1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-27 16:11:58 +00:00
nixpkgs/pkgs/servers/samba/default.nix
Vladimír Čunát db1afc01d2 samba: security-only updates 2.6.22 -> .24
Fixes CVE-2014-{0244,3493} and CVE-2013-4496
2014-06-26 22:23:09 +02:00

90 lines
3 KiB
Nix

{ stdenv, fetchurl, readline, pam ? null, openldap ? null
, popt, iniparser, libunwind
, fam ? null , acl ? null, cups ? null
, useKerberos ? false, kerberos ? null, winbind ? true
# Eg. smbclient and smbspool require a smb.conf file.
# If you set configDir to "" an empty configuration file
# $out/lib/smb.conf is is created for you.
#
# configDir defaults to "/etc/samba" so that smbpassword picks up
# the location of its passwd db files from the system configuration file
# /etc/samba/smb.conf. That's why nixos touches /etc/samba/smb.conf even if you
# don't enable the samba upstart service.
, configDir ? "/etc/samba"
}:
assert useKerberos -> kerberos != null;
stdenv.mkDerivation rec {
name = "samba-3.6.24";
src = fetchurl {
url = "http://samba.org/samba/ftp/stable/${name}.tar.gz";
sha256 = "19rln8m1k359bz6dhmlv39kzyjg7p296dz4y4mq1jwrlnw2bvl0i";
};
buildInputs = [ readline pam openldap popt iniparser libunwind fam acl cups ]
++ stdenv.lib.optional useKerberos kerberos;
enableParallelBuilding = true;
postPatch =
# XXX: Awful hack to allow cross-compilation.
'' sed -i source3/configure \
-e 's/^as_fn_error .. \("cannot run test program while cross compiling\)/$as_echo \1/g'
''; # "
preConfigure =
'' cd source3
export samba_cv_CC_NEGATIVE_ENUM_VALUES=yes
export libreplace_cv_HAVE_GETADDRINFO=yes
export ac_cv_file__proc_sys_kernel_core_pattern=no # XXX: true on Linux, false elsewhere
'';
configureFlags =
stdenv.lib.optionals (pam != null) [ "--with-pam" "--with-pam_smbpass" ]
++ [ "--with-aio-support"
"--disable-swat"
"--with-configdir=${configDir}"
"--with-fhs"
"--localstatedir=/var"
]
++ (stdenv.lib.optional winbind "--with-winbind")
++ (stdenv.lib.optional (stdenv.gcc.libc != null) "--with-libiconv=${stdenv.gcc.libc}");
# Need to use a DESTDIR because `make install' tries to write in /var and /etc.
installFlags = "DESTDIR=$(TMPDIR)/inst";
stripAllList = [ "bin" "sbin" ];
postInstall =
''
mkdir -p $out
mv $TMPDIR/inst/$out/* $out/
mkdir -p "$out/lib/pkgconfig"
cp pkgconfig/*.pc "$out/lib/pkgconfig"
mkdir -pv $out/lib/cups/backend
ln -sv ../../../bin/smbspool $out/lib/cups/backend/smb
mkdir -pv $out/etc/openldap/schema
cp ../examples/LDAP/samba.schema $out/etc/openldap/schema
# For nsswitch. Glibc >= 2.1 looks for libnss_<name>.so.2 (see man
# nsswitch.conf), so provide that too.
cp -v ../nsswitch/libnss_wins.so "$out/lib"
cp -v ../nsswitch/libnss_winbind.so "$out/lib"
(cd "$out/lib" && ln -s libnss_winbind.so libnss_winbind.so.2)
(cd "$out/lib" && ln -s libnss_wins.so libnss_wins.so.2)
'' # */
+ stdenv.lib.optionalString (configDir == "") "touch $out/lib/smb.conf";
meta = {
homepage = http://www.samba.org/;
description = "The standard Windows interoperability suite of programs for Linux and Unix";
platforms = stdenv.lib.platforms.linux;
};
}