Adding metadata

3 files changed, 93 insertions, 1 deletions

diff --git a/net-misc/tinyssh/Manifest b/net-misc/tinyssh/Manifest
index 9b0e3d3cfcbe..e257ba3f5db2 100644
--- a/net-misc/tinyssh/Manifest
+++ b/net-misc/tinyssh/Manifest
@@ -1,3 +1,5 @@
 DIST tinyssh-20260401.tar.gz 421859 BLAKE2B cdc6eb2ae16d8156ecab74321f7c591b329799ed4104d11367d7ed587d7c28982451c283063f9ba4c38c6b551301fd5ac6f0b14efc673e95d418a350427bb681 SHA512 be8d2fc6b5c660eb4ab5113dbb81199204f754dd654f1943d79bc71f1169cd6e8654094522df9f25c70c7506aa31cb601694d2e8564f6f12392931c9a21ce7d3
 DIST tinyssh-20260601.tar.gz 422063 BLAKE2B af2b12fe7947972af38c35379a5df39abd7fb19f528c1bf2f702c5fbb9af3ed600d29706e9128889a9fc25aeaa574c5fed5b00123113d15429c65c7d462e4efe SHA512 1d468b3c5324c4ccdd8c6f3027ad16bba052275227c06e22516759d30935c2a4fd8e487d22f38d197734520fc83ef84b2c02926d31ee9ca3b7070ea9259940bb
 DIST tinyssh-20260601.tar.gz.asc 833 BLAKE2B 50917553bf178769b5e652aaecb8f7c727803409f222bea08596eddeaa204b093612e16041db1da48a4cdfb03663e9aa9ca6170dcdcd1249dbc1ee2746be1d41 SHA512 10ef20de58510402267023d8612d3e13663226bbb51dea3f6f74af2785962bb302151bd374f0c4f958a9c47e2f46e2114326131194cec16db9595306066eda42
+DIST tinyssh-20260906.tar.gz 483353 BLAKE2B 1be5928b2600b57c30626a457956cdfbd264065755f2d5d603f144c72c066e9c2dd552d2a3acce9ab46a9948d392d1f5d171b29cd46ef1b2f7833e6d1a45f523 SHA512 446334a8252a134504dc33e73e2c40d72d5bbe74f0ba4841bb145ce4b30f0758280ced94d664975047f7de5a0b9c5a7b89ee5cbb99c9760b570f0da814bfc0ef
+DIST tinyssh-20260906.tar.gz.asc 833 BLAKE2B 393fed731e323238865b1d80b7fa2229335f2bc31db4c3c229090306970fd13154191f72dce2bc1105734d89ffd90cd9e0f2a3278aff6b8a429422edc6529174 SHA512 051143393787c36e5556c61424e2dd621ddc4ae7ba035d719d3ecbeaa66477d95ef2842ee6c58d4c6740c23b7e3340bd3c90efacc35c423defcd340b2091ef9e
diff --git a/net-misc/tinyssh/tinyssh-20260906.ebuild b/net-misc/tinyssh/tinyssh-20260906.ebuild
new file mode 100644
index 000000000000..c5312011542d
--- /dev/null
+++ b/net-misc/tinyssh/tinyssh-20260906.ebuild
@@ -0,0 +1,79 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+inherit systemd toolchain-funcs eapi9-ver
+
+DESCRIPTION="A small SSH server with state-of-the-art cryptography"
+HOMEPAGE="https://tinyssh.org"
+if [[ "${PV}" == "99999999" ]]; then
+	inherit git-r3
+	EGIT_REPO_URI="https://github.com/janmojzis/tinyssh.git"
+else
+	inherit verify-sig
+	SRC_URI="
+		https://github.com/janmojzis/${PN}/archive/${PV}.tar.gz -> ${P}.tar.gz
+		verify-sig? ( https://github.com/janmojzis/tinyssh/releases/download/${PV}/${PV}.tar.gz.asc -> ${P}.tar.gz.asc )
+	"
+	KEYWORDS="~amd64 ~arm64 ~x86"
+fi
+
+LICENSE="|| ( CC0-1.0 0BSD MIT-0 MIT )"
+SLOT="0"
+
+RDEPEND="
