blob: 8000ae9afc8c2d2b2ab286f926aac986bfc8212f (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
|
{ lib, stdenv, fetchurl, fetchpatch, libxcrypt }:
stdenv.mkDerivation rec {
pname = "super";
version = "3.30.0";
src = fetchurl {
name = "super-${version}.tar.gz";
url = "https://www.ucolick.org/~will/RUE/super/super-${version}-tar.gz";
sha256 = "0k476f83w7f45y9jpyxwr00ikv1vhjiq0c26fgjch9hnv18icvwy";
};
prePatch = ''
# do not set sticky bit in nix store
substituteInPlace Makefile.in \
--replace "-o root" "" \
--replace 04755 755
'';
patches = [
./0001-Remove-references-to-dropped-sys_nerr-sys_errlist-fo.patch
(fetchpatch {
name = "CVE-2014-0470.patch";
url = "https://salsa.debian.org/debian/super/raw/debian/3.30.0-7/debian/patches/14-Fix-unchecked-setuid-call.patch";
sha256 = "08m9hw4kyfjv0kqns1cqha4v5hkgp4s4z0q1rgif1fnk14xh7wqh";
})
];
# -fcommon: workaround build failure on -fno-common toolchains like upstream
# gcc-10. Otherwise build fails as:
# ld: pam.o:/build/super-3.30.0/super.h:293: multiple definition of
# `Method'; super.o:/build/super-3.30.0/super.h:293: first defined here
env.NIX_CFLAGS_COMPILE = "-D_GNU_SOURCE -fcommon";
configureFlags = [
"--sysconfdir=/etc"
"--localstatedir=/var"
];
buildInputs = [ libxcrypt ];
installFlags = [ "sysconfdir=$(out)/etc" "localstatedir=$(TMPDIR)" ];
meta = {
homepage = "https://www.ucolick.org/~will/#super";
description = "Allows users to execute scripts as if they were root";
longDescription =
''
This package provides two commands: 1) “super”, which allows
users to execute commands under a different uid/gid (specified
in /etc/super.tab); and 2) “setuid”, which allows root to
execute a command under a different uid.
'';
platforms = lib.platforms.linux;
};
}
|