diff options
author | Chris PeBenito <pebenito@gentoo.org> | 2006-02-02 00:36:27 +0000 |
---|---|---|
committer | Chris PeBenito <pebenito@gentoo.org> | 2006-02-02 00:36:27 +0000 |
commit | 44ca0e77e257b624a7eb5fff49b203228b0ca32d (patch) | |
tree | 1ce38f124ccc534cab3cc8b9821923bbc0509091 /sec-policy/selinux-base-policy/selinux-base-policy-99999999.ebuild | |
parent | mask cvs policy (diff) | |
download | gentoo-2-44ca0e77e257b624a7eb5fff49b203228b0ca32d.tar.gz gentoo-2-44ca0e77e257b624a7eb5fff49b203228b0ca32d.tar.bz2 gentoo-2-44ca0e77e257b624a7eb5fff49b203228b0ca32d.zip |
add experimental policy
(Portage version: 2.1_pre4)
Diffstat (limited to 'sec-policy/selinux-base-policy/selinux-base-policy-99999999.ebuild')
-rw-r--r-- | sec-policy/selinux-base-policy/selinux-base-policy-99999999.ebuild | 119 |
1 files changed, 119 insertions, 0 deletions
diff --git a/sec-policy/selinux-base-policy/selinux-base-policy-99999999.ebuild b/sec-policy/selinux-base-policy/selinux-base-policy-99999999.ebuild new file mode 100644 index 000000000000..5d79f1ece058 --- /dev/null +++ b/sec-policy/selinux-base-policy/selinux-base-policy-99999999.ebuild @@ -0,0 +1,119 @@ +# Copyright 1999-2006 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-99999999.ebuild,v 1.1 2006/02/02 00:36:27 pebenito Exp $ + +POLICY_TYPES="strict targeted" +OPTS="MONOLITHIC=n DISTRO=gentoo QUIET=y PKGNAME=${P}" + +IUSE="doc" + +ECVS_SERVER="cvs.sf.net:/cvsroot/serefpolicy" +ECVS_MODULE="refpolicy" +ECVS_USER="anonymous" + +inherit eutils cvs + +DESCRIPTION="Gentoo base policy for SELinux" +HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/" +LICENSE="GPL-2" +SLOT="0" + +KEYWORDS="~x86 ~ppc ~sparc ~amd64 ~mips ~alpha" +#KEYWORDS="x86 ppc sparc amd64 mips alpha" + +RDEPEND=">=sys-apps/policycoreutils-1.28" +DEPEND="${RDEPEND} + sys-devel/m4 + >=sys-apps/checkpolicy-1.28" + +S=${WORKDIR}/ + +src_unpack() { + cvs_src_unpack + + cd ${S} + for i in ${POLICY_TYPES}; do + einfo "Unpacking sources for ${i} policy" + cp -a refpolicy ${i} + cp ${FILESDIR}/modules.conf.${i} ${i}/policy/modules.conf + done +} + +src_compile() { + for i in ${POLICY_TYPES}; do + cd ${S}/${i} +# make ${OPTS} TYPE=${i} NAME=${i} conf \ +# || die "${i} modules.conf update failed" + + make ${OPTS} TYPE=${i} NAME=${i} base \ + || die "${i} compile failed" + + if useq doc && [[ ${i} == ${POLICY_TYPES/* /} ]]; then + einfo "Building reference policy interface reference webpages." + make ${OPTS} html || die "HTML docs compile failed" + fi + done +} + +src_install() { + OPTS="${OPTS} DESTDIR=${D}" + + for i in ${POLICY_TYPES}; do + cd ${S}/${i} + make ${OPTS} TYPE=${i} NAME=${i} install \ + || die "${i} install failed." + + echo "run_init_t" > ${D}/etc/selinux/${i}/contexts/run_init_type + + if [[ ${i} == ${POLICY_TYPES/* /} ]]; then + if useq doc; then + make ${OPTS} install-docs \ + || die "Docs install failed." + fi + + make ${OPTS} install-headers \ + || die "Headers install failed." + fi + done + + insinto /etc/selinux + doins ${FILESDIR}/semanage.conf + doins ${FILESDIR}/config +} + +pkg_postinst() { + # workaround bugs in libsemanage + for i in ${POLICY_TYPES}; do + # libsemanage won't make this on its own + mkdir -p /etc/selinux/${i}/policy + + # currently seusers cannot be inferred. for now + # inject one into the module store + if [ ! -f /etc/selinux/${i}/modules/active/seusers ]; then + mkdir -p /etc/selinux/${i}/modules/active + echo "root:root:" > /etc/selinux/${i}/modules/active/seusers + echo "__default__:user_u:" >> /etc/selinux/${i}/modules/active/seusers + fi + done + + if has "loadpolicy" $FEATURES ; then + for i in ${POLICY_TYPES}; do + einfo "Inserting base module into ${i} module store." + + cd /usr/share/selinux/${i} + semodule -s ${i} -b base.pp + done + else + echo + echo + eerror "Policy has not been loaded. It is strongly suggested" + eerror "that the policy be loaded before continuing!!" + echo + einfo "Automatic policy loading can be enabled by adding" + einfo "\"loadpolicy\" to the FEATURES in make.conf." + echo + echo + ebeep 4 + epause 4 + fi +} |