# ChangeLog for sec-policy/selinux-acct
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-acct/ChangeLog,v 1.4 2011/10/23 12:42:58 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-acct/ChangeLog,v 1.5 2011/11/12 20:53:23 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-acct-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-acct-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-acct/selinux-acct-2.20101213.ebuild,v 1.2 2011/06/02 12:00:49 blueness Exp $
-
-IUSE=""
-
-MODS="acct"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-acpi
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-acpi/ChangeLog,v 1.16 2011/10/23 12:42:52 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-acpi/ChangeLog,v 1.17 2011/11/12 20:53:40 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-acpi-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-acpi-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-acpi/selinux-acpi-2.20101213.ebuild,v 1.2 2011/06/02 12:01:11 blueness Exp $
-
-IUSE=""
-
-MODS="apm"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for APM and ACPI"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ada
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ada/ChangeLog,v 1.4 2011/10/23 12:42:49 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ada/ChangeLog,v 1.5 2011/11/12 20:53:17 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ada-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ada-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ada/selinux-ada-2.20101213.ebuild,v 1.2 2011/06/02 12:01:31 blueness Exp $
-
-IUSE=""
-
-MODS="ada"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-afs
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-afs/ChangeLog,v 1.4 2011/10/23 12:42:32 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-afs/ChangeLog,v 1.5 2011/11/12 20:53:35 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-afs-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-afs-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-afs/selinux-afs-2.20101213.ebuild,v 1.2 2011/06/02 12:01:51 blueness Exp $
-
-IUSE=""
-
-MODS="afs"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-aide
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-aide/ChangeLog,v 1.4 2011/10/23 12:42:48 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-aide/ChangeLog,v 1.5 2011/11/12 20:52:59 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-aide-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-aide-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-aide/selinux-aide-2.20101213.ebuild,v 1.2 2011/06/02 12:02:12 blueness Exp $
-
-IUSE=""
-
-MODS="aide"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-alsa
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-alsa/ChangeLog,v 1.6 2011/10/23 12:42:30 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-alsa/ChangeLog,v 1.7 2011/11/12 20:53:28 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-alsa-2.20101213-r1.ebuild,
+ -files/fix-alsa.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-alsa-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- admin/alsa.fc 2010-09-03 17:23:05.000000000 +0200
-+++ ../../../refpolicy/policy/modules/admin/alsa.fc 2011-01-15 20:28:15.015000008 +0100
-@@ -8,6 +8,7 @@
- /etc/asound\.state -- gen_context(system_u:object_r:alsa_etc_rw_t,s0)
-
- /sbin/alsactl -- gen_context(system_u:object_r:alsa_exec_t,s0)
-+/usr/sbin/alsactl -- gen_context(system_u:object_r:alsa_exec_t,s0)
- /sbin/salsa -- gen_context(system_u:object_r:alsa_exec_t,s0)
-
- /usr/bin/ainit -- gen_context(system_u:object_r:alsa_exec_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-alsa/selinux-alsa-2.20101213-r1.ebuild,v 1.2 2011/06/02 12:02:32 blueness Exp $
-
-IUSE=""
-
-MODS="alsa"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-alsa.patch"
# ChangeLog for sec-policy/selinux-amanda
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-amanda/ChangeLog,v 1.4 2011/10/23 12:42:57 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-amanda/ChangeLog,v 1.5 2011/11/12 20:53:39 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-amanda-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-amanda-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-amanda/selinux-amanda-2.20101213.ebuild,v 1.2 2011/06/02 12:02:53 blueness Exp $
-
-IUSE=""
-
-MODS="amanda"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-amavis
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-amavis/ChangeLog,v 1.4 2011/10/23 12:42:38 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-amavis/ChangeLog,v 1.5 2011/11/12 20:53:40 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-amavis-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-amavis-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-amavis/selinux-amavis-2.20101213.ebuild,v 1.2 2011/06/02 12:03:14 blueness Exp $
-
-IUSE=""
-
-MODS="amavis"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for Amavis"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-apache
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apache/ChangeLog,v 1.28 2011/10/23 12:43:02 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apache/ChangeLog,v 1.29 2011/11/12 20:53:22 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-apache-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-apache-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apache/selinux-apache-2.20101213-r1.ebuild,v 1.2 2011/06/02 12:03:36 blueness Exp $
-IUSE="kerberos"
-MODS="apache"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for Apache HTTPD"
-DEPEND="${DEPEND}
- kerberos? ( sec-policy/selinux-kerberos )"
-RDEPEND="${DEPEND}"
-
-KEYWORDS="amd64 x86"
-S="${WORKDIR}/"
-
-src_unpack() {
- selinux-policy-2_src_unpack
- if ! use kerberos ; then
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted";
- for i in ${POLICY_TYPES}; do
- sed -i -e "/httpd_keytab_t/d" \
- "${S}/${i}/apache.fc"
- done
- fi
-}
-
-pkg_postinst() {
- selinux-policy-2_pkg_postinst
- if use kerberos ; then
- einfo "If you decide to uninstall Kerberos, you should clear the"
- einfo "kerberos use flag here, and then emerge this module again."
- einfo "Failure to do so may result in policy compile errors in the"
- einfo "future."
- else
- einfo "If you install Kerberos later, you should set the kerberos"
- einfo "use flag here, and then emerge this module again in order to"
- einfo "get all of the relevant policy changes. Failure to do so may"
- einfo "result in errors authenticating against kerberos servers by"
- einfo "Apache."
- fi
-}
# ChangeLog for sec-policy/selinux-apcupsd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apcupsd/ChangeLog,v 1.4 2011/10/23 12:42:34 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apcupsd/ChangeLog,v 1.5 2011/11/12 20:53:07 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-apcupsd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-apcupsd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apcupsd/selinux-apcupsd-2.20101213.ebuild,v 1.2 2011/06/02 12:03:56 blueness Exp $
-
-IUSE=""
-
-MODS="apcupsd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-apm
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apm/ChangeLog,v 1.4 2011/10/23 12:42:33 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apm/ChangeLog,v 1.5 2011/11/12 20:53:01 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-apm-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-apm-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-apm/selinux-apm-2.20101213.ebuild,v 1.2 2011/06/02 12:04:17 blueness Exp $
-
-IUSE=""
-
-MODS="apm"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-arpwatch/selinux-arpwatch-2.20101213.ebuild,v 1.2 2011/06/02 12:04:38 blueness Exp $
-
-MODS="arpwatch"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for arpwatch"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-asterisk
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-asterisk/ChangeLog,v 1.22 2011/10/23 12:42:49 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-asterisk/ChangeLog,v 1.23 2011/11/12 20:53:16 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-asterisk-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-asterisk-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-asterisk/selinux-asterisk-2.20101213.ebuild,v 1.2 2011/06/02 12:04:59 blueness Exp $
-
-MODS="asterisk"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="Gentoo SELinux policy for asterisk, a modular open-source PBX system"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-audio-entropyd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-audio-entropyd/ChangeLog,v 1.24 2011/10/23 12:42:35 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-audio-entropyd/ChangeLog,v 1.25 2011/11/12 20:53:28 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-audioentropy-r1.patch,
+ -selinux-audio-entropyd-2.20101213.ebuild,
+ -selinux-audio-entropyd-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-audio-entropyd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/audioentropy.te 2010-08-03 15:11:05.000000000 +0200
-+++ services/audioentropy.te 2011-07-20 20:39:57.861005056 +0200
-@@ -5,6 +5,13 @@
- # Declarations
- #
-
-+## <desc>
-+## <p>
-+## Allow the use of the audio devices as the source for the entropy feeds
-+## </p>
-+## </desc>
-+gen_tunable(entropyd_use_audio, false)
-+
- type entropyd_t;
- type entropyd_exec_t;
- init_daemon_domain(entropyd_t, entropyd_exec_t)
-@@ -20,11 +27,12 @@
- allow entropyd_t self:capability { dac_override ipc_lock sys_admin };
- dontaudit entropyd_t self:capability sys_tty_config;
- allow entropyd_t self:process signal_perms;
-+allow entropyd_t self:unix_dgram_socket create_socket_perms;
-
- manage_files_pattern(entropyd_t, entropyd_var_run_t, entropyd_var_run_t)
- files_pid_filetrans(entropyd_t, entropyd_var_run_t, file)
-
--kernel_read_kernel_sysctls(entropyd_t)
-+kernel_rw_kernel_sysctl(entropyd_t)
- kernel_list_proc(entropyd_t)
- kernel_read_proc_symlinks(entropyd_t)
-
-@@ -33,11 +41,6 @@
- dev_write_urand(entropyd_t)
- dev_read_rand(entropyd_t)
- dev_write_rand(entropyd_t)
--dev_read_sound(entropyd_t)
--# set sound card parameters such as
--# sample format, number of channels
--# and sample rate.
--dev_write_sound(entropyd_t)
-
- files_read_etc_files(entropyd_t)
- files_read_usr_files(entropyd_t)
-@@ -55,8 +58,19 @@
- userdom_dontaudit_search_user_home_dirs(entropyd_t)
-
- optional_policy(`
-- alsa_read_lib(entropyd_t)
-- alsa_read_rw_config(entropyd_t)
-+ tunable_policy(`entropyd_use_audio',`
-+ dev_read_sound(entropyd_t)
-+ # set sound card parameters such as sample format, number of channels
-+ # and sample rate.
-+ dev_write_sound(entropyd_t)
-+ ')
-+')
-+
-+optional_policy(`
-+ tunable_policy(`entropyd_use_audio',`
-+ alsa_read_lib(entropyd_t)
-+ alsa_read_rw_config(entropyd_t)
-+ ')
- ')
-
- optional_policy(`
---- services/audioentropy.fc 2010-08-03 15:11:05.000000000 +0200
-+++ services/audioentropy.fc 2011-07-20 19:45:01.674004962 +0200
-@@ -2,5 +2,7 @@
- # /usr
- #
- /usr/sbin/audio-entropyd -- gen_context(system_u:object_r:entropyd_exec_t,s0)
-+/usr/sbin/haveged -- gen_context(system_u:object_r:entropyd_exec_t,s0)
-
- /var/run/audio-entropyd\.pid -- gen_context(system_u:object_r:entropyd_var_run_t,s0)
-+/var/run/haveged\.pid -- gen_context(system_u:object_r:entropyd_var_run_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-audio-entropyd/selinux-audio-entropyd-2.20101213-r1.ebuild,v 1.1 2011/07/25 22:25:22 blueness Exp $
-
-MODS="audioentropy"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for entropy-managing domains like audioentropyd, haveged, etc."
-
-KEYWORDS="~amd64 ~x86"
-RDEPEND="!<=sec-policy/selinux-haveged-2.20101213-r1
- >=sys-apps/policycoreutils-1.30.30
- >=sec-policy/selinux-base-policy-${PV}"
-
-POLICY_PATCH="${FILESDIR}/fix-services-audioentropy-r1.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-audio-entropyd/selinux-audio-entropyd-2.20101213.ebuild,v 1.2 2011/06/02 12:05:20 blueness Exp $
-
-MODS="audioentropy"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for audio-entropyd"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-automount
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-automount/ChangeLog,v 1.4 2011/10/23 12:42:31 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-automount/ChangeLog,v 1.5 2011/11/12 20:53:02 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-automount-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-automount-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-automount/selinux-automount-2.20101213.ebuild,v 1.2 2011/06/02 12:05:41 blueness Exp $
-
-IUSE=""
-
-MODS="automount"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-avahi
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-avahi/ChangeLog,v 1.16 2011/10/23 12:42:43 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-avahi/ChangeLog,v 1.17 2011/11/12 20:53:28 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-avahi-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-avahi-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-avahi/selinux-avahi-2.20101213.ebuild,v 1.2 2011/06/02 12:06:02 blueness Exp $
-
-IUSE=""
-
-MODS="avahi"
-
-RDEPEND="sec-policy/selinux-dbus"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for avahi"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-awstats
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-awstats/ChangeLog,v 1.4 2011/10/23 12:42:34 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-awstats/ChangeLog,v 1.5 2011/11/12 20:53:17 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-awstats-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-awstats-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-awstats/selinux-awstats-2.20101213.ebuild,v 1.2 2011/06/02 12:06:23 blueness Exp $
-
-IUSE=""
-
-MODS="awstats"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-base-policy
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.86 2011/10/23 12:42:53 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.87 2011/11/12 20:53:21 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-base-policy-2.20090730.ebuild,
+ -selinux-base-policy-2.20090814.ebuild,
+ -selinux-base-policy-2.20091215.ebuild,
+ -selinux-base-policy-2.20101213-r16.ebuild,
+ -selinux-base-policy-2.20101213-r17.ebuild,
+ -selinux-base-policy-2.20101213-r18.ebuild,
+ -selinux-base-policy-2.20101213-r20.ebuild,
+ -selinux-base-policy-2.20101213-r21.ebuild,
+ -selinux-base-policy-2.20101213-r22.ebuild,
+ -selinux-base-policy-2.20110726-r3.ebuild,
+ -files/modules.conf.strict.20090730, -files/modules.conf.targeted.20090730:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-base-policy-2.20110726-r4.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-application = base
-authlogin = base
-bootloader = base
-clock = base
-consoletype = base
-corecommands = base
-corenetwork = base
-cron = base
-devices = base
-dmesg = base
-domain = base
-files = base
-filesystem = base
-fstools = base
-getty = base
-hostname = base
-hotplug = base
-init = base
-iptables = base
-kernel = base
-libraries = base
-locallogin = base
-logging = base
-lvm = base
-miscfiles = base
-mcs = base
-mls = base
-modutils = base
-mount = base
-mta = base
-netutils = base
-nscd = base
-portage = base
-raid = base
-rsync = base
-selinux = base
-selinuxutil = base
-ssh = base
-staff = base
-storage = base
-su = base
-sysadm = base
-sysnetwork = base
-terminal = base
-ubac = base
-udev = base
-userdomain = base
-usermanage = base
-unprivuser = base
+++ /dev/null
-application = base
-authlogin = base
-bootloader = base
-clock = base
-consoletype = base
-corecommands = base
-corenetwork = base
-cron = base
-devices = base
-dmesg = base
-domain = base
-files = base
-filesystem = base
-fstools = base
-getty = base
-hostname = base
-hotplug = base
-init = base
-iptables = base
-kernel = base
-libraries = base
-locallogin = base
-logging = base
-lvm = base
-miscfiles = base
-mcs = base
-mls = base
-modutils = base
-mount = base
-mta = base
-netutils = base
-nscd = base
-portage = base
-raid = base
-rsync = base
-selinux = base
-selinuxutil = base
-ssh = base
-staff = base
-storage = base
-su = base
-sysadm = base
-sysnetwork = base
-terminal = base
-ubac = base
-udev = base
-unconfined = base
-userdomain = base
-usermanage = base
-unprivuser = base
+++ /dev/null
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20090730.ebuild,v 1.1 2009/08/05 13:35:11 pebenito Exp $
-
-IUSE=""
-
-inherit eutils
-
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
- MOD_CONF_VER="20090730"
-
- unpack ${A}
-
-# cd "${S}/refpolicy"
-# epatch ${FILESDIR}/${PN}-${PV}.diff
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cp "${FILESDIR}/modules.conf.${i}.${MOD_CONF_VER}" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
-
- # add compat
- sed -i -e '/user_u/s/user_r/user_r system_r/' "${S}/${i}/policy/users" \
- || die "targeted user compat failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- if has "loadpolicy" $FEATURES ; then
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp
- done
- else
- echo
- echo
- eerror "Policy has not been loaded. It is strongly suggested"
- eerror "that the policy be loaded before continuing!!"
- echo
- einfo "Automatic policy loading can be enabled by adding"
- einfo "\"loadpolicy\" to the FEATURES in make.conf."
- echo
- echo
- ebeep 4
- epause 4
- fi
-}
+++ /dev/null
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20090814.ebuild,v 1.1 2009/08/14 18:58:38 pebenito Exp $
-
-IUSE=""
-
-inherit eutils
-
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
- MOD_CONF_VER="20090730"
-
- unpack ${A}
-
-# cd "${S}/refpolicy"
-# epatch ${FILESDIR}/${PN}-${PV}.diff
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cp "${FILESDIR}/modules.conf.${i}.${MOD_CONF_VER}" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
-
- # add compat
- sed -i -e '/user_u/s/user_r/user_r system_r/' "${S}/${i}/policy/users" \
- || die "targeted user compat failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- if has "loadpolicy" $FEATURES ; then
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp
- done
- else
- echo
- echo
- eerror "Policy has not been loaded. It is strongly suggested"
- eerror "that the policy be loaded before continuing!!"
- echo
- einfo "Automatic policy loading can be enabled by adding"
- einfo "\"loadpolicy\" to the FEATURES in make.conf."
- echo
- echo
- ebeep 4
- epause 4
- fi
-}
+++ /dev/null
-# Copyright 1999-2009 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20091215.ebuild,v 1.1 2009/12/16 02:53:36 pebenito Exp $
-
-EAPI="1"
-IUSE="+peer_perms open_perms"
-
-inherit eutils
-
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
- MOD_CONF_VER="20090730"
-
- unpack ${A}
-
-# cd "${S}/refpolicy"
-# epatch ${FILESDIR}/${PN}-${PV}.diff
-
- if ! use peer_perms; then
- sed -i -e '/network_peer_controls/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use open_perms; then
- sed -i -e '/open_perms/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cp "${FILESDIR}/modules.conf.${i}.${MOD_CONF_VER}" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- if has "loadpolicy" $FEATURES ; then
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp
- done
- else
- echo
- echo
- eerror "Policy has not been loaded. It is strongly suggested"
- eerror "that the policy be loaded before continuing!!"
- echo
- einfo "Automatic policy loading can be enabled by adding"
- einfo "\"loadpolicy\" to the FEATURES in make.conf."
- echo
- echo
- ebeep 4
- epause 4
- fi
-}
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r16.ebuild,v 1.3 2011/07/03 00:33:35 blueness Exp $
-
-EAPI="1"
-IUSE="+peer_perms +open_perms +ubac"
-
-inherit eutils
-
-#PATCHBUNDLE="${FILESDIR}/patchbundle-${PF}.tar.bz2"
-PATCHBUNDLE="${DISTDIR}/patchbundle-${PF}.tar.bz2"
-
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-
-#SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2
- http://dev.gentoo.org/~blueness/patchbundle-selinux-base-policy/patchbundle-${PF}.tar.bz2"
-
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="amd64 x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30
- >=sys-fs/udev-151"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
- MOD_CONF_VER="20090730"
-
- unpack ${A}
-
- cd "${S}"
- epatch "${PATCHBUNDLE}"
- cd "${S}/refpolicy"
- # Fix bug 257111
- sed -i -e 's:system_crond_t:system_cronjob_t:g' \
- "${S}/refpolicy/config/appconfig-standard/default_contexts"
-
- if ! use peer_perms; then
- sed -i -e '/network_peer_controls/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use open_perms; then
- sed -i -e '/open_perms/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cd "${S}/${i}";
- make conf || die "${i} reconfiguration failed"
-
- cp "${FILESDIR}/modules.conf.${i}.${MOD_CONF_VER}" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- if ! use ubac; then
- sed -i -e 's:^UBAC = y:UBAC = n:g' "${S}/${i}/build.conf"
- fi
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_preinst() {
- has_version "<${CATEGORY}/${PN}-2.20101213-r13"
- previous_less_than_r13=$?
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp || die "Could not load in new base policy"
- done
- elog "Updates on policies might require you to relabel files. If you, after"
- elog "installing new SELinux policies, get 'permission denied' errors,"
- elog "relabelling your system using 'rlpkg -a -r' might resolve the issues."
-}
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r17.ebuild,v 1.2 2011/07/03 00:33:35 blueness Exp $
-
-EAPI="1"
-IUSE="+peer_perms +open_perms +ubac"
-
-inherit eutils
-
-#PATCHBUNDLE="${FILESDIR}/patchbundle-${PF}.tar.bz2"
-PATCHBUNDLE="${DISTDIR}/patchbundle-${PF}.tar.bz2"
-
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-
-#SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2
- http://dev.gentoo.org/~blueness/patchbundle-selinux-base-policy/patchbundle-${PF}.tar.bz2"
-
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30
- >=sys-fs/udev-151"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
- MOD_CONF_VER="20090730"
-
- unpack ${A}
-
- cd "${S}"
- epatch "${PATCHBUNDLE}"
- cd "${S}/refpolicy"
- # Fix bug 257111
- sed -i -e 's:system_crond_t:system_cronjob_t:g' \
- "${S}/refpolicy/config/appconfig-standard/default_contexts"
-
- if ! use peer_perms; then
- sed -i -e '/network_peer_controls/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use open_perms; then
- sed -i -e '/open_perms/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cd "${S}/${i}";
- make conf || die "Make conf in ${i} failed"
-
- cp "${FILESDIR}/modules.conf.${i}.${MOD_CONF_VER}" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- if ! use ubac; then
- sed -i -e 's:^UBAC = y:UBAC = n:g' "${S}/${i}/build.conf"
- fi
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_preinst() {
- has_version "<${CATEGORY}/${PN}-2.20101213-r13"
- previous_less_than_r13=$?
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp || die "Could not load in new base policy"
- done
- elog "Updates on policies might require you to relabel files. If you, after"
- elog "installing new SELinux policies, get 'permission denied' errors,"
- elog "relabelling your system using 'rlpkg -a -r' might resolve the issues."
-}
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r18.ebuild,v 1.1 2011/07/10 02:30:17 blueness Exp $
-
-EAPI="1"
-IUSE="+peer_perms +open_perms +ubac"
-
-inherit eutils
-
-#PATCHBUNDLE="${FILESDIR}/patchbundle-${PF}.tar.bz2"
-PATCHBUNDLE="${DISTDIR}/patchbundle-${PF}.tar.bz2"
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-#SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2
- http://dev.gentoo.org/~blueness/patchbundle-selinux-base-policy/patchbundle-${PF}.tar.bz2"
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30
- >=sys-fs/udev-151"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
- MOD_CONF_VER="20090730"
-
- unpack ${A}
-
- cd "${S}"
- epatch "${PATCHBUNDLE}"
- cd "${S}/refpolicy"
- # Fix bug 257111
- sed -i -e 's:system_crond_t:system_cronjob_t:g' \
- "${S}/refpolicy/config/appconfig-standard/default_contexts"
-
- if ! use peer_perms; then
- sed -i -e '/network_peer_controls/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use open_perms; then
- sed -i -e '/open_perms/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cd "${S}/${i}";
- make conf || die "Make conf in ${i} failed"
-
- cp "${FILESDIR}/modules.conf.${i}.${MOD_CONF_VER}" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- if ! use ubac; then
- sed -i -e 's:^UBAC = y:UBAC = n:g' "${S}/${i}/build.conf"
- fi
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_preinst() {
- has_version "<${CATEGORY}/${PN}-2.20101213-r13"
- previous_less_than_r13=$?
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
-
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp || die "Could not load in new base policy"
- done
- elog "Updates on policies might require you to relabel files. If you, after"
- elog "installing new SELinux policies, get 'permission denied' errors,"
- elog "relabelling your system using 'rlpkg -a -r' might resolve the issues."
-}
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r20.ebuild,v 1.1 2011/07/25 22:13:22 blueness Exp $
-
-EAPI="1"
-IUSE="+peer_perms +open_perms +ubac"
-
-inherit eutils
-
-#PATCHBUNDLE="${FILESDIR}/patchbundle-${PF}.tar.bz2"
-PATCHBUNDLE="${DISTDIR}/patchbundle-${PF}.tar.bz2"
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-#SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2
- http://dev.gentoo.org/~blueness/patchbundle-selinux-base-policy/patchbundle-${PF}.tar.bz2"
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30
- >=sys-fs/udev-151"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- unpack ${A}
-
- cd "${S}"
- epatch "${PATCHBUNDLE}"
- cd "${S}/refpolicy"
- # Fix bug 257111
- sed -i -e 's:system_crond_t:system_cronjob_t:g' \
- "${S}/refpolicy/config/appconfig-standard/default_contexts"
-
- if ! use peer_perms; then
- sed -i -e '/network_peer_controls/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use open_perms; then
- sed -i -e '/open_perms/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cd "${S}/${i}";
- make conf || die "Make conf in ${i} failed"
-
- # Define what we see as "base" and what we want to remain modular
- cp "${FILESDIR}/modules.conf" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- if [[ "${i}" == "targeted" ]];
- then
- echo "unconfined = base" >> "${S}/${i}/policy/modules.conf"
- fi
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]];
- then
- # MCS/MLS require additional settings
- sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \
- || die "failed to set type to mls"
- fi
-
- if ! use ubac; then
- sed -i -e 's:^UBAC = y:UBAC = n:g' "${S}/${i}/build.conf"
- fi
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_preinst() {
- has_version "<${CATEGORY}/${PN}-2.20101213-r13"
- previous_less_than_r13=$?
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp || die "Could not load in new base policy"
- done
- elog "Updates on policies might require you to relabel files. If you, after"
- elog "installing new SELinux policies, get 'permission denied' errors,"
- elog "relabelling your system using 'rlpkg -a -r' might resolve the issues."
-}
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r21.ebuild,v 1.1 2011/07/25 22:13:22 blueness Exp $
-
-EAPI="1"
-IUSE="+peer_perms +open_perms +ubac"
-
-inherit eutils
-
-#PATCHBUNDLE="${FILESDIR}/patchbundle-${PF}.tar.bz2"
-PATCHBUNDLE="${DISTDIR}/patchbundle-${PF}.tar.bz2"
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-#SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2
- http://dev.gentoo.org/~blueness/patchbundle-selinux-base-policy/patchbundle-${PF}.tar.bz2"
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30
- >=sys-fs/udev-151"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- unpack ${A}
-
- cd "${S}"
- epatch "${PATCHBUNDLE}"
- cd "${S}/refpolicy"
- # Fix bug 257111
- sed -i -e 's:system_crond_t:system_cronjob_t:g' \
- "${S}/refpolicy/config/appconfig-standard/default_contexts"
- sed -i -e 's|system_r:cronjob_t|system_r:system_cronjob_t|g' \
- "${S}/refpolicy/config/appconfig-mls/default_contexts"
- sed -i -e 's|system_r:cronjob_t|system_r:system_cronjob_t|g' \
- "${S}/refpolicy/config/appconfig-mcs/default_contexts"
-
- if ! use peer_perms; then
- sed -i -e '/network_peer_controls/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use open_perms; then
- sed -i -e '/open_perms/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cd "${S}/${i}";
- make conf || die "Make conf in ${i} failed"
-
- # Define what we see as "base" and what we want to remain modular
- cp "${FILESDIR}/modules.conf" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- if [[ "${i}" == "targeted" ]];
- then
- echo "unconfined = base" >> "${S}/${i}/policy/modules.conf"
- fi
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]];
- then
- # MCS/MLS require additional settings
- sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \
- || die "failed to set type to mls"
- fi
-
- if ! use ubac; then
- sed -i -e 's:^UBAC = y:UBAC = n:g' "${S}/${i}/build.conf"
- fi
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_preinst() {
- has_version "<${CATEGORY}/${PN}-2.20101213-r13"
- previous_less_than_r13=$?
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp || die "Could not load in new base policy"
- done
- elog "Updates on policies might require you to relabel files. If you, after"
- elog "installing new SELinux policies, get 'permission denied' errors,"
- elog "relabelling your system using 'rlpkg -a -r' might resolve the issues."
-}
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r22.ebuild,v 1.1 2011/08/07 10:53:56 blueness Exp $
-
-EAPI="1"
-IUSE="+peer_perms +open_perms +ubac"
-
-inherit eutils
-
-#PATCHBUNDLE="${FILESDIR}/patchbundle-${PF}.tar.bz2"
-PATCHBUNDLE="${DISTDIR}/patchbundle-${PF}.tar.bz2"
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-#SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2
- http://dev.gentoo.org/~blueness/patchbundle-selinux-base-policy/patchbundle-${PF}.tar.bz2"
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30
- >=sys-fs/udev-151"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_unpack() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- unpack ${A}
-
- cd "${S}"
- epatch "${PATCHBUNDLE}"
- cd "${S}/refpolicy"
- # Fix bug 257111
- sed -i -e 's:system_crond_t:system_cronjob_t:g' \
- "${S}/refpolicy/config/appconfig-standard/default_contexts"
- sed -i -e 's|system_r:cronjob_t|system_r:system_cronjob_t|g' \
- "${S}/refpolicy/config/appconfig-mls/default_contexts"
- sed -i -e 's|system_r:cronjob_t|system_r:system_cronjob_t|g' \
- "${S}/refpolicy/config/appconfig-mcs/default_contexts"
-
- if ! use peer_perms; then
- sed -i -e '/network_peer_controls/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use open_perms; then
- sed -i -e '/open_perms/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cd "${S}/${i}";
- make conf || die "Make conf in ${i} failed"
-
- # Define what we see as "base" and what we want to remain modular
- cp "${FILESDIR}/modules.conf" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- if [[ "${i}" == "targeted" ]];
- then
- echo "unconfined = base" >> "${S}/${i}/policy/modules.conf"
- fi
- sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
- -e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
- || die "build.conf setup failed."
-
- if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]];
- then
- # MCS/MLS require additional settings
- sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \
- || die "failed to set type to mls"
- fi
-
- if ! use ubac; then
- sed -i -e 's:^UBAC = y:UBAC = n:g' "${S}/${i}/build.conf"
- fi
-
- echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
- make base || die "${i} compile failed"
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_preinst() {
- has_version "<${CATEGORY}/${PN}-2.20101213-r13"
- previous_less_than_r13=$?
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp || die "Could not load in new base policy"
- done
- elog "Updates on policies might require you to relabel files. If you, after"
- elog "installing new SELinux policies, get 'permission denied' errors,"
- elog "relabelling your system using 'rlpkg -a -r' might resolve the issues."
-}
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20110726-r3.ebuild,v 1.1 2011/08/28 21:12:32 swift Exp $
-
-EAPI="4"
-IUSE="+peer_perms +open_perms +ubac doc"
-
-inherit eutils
-
-DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
-SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2
- http://dev.gentoo.org/~swift/patches/${PN}/patchbundle-${PF}.tar.bz2"
-LICENSE="GPL-2"
-SLOT="0"
-
-KEYWORDS="~amd64 ~x86"
-
-RDEPEND=">=sys-apps/policycoreutils-1.30.30
- >=sys-fs/udev-151"
-DEPEND="${RDEPEND}
- sys-devel/m4
- >=sys-apps/checkpolicy-1.30.12"
-
-S=${WORKDIR}/
-
-src_prepare() {
- # Apply the gentoo patches to the policy. These patches are only necessary
- # for base policies, or for interface changes on modules.
- EPATCH_MULTI_MSG="Applying SELinux policy updates ... " \
- EPATCH_SUFFIX="patch" \
- EPATCH_SOURCE="${WORKDIR}" \
- EPATCH_FORCE="yes" \
- epatch
-
- cd "${S}/refpolicy"
- # Fix bug 257111 - Correct the initial sid for cron-started jobs in the
- # system_r role
- sed -i -e 's:system_crond_t:system_cronjob_t:g' \
- "${S}/refpolicy/config/appconfig-standard/default_contexts"
- sed -i -e 's|system_r:cronjob_t|system_r:system_cronjob_t|g' \
- "${S}/refpolicy/config/appconfig-mls/default_contexts"
- sed -i -e 's|system_r:cronjob_t|system_r:system_cronjob_t|g' \
- "${S}/refpolicy/config/appconfig-mcs/default_contexts"
-}
-
-src_configure() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- # Update the SELinux refpolicy capabilities based on the users' USE flags.
-
- if ! use peer_perms; then
- sed -i -e '/network_peer_controls/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use open_perms; then
- sed -i -e '/open_perms/d' \
- "${S}/refpolicy/policy/policy_capabilities"
- fi
-
- if ! use ubac; then
- sed -i -e '/^UBAC/s/y/n/' "${S}/refpolicy/build.conf" \
- || die "Failed to disable User Based Access Control"
- fi
-
- echo "DISTRO = gentoo" >> "${S}/refpolicy/build.conf"
-
- # Setup the policies based on the types delivered by the end user.
- # These types can be "targeted", "strict", "mcs" and "mls".
- for i in ${POLICY_TYPES}; do
- cp -a "${S}/refpolicy" "${S}/${i}"
-
- cd "${S}/${i}";
- make conf || die "Make conf in ${i} failed"
-
- # Define what we see as "base" and what we want to remain modular.
- cp "${FILESDIR}/modules.conf" \
- "${S}/${i}/policy/modules.conf" \
- || die "failed to set up modules.conf"
- # In case of "targeted", we add the "unconfined" to the base policy
- if [[ "${i}" == "targeted" ]];
- then
- echo "unconfined = base" >> "${S}/${i}/policy/modules.conf"
- fi
-
- sed -i -e '/^QUIET/s/n/y/' -e "/^NAME/s/refpolicy/$i/" \
- "${S}/${i}/build.conf" || die "build.conf setup failed."
-
- if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]];
- then
- # MCS/MLS require additional settings
- sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \
- || die "failed to set type to mls"
- fi
-
- if [ "${i}" == "targeted" ]; then
- sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
- "${S}/${i}/config/appconfig-standard/seusers" \
- || die "targeted seusers setup failed."
