gentoo-mirror/gentoo
1
0
Fork 0
mirror of https://github.com/gentoo-mirror/gentoo.git synced 2026-09-24 04:59:14 -07:00
Code Issues Projects Releases Wiki Activity

app-antivirus/clamav: update tmpfiles configuration

Browse Source 
The previous configuration was overly strict, making it
impossible for appliations to connect to the socket.

Historically this was not an issue as guidance was to
just add these other apps to the clamav group, but this
is no longer the case.

Bug: https://bugs.gentoo.org/921617
Signed-off-by: Matt Jolly <kangie@gentoo.org>
This commit is contained in:
Matt Jolly
2024-06-29 18:14:03 +10:00
parent a8eb973f55
commit 89533ae52d
2 changed files with 7 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
app-antivirus/clamav/clamav-1.0.5.ebuild
View File

@@ -291,14 +291,8 @@ src_install() {
if ! use libclamav-only ; then
if use systemd ; then
# The tmpfiles entry is behind USE=systemd because the
# upstream OpenRC service files should (and do) ensure that
# the directories they need exist and have the correct
# permissions without the help of opentmpfiles. There are
# years-old root exploits in opentmpfiles, the design is
# fundamentally flawed, and the maintainer is not up to
# the task of fixing it.
dotmpfiles "${FILESDIR}/tmpfiles.d/clamav.conf"
# OpenRC services do not need tmpfiles
dotmpfiles "${FILESDIR}/tmpfiles.d/clamav-r1.conf"
systemd_newunit "${FILESDIR}/clamd_at.service-0.104.0" "clamd@.service"
systemd_dounit "${FILESDIR}/clamd.service"
systemd_newunit "${FILESDIR}/freshclamd.service-r1" \

14
app-antivirus/clamav/clamav-1.3.1-r1.ebuild → app-antivirus/clamav/clamav-1.3.1-r2.ebuild
View File

@@ -296,14 +296,10 @@ src_install() {
if ! use libclamav-only ; then
if use systemd ; then
# The tmpfiles entry is behind USE=systemd because the
# upstream OpenRC service files should (and do) ensure that
# the directories they need exist and have the correct
# permissions without the help of opentmpfiles. There are
# years-old root exploits in opentmpfiles, the design is
# fundamentally flawed, and the maintainer is not up to
# the task of fixing it.
dotmpfiles "${FILESDIR}/tmpfiles.d/clamav.conf"
# OpenRC services ensure their own permissions, so we can avoid
# a dependency on sys-apps/systemd-utils[tmpfiles] here, though
# we can change our minds and use it if we want to.
dotmpfiles "${FILESDIR}/tmpfiles.d/clamav-r1.conf"
fi
if use clamapp ; then
@@ -373,7 +369,7 @@ src_install() {
pkg_postinst() {
if ! use libclamav-only ; then
if use systemd ; then
tmpfiles_process clamav.conf
tmpfiles_process clamav-r1.conf
fi
fi