4a7f99d55d
Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
52 lines
1.2 KiB
Nix
52 lines
1.2 KiB
Nix
{ lib, stdenv, fetchurl
|
|
, bison, flex
|
|
, pam
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "gradm";
|
|
version = "3.1-201903191516";
|
|
|
|
src = fetchurl {
|
|
url = "http://grsecurity.net/stable/${pname}-${version}.tar.gz";
|
|
sha256 = "1wszqwaswcf08s9zbvnqzmmfdykyfcy16w8xjia20ypr7wwbd86k";
|
|
};
|
|
|
|
nativeBuildInputs = [ bison flex ];
|
|
buildInputs = [ pam ];
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
makeFlags = [
|
|
"DESTDIR=$(out)"
|
|
"LEX=${flex}/bin/flex"
|
|
"MANDIR=/share/man"
|
|
"MKNOD=true"
|
|
];
|
|
|
|
preBuild = ''
|
|
substituteInPlace Makefile \
|
|
--replace "/usr/bin/" "" \
|
|
--replace "/usr/include/security/pam_" "${pam}/include/security/pam_"
|
|
|
|
substituteInPlace gradm_defs.h \
|
|
--replace "/sbin/grlearn" "$out/bin/grlearn" \
|
|
--replace "/sbin/gradm" "$out/bin/gradm" \
|
|
--replace "/sbin/gradm_pam" "$out/bin/gradm_pam"
|
|
|
|
echo 'inherit-learn /nix/store' >>learn_config
|
|
|
|
mkdir -p "$out/etc/udev/rules.d"
|
|
'';
|
|
|
|
postInstall = ''rmdir $out/dev'';
|
|
|
|
meta = with lib; {
|
|
description = "grsecurity RBAC administration and policy analysis utility";
|
|
homepage = "https://grsecurity.net";
|
|
license = licenses.gpl2;
|
|
platforms = platforms.linux;
|
|
maintainers = with maintainers; [ thoughtpolice joachifm ];
|
|
};
|
|
}
|