app-i18n/librime: Set secure mode of log files.

Bug: https://bugs.gentoo.org/695702
Signed-off-by: Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org>
Signed-off-by: Mike Gilbert <floppym@gentoo.org>

diff --git a/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch
new file mode 100644 (file)
index 0000000..7a36dea
--- /dev/null
+++ b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch
@@ -0,0 +1,14 @@
+https://github.com/rime/librime/issues/316
+https://github.com/rime/librime/commit/90839b0b3d47cbfef715ea5f061c7505666ff75d
+
+--- /src/rime/setup.cc
++++ /src/rime/setup.cc
+@@ -35,6 +35,8 @@
+ 
+ RIME_API void SetupLogging(const char* app_name) {
+ #ifdef RIME_ENABLE_LOGGING
++  // Do not allow other users to read/write log files created by current process.
++  FLAGS_logfile_mode = 0600;
+   google::InitGoogleLogging(app_name);
+ #endif  // RIME_ENABLE_LOGGING
+ }

diff --git a/app-i18n/librime/librime-1.5.3.ebuild b/app-i18n/librime/librime-1.5.3-r1.ebuild
similarity index 95%
rename from app-i18n/librime/librime-1.5.3.ebuild
rename to app-i18n/librime/librime-1.5.3-r1.ebuild
index 9827ea65ff6646d99b4069df5889b14700db35d4..b41cd0ea43994cfa7a0b9d51482f699e36929fb7 100644 (file)
--- a/app-i18n/librime/librime-1.5.3.ebuild
+++ b/app-i18n/librime/librime-1.5.3-r1.ebuild
@@ -28,7 +28,7 @@ RESTRICT="!test? ( test )"
 
 BDEPEND=""
 RDEPEND="app-i18n/opencc:0=
-       dev-cpp/glog:0=
+       >=dev-cpp/glog-0.3.5:0=
        dev-cpp/yaml-cpp:0=
        dev-libs/boost:0=[nls,threads]
        dev-libs/leveldb:0=
@@ -39,6 +39,10 @@ DEPEND="${RDEPEND}
        x11-base/xorg-proto
        test? ( dev-cpp/gtest )"
 
+PATCHES=(
+       "${FILESDIR}/${P}-log_files_mode.patch"
+)
+
 DOCS=(CHANGELOG.md README.md)
 
 src_prepare() {