- fi
- done
-}
-
-src_compile() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
- make base || die "${i} compile failed"
- if use doc; then
- make html || die
- fi
- done
-}
-
-src_install() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- cd "${S}/${i}"
-
- make DESTDIR="${D}" install \
- || die "${i} install failed."
-
- make DESTDIR="${D}" install-headers \
- || die "${i} headers install failed."
-
- echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
-
- echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
-
- # libsemanage won't make this on its own
- keepdir "/etc/selinux/${i}/policy"
-
- if use doc; then
- dohtml doc/html/*;
- fi
- done
-
- dodoc doc/Makefile.example doc/example.{te,fc,if}
-
- insinto /etc/selinux
- doins "${FILESDIR}/config"
-}
-
-pkg_preinst() {
- has_version "<${CATEGORY}/${PN}-2.20101213-r13"
- previous_less_than_r13=$?
-}
-
-pkg_postinst() {
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
-
- for i in ${POLICY_TYPES}; do
- einfo "Inserting base module into ${i} module store."
-
- cd "${ROOT}/usr/share/selinux/${i}"
- semodule -s "${i}" -b base.pp || die "Could not load in new base policy"
- done
- elog "Updates on policies might require you to relabel files. If you, after"
- elog "installing new SELinux policies, get 'permission denied' errors,"
- elog "relabelling your system using 'rlpkg -a -r' might resolve the issues."
-}
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-bind/selinux-bind-2.20101213.ebuild,v 1.2 2011/06/02 12:07:07 blueness Exp $
-
-MODS="bind"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for BIND"
-
-KEYWORDS="amd64 x86"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-bitlbee/selinux-bitlbee-2.20101213.ebuild,v 1.2 2011/06/02 12:07:27 blueness Exp $
-
-IUSE=""
-
-MODS="bitlbee"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-bluetooth
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-bluetooth/ChangeLog,v 1.4 2011/10/23 12:42:40 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-bluetooth/ChangeLog,v 1.5 2011/11/12 20:52:52 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-bluetooth-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-bluetooth-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-bluetooth/selinux-bluetooth-2.20101213.ebuild,v 1.2 2011/06/02 12:07:47 blueness Exp $
-
-IUSE=""
-
-MODS="bluetooth"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-bluez
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-bluez/ChangeLog,v 1.16 2011/10/23 12:42:54 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-bluez/ChangeLog,v 1.17 2011/11/12 20:53:23 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-bluez-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-bluez-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-bluez/selinux-bluez-2.20101213.ebuild,v 1.2 2011/06/02 12:08:08 blueness Exp $
-
-IUSE="dbus"
-
-MODS="bluetooth"
-
-inherit selinux-policy-2
-
-RDEPEND="dbus? ( sec-policy/selinux-dbus )"
-
-DESCRIPTION="SELinux policy for bluez bluetooth tools."
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-brctl
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-brctl/ChangeLog,v 1.4 2011/10/23 12:42:28 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-brctl/ChangeLog,v 1.5 2011/11/12 20:53:05 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-brctl-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-brctl-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-brctl/selinux-brctl-2.20101213.ebuild,v 1.2 2011/06/02 12:08:29 blueness Exp $
-
-IUSE=""
-
-MODS="brctl"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-calamaris
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-calamaris/ChangeLog,v 1.4 2011/10/23 12:42:54 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-calamaris/ChangeLog,v 1.5 2011/11/12 20:52:51 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-calamaris-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-calamaris-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-calamaris/selinux-calamaris-2.20101213.ebuild,v 1.2 2011/06/02 12:08:49 blueness Exp $
-
-IUSE=""
-
-MODS="calamaris"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-canna
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-canna/ChangeLog,v 1.4 2011/10/23 12:42:29 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-canna/ChangeLog,v 1.5 2011/11/12 20:53:30 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-canna-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-canna-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-canna/selinux-canna-2.20101213.ebuild,v 1.2 2011/06/02 12:09:10 blueness Exp $
-
-IUSE=""
-
-MODS="canna"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ccs
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ccs/ChangeLog,v 1.4 2011/10/23 12:42:29 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ccs/ChangeLog,v 1.5 2011/11/12 20:52:56 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ccs-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ccs-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ccs/selinux-ccs-2.20101213.ebuild,v 1.2 2011/06/02 12:09:30 blueness Exp $
-
-IUSE=""
-
-MODS="ccs"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-cdrecord
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cdrecord/ChangeLog,v 1.4 2011/10/23 12:43:02 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cdrecord/ChangeLog,v 1.5 2011/11/12 20:53:25 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-cdrecord-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-cdrecord-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cdrecord/selinux-cdrecord-2.20101213.ebuild,v 1.2 2011/06/02 12:09:51 blueness Exp $
-
-IUSE=""
-
-MODS="cdrecord"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-cgroup
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cgroup/ChangeLog,v 1.4 2011/10/23 12:42:31 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cgroup/ChangeLog,v 1.5 2011/11/12 20:52:49 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-cgroup-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-cgroup-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cgroup/selinux-cgroup-2.20101213.ebuild,v 1.2 2011/06/02 12:10:11 blueness Exp $
-
-IUSE=""
-
-MODS="cgroup"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-chronyd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-chronyd/ChangeLog,v 1.4 2011/10/23 12:43:00 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-chronyd/ChangeLog,v 1.5 2011/11/12 20:53:32 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-chronyd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-chronyd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-chronyd/selinux-chronyd-2.20101213.ebuild,v 1.2 2011/06/02 12:10:31 blueness Exp $
-
-IUSE=""
-
-MODS="chronyd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-clamav
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-clamav/ChangeLog,v 1.27 2011/10/23 12:42:29 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-clamav/ChangeLog,v 1.28 2011/11/12 20:53:29 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-clamav-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-clamav-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-clamav/selinux-clamav-2.20101213.ebuild,v 1.2 2011/06/02 12:10:51 blueness Exp $
-
-MODS="clamav"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for Clam AntiVirus"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-clockspeed
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-clockspeed/ChangeLog,v 1.31 2011/10/23 12:42:35 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-clockspeed/ChangeLog,v 1.32 2011/11/12 20:53:47 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-clockspeed-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-clockspeed-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-clockspeed/selinux-clockspeed-2.20101213.ebuild,v 1.2 2011/06/02 12:11:12 blueness Exp $
-
-MODS="clockspeed"
-IUSE=""
-
-inherit selinux-policy-2
-
-IUSE=""
-
-DESCRIPTION="SELinux policy for clockspeed"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-consolekit
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-consolekit/ChangeLog,v 1.4 2011/10/23 12:42:46 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-consolekit/ChangeLog,v 1.5 2011/11/12 20:53:03 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-consolekit-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-consolekit-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-consolekit/selinux-consolekit-2.20101213.ebuild,v 1.2 2011/06/02 12:11:33 blueness Exp $
-
-IUSE=""
-
-MODS="consolekit"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-corosync
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-corosync/ChangeLog,v 1.4 2011/10/23 12:42:39 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-corosync/ChangeLog,v 1.5 2011/11/12 20:53:42 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-corosync-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-corosync-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-corosync/selinux-corosync-2.20101213.ebuild,v 1.2 2011/06/02 12:11:53 blueness Exp $
-
-IUSE=""
-
-MODS="corosync"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-courier
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-courier/ChangeLog,v 1.7 2011/10/23 12:42:36 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-courier/ChangeLog,v 1.8 2011/11/12 20:53:40 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-courier-r1.patch,
+ -files/fix-services-courier-r2.patch, -files/fix-services-courier-r3.patch,
+ -selinux-courier-2.20101213-r3.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-courier-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/courier.te 2010-12-13 15:11:02.000000000 +0100
-+++ services/courier.te 2011-03-03 16:27:16.660999997 +0100
-@@ -37,7 +37,7 @@
- #
-
- allow courier_authdaemon_t self:capability { setuid setgid sys_tty_config };
--allow courier_authdaemon_t self:unix_stream_socket connectto;
-+allow courier_authdaemon_t self:unix_stream_socket { create_stream_socket_perms connectto };
-
- can_exec(courier_authdaemon_t, courier_exec_t)
-
-@@ -52,7 +52,9 @@
- allow courier_authdaemon_t courier_tcpd_t:tcp_socket rw_stream_socket_perms;
- allow courier_authdaemon_t courier_tcpd_t:fifo_file rw_file_perms;
-
-+manage_dirs_pattern(courier_authdaemon_t, courier_var_lib_t, courier_var_lib_t)
- manage_sock_files_pattern(courier_authdaemon_t, courier_spool_t, courier_spool_t)
-+manage_sock_files_pattern(courier_authdaemon_t, courier_var_lib_t, courier_var_lib_t)
- files_search_spool(courier_authdaemon_t)
-
- corecmd_search_bin(courier_authdaemon_t)
---- services/courier.fc 2010-08-03 15:11:05.000000000 +0200
-+++ services/courier.fc 2011-03-03 16:36:53.994999997 +0100
-@@ -5,8 +5,10 @@
- /usr/sbin/courierlogger -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/sbin/courierldapaliasd -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/sbin/couriertcpd -- gen_context(system_u:object_r:courier_tcpd_exec_t,s0)
--
--/usr/lib(64)?/courier/authlib/.* -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
-+ifdef(`distro_gentoo',`
-+/usr/lib(64)?/courier-imap/couriertcpd -- gen_context(system_u:object_r:courier_tcpd_exec_t,s0)
-+')
-+/usr/lib(64)?/courier/(courier-)?authlib/.* -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
- /usr/lib(64)?/courier/courier/.* -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/lib(64)?/courier/courier/courierpop.* -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
- /usr/lib(64)?/courier/courier/imaplogin -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
-@@ -16,9 +18,9 @@
- /usr/lib(64)?/courier/rootcerts(/.*)? gen_context(system_u:object_r:courier_etc_t,s0)
- /usr/lib(64)?/courier/sqwebmail/cleancache\.pl -- gen_context(system_u:object_r:sqwebmail_cron_exec_t,s0)
-
--/var/lib/courier(/.*)? -- gen_context(system_u:object_r:courier_var_lib_t,s0)
-+/var/lib/courier(/.*)? gen_context(system_u:object_r:courier_var_lib_t,s0)
-
--/var/run/courier(/.*)? -- gen_context(system_u:object_r:courier_var_run_t,s0)
-+/var/run/courier(/.*)? gen_context(system_u:object_r:courier_var_run_t,s0)
-
- /var/spool/authdaemon(/.*)? gen_context(system_u:object_r:courier_spool_t,s0)
- /var/spool/courier(/.*)? gen_context(system_u:object_r:courier_spool_t,s0)
+++ /dev/null
---- services/courier.te 2010-12-13 15:11:02.000000000 +0100
-+++ services/courier.te 2011-03-13 15:02:29.525999999 +0100
-@@ -37,7 +37,7 @@
- #
-
- allow courier_authdaemon_t self:capability { setuid setgid sys_tty_config };
--allow courier_authdaemon_t self:unix_stream_socket connectto;
-+allow courier_authdaemon_t self:unix_stream_socket { create_stream_socket_perms connectto };
-
- can_exec(courier_authdaemon_t, courier_exec_t)
-
-@@ -52,7 +52,11 @@
- allow courier_authdaemon_t courier_tcpd_t:tcp_socket rw_stream_socket_perms;
- allow courier_authdaemon_t courier_tcpd_t:fifo_file rw_file_perms;
-
-+read_lnk_files_pattern(courier_authdaemon_t, courier_var_lib_t, courier_var_lib_t)
-+
-+manage_dirs_pattern(courier_authdaemon_t, courier_var_run_t, courier_var_run_t)
- manage_sock_files_pattern(courier_authdaemon_t, courier_spool_t, courier_spool_t)
-+manage_sock_files_pattern(courier_authdaemon_t, courier_var_run_t, courier_var_run_t)
- files_search_spool(courier_authdaemon_t)
-
- corecmd_search_bin(courier_authdaemon_t)
-@@ -95,8 +99,12 @@
- # inherits file handle - should it?
- allow courier_pop_t courier_var_lib_t:file { read write };
-
-+search_dirs_pattern(courier_pop_t, var_lib_t, courier_var_lib_t)
-+read_lnk_files_pattern(courier_pop_t, var_lib_t, courier_var_lib_t)
-+
- miscfiles_read_localization(courier_pop_t)
-
-+courier_authdaemon_rw_inherited_stream_sockets(courier_pop_t)
- courier_domtrans_authdaemon(courier_pop_t)
-
- # do the actual work (read the Maildir)
-@@ -133,6 +141,8 @@
- miscfiles_read_localization(courier_tcpd_t)
-
- courier_domtrans_pop(courier_tcpd_t)
-+courier_authdaemon_stream_connect(courier_tcpd_t)
-+courier_domtrans_authdaemon(courier_tcpd_t)
-
- ########################################
- #
-@@ -144,3 +154,7 @@
- optional_policy(`
- cron_system_entry(courier_sqwebmail_t, courier_sqwebmail_exec_t)
- ')
-+
-+optional_policy(`
-+ mysql_stream_connect(courier_authdaemon_t)
-+')
---- services/courier.fc 2010-08-03 15:11:05.000000000 +0200
-+++ services/courier.fc 2011-03-13 14:55:55.737999999 +0100
-@@ -5,20 +5,24 @@
- /usr/sbin/courierlogger -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/sbin/courierldapaliasd -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/sbin/couriertcpd -- gen_context(system_u:object_r:courier_tcpd_exec_t,s0)
--
--/usr/lib(64)?/courier/authlib/.* -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
-+ifdef(`distro_gentoo',`
-+/usr/lib(64)?/courier-imap/couriertcpd -- gen_context(system_u:object_r:courier_tcpd_exec_t,s0)
-+')
-+/usr/lib(64)?/courier/(courier-)?authlib/.* -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
- /usr/lib(64)?/courier/courier/.* -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/lib(64)?/courier/courier/courierpop.* -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
- /usr/lib(64)?/courier/courier/imaplogin -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
-+/usr/sbin/imaplogin -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
- /usr/lib(64)?/courier/courier/pcpd -- gen_context(system_u:object_r:courier_pcp_exec_t,s0)
- /usr/lib(64)?/courier/imapd -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
-+/usr/sbin/courier-imapd -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
- /usr/lib(64)?/courier/pop3d -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
- /usr/lib(64)?/courier/rootcerts(/.*)? gen_context(system_u:object_r:courier_etc_t,s0)
- /usr/lib(64)?/courier/sqwebmail/cleancache\.pl -- gen_context(system_u:object_r:sqwebmail_cron_exec_t,s0)
-
--/var/lib/courier(/.*)? -- gen_context(system_u:object_r:courier_var_lib_t,s0)
-+/var/lib/courier(/.*)? gen_context(system_u:object_r:courier_var_lib_t,s0)
-
--/var/run/courier(/.*)? -- gen_context(system_u:object_r:courier_var_run_t,s0)
-+/var/run/courier(/.*)? gen_context(system_u:object_r:courier_var_run_t,s0)
-
- /var/spool/authdaemon(/.*)? gen_context(system_u:object_r:courier_spool_t,s0)
- /var/spool/courier(/.*)? gen_context(system_u:object_r:courier_spool_t,s0)
+++ /dev/null
---- services/courier.te 2010-12-13 15:11:02.000000000 +0100
-+++ services/courier.te 2011-04-13 17:54:52.968000043 +0200
-@@ -37,7 +37,7 @@
- #
-
- allow courier_authdaemon_t self:capability { setuid setgid sys_tty_config };
--allow courier_authdaemon_t self:unix_stream_socket connectto;
-+allow courier_authdaemon_t self:unix_stream_socket { create_stream_socket_perms connectto };
-
- can_exec(courier_authdaemon_t, courier_exec_t)
-
-@@ -52,7 +52,11 @@
- allow courier_authdaemon_t courier_tcpd_t:tcp_socket rw_stream_socket_perms;
- allow courier_authdaemon_t courier_tcpd_t:fifo_file rw_file_perms;
-
-+read_lnk_files_pattern(courier_authdaemon_t, courier_var_lib_t, courier_var_lib_t)
-+
-+create_dirs_pattern(courier_authdaemon_t, courier_var_run_t, courier_var_run_t)
- manage_sock_files_pattern(courier_authdaemon_t, courier_spool_t, courier_spool_t)
-+manage_sock_files_pattern(courier_authdaemon_t, courier_var_run_t, courier_var_run_t)
- files_search_spool(courier_authdaemon_t)
-
- corecmd_search_bin(courier_authdaemon_t)
-@@ -73,6 +77,10 @@
-
- courier_domtrans_pop(courier_authdaemon_t)
-
-+tunable_policy(`gentoo_try_dontaudit',`
-+ dontaudit courier_authdaemon_t self:capability dac_read_search;
-+')
-+
- ########################################
- #
- # Calendar (PCP) local policy
-@@ -95,8 +103,12 @@
- # inherits file handle - should it?
- allow courier_pop_t courier_var_lib_t:file { read write };
-
-+search_dirs_pattern(courier_pop_t, var_lib_t, courier_var_lib_t)
-+read_lnk_files_pattern(courier_pop_t, var_lib_t, courier_var_lib_t)
-+
- miscfiles_read_localization(courier_pop_t)
-
-+courier_authdaemon_rw_inherited_stream_sockets(courier_pop_t)
- courier_domtrans_authdaemon(courier_pop_t)
-
- # do the actual work (read the Maildir)
-@@ -133,6 +145,8 @@
- miscfiles_read_localization(courier_tcpd_t)
-
- courier_domtrans_pop(courier_tcpd_t)
-+courier_authdaemon_stream_connect(courier_tcpd_t)
-+courier_domtrans_authdaemon(courier_tcpd_t)
-
- ########################################
- #
-@@ -144,3 +158,7 @@
- optional_policy(`
- cron_system_entry(courier_sqwebmail_t, courier_sqwebmail_exec_t)
- ')
-+
-+optional_policy(`
-+ mysql_stream_connect(courier_authdaemon_t)
-+')
---- services/courier.fc 2010-08-03 15:11:05.000000000 +0200
-+++ services/courier.fc 2011-03-13 14:55:55.737999999 +0100
-@@ -5,20 +5,24 @@
- /usr/sbin/courierlogger -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/sbin/courierldapaliasd -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/sbin/couriertcpd -- gen_context(system_u:object_r:courier_tcpd_exec_t,s0)
--
--/usr/lib(64)?/courier/authlib/.* -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
-+ifdef(`distro_gentoo',`
-+/usr/lib(64)?/courier-imap/couriertcpd -- gen_context(system_u:object_r:courier_tcpd_exec_t,s0)
-+')
-+/usr/lib(64)?/courier/(courier-)?authlib/.* -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
- /usr/lib(64)?/courier/courier/.* -- gen_context(system_u:object_r:courier_exec_t,s0)
- /usr/lib(64)?/courier/courier/courierpop.* -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
- /usr/lib(64)?/courier/courier/imaplogin -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
-+/usr/sbin/imaplogin -- gen_context(system_u:object_r:courier_authdaemon_exec_t,s0)
- /usr/lib(64)?/courier/courier/pcpd -- gen_context(system_u:object_r:courier_pcp_exec_t,s0)
- /usr/lib(64)?/courier/imapd -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
-+/usr/sbin/courier-imapd -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
- /usr/lib(64)?/courier/pop3d -- gen_context(system_u:object_r:courier_pop_exec_t,s0)
- /usr/lib(64)?/courier/rootcerts(/.*)? gen_context(system_u:object_r:courier_etc_t,s0)
- /usr/lib(64)?/courier/sqwebmail/cleancache\.pl -- gen_context(system_u:object_r:sqwebmail_cron_exec_t,s0)
-
--/var/lib/courier(/.*)? -- gen_context(system_u:object_r:courier_var_lib_t,s0)
-+/var/lib/courier(/.*)? gen_context(system_u:object_r:courier_var_lib_t,s0)
-
--/var/run/courier(/.*)? -- gen_context(system_u:object_r:courier_var_run_t,s0)
-+/var/run/courier(/.*)? gen_context(system_u:object_r:courier_var_run_t,s0)
-
- /var/spool/authdaemon(/.*)? gen_context(system_u:object_r:courier_spool_t,s0)
- /var/spool/courier(/.*)? gen_context(system_u:object_r:courier_spool_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-courier/selinux-courier-2.20101213-r3.ebuild,v 1.2 2011/06/02 12:12:15 blueness Exp $
-
-MODS="courier"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for courier-imap"
-
-KEYWORDS="amd64 x86"
-RDEPEND="!<=sec-policy/selinux-courier-imap-2.20101213
- >=sys-apps/policycoreutils-1.30.30
- >=sec-policy/selinux-base-policy-${PV}"
-
-POLICY_PATCH="${FILESDIR}/fix-services-courier-r3.patch"
# ChangeLog for sec-policy/selinux-cpucontrol
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cpucontrol/ChangeLog,v 1.4 2011/10/23 12:42:53 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cpucontrol/ChangeLog,v 1.5 2011/11/12 20:53:36 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-cpucontrol-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-cpucontrol-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cpucontrol/selinux-cpucontrol-2.20101213.ebuild,v 1.2 2011/06/02 12:12:56 blueness Exp $
-
-IUSE=""
-
-MODS="cpucontrol"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-cpufreqselector
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cpufreqselector/ChangeLog,v 1.4 2011/10/23 12:42:53 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cpufreqselector/ChangeLog,v 1.5 2011/11/12 20:53:00 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-cpufreqselector-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-cpufreqselector-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cpufreqselector/selinux-cpufreqselector-2.20101213.ebuild,v 1.2 2011/06/02 12:13:17 blueness Exp $
-
-IUSE=""
-
-MODS="cpufreqselector"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-cups
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cups/ChangeLog,v 1.13 2011/10/23 12:42:51 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cups/ChangeLog,v 1.14 2011/11/12 20:53:49 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-cups-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-cups-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cups/selinux-cups-2.20101213.ebuild,v 1.2 2011/06/02 12:13:37 blueness Exp $
-
-MODS="cups"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for cups - the Common Unix Printing System"
-
-DEPEND="sec-policy/selinux-lpd"
-RDEPEND="${DEPEND}"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-cvs
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cvs/ChangeLog,v 1.4 2011/10/23 12:43:02 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cvs/ChangeLog,v 1.5 2011/11/12 20:53:34 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-cvs-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-cvs-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cvs/selinux-cvs-2.20101213.ebuild,v 1.2 2011/06/02 12:13:58 blueness Exp $
-
-IUSE=""
-
-MODS="cvs"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-cyphesis
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cyphesis/ChangeLog,v 1.4 2011/10/23 12:42:54 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cyphesis/ChangeLog,v 1.5 2011/11/12 20:52:51 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-cyphesis-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-cyphesis-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cyphesis/selinux-cyphesis-2.20101213.ebuild,v 1.2 2011/06/02 12:14:18 blueness Exp $
-
-IUSE=""
-
-MODS="cyphesis"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-cyrus-sasl
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cyrus-sasl/ChangeLog,v 1.22 2011/10/23 12:42:53 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cyrus-sasl/ChangeLog,v 1.23 2011/11/12 20:53:13 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-cyrus-sasl-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-cyrus-sasl-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-cyrus-sasl/selinux-cyrus-sasl-2.20101213.ebuild,v 1.2 2011/06/02 12:14:39 blueness Exp $
-
-MODS="sasl"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for cyrus-sasl"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-daemontools
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-daemontools/ChangeLog,v 1.38 2011/10/23 12:42:52 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-daemontools/ChangeLog,v 1.39 2011/11/12 20:52:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-daemontools-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-daemontools-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-daemontools/selinux-daemontools-2.20101213.ebuild,v 1.2 2011/06/02 12:15:00 blueness Exp $
-
-MODS="daemontools"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for daemontools"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dante
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dante/ChangeLog,v 1.28 2011/10/23 12:42:27 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dante/ChangeLog,v 1.29 2011/11/12 20:52:48 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dante-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dante-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dante/selinux-dante-2.20101213.ebuild,v 1.2 2011/06/02 12:15:20 blueness Exp $
-
-MODS="dante"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for dante (free socks4,5 and msproxy implementation)"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dbskk
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dbskk/ChangeLog,v 1.4 2011/10/23 12:42:48 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dbskk/ChangeLog,v 1.5 2011/11/12 20:53:19 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dbskk-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dbskk-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dbskk/selinux-dbskk-2.20101213.ebuild,v 1.2 2011/06/02 12:15:41 blueness Exp $
-
-IUSE=""
-
-MODS="dbskk"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dbus
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dbus/ChangeLog,v 1.17 2011/10/23 12:43:03 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dbus/ChangeLog,v 1.18 2011/11/12 20:53:47 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dbus-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dbus-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dbus/selinux-dbus-2.20101213.ebuild,v 1.2 2011/06/02 12:16:02 blueness Exp $
-
-IUSE=""
-
-MODS="dbus"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for desktops"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dcc
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dcc/ChangeLog,v 1.4 2011/10/23 12:42:45 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dcc/ChangeLog,v 1.5 2011/11/12 20:52:58 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dcc-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dcc-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dcc/selinux-dcc-2.20101213.ebuild,v 1.2 2011/06/02 12:16:23 blueness Exp $
-
-IUSE=""
-
-MODS="dcc"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ddclient
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ddclient/ChangeLog,v 1.4 2011/10/23 12:42:48 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ddclient/ChangeLog,v 1.5 2011/11/12 20:53:26 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ddclient-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ddclient-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ddclient/selinux-ddclient-2.20101213.ebuild,v 1.2 2011/06/02 12:16:44 blueness Exp $
-
-IUSE=""
-
-MODS="ddclient"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ddcprobe
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ddcprobe/ChangeLog,v 1.4 2011/10/23 12:42:55 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ddcprobe/ChangeLog,v 1.5 2011/11/12 20:53:04 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ddcprobe-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ddcprobe-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ddcprobe/selinux-ddcprobe-2.20101213.ebuild,v 1.2 2011/06/02 12:17:05 blueness Exp $
-
-IUSE=""
-
-MODS="ddcprobe"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-desktop
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-desktop/ChangeLog,v 1.18 2011/10/23 12:42:53 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-desktop/ChangeLog,v 1.19 2011/11/12 20:53:35 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-desktop-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-desktop-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-desktop/selinux-desktop-2.20101213.ebuild,v 1.3 2011/06/02 12:17:26 blueness Exp $
-
-IUSE="acpi apm avahi bluetooth crypt dbus pcmcia"
-
-MODS="xserver xfs mplayer mozilla java mono wine"
-
-RDEPEND="acpi? ( sec-policy/selinux-acpi )
- apm? ( sec-policy/selinux-acpi )
- avahi? ( sec-policy/selinux-avahi )
- bluetooth? ( sec-policy/selinux-bluez )
- crypt? ( sec-policy/selinux-gnupg )
- dbus? ( sec-policy/selinux-dbus )
- pcmcia? ( sec-policy/selinux-pcmcia )"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for desktops"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dhcp
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dhcp/ChangeLog,v 1.36 2011/10/23 12:42:44 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dhcp/ChangeLog,v 1.37 2011/11/12 20:53:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dhcp-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dhcp-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dhcp/selinux-dhcp-2.20101213.ebuild,v 1.2 2011/06/02 12:17:48 blueness Exp $
-
-MODS="dhcp"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for dhcp server"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dictd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dictd/ChangeLog,v 1.4 2011/10/23 12:42:27 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dictd/ChangeLog,v 1.5 2011/11/12 20:53:34 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dictd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dictd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dictd/selinux-dictd-2.20101213.ebuild,v 1.2 2011/06/02 12:18:08 blueness Exp $
-
-IUSE=""
-
-MODS="dictd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-distcc
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-distcc/ChangeLog,v 1.24 2011/10/23 12:42:44 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-distcc/ChangeLog,v 1.25 2011/11/12 20:52:53 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-distcc-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-distcc-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-distcc/selinux-distcc-2.20101213.ebuild,v 1.2 2011/06/02 12:18:29 blueness Exp $
-
-MODS="distcc"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for distcc"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-djbdns
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-djbdns/ChangeLog,v 1.29 2011/10/23 12:43:01 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-djbdns/ChangeLog,v 1.30 2011/11/12 20:52:53 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-djbdns-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-djbdns-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-djbdns/selinux-djbdns-2.20101213.ebuild,v 1.2 2011/06/02 12:18:49 blueness Exp $
-
-MODS="djbdns"
-IUSE=""
-
-inherit selinux-policy-2
-
-RDEPEND="sec-policy/selinux-ucspi-tcp
- sec-policy/selinux-daemontools"
-
-DESCRIPTION="SELinux policy for djbdns"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dkim
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dkim/ChangeLog,v 1.4 2011/10/23 12:42:39 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dkim/ChangeLog,v 1.5 2011/11/12 20:53:41 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dkim-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dkim-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dkim/selinux-dkim-2.20101213.ebuild,v 1.2 2011/06/02 12:19:10 blueness Exp $
-
-IUSE=""
-
-MODS="dkim"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dmidecode
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dmidecode/ChangeLog,v 1.4 2011/10/23 12:42:50 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dmidecode/ChangeLog,v 1.5 2011/11/12 20:53:24 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dmidecode-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dmidecode-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dmidecode/selinux-dmidecode-2.20101213.ebuild,v 1.2 2011/06/02 12:19:31 blueness Exp $
-
-IUSE=""
-
-MODS="dmidecode"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dnsmasq
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dnsmasq/ChangeLog,v 1.13 2011/10/23 12:42:32 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dnsmasq/ChangeLog,v 1.14 2011/11/12 20:53:08 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dnsmasq-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dnsmasq-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dnsmasq/selinux-dnsmasq-2.20101213.ebuild,v 1.2 2011/06/02 12:19:52 blueness Exp $
-
-MODS="dnsmasq"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for dnsmasq"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-dovecot
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dovecot/ChangeLog,v 1.4 2011/10/23 12:42:52 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dovecot/ChangeLog,v 1.5 2011/11/12 20:53:38 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-dovecot-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-dovecot-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-dovecot/selinux-dovecot-2.20101213.ebuild,v 1.2 2011/06/02 12:20:12 blueness Exp $
-
-IUSE=""
-
-MODS="dovecot"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-evolution
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-evolution/ChangeLog,v 1.4 2011/10/23 12:42:34 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-evolution/ChangeLog,v 1.5 2011/11/12 20:53:38 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-evolution-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-evolution-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-evolution/selinux-evolution-2.20101213.ebuild,v 1.2 2011/06/02 12:20:33 blueness Exp $
-
-IUSE=""
-
-MODS="evolution"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-exim
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-exim/ChangeLog,v 1.4 2011/10/23 12:42:29 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-exim/ChangeLog,v 1.5 2011/11/12 20:53:18 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-exim-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-exim-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-exim/selinux-exim-2.20101213.ebuild,v 1.2 2011/06/02 12:20:54 blueness Exp $
-
-IUSE=""
-
-MODS="exim"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-fail2ban
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fail2ban/ChangeLog,v 1.4 2011/10/23 12:43:02 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fail2ban/ChangeLog,v 1.5 2011/11/12 20:53:06 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-fail2ban-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-fail2ban-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fail2ban/selinux-fail2ban-2.20101213.ebuild,v 1.2 2011/06/02 12:21:15 blueness Exp $
-
-IUSE=""
-
-MODS="fail2ban"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-fetchmail
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fetchmail/ChangeLog,v 1.4 2011/10/23 12:42:41 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fetchmail/ChangeLog,v 1.5 2011/11/12 20:53:48 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-fetchmail-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-fetchmail-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fetchmail/selinux-fetchmail-2.20101213.ebuild,v 1.2 2011/06/02 12:21:36 blueness Exp $
-
-IUSE=""
-
-MODS="fetchmail"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-finger
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-finger/ChangeLog,v 1.4 2011/10/23 12:42:49 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-finger/ChangeLog,v 1.5 2011/11/12 20:53:47 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-finger-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-finger-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-finger/selinux-finger-2.20101213.ebuild,v 1.2 2011/06/02 12:21:56 blueness Exp $
-
-IUSE=""
-
-MODS="finger"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-fprintd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fprintd/ChangeLog,v 1.4 2011/10/23 12:42:36 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fprintd/ChangeLog,v 1.5 2011/11/12 20:53:31 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-fprintd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-fprintd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-fprintd/selinux-fprintd-2.20101213.ebuild,v 1.2 2011/06/02 12:22:17 blueness Exp $
-
-IUSE=""
-
-MODS="fprintd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ftpd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ftpd/ChangeLog,v 1.26 2011/10/23 12:42:53 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ftpd/ChangeLog,v 1.27 2011/11/12 20:53:34 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ftpd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ftpd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ftpd/selinux-ftpd-2.20101213.ebuild,v 1.2 2011/06/02 12:22:39 blueness Exp $
-
-MODS="ftp"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for ftp daemons"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-games
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-games/ChangeLog,v 1.13 2011/10/23 12:42:51 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-games/ChangeLog,v 1.14 2011/11/12 20:53:32 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-games-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-games-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-games/selinux-games-2.20101213.ebuild,v 1.2 2011/06/02 12:22:59 blueness Exp $
-
-MODS="games"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for games - generic policy"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-gatekeeper
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gatekeeper/ChangeLog,v 1.4 2011/10/23 12:42:50 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gatekeeper/ChangeLog,v 1.5 2011/11/12 20:52:53 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-gatekeeper-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-gatekeeper-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gatekeeper/selinux-gatekeeper-2.20101213.ebuild,v 1.2 2011/06/02 12:23:20 blueness Exp $
-
-IUSE=""
-
-MODS="gatekeeper"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-gift
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gift/ChangeLog,v 1.4 2011/10/23 12:42:55 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gift/ChangeLog,v 1.5 2011/11/12 20:53:02 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-gift-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-gift-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gift/selinux-gift-2.20101213.ebuild,v 1.2 2011/06/02 12:23:40 blueness Exp $
-
-IUSE=""
-
-MODS="gift"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-gitosis
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gitosis/ChangeLog,v 1.4 2011/10/23 12:42:38 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gitosis/ChangeLog,v 1.5 2011/11/12 20:53:39 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-gitosis-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-gitosis-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gitosis/selinux-gitosis-2.20101213.ebuild,v 1.2 2011/06/02 12:24:01 blueness Exp $
-
-IUSE=""
-
-MODS="gitosis"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-gnome
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gnome/ChangeLog,v 1.4 2011/10/23 12:42:36 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gnome/ChangeLog,v 1.5 2011/11/12 20:53:30 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-gnome-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-gnome-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gnome/selinux-gnome-2.20101213.ebuild,v 1.2 2011/06/02 12:24:22 blueness Exp $
-
-IUSE=""
-
-MODS="gnome"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-gnupg
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gnupg/ChangeLog,v 1.34 2011/10/23 12:42:29 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gnupg/ChangeLog,v 1.35 2011/11/12 20:52:57 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-gnupg-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-gnupg-2.20101213-r2.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gnupg/selinux-gnupg-2.20101213-r1.ebuild,v 1.2 2011/06/02 12:24:44 blueness Exp $
-
-MODS="gpg"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for GNU privacy guard"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-apps-gpg-r1.patch"
# ChangeLog for sec-policy/selinux-gorg
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gorg/ChangeLog,v 1.4 2011/10/23 12:42:55 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gorg/ChangeLog,v 1.5 2011/11/12 20:53:11 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-gorg-2.20101213.ebuild,
+ -files/add-gorg.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-gorg-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/gorg.te 1970-01-01 01:00:00.000000000 +0100
-+++ ../../../refpolicy/policy/modules/services/gorg.te 2011-01-07 22:35:18.986000107 +0100
-@@ -0,0 +1,59 @@
-+policy_module(gorg, 1.0.0)
-+
-+type gorg_t;
-+type gorg_exec_t;
-+typealias gorg_t alias { staff_gorg_t user_gorg_t };
-+application_domain(gorg_t, gorg_exec_t)
-+role staff_r types gorg_t;
-+role user_r types gorg_t;
-+
-+type gorg_cache_t;
-+files_type(gorg_cache_t);
-+
-+type gorg_config_t;
-+files_type(gorg_config_t);
-+
-+# Allow gorg_t to put files in the gorg_cache_t location(s)
-+manage_dirs_pattern(gorg_t, gorg_cache_t, gorg_cache_t)
-+manage_files_pattern(gorg_t, gorg_cache_t, gorg_cache_t)
-+
-+# Allow gorg_t to read configuration file(s)
-+allow gorg_t gorg_config_t:dir list_dir_perms;
-+read_files_pattern(gorg_t, gorg_config_t, gorg_config_t)
-+
-+# gorg logs through /dev/log
-+logging_send_syslog_msg(gorg_t)
-+
-+# Allow gorg to bind to port 8080 (http_cache_port_t)
-+sysnet_read_config(gorg_t)
-+sysnet_dns_name_resolve(gorg_t)
-+corenet_all_recvfrom_unlabeled(gorg_t)
-+corenet_all_recvfrom_netlabel(gorg_t)
-+corenet_tcp_sendrecv_generic_if(gorg_t)
-+corenet_tcp_sendrecv_generic_node(gorg_t)
-+#corenet_tcp_sendrecv_all_ports(gorg_t)
-+corenet_tcp_bind_generic_node(gorg_t)
-+corenet_tcp_bind_http_cache_port(gorg_t)
-+allow gorg_t self:netlink_route_socket { create_socket_perms nlmsg_read };
-+allow gorg_t self:tcp_socket { listen accept };
-+
-+# Allow gorg read access to user home files (usually where cvs/git pull is stored)
-+files_search_home(gorg_t)
-+userdom_search_user_home_dirs(gorg_t)
-+userdom_user_home_content(gorg_t)
-+userdom_list_user_home_content(gorg_t)
-+userdom_read_user_home_content_symlinks(gorg_t)
-+userdom_read_user_home_content_files(gorg_t)
-+
-+# Local policy
-+allow gorg_t self:fifo_file rw_fifo_file_perms;
-+
-+# Read /etc files (xml/catalog, hosts.conf, ...)
