blob: 1e2b63c6172e0b67e9b078979f2411f641ffaf7b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
|
# Copyright 1999-2006 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-apps/policycoreutils/policycoreutils-1.30.30.ebuild,v 1.1 2006/10/05 06:47:07 pebenito Exp $
IUSE="nls pam"
inherit eutils python
EXTRAS_VER="1.16"
SEMNG_VER="1.6.17"
#SELNX_VER="${PV}"
SELNX_VER="1.30.29"
# BUGFIX_PATCH="${FILESDIR}/policycoreutils-1.30.6.diff"
DESCRIPTION="SELinux core utilities"
HOMEPAGE="http://www.nsa.gov/selinux"
SRC_URI="http://www.nsa.gov/selinux/archives/${P}.tgz
mirror://gentoo/policycoreutils-extra-${EXTRAS_VER}.tar.bz2"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~amd64 ~x86"
RDEPEND=">=sys-libs/libselinux-${SELNX_VER}
>=sys-libs/glibc-2.4
pam? ( sys-libs/pam )
=sys-libs/libsemanage-${SEMNG_VER}*"
DEPEND="${RDEPEND}
nls? ( sys-devel/gettext )"
S2=${WORKDIR}/policycoreutils-extra
throw_pam_warning() {
# this is an extremely important message that needs to be seen
# thus it being shown at the beginning and end of the ebuild
if ! useq pam; then
eerror "PAM is disabled. This is not a supported config for"
eerror "general use. Disabling PAM decreases security with"
eerror "respect to SELinux protection of authentication."
eerror "It also requires policy changes."
ebeep 4
epause 4
fi
}
pkg_setup() {
throw_pam_warning
}
src_unpack() {
unpack ${A}
cd ${S}
[ ! -z "${BUGFIX_PATCH}" ] && epatch "${BUGFIX_PATCH}"
epatch ${FILESDIR}/policycoreutils-1.32-quietlp.diff
# This warning makes no sense, in this context
sed -i -e '/FILE/ s/;/=NULL;/' ${S}/audit2why/audit2why.c \
|| die "audit2why sed failed"
# rlpkg is more useful than fixfiles
sed -i -e '/^all/s/fixfiles//' ${S}/scripts/Makefile \
|| die "fixfiles sed 1 failed"
sed -i -e '/fixfiles/d' ${S}/scripts/Makefile \
|| die "fixfiles sed 2 failed"
if ! useq pam; then
# disable pam
sed -i -e s/-lpam/-lcrypt/ -e s/-lpam_misc// -e s/-DUSE_PAM// \
${S}/run_init/Makefile || die "PAM sed 1 failed"
sed -i -e s/-lpam/-lcrypt/ -e s/-lpam_misc// -e s/-DUSE_PAM// \
${S}/newrole/Makefile || die "PAM sed 2 failed"
sed -i -e s/-lpam/-lcrypt/ -e s/-lpam_misc// -e s/-DUSE_PAM// \
${S2}/src/Makefile || die "PAM sed 3 failed"
fi
if ! useq nls; then
# disable locale stuff
sed -i -e s/-DUSE_NLS// ${S}/run_init/Makefile \
|| die "NLS sed 1 failed"
sed -i -e s/-DUSE_NLS// ${S}/newrole/Makefile \
|| die "NLS sed 2 failed"
sed -i -e s/-DUSE_NLS// ${S}/load_policy/Makefile \
|| die "NLS sed 3 failed"
sed -i -e 's/ po //' ${S}/Makefile \
|| die "NLS sed 4 failed"
fi
# fix up to accept Gentoo CFLAGS
local SUBDIRS="`cd ${S} && find -type d | cut -d/ -f2`"
for i in ${SUBDIRS}; do
sed -i -e "s:-Wall:-Wall ${CFLAGS}:g" ${S}/${i}/Makefile \
|| die "${i} Makefile CFLAGS fix failed."
done
}
src_compile() {
python_version
einfo "Compiling policycoreutils"
emake -C ${S} PYLIBVER="python${PYVER}" || die
einfo "Compiling policycoreutils-extra"
emake -C ${S2} || die
}
src_install() {
python_version
einfo "Installing policycoreutils"
make DESTDIR="${D}" -C ${S} PYLIBVER="python${PYVER}" install || die
einfo "Installing policycoreutils-extra"
make DESTDIR="${D}" -C ${S2} install || die
# remove redhat-style init script
rm -fR ${D}/etc/rc.d
# compatibility symlink
dosym /sbin/setfiles /usr/sbin/setfiles
useq pam || rm -fR ${D}/etc/pam.d
}
pkg_postinst() {
python_version
python_mod_optimize ${ROOT}usr/lib/python${PYVER}/site-packages
throw_pam_warning
}
pkg_postrm() {
python_version
python_mod_cleanup ${ROOT}usr/lib/python${PYVER}/site-packages
}
|
GitWeb