blob: a9642947593d636649898784853f806e2c45a753 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
# Copyright 1999-2005 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-20041123.ebuild,v 1.2 2005/01/20 01:00:48 pebenito Exp $
IUSE="build"
inherit eutils
DESCRIPTION="Gentoo base policy for SELinux"
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
SRC_URI="mirror://gentoo/${P}.tar.bz2"
LICENSE="GPL-2"
SLOT="0"
#KEYWORDS="~x86 ~ppc ~sparc ~amd64"
KEYWORDS="x86 ppc sparc amd64"
DEPEND="build? ( sys-devel/make
sys-devel/m4 )"
RDEPEND="sys-devel/m4
sys-devel/make"
S=${WORKDIR}/base-policy
[ -z ${POLICYDIR} ] && POLICYDIR="/etc/security/selinux/src/policy"
# deprecated policies:
DEPRECATED="domains/program/devfsd.te domains/program/opt.te
file_contexts/program/devfsd.fc file_contexts/program/opt.fc
file_contexts/users.fc domains/program/inetd.te
domains/program/tcpd.te file_contexts/program/inetd.fc
file_contexts/program/tcpd.fc"
src_compile() {
return
}
src_install() {
if use build; then
# generate a file_contexts
dodir ${POLICYDIR}/file_contexts
einfo "Ignore the checkpolicy error on the next line."
make -C ${S} \
FC=${D}/${POLICYDIR}/file_contexts/file_contexts \
${D}/${POLICYDIR}/file_contexts/file_contexts
[ ! -f ${D}/${POLICYDIR}/file_contexts/file_contexts ] && \
die "file_contexts was not generated."
else
# install full policy
dodir /etc/security/selinux/src
insinto /etc/security
doins ${S}/appconfig/*
cp -a ${S} ${D}/${POLICYDIR}
rm -fR ${D}/${POLICYDIR}/appconfig
fi
}
pkg_postinst() {
local isdeprecated
echo
einfo "This is the base policy for SELinux on Gentoo. This policy"
einfo "package only covers the applications in the system profile."
einfo "More policy may need to be added according to your requirements."
echo
eerror "It is STRONGLY suggested that you evaluate and merge the"
eerror "policy changes. If any of the file contexts (*.fc) have"
eerror "changed, you should also relabel."
echo
ewarn "Please check the Changelog, there may be important information."
echo
echo
einfo "Checking for deprecated policy..."
for i in $DEPRECATED; do
if [ -f "${POLICYDIR}/${i}" ]; then
eerror "${POLICYDIR}/${i}"
isdeprecated="y"
fi
done
[ "${isdeprecated}" ] && \
eerror "The above policy file(s) should be removed if possible." || \
einfo "None found."
ebeep 4
epause 4
}
|
GitWeb