net-misc/networkmanager-no-modify-system-patch (khoverlay)

Search

Masked: This package is masked.

Reason: This ebuild provides a general patch for NetworkManager under /etc/portage/patches. Please read the long description in metadata.xml before unmasking. Using equery from gentoolkit: equery meta -d net-misc/networkmanager-no-modify-system-patch

Masked by Bryan Gardiner on 2023-12-25

Install

Install this package:

emerge -a net-misc/networkmanager-no-modify-system-patch

If the package is masked, you can unmask it using the autounmask tool or standard emerge options:

autounmask net-misc/networkmanager-no-modify-system-patch

Or alternatively:

emerge --autounmask-write -a net-misc/networkmanager-no-modify-system-patch

Package Information

Description:
READ THIS BEFORE USING THIS PACKAGE. Official Gentoo packaging of NetworkManager >=1.42.6 unconditionally sets a nondefault build-time option (-Dmodify_system=true) that allows ALL logged in users to modify system connections, including reading network credentials (https://bugs.gentoo.org/905668). This ebuild provides a patch to the configure script that disables the logic behind this option, so that network settings are again protected from untrusted users and programs. This ebuild is package.masked by default as it has the potential to break the build of NetworkManager, especially on ~arch when a new version of NetworkManager is released and the patch no longer applies cleanly. Pings are welcome if things break on unstable and I haven't updated the patch yet. After installing this package for the first time, rebuilding net-misc/networkmanager is required.
Homepage:
https://khumba.net/
License:
Apache-2.0

Versions

Version EAPI Keywords Slot
1 8 ~alpha ~amd64 ~arm ~arm64 ~ia64 ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86 0

Metadata

Description

Maintainers

Raw Metadata XML
<pkgmetadata>
	<maintainer type="person">
		<email>bog@khumba.net</email>
		<name>Bryan Gardiner</name>
	</maintainer>
	<longdescription>
    READ THIS BEFORE USING THIS PACKAGE.

    Official Gentoo packaging of NetworkManager >=1.42.6 unconditionally
    sets a nondefault build-time option (-Dmodify_system=true) that
    allows ALL logged in users to modify system connections, including
    reading network credentials (https://bugs.gentoo.org/905668).  This
    ebuild provides a patch to the configure script that disables the
    logic behind this option, so that network settings are again
    protected from untrusted users and programs.

    This ebuild is package.masked by default as it has the potential to
    break the build of NetworkManager, especially on ~arch when a new
    version of NetworkManager is released and the patch no longer
    applies cleanly.  Pings are welcome if things break on unstable and
    I haven't updated the patch yet.

    After installing this package for the first time, rebuilding
    net-misc/networkmanager is required.
  </longdescription>
</pkgmetadata>

Lint Warnings

Files

Manifest

Type File Size Versions
Unmatched Entries
Type File Size
AUX nm-1.42.6-neuter-modify-system.patch 798 bytes
EBUILD networkmanager-no-modify-system-patch-1.ebuild 977 bytes
MISC metadata.xml 1228 bytes