summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <pebenito@gentoo.org>2009-08-14 18:58:38 +0000
committerChris PeBenito <pebenito@gentoo.org>2009-08-14 18:58:38 +0000
commita548e2ffc7d15d26c66b15c29dcc533c8057c902 (patch)
tree147f1a82a06cc625d9776d333c51b4c0c07619d6
parentamd64/x86 stable, bug #280658 (diff)
downloadhistorical-a548e2ffc7d15d26c66b15c29dcc533c8057c902.tar.gz
historical-a548e2ffc7d15d26c66b15c29dcc533c8057c902.tar.bz2
historical-a548e2ffc7d15d26c66b15c29dcc533c8057c902.zip
sec-policy/selinux-base-policy: Git version of refpolicy for misc fixes including some cron problems.
Package-Manager: portage-13960-svn/cvs/Linux x86_64
-rw-r--r--sec-policy/selinux-base-policy/ChangeLog8
-rw-r--r--sec-policy/selinux-base-policy/Manifest10
-rw-r--r--sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild116
3 files changed, 129 insertions, 5 deletions
diff --git a/sec-policy/selinux-base-policy/ChangeLog b/sec-policy/selinux-base-policy/ChangeLog
index 9dd5de68e935..7c4bfb7882cd 100644
--- a/sec-policy/selinux-base-policy/ChangeLog
+++ b/sec-policy/selinux-base-policy/ChangeLog
@@ -1,6 +1,12 @@
# ChangeLog for sec-policy/selinux-base-policy
# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.64 2009/08/05 13:35:11 pebenito Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.65 2009/08/14 18:58:38 pebenito Exp $
+
+*selinux-base-policy-2.20090814 (14 Aug 2009)
+
+ 14 Aug 2009; Chris PeBenito <pebenito@gentoo.org>
+ +selinux-base-policy-2.20090814.ebuild:
+ Git version of refpolicy for misc fixes including some cron problems.
*selinux-base-policy-2.20090730 (03 Aug 2009)
diff --git a/sec-policy/selinux-base-policy/Manifest b/sec-policy/selinux-base-policy/Manifest
index 23269e89ee00..e67ec377b00e 100644
--- a/sec-policy/selinux-base-policy/Manifest
+++ b/sec-policy/selinux-base-policy/Manifest
@@ -12,19 +12,21 @@ AUX modules.conf.targeted.20080525 734 RMD160 3e467e75a25463b139d26a503c5e54e5a8
AUX modules.conf.targeted.20090730 746 RMD160 51929329cb860f5412ea4fda11e1d4bc8eafadae SHA1 80c8ac75f2102968f22f7469142b820a33a0a2c0 SHA256 435cb66eee3c702bd217a66d138d740ceb7f750380fb4681d6eae4b5acacf2c0
AUX selinux-base-policy-20070329.diff 2822 RMD160 164c86d9eb814ada83499f529445d7360b634988 SHA1 22d4240dd4e8d4018e61e2d0d25c810bc0eeaa2b SHA256 6e45238d3baf2771dddb6d0323d3e012c657458d686564577b043199b0336d59
DIST refpolicy-2.20090730.tar.bz2 489840 RMD160 d1d157a5ad243edd5d216504ed697f128420e8c1 SHA1 af479258b4e78b8bd7aa2a23dead49f4d61a552f SHA256 745077f6db86646458fe65df82eaa6ffc8491752e511d2a7397f4b46bd478f03
+DIST refpolicy-2.20090814.tar.bz2 490191 RMD160 a62b13cac598dcb83e9730d8fc3771f5130a4776 SHA1 b80315c3ea09f1cfac637f09ca3fad1e19674790 SHA256 d7c500e76089240b00a1a53238ccca581ef02cce7812bc68f8d0299b9c261c22
DIST refpolicy-20070329.tar.bz2 313327 RMD160 1d30ae525f3d7b429d100f9b7d1bd43395ba0612 SHA1 d4b9d59772300886e664aedd3041729807298741 SHA256 e0c82834a62b584578250230651a49c00a13e6be8689611326f6fac06e2d88fa
DIST refpolicy-20070928.tar.bz2 424987 RMD160 e0ea91df7673cd5412abfa8a268c241049a44fd6 SHA1 884b97fbf1a9886ef51d33f5fa9c052bef77370f SHA256 5d607e639d3ec86027e57fefa8f2795930e905843f7a6a971385e4d173474f49
DIST refpolicy-20080525.tar.bz2 336603 RMD160 c4e846a5506164f8c89994df4bbd05b396f60639 SHA1 7764f2f6c60a530abb461256335b70a288bb65f9 SHA256 122a12924ef7b1348d676214590a0ed92960fbde053ea5a666e5179e0fd66ab2
EBUILD selinux-base-policy-2.20090730.ebuild 2940 RMD160 a4a6c14cda440566a2582c28ccf0e1b5474dbdb1 SHA1 1589347cce96ec35140db6eb6fb25604be63c846 SHA256 d5859b49ffa2e94a453facd23063b099e677418bbdeb7f7663198b261b34d592
+EBUILD selinux-base-policy-2.20090814.ebuild 2940 RMD160 07e7a3c2fc462a44d02a2090311a116ec76e47ac SHA1 96662ce3d4751a4d4204e6dfe82e4441de231772 SHA256 aa324229c3858a542fe4826ffb3907ff438d37ff1da23dfc801d663f94dfa865
EBUILD selinux-base-policy-20070329.ebuild 2816 RMD160 53e0820c3c3869b65fa1762d8d08d83cae326ff3 SHA1 57a11b8c18b02da949b72a4241aab3f4df492660 SHA256 37d45fb0cda23c106a321d19a8af7fca31bd8275b8be48a63b38ad4f07038e87
EBUILD selinux-base-policy-20070928.ebuild 2868 RMD160 e2a86d49c67705a7af1b8530a969f76df30c1f59 SHA1 f1eaa0aa46a549cefbfee65d96f77ca4b48b3330 SHA256 fd2c8941e1e4a98a9291ff14b4e1820ddf1a7a6032d8e74f3e56390b14355b80
