Initial commit to tree

Package-Manager: portage-2.1.10.3/cvs/Linux x86_64

diff --git a/sec-policy/selinux-haveged/ChangeLog b/sec-policy/selinux-haveged/ChangeLog
new file mode 100644 (file)
index 0000000..b2fa412
--- /dev/null
+++ b/sec-policy/selinux-haveged/ChangeLog
@@ -0,0 +1,21 @@
+# ChangeLog for sec-policy/selinux-haveged
+# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/ChangeLog,v 1.1 2011/07/25 22:58:54 blueness Exp $
+
+*selinux-haveged-2.20101213-r1 (25 Jul 2011)
+
+  25 Jul 2011; Anthony G. Basile <blueness@gentoo.org>
+  +files/fix-services-haveged-r1.patch, +selinux-haveged-2.20101213-r1.ebuild,
+  +selinux-haveged-2.20101213-r2.ebuild, +metadata.xml:
+  Initial commit to tree
+
+*selinux-haveged-2.20101213-r2 (21 Jul 2011)
+
+  21 Jul 2011; <swift@gentoo.org> +selinux-haveged-2.20101213-r2.ebuild:
+  Do not use a haveged domain, but refer to audio-entropyd
+
+  17 Jul 2011; <swift@gentoo.org> +files/fix-services-haveged-r1.patch,
+  +selinux-haveged-2.20101213-r1.ebuild, +metadata.xml:
+  Initial support for haveged
+
+

diff --git a/sec-policy/selinux-haveged/Manifest b/sec-policy/selinux-haveged/Manifest
new file mode 100644 (file)
index 0000000..a72f76e
--- /dev/null
+++ b/sec-policy/selinux-haveged/Manifest
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+AUX fix-services-haveged-r1.patch 1121 RMD160 fc4ec16446b365a3c1d3238e513a981646b59944 SHA1 311976796647ff7ba03a100302c5fe77d58e80e7 SHA256 1b2807f9be93293a8939251f13f245b7a26a29efc724640337ded33c115ae433
+DIST refpolicy-2.20101213.tar.bz2 559450 RMD160 4858f792f4db5b179de6fb8419a626c29d59bdd3 SHA1 0e881e99b8950a358eadc44633551ca10f12eaee SHA256 b691ee8f6066cc19bb0d4384fe3be277d97d22e9d4ac2db0c252065e8c3535de
+EBUILD selinux-haveged-2.20101213-r1.ebuild 513 RMD160 e882075184cfb57a22013c4e43142cccecc7b80d SHA1 7a5c8c227d28888e9753dbe5bb1641ac1d7f7b9e SHA256 001799b43c0b355592c56352c269fbb1908326023cc19f0d35e972cb25e993d8
+EBUILD selinux-haveged-2.20101213-r2.ebuild 514 RMD160 5cc6d9822513320084cce0faf3115cd16bda63f9 SHA1 5d73d7d9009db29709c5663d6a3893cbd5d6d163 SHA256 08868600f2bf4223a39e48ad90f366663ebdbaf2f40813b3a2a5fb05859d5f73
+MISC ChangeLog 828 RMD160 6312c69d4aafd48bb7ff2ad3bd6af13aaf8db9a4 SHA1 52d6cd71fadc9fc034427c3d35d1ca4469b348f3 SHA256 843cd33c246d7fe3d62becb5ff14346684a11538a72ff84a2e9737fdbeb319e0
+MISC metadata.xml 231 RMD160 3432cd9b807be77b66e130b4de3dd82f68c3070a SHA1 e47c5ab29df4deeeb3214cee63831c8c3f60f664 SHA256 a115a9266a58ba55675cdb9e54961e61bc69453e4faee154f00cf4f1e29a60c8
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.17 (GNU/Linux)
+
+iEYEAREIAAYFAk4t9TgACgkQl5yvQNBFVTUIOgCePmZlLcl/17EMB3yFPv03Q6zs
+xR8An0ggTMXrwoeZIw9CATzeUqTSm3qG
+=ULAV
+-----END PGP SIGNATURE-----

diff --git a/sec-policy/selinux-haveged/files/fix-services-haveged-r1.patch b/sec-policy/selinux-haveged/files/fix-services-haveged-r1.patch
new file mode 100644 (file)
index 0000000..e67434c
--- /dev/null
+++ b/sec-policy/selinux-haveged/files/fix-services-haveged-r1.patch
@@ -0,0 +1,42 @@
+--- services/haveged.te        1970-01-01 01:00:00.000000000 +0100
++++ services/haveged.te        2011-07-17 19:54:35.947000888 +0200
+@@ -0,0 +1,35 @@
++policy_module(haveged, 1.0.0)
++
++########################################
++#
++# Declarations
++#
++
++type haveged_t;
++type haveged_exec_t;
++init_daemon_domain(haveged_t, haveged_exec_t)
++
++type haveged_var_run_t;
++files_pid_file(haveged_var_run_t)
++
++########################################
++#
++# haveged local policy
++#
++allow haveged_t self:capability sys_admin;
++allow haveged_t self:unix_dgram_socket create_socket_perms;
++allow haveged_t haveged_var_run_t:file manage_file_perms;
++
++# pid file
++files_pid_filetrans(haveged_t, haveged_var_run_t, file)
++
++## Kernel stuff
++kernel_rw_kernel_sysctl(haveged_t)
++dev_read_rand(haveged_t)
++dev_write_rand(haveged_t)
++
++## System stuff
++miscfiles_read_localization(haveged_t)
++
++## Other stuff
++logging_send_syslog_msg(haveged_t)
+--- services/haveged.fc        1970-01-01 01:00:00.000000000 +0100
++++ services/haveged.fc        2011-07-17 17:55:56.431000683 +0200
+@@ -0,0 +1 @@
++/usr/sbin/haveged                     --      gen_context(system_u:object_r:haveged_exec_t,s0)

diff --git a/sec-policy/selinux-haveged/metadata.xml b/sec-policy/selinux-haveged/metadata.xml
new file mode 100644 (file)
index 0000000..8334c93
--- /dev/null
+++ b/sec-policy/selinux-haveged/metadata.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+       <herd>selinux</herd>
+       <longdescription>Gentoo SELinux policy for haveged</longdescription>
+</pkgmetadata>

diff --git a/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild b/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild
new file mode 100644 (file)
index 0000000..01b7fdc
--- /dev/null
+++ b/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild
@@ -0,0 +1,18 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild,v 1.1 2011/07/25 22:58:54 blueness Exp $
+
+IUSE=""
+
+MODS="haveged"
+
+inherit selinux-policy-2
+
+DESCRIPTION="SELinux policy for general applications"
+
+DEPEND=">=sec-policy/selinux-base-policy-2.20101213-r19"
+RDEPEND="${DEPEND}"
+
+KEYWORDS="~amd64 ~x86"
+
+POLICY_PATCH="${FILESDIR}/fix-services-haveged-r1.patch"

diff --git a/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild b/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild
new file mode 100644 (file)
index 0000000..c55feef
--- /dev/null
+++ b/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild
@@ -0,0 +1,16 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild,v 1.1 2011/07/25 22:58:54 blueness Exp $
+
+EAPI=3
+
+DESCRIPTION="SELinux policy for haveged (meta-package for selinux-audio-entropyd)"
+HOMEPAGE="http://hardened.gentoo.org/selinux"
+SRC_URI=""
+
+LICENSE="as-is"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE=""
+
+RDEPEND=">=sec-policy/selinux-audio-entropyd-2.20101213-r1"