From 6b7638d6ef3d0231e3f64ae42df7ae2aac044436 Mon Sep 17 00:00:00 2001
From: sergio <sergiovelasquezzeballos@gmail.com>
Date: Fri, 10 Jul 2026 22:44:18 -0400
Subject: [PATCH] =?UTF-8?q?base-system:=20doas=20construye=20=E2=80=94=20e?=
 =?UTF-8?q?scalado=20de=20privilegios=20minimalista=20est=C3=A1tico?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

b3:e2d2244d. configure --without-pam ya andaba (bison=yacc para parse.y); el fallo era el install
(chown root:root falla en el sandbox + doas.conf de aports ausente) → copia manual del binario.
---
 recipes/incoming-clib/doas.toml | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/recipes/incoming-clib/doas.toml b/recipes/incoming-clib/doas.toml
index 2794e041..1ca39193 100644
--- a/recipes/incoming-clib/doas.toml
+++ b/recipes/incoming-clib/doas.toml
@@ -30,15 +30,13 @@ _abuild_phase() {
 }
 _abuild_phase
 '''
-# de package() de Alpine (traducido $pkgdir→/out):
+# package(): copia manual (make install hace chown root:root → falla en el sandbox;
+# doas.conf de aports no viaja). El binario setuid es cosa de la hidratación.
 install = '''
 _abuild_phase() {
-make install DESTDIR="/out"
-
-	install -d -m 750 "/out"/etc/doas.d
-	install -m 640 "$srcdir"/doas.conf -t "/out"/etc/
-
-	install -D -m 644 "$srcdir"/doas.conf "/out"/usr/share/doc/doas/doas.conf.example
+	install -D -m 755 doas "/out"/usr/bin/doas
+	install -D -m 644 doas.1 "/out"/usr/share/man/man1/doas.1 2>/dev/null || true
+	install -D -m 644 doas.conf.5 "/out"/usr/share/man/man5/doas.conf.5 2>/dev/null || true
 }
 _abuild_phase
 '''