-+files_read_etc_files(gorg_t)
-+
-+# Gorg is ruby, so be able to execute ruby
-+corecmd_exec_bin(gorg_t)
-+
-+# Output to screen
-+userdom_use_user_terminals(gorg_t)
-+domain_use_interactive_fds(gorg_t)
---- services/gorg.fc 1970-01-01 01:00:00.000000000 +0100
-+++ ../../../refpolicy/policy/modules/services/gorg.fc 2011-01-07 22:35:22.840999786 +0100
-@@ -0,0 +1,3 @@
-+/etc/gorg(/.*)? gen_context(system_u:object_r:gorg_config_t,s0)
-+/var/cache/gorg(/.*)? gen_context(system_u:object_r:gorg_cache_t,s0)
-+/usr/bin/gorg -- gen_context(system_u:object_r:gorg_exec_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gorg/selinux-gorg-2.20101213.ebuild,v 1.2 2011/06/02 12:25:04 blueness Exp $
-
-IUSE=""
-
-MODS="gorg"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/add-gorg.patch"
-RDEPEND=">=sec-policy/selinux-base-policy-2.20101213-r3"
# ChangeLog for sec-policy/selinux-gpg
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpg/ChangeLog,v 1.6 2011/11/12 16:17:13 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpg/ChangeLog,v 1.7 2011/11/12 20:53:33 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/0021-gpg-fix-mutt-call-r4.patch,
+ -files/fix-apps-gpg-r2.patch, -selinux-gpg-2.20101213-r2.ebuild,
+ -selinux-gpg-2.20110726-r1.ebuild:
+ Removing old policies
12 Nov 2011; <swift@gentoo.org> selinux-gpg-2.20110726-r1.ebuild,
selinux-gpg-2.20110726-r2.ebuild:
+++ /dev/null
---- apps/gpg.te 2011-03-28 17:05:13.000000000 +0200
-+++ apps/gpg.te 2011-09-07 20:33:11.481002857 +0200
-@@ -347,7 +347,7 @@
- ')
-
- optional_policy(`
-- mutt_manage_tmp_files(gpg_t)
-+ mutt_rw_tmp_files(gpg_t)
- ')
-
- optional_policy(`
+++ /dev/null
---- apps/gpg.te 2010-12-13 15:11:01.000000000 +0100
-+++ apps/gpg.te 2011-07-22 16:43:36.926000872 +0200
-@@ -147,6 +147,11 @@
- ')
-
- optional_policy(`
-+ gentoo_portage_search_conf(gpg_t)
-+ gentoo_portage_read_tmp_files(gpg_t)
-+')
-+
-+optional_policy(`
- xserver_use_xdm_fds(gpg_t)
- xserver_rw_xdm_pipes(gpg_t)
- ')
-@@ -347,6 +352,10 @@
- ')
-
- optional_policy(`
-+ mutt_manage_tmp_files(gpg_t)
-+')
-+
-+optional_policy(`
- pulseaudio_exec(gpg_pinentry_t)
- pulseaudio_rw_home_files(gpg_pinentry_t)
- pulseaudio_setattr_home_dir(gpg_pinentry_t)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpg/selinux-gpg-2.20101213-r2.ebuild,v 1.1 2011/07/25 22:49:21 blueness Exp $
-
-MODS="gpg"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for GNU privacy guard"
-
-KEYWORDS="~amd64 ~x86"
-RDEPEND="!<=sec-policy/selinux-gnupg-2.20101213-r1
- >=sys-apps/policycoreutils-1.30.30
- >=sec-policy/selinux-base-policy-${PV}"
-
-POLICY_PATCH="${FILESDIR}/fix-apps-gpg-r2.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpg/selinux-gpg-2.20110726-r1.ebuild,v 1.3 2011/11/12 16:17:13 swift Exp $
-EAPI="4"
-
-IUSE=""
-MODS="gpg"
-BASEPOL="2.20110726-r1"
-POLICY_PATCH="${FILESDIR}/0021-gpg-fix-mutt-call-r4.patch"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for GnuPG"
-KEYWORDS="~amd64 ~x86"
-RDEPEND="!<=sec-policy/selinux-gnupg-2.20101213-r1
- >=sys-apps/policycoreutils-2.1.0"
# ChangeLog for sec-policy/selinux-gpm
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpm/ChangeLog,v 1.24 2011/10/23 12:42:46 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpm/ChangeLog,v 1.25 2011/11/12 20:53:05 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-gpm-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-gpm-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpm/selinux-gpm-2.20101213.ebuild,v 1.2 2011/06/02 12:25:25 blueness Exp $
-
-MODS="gpm"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for the console mouse server"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-gpsd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpsd/ChangeLog,v 1.4 2011/10/23 12:42:32 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpsd/ChangeLog,v 1.5 2011/11/12 20:53:09 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-gpsd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-gpsd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-gpsd/selinux-gpsd-2.20101213.ebuild,v 1.2 2011/06/02 12:25:46 blueness Exp $
-
-IUSE=""
-
-MODS="gpsd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-haveged
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/ChangeLog,v 1.2 2011/10/23 12:43:03 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/ChangeLog,v 1.3 2011/11/12 20:53:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-haveged-r1.patch,
+ -selinux-haveged-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-haveged-2.20101213-r2.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/haveged.te 1970-01-01 01:00:00.000000000 +0100
-+++ services/haveged.te 2011-07-17 19:54:35.947000888 +0200
-@@ -0,0 +1,35 @@
-+policy_module(haveged, 1.0.0)
-+
-+########################################
-+#
-+# Declarations
-+#
-+
-+type haveged_t;
-+type haveged_exec_t;
-+init_daemon_domain(haveged_t, haveged_exec_t)
-+
-+type haveged_var_run_t;
-+files_pid_file(haveged_var_run_t)
-+
-+########################################
-+#
-+# haveged local policy
-+#
-+allow haveged_t self:capability sys_admin;
-+allow haveged_t self:unix_dgram_socket create_socket_perms;
-+allow haveged_t haveged_var_run_t:file manage_file_perms;
-+
-+# pid file
-+files_pid_filetrans(haveged_t, haveged_var_run_t, file)
-+
-+## Kernel stuff
-+kernel_rw_kernel_sysctl(haveged_t)
-+dev_read_rand(haveged_t)
-+dev_write_rand(haveged_t)
-+
-+## System stuff
-+miscfiles_read_localization(haveged_t)
-+
-+## Other stuff
-+logging_send_syslog_msg(haveged_t)
---- services/haveged.fc 1970-01-01 01:00:00.000000000 +0100
-+++ services/haveged.fc 2011-07-17 17:55:56.431000683 +0200
-@@ -0,0 +1 @@
-+/usr/sbin/haveged -- gen_context(system_u:object_r:haveged_exec_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild,v 1.1 2011/07/25 22:58:54 blueness Exp $
-
-IUSE=""
-
-MODS="haveged"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-DEPEND=">=sec-policy/selinux-base-policy-2.20101213-r19"
-RDEPEND="${DEPEND}"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-haveged-r1.patch"
# ChangeLog for sec-policy/selinux-hddtemp
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-hddtemp/ChangeLog,v 1.4 2011/10/23 12:42:58 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-hddtemp/ChangeLog,v 1.5 2011/11/12 20:53:42 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-hddtemp-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-hddtemp-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-hddtemp/selinux-hddtemp-2.20101213.ebuild,v 1.2 2011/06/02 12:26:07 blueness Exp $
-
-IUSE=""
-
-MODS="hddtemp"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-icecast
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-icecast/ChangeLog,v 1.4 2011/10/23 12:42:28 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-icecast/ChangeLog,v 1.5 2011/11/12 20:52:49 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-icecast-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-icecast-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-icecast/selinux-icecast-2.20101213.ebuild,v 1.2 2011/06/02 12:26:28 blueness Exp $
-
-IUSE=""
-
-MODS="icecast"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ifplugd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ifplugd/ChangeLog,v 1.4 2011/10/23 12:42:44 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ifplugd/ChangeLog,v 1.5 2011/11/12 20:52:55 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ifplugd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ifplugd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ifplugd/selinux-ifplugd-2.20101213.ebuild,v 1.2 2011/06/02 12:26:49 blueness Exp $
-
-IUSE=""
-
-MODS="ifplugd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-imaze
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-imaze/ChangeLog,v 1.4 2011/10/23 12:42:50 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-imaze/ChangeLog,v 1.5 2011/11/12 20:53:19 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-imaze-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-imaze-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-imaze/selinux-imaze-2.20101213.ebuild,v 1.2 2011/06/02 12:27:10 blueness Exp $
-
-IUSE=""
-
-MODS="imaze"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-inetd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-inetd/ChangeLog,v 1.13 2011/10/23 12:42:32 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-inetd/ChangeLog,v 1.14 2011/11/12 20:53:07 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-inetd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-inetd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-inetd/selinux-inetd-2.20101213.ebuild,v 1.2 2011/06/02 12:27:31 blueness Exp $
-
-MODS="inetd"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for inetd and xinetd"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-inn
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-inn/ChangeLog,v 1.4 2011/10/23 12:42:30 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-inn/ChangeLog,v 1.5 2011/11/12 20:53:05 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-inn-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-inn-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-inn/selinux-inn-2.20101213.ebuild,v 1.2 2011/06/02 12:27:52 blueness Exp $
-
-IUSE=""
-
-MODS="inn"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ipsec-tools
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ipsec-tools/ChangeLog,v 1.27 2011/10/23 12:42:36 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ipsec-tools/ChangeLog,v 1.28 2011/11/12 20:53:30 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ipsec-tools-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ipsec-tools-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ipsec-tools/selinux-ipsec-tools-2.20101213.ebuild,v 1.2 2011/06/02 12:28:14 blueness Exp $
-
-MODS="ipsec"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for IPSEC tools"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ircd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ircd/ChangeLog,v 1.4 2011/10/23 12:42:51 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ircd/ChangeLog,v 1.5 2011/11/12 20:53:29 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ircd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ircd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ircd/selinux-ircd-2.20101213.ebuild,v 1.2 2011/06/02 12:28:34 blueness Exp $
-
-IUSE=""
-
-MODS="ircd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-irqbalance
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-irqbalance/ChangeLog,v 1.4 2011/10/23 12:42:38 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-irqbalance/ChangeLog,v 1.5 2011/11/12 20:53:36 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-irqbalance-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-irqbalance-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-irqbalance/selinux-irqbalance-2.20101213.ebuild,v 1.2 2011/06/02 12:28:55 blueness Exp $
-
-IUSE=""
-
-MODS="irqbalance"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-jabber-server
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-jabber-server/ChangeLog,v 1.20 2011/10/23 12:42:59 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-jabber-server/ChangeLog,v 1.21 2011/11/12 20:53:24 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-jabber-server-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-jabber-server-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-jabber-server/selinux-jabber-server-2.20101213.ebuild,v 1.2 2011/06/02 12:29:15 blueness Exp $
-
-MODS="jabber"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for the jabber server"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-java
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-java/ChangeLog,v 1.4 2011/10/23 12:43:03 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-java/ChangeLog,v 1.5 2011/11/12 20:53:28 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-java-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-java-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-java/selinux-java-2.20101213.ebuild,v 1.2 2011/06/02 12:29:36 blueness Exp $
-
-IUSE=""
-
-MODS="java"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-kdump
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kdump/ChangeLog,v 1.4 2011/10/23 12:42:41 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kdump/ChangeLog,v 1.5 2011/11/12 20:52:56 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-kdump-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-kdump-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kdump/selinux-kdump-2.20101213.ebuild,v 1.2 2011/06/02 12:29:57 blueness Exp $
-
-IUSE=""
-
-MODS="kdump"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-kerberos
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kerberos/ChangeLog,v 1.20 2011/10/23 12:42:34 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kerberos/ChangeLog,v 1.21 2011/11/12 20:53:17 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-kerberos-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-kerberos-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kerberos/selinux-kerberos-2.20101213.ebuild,v 1.2 2011/06/02 12:30:18 blueness Exp $
-
-MODS="kerberos"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for kerberos servers"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-kerneloops
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kerneloops/ChangeLog,v 1.4 2011/10/23 12:42:49 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kerneloops/ChangeLog,v 1.5 2011/11/12 20:53:18 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-kerneloops-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-kerneloops-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kerneloops/selinux-kerneloops-2.20101213.ebuild,v 1.2 2011/06/02 12:30:39 blueness Exp $
-
-IUSE=""
-
-MODS="kerneloops"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-kismet
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kismet/ChangeLog,v 1.4 2011/10/23 12:42:36 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kismet/ChangeLog,v 1.5 2011/11/12 20:53:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-kismet-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-kismet-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kismet/selinux-kismet-2.20101213.ebuild,v 1.2 2011/06/02 12:31:00 blueness Exp $
-
-IUSE=""
-
-MODS="kismet"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ksmtuned
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ksmtuned/ChangeLog,v 1.4 2011/10/23 12:42:35 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ksmtuned/ChangeLog,v 1.5 2011/11/12 20:53:22 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ksmtuned-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ksmtuned-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ksmtuned/selinux-ksmtuned-2.20101213.ebuild,v 1.2 2011/06/02 12:31:21 blueness Exp $
-
-IUSE=""
-
-MODS="ksmtuned"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-kudzu
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kudzu/ChangeLog,v 1.4 2011/10/23 12:43:02 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kudzu/ChangeLog,v 1.5 2011/11/12 20:53:24 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-kudzu-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-kudzu-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-kudzu/selinux-kudzu-2.20101213.ebuild,v 1.2 2011/06/02 12:31:41 blueness Exp $
-
-IUSE=""
-
-MODS="kudzu"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ldap
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ldap/ChangeLog,v 1.4 2011/10/23 12:42:28 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ldap/ChangeLog,v 1.5 2011/11/12 20:52:51 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-ldap-r1.patch,
+ -selinux-ldap-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ldap-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/ldap.te 2010-09-10 17:05:45.000000000 +0200
-+++ services/ldap.te 2011-03-12 22:10:48.814999997 +0100
-@@ -42,11 +42,12 @@
- # cjp: why net_raw?
- allow slapd_t self:capability { kill setgid setuid net_raw dac_override dac_read_search };
- dontaudit slapd_t self:capability sys_tty_config;
--allow slapd_t self:process setsched;
-+allow slapd_t self:process { setsched signal };
- allow slapd_t self:fifo_file rw_fifo_file_perms;
- allow slapd_t self:udp_socket create_socket_perms;
- #slapd needs to listen and accept needed by ldapsearch (slapd needs to accept from ldapseach)
- allow slapd_t self:tcp_socket create_stream_socket_perms;
-+allow slapd_t self:unix_stream_socket listen;
-
- allow slapd_t slapd_cert_t:dir list_dir_perms;
- read_files_pattern(slapd_t, slapd_cert_t, slapd_cert_t)
-@@ -114,6 +115,7 @@
-
- userdom_dontaudit_use_unpriv_user_fds(slapd_t)
- userdom_dontaudit_search_user_home_dirs(slapd_t)
-+userdom_use_user_terminals(slapd_t)
-
- optional_policy(`
- kerberos_keytab_template(slapd, slapd_t)
---- services/ldap.fc 2010-08-03 15:11:06.000000000 +0200
-+++ services/ldap.fc 2011-03-12 18:57:10.880999997 +0100
-@@ -8,7 +8,16 @@
- /usr/lib/slapd -- gen_context(system_u:object_r:slapd_exec_t,s0)
- ')
-
-+ifdef(`distro_gentoo',`
-+/usr/lib(64)?/openldap/slapd -- gen_context(system_u:object_r:slapd_exec_t,s0)
-+')
-+
- /var/lib/ldap(/.*)? gen_context(system_u:object_r:slapd_db_t,s0)
-+ifdef(`distro_gentoo',`
-+/var/lib/openldap-data(/.*)? gen_context(system_u:object_r:slapd_db_t,s0)
-+/var/lib/openldap-ldbm(/.*)? gen_context(system_u:object_r:slapd_db_t,s0)
-+/var/lib/openldap-slurpd(/.*)? gen_context(system_u:object_r:slapd_db_t,s0)
-+')
- /var/lib/ldap/replog(/.*)? gen_context(system_u:object_r:slapd_replog_t,s0)
-
- /var/run/ldapi -s gen_context(system_u:object_r:slapd_var_run_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ldap/selinux-ldap-2.20101213-r1.ebuild,v 1.2 2011/06/02 12:32:02 blueness Exp $
-
-MODS="ldap"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for OpenLDAP server"
-
-KEYWORDS="amd64 x86"
-RDEPEND="!<=sec-policy/selinux-openldap-2.20101213
- >=sys-apps/policycoreutils-1.30.30
- >=sec-policy/selinux-base-policy-${PV}"
-
-POLICY_PATCH="${FILESDIR}/fix-services-ldap-r1.patch"
# ChangeLog for sec-policy/selinux-links
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-links/ChangeLog,v 1.4 2011/10/23 12:42:40 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-links/ChangeLog,v 1.5 2011/11/12 20:53:49 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-links-2.20101213.ebuild,
+ -files/add-apps-links.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-links-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/links.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/links.te 2011-01-22 15:01:55.272000135 +0100
-@@ -0,0 +1,58 @@
-+policy_module(links, 1.0.0)
-+
-+############################
-+#
-+# Declarations
-+#
-+
-+type links_t;
-+type links_exec_t;
-+application_domain(links_t, links_exec_t)
-+
-+type links_home_t;
-+typealias links_home_t alias { user_links_home_t staff_links_home_t sysadm_links_home_t };
-+userdom_user_home_content(links_home_t)
-+
-+type links_tmpfs_t;
-+typealias links_tmpfs_t alias { user_links_tmpfs_t staff_links_tmpfs_t sysadm_links_tmpfs_t };
-+files_tmpfs_file(links_tmpfs_t)
-+ubac_constrained(links_tmpfs_t)
-+
-+############################
-+#
-+# Policy
-+#
-+
-+allow links_t self:process signal_perms;
-+allow links_t self:unix_stream_socket create_stream_socket_perms;
-+
-+manage_dirs_pattern(links_t, links_home_t, links_home_t)
-+manage_files_pattern(links_t, links_home_t, links_home_t)
-+manage_lnk_files_pattern(links_t, links_home_t, links_home_t)
-+manage_sock_files_pattern(links_t, links_home_t, links_home_t)
-+manage_fifo_files_pattern(links_t, links_home_t, links_home_t)
-+userdom_user_home_dir_filetrans(links_t, links_home_t, dir)
-+
-+manage_fifo_files_pattern(links_t, links_t, links_t)
-+
-+manage_files_pattern(links_t, links_tmpfs_t, links_tmpfs_t)
-+manage_lnk_files_pattern(links_t, links_tmpfs_t, links_tmpfs_t)
-+manage_fifo_files_pattern(links_t, links_tmpfs_t, links_tmpfs_t)
-+manage_sock_files_pattern(links_t, links_tmpfs_t, links_tmpfs_t)
-+fs_tmpfs_filetrans(links_t, links_tmpfs_t, { file lnk_file sock_file fifo_file })
-+
-+xserver_user_x_domain_template(links, links_t, links_tmpfs_t)
-+
-+domain_use_interactive_fds(links_t)
-+
-+userdom_manage_user_home_content_dirs(links_t)
-+userdom_manage_user_home_content_files(links_t)
-+
-+auth_use_nsswitch(links_t)
-+
-+userdom_use_user_terminals(links_t)
-+
-+corenet_tcp_connect_http_port(links_t)
-+
-+miscfiles_read_localization(links_t)
-+
---- apps/links.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/links.fc 2011-01-16 10:50:48.058999501 +0100
-@@ -0,0 +1,2 @@
-+/usr/bin/links -- gen_context(system_u:object_r:links_exec_t,s0)
-+HOME_DIR/\.links(/.*)? gen_context(system_u:object_r:links_home_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-links/selinux-links-2.20101213.ebuild,v 1.2 2011/06/02 12:32:23 blueness Exp $
-
-IUSE=""
-
-MODS="links"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-POLICY_PATCH="${FILESDIR}/add-apps-links.patch"
# ChangeLog for sec-policy/selinux-lircd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lircd/ChangeLog,v 1.4 2011/10/23 12:43:00 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lircd/ChangeLog,v 1.5 2011/11/12 20:53:15 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-lircd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-lircd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lircd/selinux-lircd-2.20101213.ebuild,v 1.2 2011/06/02 12:32:44 blueness Exp $
-
-IUSE=""
-
-MODS="lircd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-loadkeys
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-loadkeys/ChangeLog,v 1.4 2011/10/23 12:42:47 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-loadkeys/ChangeLog,v 1.5 2011/11/12 20:53:42 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-loadkeys-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-loadkeys-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-loadkeys/selinux-loadkeys-2.20101213.ebuild,v 1.2 2011/06/02 12:33:05 blueness Exp $
-
-IUSE=""
-
-MODS="loadkeys"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-lockdev
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lockdev/ChangeLog,v 1.4 2011/10/23 12:42:58 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lockdev/ChangeLog,v 1.5 2011/11/12 20:53:33 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-lockdev-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-lockdev-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lockdev/selinux-lockdev-2.20101213.ebuild,v 1.2 2011/06/02 12:33:26 blueness Exp $
-
-IUSE=""
-
-MODS="lockdev"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-logrotate
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-logrotate/ChangeLog,v 1.30 2011/10/23 12:42:59 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-logrotate/ChangeLog,v 1.31 2011/11/12 20:53:21 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-logrotate-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-logrotate-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-logrotate/selinux-logrotate-2.20101213.ebuild,v 1.2 2011/06/02 12:33:47 blueness Exp $
-
-MODS="logrotate"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for logrotate"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-logwatch
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-logwatch/ChangeLog,v 1.4 2011/10/23 12:43:01 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-logwatch/ChangeLog,v 1.5 2011/11/12 20:53:05 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-logwatch-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-logwatch-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-logwatch/selinux-logwatch-2.20101213.ebuild,v 1.2 2011/06/02 12:34:08 blueness Exp $
-
-IUSE=""
-
-MODS="logwatch"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-lpd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lpd/ChangeLog,v 1.13 2011/10/23 12:42:49 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lpd/ChangeLog,v 1.14 2011/11/12 20:53:16 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-lpd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-lpd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-lpd/selinux-lpd-2.20101213.ebuild,v 1.2 2011/06/02 12:34:30 blueness Exp $
-
-MODS="lpd"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for lpd"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-mailman
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mailman/ChangeLog,v 1.4 2011/10/23 12:42:29 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mailman/ChangeLog,v 1.5 2011/11/12 20:53:04 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-mailman-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-mailman-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mailman/selinux-mailman-2.20101213.ebuild,v 1.2 2011/06/02 12:34:50 blueness Exp $
-
-IUSE=""
-
-MODS="mailman"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-mcelog
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mcelog/ChangeLog,v 1.4 2011/10/23 12:42:52 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mcelog/ChangeLog,v 1.5 2011/11/12 20:53:40 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-mcelog-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-mcelog-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mcelog/selinux-mcelog-2.20101213.ebuild,v 1.2 2011/06/02 12:35:11 blueness Exp $
-
-IUSE=""
-
-MODS="mcelog"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-memcached
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-memcached/ChangeLog,v 1.4 2011/10/23 12:42:47 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-memcached/ChangeLog,v 1.5 2011/11/12 20:53:09 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-memcached-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-memcached-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-memcached/selinux-memcached-2.20101213.ebuild,v 1.2 2011/06/02 12:35:32 blueness Exp $
-
-IUSE=""
-
-MODS="memcached"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-milter
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-milter/ChangeLog,v 1.4 2011/10/23 12:42:26 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-milter/ChangeLog,v 1.5 2011/11/12 20:52:55 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-milter-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-milter-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-milter/selinux-milter-2.20101213.ebuild,v 1.2 2011/06/02 12:35:53 blueness Exp $
-
-IUSE=""
-
-MODS="milter"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-modemmanager
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-modemmanager/ChangeLog,v 1.4 2011/10/23 12:42:39 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-modemmanager/ChangeLog,v 1.5 2011/11/12 20:53:41 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-modemmanager-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-modemmanager-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-modemmanager/selinux-modemmanager-2.20101213.ebuild,v 1.2 2011/06/02 12:36:14 blueness Exp $
-
-IUSE=""
-
-MODS="modemmanager"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-mono
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mono/ChangeLog,v 1.4 2011/10/23 12:42:47 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mono/ChangeLog,v 1.5 2011/11/12 20:53:08 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-mono-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-mono-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mono/selinux-mono-2.20101213.ebuild,v 1.2 2011/06/02 12:36:35 blueness Exp $
-
-IUSE=""
-
-MODS="mono"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-mozilla
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mozilla/ChangeLog,v 1.10 2011/10/23 12:42:46 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mozilla/ChangeLog,v 1.11 2011/11/12 20:53:31 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-apps-mozilla-r2.patch,
+ -files/fix-apps-mozilla-r3.patch, -files/fix-apps-mozilla-r4.patch,
+ -selinux-mozilla-2.20101213-r2.ebuild, -selinux-mozilla-2.20101213-r3.ebuild,
+ -selinux-mozilla-2.20101213-r4.ebuild, -selinux-mozilla-2.20110726-r1.ebuild,
+ -files/fix-mozilla.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-mozilla-2.20110726-r2.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/mozilla.te 2010-12-13 15:11:01.000000000 +0100
-+++ apps/mozilla.te 2011-05-02 22:35:19.305000083 +0200
-@@ -33,6 +33,10 @@
- files_tmpfs_file(mozilla_tmpfs_t)
- ubac_constrained(mozilla_tmpfs_t)
-
-+type mozilla_tmp_t;
-+files_tmp_file(mozilla_tmp_t)
-+ubac_constrained(mozilla_tmp_t)
-+
- ########################################
- #
- # Local policy
-@@ -68,6 +72,10 @@
- manage_sock_files_pattern(mozilla_t, mozilla_tmpfs_t, mozilla_tmpfs_t)
- fs_tmpfs_filetrans(mozilla_t, mozilla_tmpfs_t, { file lnk_file sock_file fifo_file })
-
-+manage_files_pattern(mozilla_t, mozilla_tmp_t, mozilla_tmp_t)
-+manage_dirs_pattern(mozilla_t, mozilla_tmp_t, mozilla_tmp_t)
-+files_tmp_filetrans(mozilla_t, mozilla_tmp_t, { file dir } )
-+
- kernel_read_kernel_sysctls(mozilla_t)
- kernel_read_network_state(mozilla_t)
- # Access /proc, sysctl
-@@ -143,6 +151,7 @@
-
- userdom_use_user_ptys(mozilla_t)
-
-+
- xserver_user_x_domain_template(mozilla, mozilla_t, mozilla_tmpfs_t)
- xserver_dontaudit_read_xdm_tmp_files(mozilla_t)
- xserver_dontaudit_getattr_xdm_tmp_sockets(mozilla_t)
-@@ -266,3 +275,7 @@
- optional_policy(`
- thunderbird_domtrans(mozilla_t)
- ')
-+
-+optional_policy(`
-+ alsa_read_rw_config(mozilla_t)
-+')
---- apps/mozilla.fc 2010-08-03 15:11:03.000000000 +0200
-+++ apps/mozilla.fc 2011-01-02 22:23:34.407000019 +0100
-@@ -27,3 +27,12 @@
- /usr/lib(64)?/[^/]*firefox[^/]*/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
- /usr/lib/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
- /usr/lib64/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+
-+ifdef(`distro_gentoo',`
-+/usr/bin/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/libxul\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
