tjh.dev
super: fixed url to source and added patch for CVE-2014-0470
+10
-4
pkgs/tools/security/super/default.nix
+10
-4
pkgs/tools/security/super/default.nix
···
1
-
{ stdenv, fetchurl }:
1
+
{ stdenv, fetchurl, fetchpatch }:
2
2
3
3
stdenv.mkDerivation rec {
4
4
name = "super-3.30.0";
5
5
6
6
src = fetchurl {
7
7
name = "${name}.tar.gz";
8
-
url = "http://ftp.ucolick.org/pub/users/will/${name}-tar.gz";
9
-
sha256 = "1sxgixx1yg7h8g9799v79rk15gb39gn7p7fx032c078wxx38qwq4";
8
+
url = "http://www.ucolick.org/~will/RUE/super/${name}-tar.gz";
9
+
sha256 = "0k476f83w7f45y9jpyxwr00ikv1vhjiq0c26fgjch9hnv18icvwy";
10
10
};
11
11
12
+
patches = [
13
+
(fetchpatch { url = http://anonscm.debian.org/cgit/users/robert/super.git/plain/debian/patches/14-Fix-unchecked-setuid-call.patch;
14
+
sha256 = "08m9hw4kyfjv0kqns1cqha4v5hkgp4s4z0q1rgif1fnk14xh7wqh";
15
+
})
16
+
];
17
+
12
18
NIX_CFLAGS_COMPILE = "-D_GNU_SOURCE";
13
19
14
20
configureFlags = "--sysconfdir=/etc --localstatedir=/var";
···
16
22
installFlags = "sysconfdir=$(out)/etc localstatedir=$(TMPDIR)";
17
23
18
24
meta = {
19
-
homepage = http://ftp.ucolick.org/pub/users/will/;
25
+
homepage = http://www.ucolick.org/~will/;
20
26
description = "Allows users to execute scripts as if they were root";
21
27
longDescription =
22
28
''