Skip to content

Commit

Permalink
security/opencryptoki: fix build as non-root
Browse files Browse the repository at this point in the history
Simple fix to remove the '-g ' option.  Just let the @sample()
parameters in pkg-plist set the group permissions.

Approved by:	hrs (maintainer timeout)
MFH:		2023Q2
PR:		269524
  • Loading branch information
John Hein authored and clausecker committed Apr 20, 2023
1 parent d52a866 commit 6714a24
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion security/opencryptoki/files/patch-Makefile.am
Expand Up @@ -51,7 +51,7 @@
if ENABLE_P11SAK
test -f $(DESTDIR)$(sysconfdir)/opencryptoki || $(MKDIR_P) $(DESTDIR)$(sysconfdir)/opencryptoki || true
- test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf || $(INSTALL) -g pkcs11 -m 0640 $(srcdir)/usr/sbin/p11sak/p11sak_defined_attrs.conf $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf || true
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf.sample || $(INSTALL) -g @PKCS11GROUP@ -m 0640 $(srcdir)/usr/sbin/p11sak/p11sak_defined_attrs.conf $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf.sample || true
+ test -f $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf.sample || $(INSTALL) -m 0640 $(srcdir)/usr/sbin/p11sak/p11sak_defined_attrs.conf $(DESTDIR)$(sysconfdir)/opencryptoki/p11sak_defined_attrs.conf.sample || true
endif
if ENABLE_ICATOK
cd $(DESTDIR)$(libdir)/opencryptoki/stdll && \
Expand Down

0 comments on commit 6714a24

Please sign in to comment.