sys-fs/ecryptfs-utils: import version 91 from Gentoo's main tree

This version includes upstream the pkg-config NSS check, and two more
security-sensitive issues.

BUG=none
TEST=emerge-{x86,arm}-generic ecryptfs-utils

Change-Id: I0401838ad1bb59393c6fd7a3e4b161b6dca4e449
Reviewed-on: http://gerrit.chromium.org/gerrit/6965
Reviewed-by: Luigi Semenzato <semenzato@chromium.org>
Tested-by: Diego Elio Pettenò <flameeyes@chromium.org>
This commit is contained in:
Diego Elio Pettenò 2011-08-31 02:19:34 +02:00
parent ecc75c9454
commit 75b49e5f77

View File

@ -0,0 +1,140 @@
# Copyright 1999-2011 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-fs/ecryptfs-utils/ecryptfs-utils-91.ebuild,v 1.1 2011/09/01 11:19:06 flameeyes Exp $
EAPI="3"
PYTHON_DEPEND="python? 2:2.5"
SUPPORT_PYTHON_ABIS="1"
RESTRICT_PYTHON_ABIS="2.4 3.* *-jython"
inherit flag-o-matic pam python linux-info autotools
DESCRIPTION="eCryptfs userspace utilities"
HOMEPAGE="http://launchpad.net/ecryptfs"
SRC_URI="http://launchpad.net/ecryptfs/trunk/${PV}/+download/${PN}_${PV}.orig.tar.gz"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~amd64 ~x86"
IUSE="doc gpg gtk openssl pam pkcs11 python suid tpm"
RDEPEND=">=sys-apps/keyutils-1.0
>=dev-libs/libgcrypt-1.2.0
dev-libs/nss
gpg? ( app-crypt/gpgme )
gtk? ( x11-libs/gtk+:2 )
openssl? ( >=dev-libs/openssl-0.9.7 )
pam? ( sys-libs/pam )
pkcs11? (
>=dev-libs/openssl-0.9.7
>=dev-libs/pkcs11-helper-1.04
)
tpm? ( app-crypt/trousers )"
DEPEND="${RDEPEND}
>=dev-util/pkgconfig-0.9.0
sys-devel/gettext
>=dev-util/intltool-0.41.0
python? ( dev-lang/swig )"
pkg_setup() {
if use python; then
python_pkg_setup
fi
CONFIG_CHECK="~ECRYPT_FS"
linux-info_pkg_setup
}
src_prepare() {
echo "#!/bin/sh" > py-compile
# Python bindings are built/installed manually.
sed -e "/SUBDIRS =/s/ libecryptfs-swig//" -i src/Makefile.am || die "sed failed"
eautoreconf
}
src_configure() {
append-flags -D_FILE_OFFSET_BITS=64
econf \
--docdir="/usr/share/doc/${PF}" \
--enable-nss \
--with-pamdir=$(getpam_mod_dir) \
$(use_enable doc docs) \
$(use_enable gpg) \
$(use_enable gtk gui) \
$(use_enable openssl) \
$(use_enable pam) \
$(use_enable pkcs11 pkcs11-helper) \
$(use_enable python pywrap) \
$(use_enable tpm tspi)
}
src_compile() {
default
if use python; then
python_copy_sources src/libecryptfs-swig
building() {
emake \
PYTHON="$(PYTHON)" \
PYTHON_CPPFLAGS="-I$(python_get_includedir)" \
PYTHON_LDFLAGS="-L$(python_get_libdir) $(python_get_library -l)" \
PYTHON_SITE_PKG="$(python_get_sitedir)" \
PYTHON_VERSION="$(python_get_version)" \
SWIG_PYTHON_CPPFLAGS="-I$(python_get_includedir)" \
pyexecdir="$(python_get_sitedir)" \
pythondir="$(python_get_sitedir)"
}
python_execute_function -s --source-dir src/libecryptfs-swig building
fi
}
src_install(){
emake DESTDIR="${D}" install || die "emake install failed"
if use python; then
installation() {
emake \
DESTDIR="${D}" \
PYTHON="$(PYTHON)" \
PYTHON_CPPFLAGS="-I$(python_get_includedir)" \
PYTHON_LDFLAGS="-L$(python_get_libdir) $(python_get_library -l)" \
PYTHON_SITE_PKG="$(python_get_sitedir)" \
PYTHON_VERSION="$(python_get_version)" \
SWIG_PYTHON_CPPFLAGS="-I$(python_get_includedir)" \
pyexecdir="$(python_get_sitedir)" \
pythondir="$(python_get_sitedir)" \
install || return 1
echo "ecryptfs-utils" > "${ED}$(python_get_sitedir)/ecryptfs-utils.pth"
}
python_execute_function -s --source-dir src/libecryptfs-swig installation
python_clean_installation_image
fi
use suid && fperms u+s /sbin/mount.ecryptfs_private
find "${D}" -name '*.la' -exec rm -f '{}' +
}
pkg_postinst() {
if use python; then
python_mod_optimize ecryptfs-utils
fi
if use suid; then
ewarn
ewarn "You have chosen to install ${PN} with the binary setuid root. This"
ewarn "means that if there are any undetected vulnerabilities in the binary,"
ewarn "then local users may be able to gain root access on your machine."
ewarn
fi
}
pkg_postrm() {
if use python; then
python_mod_cleanup ecryptfs-utils
fi
}