From 6e69db5af193ffcfd743525a2d589e893f7e2f14 Mon Sep 17 00:00:00 2001 From: Chris PeBenito Date: Wed, 24 Nov 2004 01:26:55 +0000 Subject: [PATCH] new release --- sec-policy/selinux-base-policy/ChangeLog | 8 +- sec-policy/selinux-base-policy/Manifest | 14 ++- .../files/digest-selinux-base-policy-20041123 | 1 + .../selinux-base-policy-20041123.ebuild | 87 +++++++++++++++++++ 4 files changed, 108 insertions(+), 2 deletions(-) create mode 100644 sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20041123 create mode 100644 sec-policy/selinux-base-policy/selinux-base-policy-20041123.ebuild diff --git a/sec-policy/selinux-base-policy/ChangeLog b/sec-policy/selinux-base-policy/ChangeLog index 4d05150905c4..a83d02d1a3a9 100644 --- a/sec-policy/selinux-base-policy/ChangeLog +++ b/sec-policy/selinux-base-policy/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for sec-policy/selinux-base-policy # Copyright 2000-2004 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.31 2004/10/23 13:16:50 pebenito Exp $ +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.32 2004/11/24 01:26:55 pebenito Exp $ + +*selinux-base-policy-20041123 (23 Nov 2004) + + 23 Nov 2004; Chris PeBenito + +selinux-base-policy-20041123.ebuild: + New release with 1.18 merge. *selinux-base-policy-20041023 (23 Oct 2004) diff --git a/sec-policy/selinux-base-policy/Manifest b/sec-policy/selinux-base-policy/Manifest index a7c8df47243f..56bb175d2db8 100644 --- a/sec-policy/selinux-base-policy/Manifest +++ b/sec-policy/selinux-base-policy/Manifest @@ -1,8 +1,20 @@ -MD5 991d102fc757ac07b6fbddb384cf8a0a ChangeLog 9107 +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA1 + +MD5 56874915a2ff5b7e18d44f373557ba5d ChangeLog 9276 MD5 808b5f7f5d6654666e9193672d463229 metadata.xml 473 MD5 002d3acea2205ffa0d5a3351fb19c671 selinux-base-policy-20040702.ebuild 2281 MD5 221bc2c181c7873f506794fa60463d1d selinux-base-policy-20040906.ebuild 2281 MD5 4188897e85b859da5b7096e0f8f4b7e1 selinux-base-policy-20041023.ebuild 2429 +MD5 573fb4c963e9ba45a5f102bcacd3a2fd selinux-base-policy-20041123.ebuild 2429 MD5 aa75977434391487a1fe3dfe2394157d files/digest-selinux-base-policy-20040702 80 MD5 9ca92516b64d82899ea8fd92f15af3da files/digest-selinux-base-policy-20040906 80 MD5 932d38a62aa8b2109a8df55d9dd6327a files/digest-selinux-base-policy-20041023 80 +MD5 dfc9d0a09e281b3f658ef0f6bc29a2bc files/digest-selinux-base-policy-20041123 80 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.2.6 (GNU/Linux) + +iD8DBQFBo+L1MTuwkQ6eEKsRAqmKAKC7nboNWLUgvLe+h52JjnU0sPESTwCghy5j +1HpL+btSN2v+UUIY3kJ6CWs= +=Telc +-----END PGP SIGNATURE----- diff --git a/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20041123 b/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20041123 new file mode 100644 index 000000000000..d0498fa3a4d4 --- /dev/null +++ b/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20041123 @@ -0,0 +1 @@ +MD5 f9b1e8059056a5f554739344a1a30ec5 selinux-base-policy-20041123.tar.bz2 71871 diff --git a/sec-policy/selinux-base-policy/selinux-base-policy-20041123.ebuild b/sec-policy/selinux-base-policy/selinux-base-policy-20041123.ebuild new file mode 100644 index 000000000000..e000fb74ae29 --- /dev/null +++ b/sec-policy/selinux-base-policy/selinux-base-policy-20041123.ebuild @@ -0,0 +1,87 @@ +# Copyright 1999-2004 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-20041123.ebuild,v 1.1 2004/11/24 01:26:55 pebenito Exp $ + +IUSE="build" + +inherit eutils + +DESCRIPTION="Gentoo base policy for SELinux" +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/" +SRC_URI="mirror://gentoo/${P}.tar.bz2" +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~x86 ~ppc ~sparc ~amd64" +#KEYWORDS="x86 ppc sparc amd64" +DEPEND="build? ( sys-devel/make + sys-devel/m4 )" +RDEPEND="sys-devel/m4 + sys-devel/make" + +S=${WORKDIR}/base-policy + +[ -z ${POLICYDIR} ] && POLICYDIR="/etc/security/selinux/src/policy" + +# deprecated policies: +DEPRECATED="domains/program/devfsd.te domains/program/opt.te + file_contexts/program/devfsd.fc file_contexts/program/opt.fc + file_contexts/users.fc domains/program/inetd.te + domains/program/tcpd.te file_contexts/program/inetd.fc + file_contexts/program/tcpd.fc" + +src_compile() { + return +} + +src_install() { + if use build; then + # generate a file_contexts + dodir ${POLICYDIR}/file_contexts + einfo "Ignore the checkpolicy error on the next line." + make -C ${S} \ + FC=${D}/${POLICYDIR}/file_contexts/file_contexts \ + ${D}/${POLICYDIR}/file_contexts/file_contexts + + [ ! -f ${D}/${POLICYDIR}/file_contexts/file_contexts ] && \ + die "file_contexts was not generated." + else + # install full policy + dodir /etc/security/selinux/src + + insinto /etc/security + doins ${S}/appconfig/* + + cp -a ${S} ${D}/${POLICYDIR} + rm -fR ${D}/${POLICYDIR}/appconfig + fi +} + +pkg_postinst() { + local isdeprecated + echo + einfo "This is the base policy for SELinux on Gentoo. This policy" + einfo "package only covers the applications in the system profile." + einfo "More policy may need to be added according to your requirements." + echo + eerror "It is STRONGLY suggested that you evaluate and merge the" + eerror "policy changes. If any of the file contexts (*.fc) have" + eerror "changed, you should also relabel." + echo + ewarn "Please check the Changelog, there may be important information." + echo + echo + + einfo "Checking for deprecated policy..." + for i in $DEPRECATED; do + if [ -f "${POLICYDIR}/${i}" ]; then + eerror "${POLICYDIR}/${i}" + isdeprecated="y" + fi + done + [ "${isdeprecated}" ] && \ + eerror "The above policy file(s) should be removed if possible." || \ + einfo "None found." + + ebeep 4 + epause 4 +} -- 2.26.2