commit 3ed37b3ed56c7f3c6cb801698c48e1546fd54628
Author: zyxhere???? <zyx@envs.net>
Date: Mon Sep 28 22:53:46 2026 +0000

net-*/*: stop exporting `$pidfile` in OpenRC service scripts (insecure)

Say it with me: the pidfile and its parent directories should
only be writable by root unless you use supervise-daemon ;)

With `checkpath -o someuser:someuser $pidfile` in start_pre(), it can
cause DOS attacks because the now unprivelaged process can replace the
pidfile with some other pid number in it like pid 1 and cause the host
machine to crash when the daemon finally stops. Supervise-daemon can
supervise without the daemon creating a pidfile so don't export the
variable at all.

That assumes the scripts *are* using supervise-daemon, if
supervise-daemon fails to start (due to maybe some incorrect config
option *wink wink*) then OpenRC falls back to the older
start-stop-daemon and that *does* use the $pidfile. If thats the case
then the daemon will simply fail to start (yes I haven't tested if any
these packages work without $pidfile which they should since they are
specifying `supervisor=supervise-daemon`).

IMO failing to start is better than running in a potentially vulnerable
configuration.

Merges: https://codeberg.org/gentoo/guru/pulls/92
Part-off: https://codeberg.org/gentoo/guru/pulls/92
Signed-off-by: zyxhere???? <zyx@envs.net>

commit 5b5e6c8980bb8eae5ac10fc40eb4d2d83a7856ed
Author: Paul Zander <negril.nx+gentoo@gmail.com>
Date: Wed Jan 7 12:32:21 2026 +0100

net-misc/graftcp: make PATCHES an array

Fixes pkgcheck failing on FileUnknown.

PATCHES is commonly an array these days and using a plain string is not
supported by pkgcheck.

Signed-off-by: Paul Zander <negril.nx+gentoo@gmail.com>

commit d38f9201bf06e5b9f2264fc8016be75860961314
Author: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>
Date: Sun Dec 21 23:06:28 2025 +0500

net-misc/graftcp: avoid race condition in "make install"

Signed-off-by: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>

commit 0af01b1f1e5491917c9c1f7e105ad58a9fe7c549
Author: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>
Date: Tue Sep 16 21:03:43 2025 +0500

net-misc/graftcp: add 0.7.4

Signed-off-by: Anna (cybertailor) Vyalkova <cyber+gentoo@sysrq.in>

commit b159dcfeed000824de07699aa4dc895aa4c9de3c
Author: Yuhang Zeng <unlsycn@unlsycn.com>
Date: Wed Apr 3 09:25:08 2024 +0800

net-misc/graftcp: pass $(CC) when `make install`

The makefile call $(CC) to detect the machine architecture in a variable
thus it will be evaluated each time we enter the makefile, even when
executing `make install`

Signed-off-by: Yuhang Zeng <unlsycn@unlsycn.com>

commit 0e71f03fe68682fccab80d6d2072b4896253daf0
Author: Yuhang Zeng <unlsycn@unlsycn.com>
Date: Mon Apr 1 16:30:24 2024 +0800

net-misc/graftcp: fix QA notice

Signed-off-by: Yuhang Zeng <unlsycn@unlsycn.com>

commit e1696b7da5794dd6d220597f52299c136043befa
Author: Yuhang Zeng <unlsycn@unlsycn.com>
Date: Mon Feb 26 16:42:16 2024 +0800

net-misc/graftcp: keyword 0.7.1 for ~arm, ~arm64, ~x86

Signed-off-by: Yuhang Zeng <unlsycn@unlsycn.com>

commit 2780df72adabe5c5e6c3d66920ba060df54d9c2f
Author: Yuhang Zeng <unlsycn@unlsycn.com>
Date: Sun Feb 25 10:53:58 2024 +0800

net-misc/graftcp: fix bug #925322 #925323

Signed-off-by: Yuhang Zeng <unlsycn@unlsycn.com>

commit 4498d9ccdca1604605e207b8baad6c98842d430b
Author: Yuhang Zeng <unlsycn@unlsycn.com>
Date: Thu Feb 22 11:08:47 2024 +0800

net-misc/graftcp: new package, add 0.7.1

Signed-off-by: Yuhang Zeng <unlsycn@unlsycn.com>