Massimiliano Torromeo pushed to branch main at Arch Linux / Packaging /
Packages / sssd
Commits:
842da4ab by Massimiliano Torromeo at 2024-12-15T10:29:30+01:00
upgpkg: 2.10.1-3: Fixed binaries' capabilities set (Fixes #6)
- - - - -
3 changed files:
- .SRCINFO
- PKGBUILD
- sssd-perms.service
Changes:
=====================================
.SRCINFO
=====================================
@@ -1,7 +1,7 @@
pkgbase = sssd
pkgdesc = System Security Services Daemon
pkgver = 2.10.1
- pkgrel = 2
+ pkgrel = 3
url = https://github.com/SSSD/sssd
arch = x86_64
license = GPL-3.0-or-later
@@ -43,7 +43,7 @@ pkgbase = sssd
validpgpkeys = C13CD07FFB2DB1408E457A3CD3D21B2910CF6759
sha512sums =
001ff9cd60aa510ead11e418a1b96714136cc270b29551027cb12c340744890b358da5900a10863d4df649ad073f14f6f26c28e3f973b1cd5c2ab61f2a2a045b
sha512sums = SKIP
- sha512sums =
382b38070343440a5807d81993e696e28b04658c9f4c71cfafcd0032b79e2f0a70ec0283f0a40808f29395a8313e7f64a5cc095692bd05f8e2270876768c58b5
+ sha512sums =
aec6bac39318db2b66ebdbae5fb78db758951f53f0f3385b33b4a6d16341f11296faed147520b2d60f1b25e0cb7ca78565ffbdc27b2102f1f28c2250f1b63582
sha512sums =
21646ea5900340c1b0a69c79fc72b0d3e360d56e04dc0daf7947024a420d214a931365e684e8f7cfd37c959327e6909ad4c0d6c3a8186153bca870f508dad486
pkgname = sssd
=====================================
PKGBUILD
=====================================
@@ -3,7 +3,7 @@
pkgname=sssd
pkgver=2.10.1
-pkgrel=2
+pkgrel=3
pkgdesc="System Security Services Daemon"
arch=('x86_64')
url="https://github.com/SSSD/sssd";
@@ -50,7 +50,7 @@
source=("https://github.com/SSSD/$pkgname/releases/download/$pkgver/$pkgname-$pk
"sssd-perms.tmpfile")
sha512sums=('001ff9cd60aa510ead11e418a1b96714136cc270b29551027cb12c340744890b358da5900a10863d4df649ad073f14f6f26c28e3f973b1cd5c2ab61f2a2a045b'
'SKIP'
-
'382b38070343440a5807d81993e696e28b04658c9f4c71cfafcd0032b79e2f0a70ec0283f0a40808f29395a8313e7f64a5cc095692bd05f8e2270876768c58b5'
+
'aec6bac39318db2b66ebdbae5fb78db758951f53f0f3385b33b4a6d16341f11296faed147520b2d60f1b25e0cb7ca78565ffbdc27b2102f1f28c2250f1b63582'
'21646ea5900340c1b0a69c79fc72b0d3e360d56e04dc0daf7947024a420d214a931365e684e8f7cfd37c959327e6909ad4c0d6c3a8186153bca870f508dad486')
validpgpkeys=('C13CD07FFB2DB1408E457A3CD3D21B2910CF6759')
@@ -126,8 +126,8 @@ package() {
install -Dm0644 "$srcdir"/sssd-perms.tmpfile
"$pkgdir"/usr/lib/tmpfiles.d/sssd-perms.conf
install -Dm0644 "$srcdir"/sssd-perms.service
"$pkgdir"/usr/lib/systemd/system/sssd.service.d/10-perms.conf
- setcap cap_chown,cap_dac_override,cap_setuid,cap_setgid=ep
"$pkgdir"/usr/lib/sssd/sssd/krb5_child
- setcap cap_chown,cap_dac_override,cap_setuid,cap_setgid=ep
"$pkgdir"/usr/lib/sssd/sssd/ldap_child
+ setcap cap_dac_read_search,cap_setgid,cap_setuid=p
"$pkgdir"/usr/lib/sssd/sssd/krb5_child
+ setcap cap_dac_read_search=p "$pkgdir"/usr/lib/sssd/sssd/ldap_child
setcap cap_dac_read_search=p "$pkgdir"/usr/lib/sssd/sssd/sssd_pam
cd "$srcdir"
=====================================
sssd-perms.service
=====================================
@@ -1,8 +1,8 @@
[Service]
ExecStartPre=+-/usr/bin/chmod -R u+rw,o-rwx /etc/sssd
ExecStartPre=+-/usr/bin/chgrp sssd /usr/lib/sssd/sssd/krb5_child
-ExecStartPre=+-/usr/bin/setcap
cap_chown,cap_dac_override,cap_setuid,cap_setgid=ep
/usr/lib/sssd/sssd/krb5_child
+ExecStartPre=+-/usr/bin/setcap cap_dac_read_search,cap_setgid,cap_setuid=p
/usr/lib/sssd/sssd/krb5_child
ExecStartPre=+-/usr/bin/chgrp sssd /usr/lib/sssd/sssd/ldap_child
-ExecStartPre=+-/usr/bin/setcap
cap_chown,cap_dac_override,cap_setuid,cap_setgid=ep
/usr/lib/sssd/sssd/ldap_child
+ExecStartPre=+-/usr/bin/setcap cap_dac_read_search=p
/usr/lib/sssd/sssd/ldap_child
ExecStartPre=+-/usr/bin/chgrp sssd /usr/lib/sssd/sssd/sssd_pam
ExecStartPre=+-/usr/bin/setcap cap_dac_read_search=p
/usr/lib/sssd/sssd/sssd_pam
View it on GitLab:
https://gitlab.archlinux.org/archlinux/packaging/packages/sssd/-/commit/842da4abcdfbcc87b67190bc869c475a03a5b885
--
View it on GitLab:
https://gitlab.archlinux.org/archlinux/packaging/packages/sssd/-/commit/842da4abcdfbcc87b67190bc869c475a03a5b885
You're receiving this email because of your account on gitlab.archlinux.org.
