|||
-EnvironmentFile=-/etc/sysconfig/libvirt-guests
|
|||
+EnvironmentFile=-/etc/libvirt/libvirt-guests.conf
|
|||
# Hack just call traditional service until we factor |
|||
# out the code |
|||
ExecStart=@libexecdir@/libvirt-guests.sh start |
|||
diff --git a/tools/libvirt-guests.sysconf b/tools/libvirt-guests.sysconf
|
|||
index 669b046507..45b0b9ea46 100644
|
|||
--- a/tools/libvirt-guests.sysconf
|
|||
+++ b/tools/libvirt-guests.sysconf
|
|||
@@ -1,3 +1,10 @@
|
|||
+#
|
|||
+# Warning: This configuration file is only sourced by the systemd
|
|||
+# libvirt-guests.service unit. The coresponding openrc facility is in
|
|||
+# /etc/init.d/libvirtd and /etc/conf.d/libvirtd
|
|||
+#
|
|||
+
|
|||
+
|
|||
# URIs to check for running guests |
|||
# example: URIS='default xen:///system vbox+tcp://host/system lxc:///system' |
|||
#URIS=default |
|||
--
|
|||
2.19.2 |
|||
|
@ -0,0 +1,110 @@ |
|||
From 563706143779166624812b3faf498d869f5dd383 Mon Sep 17 00:00:00 2001 |
|||
Message-Id: <563706143779166624812b3faf498d869f5dd383.1547196492.git.mprivozn@redhat.com> |
|||
From: Michal Privoznik <mprivozn@redhat.com> |
|||
Date: Fri, 11 Jan 2019 09:41:06 +0100 |
|||
Subject: [PATCH] gentoo: fix paths for apparmor |
|||
|
|||
Signed-off-by: Michal Privoznik <mprivozn@redhat.com> |
|||
---
|
|||
src/security/Makefile.inc.am | 10 +++++----- |
|||
src/security/apparmor/libvirt-qemu | 2 ++ |
|||
...bvirt.virt-aa-helper => usr.libexec.virt-aa-helper} | 4 ++-- |
|||
src/security/apparmor/usr.sbin.libvirtd | 6 ++++-- |
|||
4 files changed, 13 insertions(+), 9 deletions(-) |
|||
rename src/security/apparmor/{usr.lib.libvirt.virt-aa-helper => usr.libexec.virt-aa-helper} (93%) |
|||
|
|||
diff --git a/src/security/Makefile.inc.am b/src/security/Makefile.inc.am
|
|||
index b24cdfd083..ae8e979b84 100644
|
|||
--- a/src/security/Makefile.inc.am
|
|||
+++ b/src/security/Makefile.inc.am
|
|||
@@ -36,7 +36,7 @@ EXTRA_DIST += \
|
|||
security/apparmor/TEMPLATE.lxc \ |
|||
security/apparmor/libvirt-qemu \ |
|||
security/apparmor/libvirt-lxc \ |
|||
- security/apparmor/usr.lib.libvirt.virt-aa-helper \
|
|||
+ security/apparmor/usr.libexec.virt-aa-helper \
|
|||
security/apparmor/usr.sbin.libvirtd \ |
|||
$(NULL) |
|||
|
|||
@@ -90,7 +90,7 @@ endif WITH_SECDRIVER_APPARMOR
|
|||
if WITH_APPARMOR_PROFILES |
|||
apparmordir = $(sysconfdir)/apparmor.d/ |
|||
apparmor_DATA = \ |
|||
- security/apparmor/usr.lib.libvirt.virt-aa-helper \
|
|||
+ security/apparmor/usr.libexec.virt-aa-helper \
|
|||
security/apparmor/usr.sbin.libvirtd \ |
|||
$(NULL) |
|||
|
|||
