updated policy and added subject,object flags to default.acl

4 files changed, 61 insertions, 3 deletions

diff --git a/sys-apps/grsecurity-base-policy/ChangeLog b/sys-apps/grsecurity-base-policy/ChangeLog
index ceae01c909f8..9f3497ebf93e 100644
--- a/sys-apps/grsecurity-base-policy/ChangeLog
+++ b/sys-apps/grsecurity-base-policy/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sys-apps/grsecurity-base-policy
 # Copyright 2000-2003 Gentoo Technologies, Inc.; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sys-apps/grsecurity-base-policy/ChangeLog,v 1.1 2003/05/17 02:40:13 method Exp $
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/grsecurity-base-policy/ChangeLog,v 1.2 2003/06/14 19:54:44 solar Exp $
+
+*grsecurity-base-policy-20030614 (14 Jun 2003)
+
+  14 Jun 2003; <solar@gentoo.org> Manifest,
+  grsecurity-base-policy-20030614.ebuild:
+  updates
 
 *grsecurity-base-policy-20030516 (16 May 2003)
 
diff --git a/sys-apps/grsecurity-base-policy/Manifest b/sys-apps/grsecurity-base-policy/Manifest
index 18ff6b7e2f52..a2739fd38395 100644
--- a/sys-apps/grsecurity-base-policy/Manifest
+++ b/sys-apps/grsecurity-base-policy/Manifest
@@ -1,5 +1,5 @@
-MD5 6cc89f80b9ad9de656d017aec3860bb0 ChangeLog 450
+MD5 3ac8295e8250de9fde50bf9283b9e020 ChangeLog 594
 MD5 029804c1e63e5b37dfcbbbd178eebbd7 grsecurity-base-policy-20030516.ebuild 1280
-MD5 b09fd72ecf8005b86a99cbaf81aa1705 grsecurity-base-policy-20030614.ebuild 1522
+MD5 1d0b99964955069766edf713d80b805b grsecurity-base-policy-20030614.ebuild 1654
 MD5 720883d1c347b8afba845994fcf8e2f1 files/digest-grsecurity-base-policy-20030516 81
 MD5 bafedfd64cb9f8d71aa4adf661e6b2a5 files/digest-grsecurity-base-policy-20030614 81
diff --git a/sys-apps/grsecurity-base-policy/files/digest-grsecurity-base-policy-20030614 b/sys-apps/grsecurity-base-policy/files/digest-grsecurity-base-policy-20030614
new file mode 100644
index 000000000000..9b142c50d0c4
--- /dev/null
+++ b/sys-apps/grsecurity-base-policy/files/digest-grsecurity-base-policy-20030614
@@ -0,0 +1 @@
+MD5 7c5f8d687ea2c0aca7467323d867406b grsecurity-base-policy-20030614.tar.gz 8237
diff --git a/sys-apps/grsecurity-base-policy/grsecurity-base-policy-20030614.ebuild b/sys-apps/grsecurity-base-policy/grsecurity-base-policy-20030614.ebuild
new file mode 100644
index 000000000000..f0cd8b9f32e3
--- /dev/null
+++ b/sys-apps/grsecurity-base-policy/grsecurity-base-policy-20030614.ebuild
@@ -0,0 +1,51 @@
+# Copyright 1999-2003 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/grsecurity-base-policy/grsecurity-base-policy-20030614.ebuild,v 1.1 2003/06/14 19:54:44 solar Exp $
+
+S=${WORKDIR}/grsecurity-base-policy
+
+DESCRIPTION="Template access control lists for gentoo grsecurity"
+HOMEPAGE="http://cvs.gentoo.org/~solar/snapshots"
+SRC_URI="mirror://gentoo/${P}.tar.gz"
+KEYWORDS="~x86"
+LICENSE="GPL-2"
+SLOT="0"
+MAINTAINER="solar@gentoo.org"
+IUSE=""
+
+DEPEND="virtual/glibc \
+	sys-apps/fileutils \
+	sys-apps/textutils \
+	sys-apps/sh-utils \
+	sys-apps/sed"
+
+RDEPEND=">=sys-apps/gradm-1.9.9h-r1"
+
+src_install() {
+	GRACL_DIR=/etc/grsec/gentoo/grsecurity-base-policy/
+	count=0;
+
+	cd ${S}
+
+	/bin/mkdir -m 0700 -p ${D}/${GRACL_DIR} || die "Cant set permissions on ${D}/${GRACL_DIR}"
+	echo "include <${GRACL_DIR}>" > ${D}/etc/grsec/acl
+	/bin/cp default.acl ${D}/${GRACL_DIR}/
+
+	for pkg in `/usr/lib/portage/bin/pkglist | /bin/sed 's/-[0-9].*//g' | /usr/bin/sort | /usr/bin/uniq`; do
+		if [ -d "${pkg}" ] ; then
+			for acl in `/bin/ls -1 ${pkg}/*.acl`; do
+				count=$(($count + 1))
+				einfo "Installing $acl that you need for ${pkg}"
+				/bin/mkdir -p ${D}/${GRACL_DIR}/`/usr/bin/dirname $acl`
+				/bin/cp $acl ${D}/${GRACL_DIR}/$acl
+			done
+		fi
+	done
+	einfo "Installed ${count} ACL's for your system."
+}
+
+pkg_postinst() {
+	einfo "Note: This package installs its acls based on what you had previously installed"
+	einfo "You are encouraged to audit the policy before using in a production enviroment"
+	einfo "Bugs can be reported to <${MAINTAINER}> using http://bugs.gentoo.org"
+}