[140972] trunk/dports/security/yubico-pam/Portfile

[cal at macports.org]

Revision: 140972
          https://trac.macports.org/changeset/140972
Author:   cal at macports.org
Date:     2015-10-06 16:23:48 -0700 (Tue, 06 Oct 2015)
Log Message:
-----------
yubico-pam: Update to 2.20, work around El Cap's SIP limitations

This should fix #49040. I hope that absolute paths can be specified as pam
modules in /etc/pam.d, otherwise this is going to get difficult to get done
correctly.

Modified Paths:
--------------
    trunk/dports/security/yubico-pam/Portfile

Modified: trunk/dports/security/yubico-pam/Portfile
===================================================================
--- trunk/dports/security/yubico-pam/Portfile	2015-10-06 23:11:44 UTC (rev 140971)
+++ trunk/dports/security/yubico-pam/Portfile	2015-10-06 23:23:48 UTC (rev 140972)
@@ -4,9 +4,9 @@
 PortSystem      1.0
 PortGroup       github 1.0
 
-github.setup    Yubico yubico-pam 2.19
-checksums       rmd160  c1233572bf8e7c9d6d5571f3c9eb97d053fe334f \
-                sha256  1d4ddceb6519b1a3be6083f20c509105a2a6633a6983ebba7a9127e65095b32f
+github.setup    Yubico yubico-pam 2.20
+checksums       rmd160  40b9f92a2739aa9f14b6d24ff1856a5263dce555 \
+                sha256  3ef160e9b313c0b13b8d96bba5818cb2ae00e5b3972fb8b1d2d45b5dfc5d7cf0
 
 
 # I'm explicitly not marking this openmaintainer
@@ -36,15 +36,26 @@
 
 use_autoreconf  yes
 
-configure.args  --with-pam-dir=/usr/lib/pam \
-                --without-ldap
+if {${os.platform} eq "darwin" && ${os.major} >= 15} {
+    configure.args  --with-pam-dir=${prefix}/lib/pam
 
-destroot.violate_mtree \
-                yes
+    notes "
+On systems earlier than El Capitan, this port used to install pam_yubico.so in\
+/usr/lib/pam directly for your convenience. With El Capitan's System Integrity\
+Protection (\"rootless\"), this is no longer possible. The library is now\
+installed in ${prefix}/lib/pam instead. You have to modify your PAM\
+configuration to reference the library using it's absolute path\
+${prefix}/lib/pam/pam_yubico.so"
 
+} else {
+    configure.args          --with-pam-dir=/usr/lib/pam
+    destroot.violate_mtree  yes
+}
+
+configure.args-append       --without-ldap
+
 post-destroot {
     # remove header which is unneeded, because there's no software linking
     # against yubico-pam and which clashes with a system header
     file delete ${destroot}${prefix}/include/util.h
 }
-
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/macports-changes/attachments/20151006/ac0bbe03/attachment.html>