From 09a91e104ae245876aa575376bb0f4945e5c5757 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Timo=20Ter=C3=A4s?= Date: Thu, 9 Apr 2015 08:54:57 +0300 Subject: main/pcsc-lite: fix sysfs access under grsec kernels by granting dac_read_search to pcscd and hardening it's acl ref #3280 --- main/pcsc-lite/APKBUILD | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/main/pcsc-lite/APKBUILD b/main/pcsc-lite/APKBUILD index 2da2ee3eed..c9de7664cc 100644 --- a/main/pcsc-lite/APKBUILD +++ b/main/pcsc-lite/APKBUILD @@ -2,14 +2,14 @@ # Maintainer: pkgname=pcsc-lite pkgver=1.8.11 -pkgrel=3 +pkgrel=4 pkgdesc="Middleware to access a smart card using SCard API (PC/SC)" url="http://pcsclite.alioth.debian.org/pcsclite.html" arch="all" license="Custom" depends="" depends_dev="udev-dev" -makedepends="$depends_dev perl automake autoconf libtool" +makedepends="$depends_dev perl automake autoconf libtool libcap-ng-utils" install="pcsc-lite.pre-install pcsc-lite.pre-upgrade" subpackages="$pkgname-dev $pkgname-doc $pkgname-libs" source="https://alioth.debian.org/frs/download.php/file/3991/pcsc-lite-1.8.11.tar.bz2 @@ -54,7 +54,11 @@ package() { install -D -m755 "$srcdir"/pcscd.initd \ "$pkgdir"/etc/init.d/pcscd || return 1 mkdir -p "$pkgdir"/usr/lib/pcsc/drivers - rm -f "$pkgdir"/usr/lib/*.la + + # fix pcscd permissions and grant sysfs access + chown root:pcscd "$pkgdir"/usr/sbin/pcscd + chmod 0710 "$pkgdir"/usr/sbin/pcscd + filecap "$pkgdir"/usr/sbin/pcscd dac_read_search } libs() { -- cgit v1.2.3