@@ -110,11 +110,11 @@ APPARMOR_LOCAL_DIR = "$(DESTDIR)$(apparmordir)/local"
|
|||
install-apparmor-local: |
|||
$(MKDIR_P) "$(APPARMOR_LOCAL_DIR)" |
|||
echo "# Site-specific additions and overrides for \ |
|||
- 'usr.lib.libvirt.virt-aa-helper'" \
|
|||
- >"$(APPARMOR_LOCAL_DIR)/usr.lib.libvirt.virt-aa-helper"
|
|||
+ 'usr.libexec.virt-aa-helper'" \
|
|||
+ >"$(APPARMOR_LOCAL_DIR)/usr.libexec.virt-aa-helper"
|
|||
|
|||
uninstall-apparmor-local: |
|||
- rm -f "$(APPARMOR_LOCAL_DIR)/usr.lib.libvirt.virt-aa-helper"
|
|||
+ rm -f "$(APPARMOR_LOCAL_DIR)/usr.libexec.virt-aa-helper"
|
|||
rmdir "$(APPARMOR_LOCAL_DIR)" || : |
|||
|
|||
INSTALL_DATA_LOCAL += install-apparmor-local |
|||
diff --git a/src/security/apparmor/libvirt-qemu b/src/security/apparmor/libvirt-qemu
|
|||
index eaa5167525..9be50bbbe0 100644
|
|||
--- a/src/security/apparmor/libvirt-qemu
|
|||
+++ b/src/security/apparmor/libvirt-qemu
|
|||
@@ -87,6 +87,8 @@
|
|||
/usr/share/AAVMF/** r, |
|||
/usr/share/qemu-efi/** r, |
|||
/usr/share/slof/** r, |
|||
+ /usr/share/seavgabios/** r,
|
|||
+ /usr/share/edk2-ovmf/** r,
|
|||
|
|||
# pki for libvirt-vnc and libvirt-spice (LP: #901272, #1690140) |
|||
/etc/pki/CA/ r, |
|||
diff --git a/src/security/apparmor/usr.lib.libvirt.virt-aa-helper b/src/security/apparmor/usr.libexec.virt-aa-helper
|
|||
similarity index 93% |
|||
rename from src/security/apparmor/usr.lib.libvirt.virt-aa-helper |
|||
rename to src/security/apparmor/usr.libexec.virt-aa-helper |
|||
index de9436872c..99ab4ea527 100644
|
|||
--- a/src/security/apparmor/usr.lib.libvirt.virt-aa-helper
|
|||
+++ b/src/security/apparmor/usr.libexec.virt-aa-helper
|
|||
@@ -1,7 +1,7 @@
|
|||
# Last Modified: Mon Apr 5 15:10:27 2010 |
|||
#include <tunables/global> |
|||
|
|||
-profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
|
|||
+profile virt-aa-helper /usr/libexec/virt-aa-helper {
|
|||
#include <abstractions/base> |
|||
|
|||
# needed for searching directories |
|||
@@ -33,7 +33,7 @@ profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
|
|||
deny /dev/mapper/ r, |
|||
deny /dev/mapper/* r, |
|||
|
|||
- /usr/{lib,lib64}/libvirt/virt-aa-helper mr,
|
|||
+ /usr/libexec/virt-aa-helper mr,
|
|||
/{usr/,}sbin/apparmor_parser Ux, |
|||
|
|||
/etc/apparmor.d/libvirt/* r, |
|||
diff --git a/src/security/apparmor/usr.sbin.libvirtd b/src/security/apparmor/usr.sbin.libvirtd
|
|||
index f0ffc53008..8a402bd6ec 100644
|
|||
--- a/src/security/apparmor/usr.sbin.libvirtd
|
|||
+++ b/src/security/apparmor/usr.sbin.libvirtd
|
|||
@@ -98,8 +98,10 @@
|
|||
audit deny /sys/kernel/security/apparmor/.* rwxl, |
