[more files]
# @DESCRIPTION:
# Installs the config files in /etc/security/

/
dopamsecurity() {
[[ $# -lt 2 ]] && die "dopamsecurity requires at least two arguments"

if has pam ${IUSE} && ! use pam; then
return 0
fi

( # dont want to pollute calling env
insinto /etc/security/$1
insopts -m 0644
doins "${@:2}"
) || die "failed to install ${@:2}"
}

# @FUNCTION: newpamsecurity
# @USAGE:

# @DESCRIPTION:
# Installs the config file as in /etc/security/

/
newpamsecurity() {
[[ $# -ne 3 ]] && die "newpamsecurity requires three arguments"

if has pam ${IUSE} && ! use pam; then
return 0;
fi

( # dont want to pollute calling env
insinto /etc/security/$1
insopts -m 0644
newins "$2" "$3"
) || die "failed to install $2 as $3"
}

# @FUNCTION: getpam_mod_dir
# @DESCRIPTION:
# Returns the pam modules' directory for current implementation
getpam_mod_dir() {
if has_version sys-libs/pam || has_version sys-libs/openpam; then
PAM_MOD_DIR=/$(get_libdir)/security
else
# Unable to find PAM implementation... defaulting
PAM_MOD_DIR=/$(get_libdir)/security
fi

echo ${PAM_MOD_DIR}
}

# @FUNCTION: pammod_hide_symbols
# @DESCRIPTION:
# Hide all non-PAM-used symbols from the module; this function creates a
# simple ld version script that hides all the symbols that are not
# necessary for PAM to load the module, then uses append-flags to make
# sure that it gets used.
pammod_hide_symbols() {
cat - > "${T}"/pam-eclass-pam_symbols.ver < {
global: pam_sm_*;
local: *;
};
EOF

append-ldflags -Wl,--version-script="${T}"/pam-eclass-pam_symbols.ver
}

# @FUNCTION: dopammod
# @USAGE: [more files]
# @DESCRIPTION:
# Install pam module file in the pam modules' dir for current implementation
dopammod() {
[[ -z $1 ]] && die "dopammod requires at least one argument"

if has pam ${IUSE} && ! use pam; then
return 0;
fi

exeinto $(getpam_mod_dir)
doexe "$@" || die "failed to install $@"
}

# @FUNCTION: newpammod
# @USAGE:
# @DESCRIPTION:
# Install pam module file as in the pam
# modules' dir for current implementation
newpammod() {
[[ $# -ne 2 ]] && die "newpammod requires two arguements"

if has pam ${IUSE} && ! use pam; then
return 0;
fi

exeinto $(getpam_mod_dir)
newexe "$1" "$2" || die "failed to install $1 as $2"
}

# @FUNCTION: pamd_mimic_system
# @USAGE: [auth levels]
# @DESCRIPTION:
# This function creates a pamd file which mimics system-auth file
# for the given levels in the /etc/pam.d directory.
pamd_mimic_system() {
[[ $# -lt 2 ]] && die "pamd_mimic_system requires at least two argments"
pamd_mimic system-auth "$@"
}

# @FUNCTION: pamd_mimic
# @USAGE: [auth levels]
# @DESCRIPTION:
# This function creates a pamd file which mimics the given stack
# for the given levels in the /etc/pam.d directory.
pamd_mimic() {
[[ $# -lt 3 ]] && die "pamd_mimic requires at least three argments"

if has pam ${IUSE} && ! use pam; then
return 0;
fi

dodir /etc/pam.d
pamdfile=${D}/etc/pam.d/$2
echo -e "# File autogenerated by pamd_mimic in pam eclass\n\n" >> \
$pamdfile

originalstack=$1
authlevels="auth account password session"

if has_version ' mimic="\trequired\t\tpam_stack.so service=${originalstack}"
else
mimic="\tinclude\t\t${originalstack}"
fi

shift; shift

while [[ -n $1 ]]; do
has $1 ${authlevels} || die "unknown level type"

echo -e "$1${mimic}" >> ${pamdfile}

shift
done
}

# @FUNCTION: cleanpamd
# @USAGE:
# @DESCRIPTION:
# Cleans a pam.d file from modules that might not be present on the system
# where it's going to be installed
cleanpamd() {
while [[ -n $1 ]]; do
if ! has_version sys-libs/pam; then
sed -i -e '/pam_shells\|pam_console/s:^:#:' "${D}/etc/pam.d/$1"
fi

shift
done
}

# @FUNCTION: pam_epam_expand
# @USAGE:
# @DESCRIPTION:
# Steer clear, deprecated, don't use, bad experiment
pam_epam_expand() {
sed -n -e 's|#%EPAM-$[[:alpha:]-]\+$:$[-+<>=/.![:alnum:]]\+$%#.*|\1 \2|p' \
"$@" | sort -u | while read condition parameter; do

disable="yes"

case "$condition" in
If-Has)
message="This can be used only if you have ${parameter} installed"
has_version "$parameter" && disable="no"
;;
Use-Flag)
message="This can be used only if you enabled the ${parameter} USE flag"
use "$parameter" && disable="no"
;;
*)
eerror "Unknown EPAM condition '${condition}' ('${parameter}')"
die "Unknown EPAM condition '${condition}' ('${parameter}')"
;;
esac

if [ "${disable}" = "yes" ]; then
sed -i -e "/#%EPAM-${condition}:${parameter/\//\\/}%#/d" "$@"
else
sed -i -e "s|#%EPAM-${condition}:${parameter}%#||" "$@"
fi

done
}

# Think about it before uncommenting this one, for now run it by hand
# pam_pkg_preinst() {
# eshopts_push -o noglob # so that bash doen't expand "*"
#
# pam_epam_expand "${D}"/etc/pam.d/*
#
# eshopts_pop # reset old shell opts
# }

fi