mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-11 23:16:58 +02:00
sys-apps/policycoreutils: Sync with Gentoo
It's from Gentoo commit 47d54da8be0c5fe4ace04684111d067fe044dc84.
This commit is contained in:
Krzesimir Nowak
parent
0929562de2
commit
b5b806e94a
@ -1,2 +1,2 @@
|
|||||||
DIST policycoreutils-3.6.tar.gz 755682 BLAKE2B a8b180c8006989192d152651dcfa51856956780bfe1139cc1dc0162eb66ba1eef4f7d64f68a48479572b02e2e97a68c7082722a745d22a9453e8378373319e3c SHA512 e1f32e6e0310b879a5aadab157b103314a61bf3b8fd59c1212d701fbf39900e3b9a0b727338988103d784a7e505355a871ba519dd91520b135a3b9dae40bf1b0
|
DIST policycoreutils-3.7.tar.gz 757142 BLAKE2B 95794d48ef80882803199af5330f0ac4f1cee6710562a559e3d8fd94475d117286f8b612ffc5dc9027f4f8f4cd55e82ddb4d328e91d6c9846b18460c9bee159b SHA512 30e3413b15df0bf1a994d2b3a03a719f89b3ee521a708b92fcc684822152145722cb3ef28fd5b7c42b779281b0bd4d69d65c0bc2605eec1af3f388609d985500
|
||||||
DIST policycoreutils-extra-1.37.tar.bz2 8809 BLAKE2B a7f6122c2e27f54b018174e962bd7f4c14af04e09bbb5300bde6967ea7f2dc5cd03b5787919a4e7f5288bcbc6747922962b5bd3b588ab1e3a035fbff4910d8f5 SHA512 0a85cd7cf279256b5e1927f9dfdd89626a1c8b77b0aeb62b496e7e8d1dccbaa315e39f9308fb2df7270f0bc1c10787b19990e7365cad74b47b61e30394c8b23f
|
DIST policycoreutils-extra-1.37.tar.bz2 8809 BLAKE2B a7f6122c2e27f54b018174e962bd7f4c14af04e09bbb5300bde6967ea7f2dc5cd03b5787919a4e7f5288bcbc6747922962b5bd3b588ab1e3a035fbff4910d8f5 SHA512 0a85cd7cf279256b5e1927f9dfdd89626a1c8b77b0aeb62b496e7e8d1dccbaa315e39f9308fb2df7270f0bc1c10787b19990e7365cad74b47b61e30394c8b23f
|
||||||
|
|||||||
@ -1,210 +0,0 @@
|
|||||||
# Copyright 1999-2024 Gentoo Authors
|
|
||||||
# Distributed under the terms of the GNU General Public License v2
|
|
||||||
|
|
||||||
EAPI="7"
|
|
||||||
PYTHON_COMPAT=( python3_{10..11} )
|
|
||||||
PYTHON_REQ_USE="xml(+)"
|
|
||||||
|
|
||||||
inherit python-r1 toolchain-funcs bash-completion-r1
|
|
||||||
|
|
||||||
MY_PV="${PV//_/-}"
|
|
||||||
MY_P="${PN}-${MY_PV}"
|
|
||||||
EXTRAS_VER="1.37"
|
|
||||||
|
|
||||||
DESCRIPTION="SELinux core utilities"
|
|
||||||
HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki"
|
|
||||||
|
|
||||||
if [[ ${PV} == 9999 ]]; then
|
|
||||||
inherit git-r3
|
|
||||||
EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git"
|
|
||||||
SRC_URI="!vanilla? ( https://dev.gentoo.org/~perfinion/distfiles/policycoreutils-extra-${EXTRAS_VER}.tar.bz2 )"
|
|
||||||
S1="${WORKDIR}/${P}/${PN}"
|
|
||||||
S2="${WORKDIR}/policycoreutils-extra"
|
|
||||||
S="${S1}"
|
|
||||||
else
|
|
||||||
SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${MY_PV}/${MY_P}.tar.gz
