Add checkpassword-suid option, off by default.

mk/defaults/options.description

@@ -83,6 +83,7 @@ cerf			Enable libcerf support.
 cg			Add support for the Cg compiler.
 cgi			Enable CGI support.
 chasen			Use ChaSen as the Japanese Morphological Analzer.
+checkpassword-suid	Install checkpassword executable setuid root.
 cjk			Enable Chinese/Japanese/Korean support.
 clamav			Enable ClamAV support.
 clang-static-analyzer	Install the clang static analyzer.

sysutils/checkpassword-pam/Makefile

@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.8 2014/10/09 14:06:57 wiz Exp $
+# $NetBSD: Makefile,v 1.9 2017/01/09 04:01:32 schmonz Exp $
 #
 
 DISTNAME=		checkpassword-pam-0.99
@@ -12,6 +12,10 @@ COMMENT=		PAM checkpassword-compatible authentication program
 USE_PKGLOCALEDIR=	yes
 GNU_CONFIGURE=		yes
 
+CHECKPASSWORD_BIN=	bin/checkpassword-pam
+
+.include "../../sysutils/checkpassword/options.mk"
+
 INSTALLATION_DIRS=	bin ${PKGMANDIR}/man8
 
 .include "../../mk/pam.buildlink3.mk"

sysutils/checkpassword/Makefile

@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.16 2014/10/09 14:06:57 wiz Exp $
+# $NetBSD: Makefile,v 1.17 2017/01/09 04:01:32 schmonz Exp $
 #
 
 DISTNAME=		checkpassword-0.90
@@ -11,6 +11,8 @@ COMMENT=		Simple, uniform password-checking interface to all root applications
 
 DJB_RESTRICTED=		YES
 
+CHECKPASSWORD_BIN=	bin/checkpassword
+
 INSTALLATION_DIRS=	bin
 
 do-install:

sysutils/checkpassword/options.mk

@@ -0,0 +1,10 @@
+# $NetBSD: options.mk,v 1.1 2017/01/09 04:01:32 schmonz Exp $
+
+PKG_OPTIONS_VAR=		PKG_OPTIONS.checkpassword
+PKG_SUPPORTED_OPTIONS+=		checkpassword-suid
+
+.include "../../mk/bsd.options.mk"
+
+.if !empty(PKG_OPTIONS:Mcheckpassword-suid)
+SPECIAL_PERMS+=			${CHECKPASSWORD_BIN} ${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 4755
+.endif