|||
/sys/kernel/security/apparmor/profiles r, |
|||
/usr/{lib,lib64}/libvirt/* PUxr, |
|||
- /usr/{lib,lib64}/libvirt/libvirt_parthelper ix,
|
|||
- /usr/{lib,lib64}/libvirt/libvirt_iohelper ix,
|
|||
+ /usr/libexec/virt-aa-helper PUxr,
|
|||
+ /usr/libexec/libvirt_lxc PUxr,
|
|||
+ /usr/libexec/libvirt_parthelper ix,
|
|||
+ /usr/libexec/libvirt_iohelper ix,
|
|||
/etc/libvirt/hooks/** rmix, |
|||
/etc/xen/scripts/** rmix, |
|||
|
|||
--
|
|||
2.19.2 |
|||
|
@ -0,0 +1 @@ |
|||
DIST editline-1.16.0.tar.xz 250376 BLAKE2B a9e080eb2b105f7c83dfbb26dfaebf07d7d2d664098504f4995b12b14b100420118ab70454afbba63518f4c510e2349b68923fade2412940e190177cfab442df SHA512 99e1070d9d658aaec82582d5148a58e7039182f9d73e755547bc090682821fbfb29af19261f38db9a0f022e304e8f8e779e79f7b21f57ad5c80af5bcf316c6f6 |
@ -0,0 +1,37 @@ |
|||
# Copyright 1999-2019 Gentoo Authors |
|||
# Distributed under the terms of the GNU General Public License v2 |
|||
|
|||
EAPI=7 |
|||
|
|||
DESCRIPTION="line editing library for UNIX call compatible with the FSF readline" |
|||
HOMEPAGE="http://troglobit.com/projects/editline/" |
|||
SRC_URI="https://github.com/troglobit/editline/releases/download/${PV}/${P}.tar.xz" |
|||
|
|||
LICENSE="Apache-2.0" |
|||
SLOT="0" |
|||
KEYWORDS="~amd64 ~x86" |
|||
IUSE="" |
|||
|
|||
DEPEND="" |
|||
RDEPEND="" |
|||
|
|||
PATCHES=("${FILESDIR}"/${PN}-1.16.0-rename-man.patch) |
|||
|
|||
src_prepare() { |
|||
default |
|||
|
|||
# To avoid collision with dev-libs/libedit |
|||
# we rename man/editline.3 to man/libeditline.3 |
|||
mv man/editline.3 man/libeditline.3 || die |
|||
} |
|||
|
|||
src_configure() { |
|||
econf --disable-static |
|||
} |
|||
|
|||
src_install() { |
|||
default |
|||
|
|||
# package installs .pc file |
|||
find "${D}" -name '*.la' -delete || die |
|||
} |
@ -0,0 +1,16 @@ |
|||
To avoid collision with dev-libs/libedit |
|||
we rename man/editline.3 to man/libeditline.3 |
|||
|
|||
This patch also needs a rename from outside the patch: |
|||
$ mv man/editline.3 man/libeditline.3 |
|||
|
|||
--- a/man/Makefile.am
|
|||
+++ b/man/Makefile.am
|
|||
@@ -3,1 +3,1 @@
|
|||
-dist_man_MANS = editline.3
|
|||
+dist_man_MANS = libeditline.3
|
|||
--- a/man/Makefile.in
|
|||
+++ b/man/Makefile.in
|
|||
@@ -273,1 +273,1 @@ top_build_prefix = @top_build_prefix@
|
|||
-dist_man_MANS = editline.3
|
|||
+dist_man_MANS = libeditline.3
|
@ -0,0 +1,7 @@ |
|||
<?xml version="1.0" encoding="UTF-8"?> |
|||
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd"> |
|||
<pkgmetadata> |
|||
<maintainer type="person"> |
|||
