summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorArfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org>2019-12-23 21:18:36 +0000
committerMike Gilbert <floppym@gentoo.org>2019-12-29 14:31:34 -0500
commitd149e41c89b85dff47bd5cdc332e6c0817acdd72 (patch)
treea8544db65eba76f44b0d8e5452f849a5f08278f6 /app-i18n/librime
parentapp-i18n/librime: Add "debug" USE flag. (diff)
downloadgentoo-d149e41c89b85dff47bd5cdc332e6c0817acdd72.tar.gz
gentoo-d149e41c89b85dff47bd5cdc332e6c0817acdd72.tar.bz2
gentoo-d149e41c89b85dff47bd5cdc332e6c0817acdd72.zip
app-i18n/librime: Set secure mode of log files.
Bug: https://bugs.gentoo.org/695702 Signed-off-by: Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org> Signed-off-by: Mike Gilbert <floppym@gentoo.org>
Diffstat (limited to 'app-i18n/librime')
-rw-r--r--app-i18n/librime/files/librime-1.5.3-log_files_mode.patch14
-rw-r--r--app-i18n/librime/librime-1.5.3-r1.ebuild (renamed from app-i18n/librime/librime-1.5.3.ebuild)6
2 files changed, 19 insertions, 1 deletions
diff --git a/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch
new file mode 100644
index 000000000000..7a36dea64d24
--- /dev/null
+++ b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch
@@ -0,0 +1,14 @@
+https://github.com/rime/librime/issues/316
+https://github.com/rime/librime/commit/90839b0b3d47cbfef715ea5f061c7505666ff75d
+
+--- /src/rime/setup.cc
++++ /src/rime/setup.cc
+@@ -35,6 +35,8 @@
+
+ RIME_API void SetupLogging(const char* app_name) {
+ #ifdef RIME_ENABLE_LOGGING
++ // Do not allow other users to read/write log files created by current process.
++ FLAGS_logfile_mode = 0600;
+ google::InitGoogleLogging(app_name);
+ #endif // RIME_ENABLE_LOGGING
+ }
diff --git a/app-i18n/librime/librime-1.5.3.ebuild b/app-i18n/librime/librime-1.5.3-r1.ebuild
index 9827ea65ff66..b41cd0ea4399 100644
--- a/app-i18n/librime/librime-1.5.3.ebuild
+++ b/app-i18n/librime/librime-1.5.3-r1.ebuild
@@ -28,7 +28,7 @@ RESTRICT="!test? ( test )"
BDEPEND=""
RDEPEND="app-i18n/opencc:0=
- dev-cpp/glog:0=
+ >=dev-cpp/glog-0.3.5:0=
dev-cpp/yaml-cpp:0=
dev-libs/boost:0=[nls,threads]
dev-libs/leveldb:0=
@@ -39,6 +39,10 @@ DEPEND="${RDEPEND}
x11-base/xorg-proto
test? ( dev-cpp/gtest )"
+PATCHES=(
+ "${FILESDIR}/${P}-log_files_mode.patch"
+)
+
DOCS=(CHANGELOG.md README.md)
src_prepare() {