commit aa44e00181506ee06e525146abf91be854a6687f
Author: Sam James <sam@gentoo.org>
Date: Thu Oct 8 21:07:16 2026 +0100

Revert "net-*/*: stop exporting `$pidfile` in OpenRC service scripts (insecure)"

This reverts commit 3ed37b3ed56c7f3c6cb801698c48e1546fd54628.

The change was not tested: https://codeberg.org/gentoo/guru/pulls/92#issuecomment-24933276

Signed-off-by: Sam James <sam@gentoo.org>

commit 3ed37b3ed56c7f3c6cb801698c48e1546fd54628
Author: zyxhere???? <zyx@envs.net>
Date: Mon Sep 28 22:53:46 2026 +0000

net-*/*: stop exporting `$pidfile` in OpenRC service scripts (insecure)

Say it with me: the pidfile and its parent directories should
only be writable by root unless you use supervise-daemon ;)

With `checkpath -o someuser:someuser $pidfile` in start_pre(), it can
cause DOS attacks because the now unprivelaged process can replace the
pidfile with some other pid number in it like pid 1 and cause the host
machine to crash when the daemon finally stops. Supervise-daemon can
supervise without the daemon creating a pidfile so don't export the
variable at all.

That assumes the scripts *are* using supervise-daemon, if
supervise-daemon fails to start (due to maybe some incorrect config
option *wink wink*) then OpenRC falls back to the older
start-stop-daemon and that *does* use the $pidfile. If thats the case
then the daemon will simply fail to start (yes I haven't tested if any
these packages work without $pidfile which they should since they are
specifying `supervisor=supervise-daemon`).

IMO failing to start is better than running in a potentially vulnerable
configuration.

Merges: https://codeberg.org/gentoo/guru/pulls/92
Part-off: https://codeberg.org/gentoo/guru/pulls/92
Signed-off-by: zyxhere???? <zyx@envs.net>

commit 08b411e7498d7a0a454c3ce2a883ed1fafa69675
Author: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>
Date: Sun Apr 20 10:15:06 2025 +0500

net-irc/pounce: update OpenRC service

* Run as a non-privileged user

* Use supervise-daemon instead of s-s-d

* Log to syslog

Signed-off-by: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>

commit 9945d109525dd5c72a0aeb858ca133883d2b7499
Author: Viorel Munteanu <ceamac@gentoo.org>
Date: Thu Oct 5 17:01:04 2023 +0300

*/*: reassign cybertailor's packages

Signed-off-by: Viorel Munteanu <ceamac@gentoo.org>

commit 145212f44fcfb8923d6a1994b6e20e53d18ee292
Author: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>
Date: Sun Mar 12 15:11:10 2023 +0500

net-irc/pounce: add 3.1

Signed-off-by: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>

commit 03e01169d7e51b431ac07c169dacdd0e561230a0
Author: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>
Date: Mon May 30 20:18:43 2022 +0500

net-irc/pounce: edo

Signed-off-by: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>

commit 71aead8e715367317433b7609da09a002d4b0be2
Author: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>
Date: Sat Feb 19 21:12:24 2022 +0500

net-irc/pounce: initial import

Signed-off-by: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>