Initial resurrection

(Portage version: 2.1.10.41/cvs/Linux x86_64)

5 files changed, 122 insertions, 0 deletions

diff --git a/sys-apps/rsbac-admin/ChangeLog b/sys-apps/rsbac-admin/ChangeLog
new file mode 100644
index 000000000000..d3077828c66b
--- /dev/null
+++ b/sys-apps/rsbac-admin/ChangeLog
@@ -0,0 +1,9 @@
+
+
+*rsbac-admin-1.4.6 (07 Jan 2012)
+
+  07 Jan 2012; Anthony G. Basile <blueness@gentoo.org>
+  +rsbac-admin-1.4.6.ebuild, +files/nsswitch.conf, +files/rsbac.conf,
+  +metadata.xml:
+  Initial resurrection
+
diff --git a/sys-apps/rsbac-admin/files/nsswitch.conf b/sys-apps/rsbac-admin/files/nsswitch.conf
new file mode 100644
index 000000000000..43c5b172f0ab
--- /dev/null
+++ b/sys-apps/rsbac-admin/files/nsswitch.conf
@@ -0,0 +1,24 @@
+# /etc/nsswitch.conf:
+
+passwd:      compat rsbac [NOTFOUND=continue SUCCESS=continue]
+shadow:      compat rsbac
+group:       compat rsbac [NOTFOUND=continue SUCCESS=continue]
+
+# passwd:    db files nis
+# shadow:    db files nis
+# group:     db files nis
+
+hosts:       files dns
+networks:    files dns
+
+services:    db files
+protocols:   db files
+rpc:         db files
+ethers:      db files
+
+netmasks:    files
+netgroup:    files
+bootparams:  files
+
+automount:   files
+aliases:     files
diff --git a/sys-apps/rsbac-admin/files/rsbac.conf b/sys-apps/rsbac-admin/files/rsbac.conf
new file mode 100644
index 000000000000..e646c003898a
--- /dev/null
+++ b/sys-apps/rsbac-admin/files/rsbac.conf
@@ -0,0 +1,8 @@
+# RSBAC menu configuration
+# Thu Jun 17 01:36:19 CEST 2004
+RSBACMOD="PAX DAZ FF RC ACL AUTH CAP JAIL RES "
+DIALOG="dialog"
+# RSBACLANG is not set
+TMPDIR="/tmp"
+# RSBACPATH is not set
+# RSBACLOGFILE is not set
diff --git a/sys-apps/rsbac-admin/metadata.xml b/sys-apps/rsbac-admin/metadata.xml
new file mode 100644
index 000000000000..b7f395284f49
--- /dev/null
+++ b/sys-apps/rsbac-admin/metadata.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<herd>hardened</herd>
+	<maintainer>
+		<email>blueness@gentoo.org</email>
+		<name>Anthony G. Basile</name>
+	</maintainer>
+	<longdescription lang="en">
+		Administrative tool for RSBAC system
+	</longdescription>
+</pkgmetadata>
diff --git a/sys-apps/rsbac-admin/rsbac-admin-1.4.6.ebuild b/sys-apps/rsbac-admin/rsbac-admin-1.4.6.ebuild
new file mode 100644
index 000000000000..965c2dafc4be
--- /dev/null
+++ b/sys-apps/rsbac-admin/rsbac-admin-1.4.6.ebuild
@@ -0,0 +1,69 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/rsbac-admin/rsbac-admin-1.4.6.ebuild,v 1.1 2012/01/07 20:14:04 blueness Exp $
+
+EAPI="4"
+
+inherit user multilib toolchain-funcs
+
+DESCRIPTION="Rule Set Based Access Control (RSBAC) Admin Tools"
+HOMEPAGE="http://www.rsbac.org/"
+SRC_URI="http://www.rsbac.org/dl.php?file=code/${PV}/${P}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="pam"
+
+DEPEND="
+	dev-util/dialog
+	pam? ( sys-libs/pam )
+	sys-apps/baselayout"
+
+RDEPEND="
+	${DEPEND}
+	>=sys-libs/ncurses-5.2"
+
+src_compile() {
+	local rsbacmakeargs="libs tools"
+	use pam && rsbacmakeargs="${makeargs} pam nss"
+	emake PREFIX=/usr LIBDIR=/$(get_libdir) ${rsbacmakeargs}
+}
+
+src_install() {
+	local rsbacinstallargs="headers-install libs-install tools-install"
+	use pam && rsbacinstallargs="${rsbacinstallargs} pam-install nss-install"
+	emake PREFIX=/usr LIBDIR=/$(get_libdir) DESTDIR="${D}" ${rsbacinstallargs}
+
+	insinto /etc
+	doins "${FILESDIR}"/rsbac.conf
+	doins "${FILESDIR}"/nsswitch.conf
+
+	dodir /secoff
+	keepdir /secoff
+
+	dodir /var/log/rsbac
+	keepdir /var/log/rsbac
+
+	#FHS compliance
+	dodir /usr/$(get_libdir)
+	mv "${D}"/$(get_libdir)/librsbac.{,l}a "${D}"/usr/$(get_libdir)
+	mv "${D}"/$(get_libdir)/libnss_rsbac.{,l}a "${D}"/usr/$(get_libdir)
+	gen_usr_ldscript librsbac.so
+	gen_usr_ldscript libnss_rsbac.so
+}
+
+pkg_postinst() {
+	enewgroup secoff 400
+	enewuser secoff 400 /bin/bash /secoff secoff
+	enewgroup audit 404
+	enewuser audit 404 -1 /dev/null audit
+
+	chmod 700 /secoff /var/log/rsbac
+	chown secoff:secoff -R /secoff
+
+	einfo "It is suggested to run (for example) a separate copy of syslog-ng to"
+	einfo "log RSBAC messages, as user audit (uid 404) instead of using the deprecated"
+	einfo "rklogd. See http://www.rsbac.org/documentation/administration_examples/syslog-ng"
+	einfo "for more information."
+}