From: Armaan Bhojwani <me@armaanb.net>
Date: Sun, 4 Apr 2021 01:59:53 +0000 (-0400)
Subject: opendoas: add package
X-Git-Tag: 2021.07.15-1~153
X-Git-Url: https://git.armaanb.net/?p=asd-repo.git;a=commitdiff_plain;h=a16023618f53e112c5470a594ecdef2615c44b7f

opendoas: add package
---

diff --git a/opendoas/build b/opendoas/build
new file mode 100755
index 0000000..96530b4
--- /dev/null
+++ b/opendoas/build
@@ -0,0 +1,16 @@
+#!/bin/sh -e
+
+sed -i '/chown/d' GNUmakefile
+
+./configure \
+    --prefix=/usr \
+    --enable-static \
+    --with-shadow \
+    --with-timestamp \
+    --without-pam \
+    --with-kiss-insults \
+
+make
+make DESTDIR="$1" install
+
+install -Dm600 doas.conf "$1/etc/doas.conf"
diff --git a/opendoas/checksums b/opendoas/checksums
new file mode 100644
index 0000000..5f1bffe
--- /dev/null
+++ b/opendoas/checksums
@@ -0,0 +1,2 @@
+c9070ae745d0f1bbe68ef0783a3958cd011b409959f65fd100e6b42b8ad6b162
+846a251c646e61329086eda6abde26329f5a358d5eeab1a0f075db36e5997687
diff --git a/opendoas/depends b/opendoas/depends
new file mode 100644
index 0000000..bccf617
--- /dev/null
+++ b/opendoas/depends
@@ -0,0 +1 @@
+bison make
diff --git a/opendoas/files/doas.conf b/opendoas/files/doas.conf
new file mode 100644
index 0000000..687322c
--- /dev/null
+++ b/opendoas/files/doas.conf
@@ -0,0 +1,30 @@
+# Set rules here.
+# Priority increases with linenumber.
+# See doas.conf(5) for details.
+
+# permit persist :wheel
+# permit nopass root
+
+# This config file isn't very powerful at all compared to
+# the likes of sudo's. It's very difficult to tell it that
+# we want to permit running the package manager and package
+# manager alone (hence the 'git'/'env' listings).
+#
+# Further, the 'persist' feature is too strict and will beg
+# you for a password every time 'doas' is run from a script`.
+# Despite sudo's complexity, I recommened it over doas for
+# better control.
+#
+# I'm working on a better overall solution.
+
+# Allow wheel to run kiss with password required.
+# permit persist :wheel cmd env
+# permit persist :wheel cmd git args fetch
+# permit persist :wheel cmd git args diff
+# permit persist :wheel cmd git args merge
+
+# Allow wheel to run kiss without a password.
+# permit nopass :wheel cmd env
+# permit nopass :wheel cmd git args fetch
+# permit nopass :wheel cmd git args diff
+# permit nopass :wheel cmd git args merge
diff --git a/opendoas/sources b/opendoas/sources
new file mode 100644
index 0000000..2fa24d2
--- /dev/null
+++ b/opendoas/sources
@@ -0,0 +1,2 @@
+https://git.sr.ht/~armaan/opendoas
+files/doas.conf
diff --git a/opendoas/version b/opendoas/version
new file mode 100644
index 0000000..a383ea1
--- /dev/null
+++ b/opendoas/version
@@ -0,0 +1 @@
+git 1