mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-08-21 22:41:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

Import selinux-related packages we need to modify

Browse Source
This commit is contained in:
Matthew Garrett 2015-06-26 16:46:16 -07:00
parent 13174352d2
commit 4efcf2f2ed
91 changed files with 6163 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

428
sdk_container/src/third_party/coreos-overlay/app-admin/setools/ChangeLog vendored Normal file
View File

@ -0,0 +1,428 @@
# ChangeLog for app-admin/setools
# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/app-admin/setools/ChangeLog,v 1.101 2015/05/10 09:06:14 perfinion Exp $
10 May 2015; Jason Zaman <perfinion@gentoo.org> setools-3.3.8-r7.ebuild:
stabilize selinux 2.4 userland
18 Apr 2015; Jason Zaman <perfinion@gentoo.org> setools-3.3.8-r7.ebuild:
Cleanup deps
16 Mar 2015; Mike Frysinger <vapier@gentoo.org> setools-3.3.8-r5.ebuild,
setools-3.3.8-r7.ebuild:
Use new toolchain helpers for selecting the bfd linker #467136 by Amadeusz
Sławiński. Clean up quoting/redundant die/semicolons too.
03 Mar 2015; Sven Vermeulen <swift@gentoo.org> setools-3.3.8-r7.ebuild:
Fix bug #542032 - SWIG version check does not work
02 Mar 2015; Sven Vermeulen <swift@gentoo.org> -setools-3.3.8-r6.ebuild:
Drop r6 (build failure with swig, fixed in r7)
18 Feb 2015; Jason Zaman <perfinion@gentoo.org> setools-3.3.8-r7.ebuild:
re-add keywords to -r7
*setools-3.3.8-r7 (17 Feb 2015)
17 Feb 2015; Jason Zaman <perfinion@gentoo.org> +setools-3.3.8-r7.ebuild:
revbump with swig patches, dropping keywords for testing
*setools-3.3.8-r6 (12 Feb 2015)
12 Feb 2015; Jason Zaman <perfinion@gentoo.org>
+files/setools3-userspace-2.4-compatibility.patch, +setools-3.3.8-r6.ebuild:
fix compile error with 2.4 userland, bug 539462
05 Aug 2014; Sven Vermeulen <swift@gentoo.org> -setools-3.3.8-r2.ebuild,
-setools-3.3.8-r4.ebuild:
Remove obsolete ebuilds
30 Jul 2014; Sven Vermeulen <swift@gentoo.org> setools-3.3.8-r5.ebuild:
Fix bug #509532 - Fix failure of unresolved overloaded function type
28 May 2014; Sven Vermeulen <swift@gentoo.org> -setools-3.3.7-r1.ebuild,
-setools-3.3.7-r3.ebuild, -setools-3.3.7-r5.ebuild, -setools-3.3.7-r6.ebuild,
-setools-3.3.8-r1.ebuild, -setools-3.3.8-r3.ebuild:
Spring cleanup
*setools-3.3.8-r5 (28 May 2014)
28 May 2014; Sven Vermeulen <swift@gentoo.org> +setools-3.3.8-r5.ebuild:
Fix bug #509532 - Build failure with unresolved overloaded function type
24 Mar 2014; Sven Vermeulen <swift@gentoo.org> setools-3.3.8-r4.ebuild:
Stabilize
*setools-3.3.8-r4 (04 Feb 2014)
04 Feb 2014; Sven Vermeulen <swift@gentoo.org> +setools-3.3.8-r4.ebuild:
Switch to python-r1, use EAPI=5, explicitly use bfd linker (bug 467136)
*setools-3.3.8-r3 (19 Jan 2014)
19 Jan 2014; Sven Vermeulen <swift@gentoo.org> +setools-3.3.8-r3.ebuild:
Fix pthread_cond_timedwait error thanks to Christopher J. PeBenito for the
patch
27 Jun 2013; Sven Vermeulen <swift@gentoo.org> setools-3.3.8-r2.ebuild:
Stabilize
*setools-3.3.8-r2 (22 Apr 2013)
22 Apr 2013; Sven Vermeulen <swift@gentoo.org> +setools-3.3.8-r2.ebuild:
Using SLOTed swig, fixes bug #453512
16 Apr 2013; Sven Vermeulen <swift@gentoo.org> setools-3.3.8-r1.ebuild:
Stabilize
*setools-3.3.8-r1 (09 Mar 2013)
09 Mar 2013; Sven Vermeulen <swift@gentoo.org> +setools-3.3.8-r1.ebuild:
New upstream release (3.3.8)
30 Dec 2012; Sven Vermeulen setools-3.3.7-r6.ebuild:
Stabilize
*setools-3.3.7-r6 (23 Nov 2012)
23 Nov 2012; Sven Vermeulen +setools-3.3.7-r6.ebuild:
Fix bugs #436338 and #430262
18 Nov 2012; <swift@gentoo.org> setools-3.3.7-r5.ebuild:
Adding epatch_user to simplify development and support user-provided patches
*setools-3.3.7-r5 (08 Sep 2012)
08 Sep 2012; <swift@gentoo.org> +setools-3.3.7-r5.ebuild:
Fix bugs #424627 and #430262
30 Jul 2012; <swift@gentoo.org> setools-3.3.7-r3.ebuild:
Stabilization
09 Jul 2012; <swift@gentoo.org> setools-3.3.7-r3.ebuild:
Fixing bug #424581 - Work around mkdir_p changes in automake until 1.12 is
default
26 Jun 2012; Mike Gilbert <floppym@gentoo.org> setools-3.3.7-r1.ebuild,
setools-3.3.7-r3.ebuild:
Restict pypy per Arfrever.
*setools-3.3.7-r3 (25 Jun 2012)
25 Jun 2012; <swift@gentoo.org> +setools-3.3.7-r3.ebuild:
Support Python3, fix audit2allow support, bug #415091 and bug #408179
21 May 2012; Mike Frysinger <vapier@gentoo.org> setools-3.3.7-r1.ebuild:
Inherit eutils for epatch.
03 May 2012; Jeff Horelick <jdhore@gentoo.org> setools-3.3.7-r1.ebuild:
dev-util/pkgconfig -> virtual/pkgconfig
12 Nov 2011; <swift@gentoo.org> -setools-3.3.7.ebuild:
Remove obsoleted ebuilds
23 Oct 2011; <swift@gentoo.org> setools-3.3.7-r1.ebuild:
Stabilization (tracker #384231)
19 Aug 2011; <swift@gentoo.org> -setools-2.4.ebuild, -setools-3.3.4.ebuild,
-setools-3.3.5.ebuild, -setools-3.3.6.ebuild,
-files/setools-3.3.6-headers.diff, -files/apol_tcl_fc.c.diff:
Remove obsoleted versions of setools
*setools-3.3.7-r1 (19 Aug 2011)
19 Aug 2011; <swift@gentoo.org>
+files/fix-check-role_set_expand-libsepol-2.1.0.patch,
+setools-3.3.7-r1.ebuild, +files/fix-implicit-def-fstat.patch:
Fix #378943 where setools fails to build with new selinux userspace
08 Jul 2011; Samuli Suominen <ssuominen@gentoo.org> setools-2.4.ebuild:
Convert from "useq" to "use".
28 May 2011; Anthony G. Basile <blueness@gentoo.org> setools-3.3.7.ebuild:
Stable amd64 x86
04 Apr 2011; Anthony G. Basile <blueness@gentoo.org> setools-2.4.ebuild:
Updated SRC_URI, bug #341929
29 Mar 2011; Christoph Mende <angelos@gentoo.org> setools-3.3.4.ebuild,
setools-3.3.5.ebuild, setools-3.3.6.ebuild, setools-3.3.7.ebuild:
Fixed slot deps
13 Feb 2011; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
Updated metadata.xml to reflect new selinux herd.
06 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@gentoo.org>
setools-3.3.7.ebuild:
Set SUPPORT_PYTHON_ABIS (bug #308279). Fix building with SWIG 2.
*setools-3.3.7 (12 May 2010)
12 May 2010; Chris PeBenito <pebenito@gentoo.org> +setools-3.3.7.ebuild:
New upstream release.
20 Sep 2009; Chris PeBenito <pebenito@gentoo.org> setools-3.3.6.ebuild,
+files/setools-3.3.6-headers.diff:
Fix QA issues.
*setools-3.3.6 (08 Aug 2009)
08 Aug 2009; Chris PeBenito <pebenito@gentoo.org> +setools-3.3.6.ebuild:
New upstream release.
22 Jul 2009; Chris PeBenito <pebenito@gentoo.org> setools-3.3.4.ebuild,
setools-3.3.5.ebuild:
Drop alpha, mips, ppc, sparc selinux support.
13 Jul 2009; Diego E. Pettenò <flameeyes@gentoo.org>
setools-3.3.5.ebuild:
Use emake rather than make.
*setools-3.3.5 (02 Dec 2008)
02 Dec 2008; Chris PeBenito <pebenito@gentoo.org> setools-2.4.ebuild,
-setools-3.3.1.ebuild, -setools-3.3.3.ebuild, +setools-3.3.5.ebuild:
New upstream bugfix release for libsepol 2.x additional features.
Cleanup old ebuilds.
*setools-3.3.4 (31 Mar 2008)
31 Mar 2008; Chris PeBenito <pebenito@gentoo.org> +setools-3.3.4.ebuild:
Update with fixes for glibc 2.7, gcc 3.4, and tcl/tk 8.5.
*setools-3.3.3 (26 Feb 2008)
26 Feb 2008; Chris PeBenito <pebenito@gentoo.org> +setools-3.3.3.ebuild:
New upstream bugfix release.
*setools-3.3.1 (27 Aug 2007)
27 Aug 2007; Chris PeBenito <pebenito@gentoo.org> -setools-3.0.ebuild,
-setools-3.1.ebuild, -setools-3.2.ebuild, -setools-3.3.ebuild,
+setools-3.3.1.ebuild:
New upstream bugfix release. Clear out old unstable ebuilds.
20 Aug 2007; Chris PeBenito <pebenito@gentoo.org> setools-3.1.ebuild,
setools-3.2.ebuild:
Set bwidget dep to 1.8 to fix #175415.
*setools-3.3 (04 Aug 2007)
04 Aug 2007; Chris PeBenito <pebenito@gentoo.org> +setools-3.3.ebuild:
New upstream release.
*setools-3.2 (09 May 2007)
09 May 2007; Chris PeBenito <pebenito@gentoo.org> +setools-3.2.ebuild:
New upstream release.
*setools-3.1 (16 Feb 2007)
16 Feb 2007; Chris PeBenito <pebenito@gentoo.org> +setools-3.1.ebuild:
New upstream release.
02 Feb 2007; Chris PeBenito <pebenito@gentoo.org> setools-3.0.ebuild:
Fix bug #156752.
*setools-3.0 (18 Oct 2006)
18 Oct 2006; Chris PeBenito <pebenito@gentoo.org>
-files/setools-2.2-nogui.diff, -setools-2.2.ebuild, -setools-2.3.ebuild,
+setools-3.0.ebuild:
New upstream release.
12 Sep 2006; Chris PeBenito <pebenito@gentoo.org> setools-2.4.ebuild:
Mark stable.
11 Sep 2006; Chris PeBenito <pebenito@gentoo.org>
+files/apol_tcl_fc.c.diff, setools-2.4.ebuild:
Fixes to hopefully take care of #133028
*setools-2.4 (09 May 2006)
09 May 2006; Chris PeBenito <pebenito@gentoo.org> +setools-2.4.ebuild:
New upstream release.
*setools-2.3 (03 Feb 2006)
03 Feb 2006; Chris PeBenito <pebenito@gentoo.org> +setools-2.3.ebuild:
New upstream release.
02 Jan 2006; Chris PeBenito <pebenito@gentoo.org> -setools-2.1.2.ebuild,
-setools-2.1.3.ebuild, setools-2.2.ebuild:
Mark stable.
05 Dec 2005; Chris PeBenito <pebenito@gentoo.org> metadata.xml,
setools-2.1.2.ebuild, setools-2.1.3.ebuild, setools-2.2.ebuild:
Update homepage and metadata.
12 Nov 2005; Chris PeBenito <pebenito@gentoo.org>
+files/setools-2.2-nogui.diff, setools-2.2.ebuild:
Add patch to fix bug #112284.
*setools-2.2 (08 Nov 2005)
08 Nov 2005; Chris PeBenito <pebenito@gentoo.org> +setools-2.2.ebuild:
New upstream release.
*setools-2.1.3 (12 Oct 2005)
12 Oct 2005; Chris PeBenito <pebenito@gentoo.org> -setools-2.1.0.ebuild,
-setools-2.1.1.ebuild, +setools-2.1.3.ebuild:
New upstream release.
08 Oct 2005; Chris PeBenito <pebenito@gentoo.org> setools-2.1.2.ebuild:
Mark stable.
07 Sep 2005; Chris PeBenito <pebenito@gentoo.org> setools-2.1.0.ebuild,
setools-2.1.1.ebuild, setools-2.1.2.ebuild:
Fix changed URIs.
*setools-2.1.2 (07 Sep 2005)
07 Sep 2005; Chris PeBenito <pebenito@gentoo.org> +setools-2.1.2.ebuild:
New upstream release.
*setools-2.1.1 (20 May 2005)
20 May 2005; Chris PeBenito <pebenito@gentoo.org> setools-2.1.0.ebuild,
+setools-2.1.1.ebuild:
Mark 2.1.0 stable, plus new upstream release.
21 Apr 2005; Simon Stelling <blubb@gentoo.org> setools-2.0-r1.ebuild:
stable on amd64
*setools-2.1.0 (19 Apr 2005)
19 Apr 2005; Chris PeBenito <pebenito@gentoo.org> +setools-2.1.0.ebuild:
New upstream release.
*setools-2.0-r1 (09 Apr 2005)
09 Apr 2005; Chris PeBenito <pebenito@gentoo.org> +setools-2.0-r1.ebuild:
Fix for bug #88248.
29 Mar 2005; Chris PeBenito <pebenito@gentoo.org> setools-2.0.ebuild:
Mark stable.
06 Mar 2005; Chris PeBenito <pebenito@gentoo.org> setools-2.0.ebuild:
Went overboard on CFLAGS fixes, causing some compile failures on some machines.
04 Mar 2005; Chris PeBenito <pebenito@gentoo.org> setools-2.0.ebuild:
Fix DEPEND
*setools-2.0 (04 Mar 2005)
04 Mar 2005; Chris PeBenito <pebenito@gentoo.org> setools-1.5.1.ebuild,
+setools-2.0.ebuild:
New upstream major release. Mark 1.5.1 stable for x86 and ppc.
*setools-1.5.1 (06 Nov 2004)
06 Nov 2004; Chris PeBenito <pebenito@gentoo.org> +setools-1.5.1.ebuild:
New upstream release
*setools-1.4.1-r1 (15 Sep 2004)
15 Sep 2004; Chris PeBenito <pebenito@gentoo.org> -setools-1.3.1.ebuild,
+setools-1.4.1-r1.ebuild, -setools-1.4.1.ebuild:
Fix seuser.fc install.
*setools-1.4.1 (22 Aug 2004)
22 Aug 2004; Chris PeBenito <pebenito@gentoo.org> +setools-1.4.1.ebuild,
-setools-1.4.ebuild:
Bugfix release.
24 Jul 2004; Joshua Brindle <method@gentoo.org> setools-1.4.ebuild:
add libselinux dependancy
*setools-1.4 (21 Jun 2004)
21 Jun 2004; Chris PeBenito <pebenito@gentoo.org> +setools-1.4.ebuild:
New upstream version.
21 Jun 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.3.1.ebuild:
Fix for compiles that are USE="-selinux".
24 May 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.3.1.ebuild:
Fix sandbox violations.
*setools-1.3.1 (05 May 2004)
05 May 2004; Chris PeBenito <pebenito@gentoo.org> +setools-1.3.1.ebuild,
-setools-1.3.ebuild:
New upstream bugfix release.
04 May 2004; Chris PeBenito <pebenito@gentoo.org> -setools-1.2.1.ebuild,
setools-1.3.ebuild:
Mark stable
29 Apr 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.2.1.ebuild,
setools-1.3.ebuild:
Add missing libxml2 dep.
*setools-1.3 (15 Apr 2004)
15 Apr 2004; Chris PeBenito <pebenito@gentoo.org> +setools-1.3.ebuild:
New upstream version.
03 Mar 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.2.1.ebuild:
Mark stable.
*setools-1.2.1 (08 Feb 2004)
08 Feb 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.2.1.ebuild:
New upstream bugfix release.
06 Feb 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.2.ebuild:
Fix seuser file contexts and conf file.
*setools-1.2 (05 Feb 2004)
05 Feb 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.2.ebuild:
New upstream version.
31 Jan 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.1.1.ebuild:
Mark stable.
*setools-1.1.1 (06 Jan 2004)
06 Jan 2004; Chris PeBenito <pebenito@gentoo.org> setools-1.1.1.ebuild:
New upstream bugfix release.
28 Dec 2003; Chris PeBenito <pebenito@gentoo.org> setools-1.1.ebuild:
Eliminate install -Z. The context option is not needed, and causes sandbox
violations.
22 Dec 2003; Chris PeBenito <pebenito@gentoo.org> setools-1.1.ebuild,
files/setools-1.1-fix_noX.diff:
Treesys makefiles are broken. Add a hack to make it really work for non X
systems.
*setools-1.1 (22 Dec 2003)
22 Dec 2003; Chris PeBenito <pebenito@gentoo.org> setools-1.1.ebuild:
New upstream version. Now X is optional, as there are command line tools. Also
has a new optional gtk log analyzer for audit messages.
20 Nov 2003; Chris PeBenito <pebenito@gentoo.org> setools-1.0.1.ebuild:
Mark stable
*setools-1.0.1 (06 Nov 2003)
06 Nov 2003; Chris PeBenito <pebenito@gentoo.org> setools-1.0.1.ebuild:
New upstream minor version.
*setools-1.0 (23 Oct 2003)
23 Oct 2003; Chris PeBenito <pebenito@gentoo.org> setools-1.0.ebuild:
Setools for the new SELinux API.
22 Sep 2003; Chris PeBenito <pebenito@gentoo.org> setools-20030609.ebuild:
Overdue, mark stable.
*setools-20030609 (02 Jul 2003)
02 Jul 2003; Chris PeBenito <pebenito@gentoo.org> setools-20030609.ebuild:
Initial commit

33
sdk_container/src/third_party/coreos-overlay/app-admin/setools/Manifest vendored Normal file
View File

@ -0,0 +1,33 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
AUX fix-check-role_set_expand-libsepol-2.1.0.patch 1150 SHA256 8b9bcb857a77ae446721a4c7387493d74500bced0c6e2fc967c991a488122b3f SHA512 4e944cf6ff52792429004a432ea84f6fa0605418abff34a87bff21861e95a75e7a0da2860e49cf8ca54466ddb96d4693f765ca59659aa9ed38b95df0d3a73d3d WHIRLPOOL aabb28a97e57d343ece582080ce0b4a2dba8ae12147052f759da28cb4a567affdcaae8735129b5b28126b125f2ecd83f6ee5a163c6dfbbb137ecff2b0339f7e3
AUX fix-implicit-def-fstat.patch 441 SHA256 3d0c55580056353ab3ca575899fb8f669d0b7a3f00f62dedf3a643a7e0ea8a9b SHA512 f9780fe4ff1e637ff6c2669fcc2cce18b269eeacde30064dc92711d6c4fcfe177e6d3884fd5f88db2e67ea803fbd32edc8f524f33103c53300c4477a8cf24eb4 WHIRLPOOL 766826b2c2564fd1e59af137ba1a57ca89eaa21e7d7462546780264b26f34465424c43789d173d1124a2534a4dc67a682857733f0436096efc031611b23fb25f
AUX setools3-userspace-2.4-compatibility.patch 4245 SHA256 02bb2496f1c33177099ee025be3c297eec718dfe41565695e21056e165d4d626 SHA512 7f8bd3b48c23ea596d521c5a2d71fd714767167df24ee3cdf20b41ab19b077af267e83dec0db4ac9ef3333af26beb4c5e040607e3d33429c2ca96ae827da692b WHIRLPOOL f0752e5c4a5b5124af6be5cfdb9d29c7655983283b5bb71ef2976126231dc3115390f212375765a41dca5d9384b0c914457e7a5c93ed40a2ac9cc902563b9060
DIST setools-3.3.8-01-fedora-patches.tar.gz 1128 SHA256 420b852d4209d07b73cec84586e000e7a6a719135ea677711abf97d420840bb6 SHA512 1aa2cc50c307929b522e029a552bfd545aef07656d1983289b0ea9be67aa94c07272a59c17630fc09fd79b06845ada318cdfa48d6cc243a24026e015c23b9634 WHIRLPOOL 25ae2b15fb15060fd0d34c55f4cc098b70a3a616f5334b092657a9c5df037b7fcf00fd185f33ba142e47d46c36b2fb7e9434021d6e987832fe833367a50d7449
DIST setools-3.3.8-03-gentoo-patches.tar.gz 6584 SHA256 8eac460b7dc2ee5e2f23148cdbf187316edd78ce0ec7ebbb6b0f68d6ad33d86a SHA512 5458dab5775b558e287f946c299753be5cb5eb6c1c2b9df0e32c7cfa758bb5316d142aa6338d3019f5f1eeb72876e4d5ed4939b0dbfe7b7e01c08a19a086bacc WHIRLPOOL e1afa6bb28f3aee2f3acdc66efd8ca02548c4f8e5707052ea455f1db558126f069d63278251630ee68bf4987157279161006975cb14d44055492228fa476cd72
DIST setools-3.3.8-04-gentoo-patches.tar.bz2 94986 SHA256 9a8a43ac97606fde9b2610ceed65f640638929853f871ce530982bedfd919b64 SHA512 39bf00b6aaf31821c6e2e2fb4c460dd1914fba4bf8385acebedf88f1533da990f1fb925dd49d75827aebef3f394a50a1edea46a07204193b58c65a066a064e6a WHIRLPOOL 4a92e4cf6930584de931c5d0805815aacd1c1af4434ca8e73414eda33588a55ef8d7bdfe4195be642889eee480128cbe12d1c5612e07ea304021b230e0b74816
DIST setools-3.3.8.tar.bz2 951428 SHA256 44387ecc9a231ec536a937783440cd8960a72c51f14bffc1604b7525e341e999 SHA512 2c42ee9904174ed6c6fc129e374ec3591925094ab0ef65001b0104e365c5634bf4a79f28369608c80199d8f59fafaa5f274107c04c129c380eeef7adb0c32667 WHIRLPOOL 11c4065809909764f4364b78df1a8030d189315601b882919ccacb5fb147c1b3a061c5bbf9ced3c243d4615ab7727e9db0c89e931a884ae8b317ae3a879e5371
EBUILD setools-3.3.8-r5.ebuild 4345 SHA256 e16a7cc8e89e45c2760c8b5576e5955eaf44a07512269e48fb9bc4a0727b42b7 SHA512 4df946c6697454c9c6044b394a5e5d65449d572c6461d3aa06a5c20ae07cdb36ef3b2475c7eb81ea8a913663dbbda43afe2aaf67eecf64f29da9730105571191 WHIRLPOOL af5f526222a845ea59ca00e97f4f02d31e6facc52979279ae9ba36f60cf5ce7123a695c34eb9c8513f04c014df27cdb9d672f01f835f95eb8c9978cf2d8daa67
EBUILD setools-3.3.8-r7.ebuild 3638 SHA256 15358bffe3115141d1f5810aa542c52960712fd55a0ada916da38b809a995f5a SHA512 d6fd9441af9bd5ca5b17d867e505f94b5afda7e2d98207c0605913b643274111abd2d34e60dbe978fb370fe5fad1b14b63a72ad5608d2bf669e55bdc6ca99145 WHIRLPOOL 6beeab2543fbfdeb45b3268b7154d3ccc3933599db76cf1b3f2515f9e55a8a971d33eddd9b37126d1291076396c1e27acba69506acd1ffecdcf125aa8e0568a6
MISC ChangeLog 13853 SHA256 cc57d86fb1144a638b8ff0ffc8bf224e0accf971e4f8f421f97b0f80f0c342c8 SHA512 198c5933254e00c840c04fc0b90e9c12829765ccf68c6acfa6bcfd3c41748552e2fd730f7417b408b3f9c4f86164858510318352ed9d0c36f816dadf00b3b1d5 WHIRLPOOL e9fc9e922d5e27cbaa6a795ec9d6a9fdb8cfd977c294900fab211322a18716e2d39e4dc505395c2e8c76fe568ee2cdcf9cd5da891234d8c8e833e7b64444d3f7
MISC metadata.xml 228 SHA256 bbcb1daec06953b214112a968d7691679891d41b620789200450e8fabf533951 SHA512 23a02e7ab38822642d81150177d3ce4d24f8aef3e422ba71bc8a9a04e777a2d462f45f4de839fcf39d32207fe60799b890157f90b1aedf5c4369656dc6303851 WHIRLPOOL 7e866656536cb45b9efd876bda1455a6554c5019647ff7d600fe0efb905d4e6102ee1d3041943f411505628e9c0d8d5e14d784589538d93a5d68064c526a2aac
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0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=VFeZ
-----END PGP SIGNATURE-----

24
sdk_container/src/third_party/coreos-overlay/app-admin/setools/files/fix-check-role_set_expand-libsepol-2.1.0.patch vendored Normal file
View File

@ -0,0 +1,24 @@
diff -ur setools-3.3.7.orig/configure.ac setools-3.3.7/configure.ac
--- setools-3.3.7.orig/configure.ac 2011-08-12 19:20:32.651000078 +0200
+++ setools-3.3.7/configure.ac 2011-08-12 19:20:42.224000036 +0200
@@ -503,7 +503,7 @@
[AC_LANG_SOURCE([
#include <sepol/policydb/expand.h>
int main () {
- return role_set_expand(NULL, NULL, NULL, NULL);
+ return role_set_expand(NULL, NULL, NULL, NULL, NULL);
}])],
sepol_new_user_role_mapping="yes",
sepol_new_user_role_mapping="no")
diff -ur setools-3.3.7.orig/libqpol/src/policy_define.c setools-3.3.7/libqpol/src/policy_define.c
--- setools-3.3.7.orig/libqpol/src/policy_define.c 2011-08-12 19:20:32.657000013 +0200
+++ setools-3.3.7/libqpol/src/policy_define.c 2011-08-12 19:20:53.907005864 +0200
@@ -2133,7 +2133,7 @@
/* This ebitmap business is just to ensure that there are not conflicting role_trans rules */
#ifdef HAVE_SEPOL_USER_ROLE_MAPPING
- if (role_set_expand(&roles, &e_roles, policydbp, NULL))
+ if (role_set_expand(&roles, &e_roles, policydbp, NULL, NULL))
#else
if (role_set_expand(&roles, &e_roles, policydbp))
#endif

13
sdk_container/src/third_party/coreos-overlay/app-admin/setools/files/fix-implicit-def-fstat.patch vendored Normal file
View File

@ -0,0 +1,13 @@
diff -ur setools-3.3.7.orig/libqpol/src/policy.c setools-3.3.7/libqpol/src/policy.c
--- setools-3.3.7.orig/libqpol/src/policy.c 2011-08-12 19:48:13.793000029 +0200
+++ setools-3.3.7/libqpol/src/policy.c 2011-08-12 19:49:32.880001229 +0200
@@ -36,6 +36,9 @@
#include <stdio.h>
#include <stdlib.h>
#include <sys/mman.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <unistd.h>
#include <asm/types.h>
#include <sepol/debug.h>

114
sdk_container/src/third_party/coreos-overlay/app-admin/setools/files/setools3-userspace-2.4-compatibility.patch vendored Normal file
View File

@ -0,0 +1,114 @@
From f1e5b208d507171968ca4d2eeefd7980f1004a3c Mon Sep 17 00:00:00 2001
From: Chris PeBenito <cpebenito@tresys.com>
Date: Thu, 12 Feb 2015 08:55:12 -0500
Subject: [PATCH] Update for 2015-02-02 Userspace release (2.4)
SETools now requires libsepol 2.4 and libselinux 2.4.
---
configure.ac | 6 +++---
libqpol/src/policy_define.c | 4 ++--
libqpol/src/policy_extend.c | 4 ++--
libqpol/src/syn_rule_query.c | 6 +++---
secmds/replcon.cc | 2 +-
5 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/configure.ac b/configure.ac
index 80395e6..ae20da7 100644
--- a/configure.ac
+++ b/configure.ac
@@ -25,9 +25,9 @@ libseaudit_version=4.5
setoolsdir='${prefix}/share/setools-3.3'
javadir='${prefix}/share/java'
-version_min_sepol_major=1
-version_min_sepol_minor=12
-version_min_sepol_patch=27
+version_min_sepol_major=2
+version_min_sepol_minor=4
+version_min_sepol_patch=0
dnl *** end of tunable values ***
diff --git a/libqpol/src/policy_define.c b/libqpol/src/policy_define.c
index 229779c..15f70ba 100644
--- a/libqpol/src/policy_define.c
+++ b/libqpol/src/policy_define.c
@@ -1661,7 +1661,7 @@ int define_compute_type_helper(int which, avrule_t ** rule)
goto bad;
}
class_perm_node_init(perm);
- perm->class = i + 1;
+ perm->tclass = i + 1;
perm->data = datum->s.value;
perm->next = avrule->perms;
avrule->perms = perm;
@@ -1901,7 +1901,7 @@ int define_te_avtab_helper(int which, avrule_t ** rule)
goto out;
}
class_perm_node_init(cur_perms);
- cur_perms->class = i + 1;
+ cur_perms->tclass = i + 1;
if (!perms)
perms = cur_perms;
if (tail)
diff --git a/libqpol/src/policy_extend.c b/libqpol/src/policy_extend.c
index 5325a87..1417271 100644
--- a/libqpol/src/policy_extend.c
+++ b/libqpol/src/policy_extend.c
@@ -843,7 +843,7 @@ static int qpol_syn_rule_table_insert_sepol_avrule(qpol_policy_t * policy, qpol_
for (class_node = rule->perms; class_node; class_node = class_node->next) {
key.rule_type = rule->specified;
key.source_val = key.target_val = i + 1;
- key.class_val = class_node->class;
+ key.class_val = class_node->tclass;
key.cond = cond;
if (qpol_syn_rule_table_insert_entry(policy, table, &key, new_rule))
goto err;
@@ -856,7 +856,7 @@ static int qpol_syn_rule_table_insert_sepol_avrule(qpol_policy_t * policy, qpol_
key.rule_type = rule->specified;
key.source_val = i + 1;
key.target_val = j + 1;
- key.class_val = class_node->class;
+ key.class_val = class_node->tclass;
key.cond = cond;
if (qpol_syn_rule_table_insert_entry(policy, table, &key, new_rule))
goto err;
diff --git a/libqpol/src/syn_rule_query.c b/libqpol/src/syn_rule_query.c
index 3e63204..d7578f1 100644
--- a/libqpol/src/syn_rule_query.c
+++ b/libqpol/src/syn_rule_query.c
@@ -67,7 +67,7 @@ static void *syn_rule_class_state_get_cur(const qpol_iterator_t * iter)
return NULL;
}
- return db->class_val_to_struct[srcs->cur->class - 1];
+ return db->class_val_to_struct[srcs->cur->tclass - 1];
}
static int syn_rule_class_state_next(qpol_iterator_t * iter)
@@ -465,10 +465,10 @@ int qpol_syn_avrule_get_perm_iter(const qpol_policy_t * policy, const qpol_syn_a
}
for (node = internal_rule->perms; node; node = node->next) {
- for (i = 0; i < db->class_val_to_struct[node->class - 1]->permissions.nprim; i++) {
+ for (i = 0; i < db->class_val_to_struct[node->tclass - 1]->permissions.nprim; i++) {
if (!(node->data & (1 << i)))
continue;
- tmp = sepol_av_to_string(db, node->class, (sepol_access_vector_t) (1 << i));
+ tmp = sepol_av_to_string(db, node->tclass, (sepol_access_vector_t) (1 << i));
if (tmp) {
tmp++; /* remove prepended space */
for (cur = 0; cur < perm_list_sz; cur++)
diff --git a/secmds/replcon.cc b/secmds/replcon.cc
index 34f7c1a..307c39f 100644
--- a/secmds/replcon.cc
+++ b/secmds/replcon.cc
@@ -60,7 +60,7 @@ static struct option const longopts[] = {
{NULL, 0, NULL, 0}
};
-extern int lsetfilecon_raw(const char *, security_context_t) __attribute__ ((weak));
+extern int lsetfilecon_raw(const char *, const char *) __attribute__ ((weak));
/**
* As that setools must work with older libselinux versions that may

6
sdk_container/src/third_party/coreos-overlay/app-admin/setools/metadata.xml vendored Normal file
View File

@ -0,0 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<herd>selinux</herd>
<longdescription>SELinux policy analysis tools.</longdescription>
</pkgmetadata>

138
sdk_container/src/third_party/coreos-overlay/app-admin/setools/setools-3.3.8-r7.ebuild vendored Normal file
View File