|
|
||||||
!vanilla? ( https://dev.gentoo.org/~perfinion/distfiles/policycoreutils-extra-${EXTRAS_VER}.tar.bz2 )"
|
|
||||||
KEYWORDS="amd64 arm arm64 ~mips x86"
|
|
||||||
S1="${WORKDIR}/${MY_P}"
|
|
||||||
S2="${WORKDIR}/policycoreutils-extra"
|
|
||||||
S="${S1}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
LICENSE="GPL-2"
|
|
||||||
SLOT="0"
|
|
||||||
IUSE="audit pam split-usr vanilla +python"
|
|
||||||
REQUIRED_USE="
|
|
||||||
!vanilla? ( python ${PYTHON_REQUIRED_USE} )
|
|
||||||
"
|
|
||||||
|
|
||||||
DEPEND="
|
|
||||||
python? (
|
|
||||||
>=sys-libs/libselinux-${PV}:=[python,${PYTHON_USEDEP}]
|
|
||||||
>=sys-libs/libsemanage-${PV}:=[python(+),${PYTHON_USEDEP}]
|
|
||||||
audit? ( >=sys-process/audit-1.5.1[python,${PYTHON_USEDEP}] )
|
|
||||||
${PYTHON_DEPS}
|
|
||||||
)
|
|
||||||
!python? (
|
|
||||||
>=sys-libs/libselinux-${PV}:=
|
|
||||||
>=sys-libs/libsemanage-${PV}:=
|
|
||||||
audit? ( >=sys-process/audit-1.5.1 )
|
|
||||||
)
|
|
||||||
>=sys-libs/libsepol-${PV}:=
|
|
||||||
sys-libs/libcap-ng:=
|
|
||||||
pam? ( sys-libs/pam:= )
|
|
||||||
!vanilla? (
|
|
||||||
>=app-admin/setools-4.2.0[${PYTHON_USEDEP}]
|
|
||||||
)
|
|
||||||
"
|
|
||||||
|
|
||||||
# Avoid dependency loop in the cross-compile case, bug #755173
|
|
||||||
# (Still exists in native)
|
|
||||||
BDEPEND="sys-devel/gettext"
|
|
||||||
|
|
||||||
# pax-utils for scanelf used by rlpkg
|
|
||||||
RDEPEND="${DEPEND}
|
|
||||||
app-misc/pax-utils"
|
|
||||||
|
|
||||||
PDEPEND="sys-apps/semodule-utils
|
|
||||||
python? ( sys-apps/selinux-python )"
|
|
||||||
|
|
||||||
src_unpack() {
|
|
||||||
# Override default one because we need the SRC_URI ones even in case of 9999 ebuilds
|
|
||||||
default
|
|
||||||
if [[ ${PV} == 9999 ]] ; then
|
|
||||||
git-r3_src_unpack
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
src_prepare() {
|
|
||||||
S="${S1}"
|
|
||||||
cd "${S}" || die "Failed to switch to ${S}"
|
|
||||||
if [[ ${PV} != 9999 ]] ; then
|
|
||||||
# If needed for live ebuilds please use /etc/portage/patches
|
|
||||||
eapply "${FILESDIR}/policycoreutils-3.1-0001-newrole-not-suid.patch"
|
|
||||||
fi
|
|
||||||
|
|
||||||
if ! use vanilla; then
|
|
||||||
# rlpkg is more useful than fixfiles
|
|
||||||
sed -i -e '/^all/s/fixfiles//' "${S}/scripts/Makefile" \
|
|
||||||
|| die "fixfiles sed 1 failed"
|
|
||||||
sed -i -e '/fixfiles/d' "${S}/scripts/Makefile" \
|
|
||||||
|| die "fixfiles sed 2 failed"
|
|
||||||
fi
|
|
||||||
|
|
||||||
eapply_user
|
|
||||||
|
|
||||||
sed -i 's/-Werror//g' "${S1}"/*/Makefile || die "Failed to remove Werror"
