PKGNAME=sudo
PKGSEC=admin
PKGDEP="linux-pam"
PKGSUG="sssd"
PKGDES="Give certain users the ability to run some commands as root"

# --disable-gss-krb5-ccache-name: (from configure.ac)
# gss_krb5_ccache_name() may not work on Heimdal so we don't use it by default
#
# SIA is Digital UNIX's authentication framework. Disable for Linux.
#
# Disabling insults to prevent confusing default experience.
AUTOTOOLS_AFTER=(
    "--with-rundir=/run/sudo"
    "--with-vardir=/var/db/sudo"
    "--enable-authentication"
    "--disable-root-mailer"
    "--enable-setreuid"
    "--enable-setresuid"
    "--enable-shadow"
    "--enable-root-sudo"
    "--enable-log-host"
    "--disable-noargs-shell"
    "--enable-shell-sets-home"
    "--enable-path-info"
    "--disable-env-debug"
    "--enable-zlib=system"
    "--enable-env-reset"
    "--enable-warnings"
    "--disable-werror"
    "--enable-ssp"
    "--enable-hardening"
    "--enable-pie"
    "--disable-sanitizer"
    "--disable-fuzzer"
    "--disable-fuzzer-engine"
    "--disable-fuzzer-linker"
    "--disable-leaks"
    "--enable-poll"
    "--disable-admin-flag"
    "--enable-nls"
    "--disable-rpath"
    "--disable-static-sudoers"
    "--enable-shared-libutil"
    "--enable-tmpfiles.d=/usr/lib/tmpfiles.d"
    "--enable-devsearch=/dev/pts:/dev/vt:/dev/term:/dev/zcons:/dev/pty:/dev"
    "--enable-sasl"
    "--enable-timestamp-type=tty"
    "--enable-package-build"
    "--disable-gss-krb5-ccache-name"
    "--disable-pvs-studio"
    "--enable-log-server"
    "--enable-log-client"
    "--enable-openssl"
    "--disable-wolfssl"
    "--enable-gcrypt"
    "--enable-python"
    "--disable-sia"
    "--enable-largefile"
    "--enable-pam-session"
    "--without-devel"
    "--without-bsm-audit"
    "--without-linux-audit"
    "--without-solaris-audit"
    "--with-sssd"
    "--without-passwd"
    "--without-skey"
    "--without-opie"
    "--without-long-otp-prompt"
    "--without-aixauth"
    "--with-pam"
    "--without-AFS"
    "--without-DCE"
    "--without-logincap"
    "--without-bsdauth"
    "--without-project"
    "--with-lecture"
    "--with-logging=both"
    "--with-logfac=auth"
    "--with-goodpri=notice"
    "--with-badpri=alert"
    "--with-logpath=/var/log/sudo.log"
    "--with-loglen=80"
    "--with-ignore_dot"
    "--with-mail-if-no-user"
    "--without-mail-if-no-host"
    "--without-mail-if-noperms"
    "--with-mailto=root"
    "--with-passprompt=[sudo] password for %p: "
    "--with-sudoers-mode=0440"
    "--with-sudoers-uid=0"
    "--with-sudoers-gid=0"
    "--with-umask=022"
    "--without-umask-override"
    "--with-runas-default=root"
    "--with-editor=/usr/bin/editor"
    "--with-env-editor"
    "--with-passwd-tries=3"
    "--with-timeout=5"
    "--with-password-timeout=5"
    "--with-tty-tickets"
    "--without-all-insults"
    "--without-classic-insults"
    "--without-csops-insults"
    "--without-hal-insults"
    "--without-goons-insults"
    "--without-python-insults"
    "--with-nsswitch"
    "--without-ldap"
    "--without-secure-path"
    "--with-interfaces"
    "--with-man"
    "--with-mdoc"
    "--without-selinux"
    "--without-apparmor"
    "--with-pam-login"
    "PYTHON=/usr/bin/python3"
)

RECONF=0

PKGESS=1

# Needed by Afterglow, whereas FAIL_ARCH defaults to mainline-only.
FAIL_ARCH="!(mainline|retro)"
