diff options
| author | Timo Teräs <timo.teras@iki.fi> | 2015-04-09 08:54:57 +0300 |
|---|---|---|
| committer | Timo Teräs <timo.teras@iki.fi> | 2015-04-09 08:54:57 +0300 |
| commit | 09a91e104ae245876aa575376bb0f4945e5c5757 (patch) | |
| tree | 0a9f77e8c31cf789c83fc1f4450544e90c23d4da | |
| parent | db1c4c43a2071de30f255d44c8ad4b0c157c6663 (diff) | |
| download | aports-09a91e104ae245876aa575376bb0f4945e5c5757.tar.bz2 aports-09a91e104ae245876aa575376bb0f4945e5c5757.tar.xz | |
main/pcsc-lite: fix sysfs access under grsec kernels
by granting dac_read_search to pcscd and hardening it's acl
ref #3280
| -rw-r--r-- | main/pcsc-lite/APKBUILD | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/main/pcsc-lite/APKBUILD b/main/pcsc-lite/APKBUILD index 2da2ee3eed..c9de7664cc 100644 --- a/main/pcsc-lite/APKBUILD +++ b/main/pcsc-lite/APKBUILD @@ -2,14 +2,14 @@ # Maintainer: pkgname=pcsc-lite pkgver=1.8.11 -pkgrel=3 +pkgrel=4 pkgdesc="Middleware to access a smart card using SCard API (PC/SC)" url="http://pcsclite.alioth.debian.org/pcsclite.html" arch="all" license="Custom" depends="" depends_dev="udev-dev" -makedepends="$depends_dev perl automake autoconf libtool" +makedepends="$depends_dev perl automake autoconf libtool libcap-ng-utils" install="pcsc-lite.pre-install pcsc-lite.pre-upgrade" subpackages="$pkgname-dev $pkgname-doc $pkgname-libs" source="https://alioth.debian.org/frs/download.php/file/3991/pcsc-lite-1.8.11.tar.bz2 @@ -54,7 +54,11 @@ package() { install -D -m755 "$srcdir"/pcscd.initd \ "$pkgdir"/etc/init.d/pcscd || return 1 mkdir -p "$pkgdir"/usr/lib/pcsc/drivers - rm -f "$pkgdir"/usr/lib/*.la + + # fix pcscd permissions and grant sysfs access + chown root:pcscd "$pkgdir"/usr/sbin/pcscd + chmod 0710 "$pkgdir"/usr/sbin/pcscd + filecap "$pkgdir"/usr/sbin/pcscd dac_read_search } libs() { |