-+/opt/firefox/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/run-mozilla.sh -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/plugin-container -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+')
+++ /dev/null
---- apps/mozilla.te 2010-12-13 15:11:01.000000000 +0100
-+++ apps/mozilla.te 2011-07-03 12:35:17.181000404 +0200
-@@ -33,6 +33,10 @@
- files_tmpfs_file(mozilla_tmpfs_t)
- ubac_constrained(mozilla_tmpfs_t)
-
-+type mozilla_tmp_t;
-+files_tmp_file(mozilla_tmp_t)
-+ubac_constrained(mozilla_tmp_t)
-+
- ########################################
- #
- # Local policy
-@@ -68,6 +72,10 @@
- manage_sock_files_pattern(mozilla_t, mozilla_tmpfs_t, mozilla_tmpfs_t)
- fs_tmpfs_filetrans(mozilla_t, mozilla_tmpfs_t, { file lnk_file sock_file fifo_file })
-
-+manage_files_pattern(mozilla_t, mozilla_tmp_t, mozilla_tmp_t)
-+manage_dirs_pattern(mozilla_t, mozilla_tmp_t, mozilla_tmp_t)
-+files_tmp_filetrans(mozilla_t, mozilla_tmp_t, { file dir } )
-+
- kernel_read_kernel_sysctls(mozilla_t)
- kernel_read_network_state(mozilla_t)
- # Access /proc, sysctl
-@@ -89,15 +97,18 @@
- corenet_raw_sendrecv_generic_node(mozilla_t)
- corenet_tcp_sendrecv_http_port(mozilla_t)
- corenet_tcp_sendrecv_http_cache_port(mozilla_t)
-+corenet_tcp_sendrecv_tor_port(mozilla_t)
- corenet_tcp_sendrecv_ftp_port(mozilla_t)
- corenet_tcp_sendrecv_ipp_port(mozilla_t)
- corenet_tcp_connect_http_port(mozilla_t)
- corenet_tcp_connect_http_cache_port(mozilla_t)
-+corenet_tcp_connect_tor_port(mozilla_t)
- corenet_tcp_connect_ftp_port(mozilla_t)
- corenet_tcp_connect_ipp_port(mozilla_t)
- corenet_tcp_connect_generic_port(mozilla_t)
- corenet_tcp_connect_soundd_port(mozilla_t)
- corenet_sendrecv_http_client_packets(mozilla_t)
-+corenet_sendrecv_tor_client_packets(mozilla_t)
- corenet_sendrecv_http_cache_client_packets(mozilla_t)
- corenet_sendrecv_ftp_client_packets(mozilla_t)
- corenet_sendrecv_ipp_client_packets(mozilla_t)
-@@ -143,6 +154,7 @@
-
- userdom_use_user_ptys(mozilla_t)
-
-+
- xserver_user_x_domain_template(mozilla, mozilla_t, mozilla_tmpfs_t)
- xserver_dontaudit_read_xdm_tmp_files(mozilla_t)
- xserver_dontaudit_getattr_xdm_tmp_sockets(mozilla_t)
-@@ -266,3 +278,7 @@
- optional_policy(`
- thunderbird_domtrans(mozilla_t)
- ')
-+
-+optional_policy(`
-+ alsa_read_rw_config(mozilla_t)
-+')
---- apps/mozilla.fc 2010-08-03 15:11:03.000000000 +0200
-+++ apps/mozilla.fc 2011-01-02 22:23:34.407000019 +0100
-@@ -27,3 +27,12 @@
- /usr/lib(64)?/[^/]*firefox[^/]*/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
- /usr/lib/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
- /usr/lib64/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+
-+ifdef(`distro_gentoo',`
-+/usr/bin/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/libxul\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
-+/opt/firefox/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/run-mozilla.sh -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/plugin-container -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+')
+++ /dev/null
---- apps/mozilla.te 2010-12-13 15:11:01.000000000 +0100
-+++ apps/mozilla.te 2011-07-24 16:48:16.221000672 +0200
-@@ -33,6 +33,10 @@
- files_tmpfs_file(mozilla_tmpfs_t)
- ubac_constrained(mozilla_tmpfs_t)
-
-+type mozilla_tmp_t;
-+files_tmp_file(mozilla_tmp_t)
-+ubac_constrained(mozilla_tmp_t)
-+
- ########################################
- #
- # Local policy
-@@ -68,6 +72,10 @@
- manage_sock_files_pattern(mozilla_t, mozilla_tmpfs_t, mozilla_tmpfs_t)
- fs_tmpfs_filetrans(mozilla_t, mozilla_tmpfs_t, { file lnk_file sock_file fifo_file })
-
-+manage_files_pattern(mozilla_t, mozilla_tmp_t, mozilla_tmp_t)
-+manage_dirs_pattern(mozilla_t, mozilla_tmp_t, mozilla_tmp_t)
-+files_tmp_filetrans(mozilla_t, mozilla_tmp_t, { file dir } )
-+
- kernel_read_kernel_sysctls(mozilla_t)
- kernel_read_network_state(mozilla_t)
- # Access /proc, sysctl
-@@ -89,15 +97,18 @@
- corenet_raw_sendrecv_generic_node(mozilla_t)
- corenet_tcp_sendrecv_http_port(mozilla_t)
- corenet_tcp_sendrecv_http_cache_port(mozilla_t)
-+corenet_tcp_sendrecv_tor_port(mozilla_t)
- corenet_tcp_sendrecv_ftp_port(mozilla_t)
- corenet_tcp_sendrecv_ipp_port(mozilla_t)
- corenet_tcp_connect_http_port(mozilla_t)
- corenet_tcp_connect_http_cache_port(mozilla_t)
-+corenet_tcp_connect_tor_port(mozilla_t)
- corenet_tcp_connect_ftp_port(mozilla_t)
- corenet_tcp_connect_ipp_port(mozilla_t)
- corenet_tcp_connect_generic_port(mozilla_t)
- corenet_tcp_connect_soundd_port(mozilla_t)
- corenet_sendrecv_http_client_packets(mozilla_t)
-+corenet_sendrecv_tor_client_packets(mozilla_t)
- corenet_sendrecv_http_cache_client_packets(mozilla_t)
- corenet_sendrecv_ftp_client_packets(mozilla_t)
- corenet_sendrecv_ipp_client_packets(mozilla_t)
-@@ -143,6 +154,7 @@
-
- userdom_use_user_ptys(mozilla_t)
-
-+
- xserver_user_x_domain_template(mozilla, mozilla_t, mozilla_tmpfs_t)
- xserver_dontaudit_read_xdm_tmp_files(mozilla_t)
- xserver_dontaudit_getattr_xdm_tmp_sockets(mozilla_t)
-@@ -193,6 +205,7 @@
- userdom_list_user_tmp(mozilla_t)
- userdom_read_user_tmp_files(mozilla_t)
- userdom_read_user_tmp_symlinks(mozilla_t)
-+ userdom_list_user_home_content(mozilla_t)
- userdom_read_user_home_content_files(mozilla_t)
- userdom_read_user_home_content_symlinks(mozilla_t)
-
-@@ -266,3 +279,7 @@
- optional_policy(`
- thunderbird_domtrans(mozilla_t)
- ')
-+
-+optional_policy(`
-+ alsa_read_rw_config(mozilla_t)
-+')
---- apps/mozilla.fc 2010-08-03 15:11:03.000000000 +0200
-+++ apps/mozilla.fc 2011-07-21 10:08:43.909000256 +0200
-@@ -27,3 +27,12 @@
- /usr/lib(64)?/[^/]*firefox[^/]*/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
- /usr/lib/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
- /usr/lib64/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+
-+ifdef(`distro_gentoo',`
-+/usr/bin/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/libxul\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
-+/opt/firefox/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/run-mozilla.sh -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/plugin-container -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+')
+++ /dev/null
---- apps/mozilla.te 2010-12-13 15:11:01.000000000 +0100
-+++ ../../../refpolicy/policy/modules/apps/mozilla.te 2011-01-15 16:27:48.031000003 +0100
-@@ -33,6 +33,10 @@
- files_tmpfs_file(mozilla_tmpfs_t)
- ubac_constrained(mozilla_tmpfs_t)
-
-+type mozilla_tmp_t;
-+files_tmp_file(mozilla_tmp_t)
-+ubac_constrained(mozilla_tmp_t)
-+
- ########################################
- #
- # Local policy
-@@ -68,6 +72,12 @@
- manage_sock_files_pattern(mozilla_t, mozilla_tmpfs_t, mozilla_tmpfs_t)
- fs_tmpfs_filetrans(mozilla_t, mozilla_tmpfs_t, { file lnk_file sock_file fifo_file })
-
-+manage_files_pattern(mozilla_t, mozilla_tmp_t, mozilla_tmp_t)
-+manage_dirs_pattern(mozilla_t, mozilla_tmp_t, mozilla_tmp_t)
-+files_tmp_filetrans(mozilla_t, mozilla_tmp_t, { file dir } )
-+userdom_manage_user_tmp_files(mozilla_t)
-+userdom_manage_user_tmp_sockets(mozilla_t)
-+
- kernel_read_kernel_sysctls(mozilla_t)
- kernel_read_network_state(mozilla_t)
- # Access /proc, sysctl
-@@ -143,6 +153,7 @@
-
- userdom_use_user_ptys(mozilla_t)
-
-+
- xserver_user_x_domain_template(mozilla, mozilla_t, mozilla_tmpfs_t)
- xserver_dontaudit_read_xdm_tmp_files(mozilla_t)
- xserver_dontaudit_getattr_xdm_tmp_sockets(mozilla_t)
-@@ -266,3 +277,7 @@
- optional_policy(`
- thunderbird_domtrans(mozilla_t)
- ')
-+
-+optional_policy(`
-+ alsa_read_rw_config(mozilla_t)
-+')
---- apps/mozilla.fc 2010-08-03 15:11:03.000000000 +0200
-+++ ../../../refpolicy/policy/modules/apps/mozilla.fc 2011-01-02 22:23:34.407000019 +0100
-@@ -27,3 +27,12 @@
- /usr/lib(64)?/[^/]*firefox[^/]*/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
- /usr/lib/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
- /usr/lib64/[^/]*firefox[^/]*/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+
-+ifdef(`distro_gentoo',`
-+/usr/bin/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/libxul\.so -- gen_context(system_u:object_r:textrel_shlib_t,s0)
-+/opt/firefox/firefox -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/run-mozilla.sh -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/firefox-bin -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+/opt/firefox/plugin-container -- gen_context(system_u:object_r:mozilla_exec_t,s0)
-+')
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mozilla/selinux-mozilla-2.20101213-r2.ebuild,v 1.2 2011/06/02 12:36:56 blueness Exp $
-
-IUSE=""
-
-MODS="mozilla"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-apps-mozilla-r2.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mozilla/selinux-mozilla-2.20101213-r3.ebuild,v 1.1 2011/07/10 02:34:32 blueness Exp $
-
-IUSE=""
-
-MODS="mozilla"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-apps-mozilla-r3.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mozilla/selinux-mozilla-2.20101213-r4.ebuild,v 1.1 2011/08/07 10:57:06 blueness Exp $
-
-IUSE=""
-
-MODS="mozilla"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-apps-mozilla-r4.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mozilla/selinux-mozilla-2.20110726-r1.ebuild,v 1.1 2011/08/28 21:12:42 swift Exp $
-EAPI="4"
-
-IUSE=""
-MODS="mozilla"
-BASEPOL="2.20110726-r1"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for mozilla"
-KEYWORDS="~amd64 ~x86"
# ChangeLog for sec-policy/selinux-mplayer
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mplayer/ChangeLog,v 1.4 2011/10/23 12:42:43 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mplayer/ChangeLog,v 1.5 2011/11/12 20:52:51 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-mplayer-2.20101213.ebuild,
+ -files/fix-mplayer.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-mplayer-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/mplayer.te 2010-12-13 15:11:01.000000000 +0100
-+++ ../../../refpolicy/policy/modules/apps/mplayer.te 2011-01-07 21:03:00.230000033 +0100
-@@ -197,6 +197,7 @@
- dev_rwx_zero(mplayer_t)
- # Access to DVD/CD/V4L
- dev_read_video_dev(mplayer_t)
-+dev_write_video_dev(mplayer_t)
- # Audio, alsa.conf
- dev_read_sound_mixer(mplayer_t)
- dev_write_sound_mixer(mplayer_t)
-@@ -226,6 +227,9 @@
- miscfiles_read_fonts(mplayer_t)
-
- userdom_use_user_terminals(mplayer_t)
-+domain_use_interactive_fds(mplayer_t)
-+
-+#
- # Read media files
- userdom_list_user_tmp(mplayer_t)
- userdom_read_user_tmp_files(mplayer_t)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mplayer/selinux-mplayer-2.20101213.ebuild,v 1.2 2011/06/02 12:37:17 blueness Exp $
-
-IUSE=""
-
-MODS="mplayer"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-mplayer.patch"
# ChangeLog for sec-policy/selinux-mrtg
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mrtg/ChangeLog,v 1.4 2011/10/23 12:42:44 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mrtg/ChangeLog,v 1.5 2011/11/12 20:52:53 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-mrtg-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-mrtg-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mrtg/selinux-mrtg-2.20101213.ebuild,v 1.2 2011/06/02 12:37:38 blueness Exp $
-
-IUSE=""
-
-MODS="mrtg"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-munin
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-munin/ChangeLog,v 1.14 2011/10/23 12:42:37 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-munin/ChangeLog,v 1.15 2011/11/12 20:53:49 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-munin-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-munin-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-munin/selinux-munin-2.20101213.ebuild,v 1.2 2011/06/02 12:38:20 blueness Exp $
-
-MODS="munin"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for munin"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-mutt
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mutt/ChangeLog,v 1.7 2011/10/23 12:42:32 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mutt/ChangeLog,v 1.8 2011/11/12 20:53:07 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/add-apps-mutt-r1.patch,
+ -files/add-apps-mutt-r2.patch, -selinux-mutt-2.20101213-r2.ebuild,
+ -selinux-mutt-2.20110726-r1.ebuild, -files/add-apps-mutt.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-mutt-2.20110726-r2.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/mutt.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/mutt.te 2011-01-30 15:24:18.890000182 +0100
-@@ -0,0 +1,74 @@
-+policy_module(mutt, 1.0.0)
-+
-+############################
-+#
-+# Declarations
-+#
-+
-+type mutt_t;
-+type mutt_exec_t;
-+application_domain(mutt_t, mutt_exec_t)
-+ubac_constrained(mutt_t)
-+
-+type mutt_home_t;
-+typealias mutt_home_t alias { user_mutt_home_t staff_mutt_home_t sysadm_mutt_home_t };
-+userdom_user_home_content(mutt_home_t)
-+
-+type mutt_conf_t;
-+typealias mutt_conf_t alias { user_mutt_conf_t staff_mutt_conf_t sysadm_mutt_conf_t };
-+userdom_user_home_content(mutt_conf_t)
-+
-+type mutt_sys_conf_t;
-+files_type(mutt_sys_conf_t)
-+
-+type mutt_tmp_t;
-+typealias mutt_tmp_t alias { user_mutt_tmp_t staff_mutt_tmp_t sysadm_mutt_tmp_t };
-+files_tmp_file(mutt_tmp_t)
-+ubac_constrained(mutt_tmp_t)
-+
-+############################
-+#
-+# Local Policy Rules
-+#
-+
-+allow mutt_t self:process signal_perms;
-+
-+
-+manage_dirs_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+manage_files_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+userdom_user_home_dir_filetrans(mutt_t, mutt_home_t, dir)
-+
-+manage_dirs_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+manage_files_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+manage_fifo_files_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+files_tmp_filetrans(mutt_t, mutt_tmp_t, { file dir })
-+files_search_tmp(mutt_t)
-+
-+read_files_pattern(mutt_t, mutt_sys_conf_t, mutt_sys_conf_t)
-+read_files_pattern(mutt_t, mutt_conf_t, mutt_conf_t)
-+search_dirs_pattern(mutt_t, mutt_sys_conf_t, mutt_sys_conf_t)
-+
-+
-+corecmd_exec_bin(mutt_t)
-+corecmd_exec_shell(mutt_t)
-+corenet_tcp_connect_pop_port(mutt_t)
-+corenet_tcp_connect_smtp_port(mutt_t)
-+dev_read_rand(mutt_t)
-+dev_read_urand(mutt_t)
-+domain_use_interactive_fds(mutt_t)
-+files_read_usr_files(mutt_t)
-+
-+
-+auth_use_nsswitch(mutt_t)
-+miscfiles_read_localization(mutt_t)
-+userdom_manage_user_home_content_files(mutt_t)
-+userdom_manage_user_home_content_dirs(mutt_t)
-+userdom_search_user_home_content(mutt_t)
-+userdom_use_user_terminals(mutt_t)
-+
-+
-+
-+
-+tunable_policy(`gentoo_try_dontaudit',`
-+ kernel_dontaudit_search_sysctl(mutt_t)
-+')
---- apps/mutt.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/mutt.fc 2011-01-16 13:56:03.314000081 +0100
-@@ -0,0 +1,4 @@
-+/usr/bin/mutt -- gen_context(system_u:object_r:mutt_exec_t,s0)
-+HOME_DIR/\.mutt(/.*)? gen_context(system_u:object_r:mutt_home_t,s0)
-+HOME_DIR/\.muttrc -- gen_context(system_u:object_r:mutt_conf_t,s0)
-+/etc/mutt(/.*)? gen_context(system_u:object_r:mutt_sys_conf_t,s0)
+++ /dev/null
---- apps/mutt.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/mutt.te 2011-02-10 21:54:34.329999997 +0100
-@@ -0,0 +1,77 @@
-+policy_module(mutt, 1.0.0)
-+
-+############################
-+#
-+# Declarations
-+#
-+
-+type mutt_t;
-+type mutt_exec_t;
-+application_domain(mutt_t, mutt_exec_t)
-+ubac_constrained(mutt_t)
-+
-+type mutt_home_t;
-+typealias mutt_home_t alias { user_mutt_home_t staff_mutt_home_t sysadm_mutt_home_t };
-+userdom_user_home_content(mutt_home_t)
-+
-+type mutt_conf_t;
-+typealias mutt_conf_t alias { user_mutt_conf_t staff_mutt_conf_t sysadm_mutt_conf_t };
-+userdom_user_home_content(mutt_conf_t)
-+
-+type mutt_sys_conf_t;
-+files_type(mutt_sys_conf_t)
-+
-+type mutt_tmp_t;
-+typealias mutt_tmp_t alias { user_mutt_tmp_t staff_mutt_tmp_t sysadm_mutt_tmp_t };
-+files_tmp_file(mutt_tmp_t)
-+ubac_constrained(mutt_tmp_t)
-+
-+############################
-+#
-+# Local Policy Rules
-+#
-+
-+allow mutt_t self:process signal_perms;
-+allow mutt_t self:fifo_file { getattr read write };
-+
-+
-+manage_dirs_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+manage_files_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+userdom_user_home_dir_filetrans(mutt_t, mutt_home_t, dir)
-+
-+manage_dirs_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+manage_files_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+manage_fifo_files_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+files_tmp_filetrans(mutt_t, mutt_tmp_t, { file dir })
-+files_search_tmp(mutt_t)
-+
-+read_files_pattern(mutt_t, mutt_sys_conf_t, mutt_sys_conf_t)
-+read_files_pattern(mutt_t, mutt_conf_t, mutt_conf_t)
-+search_dirs_pattern(mutt_t, mutt_sys_conf_t, mutt_sys_conf_t)
-+
-+
-+corecmd_exec_bin(mutt_t)
-+corecmd_exec_shell(mutt_t)
-+corenet_tcp_connect_pop_port(mutt_t)
-+corenet_tcp_connect_smtp_port(mutt_t)
-+dev_read_rand(mutt_t)
-+dev_read_urand(mutt_t)
-+domain_use_interactive_fds(mutt_t)
-+files_read_usr_files(mutt_t)
-+
-+
-+auth_use_nsswitch(mutt_t)
-+miscfiles_read_localization(mutt_t)
-+userdom_manage_user_home_content_files(mutt_t)
-+userdom_manage_user_home_content_dirs(mutt_t)
-+userdom_search_user_home_content(mutt_t)
-+userdom_use_user_terminals(mutt_t)
-+
-+
-+optional_policy(`
-+ gpg_domtrans(mutt_t)
-+')
-+
-+tunable_policy(`gentoo_try_dontaudit',`
-+ kernel_dontaudit_search_sysctl(mutt_t)
-+')
---- apps/mutt.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/mutt.fc 2011-01-16 13:56:03.314000081 +0100
-@@ -0,0 +1,4 @@
-+/usr/bin/mutt -- gen_context(system_u:object_r:mutt_exec_t,s0)
-+HOME_DIR/\.mutt(/.*)? gen_context(system_u:object_r:mutt_home_t,s0)
-+HOME_DIR/\.muttrc -- gen_context(system_u:object_r:mutt_conf_t,s0)
-+/etc/mutt(/.*)? gen_context(system_u:object_r:mutt_sys_conf_t,s0)
+++ /dev/null
---- apps/mutt.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/mutt.te 2011-01-22 15:22:46.330000061 +0100
-@@ -0,0 +1,76 @@
-+policy_module(mutt, 1.0.0)
-+
-+############################
-+#
-+# Declarations
-+#
-+
-+type mutt_t;
-+type mutt_exec_t;
-+application_domain(mutt_t, mutt_exec_t)
-+ubac_constrained(mutt_t)
-+
-+type mutt_home_t;
-+typealias mutt_home_t alias { user_mutt_home_t staff_mutt_home_t sysadm_mutt_home_t };
-+userdom_user_home_content(mutt_home_t)
-+
-+type mutt_conf_t;
-+typealias mutt_conf_t alias { user_mutt_conf_t staff_mutt_conf_t sysadm_mutt_conf_t };
-+userdom_user_home_content(mutt_conf_t)
-+
-+type mutt_sys_conf_t;
-+files_type(mutt_sys_conf_t)
-+
-+type mutt_tmp_t;
-+typealias mutt_tmp_t alias { user_mutt_tmp_t staff_mutt_tmp_t sysadm_mutt_tmp_t };
-+files_tmp_file(mutt_tmp_t)
-+ubac_constrained(mutt_tmp_t)
-+
-+############################
-+#
-+# Policy
-+#
-+
-+allow mutt_t self:process signal_perms;
-+#allow mutt_t self:unix_stream_socket create_stream_socket_perms;
-+
-+manage_dirs_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+manage_files_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+#manage_lnk_files_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+#manage_sock_files_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+#manage_fifo_files_pattern(mutt_t, mutt_home_t, mutt_home_t)
-+userdom_user_home_dir_filetrans(mutt_t, mutt_home_t, dir)
-+#manage_fifo_files_pattern(mutt_t, mutt_t, mutt_t)
-+
-+manage_dirs_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+manage_files_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+manage_fifo_files_pattern(mutt_t, mutt_tmp_t, mutt_tmp_t)
-+files_tmp_filetrans(mutt_t, mutt_tmp_t, { file dir })
-+files_search_tmp(mutt_t)
-+
-+read_files_pattern(mutt_t, mutt_sys_conf_t, mutt_sys_conf_t)
-+read_files_pattern(mutt_t, mutt_conf_t, mutt_conf_t)
-+search_dirs_pattern(mutt_t, mutt_sys_conf_t, mutt_sys_conf_t)
-+
-+userdom_search_user_home_content(mutt_t)
-+userdom_manage_user_home_content_files(mutt_t)
-+userdom_manage_user_home_content_dirs(mutt_t)
-+
-+corecmd_exec_bin(mutt_t)
-+corecmd_exec_shell(mutt_t)
-+files_read_usr_files(mutt_t)
-+
-+domain_use_interactive_fds(mutt_t)
-+
-+auth_use_nsswitch(mutt_t)
-+
-+userdom_use_user_terminals(mutt_t)
-+
-+corenet_tcp_connect_pop_port(mutt_t)
-+corenet_tcp_connect_smtp_port(mutt_t)
-+
-+miscfiles_read_localization(mutt_t)
-+
-+dev_read_rand(mutt_t)
-+dev_read_urand(mutt_t)
-+
---- apps/mutt.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/mutt.fc 2011-01-16 13:56:03.314000081 +0100
-@@ -0,0 +1,4 @@
-+/usr/bin/mutt -- gen_context(system_u:object_r:mutt_exec_t,s0)
-+HOME_DIR/\.mutt(/.*)? gen_context(system_u:object_r:mutt_home_t,s0)
-+HOME_DIR/\.muttrc -- gen_context(system_u:object_r:mutt_conf_t,s0)
-+/etc/mutt(/.*)? gen_context(system_u:object_r:mutt_sys_conf_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mutt/selinux-mutt-2.20101213-r2.ebuild,v 1.2 2011/06/02 12:38:41 blueness Exp $
-
-IUSE=""
-
-MODS="mutt"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/add-apps-mutt-r2.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mutt/selinux-mutt-2.20110726-r1.ebuild,v 1.1 2011/08/28 21:12:36 swift Exp $
-EAPI="4"
-
-IUSE=""
-MODS="mutt"
-BASEPOL="2.20110726-r1"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for mutt"
-KEYWORDS="~amd64 ~x86"
# ChangeLog for sec-policy/selinux-mysql
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mysql/ChangeLog,v 1.37 2011/10/23 12:42:56 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mysql/ChangeLog,v 1.38 2011/11/12 20:53:14 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-mysql-r1.patch,
+ -selinux-mysql-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-mysql-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/mysql.te 2010-08-03 15:11:06.000000000 +0200
-+++ services/mysql.te 2011-04-13 17:57:57.369000043 +0200
-@@ -136,6 +136,10 @@
- corenet_sendrecv_all_client_packets(mysqld_t)
- ')
-
-+tunable_policy(`gentoo_try_dontaudit',`
-+ dontaudit mysqld_t self:capability dac_read_search;
-+')
-+
- optional_policy(`
- daemontools_service_domain(mysqld_t, mysqld_exec_t)
- ')
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-mysql/selinux-mysql-2.20101213-r1.ebuild,v 1.2 2011/06/02 12:39:03 blueness Exp $
-
-MODS="mysql"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for mysql"
-
-KEYWORDS="amd64 x86"
-POLICY_PATCH="${FILESDIR}/fix-services-mysql-r1.patch"
# ChangeLog for sec-policy/selinux-nagios
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nagios/ChangeLog,v 1.4 2011/10/23 12:42:54 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nagios/ChangeLog,v 1.5 2011/11/12 20:52:54 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-nagios-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-nagios-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nagios/selinux-nagios-2.20101213.ebuild,v 1.2 2011/06/02 12:39:23 blueness Exp $
-
-IUSE=""
-
-MODS="nagios"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-nessus
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nessus/ChangeLog,v 1.4 2011/10/23 12:42:37 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nessus/ChangeLog,v 1.5 2011/11/12 20:53:37 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-nessus-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-nessus-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nessus/selinux-nessus-2.20101213.ebuild,v 1.2 2011/06/02 12:39:44 blueness Exp $
-
-IUSE=""
-
-MODS="nessus"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-networkmanager
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-networkmanager/ChangeLog,v 1.4 2011/10/23 12:42:33 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-networkmanager/ChangeLog,v 1.5 2011/11/12 20:53:12 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-networkmanager-2.20101213.ebuild,
+ -files/fix-networkmanager.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-networkmanager-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/networkmanager.te 2010-09-10 17:05:45.000000000 +0200
-+++ ../../../refpolicy/policy/modules/services/networkmanager.te 2011-01-02 15:40:48.781999979 +0100
-@@ -28,6 +28,9 @@
- type wpa_cli_exec_t;
- init_system_domain(wpa_cli_t, wpa_cli_exec_t)
-
-+type wpa_cli_var_run_t;
-+files_pid_file(wpa_cli_var_run_t)
-+
- ########################################
- #
- # Local policy
-@@ -68,6 +71,11 @@
- manage_sock_files_pattern(NetworkManager_t, NetworkManager_var_run_t, NetworkManager_var_run_t)
- files_pid_filetrans(NetworkManager_t, NetworkManager_var_run_t, { dir file sock_file })
-
-+manage_dirs_pattern(wpa_cli_t, wpa_cli_var_run_t, wpa_cli_var_run_t)
-+manage_files_pattern(wpa_cli_t, wpa_cli_var_run_t, wpa_cli_var_run_t)
-+manage_sock_files_pattern(wpa_cli_t, wpa_cli_var_run_t, wpa_cli_var_run_t)
-+files_pid_filetrans(wpa_cli_t, wpa_cli_var_run_t, { dir file sock_file })
-+
- kernel_read_system_state(NetworkManager_t)
- kernel_read_network_state(NetworkManager_t)
- kernel_read_kernel_sysctls(NetworkManager_t)
-@@ -125,10 +133,12 @@
- init_read_utmp(NetworkManager_t)
- init_dontaudit_write_utmp(NetworkManager_t)
- init_domtrans_script(NetworkManager_t)
-+init_domtrans_script(wpa_cli_t)
-
- auth_use_nsswitch(NetworkManager_t)
-
- logging_send_syslog_msg(NetworkManager_t)
-+logging_send_syslog_msg(wpa_cli_t)
-
- miscfiles_read_localization(NetworkManager_t)
- miscfiles_read_generic_certs(NetworkManager_t)
-@@ -149,6 +159,7 @@
-
- userdom_dontaudit_use_unpriv_user_fds(NetworkManager_t)
- userdom_dontaudit_use_user_ttys(NetworkManager_t)
-+userdom_use_user_ttys(wpa_cli_t)
- # Read gnome-keyring
- userdom_read_user_home_content_files(NetworkManager_t)
-
-@@ -287,3 +298,20 @@
- miscfiles_read_localization(wpa_cli_t)
-
- term_dontaudit_use_console(wpa_cli_t)
-+
-+fs_search_tmpfs(wpa_cli_t)
-+fs_search_tmpfs(NetworkManager_t)
-+fs_rw_tmpfs_files(wpa_cli_t)
-+fs_rw_tmpfs_files(NetworkManager_t)
-+fs_manage_tmpfs_dirs(wpa_cli_t)
-+fs_manage_tmpfs_sockets(wpa_cli_t)
-+fs_manage_tmpfs_sockets(NetworkManager_t)
-+getty_use_fds(wpa_cli_t)
-+files_search_pids(wpa_cli_t)
-+corecmd_exec_shell(wpa_cli_t)
-+corecmd_exec_bin(wpa_cli_t)
-+
-+ifdef(`distro_gentoo',`
-+ sysnet_domtrans_dhcpc(wpa_cli_t)
-+ allow wpa_cli_t etc_t:file { getattr };
-+')
---- services/networkmanager.fc 2010-08-03 15:11:06.000000000 +0200
-+++ ../../../refpolicy/policy/modules/services/networkmanager.fc 2011-01-02 17:30:48.448999997 +0100
-@@ -24,3 +24,6 @@
- /var/run/nm-dhclient.* gen_context(system_u:object_r:NetworkManager_var_run_t,s0)
- /var/run/wpa_supplicant(/.*)? gen_context(system_u:object_r:NetworkManager_var_run_t,s0)
- /var/run/wpa_supplicant-global -s gen_context(system_u:object_r:NetworkManager_var_run_t,s0)
-+/var/run/wpa_cli-.* -- gen_context(system_u:object_r:wpa_cli_var_run_t,s0)
-+/etc/wpa_supplicant/wpa_cli.sh -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/bin/wpa_cli -- gen_context(system_u:object_r:wpa_cli_exec_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-networkmanager/selinux-networkmanager-2.20101213.ebuild,v 1.2 2011/06/02 12:40:04 blueness Exp $
-
-IUSE=""
-
-MODS="networkmanager"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-
-MODDEPEND=">=sec-policy/selinux-base-policy-2.20101213-r1"
-
-# Patch "fix-networkmanager.patch" contains:
-# - Support for wpa_cli. Gentoo's init scripts use wpa_cli to run the init
-# scripts when wpa_supplicant has associated.
-# - Support running wpa_cli from commandline (requires
-# selinux-base-policy-2.20101213-r1) due to patch to sysadm_t domain
-POLICY_PATCH="${FILESDIR}/fix-networkmanager.patch"
# ChangeLog for sec-policy/selinux-nfs
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nfs/ChangeLog,v 1.21 2011/10/23 12:42:42 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nfs/ChangeLog,v 1.22 2011/11/12 20:52:55 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-nfs-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-nfs-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nfs/selinux-nfs-2.20101213.ebuild,v 1.2 2011/06/02 12:40:25 blueness Exp $
-
-MODS="rpc"
-IUSE=""
-
-inherit selinux-policy-2
-
-RDEPEND="sec-policy/selinux-portmap"
-
-DESCRIPTION="SELinux policy for NFS"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-nginx
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nginx/ChangeLog,v 1.3 2011/10/23 12:42:31 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nginx/ChangeLog,v 1.4 2011/11/12 20:53:11 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-nginx-r1.patch,
+ -files/fix-services-nginx-r2.patch, -selinux-nginx-2.20101213-r1.ebuild,
+ -selinux-nginx-2.20101213-r2.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-nginx-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/nginx.te 1970-01-01 01:00:00.000000000 +0100
-+++ services/nginx.te 2011-07-17 20:07:44.094000909 +0200
-@@ -0,0 +1,214 @@
-+###############################################################################
-+# SELinux module for the NGINX Web Server
-+#
-+# Project Contact Information:
-+# Stuart Cianos
-+# Email: scianos@alphavida.com
-+#
-+###############################################################################
-+# (C) Copyright 2009 by Stuart Cianos, d/b/a AlphaVida. All Rights Reserved.
-+#
-+#
-+# Stuart Cianos licenses this file to You under the GNU General Public License,
-+# Version 3.0 (the "License"); you may not use this file except in compliance
-+# with the License. You may obtain a copy of the License at
-+#
-+# http://www.gnu.org/licenses/gpl.txt
-+#
-+# or in the COPYING file included in the original archive.
-+#
-+# Disclaimer of Warranty.
-+#
-+# THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-+# APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-+# HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-+# OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-+# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-+# PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-+# IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-+# ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-+#
-+# Limitation of Liability.
-+#
-+# IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-+# WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-+# THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-+# GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-+# USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-+# DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-+# PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-+# EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-+# SUCH DAMAGES.
