You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
231 lines
7.0 KiB
231 lines
7.0 KiB
## |
|
## sudo.spec -- OpenPKG RPM Package Specification |
|
## Copyright (c) 2000-2022 OpenPKG Project <http://openpkg.org/> |
|
## |
|
## Permission to use, copy, modify, and distribute this software for |
|
## any purpose with or without fee is hereby granted, provided that |
|
## the above copyright notice and this permission notice appear in all |
|
## copies. |
|
## |
|
## THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED |
|
## WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF |
|
## MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
|
## IN NO EVENT SHALL THE AUTHORS AND COPYRIGHT HOLDERS AND THEIR |
|
## CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
|
## SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
|
## LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF |
|
## USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND |
|
## ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, |
|
## OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT |
|
## OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
|
## SUCH DAMAGE. |
|
## |
|
|
|
# package information |
|
Name: sudo |
|
Summary: Flexible Switch User Command |
|
URL: http://www.sudo.ws/ |
|
Vendor: Todd Miller |
|
Packager: OpenPKG Project |
|
Distribution: OpenPKG Community |
|
Class: BASE |
|
Group: ShellUtils |
|
License: BSD |
|
Version: 1.9.8p2 |
|
Release: 20210921 |
|
|
|
# package options |
|
%option with_fsl yes |
|
%option with_pam no |
|
%option with_skey no |
|
%option with_opie no |
|
%option with_ldap no |
|
|
|
# list of sources |
|
Source0: http://www.sudo.ws/sudo/dist/sudo-%{version}.tar.gz |
|
Source1: rc.sudo |
|
Source2: fsl.sudo |
|
Source3: sudo.conf |
|
Source4: sudoers |
|
Patch0: sudo.patch |
|
|
|
# build information |
|
BuildPreReq: OpenPKG, openpkg >= 20160101, gawk |
|
PreReq: OpenPKG, openpkg >= 20160101 |
|
BuildPreReq: zlib |
|
PreReq: zlib |
|
%if "%{with_fsl}" == "yes" |
|
BuildPreReq: fsl |
|
PreReq: fsl |
|
%endif |
|
%if "%{with_pam}" == "yes" |
|
BuildPreReq: PAM |
|
PreReq: PAM |
|
%endif |
|
%if "%{with_skey}" == "yes" |
|
BuildPreReq: skey |
|
PreReq: skey |
|
%endif |
|
%if "%{with_opie}" == "yes" |
|
BuildPreReq: opie |
|
PreReq: opie |
|
%endif |
|
%if "%{with_ldap}" == "yes" |
|
BuildPreReq: openldap |
|
PreReq: openldap |
|
%endif |
|
|
|
%description |
|
Sudo (superuser do) allows a system administrator to give certain |
|
users (or groups of users) the ability to run some (or all) commands |
|
as root or another user while logging the commands and arguments. |
|
|
|
%track |
|
prog sudo = { |
|
version = %{version} |
|
url = http://www.sudo.ws/sudo/dist/ |
|
regex = sudo-(__VER__)\.tar\.gz |
|
} |
|
|
|
%prep |
|
%setup -q |
|
%patch -p0 |
|
case "%{l_platform -t}" in |
|
*-darwin* ) |
|
%{l_shtool} subst \ |
|
-e 's/\(\$(LIBTOOL).*sudo_noexec.lo.*$\)/\1; $(CC) -dynamiclib .libs\/sudo_noexec.o $(LDFLAGS) -o .libs\/sudo_noexec.dylib/' \ |
|
Makefile.in |
|
;; |
|
*-sunos* ) |
|
%{l_shtool} subst \ |
|
-e 's;^(void)isblank(1);if ((int)isblank(0x20)) exit(0);' \ |
|
configure |
|
;; |
|
esac |
|
|
|
%build |
|
# configure program |
|
libs="" |
|
case "%{l_platform -t}" in |
|
*-freebsd* ) libs="$libs -lutil" ;; |
|
esac |
|
CC="%{l_cc}" \ |
|
CFLAGS="%{l_cflags -O}" \ |
|
LDFLAGS="%{l_fsl_ldflags}" \ |
|
SUDO_LIBS="$libs %{l_fsl_libs}" \ |
|
%if "%{with_pam}" == "yes" |
|
CPPFLAGS="-I`%{l_rc} --query pam_incdir`" \ |
|
