diff options
| author | Mike Frysinger <vapier@gentoo.org> | 2012-12-19 15:48:22 -0500 |
|---|---|---|
| committer | Mike Frysinger <vapier@gentoo.org> | 2012-12-19 15:48:22 -0500 |
| commit | e6edd1f581b59dffbc1e21d2221af049a5f0b38a (patch) | |
| tree | 4972f84c2395413365983b22ad16c3deb89effe5 /configure.ac | |
| parent | 6acb9fc56614107d65379cfdbe25d7d6b653f67c (diff) | |
| download | tlsdate-e6edd1f581b59dffbc1e21d2221af049a5f0b38a.tar.gz | |
add configure flags for setting droppriv user/group
In order to override the default user/group, you have to append your
CPPFLAGS before compiling. Since you also have to pass along double
quotes, it can get ugly/messy fast in shell (due to the escaping).
Plus, the existing code always defines UNPRIV_USER to "nobody" which
leads to compile time warnings.
Add dedicated configure flags to make the interface simple for people
to control.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Diffstat (limited to 'configure.ac')
| -rw-r--r-- | configure.ac | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac index f6efb0b..c95090e 100644 --- a/configure.ac +++ b/configure.ac @@ -57,6 +57,26 @@ AC_CHECK_HEADERS([unistd.h], ,[AC_MSG_ERROR([Required headers missing; compilati AC_CHECK_FUNCS([setresuid]) AC_CHECK_FUNCS([gettimeofday]) +AC_MSG_CHECKING([user/group to drop privs to]) + +AC_ARG_WITH([unpriv-user], + [AS_HELP_STRING([--with-unpriv-user=<user>], + [User to drop privs to @<:@default: nobody@:>@])]) +AS_CASE([$with_unpriv_user], + [""|yes|no], [UNPRIV_USER="nobody"], + [*], [UNPRIV_USER=$with_unpriv_user]) +AC_DEFINE_UNQUOTED([UNPRIV_USER], ["${UNPRIV_USER}"], [Unprivileged user]) + +AC_ARG_WITH([unpriv-group], + [AS_HELP_STRING([--with-unpriv-group=<group>], + [Group to drop privs to @<:@default: nogroup@:>@])]) +AS_CASE([$with_unpriv_group], + [""|yes|no], [UNPRIV_GROUP="nogroup"], + [*], [UNPRIV_GROUP=$with_unpriv_group]) +AC_DEFINE_UNQUOTED([UNPRIV_GROUP], ["${UNPRIV_GROUP}"], [Unprivileged group]) + +AC_MSG_RESULT(${UNPRIV_USER}:${UNPRIV_GROUP}) + dnl Check for clock_gettime. Some systems put it into -lc, while dnl others use -lrt. Try the first and fallback to the latter. RT_LIB= |