-+###############################################################################
-+policy_module(nginx,1.0.10)
-+
-+########################################
-+#
-+# Declarations
-+#
-+
-+## <desc>
-+## <p>
-+## Allow nginx to serve HTTP content (act as an http server)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_enable_http_server, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to act as an imap proxy server)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_enable_imap_server, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to act as a pop3 server)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_enable_pop3_server, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to act as an smtp server)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_enable_smtp_server, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to connect to remote HTTP servers
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_can_network_connect_http, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to connect to remote servers (regardless of protocol)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_can_network_connect, false)
-+
-+type nginx_t;
-+type nginx_exec_t;
-+init_daemon_domain(nginx_t, nginx_exec_t)
-+
-+type nginx_initrc_exec_t;
-+init_script_file(nginx_initrc_exec_t)
-+
-+# conf files
-+type nginx_conf_t;
-+files_type(nginx_conf_t)
-+
-+# var/lib files
-+type nginx_var_lib_t;
-+files_type(nginx_var_lib_t)
-+
-+# log files
-+type nginx_log_t;
-+logging_log_file(nginx_log_t)
-+
-+# pid files
-+type nginx_var_run_t;
-+files_pid_file(nginx_var_run_t)
-+
-+# tmp files
-+type nginx_tmp_t;
-+files_tmp_file(nginx_tmp_t)
-+
-+########################################
-+#
-+# nginx local policy
-+#
-+
-+## Self rules
-+allow nginx_t self:fifo_file { read write };
-+allow nginx_t self:unix_stream_socket create_stream_socket_perms;
-+allow nginx_t self:tcp_socket { listen accept };
-+allow nginx_t self:capability { setuid net_bind_service setgid chown };
-+
-+## Policy-owned type management rules
-+# log files
-+manage_files_pattern(nginx_t, nginx_log_t, nginx_log_t)
-+#manage_sock_files_pattern(nginx_t, nginx_log_t, nginx_log_t)
-+logging_log_filetrans(nginx_t, nginx_log_t, { file dir })
-+#logging_log_filetrans(nginx_t, nginx_log_t, { sock_file })
-+
-+# pid file
-+#allow nginx_t nginx_var_run_t:sock_file manage_file_perms;
-+manage_dirs_pattern(nginx_t, nginx_var_run_t, nginx_var_run_t)
-+manage_files_pattern(nginx_t, nginx_var_run_t, nginx_var_run_t)
-+files_pid_filetrans(nginx_t, nginx_var_run_t, file)
-+#files_pid_filetrans(nginx_t, nginx_var_run_t, { file sock_file })
-+
-+# conf files
-+read_files_pattern(nginx_t, nginx_conf_t, nginx_conf_t)
-+
-+# tmp files
-+manage_files_pattern(nginx_t, nginx_tmp_t, nginx_tmp_t)
-+manage_dirs_pattern(nginx_t, nginx_tmp_t, nginx_tmp_t)
-+files_tmp_filetrans(nginx_t, nginx_tmp_t, dir)
-+
-+# various
-+allow nginx_t nginx_var_lib_t:file create_file_perms;
-+allow nginx_t nginx_var_lib_t:sock_file create_file_perms;
-+allow nginx_t nginx_var_lib_t:dir create_dir_perms;
-+files_var_lib_filetrans(nginx_t,nginx_var_lib_t, { file dir sock_file })
-+
-+## Kernel layer modules
-+kernel_read_kernel_sysctls(nginx_t)
-+corenet_tcp_bind_generic_node(nginx_t)
-+corenet_tcp_sendrecv_generic_if(nginx_t)
-+corenet_tcp_sendrecv_generic_node(nginx_t)
-+#corenet_tcp_sendrecv_all_ports(nginx_t)
-+#corenet_non_ipsec_sendrecv(nginx_t)
-+domain_use_interactive_fds(nginx_t)
-+files_read_etc_files(nginx_t)
-+
-+## Perhaps as a policy tunable?
-+#corenet_tcp_bind_all_ports(nginx_t)
-+#corenet_tcp_bind_all_nodes(nginx_t)
-+
-+## System layer modules
-+miscfiles_read_localization(nginx_t)
-+sysnet_dns_name_resolve(nginx_t)
-+
-+## Other modules
-+
-+#init_use_fds(nginx_t)
-+#init_use_script_ptys(nginx_t)
-+#libs_use_ld_so(nginx_t)
-+#libs_use_shared_libs(nginx_t)
-+
-+#allow nginx_t fs_t:filesystem associate;
-+#allow nginx_t home_root_t:dir search;
-+#allow nginx_t user_home_dir_t:dir search;
-+
-+tunable_policy(`gentoo_nginx_enable_http_server',`
-+ corenet_tcp_bind_http_port(nginx_t)
-+ apache_read_sys_content(nginx_t)
-+')
-+
-+# We enable both binding and connecting, since nginx acts here as a reverse proxy
-+tunable_policy(`gentoo_nginx_enable_imap_server',`
-+ corenet_tcp_bind_pop_port(nginx_t)
-+ corenet_tcp_connect_pop_port(nginx_t)
-+')
-+
-+tunable_policy(`gentoo_nginx_enable_pop3_server',`
-+ corenet_tcp_bind_pop_port(nginx_t)
-+ corenet_tcp_connect_pop_port(nginx_t)
-+')
-+
-+tunable_policy(`gentoo_nginx_enable_smtp_server',`
-+ corenet_tcp_bind_smtp_port(nginx_t)
-+ corenet_tcp_connect_smtp_port(nginx_t)
-+')
-+
-+tunable_policy(`gentoo_nginx_can_network_connect_http',`
-+ corenet_tcp_connect_http_port(nginx_t)
-+')
-+
-+tunable_policy(`gentoo_nginx_can_network_connect',`
-+ corenet_tcp_connect_all_ports(nginx_t)
-+')
---- services/nginx.fc 1970-01-01 01:00:00.000000000 +0100
-+++ services/nginx.fc 2011-06-13 22:16:54.428001426 +0200
-@@ -0,0 +1,62 @@
-+###############################################################################
-+# SELinux module for the NGINX Web Server
-+#
-+# Project Contact Information:
-+# Stuart Cianos
-+# Email: scianos@alphavida.com
-+#
-+###############################################################################
-+# (C) Copyright 2009 by Stuart Cianos, d/b/a AlphaVida. All Rights Reserved.
-+#
-+#
-+# Stuart Cianos licenses this file to You under the GNU General Public License,
-+# Version 3.0 (the "License"); you may not use this file except in compliance
-+# with the License. You may obtain a copy of the License at
-+#
-+# http://www.gnu.org/licenses/gpl.txt
-+#
-+# or in the COPYING file included in the original archive.
-+#
-+# Disclaimer of Warranty.
-+#
-+# THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-+# APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-+# HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-+# OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-+# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-+# PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-+# IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-+# ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-+#
-+# Limitation of Liability.
-+#
-+# IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-+# WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-+# THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-+# GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-+# USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-+# DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-+# PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-+# EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-+# SUCH DAMAGES.
-+###############################################################################
-+# nginx executable will have:
-+# label: system_u:object_r:nginx_exec_t
-+# MLS sensitivity: s0
-+# MCS categories: <none>
-+
-+/usr/sbin/nginx -- gen_context(system_u:object_r:nginx_exec_t,s0)
-+/etc/nginx(/.*)? gen_context(system_u:object_r:nginx_conf_t,s0)
-+/etc/ssl/nginx(/.*)? gen_context(system_u:object_r:nginx_conf_t,s0)
-+/etc/rc\.d/init\.d/nginx -- gen_context(system_u:object_r:nginx_initrc_exec_t,s0)
-+/var/tmp/nginx(/.*)? gen_context(system_u:object_r:nginx_tmp_t,s0)
-+
-+
-+#/usr/local/nginx/sbin/nginx -- gen_context(system_u:object_r:nginx_exec_t,s0)
-+#/usr/local/nginx/logs/nginx.pid gen_context(system_u:object_r:nginx_var_run_t,s0)
-+#/usr/local/nginx/logs(/.*)? gen_context(system_u:object_r:nginx_var_log_t,s0)
-+#/usr/local/nginx/proxy_temp(/.*)? gen_context(system_u:object_r:nginx_var_lib_t,s0)
-+#/usr/local/nginx/fastcgi_temp(/.*)? gen_context(system_u:object_r:nginx_var_lib_t,s0)
-+#/usr/local/nginx/client_body_temp(/.*)? gen_context(system_u:object_r:nginx_var_lib_t,s0)
-+#/usr/local/nginx/html(/.*)? gen_context(user_u:object_r:httpd_sys_content_t,s0)
-+#/usr/local/nginx/conf(/.*)? gen_context(system_u:object_r:etc_t,s0)
+++ /dev/null
---- services/nginx.te 1970-01-01 01:00:00.000000000 +0100
-+++ services/nginx.te 2011-07-21 14:12:37.817000675 +0200
-@@ -0,0 +1,194 @@
-+###############################################################################
-+# SELinux module for the NGINX Web Server
-+#
-+# Project Contact Information:
-+# Stuart Cianos
-+# Email: scianos@alphavida.com
-+#
-+###############################################################################
-+# (C) Copyright 2009 by Stuart Cianos, d/b/a AlphaVida. All Rights Reserved.
-+#
-+#
-+# Stuart Cianos licenses this file to You under the GNU General Public License,
-+# Version 3.0 (the "License"); you may not use this file except in compliance
-+# with the License. You may obtain a copy of the License at
-+#
-+# http://www.gnu.org/licenses/gpl.txt
-+#
-+# or in the COPYING file included in the original archive.
-+#
-+# Disclaimer of Warranty.
-+#
-+# THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-+# APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-+# HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-+# OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-+# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-+# PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-+# IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-+# ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-+#
-+# Limitation of Liability.
-+#
-+# IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-+# WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-+# THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-+# GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-+# USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-+# DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-+# PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-+# EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-+# SUCH DAMAGES.
-+###############################################################################
-+policy_module(nginx,1.0.10)
-+
-+########################################
-+#
-+# Declarations
-+#
-+
-+## <desc>
-+## <p>
-+## Allow nginx to serve HTTP content (act as an http server)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_enable_http_server, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to act as an imap proxy server)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_enable_imap_server, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to act as a pop3 server)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_enable_pop3_server, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to act as an smtp server)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_enable_smtp_server, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to connect to remote HTTP servers
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_can_network_connect_http, false)
-+
-+## <desc>
-+## <p>
-+## Allow nginx to connect to remote servers (regardless of protocol)
-+## </p>
-+## </desc>
-+gen_tunable(gentoo_nginx_can_network_connect, false)
-+
-+type nginx_t;
-+type nginx_exec_t;
-+init_daemon_domain(nginx_t, nginx_exec_t)
-+
-+# conf files
-+type nginx_conf_t;
-+files_type(nginx_conf_t)
-+
-+# log files
-+type nginx_log_t;
-+logging_log_file(nginx_log_t)
-+
-+# tmp files
-+type nginx_tmp_t;
-+files_tmp_file(nginx_tmp_t)
-+
-+# var/lib files
-+type nginx_var_lib_t;
-+files_type(nginx_var_lib_t)
-+
-+# pid files
-+type nginx_var_run_t;
-+files_pid_file(nginx_var_run_t)
-+
-+########################################
-+#
-+# nginx local policy
-+#
-+
-+## Self rules
-+allow nginx_t self:fifo_file { read write };
-+allow nginx_t self:unix_stream_socket create_stream_socket_perms;
-+allow nginx_t self:tcp_socket { listen accept };
-+allow nginx_t self:capability { setuid net_bind_service setgid chown };
-+
-+## Policy-owned type management rules
-+
-+# conf files
-+read_files_pattern(nginx_t, nginx_conf_t, nginx_conf_t)
-+
-+# log files
-+manage_files_pattern(nginx_t, nginx_log_t, nginx_log_t)
-+logging_log_filetrans(nginx_t, nginx_log_t, { file dir })
-+
-+
-+# pid file
-+manage_dirs_pattern(nginx_t, nginx_var_run_t, nginx_var_run_t)
-+manage_files_pattern(nginx_t, nginx_var_run_t, nginx_var_run_t)
-+files_pid_filetrans(nginx_t, nginx_var_run_t, file)
-+
-+# tmp files
-+manage_files_pattern(nginx_t, nginx_tmp_t, nginx_tmp_t)
-+manage_dirs_pattern(nginx_t, nginx_tmp_t, nginx_tmp_t)
-+files_tmp_filetrans(nginx_t, nginx_tmp_t, dir)
-+
-+# var/lib files
-+create_files_pattern(nginx_t, nginx_var_lib_t, nginx_var_lib_t)
-+create_sock_files_pattern(nginx_t, nginx_var_lib_t, nginx_var_lib_t)
-+files_var_lib_filetrans(nginx_t,nginx_var_lib_t, { file dir sock_file })
-+
-+## Kernel layer modules
-+#
-+kernel_read_kernel_sysctls(nginx_t)
-+corenet_tcp_bind_generic_node(nginx_t)
-+corenet_tcp_sendrecv_generic_if(nginx_t)
-+corenet_tcp_sendrecv_generic_node(nginx_t)
-+domain_use_interactive_fds(nginx_t)
-+files_read_etc_files(nginx_t)
-+
-+## System layer modules
-+miscfiles_read_localization(nginx_t)
-+sysnet_dns_name_resolve(nginx_t)
-+
-+## Other modules
-+
-+tunable_policy(`gentoo_nginx_enable_http_server',`
-+ corenet_tcp_bind_http_port(nginx_t)
-+ apache_read_sys_content(nginx_t)
-+')
-+
-+# We enable both binding and connecting, since nginx acts here as a reverse proxy
-+tunable_policy(`gentoo_nginx_enable_imap_server',`
-+ corenet_tcp_bind_pop_port(nginx_t)
-+ corenet_tcp_connect_pop_port(nginx_t)
-+')
-+
-+tunable_policy(`gentoo_nginx_enable_pop3_server',`
-+ corenet_tcp_bind_pop_port(nginx_t)
-+ corenet_tcp_connect_pop_port(nginx_t)
-+')
-+
-+tunable_policy(`gentoo_nginx_enable_smtp_server',`
-+ corenet_tcp_bind_smtp_port(nginx_t)
-+ corenet_tcp_connect_smtp_port(nginx_t)
-+')
-+
-+tunable_policy(`gentoo_nginx_can_network_connect_http',`
-+ corenet_tcp_connect_http_port(nginx_t)
-+')
-+
-+tunable_policy(`gentoo_nginx_can_network_connect',`
-+ corenet_tcp_connect_all_ports(nginx_t)
-+')
---- services/nginx.fc 1970-01-01 01:00:00.000000000 +0100
-+++ services/nginx.fc 2011-07-21 14:21:43.956000690 +0200
-@@ -0,0 +1,63 @@
-+###############################################################################
-+# SELinux module for the NGINX Web Server
-+#
-+# Project Contact Information:
-+# Stuart Cianos
-+# Email: scianos@alphavida.com
-+#
-+###############################################################################
-+# (C) Copyright 2009 by Stuart Cianos, d/b/a AlphaVida. All Rights Reserved.
-+#
-+#
-+# Stuart Cianos licenses this file to You under the GNU General Public License,
-+# Version 3.0 (the "License"); you may not use this file except in compliance
-+# with the License. You may obtain a copy of the License at
-+#
-+# http://www.gnu.org/licenses/gpl.txt
-+#
-+# or in the COPYING file included in the original archive.
-+#
-+# Disclaimer of Warranty.
-+#
-+# THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-+# APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-+# HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-+# OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-+# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-+# PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-+# IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-+# ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-+#
-+# Limitation of Liability.
-+#
-+# IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-+# WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-+# THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-+# GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-+# USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-+# DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-+# PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-+# EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-+# SUCH DAMAGES.
-+###############################################################################
-+# nginx executable will have:
-+# label: system_u:object_r:nginx_exec_t
-+# MLS sensitivity: s0
-+# MCS categories: <none>
-+
-+#
-+# /etc
-+#
-+/etc/nginx(/.*)? gen_context(system_u:object_r:nginx_conf_t,s0)
-+/etc/ssl/nginx(/.*)? gen_context(system_u:object_r:nginx_conf_t,s0)
-+
-+#
-+# /usr
-+#
-+/usr/sbin/nginx -- gen_context(system_u:object_r:nginx_exec_t,s0)
-+
-+#
-+# /var
-+#
-+/var/log/nginx(/.*)? gen_context(system_u:object_r:nginx_log_t,s0)
-+/var/tmp/nginx(/.*)? gen_context(system_u:object_r:nginx_tmp_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nginx/selinux-nginx-2.20101213-r1.ebuild,v 1.1 2011/07/25 23:06:58 blueness Exp $
-
-IUSE=""
-
-MODS="nginx"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for nginx web server application"
-
-KEYWORDS="~amd64 ~x86"
-DEPEND="sec-policy/selinux-base-policy
- sec-policy/selinux-apache"
-RDEPEND="${DEPEND}"
-
-POLICY_PATCH="${FILESDIR}/fix-services-nginx-r1.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nginx/selinux-nginx-2.20101213-r2.ebuild,v 1.1 2011/07/25 23:06:58 blueness Exp $
-
-IUSE=""
-
-MODS="nginx"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for nginx web server application"
-
-KEYWORDS="~amd64 ~x86"
-DEPEND="sec-policy/selinux-base-policy
- sec-policy/selinux-apache"
-RDEPEND="${DEPEND}"
-
-POLICY_PATCH="${FILESDIR}/fix-services-nginx-r2.patch"
# ChangeLog for sec-policy/selinux-ntop
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ntop/ChangeLog,v 1.24 2011/10/23 12:42:37 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ntop/ChangeLog,v 1.25 2011/11/12 20:53:43 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ntop-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ntop-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ntop/selinux-ntop-2.20101213.ebuild,v 1.2 2011/06/02 12:40:46 blueness Exp $
-
-MODS="ntop"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for ntop"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ntp
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ntp/ChangeLog,v 1.38 2011/10/23 12:42:49 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ntp/ChangeLog,v 1.39 2011/11/12 20:53:16 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ntp-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ntp-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ntp/selinux-ntp-2.20101213.ebuild,v 1.2 2011/06/02 12:41:08 blueness Exp $
-
-MODS="ntp"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for the network time protocol daemon"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-nut
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nut/ChangeLog,v 1.4 2011/10/23 12:42:54 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nut/ChangeLog,v 1.5 2011/11/12 20:52:59 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-nut-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-nut-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nut/selinux-nut-2.20101213.ebuild,v 1.2 2011/06/02 12:41:28 blueness Exp $
-
-IUSE=""
-
-MODS="nut"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-nx
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nx/ChangeLog,v 1.4 2011/10/23 12:42:48 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nx/ChangeLog,v 1.5 2011/11/12 20:52:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-nx-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-nx-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-nx/selinux-nx-2.20101213.ebuild,v 1.2 2011/06/02 12:41:49 blueness Exp $
-
-IUSE=""
-
-MODS="nx"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-oidentd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-oidentd/ChangeLog,v 1.4 2011/10/23 12:42:47 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-oidentd/ChangeLog,v 1.5 2011/11/12 20:53:08 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-oidentd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-oidentd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-oidentd/selinux-oidentd-2.20101213.ebuild,v 1.2 2011/06/02 12:42:10 blueness Exp $
-
-IUSE=""
-
-MODS="oidentd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-openct
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-openct/ChangeLog,v 1.4 2011/10/23 12:42:59 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-openct/ChangeLog,v 1.5 2011/11/12 20:52:58 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-openct-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-openct-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-openct/selinux-openct-2.20101213.ebuild,v 1.2 2011/06/02 12:42:31 blueness Exp $
-
-IUSE=""
-
-MODS="openct"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-openvpn
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-openvpn/ChangeLog,v 1.21 2011/10/23 12:42:57 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-openvpn/ChangeLog,v 1.22 2011/11/12 20:53:21 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-openvpn-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-openvpn-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-openvpn/selinux-openvpn-2.20101213.ebuild,v 1.2 2011/06/02 12:43:13 blueness Exp $
-
-MODS="openvpn"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for OpenVPN"
-
-KEYWORDS="amd64 x86"
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-apps-pan-r1.patch,
+ -selinux-pan-2.20101213-r1.ebuild:
+ Removing old policies
+
23 Oct 2011; <swift@gentoo.org> selinux-pan-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/pan.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/pan.te 2011-07-24 18:31:32.760000849 +0200
-@@ -0,0 +1,102 @@
-+policy_module(pan, 1.0)
-+
-+########################################
-+#
-+# Declarations
-+#
-+
-+type pan_t;
-+type pan_exec_t;
-+application_domain(pan_t, pan_exec_t)
-+ubac_constrained(pan_t)
-+
-+type pan_home_t;
-+userdom_user_home_content(pan_home_t)
-+
-+#type pan_tmp_t;
-+#files_tmp_file(pan_tmp_t)
-+#ubac_constrained(pan_tmp_t)
-+
-+type pan_tmpfs_t;
-+files_tmpfs_file(pan_tmpfs_t)
-+ubac_constrained(pan_tmpfs_t)
-+
-+########################################
-+#
-+# Pan local policy
-+#
-+allow pan_t self:process { getsched signal };
-+allow pan_t self:fifo_file rw_fifo_file_perms;
-+allow pan_t pan_tmpfs_t:file { read write };
-+
-+# Allow pan to work with its ~/.pan2 location
-+manage_dirs_pattern(pan_t, pan_home_t, pan_home_t)
-+manage_files_pattern(pan_t, pan_home_t, pan_home_t)
-+manage_lnk_files_pattern(pan_t, pan_home_t, pan_home_t)
-+
-+# Support for shared memory
-+fs_tmpfs_filetrans(pan_t, pan_tmpfs_t, file)
-+
-+## Kernel layer calls
-+#
-+kernel_dontaudit_read_system_state(pan_t)
-+files_read_etc_files(pan_t)
-+files_read_usr_files(pan_t)
-+corenet_all_recvfrom_unlabeled(pan_t)
-+corenet_all_recvfrom_netlabel(pan_t)
-+corenet_tcp_connect_innd_port(pan_t)
-+corenet_tcp_sendrecv_generic_if(pan_t)
-+corenet_tcp_sendrecv_generic_node(pan_t)
-+corenet_tcp_sendrecv_innd_port(pan_t)
-+corenet_sendrecv_innd_client_packets(pan_t)
-+
-+## System layer calls
-+#
-+miscfiles_read_localization(pan_t)
-+sysnet_dns_name_resolve(pan_t)
-+userdom_manage_user_home_content_dirs(pan_t)
-+userdom_manage_user_home_content_files(pan_t)
-+
-+## Other yayer calls
-+#
-+xserver_user_x_domain_template(pan, pan_t, pan_tmpfs_t)
-+
-+tunable_policy(`use_nfs_home_dirs',`
-+ fs_manage_nfs_dirs(pan_t)
-+ fs_manage_nfs_files(pan_t)
-+ fs_manage_nfs_symlinks(pan_t)
-+')
-+
-+tunable_policy(`use_samba_home_dirs',`
-+ fs_manage_cifs_dirs(pan_t)
-+ fs_manage_cifs_files(pan_t)
-+ fs_manage_cifs_symlinks(pan_t)
-+')
-+
-+optional_policy(`
-+ cups_read_rw_config(pan_t)
-+')
-+
-+optional_policy(`
-+ dbus_system_bus_client(pan_t)
-+ dbus_session_bus_client(pan_t)
-+')
-+
-+optional_policy(`
-+ gnome_stream_connect_gconf(pan_t)
-+')
-+
-+optional_policy(`
-+ gpg_domtrans(pan_t)
-+ gpg_signal(pan_t)
-+')
-+
-+optional_policy(`
-+ lpd_domtrans_lpr(pan_t)
-+')
-+
-+optional_policy(`
-+ mozilla_read_user_home_files(pan_t)
-+ mozilla_domtrans(pan_t)
-+')
-+
---- apps/pan.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/pan.fc 2011-07-24 17:56:50.338000789 +0200
-@@ -0,0 +1,2 @@
-+/usr/bin/pan -- gen_context(system_u:object_r:pan_exec_t,s0)
-+HOME_DIR/\.pan2(/.*)? gen_context(system_u:object_r:pan_home_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pan/selinux-pan-2.20101213-r1.ebuild,v 1.1 2011/08/07 11:10:33 blueness Exp $
-
-IUSE=""
-
-MODS="pan"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-apps-pan-r1.patch"
-RDEPEND=">=sec-policy/selinux-base-policy-2.20101213-r22"
# ChangeLog for sec-policy/selinux-pcmcia
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pcmcia/ChangeLog,v 1.16 2011/10/23 12:42:47 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pcmcia/ChangeLog,v 1.17 2011/11/12 20:53:09 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-pcmcia-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-pcmcia-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pcmcia/selinux-pcmcia-2.20101213.ebuild,v 1.2 2011/06/02 12:43:34 blueness Exp $
-
-IUSE=""
-
-MODS="pcmcia"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for PCMCIA card services"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-perdition
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-perdition/ChangeLog,v 1.4 2011/10/23 12:42:36 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-perdition/ChangeLog,v 1.5 2011/11/12 20:52:57 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-perdition-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-perdition-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-perdition/selinux-perdition-2.20101213.ebuild,v 1.2 2011/06/02 12:43:55 blueness Exp $
-
-IUSE=""
-
-MODS="perdition"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-podsleuth
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-podsleuth/ChangeLog,v 1.4 2011/10/23 12:42:59 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-podsleuth/ChangeLog,v 1.5 2011/11/12 20:53:20 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-podsleuth-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-podsleuth-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-podsleuth/selinux-podsleuth-2.20101213.ebuild,v 1.2 2011/06/02 12:44:16 blueness Exp $
-
-IUSE=""
-
-MODS="podsleuth"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-policykit
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-policykit/ChangeLog,v 1.4 2011/10/23 12:42:44 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-policykit/ChangeLog,v 1.5 2011/11/12 20:52:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-policykit-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-policykit-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-policykit/selinux-policykit-2.20101213.ebuild,v 1.2 2011/06/02 12:44:37 blueness Exp $
-
-IUSE=""
-
-MODS="policykit"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-portmap
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-portmap/ChangeLog,v 1.26 2011/10/23 12:42:55 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-portmap/ChangeLog,v 1.27 2011/11/12 20:53:30 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-portmap-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-portmap-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-portmap/selinux-portmap-2.20101213.ebuild,v 1.2 2011/06/02 12:44:58 blueness Exp $
-
-MODS="portmap"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for portmap"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-postfix
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postfix/ChangeLog,v 1.37 2011/10/23 12:42:52 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postfix/ChangeLog,v 1.38 2011/11/12 20:53:31 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-postfix-r1.patch,
+ -files/fix-services-postfix-r2.patch, -files/fix-services-postfix-r3.patch,
+ -selinux-postfix-2.20101213-r3.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-postfix-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/postfix.te 2010-08-03 15:11:07.000000000 +0200
-+++ services/postfix.te 2011-03-03 17:48:25.952999995 +0100
-@@ -93,7 +93,7 @@
- #
-
- # chown is to set the correct ownership of queue dirs
--allow postfix_master_t self:capability { chown dac_override kill setgid setuid net_bind_service sys_tty_config };
-+allow postfix_master_t self:capability { chown dac_override kill setgid setuid net_bind_service sys_tty_config dac_read_search };
- allow postfix_master_t self:fifo_file rw_fifo_file_perms;
- allow postfix_master_t self:tcp_socket create_stream_socket_perms;
- allow postfix_master_t self:udp_socket create_socket_perms;
-@@ -589,6 +589,7 @@
- # for OpenSSL certificates
- files_read_usr_files(postfix_smtpd_t)
- mta_read_aliases(postfix_smtpd_t)
-+mta_read_config(postfix_smtpd_t)
-
- optional_policy(`
- dovecot_stream_connect_auth(postfix_smtpd_t)
---- services/postfix.fc 2010-08-03 15:11:07.000000000 +0200
-+++ services/postfix.fc 2011-03-03 15:12:19.081999996 +0100
-@@ -16,24 +16,27 @@
- /usr/libexec/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
- /usr/libexec/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
- ', `
--/usr/lib/postfix/.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
--/usr/lib/postfix/cleanup -- gen_context(system_u:object_r:postfix_cleanup_exec_t,s0)
--/usr/lib/postfix/local -- gen_context(system_u:object_r:postfix_local_exec_t,s0)
--/usr/lib/postfix/master -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
--/usr/lib/postfix/pickup -- gen_context(system_u:object_r:postfix_pickup_exec_t,s0)
--/usr/lib/postfix/(n)?qmgr -- gen_context(system_u:object_r:postfix_qmgr_exec_t,s0)
--/usr/lib/postfix/showq -- gen_context(system_u:object_r:postfix_showq_exec_t,s0)
--/usr/lib/postfix/smtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/lmtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/scache -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/smtpd -- gen_context(system_u:object_r:postfix_smtpd_exec_t,s0)
--/usr/lib/postfix/bounce -- gen_context(system_u:object_r:postfix_bounce_exec_t,s0)
--/usr/lib/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
--/usr/lib/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
-+/usr/lib(64)?/postfix/.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
-+/usr/lib(64)?/postfix/cleanup -- gen_context(system_u:object_r:postfix_cleanup_exec_t,s0)
-+/usr/lib(64)?/postfix/local -- gen_context(system_u:object_r:postfix_local_exec_t,s0)
-+/usr/lib(64)?/postfix/master -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
-+/usr/lib(64)?/postfix/pickup -- gen_context(system_u:object_r:postfix_pickup_exec_t,s0)
-+/usr/lib(64)?/postfix/(n)?qmgr -- gen_context(system_u:object_r:postfix_qmgr_exec_t,s0)
-+/usr/lib(64)?/postfix/showq -- gen_context(system_u:object_r:postfix_showq_exec_t,s0)
-+/usr/lib(64)?/postfix/smtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/lmtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/scache -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/smtpd -- gen_context(system_u:object_r:postfix_smtpd_exec_t,s0)
-+/usr/lib(64)?/postfix/bounce -- gen_context(system_u:object_r:postfix_bounce_exec_t,s0)
-+/usr/lib(64)?/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
-+/usr/lib(64)?/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
-+/usr/lib(64)?/postfix/postfix-script.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
- ')
- /etc/postfix/postfix-script.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
- /etc/postfix/prng_exch -- gen_context(system_u:object_r:postfix_prng_t,s0)
-+ifndef(`distro_gentoo',`
- /usr/sbin/postalias -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
-+')
- /usr/sbin/postcat -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
- /usr/sbin/postdrop -- gen_context(system_u:object_r:postfix_postdrop_exec_t,s0)
- /usr/sbin/postfix -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
+++ /dev/null
---- services/postfix.te 2010-08-03 15:11:07.000000000 +0200
-+++ services/postfix.te 2011-03-13 16:04:36.436999999 +0100
-@@ -93,7 +93,7 @@
- #
-
- # chown is to set the correct ownership of queue dirs
--allow postfix_master_t self:capability { chown dac_override kill setgid setuid net_bind_service sys_tty_config };
-+allow postfix_master_t self:capability { chown dac_override kill setgid setuid net_bind_service sys_tty_config dac_read_search };
- allow postfix_master_t self:fifo_file rw_fifo_file_perms;
- allow postfix_master_t self:tcp_socket create_stream_socket_perms;
- allow postfix_master_t self:udp_socket create_socket_perms;
-@@ -201,6 +201,9 @@
-
- optional_policy(`
- mysql_stream_connect(postfix_master_t)
-+ mysql_stream_connect(postfix_cleanup_t)
-+ mysql_stream_connect(postfix_local_t)
-+ mysql_stream_connect(postfix_virtual_t)
- ')
-
- optional_policy(`
-@@ -589,6 +592,7 @@
- # for OpenSSL certificates
- files_read_usr_files(postfix_smtpd_t)
- mta_read_aliases(postfix_smtpd_t)
-+mta_read_config(postfix_smtpd_t)
-
- optional_policy(`
- dovecot_stream_connect_auth(postfix_smtpd_t)
---- services/postfix.fc 2010-08-03 15:11:07.000000000 +0200
-+++ services/postfix.fc 2011-03-13 15:54:11.765000000 +0100
-@@ -16,20 +16,21 @@
- /usr/libexec/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
- /usr/libexec/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
- ', `
--/usr/lib/postfix/.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
--/usr/lib/postfix/cleanup -- gen_context(system_u:object_r:postfix_cleanup_exec_t,s0)
--/usr/lib/postfix/local -- gen_context(system_u:object_r:postfix_local_exec_t,s0)
--/usr/lib/postfix/master -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