<email>slyfox@gentoo.org</email> |
|||
</maintainer> |
|||
</pkgmetadata> |
@ -1,2 +1 @@ |
|||
DIST python-glanceclient-2.13.0.tar.gz 185962 BLAKE2B a0e1453124c199855a16843aac4155627f6e8070a5c5acb947e10147492d8f12514085d28cb060cf5f8577a60ab14c79104d1453947e71c2cd03f9c54d3e008c SHA512 e8a1551bc427c07e12bc869ee09cf5e11916c7ebbb09b924d765f682010d19c4467f3dc71b1839287dc83eb15841b05598e893cc718dfd6a4882340aa7a10c76 |
|||
DIST python-glanceclient-2.13.1.tar.gz 187298 BLAKE2B e2fa34ea7840404e183fbb77592f656b296d54942581b2e1dda71285f791cf7f7d5b3b6ef2da28deb4e314f1d35395548e923f548854b7ad3ef4aa50ad000d62 SHA512 deb8454aea8b2c231604663fac2f6515e3cd6e86dc1cf3cd2174ba2e35f9d605bf162f5a089d80f52da11f97c540f5c160b96864b85d7535463ec170cba81689 |
@ -1,78 +0,0 @@ |
|||
# Copyright 1999-2018 Gentoo Authors |
|||
# Distributed under the terms of the GNU General Public License v2 |
|||
|
|||
EAPI=6 |
|||
PYTHON_COMPAT=( python2_7 python3_{4,5,6} ) |
|||
|
|||
inherit distutils-r1 |
|||
|
|||
DESCRIPTION="A client for the OpenStack Glance API" |
|||
HOMEPAGE="https://github.com/openstack/python-glanceclient" |
|||
SRC_URI="mirror://pypi/${PN:0:1}/${PN}/${P}.tar.gz" |
|||
|
|||
LICENSE="Apache-2.0" |
|||
SLOT="0" |
|||
KEYWORDS="amd64 ~arm64 x86 ~amd64-linux ~x86-linux" |
|||
IUSE="doc test" |
|||
REQUIRED_USE="test? ( doc )" |
|||
|
|||
CDEPEND=">=dev-python/pbr-2.0.0[${PYTHON_USEDEP}] |
|||
!~dev-python/pbr-2.1.0" |
|||
DEPEND="dev-python/setuptools[${PYTHON_USEDEP}] |
|||
${CDEPEND} |
|||
test? ( |
|||
>=dev-python/stestr-2.0.0[${PYTHON_USEDEP}] |
|||
>=dev-python/coverage-4.0[${PYTHON_USEDEP}] |
|||
!~dev-python/coverage-4.4[${PYTHON_USEDEP}] |
|||
>=dev-python/mock-2.0.0[${PYTHON_USEDEP}] |
|||
>=dev-python/ordereddict-1.1[$(python_gen_usedep 'python2_7')] |
|||
>=dev-python/os-client-config-1.28.0[${PYTHON_USEDEP}] |
|||
>=dev-python/openstackdocstheme-1.18.1[${PYTHON_USEDEP}] |
|||
>=dev-python/reno-2.5.0[${PYTHON_USEDEP}] |
|||
>=dev-python/testrepository-0.0.18[${PYTHON_USEDEP}] |
|||
>=dev-python/testtools-2.2.0[${PYTHON_USEDEP}] |
|||
>=dev-python/testscenarios-0.4[${PYTHON_USEDEP}] |
|||
>=dev-python/fixtures-3.0.0[${PYTHON_USEDEP}] |
|||
>=dev-python/requests-mock-1.2.0[${PYTHON_USEDEP}] |
|||
) |
|||
doc? ( |
|||
>=dev-python/openstackdocstheme-1.18.1[${PYTHON_USEDEP}] |
|||
>=dev-python/sphinx-1.6.2[${PYTHON_USEDEP}] |
|||
!~dev-python/sphinx-1.6.6[${PYTHON_USEDEP}] |
|||
) |
|||
" |
|||
RDEPEND=" |
|||
${CDEPEND} |
|||
>=dev-python/prettytable-0.7.1[${PYTHON_USEDEP}] |
|||
<dev-python/prettytable-0.8[${PYTHON_USEDEP}] |
|||
