X-Original-To: alpine-aports@mail.alpinelinux.org Delivered-To: alpine-aports@mail.alpinelinux.org Received: from mail.alpinelinux.org (dallas-a1.alpinelinux.org [127.0.0.1]) by mail.alpinelinux.org (Postfix) with ESMTP id EA297DC0126 for ; Thu, 27 Aug 2015 19:24:41 +0000 (UTC) Received: from mail-pa0-f54.google.com (mail-pa0-f54.google.com [209.85.220.54]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mail.alpinelinux.org (Postfix) with ESMTPS id B25ADDC00CA for ; Thu, 27 Aug 2015 19:24:41 +0000 (UTC) Received: by padfo6 with SMTP id fo6so897522pad.3 for ; Thu, 27 Aug 2015 12:24:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:to:cc:subject:date:message-id; bh=mbIMkpaJEHSSkM6OJGK0/s5ZtOPHQ/vUUdRhJUhaCd0=; b=jY7k2Y6h4H3hotQJ+Fk2oWCiRplUQru73gDM0f9L7zHsR34m7tzEjBlOAQAM6qP2FD CgQfgv1P5eJ1JI+7AFk/dZ+MwAljSAIizho16gFA/kesrS6FEazIpi7tKsMIx/TmDe1T mKz3Q8vT4l/2ngvKBJpdPYlSUoQoxZin3JIv4sXrY9ZpaLJHYhwY8nyX8EsClQg5ngzC 8jkvAWoU/wIdccOidh5HG69BwbxMPINaInxGwHpzYulSjKTWkTNIJ3eM5MSPLG18XCr9 h5kXtMD+Ri0zrGQ+6ZGPiXhEnCFCC03/Bh2QNVycM3UflfRgKXYN031ug/aX0Sfrqm70 nkzQ== X-Received: by 10.68.142.130 with SMTP id rw2mr8843180pbb.107.1440703107504; Thu, 27 Aug 2015 12:18:27 -0700 (PDT) Received: from twinpeaks.puffywall.priv.upward.io ([74.82.134.59]) by smtp.gmail.com with ESMTPSA id fm5sm3244353pbb.60.2015.08.27.12.18.26 (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 27 Aug 2015 12:18:26 -0700 (PDT) From: systmkor To: alpine-aports@lists.alpinelinux.org Cc: systmkor@gmail.com Subject: [alpine-aports] [PATCH] main/openntpd: fixes privelege seperation defaults Date: Thu, 27 Aug 2015 12:18:17 -0700 Message-Id: <1440703097-6498-1-git-send-email-systmkor@gmail.com> X-Mailer: git-send-email 2.4.1 X-Virus-Scanned: ClamAV using ClamSMTP X-Mailinglist: alpine-aports Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: - compiles default privelege seperation user as ntp instead of _ntp - creates required chroot directory /var/empty --- main/openntpd/APKBUILD | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/main/openntpd/APKBUILD b/main/openntpd/APKBUILD index d2de528..9886012 100644 --- a/main/openntpd/APKBUILD +++ b/main/openntpd/APKBUILD @@ -4,14 +4,14 @@ pkgver=5.7_p4 _myver=${pkgver/_/} pkgrel=0 pkgdesc="Lightweight NTP server ported from OpenBSD" -url=http://www.openntpd.org/ +url="http://www.openntpd.org/" install="$pkgname.pre-install $pkgname.pre-upgrade $pkgname.post-upgrade" subpackages="openntpd-doc" -depends= +depends="" makedepends="openssl-dev linux-headers bsd-compat-headers" arch="all" -license=BSD +license="BSD" source=" http://ftp.openbsd.org/pub/OpenBSD/OpenNTPD/openntpd-$_myver.tar.gz openntpd.confd @@ -29,7 +29,6 @@ prepare() { *.patch) msg $i; patch -p1 -i "$srcdir"/$i || return 1;; esac done - sed -i '/NTPD_USER/s:_ntp:ntp:' src/ntpd.h || return 1 } build() { @@ -41,15 +40,17 @@ build() { --localstatedir=/var \ --mandir=/usr/share/man \ --sysconfdir=/etc \ + --with-privsep-user=ntp \ || return 1 make || return 1 } package() { cd "$_builddir" - make install DESTDIR="$pkgdir" - install -Dm755 ../openntpd.initd "$pkgdir/etc/init.d/$pkgname" - install -Dm644 ../openntpd.confd "$pkgdir/etc/conf.d/$pkgname" + make install DESTDIR="$pkgdir" || return 1 + mkdir -p "$pkgdir"/var/empty || return 1 + install -Dm755 "$srcdir"/openntpd.initd "$pkgdir"/etc/init.d/"$pkgname" || return 1 + install -Dm644 "$srcdir"/openntpd.confd "$pkgdir"/etc/conf.d/"$pkgname" || return 1 } md5sums="9d818a143fbc5d830203fa2f4b4c6a2a openntpd-5.7p4.tar.gz -- 2.4.1 --- Unsubscribe: alpine-aports+unsubscribe@lists.alpinelinux.org Help: alpine-aports+help@lists.alpinelinux.org ---