[pkgsrc/trunk]: pkgsrc/emulators/hercules4sdl emulators/hercules4sdl: limit a...

[rhialto <rhialto%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/cdecfcf14046
branches:  trunk
changeset: 771613:cdecfcf14046
user:      rhialto <rhialto%pkgsrc.org@localhost>
date:      Sun Dec 19 21:26:27 2021 +0000

description:
emulators/hercules4sdl: limit access to suid program hercifc.

It's installed accessible to the new group "hercules":
-r-s--x---  1 root  hercules  9512 Dec 19 21:25 /usr/pkg/bin/hercifc

diffstat:

 emulators/hercules4sdl/DESCR    |  3 +++
 emulators/hercules4sdl/Makefile |  7 +++++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diffs (34 lines):

diff -r 213ff3a64cb5 -r cdecfcf14046 emulators/hercules4sdl/DESCR
--- a/emulators/hercules4sdl/DESCR      Sun Dec 19 19:10:00 2021 +0000
+++ b/emulators/hercules4sdl/DESCR      Sun Dec 19 21:26:27 2021 +0000
@@ -13,3 +13,6 @@
 https://hercules-390.groups.io/g/group.
 
 This version is developed by SoftDevLabs.
+
+The hercifc program, which is only used when configuring network devices,
+is installed suid root, only accessible by group "hercules".
diff -r 213ff3a64cb5 -r cdecfcf14046 emulators/hercules4sdl/Makefile
--- a/emulators/hercules4sdl/Makefile   Sun Dec 19 19:10:00 2021 +0000
+++ b/emulators/hercules4sdl/Makefile   Sun Dec 19 21:26:27 2021 +0000
@@ -1,6 +1,7 @@
-# $NetBSD: Makefile,v 1.5 2021/12/19 19:08:19 rhialto Exp $
+# $NetBSD: Makefile,v 1.6 2021/12/19 21:26:27 rhialto Exp $
 
 PKGNAME=       hercules4sdl-4.4
+PKGREVISION=   1
 DISTNAME=      hyperion-Release_${PKGVERSION_NOREV}
 CATEGORIES=    emulators
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=SDL-Hercules-390/}
@@ -33,8 +34,10 @@
 
 CONFIGURE_ARGS+=       --enable-extpkgs=${PREFIX}/lib/hercules4sdl
 
+GROUP=                 hercules
+PKG_GROUPS+=           ${GROUP}
+SPECIAL_PERMS+=                ${PREFIX}/bin/hercifc ${REAL_ROOT_USER} ${GROUP} 4510
 INSTALLATION_DIRS+=    share/examples/hercules
-SPECIAL_PERMS+=                ${PREFIX}/bin/hercifc ${SETUID_ROOT_PERMS}
 
 pre-configure:
        cd ${WRKSRC} && ./autogen.sh