blob: 7d3c380fb844b15933e235e722729fe4c674afd9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
# Copyright 1999-2004 Gentoo Technologies, Inc.
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-apps/gradm/gradm-2.0.ebuild,v 1.4 2004/06/19 06:33:07 vapier Exp $
inherit flag-o-matic gcc
#MY_PV=2.0-${PV/*_/}
MAINTAINER="solar@gentoo.org"
DESCRIPTION="Administrative interface for grsecuritys2 access control lists"
HOMEPAGE="http://www.grsecurity.net/"
SRC_URI="http://www.grsecurity.net/gradm-${PV}.tar.gz"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="x86 ~ppc ~sparc ~arm ~amd64" ; # ~alpha"
IUSE=""
DEPEND="virtual/glibc
sys-devel/bison
sys-devel/flex
sys-apps/chpax"
S="${WORKDIR}/${PN}2"
src_unpack() {
unpack ${A}
cd ${S}
# (Jan 03 2004) - <solar@gentoo>
# static linking required for proper operation of gradm
# however ssp is known to break static linking when it's enabled
# in >=gcc-3.3.1 && <=gcc-3.3.2-r5 . So we strip ssp if needed.
gmicro=$(gcc-micro-version)
if [ "$(gcc-version)" == "3.3" -a -n "${gmicro}" -a ${gmicro} -le 2 ]; then
# extract out gentoo revision
gentoo_gcc_r=$($(gcc-getCC) -v 2>&1 | tail -n 1 | awk '{print $7}')
gentoo_gcc_r=${gentoo_gcc_r/,/}
gentoo_gcc_r=${gentoo_gcc_r/-/ }
gentoo_gcc_r=${gentoo_gcc_r:7}
[ -n "${gentoo_gcc_r}" -a ${gentoo_gcc_r} -le 5 ] && \
filter-flags -fstack-protector -fstack-protector-all
fi
ebegin "Patching Makefile to use gentoo CFLAGS"
sed -i -e "s|-O2|${CFLAGS}|" Makefile
eend $?
}
src_compile() {
cd ${S}
emake CC="$(gcc-getCC)" || die "compile problem"
}
src_install() {
cd ${S}
# Were not ready for init.d,script functions yet.
#exeinto /etc/init.d
#newexe ${FILESDIR}/grsecurity2.rc grsecurity2
#insinto /etc/conf.d
#doins ${FILESDIR}/grsecurity2
mkdir -p -m 700 ${D}/etc/grsec
doman gradm.8
dodoc acl
into /
dosbin grlearn gradm || die
# Normal users can authenticate to special roles now and thus
# need execution permission on gradm2. We remove group,other readable bits
# to help ensure that our gradm2 binary is as protected from misbehaving users.
fperms 711 ${D}/sbin/gradm
}
pkg_postinst() {
if [ ! -e /dev/grsec ] ; then
einfo "Making character device for grsec2 learning mode"
mkdir -p -m 755 /dev/
mknod -m 0622 /dev/grsec c 1 10 || die "Cant mknod for grsec learning device"
fi
}
|