| 1 | # Copyright 1999-2012 Gentoo Foundation |
1 | # Copyright 1999-2012 Gentoo Foundation |
| 2 | # Distributed under the terms of the GNU General Public License v2 |
2 | # Distributed under the terms of the GNU General Public License v2 |
| 3 | # $Header: /var/cvsroot/gentoo-x86/sys-auth/polkit/Attic/polkit-0.106-r2.ebuild,v 1.3 2012/06/19 12:04:07 ssuominen Exp $ |
3 | # $Header: /var/cvsroot/gentoo-x86/sys-auth/polkit/Attic/polkit-0.106-r2.ebuild,v 1.4 2012/06/23 04:01:20 ssuominen Exp $ |
| 4 | |
4 | |
| 5 | EAPI=4 |
5 | EAPI=4 |
| 6 | inherit eutils pam systemd user |
6 | inherit eutils pam systemd user |
| 7 | |
7 | |
| 8 | DESCRIPTION="Policy framework for controlling privileges for system-wide services" |
8 | DESCRIPTION="Policy framework for controlling privileges for system-wide services" |
| … | |
… | |
| 42 | !systemd? ( >=sys-auth/consolekit-0.4.5_p2012[policykit] )" |
42 | !systemd? ( >=sys-auth/consolekit-0.4.5_p2012[policykit] )" |
| 43 | |
43 | |
| 44 | DOCS="docs/TODO HACKING NEWS README" |
44 | DOCS="docs/TODO HACKING NEWS README" |
| 45 | |
45 | |
| 46 | pkg_setup() { |
46 | pkg_setup() { |
| 47 | enewgroup polkitd |
47 | local u=polkitd |
| 48 | enewuser polkitd -1 -1 /var/lib/polkit-1 polkitd |
48 | local g=polkitd |
|
|
49 | local h=/var/lib/polkit-1 |
|
|
50 | |
|
|
51 | enewgroup ${g} |
|
|
52 | enewuser ${u} -1 -1 ${h} ${g} |
|
|
53 | esethome ${u} ${h} |
| 49 | } |
54 | } |
| 50 | |
55 | |
| 51 | src_prepare() { |
56 | src_prepare() { |
| 52 | sed -i -e '/unix-group/s:wheel:adm:' src/polkitbackend/*-default.rules || die #401513 |
57 | sed -i -e '/unix-group/s:wheel:adm:' src/polkitbackend/*-default.rules || die #401513 |
| 53 | |
58 | |
| … | |
… | |
| 93 | pkg_postinst() { |
98 | pkg_postinst() { |
| 94 | chown -R polkitd:root "${EROOT}"/{etc,usr/share}/polkit-1/rules.d |
99 | chown -R polkitd:root "${EROOT}"/{etc,usr/share}/polkit-1/rules.d |
| 95 | chown -R polkitd:polkitd "${EROOT}"/var/lib/polkit-1 |
100 | chown -R polkitd:polkitd "${EROOT}"/var/lib/polkit-1 |
| 96 | |
101 | |
| 97 | echo |
102 | echo |
| 98 | ewarn "If home directory of unix-user \"polkitd\" is set to /dev/null, run:" |
|
|
| 99 | ewarn "# usermod -d /var/lib/polkit-1 polkitd" |
|
|
| 100 | |
|
|
| 101 | echo |
|
|
| 102 | ewarn "The default administrator unix-group was changed from \"wheel\" to" |
103 | ewarn "The default administrator unix-group was changed from \"wheel\" to" |
| 103 | ewarn "\"adm\", see *-default.rules in /etc/polkit-1/rules.d" |
104 | ewarn "\"adm\", see *-default.rules in /etc/polkit-1/rules.d" |
| 104 | ewarn "Users of unix-group \"adm\" can run, for example, \"pkexec /bin/sh\"" |
105 | ewarn "Users of unix-group \"adm\" can run, for example, \"pkexec /bin/sh\"" |
| 105 | ewarn "to gain root shell without root password." |
106 | ewarn "to gain root shell without root password." |
| 106 | ewarn "For more information, see http://bugs.gentoo.org/401513" |
107 | ewarn "For more information, see http://bugs.gentoo.org/401513" |