[83671] trunk/dports/emulators/virtualbox

[rmstonecipher at macports.org]

Revision: 83671
          http://trac.macports.org/changeset/83671
Author:   rmstonecipher at macports.org
Date:     2011-09-08 19:36:43 -0700 (Thu, 08 Sep 2011)
Log Message:
-----------
emulators/virtualbox enable hardening (closes ticket #30992)

Modified Paths:
--------------
    trunk/dports/emulators/virtualbox/Portfile
    trunk/dports/emulators/virtualbox/files/patch-build.diff

Modified: trunk/dports/emulators/virtualbox/Portfile
===================================================================
--- trunk/dports/emulators/virtualbox/Portfile	2011-09-09 02:34:11 UTC (rev 83670)
+++ trunk/dports/emulators/virtualbox/Portfile	2011-09-09 02:36:43 UTC (rev 83671)
@@ -6,7 +6,7 @@
 
 name                virtualbox
 version             4.1.2
-revision            3
+revision            4
 categories          emulators
 maintainers         nomaintainer
 description         open source virtualization technology from Oracle
@@ -55,8 +55,7 @@
 
 configure.pre_args-delete   --prefix=${prefix}
 
-configure.args              --disable-hardening \
-                            --with-qt-dir=${prefix} \
+configure.args              --with-qt-dir=${prefix} \
                             --with-openssl-dir=${prefix}
 
 # VirtualBox uses kBuild.
@@ -68,8 +67,25 @@
 set kext_dir                /Library/Extensions
 set startup_items_dir       /Library/StartupItems
 
+pre-extract {
+
+    set head_path ${applications_dir}
+
+    while {${head_path} != "/"} {
+
+        if {[file attributes ${head_path} -owner] != "root" || [file attributes ${head_path} -group] != "admin"} {
+            error "VirtualBox requires the \"${applications_dir}\" directory and its parent directories to have\
+root:admin ownership."
+        }
+
+        set head_path [file dirname ${head_path}]
+    }
+}
+
 post-patch {
 
+    reinplace "s|@APPLICATIONS_DIR@|${applications_dir}|g" \
+        ${worksrcpath}/LocalConfig.kmk
     reinplace "s|@CONFIGURE\\.CC@|${configure.cc}|g" \
         ${worksrcpath}/configure
     reinplace "s|@CONFIGURE\\.CXX@|${configure.cxx}|g" \
@@ -102,7 +118,7 @@
 
     # Create proxies for binaries bundled with VirtualBox.app.
 
-    foreach app_proxy [list VirtualBox VBoxManage VBoxHeadless] {
+    foreach app_proxy [list VirtualBox VBoxBalloonCtrl VBoxManage VBoxHeadless] {
 
         set app_proxy_file [open ${destroot}${prefix}/bin/${app_proxy} w]
 
@@ -113,6 +129,10 @@
 
         file attributes ${destroot}${prefix}/bin/${app_proxy} -permissions "+x"
     }
+
+    foreach executable [list VirtualBox VirtualBoxVM VBoxHeadless VBoxNetAdpCtl VBoxNetDHCP] {
+        file attributes ${destroot}${applications_dir}/VirtualBox.app/Contents/MacOS/${executable} -permissions "u+s"
+    }
 }
 
 variant vde2 description {Enable support for VDE} {

Modified: trunk/dports/emulators/virtualbox/files/patch-build.diff
===================================================================
--- trunk/dports/emulators/virtualbox/files/patch-build.diff	2011-09-09 02:34:11 UTC (rev 83670)
+++ trunk/dports/emulators/virtualbox/files/patch-build.diff	2011-09-09 02:36:43 UTC (rev 83671)
@@ -64,10 +64,17 @@
     VBOX_PATH_QT4          ?= /usr
 --- /dev/null	2011-08-15 19:38:06.000000000 -0500
 +++ LocalConfig.kmk	2011-08-15 19:38:17.000000000 -0500
-@@ -0,0 +1,3 @@
+@@ -0,0 +1,10 @@
 +VBOX_DEF_MACOSX_VERSION_MIN = 10.6
 +VBOX_DARWIN_NO_COMPACT_LINKEDIT =
 +VBOX_MACOS_10_5_WORKAROUND =
++VBOX_PATH_APP_DOCS="@APPLICATIONS_DIR@/VirtualBox.app/Contents/MacOS"
++VBOX_PATH_APP_PRIVATE="@APPLICATIONS_DIR@/VirtualBox.app/Contents/MacOS"
++VBOX_PATH_APP_PRIVATE_ARCH="@APPLICATIONS_DIR@/VirtualBox.app/Contents/MacOS"
++VBOX_PATH_SHARED_LIBS="@APPLICATIONS_DIR@/VirtualBox.app/Contents/MacOS"
++VBOX_WITH_TESTSUITE=
++VBOX_WITH_TESTCASES=
++kBuildGlobalDefaults_LD_DEBUG=
 --- Makefile.kmk.orig	2011-08-15 19:38:16.000000000 -0500
 +++ Makefile.kmk	2011-08-15 19:38:16.000000000 -0500
 @@ -182,47 +182,6 @@
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/macports-changes/attachments/20110908/288cf7c8/attachment.html>