sudo: Use systemd tmpfiles mechanism

[ipfire-3.x.git] / sudo / sudo.nm

###############################################################################
# IPFire.org    - An Open Source Firewall Solution                            #
# Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
###############################################################################

name       = sudo
version    = 1.9.12p1
release    = 2

groups     = Applications/System
url        = https://www.sudo.ws/
license    = BSD
summary    = Allows restricted root access for specified users

description
	Sudo (superuser do) allows a system administrator to give certain
	users (or groups of users) the ability to run some (or all) commands
	as root while logging all commands and arguments. Sudo operates on a
	per-command basis.  It is not a replacement for the shell.  Features
	include: the ability to restrict what commands a user may run on a
	per-host basis, copious logging of each command (providing a clear
	audit trail of who did what), a configurable timeout of the sudo
	command, and the ability to use the same configuration file (sudoers)
	on many different machines.
end

source_dl  = https://www.sudo.ws/sudo/dist/

build
	requires
		cyrus-sasl-devel
		openldap-devel
		pam-devel
	end

	export LD_LIBRARY_PATH = %{DIR_APP}/lib/util/.libs/

	configure_options += \
		--libexecdir=%{libdir} \
		--with-logging=syslog \
		--with-logfac=authpriv \
		--with-pam \
		--with-pam-login \
		--with-editor=%{bindir}/vi \
		--with-env-editor \
		--with-ignore-dot \
		--with-tty-tickets \
		--with-ldap \
		--with-passprompt="[sudo] password for %p: " \
		--enable-tmpfiles.d=%{tmpfilesdir}

	prepare_cmds
		# The tarball contains files owned by a stange uid:gid which will let
		# the testsuite (testsudoers/test3) fail. Fix the ownership of this files.
		chown -R 0:0 %{DIR_APP}
	end

	test
		make check
	end

	install_cmds
		mkdir -pv %{BUILDROOT}%{sysconfdir}
		cp -vf %{DIR_SOURCE}/sudoers %{BUILDROOT}%{sysconfdir}/sudoers

		# Do not ship /run
		rm -rvf %{BUILDROOT}/run
	end
end

packages
	package %{name}
		configfiles
			%{sysconfdir}/sudoers
		end
	end

	package %{name}-debuginfo
		template DEBUGINFO
	end
end