blob: e9bcba737b4fa5c13a3c9d8bd708274a362f5363 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
|
# Copyright 1999-2025 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=8
MY_P="Linux-${PN^^}-${PV}"
# Avoid QA warnings
# Can reconsider w/ EAPI 8 and IDEPEND, bug #810979
TMPFILES_OPTIONAL=1
inherit db-use fcaps flag-o-matic meson-multilib toolchain-funcs
DESCRIPTION="Linux-PAM (Pluggable Authentication Modules)"
HOMEPAGE="https://github.com/linux-pam/linux-pam"
if [[ ${PV} == *_p* ]] ; then
PAM_COMMIT="e634a3a9be9484ada6e93970dfaf0f055ca17332"
SRC_URI="
https://github.com/linux-pam/linux-pam/archive/${PAM_COMMIT}.tar.gz -> ${P}.gh.tar.gz
"
S="${WORKDIR}"/linux-${PN}-${PAM_COMMIT}
else
VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/strace.asc
inherit verify-sig
SRC_URI="
https://github.com/linux-pam/linux-pam/releases/download/v${PV}/${MY_P}.tar.xz
verify-sig? ( https://github.com/linux-pam/linux-pam/releases/download/v${PV}/${MY_P}.tar.xz.asc )
"
S="${WORKDIR}/${MY_P}"
BDEPEND="verify-sig? ( sec-keys/openpgp-keys-strace )"
fi
LICENSE="|| ( BSD GPL-2 )"
SLOT="0"
KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux"
IUSE="audit berkdb elogind examples debug nis nls selinux systemd"
REQUIRED_USE="?? ( elogind systemd )"
# meson.build specifically checks for bison and then byacc
# also requires xsltproc
BDEPEND+="
|| ( sys-devel/bison dev-util/byacc )
app-text/docbook-xsl-ns-stylesheets
dev-libs/libxslt
sys-devel/flex
virtual/pkgconfig
nls? ( sys-devel/gettext )
"
DEPEND="
virtual/libcrypt:=[${MULTILIB_USEDEP}]
>=virtual/libintl-0-r1[${MULTILIB_USEDEP}]
audit? ( >=sys-process/audit-2.2.2[${MULTILIB_USEDEP}] )
berkdb? ( >=sys-libs/db-4.8.30-r1:=[${MULTILIB_USEDEP}] )
!berkdb? ( sys-libs/gdbm:=[${MULTILIB_USEDEP}] )
elogind? ( >=sys-auth/elogind-254 )
selinux? ( >=sys-libs/libselinux-2.2.2-r4[${MULTILIB_USEDEP}] )
systemd? ( >=sys-apps/systemd-254:= )
nis? (
net-libs/libnsl:=[${MULTILIB_USEDEP}]
>=net-libs/libtirpc-0.2.4-r2:=[${MULTILIB_USEDEP}]
)
"
RDEPEND="${DEPEND}"
PDEPEND=">=sys-auth/pambase-20200616"
src_configure() {
# meson.build sets -Wl,--fatal-warnings and with e.g. mold, we get:
# cannot assign version `global` to symbol `pam_sm_open_session`: symbol not found
append-ldflags $(test-flags-CCLD -Wl,--undefined-version)
# Do not let user's BROWSER setting mess us up, bug #549684
unset BROWSER
meson-multilib_src_configure
}
multilib_src_configure() {
local machine_file="${T}/meson.${CHOST}.${ABI}.ini.local"
# Workaround for docbook5 not being packaged (bug #913087#c4)
# It's only used for validation of output, so stub it out.
# Also, stub out elinks+w3m which are only used for an index.
cat >> "${machine_file}" <<-EOF || die
[binaries]
xmlcatalog='true'
xmllint='true'
elinks='true'
w3m='true'
EOF
local emesonargs=()
if tc-is-cross-compiler; then
emesonargs+=( --cross-file "${machine_file}" )
else
emesonargs+=( --native-file "${machine_file}" )
fi
emesonargs+=(
$(meson_feature audit)
$(meson_native_use_bool examples)
$(meson_use debug pam-debug)
$(meson_feature nis)
$(meson_feature nls i18n)
$(meson_feature selinux)
-Disadir='.'
-Dxml-catalog="${BROOT}"/etc/xml/catalog
-Dsbindir="${EPREFIX}"/sbin
-Dsecuredir="${EPREFIX}"/$(get_libdir)/security
-Ddocdir="${EPREFIX}"/usr/share/doc/${PF}
-Dhtmldir="${EPREFIX}"/usr/share/doc/${PF}/html
-Dpdfdir="${EPREFIX}"/usr/share/doc/${PF}/pdf
-Ddb=$(usex berkdb 'db' 'gdbm')
-Ddb-uniquename=$(db_findver sys-libs/db)
$(meson_native_enabled docs)
-Dpam_unix=enabled
# TODO: wire this up now it's more useful as of 1.5.3 (bug #931117)
-Deconf=disabled
# TODO: lastlog is enabled again for now by us as elogind support
# wasn't available at first. Even then, disabling lastlog will
# probably need a news item.
$(meson_native_use_feature systemd logind)
$(meson_native_use_feature elogind)
$(meson_feature !elibc_musl pam_lastlog)
)
# This whole weird has_version libxcrypt block can go once
# musl systems have libxcrypt[system] if we ever make
# that mandatory. See bug #867991.
#if use elibc_musl && ! has_version sys-libs/libxcrypt[system] ; then
# # Avoid picking up symbol-versioned compat symbol on musl systems
# export ac_cv_search_crypt_gensalt_rn=no
#
# # Need to avoid picking up the libxcrypt headers which define
# # CRYPT_GENSALT_IMPLEMENTS_AUTO_ENTROPY.
# cp "${ESYSROOT}"/usr/include/crypt.h "${T}"/crypt.h || die
# append-cppflags -I"${T}"
#fi
meson_src_configure
}
multilib_src_install_all() {
find "${ED}" -type f -name '*.la' -delete || die
# tmpfiles.eclass is impossible to use because
# there is the pam -> tmpfiles -> systemd -> pam dependency loop
dodir /usr/lib/tmpfiles.d
cat ->> "${ED}"/usr/lib/tmpfiles.d/${CATEGORY}-${PN}.conf <<-_EOF_
d /run/faillock 0755 root root
_EOF_
use selinux && cat ->> "${ED}"/usr/lib/tmpfiles.d/${CATEGORY}-${PN}-selinux.conf <<-_EOF_
d /run/sepermit 0755 root root
_EOF_
}
pkg_postinst() {
ewarn "Some software with pre-loaded PAM libraries might experience"
ewarn "warnings or failures related to missing symbols and/or versions"
ewarn "after any update. While unfortunate this is a limit of the"
ewarn "implementation of PAM and the software, and it requires you to"
ewarn "restart the software manually after the update."
ewarn ""
ewarn "You can get a list of such software running a command like"
ewarn " lsof / | grep -E -i 'del.*libpam\\.so'"
ewarn ""
ewarn "Alternatively, simply reboot your system."
# The pam_unix module needs to check the password of the user which requires
# read access to /etc/shadow only.
fcaps cap_dac_override sbin/unix_chkpwd
}
|
GitWeb