jcgruenhage/void-packages
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

dhcpcd: make privsep a build option and disable it

Browse source 
dhcpcd's privsep is seccomp based and thus shits the bed on a whim (e.g.
different CPU architectures or upstream libc changes).

Disable it by default, but leave the option around if somebody really
needs it (hint: they can probably just use the AppArmor profile).
This commit is contained in:
Cameron Nemo 2020-09-12 11:38:57 -07:00 committed by Daniel Kolesa
parent bd5cb695e0
commit 01077a468d
1 changed files with 8 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
srcpkgs/dhcpcd/template
View file

@ -1,10 +1,12 @@
# Template file for 'dhcpcd' # Template file for 'dhcpcd'
pkgname=dhcpcd pkgname=dhcpcd
version=9.3.2 version=9.3.2
revision=1 revision=2
build_style=configure build_style=configure
make_check_target=test make_check_target=test
configure_args="--prefix=/usr --sbindir=/usr/bin --sysconfdir=/etc --rundir=/run/dhcpcd --privsepuser=_dhcpcd" configure_args="
--prefix=/usr --sbindir=/usr/bin --sysconfdir=/etc --rundir=/run/dhcpcd
$(vopt_if privsep --privsepuser=_dhcpcd)"
hostmakedepends="ntp pkg-config" hostmakedepends="ntp pkg-config"
makedepends="eudev-libudev-devel" makedepends="eudev-libudev-devel"
short_desc="RFC2131 compliant DHCP client" short_desc="RFC2131 compliant DHCP client"
@ -15,10 +17,13 @@ distfiles="https://roy.marples.name/downloads/dhcpcd/dhcpcd-${version}.tar.xz"
checksum=6d49af5e766a2515e6366e4f669663df04ecdf90a1a60ddb1d7a2feb4b5d2566 checksum=6d49af5e766a2515e6366e4f669663df04ecdf90a1a60ddb1d7a2feb4b5d2566
lib32disabled=yes lib32disabled=yes
conf_files=/etc/dhcpcd.conf conf_files=/etc/dhcpcd.conf
# privsep
system_accounts="_dhcpcd" system_accounts="_dhcpcd"
_dhcpcd_homedir="/var/db/dhcpcd" _dhcpcd_homedir="/var/db/dhcpcd"
build_options="privsep"
desc_option_privsep="Enable privilege separation mode for the daemon"
post_install() { post_install() {
vsv dhcpcd vsv dhcpcd
vsv dhcpcd-eth0 vsv dhcpcd-eth0