918d65cc09
that the file permissions should be fixed automatically. Moved the test whether this check should be enabled from ../install/install.mk to here. Renamed the target from check-perms to _check-perms.
74 lines
2 KiB
Makefile
74 lines
2 KiB
Makefile
# $NetBSD: check-perms.mk,v 1.4 2006/11/12 00:44:24 rillig Exp $
|
|
#
|
|
# This file checks that after installation of a package, all files and
|
|
# directories of that package have sensible permissions set.
|
|
#
|
|
# User-settable variables:
|
|
#
|
|
# CHECK_PERMS: YesNo (default: yes for PKG_DEVELOPER, no otherwise)
|
|
# Specifies whether the permissions check should be run at all.
|
|
#
|
|
# Package-settable variables:
|
|
#
|
|
# CHECK_PERMS_SKIP: List of PathMask (default: empty)
|
|
# A list of patterns (like man/*) that should be excluded from the
|
|
# check. Note that a * in a pattern also matches a slash in a
|
|
# pathname.
|
|
#
|
|
# CHECK_PERMS_AUTOFIX: YesNo
|
|
# If set to yes, any unusual permissions are fixed automatically.
|
|
#
|
|
|
|
.if defined(PKG_DEVELOPER)
|
|
CHECK_PERMS?= yes
|
|
.else
|
|
CHECK_PERMS?= no
|
|
.endif
|
|
|
|
CHECK_PERMS_SKIP?= # none
|
|
CHECK_PERMS_AUTOFIX?= no
|
|
|
|
.if !empty(CHECK_PERMS_AUTOFIX:M[Yy][Ee][Ss])
|
|
_CHECK_PERMS_FLAGS= -cff
|
|
.else
|
|
_CHECK_PERMS_FLAGS= -c
|
|
.endif
|
|
|
|
.if !empty(CHECK_PERMS:M[Yy][Ee][Ss])
|
|
privileged-install-hook: _check-perms
|
|
.endif
|
|
|
|
_CHECK_PERMS_CMD= ${LOCALBASE}/bin/checkperms
|
|
_CHECK_PERMS_GETDIRS_AWK= \
|
|
/.*/ { \
|
|
print $$0; \
|
|
dir = $$0; \
|
|
while (sub("/[^/]*$$", "", dir) && dir != "") { \
|
|
if (!(dir in dirs)) { \
|
|
dirs[dir] = "done"; \
|
|
print dir; \
|
|
} \
|
|
} \
|
|
}
|
|
|
|
_check-perms: .PHONY
|
|
@${STEP_MSG} "Checking file permissions in ${PKGNAME}"
|
|
${_PKG_SILENT}${_PKG_DEBUG} set -eu; \
|
|
${PKG_INFO} -qe "checkperms>=1.1" \
|
|
|| { \
|
|
${WARNING_MSG} "[check-perms.mk] Skipping file permissions check."; \
|
|
${WARNING_MSG} "[check-perms.mk] Install sysutils/checkperms to enable this check."; \
|
|
exit 0; \
|
|
}; \
|
|
${PKG_FILELIST_CMD} \
|
|
| sort \
|
|
| sed -e 's,\\,\\\\,g' \
|
|
| while read file; do \
|
|
case "$$file" in \
|
|
${CHECK_PERMS_SKIP:@p@${PREFIX}/${p}|${p}) continue ;;@}\
|
|
*) ;; \
|
|
esac; \
|
|
printf "%s\\n" "$$file"; \
|
|
done \
|
|
| awk ${_CHECK_PERMS_GETDIRS_AWK:Q} \
|
|
| ${_CHECK_PERMS_CMD} ${_CHECK_PERMS_FLAGS}
|