new package. fixes #11722. x86 masked

4 files changed, 122 insertions, 0 deletions

diff --git a/sys-kernel/rsbac-sources/ChangeLog b/sys-kernel/rsbac-sources/ChangeLog
new file mode 100644
index 000000000000..793b15e436bd
--- /dev/null
+++ b/sys-kernel/rsbac-sources/ChangeLog
@@ -0,0 +1,8 @@
+# ChangeLog for sys-kernel/rsbac-sources
+# Copyright 2002 Gentoo Technologies, Inc.; Distributed under the GPL
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/rsbac-sources/ChangeLog,v 1.1 2003/02/07 19:36:00 rphillips Exp $
+
+*rsbac-sources-2.4.20 (7 Feb 2003)
+
+  7 Feb 2003; Ryan Phillips <rphillips@gentoo.org> :
+  New package. Submitted by Quequero. Fixes #11722
diff --git a/sys-kernel/rsbac-sources/files/digest-rsbac-sources-2.4.20 b/sys-kernel/rsbac-sources/files/digest-rsbac-sources-2.4.20
new file mode 100644
index 000000000000..ca08deeb6f94
--- /dev/null
+++ b/sys-kernel/rsbac-sources/files/digest-rsbac-sources-2.4.20
@@ -0,0 +1,6 @@
+MD5 c439d5c93d7fc9a1480a90842465bb97 linux-2.4.20.tar.bz2 27421046
+MD5 9db902b43cec7a1715eb66a69c68516e rsbac-v1.2.1.tar.bz2 410016
+MD5 d028fd84ee589d58f00c52778d76b663 patch-2.4.20-v1.2.1.gz 56329
+MD5 dc6fa3d792886f034fd27a0d4c078cf8 rsbac-bugfix-v1.2.1-1.diff 593
+MD5 d04a66817399eb858e552d54cd0f24c2 rsbac-bugfix-v1.2.1-2.diff 619
+MD5 cace36ff8134517558357d189efbcbbf rsbac-bugfix-v1.2.1-3.diff 2269
diff --git a/sys-kernel/rsbac-sources/files/nr_rsbac_patch.diff b/sys-kernel/rsbac-sources/files/nr_rsbac_patch.diff
new file mode 100644
index 000000000000..9622f35642b2
--- /dev/null
+++ b/sys-kernel/rsbac-sources/files/nr_rsbac_patch.diff
@@ -0,0 +1,10 @@
+--- syscall_rsbac.h.orig	2002-12-07 15:52:33.000000000 +0000
++++ syscall_rsbac.h	2002-12-07 15:51:21.000000000 +0000
+@@ -14,6 +14,7 @@
+ 
+ /* to keep include/asm-alpha/unistd.h happy */
+ #define __LIBRARY__
++#define __NR_rsbac __NR_security
+ 
+ #include <linux/unistd.h>
+ #include <rsbac/types.h>
diff --git a/sys-kernel/rsbac-sources/rsbac-sources-2.4.20.ebuild b/sys-kernel/rsbac-sources/rsbac-sources-2.4.20.ebuild
new file mode 100644
index 000000000000..ab5c0faac591
--- /dev/null
+++ b/sys-kernel/rsbac-sources/rsbac-sources-2.4.20.ebuild
@@ -0,0 +1,98 @@
+# Copyright 1999-2002 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-kernel/rsbac-sources/rsbac-sources-2.4.20.ebuild,v 1.1 2003/02/07 19:36:00 rphillips Exp $
+
+ETYPE="sources"
+
+OKV=${PV}
+KV=${PVR}
+
+# Kernel patch name
+KPATCH=patch-2.4.20-v1.2.1
+
+# Bugfix patch name
+BUGFIX=rsbac-bugfix-v1.2.1
+
+# RSBAC packet name
+RSBAC=rsbac-v1.2.1
+
+DESCRIPTION="Rule Set Based Access Control (RSBAC) Kernel Patch"
+HOMEPAGE="http://www.rsbac.org"