@ -0,0 +1,138 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/app-admin/setools/setools-3.3.8-r7.ebuild,v 1.6 2015/05/10 09:06:14 perfinion Exp $
EAPI="5"
PYTHON_COMPAT=( python2_7 python3_4 )
inherit autotools java-pkg-opt-2 python-r1 eutils toolchain-funcs
DESCRIPTION="SELinux policy tools"
HOMEPAGE="http://www.tresys.com/selinux/selinux_policy_tools.shtml"
SRC_URI="http://oss.tresys.com/projects/setools/chrome/site/dists/${P}/${P}.tar.bz2
http://dev.gentoo.org/~perfinion/patches/setools/${P}-04-gentoo-patches.tar.bz2"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 x86"
IUSE="X debug java python"
COMMONDEPEND=">=sys-libs/libsepol-2.4
>=sys-libs/libselinux-2.4
>=dev-db/sqlite-3.2:3
dev-libs/libxml2:2
python? ( ${PYTHON_DEPS} )
X? (
>=dev-lang/tk-8.4.9:0=
>=gnome-base/libglade-2.0
>=x11-libs/gtk+-2.8:2
)"
DEPEND="${COMMONDEPEND}
>=sys-devel/automake-1.12.1
sys-devel/bison
sys-devel/flex
virtual/pkgconfig
java? ( dev-lang/swig
virtual/jdk:= )
python? ( dev-lang/swig )"
RDEPEND="${COMMONDEPEND}
java? ( >=virtual/jre-1.4:= )
X? ( >=dev-tcltk/bwidget-1.8 )"
RESTRICT="test"
# setools dirs that contain python code to build
PYTHON_DIRS="libapol/swig/python libpoldiff/swig/python libqpol/swig/python libseaudit/swig/python libsefs/swig/python python"
pkg_setup() {
if use java; then
java-pkg-opt-2_pkg_setup
fi
}
src_prepare() {
EPATCH_MULTI_MSG="Applying various (Gentoo) setool fixes... " \
EPATCH_SUFFIX="patch" \
EPATCH_SOURCE="${WORKDIR}/gentoo-patches" \
EPATCH_FORCE="yes" \
epatch
# Fix build failure due to double __init__.py installation
sed -e "s/^wrappedpy_DATA = qpol.py \$(pkgpython_PYTHON)/wrappedpy_DATA = qpol.py/" -i libqpol/swig/python/Makefile.am || die
# Disable broken check for SWIG version. Bug #542032
sed -e "s/AC_PROG_SWIG(2.0.0)/AC_PROG_SWIG/" -i configure.ac || die "sed failed"
local dir
for dir in ${PYTHON_DIRS}; do
# Python bindings are built/installed manually.
sed -e "s/MAYBE_PYSWIG = python/MAYBE_PYSWIG =/" -i ${dir%python}Makefile.am || die "sed failed"
# Make PYTHON_LDFLAGS replaceable during running `make`.
sed -e "/^AM_LDFLAGS =/s/@PYTHON_LDFLAGS@/\$(PYTHON_LDFLAGS)/" -i ${dir}/Makefile.am || die "sed failed"
done
epatch_user
eautoreconf
# Disable byte-compilation of Python modules.
echo '#!/bin/sh' > py-compile
}
src_configure() {
tc-ld-disable-gold #467136
econf \
--with-java-prefix=${JAVA_HOME} \
--disable-selinux-check \
--disable-bwidget-check \
$(use_enable python swig-python) \
$(use_enable java swig-java) \
$(use_enable X swig-tcl) \
$(use_enable X gui) \
$(use_enable debug)
# work around swig c99 issues. it does not require
# c99 anyway.
sed -i -e 's/-std=gnu99//' "${S}/libseaudit/swig/python/Makefile"
}
src_compile() {
emake
if use python; then
building() {
python_export PYTHON_INCLUDEDIR
python_export PYTHON_SITEDIR
python_export PYTHON_LIBS
emake \
SWIG_PYTHON_CPPFLAGS="-I${PYTHON_INCLUDEDIR}" \
PYTHON_LDFLAGS="${PYTHON_LIBS}" \
pyexecdir="${PYTHON_SITEDIR}" \
pythondir="${PYTHON_SITEDIR}" \
-C "$1"
}
local dir
for dir in ${PYTHON_DIRS}; do
python_foreach_impl building ${dir}
done
fi
}
src_install() {
emake DESTDIR="${D}" install
if use python; then
installation() {
python_export PYTHON_SITEDIR
emake DESTDIR="${D}" \
pyexecdir="${PYTHON_SITEDIR}" \
pythondir="${PYTHON_SITEDIR}" \
-C "$1" install
}
local dir
for dir in ${PYTHON_DIRS}; do
python_foreach_impl installation "${dir}"
done
fi
}

357
sdk_container/src/third_party/coreos-overlay/eclass/selinux-policy-2.eclass vendored Normal file
View File

@ -0,0 +1,357 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/eclass/selinux-policy-2.eclass,v 1.32 2015/04/21 11:19:10 perfinion Exp $
# Eclass for installing SELinux policy, and optionally
# reloading the reference-policy based modules.
# @ECLASS: selinux-policy-2.eclass
# @MAINTAINER:
# selinux@gentoo.org
# @BLURB: This eclass supports the deployment of the various SELinux modules in sec-policy
# @DESCRIPTION:
# The selinux-policy-2.eclass supports deployment of the various SELinux modules
# defined in the sec-policy category. It is responsible for extracting the
# specific bits necessary for single-module deployment (instead of full-blown
# policy rebuilds) and applying the necessary patches.
#
# Also, it supports for bundling patches to make the whole thing just a bit more
# manageable.
# @ECLASS-VARIABLE: MODS
# @DESCRIPTION:
# This variable contains the (upstream) module name for the SELinux module.
# This name is only the module name, not the category!
: ${MODS:="_illegal"}
# @ECLASS-VARIABLE: BASEPOL
# @DESCRIPTION:
# This variable contains the version string of the selinux-base-policy package
# that this module build depends on. It is used to patch with the appropriate
# patch bundle(s) that are part of selinux-base-policy.
: ${BASEPOL:=${PVR}}
# @ECLASS-VARIABLE: POLICY_PATCH
# @DESCRIPTION:
# This variable contains the additional patch(es) that need to be applied on top
# of the patchset already contained within the BASEPOL variable. The variable
# can be both a simple string (space-separated) or a bash array.
: ${POLICY_PATCH:=""}
# @ECLASS-VARIABLE: POLICY_FILES
# @DESCRIPTION:
# When defined, this contains the files (located in the ebuilds' files/
# directory) which should be copied as policy module files into the store.
# Generally, users would want to include at least a .te and .fc file, but .if
# files are supported as well. The variable can be both a simple string
# (space-separated) or a bash array.
: ${POLICY_FILES:=""}
# @ECLASS-VARIABLE: POLICY_TYPES
# @DESCRIPTION:
# This variable informs the eclass for which SELinux policies the module should
# be built. Currently, Gentoo supports targeted, strict, mcs and mls.
# This variable is the same POLICY_TYPES variable that we tell SELinux
# users to set in make.conf. Therefore, it is not the module that should
# override it, but the user.
: ${POLICY_TYPES:="targeted strict mcs mls"}
# @ECLASS-VARIABLE: SELINUX_GIT_REPO
# @DESCRIPTION:
# When defined, this variable overrides the default repository URL as used by
# this eclass. It allows end users to point to a different policy repository
# using a single variable, rather than having to set the packagename_LIVE_REPO
# variable for each and every SELinux policy module package they want to install.
# The default value is Gentoo's hardened-refpolicy repository.
: ${SELINUX_GIT_REPO:="git://anongit.gentoo.org/proj/hardened-refpolicy.git https://anongit.gentoo.org/git/proj/hardened-refpolicy.git"};
# @ECLASS-VARIABLE: SELINUX_GIT_BRANCH
# @DESCRIPTION:
# When defined, this variable sets the Git branch to use of the repository. This
# allows for users and developers to use a different branch for the entire set of
# SELinux policy packages, rather than having to override them one by one with the
# packagename_LIVE_BRANCH variable.
# The default value is the 'master' branch.
: ${SELINUX_GIT_BRANCH:="master"};
extra_eclass=""
case ${BASEPOL} in
9999) extra_eclass="git-r3";
EGIT_REPO_URI="${SELINUX_GIT_REPO}";
EGIT_BRANCH="${SELINUX_GIT_BRANCH}";
EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy";;
esac
inherit eutils ${extra_eclass}
IUSE=""
HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
if [[ -n ${BASEPOL} ]] && [[ "${BASEPOL}" != "9999" ]];
then
SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${BASEPOL}.tar.bz2"
elif [[ "${BASEPOL}" != "9999" ]];
then
SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2"
else
SRC_URI=""
fi
LICENSE="GPL-2"
SLOT="0"
S="${WORKDIR}/"
PATCHBUNDLE="${DISTDIR}/patchbundle-selinux-base-policy-${BASEPOL}.tar.bz2"
# Modules should always depend on at least the first release of the
# selinux-base-policy for which they are generated.
if [[ -n ${BASEPOL} ]];
then
RDEPEND=">=sys-apps/policycoreutils-2.0.82
>=sec-policy/selinux-base-policy-${BASEPOL}"
else
RDEPEND=">=sys-apps/policycoreutils-2.0.82
>=sec-policy/selinux-base-policy-${PV}"
fi
DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-2.0.21"
case "${EAPI:-0}" in
0|1|2|3|4) die "EAPI<5 is not supported";;
*) : ;;
esac
EXPORT_FUNCTIONS "src_unpack src_prepare src_compile src_install pkg_postinst pkg_postrm"
# @FUNCTION: selinux-policy-2_src_unpack
# @DESCRIPTION:
# Unpack the policy sources as offered by upstream (refpolicy).
selinux-policy-2_src_unpack() {
if [[ "${BASEPOL}" != "9999" ]];
then
unpack ${A}
else
git-r3_src_unpack
fi
}
# @FUNCTION: selinux-policy-2_src_prepare
# @DESCRIPTION:
# Patch the reference policy sources with our set of enhancements. Start with
# the base patchbundle referred to by the ebuilds through the BASEPOL variable,
# then apply the additional patches as offered by the ebuild.
#
# Next, extract only those files needed for this particular module (i.e. the .te
# and .fc files for the given module in the MODS variable).
#
# Finally, prepare the build environments for each of the supported SELinux
# types (such as targeted or strict), depending on the POLICY_TYPES variable
# content.
selinux-policy-2_src_prepare() {
local modfiles
local add_interfaces=0;
# Create 3rd_party location for user-contributed policies
cd "${S}/refpolicy/policy/modules" && mkdir 3rd_party;
# Patch the sources with the base patchbundle
if [[ -n ${BASEPOL} ]] && [[ "${BASEPOL}" != "9999" ]];
then
cd "${S}"
EPATCH_MULTI_MSG="Applying SELinux policy updates ... " \
EPATCH_SUFFIX="patch" \
EPATCH_SOURCE="${WORKDIR}" \
EPATCH_FORCE="yes" \
epatch
fi
# Call in epatch_user. We do this early on as we start moving
# files left and right hereafter.
epatch_user
# Copy additional files to the 3rd_party/ location
if [[ "$(declare -p POLICY_FILES 2>/dev/null 2>&1)" == "declare -a"* ]] ||
[[ -n ${POLICY_FILES} ]];
then
add_interfaces=1;
cd "${S}/refpolicy/policy/modules"
for POLFILE in ${POLICY_FILES[@]};
do
cp "${FILESDIR}/${POLFILE}" 3rd_party/ || die "Could not copy ${POLFILE} to 3rd_party/ location";
done
fi
# Apply the additional patches refered to by the module ebuild.
# But first some magic to differentiate between bash arrays and strings
if [[ "$(declare -p POLICY_PATCH 2>/dev/null 2>&1)" == "declare -a"* ]] ||
[[ -n ${POLICY_PATCH} ]];
then
cd "${S}/refpolicy/policy/modules"
for POLPATCH in ${POLICY_PATCH[@]};
do
epatch "${POLPATCH}"
done
fi
# Collect only those files needed for this particular module
for i in ${MODS}; do
modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.te) $modfiles"
modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.fc) $modfiles"
if [ ${add_interfaces} -eq 1 ];
then
modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.if) $modfiles"
fi
done
for i in ${POLICY_TYPES}; do
mkdir "${S}"/${i} || die "Failed to create directory ${S}/${i}"
cp "${S}"/refpolicy/doc/Makefile.example "${S}"/${i}/Makefile \
|| die "Failed to copy Makefile.example to ${S}/${i}/Makefile"
cp ${modfiles} "${S}"/${i} \
|| die "Failed to copy the module files to ${S}/${i}"
done
}
# @FUNCTION: selinux-policy-2_src_compile
# @DESCRIPTION:
# Build the SELinux policy module (.pp file) for just the selected module, and
# this for each SELinux policy mentioned in POLICY_TYPES
selinux-policy-2_src_compile() {
local makeuse=""
for useflag in ${IUSE};
do
use ${useflag} && makeuse="${makeuse} -D use_${useflag}"
done
for i in ${POLICY_TYPES}; do
# Support USE flags in builds
export M4PARAM="${makeuse}"
if [[ ${BASEPOL} == 2.20140311* ]]; then
# Parallel builds are broken in 2.20140311-r7 and earlier, bug 530178
emake -j1 NAME=$i -C "${S}"/${i} || die "${i} compile failed"
else
emake NAME=$i -C "${S}"/${i} || die "${i} compile failed"
fi
done
}
# @FUNCTION: selinux-policy-2_src_install
# @DESCRIPTION:
# Install the built .pp files in the correct subdirectory within
# /usr/share/selinux.
selinux-policy-2_src_install() {
local BASEDIR="/usr/share/selinux"
for i in ${POLICY_TYPES}; do
for j in ${MODS}; do
einfo "Installing ${i} ${j} policy package"
insinto ${BASEDIR}/${i}
doins "${S}"/${i}/${j}.pp || die "Failed to add ${j}.pp to ${i}"
if [[ "${POLICY_FILES[@]}" == *"${j}.if"* ]];
then
insinto ${BASEDIR}/${i}/include/3rd_party
doins "${S}"/${i}/${j}.if || die "Failed to add ${j}.if to ${i}"
fi
done
done
}
# @FUNCTION: selinux-policy-2_pkg_postinst
# @DESCRIPTION:
# Install the built .pp files in the SELinux policy stores, effectively
# activating the policy on the system.
selinux-policy-2_pkg_postinst() {
# build up the command in the case of multiple modules
local COMMAND
for i in ${MODS}; do
COMMAND="-i ${i}.pp ${COMMAND}"
done
for i in ${POLICY_TYPES}; do
if [ "${i}" == "strict" ] && [ "${MODS}" = "unconfined" ];
then
einfo "Ignoring loading of unconfined module in strict module store.";
continue;
fi
einfo "Inserting the following modules into the $i module store: ${MODS}"
cd /usr/share/selinux/${i} || die "Could not enter /usr/share/selinux/${i}"
semodule -s ${i} ${COMMAND}
if [ $? -ne 0 ];
then
ewarn "SELinux module load failed. Trying full reload...";
if [ "${i}" == "targeted" ];
then
semodule -s ${i} -b base.pp -i $(ls *.pp | grep -v base.pp);
else
semodule -s ${i} -b base.pp -i $(ls *.pp | grep -v base.pp | grep -v unconfined.pp);
fi
if [ $? -ne 0 ];
then
ewarn "Failed to reload SELinux policies."
ewarn ""
ewarn "If this is *not* the last SELinux module package being installed,"
ewarn "then you can safely ignore this as the reloads will be retried"
ewarn "with other, recent modules."
ewarn ""
ewarn "If it is the last SELinux module package being installed however,"
ewarn "then it is advised to look at the error above and take appropriate"
ewarn "action since the new SELinux policies are not loaded until the"
ewarn "command finished succesfully."
ewarn ""
ewarn "To reload, run the following command from within /usr/share/selinux/${i}:"
ewarn " semodule -b base.pp -i \$(ls *.pp | grep -v base.pp)"
ewarn "or"
ewarn " semodule -b base.pp -i \$(ls *.pp | grep -v base.pp | grep -v unconfined.pp)"
ewarn "depending on if you need the unconfined domain loaded as well or not."
else
einfo "SELinux modules reloaded succesfully."
fi
else
einfo "SELinux modules loaded succesfully."
fi
done
# Relabel depending packages
PKGSET="";
if [ -x /usr/bin/qdepends ] ; then
PKGSET=$(/usr/bin/qdepends -Cq -r -Q ${CATEGORY}/${PN} | grep -v "sec-policy/selinux-");
elif [ -x /usr/bin/equery ] ; then
PKGSET=$(/usr/bin/equery -Cq depends ${CATEGORY}/${PN} | grep -v "sec-policy/selinux-");
fi
if [ -n "${PKGSET}" ] ; then
rlpkg ${PKGSET};
fi
}
# @FUNCTION: selinux-policy-2_pkg_postrm
# @DESCRIPTION:
# Uninstall the module(s) from the SELinux policy stores, effectively
# deactivating the policy on the system.
selinux-policy-2_pkg_postrm() {
# Only if we are not upgrading
if [[ -z "${REPLACED_BY_VERSION}" ]];
then
# build up the command in the case of multiple modules
local COMMAND
for i in ${MODS}; do
COMMAND="-r ${i} ${COMMAND}"
done
for i in ${POLICY_TYPES}; do
einfo "Removing the following modules from the $i module store: ${MODS}"
semodule -s ${i} ${COMMAND}
if [ $? -ne 0 ];
then
ewarn "SELinux module unload failed.";
else
einfo "SELinux modules unloaded succesfully."
fi
done
fi
}

14
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/app-admin/setools-3.3.8-r5 vendored Normal file
View File

@ -0,0 +1,14 @@
DEFINED_PHASES=compile configure install preinst prepare setup
DEPEND=>=sys-libs/libsepol-2.1.4 >=sys-libs/libselinux-2.3 sys-devel/bison sys-devel/flex >=dev-db/sqlite-3.2:3 dev-libs/libxml2:2 virtual/pkgconfig java? ( dev-lang/swig:1 >=virtual/jdk-1.4 ) python? ( python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7 ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dev-lang/swig:1 ) X? ( >=dev-lang/tk-8.4.9 >=gnome-base/libglade-2.0 >=x11-libs/gtk+-2.8:2 ) !<sys-devel/gettext-0.18.1.1-r3 || ( >=sys-devel/automake-1.13:1.13 >=sys-devel/automake-1.15:1.15 ) >=sys-devel/autoconf-2.69 >=sys-devel/libtool-2.4 java? ( >=dev-java/java-config-2.1.9-r1 )
DESCRIPTION=SELinux policy tools
EAPI=5
HOMEPAGE=http://www.tresys.com/selinux/selinux_policy_tools.shtml
IUSE=X debug java python elibc_FreeBSD java python_targets_python2_7
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-libs/libsepol-2.1.4 >=sys-libs/libselinux-2.3 >=dev-db/sqlite-3.2:3 dev-libs/libxml2:2 java? ( >=virtual/jre-1.4 ) X? ( >=dev-lang/tk-8.4.9 >=dev-tcltk/bwidget-1.8 >=gnome-base/libglade-2.0 >=x11-libs/gtk+-2.8:2 ) java? ( >=dev-java/java-config-2.1.9-r1 )
RESTRICT=test
SLOT=0
SRC_URI=http://oss.tresys.com/projects/setools/chrome/site/dists/setools-3.3.8/setools-3.3.8.tar.bz2 http://dev.gentoo.org/~swift/patches/setools/setools-3.3.8-01-fedora-patches.tar.gz http://dev.gentoo.org/~swift/patches/setools/setools-3.3.8-03-gentoo-patches.tar.gz
_eclasses_=autotools 999c8f6cf5d91495cb0779588f20716c eutils 9fb270e417e0e83d64ca52586c4a79de java-pkg-opt-2 f9bbbe5092225a2059aa9e6a3a2b52f1 java-utils-2 2257adeaac9408ab545ef49ae751bae6 libtool 52d0e17251d04645ffaa61bfdd858944 multibuild 6d4858dc00f8bc51caf3f957f8430eb0 multilib 3bf24e6abb9b76d9f6c20600f0b716bf python-r1 6d3a3cb5705b9fff1aeb7cfa4e3336fe python-utils-r1 096f8247eae93026af13ab88cf4305cd toolchain-funcs c961250d50160cd37d6b7fd9e8429c92 versionator cd0bcdb170807e4a1984115e9d53a26f
_md5_=e9cfd92cfa43129f98bdb33b21de5669

14
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/app-admin/setools-3.3.8-r7 vendored Normal file
View File

@ -0,0 +1,14 @@
DEFINED_PHASES=compile configure install preinst prepare setup
DEPEND=>=sys-libs/libsepol-2.4 >=sys-libs/libselinux-2.4 >=dev-db/sqlite-3.2:3 dev-libs/libxml2:2 python? ( python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7 ) python_targets_python3_4? ( dev-lang/python:3.4 ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,python_targets_python3_4(-)?,-python_single_target_python2_7(-),-python_single_target_python3_4(-)] ) X? ( >=dev-lang/tk-8.4.9:0= >=gnome-base/libglade-2.0 >=x11-libs/gtk+-2.8:2 ) >=sys-devel/automake-1.12.1 sys-devel/bison sys-devel/flex virtual/pkgconfig java? ( dev-lang/swig virtual/jdk:= ) python? ( dev-lang/swig ) !<sys-devel/gettext-0.18.1.1-r3 || ( >=sys-devel/automake-1.13:1.13 >=sys-devel/automake-1.15:1.15 ) >=sys-devel/autoconf-2.69 >=sys-devel/libtool-2.4 java? ( >=dev-java/java-config-2.1.9-r1 )
DESCRIPTION=SELinux policy tools
EAPI=5
HOMEPAGE=http://www.tresys.com/selinux/selinux_policy_tools.shtml
IUSE=X debug java python elibc_FreeBSD java python_targets_python2_7 python_targets_python3_4
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-libs/libsepol-2.4 >=sys-libs/libselinux-2.4 >=dev-db/sqlite-3.2:3 dev-libs/libxml2:2 python? ( python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7 ) python_targets_python3_4? ( dev-lang/python:3.4 ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,python_targets_python3_4(-)?,-python_single_target_python2_7(-),-python_single_target_python3_4(-)] ) X? ( >=dev-lang/tk-8.4.9:0= >=gnome-base/libglade-2.0 >=x11-libs/gtk+-2.8:2 ) java? ( >=virtual/jre-1.4:= ) X? ( >=dev-tcltk/bwidget-1.8 ) java? ( >=dev-java/java-config-2.1.9-r1 )
RESTRICT=test
SLOT=0
SRC_URI=http://oss.tresys.com/projects/setools/chrome/site/dists/setools-3.3.8/setools-3.3.8.tar.bz2 http://dev.gentoo.org/~perfinion/patches/setools/setools-3.3.8-04-gentoo-patches.tar.bz2
_eclasses_=autotools 999c8f6cf5d91495cb0779588f20716c eutils 9fb270e417e0e83d64ca52586c4a79de java-pkg-opt-2 f9bbbe5092225a2059aa9e6a3a2b52f1 java-utils-2 2257adeaac9408ab545ef49ae751bae6 libtool 52d0e17251d04645ffaa61bfdd858944 multibuild 6d4858dc00f8bc51caf3f957f8430eb0 multilib 3bf24e6abb9b76d9f6c20600f0b716bf python-r1 6d3a3cb5705b9fff1aeb7cfa4e3336fe python-utils-r1 096f8247eae93026af13ab88cf4305cd toolchain-funcs c961250d50160cd37d6b7fd9e8429c92 versionator cd0bcdb170807e4a1984115e9d53a26f
_md5_=bbf3f69a8e2e0f82f928784f9cd13bc2

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20140311-r5 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=http://oss.tresys.com/files/refpolicy/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r5.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=d7d09928184799d824d0ef43301a61d5

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20140311-r6 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=http://oss.tresys.com/files/refpolicy/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r6.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=8f6c3c92aafa2f1fd253e310486035b1

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20140311-r7 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=http://oss.tresys.com/files/refpolicy/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r7.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=8d77f501eaa779d229d71af8857c73ee

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20141203-r1 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r1.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=35252f3bb2a57b6f46e2f986590bf101

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20141203-r2 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r2.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=3e30aa0d69bf443430e3b02688950136

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20141203-r3 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r3.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=a7f70f3b03b3bc718241d6e25e0c4088

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20141203-r4 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r4.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=7e8436cfb93ffa05adb007331844244b

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20141203-r5 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r5.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=0a4405398483d4dc1d5cba62ad15c136

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-2.20141203-r6 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile configure install preinst prepare
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
KEYWORDS=~amd64 ~x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r6.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=cf341faa2d94ca45e298219e0470234d

11
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-9999 vendored Normal file
View File

@ -0,0 +1,11 @@
DEFINED_PHASES=compile configure install preinst prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725 sys-devel/m4 >=sys-apps/checkpolicy-2.3 >=dev-vcs/git-1.8.2.1
DESCRIPTION=Gentoo base policy for SELinux
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+peer_perms +open_perms +ubac +unconfined doc
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.3 virtual/udev !<=sec-policy/selinux-base-policy-2.20120725
SLOT=0
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de git-r3 3a2bd0ae504c33a50061885480f3def3 multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=3abee749d1eb69b649309b0b3da2c404

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20140311-r5 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=amd64 x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20140311-r5
SLOT=0
SRC_URI=http://oss.tresys.com/files/refpolicy/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r5.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=84f158574cd4928c26446313e18fb949

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20140311-r6 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=amd64 x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20140311-r6
SLOT=0
SRC_URI=http://oss.tresys.com/files/refpolicy/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r6.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=c646152056c3ba675d57a2da5b0eb8f4

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20140311-r7 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=amd64 x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20140311-r7
SLOT=0
SRC_URI=http://oss.tresys.com/files/refpolicy/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r7.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=756ede2629c42e92416c98bc2d472fb8

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20141203-r1 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=amd64 x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20141203-r1
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r1.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=7cfbd6725c3fd151af90622f330ba1be

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20141203-r2 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=amd64 x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20141203-r2
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r2.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=e191d7519322d44add560e1362062f97

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20141203-r3 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=amd64 x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20141203-r3
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r3.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=d2595d13ba98c4ed047f2c716dff0a3b

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20141203-r4 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=amd64 x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20141203-r4
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r4.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=ee1dc862415fcd39b7673f1cce0220ce

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20141203-r5 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=amd64 x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20141203-r5
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r5.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=7be69136fba1c7d11f6ba62be20137bb

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-2.20141203-r6 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare pretend
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
KEYWORDS=~amd64 ~x86
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-2.20141203-r6
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r6.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=f6d961aa4e5d660a034d0b9abed1c9e7

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-base-policy-9999 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst prepare pretend unpack
DEPEND=>=dev-vcs/git-1.8.2.1
DESCRIPTION=SELinux policy for core modules
EAPI=5
HOMEPAGE=http://www.gentoo.org/proj/en/hardened/selinux/
IUSE=+unconfined
LICENSE=GPL-2
PDEPEND=unconfined? ( sec-policy/selinux-unconfined )
RDEPEND==sec-policy/selinux-base-9999
SLOT=0
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de git-r3 3a2bd0ae504c33a50061885480f3def3 multilib 3bf24e6abb9b76d9f6c20600f0b716bf toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=c293780b42cb501f9fa841823bf84db1

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20140311-r5 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r5 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r5
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r5.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=e7f895ab1d213b75d5090d7a3f56fa08

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20140311-r6 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r6 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r6
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r6.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=33b5cb9c9341984d452be089c55d3a62

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20140311-r7 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r7 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r7
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r7.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=d6abb77681ae87109402968670316ac0

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20141203-r1 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r1 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r1
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r1.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=f25da0e10536e8b234ba8401f0a26b22

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20141203-r2 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r2 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r2
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r2.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=cb6ef346503eca2a2adb1b4b9a2446ad

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20141203-r3 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r3 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r3
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r3.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=7e7b3540f078a121bcbdb807476695a0

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20141203-r4 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r4 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r4
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r4.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=2a759cb0a138e0a2df8b09fb3fec0c76

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20141203-r5 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r5 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r5
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r5.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=0aee430bbb2ae0569a1cad996e4e6107

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-2.20141203-r6 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r6 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=~amd64 ~x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r6
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r6.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=575e16cc28aa75a00491bbbb5a464836

10
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-unconfined-9999 vendored Normal file
View File

@ -0,0 +1,10 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=dev-vcs/git >=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-9999 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for unconfined
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-9999
SLOT=0
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de git-2 e28f0d8a9b321431b1e699782851b827 multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=27180d2b51559baa7e152b11615a2030

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20140311-r5 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r5 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r5
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r5.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=79fada5bfdc399bc2e14cd8d6d964b70

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20140311-r6 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r6 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r6
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r6.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=f2e440d0ef73a26f3d42535a3599c343

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20140311-r7 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r7 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20140311-r7
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20140311.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20140311-r7.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=0495ea63140dc23fedba29b0fe5f21b2

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20141203-r1 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r1 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r1
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r1.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=c5f3f439a410cce986e89c321d3269bc

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20141203-r2 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r2 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r2
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r2.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=71a96300489ae9016fe886d0d58b3a00

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20141203-r3 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r3 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r3
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r3.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=eeed25da8e32d235a110bb9ef670caf7

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20141203-r4 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r4 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r4
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r4.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=d11f123c7786bb67ee43ea04c821ddb6

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20141203-r5 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r5 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r5
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r5.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=f4a51891159054c1a8f9b016b0750c7b

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-2.20141203-r6 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r6 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
KEYWORDS=~amd64 ~x86
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-2.20141203-r6
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-2.20141203.tar.bz2 http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20141203-r6.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=da70d672854a91f7be231e15982839f4

10
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sec-policy/selinux-virt-9999 vendored Normal file
View File

@ -0,0 +1,10 @@
DEFINED_PHASES=compile install postinst postrm prepare unpack
DEPEND=dev-vcs/git >=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-9999 sys-devel/m4 >=sys-apps/checkpolicy-2.0.21
DESCRIPTION=SELinux policy for virt
EAPI=5
HOMEPAGE=https://wiki.gentoo.org/wiki/Project:SELinux
LICENSE=GPL-2
RDEPEND=>=sys-apps/policycoreutils-2.0.82 >=sec-policy/selinux-base-policy-9999
SLOT=0
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de git-2 e28f0d8a9b321431b1e699782851b827 multilib 3bf24e6abb9b76d9f6c20600f0b716bf selinux-policy-2 a6753968a2a6567cd31154d6428719c7 toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=622ff6208275e649184ac8f8e6a81a97

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sys-apps/policycoreutils-2.2.5-r4 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare
DEPEND=>=sys-libs/libselinux-2.2[python] >=sys-libs/glibc-2.4 >=sys-libs/libcap-1.10-r10 >=sys-libs/libsemanage-2.2[python] sys-libs/libcap-ng >=sys-libs/libsepol-2.2 sys-devel/gettext dev-python/ipy dbus? ( sys-apps/dbus dev-libs/dbus-glib ) audit? ( >=sys-process/audit-1.5.1 ) pam? ( sys-libs/pam ) python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7[xml] ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)]
DESCRIPTION=SELinux core utilities
EAPI=5
HOMEPAGE=http://userspace.selinuxproject.org
IUSE=audit pam dbus python_targets_python2_7
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-libs/libselinux-2.2[python] >=sys-libs/glibc-2.4 >=sys-libs/libcap-1.10-r10 >=sys-libs/libsemanage-2.2[python] sys-libs/libcap-ng >=sys-libs/libsepol-2.2 sys-devel/gettext dev-python/ipy dbus? ( sys-apps/dbus dev-libs/dbus-glib ) audit? ( >=sys-process/audit-1.5.1 ) pam? ( sys-libs/pam ) python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7[xml] ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dev-python/sepolgen app-misc/pax-utils
SLOT=0
SRC_URI=http://userspace.selinuxproject.org/releases/20131030/policycoreutils-2.2.5.tar.gz http://dev.gentoo.org/~swift/patches/policycoreutils/patchbundle-policycoreutils-2.2.5-gentoo-r1.tar.gz mirror://gentoo/policycoreutils-extra-1.31.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multibuild 6d4858dc00f8bc51caf3f957f8430eb0 multilib 3bf24e6abb9b76d9f6c20600f0b716bf python-r1 6d3a3cb5705b9fff1aeb7cfa4e3336fe python-utils-r1 096f8247eae93026af13ab88cf4305cd toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=7b21163c4c16d0719a6db609af8d43eb

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sys-apps/policycoreutils-2.3-r3 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install prepare
DEPEND=>=sys-libs/libselinux-2.3[python] >=sys-libs/glibc-2.4 >=sys-libs/libcap-1.10-r10 >=sys-libs/libsemanage-2.3[python] sys-libs/libcap-ng >=sys-libs/libsepol-2.3 sys-devel/gettext dev-python/ipy dbus? ( sys-apps/dbus dev-libs/dbus-glib ) audit? ( >=sys-process/audit-1.5.1 ) pam? ( sys-libs/pam ) python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7[xml] ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)]
DESCRIPTION=SELinux core utilities
EAPI=5
HOMEPAGE=http://userspace.selinuxproject.org
IUSE=audit pam dbus python_targets_python2_7
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-libs/libselinux-2.3[python] >=sys-libs/glibc-2.4 >=sys-libs/libcap-1.10-r10 >=sys-libs/libsemanage-2.3[python] sys-libs/libcap-ng >=sys-libs/libsepol-2.3 sys-devel/gettext dev-python/ipy dbus? ( sys-apps/dbus dev-libs/dbus-glib ) audit? ( >=sys-process/audit-1.5.1 ) pam? ( sys-libs/pam ) python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7[xml] ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dev-python/sepolgen app-misc/pax-utils
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20140506/policycoreutils-2.3.tar.gz http://dev.gentoo.org/~swift/patches/policycoreutils/patchbundle-policycoreutils-3.tar.gz mirror://gentoo/policycoreutils-extra-1.33.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multibuild 6d4858dc00f8bc51caf3f957f8430eb0 multilib 3bf24e6abb9b76d9f6c20600f0b716bf python-r1 6d3a3cb5705b9fff1aeb7cfa4e3336fe python-utils-r1 096f8247eae93026af13ab88cf4305cd toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=9be4a0a3a898eef3783ffcd2ea31d410

13
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sys-apps/policycoreutils-2.4 vendored Normal file
View File

@ -0,0 +1,13 @@
DEFINED_PHASES=compile install postinst prepare
DEPEND=>=sys-libs/libselinux-2.4[python] >=sys-libs/glibc-2.4 >=sys-libs/libcap-1.10-r10 >=sys-libs/libsemanage-2.4[python] sys-libs/libcap-ng >=sys-libs/libsepol-2.4 sys-devel/gettext dev-python/ipy[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dbus? ( sys-apps/dbus dev-libs/dbus-glib ) audit? ( >=sys-process/audit-1.5.1 ) pam? ( sys-libs/pam ) python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7[xml] ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)]
DESCRIPTION=SELinux core utilities
EAPI=5
HOMEPAGE=https://github.com/SELinuxProject/selinux/wiki
IUSE=audit pam dbus python_targets_python2_7
KEYWORDS=amd64 x86
LICENSE=GPL-2
RDEPEND=>=sys-libs/libselinux-2.4[python] >=sys-libs/glibc-2.4 >=sys-libs/libcap-1.10-r10 >=sys-libs/libsemanage-2.4[python] sys-libs/libcap-ng >=sys-libs/libsepol-2.4 sys-devel/gettext dev-python/ipy[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dbus? ( sys-apps/dbus dev-libs/dbus-glib ) audit? ( >=sys-process/audit-1.5.1 ) pam? ( sys-libs/pam ) python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7[xml] ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dev-python/sepolgen app-misc/pax-utils
SLOT=0
SRC_URI=https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20150202/policycoreutils-2.4.tar.gz mirror://gentoo/policycoreutils-extra-1.33.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de multibuild 6d4858dc00f8bc51caf3f957f8430eb0 multilib 3bf24e6abb9b76d9f6c20600f0b716bf python-r1 6d3a3cb5705b9fff1aeb7cfa4e3336fe python-utils-r1 096f8247eae93026af13ab88cf4305cd toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=e61851bb30bc7ff4cbaf69c35c5f6038

12
sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sys-apps/policycoreutils-9999 vendored Normal file
View File

@ -0,0 +1,12 @@
DEFINED_PHASES=compile install postinst prepare unpack
DEPEND=>=sys-libs/libselinux-9999[python] >=sys-libs/glibc-2.4 >=sys-libs/libcap-1.10-r10 >=sys-libs/libsemanage-9999[python] sys-libs/libcap-ng >=sys-libs/libsepol-9999 sys-devel/gettext dev-python/ipy[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dbus? ( sys-apps/dbus dev-libs/dbus-glib ) audit? ( >=sys-process/audit-1.5.1 ) pam? ( sys-libs/pam ) python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7[xml] ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] >=dev-vcs/git-1.8.2.1
DESCRIPTION=SELinux core utilities
EAPI=5
HOMEPAGE=https://github.com/SELinuxProject/selinux/wiki
IUSE=audit pam dbus python_targets_python2_7
LICENSE=GPL-2
RDEPEND=>=sys-libs/libselinux-9999[python] >=sys-libs/glibc-2.4 >=sys-libs/libcap-1.10-r10 >=sys-libs/libsemanage-9999[python] sys-libs/libcap-ng >=sys-libs/libsepol-9999 sys-devel/gettext dev-python/ipy[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dbus? ( sys-apps/dbus dev-libs/dbus-glib ) audit? ( >=sys-process/audit-1.5.1 ) pam? ( sys-libs/pam ) python_targets_python2_7? ( >=dev-lang/python-2.7.5-r2:2.7[xml] ) >=dev-lang/python-exec-2:=[python_targets_python2_7(-)?,-python_single_target_python2_7(-)] dev-python/sepolgen app-misc/pax-utils
SLOT=0
SRC_URI=mirror://gentoo/policycoreutils-extra-1.33.tar.bz2
_eclasses_=eutils 9fb270e417e0e83d64ca52586c4a79de git-r3 3a2bd0ae504c33a50061885480f3def3 multibuild 6d4858dc00f8bc51caf3f957f8430eb0 multilib 3bf24e6abb9b76d9f6c20600f0b716bf python-r1 6d3a3cb5705b9fff1aeb7cfa4e3336fe python-utils-r1 096f8247eae93026af13ab88cf4305cd toolchain-funcs c961250d50160cd37d6b7fd9e8429c92
_md5_=8d0be9d31b8c7a5237b57c9c81266631

1033
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/ChangeLog vendored Normal file
View File

File diff suppressed because it is too large Load Diff

47
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/Manifest vendored Normal file
View File

@ -0,0 +1,47 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
AUX config 631 SHA256 891ddc7cfd577a8591d65f6cb3398863ec338209b347ce9bfc125817b841860e SHA512 f3c4fece54e5786de94fc97c8e7678f9901c6963828d28b020c423458ac258480191f216522fed7658e7ad1c94fd25557efc524a4b75ec8837116c6a14c2328a WHIRLPOOL e9fe30b0e31dfc2f5f9059f843de3562ded62be8868770663cfb0e80494be17ca1536d522e82c10aec0b083e9bda9b5326f37c60b483681bf237517646e5c18a
AUX modules.conf 739 SHA256 72837d02fc5d2bfe3afef1fc6cfb05cdc88d0dae594767aab385aa32262c9996 SHA512 a40d6eff9e3d5adc26aca5488a38075d13ba5a78fe9af93925bc5c4162331529d40c545759b687b812fac260e041b5e4c8d46ab2a2cdbecdf185318e677d6d1c WHIRLPOOL 0008d46f07e3bbe4295295b4587aac6afbb461c543caba7e79288bb32925802ffbe822c1ac3dfd2e873604b87fd414262989e9a42e2a94c1d1967d8f2986dbcf
DIST patchbundle-selinux-base-policy-2.20140311-r5.tar.bz2 274187 SHA256 5ce76d59d12a7dfc02352eb2a77971d76c5ff0fa3c66cced6318919571f04839 SHA512 7a9da3ab23ce6217739f4548cc5365f64def11fe19b6f3b2a304685bb54246d12856388043870e0f061f71fb2c8c45da72bf3db28ad6e70f397f5dfffe2206c6 WHIRLPOOL a4729aaeed88f7485fbf112de91161bf4e75fb996f5123133c22fcb008966acc7db98c7849dc4b076cb633d00c81deae85cf6b5f8c48f8c3c72c90bcaff26d71
DIST patchbundle-selinux-base-policy-2.20140311-r6.tar.bz2 281043 SHA256 7fbfb518731c6bce8a3937e7dbabeaf0d39059423f5930731034363862bf9a25 SHA512 6b8bfbb3ee9e9d229ac0fa7e80905300c24f4934fb2f150ba52f45e76a3f1e8b51c788136ea32a2b044a00c614a96538aad9d3ff7300735dae228861ab5aed6f WHIRLPOOL 9da1fb97b7a1c8f5990748695c1393d0d0c7c6bcd6acbb974653ee83df00d911b70b4f9544a9e4b3014b9f78f69745a17a5c7fa02859985b611ec4636b473981
DIST patchbundle-selinux-base-policy-2.20140311-r7.tar.bz2 285346 SHA256 8e216867cc5ec2c513ae81d04e637021b4eda9bbd0fafab0c7f61f087776c33c SHA512 01d30c38dba876136d61452a890adbbe0301fb990b65b0a15086f1c8f14df4f96faf57bee8fd1328147458e5a7e96f972792c26ef971924c0fc74cf644d4b644 WHIRLPOOL ec03df417b73d52a19809a2e7417b05b11880517e4bc5093725a8172177943f3fa526eb32222f41c3aed5ec5ba3d57fb5af2ed19a32af1c37529864d30afd68b
DIST patchbundle-selinux-base-policy-2.20141203-r1.tar.bz2 264038 SHA256 0fb0ff62bf3abc2294db83d35d22220c5d86384e38332e4458fb38f88ce1538c SHA512 a9ac284c999b15f9f825761a5d59968337cac5990250d9ce46fc79a870ed14534f61b0d454866ea9296d134adb3e38634b02c0e9d70f69a657da4c11b6aeee38 WHIRLPOOL 389d5fd4feecc74c9a231c98a9bf497491e3e5c19a54f5b8ef68d050d95aeca7e6dd0853655212989b7239271be51cf2c4c3e19ac3db54cec229d802df95cbb5
DIST patchbundle-selinux-base-policy-2.20141203-r2.tar.bz2 268395 SHA256 60f5fbb2402f12b4c4aca89b134ee0dd4c88a1812208d765b601b23e025f7cfe SHA512 0a6d7a61ae259f6b4b9210c0b509a2b25581674b0d07e0fa8f2eff151f1e8bf084cae7a8928ede6e4358da661290940b8390a2cb6f5c6ababc021de4f6b445b9 WHIRLPOOL 6341b3c04aa547256f3128826fffe777c4ac2d7f6f916d6e7a7f2e976b18a903786116743a26f43602c707310662c445564ffdaa173b2c2cd9e48f4173c367a1
DIST patchbundle-selinux-base-policy-2.20141203-r3.tar.bz2 269940 SHA256 c1d507c21b02ab510e8fbe1eeb799ad1e9604ad611759c13df6c15ddc9480ed8 SHA512 694a1cf95d4fe5c686e6e8ddae56f591d85fd334f896352b11b2bf24b2e95be8eaf32d6aee9a3410c25e613efa6fe18e485cfe836a2a6dadb5f01c8118b42a45 WHIRLPOOL 8061b6e5dd5f1d0602b66fdf31f2c3c02de02bad73f213ad24d0be8d62a7dc4b8d35cb0780b4a1ee76ecded737d9eed3e41f6d51c24d885d3cac63591930ce96
DIST patchbundle-selinux-base-policy-2.20141203-r4.tar.bz2 271374 SHA256 7229f0f5a299fc31b693f603cb265697ecf02afb843aba74f96d8afb208dd9c9 SHA512 41379568855b820a72a1d8e7fb8114464573974d98b98ae9107649ed625d6fc8c045dc6714ee51d6db72473a76c99511ee23e6d0a9bd56a19ebbaa1fa13e55a8 WHIRLPOOL 563020e4d38817d875d7a8b98f670cff68d86fdfe89945b87943c8b48d106a58d269822a60640fcc76f51bad207b8b61839b2cdbb1405ab5f49332516c9faa1d
DIST patchbundle-selinux-base-policy-2.20141203-r5.tar.bz2 274136 SHA256 c23d17c47ce75620ffa9f3ef66393ae56693d7e431f9c7f0a4468a9646767a5f SHA512 e50d128ff9e6554f7d49bc1e43b40c8b062b8f7bb727acda9772b45381c61bc6c968265245e39f8ca044c2b0f4dadf3cdacfb38cd32306fa27f1acfb49921e06 WHIRLPOOL a0591298d54a4ba080112716fc35509e6c82281d362a11b208caa2a96ddc20c4cc8f942206db49d86b831c6ed13a239b7db9009f17ede77fce7f0c01cd6b20cc
DIST patchbundle-selinux-base-policy-2.20141203-r6.tar.bz2 293231 SHA256 b686dcc517b97834f66d967afdcc724cb43b5c6dbf9f34043a91cdeda2625cc7 SHA512 a2c486cbe4a1d21ff3fd01bef25ecf5a633a4072646c67cfccf3f7187d95f3d9e3b482a46ba17c55c40a8e7c0dee56e9cf9ddc9f414d3e4511443b62f60d03e9 WHIRLPOOL 3d708e287e3f9b873be647b0327eab6675a8702ee1cffb56e36934cada306e5ccc64397a083dad9e59de37a067e628cacbf896ae99012d5a209e42fd7cd8a4c6
DIST refpolicy-2.20140311.tar.bz2 664416 SHA256 f69437db95548c78a5dec44c236397146b144153149009ea554d2e536e5436f7 SHA512 50bacee82ed41ac8b8007ecc33bf51d22303cc2ddd27cfb72cb5520dab5f8e255186e34b89cec492c7a2d4220b200814bdede9b46c19f987a3d3d65a1c9b749a WHIRLPOOL e07480beba6ab1f02ad36b7d0c50c4a71cb39a8ec78bf8d1dc3c82bb9dd1d69d9169d7c937165ea15f60ce1147f256d46644f944107a3a8a800d5bad70d4c255
DIST refpolicy-2.20141203.tar.bz2 680243 SHA256 f438209c430d8a2d4ddcbe4bdd3edb46f6af7dc4913637af0b73c635e40c1522 SHA512 682e4280c5799e4c12ec7594afc1389f67be35055748d2e0dbdc3419159a16c96d4946ca6178daee8370515951f8653b2e452efe8c962b8d7f9bc192f0b15a0c WHIRLPOOL 74bca232534e7af9051bb1ab9f77c1ff6c425781cf4561f781d6e9a40cc5ca0d9add540249ea5493e8782a9372aea296ead6c165c6c440ae1509eb319d151ee5
EBUILD selinux-base-policy-2.20140311-r5.ebuild 4075 SHA256 9e14cb9272f0b1c514fa42760ca536cfe362ff1166b028438f63360c1aa25d1e SHA512 b10c1e55f65e09b467586fbba3a5aa4ff913fecfa90b7bc402eb5950b6b88ccf3965108cc7ce79be70b8669419158041fe5bcd1e544d14b322e1762f908bc177 WHIRLPOOL f45b4051e7ef52b8a677b266c65d7d2a1b143776a8ab04da3afa1ccd1ba90e93285fc36b9f69a7c5ca5c94bbb2352ac5d3b10a7aca0ae60adf153fc447e8422d
EBUILD selinux-base-policy-2.20140311-r6.ebuild 4075 SHA256 5cbc422fd5507ab3ab4c47627194398a506f3b294194d465127b01c02db6a73b SHA512 89db7619dbc2faad29862e1506346849acbcebcbf5ecd9883537f47241a0e38bd9444d1b8bbd6ca10539296f4bbcf191a08e1c69d07b2eac01c67707b863a495 WHIRLPOOL d8e0b365682c499fd852cbfaf2c192106700120f85831b9257adc06ebc8838e9e4456f2912e46cff0cba48722ff164036a3120d06d41aa3c88c6f600b3037908
EBUILD selinux-base-policy-2.20140311-r7.ebuild 4414 SHA256 ea4a52a11e47c76349c8ab4f50e8b9ea36110ed5ae3ee711f93e674bfade5f0d SHA512 f08da1903028286a53ea0665a9fcc66382397ed12e3263ad43c07fd885e1ec1d7c7b098dcb4c0123eb8d7743d848a6ee58081d64b688293b3e5ef111f117fb13 WHIRLPOOL db74c5935a1b5f80d834e31fc2ce04da892bd1b18c4b1661a8b4dac7cb688b4560ce81e6b4e7c9b7145d44323ab218751d61c42193dd60647234988726c4f31a
EBUILD selinux-base-policy-2.20141203-r1.ebuild 4515 SHA256 46d473715a6d2366a763e847faceb7b35ab87734560ed3ed98a4b7331f369a66 SHA512 8903c2c5d145344abc5abb911a3b9f1816236940b9ceede6c197b30935aa3c075bf5d049ce8e6b052b3a9bf3755921ae8849cca2fc18f51c044959b3f9fbb6e3 WHIRLPOOL 55df1c54d156a10078be5a896ae3e7227c302f0bb0c710991dfbb39b4871c8c4307443069e94d952faaeaa7bfde8302afe170c187c97eae63d430d957f2cbb53
EBUILD selinux-base-policy-2.20141203-r2.ebuild 4383 SHA256 dc951e73ee18ce8d432f192056839bbdca67aec6469cfa502e87c76cc0e7a2c7 SHA512 fe62d15619ae9708e324ca86f29fed90e8540ddfd06fe060ac0c5815362884c6c586af61d9e29a038bfeb79b9b30d97b95d997a6bbf769eb99fc3656c2d1e38c WHIRLPOOL 67c55a125cb599bbb883148693b8be088e905e5123e98393f9bf0a54d7aad293e54da4f2d2711855a83b1cc2a3001bfa95c65b1312fd9e4c08f6b72cb79e020b
EBUILD selinux-base-policy-2.20141203-r3.ebuild 4383 SHA256 46e0754998f01063ef479ecdf47b28c46c8b2d865efbf319e67393ace28b8f9c SHA512 310212205dc13a6da4e5fe5cf01920d617d0fced4f0d84b9b4bad8783db90fe6df45f5a36a0ea48de0060a1befc1e89a4ff19421df048f890f1fb61becb02982 WHIRLPOOL 7ac6418851f8f58ce17c7a6c60d35a20a5a21a804b27d4d9acd3f3983f3e7591c38ee0d7e25a4186f7970ea8fd9a65ca2c750e97c82f55dd8db58b52483306ea
EBUILD selinux-base-policy-2.20141203-r4.ebuild 4383 SHA256 58731e82539ed7c2308d3f4f5937930e20a7a539ea5a22fa3f6f46f5b5e36131 SHA512 b732176df602df8c470ca384edad9281c478ea0ede09798aa127e6cb0492c6bb15c269c8a3672eb51a5fa6fbe1c79dfe5ddce963ba8e41284dd24deb6fa58d3c WHIRLPOOL 02c2c57eca6a96db69456089a9619a62417b486c18c0ab15c6cf098830917db9516fa74b7ee3160a7169cab343e4f7279b6421103ae9d056ca11ba770b4e5c4e
EBUILD selinux-base-policy-2.20141203-r5.ebuild 4385 SHA256 47235923abdc4415ebf9c2beefdaf3ade3494980ed9d02b9499282ae4f1a068a SHA512 596ca1c55a87b2949d06179a447da8d778cdd3c106241858162490f5a8c78eb5789ae2a4acabed7ae805cd2f6a0c239e7db2437b4d7169b836cfe936998d1d07 WHIRLPOOL 375b311d70e9222e54e8b64fa8b5db25d5b21e84ebd29a1206623a1a0310583cd365939a01ea790d28e175d65dabd835b7c5886fd217bb5f6a59646003cad1da
EBUILD selinux-base-policy-2.20141203-r6.ebuild 4391 SHA256 ebbe98951e4927b1a6ee645c7200937a3b6c3a9e7333ecf8f34172a62605929b SHA512 2dfa4a7e137cf06eb576ff60aabb2bb8895bdb66c30148ec418db2f9ce60a2467deef76e664abdad5df2dafb33a18bde32f8c0de6d713e8756f8e72f6b7d2a5e WHIRLPOOL ffc5e4621225fd2a2c5304617f9ba8e8a4ff18383a57c72cd90f86729c479195308a497ba90f1b052ad829122dd402c1c4ef201c7ad59a6e9d0d8cdafcc3719d
EBUILD selinux-base-policy-9999.ebuild 4383 SHA256 c3287288b79c3c4b79d456df067756358f7edaee5bfb01fd03ee00c7bfe822c7 SHA512 c444f0ecbe327dd3ff0937beb1c188f7581691630aabe9c50c20397040e2db54c54185a251f861190cec3b1c3f545662372f366a4dbb9e1ee870aec74aa4ea29 WHIRLPOOL 9a04e1d0c87e2c87dca25bbe92747b5b444db22892fbd0c2552d9d9e8297db8aed13d863cb82c93efb52d2362b867c82b94af85a19cdc37524c7521ae52b35a8
MISC ChangeLog 37381 SHA256 3906810ece033dc3a646c1e9dc3df8c8858ae7e9373cab473eeb6bc7d85c2afe SHA512 8f07a8b1960e81a61db54c6b8e45883eddb7a2e7166a0de5b9c297a13d9c8d69fe0f8937729d32fe2a16a05230627eba352c8e237308811f4f248e6a8f474327 WHIRLPOOL ffbb48ef7fc135e28d09b5f3ea7f02a2ae94b73f7f3c11d87ed24c97749f13341afbd4fc81cfe0474ec5eff0c860559a8c1db03c70caa20b9e03548d29ddb620
MISC metadata.xml 448 SHA256 4babd5e53785136aa79ee0737a89af1fc49c4fc144aba0f6163d6f85215f57e2 SHA512 7e747c9dbae3eaee62a284824a68039961264540e0633e617aaabaeef2e83f4623863d29ee26c2e4738ac706d3824914f530f8e2b990ac7f06aa8f6e4cae9964 WHIRLPOOL 733957f76ca89c6fdd08060a368048276247994db56cf8325e69b896a07dc5e576ca124f3190079b169ec078a2e69156d4b12e6c6cc94328248705779f357bc4
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0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=00Cn
-----END PGP SIGNATURE-----

15
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/config vendored Normal file
View File

@ -0,0 +1,15 @@
# This file controls the state of SELinux on the system on boot.
# SELINUX can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=permissive
# SELINUXTYPE can take one of these four values:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
# mls - Full SELinux protection with Multi-Level Security
# mcs - Full SELinux protection with Multi-Category Security
# (mls, but only one sensitivity level)
SELINUXTYPE=strict

50
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/files/modules.conf vendored Normal file
View File

@ -0,0 +1,50 @@
application = base
authlogin = base
bootloader = base
clock = base
consoletype = base
corecommands = base
corenetwork = base
cron = base
devices = base
dmesg = base
domain = base
files = base
filesystem = base
fstools = base
getty = base
hostname = base
hotplug = base
init = base
iptables = base
kernel = base
libraries = base
locallogin = base
logging = base
lvm = base
miscfiles = base
mcs = base
mls = base
modutils = base
mount = base
mta = base
netutils = base
nscd = base
portage = base
raid = base
rsync = base
selinux = base
selinuxutil = base
ssh = base
staff = base
storage = base
su = base
sysadm = base
sysnetwork = base
terminal = base
ubac = base
udev = base
userdomain = base
usermanage = base
unprivuser = base
xdg = base

12
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/metadata.xml vendored Normal file
View File

@ -0,0 +1,12 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<herd>selinux</herd>
<longdescription>
Gentoo SELinux base policy. This contains policy for a system at the end of system installation.
There is no extra policy in this package.
</longdescription>
<use>
<flag name='unconfined'>Enable support for the unconfined SELinux policy module</flag>
</use>
</pkgmetadata>

143
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/selinux-base-policy-2.20141203-r5.ebuild vendored Normal file
View File

@ -0,0 +1,143 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20141203-r5.ebuild,v 1.3 2015/06/05 16:10:32 perfinion Exp $
EAPI="5"
inherit eutils
if [[ ${PV} == 9999* ]]; then
EGIT_REPO_URI="${SELINUX_GIT_REPO:-git://anongit.gentoo.org/proj/hardened-refpolicy.git https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}"
EGIT_SOURCEDIR="${WORKDIR}/refpolicy"
inherit git-2
KEYWORDS=""
else
SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
http://dev.gentoo.org/~swift/patches/${PN}/patchbundle-${PN}-${PVR}.tar.bz2"
KEYWORDS="amd64 x86"
fi
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
DESCRIPTION="SELinux policy for core modules"
IUSE="+unconfined"
RDEPEND="=sec-policy/selinux-base-${PVR}"
PDEPEND="unconfined? ( sec-policy/selinux-unconfined )"
DEPEND=""
MODS="application authlogin bootloader clock consoletype cron dmesg fstools getty hostname hotplug init iptables libraries locallogin logging lvm miscfiles modutils mount mta netutils nscd portage raid rsync selinuxutil setrans ssh staff storage su sysadm sysnetwork tmpfiles udev userdomain usermanage unprivuser xdg"
LICENSE="GPL-2"
SLOT="0"
S="${WORKDIR}/"
# Code entirely copied from selinux-eclass (cannot inherit due to dependency on
# itself), when reworked reinclude it. Only postinstall (where -b base.pp is
# added) needs to remain then.
pkg_pretend() {
for i in ${POLICY_TYPES}; do
if [[ "${i}" == "targeted" ]] && ! use unconfined; then
die "If you use POLICY_TYPES=targeted, then USE=unconfined is mandatory."
fi
done
}
src_prepare() {
local modfiles
if [[ ${PV} != 9999* ]]; then
# Patch the source with the base patchbundle
cd "${S}"
EPATCH_MULTI_MSG="Applying SELinux policy updates ... " \
EPATCH_SUFFIX="patch" \
EPATCH_SOURCE="${WORKDIR}" \
EPATCH_FORCE="yes" \
epatch
fi
# Apply the additional patches refered to by the module ebuild.
# But first some magic to differentiate between bash arrays and strings
if [[ "$(declare -p POLICY_PATCH 2>/dev/null 2>&1)" == "declare -a"* ]];
then
cd "${S}/refpolicy/policy/modules"
for POLPATCH in "${POLICY_PATCH[@]}";
do
epatch "${POLPATCH}"
done
else
if [[ -n ${POLICY_PATCH} ]];
then
cd "${S}/refpolicy/policy/modules"
for POLPATCH in ${POLICY_PATCH};
do
epatch "${POLPATCH}"
done
fi
fi
# Calling user patches
epatch_user
# Collect only those files needed for this particular module
for i in ${MODS}; do
modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.te) $modfiles"
modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.fc) $modfiles"
done
for i in ${POLICY_TYPES}; do
mkdir "${S}"/${i} || die "Failed to create directory ${S}/${i}"
cp "${S}"/refpolicy/doc/Makefile.example "${S}"/${i}/Makefile \
|| die "Failed to copy Makefile.example to ${S}/${i}/Makefile"
cp ${modfiles} "${S}"/${i} \
|| die "Failed to copy the module files to ${S}/${i}"
done
}
src_compile() {
for i in ${POLICY_TYPES}; do
emake NAME=$i -C "${S}"/${i} || die "${i} compile failed"
done
}
src_install() {
local BASEDIR="/usr/share/selinux"
for i in ${POLICY_TYPES}; do
for j in ${MODS}; do
einfo "Installing ${i} ${j} policy package"
insinto ${BASEDIR}/${i}
doins "${S}"/${i}/${j}.pp || die "Failed to add ${j}.pp to ${i}"
done
done
}
pkg_postinst() {
# Override the command from the eclass, we need to load in base as well here
local COMMAND
for i in ${MODS}; do
COMMAND="-i ${i}.pp ${COMMAND}"
done
for i in ${POLICY_TYPES}; do
einfo "Inserting the following modules, with base, into the $i module store: ${MODS}"
cd /usr/share/selinux/${i} || die "Could not enter /usr/share/selinux/${i}"
semodule -s ${i} -b base.pp ${COMMAND} || die "Failed to load in base and modules ${MODS} in the $i policy store"
done
# Relabel depending packages
local PKGSET="";
if [ -x /usr/bin/qdepends ] ; then
PKGSET=$(/usr/bin/qdepends -Cq -r -Q ${CATEGORY}/${PN} | grep -v 'sec-policy/selinux-');
elif [ -x /usr/bin/equery ] ; then
PKGSET=$(/usr/bin/equery -Cq depends ${CATEGORY}/${PN} | grep -v 'sec-policy/selinux-');
fi
if [ -n "${PKGSET}" ] ; then
rlpkg ${PKGSET};
fi
}

143
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base-policy/selinux-base-policy-9999.ebuild vendored Normal file
View File

@ -0,0 +1,143 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-9999.ebuild,v 1.23 2015/04/21 10:33:02 perfinion Exp $
EAPI="5"
inherit eutils
if [[ ${PV} == 9999* ]]; then
EGIT_REPO_URI="${SELINUX_GIT_REPO:-git://anongit.gentoo.org/proj/hardened-refpolicy.git https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}"
EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy"
inherit git-r3
KEYWORDS=""
else
SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
http://dev.gentoo.org/~swift/patches/${PN}/patchbundle-${PN}-${PVR}.tar.bz2"
KEYWORDS="~amd64 ~x86"
fi
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
DESCRIPTION="SELinux policy for core modules"
IUSE="+unconfined"
RDEPEND="=sec-policy/selinux-base-${PVR}"
PDEPEND="unconfined? ( sec-policy/selinux-unconfined )"
DEPEND=""
MODS="application authlogin bootloader clock consoletype cron dmesg fstools getty hostname hotplug init iptables libraries locallogin logging lvm miscfiles modutils mount mta netutils nscd portage raid rsync selinuxutil setrans ssh staff storage su sysadm sysnetwork tmpfiles udev userdomain usermanage unprivuser xdg"
LICENSE="GPL-2"
SLOT="0"
S="${WORKDIR}/"
# Code entirely copied from selinux-eclass (cannot inherit due to dependency on
# itself), when reworked reinclude it. Only postinstall (where -b base.pp is
# added) needs to remain then.
pkg_pretend() {
for i in ${POLICY_TYPES}; do
if [[ "${i}" == "targeted" ]] && ! use unconfined; then
die "If you use POLICY_TYPES=targeted, then USE=unconfined is mandatory."
fi
done
}
src_prepare() {
local modfiles
if [[ ${PV} != 9999* ]]; then
# Patch the source with the base patchbundle
cd "${S}"
EPATCH_MULTI_MSG="Applying SELinux policy updates ... " \
EPATCH_SUFFIX="patch" \
EPATCH_SOURCE="${WORKDIR}" \
EPATCH_FORCE="yes" \
epatch
fi
# Apply the additional patches refered to by the module ebuild.
# But first some magic to differentiate between bash arrays and strings
if [[ "$(declare -p POLICY_PATCH 2>/dev/null 2>&1)" == "declare -a"* ]];
then
cd "${S}/refpolicy/policy/modules"
for POLPATCH in "${POLICY_PATCH[@]}";
do
epatch "${POLPATCH}"
done
else
if [[ -n ${POLICY_PATCH} ]];
then
cd "${S}/refpolicy/policy/modules"
for POLPATCH in ${POLICY_PATCH};
do
epatch "${POLPATCH}"
done
fi
fi
# Calling user patches
epatch_user
# Collect only those files needed for this particular module
for i in ${MODS}; do
modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.te) $modfiles"
modfiles="$(find ${S}/refpolicy/policy/modules -iname $i.fc) $modfiles"
done
for i in ${POLICY_TYPES}; do
mkdir "${S}"/${i} || die "Failed to create directory ${S}/${i}"
cp "${S}"/refpolicy/doc/Makefile.example "${S}"/${i}/Makefile \
|| die "Failed to copy Makefile.example to ${S}/${i}/Makefile"
cp ${modfiles} "${S}"/${i} \
|| die "Failed to copy the module files to ${S}/${i}"
done
}
src_compile() {
for i in ${POLICY_TYPES}; do
emake NAME=$i -C "${S}"/${i} || die "${i} compile failed"
done
}
src_install() {
local BASEDIR="/usr/share/selinux"
for i in ${POLICY_TYPES}; do
for j in ${MODS}; do
einfo "Installing ${i} ${j} policy package"
insinto ${BASEDIR}/${i}
doins "${S}"/${i}/${j}.pp || die "Failed to add ${j}.pp to ${i}"
done
done
}
pkg_postinst() {
# Override the command from the eclass, we need to load in base as well here
local COMMAND
for i in ${MODS}; do
COMMAND="-i ${i}.pp ${COMMAND}"
done
for i in ${POLICY_TYPES}; do
einfo "Inserting the following modules, with base, into the $i module store: ${MODS}"
cd /usr/share/selinux/${i} || die "Could not enter /usr/share/selinux/${i}"
semodule -s ${i} -b base.pp ${COMMAND} || die "Failed to load in base and modules ${MODS} in the $i policy store"
done
# Relabel depending packages
local PKGSET="";
if [ -x /usr/bin/qdepends ] ; then
PKGSET=$(/usr/bin/qdepends -Cq -r -Q ${CATEGORY}/${PN} | grep -v 'sec-policy/selinux-');
elif [ -x /usr/bin/equery ] ; then
PKGSET=$(/usr/bin/equery -Cq depends ${CATEGORY}/${PN} | grep -v 'sec-policy/selinux-');
fi
if [ -n "${PKGSET}" ] ; then
rlpkg ${PKGSET};
fi
}

352
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/ChangeLog vendored Normal file
View File

@ -0,0 +1,352 @@
# ChangeLog for sec-policy/selinux-base
# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base/ChangeLog,v 1.73 2015/06/05 16:10:26 perfinion Exp $
05 Jun 2015; Jason Zaman <perfinion@gentoo.org>
selinux-base-2.20141203-r5.ebuild:
Stabilize policy 2.20141203-r5
*selinux-base-2.20141203-r6 (05 Jun 2015)
05 Jun 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-base-2.20141203-r6.ebuild:
Release of 2.20141203-r6
25 Apr 2015; Mike Gilbert <floppym@gentoo.org>
selinux-base-2.20140311-r5.ebuild, selinux-base-2.20140311-r6.ebuild,
selinux-base-2.20140311-r7.ebuild, selinux-base-2.20141203-r1.ebuild,
selinux-base-2.20141203-r2.ebuild, selinux-base-2.20141203-r3.ebuild,
selinux-base-2.20141203-r4.ebuild, selinux-base-2.20141203-r5.ebuild:
Replace links pointing at git.overlays.gentoo.org.
21 Apr 2015; Jason Zaman <perfinion@gentoo.org> selinux-base-9999.ebuild:
update git urls and migrate git-2 -> git-r3
15 Apr 2015; Jason Zaman <perfinion@gentoo.org>
selinux-base-2.20141203-r4.ebuild:
Stabilize policy 2.20141203-r4
*selinux-base-2.20141203-r5 (15 Apr 2015)
15 Apr 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-base-2.20141203-r5.ebuild:
Release of 2.20141203-r5
22 Mar 2015; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20141203-r3.ebuild:
Stabilize 2.20141203-r3 policies
*selinux-base-2.20141203-r4 (22 Mar 2015)
22 Mar 2015; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20141203-r4.ebuild, selinux-base-9999.ebuild:
Release of 2.20141203-r4
*selinux-base-2.20141203-r3 (29 Jan 2015)
29 Jan 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-base-2.20141203-r3.ebuild, selinux-base-2.20141203-r2.ebuild:
Release of 2.20141203-r3, stable 2.20141203-r2
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-base-2.20140311-r1.ebuild, -selinux-base-2.20140311-r2.ebuild,
-selinux-base-2.20140311-r3.ebuild, -selinux-base-2.20140311-r4.ebuild:
Remove old ebuilds
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20141203-r1.ebuild:
Stabilize 2.20141203-r1
*selinux-base-2.20141203-r2 (21 Dec 2014)
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20141203-r2.ebuild:
Release of 2.20141203-r2
07 Dec 2014; Jason Zaman <perfinion@gentoo.org>
selinux-base-2.20140311-r7.ebuild, selinux-base-9999.ebuild:
Stabilize 2.20140311-r7
*selinux-base-2.20141203-r1 (07 Dec 2014)
07 Dec 2014; Jason Zaman <perfinion@gentoo.org>
+selinux-base-2.20141203-r1.ebuild:
Release of 2.20141203-r1
07 Dec 2014; Jason Zaman <perfinion@gentoo.org> selinux-base-9999.ebuild:
update SRC_URI
07 Dec 2014; Sven Vermeulen <swift@gentoo.org> selinux-base-9999.ebuild:
Clean up sed commands that are no longer needed (bug 257111 is fixed upstream)
05 Dec 2014; Jason Zaman <perfinion@gentoo.org> selinux-base-9999.ebuild:
enable parallel build, bug 530178
01 Nov 2014; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20140311-r6.ebuild:
Stabilize rev 6
*selinux-base-2.20140311-r7 (01 Nov 2014)
01 Nov 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20140311-r7.ebuild:
Bump revision r7 of SELinux policies
01 Nov 2014; Sven Vermeulen <swift@gentoo.org> selinux-base-9999.ebuild:
Add KEYWORDS logic in -9999 ebuilds for ease of copying
24 Aug 2014; Sven Vermeulen <swift@gentoo.org> selinux-base-9999.ebuild:
Back to gogo infrastructure
23 Aug 2014; Sven Vermeulen <swift@gentoo.org> selinux-base-9999.ebuild:
Temporarily use github until gogo is back on track
22 Aug 2014; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20140311-r5.ebuild:
Stabilize r5 policies
*selinux-base-2.20140311-r6 (21 Aug 2014)
21 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20140311-r6.ebuild:
Release of 2.20140311-r6
*selinux-base-2.20140311-r5 (09 Aug 2014)
09 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20140311-r5.ebuild:
Bump towards r5 (fixes duplicate context for hiawatha)
08 Aug 2014; Sven Vermeulen <swift@gentoo.org> selinux-base-9999.ebuild:
Make 9999 ebuilds EAPI=5 and transform to make master for version bumps
06 Aug 2014; Sven Vermeulen <swift@gentoo.org> selinux-base-9999.ebuild:
Supporting the SELINUX_GIT_* variables
05 Aug 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-base-2.20130424-r1.ebuild, -selinux-base-2.20130424-r2.ebuild,
-selinux-base-2.20130424-r3.ebuild, -selinux-base-2.20130424-r4.ebuild:
Remove obsolete ebuilds
*selinux-base-2.20140311-r4 (01 Aug 2014)
01 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20140311-r4.ebuild, selinux-base-2.20140311-r3.ebuild:
Stabilization of r3, and make r4 available for testing
29 May 2014; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20140311-r2.ebuild:
Stabilize 2.20140311-r2
*selinux-base-2.20140311-r3 (29 May 2014)
29 May 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20140311-r3.ebuild:
Bump to 2.20140311-r3
19 Apr 2014; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20140311-r1.ebuild:
Stabilize r1 policies
*selinux-base-2.20140311-r2 (19 Apr 2014)
19 Apr 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20140311-r2.ebuild:
Release of 2.20140311-r2
24 Mar 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-base-2.20120725-r5.ebuild, -selinux-base-2.20120725-r7.ebuild,
-selinux-base-2.20120725-r8.ebuild, -selinux-base-2.20120725-r9.ebuild,
-selinux-base-2.20120725-r10.ebuild, -selinux-base-2.20120725-r11.ebuild,
-selinux-base-2.20120725-r12.ebuild:
Removing older SELinux policies
*selinux-base-2.20140311-r1 (21 Mar 2014)
21 Mar 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20140311-r1.ebuild:
New upstream refpolicy release
12 Jan 2014; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20130424-r4.ebuild:
Stabilize 2.20130424-r4
*selinux-base-2.20130424-r4 (11 Dec 2013)
11 Dec 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20130424-r4.ebuild:
Release of 2.20130424-r4
*selinux-base-2.20130424-r3 (26 Sep 2013)
26 Sep 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20130424-r3.ebuild:
Release 2.20130424-r3, fixing bugs #480628, #482196, #475432, #485304, #480870
and #428322
15 Aug 2013; Sven Vermeulen <swift@gentoo.org> selinux-base-9999.ebuild:
Clean up generated cruft before building base policy - see bug 480628
15 Aug 2013; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20130424-r2.ebuild:
Stabilize r2 of policies
*selinux-base-2.20130424-r2 (20 Jul 2013)
20 Jul 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20130424-r2.ebuild:
Pushing out rev 2
16 Jun 2013; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20130424-r1.ebuild:
Stabilize 20130424 policies
07 May 2013; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20130424-r1.ebuild, selinux-base-9999.ebuild:
Add in support for epatch_user (to support interface patching)
*selinux-base-2.20130424-r1 (06 May 2013)
06 May 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20130424-r1.ebuild:
Adding 20130424 release
11 Apr 2013; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20120725-r12.ebuild, selinux-base-9999.ebuild:
Add in support for manual pages
29 Mar 2013; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20120725-r12.ebuild:
Stabilize r12, fixes 455080, 453724, 461880, 453722, 452166, 458876, 457618,
456910, 456194, 453990 and 460152
*selinux-base-2.20120725-r12 (09 Mar 2013)
09 Mar 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20120725-r12.ebuild, selinux-base-9999.ebuild:
Pushing out rev 12
23 Feb 2013; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20120725-r11.ebuild:
Stabilization
*selinux-base-2.20120725-r11 (26 Jan 2013)
26 Jan 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20120725-r11.ebuild:
Bumping selinux-base to revision 11
16 Jan 2013; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20120725-r10.ebuild:
Stabilizing
*selinux-base-2.20120725-r10 (16 Jan 2013)
16 Jan 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-base-2.20120725-r10.ebuild:
Bumping with fix for #451128
13 Jan 2013; Sven Vermeulen <swift@gentoo.org>
selinux-base-2.20120725-r9.ebuild:
Stabilizing r9
30 Dec 2012; Samuli Suominen <ssuominen@gentoo.org>
selinux-base-2.20120725-r9.ebuild:
Use virtual/udev instead of sys-fs/udev; regression introduced by swift@g.o
21 Dec 2012 by not using up-to-date ebuild from gentoo-x86 for revision
bumping.
*selinux-base-2.20120725-r9 (21 Dec 2012)
21 Dec 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120725-r9.ebuild:
Bumping to revision 9
17 Dec 2012; Sven Vermeulen <swift@gentoo.org> -selinux-base-2.20120215-r13.ebuild,
-selinux-base-2.20120215-r14.ebuild, -selinux-base-2.20120215-r15.ebuild,
-selinux-base-2.20120215-r6.ebuild, -selinux-base-2.20120215-r7.ebuild,
-selinux-base-2.20120215-r8.ebuild, -selinux-base-2.20120215-r9.ebuild:
Removing older ebuilds
13 Dec 2012; Sven Vermeulen <swift@gentoo.org> selinux-base-2.20120725-r8.ebuild:
Stabilization
11 Dec 2012; Samuli Suominen <ssuominen@gentoo.org>
selinux-base-2.20120215-r6.ebuild, selinux-base-2.20120215-r7.ebuild,
selinux-base-2.20120215-r8.ebuild, selinux-base-2.20120215-r9.ebuild,
selinux-base-2.20120215-r13.ebuild, selinux-base-2.20120215-r14.ebuild,
selinux-base-2.20120215-r15.ebuild, selinux-base-2.20120725-r5.ebuild,
selinux-base-2.20120725-r7.ebuild, selinux-base-2.20120725-r8.ebuild,
selinux-base-9999.ebuild:
Use virtual/udev instead of sys-fs/udev.
04 Dec 2012; Sven Vermeulen <swift@gentoo.org> selinux-base-9999.ebuild, metadata.xml:
Add in support for unconfined USE flag and fix #445978
*selinux-base-2.20120725-r8 (03 Dec 2012)
03 Dec 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120725-r8.ebuild:
Bumping to revision 8
*selinux-base-2.20120725-r7 (18 Nov 2012)
18 Nov 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120725-r7.ebuild:
Pushing out rev 7
*selinux-base-9999 (13 Oct 2012)
13 Oct 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-9999.ebuild:
Adding live ebuild
04 Oct 2012; Sven Vermeulen <swift@gentoo.org> selinux-base-2.20120725-r5.ebuild:
Stabilization
*selinux-base-2.20120725-r5 (21 Sep 2012)
21 Sep 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120725-r5.ebuild:
Introducing policy for 2.20120725, rev5
30 Jul 2012; Sven Vermeulen <swift@gentoo.org> selinux-base-2.20120215-r14.ebuild:
Stabilization of revision 14 of the SELinux policy modules
*selinux-base-2.20120215-r15 (26 Jul 2012)
26 Jul 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120215-r15.ebuild:
Bump to rev15
*selinux-base-2.20120215-r14 (16 Jul 2012)
16 Jul 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120215-r14.ebuild:
Bumping to rev14
*selinux-base-2.20120215-r13 (27 Jun 2012)
27 Jun 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120215-r13.ebuild:
Bump to revision 13
*selinux-base-2.20120215-r9 (20 May 2012)
20 May 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120215-r9.ebuild:
Bumping to rev 9
29 Apr 2012; Sven Vermeulen <swift@gentoo.org> selinux-base-2.20120215-r7.ebuild:
Stabilizing rev7
*selinux-base-2.20120215-r8 (26 Apr 2012)
26 Apr 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120215-r8.ebuild:
Bump to rev8, fix #411719, #411149 and #411943
*selinux-base-2.20120215-r7 (22 Apr 2012)
22 Apr 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120215-r7.ebuild:
Bumping to rev 7, fixing bugs #401595, #411193 and #403293
31 Mar 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120215-r6.ebuild,
+files/config, +metadata.xml:
Bumping to 2.20120215 policies
*selinux-base-2.20120215-r6 (31 Mar 2012)
31 Mar 2012; Sven Vermeulen <swift@gentoo.org> +selinux-base-2.20120215-r6.ebuild,
+files/config, +metadata.xml:
Initial base policy package (without additional modules)

46
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/Manifest vendored Normal file
View File

@ -0,0 +1,46 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
AUX config 631 SHA256 891ddc7cfd577a8591d65f6cb3398863ec338209b347ce9bfc125817b841860e SHA512 f3c4fece54e5786de94fc97c8e7678f9901c6963828d28b020c423458ac258480191f216522fed7658e7ad1c94fd25557efc524a4b75ec8837116c6a14c2328a WHIRLPOOL e9fe30b0e31dfc2f5f9059f843de3562ded62be8868770663cfb0e80494be17ca1536d522e82c10aec0b083e9bda9b5326f37c60b483681bf237517646e5c18a
DIST patchbundle-selinux-base-policy-2.20140311-r5.tar.bz2 274187 SHA256 5ce76d59d12a7dfc02352eb2a77971d76c5ff0fa3c66cced6318919571f04839 SHA512 7a9da3ab23ce6217739f4548cc5365f64def11fe19b6f3b2a304685bb54246d12856388043870e0f061f71fb2c8c45da72bf3db28ad6e70f397f5dfffe2206c6 WHIRLPOOL a4729aaeed88f7485fbf112de91161bf4e75fb996f5123133c22fcb008966acc7db98c7849dc4b076cb633d00c81deae85cf6b5f8c48f8c3c72c90bcaff26d71
DIST patchbundle-selinux-base-policy-2.20140311-r6.tar.bz2 281043 SHA256 7fbfb518731c6bce8a3937e7dbabeaf0d39059423f5930731034363862bf9a25 SHA512 6b8bfbb3ee9e9d229ac0fa7e80905300c24f4934fb2f150ba52f45e76a3f1e8b51c788136ea32a2b044a00c614a96538aad9d3ff7300735dae228861ab5aed6f WHIRLPOOL 9da1fb97b7a1c8f5990748695c1393d0d0c7c6bcd6acbb974653ee83df00d911b70b4f9544a9e4b3014b9f78f69745a17a5c7fa02859985b611ec4636b473981
DIST patchbundle-selinux-base-policy-2.20140311-r7.tar.bz2 285346 SHA256 8e216867cc5ec2c513ae81d04e637021b4eda9bbd0fafab0c7f61f087776c33c SHA512 01d30c38dba876136d61452a890adbbe0301fb990b65b0a15086f1c8f14df4f96faf57bee8fd1328147458e5a7e96f972792c26ef971924c0fc74cf644d4b644 WHIRLPOOL ec03df417b73d52a19809a2e7417b05b11880517e4bc5093725a8172177943f3fa526eb32222f41c3aed5ec5ba3d57fb5af2ed19a32af1c37529864d30afd68b
DIST patchbundle-selinux-base-policy-2.20141203-r1.tar.bz2 264038 SHA256 0fb0ff62bf3abc2294db83d35d22220c5d86384e38332e4458fb38f88ce1538c SHA512 a9ac284c999b15f9f825761a5d59968337cac5990250d9ce46fc79a870ed14534f61b0d454866ea9296d134adb3e38634b02c0e9d70f69a657da4c11b6aeee38 WHIRLPOOL 389d5fd4feecc74c9a231c98a9bf497491e3e5c19a54f5b8ef68d050d95aeca7e6dd0853655212989b7239271be51cf2c4c3e19ac3db54cec229d802df95cbb5
DIST patchbundle-selinux-base-policy-2.20141203-r2.tar.bz2 268395 SHA256 60f5fbb2402f12b4c4aca89b134ee0dd4c88a1812208d765b601b23e025f7cfe SHA512 0a6d7a61ae259f6b4b9210c0b509a2b25581674b0d07e0fa8f2eff151f1e8bf084cae7a8928ede6e4358da661290940b8390a2cb6f5c6ababc021de4f6b445b9 WHIRLPOOL 6341b3c04aa547256f3128826fffe777c4ac2d7f6f916d6e7a7f2e976b18a903786116743a26f43602c707310662c445564ffdaa173b2c2cd9e48f4173c367a1
DIST patchbundle-selinux-base-policy-2.20141203-r3.tar.bz2 269940 SHA256 c1d507c21b02ab510e8fbe1eeb799ad1e9604ad611759c13df6c15ddc9480ed8 SHA512 694a1cf95d4fe5c686e6e8ddae56f591d85fd334f896352b11b2bf24b2e95be8eaf32d6aee9a3410c25e613efa6fe18e485cfe836a2a6dadb5f01c8118b42a45 WHIRLPOOL 8061b6e5dd5f1d0602b66fdf31f2c3c02de02bad73f213ad24d0be8d62a7dc4b8d35cb0780b4a1ee76ecded737d9eed3e41f6d51c24d885d3cac63591930ce96
DIST patchbundle-selinux-base-policy-2.20141203-r4.tar.bz2 271374 SHA256 7229f0f5a299fc31b693f603cb265697ecf02afb843aba74f96d8afb208dd9c9 SHA512 41379568855b820a72a1d8e7fb8114464573974d98b98ae9107649ed625d6fc8c045dc6714ee51d6db72473a76c99511ee23e6d0a9bd56a19ebbaa1fa13e55a8 WHIRLPOOL 563020e4d38817d875d7a8b98f670cff68d86fdfe89945b87943c8b48d106a58d269822a60640fcc76f51bad207b8b61839b2cdbb1405ab5f49332516c9faa1d
DIST patchbundle-selinux-base-policy-2.20141203-r5.tar.bz2 274136 SHA256 c23d17c47ce75620ffa9f3ef66393ae56693d7e431f9c7f0a4468a9646767a5f SHA512 e50d128ff9e6554f7d49bc1e43b40c8b062b8f7bb727acda9772b45381c61bc6c968265245e39f8ca044c2b0f4dadf3cdacfb38cd32306fa27f1acfb49921e06 WHIRLPOOL a0591298d54a4ba080112716fc35509e6c82281d362a11b208caa2a96ddc20c4cc8f942206db49d86b831c6ed13a239b7db9009f17ede77fce7f0c01cd6b20cc
DIST patchbundle-selinux-base-policy-2.20141203-r6.tar.bz2 293231 SHA256 b686dcc517b97834f66d967afdcc724cb43b5c6dbf9f34043a91cdeda2625cc7 SHA512 a2c486cbe4a1d21ff3fd01bef25ecf5a633a4072646c67cfccf3f7187d95f3d9e3b482a46ba17c55c40a8e7c0dee56e9cf9ddc9f414d3e4511443b62f60d03e9 WHIRLPOOL 3d708e287e3f9b873be647b0327eab6675a8702ee1cffb56e36934cada306e5ccc64397a083dad9e59de37a067e628cacbf896ae99012d5a209e42fd7cd8a4c6
DIST refpolicy-2.20140311.tar.bz2 664416 SHA256 f69437db95548c78a5dec44c236397146b144153149009ea554d2e536e5436f7 SHA512 50bacee82ed41ac8b8007ecc33bf51d22303cc2ddd27cfb72cb5520dab5f8e255186e34b89cec492c7a2d4220b200814bdede9b46c19f987a3d3d65a1c9b749a WHIRLPOOL e07480beba6ab1f02ad36b7d0c50c4a71cb39a8ec78bf8d1dc3c82bb9dd1d69d9169d7c937165ea15f60ce1147f256d46644f944107a3a8a800d5bad70d4c255
DIST refpolicy-2.20141203.tar.bz2 680243 SHA256 f438209c430d8a2d4ddcbe4bdd3edb46f6af7dc4913637af0b73c635e40c1522 SHA512 682e4280c5799e4c12ec7594afc1389f67be35055748d2e0dbdc3419159a16c96d4946ca6178daee8370515951f8653b2e452efe8c962b8d7f9bc192f0b15a0c WHIRLPOOL 74bca232534e7af9051bb1ab9f77c1ff6c425781cf4561f781d6e9a40cc5ca0d9add540249ea5493e8782a9372aea296ead6c165c6c440ae1509eb319d151ee5
EBUILD selinux-base-2.20140311-r5.ebuild 4885 SHA256 652cedf320a59ed6ef2956f70482c1b75892fa6e16c48de21acd983f82ba3a81 SHA512 d15bbce436b5eb4c521d530e17c1db7f10d2e39582835d6d35630d93a1ca810b83207eeb78a6ba670f73dcac3a01f86c88cd73d39c54c87549e4bd055282e7c8 WHIRLPOOL 950b43e3dfb86c48e29dd93ae72cf80169db935fd63afcf66aff3f71de446ba44ea4030f236035aff4cb6bf6281d020120cfaaa18bf7f0a03edb64d5355841ee
EBUILD selinux-base-2.20140311-r6.ebuild 4885 SHA256 284d7ed3062341523d90b8688326106ced10bfd833845fdab09cc3ace208a085 SHA512 53a309d74c60e310e57a23e83882fa8cb31ddecc29472039eec648e2ca0dcd5c53a110e957c0b25beb1c50c24bc37f346d38e535330d803b53253fe4f5efbb87 WHIRLPOOL b5478bc7cdd45d7be8be6f934d6cfe3e96fdd5e1f5d090f5c8f73f1312f6542ab6c2b7cda164a872eecf2248af60eb88485b2fcc57575ac7b61275986c747a8f
EBUILD selinux-base-2.20140311-r7.ebuild 4884 SHA256 aa6f7f63b77994efbc16af3ec3a043612fedd58cccb2ddb6afae5a6dfb26fc32 SHA512 ab674ea0e1a4552988ed7bf09f9a27e1ab9a6367be5738481b131701f576a81990b95a5a2dd12bd8a4857e81d695c6d13ebbd6258fa034d77976e161ccae17f1 WHIRLPOOL ab3175409fa32b8da8aec2d24a54601c0cef1c30d23074cf118f1a94c494b6dc4fd9af4ebb193240af0b029530075c010bfb84fc0660cfbc9eb96fcbe3c94647
EBUILD selinux-base-2.20141203-r1.ebuild 4535 SHA256 b8b21f53d54636e703134af06a7cf44bb3828d1e5e3ed2cecaf2a1dc6410319d SHA512 4f8ad1a0ed4745d08e4c1e94c2415b099f54772aa10f943eb70059860e09da4fb264871e22106836c0a899a5cc89c3bf21095f9485debc155c0312f8c97d8ec3 WHIRLPOOL 12ba22273ce33e8ace6f8729a90f3a5fb4498c34c9be0af68484bfe997b618e78ae160f58d2034619aefd181551afa4cf21288b1f4ee4ce0b0342b6e713fb136
EBUILD selinux-base-2.20141203-r2.ebuild 4475 SHA256 5017cdc7c696ec852fe87d6b8d754c343db3c644ae3d8a362974f7bac07afc8a SHA512 cd1d3126c8d3cade7193deb4b6b287c5d2c4604c6bf87938d61c6b47d7d1499f24243d57fe0f5bd46694282f44b10749563d722f9079367d562a73838029b957 WHIRLPOOL 1a33e72748284c2903d3274298560f7f8352d1ccfe372ff26046ab88363c43156967bf17375eab3ed4e38d5b627b764295ae848c2ec673baefd1b6486dd143b5
EBUILD selinux-base-2.20141203-r3.ebuild 4475 SHA256 4fb0a3f7795d94d2000c2f9da0576534006f57ccc4699b34910a7630b5df1799 SHA512 240565a5afeb22b3eba07daf90bd30b4d31a37347bc3c542f68bf610e2e0429ab8e8f2c25ca66641345e313cfcd27b0ef50efe86fd53955cc05da0cff44a72a0 WHIRLPOOL f99bffcbd93933bafdedb020b7ee5281d88166203074ab9264e2b5b6320ec7ba46625d7e98dc5e6601652addb090416253e5390319020a15b473932acecb019c
EBUILD selinux-base-2.20141203-r4.ebuild 4475 SHA256 1dea83fbf87be6180b472db82bbe340a882a10e3da820fbc2b6deea48afcf40f SHA512 f25d57ff19a45b7d3f1d88fbb74731fd60c433a4be15bb4eee1d5088a64b303d5830dd32552535fd72ec1b1f6ca197714214ba294bd4c89793139ade17e29538 WHIRLPOOL 8890203c5423c0656a3474fe793857ef1828422261abe2881fbb8b7b75e463733177fbb4643b3bc4820e8d39ff82f115bae7991f73845a5f35f34579f14eb11b
EBUILD selinux-base-2.20141203-r5.ebuild 4477 SHA256 c0cd8379fd12ebf84a2bbf4e08c2b1f83bf72c552bdbf4408f03851a36f1fa69 SHA512 4a11925663967b2c44221d10ca243d3426e011b1d1108e6662eb76beac3a9e8ad83bfcd476f24ec719e0bad5b462f9dfed81aaa91c86eca270a3dd15ba2a0246 WHIRLPOOL 83d8e674946099f9e09f8b2ca8f1165fd38924cdad147ec2e6902bbfb4a7e4c6c144b74d0dd9063b35b10f0ddb26f53e9c28fd780abe544142346a91d6772834
EBUILD selinux-base-2.20141203-r6.ebuild 4483 SHA256 55aa34d8613ef3feb0ac61fd09b58e842556900c6cf2407836c5249d098e010e SHA512 acc6c7c8ad4c805f6ddcfa7d5337c63caf0619027d71203c7d459258a9a75df7b405c93cab626dd44680c19ed155d38d96de9fb230a1464f6ec3a990ce0e7a39 WHIRLPOOL 9715ee27a8d2496f5a9c92e268706f4189366f1a85f92a33c75fb73c50f6b223ed2517ae3d4c753236e312a601fa7c1e4c37809b243e33c304d6b467e1228e7f
EBUILD selinux-base-9999.ebuild 4475 SHA256 adcf64231f60120651679e66e53e2535ac4e05b8ce2984b7da7c158bfa88b515 SHA512 f5e39ea1ccf6381312849004b3760ac354b1a37445fe3af83ccf1949ba22603065a3c18ccc6a2040ae8f3afe6965cfc1e9f16f90e61b3735338a8fc10fd1aabb WHIRLPOOL 9f97500b425fa0c16f8bd546ef78d3e6ba738779903a1d6ba1c6a94404462e17be307f0e67c842c38031d119e062943b22bf32ea868d8c6b4c0a32a8a03de3b5
MISC ChangeLog 12147 SHA256 80e83030d458e9d9709827e17af7c3421ba8dc66acc5360a1336d36877ee5b80 SHA512 7955d4dedb161600b69f7eb03593af640b1c5ba060d5a5843c35f3c144f7f6bcd405d54c848ee6a603dc9d465970f43077a95b5b719cd768923c59981df9e2aa WHIRLPOOL 2205312384b51807cc63524bd0401188475f212da1fd02d1f124dcb412b93a86d211cddcb7ac4c8f1712392138f4c10d2b8142d25f88a4f24d7d8c4aa29e269a
MISC metadata.xml 753 SHA256 2542c8e9c994b3b2699d601ba980a8daef2288b5ad199867764f607978ddee67 SHA512 d5e803494fe0831fdddada0f1f464c941d93896afa19d9d1005daa8a4ebea7b20f905e6d0d89dd10ff1aceaee0c7c41c190f16b68bf4466c0f75d3a6110b8df0 WHIRLPOOL cd2535802ffacbdae1ff1787aa203311330202cb08df488dae59b178b102b818766d2320fe62de3cf7710047e8cafa6a41963381655d9fd5fb4c75a232decd52
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0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=4gd3
-----END PGP SIGNATURE-----

15
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/files/config vendored Normal file
View File

@ -0,0 +1,15 @@
# This file controls the state of SELinux on the system on boot.
# SELINUX can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=permissive
# SELINUXTYPE can take one of these four values:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
# mls - Full SELinux protection with Multi-Level Security
# mcs - Full SELinux protection with Multi-Category Security
# (mls, but only one sensitivity level)
SELINUXTYPE=strict

15
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/metadata.xml vendored Normal file
View File

@ -0,0 +1,15 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<herd>selinux</herd>
<longdescription>
Gentoo SELinux base policy. This contains policy for a system at the end of system installation.
There is no extra policy in this package.
</longdescription>
<use>
<flag name='peer_perms'>Enable the labeled networking peer permissions (SELinux policy capability).</flag>
<flag name='open_perms'>Enable the open permissions for file object classes (SELinux policy capability).</flag>
<flag name='ubac'>Enable User Based Access Control (UBAC) in the SELinux policy</flag>
<flag name='unconfined'>Enable support for the unconfined SELinux module</flag>
</use>
</pkgmetadata>

170
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-2.20141203-r5.ebuild vendored Normal file
View File

@ -0,0 +1,170 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base/selinux-base-2.20141203-r5.ebuild,v 1.3 2015/06/05 16:10:26 perfinion Exp $
EAPI="5"
inherit eutils
if [[ ${PV} == 9999* ]]; then
EGIT_REPO_URI="${SELINUX_GIT_REPO:-git://anongit.gentoo.org/proj/hardened-refpolicy.git https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}"
EGIT_SOURCEDIR="${WORKDIR}/refpolicy"
inherit git-2
KEYWORDS=""
else
SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
KEYWORDS="amd64 x86"
fi
IUSE="+peer_perms +open_perms +ubac +unconfined doc"
DESCRIPTION="Gentoo base policy for SELinux"
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
LICENSE="GPL-2"
SLOT="0"
RDEPEND=">=sys-apps/policycoreutils-2.3
virtual/udev
!<=sec-policy/selinux-base-policy-2.20120725"
DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-2.3"
S=${WORKDIR}/
#src_unpack() {
# git-2_src_unpack
#}
src_prepare() {
if [[ ${PV} != 9999* ]]; then
# Apply the gentoo patches to the policy. These patches are only necessary
# for base policies, or for interface changes on modules.
EPATCH_MULTI_MSG="Applying SELinux policy updates ... " \
EPATCH_SUFFIX="patch" \
EPATCH_SOURCE="${WORKDIR}" \
EPATCH_FORCE="yes" \
epatch
fi
cd "${S}/refpolicy"
make bare
epatch_user
}
src_configure() {
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
# Update the SELinux refpolicy capabilities based on the users' USE flags.
if ! use peer_perms; then
sed -i -e '/network_peer_controls/d' \
"${S}/refpolicy/policy/policy_capabilities"
fi
if ! use open_perms; then
sed -i -e '/open_perms/d' \
"${S}/refpolicy/policy/policy_capabilities"
fi
if ! use ubac; then
sed -i -e '/^UBAC/s/y/n/' "${S}/refpolicy/build.conf" \
|| die "Failed to disable User Based Access Control"
fi
echo "DISTRO = gentoo" >> "${S}/refpolicy/build.conf"
# Prepare initial configuration
cd "${S}/refpolicy";
make conf || die "Make conf failed"
# Setup the policies based on the types delivered by the end user.
# These types can be "targeted", "strict", "mcs" and "mls".
for i in ${POLICY_TYPES}; do
cp -a "${S}/refpolicy" "${S}/${i}"
cd "${S}/${i}";
#cp "${FILESDIR}/modules-2.20120215.conf" "${S}/${i}/policy/modules.conf"
sed -i -e "/= module/d" "${S}/${i}/policy/modules.conf"
sed -i -e '/^QUIET/s/n/y/' -e "/^NAME/s/refpolicy/$i/" \
"${S}/${i}/build.conf" || die "build.conf setup failed."
if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]];
then
# MCS/MLS require additional settings
sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \
|| die "failed to set type to mls"
fi
if [ "${i}" == "targeted" ]; then
sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
"${S}/${i}/config/appconfig-standard/seusers" \
|| die "targeted seusers setup failed."
fi
if [ "${i}" != "targeted" ] && [ "${i}" != "strict" ] && use unconfined; then
sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
"${S}/${i}/config/appconfig-${i}/seusers" \
|| die "policy seusers setup failed."
fi
done
}
src_compile() {
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
for i in ${POLICY_TYPES}; do
cd "${S}/${i}"
emake base || die "${i} compile failed"
if use doc; then
make html || die
fi
done
}
src_install() {
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
for i in ${POLICY_TYPES}; do
cd "${S}/${i}"
make DESTDIR="${D}" install \
|| die "${i} install failed."
make DESTDIR="${D}" install-headers \
|| die "${i} headers install failed."
echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
# libsemanage won't make this on its own
keepdir "/etc/selinux/${i}/policy"
if use doc; then
dohtml doc/html/*;
fi
insinto /usr/share/selinux/devel;
doins doc/policy.xml;
done
dodoc doc/Makefile.example doc/example.{te,fc,if}
doman man/man8/*.8;
insinto /etc/selinux
doins "${FILESDIR}/config"
}
pkg_preinst() {
has_version "<${CATEGORY}/${PN}-2.20101213-r13"
previous_less_than_r13=$?
}

170
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-base/selinux-base-9999.ebuild vendored Normal file
View File

@ -0,0 +1,170 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base/selinux-base-9999.ebuild,v 1.18 2015/04/21 10:34:30 perfinion Exp $
EAPI="5"
inherit eutils
if [[ ${PV} == 9999* ]]; then
EGIT_REPO_URI="${SELINUX_GIT_REPO:-git://anongit.gentoo.org/proj/hardened-refpolicy.git https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}"
EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy"
inherit git-r3
KEYWORDS=""
else
SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
http://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
KEYWORDS="~amd64 ~x86"
fi
IUSE="+peer_perms +open_perms +ubac +unconfined doc"
DESCRIPTION="Gentoo base policy for SELinux"
HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
LICENSE="GPL-2"
SLOT="0"
RDEPEND=">=sys-apps/policycoreutils-2.3
virtual/udev
!<=sec-policy/selinux-base-policy-2.20120725"
DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-2.3"
S=${WORKDIR}/
#src_unpack() {
# git-2_src_unpack
#}
src_prepare() {
if [[ ${PV} != 9999* ]]; then
# Apply the gentoo patches to the policy. These patches are only necessary
# for base policies, or for interface changes on modules.
EPATCH_MULTI_MSG="Applying SELinux policy updates ... " \
EPATCH_SUFFIX="patch" \
EPATCH_SOURCE="${WORKDIR}" \
EPATCH_FORCE="yes" \
epatch
fi
cd "${S}/refpolicy"
make bare
epatch_user
}
src_configure() {
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
# Update the SELinux refpolicy capabilities based on the users' USE flags.
if ! use peer_perms; then
sed -i -e '/network_peer_controls/d' \
"${S}/refpolicy/policy/policy_capabilities"
fi
if ! use open_perms; then
sed -i -e '/open_perms/d' \
"${S}/refpolicy/policy/policy_capabilities"
fi
if ! use ubac; then
sed -i -e '/^UBAC/s/y/n/' "${S}/refpolicy/build.conf" \
|| die "Failed to disable User Based Access Control"
fi
echo "DISTRO = gentoo" >> "${S}/refpolicy/build.conf"
# Prepare initial configuration
cd "${S}/refpolicy";
make conf || die "Make conf failed"
# Setup the policies based on the types delivered by the end user.
# These types can be "targeted", "strict", "mcs" and "mls".
for i in ${POLICY_TYPES}; do
cp -a "${S}/refpolicy" "${S}/${i}"
cd "${S}/${i}";
#cp "${FILESDIR}/modules-2.20120215.conf" "${S}/${i}/policy/modules.conf"
sed -i -e "/= module/d" "${S}/${i}/policy/modules.conf"
sed -i -e '/^QUIET/s/n/y/' -e "/^NAME/s/refpolicy/$i/" \
"${S}/${i}/build.conf" || die "build.conf setup failed."
if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]];
then
# MCS/MLS require additional settings
sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \
|| die "failed to set type to mls"
fi
if [ "${i}" == "targeted" ]; then
sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
"${S}/${i}/config/appconfig-standard/seusers" \
|| die "targeted seusers setup failed."
fi
if [ "${i}" != "targeted" ] && [ "${i}" != "strict" ] && use unconfined; then
sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
"${S}/${i}/config/appconfig-${i}/seusers" \
|| die "policy seusers setup failed."
fi
done
}
src_compile() {
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
for i in ${POLICY_TYPES}; do
cd "${S}/${i}"
emake base || die "${i} compile failed"
if use doc; then
make html || die
fi
done
}
src_install() {
[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
for i in ${POLICY_TYPES}; do
cd "${S}/${i}"
make DESTDIR="${D}" install \
|| die "${i} install failed."
make DESTDIR="${D}" install-headers \
|| die "${i} headers install failed."
echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
# libsemanage won't make this on its own
keepdir "/etc/selinux/${i}/policy"
if use doc; then
dohtml doc/html/*;
fi
insinto /usr/share/selinux/devel;
doins doc/policy.xml;
done
dodoc doc/Makefile.example doc/example.{te,fc,if}
doman man/man8/*.8;
insinto /etc/selinux
doins "${FILESDIR}/config"
}
pkg_preinst() {
has_version "<${CATEGORY}/${PN}-2.20101213-r13"
previous_less_than_r13=$?
}

284
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-unconfined/ChangeLog vendored Normal file
View File

@ -0,0 +1,284 @@
# ChangeLog for sec-policy/selinux-unconfined
# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-unconfined/ChangeLog,v 1.55 2015/06/05 16:10:22 perfinion Exp $
05 Jun 2015; Jason Zaman <perfinion@gentoo.org>
selinux-unconfined-2.20141203-r5.ebuild:
Stabilize policy 2.20141203-r5
*selinux-unconfined-2.20141203-r6 (05 Jun 2015)
05 Jun 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-unconfined-2.20141203-r6.ebuild:
Release of 2.20141203-r6
15 Apr 2015; Jason Zaman <perfinion@gentoo.org>
selinux-unconfined-2.20141203-r4.ebuild:
Stabilize policy 2.20141203-r4
*selinux-unconfined-2.20141203-r5 (15 Apr 2015)
15 Apr 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-unconfined-2.20141203-r5.ebuild:
Release of 2.20141203-r5
22 Mar 2015; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20141203-r3.ebuild:
Stabilize 2.20141203-r3 policies
*selinux-unconfined-2.20141203-r4 (22 Mar 2015)
22 Mar 2015; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20141203-r4.ebuild, selinux-unconfined-9999.ebuild:
Release of 2.20141203-r4
*selinux-unconfined-2.20141203-r3 (29 Jan 2015)
29 Jan 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-unconfined-2.20141203-r3.ebuild,
selinux-unconfined-2.20141203-r2.ebuild:
Release of 2.20141203-r3, stable 2.20141203-r2
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-unconfined-2.20140311-r1.ebuild,
-selinux-unconfined-2.20140311-r2.ebuild,
-selinux-unconfined-2.20140311-r3.ebuild,
-selinux-unconfined-2.20140311-r4.ebuild:
Remove old ebuilds
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20141203-r1.ebuild:
Stabilize 2.20141203-r1
*selinux-unconfined-2.20141203-r2 (21 Dec 2014)
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20141203-r2.ebuild:
Release of 2.20141203-r2
07 Dec 2014; Jason Zaman <perfinion@gentoo.org>
selinux-unconfined-2.20140311-r7.ebuild:
Stabilize 2.20140311-r7
*selinux-unconfined-2.20141203-r1 (07 Dec 2014)
07 Dec 2014; Jason Zaman <perfinion@gentoo.org>
+selinux-unconfined-2.20141203-r1.ebuild:
Release of 2.20141203-r1
01 Nov 2014; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20140311-r6.ebuild:
Stabilize rev 6
*selinux-unconfined-2.20140311-r7 (01 Nov 2014)
01 Nov 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20140311-r7.ebuild:
Bump revision r7 of SELinux policies
01 Nov 2014; Sven Vermeulen <swift@gentoo.org> selinux-unconfined-9999.ebuild:
Add KEYWORDS logic in -9999 ebuilds for ease of copying
22 Aug 2014; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20140311-r5.ebuild:
Stabilize r5 policies
*selinux-unconfined-2.20140311-r6 (21 Aug 2014)
21 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20140311-r6.ebuild:
Release of 2.20140311-r6
*selinux-unconfined-2.20140311-r5 (09 Aug 2014)
09 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20140311-r5.ebuild:
Bump towards r5 (fixes duplicate context for hiawatha)
08 Aug 2014; Sven Vermeulen <swift@gentoo.org> selinux-unconfined-9999.ebuild:
Make 9999 ebuilds EAPI=5 and transform to make master for version bumps
05 Aug 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-unconfined-2.20130424-r1.ebuild,
-selinux-unconfined-2.20130424-r2.ebuild,
-selinux-unconfined-2.20130424-r3.ebuild,
-selinux-unconfined-2.20130424-r4.ebuild:
Remove obsolete ebuilds
*selinux-unconfined-2.20140311-r4 (01 Aug 2014)
01 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20140311-r4.ebuild,
selinux-unconfined-2.20140311-r3.ebuild:
Stabilization of r3, and make r4 available for testing
29 May 2014; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20140311-r2.ebuild:
Stabilize 2.20140311-r2
*selinux-unconfined-2.20140311-r3 (29 May 2014)
29 May 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20140311-r3.ebuild:
Bump to 2.20140311-r3
19 Apr 2014; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20140311-r1.ebuild:
Stabilize r1 policies
*selinux-unconfined-2.20140311-r2 (19 Apr 2014)
19 Apr 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20140311-r2.ebuild:
Release of 2.20140311-r2
24 Mar 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-unconfined-2.20120725-r11.ebuild,
-selinux-unconfined-2.20120725-r12.ebuild,
-selinux-unconfined-2.20120725-r5.ebuild,
-selinux-unconfined-2.20120725-r7.ebuild,
-selinux-unconfined-2.20120725-r8.ebuild,
-selinux-unconfined-2.20120725-r9.ebuild:
Remove older SELinux policy ebuilds
*selinux-unconfined-2.20140311-r1 (21 Mar 2014)
21 Mar 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20140311-r1.ebuild:
New upstream refpolicy release
12 Jan 2014; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20130424-r4.ebuild:
Stabilize 2.20130424-r4
*selinux-unconfined-2.20130424-r4 (11 Dec 2013)
11 Dec 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20130424-r4.ebuild:
Release of 2.20130424-r4
*selinux-unconfined-2.20130424-r3 (26 Sep 2013)
26 Sep 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20130424-r3.ebuild:
Release 2.20130424-r3, fixing bugs #480628, #482196, #475432, #485304, #480870
and #428322
15 Aug 2013; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20130424-r2.ebuild:
Stabilize r2 of policies
*selinux-unconfined-2.20130424-r2 (20 Jul 2013)
20 Jul 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20130424-r2.ebuild:
Pushing out rev 2
16 Jun 2013; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20130424-r1.ebuild:
Stabilize 20130424 policies
*selinux-unconfined-2.20130424-r1 (06 May 2013)
06 May 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20130424-r1.ebuild:
Adding 20130424 release
29 Mar 2013; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20120725-r12.ebuild:
Stabilize r12, fixes 455080, 453724, 461880, 453722, 452166, 458876, 457618,
456910, 456194, 453990 and 460152
*selinux-unconfined-2.20120725-r12 (09 Mar 2013)
09 Mar 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20120725-r12.ebuild:
Pushing out rev 12
23 Feb 2013; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20120725-r11.ebuild:
Stabilization
*selinux-unconfined-2.20120725-r11 (26 Jan 2013)
26 Jan 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-unconfined-2.20120725-r11.ebuild:
Bumping selinux-unconfined to revision 11
13 Jan 2013; Sven Vermeulen <swift@gentoo.org>
selinux-unconfined-2.20120725-r9.ebuild:
Stabilizing r9
*selinux-unconfined-2.20120725-r9 (21 Dec 2012)
21 Dec 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120725-r9.ebuild:
Bumping to revision 9
17 Dec 2012; Sven Vermeulen <swift@gentoo.org> -selinux-unconfined-2.20120215-r1.ebuild,
-selinux-unconfined-2.20120215-r14.ebuild,
-selinux-unconfined-2.20120215-r15.ebuild,
-selinux-unconfined-2.20120215-r2.ebuild,
-selinux-unconfined-2.20120215.ebuild:
Removing older ebuilds
13 Dec 2012; Sven Vermeulen <swift@gentoo.org> selinux-unconfined-2.20120725-r8.ebuild:
Stabilization
*selinux-unconfined-2.20120725-r8 (03 Dec 2012)
03 Dec 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120725-r8.ebuild:
Bumping to revision 8
*selinux-unconfined-2.20120725-r7 (18 Nov 2012)
18 Nov 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120725-r7.ebuild:
Pushing out rev 7
*selinux-unconfined-9999 (13 Oct 2012)
13 Oct 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-9999.ebuild:
Adding live ebuild
04 Oct 2012; Sven Vermeulen <swift@gentoo.org> selinux-unconfined-2.20120725-r5.ebuild:
Stabilization
*selinux-unconfined-2.20120725-r5 (21 Sep 2012)
21 Sep 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120725-r5.ebuild:
Introducing policy for 2.20120725, rev5
30 Jul 2012; Sven Vermeulen <swift@gentoo.org> selinux-unconfined-2.20120215-r14.ebuild:
Stabilization of revision 14 of the SELinux policy modules
*selinux-unconfined-2.20120215-r15 (26 Jul 2012)
26 Jul 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120215-r15.ebuild:
Bump to rev15
*selinux-unconfined-2.20120215-r14 (16 Jul 2012)
16 Jul 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120215-r14.ebuild:
Bumping to rev14
*selinux-unconfined-2.20120215-r2 (27 Jun 2012)
27 Jun 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120215-r2.ebuild:
Bump to revision 13
*selinux-unconfined-2.20120215-r1 (20 May 2012)
20 May 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120215-r1.ebuild:
Bumping to rev 9
29 Apr 2012; Sven Vermeulen <swift@gentoo.org> selinux-unconfined-2.20120215.ebuild:
Stabilizing revision 7
31 Mar 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120215.ebuild,
+metadata.xml:
Bumping to 2.20120215 policies
*selinux-unconfined-2.20120215 (31 Mar 2012)
31 Mar 2012; Sven Vermeulen <swift@gentoo.org> +selinux-unconfined-2.20120215.ebuild,
+metadata.xml:
Initial SELinux policy for unconfined domain

45
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-unconfined/Manifest vendored Normal file
View File

@ -0,0 +1,45 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
DIST patchbundle-selinux-base-policy-2.20140311-r5.tar.bz2 274187 SHA256 5ce76d59d12a7dfc02352eb2a77971d76c5ff0fa3c66cced6318919571f04839 SHA512 7a9da3ab23ce6217739f4548cc5365f64def11fe19b6f3b2a304685bb54246d12856388043870e0f061f71fb2c8c45da72bf3db28ad6e70f397f5dfffe2206c6 WHIRLPOOL a4729aaeed88f7485fbf112de91161bf4e75fb996f5123133c22fcb008966acc7db98c7849dc4b076cb633d00c81deae85cf6b5f8c48f8c3c72c90bcaff26d71
DIST patchbundle-selinux-base-policy-2.20140311-r6.tar.bz2 281043 SHA256 7fbfb518731c6bce8a3937e7dbabeaf0d39059423f5930731034363862bf9a25 SHA512 6b8bfbb3ee9e9d229ac0fa7e80905300c24f4934fb2f150ba52f45e76a3f1e8b51c788136ea32a2b044a00c614a96538aad9d3ff7300735dae228861ab5aed6f WHIRLPOOL 9da1fb97b7a1c8f5990748695c1393d0d0c7c6bcd6acbb974653ee83df00d911b70b4f9544a9e4b3014b9f78f69745a17a5c7fa02859985b611ec4636b473981
DIST patchbundle-selinux-base-policy-2.20140311-r7.tar.bz2 285346 SHA256 8e216867cc5ec2c513ae81d04e637021b4eda9bbd0fafab0c7f61f087776c33c SHA512 01d30c38dba876136d61452a890adbbe0301fb990b65b0a15086f1c8f14df4f96faf57bee8fd1328147458e5a7e96f972792c26ef971924c0fc74cf644d4b644 WHIRLPOOL ec03df417b73d52a19809a2e7417b05b11880517e4bc5093725a8172177943f3fa526eb32222f41c3aed5ec5ba3d57fb5af2ed19a32af1c37529864d30afd68b
DIST patchbundle-selinux-base-policy-2.20141203-r1.tar.bz2 264038 SHA256 0fb0ff62bf3abc2294db83d35d22220c5d86384e38332e4458fb38f88ce1538c SHA512 a9ac284c999b15f9f825761a5d59968337cac5990250d9ce46fc79a870ed14534f61b0d454866ea9296d134adb3e38634b02c0e9d70f69a657da4c11b6aeee38 WHIRLPOOL 389d5fd4feecc74c9a231c98a9bf497491e3e5c19a54f5b8ef68d050d95aeca7e6dd0853655212989b7239271be51cf2c4c3e19ac3db54cec229d802df95cbb5
DIST patchbundle-selinux-base-policy-2.20141203-r2.tar.bz2 268395 SHA256 60f5fbb2402f12b4c4aca89b134ee0dd4c88a1812208d765b601b23e025f7cfe SHA512 0a6d7a61ae259f6b4b9210c0b509a2b25581674b0d07e0fa8f2eff151f1e8bf084cae7a8928ede6e4358da661290940b8390a2cb6f5c6ababc021de4f6b445b9 WHIRLPOOL 6341b3c04aa547256f3128826fffe777c4ac2d7f6f916d6e7a7f2e976b18a903786116743a26f43602c707310662c445564ffdaa173b2c2cd9e48f4173c367a1
DIST patchbundle-selinux-base-policy-2.20141203-r3.tar.bz2 269940 SHA256 c1d507c21b02ab510e8fbe1eeb799ad1e9604ad611759c13df6c15ddc9480ed8 SHA512 694a1cf95d4fe5c686e6e8ddae56f591d85fd334f896352b11b2bf24b2e95be8eaf32d6aee9a3410c25e613efa6fe18e485cfe836a2a6dadb5f01c8118b42a45 WHIRLPOOL 8061b6e5dd5f1d0602b66fdf31f2c3c02de02bad73f213ad24d0be8d62a7dc4b8d35cb0780b4a1ee76ecded737d9eed3e41f6d51c24d885d3cac63591930ce96
DIST patchbundle-selinux-base-policy-2.20141203-r4.tar.bz2 271374 SHA256 7229f0f5a299fc31b693f603cb265697ecf02afb843aba74f96d8afb208dd9c9 SHA512 41379568855b820a72a1d8e7fb8114464573974d98b98ae9107649ed625d6fc8c045dc6714ee51d6db72473a76c99511ee23e6d0a9bd56a19ebbaa1fa13e55a8 WHIRLPOOL 563020e4d38817d875d7a8b98f670cff68d86fdfe89945b87943c8b48d106a58d269822a60640fcc76f51bad207b8b61839b2cdbb1405ab5f49332516c9faa1d
DIST patchbundle-selinux-base-policy-2.20141203-r5.tar.bz2 274136 SHA256 c23d17c47ce75620ffa9f3ef66393ae56693d7e431f9c7f0a4468a9646767a5f SHA512 e50d128ff9e6554f7d49bc1e43b40c8b062b8f7bb727acda9772b45381c61bc6c968265245e39f8ca044c2b0f4dadf3cdacfb38cd32306fa27f1acfb49921e06 WHIRLPOOL a0591298d54a4ba080112716fc35509e6c82281d362a11b208caa2a96ddc20c4cc8f942206db49d86b831c6ed13a239b7db9009f17ede77fce7f0c01cd6b20cc
DIST patchbundle-selinux-base-policy-2.20141203-r6.tar.bz2 293231 SHA256 b686dcc517b97834f66d967afdcc724cb43b5c6dbf9f34043a91cdeda2625cc7 SHA512 a2c486cbe4a1d21ff3fd01bef25ecf5a633a4072646c67cfccf3f7187d95f3d9e3b482a46ba17c55c40a8e7c0dee56e9cf9ddc9f414d3e4511443b62f60d03e9 WHIRLPOOL 3d708e287e3f9b873be647b0327eab6675a8702ee1cffb56e36934cada306e5ccc64397a083dad9e59de37a067e628cacbf896ae99012d5a209e42fd7cd8a4c6
DIST refpolicy-2.20140311.tar.bz2 664416 SHA256 f69437db95548c78a5dec44c236397146b144153149009ea554d2e536e5436f7 SHA512 50bacee82ed41ac8b8007ecc33bf51d22303cc2ddd27cfb72cb5520dab5f8e255186e34b89cec492c7a2d4220b200814bdede9b46c19f987a3d3d65a1c9b749a WHIRLPOOL e07480beba6ab1f02ad36b7d0c50c4a71cb39a8ec78bf8d1dc3c82bb9dd1d69d9169d7c937165ea15f60ce1147f256d46644f944107a3a8a800d5bad70d4c255
DIST refpolicy-2.20141203.tar.bz2 680243 SHA256 f438209c430d8a2d4ddcbe4bdd3edb46f6af7dc4913637af0b73c635e40c1522 SHA512 682e4280c5799e4c12ec7594afc1389f67be35055748d2e0dbdc3419159a16c96d4946ca6178daee8370515951f8653b2e452efe8c962b8d7f9bc192f0b15a0c WHIRLPOOL 74bca232534e7af9051bb1ab9f77c1ff6c425781cf4561f781d6e9a40cc5ca0d9add540249ea5493e8782a9372aea296ead6c165c6c440ae1509eb319d151ee5
EBUILD selinux-unconfined-2.20140311-r5.ebuild 379 SHA256 e7e8c5abc514261ad91e88a0703f76c1c8cdc7711ccd47356afb7fe7afdb8771 SHA512 7a050ba28997108893a2966f831914efcb5d8a85b3f4af576a60347788179fc7c712f6a6122d2f55b72afe4c346ba396f3c0b460df88c94514cb2e1160db801a WHIRLPOOL 755eb84084d7fd3bd603b40c33844af14fd7f11edcd9f5d253662ef06c688aa4862183be69f06306dbd4b4dca0f39f3ebc2aec6daeff757f017b159c3e523444
EBUILD selinux-unconfined-2.20140311-r6.ebuild 379 SHA256 9c1b27eabaf234dd3a3dcd45f6d2db4a0c885eb521a3e536091477ad67ef3822 SHA512 8b766515ae842fe24611926010d0d5f41c1a22725980cc815c5d397920978af40c421f935dc4b3a631471c9cad9484c1f2bc524b4ac8bbc4268744d33eed71a5 WHIRLPOOL 0fac1c0caa92c84b5cf25c853f336dcc8cbb7a34f5266276a226b1cb7ffc85f1fecb9129371b0055ae2ef53bb0b7619314888cc85b8dc3a7ad2c7ba8450f54ab
EBUILD selinux-unconfined-2.20140311-r7.ebuild 434 SHA256 46c040640dad77dcbfeca61094fcdb31a10a24b339f664c520d769086c6bd555 SHA512 26913cc2279540685c31773725711914972098790f7c74fcbc3615798bca0720dcb352e78be0fc1f3e8d93e0444a951e67de4b0c40011a3bc39e816afb7914ca WHIRLPOOL db97aa5a280b2076c10fe7bf4274130d8e20b4697af29285742e4b1fe0c9832c660576715ae051de9cc8fb4f8298f7f449a6a95a425e0163b744e30f3c4aa1a8
EBUILD selinux-unconfined-2.20141203-r1.ebuild 430 SHA256 e76a524b59c8e248170d40511568c86613c4d87f757174f72667ee5453dd399d SHA512 239033535c50e5793e886c7a347f97eb8904a690f853cf8430b71e5a73d9bc2d2d3af6b2936639e45d04866eb25145cfb92d90ed496f1c2aea07e07d23d8916e WHIRLPOOL 6957a6c0120cf9c888650265bb5c1c58d1359911ab418653e90b8c02cb43fdc2e9bdbaef8f7e61f2d8d251b76bb04f0eb2710323301ba8a136f4648c581ca9ae
EBUILD selinux-unconfined-2.20141203-r2.ebuild 434 SHA256 7df0dd581f1d7c82a36a11413b6481d99f7026420eb117c91064fb3718779a72 SHA512 077702aadd85316594c545ed8fdf57e7792f05cea228fab45e3aaafa40642427b2c7434a742895afaef807165fd7de9a4c0556527ee2e25829bc7967f18c4348 WHIRLPOOL 46b10ff84c20e6922113528e46f5f4037a7bdc1499348d7b7b11566b702d7777ac1a47b8597d43ec18b3651a34be9604082af9488959f95d4d39f5f1f0841b5a
EBUILD selinux-unconfined-2.20141203-r3.ebuild 430 SHA256 3bdc5a27e1b250704b133cfa6a173d67277b270620f4aeab4f7437657ff19a6f SHA512 11834dc89ff31c39c3e1fb9d23379641b92353fdcdcd63061295fef491cca19b5d5e1ceb2ba000f0993672827b237cc7fb7f1adb77c6072bcb28305fea885763 WHIRLPOOL 2379d527a5cbcd98cdcc5312764e351d9c8ecc2a9a84a602ebf461ce688155a801c6fbbc595158ad51ecd0e8d16216330cb37f8f93594da3ec2df5e8525e41eb
EBUILD selinux-unconfined-2.20141203-r4.ebuild 434 SHA256 349457e446187964c28594f21b8d007fd11f5e327eced12c561cf8a8b2ad55a1 SHA512 8ba7f7c9c094562f5c6a3738fdf47ffe2975f79e5ec6c37c8ace5be5e3d6154b13c27b155b85219abac6611d3f8d9b37722c55c64cb807bdb5bc8ba51e251961 WHIRLPOOL 95e0097d475d6f7de2e7471201b022576cf07e8c3457d212f543b66dba1b821e8d2b46868e21d1d8b8695aabc841ac60b465ac8bd5e94d69f1761cdcdc815d90
EBUILD selinux-unconfined-2.20141203-r5.ebuild 434 SHA256 a9bf18ce18909352ddc6e0e108345dd3aebb4ff7251ca3953adf06021a8c589c SHA512 114ba960529c0c1be2a4327007e77cff3a2bb0663848a899209d0e32eb82c1dd8e4d36cb7a63d5721f4de0d92b5c27a8f23ba16c25ae09f82ffe5b9701bd0627 WHIRLPOOL 43abac7ba3c730bef74fbf0d1bf2c49d02b4dfa0ef4f5be389678a3b2f78977f0e5941a64764979c4e1a5141052f94b755631be3b5cc53dd266687f4ad46413d
EBUILD selinux-unconfined-2.20141203-r6.ebuild 436 SHA256 69a51506de106b4fa4a4fb8373d0ed4ad002dcf5c597b19d19cce51814adb139 SHA512 5aac9617ee9e3f860b4428e2db065125f83a4f7656e68286749fa7c2d477e1d93052a8ad672f9992707861741295fb71f10bfee7102424c0bcf0ed16ecae5912 WHIRLPOOL af3e515b433b6d8547d5c3476c266b7ae447eed743eeec0eb7c5a81bd9a5668d7abb3c5a9baf925e67500d086c06cb5f5f5356a198d23516916b50f75aaaeca2
EBUILD selinux-unconfined-9999.ebuild 423 SHA256 4d3079f7d7f2779ae5d98d96dcc254357d57a7af4976d956dae1cc97d7907841 SHA512 2fde88ebd84ee0646baa670db63306604d77d7a25dcba43638f9218abebfc36720850ce81e339c78a6726f17c14b626aea222f312861e1126215d2745f17cc2d WHIRLPOOL 65ca663665a6bc1220961c5c5059544b524e0474de33c9884c926fe6e6ea434bc17a748dc845e343f047312679f87d85f77d77103430718ce50934451fa496cb
MISC ChangeLog 9355 SHA256 84f33ea7e0ea0a15e7449bc1e60ae8488efb4f371c871a6f266617f10e0d17a9 SHA512 61ea4373ead3b2ed8d98814ee17eb42caf353ed42ed3b2b8a4e313b9cc6802c676604e92fc78886495411c4a0dbaf640525b1f721df2f03c90551fb1e25fe192 WHIRLPOOL bc184a53057900664856cbdc26f9c1c9be80ed1650f844d09dc389b1eb0d72de5a22d84e68ab60bb41793f3363ae46c527ca5ee8589a90bcc97caed879fa9e83
MISC metadata.xml 242 SHA256 76827536ba74c490acb5f17d281fa909220d65f6848bfe3b854c14c9e21bfcd1 SHA512 3170198b955a5905f4d8df4078386e2aa2779dfc1c338f8172fe6f62667d252f0c595b6c1e7c8afdb831c78bd9ecb7a699b0754ca0903de2abdf68831272b0db WHIRLPOOL 0120ffebe91367dae691b0152b8fc5b467877ac21e0c659e034945dfa8d3e466a8a2d691edbeaa804db9f59b967f3ab8247c5b722734c50725974d09da83b9b0
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0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=3wty
-----END PGP SIGNATURE-----

6
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-unconfined/metadata.xml vendored Normal file
View File

@ -0,0 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<herd>selinux</herd>
<longdescription>Gentoo SELinux policy for unconfined domains</longdescription>
</pkgmetadata>

17
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-unconfined/selinux-unconfined-2.20141203-r5.ebuild vendored Normal file
View File

@ -0,0 +1,17 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-unconfined/selinux-unconfined-2.20141203-r5.ebuild,v 1.2 2015/06/05 16:10:22 perfinion Exp $
EAPI="5"
IUSE=""
MODS="unconfined"
inherit selinux-policy-2
DESCRIPTION="SELinux policy for unconfined"
if [[ $PV == 9999* ]] ; then
KEYWORDS=""
else
KEYWORDS="amd64 x86"
fi

17
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-unconfined/selinux-unconfined-9999.ebuild vendored Normal file
View File

@ -0,0 +1,17 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-unconfined/selinux-unconfined-9999.ebuild,v 1.4 2015/03/22 13:47:24 swift Exp $
EAPI="5"
IUSE=""
MODS="unconfined"
inherit selinux-policy-2
DESCRIPTION="SELinux policy for unconfined"
if [[ $PV == 9999* ]] ; then
KEYWORDS=""
else
KEYWORDS="~amd64 ~x86"
fi

308
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/ChangeLog vendored Normal file
View File

@ -0,0 +1,308 @@
# ChangeLog for sec-policy/selinux-virt
# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-virt/ChangeLog,v 1.63 2015/06/05 16:10:23 perfinion Exp $
05 Jun 2015; Jason Zaman <perfinion@gentoo.org>
selinux-virt-2.20141203-r5.ebuild:
Stabilize policy 2.20141203-r5
*selinux-virt-2.20141203-r6 (05 Jun 2015)
05 Jun 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-virt-2.20141203-r6.ebuild:
Release of 2.20141203-r6
15 Apr 2015; Jason Zaman <perfinion@gentoo.org>
selinux-virt-2.20141203-r4.ebuild:
Stabilize policy 2.20141203-r4
*selinux-virt-2.20141203-r5 (15 Apr 2015)
15 Apr 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-virt-2.20141203-r5.ebuild:
Release of 2.20141203-r5
22 Mar 2015; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20141203-r3.ebuild:
Stabilize 2.20141203-r3 policies
*selinux-virt-2.20141203-r4 (22 Mar 2015)
22 Mar 2015; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20141203-r4.ebuild, selinux-virt-9999.ebuild:
Release of 2.20141203-r4
*selinux-virt-2.20141203-r3 (29 Jan 2015)
29 Jan 2015; Jason Zaman <perfinion@gentoo.org>
+selinux-virt-2.20141203-r3.ebuild, selinux-virt-2.20141203-r2.ebuild:
Release of 2.20141203-r3, stable 2.20141203-r2
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-virt-2.20140311-r1.ebuild, -selinux-virt-2.20140311-r2.ebuild,
-selinux-virt-2.20140311-r3.ebuild, -selinux-virt-2.20140311-r4.ebuild:
Remove old ebuilds
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20141203-r1.ebuild:
Stabilize 2.20141203-r1
*selinux-virt-2.20141203-r2 (21 Dec 2014)
21 Dec 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20141203-r2.ebuild:
Release of 2.20141203-r2
07 Dec 2014; Jason Zaman <perfinion@gentoo.org>
selinux-virt-2.20140311-r7.ebuild:
Stabilize 2.20140311-r7
*selinux-virt-2.20141203-r1 (07 Dec 2014)
07 Dec 2014; Jason Zaman <perfinion@gentoo.org>
+selinux-virt-2.20141203-r1.ebuild:
Release of 2.20141203-r1
01 Nov 2014; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20140311-r6.ebuild:
Stabilize rev 6
*selinux-virt-2.20140311-r7 (01 Nov 2014)
01 Nov 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20140311-r7.ebuild:
Bump revision r7 of SELinux policies
01 Nov 2014; Sven Vermeulen <swift@gentoo.org> selinux-virt-9999.ebuild:
Add KEYWORDS logic in -9999 ebuilds for ease of copying
22 Aug 2014; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20140311-r5.ebuild:
Stabilize r5 policies
*selinux-virt-2.20140311-r6 (21 Aug 2014)
21 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20140311-r6.ebuild:
Release of 2.20140311-r6
*selinux-virt-2.20140311-r5 (09 Aug 2014)
09 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20140311-r5.ebuild:
Bump towards r5 (fixes duplicate context for hiawatha)
08 Aug 2014; Sven Vermeulen <swift@gentoo.org> selinux-virt-9999.ebuild:
Make 9999 ebuilds EAPI=5 and transform to make master for version bumps
05 Aug 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-virt-2.20130424-r1.ebuild, -selinux-virt-2.20130424-r2.ebuild,
-selinux-virt-2.20130424-r3.ebuild, -selinux-virt-2.20130424-r4.ebuild:
Remove obsolete ebuilds
*selinux-virt-2.20140311-r4 (01 Aug 2014)
01 Aug 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20140311-r4.ebuild, selinux-virt-2.20140311-r3.ebuild:
Stabilization of r3, and make r4 available for testing
29 May 2014; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20140311-r2.ebuild:
Stabilize 2.20140311-r2
*selinux-virt-2.20140311-r3 (29 May 2014)
29 May 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20140311-r3.ebuild:
Bump to 2.20140311-r3
19 Apr 2014; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20140311-r1.ebuild:
Stabilize r1 policies
*selinux-virt-2.20140311-r2 (19 Apr 2014)
19 Apr 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20140311-r2.ebuild:
Release of 2.20140311-r2
24 Mar 2014; Sven Vermeulen <swift@gentoo.org>
-selinux-virt-2.20120725-r11.ebuild, -selinux-virt-2.20120725-r12.ebuild,
-selinux-virt-2.20120725-r5.ebuild, -selinux-virt-2.20120725-r7.ebuild,
-selinux-virt-2.20120725-r8.ebuild, -selinux-virt-2.20120725-r9.ebuild:
Remove older SELinux policy ebuilds
*selinux-virt-2.20140311-r1 (21 Mar 2014)
21 Mar 2014; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20140311-r1.ebuild:
New upstream refpolicy release
12 Jan 2014; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20130424-r4.ebuild:
Stabilize 2.20130424-r4
*selinux-virt-2.20130424-r4 (11 Dec 2013)
11 Dec 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20130424-r4.ebuild:
Release of 2.20130424-r4
*selinux-virt-2.20130424-r3 (26 Sep 2013)
26 Sep 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20130424-r3.ebuild:
Release 2.20130424-r3, fixing bugs #480628, #482196, #475432, #485304, #480870
and #428322
15 Aug 2013; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20130424-r2.ebuild:
Stabilize r2 of policies
*selinux-virt-2.20130424-r2 (20 Jul 2013)
20 Jul 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20130424-r2.ebuild:
Pushing out rev 2
16 Jun 2013; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20130424-r1.ebuild:
Stabilize 20130424 policies
*selinux-virt-2.20130424-r1 (06 May 2013)
06 May 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20130424-r1.ebuild:
Adding 20130424 release
29 Mar 2013; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20120725-r12.ebuild:
Stabilize r12, fixes 455080, 453724, 461880, 453722, 452166, 458876, 457618,
456910, 456194, 453990 and 460152
*selinux-virt-2.20120725-r12 (09 Mar 2013)
09 Mar 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20120725-r12.ebuild:
Pushing out rev 12
23 Feb 2013; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20120725-r11.ebuild:
Stabilization
*selinux-virt-2.20120725-r11 (26 Jan 2013)
26 Jan 2013; Sven Vermeulen <swift@gentoo.org>
+selinux-virt-2.20120725-r11.ebuild:
Bumping selinux-virt to revision 11
13 Jan 2013; Sven Vermeulen <swift@gentoo.org>
selinux-virt-2.20120725-r9.ebuild:
Stabilizing r9
*selinux-virt-2.20120725-r9 (21 Dec 2012)
21 Dec 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20120725-r9.ebuild:
Bumping to revision 9
17 Dec 2012; Sven Vermeulen <swift@gentoo.org> -selinux-virt-2.20120215-r1.ebuild,
-selinux-virt-2.20120215-r14.ebuild, -selinux-virt-2.20120215-r15.ebuild,
-selinux-virt-2.20120215.ebuild:
Removing older ebuilds
13 Dec 2012; Sven Vermeulen <swift@gentoo.org> selinux-virt-2.20120725-r8.ebuild:
Stabilization
*selinux-virt-2.20120725-r8 (03 Dec 2012)
03 Dec 2012; Sven Vermeulen +files/fix-qemu-is-optional-r8.patch,
+selinux-virt-2.20120725-r8.ebuild:
Bumping to revision 8
*selinux-virt-2.20120725-r7 (18 Nov 2012)
18 Nov 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20120725-r7.ebuild:
Pushing out rev 7
*selinux-virt-9999 (13 Oct 2012)
13 Oct 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-9999.ebuild:
Adding live ebuild
04 Oct 2012; Sven Vermeulen <swift@gentoo.org> selinux-virt-2.20120725-r5.ebuild:
Stabilization
*selinux-virt-2.20120725-r5 (21 Sep 2012)
21 Sep 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20120725-r5.ebuild:
Introducing policy for 2.20120725, rev5
30 Jul 2012; Sven Vermeulen <swift@gentoo.org> selinux-virt-2.20120215-r14.ebuild:
Stabilization of revision 14 of the SELinux policy modules
*selinux-virt-2.20120215-r15 (26 Jul 2012)
26 Jul 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20120215-r15.ebuild:
Bump to rev15
*selinux-virt-2.20120215-r14 (16 Jul 2012)
16 Jul 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20120215-r14.ebuild:
Bumping to rev14
*selinux-virt-2.20120215-r1 (27 Jun 2012)
27 Jun 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20120215-r1.ebuild:
Bump to revision 13
13 May 2012; Sven Vermeulen <swift@gentoo.org> -selinux-virt-2.20110726.ebuild,
-selinux-virt-2.20110726-r1.ebuild:
Removing deprecated ebuilds (cleanup)
29 Apr 2012; Sven Vermeulen <swift@gentoo.org> selinux-virt-2.20120215.ebuild:
Stabilizing revision 7
*selinux-virt-2.20120215 (31 Mar 2012)
31 Mar 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20120215.ebuild:
Bumping to 2.20120215 policies
23 Feb 2012; Sven Vermeulen <swift@gentoo.org> selinux-virt-2.20110726-r1.ebuild:
Stabilizing
*selinux-virt-2.20110726-r1 (14 Jan 2012)
14 Jan 2012; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20110726-r1.ebuild:
Fix bug #330767 to support libvirt better in gentoo
12 Nov 2011; Sven Vermeulen <swift@gentoo.org> -selinux-virt-2.20101213.ebuild:
Removing old policies
23 Oct 2011; Sven Vermeulen <swift@gentoo.org> selinux-virt-2.20110726.ebuild:
Stabilization (tracker #384231)
*selinux-virt-2.20110726 (28 Aug 2011)
28 Aug 2011; Sven Vermeulen <swift@gentoo.org> +selinux-virt-2.20110726.ebuild:
Updating policy builds to refpolicy 20110726
02 Jun 2011; Anthony G. Basile <blueness@gentoo.org>
selinux-virt-2.20101213.ebuild:
Stable amd64 x86
06 Feb 2011; Anthony G. Basile <blueness@gentoo.org>
selinux-virt-2.20101213.ebuild:
Fixed unquoted variable.
05 Feb 2011; Anthony G. Basile <blueness@gentoo.org> ChangeLog:
Initial commit to portage.
01 Jan 2011; Chris Richards <gizmo@www.giz-works.com>
+selinux-virt-2.20101213.ebuild, +metadata.xml:
New upstream release
*selinux-virt-2.20101213 (01 Jan 2011)
01 Jan 2011; Chris Richards <gizmo@www.giz-works.com>
+selinux-virt-2.20101213.ebuild, +metadata.xml:
Initial commit

46
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/Manifest vendored Normal file
View File

@ -0,0 +1,46 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
AUX fix-qemu-is-optional-r8.patch 421 SHA256 59c91f71d56c20d8a2a8608dd2853c83925856f0f0cfda166aa1ae65ac29a2c5 SHA512 7e8236452918f8934cb242889d8506d5122c0ee626a130309270e604399eb2c102699080c96eaf001ee15357c86204deda017b3163abafe84ecf905ef9551384 WHIRLPOOL 4fbae99dfdc222d5ff457ac4fe1e6e5b8cd099ec27a32633c28ebceb7abb6b2eb5f4de3f22c72e26244d7515540dce85ddae0b0e4a2a8181ebbc7402cbd2dd2a
DIST patchbundle-selinux-base-policy-2.20140311-r5.tar.bz2 274187 SHA256 5ce76d59d12a7dfc02352eb2a77971d76c5ff0fa3c66cced6318919571f04839 SHA512 7a9da3ab23ce6217739f4548cc5365f64def11fe19b6f3b2a304685bb54246d12856388043870e0f061f71fb2c8c45da72bf3db28ad6e70f397f5dfffe2206c6 WHIRLPOOL a4729aaeed88f7485fbf112de91161bf4e75fb996f5123133c22fcb008966acc7db98c7849dc4b076cb633d00c81deae85cf6b5f8c48f8c3c72c90bcaff26d71
DIST patchbundle-selinux-base-policy-2.20140311-r6.tar.bz2 281043 SHA256 7fbfb518731c6bce8a3937e7dbabeaf0d39059423f5930731034363862bf9a25 SHA512 6b8bfbb3ee9e9d229ac0fa7e80905300c24f4934fb2f150ba52f45e76a3f1e8b51c788136ea32a2b044a00c614a96538aad9d3ff7300735dae228861ab5aed6f WHIRLPOOL 9da1fb97b7a1c8f5990748695c1393d0d0c7c6bcd6acbb974653ee83df00d911b70b4f9544a9e4b3014b9f78f69745a17a5c7fa02859985b611ec4636b473981
DIST patchbundle-selinux-base-policy-2.20140311-r7.tar.bz2 285346 SHA256 8e216867cc5ec2c513ae81d04e637021b4eda9bbd0fafab0c7f61f087776c33c SHA512 01d30c38dba876136d61452a890adbbe0301fb990b65b0a15086f1c8f14df4f96faf57bee8fd1328147458e5a7e96f972792c26ef971924c0fc74cf644d4b644 WHIRLPOOL ec03df417b73d52a19809a2e7417b05b11880517e4bc5093725a8172177943f3fa526eb32222f41c3aed5ec5ba3d57fb5af2ed19a32af1c37529864d30afd68b
DIST patchbundle-selinux-base-policy-2.20141203-r1.tar.bz2 264038 SHA256 0fb0ff62bf3abc2294db83d35d22220c5d86384e38332e4458fb38f88ce1538c SHA512 a9ac284c999b15f9f825761a5d59968337cac5990250d9ce46fc79a870ed14534f61b0d454866ea9296d134adb3e38634b02c0e9d70f69a657da4c11b6aeee38 WHIRLPOOL 389d5fd4feecc74c9a231c98a9bf497491e3e5c19a54f5b8ef68d050d95aeca7e6dd0853655212989b7239271be51cf2c4c3e19ac3db54cec229d802df95cbb5
DIST patchbundle-selinux-base-policy-2.20141203-r2.tar.bz2 268395 SHA256 60f5fbb2402f12b4c4aca89b134ee0dd4c88a1812208d765b601b23e025f7cfe SHA512 0a6d7a61ae259f6b4b9210c0b509a2b25581674b0d07e0fa8f2eff151f1e8bf084cae7a8928ede6e4358da661290940b8390a2cb6f5c6ababc021de4f6b445b9 WHIRLPOOL 6341b3c04aa547256f3128826fffe777c4ac2d7f6f916d6e7a7f2e976b18a903786116743a26f43602c707310662c445564ffdaa173b2c2cd9e48f4173c367a1
DIST patchbundle-selinux-base-policy-2.20141203-r3.tar.bz2 269940 SHA256 c1d507c21b02ab510e8fbe1eeb799ad1e9604ad611759c13df6c15ddc9480ed8 SHA512 694a1cf95d4fe5c686e6e8ddae56f591d85fd334f896352b11b2bf24b2e95be8eaf32d6aee9a3410c25e613efa6fe18e485cfe836a2a6dadb5f01c8118b42a45 WHIRLPOOL 8061b6e5dd5f1d0602b66fdf31f2c3c02de02bad73f213ad24d0be8d62a7dc4b8d35cb0780b4a1ee76ecded737d9eed3e41f6d51c24d885d3cac63591930ce96
DIST patchbundle-selinux-base-policy-2.20141203-r4.tar.bz2 271374 SHA256 7229f0f5a299fc31b693f603cb265697ecf02afb843aba74f96d8afb208dd9c9 SHA512 41379568855b820a72a1d8e7fb8114464573974d98b98ae9107649ed625d6fc8c045dc6714ee51d6db72473a76c99511ee23e6d0a9bd56a19ebbaa1fa13e55a8 WHIRLPOOL 563020e4d38817d875d7a8b98f670cff68d86fdfe89945b87943c8b48d106a58d269822a60640fcc76f51bad207b8b61839b2cdbb1405ab5f49332516c9faa1d
DIST patchbundle-selinux-base-policy-2.20141203-r5.tar.bz2 274136 SHA256 c23d17c47ce75620ffa9f3ef66393ae56693d7e431f9c7f0a4468a9646767a5f SHA512 e50d128ff9e6554f7d49bc1e43b40c8b062b8f7bb727acda9772b45381c61bc6c968265245e39f8ca044c2b0f4dadf3cdacfb38cd32306fa27f1acfb49921e06 WHIRLPOOL a0591298d54a4ba080112716fc35509e6c82281d362a11b208caa2a96ddc20c4cc8f942206db49d86b831c6ed13a239b7db9009f17ede77fce7f0c01cd6b20cc
DIST patchbundle-selinux-base-policy-2.20141203-r6.tar.bz2 293231 SHA256 b686dcc517b97834f66d967afdcc724cb43b5c6dbf9f34043a91cdeda2625cc7 SHA512 a2c486cbe4a1d21ff3fd01bef25ecf5a633a4072646c67cfccf3f7187d95f3d9e3b482a46ba17c55c40a8e7c0dee56e9cf9ddc9f414d3e4511443b62f60d03e9 WHIRLPOOL 3d708e287e3f9b873be647b0327eab6675a8702ee1cffb56e36934cada306e5ccc64397a083dad9e59de37a067e628cacbf896ae99012d5a209e42fd7cd8a4c6
DIST refpolicy-2.20140311.tar.bz2 664416 SHA256 f69437db95548c78a5dec44c236397146b144153149009ea554d2e536e5436f7 SHA512 50bacee82ed41ac8b8007ecc33bf51d22303cc2ddd27cfb72cb5520dab5f8e255186e34b89cec492c7a2d4220b200814bdede9b46c19f987a3d3d65a1c9b749a WHIRLPOOL e07480beba6ab1f02ad36b7d0c50c4a71cb39a8ec78bf8d1dc3c82bb9dd1d69d9169d7c937165ea15f60ce1147f256d46644f944107a3a8a800d5bad70d4c255
DIST refpolicy-2.20141203.tar.bz2 680243 SHA256 f438209c430d8a2d4ddcbe4bdd3edb46f6af7dc4913637af0b73c635e40c1522 SHA512 682e4280c5799e4c12ec7594afc1389f67be35055748d2e0dbdc3419159a16c96d4946ca6178daee8370515951f8653b2e452efe8c962b8d7f9bc192f0b15a0c WHIRLPOOL 74bca232534e7af9051bb1ab9f77c1ff6c425781cf4561f781d6e9a40cc5ca0d9add540249ea5493e8782a9372aea296ead6c165c6c440ae1509eb319d151ee5
EBUILD selinux-virt-2.20140311-r5.ebuild 355 SHA256 0b30d985d12582a0ae13da83eb0841ec7a08d799eae337ad09d9ba6e79bacdd5 SHA512 b6acb878c72b6c15edf8a1e4ebc093eeb27ea84462e7690b72875f63cda47a564f996866c2940f14b648055bb9d36768b3b2412b1c80d9b0ebea363f5cb6fe5a WHIRLPOOL 28a34826d91a09f7aaccb50a48cf5e329ba45e28c791917719ccde935576e28c0e8a6d4d99be016fdcd1f9415c9d78afccfb448cd71da2f27bbb96a8abe5c4d7
EBUILD selinux-virt-2.20140311-r6.ebuild 355 SHA256 d73aefffee870855ad7b2aaa28a2aa16842a50348ce3c9f05661024493b18ad1 SHA512 af0e55b50e0dc0f669c8711ded5b49293a5d9b1a07cfe78bcbeec30075bd1f30847222bb2e3205dea629ab709ed6b94abb90ae258cda9127b6b4a0bd3a5f56e4 WHIRLPOOL c5810a5cb3c2c49e8a3441b706ff6bced57fbed7232d74f6e3adec40c9f0b40328db6a523b2217c6d75b0d0832c7f9a8f22b91ca3bdf00ef463b584b24e67950
EBUILD selinux-virt-2.20140311-r7.ebuild 410 SHA256 d00c2138afe26c7cfb4ac116132c7be17b802830b262ec385706cbf671b28f59 SHA512 2097b357e761c40e010c565f47be83988f32c61fdfa099db8946ce8846a30a0e19d168947083dfa18f8f2f63d6e0dbb5ca9e62e5dd70f3204febc73b3a8e554e WHIRLPOOL 57701a038f665d738f22ec17bb983af03f68b0bbab48df9d4260f9dced1f41c46ed675bb284e5098fb7c4b85298b6138768633226bdd9e14dd368eb3d1119bd7
EBUILD selinux-virt-2.20141203-r1.ebuild 406 SHA256 140cef1f154a56380f1a371f1f5474aad1fbb673886d0cbacc246f45cae8ef3d SHA512 b18cf8ba84afd5574db7e767b5464e765707d8bcb1922ffe482c8a20843fb5dfdf3caf8a236829868d973948e9cf2ec972677e3946884a36c0475050742972ea WHIRLPOOL 8554980c7939c505dc02b589ba780076ff573d3859c2113c30e4afb2229a8558fc8e19164f039ef5739427cffa53d0b245eaadcaae21ae407c611f73d57411c7
EBUILD selinux-virt-2.20141203-r2.ebuild 410 SHA256 6f5fbfb8c3f4f6dbc7b4511ac4abafd00c691cdf78e2fcbb027283ed835c91ac SHA512 e945aa82d6312258a5067b6d9ac46490198bc4040dce44e1dc2925a04211f48fc1d0a4347cc1712384fad2d51ed093dda9b79ff722cfa31b990c7ddc5444d1d0 WHIRLPOOL 28bc34c480f08d25b444310c6a6df02dab625e71917601f4d53364dc2c68786f1e4edb47b49e8bb2c95e023195daaf022c25c6ef42a09b7655c0fde0f850e500
EBUILD selinux-virt-2.20141203-r3.ebuild 406 SHA256 49278f3599bb1fe7119f4f9bca56c1e833cadc392dd99dea7427375b9bd68851 SHA512 d7040ec08298eff452cd487078b6def0f2686c309d5fbce34e5f54f130de415dbbe3961e11dfbf1503d57efed734b3773529139b02676c44d03aefc17b5bc9d1 WHIRLPOOL d7a6c85d8684d4b16d9c38d4e1376b3424e3e487930a11c739419d3c96f8d7de334f0c640b5898a7ec1f7c8ebd8c75dedfc057fe5c5497c78e606276ef726bbd
EBUILD selinux-virt-2.20141203-r4.ebuild 410 SHA256 6dad2b78ab08528b0e5dc0a9309aba73cb026c6650ec0b5d36ccae9d34f6feff SHA512 ca470257596d52359006144a768c1bd78323da35b750f099ee76221d47457e4d5e519f52c6a00ed57ba9f81802a232486f06ed6865081e28bd883348a9293064 WHIRLPOOL d09c885e7a9c4294369c43760c2ecc5a084af74c7624ec1994e00d2ee7ab5811d419292f4ad8cc2b84136bae0fb2964c30790a88310993baf2d5e76d4badb3fd
EBUILD selinux-virt-2.20141203-r5.ebuild 410 SHA256 bbcf45143184f1444c0ce1661559de508fb8a8dcbb19ec8e776e110b4c812eee SHA512 92864a8b9a1e421e9e4f07c5af309b3aa51e308d75c6c9f3af73ec9592066a7fc3a4cbf14841a4603c3a8381f35da037d7fa75aad170be6e73ed8a1cf2d7ccb9 WHIRLPOOL 867683cb3d6b51de5d0ec3cc88f6598e59e787a20556e175761b99b1be0d334974d609cc8153cc003b4fce3714b3f37f68e2f78e9640efc483d2449e5e7e7eea
EBUILD selinux-virt-2.20141203-r6.ebuild 412 SHA256 dc4fb2f81bf8670808dba67dda20bfde831d30c6a9eb2aac329d16d9a7d17f8e SHA512 ec9626ab6bb4bf9613293669da60fc0d9ad3d8b983a2c51ac8d3956826eaec782f4922bae575766403e0cc7242b3f668b4d08893c19ccdf19dc77c79088d4791 WHIRLPOOL c963873c76f1603ed0461fd1c17a2c305b9d90857c8a70c87b9c4ed55d71cbfede18da7ccce62abdd7f6ce210e9abec082effced07ced041812d51ab0e7cf540
EBUILD selinux-virt-9999.ebuild 399 SHA256 ece286ac7a2ff2a57448cb414025ec4c79c9ffda5a0a05c3451cea393f5ba04c SHA512 15ab027ff8ee5056f69f914cc7e70d109d397d7b74e12d65185fba2c19e5f9ee5aa10db9ae29c5de9358a47d41807ad817f7ba77c0d11ab544731cdd3735f339 WHIRLPOOL 7c821c458fb1234c832eac8c4aab6ecd94ae526bee7aeee03215058ca8c8c3416bb655fc708fb414ba66e7617843b20038fb9338c33ff1aacf9b954df669689c
MISC ChangeLog 9828 SHA256 28b3d75833102d265e4dd65772ffc77f11df9ac1e122079c2bc4e0f4e3bd130d SHA512 40fd018eb666d5467613707aca85e4d855bd8ea2d2de966b0ce26e331b22a4ad764515a0a5d5ab7e0735fba3c211769248f863380c12096c281702a477e079b1 WHIRLPOOL 37999cd3e6057a0d98ed6cd8151cfba7398b34ee111f9d9833c8ac7b7e50636c2275d53e7841998b00145b6e05b6723d73ccc3f033054a1e119193f5407397be
MISC metadata.xml 228 SHA256 9f27e717e6904dd86bdd0f35496fd9549675fa04346b1dcdad9ddeb3ee52bf87 SHA512 8cafab15bc86765902287a5e6d8f14c3dbdd436a5272569189aa983f88cb66b3e58500b5d0c19052d884a2f75c90d4e16c17398deb3789bf14714074052181f7 WHIRLPOOL 98e2ccfb6173b6e77cefc4b15e5e2df68301a1ae1260ecc0a5c0c6354a332f512bd5a8f8bfda98f664f26dd5b99a6feef232b436c863f542d88e95c25bdf17ad
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0
iQJ8BAEBCABmBQJVccotXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFMTYyREVBRDFDQ0REMTEzRjA0QjNENDky
QkJFRDlDQjFBNjhFRjU1AAoJECu+2csaaO9VNrIP/3B3rj8woKGWbK3yfGBOUSjw
Q3dU+mSz5n/gSb+Q9+XRozyg10EcSqxzF+01Dz8mYcvZC7sXBr9d+b40TO1/vQmY
KALRa2UJFWOH4Zn+yt6ZyoTsJ4hDKV84WKm1Y+yT9kMet9Pm/2fIXcB+t6CR8/Oi
EjJ5rlk+s4fhMo4haGWdQrARxdyezeQHmHN57WTkyE2BVvB0Qr3pRsFogc/4/48Y
Dy0yr1AOr1Arv0qcXAa8Ii9VRRoNvmvaL864t9Mcfl8n7FmMJR7OWmFaEZn5xQ7L
4w4F1Vr5xqIdM2ozaIi/sLLO7uJav6GJuV+l+R7McPnUI6f7XkQv/h5QFh49h8mm
eJwKQUX9hofFKi01zWi5fpUlRmHrhb5fCxe0JhgI0hkVt3osyHkCK2NIuMqUix0c
iwSfQCwKHkHfSzFF8yMJQ3eI6dZBO7ZOwjknlpNJHBx6rTjoN6y1p2bdxep9skBw
7XHkydiA4Ke4UJhnwDt7kKddvSjKNx6Oxp2s4SeOE/CffANc+A6llXC50KRzPEtV
5JPEi5obWiIZIslc1AobSWFrQb87Wl1yT/EdHD9Zxvg7dJt0Q7RAIJbtKJ4wOQTQ
wXtfIiJvSs1c+6YKiEKNIZvNMVpNl2ez8tZ2wozhs7FMjcrw1SVr2OsFbfKc489J
s5/0y8ab81amPWV/1Bsa
=Ec/B
-----END PGP SIGNATURE-----

15
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/files/fix-qemu-is-optional-r8.patch vendored Normal file
View File

@ -0,0 +1,15 @@
--- contrib/virt.te 2012-11-25 21:35:09.181247450 +0100
+++ contrib/virt.te 2012-11-25 21:34:09.223216815 +0100
@@ -281,7 +281,11 @@
userdom_search_user_home_dirs(virt_domain)
userdom_read_all_users_state(virt_domain)
-qemu_exec(virt_domain)
+ifdef(`distro_gentoo',`
+ optional_policy(`
+ qemu_exec(virt_domain)
+ ')
+')
tunable_policy(`virt_use_execmem',`
allow virt_domain self:process { execmem execstack };

6
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/metadata.xml vendored Normal file
View File

@ -0,0 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<herd>selinux</herd>
<longdescription>Gentoo SELinux policy for virt</longdescription>
</pkgmetadata>

17
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-2.20141203-r5.ebuild vendored Normal file
View File

@ -0,0 +1,17 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-virt/selinux-virt-2.20141203-r5.ebuild,v 1.2 2015/06/05 16:10:23 perfinion Exp $
EAPI="5"
IUSE=""
MODS="virt"
inherit selinux-policy-2
DESCRIPTION="SELinux policy for virt"
if [[ $PV == 9999* ]] ; then
KEYWORDS=""
else
KEYWORDS="amd64 x86"
fi

17
sdk_container/src/third_party/coreos-overlay/sec-policy/selinux-virt/selinux-virt-9999.ebuild vendored Normal file
View File

@ -0,0 +1,17 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-virt/selinux-virt-9999.ebuild,v 1.4 2015/03/22 13:47:21 swift Exp $
EAPI="5"
IUSE=""
MODS="virt"
inherit selinux-policy-2
DESCRIPTION="SELinux policy for virt"
if [[ $PV == 9999* ]] ; then
KEYWORDS=""
else
KEYWORDS="~amd64 ~x86"
fi

804
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/ChangeLog vendored Normal file
View File

