blob: ecaf1104c8a8630cb185e43ae0829fc7f8592730 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
# Copyright 1999-2022 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
inherit autotools bash-completion-r1
DESCRIPTION="Daemon protecting your computer against BadUSB"
HOMEPAGE="https://github.com/USBGuard/usbguard"
SRC_URI="https://github.com/USBGuard/usbguard/releases/download/${P}/${P}.tar.gz"
LICENSE="GPL-2+"
SLOT="0/1" # due to libusbguard.so.<1>.0.0
KEYWORDS="~amd64 ~x86"
IUSE="dbus ldap policykit selinux static-libs systemd test umockdev"
# https://github.com/USBGuard/usbguard/issues/449
# https://bugs.gentoo.org/769692
REQUIRED_USE+=" test? ( static-libs )"
CDEPEND="
dev-libs/pegtl
>=dev-libs/libsodium-0.4.5:=
>=dev-libs/protobuf-2.5.0:=
>=sys-cluster/libqb-0.16.0:=
sys-devel/gcc:*[cxx]
>=sys-libs/libcap-ng-0.7.0
>=sys-libs/libseccomp-2.0.0
>=sys-process/audit-2.7.7
dbus? (
dev-libs/glib:2
sys-apps/dbus
sys-auth/polkit[introspection]
)
ldap? ( net-nds/openldap:= )
systemd? ( sys-apps/systemd )
umockdev? ( dev-util/umockdev )
"
RDEPEND="${CDEPEND}
virtual/udev
selinux? ( sec-policy/selinux-usbguard )
"
DEPEND="${CDEPEND}
app-text/asciidoc
<dev-cpp/catch-3:0
dbus? (
dev-libs/libxml2
dev-libs/libxslt
dev-util/gdbus-codegen
)
"
RESTRICT="!test? ( test )"
src_prepare() {
default
eautoreconf
}
src_configure() {
local myargs=(
--with-bash-completion-dir=$(get_bashcompdir)
$(use_with dbus)
$(use_with dbus polkit)
$(use_with ldap)
$(use_enable static-libs static)
$(use_enable systemd)
$(use_enable umockdev)
)
econf "${myargs[@]}"
}
src_install() {
default
keepdir /etc/usbguard/IPCAccessControl.d # bug 808801
keepdir /var/lib/log/usbguard
chmod 0600 "${ED}"/etc/usbguard/IPCAccessControl.d/.keep* || die # bug 808801
newinitd "${FILESDIR}"/${PN}-0.7.6-usbguard.openrc usbguard
use dbus && newinitd "${FILESDIR}"/${PN}-0.7.6-usbguard-dbus.openrc usbguard-dbus
find "${D}" -name '*.la' -delete || die # bug 850655
}
pkg_postinst() {
ewarn
ewarn 'BEFORE STARTING USBGUARD please be sure to create/generate'
ewarn ' a rules file at /etc/usbguard/rules.conf'
ewarn ' so that you do not'
ewarn ' GET LOCKED OUT'
ewarn " of this system (\"$(hostname)\")."
ewarn
ewarn 'This command may be of help:'
ewarn ' sudo sh -c "usbguard generate-policy > /etc/usbguard/rules.conf"'
ewarn
}
|
GitWeb