commit:     911b35667b9e66b5d29f0ef2927219cacabd2e30
Author:     Salah Coronya <salah.coronya <AT> gmail <DOT> com>
AuthorDate: Thu May 14 03:12:06 2020 +0000
Commit:     Jason A. Donenfeld <zx2c4 <AT> gentoo <DOT> org>
CommitDate: Mon May 18 04:59:51 2020 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=911b3566

app-crypt/tpm2-tss: Fix sandbox violation for systemd users

Closes: https://bugs.gentoo.org/722864
Package-Manager: Portage-2.3.99, Repoman-2.3.22
Signed-off-by: Salah Coronya <salah.coronya <AT> gmail.com>
Signed-off-by: Jason A. Donenfeld <zx2c4 <AT> gentoo.org>

 ...-tss-2.4.0-Dont-run-systemd-sysusers-in-Makefile.patch | 15 +++++++++++++++
 app-crypt/tpm2-tss/tpm2-tss-2.4.0.ebuild                  |  5 +++--
 2 files changed, 18 insertions(+), 2 deletions(-)

diff --git 
a/app-crypt/tpm2-tss/files/tpm2-tss-2.4.0-Dont-run-systemd-sysusers-in-Makefile.patch
 
b/app-crypt/tpm2-tss/files/tpm2-tss-2.4.0-Dont-run-systemd-sysusers-in-Makefile.patch
new file mode 100644
index 00000000000..c916bbf0133
--- /dev/null
+++ 
b/app-crypt/tpm2-tss/files/tpm2-tss-2.4.0-Dont-run-systemd-sysusers-in-Makefile.patch
@@ -0,0 +1,15 @@
+diff --git a/Makefile.am b/Makefile.am
+index c543a287..58187f7e 100644
+--- a/Makefile.am
++++ b/Makefile.am
+@@ -558,10 +558,6 @@ uninstall-local:
+       -rm $(DESTDIR)$(udevrulesdir)/$(udevrulesprefix)tpm-udev.rules
+ endif
+ 
+-# Create tss user and FAPI directories directly after installation (vs. after 
a reboot)
+-install-exec-hook:
+-      systemd-sysusers && systemd-tmpfiles --create || true
+-
+ uninstall-hook:
+       cd $(DESTDIR)$(man3dir) && \
+               [ -L Tss2_TctiLdr_Initialize_Ex.3 ] && \

diff --git a/app-crypt/tpm2-tss/tpm2-tss-2.4.0.ebuild 
b/app-crypt/tpm2-tss/tpm2-tss-2.4.0.ebuild
index f8986d88dc9..76c8cc9bf6d 100644
--- a/app-crypt/tpm2-tss/tpm2-tss-2.4.0.ebuild
+++ b/app-crypt/tpm2-tss/tpm2-tss-2.4.0.ebuild
@@ -34,7 +34,8 @@ BDEPEND="virtual/pkgconfig
 
 PATCHES=(
        "${FILESDIR}/${PN}-2.4.0-fix-tmpfiles-path.patch"
-)
+       "${FILESDIR}/${PN}-2.4.0-Dont-run-systemd-sysusers-in-Makefile.patch"
+       )
 
 pkg_setup() {
        local CONFIG_CHECK=" \
@@ -57,7 +58,7 @@ src_configure() {
                --with-runstatedir=/run \
                --with-udevrulesdir="$(get_udevdir)/rules.d" \
                --with-udevrulesprefix=60- \
-               --with-sysusersdir="/usr/lib/sysusers.d"
+               --with-sysusersdir="/usr/lib/sysusers.d" \
                --with-tmpfilesdir="/usr/lib/tmpfiles.d"
 }
 

Reply via email to