$(INSTALL_DIRECTORY) $(bindir) $(sbindir)
$(INSTALL_PROGRAM) $(PROGRAMS) $(bindir)
$(INSTALL_PROGRAM) $(DAEMONS) $(sbindir)
- $(INSTALL) -m 4774 root.$(SYSTEM_GROUP) \
+ $(INSTALL) -m 4774 -o root -g $(SYSTEM_GROUP) \
$(SUIDSBINPROGRAMS) $(sbindir)
install-docs:
chiark-utils (3.99.1.0.2) unstable; urgency=low
* foreign zones checked from delegation by default.
- * from chiark:/usr/local/src/misc/ (as found):
- really (incl. myopt)
- usernice
- cvsweb-list
- smtpallow
+ * new utility source code from chiark, not built:
+ usernice, cvsweb-list, smtpallow
+ * new utility built and packaged: really (incl. myopt)
--
readbuffer and writebuffer: programs for reading input from devices,
and writing output to, which don't like constant stopping and
starting, such as tape drives and audio playback devices.
+
+Package: chiark-really
+Architecture: all
+Depends: ${shlibs:Depends}
+Description: really - a tool for gaining privilege (simple, realistic sudo)
+ really is a program that allows certain users to become whatever user
+ they like on request. It is a bit like sudo in that respect.
+ However, really is simpler than sudo, and doesn't give the system
+ administrator any false security promises. So really is less of a
+ general security risk to the system.
+ .
+ Unlike sudo it does not pretend that the called account can be any
+ more secure than the calling account. so there is never a need for a
+ password. If you wanted to restrict which commands and functions the
+ called user can perform, use userv, not really or sudo.
+ .
+ Also unlike sudo, really only works if the calling user is supposed
+ to be equivalent to root. But, really can also be used by
+ root-equivalent users to become any user, not just root; in this way
+ it can be a replacement for certain uses of su.
subdirs_nobuild=backup sync-accounts scripts
package= chiark-utils
packages_indep= chiark-backup chiark-scripts
-packages_arch= chiark-rwbuffer
+packages_arch= chiark-rwbuffer chiark-really
packages= $(packages_indep) $(packages_arch)
cwd= $(shell pwd)
set -e; for p in $(packages); do \
install -d $t/$$p/DEBIAN $t/$$p/usr/share/doc/$$p; \
cp debian/copyright debian/changelog \
- $t/$$p/usr/share/doc/$$p; \
+ $t/$$p/usr/share/doc/$$p/; \
ln -s changelog.gz \
$t/$$p/usr/share/doc/$$p/changelog.Debian.gz; \
gzip -9v $t/$$p/usr/share/doc/$$p/changelog; \
install -d $t/chiark-rwbuffer/usr/bin
install -d $t/chiark-rwbuffer/usr/share/man/man1
cd $t/cprogs/usr/bin && \
- mv readbuffer writebuffer $t/chiark-rwbuffer/usr/bin
+ mv readbuffer writebuffer $t/chiark-rwbuffer/usr/bin/
cd $t/cprogs/usr/share/man/man1 && \
- mv readbuffer.1 writebuffer.1 $t/chiark-rwbuffer/usr/share/man/man1
+ mv readbuffer.1 writebuffer.1 $t/chiark-rwbuffer/usr/share/man/man1/
+ #
+ install -d $t/chiark-really/usr/sbin
+ install -d $t/chiark-really/usr/share/man/man8
+ cd $t/cprogs/usr/sbin && \
+ mv really $t/chiark-really/usr/sbin/
+# cd $t/cprogs/usr/share/man/man8 && \
+# mv really.8 $t/chiark-really/usr/share/man/man8/
+ #
gzip -9f $t/*/usr/share/man/man*/*
binary-hook-chiark-backup:
binary-hook-chiark-rwbuffer:
binary-hook-sync-accounts:
binary-hook-chiark-scripts:
+binary-hook-chiark-really:
binary-one:
set -e; for f in preinst postinst prerm postrm conffiles; do \