From b0715d7aac673ce92cc3a558e6aa0543452763e7 Mon Sep 17 00:00:00 2001
From: Max Rees <maxcrees@me.com>
Date: Wed, 10 Jul 2019 19:12:07 -0400
Subject: system/bubblewrap: add non-setuid variant

---
 system/bubblewrap/APKBUILD | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

(limited to 'system/bubblewrap')

diff --git a/system/bubblewrap/APKBUILD b/system/bubblewrap/APKBUILD
index 1589504a6..8823c4db2 100644
--- a/system/bubblewrap/APKBUILD
+++ b/system/bubblewrap/APKBUILD
@@ -10,7 +10,8 @@ options="!check suid"  # requires suid to already be set in order to check
 license="LGPL-2.0+"
 makedepends="autoconf automake libcap-dev docbook-xsl"
 checkdepends="sudo"
-subpackages="$pkgname-doc $pkgname-bash-completion:bashcomp:noarch"
+subpackages="$pkgname-nosuid $pkgname-doc
+	$pkgname-bash-completion:bashcomp:noarch"
 source="bubblewrap-$pkgver.tar.gz::https://github.com/projectatomic/bubblewrap/archive/v$pkgver.tar.gz
 	realpath-workaround.patch
 	musl-fixes.patch
@@ -54,6 +55,15 @@ package() {
 	make install DESTDIR="$pkgdir"
 }
 
+nosuid() {
+	pkgdesc="$pkgdesc (non-setuid binary)"
+
+	mkdir -p "$subpkgdir"/usr/bin
+	cp "$pkgdir"/usr/bin/bwrap \
+		"$subpkgdir"/usr/bin/bwrap.nosuid
+	chmod -s "$subpkgdir"/usr/bin/bwrap.nosuid
+}
+
 bashcomp() {
 	pkgdesc="Bash completions for $pkgname"
 	depends=""
-- 
cgit v1.2.3-60-g2f50