net-analyzer/pnp4nagios: new revision to fix insecure config permissions.
authorMichael Orlitzky <mjo@gentoo.org>
Thu, 2 Nov 2017 17:27:17 +0000 (13:27 -0400)
committerMichael Orlitzky <mjo@gentoo.org>
Sat, 4 Nov 2017 23:37:21 +0000 (19:37 -0400)
commit6a5bac28672abbc54f164d853d929a3e4d8b654d
tree97a9b1291eb6d90fd13e6e748b5646ca71cb875e
parent184ae2c637ba60cd8f65d33c9098a2f4a079b4dc
net-analyzer/pnp4nagios: new revision to fix insecure config permissions.

Previous revisions of pnp4nagios install /etc/pnp owned by the "nagios
user," and the npcd daemon also runs as that user. That configuration
is insecure: the unprivileged user can edit /etc/pnp/npcd.cfg, and
escalate his own privileges by setting "user = root". To avoid the
problem, we set INSTALL_OPTS="" while running "emake install". That
leaves all of /etc/pnp with the default (root:root) ownership.

Bug: https://github.com/lingej/pnp4nagios/issues/140
Package-Manager: Portage-2.3.8, Repoman-2.3.3
net-analyzer/pnp4nagios/pnp4nagios-0.6.26-r3.ebuild [moved from net-analyzer/pnp4nagios/pnp4nagios-0.6.26-r2.ebuild with 93% similarity]