freebsd-ports/security/trousers/Makefile
Mateusz Piotrowski 47c2569d89 security/trousers: Fix tcsd.conf permissions
It turns out that tcsd requires the ownership of tcsd.conf file to be
set to root:_tss.  See trousers-0.3.14_3/src/tcsd/tcsd_conf.c for
details. Otherwise, tcsd fails:

    # service tcsd start
    Starting tcsd.
    /usr/local/etc/rc.d/tcsd: WARNING: failed to start tcsd
    # tail /var/log/messages
    Nov  4 11:24:43 x TCSD[1298]: TrouSerS ERROR: TCSD config file (/usr/local/etc/tcsd.conf) must be user/group root/_tss
    Nov  4 11:24:43 x 0mp[2372]: /usr/local/etc/rc.d/tcsd: WARNING: failed to start tcsd

Also, the mode of the configuration file has to be 640.

PR:		253858
Reported by:	unitrunker <unitrunker@gmail.com>
Approved by:	maintainer timeout, portmgr blanket (runtime error)
Sponsored by:	Klara, Inc.
2022-11-04 12:05:09 +01:00

49 lines
1.2 KiB
Makefile

PORTNAME= trousers
PORTVERSION= 0.3.14
PORTREVISION= 4
CATEGORIES= security
MASTER_SITES= SF
MAINTAINER= hrs@FreeBSD.org
COMMENT= Open-source TCG Software Stack
WWW= https://sourceforge.net/projects/trousers/
LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/LICENSE
BUILD_DEPENDS= tpm-emulator>=0.7.4_1:emulators/tpm-emulator
RUN_DEPENDS:= ${BUILD_DEPENDS}
USES= cpe dos2unix alias autoreconf gmake iconv libtool pkgconfig ssl
CPE_VENDOR= ${PORTNAME}_project
DOS2UNIX_GLOB= *.h *.c
NO_WRKSUBDIR= yes
USE_LDCONFIG= YES
USE_RC_SUBR= tcsd
INSTALL_TARGET= install-strip
GNU_CONFIGURE= YES
CONFIGURE_ARGS= --with-gui=none --enable-static \
--localstatedir=${PREFIX}/var \
--with-tssuser=${USERS} \
--with-tssgroup=${GROUPS} \
--with-openssl=${OPENSSLBASE} \
RANLIB=:
MAKE_ENV= ICONV_LIB=${ICONV_LIB} \
ICONV_PREFIX=${ICONV_PREFIX}
CFLAGS+= -I${OPENSSLINC}
LDFLAGS+= -L${OPENSSLLIB}
SUB_FILES= pkg-message
SUB_LIST= USERS="${USERS}" GROUPS="${GROUPS}"
PLIST_SUB= USERS="${USERS}" GROUPS="${GROUPS}"
USERS= _tss
GROUPS= _tss
OPTIONS_DEFINE= DEBUG
DEBUG_CONFIGURE_ENABLE= debug
post-install:
${INSTALL_DATA} \
${WRKSRC}/dist/tcsd.conf ${STAGEDIR}${PREFIX}/etc/tcsd.conf.sample
@${MKDIR} ${STAGEDIR}${PREFIX}/var/lib/tpm
.include <bsd.port.mk>