--/usr/lib/postfix/pickup -- gen_context(system_u:object_r:postfix_pickup_exec_t,s0)
--/usr/lib/postfix/(n)?qmgr -- gen_context(system_u:object_r:postfix_qmgr_exec_t,s0)
--/usr/lib/postfix/showq -- gen_context(system_u:object_r:postfix_showq_exec_t,s0)
--/usr/lib/postfix/smtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/lmtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/scache -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/smtpd -- gen_context(system_u:object_r:postfix_smtpd_exec_t,s0)
--/usr/lib/postfix/bounce -- gen_context(system_u:object_r:postfix_bounce_exec_t,s0)
--/usr/lib/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
--/usr/lib/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
-+/usr/lib(64)?/postfix/.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
-+/usr/lib(64)?/postfix/cleanup -- gen_context(system_u:object_r:postfix_cleanup_exec_t,s0)
-+/usr/lib(64)?/postfix/local -- gen_context(system_u:object_r:postfix_local_exec_t,s0)
-+/usr/lib(64)?/postfix/master -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
-+/usr/lib(64)?/postfix/pickup -- gen_context(system_u:object_r:postfix_pickup_exec_t,s0)
-+/usr/lib(64)?/postfix/(n)?qmgr -- gen_context(system_u:object_r:postfix_qmgr_exec_t,s0)
-+/usr/lib(64)?/postfix/showq -- gen_context(system_u:object_r:postfix_showq_exec_t,s0)
-+/usr/lib(64)?/postfix/smtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/lmtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/scache -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/smtpd -- gen_context(system_u:object_r:postfix_smtpd_exec_t,s0)
-+/usr/lib(64)?/postfix/bounce -- gen_context(system_u:object_r:postfix_bounce_exec_t,s0)
-+/usr/lib(64)?/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
-+/usr/lib(64)?/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
-+/usr/lib(64)?/postfix/postfix-script.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
- ')
- /etc/postfix/postfix-script.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
- /etc/postfix/prng_exch -- gen_context(system_u:object_r:postfix_prng_t,s0)
-@@ -48,7 +49,7 @@
-
- /var/spool/postfix(/.*)? gen_context(system_u:object_r:postfix_spool_t,s0)
- /var/spool/postfix/maildrop(/.*)? gen_context(system_u:object_r:postfix_spool_maildrop_t,s0)
--/var/spool/postfix/pid/.* gen_context(system_u:object_r:postfix_var_run_t,s0)
-+/var/spool/postfix/pid(/.*)? gen_context(system_u:object_r:postfix_var_run_t,s0)
- /var/spool/postfix/private(/.*)? gen_context(system_u:object_r:postfix_private_t,s0)
- /var/spool/postfix/public(/.*)? gen_context(system_u:object_r:postfix_public_t,s0)
- /var/spool/postfix/bounce(/.*)? gen_context(system_u:object_r:postfix_spool_bounce_t,s0)
+++ /dev/null
---- services/postfix.te 2010-08-03 15:11:07.000000000 +0200
-+++ services/postfix.te 2011-03-19 18:19:42.287000040 +0100
-@@ -93,7 +93,7 @@
- #
-
- # chown is to set the correct ownership of queue dirs
--allow postfix_master_t self:capability { chown dac_override kill setgid setuid net_bind_service sys_tty_config };
-+allow postfix_master_t self:capability { chown dac_override kill setgid setuid net_bind_service sys_tty_config dac_read_search };
- allow postfix_master_t self:fifo_file rw_fifo_file_perms;
- allow postfix_master_t self:tcp_socket create_stream_socket_perms;
- allow postfix_master_t self:udp_socket create_socket_perms;
-@@ -201,6 +201,10 @@
-
- optional_policy(`
- mysql_stream_connect(postfix_master_t)
-+ mysql_stream_connect(postfix_cleanup_t)
-+ mysql_stream_connect(postfix_local_t)
-+ mysql_stream_connect(postfix_virtual_t)
-+ mysql_stream_connect(postfix_smtpd_t)
- ')
-
- optional_policy(`
-@@ -589,6 +593,7 @@
- # for OpenSSL certificates
- files_read_usr_files(postfix_smtpd_t)
- mta_read_aliases(postfix_smtpd_t)
-+mta_read_config(postfix_smtpd_t)
-
- optional_policy(`
- dovecot_stream_connect_auth(postfix_smtpd_t)
---- services/postfix.fc 2010-08-03 15:11:07.000000000 +0200
-+++ services/postfix.fc 2011-03-13 15:54:11.765000000 +0100
-@@ -16,20 +16,21 @@
- /usr/libexec/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
- /usr/libexec/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
- ', `
--/usr/lib/postfix/.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
--/usr/lib/postfix/cleanup -- gen_context(system_u:object_r:postfix_cleanup_exec_t,s0)
--/usr/lib/postfix/local -- gen_context(system_u:object_r:postfix_local_exec_t,s0)
--/usr/lib/postfix/master -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
--/usr/lib/postfix/pickup -- gen_context(system_u:object_r:postfix_pickup_exec_t,s0)
--/usr/lib/postfix/(n)?qmgr -- gen_context(system_u:object_r:postfix_qmgr_exec_t,s0)
--/usr/lib/postfix/showq -- gen_context(system_u:object_r:postfix_showq_exec_t,s0)
--/usr/lib/postfix/smtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/lmtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/scache -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
--/usr/lib/postfix/smtpd -- gen_context(system_u:object_r:postfix_smtpd_exec_t,s0)
--/usr/lib/postfix/bounce -- gen_context(system_u:object_r:postfix_bounce_exec_t,s0)
--/usr/lib/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
--/usr/lib/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
-+/usr/lib(64)?/postfix/.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
-+/usr/lib(64)?/postfix/cleanup -- gen_context(system_u:object_r:postfix_cleanup_exec_t,s0)
-+/usr/lib(64)?/postfix/local -- gen_context(system_u:object_r:postfix_local_exec_t,s0)
-+/usr/lib(64)?/postfix/master -- gen_context(system_u:object_r:postfix_master_exec_t,s0)
-+/usr/lib(64)?/postfix/pickup -- gen_context(system_u:object_r:postfix_pickup_exec_t,s0)
-+/usr/lib(64)?/postfix/(n)?qmgr -- gen_context(system_u:object_r:postfix_qmgr_exec_t,s0)
-+/usr/lib(64)?/postfix/showq -- gen_context(system_u:object_r:postfix_showq_exec_t,s0)
-+/usr/lib(64)?/postfix/smtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/lmtp -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/scache -- gen_context(system_u:object_r:postfix_smtp_exec_t,s0)
-+/usr/lib(64)?/postfix/smtpd -- gen_context(system_u:object_r:postfix_smtpd_exec_t,s0)
-+/usr/lib(64)?/postfix/bounce -- gen_context(system_u:object_r:postfix_bounce_exec_t,s0)
-+/usr/lib(64)?/postfix/pipe -- gen_context(system_u:object_r:postfix_pipe_exec_t,s0)
-+/usr/lib(64)?/postfix/virtual -- gen_context(system_u:object_r:postfix_virtual_exec_t,s0)
-+/usr/lib(64)?/postfix/postfix-script.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
- ')
- /etc/postfix/postfix-script.* -- gen_context(system_u:object_r:postfix_exec_t,s0)
- /etc/postfix/prng_exch -- gen_context(system_u:object_r:postfix_prng_t,s0)
-@@ -48,7 +49,7 @@
-
- /var/spool/postfix(/.*)? gen_context(system_u:object_r:postfix_spool_t,s0)
- /var/spool/postfix/maildrop(/.*)? gen_context(system_u:object_r:postfix_spool_maildrop_t,s0)
--/var/spool/postfix/pid/.* gen_context(system_u:object_r:postfix_var_run_t,s0)
-+/var/spool/postfix/pid(/.*)? gen_context(system_u:object_r:postfix_var_run_t,s0)
- /var/spool/postfix/private(/.*)? gen_context(system_u:object_r:postfix_private_t,s0)
- /var/spool/postfix/public(/.*)? gen_context(system_u:object_r:postfix_public_t,s0)
- /var/spool/postfix/bounce(/.*)? gen_context(system_u:object_r:postfix_spool_bounce_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postfix/selinux-postfix-2.20101213-r3.ebuild,v 1.2 2011/06/02 12:45:20 blueness Exp $
-
-MODS="postfix"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for postfix"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-postfix-r3.patch"
# ChangeLog for sec-policy/selinux-postgresql
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postgresql/ChangeLog,v 1.33 2011/10/23 12:42:53 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postgresql/ChangeLog,v 1.34 2011/11/12 20:53:47 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-postgresql-r1.patch,
+ -selinux-postgresql-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-postgresql-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/postgresql.te 2010-12-13 15:11:02.000000000 +0100
-+++ services/postgresql.te 2011-02-13 14:36:56.000905046 +0100
-@@ -155,7 +155,7 @@
- allow postgresql_t self:tcp_socket create_stream_socket_perms;
- allow postgresql_t self:udp_socket create_stream_socket_perms;
- allow postgresql_t self:unix_dgram_socket create_socket_perms;
--allow postgresql_t self:unix_stream_socket create_stream_socket_perms;
-+allow postgresql_t self:unix_stream_socket { connectto create_stream_socket_perms };
- allow postgresql_t self:netlink_selinux_socket create_socket_perms;
-
- allow postgresql_t sepgsql_database_type:db_database *;
-@@ -269,7 +269,8 @@
-
- userdom_dontaudit_use_unpriv_user_fds(postgresql_t)
- userdom_dontaudit_search_user_home_dirs(postgresql_t)
--userdom_dontaudit_use_user_terminals(postgresql_t)
-+userdom_use_user_terminals(postgresql_t)
-+#userdom_dontaudit_use_user_terminals(postgresql_t)
-
- mta_getattr_spool(postgresql_t)
-
---- services/postgresql.fc 2010-08-03 15:11:07.000000000 +0200
-+++ services/postgresql.fc 2011-02-13 13:40:48.798905046 +0100
-@@ -5,6 +5,10 @@
- /etc/rc\.d/init\.d/(se)?postgresql -- gen_context(system_u:object_r:postgresql_initrc_exec_t,s0)
- /etc/sysconfig/pgsql(/.*)? gen_context(system_u:object_r:postgresql_etc_t,s0)
-
-+ifdef(`distro_gentoo', `
-+/etc/postgresql-.*(/.*)? gen_context(system_u:object_r:postgresql_etc_t,s0)
-+')
-+
- #
- # /usr
- #
-@@ -23,6 +27,10 @@
- /usr/share/jonas/pgsql(/.*)? gen_context(system_u:object_r:postgresql_db_t,s0)
- ')
-
-+ifdef(`distro_gentoo', `
-+/usr/lib(64)?/postgresql-.*/bin/.* -- gen_context(system_u:object_r:postgresql_exec_t,s0)
-+')
-+
- #
- # /var
- #
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postgresql/selinux-postgresql-2.20101213-r1.ebuild,v 1.2 2011/06/02 12:45:42 blueness Exp $
-
-MODS="postgresql"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for PostgreSQL"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-postgresql-r1.patch"
# ChangeLog for sec-policy/selinux-postgrey
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postgrey/ChangeLog,v 1.4 2011/10/23 12:42:45 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postgrey/ChangeLog,v 1.5 2011/11/12 20:52:56 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-postgrey-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-postgrey-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-postgrey/selinux-postgrey-2.20101213.ebuild,v 1.2 2011/06/02 12:46:02 blueness Exp $
-
-IUSE=""
-
-MODS="postgrey"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ppp
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ppp/ChangeLog,v 1.14 2011/10/23 12:42:56 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ppp/ChangeLog,v 1.15 2011/11/12 20:53:16 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ppp-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ppp-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ppp/selinux-ppp-2.20101213.ebuild,v 1.2 2011/06/02 12:46:22 blueness Exp $
-
-MODS="ppp"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for ppp"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-prelink
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-prelink/ChangeLog,v 1.4 2011/10/23 12:42:43 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-prelink/ChangeLog,v 1.5 2011/11/12 20:52:50 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-prelink-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-prelink-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-prelink/selinux-prelink-2.20101213.ebuild,v 1.2 2011/06/02 12:46:43 blueness Exp $
-
-IUSE=""
-
-MODS="prelink"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-prelude
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-prelude/ChangeLog,v 1.4 2011/10/23 12:42:57 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-prelude/ChangeLog,v 1.5 2011/11/12 20:53:22 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-prelude-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-prelude-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-prelude/selinux-prelude-2.20101213.ebuild,v 1.2 2011/06/02 12:47:04 blueness Exp $
-
-IUSE=""
-
-MODS="prelude"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-privoxy
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-privoxy/ChangeLog,v 1.21 2011/10/23 12:42:57 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-privoxy/ChangeLog,v 1.22 2011/11/12 20:52:57 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-privoxy-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-privoxy-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-privoxy/selinux-privoxy-2.20101213.ebuild,v 1.2 2011/06/02 12:47:26 blueness Exp $
-
-MODS="privoxy"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for privoxy"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-procmail
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-procmail/ChangeLog,v 1.29 2011/10/23 12:42:51 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-procmail/ChangeLog,v 1.30 2011/11/12 20:53:27 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-procmail-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-procmail-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-procmail/selinux-procmail-2.20101213.ebuild,v 1.2 2011/06/02 12:47:47 blueness Exp $
-
-MODS="procmail"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for procmail"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-psad
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-psad/ChangeLog,v 1.4 2011/10/23 12:42:42 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-psad/ChangeLog,v 1.5 2011/11/12 20:52:47 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-psad-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-psad-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-psad/selinux-psad-2.20101213.ebuild,v 1.2 2011/06/02 12:48:07 blueness Exp $
-
-IUSE=""
-
-MODS="psad"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-publicfile
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-publicfile/ChangeLog,v 1.27 2011/10/23 12:43:00 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-publicfile/ChangeLog,v 1.28 2011/11/12 20:52:58 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-publicfile-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-publicfile-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-publicfile/selinux-publicfile-2.20101213.ebuild,v 1.2 2011/06/02 12:48:28 blueness Exp $
-
-MODS="publicfile"
-IUSE=""
-
-inherit selinux-policy-2
-
-RDEPEND="sec-policy/selinux-ucspi-tcp"
-
-DESCRIPTION="SELinux policy for publicfile"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-pulseaudio
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pulseaudio/ChangeLog,v 1.4 2011/10/23 12:42:41 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pulseaudio/ChangeLog,v 1.5 2011/11/12 20:53:00 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-pulseaudio-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-pulseaudio-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pulseaudio/selinux-pulseaudio-2.20101213.ebuild,v 1.2 2011/06/02 12:48:49 blueness Exp $
-
-IUSE=""
-
-MODS="pulseaudio"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-puppet
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-puppet/ChangeLog,v 1.6 2011/10/23 12:43:01 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-puppet/ChangeLog,v 1.7 2011/11/12 20:52:54 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-puppet-r1.patch,
+ -files/fix-services-puppet-r2.patch, -files/fix-services-puppet-r3.patch,
+ -selinux-puppet-2.20101213.ebuild, -selinux-puppet-2.20101213-r1.ebuild,
+ -selinux-puppet-2.20101213-r2.ebuild, -selinux-puppet-2.20101213-r3.ebuild,
+ -selinux-puppet-2.20110726-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-puppet-2.20110726-r2.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/puppet.te 2010-08-03 15:11:07.000000000 +0200
-+++ services/puppet.te 2011-07-11 22:40:28.700001278 +0200
-@@ -17,6 +17,9 @@
- type puppet_exec_t;
- init_daemon_domain(puppet_t, puppet_exec_t)
-
-+type puppet_initrc_notrans_t;
-+role system_r types puppet_initrc_notrans_t;
-+
- type puppet_etc_t;
- files_config_file(puppet_etc_t)
-
-@@ -77,7 +80,9 @@
- files_tmp_filetrans(puppet_t, puppet_tmp_t, { file dir })
-
- kernel_dontaudit_search_sysctl(puppet_t)
--kernel_dontaudit_search_kernel_sysctl(puppet_t)
-+#kernel_dontaudit_search_kernel_sysctl(puppet_t)
-+kernel_read_kernel_sysctls(puppet_t)
-+kernel_read_network_state(puppet_t)
- kernel_read_system_state(puppet_t)
- kernel_read_crypto_sysctls(puppet_t)
-
-@@ -115,6 +120,9 @@
- term_dontaudit_getattr_unallocated_ttys(puppet_t)
- term_dontaudit_getattr_all_ttys(puppet_t)
-
-+
-+## system modules
-+
- init_all_labeled_script_domtrans(puppet_t)
- init_domtrans_script(puppet_t)
- init_read_utmp(puppet_t)
-@@ -125,12 +133,26 @@
- miscfiles_read_hwdata(puppet_t)
- miscfiles_read_localization(puppet_t)
-
-+mount_domtrans(puppet_t)
-+
- seutil_domtrans_setfiles(puppet_t)
- seutil_domtrans_semanage(puppet_t)
-
- sysnet_dns_name_resolve(puppet_t)
- sysnet_run_ifconfig(puppet_t, system_r)
-
-+## Other modules
-+
-+
-+usermanage_domtrans_passwd(puppet_t)
-+
-+tunable_policy(`gentoo_try_dontaudit',`
-+ dontaudit puppet_t self:capability dac_read_search;
-+ kernel_dontaudit_read_system_state(puppet_initrc_notrans_t)
-+ userdom_dontaudit_use_user_terminals(puppet_t)
-+')
-+
-+
- tunable_policy(`puppet_manage_all_files',`
- auth_manage_all_files_except_shadow(puppet_t)
- ')
-@@ -144,6 +166,16 @@
- ')
-
- optional_policy(`
-+ mta_send_mail(puppet_t)
-+')
-+
-+optional_policy(`
-+ gentoo_init_initrc_notrans(puppet_initrc_notrans_t, puppet_t)
-+ portage_domtrans(puppet_t)
-+ puppet_rw_tmp(puppet_initrc_notrans_t)
-+')
-+
-+optional_policy(`
- files_rw_var_files(puppet_t)
-
- rpm_domtrans(puppet_t)
---- services/puppet.fc 2010-08-03 15:11:07.000000000 +0200
-+++ services/puppet.fc 2011-07-11 14:06:20.907000356 +0200
-@@ -3,7 +3,9 @@
- /etc/rc\.d/init\.d/puppet -- gen_context(system_u:object_r:puppet_initrc_exec_t,s0)
- /etc/rc\.d/init\.d/puppetmaster -- gen_context(system_u:object_r:puppetmaster_initrc_exec_t,s0)
-
-+/usr/bin/puppetd -- gen_context(system_u:object_r:puppet_exec_t,s0)
- /usr/sbin/puppetd -- gen_context(system_u:object_r:puppet_exec_t,s0)
-+/usr/bin/puppetmasterd -- gen_context(system_u:object_r:puppetmaster_exec_t,s0)
- /usr/sbin/puppetmasterd -- gen_context(system_u:object_r:puppetmaster_exec_t,s0)
-
- /var/lib/puppet(/.*)? gen_context(system_u:object_r:puppet_var_lib_t,s0)
+++ /dev/null
---- services/puppet.te 2010-08-03 15:11:07.000000000 +0200
-+++ services/puppet.te 2011-07-21 11:15:55.552000371 +0200
-@@ -17,6 +17,9 @@
- type puppet_exec_t;
- init_daemon_domain(puppet_t, puppet_exec_t)
-
-+#type puppet_initrc_notrans_t;
-+#role system_r types puppet_initrc_notrans_t;
-+
- type puppet_etc_t;
- files_config_file(puppet_etc_t)
-
-@@ -50,7 +53,7 @@
- # Puppet personal policy
- #
-
--allow puppet_t self:capability { fowner fsetid setuid setgid dac_override sys_nice sys_ptrace sys_tty_config };
-+allow puppet_t self:capability { fowner fsetid setuid setgid dac_override sys_nice sys_ptrace sys_tty_config chown };
- allow puppet_t self:process { signal signull getsched setsched };
- allow puppet_t self:fifo_file rw_fifo_file_perms;
- allow puppet_t self:netlink_route_socket create_netlink_socket_perms;
-@@ -77,7 +80,9 @@
- files_tmp_filetrans(puppet_t, puppet_tmp_t, { file dir })
-
- kernel_dontaudit_search_sysctl(puppet_t)
--kernel_dontaudit_search_kernel_sysctl(puppet_t)
-+#kernel_dontaudit_search_kernel_sysctl(puppet_t)
-+kernel_read_kernel_sysctls(puppet_t)
-+kernel_read_network_state(puppet_t)
- kernel_read_system_state(puppet_t)
- kernel_read_crypto_sysctls(puppet_t)
-
-@@ -115,6 +120,9 @@
- term_dontaudit_getattr_unallocated_ttys(puppet_t)
- term_dontaudit_getattr_all_ttys(puppet_t)
-
-+
-+## system modules
-+
- init_all_labeled_script_domtrans(puppet_t)
- init_domtrans_script(puppet_t)
- init_read_utmp(puppet_t)
-@@ -125,12 +133,26 @@
- miscfiles_read_hwdata(puppet_t)
- miscfiles_read_localization(puppet_t)
-
-+mount_domtrans(puppet_t)
-+
- seutil_domtrans_setfiles(puppet_t)
- seutil_domtrans_semanage(puppet_t)
-
- sysnet_dns_name_resolve(puppet_t)
- sysnet_run_ifconfig(puppet_t, system_r)
-
-+## Other modules
-+
-+
-+usermanage_domtrans_passwd(puppet_t)
-+
-+tunable_policy(`gentoo_try_dontaudit',`
-+ dontaudit puppet_t self:capability dac_read_search;
-+ #kernel_dontaudit_read_system_state(puppet_initrc_notrans_t)
-+ userdom_dontaudit_use_user_terminals(puppet_t)
-+')
-+
-+
- tunable_policy(`puppet_manage_all_files',`
- auth_manage_all_files_except_shadow(puppet_t)
- ')
-@@ -144,6 +166,15 @@
- ')
-
- optional_policy(`
-+ mta_send_mail(puppet_t)
-+')
-+
-+optional_policy(`
-+ gentoo_init_rc_exec(puppet_t)
-+ portage_domtrans(puppet_t)
-+')
-+
-+optional_policy(`
- files_rw_var_files(puppet_t)
-
- rpm_domtrans(puppet_t)
---- services/puppet.fc 2010-08-03 15:11:07.000000000 +0200
-+++ services/puppet.fc 2011-07-21 10:08:43.240000256 +0200
-@@ -3,7 +3,9 @@
- /etc/rc\.d/init\.d/puppet -- gen_context(system_u:object_r:puppet_initrc_exec_t,s0)
- /etc/rc\.d/init\.d/puppetmaster -- gen_context(system_u:object_r:puppetmaster_initrc_exec_t,s0)
-
-+/usr/bin/puppetd -- gen_context(system_u:object_r:puppet_exec_t,s0)
- /usr/sbin/puppetd -- gen_context(system_u:object_r:puppet_exec_t,s0)
-+/usr/bin/puppetmasterd -- gen_context(system_u:object_r:puppetmaster_exec_t,s0)
- /usr/sbin/puppetmasterd -- gen_context(system_u:object_r:puppetmaster_exec_t,s0)
-
- /var/lib/puppet(/.*)? gen_context(system_u:object_r:puppet_var_lib_t,s0)
+++ /dev/null
---- services/puppet.te 2010-08-03 15:11:07.000000000 +0200
-+++ services/puppet.te 2011-07-24 10:34:00.622000087 +0200
-@@ -17,6 +17,9 @@
- type puppet_exec_t;
- init_daemon_domain(puppet_t, puppet_exec_t)
-
-+#type puppet_initrc_notrans_t;
-+#role system_r types puppet_initrc_notrans_t;
-+
- type puppet_etc_t;
- files_config_file(puppet_etc_t)
-
-@@ -50,7 +53,7 @@
- # Puppet personal policy
- #
-
--allow puppet_t self:capability { fowner fsetid setuid setgid dac_override sys_nice sys_ptrace sys_tty_config };
-+allow puppet_t self:capability { fowner fsetid setuid setgid dac_override sys_nice sys_ptrace sys_tty_config chown };
- allow puppet_t self:process { signal signull getsched setsched };
- allow puppet_t self:fifo_file rw_fifo_file_perms;
- allow puppet_t self:netlink_route_socket create_netlink_socket_perms;
-@@ -77,7 +80,9 @@
- files_tmp_filetrans(puppet_t, puppet_tmp_t, { file dir })
-
- kernel_dontaudit_search_sysctl(puppet_t)
--kernel_dontaudit_search_kernel_sysctl(puppet_t)
-+#kernel_dontaudit_search_kernel_sysctl(puppet_t)
-+kernel_read_kernel_sysctls(puppet_t)
-+kernel_read_network_state(puppet_t)
- kernel_read_system_state(puppet_t)
- kernel_read_crypto_sysctls(puppet_t)
-
-@@ -115,6 +120,9 @@
- term_dontaudit_getattr_unallocated_ttys(puppet_t)
- term_dontaudit_getattr_all_ttys(puppet_t)
-
-+
-+## system modules
-+
- init_all_labeled_script_domtrans(puppet_t)
- init_domtrans_script(puppet_t)
- init_read_utmp(puppet_t)
-@@ -125,12 +133,26 @@
- miscfiles_read_hwdata(puppet_t)
- miscfiles_read_localization(puppet_t)
-
-+mount_domtrans(puppet_t)
-+
- seutil_domtrans_setfiles(puppet_t)
- seutil_domtrans_semanage(puppet_t)
-
- sysnet_dns_name_resolve(puppet_t)
- sysnet_run_ifconfig(puppet_t, system_r)
-
-+## Other modules
-+
-+
-+usermanage_domtrans_passwd(puppet_t)
-+
-+tunable_policy(`gentoo_try_dontaudit',`
-+ dontaudit puppet_t self:capability dac_read_search;
-+ #kernel_dontaudit_read_system_state(puppet_initrc_notrans_t)
-+ userdom_dontaudit_use_user_terminals(puppet_t)
-+')
-+
-+
- tunable_policy(`puppet_manage_all_files',`
- auth_manage_all_files_except_shadow(puppet_t)
- ')
-@@ -144,6 +166,15 @@
- ')
-
- optional_policy(`
-+ mta_send_mail(puppet_t)
-+')
-+
-+optional_policy(`
-+ gentoo_init_rc_exec(puppet_t)
-+ portage_run(puppet_t, system_r)
-+')
-+
-+optional_policy(`
- files_rw_var_files(puppet_t)
-
- rpm_domtrans(puppet_t)
---- services/puppet.fc 2010-08-03 15:11:07.000000000 +0200
-+++ services/puppet.fc 2011-07-21 10:08:43.240000256 +0200
-@@ -3,7 +3,9 @@
- /etc/rc\.d/init\.d/puppet -- gen_context(system_u:object_r:puppet_initrc_exec_t,s0)
- /etc/rc\.d/init\.d/puppetmaster -- gen_context(system_u:object_r:puppetmaster_initrc_exec_t,s0)
-
-+/usr/bin/puppetd -- gen_context(system_u:object_r:puppet_exec_t,s0)
- /usr/sbin/puppetd -- gen_context(system_u:object_r:puppet_exec_t,s0)
-+/usr/bin/puppetmasterd -- gen_context(system_u:object_r:puppetmaster_exec_t,s0)
- /usr/sbin/puppetmasterd -- gen_context(system_u:object_r:puppetmaster_exec_t,s0)
-
- /var/lib/puppet(/.*)? gen_context(system_u:object_r:puppet_var_lib_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-puppet/selinux-puppet-2.20101213-r1.ebuild,v 1.1 2011/07/25 23:14:24 blueness Exp $
-
-IUSE=""
-
-MODS="puppet"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-DEPEND=">=sec-policy/selinux-base-policy-2.20101213-r19"
-RDEPEND="${DEPEND}"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-puppet-r1.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-puppet/selinux-puppet-2.20101213-r2.ebuild,v 1.1 2011/07/25 23:14:24 blueness Exp $
-
-IUSE=""
-
-MODS="puppet"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-DEPEND=">=sec-policy/selinux-base-policy-2.20101213-r20"
-RDEPEND="${DEPEND}"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-puppet-r2.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-puppet/selinux-puppet-2.20101213-r3.ebuild,v 1.1 2011/07/25 23:14:24 blueness Exp $
-
-IUSE=""
-
-MODS="puppet"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-DEPEND=">=sec-policy/selinux-base-policy-2.20101213-r20"
-RDEPEND="${DEPEND}"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-puppet-r3.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-puppet/selinux-puppet-2.20101213.ebuild,v 1.2 2011/06/02 12:49:09 blueness Exp $
-
-IUSE=""
-
-MODS="puppet"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-puppet/selinux-puppet-2.20110726-r1.ebuild,v 1.1 2011/08/28 21:13:11 swift Exp $
-EAPI="4"
-
-IUSE=""
-MODS="puppet"
-BASEPOL="2.20110726-r2"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for puppet"
-KEYWORDS="~amd64 ~x86"
# ChangeLog for sec-policy/selinux-pyicqt
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pyicqt/ChangeLog,v 1.4 2011/10/23 12:42:28 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pyicqt/ChangeLog,v 1.5 2011/11/12 20:52:49 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-pyicqt-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-pyicqt-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pyicqt/selinux-pyicqt-2.20101213.ebuild,v 1.2 2011/06/02 12:49:30 blueness Exp $
-
-IUSE=""
-
-MODS="pyicqt"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-pyzor
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pyzor/ChangeLog,v 1.13 2011/10/23 12:42:33 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pyzor/ChangeLog,v 1.14 2011/11/12 20:53:15 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-pyzor-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-pyzor-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-pyzor/selinux-pyzor-2.20101213.ebuild,v 1.2 2011/06/02 12:49:51 blueness Exp $
-
-MODS="pyzor"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for pyzor"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-qemu
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-qemu/ChangeLog,v 1.4 2011/10/23 12:42:29 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-qemu/ChangeLog,v 1.5 2011/11/12 20:53:45 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-qemu-2.20101213.ebuild,
+ -files/fix-apps-qemu.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-qemu-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/qemu.te 2010-12-13 15:11:01.000000000 +0100
-+++ apps/qemu.te 2011-01-22 21:35:19.555999967 +0100
-@@ -56,6 +56,10 @@
- userdom_search_user_home_content(qemu_t)
- userdom_read_user_tmpfs_files(qemu_t)
-
-+allow qemu_t self:socket create_socket_perms;
-+
-+kernel_request_load_module(qemu_t)
-+
- tunable_policy(`qemu_full_network',`
- allow qemu_t self:udp_socket create_socket_perms;
-
-@@ -116,3 +120,7 @@
- allow unconfined_qemu_t self:process { execstack execmem };
- allow unconfined_qemu_t qemu_exec_t:file execmod;
- ')
-+
-+optional_policy(`
-+ vde_connect(qemu_t)
-+')
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-qemu/selinux-qemu-2.20101213.ebuild,v 1.2 2011/06/02 12:50:12 blueness Exp $
-
-IUSE=""
-
-MODS="qemu"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-POLICY_PATCH="${FILESDIR}/fix-apps-qemu.patch"
# ChangeLog for sec-policy/selinux-qmail
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-qmail/ChangeLog,v 1.28 2011/10/23 12:42:35 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-qmail/ChangeLog,v 1.29 2011/11/12 20:52:57 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-qmail-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-qmail-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-qmail/selinux-qmail-2.20101213.ebuild,v 1.2 2011/06/02 12:50:34 blueness Exp $
-
-MODS="qmail"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for qmail"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-quota
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-quota/ChangeLog,v 1.4 2011/10/23 12:43:00 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-quota/ChangeLog,v 1.5 2011/11/12 20:52:48 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-quota-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-quota-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-quota/selinux-quota-2.20101213.ebuild,v 1.2 2011/06/02 12:50:54 blueness Exp $
-
-IUSE=""
-
-MODS="quota"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-radius
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-radius/ChangeLog,v 1.4 2011/10/23 12:42:46 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-radius/ChangeLog,v 1.5 2011/11/12 20:53:06 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-radius-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-radius-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-radius/selinux-radius-2.20101213.ebuild,v 1.2 2011/06/02 12:51:14 blueness Exp $
-
-IUSE=""
-
-MODS="radius"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-radvd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-radvd/ChangeLog,v 1.4 2011/10/23 12:42:33 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-radvd/ChangeLog,v 1.5 2011/11/12 20:53:16 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-radvd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-radvd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-radvd/selinux-radvd-2.20101213.ebuild,v 1.2 2011/06/02 12:51:35 blueness Exp $
-
-IUSE=""
-
-MODS="radvd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-razor
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-razor/ChangeLog,v 1.13 2011/10/23 12:42:57 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-razor/ChangeLog,v 1.14 2011/11/12 20:53:49 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-razor-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-razor-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-razor/selinux-razor-2.20101213.ebuild,v 1.2 2011/06/02 12:51:56 blueness Exp $
-
-MODS="razor"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for razor"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-rgmanager
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rgmanager/ChangeLog,v 1.4 2011/10/23 12:42:41 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rgmanager/ChangeLog,v 1.5 2011/11/12 20:53:47 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-rgmanager-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-rgmanager-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rgmanager/selinux-rgmanager-2.20101213.ebuild,v 1.2 2011/06/02 12:52:17 blueness Exp $
-
-IUSE=""
-
-MODS="rgmanager"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-roundup
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-roundup/ChangeLog,v 1.4 2011/10/23 12:43:01 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-roundup/ChangeLog,v 1.5 2011/11/12 20:53:44 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-roundup-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-roundup-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-roundup/selinux-roundup-2.20101213.ebuild,v 1.2 2011/06/02 12:52:38 blueness Exp $
-
-IUSE=""
-
-MODS="roundup"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-rpc
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rpc/ChangeLog,v 1.5 2011/10/23 12:42:55 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rpc/ChangeLog,v 1.6 2011/11/12 20:53:03 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-rpc-r1.patch,
+ -selinux-rpc-2.20101213.ebuild, -selinux-rpc-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-rpc-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/rpc.te 2010-09-10 17:05:45.000000000 +0200
-+++ services/rpc.te 2011-07-04 19:06:36.644003547 +0200
-@@ -61,6 +61,7 @@
- allow rpcd_t self:capability { sys_admin chown dac_override setgid setuid };
- allow rpcd_t self:process { getcap setcap };
- allow rpcd_t self:fifo_file rw_fifo_file_perms;
-+allow rpcd_t self:udp_socket { listen };
-
- allow rpcd_t rpcd_var_run_t:dir setattr;
