From: ianmdlvl <ianmdlvl>
Date: Wed, 2 Jul 2003 19:26:48 +0000 (+0000)
Subject: really packaged
X-Git-Tag: debian_version_3_99_1_0_4~2
X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=chiark-utils.git;a=commitdiff_plain;h=3a2cfb6ea202d848ce2baa688f33620035f745d0;ds=sidebyside

really packaged
---

diff --git a/cprogs/Makefile b/cprogs/Makefile
index baa0a02..23b3911 100644
--- a/cprogs/Makefile
+++ b/cprogs/Makefile
@@ -47,7 +47,7 @@ install:		all
 		$(INSTALL_DIRECTORY) $(bindir) $(sbindir)
 		$(INSTALL_PROGRAM) $(PROGRAMS) $(bindir)
 		$(INSTALL_PROGRAM) $(DAEMONS) $(sbindir)
-		$(INSTALL) -m 4774 root.$(SYSTEM_GROUP) \
+		$(INSTALL) -m 4774 -o root -g $(SYSTEM_GROUP) \
 			$(SUIDSBINPROGRAMS) $(sbindir)
 
 install-docs:
diff --git a/debian/changelog b/debian/changelog
index 2574dfd..1c15aa8 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,11 +1,9 @@
 chiark-utils (3.99.1.0.2) unstable; urgency=low
 
   * foreign zones checked from delegation by default.
-  * from chiark:/usr/local/src/misc/ (as found):
-    really (incl. myopt)
-    usernice
-    cvsweb-list
-    smtpallow
+  * new utility source code from chiark, not built:
+    usernice, cvsweb-list, smtpallow
+  * new utility built and packaged: really (incl. myopt)
 
  --
 
diff --git a/debian/control b/debian/control
index e7074fd..b8b4792 100644
--- a/debian/control
+++ b/debian/control
@@ -44,3 +44,23 @@ Description: readbuffer/writebuffer: prevents tape drive seesawing, etc.
  readbuffer and writebuffer: programs for reading input from devices,
  and writing output to, which don't like constant stopping and
  starting, such as tape drives and audio playback devices.
+
+Package: chiark-really
+Architecture: all
+Depends: ${shlibs:Depends}
+Description: really - a tool for gaining privilege (simple, realistic sudo)
+ really is a program that allows certain users to become whatever user
+ they like on request.  It is a bit like sudo in that respect.
+ However, really is simpler than sudo, and doesn't give the system
+ administrator any false security promises.  So really is less of a
+ general security risk to the system.
+ .
+ Unlike sudo it does not pretend that the called account can be any
+ more secure than the calling account. so there is never a need for a
+ password.  If you wanted to restrict which commands and functions the
+ called user can perform, use userv, not really or sudo.
+ .
+ Also unlike sudo, really only works if the calling user is supposed
+ to be equivalent to root.  But, really can also be used by
+ root-equivalent users to become any user, not just root; in this way
+ it can be a replacement for certain uses of su.
diff --git a/debian/rules b/debian/rules
index 235a31d..2b07399 100755
--- a/debian/rules
+++ b/debian/rules
@@ -4,7 +4,7 @@ subdirs_build=	cprogs
 subdirs_nobuild=backup sync-accounts scripts
 package=	chiark-utils
 packages_indep=	chiark-backup chiark-scripts
-packages_arch=	chiark-rwbuffer
+packages_arch=	chiark-rwbuffer chiark-really
 packages=	$(packages_indep) $(packages_arch)
 
 cwd=	$(shell pwd)
@@ -45,7 +45,7 @@ binary-prep:
 	set -e; for p in $(packages); do \
 		install -d $t/$$p/DEBIAN $t/$$p/usr/share/doc/$$p; \
 		cp debian/copyright debian/changelog \
-			$t/$$p/usr/share/doc/$$p; \
+			$t/$$p/usr/share/doc/$$p/; \
 		ln -s changelog.gz \
 			$t/$$p/usr/share/doc/$$p/changelog.Debian.gz; \
 		gzip -9v $t/$$p/usr/share/doc/$$p/changelog; \
@@ -54,15 +54,24 @@ binary-prep:
 	install -d $t/chiark-rwbuffer/usr/bin
 	install -d $t/chiark-rwbuffer/usr/share/man/man1
 	cd $t/cprogs/usr/bin && \
-		mv readbuffer writebuffer $t/chiark-rwbuffer/usr/bin
+		mv readbuffer writebuffer $t/chiark-rwbuffer/usr/bin/
 	cd $t/cprogs/usr/share/man/man1 && \
-		mv readbuffer.1 writebuffer.1 $t/chiark-rwbuffer/usr/share/man/man1
+		mv readbuffer.1 writebuffer.1 $t/chiark-rwbuffer/usr/share/man/man1/
+	#
+	install -d $t/chiark-really/usr/sbin
+	install -d $t/chiark-really/usr/share/man/man8
+	cd $t/cprogs/usr/sbin && \
+		mv really $t/chiark-really/usr/sbin/
+#	cd $t/cprogs/usr/share/man/man8 && \
+#		mv really.8 $t/chiark-really/usr/share/man/man8/
+	#
 	gzip -9f $t/*/usr/share/man/man*/*
 
 binary-hook-chiark-backup:
 binary-hook-chiark-rwbuffer:
 binary-hook-sync-accounts:
 binary-hook-chiark-scripts:
+binary-hook-chiark-really:
 
 binary-one:
 	set -e; for f in preinst postinst prerm postrm conffiles; do \