[patch] Strongswan-5.0.0.ebuild patch correcting the issue (please check!)

strongswan_update_description.patch (text/plain), 1.67 KB, created by Ronald on 2012-07-01 12:50:08 UTC

--- strongswan-5.0.0.ebuild	2012-07-01 12:45:17.000000000 +0200
+++ /tmp/strongswan-5.0.0.ebuild	2012-07-01 14:38:14.566771198 +0200
@@ -235,24 +235,16 @@
 	if use non-root; then
 		elog
 		elog "${PN} has been installed without superuser privileges (USE=non-root)."
-		elog "This imposes several limitations mainly to the IKEv1 daemon 'pluto'"
-		elog "but also a few to the IKEv2 daemon 'charon'."
 		elog
 		elog "Please carefully read: http://wiki.strongswan.org/wiki/nonRoot"
 		elog
-		elog "pluto uses a helper script by default to insert/remove routing and"
-		elog "policy rules upon connection start/stop which requires superuser"
-		elog "privileges. charon in contrast does this internally and can do so"
-		elog "even with reduced (user) privileges."
-		elog
-		elog "Thus if you require IKEv1 (pluto) or need to specify a custom updown"
-		elog "script to pluto or charon which requires superuser privileges, you"
-		elog "can work around this limitation by using sudo to grant the"
-		elog "user \"ipsec\" the appropriate rights."
+		elog "If you require a custom updown script which requires superuser"
+		elog "privileges, you can work around this limitation by using sudo to"
+		elog "grant the user \"${UGID}\" the appropriate rights."
 		elog "For example (the default case):"
-		elog "/etc/sudoers:"
-		elog "  Defaults:ipsec always_set_home,!env_reset"
-		elog "  ipsec ALL=(ALL) NOPASSWD: /usr/sbin/ipsec"
+		elog "/etc/sudoers.d/strongswan:"
+		elog "  Defaults:${UGID} always_set_home,!env_reset"
+		elog "  ${UGID} ALL=(ALL) NOPASSWD: /usr/sbin/ipsec _updown"
 		elog "Under the specific connection block in /etc/ipsec.conf:"
 		elog "  leftupdown=\"sudo ipsec _updown\""
 		elog