- manage_files_pattern(rpcd_t, rpcd_var_run_t, rpcd_var_run_t)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rpc/selinux-rpc-2.20101213-r1.ebuild,v 1.1 2011/07/10 02:39:01 blueness Exp $
-
-IUSE=""
-
-MODS="rpc"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="~amd64 ~x86"
-POLICY_PATCH="${FILESDIR}/fix-services-rpc-r1.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rpc/selinux-rpc-2.20101213.ebuild,v 1.2 2011/06/02 12:52:59 blueness Exp $
-
-IUSE=""
-
-MODS="rpc"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-rpcbind
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rpcbind/ChangeLog,v 1.4 2011/10/23 12:42:30 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rpcbind/ChangeLog,v 1.5 2011/11/12 20:53:01 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-rpcbind-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-rpcbind-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rpcbind/selinux-rpcbind-2.20101213.ebuild,v 1.2 2011/06/02 12:53:20 blueness Exp $
-
-IUSE=""
-
-MODS="rpcbind"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-rssh
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rssh/ChangeLog,v 1.4 2011/10/23 12:42:41 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rssh/ChangeLog,v 1.5 2011/11/12 20:52:52 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-rssh-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-rssh-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rssh/selinux-rssh-2.20101213.ebuild,v 1.2 2011/06/02 12:53:41 blueness Exp $
-
-IUSE=""
-
-MODS="rssh"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-rtkit
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rtkit/ChangeLog,v 1.4 2011/10/23 12:42:46 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rtkit/ChangeLog,v 1.5 2011/11/12 20:53:27 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-rtkit-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-rtkit-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-rtkit/selinux-rtkit-2.20101213.ebuild,v 1.2 2011/06/02 12:54:02 blueness Exp $
-
-IUSE=""
-
-MODS="rtkit"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-samba
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-samba/ChangeLog,v 1.28 2011/10/23 12:43:03 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-samba/ChangeLog,v 1.29 2011/11/12 20:53:40 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-samba-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-samba-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-samba/selinux-samba-2.20101213.ebuild,v 1.2 2011/06/02 12:54:23 blueness Exp $
-
-MODS="samba"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for samba"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-sasl
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sasl/ChangeLog,v 1.4 2011/10/23 12:42:45 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sasl/ChangeLog,v 1.5 2011/11/12 20:53:20 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-sasl-r1.patch,
+ -selinux-sasl-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-sasl-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/sasl.fc 2010-08-03 15:11:08.000000000 +0200
-+++ services/sasl.fc 2011-03-03 17:11:02.896999997 +0100
-@@ -9,3 +9,6 @@
- # /var
- #
- /var/run/saslauthd(/.*)? gen_context(system_u:object_r:saslauthd_var_run_t,s0)
-+ifdef(`distro_gentoo',`
-+/var/lib/sasl2(/.*)? gen_context(system_u:object_r:saslauthd_var_run_t,s0)
-+')
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sasl/selinux-sasl-2.20101213-r1.ebuild,v 1.2 2011/06/02 12:54:44 blueness Exp $
-
-MODS="sasl"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for sasl"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-sasl-r1.patch"
# ChangeLog for sec-policy/selinux-screen
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-screen/ChangeLog,v 1.22 2011/10/23 12:42:38 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-screen/ChangeLog,v 1.23 2011/11/12 20:53:10 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-screen-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-screen-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-screen/selinux-screen-2.20101213.ebuild,v 1.2 2011/06/02 12:55:06 blueness Exp $
-
-MODS="screen"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for GNU Screen"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-sendmail
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sendmail/ChangeLog,v 1.4 2011/10/23 12:42:56 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sendmail/ChangeLog,v 1.5 2011/11/12 20:53:10 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-sendmail-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-sendmail-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sendmail/selinux-sendmail-2.20101213.ebuild,v 1.2 2011/06/02 12:55:26 blueness Exp $
-
-IUSE=""
-
-MODS="sendmail"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-shorewall
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-shorewall/ChangeLog,v 1.4 2011/10/23 12:42:42 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-shorewall/ChangeLog,v 1.5 2011/11/12 20:53:49 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-shorewall-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-shorewall-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-shorewall/selinux-shorewall-2.20101213.ebuild,v 1.2 2011/06/02 12:55:47 blueness Exp $
-
-IUSE=""
-
-MODS="shorewall"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-shutdown
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-shutdown/ChangeLog,v 1.4 2011/10/23 12:42:45 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-shutdown/ChangeLog,v 1.5 2011/11/12 20:53:00 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-shutdown-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-shutdown-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-shutdown/selinux-shutdown-2.20101213.ebuild,v 1.2 2011/06/02 12:56:08 blueness Exp $
-
-IUSE=""
-
-MODS="shutdown"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-skype
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-skype/ChangeLog,v 1.7 2011/10/23 12:42:40 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-skype/ChangeLog,v 1.8 2011/11/12 20:52:57 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-skype-2.20101213-r2.ebuild,
+ -selinux-skype-2.20101213-r3.ebuild, -files/add-apps-skype.patch,
+ -files/add-apps-skype-r2.patch, -files/add-skype.patch,
+ -files/fix-apps-skype-r3.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-skype-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/skype.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/skype.te 2011-01-30 16:17:19.481000177 +0100
-@@ -0,0 +1,97 @@
-+policy_module(skype, 0.0.2)
-+
-+############################
-+#
-+# Declarations
-+#
-+
-+type skype_t;
-+type skype_exec_t;
-+application_domain(skype_t, skype_exec_t)
-+
-+type skype_home_t;
-+
-+type skype_tmpfs_t;
-+files_tmpfs_file(skype_tmpfs_t)
-+ubac_constrained(skype_tmpfs_t)
-+
-+############################
-+#
-+# Policy
-+#
-+
-+allow skype_t self:process { getsched setsched execmem };
-+allow skype_t self:fifo_file rw_fifo_file_perms;
-+allow skype_t self:unix_stream_socket create_socket_perms;
-+allow skype_t self:sem create_sem_perms;
-+allow skype_t self:tcp_socket create_stream_socket_perms;
-+
-+
-+manage_dirs_pattern(skype_t, skype_home_t, skype_home_t)
-+manage_files_pattern(skype_t, skype_home_t, skype_home_t)
-+manage_lnk_files_pattern(skype_t, skype_home_t, skype_home_t)
-+userdom_user_home_dir_filetrans(skype_t, skype_home_t, dir)
-+userdom_user_home_content(skype_home_t)
-+
-+manage_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_lnk_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_fifo_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_sock_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+fs_tmpfs_filetrans(skype_t, skype_tmpfs_t, { file lnk_file sock_file fifo_file })
-+
-+
-+kernel_read_system_state(skype_t)
-+
-+can_exec(skype_t, skype_exec_t)
-+corecmd_exec_bin(skype_t)
-+corecmd_exec_shell(skype_t)
-+corenet_all_recvfrom_netlabel(skype_t)
-+corenet_all_recvfrom_unlabeled(skype_t)
-+corenet_tcp_bind_generic_node(skype_t)
-+corenet_udp_bind_generic_node(skype_t)
-+corenet_tcp_bind_generic_port(skype_t)
-+corenet_udp_bind_generic_port(skype_t)
-+corenet_tcp_connect_generic_port(skype_t)
-+corenet_tcp_connect_http_port(skype_t)
-+corenet_tcp_sendrecv_http_port(skype_t)
-+corenet_sendrecv_http_client_packets(skype_t)
-+dev_read_sound(skype_t)
-+dev_read_video_dev(skype_t)
-+dev_write_sound(skype_t)
-+dev_write_video_dev(skype_t)
-+files_read_etc_files(skype_t)
-+files_read_usr_files(skype_t)
-+
-+
-+auth_use_nsswitch(skype_t)
-+domain_use_interactive_fds(skype_t)
-+libs_use_ld_so(skype_t)
-+miscfiles_dontaudit_setattr_fonts_dirs(skype_t)
-+miscfiles_read_localization(skype_t)
-+userdom_manage_user_home_content_dirs(skype_t)
-+userdom_manage_user_home_content_files(skype_t)
-+userdom_use_user_terminals(skype_t)
-+
-+
-+xserver_user_x_domain_template(skype, skype_t, skype_tmpfs_t)
-+
-+tunable_policy(`gentoo_try_dontaudit',`
-+ dev_dontaudit_search_sysfs(skype_t)
-+ fs_dontaudit_getattr_xattr_fs(skype_t)
-+')
-+
-+optional_policy(`
-+ tunable_policy(`gentoo_try_dontaudit',`
-+ mozilla_dontaudit_manage_user_home_files(skype_t)
-+ ')
-+')
-+
-+optional_policy(`
-+ alsa_read_rw_config(skype_t)
-+')
-+
-+optional_policy(`
-+ dbus_system_bus_client(skype_t)
-+ dbus_session_bus_client(skype_t)
-+')
-+
---- apps/skype.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/skype.fc 2011-01-09 21:27:25.364999962 +0100
-@@ -0,0 +1,3 @@
-+/usr/bin/skype -- gen_context(system_u:object_r:skype_exec_t,s0)
-+/opt/skype/skype -- gen_context(system_u:object_r:skype_exec_t,s0)
-+HOME_DIR/\.Skype(/.*)? gen_context(system_u:object_r:skype_home_t,s0)
+++ /dev/null
---- apps/skype.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/skype.te 2011-01-22 14:21:31.257000064 +0100
-@@ -0,0 +1,93 @@
-+policy_module(skype, 1.0.1)
-+
-+############################
-+#
-+# Declarations
-+#
-+
-+type skype_t;
-+type skype_exec_t;
-+application_domain(skype_t, skype_exec_t)
-+
-+type skype_home_t;
-+userdom_user_home_content(skype_home_t)
-+
-+type skype_tmpfs_t;
-+files_tmpfs_file(skype_tmpfs_t)
-+ubac_constrained(skype_tmpfs_t)
-+
-+############################
-+#
-+# Policy
-+#
-+
-+allow skype_t self:process { getsched setsched };
-+allow skype_t self:fifo_file rw_fifo_file_perms;
-+allow skype_t self:unix_stream_socket create_socket_perms;
-+allow skype_t self:sem create_sem_perms;
-+
-+manage_dirs_pattern(skype_t, skype_home_t, skype_home_t)
-+manage_files_pattern(skype_t, skype_home_t, skype_home_t)
-+manage_lnk_files_pattern(skype_t, skype_home_t, skype_home_t)
-+userdom_user_home_dir_filetrans(skype_t, skype_home_t, dir)
-+
-+userdom_manage_user_home_content_dirs(skype_t)
-+userdom_manage_user_home_content_files(skype_t)
-+
-+manage_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_lnk_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_fifo_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_sock_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+fs_tmpfs_filetrans(skype_t, skype_tmpfs_t, { file lnk_file sock_file fifo_file })
-+
-+can_exec(skype_t, skype_exec_t)
-+
-+kernel_read_system_state(skype_t)
-+
-+corecmd_exec_bin(skype_t)
-+corecmd_exec_shell(skype_t)
-+
-+corenet_all_recvfrom_netlabel(skype_t)
-+corenet_all_recvfrom_unlabeled(skype_t)
-+corenet_tcp_bind_generic_node(skype_t)
-+corenet_udp_bind_generic_node(skype_t)
-+corenet_tcp_bind_generic_port(skype_t)
-+corenet_udp_bind_generic_port(skype_t)
-+corenet_tcp_connect_generic_port(skype_t)
-+corenet_tcp_connect_http_port(skype_t)
-+corenet_tcp_sendrecv_http_port(skype_t)
-+corenet_sendrecv_http_client_packets(skype_t)
-+allow skype_t self:tcp_socket create_stream_socket_perms;
-+
-+dev_read_video_dev(skype_t)
-+dev_write_video_dev(skype_t)
-+dev_read_sound(skype_t)
-+dev_write_sound(skype_t)
-+
-+domain_use_interactive_fds(skype_t)
-+
-+files_read_etc_files(skype_t)
-+files_read_usr_files(skype_t)
-+
-+auth_use_nsswitch(skype_t)
-+
-+libs_use_ld_so(skype_t)
-+
-+miscfiles_read_localization(skype_t)
-+miscfiles_dontaudit_setattr_fonts_dirs(skype_t)
-+
-+userdom_use_user_terminals(skype_t)
-+
-+xserver_user_x_domain_template(skype, skype_t, skype_tmpfs_t)
-+
-+allow skype_t self:process { execmem };
-+
-+optional_policy(`
-+ alsa_read_rw_config(skype_t)
-+')
-+
-+optional_policy(`
-+ dbus_system_bus_client(skype_t)
-+ dbus_session_bus_client(skype_t)
-+')
-+
---- apps/skype.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/skype.fc 2011-01-09 21:27:25.364999962 +0100
-@@ -0,0 +1,3 @@
-+/usr/bin/skype -- gen_context(system_u:object_r:skype_exec_t,s0)
-+/opt/skype/skype -- gen_context(system_u:object_r:skype_exec_t,s0)
-+HOME_DIR/\.Skype(/.*)? gen_context(system_u:object_r:skype_home_t,s0)
+++ /dev/null
---- apps/skype.te 1970-01-01 01:00:00.000000000 +0100
-+++ ../../../refpolicy/policy/modules/apps/skype.te 2011-01-08 00:23:10.900000094 +0100
-@@ -0,0 +1,94 @@
-+policy_module(skype, 1.0.0)
-+
-+############################
-+#
-+# Declarations
-+#
-+
-+
-+type skype_t;
-+type skype_exec_t;
-+typealias skype_t alias { user_skype_t staff_skype_t sysadm_skype_t };
-+application_domain(skype_t, skype_exec_t)
-+
-+type skype_home_t;
-+typealias skype_home_t alias { user_skype_home_t staff_skype_home_t sysadm_skype_home_t };
-+userdom_user_home_content(skype_home_t)
-+
-+type skype_tmpfs_t;
-+typealias skype_tmpfs_t alias { user_skype_tmpfs_t staff_skype_tmpfs_t sysadm_skype_tmpfs_t };
-+files_tmpfs_file(skype_tmpfs_t)
-+ubac_constrained(skype_tmpfs_t)
-+
-+############################
-+#
-+# Local policy
-+#
-+
-+# Looks as if the binary needs this; for the time being use the tunable policy
-+tunable_policy(`allow_execmem',`
-+ allow skype_t self:process { execmem };
-+')
-+
-+# Manage ~/.Skype
-+manage_dirs_pattern(skype_t, skype_home_t, skype_home_t)
-+manage_files_pattern(skype_t, skype_home_t, skype_home_t)
-+manage_lnk_files_pattern(skype_t, skype_home_t, skype_home_t)
-+userdom_user_home_dir_filetrans(skype_t, skype_home_t, dir)
-+userdom_search_user_home_dirs(skype_t)
-+
-+# Declare access permissions on skype_tmpfs_t domain for X sessions
-+manage_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_lnk_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_fifo_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_sock_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+fs_tmpfs_filetrans(skype_t, skype_tmpfs_t, { file lnk_file sock_file fifo_file })
-+
-+# Be able to call skype from a terminal (debugging)
-+userdom_use_user_terminals(skype_t)
-+domain_use_interactive_fds(skype_t)
-+
-+corecmd_exec_bin(skype_t)
-+corecmd_exec_shell(skype_t)
-+can_exec(skype_t, skype_exec_t)
-+#exec_files_pattern(skype_t, skype_exec_t, skype_exec_t)
-+libs_use_ld_so(skype_t)
-+files_read_usr_symlinks(skype_t)
-+
-+# This is an X application
-+xserver_user_x_domain_template(skype, skype_t, skype_tmpfs_t)
-+
-+files_search_var_lib(skype_t)
-+miscfiles_read_fonts(skype_t)
-+miscfiles_read_localization(skype_t)
-+miscfiles_dontaudit_setattr_fonts_dirs(skype_t)
-+dbus_system_bus_client(skype_t)
-+files_read_etc_files(skype_t)
-+libs_read_lib_files(skype_t)
-+
-+corenet_tcp_bind_generic_node(skype_t)
-+corenet_udp_bind_generic_node(skype_t)
-+corenet_tcp_bind_generic_port(skype_t)
-+corenet_udp_bind_generic_port(skype_t)
-+corenet_tcp_connect_generic_port(skype_t)
-+corenet_tcp_connect_http_port(skype_t)
-+
-+dev_read_video_dev(skype_t)
-+dev_write_video_dev(skype_t)
-+dev_read_sound(skype_t)
-+dev_write_sound(skype_t)
-+alsa_read_rw_config(skype_t)
-+
-+files_read_usr_files(skype_t)
-+kernel_read_system_state(skype_t)
-+sysnet_read_config(skype_t)
-+
-+# Self
-+allow skype_t self:process { getsched };
-+allow skype_t self:unix_stream_socket create_socket_perms;
-+allow skype_t self:udp_socket create_stream_socket_perms;
-+allow skype_t self:tcp_socket create_stream_socket_perms;
-+allow skype_t self:sem create_sem_perms;
-+allow skype_t self:netlink_route_socket rw_netlink_socket_perms;
-+allow skype_t self:fifo_file rw_fifo_file_perms;
-+
---- apps/skype.fc 1970-01-01 01:00:00.000000000 +0100
-+++ ../../../refpolicy/policy/modules/apps/skype.fc 2011-01-07 21:46:47.603999891 +0100
-@@ -0,0 +1,3 @@
-+/usr/bin/skype -- gen_context(system_u:object_r:skype_exec_t,s0)
-+/opt/skype/skype -- gen_context(system_u:object_r:skype_exec_t,s0)
-+HOME_DIR/\.Skype(/.*)? gen_context(system_u:object_r:skype_home_t,s0)
+++ /dev/null
---- apps/skype.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/skype.te 2011-07-24 17:24:40.996000734 +0200
-@@ -0,0 +1,111 @@
-+policy_module(skype, 0.0.2)
-+
-+############################
-+#
-+# Declarations
-+#
-+
-+type skype_t;
-+type skype_exec_t;
-+application_domain(skype_t, skype_exec_t)
-+
-+type skype_home_t;
-+
-+type skype_tmpfs_t;
-+files_tmpfs_file(skype_tmpfs_t)
-+ubac_constrained(skype_tmpfs_t)
-+
-+############################
-+#
-+# Policy
-+#
-+
-+allow skype_t self:process { getsched setsched execmem signal };
-+allow skype_t self:fifo_file rw_fifo_file_perms;
-+allow skype_t self:unix_stream_socket create_socket_perms;
-+allow skype_t self:sem create_sem_perms;
-+allow skype_t self:tcp_socket create_stream_socket_perms;
-+
-+# Allow skype to work with its ~/.skype location
-+manage_dirs_pattern(skype_t, skype_home_t, skype_home_t)
-+manage_files_pattern(skype_t, skype_home_t, skype_home_t)
-+manage_lnk_files_pattern(skype_t, skype_home_t, skype_home_t)
-+
-+# Needed for supporting X11 & shared memory
-+manage_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_lnk_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_fifo_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+manage_sock_files_pattern(skype_t, skype_tmpfs_t, skype_tmpfs_t)
-+fs_tmpfs_filetrans(skype_t, skype_tmpfs_t, { file lnk_file sock_file fifo_file })
-+
-+# In Gentoo, the skype script calls skype binary. To keep the
-+# number of privileges for the user domain sufficiently manageable,
-+# we already label the script as skype_exec_t. Hence, the script
-+# needs to be able to execute skype_exec_t files too.
-+can_exec(skype_t, skype_exec_t)
-+
-+## Kernel layer calls
-+#
-+kernel_dontaudit_search_sysctl(skype_t)
-+kernel_read_system_state(skype_t)
-+
-+corecmd_exec_bin(skype_t)
-+corecmd_exec_shell(skype_t)
-+
-+corenet_all_recvfrom_netlabel(skype_t)
-+corenet_all_recvfrom_unlabeled(skype_t)
-+corenet_sendrecv_http_client_packets(skype_t)
-+corenet_tcp_bind_generic_node(skype_t)
-+corenet_tcp_bind_generic_port(skype_t)
-+corenet_tcp_connect_generic_port(skype_t)
-+corenet_tcp_connect_http_port(skype_t)
-+corenet_tcp_sendrecv_http_port(skype_t)
-+corenet_udp_bind_generic_node(skype_t)
-+corenet_udp_bind_generic_port(skype_t)
-+
-+dev_read_sound(skype_t)
-+dev_read_video_dev(skype_t)
-+dev_write_sound(skype_t)
-+dev_write_video_dev(skype_t)
-+
-+# Needed to debug skype (start through commandline)
-+domain_use_interactive_fds(skype_t)
-+
-+files_read_etc_files(skype_t)
-+files_read_usr_files(skype_t)
-+
-+## System layer calls
-+#
-+auth_use_nsswitch(skype_t)
-+miscfiles_dontaudit_setattr_fonts_dirs(skype_t)
-+miscfiles_read_localization(skype_t)
-+userdom_manage_user_home_content_dirs(skype_t)
-+userdom_manage_user_home_content_files(skype_t)
-+userdom_use_user_terminals(skype_t)
-+userdom_user_home_dir_filetrans(skype_t, skype_home_t, dir)
-+userdom_user_home_content(skype_home_t)
-+
-+## Other calls
-+#
-+xserver_user_x_domain_template(skype, skype_t, skype_tmpfs_t)
-+
-+tunable_policy(`gentoo_try_dontaudit',`
-+ dev_dontaudit_search_sysfs(skype_t)
-+ fs_dontaudit_getattr_xattr_fs(skype_t)
-+')
-+
-+optional_policy(`
-+ tunable_policy(`gentoo_try_dontaudit',`
-+ mozilla_dontaudit_manage_user_home_files(skype_t)
-+ ')
-+')
-+
-+optional_policy(`
-+ alsa_read_rw_config(skype_t)
-+')
-+
-+optional_policy(`
-+ dbus_system_bus_client(skype_t)
-+ dbus_session_bus_client(skype_t)
-+')
-+
---- apps/skype.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/skype.fc 2011-07-21 10:08:43.824000256 +0200
-@@ -0,0 +1,3 @@
-+/usr/bin/skype -- gen_context(system_u:object_r:skype_exec_t,s0)
-+/opt/skype/skype -- gen_context(system_u:object_r:skype_exec_t,s0)
-+HOME_DIR/\.Skype(/.*)? gen_context(system_u:object_r:skype_home_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-skype/selinux-skype-2.20101213-r2.ebuild,v 1.2 2011/06/02 12:56:29 blueness Exp $
-
-IUSE=""
-
-MODS="skype"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/add-apps-skype-r2.patch"
-RDEPEND=">=sec-policy/selinux-base-policy-2.20101213-r4"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-skype/selinux-skype-2.20101213-r3.ebuild,v 1.1 2011/08/07 11:01:56 blueness Exp $
-
-IUSE=""
-
-MODS="skype"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-apps-skype-r3.patch"
-RDEPEND=">=sec-policy/selinux-base-policy-2.20101213-r20"
# ChangeLog for sec-policy/selinux-slocate
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-slocate/ChangeLog,v 1.4 2011/10/23 12:42:27 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-slocate/ChangeLog,v 1.5 2011/11/12 20:53:12 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-slocate-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-slocate-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-slocate/selinux-slocate-2.20101213.ebuild,v 1.2 2011/06/02 12:56:50 blueness Exp $
-
-IUSE=""
-
-MODS="slocate"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-slrnpull
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-slrnpull/ChangeLog,v 1.4 2011/10/23 12:42:33 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-slrnpull/ChangeLog,v 1.5 2011/11/12 20:53:10 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-slrnpull-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-slrnpull-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-slrnpull/selinux-slrnpull-2.20101213.ebuild,v 1.2 2011/06/02 12:57:11 blueness Exp $
-
-IUSE=""
-
-MODS="slrnpull"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-smartmon
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-smartmon/ChangeLog,v 1.4 2011/10/23 12:42:53 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-smartmon/ChangeLog,v 1.5 2011/11/12 20:53:13 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-smartmon-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-smartmon-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-smartmon/selinux-smartmon-2.20101213.ebuild,v 1.2 2011/06/02 12:57:32 blueness Exp $
-
-IUSE=""
-
-MODS="smartmon"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-smokeping
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-smokeping/ChangeLog,v 1.4 2011/10/23 12:42:55 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-smokeping/ChangeLog,v 1.5 2011/11/12 20:52:47 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-smokeping-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-smokeping-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-smokeping/selinux-smokeping-2.20101213.ebuild,v 1.2 2011/06/02 12:57:53 blueness Exp $
-
-IUSE=""
-
-MODS="smokeping"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-snmpd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-snmpd/ChangeLog,v 1.29 2011/10/23 12:42:32 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-snmpd/ChangeLog,v 1.30 2011/11/12 20:53:25 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-snmpd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-snmpd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-snmpd/selinux-snmpd-2.20101213.ebuild,v 1.2 2011/06/02 12:58:15 blueness Exp $
-
-MODS="snmp"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for snmp daemons"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-snort
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-snort/ChangeLog,v 1.27 2011/10/23 12:42:42 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-snort/ChangeLog,v 1.28 2011/11/12 20:53:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-snort-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-snort-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-snort/selinux-snort-2.20101213.ebuild,v 1.2 2011/06/02 12:58:36 blueness Exp $
-
-MODS="snort"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for snort"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-soundserver
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-soundserver/ChangeLog,v 1.4 2011/10/23 12:42:43 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-soundserver/ChangeLog,v 1.5 2011/11/12 20:53:18 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-soundserver-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-soundserver-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-soundserver/selinux-soundserver-2.20101213.ebuild,v 1.2 2011/06/02 12:58:56 blueness Exp $
-
-IUSE=""
-
-MODS="soundserver"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-spamassassin
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-spamassassin/ChangeLog,v 1.32 2011/10/23 12:42:40 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-spamassassin/ChangeLog,v 1.33 2011/11/12 20:53:43 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-spamassassin-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-spamassassin-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-spamassassin/selinux-spamassassin-2.20101213.ebuild,v 1.2 2011/06/02 12:59:18 blueness Exp $
-
-MODS="spamassassin"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for SpamAssassin"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-speedtouch
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-speedtouch/ChangeLog,v 1.4 2011/10/23 12:42:44 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-speedtouch/ChangeLog,v 1.5 2011/11/12 20:53:16 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-speedtouch-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-speedtouch-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-speedtouch/selinux-speedtouch-2.20101213.ebuild,v 1.2 2011/06/02 12:59:38 blueness Exp $
-
-IUSE=""
-
-MODS="speedtouch"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-squid
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-squid/ChangeLog,v 1.37 2011/10/23 12:42:28 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-squid/ChangeLog,v 1.38 2011/11/12 20:52:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-squid-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-squid-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-squid/selinux-squid-2.20101213-r1.ebuild,v 1.2 2011/06/02 13:00:00 blueness Exp $
-
-MODS="squid"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for squid"
-
-KEYWORDS="amd64 x86"
-DEPEND="sec-policy/selinux-apache"
-RDEPEND="${DEPEND}"
# ChangeLog for sec-policy/selinux-stunnel
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-stunnel/ChangeLog,v 1.26 2011/10/23 12:42:30 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-stunnel/ChangeLog,v 1.27 2011/11/12 20:53:00 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-stunnel-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-stunnel-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-stunnel/selinux-stunnel-2.20101213.ebuild,v 1.2 2011/06/02 13:00:22 blueness Exp $
-
-MODS="stunnel"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for stunnel"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-sudo
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sudo/ChangeLog,v 1.24 2011/10/23 12:42:52 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sudo/ChangeLog,v 1.25 2011/11/12 20:53:11 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-sudo-2.20101213-r2.ebuild,
+ -files/fix-sudo.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-sudo-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- admin/sudo.te 2010-12-13 15:11:01.000000000 +0100
-+++ ../../../refpolicy/policy/modules/admin/sudo.te 2011-01-06 23:52:27.519000000 +0100
-@@ -1,4 +1,4 @@
--policy_module(sudo, 1.7.0)
-+policy_module(sudo, 1.7.0.r1)
-
- ########################################
- #
-@@ -7,3 +7,6 @@
-
- type sudo_exec_t;
- application_executable_file(sudo_exec_t)
-+
-+type sudo_db_t;
-+files_type(sudo_db_t)
---- admin/sudo.fc 2010-08-03 15:11:03.000000000 +0200
-+++ ../../../refpolicy/policy/modules/admin/sudo.fc 2011-01-06 23:48:59.497000020 +0100
-@@ -1,2 +1,2 @@
--
- /usr/bin/sudo(edit)? -- gen_context(system_u:object_r:sudo_exec_t,s0)
-+/var/db/sudo(/.*)? gen_context(system_u:object_r:sudo_db_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sudo/selinux-sudo-2.20101213-r2.ebuild,v 1.2 2011/06/02 13:00:44 blueness Exp $
-
-MODS="sudo"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for sudo"
-
-KEYWORDS="amd64 x86"
-
-RDEPEND=">=sec-policy/selinux-base-policy-2.20101213-r8"
# ChangeLog for sec-policy/selinux-sxid
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sxid/ChangeLog,v 1.4 2011/10/23 12:42:30 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sxid/ChangeLog,v 1.5 2011/11/12 20:53:02 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-sxid-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-sxid-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sxid/selinux-sxid-2.20101213.ebuild,v 1.2 2011/06/02 13:01:04 blueness Exp $
-
-IUSE=""
-
-MODS="sxid"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-sysstat
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sysstat/ChangeLog,v 1.4 2011/10/23 12:43:02 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sysstat/ChangeLog,v 1.5 2011/11/12 20:53:44 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-sysstat-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-sysstat-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-sysstat/selinux-sysstat-2.20101213.ebuild,v 1.2 2011/06/02 13:01:25 blueness Exp $
-
-IUSE=""
-
-MODS="sysstat"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-tcpd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tcpd/ChangeLog,v 1.13 2011/10/23 12:42:51 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tcpd/ChangeLog,v 1.14 2011/11/12 20:53:34 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-tcpd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-tcpd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tcpd/selinux-tcpd-2.20101213.ebuild,v 1.2 2011/06/02 13:01:46 blueness Exp $
-
-MODS="tcpd"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for tcp-wrappers"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-telnet
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-telnet/ChangeLog,v 1.4 2011/10/23 12:42:54 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-telnet/ChangeLog,v 1.5 2011/11/12 20:53:35 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-telnet-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-telnet-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-telnet/selinux-telnet-2.20101213.ebuild,v 1.2 2011/06/02 13:02:07 blueness Exp $
-
-IUSE=""
-
-MODS="telnet"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-tftpd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tftpd/ChangeLog,v 1.22 2011/10/26 16:03:05 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tftpd/ChangeLog,v 1.23 2011/11/12 20:53:33 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-tftpd-2.20101213.ebuild:
+ Removing old policies
26 Oct 2011; <swift@gentoo.org> selinux-tftpd-2.20110726.ebuild:
Fix build failure (bug #388561), module is tftp, not tftpd
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tftpd/selinux-tftpd-2.20101213.ebuild,v 1.2 2011/06/02 13:02:28 blueness Exp $
-
-MODS="tftp"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for tftp daemons"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-tgtd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tgtd/ChangeLog,v 1.4 2011/10/23 12:42:37 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tgtd/ChangeLog,v 1.5 2011/11/12 20:53:45 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-tgtd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-tgtd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tgtd/selinux-tgtd-2.20101213.ebuild,v 1.2 2011/06/02 13:02:49 blueness Exp $
-
-IUSE=""
-
-MODS="tgtd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-thunderbird
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-thunderbird/ChangeLog,v 1.4 2011/10/23 12:42:40 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-thunderbird/ChangeLog,v 1.5 2011/11/12 20:53:25 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-thunderbird-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-thunderbird-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-thunderbird/selinux-thunderbird-2.20101213.ebuild,v 1.2 2011/06/02 13:03:10 blueness Exp $
-
-IUSE=""
-
-MODS="thunderbird"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-timidity
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-timidity/ChangeLog,v 1.4 2011/10/23 12:42:43 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-timidity/ChangeLog,v 1.5 2011/11/12 20:52:47 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-timidity-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-timidity-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-timidity/selinux-timidity-2.20101213.ebuild,v 1.2 2011/06/02 13:03:31 blueness Exp $
-
-IUSE=""
-
-MODS="timidity"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-tmpreaper
