chiark / gitweb /
really packaged
authorianmdlvl <ianmdlvl>
Wed, 2 Jul 2003 19:26:48 +0000 (19:26 +0000)
committerianmdlvl <ianmdlvl>
Wed, 2 Jul 2003 19:26:48 +0000 (19:26 +0000)
cprogs/Makefile
debian/changelog
debian/control
debian/rules

index baa0a02..23b3911 100644 (file)
@@ -47,7 +47,7 @@ install:              all
                $(INSTALL_DIRECTORY) $(bindir) $(sbindir)
                $(INSTALL_PROGRAM) $(PROGRAMS) $(bindir)
                $(INSTALL_PROGRAM) $(DAEMONS) $(sbindir)
-               $(INSTALL) -m 4774 root.$(SYSTEM_GROUP) \
+               $(INSTALL) -m 4774 -o root -g $(SYSTEM_GROUP) \
                        $(SUIDSBINPROGRAMS) $(sbindir)
 
 install-docs:
index 2574dfd..1c15aa8 100644 (file)
@@ -1,11 +1,9 @@
 chiark-utils (3.99.1.0.2) unstable; urgency=low
 
   * foreign zones checked from delegation by default.
-  * from chiark:/usr/local/src/misc/ (as found):
-    really (incl. myopt)
-    usernice
-    cvsweb-list
-    smtpallow
+  * new utility source code from chiark, not built:
+    usernice, cvsweb-list, smtpallow
+  * new utility built and packaged: really (incl. myopt)
 
  --
 
index e7074fd..b8b4792 100644 (file)
@@ -44,3 +44,23 @@ Description: readbuffer/writebuffer: prevents tape drive seesawing, etc.
  readbuffer and writebuffer: programs for reading input from devices,
  and writing output to, which don't like constant stopping and
  starting, such as tape drives and audio playback devices.
+
+Package: chiark-really
+Architecture: all
+Depends: ${shlibs:Depends}
+Description: really - a tool for gaining privilege (simple, realistic sudo)
+ really is a program that allows certain users to become whatever user
+ they like on request.  It is a bit like sudo in that respect.
+ However, really is simpler than sudo, and doesn't give the system
+ administrator any false security promises.  So really is less of a
+ general security risk to the system.
+ .
+ Unlike sudo it does not pretend that the called account can be any
+ more secure than the calling account. so there is never a need for a
+ password.  If you wanted to restrict which commands and functions the
+ called user can perform, use userv, not really or sudo.
+ .
+ Also unlike sudo, really only works if the calling user is supposed
+ to be equivalent to root.  But, really can also be used by
+ root-equivalent users to become any user, not just root; in this way
+ it can be a replacement for certain uses of su.
index 235a31d..2b07399 100755 (executable)
@@ -4,7 +4,7 @@ subdirs_build=  cprogs
 subdirs_nobuild=backup sync-accounts scripts
 package=       chiark-utils
 packages_indep=        chiark-backup chiark-scripts
-packages_arch= chiark-rwbuffer
+packages_arch= chiark-rwbuffer chiark-really
 packages=      $(packages_indep) $(packages_arch)
 
 cwd=   $(shell pwd)
@@ -45,7 +45,7 @@ binary-prep:
        set -e; for p in $(packages); do \
                install -d $t/$$p/DEBIAN $t/$$p/usr/share/doc/$$p; \
                cp debian/copyright debian/changelog \
-                       $t/$$p/usr/share/doc/$$p; \
+                       $t/$$p/usr/share/doc/$$p/; \
                ln -s changelog.gz \
                        $t/$$p/usr/share/doc/$$p/changelog.Debian.gz; \
                gzip -9v $t/$$p/usr/share/doc/$$p/changelog; \
@@ -54,15 +54,24 @@ binary-prep:
        install -d $t/chiark-rwbuffer/usr/bin
        install -d $t/chiark-rwbuffer/usr/share/man/man1
        cd $t/cprogs/usr/bin && \
-               mv readbuffer writebuffer $t/chiark-rwbuffer/usr/bin
+               mv readbuffer writebuffer $t/chiark-rwbuffer/usr/bin/
        cd $t/cprogs/usr/share/man/man1 && \
-               mv readbuffer.1 writebuffer.1 $t/chiark-rwbuffer/usr/share/man/man1
+               mv readbuffer.1 writebuffer.1 $t/chiark-rwbuffer/usr/share/man/man1/
+       #
+       install -d $t/chiark-really/usr/sbin
+       install -d $t/chiark-really/usr/share/man/man8
+       cd $t/cprogs/usr/sbin && \
+               mv really $t/chiark-really/usr/sbin/
+#      cd $t/cprogs/usr/share/man/man8 && \
+#              mv really.8 $t/chiark-really/usr/share/man/man8/
+       #
        gzip -9f $t/*/usr/share/man/man*/*
 
 binary-hook-chiark-backup:
 binary-hook-chiark-rwbuffer:
 binary-hook-sync-accounts:
 binary-hook-chiark-scripts:
+binary-hook-chiark-really:
 
 binary-one:
        set -e; for f in preinst postinst prerm postrm conffiles; do \