From 6519deb349d386c9f819040ef5a2b06c4326c065 Mon Sep 17 00:00:00 2001
From: Xavier Beaudouin <kiwi@oav.net>
Date: Mon, 6 May 2024 16:43:29 +0200
Subject: [PATCH] bump

---
 security/sssd2/Makefile                       |  2 +-
 .../files/patch-src_config_cfg__rules.ini     | 77 +++++++++++++++++++
 2 files changed, 78 insertions(+), 1 deletion(-)
 create mode 100644 security/sssd2/files/patch-src_config_cfg__rules.ini

diff --git a/security/sssd2/Makefile b/security/sssd2/Makefile
index 4859f89..b403779 100644
--- a/security/sssd2/Makefile
+++ b/security/sssd2/Makefile
@@ -1,6 +1,6 @@
 PORTNAME=	sssd
 PORTVERSION=	2.9.4
-PORTREVISION=	8
+PORTREVISION=	9
 CATEGORIES=	security
 PKGNAMESUFFIX=	2
 
diff --git a/security/sssd2/files/patch-src_config_cfg__rules.ini b/security/sssd2/files/patch-src_config_cfg__rules.ini
new file mode 100644
index 0000000..c5a89de
--- /dev/null
+++ b/security/sssd2/files/patch-src_config_cfg__rules.ini
@@ -0,0 +1,77 @@
+--- src/config/cfg_rules.ini.orig	2024-04-24 13:37:15 UTC
++++ src/config/cfg_rules.ini
+@@ -11,15 +11,15 @@ section_re = ^prompting/password$
+ section = kcm
+ section = session_recording
+ section_re = ^prompting/password$
+-section_re = ^prompting/password/[^/\@]\+$
++section_re = ^prompting/password/[^/\@]\{1,\}$
+ section_re = ^prompting/2fa$
+-section_re = ^prompting/2fa/[^/\@]\+$
++section_re = ^prompting/2fa/[^/\@]\{1,\}$
+ section_re = ^prompting/passkey$
+-section_re = ^prompting/passkey/[^/\@]\+$
+-section_re = ^domain/[^/\@]\+$
+-section_re = ^domain/[^/\@]\+/[^/\@]\+$
+-section_re = ^application/[^/\@]\+$
+-section_re = ^certmap/[^/\@]\+/[^/\@]\+$
++section_re = ^prompting/passkey/[^/\@]\{1,\}$
++section_re = ^domain/[^/\@]\{1,\}$
++section_re = ^domain/[^/\@]\{1,\}/[^/\@]\{1,\}$
++section_re = ^application/[^/\@]\{1,\}$
++section_re = ^certmap/[^/\@]\{1,\}/[^/\@]\{1,\}$
+ 
+ 
+ [rule/allowed_sssd_options]
+@@ -329,13 +329,13 @@ validator = ini_allowed_options
+ 
+ [rule/allowed_prompting_password_subsec_options]
+ validator = ini_allowed_options
+-section_re = ^prompting/password/[^/\@]\+$
++section_re = ^prompting/password/[^/\@]\{1,\}$
+ 
+ option = password_prompt
+ 
+ [rule/allowed_prompting_2fa_subsec_options]
+ validator = ini_allowed_options
+-section_re = ^prompting/2fa/[^/\@]\+$
++section_re = ^prompting/2fa/[^/\@]\{1,\}$
+ 
+ option = single_prompt
+ option = first_prompt
+@@ -343,7 +343,7 @@ validator = ini_allowed_options
+ 
+ [rule/allowed_prompting_passkey_subsec_options]
+ validator = ini_allowed_options
+-section_re = ^prompting/passkey/[^/\@]\+$
++section_re = ^prompting/passkey/[^/\@]\{1,\}$
+ 
+ option = interactive
+ option = interactive_prompt
+@@ -352,7 +352,7 @@ validator = ini_allowed_options
+ 
+ [rule/allowed_domain_options]
+ validator = ini_allowed_options
+-section_re = ^\(domain\|application\)/[^/]\+$
++section_re = ^(domain|application)/[^/]\{1,\}$
+ 
+ option = debug
+ option = debug_level
+@@ -810,7 +810,7 @@ validator = ini_allowed_options
+ 
+ [rule/allowed_subdomain_options]
+ validator = ini_allowed_options
+-section_re = ^domain/[^/\@]\+/[^/\@]\+$
++section_re = ^domain/[^/\@]+/[^/\@]\{1,\}$
+ 
+ option = ldap_search_base
+ option = ldap_user_search_base
+@@ -832,7 +832,7 @@ validator = ini_allowed_options
+ 
+ [rule/allowed_certmap_options]
+ validator = ini_allowed_options
+-section_re = ^certmap/[^/\@]\+/[^/\@]\+$
++section_re = ^certmap/[^/\@]+/[^/\@]\{1,\}$
+ 
+ option = matchrule
+ option = maprule