+SRC_URI="http://www.kernel.org/pub/linux/kernel/v2.4/linux-${OKV}.tar.bz2 
+http://www.rsbac.org/code/rsbac-v1.2.1.tar.bz2 
+http://www.rsbac.org/patches/v1.2.1/patch-2.4.20-v1.2.1.gz 
+http://www.rsbac.org/bugfixes/rsbac-bugfix-v1.2.1-1.diff 
+http://www.rsbac.org/bugfixes/rsbac-bugfix-v1.2.1-2.diff 
+http://www.rsbac.org/bugfixes/rsbac-bugfix-v1.2.1-3.diff"
+
+LICENSE="GPL-2"
+EXTRAVERSION=-rsbac
+KEYWORDS="~x86"
+IUSE="ncurses"
+DEPEND=">=sys-devel/binutils-2.11.90.0.31 sys-devel/perl"
+RDEPEND=">=sys-libs/ncurses-5.2"
+
+S=${WORKDIR}/linux-${OKV}-rsbac
+
+src_unpack() {
+		unpack linux-${OKV}.tar.bz2
+		mv linux-${OKV} linux-${OKV}-rsbac || die
+		cp ${DISTDIR}/${BUGFIX}-1.diff ${S} || die "Cannot find bugfix patch"
+		cp ${DISTDIR}/${BUGFIX}-2.diff ${S} || die "Cannot find bugfix patch"
+		cp ${DISTDIR}/${BUGFIX}-3.diff ${S} || die "Cannot find bugfix patch"
+		echo "-> Kernel unpacked..."
+		
+		cd ${S}
+		unpack ${RSBAC}.tar.bz2 || die "rsbac unpack failed!"
+		unpack ${KPATCH}.gz || die "kernel patch unpack failed!"
+		echo "-> RSBAC and kernel patch unpacked"
+
+		patch -p1 < ${KPATCH} || die "kernel patching failed!"
+		echo "-> Kernel patched..."
+		
+		patch -p1 < ${BUGFIX}-1.diff || die "cannot apply fix patch 1"
+		echo "-> Fix patch 1 applied"
+
+		patch -p1 < ${BUGFIX}-2.diff || die "cannot apply fix patch 2"
+		echo "-> Fix patch 2 applied"
+
+		patch -p1 < ${BUGFIX}-3.diff || die "cannot apply fix patch 1"
+		echo "-> Fix patch 3 applied"
+
+		# We need to have our kernel in /boot
+		mv Makefile Makefile.orig
+		sed -e 's:#export\tINSTALL_PATH:export\tINSTALL_PATH:' \
+		    -e "s:^\(EXTRAVERSION =\).*:\1 ${EXTRAVERSION}:" \
+			Makefile.orig > Makefile || die "Cannot edit Makefile"
+		rm Makefile.orig
+		echo "-> Makefile patched"
+
+		cd ${S}/include/rsbac
+		# There is a definition missing, this patch resolve the problem - Quequero
+		patch -p0 < ${FILESDIR}/nr_rsbac_patch.diff || die "can't patch syscall_rsbac.h"
+
+}
+
+src_compile() {
+		einfo "Compile this kernel by yourself and good luck!"
+}
+
+src_install() {
+		dodir /usr/src
+		echo ">>> Copying sources..."
+		mv ${WORKDIR}/linux* ${D}/usr/src
+}
+
+pkg_postinst() {
+		rm -f ${ROOT}usr/src/linux
+		ln -sf linux-${OKV}-rsbac ${ROOT}/usr/src/linux
+
+		einfo "-> Kernel tree is OK"
+			
+		# We really need rsbac-admin otherwise it will be impossible to manage the new kernel permissions
+		# but we can't install it before the kernel, rsbac-admin needs some headers included only in
+		# the rsbac-kernel tree - Quequero
+		einfo ">>> *** IMPORTANT *** <<<"
+		einfo ">>> *** YOU MUST INSTALL sys-apps/rsbac-admin FOR MANAGING THIS KERNEL *** <<<"
+}
+