security/doas: Update to 6.1
- Update the pkg-message to give users that install/upgrade the port some info about the changed behavior regarding the environment variables. [1]
- Make the configuration of target user's sanitized $PATH that is set at compile time more flexible by enabling users to configure it via _GLOBAL_PATH. [2]
- Also pet portlint/portclippy by placing USES to the top of the USES block and remove the superfluous occurence of GH_PROJECT while I'm here.
Changelog:
- Most environment variables are no longer copied to the target user's environment. This avoids corrupting files through use of $HOME, for example.
When environment variables are required, keepenv can be set in the doas.conf file.
- The target user's sanitized $PATH can be set at compile time to avoid passing malicious executables to the target user's path.
https://github.com/slicer69/doas/releases/tag/6.1
PR: 239629
Submitted by: jsmith@resonatingmedia.com (maintainer)
Approved by: jsmith@resonatingmedia.com (maintainer) [1] [2]
MFH: 2019Q3