On 2021/08/01 07:30, Alessandro De Laurenzis wrote:
> Ciao Stuart,
> 
> Thanks for the feedback.
> 
> On 31/07/2021 17:20, Stuart Henderson wrote:
> [...]
> > 
> > Check that whatever you use for gaining privs during ports building
> > is configured to pass the environment through. i.e. SUDO=sudo -E
> > or if you use doas then make sure it has "keepenv".
> > 
> 
> I followed the bsd.port.mk(5) man page, as per PORTS_PRIVSEP variable
> description, and port building is running ok since years (including 'make
> package' of course) for ports that don't use FLAVORS...
> 
> From my /etc/doas.conf:
> 
> > # Port/package management
> > permit keepenv nopass :pkgmgr as _pfetch
> > permit keepenv nopass :pkgmgr as _pbuild
> 
> and, of course, my normal user is in the 'pkgmgr' group.

Two possibilities, one is that it's something running as root rather
than _pfetch/_pbuild, another is that the effective rule granting
access is not one of the above rules, but a different rule also
allowing running as that user but which doesn't have "keepenv"
(doas.conf is last-match-wins).

(FWIW I'm using sudo for ports work here, I find doas unusable for this
- partly due to the "don't pass authentication upwards" design feature,
partly due to the way it fails without giving another chance if I
mistype my password).

Reply via email to