commit: d149e41c89b85dff47bd5cdc332e6c0817acdd72 Author: Arfrever Frehtes Taifersar Arahesis <Arfrever <AT> Apache <DOT> Org> AuthorDate: Mon Dec 23 21:18:36 2019 +0000 Commit: Mike Gilbert <floppym <AT> gentoo <DOT> org> CommitDate: Sun Dec 29 19:31:34 2019 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d149e41c
app-i18n/librime: Set secure mode of log files. Bug: https://bugs.gentoo.org/695702 Signed-off-by: Arfrever Frehtes Taifersar Arahesis <Arfrever <AT> Apache.Org> Signed-off-by: Mike Gilbert <floppym <AT> gentoo.org> app-i18n/librime/files/librime-1.5.3-log_files_mode.patch | 14 ++++++++++++++ .../{librime-1.5.3.ebuild => librime-1.5.3-r1.ebuild} | 6 +++++- 2 files changed, 19 insertions(+), 1 deletion(-) diff --git a/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch new file mode 100644 index 00000000000..7a36dea64d2 --- /dev/null +++ b/app-i18n/librime/files/librime-1.5.3-log_files_mode.patch @@ -0,0 +1,14 @@ +https://github.com/rime/librime/issues/316 +https://github.com/rime/librime/commit/90839b0b3d47cbfef715ea5f061c7505666ff75d + +--- /src/rime/setup.cc ++++ /src/rime/setup.cc +@@ -35,6 +35,8 @@ + + RIME_API void SetupLogging(const char* app_name) { + #ifdef RIME_ENABLE_LOGGING ++ // Do not allow other users to read/write log files created by current process. ++ FLAGS_logfile_mode = 0600; + google::InitGoogleLogging(app_name); + #endif // RIME_ENABLE_LOGGING + } diff --git a/app-i18n/librime/librime-1.5.3.ebuild b/app-i18n/librime/librime-1.5.3-r1.ebuild similarity index 95% rename from app-i18n/librime/librime-1.5.3.ebuild rename to app-i18n/librime/librime-1.5.3-r1.ebuild index 9827ea65ff6..b41cd0ea439 100644 --- a/app-i18n/librime/librime-1.5.3.ebuild +++ b/app-i18n/librime/librime-1.5.3-r1.ebuild @@ -28,7 +28,7 @@ RESTRICT="!test? ( test )" BDEPEND="" RDEPEND="app-i18n/opencc:0= - dev-cpp/glog:0= + >=dev-cpp/glog-0.3.5:0= dev-cpp/yaml-cpp:0= dev-libs/boost:0=[nls,threads] dev-libs/leveldb:0= @@ -39,6 +39,10 @@ DEPEND="${RDEPEND} x11-base/xorg-proto test? ( dev-cpp/gtest )" +PATCHES=( + "${FILESDIR}/${P}-log_files_mode.patch" +) + DOCS=(CHANGELOG.md README.md) src_prepare() {
