Add unprivileged user to run under, so it's more secure.

Reminded by:    Olle E. Johansson

net/rtpproxy/Makefile

@@ -7,6 +7,7 @@
 
 PORTNAME=	rtpproxy
 PORTVERSION=	1.2.1
+PORTREVISION=	1
 CATEGORIES=	net
 MASTER_SITES=	http://www.rtpproxy.org/chrome/site/
 
@@ -25,6 +26,9 @@ post-build:
 	${SED} 's|%%PREFIX%%|${PREFIX}|g ; s|%%RC_SUBR%%|/etc/rc.subr|g' \
 	    ${WRKSRC}/freebsd/rtpproxy.in > ${WRKDIR}/rtpproxy
 
+pre-install:
+	@PKG_PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} PRE-INSTALL
+
 post-install:
 	${INSTALL_SCRIPT} ${WRKDIR}/rtpproxy ${PREFIX}/etc/rc.d/rtpproxy
 

net/rtpproxy/files/patch-freebsd_rtpproxy.in

@@ -0,0 +1,17 @@
+
+$FreeBSD$
+
+--- freebsd/rtpproxy.in.orig
++++ freebsd/rtpproxy.in
+@@ -25,7 +25,10 @@
+ 
+ rtpproxy_enable=${rtpproxy_enable:-"NO"}
+ rtpproxy_laddr=${rtpproxy_laddr:-"0.0.0.0"}
++rtpproxy_usr=${rtpproxy_usr:-"rtpproxy"}
++rtpproxy_grp=${rtpproxy_grp:-"rtpproxy"}
+ 
+-command_args="-l ${rtpproxy_laddr} -p /var/run/rtpproxy.pid"
++command_args="-l ${rtpproxy_laddr} -p /var/run/rtpproxy.pid \
++  -u ${rtpproxy_usr}:${rtpproxy_grp}"
+ 
+ run_rc_command "${1}"

net/rtpproxy/pkg-install

@@ -0,0 +1,35 @@
+#!/bin/sh
+# $FreeBSD$
+#
+
+if [ "$2" != "PRE-INSTALL" ]; then
+	exit 0
+fi
+
+RTPPROXY_USER=rtpproxy
+RTPPROXY_GROUP=${RTPPROXY_USER}
+RTPPROXY_UID=222
+RTPPROXY_GID=${RTPPROXY_UID}
+
+if ! pw groupshow "${RTPPROXY_GROUP}" 2>/dev/null 1>&2; then
+	if pw groupadd ${RTPPROXY_GROUP} -g ${RTPPROXY_GID}; then
+		echo "Added group \"${RTPPROXY_GROUP}\"."
+	else
+		echo "Adding group \"${RTPPROXY_GROUP}\" failed..."
+		exit 1
+	fi
+fi
+
+if ! pw usershow "${RTPPROXY_USER}" 2>/dev/null 1>&2; then
+	if pw useradd ${RTPPROXY_USER} -u ${RTPPROXY_UID} -g ${RTPPROXY_GROUP} -h - \
+		-s "/sbin/nologin" -d "/nonexistent" \
+		-c "RTP Proxy"; \
+	then
+		echo "Added user \"${RTPPROXY_USER}\"."
+	else
+		echo "Adding user \"${RTPPROXY_USER}\" failed..."
+		exit 1
+	fi
+fi
+
+exit 0