Adding debian version 20211204-1.HEADmain

Signed-off-by: Daniel Baumann <daniel.baumann@open-infrastructure.net>

12 files changed, 192 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..387ab0b
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,5 @@
+open-infrastructure-root-shell (20211204-1) sid; urgency=low
+
+  * Initial release.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org>  Sat, 04 Dec 2021 17:43:50 +0100
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..d7419ca
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,22 @@
+Source: open-infrastructure-root-shell
+Section: admin
+Priority: optional
+Maintainer: Daniel Baumann <daniel.baumann@progress-linux.org>
+Build-Depends:
+ debhelper-compat (= 13),
+ python3-docutils,
+Rules-Requires-Root: no
+Standards-Version: 4.6.0
+Homepage: https://open-infrastructure.net/software/root-shell
+Vcs-Browser: https://git.progress-linux.org/users/daniel.baumann/debian/packages/open-infrastructure-root-shell
+Vcs-Git: https://git.progress-linux.org/users/daniel.baumann/debian/packages/open-infrastructure-root-shell
+
+Package: open-infrastructure-root-shell
+Section: admin
+Architecture: any
+Depends:
+ ${misc:Depends},
+Provides:
+ root-shell,
+Description: hack to gain root privileges
+ FIXME.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..b012a23
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,25 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: root-shell
+Upstream-Contact: Open Infrastructure <software@lists.open-infrastructure.net>
+Source: https://get.open-infrastructure.net/software/root-shell
+
+Files: *
+Copyright: 2014-2021 Daniel Baumann <daniel.baumann@open-infrastructure.net>
+License: GPL-3+
+
+License: GPL-3+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ .
+ The full text of the GNU General Public License version 3
+ can be found in the file /usr/share/common-licenses/GPL-3.
diff --git a/debian/open-infrastructure-root-shell.config b/debian/open-infrastructure-root-shell.config
new file mode 100644
index 0000000..7d485e3
--- /dev/null
+++ b/debian/open-infrastructure-root-shell.config
@@ -0,0 +1,11 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+
+db_settitle open-infrastructure-root-shell/title
+db_input low open-infrastructure-root-shell/setuid-root || true
+db_go
+
+db_stop
diff --git a/debian/open-infrastructure-root-shell.lintian-overrides b/debian/open-infrastructure-root-shell.lintian-overrides
new file mode 100644
index 0000000..cf8cd51
--- /dev/null
+++ b/debian/open-infrastructure-root-shell.lintian-overrides
@@ -0,0 +1,2 @@
+open-infrastructure-root-shell: command-with-path-in-maintainer-script /bin/root-shell (plain script) [preinst:8]
+open-infrastructure-root-shell: statically-linked-binary bin/root-shell
diff --git a/debian/open-infrastructure-root-shell.postinst b/debian/open-infrastructure-root-shell.postinst
new file mode 100755
index 0000000..0d83f5f
--- /dev/null
+++ b/debian/open-infrastructure-root-shell.postinst
@@ -0,0 +1,49 @@
+#!/bin/sh
+
+set -e
+
+case "${1}" in
+	configure)
+		. /usr/share/debconf/confmodule
+
+		db_get open-infrastructure-root-shell/setuid-root
+		SETUID_ROOT="${RET}" # boolean
+
+		db_stop
+
+		case "${SETUID_ROOT}" in
+			true)
+				echo -n "Adding setuid bit on /bin/root-shell..."
+
+				# don't stop on errors for robustness reasons
+				chown root:root /bin/root-shell || true
+				chmod 4755 /bin/root-shell || true
+
+				echo " done."
+				;;
+
+			false)
+				echo -n "Removing setuid bit on /bin/root-shell..."
+
+				# don't stop on errors for robustness reasons
+				chown root:root /bin/root-shell || true
+				chmod 0755 /bin/root-shell || true
+
+				echo " done."
+				;;
+		esac
+		;;
+
+	abort-upgrade|abort-remove|abort-deconfigure)
+
+		;;
+
+	*)
+		echo "postinst called with unknown argument \`${1}'" >&2
+		exit 1
+		;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/open-infrastructure-root-shell.templates b/debian/open-infrastructure-root-shell.templates
new file mode 100644
index 0000000..19f95e5
--- /dev/null
+++ b/debian/open-infrastructure-root-shell.templates
@@ -0,0 +1,10 @@
+Template: open-infrastructure-root-shell/title
+Type: title
+_Description: root-shell: Setup
+
+Template: open-infrastructure-root-shell/setuid-root
+Type: boolean
+Default: true
+_Description: Setting root-shell setuid bit?
+ Setting the setuid bit for /bin/root-shell allows any user to start a root
+ shell.
diff --git a/debian/po/POTFILES.in b/debian/po/POTFILES.in
new file mode 100644
index 0000000..04f4fe2
--- /dev/null
+++ b/debian/po/POTFILES.in
@@ -0,0 +1 @@
+[type: gettext/rfc822deb] open-infrastructure-root-shell.templates
diff --git a/debian/po/templates.pot b/debian/po/templates.pot
new file mode 100644
index 0000000..2c3866b
--- /dev/null
+++ b/debian/po/templates.pot
@@ -0,0 +1,38 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
+# This file is distributed under the same license as the open-infrastructure-root-shell package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: open-infrastructure-root-shell\n"
+"Report-Msgid-Bugs-To: open-infrastructure-root-shell@packages.debian.org\n"
+"POT-Creation-Date: 2021-12-04 17:59+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Type: title
+#. Description
+#: ../open-infrastructure-root-shell.templates:1001
+msgid "root-shell: Setup"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../open-infrastructure-root-shell.templates:2001
+msgid "Setting root-shell setuid bit?"
+msgstr ""
+
+#. Type: boolean
+#. Description
+#: ../open-infrastructure-root-shell.templates:2001
+msgid ""
+"Setting the setuid bit for /bin/root-shell allows any user to start a root "
+"shell."
+msgstr ""
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..7b40d5c
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,14 @@
+#!/usr/bin/make -f
+
+PACKAGE := open-infrastructure-root-shell
+
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+%:
+	dh ${@}
+
+execute_after_dh_auto_install:
+	rm -f debian/$(PACKAGE)/usr/share/doc/*/CHANGELOG.txt
+	rm -f debian/$(PACKAGE)/usr/share/doc/*/LICENSE.txt
+
+	mv debian/$(PACKAGE)/usr/share/doc/* debian/$(PACKAGE)/usr/share/doc/$(PACKAGE)
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc
new file mode 100644
index 0000000..1e1884d
--- /dev/null
+++ b/debian/upstream/signing-key.asc
@@ -0,0 +1,14 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=Tn5F
+-----END PGP PUBLIC KEY BLOCK-----