Ignore:
Timestamp:
Oct 6, 2015, 11:23:48 PM (4 years ago)
Author:
cal@…
Message:

yubico-pam: Update to 2.20, work around El Cap's SIP limitations

This should fix #49040. I hope that absolute paths can be specified as pam
modules in /etc/pam.d, otherwise this is going to get difficult to get done
correctly.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/dports/security/yubico-pam/Portfile

    r134523 r140972  
    55PortGroup       github 1.0
    66
    7 github.setup    Yubico yubico-pam 2.19
    8 checksums       rmd160  c1233572bf8e7c9d6d5571f3c9eb97d053fe334f \
    9                 sha256  1d4ddceb6519b1a3be6083f20c509105a2a6633a6983ebba7a9127e65095b32f
     7github.setup    Yubico yubico-pam 2.20
     8checksums       rmd160  40b9f92a2739aa9f14b6d24ff1856a5263dce555 \
     9                sha256  3ef160e9b313c0b13b8d96bba5818cb2ae00e5b3972fb8b1d2d45b5dfc5d7cf0
    1010
    1111
     
    3737use_autoreconf  yes
    3838
    39 configure.args  --with-pam-dir=/usr/lib/pam \
    40                 --without-ldap
     39if {${os.platform} eq "darwin" && ${os.major} >= 15} {
     40    configure.args  --with-pam-dir=${prefix}/lib/pam
    4141
    42 destroot.violate_mtree \
    43                 yes
     42    notes "
     43On systems earlier than El Capitan, this port used to install pam_yubico.so in\
     44/usr/lib/pam directly for your convenience. With El Capitan's System Integrity\
     45Protection (\"rootless\"), this is no longer possible. The library is now\
     46installed in ${prefix}/lib/pam instead. You have to modify your PAM\
     47configuration to reference the library using it's absolute path\
     48${prefix}/lib/pam/pam_yubico.so"
     49
     50} else {
     51    configure.args          --with-pam-dir=/usr/lib/pam
     52    destroot.violate_mtree  yes
     53}
     54
     55configure.args-append       --without-ldap
    4456
    4557post-destroot {
     
    4860    file delete ${destroot}${prefix}/include/util.h
    4961}
    50 
Note: See TracChangeset for help on using the changeset viewer.