diff options
author | Chris PeBenito <pebenito@gentoo.org> | 2004-02-03 03:07:28 +0000 |
---|---|---|
committer | Chris PeBenito <pebenito@gentoo.org> | 2004-02-03 03:07:28 +0000 |
commit | e3e5f1c114ec90f8fc63a7a502b365f41b66c28c (patch) | |
tree | 61ca9cebfdd0624f166bfd1522148ed4b2113f2f /sec-policy | |
parent | New release, added ssl support, disable mysql support temporarily. Closes #39... (diff) | |
download | gentoo-2-e3e5f1c114ec90f8fc63a7a502b365f41b66c28c.tar.gz gentoo-2-e3e5f1c114ec90f8fc63a7a502b365f41b66c28c.tar.bz2 gentoo-2-e3e5f1c114ec90f8fc63a7a502b365f41b66c28c.zip |
misc fixes
Diffstat (limited to 'sec-policy')
3 files changed, 81 insertions, 1 deletions
diff --git a/sec-policy/selinux-base-policy/ChangeLog b/sec-policy/selinux-base-policy/ChangeLog index 6962e981d2f1..67777872faab 100644 --- a/sec-policy/selinux-base-policy/ChangeLog +++ b/sec-policy/selinux-base-policy/ChangeLog @@ -1,6 +1,13 @@ # ChangeLog for sec-policy/selinux-base-policy # Copyright 2000-2004 Gentoo Technologies, Inc.; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.12 2004/01/08 04:37:06 pebenito Exp $ +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.13 2004/02/03 03:07:28 pebenito Exp $ + +*selinux-base-policy-20040202 (02 Feb 2004) + + 02 Feb 2004; Chris PeBenito <pebenito@gentoo.org> + selinux-base-policy-20040202.ebuild: + A few misc fixes. Allow portage to update bootloader code, such as in lilo or + grub postinst. This requires checkpolicy 1.4-r1. *selinux-base-policy-20031225 (25 Dec 2003) diff --git a/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20040202 b/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20040202 new file mode 100644 index 000000000000..413c0b49d783 --- /dev/null +++ b/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20040202 @@ -0,0 +1 @@ +MD5 5b208058ff2889761ff69c0ea6a8830e selinux-base-policy-20040202.tar.bz2 61252 diff --git a/sec-policy/selinux-base-policy/selinux-base-policy-20040202.ebuild b/sec-policy/selinux-base-policy/selinux-base-policy-20040202.ebuild new file mode 100644 index 000000000000..51068005f160 --- /dev/null +++ b/sec-policy/selinux-base-policy/selinux-base-policy-20040202.ebuild @@ -0,0 +1,72 @@ +# Copyright 1999-2004 Gentoo Technologies, Inc. +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-20040202.ebuild,v 1.1 2004/02/03 03:07:28 pebenito Exp $ + +IUSE="build" + +DESCRIPTION="Gentoo base policy for SELinux" +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/" +SRC_URI="mirror://gentoo/${P}.tar.bz2" +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~x86 ppc ~sparc" +DEPEND="build? ( sys-devel/make )" +RDEPEND="sys-devel/m4 + sys-devel/make + !build? ( >=sys-libs/pam-0.77 )" + +S=${WORKDIR}/base-policy + +[ -z ${POLICYDIR} ] && POLICYDIR="/etc/security/selinux/src/policy" + +#src_unpack() { +# unpack ${A} +# cd ${S} +# epatch ${FILESDIR}/${P}-cvs.diff +#} + +src_install() { + if use build; then + # generate a file_contexts + dodir ${POLICYDIR}/file_contexts + einfo "Ignore the checkpolicy error on the next line." + make -C ${S} \ + FC=${D}/${POLICYDIR}/file_contexts/file_contexts \ + ${D}/${POLICYDIR}/file_contexts/file_contexts + + [ ! -f ${D}/${POLICYDIR}/file_contexts/file_contexts ] && \ + die "file_contexts was not generated." + else + # install full policy + dodir /etc/security/selinux/src + + insinto /etc/security + doins ${S}/appconfig/* + + cp -a ${S} ${D}/${POLICYDIR} + rm -fR ${D}/${POLICYDIR}/appconfig + fi +} + +pkg_postinst() { + echo + einfo "This is the base policy for SELinux on Gentoo. This policy" + einfo "package only covers the applications in the system profile." + einfo "More policy may need to be added according to your requirements." + echo + eerror "It is STRONGLY suggested that you evaluate and merge the" + eerror "policy changes. If any of the file contexts (*.fc) have" + eerror "changed, you should also relabel." + echo + ewarn "Please check the Changelog, there may be important information." + echo + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + sleep 8 +} |