aports/main/linux-pam/APKBUILD
Sören Tempel edd7356a1b main/linux-pam: add pam_openrc.so to the base-session.pamd
This will make OpenRC user services work out-of-the-box, assuming
that openrc-user-pam was installed prior.
2025-03-28 17:40:09 +00:00

88 lines
3.3 KiB
Text

# Contributor: Rasmus Thomsen <oss@cogitri.dev>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=linux-pam
pkgver=1.7.0
pkgrel=2
pkgdesc="Linux PAM (Pluggable Authentication Modules for Linux)"
url="https://www.kernel.org/pub/linux/libs/pam"
arch="all"
license="BSD-3-Clause"
makedepends="
bison
flex-dev
linux-headers
meson
utmps-dev
"
options="suid !check"
subpackages="$pkgname-dev $pkgname-manual::noarch $pkgname-doc"
source="https://github.com/linux-pam/linux-pam/releases/download/v$pkgver/Linux-PAM-$pkgver.tar.xz
base-auth.pamd
base-account.pamd
base-password.pamd
base-session.pamd
base-session-noninteractive.pamd
other.pamd
login.pamd
su.pamd
"
builddir="$srcdir"/Linux-PAM-$pkgver
# secfixes:
# 1.6.0-r0:
# - CVE-2024-22365
# 1.5.1-r0:
# - CVE-2020-27780
build() {
export CFLAGS="$CFLAGS -flto=auto $(pkg-config --cflags utmps)"
export LDFLAGS="$LDFLAGS $(pkg-config --libs utmps)"
abuild-meson \
-Dexamples=false \
-Dhtmldir=/usr/share/doc/Linux-PAM \
-Ddocdir=/usr/share/man \
build .
meson compile -C build
}
package() {
DESTDIR="$pkgdir" meson install -C build
# install our pam.d files
install -Dm644 "$srcdir"/base-auth.pamd "$pkgdir"/usr/lib/pam.d/base-auth
install -Dm644 "$srcdir"/base-password.pamd "$pkgdir"/usr/lib/pam.d/base-password
install -Dm644 "$srcdir"/base-account.pamd "$pkgdir"/usr/lib/pam.d/base-account
install -Dm644 "$srcdir"/base-session.pamd "$pkgdir"/usr/lib/pam.d/base-session
install -Dm644 "$srcdir"/base-session-noninteractive.pamd \
"$pkgdir"/usr/lib/pam.d/base-session-noninteractive
install -Dm644 "$srcdir"/other.pamd "$pkgdir"/usr/lib/pam.d/other
install -Dm644 "$srcdir"/login.pamd "$pkgdir"/usr/lib/pam.d/login
install -Dm644 "$srcdir"/su.pamd "$pkgdir"/usr/lib/pam.d/su
# make "unix_chkpwd" shadow group and enable g+s
chgrp shadow "$pkgdir"/usr/sbin/unix_chkpwd \
&& chmod g+s "$pkgdir"/usr/sbin/unix_chkpwd
# we don't ship systemd
rm -r "$pkgdir"/usr/lib/systemd
}
manual() {
pkgdesc="$pkgdesc (manual)"
amove usr/share/doc/Linux-PAM
}
sha512sums="
ab5cadb0eb5e95e36146fdbbc77eef4e5e0f38aeee4e819b080a1316f69969c3c33e4a2daf3246ded4c2e58ce517d7f1acb0d8de02a4898ff753f4c3aeec51cf Linux-PAM-1.7.0.tar.xz
988e4ba32fe6b7adeb4898c784eb40d6f88f3fca78ead82b61686f0e1597f306abb3ee338aa2e4cf2db0191b8c1a7e319332e7f6d6aed3ab381f71c0a3355de9 base-auth.pamd
5d3e960ead44dcb2b3f732825482eefab9a9ffa4d4d5fc1d30cbf2fe8c5c896f1114a0ad3a6c606fa9fbf5c43400388f4ee8d7fca8110721eabfc9691004756b base-account.pamd
b3a900d6067ba04faa8016d9408da75917e8c0502020a4048bba1de2ca54c705c4d5f8307e759080fd5a9d5f3522f52a708803f1f01627eac56d9d7c6d363d13 base-password.pamd
fcf6d2413b658a158436d1b9db9d8255ce5f12f0a3151268c49702333dbbf4e6429a72a36ce74c48f346dc2b44ac16898fae79f49756d5b89a386fdcdce0186a base-session.pamd
2f18114b8a6a78ed798646962526876f3536b4759c00dce339e21f0695ea71d0917c048dc852c3d1c79bd17cd19dc513a3c6463abaffcff3f792b906cec98ede base-session-noninteractive.pamd
299bb3791652174a4d836d60f146200bb692ad80c20c18e6e872543ac8885156ff1a7ca00acaf55b89672fa98f00b8df53879c9ab1913a9cc91f620163dd50be other.pamd
ae3a807bc121eb59b54f5e53ff8efdde972610cf7463b6a38bccbc89b49954aa2e0a8693919b01f8bc7a956ba58c97de34a28963bc14f526b70b3073d64427b5 login.pamd
a71ac72a21a5d18612365b2b0a4a0da1f9d1101a30d3f5d97f479f6378c3a0fbc219617000448c8b5a0ab2597f2e4944202b13a69624dbe849bf9ea39d00ca22 su.pamd
"