>=dev-python/keystoneauth-3.6.2[${PYTHON_USEDEP}] |
|||
>=dev-python/requests-2.14.2[${PYTHON_USEDEP}] |
|||
>=dev-python/warlock-1.2.0[${PYTHON_USEDEP}] |
|||
<dev-python/warlock-2[${PYTHON_USEDEP}] |
|||
>=dev-python/six-1.10.0[${PYTHON_USEDEP}] |
|||
>=dev-python/oslo-utils-3.33.0[${PYTHON_USEDEP}] |
|||
>=dev-python/oslo-i18n-3.15.3[${PYTHON_USEDEP}] |
|||
>=dev-python/wrapt-1.7.0[${PYTHON_USEDEP}] |
|||
>=dev-python/pyopenssl-17.1.0[${PYTHON_USEDEP}] |
|||
" |
|||
|
|||
python_prepare_all() { |
|||
sed -e 's:intersphinx_mapping:_&:' -i doc/source/conf.py || die |
|||
sed -i '/^hacking/d' test-requirements.txt || die |
|||
distutils-r1_python_prepare_all |
|||
} |
|||
|
|||
python_compile_all() { |
|||
use doc && esetup.py build_sphinx |
|||
} |
|||
|
|||
python_test() { |
|||
testr init |
|||
testr run || die "testsuite failed under python2.7" |
|||
flake8 tests && einfo "run flake8 over tests folder passed" || die |
|||
} |
|||
|
|||
python_install_all() { |
|||
use doc && local HTML_DOCS=( doc/build/html/. ) |
|||
distutils-r1_python_install_all |
|||
} |
@ -1,3 +1 @@ |
|||
DIST curb-0.9.4.gem 82432 BLAKE2B 2bf2bf0d887369c484d246771afc9cb34c6eb72a3809f13c9047f82030d79b1be47141db03659c1e4f42792c94094e40f05d4b1b0d984aed73a47c24ef96379a SHA512 7b81ba587ac9beb203e040234d9f5032d87352a3e045d3705f474d2eaf1f620245240a59894c7147f54d55f0293f60488e8f883367f96945d49ffcdcef42bfc1 |
|||
DIST curb-0.9.6.gem 83456 BLAKE2B 79ef506ef3c570cae2527b3547d3b315ec3b1ba8cb8295f5c886d653ca5f3b8454a3326b9d704ce20aea6e2ff0652bb682e9931f9ba0573f449322e087ea53fe SHA512 b592e04f963a32a81dec0b67348921da7b9a84d6943398984126eae1dc22653efbb049ad04201a7f22cbf19a03d6c587a525491d25585d3f12e29d4a5cf469a8 |
|||
DIST curb-0.9.7.gem 83968 BLAKE2B 591c4fde6fe809c813bb7586875e954dcc3b6190eb6955b5769a2dd1538d156074d0e025af6b1d42cbd820fb012b46eec4e9ca96fe61acc3697cf1f6c5018b43 SHA512 6068eaaad6b1dc2dbbf7d0588235ce2a681d786bf8ed6d072e501b7cbff600d8fbc9d675fac3949a565c8451641982cbd9ab29a50cf3707e8c4cdc35b539f42b |
@ -1,45 +0,0 @@ |
|||
# Copyright 1999-2018 Gentoo Foundation |
|||
# Distributed under the terms of the GNU General Public License v2 |
|||
|
|||
EAPI=6 |
|||
|
|||
USE_RUBY="ruby22 ruby23 ruby24 ruby25" |
|||
|
|||
RUBY_FAKEGEM_RECIPE_TEST="rake" |
|||
RUBY_FAKEGEM_RECIPE_DOC="rdoc" |
|||
|
|||
inherit ruby-fakegem |
|||
|
|||
DESCRIPTION="Ruby-language bindings for libcurl" |
|||
HOMEPAGE="https://github.com/taf2/curb" |
|||
|
|||
LICENSE="Ruby" |
|||
SLOT="0" |
|||
KEYWORDS="~amd64" |
|||
IUSE="" |
|||
|
|||
DEPEND+=" net-misc/curl[ssl]" |
|||
RDEPEND+=" net-misc/curl[ssl]" |
|||
|