diff options
author | jlam <jlam@pkgsrc.org> | 2007-07-04 20:54:31 +0000 |
---|---|---|
committer | jlam <jlam@pkgsrc.org> | 2007-07-04 20:54:31 +0000 |
commit | 4390d56940778d6ab856866401c0690f1c28c724 (patch) | |
tree | 651c1d29a5b557efafa04d2bb6f2cb512a979f64 /security/base | |
parent | a6f8cbe795a03d65965cf24d3c410970c17f620e (diff) | |
download | pkgsrc-4390d56940778d6ab856866401c0690f1c28c724.tar.gz |
Make it easier to build and install packages "unprivileged", where
the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
Diffstat (limited to 'security/base')
-rw-r--r-- | security/base/Makefile | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/security/base/Makefile b/security/base/Makefile index 25962166101..3ff38f4b19a 100644 --- a/security/base/Makefile +++ b/security/base/Makefile @@ -1,4 +1,4 @@ -# $NetBSD: Makefile,v 1.14 2007/06/30 13:47:38 joerg Exp $ +# $NetBSD: Makefile,v 1.15 2007/07/04 20:54:56 jlam Exp $ # DISTNAME= base-1.3.6 @@ -33,10 +33,12 @@ MESSAGE_SUBST+= EGDIR=${EGDIR:Q} BASE_DIR=${BASE_DIR:Q} PAX_DIRS= admin help images includes languages scripts setup sql styles WWW_USER?= ${APACHE_USER} WWW_GROUP?= ${APACHE_GROUP} -BUILD_DEFS+= WWW_USER WWW_GROUP USE_TOOLS+= perl:run REPLACE_PERL+= scripts/base_maintenance.pl +PKG_GROUPS_VARS+= WWW_GROUP +PKG_USERS_VARS+= WWW_USER + CONF_FILES= ${EGDIR}/base.conf ${PKG_SYSCONFDIR}/base.conf CONF_FILES_PERMS= ${EGDIR}/base_conf.php ${BASE_DIR}/base_conf.php \ |