diff options
author | Chris PeBenito <pebenito@gentoo.org> | 2004-06-04 20:06:48 +0000 |
---|---|---|
committer | Chris PeBenito <pebenito@gentoo.org> | 2004-06-04 20:06:48 +0000 |
commit | 38518dc5858f17a6f12a30e87cd76b8927f7982f (patch) | |
tree | a5e71dfbde023e2f3f3e6825f35083f434b2c723 /sec-policy | |
parent | change USE typo from postgresql to postgres; #52988 (Manifest recommit) (diff) | |
download | gentoo-2-38518dc5858f17a6f12a30e87cd76b8927f7982f.tar.gz gentoo-2-38518dc5858f17a6f12a30e87cd76b8927f7982f.tar.bz2 gentoo-2-38518dc5858f17a6f12a30e87cd76b8927f7982f.zip |
new release
Diffstat (limited to 'sec-policy')
3 files changed, 93 insertions, 1 deletions
diff --git a/sec-policy/selinux-base-policy/ChangeLog b/sec-policy/selinux-base-policy/ChangeLog index 0edc30584e5c..bdd7c03b0790 100644 --- a/sec-policy/selinux-base-policy/ChangeLog +++ b/sec-policy/selinux-base-policy/ChangeLog @@ -1,6 +1,12 @@ # ChangeLog for sec-policy/selinux-base-policy # Copyright 2000-2004 Gentoo Technologies, Inc.; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.22 2004/05/16 01:22:22 pebenito Exp $ +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.23 2004/06/04 20:06:48 pebenito Exp $ + +*selinux-base-policy-20040604 (04 Jun 2004) + + 04 Jun 2004; Chris PeBenito <pebenito@gentoo.org> + +selinux-base-policy-20040604.ebuild: + New release including 1.12 NSA policy, and experimental sesandbox. 15 May 2004; Chris PeBenito <pebenito@gentoo.org> selinux-base-policy-20040509.ebuild: diff --git a/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20040604 b/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20040604 new file mode 100644 index 000000000000..93c8057c758c --- /dev/null +++ b/sec-policy/selinux-base-policy/files/digest-selinux-base-policy-20040604 @@ -0,0 +1 @@ +MD5 d33b40353796d47b588f46de7b74c695 selinux-base-policy-20040604.tar.bz2 68772 diff --git a/sec-policy/selinux-base-policy/selinux-base-policy-20040604.ebuild b/sec-policy/selinux-base-policy/selinux-base-policy-20040604.ebuild new file mode 100644 index 000000000000..23fd7744658b --- /dev/null +++ b/sec-policy/selinux-base-policy/selinux-base-policy-20040604.ebuild @@ -0,0 +1,85 @@ +# Copyright 1999-2004 Gentoo Technologies, Inc. +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-20040604.ebuild,v 1.1 2004/06/04 20:06:48 pebenito Exp $ + +IUSE="build" + +DESCRIPTION="Gentoo base policy for SELinux" +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/" +SRC_URI="mirror://gentoo/${P}.tar.bz2" +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~x86 ~ppc ~sparc" +DEPEND="build? ( sys-devel/make + sys-devel/m4 )" +RDEPEND="sys-devel/m4 + sys-devel/make" + +S=${WORKDIR}/base-policy + +[ -z ${POLICYDIR} ] && POLICYDIR="/etc/security/selinux/src/policy" + +# deprecated policies: +DEPRECATED="domains/program/devfsd.te domains/program/opt.te + file_contexts/program/devfsd.fc file_contexts/program/opt.fc + file_contexts/users.fc" + +src_install() { + if use build; then + # generate a file_contexts + dodir ${POLICYDIR}/file_contexts + einfo "Ignore the checkpolicy error on the next line." + make -C ${S} \ + FC=${D}/${POLICYDIR}/file_contexts/file_contexts \ + ${D}/${POLICYDIR}/file_contexts/file_contexts + + [ ! -f ${D}/${POLICYDIR}/file_contexts/file_contexts ] && \ + die "file_contexts was not generated." + else + # install full policy + dodir /etc/security/selinux/src + + insinto /etc/security + doins ${S}/appconfig/* + + cp -a ${S} ${D}/${POLICYDIR} + rm -fR ${D}/${POLICYDIR}/appconfig + fi +} + +pkg_postinst() { + local isdeprecated + echo + einfo "This is the base policy for SELinux on Gentoo. This policy" + einfo "package only covers the applications in the system profile." + einfo "More policy may need to be added according to your requirements." + echo + eerror "It is STRONGLY suggested that you evaluate and merge the" + eerror "policy changes. If any of the file contexts (*.fc) have" + eerror "changed, you should also relabel." + echo + ewarn "Please check the Changelog, there may be important information." + echo + echo + + einfo "Checking for deprecated policy..." + for i in $DEPRECATED; do + if [ -f "${POLICYDIR}/${i}" ]; then + eerror "${POLICYDIR}/${i}" + isdeprecated="y" + fi + done + [ "${isdeprecated}" ] && \ + eerror "The above policy file(s) should be removed if possible." || \ + einfo "None found." + + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + echo -ne "\a" ; sleep 0.1 ; echo -ne "\a" ; sleep 1 + sleep 4 +} |