|
|
||||||
|
|
||||||
if ! use vanilla; then
|
|
||||||
python_copy_sources
|
|
||||||
# Our extra code is outside the regular directory, so set it to the extra
|
|
||||||
# directory. We really should optimize this as it is ugly, but the extra
|
|
||||||
# code is needed for Gentoo at the same time that policycoreutils is present
|
|
||||||
# (so we cannot use an additional package for now).
|
|
||||||
S="${S2}"
|
|
||||||
python_copy_sources
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
src_compile() {
|
|
||||||
building() {
|
|
||||||
local build_dir=${1}
|
|
||||||
emake -C "${build_dir}" \
|
|
||||||
AUDIT_LOG_PRIVS="y" \
|
|
||||||
AUDITH="$(usex audit y n)" \
|
|
||||||
PAMH="$(usex pam y n)" \
|
|
||||||
SESANDBOX="n" \
|
|
||||||
CC="$(tc-getCC)" \
|
|
||||||
LIBDIR="\$(PREFIX)/$(get_libdir)"
|
|
||||||
}
|
|
||||||
if ! use vanilla; then
|
|
||||||
building_with_python() {
|
|
||||||
building "${BUILD_DIR}"
|
|
||||||
}
|
|
||||||
S="${S1}" # Regular policycoreutils
|
|
||||||
python_foreach_impl building_with_python
|
|
||||||
S="${S2}" # Extra set
|
|
||||||
python_foreach_impl building_with_python
|
|
||||||
unset -f building_with_python
|
|
||||||
else
|
|
||||||
S="${S1}" # Regular policycoreutils
|
|
||||||
building "${S}"
|
|
||||||
fi
|
|
||||||
unset -f building
|
|
||||||
}
|
|
||||||
|
|
||||||
src_install() {
|
|
||||||
installation-policycoreutils-base() {
|
|
||||||
local build_dir=${1}
|
|
||||||
einfo "Installing policycoreutils"
|
|
||||||
emake -C "${build_dir}" DESTDIR="${D}" \
|
|
||||||
AUDIT_LOG_PRIVS="y" \
|
|
||||||
AUDITH="$(usex audit y n)" \
|
|
||||||
PAMH="$(usex pam y n)" \
|
|
||||||
SESANDBOX="n" \
|
|
||||||
CC="$(tc-getCC)" \
|
|
||||||
LIBDIR="\$(PREFIX)/$(get_libdir)" \
|
|
||||||
install
|
|
||||||
}
|
|
||||||
|
|
||||||
if ! use vanilla; then
|
|
||||||
# Python scripts are present in many places. There are no extension modules.
|
|
||||||
installation-policycoreutils() {
|
|
||||||
installation-policycoreutils-base "${BUILD_DIR}"
|
|
||||||
python_optimize
|
|
||||||
}
|
|
||||||
|
|
||||||
installation-extras() {
|
|
||||||
einfo "Installing policycoreutils-extra"
|
|
||||||
emake -C "${BUILD_DIR}" \
|
|
||||||
DESTDIR="${D}" \
|
|
||||||
install
|
|
||||||
python_optimize
|
|
||||||
}
|
|
||||||
|
|
||||||
S="${S1}" # policycoreutils
|
|
||||||
python_foreach_impl installation-policycoreutils
|
|
||||||
S="${S2}" # extras
|
|
||||||
python_foreach_impl installation-extras
|
|
||||||
S="${S1}" # back for later
|
|
||||||
unset -f installation-extras installation-policycoreutils
|
|
||||||
else
|
|
||||||
S="${S1}" # policycoreutils
|
|
||||||
installation-policycoreutils-base "${S}"
|
|
||||||
fi
|
|
||||||
unset -f installation-policycoreutils-base
|
|
||||||
|
|
||||||
# remove redhat-style init script
|
|
||||||
rm -fR "${D}/etc/rc.d" || die
|
|
||||||
|
|
||||||
# compatibility symlinks
|
|
||||||
if use split-usr; then
|
|
||||||
dosym ../../sbin/setfiles /usr/sbin/setfiles
|
|
||||||
else
|
|
||||||
# remove sestatus symlink
|
|
||||||
rm -f "${D}"/usr/sbin/sestatus || die
|
|
||||||
fi
|
|
||||||
|
|
||||||
bashcomp_alias setsebool getsebool
|
|
||||||
|
|
||||||
# location for policy definitions
|
|
||||||
dodir /var/lib/selinux
|
|
||||||
keepdir /var/lib/selinux
|
|
||||||
|
|
||||||
if ! use vanilla; then
|
|
||||||
# Set version-specific scripts
|
|
||||||
for pyscript in rlpkg; do
|
|
||||||
python_replicate_script "${ED}/usr/sbin/${pyscript}"
|
|
||||||
done
|
|
||||||
fi
|
|
||||||
}
|
|
||||||
|
|
||||||
pkg_postinst() {
|
|
||||||
for POLICY_TYPE in ${POLICY_TYPES} ; do
|
|
||||||
# There have been some changes to the policy store, rebuilding now.
|
|
||||||
# https://marc.info/?l=selinux&m=143757277819717&w=2
|
|
||||||
einfo "Rebuilding store ${POLICY_TYPE} in '${ROOT:-/}' (without re-loading)."
|
|
||||||
semodule -p "${ROOT:-/}" -s "${POLICY_TYPE}" -n -B || die "Failed to rebuild policy store ${POLICY_TYPE}"
|
|
||||||
done
|
|
||||||
}
|
|
||||||
168
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/policycoreutils-3.7.ebuild
vendored
Normal file
168
sdk_container/src/third_party/coreos-overlay/sys-apps/policycoreutils/policycoreutils-3.7.ebuild
vendored
Normal file
@ -0,0 +1,168 @@
|
|||||||
|
# Copyright 1999-2025 Gentoo Authors
|
||||||
|
# Distributed under the terms of the GNU General Public License v2
|
||||||
|
|
||||||
|
EAPI="8"
|
||||||
|
PYTHON_COMPAT=( python3_{10..12} )
|
||||||
|
PYTHON_REQ_USE="xml(+)"
|
||||||
|
|
||||||
|
inherit python-r1 toolchain-funcs bash-completion-r1
|
||||||
|
|
||||||
|
MY_PV="${PV//_/-}"
|
||||||
|
MY_P="${PN}-${MY_PV}"
|
||||||
|
EXTRAS_VER="1.37"
|
||||||
|
|
||||||
|
DESCRIPTION="SELinux core utilities"
|
||||||
|
HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki"
|
||||||
|
|
||||||
|
if [[ ${PV} == 9999 ]]; then
|
||||||
|
inherit git-r3
|
||||||
|
EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git"
|
||||||
|
SRC_URI="https://dev.gentoo.org/~perfinion/distfiles/policycoreutils-extra-${EXTRAS_VER}.tar.bz2"
|
||||||
|
S1="${WORKDIR}/${P}/${PN}"
|
||||||
|
S2="${WORKDIR}/policycoreutils-extra"
|
||||||
|
S="${S1}"
|
||||||
|
else
|
||||||
|
SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${MY_PV}/${MY_P}.tar.gz
|
||||||
|
https://dev.gentoo.org/~perfinion/distfiles/policycoreutils-extra-${EXTRAS_VER}.tar.bz2"
|
||||||
|
KEYWORDS="amd64 ~arm ~arm64 ~riscv x86"
|
||||||
|
S1="${WORKDIR}/${MY_P}"
|
||||||
|
S2="${WORKDIR}/policycoreutils-extra"
|
||||||
|
S="${S1}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
LICENSE="GPL-2"
|
||||||
|
SLOT="0"
|
||||||
|
IUSE="audit pam split-usr"
|
||||||
|
REQUIRED_USE="${PYTHON_REQUIRED_USE}"
|
||||||
|
|
||||||
|
DEPEND=">=sys-libs/libselinux-${PV}:=[python,${PYTHON_USEDEP}]
|
||||||
|
>=sys-libs/libsemanage-${PV}:=[python(+),${PYTHON_USEDEP}]
|
||||||
|
>=sys-libs/libsepol-${PV}:=
|
||||||
|
sys-libs/libcap-ng:=
|
||||||
|
>=app-admin/setools-4.2.0[${PYTHON_USEDEP}]
|
||||||
|
audit? ( >=sys-process/audit-1.5.1[python,${PYTHON_USEDEP}] )
|
||||||
|
pam? ( sys-libs/pam:= )
|
||||||
|
${PYTHON_DEPS}"
|
||||||
|
|
||||||
|
# Avoid dependency loop in the cross-compile case, bug #755173
|
||||||
|
# (Still exists in native)
|
||||||
|
BDEPEND="sys-devel/gettext"
|
||||||
|
|
||||||
|
# pax-utils for scanelf used by rlpkg
|
||||||
|
RDEPEND="${DEPEND}
|
||||||
|
app-misc/pax-utils"
|
||||||
|
|
||||||
|
PDEPEND="sys-apps/semodule-utils
|
||||||
|
sys-apps/selinux-python"
|
||||||
|
|
||||||
|
src_unpack() {
|
||||||
|
# Override default one because we need the SRC_URI ones even in case of 9999 ebuilds
|
||||||
|
default
|
||||||
|
if [[ ${PV} == 9999 ]] ; then
|
||||||
|
git-r3_src_unpack
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
src_prepare() {
|
||||||
|
S="${S1}"
|
||||||
|
cd "${S}" || die "Failed to switch to ${S}"
|
||||||
|
if [[ ${PV} != 9999 ]] ; then
|
||||||
|
# If needed for live ebuilds please use /etc/portage/patches
|
||||||
|
eapply "${FILESDIR}/policycoreutils-3.1-0001-newrole-not-suid.patch"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# rlpkg is more useful than fixfiles
|
||||||
|
sed -i -e '/^all/s/fixfiles//' "${S}/scripts/Makefile" \
|
||||||
|
|| die "fixfiles sed 1 failed"
|
||||||
|
sed -i -e '/fixfiles/d' "${S}/scripts/Makefile" \
|
||||||
|
|| die "fixfiles sed 2 failed"
|
||||||
|
|
||||||
|
eapply_user
|
||||||
|
|
||||||
|
sed -i 's/-Werror//g' "${S1}"/*/Makefile || die "Failed to remove Werror"
|
||||||
|
|
||||||
|
python_copy_sources
|
||||||
|
# Our extra code is outside the regular directory, so set it to the extra
|
||||||
|
# directory. We really should optimize this as it is ugly, but the extra
|
||||||
|
# code is needed for Gentoo at the same time that policycoreutils is present
|
||||||
|
# (so we cannot use an additional package for now).
|
||||||
|
S="${S2}"
|
||||||
|
python_copy_sources
|
||||||
|
}
|
||||||
|
|
||||||
|
src_compile() {
|
||||||
|
building() {
|
||||||
|
emake -C "${BUILD_DIR}" \
|
||||||
|
AUDIT_LOG_PRIVS="y" \
|
||||||
|
AUDITH="$(usex audit y n)" \
|
||||||
|
PAMH="$(usex pam y n)" \
|
||||||
|
SESANDBOX="n" \
|
||||||
|
CC="$(tc-getCC)" \
|
||||||
|
LIBDIR="\$(PREFIX)/$(get_libdir)"
|
||||||
|
}
|
||||||
|
S="${S1}" # Regular policycoreutils
|
||||||
|
python_foreach_impl building
|
||||||
|
S="${S2}" # Extra set
|
||||||
|
python_foreach_impl building
|
||||||
|
}
|
||||||
|
|
||||||
|
src_install() {
|
||||||
|
# Python scripts are present in many places. There are no extension modules.
|
||||||
|
installation-policycoreutils() {
|
||||||
|
einfo "Installing policycoreutils"
|
||||||
|
emake -C "${BUILD_DIR}" DESTDIR="${D}" \
|
||||||
|
AUDIT_LOG_PRIVS="y" \
|
||||||
|
AUDITH="$(usex audit y n)" \
|
||||||
|
PAMH="$(usex pam y n)" \
|
||||||
|
SESANDBOX="n" \
|
||||||
|
CC="$(tc-getCC)" \
|
||||||
|
LIBDIR="\$(PREFIX)/$(get_libdir)" \
|
||||||
|
install
|
||||||
|
python_optimize
|
||||||
|
}
|
||||||
|
|
||||||
|
installation-extras() {
|
||||||
|
einfo "Installing policycoreutils-extra"
|
||||||
|
emake -C "${BUILD_DIR}" \
|
||||||
|
DESTDIR="${D}" \
|
||||||
|
install
|
||||||
|
python_optimize
|
||||||
|
}
|
||||||
|
|
||||||
|
S="${S1}" # policycoreutils
|
||||||
|
python_foreach_impl installation-policycoreutils
|
||||||
|
S="${S2}" # extras
|
||||||
|
python_foreach_impl installation-extras
|
||||||
|
S="${S1}" # back for later
|
||||||
|
|
||||||
|
# remove redhat-style init script
|
||||||
|
rm -fR "${D}/etc/rc.d" || die
|
||||||
|
|
||||||
|
# compatibility symlinks
|
||||||
|
if use split-usr; then
|
||||||
|
dosym ../../sbin/setfiles /usr/sbin/setfiles
|
||||||
|
else
|
||||||
|
# remove sestatus symlink
|
||||||
|
rm -f "${D}"/usr/sbin/sestatus || die
|
||||||
|
fi
|
||||||
|
|
||||||
|
bashcomp_alias setsebool getsebool
|
||||||
|
|
||||||
|
# location for policy definitions
|
||||||
|
dodir /var/lib/selinux
|
||||||
|
keepdir /var/lib/selinux
|
||||||
|
|
||||||
|
# Set version-specific scripts
|
||||||
|
for pyscript in rlpkg; do
|
||||||
|
python_replicate_script "${ED}/usr/sbin/${pyscript}"
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
pkg_postinst() {
|
||||||
|
for POLICY_TYPE in ${POLICY_TYPES} ; do
|
||||||
|
# There have been some changes to the policy store, rebuilding now.
|
||||||
|
# https://marc.info/?l=selinux&m=143757277819717&w=2
|
||||||
|
einfo "Rebuilding store ${POLICY_TYPE} in '${ROOT:-/}' (without re-loading)."
|
||||||
|
semodule -p "${ROOT:-/}" -s "${POLICY_TYPE}" -n -B || die "Failed to rebuild policy store ${POLICY_TYPE}"
|
||||||
|
done
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue
Block a user