jobcore/sudo/PKGBUILD
2022-11-15 17:49:16 +02:00

91 lines
2.6 KiB
Bash

#!/usr/bin/bash
# JOBoRun : Jwm OpenBox Obarun RUNit
# Maintainer : Joe Bo Run <joborun@disroot.org>
# PkgSource : url="https://gittea.disroot.org/joborun-pkg/jobcore/$pkgname"
# Website : https://pozol.eu
#-----------------------------------------| DESCRIPTION |---------------------------------------
pkgname=sudo
_sudover=1.9.12p1
pkgrel=01
pkgver=${_sudover/p/.p}
pkgdesc="Give certain users the ability to run some commands as root w/o systemd"
arch=('x86_64')
url="https://www.sudo.ws/sudo/"
groups=( jobbot )
depends=('glibc' 'openssl' 'pam' 'libldap' 'zlib')
backup=('etc/pam.d/sudo'
'etc/sudo.conf'
'etc/sudo_logsrvd.conf'
'etc/sudoers')
install=$pkgname.install
source=(https://www.sudo.ws/sudo/dist/$pkgname-$_sudover.tar.gz{,.sig}
# $pkgname-CVE-2022-43995.patch::https://github.com/sudo-project/sudo/commit/bd209b9f16fc.patch
# sudo_logsrvd.service
sudo.pam)
prepare() {
cd $pkgname-$_sudover
# # fix CVE-2022-43995 (potential heap overflow for passwords < 8 characters)
# patch -Np1 -i ../$pkgname-CVE-2022-43995.patch
}
build() {
cd $pkgname-$_sudover
./configure \
--prefix=/usr \
--sbindir=/usr/bin \
--libexecdir=/usr/lib \
--with-rundir=/run/sudo \
--with-vardir=/var/db/sudo \
--with-logfac=auth \
--enable-tmpfiles.d \
--with-pam \
--with-sssd \
--with-ldap \
--with-ldap-conf-file=/etc/openldap/ldap.conf \
--with-env-editor \
--with-passprompt="[sudo] password for %p: " \
--with-insults=no
make
}
# # fails 2 checks and fails to build with check
# # again 1.10 fails 2 tests
#check() {
# cd "$srcdir/$pkgname-$_sudover"
# make check
#}
#
package() {
depends+=('libcrypto.so' 'libssl.so')
cd $pkgname-$_sudover
make DESTDIR="$pkgdir" install
# Remove sudoers.dist; not needed since pacman manages updates to sudoers
rm "$pkgdir/etc/sudoers.dist"
# Remove /run/sudo directory; we create it using systemd-tmpfiles
## useless as well in joborun-pkg
rmdir "$pkgdir/run/sudo"
rmdir "$pkgdir/run"
install -Dm644 "$srcdir/sudo.pam" "$pkgdir/etc/pam.d/sudo"
install -Dm644 LICENSE.md -t "$pkgdir/usr/share/licenses/sudo"
}
#---- license gpg-key sha256sums ----
license=('custom')
validpgpkeys=('59D1E9CCBA2B376704FDD35BA9F4C021CEA470FB') # "Todd C. Miller <Todd.Miller@sudo.ws>"
sha256sums=(475a18a8eb3da8b2917ceab063a6baf51ea09128c3c47e3e0e33ab7497bab7d8 # sudo-1.9.12p1.tar.gz
cfb77122745c103169f52c4c212449d64d67acff5458dbb81cc159c283f615b7 # sudo-1.9.12p1.tar.gz.sig
d1738818070684a5d2c9b26224906aad69a4fea77aabd960fc2675aee2df1fa2) # sudo.pam