blob: acaca054945d44dfc1cda6fd1896c880b4eaf7f0 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
# Copyright 1999-2005 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-apps/rsbac-admin/rsbac-admin-1.2.4.ebuild,v 1.1 2005/02/10 11:24:55 kang Exp $
inherit eutils
IUSE="debug"
# RSBAC Adming packet name
ADMIN=rsbac-admin-v${PV}
DESCRIPTION="Rule Set Based Access Control (RSBAC) Admin Tools"
HOMEPAGE="http://www.rsbac.org/ http://hardened.gentoo.org/rsbac"
SRC_URI="http://rsbac.org/download/code/v${PV}/rsbac-admin-v${PV}.tar.bz2"
SLOT="0"
LICENSE="GPL-2"
KEYWORDS="~x86"
DEPEND="dev-util/dialog
sys-libs/pam
sys-apps/baselayout
|| ( >=sys-kernel/rsbac-sources-2.4.29-r1
>=sys-kernel/rsbac-dev-sources-2.6.10-r3 )"
RDEPEND=">=sys-libs/ncurses-5.2"
src_unpack() {
cd ${WORKDIR}
unpack ${ADMIN}.tar.bz2 || die "cannot unpack rsbac-admin tool"
cd ${WORKDIR}/${ADMIN}
}
src_compile() {
cd ${WORKDIR}/${ADMIN}
econf || die "cannot ./configure RSBAC Admin Tools."
cd ${WORKDIR}/${ADMIN}/contrib/rsbac-klogd-2.0; econf || die "cannot ./configure rsbac-klogd"
cd ${WORKDIR}/${ADMIN}/contrib/nss_rsbac; econf || die "cannot ./configure nss_rsbac"
cd ${WORKDIR}/${ADMIN}
emake || die "cannot make RSBAC Admin tools: Did you really already compiled
a RSBAC-enabled kernel ? Please check the documentation at:
http://hardened.gentoo.org/rsbac"
emake -C contrib/rsbac-klogd-2.0 || die "cannot make rsbac-klogd"
emake -C contrib/nss_rsbac || die "cannot make nss_rsbac"
emake -C contrib/pam_rsbac || die "cannot make pam_rsbac"
if use debug; then
emake -C contrib/regression || die "cannot make regression"
fi
}
src_install() {
cd ${WORKDIR}/${ADMIN}
einstall || die "cannot make install"
einstall -C contrib/rsbac-klogd-2.0 || die "cannot install rsbac-klogd"
einstall -C contrib/nss_rsbac || die "cannot install nss_rsbac"
if use debug; then
exeinto /usr/share/rsbac-admin-dev/regression
doexe contrib/regression/*_test
fi
insinto /etc
newins ${FILESDIR}/rsbac.conf rsbac.conf ${FILESDIR}/nsswitch.conf
exeinto /etc/init.d
newinitd ${FILESDIR}/rklogd.init rklogd
insinto /lib/security
newins ${WORKDIR}/${ADMIN}/contrib/pam_rsbac/pam_rsbac.so
dodir /secoff
keepdir /secoff
dodir /secoff/log
keepdir /secoff/log
}
pkg_postinst() {
if ! groupmod secoff; then
enewgroup secoff 400 || die "problem adding group secoff"
fi
if ! id secoff; then
enewuser secoff 400 /bin/bash /secoff secoff || die "problem adding user secoff"
fi
chmod 700 /secoff /secoff/log || die "problem changing permissions of /secoff and/or /secoff/log"
chown secoff:secoff -R /secoff || die "problem changing ownership of /secoff"
}
|