From 7ebacc8567a5fdd11012db6565ae4a1bd557a298 Mon Sep 17 00:00:00 2001 From: "Anthony G. Basile" Date: Mon, 25 Jul 2011 22:58:54 +0000 Subject: [PATCH] Initial commit to tree Package-Manager: portage-2.1.10.3/cvs/Linux x86_64 --- sec-policy/selinux-haveged/ChangeLog | 21 ++++++++++ sec-policy/selinux-haveged/Manifest | 16 +++++++ .../files/fix-services-haveged-r1.patch | 42 +++++++++++++++++++ sec-policy/selinux-haveged/metadata.xml | 6 +++ .../selinux-haveged-2.20101213-r1.ebuild | 18 ++++++++ .../selinux-haveged-2.20101213-r2.ebuild | 16 +++++++ 6 files changed, 119 insertions(+) create mode 100644 sec-policy/selinux-haveged/ChangeLog create mode 100644 sec-policy/selinux-haveged/Manifest create mode 100644 sec-policy/selinux-haveged/files/fix-services-haveged-r1.patch create mode 100644 sec-policy/selinux-haveged/metadata.xml create mode 100644 sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild create mode 100644 sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild diff --git a/sec-policy/selinux-haveged/ChangeLog b/sec-policy/selinux-haveged/ChangeLog new file mode 100644 index 000000000000..b2fa4128299a --- /dev/null +++ b/sec-policy/selinux-haveged/ChangeLog @@ -0,0 +1,21 @@ +# ChangeLog for sec-policy/selinux-haveged +# Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2 +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/ChangeLog,v 1.1 2011/07/25 22:58:54 blueness Exp $ + +*selinux-haveged-2.20101213-r1 (25 Jul 2011) + + 25 Jul 2011; Anthony G. Basile + +files/fix-services-haveged-r1.patch, +selinux-haveged-2.20101213-r1.ebuild, + +selinux-haveged-2.20101213-r2.ebuild, +metadata.xml: + Initial commit to tree + +*selinux-haveged-2.20101213-r2 (21 Jul 2011) + + 21 Jul 2011; +selinux-haveged-2.20101213-r2.ebuild: + Do not use a haveged domain, but refer to audio-entropyd + + 17 Jul 2011; +files/fix-services-haveged-r1.patch, + +selinux-haveged-2.20101213-r1.ebuild, +metadata.xml: + Initial support for haveged + + diff --git a/sec-policy/selinux-haveged/Manifest b/sec-policy/selinux-haveged/Manifest new file mode 100644 index 000000000000..a72f76e68c74 --- /dev/null +++ b/sec-policy/selinux-haveged/Manifest @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA256 + +AUX fix-services-haveged-r1.patch 1121 RMD160 fc4ec16446b365a3c1d3238e513a981646b59944 SHA1 311976796647ff7ba03a100302c5fe77d58e80e7 SHA256 1b2807f9be93293a8939251f13f245b7a26a29efc724640337ded33c115ae433 +DIST refpolicy-2.20101213.tar.bz2 559450 RMD160 4858f792f4db5b179de6fb8419a626c29d59bdd3 SHA1 0e881e99b8950a358eadc44633551ca10f12eaee SHA256 b691ee8f6066cc19bb0d4384fe3be277d97d22e9d4ac2db0c252065e8c3535de +EBUILD selinux-haveged-2.20101213-r1.ebuild 513 RMD160 e882075184cfb57a22013c4e43142cccecc7b80d SHA1 7a5c8c227d28888e9753dbe5bb1641ac1d7f7b9e SHA256 001799b43c0b355592c56352c269fbb1908326023cc19f0d35e972cb25e993d8 +EBUILD selinux-haveged-2.20101213-r2.ebuild 514 RMD160 5cc6d9822513320084cce0faf3115cd16bda63f9 SHA1 5d73d7d9009db29709c5663d6a3893cbd5d6d163 SHA256 08868600f2bf4223a39e48ad90f366663ebdbaf2f40813b3a2a5fb05859d5f73 +MISC ChangeLog 828 RMD160 6312c69d4aafd48bb7ff2ad3bd6af13aaf8db9a4 SHA1 52d6cd71fadc9fc034427c3d35d1ca4469b348f3 SHA256 843cd33c246d7fe3d62becb5ff14346684a11538a72ff84a2e9737fdbeb319e0 +MISC metadata.xml 231 RMD160 3432cd9b807be77b66e130b4de3dd82f68c3070a SHA1 e47c5ab29df4deeeb3214cee63831c8c3f60f664 SHA256 