# Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net>
# Contributor: Łukasz Jendrysik <scadu@yandex.com>
# Maintainer: Celeste <cielesti@protonmail.com>
maintainer="Celeste <cielesti@protonmail.com>"
pkgname=sudo
pkgver=1.9.17_p1
pkgrel=0
_realver=${pkgver/_/}
pkgdesc="Give certain users the ability to run some commands as root"
url="https://www.sudo.ws/sudo/"
arch="all"
license="custom ISC"
makedepends_host="zlib-dev"
subpackages="$pkgname-doc-extra::noarch $pkgname-doc $pkgname-dev"
source="https://www.sudo.ws/dist/sudo-$_realver.tar.gz"
options="suid"
builddir="$srcdir/sudo-$_realver"

provides="sudo-virt"
provider_priority=100
replaces="sudo-ldap"

# secfixes:
#   1.9.17_p1-r0:
#     - CVE-2025-32462
#     - CVE-2025-32463
#   1.9.12_p2-r0:
#     - CVE-2023-22809
#   1.9.5_p2-r0:
#     - CVE-2021-3156
#   1.9.5-r0:
#     - CVE-2021-23239
#     - CVE-2021-23240
#   1.8.31-r0:
#     - CVE-2019-18634
#   1.8.28-r0:
#     - CVE-2019-14287
#   1.8.20_p2-r0:
#     - CVE-2017-1000368

build() {
	CFLAGS="$CFLAGS -flto=auto" \
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--libexecdir=/usr/lib \
		--mandir=/usr/share/man \
		--with-rundir=/run/sudo \
		--with-vardir=/var/lib/sudo \
		--with-tzdir=/usr/share/zoneinfo \
		--with-logdir=/var/log \
		--with-iologdir=/var/log/sudo-io \
		--with-logpath=/var/log/sudo.log \
		--with-relaydir=/var/log/sudo_logsrvd \
		--disable-nls \
		--enable-pie \
		--with-env-editor \
		--with-mdoc \
		--without-pam \
		--without-skey \
		--with-sendmail=/usr/sbin/sendmail \
		--with-passprompt="[sudo] password for %p: "

	make
}

check() {
	make check
}

package() {
	# the sudo's mkinstalldir script miscreates the leading
	# path components with bad permissions. fix this.
	install -dm0755 "$pkgdir"/var "$pkgdir"/var/db
	make -j1 DESTDIR="$pkgdir" install

	# Exactly the same as /etc/sudoers
	rm -v "$pkgdir"/etc/sudoers.dist
}

extra() {
	pkgdesc="$pkgdesc (examples and news)"

	amove usr/share/doc
}

sha512sums="
1a9fb27a117b54adf5c99443b3375f7e0eaaf3a2d5a3d409f7c7b10c43432eb301d721df93fb1a8a2e45bf4a4957288d4f153359fc018af00973be57f62a1ebc  sudo-1.9.17p1.tar.gz
"