EBUILD selinux-base-policy-20080525.ebuild 2987 RMD160 fe2b53ca11bacb82f3368c6416ed16f95686e188 SHA1 43c14e263bb18fda44b6e4212d9420c93f3d7849 SHA256 0845abff49542a3b98ccb8d8d8f3b59b3d6bce68dcfa7bbb76498b9d24aaaa8d
-MISC ChangeLog 14451 RMD160 5cc80d006e92dbbd34a7ae54e12a1b7688724901 SHA1 f18179f4eba61d23329177233214ab7533c6d038 SHA256 5f6a85c9c861ee391d7f09f9320120c66053fb89b0f9401d6bdd99b770573783
+MISC ChangeLog 14665 RMD160 b380e7eec5f861b3ff405aca02f6d5a3708a5b62 SHA1 661f19af84475e10c4834124d08a01bc50c569bc SHA256 35390f48834e091ecf487242514ba5ce0f7eb7b84769e38bf38bb8e1c44c18c0
MISC metadata.xml 473 RMD160 2bc7b92e3958e9371896025467bd896501fe19bf SHA1 e5a10b5fddb435fa3d58ef67a1952ae5a0262f72 SHA256 c45743d603ee47355e9d7b1b14d850678825e9c1252d96ec44ce21ac0b2a55b9
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)
-iEYEARECAAYFAkp5irMACgkQWczwbOluxW965ACfQCA6cHRNxZ7QVH4xIQk5Is8E
-GyQAn1ZHC81luZLP8SzOaYSAZ3JB/vZ8
-=lhQo
+iEYEARECAAYFAkqFs+kACgkQWczwbOluxW9/yACfdTaQvFe5ajdU5YfwcN+2HK/Y
+UsEAoMQsoqdbJS0wZxzkgO8kY4lbUqxa
+=rkoS
-----END PGP SIGNATURE-----
diff --git a/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild b/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild
new file mode 100644
index 000000000000..3f434d019bd7
--- /dev/null
+++ b/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild
@@ -0,0 +1,116 @@
+# Copyright 1999-2009 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild,v 1.1 2009/08/14 18:58:38 pebenito Exp $
+
+IUSE=""
+
+inherit eutils
+
+DESCRIPTION="Gentoo base policy for SELinux"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
+SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
+LICENSE="GPL-2"
+SLOT="0"
+
+KEYWORDS="~amd64 ~x86"
+
+RDEPEND=">=sys-apps/policycoreutils-1.30.30"
+DEPEND="${RDEPEND}
+ sys-devel/m4
+ >=sys-apps/checkpolicy-1.30.12"
+
+S=${WORKDIR}/
+
+src_unpack() {
+ [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
+ MOD_CONF_VER="20090730"
+
+ unpack ${A}
+
+# cd "${S}/refpolicy"
+# epatch ${FILESDIR}/${PN}-${PV}.diff
+
+ for i in ${POLICY_TYPES}; do
+ cp -a "${S}/refpolicy" "${S}/${i}"
+
+ cp "${FILESDIR}/modules.conf.${i}.${MOD_CONF_VER}" \
+ "${S}/${i}/policy/modules.conf" \
+ || die "failed to set up modules.conf"
+ sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
+ -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
+ || die "build.conf setup failed."
+
+ echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
+
+ if [ "${i}" == "targeted" ]; then
+ sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
+ "${S}/${i}/config/appconfig-standard/seusers" \
+ || die "targeted seusers setup failed."
+
+ # add compat
+ sed -i -e '/user_u/s/user_r/user_r system_r/' "${S}/${i}/policy/users" \
+ || die "targeted user compat failed."
+ fi
+ done
+}
+
+src_compile() {
+ [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
+
+ for i in ${POLICY_TYPES}; do
+ cd "${S}/${i}"
+
+ make base || die "${i} compile failed"
+ done
+}
+
+src_install() {
+ [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
+
+ for i in ${POLICY_TYPES}; do
+ cd "${S}/${i}"
+
+ make DESTDIR="${D}" install \
+ || die "${i} install failed."
+
+ make DESTDIR="${D}" install-headers \
+ || die "${i} headers install failed."
+
+ echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
+
+ echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
+
+ # libsemanage won't make this on its own
+ keepdir "/etc/selinux/${i}/policy"
+ done
+
+ dodoc doc/Makefile.example doc/example.{te,fc,if}
+
+ insinto /etc/selinux
+ doins "${FILESDIR}/config"
+}
+
+pkg_postinst() {
+ [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
+
+ if has "loadpolicy" $FEATURES ; then
+ for i in ${POLICY_TYPES}; do
+ einfo "Inserting base module into ${i} module store."
+
+ cd "/usr/share/selinux/${i}"
+ semodule -s "${i}" -b base.pp
+ done
+ else
+ echo
+ echo
+ eerror "Policy has not been loaded. It is strongly suggested"
+ eerror "that the policy be loaded before continuing!!"
+ echo
+ einfo "Automatic policy loading can be enabled by adding"
+ einfo "\"loadpolicy\" to the FEATURES in make.conf."
+ echo
+ echo
+ ebeep 4
+ epause 4
+ fi
+}