From: Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org>
Date: Mon, 23 Dec 2019 21:18:36 +0000 (+0000)
Subject: app-i18n/librime: Set secure mode of log files.
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=d149e41c89b85dff47bd5cdc332e6c0817acdd72;p=gentoo.git

app-i18n/librime: Set secure mode of log files.

Bug: https://bugs.gentoo.org/695702
Signed-off-by: Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org>
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
---

diff --git a/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch
new file mode 100644
index 000000000000..7a36dea64d24
--- /dev/null
+++ b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch
@@ -0,0 +1,14 @@
+https://github.com/rime/librime/issues/316
+https://github.com/rime/librime/commit/90839b0b3d47cbfef715ea5f061c7505666ff75d
+
+--- /src/rime/setup.cc
++++ /src/rime/setup.cc
+@@ -35,6 +35,8 @@
+ 
+ RIME_API void SetupLogging(const char* app_name) {
+ #ifdef RIME_ENABLE_LOGGING
++  // Do not allow other users to read/write log files created by current process.
++  FLAGS_logfile_mode = 0600;
+   google::InitGoogleLogging(app_name);
+ #endif  // RIME_ENABLE_LOGGING
+ }
diff --git a/app-i18n/librime/librime-1.5.3.ebuild b/app-i18n/librime/librime-1.5.3-r1.ebuild
similarity index 95%
rename from app-i18n/librime/librime-1.5.3.ebuild
rename to app-i18n/librime/librime-1.5.3-r1.ebuild
index 9827ea65ff66..b41cd0ea4399 100644
--- a/app-i18n/librime/librime-1.5.3.ebuild
+++ b/app-i18n/librime/librime-1.5.3-r1.ebuild
@@ -28,7 +28,7 @@ RESTRICT="!test? ( test )"
 
 BDEPEND=""
 RDEPEND="app-i18n/opencc:0=
-	dev-cpp/glog:0=
+	>=dev-cpp/glog-0.3.5:0=
 	dev-cpp/yaml-cpp:0=
 	dev-libs/boost:0=[nls,threads]
 	dev-libs/leveldb:0=
@@ -39,6 +39,10 @@ DEPEND="${RDEPEND}
 	x11-base/xorg-proto
 	test? ( dev-cpp/gtest )"
 
+PATCHES=(
+	"${FILESDIR}/${P}-log_files_mode.patch"
+)
+
 DOCS=(CHANGELOG.md README.md)
 
 src_prepare() {