Commit 09a91e10 authored by Timo Teräs's avatar Timo Teräs

main/pcsc-lite: fix sysfs access under grsec kernels

by granting dac_read_search to pcscd and hardening it's acl
ref #3280
parent db1c4c43
......@@ -2,14 +2,14 @@
# Maintainer:
pkgname=pcsc-lite
pkgver=1.8.11
pkgrel=3
pkgrel=4
pkgdesc="Middleware to access a smart card using SCard API (PC/SC)"
url="http://pcsclite.alioth.debian.org/pcsclite.html"
arch="all"
license="Custom"
depends=""
depends_dev="udev-dev"
makedepends="$depends_dev perl automake autoconf libtool"
makedepends="$depends_dev perl automake autoconf libtool libcap-ng-utils"
install="pcsc-lite.pre-install pcsc-lite.pre-upgrade"
subpackages="$pkgname-dev $pkgname-doc $pkgname-libs"
source="https://alioth.debian.org/frs/download.php/file/3991/pcsc-lite-1.8.11.tar.bz2
......@@ -54,7 +54,11 @@ package() {
install -D -m755 "$srcdir"/pcscd.initd \
"$pkgdir"/etc/init.d/pcscd || return 1
mkdir -p "$pkgdir"/usr/lib/pcsc/drivers
rm -f "$pkgdir"/usr/lib/*.la
# fix pcscd permissions and grant sysfs access
chown root:pcscd "$pkgdir"/usr/sbin/pcscd
chmod 0710 "$pkgdir"/usr/sbin/pcscd
filecap "$pkgdir"/usr/sbin/pcscd dac_read_search
}
libs() {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment