net-nds/kanidm making tpm a use-flag.

net-nds/kanidm/kanidm-1.8.5-r2.ebuild

@@ -781,7 +781,7 @@ LICENSE+="
 "
 SLOT="0"
 KEYWORDS="~amd64"
-IUSE="+acct pam server"
+IUSE="+acct pam server tpm"
 RUST_MIN_VER="1.90"
 
 DEPEND="
@@ -789,11 +789,14 @@ acct? (
 		acct-group/kanidm
 		acct-user/kanidm )
 pam? ( sys-libs/pam )
+tpm? ( app-crypt/tpm2-tss )
 "
 BDEPEND="
 	llvm-core/clang
 	sys-devel/binutils
 	>=dev-lang/rust-bin-1.90.0
+	tpm? ( dev-util/pkgconf )
+	server? ( sys-libs/libcap )
 "
 
 pkg_setup() {
@@ -808,7 +811,7 @@ src_prepare() {
 
 src_configure() {
 	local myfeatures=(
-		tpm
+		$(usev tpm)
 		unix
 	)
 	cargo_src_configure \
@@ -851,11 +854,15 @@ src_install() {
 		dobin target/release/kanidmd
 		dobin target/release/kanidm-ipa-sync
 		dobin target/release/kanidm-ldap-sync
+		# -- setting NET-BIND
+		SETCAP="setcap cap_net_bind_service=+ep"
+		${SETCAP} "${D}/usr/bin/kanidmd"
 
 		newins examples/server.toml server.toml
 
 		dodir /usr/share/kanidm/ui/hpkg
-		cp -r ${S}/server/core/static/* ${ED}/usr/share/kanidm/ui/hpkg || die "Install failed!"
+		cp -r ${S}/server/core/static/* ${D}/usr/share/kanidm/ui/hpkg || die "Install failed!"
+		chown -R root:root ${D}/usr/share/kanidm/ui
 
 		systemd_dounit platform/opensuse/kanidm-ipa-sync.service
 		systemd_dounit platform/opensuse/kanidmd.service