mirror of
https://github.com/SebastianWendel/nixpkgs.git
synced 2024-10-17 11:13:18 +02:00
fdbf7dc8b3
The built-in ACL prevents the gradm binary from loading dynamic libraries from the Nix store. Thus, once the RBAC system is activated, the gradm binary cannot be used. Fix by patching in rules to allow references to the Nix store where appropriate.
54 lines
1.3 KiB
Nix
54 lines
1.3 KiB
Nix
{ stdenv, fetchurl
|
|
, bison, flex
|
|
, pam
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "gradm-${version}";
|
|
version = "3.1-201608131257";
|
|
|
|
src = fetchurl {
|
|
url = "http://grsecurity.net/stable/${name}.tar.gz";
|
|
sha256 = "0y5565rhil5ciprwz7nx4s4ah7dsxx7zrkg42dbq0mcg8m316xrb";
|
|
};
|
|
|
|
patches = [ ./gradm_nix_store.patch ];
|
|
|
|
nativeBuildInputs = [ bison flex ];
|
|
buildInputs = [ pam ];
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
makeFlags = [
|
|
"DESTDIR=$(out)"
|
|
"LEX=${flex}/bin/flex"
|
|
"MANDIR=/share/man"
|
|
"MKNOD=true"
|
|
];
|
|
|
|
preBuild = ''
|
|
substituteInPlace Makefile \
|
|
--replace "/usr/bin/" "" \
|
|
--replace "/usr/include/security/pam_" "${pam}/include/security/pam_"
|
|
|
|
substituteInPlace gradm_defs.h \
|
|
--replace "/sbin/grlearn" "$out/bin/grlearn" \
|
|
--replace "/sbin/gradm" "$out/bin/gradm" \
|
|
--replace "/sbin/gradm_pam" "$out/bin/gradm_pam"
|
|
|
|
echo 'inherit-learn /nix/store' >>learn_config
|
|
|
|
mkdir -p "$out/etc/udev/rules.d"
|
|
'';
|
|
|
|
postInstall = ''rmdir $out/dev'';
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "grsecurity RBAC administration and policy analysis utility";
|
|
homepage = "https://grsecurity.net";
|
|
license = licenses.gpl2;
|
|
platforms = platforms.linux;
|
|
maintainers = with maintainers; [ thoughtpolice joachifm ];
|
|
};
|
|
}
|