diff options
Diffstat (limited to 'sec-policy/selinux-base-policy')
| -rw-r--r-- | sec-policy/selinux-base-policy/ChangeLog | 8 | ||||
| -rw-r--r-- | sec-policy/selinux-base-policy/Manifest | 10 | ||||
| -rw-r--r-- | sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild | 116 |
3 files changed, 129 insertions, 5 deletions
diff --git a/sec-policy/selinux-base-policy/ChangeLog b/sec-policy/selinux-base-policy/ChangeLog index 9dd5de68e935..7c4bfb7882cd 100644 --- a/sec-policy/selinux-base-policy/ChangeLog +++ b/sec-policy/selinux-base-policy/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for sec-policy/selinux-base-policy # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.64 2009/08/05 13:35:11 pebenito Exp $ +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.65 2009/08/14 18:58:38 pebenito Exp $ + +*selinux-base-policy-2.20090814 (14 Aug 2009) + + 14 Aug 2009; Chris PeBenito <pebenito@gentoo.org> + +selinux-base-policy-2.20090814.ebuild: + Git version of refpolicy for misc fixes including some cron problems. *selinux-base-policy-2.20090730 (03 Aug 2009) diff --git a/sec-policy/selinux-base-policy/Manifest b/sec-policy/selinux-base-policy/Manifest index 23269e89ee00..e67ec377b00e 100644 --- a/sec-policy/selinux-base-policy/Manifest +++ b/sec-policy/selinux-base-policy/Manifest @@ -12,19 +12,21 @@ AUX modules.conf.targeted.20080525 734 RMD160 3e467e75a25463b139d26a503c5e54e5a8 AUX modules.conf.targeted.20090730 746 RMD160 51929329cb860f5412ea4fda11e1d4bc8eafadae SHA1 80c8ac75f2102968f22f7469142b820a33a0a2c0 SHA256 435cb66eee3c702bd217a66d138d740ceb7f750380fb4681d6eae4b5acacf2c0 AUX selinux-base-policy-20070329.diff 2822 RMD160 164c86d9eb814ada83499f529445d7360b634988 SHA1 22d4240dd4e8d4018e61e2d0d25c810bc0eeaa2b SHA256 6e45238d3baf2771dddb6d0323d3e012c657458d686564577b043199b0336d59 DIST refpolicy-2.20090730.tar.bz2 489840 RMD160 d1d157a5ad243edd5d216504ed697f128420e8c1 SHA1 af479258b4e78b8bd7aa2a23dead49f4d61a552f SHA256 745077f6db86646458fe65df82eaa6ffc8491752e511d2a7397f4b46bd478f03 +DIST refpolicy-2.20090814.tar.bz2 490191 RMD160 a62b13cac598dcb83e9730d8fc3771f5130a4776 SHA1 b80315c3ea09f1cfac637f09ca3fad1e19674790 SHA256 d7c500e76089240b00a1a53238ccca581ef02cce7812bc68f8d0299b9c261c22 DIST refpolicy-20070329.tar.bz2 313327 RMD160 1d30ae525f3d7b429d100f9b7d1bd43395ba0612 SHA1 d4b9d59772300886e664aedd3041729807298741 SHA256 e0c82834a62b584578250230651a49c00a13e6be8689611326f6fac06e2d88fa DIST refpolicy-20070928.tar.bz2 424987 RMD160 e0ea91df7673cd5412abfa8a268c241049a44fd6 SHA1 884b97fbf1a9886ef51d33f5fa9c052bef77370f SHA256 5d607e639d3ec86027e57fefa8f2795930e905843f7a6a971385e4d173474f49 DIST refpolicy-20080525.tar.bz2 336603 RMD160 c4e846a5506164f8c89994df4bbd05b396f60639 SHA1 7764f2f6c60a530abb461256335b70a288bb65f9 SHA256 122a12924ef7b1348d676214590a0ed92960fbde053ea5a666e5179e0fd66ab2 EBUILD selinux-base-policy-2.20090730.ebuild 2940 RMD160 a4a6c14cda440566a2582c28ccf0e1b5474dbdb1 SHA1 1589347cce96ec35140db6eb6fb25604be63c846 SHA256 d5859b49ffa2e94a453facd23063b099e677418bbdeb7f7663198b261b34d592 +EBUILD selinux-base-policy-2.20090814.ebuild 2940 RMD160 07e7a3c2fc462a44d02a2090311a116ec76e47ac SHA1 96662ce3d4751a4d4204e6dfe82e4441de231772 SHA256 aa324229c3858a542fe4826ffb3907ff438d37ff1da23dfc801d663f94dfa865 EBUILD selinux-base-policy-20070329.ebuild 2816 RMD160 53e0820c3c3869b65fa1762d8d08d83cae326ff3 SHA1 57a11b8c18b02da949b72a4241aab3f4df492660 SHA256 37d45fb0cda23c106a321d19a8af7fca31bd8275b8be48a63b38ad4f07038e87 EBUILD selinux-base-policy-20070928.ebuild 2868 RMD160 e2a86d49c67705a7af1b8530a969f76df30c1f59 SHA1 f1eaa0aa46a549cefbfee65d96f77ca4b48b3330 SHA256 fd2c8941e1e4a98a9291ff14b4e1820ddf1a7a6032d8e74f3e56390b14355b80 EBUILD selinux-base-policy-20080525.ebuild 2987 RMD160 fe2b53ca11bacb82f3368c6416ed16f95686e188 SHA1 43c14e263bb18fda44b6e4212d9420c93f3d7849 SHA256 0845abff49542a3b98ccb8d8d8f3b59b3d6bce68dcfa7bbb76498b9d24aaaa8d -MISC