diff options
Diffstat (limited to 'nixpkgs/pkgs/os-specific/linux/libcap/default.nix')
-rw-r--r-- | nixpkgs/pkgs/os-specific/linux/libcap/default.nix | 60 |
1 files changed, 60 insertions, 0 deletions
diff --git a/nixpkgs/pkgs/os-specific/linux/libcap/default.nix b/nixpkgs/pkgs/os-specific/linux/libcap/default.nix new file mode 100644 index 000000000000..a7e8894ccfef --- /dev/null +++ b/nixpkgs/pkgs/os-specific/linux/libcap/default.nix @@ -0,0 +1,60 @@ +{ stdenv, buildPackages, fetchurl, attr, perl, pam }: + +stdenv.mkDerivation rec { + name = "libcap-${version}"; + version = "2.25"; + + src = fetchurl { + url = "mirror://kernel/linux/libs/security/linux-privs/libcap2/${name}.tar.xz"; + sha256 = "0qjiqc5pknaal57453nxcbz3mn1r4hkyywam41wfcglq3v2qlg39"; + }; + + outputs = [ "out" "dev" "lib" "man" "doc" "pam" ]; + + depsBuildBuild = [ buildPackages.stdenv.cc ]; + nativeBuildInputs = [ perl ]; + + buildInputs = [ pam ]; + + propagatedBuildInputs = [ attr ]; + + makeFlags = [ + "lib=lib" + "PAM_CAP=yes" + "BUILD_CC=$(CC_FOR_BUILD)" + "CC:=$(CC)" + ]; + + prePatch = '' + # use relative bash path + substituteInPlace progs/capsh.c --replace "/bin/bash" "bash" + + # ensure capsh can find bash in $PATH + substituteInPlace progs/capsh.c --replace execve execvpe + + # set prefixes + substituteInPlace Make.Rules \ + --replace 'prefix=/usr' "prefix=$lib" \ + --replace 'exec_prefix=' "exec_prefix=$out" \ + --replace 'lib_prefix=$(exec_prefix)' "lib_prefix=$lib" \ + --replace 'inc_prefix=$(prefix)' "inc_prefix=$dev" \ + --replace 'man_prefix=$(prefix)' "man_prefix=$doc" + ''; + + installFlags = "RAISE_SETFCAP=no"; + + postInstall = '' + rm "$lib"/lib/*.a + mkdir -p "$doc/share/doc/${name}" + cp License "$doc/share/doc/${name}/" + '' + stdenv.lib.optionalString (pam != null) '' + mkdir -p "$pam/lib/security" + mv "$lib"/lib/security "$pam/lib" + ''; + + meta = { + description = "Library for working with POSIX capabilities"; + platforms = stdenv.lib.platforms.linux; + license = stdenv.lib.licenses.bsd3; + }; +} |