app-admin/sudo: Fixed /var/db/sudo permissions for real.
authorLars Wendler <polynomial-c@gentoo.org>
Wed, 11 Apr 2018 18:06:21 +0000 (20:06 +0200)
committerLars Wendler <polynomial-c@gentoo.org>
Wed, 11 Apr 2018 18:06:36 +0000 (20:06 +0200)
Thanks to Arfrever for pointing out that portage does not change
permissions on alrady existing directories.

Bug: https://bugs.gentoo.org/652958
Package-Manager: Portage-2.3.28, Repoman-2.3.9

app-admin/sudo/sudo-1.8.22-r2.ebuild [moved from app-admin/sudo/sudo-1.8.22-r1.ebuild with 97% similarity]
app-admin/sudo/sudo-1.8.23_beta2.ebuild
app-admin/sudo/sudo-9999.ebuild

similarity index 97%
rename from app-admin/sudo/sudo-1.8.22-r1.ebuild
rename to app-admin/sudo/sudo-1.8.22-r2.ebuild
index c10b8c22211662aeb0bcab586761a373539b52fc..69f1266724a4a8874690eb28b71dc91af6b53ba1 100644 (file)
@@ -179,6 +179,12 @@ src_install() {
 }
 
 pkg_postinst() {
+       #652958
+       local sudo_db="${EROOT}/var/db/sudo"
+       if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then
+               chmod 711 "${sudo_db}" || die
+       fi
+
        if use ldap ; then
                ewarn
                ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration."
index eaac5af0379b7a093ca42a7493a6f677b2d6ab9b..b9b3625caaef76dacbb4b300a77d0caadabcdf60 100644 (file)
@@ -179,6 +179,12 @@ src_install() {
 }
 
 pkg_postinst() {
+       #652958
+       local sudo_db="${EROOT}/var/db/sudo"
+       if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then
+               chmod 711 "${sudo_db}" || die
+       fi
+
        if use ldap ; then
                ewarn
                ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration."
index 82d9551bad8b16f2851c682a77f6ce41d3bc3c79..661869d15fc286815b6a27a367885dc89a8eab02 100644 (file)
@@ -185,6 +185,12 @@ src_install() {
 }
 
 pkg_postinst() {
+       #652958
+       local sudo_db="${EROOT}/var/db/sudo"
+       if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then
+               chmod 711 "${sudo_db}" || die
+       fi
+
        if use ldap ; then
                ewarn
                ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration."