blob: 4b3bae76f8b8d26ba7c814c07059d9fdd5905724 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
# Copyright 1999-2007 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-20070329.ebuild,v 1.3 2007/06/04 00:26:41 pebenito Exp $
IUSE=""
inherit eutils
DESCRIPTION="Gentoo base policy for SELinux"
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
LICENSE="GPL-2"
SLOT="0"
#KEYWORDS="~x86 ~ppc ~sparc ~amd64 ~mips ~alpha"
KEYWORDS="alpha amd64 mips ppc sparc x86"
RDEPEND=">=sys-apps/policycoreutils-1.30.30"
DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-1.30.12"
S=${WORKDIR}/
src_unpack() {
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
unpack ${A}
cd ${S}/refpolicy
epatch ${FILESDIR}/${PN}-${PV}.diff
for i in ${POLICY_TYPES}; do
mkdir -p ${S}/${i}/policy
cp ${FILESDIR}/modules.conf.${i} ${S}/${i}/policy/modules.conf
done
}
src_compile() {
local OPTS="MONOLITHIC=n DISTRO=gentoo QUIET=y"
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
cd ${S}/refpolicy
make ${OPTS} generate || die "Failed to create generated module files"
make ${OPTS} xml || die "XML generation failed."
for i in ${POLICY_TYPES}; do
# make ${OPTS} TYPE=${i} NAME=${i} LOCAL_ROOT=${S}/${i} conf \
# || die "${i} modules.conf update failed"
make ${OPTS} TYPE=${i} NAME=${i} LOCAL_ROOT=${S}/${i} base \
|| die "${i} compile failed"
done
}
src_install() {
local OPTS="MONOLITHIC=n DISTRO=gentoo QUIET=y DESTDIR=${D}"
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
cd ${S}/refpolicy
for i in ${POLICY_TYPES}; do
make ${OPTS} TYPE=${i} NAME=${i} LOCAL_ROOT=${S}/${i} install \
|| die "${i} install failed."
make ${OPTS} TYPE=${i} NAME=${i} install-headers \
|| die "${i} headers install failed."
echo "run_init_t" > ${D}/etc/selinux/${i}/contexts/run_init_type
echo "textrel_shlib_t" >> ${D}/etc/selinux/${i}/contexts/customizable_types
# libsemanage won't make this on its own
keepdir /etc/selinux/${i}/policy
done
dodoc doc/Makefile.example doc/example.{te,fc,if}
insinto /etc/selinux
doins ${FILESDIR}/config
}
pkg_postinst() {
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="strict targeted"
if has "loadpolicy" $FEATURES ; then
for i in ${POLICY_TYPES}; do
einfo "Inserting base module into ${i} module store."
cd /usr/share/selinux/${i}
semodule -s ${i} -b base.pp
done
else
echo
echo
eerror "Policy has not been loaded. It is strongly suggested"
eerror "that the policy be loaded before continuing!!"
echo
einfo "Automatic policy loading can be enabled by adding"
einfo "\"loadpolicy\" to the FEATURES in make.conf."
echo
echo
ebeep 4
epause 4
fi
}
|
GitWeb