646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
67 lines
1.4 KiB
Nix
67 lines
1.4 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
fetchurl,
|
|
bison,
|
|
flex,
|
|
pam,
|
|
udevCheckHook,
|
|
}:
|
|
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "gradm";
|
|
version = "3.1-202111052217";
|
|
|
|
src = fetchurl {
|
|
url = "https://grsecurity.net/stable/gradm-${finalAttrs.version}.tar.gz";
|
|
hash = "sha256-JFkpDzZ6R8ihzk6i7Ag1l5nqM9wV7UQ2Q5WWzogoT7k=";
|
|
};
|
|
|
|
nativeBuildInputs = [
|
|
bison
|
|
flex
|
|
udevCheckHook
|
|
];
|
|
|
|
buildInputs = [ pam ];
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
makeFlags = [
|
|
"DESTDIR=${placeholder "out"}"
|
|
"LEX=${flex}/bin/flex"
|
|
"MANDIR=/share/man"
|
|
"MKNOD=true"
|
|
];
|
|
|
|
preBuild = ''
|
|
substituteInPlace Makefile \
|
|
--replace "/usr/bin/" "" \
|
|
--replace "/usr/include/security/pam_" "${pam}/include/security/pam_"
|
|
|
|
substituteInPlace gradm_defs.h \
|
|
--replace "/sbin/grlearn" "$out/bin/grlearn" \
|
|
--replace "/sbin/gradm" "$out/bin/gradm" \
|
|
--replace "/sbin/gradm_pam" "$out/bin/gradm_pam"
|
|
|
|
echo 'inherit-learn /nix/store' >>learn_config
|
|
|
|
mkdir -p "$out/etc/udev/rules.d"
|
|
'';
|
|
|
|
doInstallCheck = true;
|
|
|
|
postInstall = "rmdir $out/dev";
|
|
|
|
meta = {
|
|
description = "grsecurity RBAC administration and policy analysis utility";
|
|
homepage = "https://grsecurity.net";
|
|
license = lib.licenses.gpl2Only;
|
|
platforms = lib.platforms.linux;
|
|
maintainers = with lib.maintainers; [
|
|
thoughtpolice
|
|
joachifm
|
|
];
|
|
};
|
|
})
|