ChangeLog 14451 RMD160 5cc80d006e92dbbd34a7ae54e12a1b7688724901 SHA1 f18179f4eba61d23329177233214ab7533c6d038 SHA256 5f6a85c9c861ee391d7f09f9320120c66053fb89b0f9401d6bdd99b770573783 +MISC ChangeLog 14665 RMD160 b380e7eec5f861b3ff405aca02f6d5a3708a5b62 SHA1 661f19af84475e10c4834124d08a01bc50c569bc SHA256 35390f48834e091ecf487242514ba5ce0f7eb7b84769e38bf38bb8e1c44c18c0 MISC metadata.xml 473 RMD160 2bc7b92e3958e9371896025467bd896501fe19bf SHA1 e5a10b5fddb435fa3d58ef67a1952ae5a0262f72 SHA256 c45743d603ee47355e9d7b1b14d850678825e9c1252d96ec44ce21ac0b2a55b9 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.11 (GNU/Linux) -iEYEARECAAYFAkp5irMACgkQWczwbOluxW965ACfQCA6cHRNxZ7QVH4xIQk5Is8E -GyQAn1ZHC81luZLP8SzOaYSAZ3JB/vZ8 -=lhQo +iEYEARECAAYFAkqFs+kACgkQWczwbOluxW9/yACfdTaQvFe5ajdU5YfwcN+2HK/Y +UsEAoMQsoqdbJS0wZxzkgO8kY4lbUqxa +=rkoS -----END PGP SIGNATURE----- diff --git a/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild b/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild new file mode 100644 index 000000000000..3f434d019bd7 --- /dev/null +++ b/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild @@ -0,0 +1,116 @@ +# Copyright 1999-2009 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild,v 1.1 2009/08/14 18:58:38 pebenito Exp $ + +IUSE="" + +inherit eutils + +DESCRIPTION="Gentoo base policy for SELinux" +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/" +SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2" +LICENSE="GPL-2" +SLOT="0" + +KEYWORDS="~amd64 ~x86" + +RDEPEND=">=sys-apps/policycoreutils-1.30.30" +DEPEND="${RDEPEND} + sys-devel/m4 + >=sys-apps/checkpolicy-1.30.12" + +S=${WORKDIR}/ + +src_unpack() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted" + MOD_CONF_VER="20090730" + + unpack ${A} + +# cd "${S}/refpolicy" +# epatch ${FILESDIR}/${PN}-${PV}.diff + + for i in ${POLICY_TYPES}; do + cp -a "${S}/refpolicy" "${S}/${i}" + + cp "${FILESDIR}/modules.conf.${i}.${MOD_CONF_VER}" \ + "${S}/${i}/policy/modules.conf" \ + || die "failed to set up modules.conf" + sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \ + -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \ + || die "build.conf setup failed." + + echo "DISTRO = gentoo" >> "${S}/${i}/build.conf" + + if [ "${i}" == "targeted" ]; then + sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \ + "${S}/${i}/config/appconfig-standard/seusers" \ + || die "targeted seusers setup failed." + + # add compat + sed -i -e '/user_u/s/user_r/user_r system_r/' "${S}/${i}/policy/users" \ + || die "targeted user compat failed." + fi + done +} + +src_compile() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted" + + for i in ${POLICY_TYPES}; do + cd "${S}/${i}" + + make base || die "${i} compile failed" + done +} + +src_install() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted" + + for i in ${POLICY_TYPES}; do + cd "${S}/${i}" + + make DESTDIR="${D}" install \ + || die "${i} install failed." + + make DESTDIR="${D}" install-headers \ + || die "${i} headers install failed." + + echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type" + + echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types" + + # libsemanage won't make this on its own + keepdir "/etc/selinux/${i}/policy" + done + + dodoc doc/Makefile.example doc/example.{te,fc,if} + + insinto /etc/selinux + doins "${FILESDIR}/config" +} + +pkg_postinst() { + [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted" + + if has "loadpolicy" $FEATURES ; then + for i in ${POLICY_TYPES}; do + einfo "Inserting base module into ${i} module store." + + cd "/usr/share/selinux/${i}" + semodule -s "${i}" -b base.pp + done + else + echo + echo + eerror "Policy has not been loaded. It is strongly suggested" + eerror "that the policy be loaded before continuing!!" + echo + einfo "Automatic policy loading can be enabled by adding" + einfo "\"loadpolicy\" to the FEATURES in make.conf." + echo + echo + ebeep 4 + epause 4 + fi +} |