From: Lars Wendler <polynomial-c@gentoo.org>
Date: Wed, 11 Apr 2018 18:06:21 +0000 (+0200)
Subject: app-admin/sudo: Fixed /var/db/sudo permissions for real.
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=7c05e207dad4f635796bb3bd04cc38fbe46adfc7;p=gentoo.git

app-admin/sudo: Fixed /var/db/sudo permissions for real.

Thanks to Arfrever for pointing out that portage does not change
permissions on alrady existing directories.

Bug: https://bugs.gentoo.org/652958
Package-Manager: Portage-2.3.28, Repoman-2.3.9
---

diff --git a/app-admin/sudo/sudo-1.8.22-r1.ebuild b/app-admin/sudo/sudo-1.8.22-r2.ebuild
similarity index 97%
rename from app-admin/sudo/sudo-1.8.22-r1.ebuild
rename to app-admin/sudo/sudo-1.8.22-r2.ebuild
index c10b8c222116..69f1266724a4 100644
--- a/app-admin/sudo/sudo-1.8.22-r1.ebuild
+++ b/app-admin/sudo/sudo-1.8.22-r2.ebuild
@@ -179,6 +179,12 @@ src_install() {
 }
 
 pkg_postinst() {
+	#652958
+	local sudo_db="${EROOT}/var/db/sudo"
+	if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then
+		chmod 711 "${sudo_db}" || die
+	fi
+
 	if use ldap ; then
 		ewarn
 		ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration."
diff --git a/app-admin/sudo/sudo-1.8.23_beta2.ebuild b/app-admin/sudo/sudo-1.8.23_beta2.ebuild
index eaac5af0379b..b9b3625caaef 100644
--- a/app-admin/sudo/sudo-1.8.23_beta2.ebuild
+++ b/app-admin/sudo/sudo-1.8.23_beta2.ebuild
@@ -179,6 +179,12 @@ src_install() {
 }
 
 pkg_postinst() {
+	#652958
+	local sudo_db="${EROOT}/var/db/sudo"
+	if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then
+		chmod 711 "${sudo_db}" || die
+	fi
+
 	if use ldap ; then
 		ewarn
 		ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration."
diff --git a/app-admin/sudo/sudo-9999.ebuild b/app-admin/sudo/sudo-9999.ebuild
index 82d9551bad8b..661869d15fc2 100644
--- a/app-admin/sudo/sudo-9999.ebuild
+++ b/app-admin/sudo/sudo-9999.ebuild
@@ -185,6 +185,12 @@ src_install() {
 }
 
 pkg_postinst() {
+	#652958
+	local sudo_db="${EROOT}/var/db/sudo"
+	if [[ "$(stat -c %a "${sudo_db}")" -ne 711 ]] ; then
+		chmod 711 "${sudo_db}" || die
+	fi
+
 	if use ldap ; then
 		ewarn
 		ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration."