From a2f1445f4384dc3f2b443bb2cd58c4042471f4ac Mon Sep 17 00:00:00 2001 From: Johannes Date: Sun, 11 Nov 2018 14:39:21 +0100 Subject: [PATCH] pam_rundir: remove patch setting SECBIT_NO_SETUID_FIXUP in a pam module is a bad idea: https://github.com/void-linux/void-packages/issues/4417 --- srcpkgs/pam_rundir/patches/fix.diff | 21 --------------------- srcpkgs/pam_rundir/template | 4 ++-- 2 files changed, 2 insertions(+), 23 deletions(-) delete mode 100644 srcpkgs/pam_rundir/patches/fix.diff diff --git a/srcpkgs/pam_rundir/patches/fix.diff b/srcpkgs/pam_rundir/patches/fix.diff deleted file mode 100644 index 859d1d4a8d..0000000000 --- a/srcpkgs/pam_rundir/patches/fix.diff +++ /dev/null @@ -1,21 +0,0 @@ ---- pam_rundir.c -+++ pam_rundir.c -@@ -24,6 +24,8 @@ - #include - #include - #include -+#include -+#include - #include - #include - #include -@@ -396,6 +398,9 @@ pam_sm_open_session (pam_handle_t *pamh, int flags, int argc, const char **argv) - goto done; - } - -+ /* to bypass permission checks for mkdir, in case it isn't group -+ * writable */ -+ prctl (PR_SET_SECUREBITS, SECBIT_NO_SETUID_FIXUP); - /* set euid so if we do create the dir, it is own by the user */ - if (seteuid (pw->pw_uid) < 0) - { diff --git a/srcpkgs/pam_rundir/template b/srcpkgs/pam_rundir/template index bff04fedd7..91fff55ec4 100644 --- a/srcpkgs/pam_rundir/template +++ b/srcpkgs/pam_rundir/template @@ -1,7 +1,7 @@ -# Template file for 'pam_rundir-1.0.0' +# Template file for 'pam_rundir' pkgname=pam_rundir version=1.0.0 -revision=2 +revision=3 build_style=configure configure_args="--prefix=/usr --with-parentdir=/run/user" makedepends="pam-devel"