diff options
author | maya <maya@pkgsrc.org> | 2017-01-29 23:24:10 +0000 |
---|---|---|
committer | maya <maya@pkgsrc.org> | 2017-01-29 23:24:10 +0000 |
commit | 2bfac21acfb7714aaf8ec0deba8a98f81f580997 (patch) | |
tree | f2e472d6af263a972fe53a1b7595d90a4b856b9b /multimedia | |
parent | 98e8e9113caaa1dad110f23a63310824458baa22 (diff) | |
download | pkgsrc-2bfac21acfb7714aaf8ec0deba8a98f81f580997.tar.gz |
gstreamer1: don't create a setuid binary by default, make an option for it.
gstreamer has gst-ptp-helper - helper for synchronizing time across
the network. I don't believe this option is useful enough to be a default,
but it poses a security risk.
For more information about PTP in Gstreamer, see the following post:
https://coaxion.net/blog/2015/05/ptp-network-clock-support-in-gstreamer/
bump PKGREVISION
Diffstat (limited to 'multimedia')
-rw-r--r-- | multimedia/gstreamer1/Makefile | 3 | ||||
-rw-r--r-- | multimedia/gstreamer1/options.mk | 14 |
2 files changed, 14 insertions, 3 deletions
diff --git a/multimedia/gstreamer1/Makefile b/multimedia/gstreamer1/Makefile index 6c09f6a8319..9df6f8e909a 100644 --- a/multimedia/gstreamer1/Makefile +++ b/multimedia/gstreamer1/Makefile @@ -1,7 +1,8 @@ -# $NetBSD: Makefile,v 1.27 2016/12/01 11:08:56 martin Exp $ +# $NetBSD: Makefile,v 1.28 2017/01/29 23:24:10 maya Exp $ DISTNAME= gstreamer-1.10.0 PKGNAME= ${DISTNAME:S/gstreamer/gstreamer1/} +PKGREVISION= 1 CATEGORIES= multimedia MASTER_SITES= http://gstreamer.freedesktop.org/src/gstreamer/ EXTRACT_SUFX= .tar.xz diff --git a/multimedia/gstreamer1/options.mk b/multimedia/gstreamer1/options.mk index b6f00d152ce..31cc9335d5c 100644 --- a/multimedia/gstreamer1/options.mk +++ b/multimedia/gstreamer1/options.mk @@ -1,7 +1,7 @@ -# $NetBSD: options.mk,v 1.5 2016/12/01 11:08:56 martin Exp $ +# $NetBSD: options.mk,v 1.6 2017/01/29 23:24:10 maya Exp $ PKG_OPTIONS_VAR= PKG_OPTIONS.gstreamer -PKG_SUPPORTED_OPTIONS= gstreamer-gstcheck introspection +PKG_SUPPORTED_OPTIONS= gstreamer-gstcheck introspection ptp-suid PKG_SUGGESTED_OPTIONS= introspection .include "../../mk/bsd.options.mk" @@ -22,3 +22,13 @@ PLIST.introspection=yes .else CONFIGURE_ARGS+=--disable-introspection .endif + +# PTP network clock requires setuid root for gst-ptp-helper +# It's not useful enough to be a default, but left as an option +# for those interested in it. +.if !empty(PKG_OPTIONS:Mptp-suid) +SPECIAL_PERMS+= libexec/gstreamer-1.0/gst-ptp-helper ${SETUID_ROOT_PERMS} +CONFIGURE_ARGS+= --with-ptp-helper-permissions=setuid-root +.else +CONFIGURE_ARGS+= --with-ptp-helper-permissions=none +.endif |