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tmpreaper/ChangeLog,v 1.4 2011/10/23 12:42:48 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tmpreaper/ChangeLog,v 1.5 2011/11/12 20:53:07 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-tmpreaper-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-tmpreaper-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tmpreaper/selinux-tmpreaper-2.20101213.ebuild,v 1.2 2011/06/02 13:03:52 blueness Exp $
-
-IUSE=""
-
-MODS="tmpreaper"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-tor
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tor/ChangeLog,v 1.4 2011/10/23 12:42:30 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tor/ChangeLog,v 1.5 2011/11/12 20:53:31 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-tor-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-tor-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tor/selinux-tor-2.20101213.ebuild,v 1.2 2011/06/02 13:04:13 blueness Exp $
-
-IUSE=""
-
-MODS="tor"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-tripwire
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tripwire/ChangeLog,v 1.4 2011/10/23 12:42:50 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tripwire/ChangeLog,v 1.5 2011/11/12 20:53:27 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-tripwire-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-tripwire-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tripwire/selinux-tripwire-2.20101213.ebuild,v 1.2 2011/06/02 13:04:34 blueness Exp $
-
-IUSE=""
-
-MODS="tripwire"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-tvtime
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tvtime/ChangeLog,v 1.4 2011/10/23 12:42:43 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tvtime/ChangeLog,v 1.5 2011/11/12 20:53:43 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-tvtime-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-tvtime-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-tvtime/selinux-tvtime-2.20101213.ebuild,v 1.2 2011/06/02 13:04:55 blueness Exp $
-
-IUSE=""
-
-MODS="tvtime"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ucspi-tcp
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ucspi-tcp/ChangeLog,v 1.31 2011/10/23 12:42:33 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ucspi-tcp/ChangeLog,v 1.32 2011/11/12 20:53:11 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ucspi-tcp-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ucspi-tcp-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ucspi-tcp/selinux-ucspi-tcp-2.20101213.ebuild,v 1.2 2011/06/02 13:05:17 blueness Exp $
-
-MODS="ucspitcp"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for ucspi-tcp"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-ulogd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ulogd/ChangeLog,v 1.4 2011/10/23 12:42:35 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ulogd/ChangeLog,v 1.5 2011/11/12 20:52:50 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-ulogd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-ulogd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-ulogd/selinux-ulogd-2.20101213.ebuild,v 1.2 2011/06/02 13:05:37 blueness Exp $
-
-IUSE=""
-
-MODS="ulogd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-uml
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-uml/ChangeLog,v 1.4 2011/10/23 12:42:40 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-uml/ChangeLog,v 1.5 2011/11/12 20:53:46 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-uml-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-uml-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-uml/selinux-uml-2.20101213.ebuild,v 1.2 2011/06/02 13:05:58 blueness Exp $
-
-IUSE=""
-
-MODS="uml"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-uptime
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-uptime/ChangeLog,v 1.4 2011/10/23 12:42:56 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-uptime/ChangeLog,v 1.5 2011/11/12 20:53:14 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-uptime-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-uptime-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-uptime/selinux-uptime-2.20101213.ebuild,v 1.2 2011/06/02 13:06:19 blueness Exp $
-
-IUSE=""
-
-MODS="uptime"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-usbmuxd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-usbmuxd/ChangeLog,v 1.4 2011/10/23 12:42:32 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-usbmuxd/ChangeLog,v 1.5 2011/11/12 20:53:26 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-usbmuxd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-usbmuxd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-usbmuxd/selinux-usbmuxd-2.20101213.ebuild,v 1.2 2011/06/02 13:06:40 blueness Exp $
-
-IUSE=""
-
-MODS="usbmuxd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-varnishd
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-varnishd/ChangeLog,v 1.4 2011/10/23 12:42:31 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-varnishd/ChangeLog,v 1.5 2011/11/12 20:53:31 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-varnishd-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-varnishd-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-varnishd/selinux-varnishd-2.20101213.ebuild,v 1.2 2011/06/02 13:07:01 blueness Exp $
-
-IUSE=""
-
-MODS="varnishd"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-vbetool
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vbetool/ChangeLog,v 1.4 2011/10/23 12:42:39 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vbetool/ChangeLog,v 1.5 2011/11/12 20:53:29 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-vbetool-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-vbetool-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vbetool/selinux-vbetool-2.20101213.ebuild,v 1.2 2011/06/02 13:07:22 blueness Exp $
-
-IUSE=""
-
-MODS="vbetool"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-vde
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vde/ChangeLog,v 1.4 2011/10/23 12:42:35 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vde/ChangeLog,v 1.5 2011/11/12 20:53:11 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-vde-2.20101213.ebuild,
+ -files/add-services-vde.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-vde-2.20110726-r1.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/vde.te 1970-01-01 01:00:00.000000000 +0100
-+++ services/vde.te 2011-01-22 22:20:13.375000222 +0100
-@@ -0,0 +1,56 @@
-+policy_module(vde, 0.0.1)
-+
-+########################################
-+#
-+# Declarations
-+#
-+
-+type vde_t;
-+type vde_exec_t;
-+init_daemon_domain(vde_t, vde_exec_t)
-+
-+type vde_initrc_exec_t;
-+init_script_file(vde_initrc_exec_t)
-+
-+type vde_conf_t;
-+files_type(vde_conf_t);
-+
-+type vde_var_lib_t;
-+files_type(vde_var_lib_t)
-+
-+type vde_var_run_t;
-+files_pid_file(vde_var_run_t)
-+
-+type vde_tmp_t;
-+files_tmp_file(vde_tmp_t)
-+
-+########################################
-+#
-+# Local policy
-+#
-+
-+allow vde_t self:process { signal_perms getcap setcap };
-+allow vde_t self:capability { chown net_admin dac_override fowner fsetid };
-+
-+allow vde_t vde_tmp_t:sock_file manage_sock_file_perms;
-+allow vde_t self:unix_stream_socket { create_stream_socket_perms connectto };
-+allow vde_t self:unix_dgram_socket create_socket_perms;
-+files_tmp_filetrans(vde_t, vde_tmp_t, sock_file)
-+
-+manage_dirs_pattern(vde_t, vde_var_run_t, vde_var_run_t)
-+manage_files_pattern(vde_t, vde_var_run_t, vde_var_run_t)
-+manage_sock_files_pattern(vde_t, vde_var_run_t, vde_var_run_t)
-+files_pid_filetrans(vde_t, vde_var_run_t, { dir file sock_file unix_dgram_socket })
-+
-+files_read_etc_files(vde_t)
-+
-+allow vde_t vde_conf_t:dir list_dir_perms;
-+read_files_pattern(vde_t, vde_conf_t, vde_conf_t)
-+read_lnk_files_pattern(vde_t, vde_conf_t, vde_conf_t)
-+
-+domain_use_interactive_fds(vde_t)
-+userdom_use_user_terminals(vde_t)
-+miscfiles_read_localization(vde_t)
-+corenet_rw_tun_tap_dev(vde_t)
-+
-+logging_send_syslog_msg(vde_t)
---- services/vde.fc 1970-01-01 01:00:00.000000000 +0100
-+++ services/vde.fc 2011-01-22 21:23:05.129000146 +0100
-@@ -0,0 +1,7 @@
-+/etc/init.d/vde -- gen_context(system_u:object_r:vde_initrc_exec_t,s0)
-+/usr/bin/vde_switch -- gen_context(system_u:object_r:vde_exec_t,s0)
-+/usr/sbin/vde_tunctl -- gen_context(system_u:object_r:vde_exec_t,s0)
-+/etc/vde2(/.*)? gen_context(system_u:object_r:vde_conf_t,s0)
-+/etc/vde2/libvdemgmt(/.*)? gen_context(system_u:object_r:vde_conf_t,s0)
-+/var/run/vde\.ctl(/.*)? gen_context(system_u:object_r:vde_var_run_t,s0)
-+/tmp/vde.[0-9-]* -s gen_context(system_u:object_r:vde_tmp_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vde/selinux-vde-2.20101213.ebuild,v 1.2 2011/06/02 13:07:43 blueness Exp $
-
-IUSE=""
-
-MODS="vde"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for Virtual Distributed Ethernet switch"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/add-services-vde.patch"
# ChangeLog for sec-policy/selinux-virt
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-virt/ChangeLog,v 1.5 2011/10/23 12:42:38 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-virt/ChangeLog,v 1.6 2011/11/12 20:52:54 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-virt-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-virt-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-virt/selinux-virt-2.20101213.ebuild,v 1.3 2011/06/02 13:08:04 blueness Exp $
-
-IUSE=""
-
-MODS="virt"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for libvirtd"
-
-KEYWORDS="amd64 x86"
-
-src_install() {
- selinux-policy-2_src_install
- [ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
- for i in ${POLICY_TYPES}; do
- mkdir -p "${D}/etc/selinux/${i}/contexts"
- echo "system_u:system_r:svirt_t" >${D}/etc/selinux/${i}/contexts/virtual_domain_context
- echo "system_u:object_r:svirt_image_t" >${D}/etc/selinux/${i}/contexts/virtual_image_context
- echo "system_u:object_r:virt_content_t" >>${D}/etc/selinux/${i}/contexts/virtual_image_context
- done
-}
# ChangeLog for sec-policy/selinux-vlock
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vlock/ChangeLog,v 1.4 2011/10/23 12:42:59 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vlock/ChangeLog,v 1.5 2011/11/12 20:53:33 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-vlock-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-vlock-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vlock/selinux-vlock-2.20101213.ebuild,v 1.2 2011/06/02 13:08:25 blueness Exp $
-
-IUSE=""
-
-MODS="vlock"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-vmware
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vmware/ChangeLog,v 1.4 2011/10/23 12:42:58 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vmware/ChangeLog,v 1.5 2011/11/12 20:53:22 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-vmware-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-vmware-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vmware/selinux-vmware-2.20101213.ebuild,v 1.2 2011/06/02 13:08:46 blueness Exp $
-
-IUSE=""
-
-MODS="vmware"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for vmware"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-vpn
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vpn/ChangeLog,v 1.4 2011/10/23 12:42:38 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vpn/ChangeLog,v 1.5 2011/11/12 20:52:48 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-vpn-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-vpn-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-vpn/selinux-vpn-2.20101213.ebuild,v 1.2 2011/06/02 13:09:07 blueness Exp $
-
-IUSE=""
-
-MODS="vpn"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-watchdog
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-watchdog/ChangeLog,v 1.4 2011/10/23 12:42:51 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-watchdog/ChangeLog,v 1.5 2011/11/12 20:53:37 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-watchdog-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-watchdog-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-watchdog/selinux-watchdog-2.20101213.ebuild,v 1.2 2011/06/02 13:09:28 blueness Exp $
-
-IUSE=""
-
-MODS="watchdog"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-webalizer
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-webalizer/ChangeLog,v 1.4 2011/10/23 12:42:42 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-webalizer/ChangeLog,v 1.5 2011/11/12 20:53:45 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-webalizer-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-webalizer-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-webalizer/selinux-webalizer-2.20101213.ebuild,v 1.2 2011/06/02 13:09:49 blueness Exp $
-
-IUSE=""
-
-MODS="webalizer"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-wine
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-wine/ChangeLog,v 1.4 2011/10/23 12:42:32 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-wine/ChangeLog,v 1.5 2011/11/12 20:53:21 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-wine-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-wine-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-wine/selinux-wine-2.20101213.ebuild,v 1.2 2011/06/02 13:10:10 blueness Exp $
-
-IUSE=""
-
-MODS="wine"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-wireshark
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-wireshark/ChangeLog,v 1.15 2011/10/23 12:42:58 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-wireshark/ChangeLog,v 1.16 2011/11/12 20:53:38 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-apps-wireshark-r1.patch,
+ -selinux-wireshark-2.20101213-r1.ebuild,
+ -selinux-wireshark-2.20110726-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-wireshark-2.20110726-r2.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/wireshark.te 2010-12-13 15:11:01.000000000 +0100
-+++ apps/wireshark.te 2011-02-10 22:07:27.561999998 +0100
-@@ -35,18 +35,20 @@
- #
-
- allow wireshark_t self:capability { net_admin net_raw setgid };
--allow wireshark_t self:process { signal getsched };
-+allow wireshark_t self:process { signal getsched setcap };
- allow wireshark_t self:fifo_file { getattr read write };
- allow wireshark_t self:shm destroy;
- allow wireshark_t self:shm create_shm_perms;
- allow wireshark_t self:netlink_route_socket { nlmsg_read create_socket_perms };
--allow wireshark_t self:packet_socket { setopt bind ioctl getopt create read };
-+allow wireshark_t self:packet_socket { setopt bind ioctl getopt create read write };
- allow wireshark_t self:tcp_socket create_socket_perms;
- allow wireshark_t self:udp_socket create_socket_perms;
-
- # Re-execute itself (why?)
- can_exec(wireshark_t, wireshark_exec_t)
- corecmd_search_bin(wireshark_t)
-+corecmd_exec_bin(wireshark_t)
-+corecmd_exec_shell(wireshark_t)
-
- # /home/.wireshark
- manage_dirs_pattern(wireshark_t, wireshark_home_t, wireshark_home_t)
-@@ -70,12 +72,17 @@
- kernel_read_system_state(wireshark_t)
- kernel_read_sysctl(wireshark_t)
-
-+selinux_getattr_fs(wireshark_t)
-+
- corecmd_search_bin(wireshark_t)
-
- corenet_tcp_connect_generic_port(wireshark_t)
- corenet_tcp_sendrecv_generic_if(wireshark_t)
-
-+dev_read_sysfs(wireshark_t)
- dev_read_urand(wireshark_t)
-+dev_read_rand(wireshark_t)
-+dev_search_sysfs(wireshark_t)
-
- files_read_etc_files(wireshark_t)
- files_read_usr_files(wireshark_t)
-@@ -92,7 +99,10 @@
-
- sysnet_read_config(wireshark_t)
-
-+userdom_exec_user_home_content_files(wireshark_t)
-+userdom_user_home_dir_filetrans_user_home_content(wireshark_t, { file lnk_file fifo_file sock_file })
- userdom_manage_user_home_content_files(wireshark_t)
-+userdom_use_user_terminals(wireshark_t)
-
- tunable_policy(`use_nfs_home_dirs',`
- fs_manage_nfs_dirs(wireshark_t)
---- apps/wireshark.fc 2010-08-03 15:11:04.000000000 +0200
-+++ apps/wireshark.fc 2011-02-08 21:31:40.547999979 +0100
-@@ -1,3 +1,3 @@
- HOME_DIR/\.wireshark(/.*)? gen_context(system_u:object_r:wireshark_home_t,s0)
--
-+HOME_DIR/ffi(.*) -- gen_context(system_u:object_r:wireshark_home_exec_t,s0)
- /usr/bin/wireshark -- gen_context(system_u:object_r:wireshark_exec_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-wireshark/selinux-wireshark-2.20101213-r1.ebuild,v 1.2 2011/06/02 13:10:32 blueness Exp $
-
-MODS="wireshark"
-IUSE=""
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for wireshark"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-apps-wireshark-r1.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-wireshark/selinux-wireshark-2.20110726-r1.ebuild,v 1.1 2011/08/28 21:12:38 swift Exp $
-EAPI="4"
-
-IUSE=""
-MODS="wireshark"
-BASEPOL="2.20110726-r1"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for wireshark"
-KEYWORDS="~amd64 ~x86"
# ChangeLog for sec-policy/selinux-xen
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xen/ChangeLog,v 1.4 2011/10/23 12:43:01 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xen/ChangeLog,v 1.5 2011/11/12 20:53:13 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-xen-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-xen-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xen/selinux-xen-2.20101213.ebuild,v 1.2 2011/06/02 13:10:53 blueness Exp $
-
-IUSE=""
-
-MODS="xen"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for Xen"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-xfce4
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xfce4/ChangeLog,v 1.4 2011/10/23 12:42:45 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xfce4/ChangeLog,v 1.5 2011/11/12 20:52:59 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/add-apps-xfce4.patch,
+ -selinux-xfce4-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-xfce4-2.20110427.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- apps/xfce4.te 1970-01-01 01:00:00.000000000 +0100
-+++ apps/xfce4.te 2011-01-22 13:18:24.079000051 +0100
-@@ -0,0 +1,2 @@
-+policy_module(xfce, 0.0.1)
-+
---- apps/xfce4.fc 1970-01-01 01:00:00.000000000 +0100
-+++ apps/xfce4.fc 2011-01-22 13:22:10.602000045 +0100
-@@ -0,0 +1,9 @@
-+/usr/lib(64)?/xfce4/session/xfsm-shutdown-helper -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/lib(64)?/xfce4/session/balou-export-theme -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/lib(64)?/xfce4/session/balou-install-theme -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/lib(64)?/xfce4/xfwm4/helper-dialog -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/lib(64)?/xfce4/xfconf/xfconfd -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/lib(64)?/xfce4/panel/wrapper -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/lib(64)?/xfce4/panel/migrate -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/lib(64)?/xfce4/exo-1/exo-helper-1 -- gen_context(system_u:object_r:bin_t,s0)
-+/usr/lib(64)?/xfce4/exo-1/exo-compose-mail-1 -- gen_context(system_u:object_r:bin_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xfce4/selinux-xfce4-2.20101213.ebuild,v 1.2 2011/06/02 13:11:14 blueness Exp $
-
-IUSE=""
-
-MODS="xfce4"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for XFCE4 desktop environment"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/add-apps-xfce4.patch"
# ChangeLog for sec-policy/selinux-xfs
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xfs/ChangeLog,v 1.4 2011/10/23 12:42:33 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xfs/ChangeLog,v 1.5 2011/11/12 20:53:14 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-xfs-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-xfs-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xfs/selinux-xfs-2.20101213.ebuild,v 1.2 2011/06/02 13:11:35 blueness Exp $
-
-IUSE=""
-
-MODS="xfs"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-xscreensaver
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xscreensaver/ChangeLog,v 1.4 2011/10/23 12:42:31 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xscreensaver/ChangeLog,v 1.5 2011/11/12 20:53:14 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -selinux-xscreensaver-2.20101213.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-xscreensaver-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xscreensaver/selinux-xscreensaver-2.20101213.ebuild,v 1.2 2011/06/02 13:11:56 blueness Exp $
-
-IUSE=""
-
-MODS="xscreensaver"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
# ChangeLog for sec-policy/selinux-xserver
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xserver/ChangeLog,v 1.5 2011/10/23 12:42:50 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xserver/ChangeLog,v 1.6 2011/11/12 20:53:15 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-xserver-r1.patch,
+ -files/fix-services-xserver-r2.patch, -selinux-xserver-2.20101213-r2.ebuild,
+ -files/fix-xserver.patch:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-xserver-2.20110726.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/xserver.te 2010-12-13 15:11:02.000000000 +0100
-+++ services/xserver.te 2011-01-30 15:04:32.722000186 +0100
-@@ -234,9 +234,11 @@
-
- allow xdm_t iceauth_home_t:file read_file_perms;
-
-+files_search_tmp(iceauth_t)
- fs_search_auto_mountpoints(iceauth_t)
-
- userdom_use_user_terminals(iceauth_t)
-+userdom_read_user_tmp_files(iceauth_t)
-
- tunable_policy(`use_nfs_home_dirs',`
- fs_manage_nfs_files(iceauth_t)
-@@ -279,6 +281,7 @@
-
- userdom_use_user_terminals(xauth_t)
- userdom_read_user_tmp_files(xauth_t)
-+userdom_read_user_tmp_files(xserver_t)
-
- xserver_rw_xdm_tmp_files(xauth_t)
-
-@@ -588,6 +591,9 @@
- allow xserver_t { root_xdrawable_t x_domain }:x_drawable send;
- allow xserver_t input_xevent_t:x_event send;
-
-+# Allow X to process keyboard events
-+udev_read_db(xserver_t)
-+
- # setuid/setgid for the wrapper program to change UID
- # sys_rawio is for iopl access - should not be needed for frame-buffer
- # sys_admin, locking shared mem? chowning IPC message queues or semaphores?
-@@ -610,6 +616,7 @@
- allow xserver_t self:unix_stream_socket { create_stream_socket_perms connectto };
- allow xserver_t self:tcp_socket create_stream_socket_perms;
- allow xserver_t self:udp_socket create_socket_perms;
-+allow xserver_t self:netlink_kobject_uevent_socket create_socket_perms;
-
- manage_dirs_pattern(xserver_t, xserver_tmp_t, xserver_tmp_t)
- manage_files_pattern(xserver_t, xserver_tmp_t, xserver_tmp_t)
---- services/xserver.fc 2010-08-03 15:11:09.000000000 +0200
-+++ services/xserver.fc 2011-01-03 23:07:16.852000013 +0100
-@@ -5,6 +5,7 @@
- HOME_DIR/\.fonts(/.*)? gen_context(system_u:object_r:user_fonts_t,s0)
- HOME_DIR/\.fonts/auto(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
- HOME_DIR/\.fonts\.cache-.* -- gen_context(system_u:object_r:user_fonts_cache_t,s0)
-+HOME_DIR/\.fontconfig(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
- HOME_DIR/\.ICEauthority.* -- gen_context(system_u:object_r:iceauth_home_t,s0)
- HOME_DIR/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
- HOME_DIR/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0)
+++ /dev/null
---- services/xserver.te 2010-12-13 15:11:02.000000000 +0100
-+++ services/xserver.te 2011-02-01 18:16:07.421000056 +0100
-@@ -234,9 +234,13 @@
-
- allow xdm_t iceauth_home_t:file read_file_perms;
-
-+files_search_tmp(iceauth_t)
- fs_search_auto_mountpoints(iceauth_t)
-
- userdom_use_user_terminals(iceauth_t)
-+userdom_read_user_tmp_files(iceauth_t)
-+
-+getty_use_fds(iceauth_t)
-
- tunable_policy(`use_nfs_home_dirs',`
- fs_manage_nfs_files(iceauth_t)
-@@ -279,6 +283,7 @@
-
- userdom_use_user_terminals(xauth_t)
- userdom_read_user_tmp_files(xauth_t)
-+userdom_read_user_tmp_files(xserver_t)
-
- xserver_rw_xdm_tmp_files(xauth_t)
-
-@@ -588,6 +593,9 @@
- allow xserver_t { root_xdrawable_t x_domain }:x_drawable send;
- allow xserver_t input_xevent_t:x_event send;
-
-+# Allow X to process keyboard events
-+udev_read_db(xserver_t)
-+
- # setuid/setgid for the wrapper program to change UID
- # sys_rawio is for iopl access - should not be needed for frame-buffer
- # sys_admin, locking shared mem? chowning IPC message queues or semaphores?
-@@ -610,6 +618,7 @@
- allow xserver_t self:unix_stream_socket { create_stream_socket_perms connectto };
- allow xserver_t self:tcp_socket create_stream_socket_perms;
- allow xserver_t self:udp_socket create_socket_perms;
-+allow xserver_t self:netlink_kobject_uevent_socket create_socket_perms;
-
- manage_dirs_pattern(xserver_t, xserver_tmp_t, xserver_tmp_t)
- manage_files_pattern(xserver_t, xserver_tmp_t, xserver_tmp_t)
---- services/xserver.fc 2010-08-03 15:11:09.000000000 +0200
-+++ services/xserver.fc 2011-01-03 23:07:16.852000013 +0100
-@@ -5,6 +5,7 @@
- HOME_DIR/\.fonts(/.*)? gen_context(system_u:object_r:user_fonts_t,s0)
- HOME_DIR/\.fonts/auto(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
- HOME_DIR/\.fonts\.cache-.* -- gen_context(system_u:object_r:user_fonts_cache_t,s0)
-+HOME_DIR/\.fontconfig(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
- HOME_DIR/\.ICEauthority.* -- gen_context(system_u:object_r:iceauth_home_t,s0)
- HOME_DIR/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
- HOME_DIR/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0)
+++ /dev/null
---- services/xserver.te 2010-12-13 15:11:02.000000000 +0100
-+++ ../../../refpolicy/policy/modules/services/xserver.te 2011-01-02 18:21:17.682000037 +0100
-@@ -279,6 +279,7 @@
-
- userdom_use_user_terminals(xauth_t)
- userdom_read_user_tmp_files(xauth_t)
-+userdom_read_user_tmp_files(xserver_t)
-
- xserver_rw_xdm_tmp_files(xauth_t)
-
-@@ -588,6 +589,9 @@
- allow xserver_t { root_xdrawable_t x_domain }:x_drawable send;
- allow xserver_t input_xevent_t:x_event send;
-
-+# Allow X to process keyboard events
-+udev_read_db(xserver_t)
-+
- # setuid/setgid for the wrapper program to change UID
- # sys_rawio is for iopl access - should not be needed for frame-buffer
- # sys_admin, locking shared mem? chowning IPC message queues or semaphores?
-@@ -610,6 +614,7 @@
- allow xserver_t self:unix_stream_socket { create_stream_socket_perms connectto };
- allow xserver_t self:tcp_socket create_stream_socket_perms;
- allow xserver_t self:udp_socket create_socket_perms;
-+allow xserver_t self:netlink_kobject_uevent_socket create_socket_perms;
-
- manage_dirs_pattern(xserver_t, xserver_tmp_t, xserver_tmp_t)
- manage_files_pattern(xserver_t, xserver_tmp_t, xserver_tmp_t)
---- services/xserver.fc 2010-08-03 15:11:09.000000000 +0200
-+++ ../../../refpolicy/policy/modules/services/xserver.fc 2011-01-03 23:07:16.852000013 +0100
-@@ -5,6 +5,7 @@
- HOME_DIR/\.fonts(/.*)? gen_context(system_u:object_r:user_fonts_t,s0)
- HOME_DIR/\.fonts/auto(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
- HOME_DIR/\.fonts\.cache-.* -- gen_context(system_u:object_r:user_fonts_cache_t,s0)
-+HOME_DIR/\.fontconfig(/.*)? gen_context(system_u:object_r:user_fonts_cache_t,s0)
- HOME_DIR/\.ICEauthority.* -- gen_context(system_u:object_r:iceauth_home_t,s0)
- HOME_DIR/\.xauth.* -- gen_context(system_u:object_r:xauth_home_t,s0)
- HOME_DIR/\.Xauthority.* -- gen_context(system_u:object_r:xauth_home_t,s0)
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-xserver/selinux-xserver-2.20101213-r2.ebuild,v 1.2 2011/06/02 13:12:17 blueness Exp $
-
-IUSE=""
-
-MODS="xserver"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-xserver-r2.patch"
# ChangeLog for sec-policy/selinux-zabbix
# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-zabbix/ChangeLog,v 1.5 2011/10/23 12:42:45 swift Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-zabbix/ChangeLog,v 1.6 2011/11/12 20:52:53 swift Exp $
+
+ 12 Nov 2011; <swift@gentoo.org> -files/fix-services-zabbix-r1.patch,
+ -selinux-zabbix-2.20101213.ebuild, -selinux-zabbix-2.20101213-r1.ebuild:
+ Removing old policies
23 Oct 2011; <swift@gentoo.org> selinux-zabbix-2.20110726-r2.ebuild:
Stabilization (tracker #384231)
+++ /dev/null
---- services/zabbix.te 2010-12-13 15:11:02.000000000 +0100
-+++ services/zabbix.te 2011-06-13 11:44:56.271000342 +0200
-@@ -9,9 +9,16 @@
- type zabbix_exec_t;
- init_daemon_domain(zabbix_t, zabbix_exec_t)
-
-+type zabbix_agent_t;
-+type zabbix_agent_exec_t;
-+init_daemon_domain(zabbix_agent_t, zabbix_agent_exec_t)
-+
- type zabbix_initrc_exec_t;
- init_script_file(zabbix_initrc_exec_t)
-
-+type zabbix_agent_initrc_exec_t;
-+init_script_file(zabbix_agent_initrc_exec_t)
-+
- # log files
- type zabbix_log_t;
- logging_log_file(zabbix_log_t)
-@@ -20,6 +27,9 @@
- type zabbix_var_run_t;
- files_pid_file(zabbix_var_run_t)
-
-+type zabbix_tmpfs_t;
-+files_tmpfs_file(zabbix_tmpfs_t);
-+
- ########################################
- #
- # zabbix local policy
-@@ -27,7 +37,11 @@
-
- allow zabbix_t self:capability { setuid setgid };
- allow zabbix_t self:fifo_file rw_file_perms;
-+allow zabbix_t self:process { setsched getsched signal };
- allow zabbix_t self:unix_stream_socket create_stream_socket_perms;
-+allow zabbix_t self:sem { create unix_write unix_read read write associate destroy }; #mutex requirement for log file
-+allow zabbix_t self:shm create_shm_perms;
-+allow zabbix_t self:tcp_socket create_stream_socket_perms;
-
- # log files
- allow zabbix_t zabbix_log_t:dir setattr;
-@@ -39,14 +53,81 @@
- manage_files_pattern(zabbix_t, zabbix_var_run_t, zabbix_var_run_t)
- files_pid_filetrans(zabbix_t, zabbix_var_run_t, { dir file })
-
-+sysnet_dns_name_resolve(zabbix_t)
-+
-+fs_tmpfs_filetrans(zabbix_t, zabbix_tmpfs_t, { dir file })
-+manage_files_pattern(zabbix_t, tmpfs_t, zabbix_tmpfs_t)
-+
-+# configuration file
- files_read_etc_files(zabbix_t)
-
- miscfiles_read_localization(zabbix_t)
-+corenet_tcp_bind_generic_node(zabbix_t)
-+corenet_tcp_bind_zabbix_port(zabbix_t)
-+
-+gentoo_zabbix_agent_tcp_connect(zabbix_t)
-
- optional_policy(`
-+ # Support MySQL connectivity both local (stream) and through network (tcp)
- mysql_stream_connect(zabbix_t)
-+ mysql_tcp_connect(zabbix_t)
- ')
-
- optional_policy(`
- postgresql_stream_connect(zabbix_t)
- ')
-+
-+########################################
-+#
-+# zabbix agent local policy
-+#
-+
-+allow zabbix_agent_t self:capability { setuid setgid };
-+allow zabbix_agent_t self:process { setsched getsched signal };
-+allow zabbix_agent_t self:fifo_file rw_file_perms;
-+allow zabbix_agent_t self:unix_stream_socket create_stream_socket_perms;
-+allow zabbix_agent_t self:sem { create unix_write unix_read read write associate destroy }; #mutex requirement for log file
-+allow zabbix_agent_t self:tcp_socket create_stream_socket_perms;
-+allow zabbix_agent_t self:shm create_shm_perms;
-+
-+## Rules relating to the objects managed by this policy file
-+# Logging access
-+filetrans_pattern(zabbix_agent_t, zabbix_log_t, zabbix_log_t, file)
-+manage_files_pattern(zabbix_agent_t, zabbix_log_t, zabbix_log_t)
-+# PID file management
-+manage_files_pattern(zabbix_agent_t, zabbix_var_run_t, zabbix_var_run_t)
-+files_pid_filetrans(zabbix_agent_t, zabbix_var_run_t, file)
-+# Port access
-+gentoo_zabbix_tcp_connect(zabbix_agent_t)
-+# Shared memory
-+rw_files_pattern(zabbix_agent_t, zabbix_tmpfs_t, zabbix_tmpfs_t)
-+fs_tmpfs_filetrans(zabbix_agent_t, zabbix_tmpfs_t, file)
-+
-+## kernel layer module calls
-+kernel_read_all_sysctls(zabbix_agent_t)
-+kernel_read_system_state(zabbix_agent_t)
-+#corecmd_exec_bin(zabbix_agent_t)
-+#corecmd_exec_shell(zabbix_agent_t)
-+corecmd_read_all_executables(zabbix_agent_t)
-+corenet_tcp_bind_generic_node(zabbix_agent_t)
-+corenet_tcp_bind_zabbix_agent_port(zabbix_agent_t)
-+corenet_tcp_connect_ssh_port(zabbix_agent_t) # Agent supports ssh connectivity tests
-+corenet_tcp_connect_zabbix_port(zabbix_agent_t)
-+dev_getattr_all_blk_files(zabbix_agent_t)
-+dev_getattr_all_chr_files(zabbix_agent_t)
-+domain_search_all_domains_state(zabbix_agent_t)
-+files_read_all_symlinks(zabbix_agent_t)
-+files_read_etc_files(zabbix_agent_t)
-+files_getattr_all_dirs(zabbix_agent_t)
-+files_getattr_all_files(zabbix_agent_t)
-+fs_getattr_all_fs(zabbix_agent_t)
-+
-+## system layer module calls
-+#hostname_exec(zabbix_agent_t)
-+init_read_utmp(zabbix_agent_t)
-+logging_search_logs(zabbix_agent_t)
-+miscfiles_read_localization(zabbix_agent_t)
-+sysnet_dns_name_resolve(zabbix_agent_t)
-+
-+## other modules
-+#ssh_exec(zabbix_agent_t)
---- services/zabbix.fc 2010-08-03 15:11:09.000000000 +0200
-+++ services/zabbix.fc 2011-06-12 20:12:49.376002444 +0200
-@@ -1,6 +1,8 @@
- /etc/rc\.d/init\.d/zabbix -- gen_context(system_u:object_r:zabbix_initrc_exec_t,s0)
-+/etc/rc\.d/init\.d/zabbix-agentd -- gen_context(system_u:object_r:zabbix_agent_initrc_exec_t,s0)
-
--/usr/bin/zabbix_server -- gen_context(system_u:object_r:zabbix_exec_t,s0)
-+/usr/(s)?bin/zabbix_server -- gen_context(system_u:object_r:zabbix_exec_t,s0)
-+/usr/(s)?bin/zabbix_agentd -- gen_context(system_u:object_r:zabbix_agent_exec_t,s0)
-
- /var/log/zabbix(/.*)? gen_context(system_u:object_r:zabbix_log_t,s0)
-
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-zabbix/selinux-zabbix-2.20101213-r1.ebuild,v 1.1 2011/06/30 10:04:18 blueness Exp $
-EAPI="4"
-
-IUSE=""
-
-MODS="zabbix"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="~amd64 ~x86"
-
-POLICY_PATCH="${FILESDIR}/fix-services-zabbix-r1.patch"
+++ /dev/null
-# Copyright 1999-2011 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-zabbix/selinux-zabbix-2.20101213.ebuild,v 1.2 2011/06/02 13:12:38 blueness Exp $
-
-IUSE=""
-
-MODS="zabbix"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for general applications"
-
-KEYWORDS="amd64 x86"
projects / gentoo.git / commitdiff