commit: 6ffe958d31b462766074dc3418f06dc8dea5b253
Author: Florian Schmaus <flow <AT> gentoo <DOT> org>
AuthorDate: Mon May 9 13:47:05 2022 +0000
Commit: Florian Schmaus <flow <AT> gentoo <DOT> org>
CommitDate: Mon May 9 13:49:18 2022 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6ffe958d
net-analyzer/ospd-openvas: LICENSE, DISTUTILS_USE_PEP517, sudoers
Signed-off-by: Florian Schmaus <flow <AT> gentoo.org>
...as-21.4.4-r3.ebuild => ospd-openvas-21.4.4-r4.ebuild} | 16 +++++++++++-----
1 file changed, 11 insertions(+), 5 deletions(-)
diff --git a/net-analyzer/ospd-openvas/ospd-openvas-21.4.4-r3.ebuild
b/net-analyzer/ospd-openvas/ospd-openvas-21.4.4-r4.ebuild
similarity index 81%
rename from net-analyzer/ospd-openvas/ospd-openvas-21.4.4-r3.ebuild
rename to net-analyzer/ospd-openvas/ospd-openvas-21.4.4-r4.ebuild
index e6e08ba90a4d..a7791ba4ba27 100644
--- a/net-analyzer/ospd-openvas/ospd-openvas-21.4.4-r3.ebuild
+++ b/net-analyzer/ospd-openvas/ospd-openvas-21.4.4-r4.ebuild
@@ -4,14 +4,14 @@
EAPI=8
PYTHON_COMPAT=( python3_{8..10} )
-DISTUTILS_USE_SETUPTOOLS=pyproject.toml
+DISTUTILS_USE_PEP517=poetry
inherit distutils-r1 systemd
DESCRIPTION="This is an OSP server implementation to allow GVM to remotely
control OpenVAS"
-HOMEPAGE="https://github.com/greenbone/ospd-openvas"
+HOMEPAGE="https://www.greenbone.net https://github.com/greenbone/ospd-openvas"
SRC_URI="https://github.com/greenbone/ospd-openvas/archive/v${PV}.tar.gz ->
${P}.tar.gz"
-LICENSE="GPL-2"
+LICENSE="AGPL-3+ GPL-2+"
SLOT="0"
KEYWORDS="~amd64 ~x86"
IUSE="doc"
@@ -29,6 +29,7 @@ DEPEND="
"
RDEPEND="
${DEPEND}
+ app-admin/sudo
>=net-analyzer/openvas-scanner-${PV}
"
@@ -55,8 +56,6 @@ python_compile() {
python_install() {
distutils-r1_python_install
- dodoc "${FILESDIR}"/redis.conf.example
-
insinto /etc/gvm
doins config/${PN}.conf
if ! use prefix; then
@@ -67,4 +66,11 @@ python_install() {
newconfd "${FILESDIR}/${PN}.confd" "${PN}"
systemd_dounit config/${PN}.service
+
+ # OSPD OpenVAS attempts to call openvas via sudo as network security
+ # scanning often requires priviliged operations.
+ insinto /etc/sudoers.d
+ newins - openvas <<-EOF
+ gvm ALL = NOPASSWD: /usr/bin/openvas
+EOF
}