LDFLAGS="-L`%{l_rc} --query pam_libdir` ${LDFLAGS}" \ |
|
%endif |
|
true=`%{l_shtool} path true` \ |
|
./configure \ |
|
--prefix=%{l_prefix} \ |
|
--mandir=%{l_prefix}/man \ |
|
--sysconfdir=%{l_prefix}/etc/sudo \ |
|
--libexecdir=%{l_prefix}/libexec/sudo \ |
|
--with-plugindir=%{l_prefix}/libexec/sudo/plugin \ |
|
--with-noexec=%{l_prefix}/libexec/sudo/helper/sudo_noexec.so \ |
|
--with-logpath=%{l_prefix}/var/sudo/sudo.log \ |
|
--with-rundir=%{l_prefix}/var/sudo \ |
|
--enable-zlib=%{l_prefix} \ |
|
%if "%{with_fsl}" == "yes" |
|
--with-logging=syslog \ |
|
%else |
|
--with-logging=file \ |
|
%endif |
|
--with-sudoers-mode=0400 \ |
|
--with-sudoers-uid=%{l_suid} \ |
|
--with-sudoers-gid=%{l_sgid} \ |
|
--with-sendmail=$true \ |
|
--with-ignore-dot \ |
|
%if "%{with_pam}" == "yes" |
|
--with-pam \ |
|
%else |
|
--without-pam \ |
|
%endif |
|
%if "%{with_skey}" == "yes" || "%{with_opie}" == "yes" |
|
--with-long-otp-prompt \ |
|
%endif |
|
%if "%{with_skey}" == "yes" |
|
--with-skey=%{l_prefix} \ |
|
%endif |
|
%if "%{with_opie}" == "yes" |
|
--with-opie=%{l_prefix} \ |
|
%endif |
|
%if "%{with_ldap}" == "yes" |
|
--with-ldap=%{l_prefix} \ |
|
--with-ldap-conf-file=%{l_prefix}/etc/sudo/ldap.conf \ |
|
%endif |
|
--enable-shell-sets-home \ |
|
--disable-root-sudo \ |
|
--with-env-editor \ |
|
--disable-path-info \ |
|
--disable-nls |
|
|
|
# build program |
|
%{l_make} %{l_mflags -O} |
|
|
|
%install |
|
# install program |
|
%{l_shtool} mkdir -f -p -m 755 \ |
|
$RPM_BUILD_ROOT%{l_prefix}/var/sudo |
|
%{l_shtool} subst \ |
|
-e "s;-M 4111;-M 4511;" \ |
|
-e "s;-M 0111;-M 0511;" \ |
|
-e "s;-[OG] [^ ]*;;g" \ |
|
Makefile |
|
%{l_make} %{l_mflags} install \ |
|
DESTDIR=$RPM_BUILD_ROOT |
|
rm -rf $RPM_BUILD_ROOT%{l_prefix}/share |
|
|
|
# install run-command script |
|
%{l_shtool} mkdir -f -p -m 755 \ |
|
$RPM_BUILD_ROOT%{l_prefix}/etc/rc.d |
|
%{l_shtool} install -c -m 755 %{l_value -s -a} \ |
|
%{SOURCE rc.sudo} $RPM_BUILD_ROOT%{l_prefix}/etc/rc.d/ |
|
|
|
# install OSSP fsl configuration |
|
%{l_shtool} mkdir -f -p -m 755 \ |
|
$RPM_BUILD_ROOT%{l_prefix}/etc/fsl |
|
%{l_shtool} install -c -m 644 %{l_value -s -a} \ |
|
%{SOURCE fsl.sudo} \ |
|
$RPM_BUILD_ROOT%{l_prefix}/etc/fsl/ |
|
|
|
# install default configuration file |
|
%{l_shtool} install -c -m 644 %{l_value -s -a} \ |
|
%{SOURCE sudo.conf} %{SOURCE sudoers} \ |
|
$RPM_BUILD_ROOT%{l_prefix}/etc/sudo/ |
|
|
|
# determine installation files |
|
%{l_rpmtool} files -v -ofiles -r$RPM_BUILD_ROOT \ |
|
%{l_files_std} \ |
|
'%config %{l_prefix}/etc/fsl/fsl.sudo' \ |
|
'%attr(4111,%{l_susr},%{l_mgrp}) %{l_prefix}/bin/sudo' \ |
|
'%attr(4111,%{l_susr},%{l_mgrp}) %{l_prefix}/bin/sudoedit' \ |
|
'%attr(0111,%{l_susr},%{l_mgrp}) %{l_prefix}/sbin/visudo' \ |
|
'%attr(0755,%{l_susr},%{l_mgrp}) %{l_prefix}/libexec/sudo/plugin/sudoers.so' \ |
|
'%attr(0700,%{l_susr},%{l_mgrp}) %dir %{l_prefix}/var/sudo' \ |
|
'%config(noreplace) %attr(0400,%{l_susr},%{l_sgrp}) %{l_prefix}/etc/sudo/sudo.conf' \ |
|
'%config(noreplace) %attr(0400,%{l_susr},%{l_sgrp}) %{l_prefix}/etc/sudo/sudoers' \ |
|
'%attr(0700,%{l_susr},%{l_sgrp}) %{l_prefix}/etc/sudo/sudoers.d' |
|
|
|
%files -f files |
|
|
|
%clean |
|
|
|
%post |
|
%if "%{with_pam}" == "yes" |
|
# add PAM configuration entry |
|
if [ $1 -eq 1 ]; then |
|
$RPM_INSTALL_PREFIX/sbin/pamtool --add --smart --name=sudo |
|
fi |
|
%endif |
|
|
|
%preun |
|
%if "%{with_pam}" == "yes" |
|
# remove PAM configuration entry |
|
if [ $1 -eq 0 ]; then |
|
$RPM_INSTALL_PREFIX/sbin/pamtool --remove --smart --name=sudo |
|
fi |
|
%endif |
|
|
|
|