[pkgsrc/trunk]: pkgsrc/net/tcpdump tcpdump: when running, drop privileges to ...

[maya <maya%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/990c902e8d24
branches:  trunk
changeset: 358932:990c902e8d24
user:      maya <maya%pkgsrc.org@localhost>
date:      Wed Feb 22 19:05:44 2017 +0000

description:
tcpdump: when running, drop privileges to a _tcpdump user and run in a chroot

remove duplicate openssl include (it's also in options.mk depending on
ssl option) pointed out by pkglint

PKGREVISION->1

diffstat:

 net/tcpdump/Makefile |  12 ++++++++++--
 1 files changed, 10 insertions(+), 2 deletions(-)

diffs (29 lines):

diff -r f41fb5ac31c7 -r 990c902e8d24 net/tcpdump/Makefile
--- a/net/tcpdump/Makefile      Wed Feb 22 16:19:04 2017 +0000
+++ b/net/tcpdump/Makefile      Wed Feb 22 19:05:44 2017 +0000
@@ -1,6 +1,7 @@
-# $NetBSD: Makefile,v 1.43 2017/02/02 18:08:29 maya Exp $
+# $NetBSD: Makefile,v 1.44 2017/02/22 19:05:44 maya Exp $
 
 DISTNAME=      tcpdump-4.9.0
+PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  http://www.tcpdump.org/release/
 
@@ -12,8 +13,15 @@
 GNU_CONFIGURE=         yes
 CONFIGURE_ARGS.Darwin+=        --disable-universal
 
+BUILD_DEFS+=           VARBASE
+PKG_USERS=             _tcpdump
+OWN_DIRS=              ${VARBASE}/tcpdump
+
+# drop privileges when running
+CONFIGURE_ARGS+=       --with-user=_tcpdump
+CONFIGURE_ARGS+=       --with-chroot=${VARBASE}/tcpdump
+
 .include "options.mk"
 
 .include "../../net/libpcap/buildlink3.mk"
-.include "../../security/openssl/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"