opendoas: add package

diff --git a/opendoas/build b/opendoas/build
new file mode 100755 (executable)
index 0000000..96530b4
--- /dev/null
+++ b/opendoas/build
@@ -0,0 +1,16 @@
+#!/bin/sh -e
+
+sed -i '/chown/d' GNUmakefile
+
+./configure \
+    --prefix=/usr \
+    --enable-static \
+    --with-shadow \
+    --with-timestamp \
+    --without-pam \
+    --with-kiss-insults \
+
+make
+make DESTDIR="$1" install
+
+install -Dm600 doas.conf "$1/etc/doas.conf"

diff --git a/opendoas/checksums b/opendoas/checksums
new file mode 100644 (file)
index 0000000..5f1bffe
--- /dev/null
+++ b/opendoas/checksums
@@ -0,0 +1,2 @@
+c9070ae745d0f1bbe68ef0783a3958cd011b409959f65fd100e6b42b8ad6b162
+846a251c646e61329086eda6abde26329f5a358d5eeab1a0f075db36e5997687

diff --git a/opendoas/depends b/opendoas/depends
new file mode 100644 (file)
index 0000000..bccf617
--- /dev/null
+++ b/opendoas/depends
@@ -0,0 +1 @@
+bison make

diff --git a/opendoas/files/doas.conf b/opendoas/files/doas.conf
new file mode 100644 (file)
index 0000000..687322c
--- /dev/null
+++ b/opendoas/files/doas.conf
@@ -0,0 +1,30 @@
+# Set rules here.
+# Priority increases with linenumber.
+# See doas.conf(5) for details.
+
+# permit persist :wheel
+# permit nopass root
+
+# This config file isn't very powerful at all compared to
+# the likes of sudo's. It's very difficult to tell it that
+# we want to permit running the package manager and package
+# manager alone (hence the 'git'/'env' listings).
+#
+# Further, the 'persist' feature is too strict and will beg
+# you for a password every time 'doas' is run from a script`.
+# Despite sudo's complexity, I recommened it over doas for
+# better control.
+#
+# I'm working on a better overall solution.
+
+# Allow wheel to run kiss with password required.
+# permit persist :wheel cmd env
+# permit persist :wheel cmd git args fetch
+# permit persist :wheel cmd git args diff
+# permit persist :wheel cmd git args merge
+
+# Allow wheel to run kiss without a password.
+# permit nopass :wheel cmd env
+# permit nopass :wheel cmd git args fetch
+# permit nopass :wheel cmd git args diff
+# permit nopass :wheel cmd git args merge

diff --git a/opendoas/sources b/opendoas/sources
new file mode 100644 (file)
index 0000000..2fa24d2
--- /dev/null
+++ b/opendoas/sources
@@ -0,0 +1,2 @@
+https://git.sr.ht/~armaan/opendoas
+files/doas.conf

diff --git a/opendoas/version b/opendoas/version
new file mode 100644 (file)
index 0000000..a383ea1
--- /dev/null
+++ b/opendoas/version
@@ -0,0 +1 @@
+git 1