@ -0,0 +1,804 @@
# ChangeLog for sys-apps/policycoreutils
# Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/sys-apps/policycoreutils/ChangeLog,v 1.154 2015/06/09 15:38:25 swift Exp $
*policycoreutils-9999 (09 Jun 2015)
09 Jun 2015; Sven Vermeulen <swift@gentoo.org> +policycoreutils-9999.ebuild:
Adding policycoreutils-9999 to better support upstream integrations
10 May 2015; Jason Zaman <perfinion@gentoo.org> policycoreutils-2.4.ebuild:
stabilize selinux 2.4 userland
09 May 2015; Jason Zaman <perfinion@gentoo.org> policycoreutils-2.4.ebuild:
ewarn has been moved to libsemanage
18 Apr 2015; Jason Zaman <perfinion@gentoo.org>
-policycoreutils-2.3-r2.ebuild, -policycoreutils-2.4_rc6-r1.ebuild,
-policycoreutils-2.4_rc7.ebuild:
Drop old RCs
04 Mar 2015; Sven Vermeulen <swift@gentoo.org> policycoreutils-2.4.ebuild:
Fix build failure on x32 (bug #541618)
06 Feb 2015; Jason Zaman <perfinion@gentoo.org> policycoreutils-2.3-r3.ebuild:
Stablize 2.3-r3
*policycoreutils-2.4 (04 Feb 2015)
04 Feb 2015; Jason Zaman <perfinion@gentoo.org> +policycoreutils-2.4.ebuild:
Version bump
*policycoreutils-2.4_rc7 (06 Dec 2014)
*policycoreutils-2.3-r3 (06 Dec 2014)
06 Dec 2014; Jason Zaman <perfinion@gentoo.org>
+policycoreutils-2.3-r3.ebuild, +policycoreutils-2.4_rc7.ebuild,
-policycoreutils-2.4_rc2.ebuild, -policycoreutils-2.4_rc5.ebuild,
-policycoreutils-2.4_rc6.ebuild,
files/0020-disable-autodetection-of-pam-and-audit.patch,
files/0030-make-inotify-check-use-flag-triggered.patch,
policycoreutils-2.4_rc6-r1.ebuild:
version bump and ebuild clean up, drop old RC
*policycoreutils-2.4_rc6-r1 (22 Nov 2014)
22 Nov 2014; Jason Zaman <perfinon@gentoo.org>
+files/0001-policycoreutils-pp-add-roletype-statements-for-both-.patch,
+policycoreutils-2.4_rc6-r1.ebuild:
add patch from upstream to fix missing roletypes
*policycoreutils-2.4_rc6 (14 Nov 2014)
14 Nov 2014; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.4_rc6.ebuild:
Bump to rc6
*policycoreutils-2.4_rc5 (29 Oct 2014)
29 Oct 2014; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.4_rc5.ebuild, -policycoreutils-2.4_rc4.ebuild,
policycoreutils-2.4_rc2.ebuild:
Bump to 2.4_rc5
*policycoreutils-2.4_rc4 (07 Oct 2014)
07 Oct 2014; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.4_rc4.ebuild:
Bump to 2.4-rc4
*policycoreutils-2.4_rc2 (21 Sep 2014)
21 Sep 2014; Sven Vermeulen <swift@gentoo.org>
+files/0010-remove-sesandbox-support.patch,
+files/0020-disable-autodetection-of-pam-and-audit.patch,
+files/0030-make-inotify-check-use-flag-triggered.patch,
+files/0040-reverse-access-check-in-run_init.patch,
+files/0070-remove-symlink-attempt-fails-with-gentoo-sandbox-approach.patch,
+files/0110-build-mcstrans-bug-472912.patch,
+files/0120-build-failure-for-mcscolor-for-CONTEXT__CONTAINS.patch,
+policycoreutils-2.4_rc2.ebuild, policycoreutils-2.3-r2.ebuild:
Noved to github; also add in masked 2.4 series
05 Aug 2014; Sven Vermeulen <swift@gentoo.org>
-policycoreutils-2.2.5-r2.ebuild, -policycoreutils-2.3-r1.ebuild,
-policycoreutils-2.3.ebuild, metadata.xml:
Remove obsoleted ebuilds
30 Jul 2014; Sven Vermeulen <swift@gentoo.org> policycoreutils-2.3-r2.ebuild:
Fix bug #514194 - Stabilization of SELinux userspace 2.3
*policycoreutils-2.3-r2 (28 May 2014)
28 May 2014; Sven Vermeulen <swift@gentoo.org> +policycoreutils-2.3-r2.ebuild:
Fix selocal attribute validation
*policycoreutils-2.3-r1 (26 May 2014)
26 May 2014; Sven Vermeulen <swift@gentoo.org> +policycoreutils-2.3-r1.ebuild:
Fix selocal to support dontaudit as well. Also verify types, attributes and
roles before adding them.
10 May 2014; Sven Vermeulen <swift@gentoo.org>
-policycoreutils-2.1.14-r1.ebuild, -policycoreutils-2.1.14-r2.ebuild,
-policycoreutils-2.1.14-r3.ebuild, -policycoreutils-2.1.14-r4.ebuild,
-policycoreutils-2.1.14-r5.ebuild, -policycoreutils-2.2.1-r1.ebuild,
-policycoreutils-2.2.5-r1.ebuild, -policycoreutils-2.2.5-r3.ebuild,
-policycoreutils-2.3_rc1.ebuild, -policycoreutils-2.3_rc1-r1.ebuild,
-files/policycoreutils-extra-1.21-fix-python3.patch:
Spring cleanup
10 May 2014; Sven Vermeulen <swift@gentoo.org>
policycoreutils-2.2.5-r4.ebuild:
Stabilize to work around vulnerability CVE-2014-3215
*policycoreutils-2.3 (09 May 2014)
09 May 2014; Sven Vermeulen <swift@gentoo.org> +policycoreutils-2.3.ebuild:
Bump to 2.3
*policycoreutils-2.3_rc1-r1 (09 May 2014)
09 May 2014; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.2.5-r4.ebuild, +policycoreutils-2.3_rc1-r1.ebuild:
Do not build seunshare/sesandbox, cfr bug #509896
*policycoreutils-2.3_rc1 (28 Apr 2014)
28 Apr 2014; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.3_rc1.ebuild:
2.3-rc1 release
*policycoreutils-2.2.5-r3 (19 Apr 2014)
19 Apr 2014; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.2.5-r3.ebuild, policycoreutils-2.2.5-r1.ebuild:
Fix bug #507992 - Do not push out restorecond init script if restorecond
should not be installed
20 Jan 2014; Sven Vermeulen <swift@gentoo.org>
policycoreutils-2.2.5-r2.ebuild:
Stabilize for amd64 and x86
*policycoreutils-2.1.14-r5 (12 Jan 2014)
12 Jan 2014; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.14-r5.ebuild:
Backport BUILD_DIR change to 2.1.14 (needed to have runscript_selinux follow
USE flag info)
*policycoreutils-2.2.5-r2 (12 Jan 2014)
12 Jan 2014; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.2.5-r2.ebuild:
Use python builddir locations for installation, otherwise a non-built
directory will be used, dismissing all configuration variables mentioned
earlier
23 Dec 2013; Sven Vermeulen <swift@gentoo.org>
-policycoreutils-2.1.13-r3.ebuild, -policycoreutils-2.1.13-r4.ebuild,
-policycoreutils-2.1.13-r5.ebuild, -policycoreutils-2.1.13-r6.ebuild,
-policycoreutils-2.1.13-r7.ebuild, -policycoreutils-2.1.13-r8.ebuild,
-policycoreutils-2.1.13-r9.ebuild, -policycoreutils-2.1.13-r10.ebuild,
-policycoreutils-2.1.13-r11.ebuild:
Cleanup old versions
*policycoreutils-2.2.5-r1 (10 Dec 2013)
10 Dec 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.2.5-r1.ebuild:
Adding 2.2.5 release
*policycoreutils-2.2.1-r1 (04 Nov 2013)
04 Nov 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.2.1-r1.ebuild:
New policycoreutils release
04 Nov 2013; Sven Vermeulen <swift@gentoo.org>
policycoreutils-2.1.14-r4.ebuild:
Stabilize
*policycoreutils-2.1.14-r4 (13 Aug 2013)
13 Aug 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.14-r4.ebuild:
Document setfiles in rlpkg, improve selocal resilience
07 Jul 2013; Sven Vermeulen <swift@gentoo.org>
-policycoreutils-2.1.10-r5.ebuild:
Summer cleaning
*policycoreutils-2.1.14-r3 (07 Jul 2013)
07 Jul 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.14-r3.ebuild:
Switch to python-r1 eclass, add in mcstrans (bug #472912)
16 Jun 2013; Sven Vermeulen <swift@gentoo.org>
policycoreutils-2.1.14-r2.ebuild:
Stabilization
10 May 2013; Sven Vermeulen <swift@gentoo.org> metadata.xml:
Add in CPE data for policycoreutils, historical CVEs use redhat as
application vendor
*policycoreutils-2.1.14-r2 (07 May 2013)
07 May 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.14-r2.ebuild:
Fix bugs 467268 (yum bindings), 468832 (key error), 468830 (mls range
dependency)
*policycoreutils-2.1.14-r1 (25 Apr 2013)
25 Apr 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.14-r1.ebuild:
New upstream release
*policycoreutils-2.1.13-r11 (19 Apr 2013)
19 Apr 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.13-r11.ebuild:
Add selocal command to policycoreutils
*policycoreutils-2.1.13-r10 (16 Apr 2013)
16 Apr 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.13-r10.ebuild:
Fix bugs #463222 (newrole O_RDWR) and #464808 (hardcoded python3.1 in rlpkg)
16 Apr 2013; Sven Vermeulen <swift@gentoo.org>
-policycoreutils-2.1.10-r1.ebuild, -policycoreutils-2.1.10-r3.ebuild,
-policycoreutils-2.1.10-r4.ebuild, -policycoreutils-2.1.10.ebuild:
Some cleanup (older release unstables)
16 Apr 2013; Sven Vermeulen <swift@gentoo.org>
policycoreutils-2.1.13-r9.ebuild:
Stabilize policycoreutils-2.1.13-r9
*policycoreutils-2.1.13-r9 (19 Mar 2013)
19 Mar 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.13-r9.ebuild:
Fix bug #457786 - Link runscript_selinux with crypt
*policycoreutils-2.1.13-r8 (10 Mar 2013)
10 Mar 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.13-r8.ebuild:
Adding selinux_gentoo init script for initramfs and cpu/online support
(#456914)
*policycoreutils-2.1.13-r7 (09 Mar 2013)
09 Mar 2013; Sven Vermeulen <swift@gentoo.org>
+policycoreutils-2.1.13-r7.ebuild:
Update policycoreutils-extras to fix build failure when not building with PAM
support, see bug #457786
*policycoreutils-2.1.13-r6 (30 Dec 2012)
30 Dec 2012; Sven Vermeulen +policycoreutils-2.1.13-r6.ebuild,
policycoreutils-2.1.13-r5.ebuild:
Stabilize r5, get r6 available as well which fixes rlpkg to include zfs
support
*policycoreutils-2.1.13-r5 (17 Nov 2012)
17 Nov 2012; <swift@gentoo.org> policycoreutils-2.1.13-r4.ebuild,
+policycoreutils-2.1.13-r5.ebuild:
Stabilization, move sesandbox support to next release
*policycoreutils-2.1.13-r4 (14 Oct 2012)
14 Oct 2012; <swift@gentoo.org> +policycoreutils-2.1.13-r4.ebuild:
Remove support for python3 until upstream supports it
13 Oct 2012; <swift@gentoo.org> policycoreutils-2.1.13-r3.ebuild:
Supporting user-provided patches using epatch_user
*policycoreutils-2.1.13-r3 (09 Oct 2012)
09 Oct 2012; <swift@gentoo.org> +policycoreutils-2.1.13-r3.ebuild:
Introducing new upstream release
06 Oct 2012; <swift@gentoo.org> policycoreutils-2.1.10-r5.ebuild:
Stabilize
*policycoreutils-2.1.10-r5 (08 Sep 2012)
08 Sep 2012; <swift@gentoo.org> +policycoreutils-2.1.10-r5.ebuild:
Fix bug #427596 and #430806
10 Jul 2012; <swift@gentoo.org> policycoreutils-2.1.10-r3.ebuild:
Stabilization, drop libcgroup dependency along the way
*policycoreutils-2.1.10-r4 (10 Jul 2012)
10 Jul 2012; <swift@gentoo.org> +policycoreutils-2.1.10-r4.ebuild:
Support refpolicy style audit2allow (#417199)
26 Jun 2012; Mike Gilbert <floppym@gentoo.org>
policycoreutils-2.1.10-r1.ebuild, policycoreutils-2.1.10-r3.ebuild,
policycoreutils-2.1.10.ebuild:
Restrict pypy per Arfrever.
*policycoreutils-2.1.10-r3 (25 Jun 2012)
25 Jun 2012; <swift@gentoo.org>
+files/policycoreutils-extra-1.21-fix-python3.patch,
+policycoreutils-2.1.10-r3.ebuild:
Improve support for python3, fixes bug #416301
13 May 2012; <swift@gentoo.org> -policycoreutils-2.1.0-r1.ebuild,
-policycoreutils-2.1.0-r2.ebuild:
Removing obsoleted ebuilds
*policycoreutils-2.1.10-r1 (29 Apr 2012)
29 Apr 2012; <swift@gentoo.org> policycoreutils-2.1.10.ebuild,
+policycoreutils-2.1.10-r1.ebuild:
Remove dependency on libcgroup (but drop sesandbox support along the way)
29 Apr 2012; <swift@gentoo.org> policycoreutils-2.1.10.ebuild:
Stabilization
*policycoreutils-2.1.10 (31 Mar 2012)
31 Mar 2012; <swift@gentoo.org> +policycoreutils-2.1.10.ebuild, metadata.xml:
Bump to version 2.1.10
26 Feb 2012; <swift@gentoo.org> policycoreutils-2.1.0-r2.ebuild:
Stabilization
14 Jan 2012; <swift@gentoo.org> +policycoreutils-2.1.0-r2.ebuild,
metadata.xml:
Mark audit as a local USE flag
*policycoreutils-2.1.0-r2 (14 Jan 2012)
14 Jan 2012; <swift@gentoo.org> +policycoreutils-2.1.0-r2.ebuild:
Override auto-detection of pam and audit, use USE flags for this
12 Nov 2011; <swift@gentoo.org> -policycoreutils-2.0.82.ebuild,
-policycoreutils-2.0.82-r1.ebuild, -policycoreutils-2.0.85.ebuild,
-policycoreutils-2.1.0.ebuild:
removing obsoleted ebuilds
23 Oct 2011; <swift@gentoo.org> policycoreutils-2.1.0-r1.ebuild:
Stabilization (tracker #384231)
23 Oct 2011; <swift@gentoo.org> policycoreutils-2.0.82-r1.ebuild:
Stabilize 2.0.82-r1 to fix #372807
*policycoreutils-2.1.0-r1 (17 Sep 2011)
17 Sep 2011; <swift@gentoo.org> +policycoreutils-2.1.0-r1.ebuild:
Add /var/lib/selinux directory, needed for 'semodule permissive' support (bug
#381755)
02 Sep 2011; <swift@gentoo.org> policycoreutils-2.0.85.ebuild,
policycoreutils-2.1.0.ebuild:
Update patch locations to dev.g.o instead of files/ folder
12 Aug 2011; Anthony G. Basile <blueness@gentoo.org>
-policycoreutils-2.0.55.ebuild, -policycoreutils-2.0.69.ebuild,
-policycoreutils-2.0.69-r1.ebuild, -policycoreutils-2.0.69-r2.ebuild,
-files/policycoreutils-2.0.69-setfiles.diff:
Removed deprecated versions
*policycoreutils-2.1.0 (03 Aug 2011)
03 Aug 2011; Anthony G. Basile <blueness@gentoo.org>
+policycoreutils-2.1.0.ebuild:
Bump to 20110727 SELinux userspace release
*policycoreutils-2.0.85 (15 Jul 2011)
15 Jul 2011; Anthony G. Basile <blueness@gentoo.org>
+policycoreutils-2.0.85.ebuild,
+files/policycoreutils-2.0.85-fix-seunshare-vuln.patch.gz,
+files/policycoreutils-2.0.85-sesandbox.patch.gz:
Add fix for bug #374897 and initial support for python3
08 Jul 2011; Samuli Suominen <ssuominen@gentoo.org>
policycoreutils-2.0.55.ebuild, policycoreutils-2.0.69.ebuild,
policycoreutils-2.0.69-r1.ebuild, policycoreutils-2.0.69-r2.ebuild:
Convert from "useq" to "use".
*policycoreutils-2.0.82-r1 (30 Jun 2011)
30 Jun 2011; Anthony G. Basile <blueness@gentoo.org>
+policycoreutils-2.0.82-r1.ebuild:
Overwrite invalid .po files with valid ones, fixes bug #372807
16 Jun 2011; Anthony G. Basile <blueness@gentoo.org>
policycoreutils-2.0.82.ebuild:
Drop use_nls dependency on gettext. Its mandatory. See bug #299681.
Also put gettext in COMMON_DEPS, it is more than a RDEPEND.
28 May 2011; Anthony G. Basile <blueness@gentoo.org>
policycoreutils-2.0.82.ebuild:
Stable amd64 x86
16 Apr 2011; Anthony G. Basile <blueness@gentoo.org> metadata.xml:
Updated metadata info.
08 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@gentoo.org>
policycoreutils-2.0.82.ebuild:
Set SUPPORT_PYTHON_ABIS (bug #353762). Fix dependencies. Fix installation
with FEATURES="multilib-strict".
*policycoreutils-2.0.82 (05 Feb 2011)
05 Feb 2011; Anthony G. Basile <blueness@gentoo.org>
+policycoreutils-2.0.82.ebuild:
New upstream release.
*policycoreutils-2.0.69-r2 (05 Feb 2011)
05 Feb 2011; Anthony G. Basile <blueness@gentoo.org>
+policycoreutils-2.0.69-r2.ebuild,
+files/policycoreutils-2.0.69-setfiles.diff:
Fixed bug #300613
04 Apr 2010; Arfrever Frehtes Taifersar Arahesis <arfrever@gentoo.org>
policycoreutils-2.0.55.ebuild, policycoreutils-2.0.69.ebuild,
policycoreutils-2.0.69-r1.ebuild:
Delete calls to deprecated python_version().
*policycoreutils-2.0.69-r1 (20 Sep 2009)
20 Sep 2009; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-2.0.69-r1.ebuild:
Update rlpkg for ext4 and btrfs.
14 Sep 2009; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-2.0.69.ebuild:
Fix libsemanage DEP.
02 Aug 2009; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-2.0.55.ebuild, policycoreutils-2.0.69.ebuild:
Add python_need_rebuild.
*policycoreutils-2.0.69 (02 Aug 2009)
02 Aug 2009; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-2.0.69.ebuild:
New upstream release.
18 Jul 2009; Chris PeBenito <pebenito@gentoo.org>
-policycoreutils-1.34.15.ebuild, policycoreutils-2.0.55.ebuild:
Mark stable. Remove old ebuilds.
*policycoreutils-2.0.55 (03 Oct 2008)
03 Oct 2008; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-2.0.55.ebuild:
Initial commit of policycoreutils 2.0.
29 May 2008; Ali Polatel <hawking@gentoo.org>
policycoreutils-1.34.15.ebuild:
python_mod_optimize is ROOT aware. Fixed python_mod_cleanup.
26 May 2008; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.34.15.ebuild:
Fix libsemanage dependency.
13 May 2008; Chris PeBenito <pebenito@gentoo.org>
-files/policycoreutils-1.28-quietlp.diff,
-files/policycoreutils-1.32-quietlp.diff,
-files/policycoreutils-unsigned-char-ppc.diff,
-policycoreutils-1.28.ebuild, -policycoreutils-1.30-r1.ebuild,
-policycoreutils-1.34.1.ebuild, -policycoreutils-1.34.11.ebuild,
policycoreutils-1.34.15.ebuild:
Mark 1.34.15 stable, clear old ebuilds.
*policycoreutils-1.34.15 (29 Jan 2008)
29 Jan 2008; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.34.15.ebuild:
New upstream bugfix release.
19 Oct 2007; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.34.11.ebuild:
Fix quoting in unpack.
*policycoreutils-1.34.11 (18 Oct 2007)
18 Oct 2007; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.34.11.ebuild:
New upstream release.
04 Jun 2007; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.34.1.ebuild:
Mark stable.
*policycoreutils-1.34.1 (15 Feb 2007)
15 Feb 2007; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.34.1.ebuild:
New upstream release.
24 Oct 2006; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.30.30.ebuild:
Fix glibc handling.
09 Oct 2006; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.30.30.ebuild:
Stable to make repoman happy.
*policycoreutils-1.30.30 (05 Oct 2006)
05 Oct 2006; Chris PeBenito <pebenito@gentoo.org>
+files/policycoreutils-1.32-quietlp.diff, +policycoreutils-1.30.30.ebuild:
Add SVN snapshot and updated extras in preparation for reference policy.
31 Jul 2006; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.30-r1.ebuild:
Mark stable, long overdue.
*policycoreutils-1.30-r1 (28 Mar 2006)
28 Mar 2006; Chris PeBenito <pebenito@gentoo.org>
-policycoreutils-1.30.ebuild, +policycoreutils-1.30-r1.ebuild:
Fix install location of python site packages.
22 Feb 2006; Stephen Bennett <spb@gentoo.org> policycoreutils-1.28.ebuild:
Alpha stable
19 Feb 2006; Joshua Kinard <kumba@gentoo.org> policycoreutils-1.28.ebuild:
Marked stable on mips.
*policycoreutils-1.30 (18 Mar 2006)
18 Mar 2006; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.30.ebuild:
New upstream release.
05 Feb 2006; Chris PeBenito <pebenito@gentoo.org>
+files/policycoreutils-unsigned-char-ppc.diff,
policycoreutils-1.28.ebuild:
Add patch to fix #121689.
17 Jan 2006; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.28.ebuild:
Mark stable, x86, amd64, ppc, sparc.
14 Jan 2006; Stephen Bennett <spb@gentoo.org> policycoreutils-1.28.ebuild:
Added ~alpha
15 Dec 2005; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.22.ebuild, policycoreutils-1.24-r2.ebuild,
policycoreutils-1.28.ebuild:
Tighten up versioning to try to prevent mismatch problems as seen in #112348.
*policycoreutils-1.28 (09 Dec 2005)
09 Dec 2005; Chris PeBenito <pebenito@gentoo.org>
+files/policycoreutils-1.28-quietlp.diff, -policycoreutils-1.24-r1.ebuild,
+policycoreutils-1.28.ebuild:
New upstream release.
*policycoreutils-1.24-r2 (08 Dec 2005)
08 Dec 2005; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.24-r2.ebuild:
Add compatability symlink for genhomedircon.
*policycoreutils-1.24-r1 (09 Sep 2005)
09 Sep 2005; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.24-r1.ebuild:
Update for fixed selinuxconfig source policy path.
11 Jul 2005; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.22.ebuild, policycoreutils-1.24.ebuild:
Fix RDEPEND for building stages. Libsepol is required now.
*policycoreutils-1.24 (25 Jun 2005)
25 Jun 2005; Chris PeBenito <pebenito@gentoo.org>
+files/policycoreutils-1.24-genhomedircon-quiet.diff,
-policycoreutils-1.20-r1.ebuild, +policycoreutils-1.24.ebuild:
New upstream release.
10 May 2005; Stephen Bennett <spb@gentoo.org> policycoreutils-1.22.ebuild:
mips stable
01 May 2005; Stephen Bennett <spb@gentoo.org> policycoreutils-1.22.ebuild:
Added ~mips.
01 May 2005; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.22.ebuild:
Mark stable.
*policycoreutils-1.22 (13 Mar 2005)
13 Mar 2005; Chris PeBenito <pebenito@gentoo.org>
+files/policycoreutils-1.22-genhomedircon-quiet.diff,
+policycoreutils-1.22.ebuild:
New upstream release.
*policycoreutils-1.20-r1 (13 Feb 2005)
13 Feb 2005; Chris PeBenito <pebenito@gentoo.org>
-policycoreutils-1.16.ebuild, +policycoreutils-1.20-r1.ebuild,
-policycoreutils-1.20.ebuild:
Add back some tools deleted from upstream libselinux.
*policycoreutils-1.20 (07 Jan 2005)
07 Jan 2005; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.18-r1.ebuild, +policycoreutils-1.20.ebuild:
New upstream release. Mark 1.18-r1 stable.
*policycoreutils-1.18-r1 (03 Jan 2005)
03 Jan 2005; Chris PeBenito <pebenito@gentoo.org>
+files/policycoreutils-nonls.diff, +policycoreutils-1.18-r1.ebuild:
Make pam and nls optional for embedded systems use.
22 Nov 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.18.ebuild:
Ensure a few dirs and perms during stage1 build.
15 Nov 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.18.ebuild:
Fix libsepol dep.
*policycoreutils-1.18 (14 Nov 2004)
14 Nov 2004; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.18.ebuild:
New upstream release.
*policycoreutils-1.16 (07 Sep 2004)
07 Sep 2004; Chris PeBenito <pebenito@gentoo.org>
+files/policycoreutils-1.16-genhomedircon-compat.diff,
+policycoreutils-1.16.ebuild:
New upstream release.
08 Aug 2004; Tom Martin <slarti@gentoo.org> policycoreutils-1.12-r1.ebuild,
policycoreutils-1.12-r2.ebuild, policycoreutils-1.14.ebuild,
policycoreutils-1.4-r1.ebuild:
Typo in DESCRIPTION: utilites -> utilities. Bug 59717.
06 Jul 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.14.ebuild:
Bump extras to fix free() bug in runscript_selinux.so.
*policycoreutils-1.12-r2 (06 Jul 2004)
06 Jul 2004; Chris PeBenito <pebenito@gentoo.org>
+files/runscript-selinux.diff, +policycoreutils-1.12-r2.ebuild:
Fix free() error in runscript_selinux.so.
03 Jul 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.14.ebuild:
Update extras.
*policycoreutils-1.14 (02 Jul 2004)
02 Jul 2004; Chris PeBenito <pebenito@gentoo.org>
+files/policycoreutils-1.14-genhomedircon-compat.diff,
+policycoreutils-1.14.ebuild:
New upstream version.
*policycoreutils-1.12-r1 (28 Jun 2004)
28 Jun 2004; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.12-r1.ebuild:
Add toggle_bool to extras.
11 Jun 2004; Chris PeBenito <pebenito@gentoo.org>
-policycoreutils-1.10-r1.ebuild, policycoreutils-1.12.ebuild:
Mark stable
*policycoreutils-1.12 (14 May 2004)
14 May 2004; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.12.ebuild:
New upstream release.
*policycoreutils-1.10-r1 (28 Apr 2004)
28 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
+policycoreutils-1.10-r1.ebuild, -policycoreutils-1.10.ebuild,
-policycoreutils-1.8.ebuild:
Update extras and mark stable.
*policycoreutils-1.10 (20 Apr 2004)
08 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.4-r1.ebuild, policycoreutils-1.8.ebuild:
More specific versioning for libselinux.
08 Apr 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.8.ebuild:
Mark stable for 2004.1
15 Mar 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.8.ebuild:
Update extras.
*policycoreutils-1.8 (12 Mar 2004)
12 Mar 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.8.ebuild:
New upstream release.
*policycoreutils-1.6 (24 Feb 2004)
24 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.4-r1.ebuild, policycoreutils-1.6.ebuild:
New upstream release. Mark 1.4-r1 stable.
*policycoreutils-1.4-r1 (09 Feb 2004)
09 Feb 2004; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.4-r1.ebuild:
Move extras to mirrors, and add runscript_selinux.so.
31 Jan 2004; Chris PeBenito <pebenito@gentoo.org> files/rlpkg:
Switch to portageq from inline python. Add missing quotes for completeness.
16 Dec 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.4.ebuild:
Mark stable.
*policycoreutils-1.4 (06 Dec 2003)
06 Dec 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.4.ebuild:
New upstream version.
*policycoreutils-1.2-r2 (23 Nov 2003)
23 Nov 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.2-r2.ebuild:
Bump to add /sbin/seinit.
29 Oct 2003; Joshua Brindle <method@gentoo.org>
policycoreutils-1.2-r1.ebuild:
added sparc
*policycoreutils-1.2-r1 (20 Oct 2003)
20 Oct 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.2-r1.ebuild:
Remove unneeded -lattr linking from Makefiles.
07 Oct 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.2.ebuild:
Mark stable.
*policycoreutils-1.2 (03 Oct 2003)
03 Oct 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.2.ebuild, files/policycoreutils-1.2-gentoo.diff:
New upstream version.
29 Sep 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.1-r1.ebuild:
Add build USE flag; when asserted, only setfiles is built and merged.
22 Sep 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.1-r1.ebuild:
Move selinux-base-policy RDEPEND to checkpolicy. No longer RDEPEND on
checkpolicy.
22 Sep 2003; <paul@gentoo.org> metadata.xml:
Fix metadata.xml
24 Aug 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.1-r1.ebuild, policycoreutils-1.1.ebuild:
Mark stable
*policycoreutils-1.1-r1 (18 Aug 2003)
18 Aug 2003; Chris PeBenito <pebenito@gentoo.org> metadata.xml,
policycoreutils-1.0.ebuild, policycoreutils-1.1-r1.ebuild,
files/avc_enforcing, files/avc_toggle,
files/policycoreutils-1.1-setfiles.diff:
Add setfiles patch for alternate root. Add avc_enforcing and avc_toggle
scripts for ease of use for old API users. Use package description from RPM
spec file in metadata.xml long description.
*policycoreutils-1.1 (14 Aug 2003)
14 Aug 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.1.ebuild:
New upstream version
10 Aug 2003; Chris PeBenito <pebenito@gentoo.org>
policycoreutils-1.0.ebuild, files/rlpkg:
Add mkinitrd RDEP, add rlpkg.
*policycoreutils-1.0 (03 Aug 2003)
03 Aug 2003; Chris PeBenito <pebenito@gentoo.org> metadata.xml,
policycoreutils-1.0.ebuild, files/policycoreutils-1.0-gentoo.diff:
Initial commit

43
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/Manifest vendored Normal file
View File

@ -0,0 +1,43 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
AUX 0001-policycoreutils-pp-add-roletype-statements-for-both-.patch 2157 SHA256 799b93fde622a168e0c7b1a0a1ec1a0a65873379e1245ec42859c00a06ca1372 SHA512 fb96bcf8bf045092be98dfce3c2d010984428f2a302e53c72af236eb1466465a27c6fba00e0912cafb28159e3d233fd82220c2456a2b8df36ba2d1286b9752fa WHIRLPOOL e1a829e0710e045c7a7ba622f4c79e8ff9d59c370b838e45ccca95416845d92a6d690cd65be2c99aa020ec7a6db2692988db7b5d72823d42f977124b35abcb17
AUX 0010-remove-sesandbox-support.patch 747 SHA256 af6969721dede49f4de4e1db8e98e8400a8f0e3ec0b55aee9295aea0d6ba3b9a SHA512 b7b54191d2b8703393dd23a7fcccbdc3e2b7234acd962e994c8549eebae6cae3b6f62055b47a2d5db94510739abfb2fa365090c452422b6fbc02ad625ebe4859 WHIRLPOOL 1ed396c3346123af9fc8a5e911a6c241e2b64d7424b2d5194b0cc7c6b44a960c70afde3d04a508ecf525af038a52c739bc424230db34fcb52096304b2cda2771
AUX 0020-disable-autodetection-of-pam-and-audit.patch 3924 SHA256 5f322dcc8c24838ec30c1df3aa69876063989fd07389c60ef64802c6fe25e91e SHA512 0efcbe36fdaa369cb1837767e872189f9f18b58d738b38c304ef31c568e60d602cfb5f87328a3b1f209840e2ab102f2d0ee8c4e918b2866c0ca978f33252ad33 WHIRLPOOL 669a451f98f39607e6a5a235e67ab432e480327dfe8204c2fcbb7455f571da4a64e91d76926c34e7fc25cec393ed6fbabb33e46c00e4f7a30848f304ed96b61f
AUX 0030-make-inotify-check-use-flag-triggered.patch 650 SHA256 1cf0d985c865d9afe134e598c50b40420e4a48f4fde6e5d1916a880b8c393a75 SHA512 9ae10652ae14abd8930690363d41d9cacf0d0003ff21cf75dfc52a4ab7a4ab3d1fa9f1dc6994de9ae874483297478d79ee071dae766dfabf07ba70092bd11ba4 WHIRLPOOL ebf776adb8115db80418313ee8ad80f8d03b71358b1aa790ac690cd81b3646f0818da6bbf5d2f570c4be4150e6a2b475ff848622239f65e1479f29c9eb6a44f1
AUX 0040-reverse-access-check-in-run_init.patch 500 SHA256 5e1bb9b3124efee30502992cb16720f44d8abd3eeacaa8b70cea5cfa116dc9dc SHA512 2935f303a84f5a18d58eb98bab2101772d6b787a2fe8299cbba1deb0dacc313ae04c60bb731fae255e24c52b5923aa861925c31be8898aa37d2d7687a7725040 WHIRLPOOL 3022f8703ea851c2b90e93965dce0669a2d3b33ef61ee09ed9aed775f07858c6b5474b8e0f0e6186609af4e05234c042aa376ea242b4245a95a1cd08ba19cbd3
AUX 0070-remove-symlink-attempt-fails-with-gentoo-sandbox-approach.patch 519 SHA256 63d4952efdf1fa8510485900e17f3bcb356086dda9440e3f4dd9fbcad83ec027 SHA512 c49b440ca07003688e115ea792188f37e5456d8afde0ee3be7a49af8c51ca7089e85e64ad237fbdc3c34685a58022f695f00fe443face1052f8181829678a256 WHIRLPOOL 1a246957e0aebf5129117644eb202a123ae8e43cca19b961796cc3940253e92c479819911a681d2434f794693115843cf351f04f9610e46171bef7048b59a8d1
AUX 0110-build-mcstrans-bug-472912.patch 2509 SHA256 c89ee8947ba7d04c7df30eef7fee91233188da90718c05a93c07112eb272dd8d SHA512 97a6c17e8232dc62dd5beaf101efa1e0462eedfb9fb4eff93d96171bbd866bd12b19ada1c512eef20ba732813e6f009276debbe5385ece373dd3bad1b7e61765 WHIRLPOOL fdb2509aab5e98ed11a942457711132e5888a25c0426bde59a84fb8bd8dc3f065f0e6daba77730e94a114c1e1431a1cee17a6ccf305946a5abed328f027c0bd1
AUX 0120-build-failure-for-mcscolor-for-CONTEXT__CONTAINS.patch 483 SHA256 572d141797d2a164b50b081fd6167f3acd93f62cc878c8859f731580243deb7d SHA512 a8a81158924aa527038696a98503144e50ed941ba1afbf52d26fc5bb9373c7ac6fd3f864070ff717c5b45ddba0470bc43b142f02da134559af8896c15084234f WHIRLPOOL 17836a74dcd4ce605891f6bd1eeeca61d6ed1534d3f6d3e1c65d1ddd7096460cbf75eac868d2c7ef112c85f745c2b1af7ca2abf02644351c3ebbfbbffc90a99b
DIST patchbundle-policycoreutils-2.2.5-gentoo-r1.tar.gz 7287 SHA256 cb6915c46a5e6789f95ac254d34b1d890055b31ded61596ffb5bf925aa8c446a SHA512 be6eeaf4927d80f2c198ecc4fbe88a3e960380a0de532155eff3a12157df0615e7b3ffbc09e984df08fb32ce5b62f75147559a093b620a98d9ff836ad07b18b0 WHIRLPOOL de7e0348abc45713ede926d79f26bb8590c41db6f984ff8f29a01b933f6e3c38531682f10a0d7de73f8b26994ac9a476bd9d54fc36fb45689f7ad9eca5206f09
DIST patchbundle-policycoreutils-3.tar.gz 7294 SHA256 44db261c87f583a7620690fc5041d8a21b1c935e741fe7b594aa2cc958e3deb7 SHA512 24e4c73e97441a1042618f6a4179d71672c81f821ffc2f97a54116bf6b33a93bd7f3e2030dbdb362da5e2a7d8936604e5b0283261c7b2447cc4f7594966c73bc WHIRLPOOL d38416ff9707d7d2bbf04f5d582944a87d27de06f3d70677341d38dacc6501dd78ef01fd8a7bb044d49b1f2a8c95181e2cb1b4b81dae49819409dbcf9d7abcb7
DIST policycoreutils-2.2.5.tar.gz 4948944 SHA256 bbf850a8c3c2f371f439d6525663eecdd3a737acd594d2f27f8d8f3a07830cc4 SHA512 88a32fbbede56f3e717394f134212ed9df9b06cbb5532168ccc03ef2a465f4320b54a561348ea5c319b5b641f7661565ad29fbdc5aae50190a6d21d076cf2c3f WHIRLPOOL 0eb0e0c7e1fc1514cb28bbda7a10066ad23a9ccfecc92dee606e3f0e71632e07fe1c4ba7ac89993adf15e9520fc9e527e16d623d56b4e96cc882bf82dea4cb14
DIST policycoreutils-2.3.tar.gz 4984980 SHA256 864cfaee58b5d2f15b140c354e59666e57143293c89f2b2e85bc0d0e4beefcd2 SHA512 3256849d13856ec47ac85470632a57e26952c5dafffb51df4eb8e32467196ff3ef725cc582798727fe45fd6284c1893d12eae2c89088ae1758ad39faec385659 WHIRLPOOL 1dd9bfd67ebb744b8c47144966f09d8361e9018e8d941355080c274b9ac891c18eb95771f3dc8b136683224bc5f12f3fb58fa00666b5815d65e7141c31d9293d
DIST policycoreutils-2.4.tar.gz 5004280 SHA256 b819f876f12473783ccce9f63b9a79cd77177477cd6d46818441f808cc4c3479 SHA512 0eb0ea569c1699ed78e5e9798d9f182b3a8bfa6dcd387bcc78923755b3a1cad982673db88857745154d3769d44402b87e52d5fe3024874001f61f783aa25cce6 WHIRLPOOL d101080973ef6248617b5bca9d8b76e59008061b3411aec4ed95343af09b941a34acb3bb0001da5468595c4c37684ab6f34204e18ccb3cbbd5b3d31df0cb5e7f
DIST policycoreutils-extra-1.31.tar.bz2 16080 SHA256 ad0a78d96fd01aa51fe774e1701bd23934cd72182b2bad68112006f0ea17cc7b SHA512 520f93f1a2ce3c60a1d192b09cb9a968d207fbc6ab1f01861be95a50b65264f706335620ccbca48ce38f81581a4cf5128e5db9e5b0564460c9f05f04038abfba WHIRLPOOL 56e713b9bd8f1af1496f383f45f1ef8d373b3f45148237bfd28c016f4becaa87d932b363d165b46c657ea3a08503e7bc60b1c5a5a2a814a659770bedf33d4202
DIST policycoreutils-extra-1.33.tar.bz2 16191 SHA256 743c3930277102f5545907314b21e98955e88be7972e30264c6cb5dca370b788 SHA512 3f6f19ae33d5b1043f2979fb3e79bc061767f7051cbd0981e5c5663b4391fa29544b2184b384c9fce7b4100623bc776748d77a01865dcee78b0756d73ee10886 WHIRLPOOL e74b9c3a6dff563b81bf3ce85119fbdfc658191ac063763f2916a7dcd90584f98cbccd1d6cd5ef3aecb00366a82c949c62ab9b907cb98800cb53d3e9ab63b492
EBUILD policycoreutils-2.2.5-r4.ebuild 4708 SHA256 2287c153ef9ce72a15e1fb0d681942c79c26393dfa00436b414389334606b5e4 SHA512 d69a0cd51e9e995f59535e6e72a3e62d4a5e3f75aeb8a98f9e6dd6ce7f02b4ca19d479395bcfccdeba7b932c484bc90308a3f563d621c0f3f626c4aa5b927c5a WHIRLPOOL c34a44c55bc221274f3f19e8f72fbf1d649b16978d6d080ff66ba47185b0bc7e069431a818ebce1fd23ef590f656fa23e86ebef42bca870050ff2a792bf20072
EBUILD policycoreutils-2.3-r3.ebuild 4388 SHA256 2b87e99e95421c093aed5fca66c6506261ded68dccc11d309f7e106947664093 SHA512 b00da0cb9bae1f3aa4149b178bf904a90133b7aa7985635c342cb0f5a9e135b3ebb82e14cfdc224684820c1d4085cb8532023793440eaa5e1df8f3f130887b35 WHIRLPOOL 3c8fb7ed0c0ca20985b2f6556a95e623cd04bf83c53822cacfd7702bab50ac55f025ddb15d20799292f4dfdeee702112abf80e269b5493eac128eb9f2df3dfa7
EBUILD policycoreutils-2.4.ebuild 4495 SHA256 f58265fbd9bd64bba47eef2ef7f65d6a7a62c1fea0b6754f6a48bb879156dc36 SHA512 43a099ac242de40c42132f697e248da84cde5c38ca64be38c4cb8729153a8921597a082d095a6d312b0e6422b6345099460039798c0f626533141e1bf841138b WHIRLPOOL 8d5757ae72043247b9501510bb561d6f8ae516ae54ee97a9b3e9ad68f61626cef9463b73a278d043b472988f7499baf26ef16e3619f7a7efb0e1c9264125f74d
EBUILD policycoreutils-9999.ebuild 5262 SHA256 0bf3f18e901197cfecd321bee41a7eff1e041a657a4e1824d3678728e11d1117 SHA512 e00c2cc009bfd413267723f08e265ef3f5746591d639f5273a4d50ffc601cd60f7db63aa54803bcc536cb543ccc4a78033bdd044ad0ae15d72191603de923189 WHIRLPOOL 218f9ee27401591352d69daf1d3a7ccaa596fc2c5ebd32842fcea33d96f15e90de0ce81346bbb671d9b8f9222f91dbad17a9535af35e06d5f453e2323ebaf4db
MISC ChangeLog 26573 SHA256 ed7d9b9bc3fd89f29cb06c58cd1274191dd2e530a3b8dd83cb2da259d09d1824 SHA512 5e326782bd849516aa8afeed38c0bb9ec52049fc15dda4ab45d5ea84a54f576bf998b02bbe5f73b8c26c26eb388c064dc1e81fa2208f5989b4203ab4cf7adb6b WHIRLPOOL 8b57bc4114ca783c3bd492bfae5875124fd07c4225e64b5ccd7974d0c6e1e576e88bbbd8dde9ae5c0fb0a8aa7850124074c6bc634da87c0d05678c145be2ef00
MISC metadata.xml 1031 SHA256 06b7505520a24771b371e3e969ec42a0d0235618c091f82d3c41fbcd313246ea SHA512 61c998ee18c95ff4b69b6c6d8b3b255801d8e15da326b5f0800adc76e0c264965303e0af56dc10b31ed484baa7b1f2d425f02e0454912480ad0ed6e3cc80ffed WHIRLPOOL d25970c2f991f0c6022a92248f749effe1d987425788353083ad8eb1d6aba29d97a6daed2115692c462cb66e8c441752466670c6b099a649b5ed177112970543
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0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=/8mn
-----END PGP SIGNATURE-----

