#!/usr/bin/bash
# JOBoRun		: Jwm OpenBox Obarun RUNit
# Maintainer	: Joe Bo Run <joborun@disroot.org>
# PkgSource		: url="https://gittea.disroot.org/joborun-pkg/jobcore/$pkgname"
# Website		: https://pozol.eu
#-----------------------------------------| DESCRIPTION |---------------------------------------

pkgname=sudo
_sudover=1.9.12p2
pkgrel=01
pkgver=${_sudover/p/.p}
pkgdesc="Give certain users the ability to run some commands as root w/o systemd"
arch=('x86_64')
url="https://www.sudo.ws/sudo/"
groups=( jobbot )
depends=('glibc' 'openssl' 'pam' 'libldap' 'zlib')
backup=('etc/pam.d/sudo'
        'etc/sudo.conf'
        'etc/sudo_logsrvd.conf'
        'etc/sudoers')
install=$pkgname.install
source=(https://www.sudo.ws/sudo/dist/$pkgname-$_sudover.tar.gz{,.sig}
#        $pkgname-CVE-2022-43995.patch::https://github.com/sudo-project/sudo/commit/bd209b9f16fc.patch
#        sudo_logsrvd.service
        sudo.pam)

prepare() {
  cd $pkgname-$_sudover
#  # fix CVE-2022-43995 (potential heap overflow for passwords < 8 characters)
#  patch -Np1 -i ../$pkgname-CVE-2022-43995.patch
}

build() {
  cd $pkgname-$_sudover
  ./configure \
    --prefix=/usr \
    --sbindir=/usr/bin \
    --libexecdir=/usr/lib \
    --with-rundir=/run/sudo \
    --with-vardir=/var/db/sudo \
    --with-logfac=auth \
    --enable-tmpfiles.d \
    --with-pam \
    --with-sssd \
    --with-ldap \
    --with-ldap-conf-file=/etc/openldap/ldap.conf \
    --with-env-editor \
    --with-passprompt="[sudo] password for %p: " \
    --with-insults=no
  make
}

# # fails 2 checks and fails to build with check
# # again 1.10 fails 2 tests 
#check() {
#  cd "$srcdir/$pkgname-$_sudover"
#  make check
#}
#

package() {
  depends+=('libcrypto.so' 'libssl.so')

  cd $pkgname-$_sudover

  make DESTDIR="$pkgdir" install

  # Remove sudoers.dist; not needed since pacman manages updates to sudoers
  rm "$pkgdir/etc/sudoers.dist"

  # Remove /run/sudo directory; we create it using systemd-tmpfiles
  ## useless as well in joborun-pkg
  rmdir "$pkgdir/run/sudo"
  rmdir "$pkgdir/run"

  install -Dm644 "$srcdir/sudo.pam" "$pkgdir/etc/pam.d/sudo"
  install -Dm644 LICENSE.md -t "$pkgdir/usr/share/licenses/sudo"
}

#---- license gpg-key sha256sums ----

license=('custom')

validpgpkeys=('59D1E9CCBA2B376704FDD35BA9F4C021CEA470FB') # "Todd C. Miller <Todd.Miller@sudo.ws>"

sha256sums=(b9a0b1ae0f1ddd9be7f3eafe70be05ee81f572f6f536632c44cd4101bb2a8539  # sudo-1.9.12p2.tar.gz
	334665e5483a135eb30a195d29512693b4e29f44ca05a9c30090a4141bc5b67e  # sudo-1.9.12p2.tar.gz.sig
	d1738818070684a5d2c9b26224906aad69a4fea77aabd960fc2675aee2df1fa2) #  sudo.pam