a115a9266a58ba55675cdb9e54961e61bc69453e4faee154f00cf4f1e29a60c8 +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.0.17 (GNU/Linux) + +iEYEAREIAAYFAk4t9TgACgkQl5yvQNBFVTUIOgCePmZlLcl/17EMB3yFPv03Q6zs +xR8An0ggTMXrwoeZIw9CATzeUqTSm3qG +=ULAV +-----END PGP SIGNATURE----- diff --git a/sec-policy/selinux-haveged/files/fix-services-haveged-r1.patch b/sec-policy/selinux-haveged/files/fix-services-haveged-r1.patch new file mode 100644 index 000000000000..e67434ca735c --- /dev/null +++ b/sec-policy/selinux-haveged/files/fix-services-haveged-r1.patch @@ -0,0 +1,42 @@ +--- services/haveged.te 1970-01-01 01:00:00.000000000 +0100 ++++ services/haveged.te 2011-07-17 19:54:35.947000888 +0200 +@@ -0,0 +1,35 @@ ++policy_module(haveged, 1.0.0) ++ ++######################################## ++# ++# Declarations ++# ++ ++type haveged_t; ++type haveged_exec_t; ++init_daemon_domain(haveged_t, haveged_exec_t) ++ ++type haveged_var_run_t; ++files_pid_file(haveged_var_run_t) ++ ++######################################## ++# ++# haveged local policy ++# ++allow haveged_t self:capability sys_admin; ++allow haveged_t self:unix_dgram_socket create_socket_perms; ++allow haveged_t haveged_var_run_t:file manage_file_perms; ++ ++# pid file ++files_pid_filetrans(haveged_t, haveged_var_run_t, file) ++ ++## Kernel stuff ++kernel_rw_kernel_sysctl(haveged_t) ++dev_read_rand(haveged_t) ++dev_write_rand(haveged_t) ++ ++## System stuff ++miscfiles_read_localization(haveged_t) ++ ++## Other stuff ++logging_send_syslog_msg(haveged_t) +--- services/haveged.fc 1970-01-01 01:00:00.000000000 +0100 ++++ services/haveged.fc 2011-07-17 17:55:56.431000683 +0200 +@@ -0,0 +1 @@ ++/usr/sbin/haveged -- gen_context(system_u:object_r:haveged_exec_t,s0) diff --git a/sec-policy/selinux-haveged/metadata.xml b/sec-policy/selinux-haveged/metadata.xml new file mode 100644 index 000000000000..8334c93a0947 --- /dev/null +++ b/sec-policy/selinux-haveged/metadata.xml @@ -0,0 +1,6 @@ + + + + selinux + Gentoo SELinux policy for haveged + diff --git a/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild b/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild new file mode 100644 index 000000000000..01b7fdc2c32d --- /dev/null +++ b/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild @@ -0,0 +1,18 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r1.ebuild,v 1.1 2011/07/25 22:58:54 blueness Exp $ + +IUSE="" + +MODS="haveged" + +inherit selinux-policy-2 + +DESCRIPTION="SELinux policy for general applications" + +DEPEND=">=sec-policy/selinux-base-policy-2.20101213-r19" +RDEPEND="${DEPEND}" + +KEYWORDS="~amd64 ~x86" + +POLICY_PATCH="${FILESDIR}/fix-services-haveged-r1.patch" diff --git a/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild b/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild new file mode 100644 index 000000000000..c55feefb5598 --- /dev/null +++ b/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild @@ -0,0 +1,16 @@ +# Copyright 1999-2011 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-haveged/selinux-haveged-2.20101213-r2.ebuild,v 1.1 2011/07/25 22:58:54 blueness Exp $ + +EAPI=3 + +DESCRIPTION="SELinux policy for haveged (meta-package for selinux-audio-entropyd)" +HOMEPAGE="http://hardened.gentoo.org/selinux" +SRC_URI="" + +LICENSE="as-is" +SLOT="0" +KEYWORDS="~amd64 ~x86" +IUSE="" + +RDEPEND=">=sec-policy/selinux-audio-entropyd-2.20101213-r1" -- 2.26.2