61
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/files/0001-policycoreutils-pp-add-roletype-statements-for-both-.patch vendored Normal file
View File

@ -0,0 +1,61 @@
From 7a09af2123bc0d86787ef82fc2ff43810f1712c0 Mon Sep 17 00:00:00 2001
From: Steve Lawrence <slawrence@tresys.com>
Date: Wed, 19 Nov 2014 11:21:42 -0500
Subject: [PATCH 1/2] policycoreutils: pp: add roletype statements for both
declared and required type/typeattributes
Currently, roletype statements are only added for types when they are
declared (not required). This means that in policy like:
require {
type foo_t;
}
type bar_t;
role staff_r types foo_t, bar_t;
only bar_t is associated with staff_r. This patch moves the code that
generates roletype statements for types to outside the SCOPE_DECL check
so that roletype statements are generated for all types, regardless of
the required/declared scope. It further moves the code outside of the
type/typeattribute flavor check so that roletype statements are also
generated for typeattributes.
Reported-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Signed-off-by: Steve Lawrence <slawrence@tresys.com>
Reviewed-by: Yuli Khodorkovskiy <ykhodorkovskiy@tresys.com>
Tested-by: Jason Zaman <jason@perfinion.com>
---
policycoreutils/hll/pp/pp.c | 10 +++++-----
1 file changed, 5 insertions(+), 5 deletions(-)
diff --git a/policycoreutils/hll/pp/pp.c b/policycoreutils/hll/pp/pp.c
index b1ef27f..4b9f310 100644
--- a/policycoreutils/hll/pp/pp.c
+++ b/policycoreutils/hll/pp/pp.c
@@ -2083,6 +2083,11 @@ static int type_to_cil(int indent, struct policydb *pdb, struct avrule_block *UN
cil_println(indent, "(typeattributeset " GEN_REQUIRE_ATTR " %s)", key);
}
+ rc = roletype_role_in_ancestor_to_cil(pdb, decl_stack, key, indent);
+ if (rc != 0) {
+ goto exit;
+ }
+
switch(type->flavor) {
case TYPE_TYPE:
if (scope == SCOPE_DECL) {
@@ -2090,11 +2095,6 @@ static int type_to_cil(int indent, struct policydb *pdb, struct avrule_block *UN
// object_r is implicit in checkmodule, but not with CIL,
// create it as part of base
cil_println(indent, "(roletype " DEFAULT_OBJECT " %s)", key);
-
- rc = roletype_role_in_ancestor_to_cil(pdb, decl_stack, key, indent);
- if (rc != 0) {
- goto exit;
- }
}
if (type->flags & TYPE_FLAGS_PERMISSIVE) {
--
2.0.4

9
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/files/0010-remove-sesandbox-support.patch vendored Normal file
View File

@ -0,0 +1,9 @@
diff -uNr policycoreutils-2.4-rc2.orig/Makefile policycoreutils-2.4-rc2/Makefile
--- policycoreutils-2.4-rc2.orig/Makefile 2014-08-28 20:13:23.212622408 +0200
+++ policycoreutils-2.4-rc2/Makefile 2014-08-28 20:14:24.136624808 +0200
@@ -1,4 +1,4 @@
-SUBDIRS = sepolicy setfiles semanage load_policy newrole run_init sandbox secon audit2allow sestatus semodule_package semodule semodule_link semodule_expand semodule_deps sepolgen-ifgen setsebool scripts po man gui hll
+SUBDIRS = sepolicy setfiles semanage load_policy newrole run_init secon audit2allow sestatus semodule_package semodule semodule_link semodule_expand semodule_deps sepolgen-ifgen setsebool scripts po man gui hll
INOTIFYH = $(shell ls /usr/include/sys/inotify.h 2>/dev/null)

108
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/files/0020-disable-autodetection-of-pam-and-audit.patch vendored Normal file
View File

@ -0,0 +1,108 @@
diff -uNr policycoreutils-2.2.1.orig/newrole/Makefile policycoreutils-2.2.1/newrole/Makefile
--- policycoreutils-2.2.1.orig/newrole/Makefile 2013-11-04 21:37:27.197018032 +0100
+++ policycoreutils-2.2.1/newrole/Makefile 2013-11-04 21:37:47.602018075 +0100
@@ -4,8 +4,8 @@
MANDIR ?= $(PREFIX)/share/man
ETCDIR ?= $(DESTDIR)/etc
LOCALEDIR = /usr/share/locale
-PAMH = $(shell ls /usr/include/security/pam_appl.h 2>/dev/null)
-AUDITH = $(shell ls /usr/include/libaudit.h 2>/dev/null)
+PAMH ?= no
+AUDITH ?= no
# Enable capabilities to permit newrole to generate audit records.
# This will make newrole a setuid root program.
# The capabilities used are: CAP_AUDIT_WRITE.
@@ -24,7 +24,7 @@
EXTRA_OBJS =
override CFLAGS += -DVERSION=\"$(VERSION)\" $(LDFLAGS) -I$(PREFIX)/include -DUSE_NLS -DLOCALEDIR="\"$(LOCALEDIR)\"" -DPACKAGE="\"policycoreutils\""
LDLIBS += -lselinux -L$(PREFIX)/lib
-ifeq ($(PAMH), /usr/include/security/pam_appl.h)
+ifeq ($(PAMH), yes)
override CFLAGS += -DUSE_PAM
EXTRA_OBJS += hashtab.o
LDLIBS += -lpam -lpam_misc
@@ -32,7 +32,7 @@
override CFLAGS += -D_XOPEN_SOURCE=500
LDLIBS += -lcrypt
endif
-ifeq ($(AUDITH), /usr/include/libaudit.h)
+ifeq ($(AUDITH), yes)
override CFLAGS += -DUSE_AUDIT
LDLIBS += -laudit
endif
@@ -49,7 +49,7 @@
IS_SUID=y
endif
ifeq ($(IS_SUID),y)
- MODE := 4555
+ MODE := 0555
LDLIBS += -lcap-ng
else
MODE := 0555
@@ -66,7 +66,7 @@
test -d $(MANDIR)/man1 || install -m 755 -d $(MANDIR)/man1
install -m $(MODE) newrole $(BINDIR)
install -m 644 newrole.1 $(MANDIR)/man1/
-ifeq ($(PAMH), /usr/include/security/pam_appl.h)
+ifeq ($(PAMH), yes)
test -d $(ETCDIR)/pam.d || install -m 755 -d $(ETCDIR)/pam.d
ifeq ($(LSPP_PRIV),y)
install -m 644 newrole-lspp.pamd $(ETCDIR)/pam.d/newrole
diff -uNr policycoreutils-2.2.1.orig/run_init/Makefile policycoreutils-2.2.1/run_init/Makefile
--- policycoreutils-2.2.1.orig/run_init/Makefile 2013-11-04 21:37:27.115018032 +0100
+++ policycoreutils-2.2.1/run_init/Makefile 2013-11-04 21:37:47.603018075 +0100
@@ -5,20 +5,20 @@
MANDIR ?= $(PREFIX)/share/man
ETCDIR ?= $(DESTDIR)/etc
LOCALEDIR ?= /usr/share/locale
-PAMH = $(shell ls /usr/include/security/pam_appl.h 2>/dev/null)
-AUDITH = $(shell ls /usr/include/libaudit.h 2>/dev/null)
+PAMH ?= no
+AUDITH ?= no
CFLAGS ?= -Werror -Wall -W
override CFLAGS += -I$(PREFIX)/include -DUSE_NLS -DLOCALEDIR="\"$(LOCALEDIR)\"" -DPACKAGE="\"policycoreutils\""
LDLIBS += -lselinux -L$(PREFIX)/lib
-ifeq ($(PAMH), /usr/include/security/pam_appl.h)
+ifeq ($(PAMH), yes)
override CFLAGS += -DUSE_PAM
LDLIBS += -lpam -lpam_misc
else
override CFLAGS += -D_XOPEN_SOURCE=500
LDLIBS += -lcrypt
endif
-ifeq ($(AUDITH), /usr/include/libaudit.h)
+ifeq ($(AUDITH), yes)
override CFLAGS += -DUSE_AUDIT
LDLIBS += -laudit
endif
@@ -38,7 +38,7 @@
install -m 755 open_init_pty $(SBINDIR)
install -m 644 run_init.8 $(MANDIR)/man8/
install -m 644 open_init_pty.8 $(MANDIR)/man8/
-ifeq ($(PAMH), /usr/include/security/pam_appl.h)
+ifeq ($(PAMH), yes)
install -m 644 run_init.pamd $(ETCDIR)/pam.d/run_init
endif
diff -uNr policycoreutils-2.2.1.orig/setfiles/Makefile policycoreutils-2.2.1/setfiles/Makefile
--- policycoreutils-2.2.1.orig/setfiles/Makefile 2013-11-04 21:37:27.198018032 +0100
+++ policycoreutils-2.2.1/setfiles/Makefile 2013-11-04 21:37:47.603018075 +0100
@@ -3,7 +3,7 @@
SBINDIR ?= $(DESTDIR)/sbin
MANDIR = $(PREFIX)/share/man
LIBDIR ?= $(PREFIX)/lib
-AUDITH = $(shell ls /usr/include/libaudit.h 2>/dev/null)
+AUDITH ?= no
PROGRESS_STEP=$(shell grep "^\#define STAR_COUNT" restore.h | awk -S '{ print $$3 }')
ABORT_ON_ERRORS=$(shell grep "^\#define ABORT_ON_ERRORS" setfiles.c | awk -S '{ print $$3 }')
@@ -12,7 +12,7 @@
override CFLAGS += -I$(PREFIX)/include
LDLIBS = -lselinux -lsepol -L$(LIBDIR)
-ifeq ($(AUDITH), /usr/include/libaudit.h)
+ifeq ($(AUDITH), yes)
override CFLAGS += -DUSE_AUDIT
LDLIBS += -laudit
endif

14
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/files/0030-make-inotify-check-use-flag-triggered.patch vendored Normal file
View File

@ -0,0 +1,14 @@
diff -uNr policycoreutils-2.4-rc2.orig/Makefile policycoreutils-2.4-rc2/Makefile
--- policycoreutils-2.4-rc2.orig/Makefile 2014-08-28 20:22:45.230644554 +0200
+++ policycoreutils-2.4-rc2/Makefile 2014-08-28 20:27:08.642654934 +0200
@@ -1,8 +1,8 @@
SUBDIRS = sepolicy setfiles semanage load_policy newrole run_init secon audit2allow sestatus semodule_package semodule semodule_link semodule_expand semodule_deps sepolgen-ifgen setsebool scripts po man gui hll
-INOTIFYH = $(shell ls /usr/include/sys/inotify.h 2>/dev/null)
+INOTIFYH ?= no
-ifeq (${INOTIFYH}, /usr/include/sys/inotify.h)
+ifeq (${INOTIFYH}, yes)
SUBDIRS += restorecond
endif

12
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/files/0040-reverse-access-check-in-run_init.patch vendored Normal file
View File

@ -0,0 +1,12 @@
diff -uNr policycoreutils-2.2.1.orig/run_init/run_init.c policycoreutils-2.2.1/run_init/run_init.c
--- policycoreutils-2.2.1.orig/run_init/run_init.c 2013-11-04 21:40:27.490018417 +0100
+++ policycoreutils-2.2.1/run_init/run_init.c 2013-11-04 21:40:57.088018480 +0100
@@ -406,7 +406,7 @@
new_context);
exit(-1);
}
- if (! access("/usr/sbin/open_init_pty", X_OK)) {
+ if (access("/usr/sbin/open_init_pty", X_OK) != 0) {
if (execvp(argv[1], argv + 1)) {
perror("execvp");
exit(-1);

11
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/files/0070-remove-symlink-attempt-fails-with-gentoo-sandbox-approach.patch vendored Normal file
View File

@ -0,0 +1,11 @@
diff -uNr policycoreutils-2.2.1.orig/load_policy/Makefile policycoreutils-2.2.1/load_policy/Makefile
--- policycoreutils-2.2.1.orig/load_policy/Makefile 2013-11-04 21:41:28.289018546 +0100
+++ policycoreutils-2.2.1/load_policy/Makefile 2013-11-04 21:43:31.118018808 +0100
@@ -19,7 +19,6 @@
test -d $(MANDIR)/man8 || install -m 755 -d $(MANDIR)/man8
install -m 644 load_policy.8 $(MANDIR)/man8/
-mkdir -p $(USRSBINDIR)
- -ln -sf $(SBINDIR)/load_policy $(USRSBINDIR)/load_policy
clean:
-rm -f $(TARGETS) *.o

64
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/files/0110-build-mcstrans-bug-472912.patch vendored Normal file
View File

@ -0,0 +1,64 @@
diff -uNr policycoreutils-2.4-rc2.orig/Makefile policycoreutils-2.4-rc2/Makefile
--- policycoreutils-2.4-rc2.orig/Makefile 2014-08-28 20:31:19.563664821 +0200
+++ policycoreutils-2.4-rc2/Makefile 2014-08-28 20:32:25.900667435 +0200
@@ -1,4 +1,4 @@
-SUBDIRS = sepolicy setfiles semanage load_policy newrole run_init secon audit2allow sestatus semodule_package semodule semodule_link semodule_expand semodule_deps sepolgen-ifgen setsebool scripts po man gui hll
+SUBDIRS = sepolicy setfiles semanage load_policy newrole run_init secon audit2allow sestatus semodule_package semodule semodule_link semodule_expand semodule_deps sepolgen-ifgen setsebool scripts po man gui hll mcstrans
INOTIFYH ?= n
diff -uNr policycoreutils-2.4-rc2.orig/mcstrans/src/Makefile policycoreutils-2.4-rc2/mcstrans/src/Makefile
--- policycoreutils-2.4-rc2.orig/mcstrans/src/Makefile 2014-08-28 20:31:19.562664821 +0200
+++ policycoreutils-2.4-rc2/mcstrans/src/Makefile 2014-08-28 20:33:39.345670329 +0200
@@ -1,23 +1,10 @@
ARCH = $(shell uname -i)
-ifeq "$(ARCH)" "x86_64"
- # In case of 64 bit system, use these lines
- LIBDIR=/usr/lib64
-else
-ifeq "$(ARCH)" "i686"
- # In case of 32 bit system, use these lines
- LIBDIR=/usr/lib
-else
-ifeq "$(ARCH)" "i386"
- # In case of 32 bit system, use these lines
- LIBDIR=/usr/lib
-endif
-endif
-endif
# Installation directories.
PREFIX ?= $(DESTDIR)/usr
SBINDIR ?= $(DESTDIR)/sbin
INITDIR ?= $(DESTDIR)/etc/rc.d/init.d
SYSTEMDDIR ?= $(DESTDIR)/usr/lib/systemd
+LIBDIR ?= $(PREFIX)/lib
PROG_SRC=mcstrans.c mcscolor.c mcstransd.c mls_level.c
PROG_OBJS= $(patsubst %.c,%.o,$(PROG_SRC))
diff -uNr policycoreutils-2.4-rc2.orig/mcstrans/utils/Makefile policycoreutils-2.4-rc2/mcstrans/utils/Makefile
--- policycoreutils-2.4-rc2.orig/mcstrans/utils/Makefile 2014-08-28 20:31:19.556664821 +0200
+++ policycoreutils-2.4-rc2/mcstrans/utils/Makefile 2014-08-28 20:34:14.145671701 +0200
@@ -3,22 +3,7 @@
BINDIR ?= $(PREFIX)/sbin
ARCH = $(shell uname -i)
-ifeq "$(ARCH)" "x86_64"
- # In case of 64 bit system, use these lines
- LIBDIR=/usr/lib64
-else
-ifeq "$(ARCH)" "i686"
- # In case of 32 bit system, use these lines
- LIBDIR=/usr/lib
-else
-ifeq "$(ARCH)" "i386"
- # In case of 32 bit system, use these lines
- LIBDIR=/usr/lib
-endif
-endif
-endif
-
-
+LIBDIR ?= $(PREFIX)/lib
CFLAGS ?= -Wall
override CFLAGS += -I../src -D_GNU_SOURCE
LDLIBS += -L../src ../src/mcstrans.o ../src/mls_level.o -lselinux -lpcre $(LIBDIR)/libsepol.a

11
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/files/0120-build-failure-for-mcscolor-for-CONTEXT__CONTAINS.patch vendored Normal file
View File

@ -0,0 +1,11 @@
diff -uNr policycoreutils-2.4-rc2.orig/mcstrans/src/mcscolor.c policycoreutils-2.4-rc2/mcstrans/src/mcscolor.c
--- policycoreutils-2.4-rc2.orig/mcstrans/src/mcscolor.c 2014-08-28 21:26:25.125795076 +0200
+++ policycoreutils-2.4-rc2/mcstrans/src/mcscolor.c 2014-08-28 21:27:03.509796589 +0200
@@ -11,6 +11,7 @@
#include <syslog.h>
#include <selinux/selinux.h>
#include <selinux/context.h>
+#include <selinux/av_permissions.h>
#include "mcstrans.h"
/* Define data structures */

24
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/metadata.xml vendored Normal file
View File

@ -0,0 +1,24 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
<herd>selinux</herd>
<longdescription>
Policycoreutils contains the policy core utilities that are required
for basic operation of a SELinux system. These utilities include
load_policy to load policies, setfiles to label filesystems, newrole
to switch roles, and run_init to run /etc/init.d scripts in the proper
context.
Gentoo-specific tools include rlpkg for relabeling packages by name,
avc_toggle to toggle between enforcing and permissive modes, and
avc_enforcing to query the current mode of the system, enforcing or
permissive.
</longdescription>
<use>
<flag name="audit">Enable support for <pkg>sys-process/audit</pkg> and use the audit_* functions (like audit_getuid instead of getuid())</flag>
</use>
<upstream>
<remote-id type="cpe">cpe:/a:redhat:policycoreutils</remote-id>
<remote-id type="github">SELinuxProject/selinux</remote-id>
</upstream>
</pkgmetadata>

147
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/policycoreutils-2.4.ebuild vendored Normal file
View File

@ -0,0 +1,147 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-apps/policycoreutils/policycoreutils-2.4.ebuild,v 1.4 2015/05/10 09:08:19 perfinion Exp $
EAPI="5"
PYTHON_COMPAT=( python2_7 )
PYTHON_REQ_USE="xml"
inherit multilib python-r1 toolchain-funcs eutils
MY_P="${P//_/-}"
EXTRAS_VER="1.33"
SEMNG_VER="${PV}"
SELNX_VER="${PV}"
SEPOL_VER="${PV}"
IUSE="audit pam dbus"
DESCRIPTION="SELinux core utilities"
HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki"
SRC_URI="https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20150202/${MY_P}.tar.gz
mirror://gentoo/policycoreutils-extra-${EXTRAS_VER}.tar.bz2"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 x86"
DEPEND=">=sys-libs/libselinux-${SELNX_VER}[python]
>=sys-libs/glibc-2.4
>=sys-libs/libcap-1.10-r10
>=sys-libs/libsemanage-${SEMNG_VER}[python]
sys-libs/libcap-ng
>=sys-libs/libsepol-${SEPOL_VER}
sys-devel/gettext
dev-python/ipy[${PYTHON_USEDEP}]
dbus? (
sys-apps/dbus
dev-libs/dbus-glib
)
audit? ( >=sys-process/audit-1.5.1 )
pam? ( sys-libs/pam )
${PYTHON_DEPS}"
### libcgroup -> seunshare
### dbus -> restorecond
# pax-utils for scanelf used by rlpkg
RDEPEND="${DEPEND}
dev-python/sepolgen
app-misc/pax-utils"
S="${WORKDIR}/${MY_P}"
S1="${WORKDIR}/${MY_P}"
S2="${WORKDIR}/policycoreutils-extra"
src_prepare() {
epatch "${FILESDIR}/0010-remove-sesandbox-support.patch"
epatch "${FILESDIR}/0020-disable-autodetection-of-pam-and-audit.patch"
epatch "${FILESDIR}/0030-make-inotify-check-use-flag-triggered.patch"
epatch "${FILESDIR}/0040-reverse-access-check-in-run_init.patch"
epatch "${FILESDIR}/0070-remove-symlink-attempt-fails-with-gentoo-sandbox-approach.patch"
epatch "${FILESDIR}/0110-build-mcstrans-bug-472912.patch"
epatch "${FILESDIR}/0120-build-failure-for-mcscolor-for-CONTEXT__CONTAINS.patch"
# rlpkg is more useful than fixfiles
sed -i -e '/^all/s/fixfiles//' "${S}/scripts/Makefile" \
|| die "fixfiles sed 1 failed"
sed -i -e '/fixfiles/d' "${S}/scripts/Makefile" \
|| die "fixfiles sed 2 failed"
epatch_user
python_copy_sources
# Our extra code is outside the regular directory, so set it to the extra
# directory. We really should optimize this as it is ugly, but the extra
# code is needed for Gentoo at the same time that policycoreutils is present
# (so we cannot use an additional package for now).
S="${S2}"
python_copy_sources
}
src_compile() {
building() {
emake -C "${BUILD_DIR}" \
AUDIT_LOG_PRIVS="y" \
AUDITH="$(usex audit)" \
PAMH="$(usex pam)" \
INOTIFYH="$(usex dbus)" \
SESANDBOX="n" \
CC="$(tc-getCC)" \
PYLIBVER="${EPYTHON}" \
LIBDIR="\$(PREFIX)/$(get_libdir)"
}
S="${S1}" # Regular policycoreutils
python_foreach_impl building
S="${S2}" # Extra set
python_foreach_impl building
}
src_install() {
# Python scripts are present in many places. There are no extension modules.
installation-policycoreutils() {
einfo "Installing policycoreutils"
emake -C "${BUILD_DIR}" DESTDIR="${D}" AUDITH="$(usex audit)" PAMH="$(usex pam)" INOTIFYH="$(usex dbus)" SESANDBOX="n" AUDIT_LOG_PRIV="y" PYLIBVER="${EPYTHON}" install
python_optimize
}
installation-extras() {
einfo "Installing policycoreutils-extra"
emake -C "${BUILD_DIR}" DESTDIR="${D}" INOTIFYH="$(usex dbus)" SHLIBDIR="${D}$(get_libdir)/rc" install
python_optimize
}
S="${S1}" # policycoreutils
python_foreach_impl installation-policycoreutils
S="${S2}" # extras
python_foreach_impl installation-extras
S="${S1}" # back for later
# remove redhat-style init script
rm -fR "${D}/etc/rc.d"
# compatibility symlinks
dosym /sbin/setfiles /usr/sbin/setfiles
dosym /$(get_libdir)/rc/runscript_selinux.so /$(get_libdir)/rcscripts/runscript_selinux.so
# location for policy definitions
dodir /var/lib/selinux
keepdir /var/lib/selinux
# Set version-specific scripts
for pyscript in audit2allow sepolgen-ifgen sepolicy chcat; do
python_replicate_script "${ED}/usr/bin/${pyscript}"
done
for pyscript in semanage rlpkg; do
python_replicate_script "${ED}/usr/sbin/${pyscript}"
done
dodir /usr/share/doc/${PF}/mcstrans/examples
cp -dR "${S1}"/mcstrans/share/examples/* "${D}/usr/share/doc/${PF}/mcstrans/examples"
}
pkg_postinst() {
# The selinux_gentoo init script is no longer needed with recent OpenRC
elog "The selinux_gentoo init script will be removed in future versions since it is not needed with OpenRC 0.13."
}

181
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/policycoreutils-9999.ebuild vendored Normal file
View File

@ -0,0 +1,181 @@
# Copyright 1999-2015 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/sys-apps/policycoreutils/policycoreutils-9999.ebuild,v 1.1 2015/06/09 15:38:25 swift Exp $
EAPI="5"
PYTHON_COMPAT=( python2_7 )
PYTHON_REQ_USE="xml"
inherit multilib python-r1 toolchain-funcs eutils
MY_P="${P//_/-}"
MY_RELEASEDATE="20150202"
EXTRAS_VER="1.33"
SEMNG_VER="${PV}"
SELNX_VER="${PV}"
SEPOL_VER="${PV}"
IUSE="audit pam dbus"
DESCRIPTION="SELinux core utilities"
HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki"
if [[ ${PV} == 9999 ]] ; then
inherit git-r3
EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git"
SRC_URI="mirror://gentoo/policycoreutils-extra-${EXTRAS_VER}.tar.bz2"
S="${WORKDIR}/${MY_P}/${PN}"
S1="${WORKDIR}/${MY_P}/${PN}"
S2="${WORKDIR}/policycoreutils-extra"
else
SRC_URI="https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20150202/${MY_P}.tar.gz
mirror://gentoo/policycoreutils-extra-${EXTRAS_VER}.tar.bz2"
KEYWORDS="~amd64 ~x86"
S="${WORKDIR}/${MY_P}"
S1="${WORKDIR}/${MY_P}"
S2="${WORKDIR}/policycoreutils-extra"
fi
LICENSE="GPL-2"
SLOT="0"
DEPEND=">=sys-libs/libselinux-${SELNX_VER}[python]
>=sys-libs/glibc-2.4
>=sys-libs/libcap-1.10-r10
>=sys-libs/libsemanage-${SEMNG_VER}[python]
sys-libs/libcap-ng
>=sys-libs/libsepol-${SEPOL_VER}
sys-devel/gettext
dev-python/ipy[${PYTHON_USEDEP}]
dbus? (
sys-apps/dbus
dev-libs/dbus-glib
)
audit? ( >=sys-process/audit-1.5.1 )
pam? ( sys-libs/pam )
${PYTHON_DEPS}"
### libcgroup -> seunshare
### dbus -> restorecond
# pax-utils for scanelf used by rlpkg
RDEPEND="${DEPEND}
dev-python/sepolgen
app-misc/pax-utils"
src_unpack() {
# Override default one because we need the SRC_URI ones even in case of 9999 ebuilds
if [[ ${PV} == 9999 ]] ; then
git-r3_src_unpack
fi
if [ -n ${A} ] ; then
S="${S2}"
unpack ${A};
fi
}
src_prepare() {
S="${S1}"
cd "${S}" || die "Failed to switch to ${S}"
if [[ ${PV} != 9999 ]] ; then
# If needed for live ebuilds please use /etc/portage/patches
epatch "${FILESDIR}/0010-remove-sesandbox-support.patch"
epatch "${FILESDIR}/0020-disable-autodetection-of-pam-and-audit.patch"
epatch "${FILESDIR}/0030-make-inotify-check-use-flag-triggered.patch"
epatch "${FILESDIR}/0040-reverse-access-check-in-run_init.patch"
epatch "${FILESDIR}/0070-remove-symlink-attempt-fails-with-gentoo-sandbox-approach.patch"
epatch "${FILESDIR}/0110-build-mcstrans-bug-472912.patch"
epatch "${FILESDIR}/0120-build-failure-for-mcscolor-for-CONTEXT__CONTAINS.patch"
fi
# rlpkg is more useful than fixfiles
sed -i -e '/^all/s/fixfiles//' "${S}/scripts/Makefile" \
|| die "fixfiles sed 1 failed"
sed -i -e '/fixfiles/d' "${S}/scripts/Makefile" \
|| die "fixfiles sed 2 failed"
epatch_user
python_copy_sources
# Our extra code is outside the regular directory, so set it to the extra
# directory. We really should optimize this as it is ugly, but the extra
# code is needed for Gentoo at the same time that policycoreutils is present
# (so we cannot use an additional package for now).
S="${S2}"
python_copy_sources
}
src_compile() {
building() {
emake -C "${BUILD_DIR}" \
AUDIT_LOG_PRIVS="y" \
AUDITH="$(usex audit)" \
PAMH="$(usex pam)" \
INOTIFYH="$(usex dbus)" \
SESANDBOX="n" \
CC="$(tc-getCC)" \
PYLIBVER="${EPYTHON}" \
LIBDIR="\$(PREFIX)/$(get_libdir)"
}
S="${S1}" # Regular policycoreutils
python_foreach_impl building
S="${S2}" # Extra set
python_foreach_impl building
}
src_install() {
# Python scripts are present in many places. There are no extension modules.
installation-policycoreutils() {
einfo "Installing policycoreutils"
emake -C "${BUILD_DIR}" DESTDIR="${D}" \
AUDITH="$(usex audit)" \
PAMH="$(usex pam)" \
INOTIFYH="$(usex dbus)" \
SESANDBOX="n" \
AUDIT_LOG_PRIV="y" \
PYLIBVER="${EPYTHON}" \
LIBDIR="\$(PREFIX)/$(get_libdir)" \
install
python_optimize
}
installation-extras() {
einfo "Installing policycoreutils-extra"
emake -C "${BUILD_DIR}" DESTDIR="${D}" INOTIFYH="$(usex dbus)" SHLIBDIR="${D}$(get_libdir)/rc" install
python_optimize
}
S="${S1}" # policycoreutils
python_foreach_impl installation-policycoreutils
S="${S2}" # extras
python_foreach_impl installation-extras
S="${S1}" # back for later
# remove redhat-style init script
rm -fR "${D}/etc/rc.d"
# compatibility symlinks
dosym /sbin/setfiles /usr/sbin/setfiles
dosym /$(get_libdir)/rc/runscript_selinux.so /$(get_libdir)/rcscripts/runscript_selinux.so
# location for policy definitions
dodir /var/lib/selinux
keepdir /var/lib/selinux
# Set version-specific scripts
for pyscript in audit2allow sepolgen-ifgen sepolicy chcat; do
python_replicate_script "${ED}/usr/bin/${pyscript}"
done
for pyscript in semanage rlpkg; do
python_replicate_script "${ED}/usr/sbin/${pyscript}"
done
dodir /usr/share/doc/${PF}/mcstrans/examples
cp -dR "${S1}"/mcstrans/share/examples/* "${D}/usr/share/doc/${PF}/mcstrans/examples"
}
pkg_postinst() {
# The selinux_gentoo init script is no longer needed with recent OpenRC
elog "The selinux_gentoo init script will be removed in future versions since it is not needed with OpenRC 0.13."
}