+	${DEPEND}
+	sys-apps/ucspi-tcp
+"
+if [[ "${PV}" != "99999999" ]]; then
+	BDEPEND="${BDEPEND} verify-sig? ( sec-keys/openpgp-keys-janmojzis )"
+	VERIFY_SIG_OPENPGP_KEY_PATH="/usr/share/openpgp-keys/janmojzis.asc"
+fi
+
+src_prepare() {
+	default
+
+	echo 'gentoo-autoheaders: $(AUTOHEADERS)' >> Makefile || die
+
+	# test-subprocess-auth.sh depends on checks if (sub)directories are
+	# owned either by current user or root, and not group-writable
+	# (/var/tmp/portage typically is g=rwX)
+	sed -i '/TESTS=/s,test-subprocess-auth[.]sh,,' tests/Makefile || die
+}
+
+src_configure() {
+	tc-export CC
+
+	emake gentoo-autoheaders
+
+	local i
+	for i in has*.log
+	do
+		einfo "$i"
+		cat "$i"
+	done
+}
+
+src_install() {
+	einstalldocs
+	emake install DESTDIR="${D}" PREFIX=/usr
+
+	newinitd "${FILESDIR}/${PN}.initd" "${PN}"
+	newconfd "${FILESDIR}/${PN}.confd" "${PN}"
+
+	systemd_newunit "${FILESDIR}/${PN}.service" "${PN}@.service"
+	systemd_newunit "${FILESDIR}/${PN}.socket" "${PN}@.socket"
+	systemd_dounit "${FILESDIR}/${PN}-makekey.service"
+}
+
+pkg_postinst() {
+	einfo "TinySSH is in beta stage, and ready for production use."
+	einfo "See https://tinyssh.org for more information."
+
+	if ver_replacing -lt "20260906"; then
+		elog "Starting with TinySSH-20260906 subdirectories of .ssh/authorized_keys"
+		elog "are checked against group-write permissions and owner not matching"
+		elog "root or target user"
+	fi
+}
diff --git a/net-misc/tinyssh/tinyssh-99999999.ebuild b/net-misc/tinyssh/tinyssh-99999999.ebuild
index 1f1d04b3f493..c5312011542d 100644
--- a/net-misc/tinyssh/tinyssh-99999999.ebuild
+++ b/net-misc/tinyssh/tinyssh-99999999.ebuild
@@ -3,7 +3,7 @@
 
 EAPI=8
 
-inherit systemd toolchain-funcs
+inherit systemd toolchain-funcs eapi9-ver
 
 DESCRIPTION="A small SSH server with state-of-the-art cryptography"
 HOMEPAGE="https://tinyssh.org"
@@ -35,6 +35,11 @@ src_prepare() {
 	default
 
 	echo 'gentoo-autoheaders: $(AUTOHEADERS)' >> Makefile || die
+
+	# test-subprocess-auth.sh depends on checks if (sub)directories are
+	# owned either by current user or root, and not group-writable
+	# (/var/tmp/portage typically is g=rwX)
+	sed -i '/TESTS=/s,test-subprocess-auth[.]sh,,' tests/Makefile || die
 }
 
 src_configure() {
@@ -65,4 +70,10 @@ src_install() {
 pkg_postinst() {
 	einfo "TinySSH is in beta stage, and ready for production use."
 	einfo "See https://tinyssh.org for more information."
+
+	if ver_replacing -lt "20260906"; then
+		elog "Starting with TinySSH-20260906 subdirectories of .ssh/authorized_keys"
+		elog "are checked against group-write permissions and owner not matching"
+		elog "root or target user"
+	fi
 }