Fix patchbundle issue with portage patch

Package-Manager: portage-2.1.10.3/cvs/Linux x86_64

3 files changed, 160 insertions, 5 deletions

diff --git a/sec-policy/selinux-base-policy/ChangeLog b/sec-policy/selinux-base-policy/ChangeLog
index d2235b164775..394a7cec3ccd 100644
--- a/sec-policy/selinux-base-policy/ChangeLog
+++ b/sec-policy/selinux-base-policy/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for sec-policy/selinux-base-policy
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.81 2011/07/25 22:13:22 blueness Exp $
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/ChangeLog,v 1.82 2011/08/07 10:53:56 blueness Exp $
+
+*selinux-base-policy-2.20101213-r22 (07 Aug 2011)
+
+  07 Aug 2011; Anthony G. Basile <blueness@gentoo.org>
+  +selinux-base-policy-2.20101213-r22.ebuild:
+  Fix patchbundle issue with portage patch
 
 *selinux-base-policy-2.20101213-r21 (25 Jul 2011)
 *selinux-base-policy-2.20101213-r20 (25 Jul 2011)
diff --git a/sec-policy/selinux-base-policy/Manifest b/sec-policy/selinux-base-policy/Manifest
index bd8034d6ef5c..68b094c98a4f 100644
--- a/sec-policy/selinux-base-policy/Manifest
+++ b/sec-policy/selinux-base-policy/Manifest
@@ -10,6 +10,7 @@ DIST patchbundle-selinux-base-policy-2.20101213-r17.tar.bz2 15055 RMD160 5fbaf02
 DIST patchbundle-selinux-base-policy-2.20101213-r18.tar.bz2 15951 RMD160 ff5f27778184717ccd8eb9ad1ba42c5abf57dd2b SHA1 e6e563d43f4c64dcc9437f9eb227dd62ba674b2a SHA256 4245364ff20f4e0eb69aec6e57276e9f2f2bcbb45b5ecf4484fcb3d11e80da7b
 DIST patchbundle-selinux-base-policy-2.20101213-r20.tar.bz2 18585 RMD160 f2410675d178e9d001979b96693c22e33ecd909d SHA1 def300941d269c227ae21f50adfc2dde23694da2 SHA256 a25390b56466780c84a2c8f01e1ce8f6ba0e967eb869553cfe93c720ec796dbe
 DIST patchbundle-selinux-base-policy-2.20101213-r21.tar.bz2 19683 RMD160 aa381cfb741c12c223a844dd9d403137c3efd1fc SHA1 e9acf7aa2230614b37c3d3f43b53af32461ef81c SHA256 96c1851a6d1c8ee934da1837f50a3bac53fb7a6037530d060404e5fa4406f859
+DIST patchbundle-selinux-base-policy-2.20101213-r22.tar.bz2 18955 RMD160 5482b23d1a26fc611af0e47c3b3c1f0963ab340e SHA1 d521d7538cae0db9c9ad2786229bd66d1a83b2fc SHA256 1e919339d36926d7c4ccc6da1bf4f44970f693a847ffc21092945ef1d1d0ba07
 DIST refpolicy-2.20090730.tar.bz2 489840 RMD160 d1d157a5ad243edd5d216504ed697f128420e8c1 SHA1 af479258b4e78b8bd7aa2a23dead49f4d61a552f SHA256 745077f6db86646458fe65df82eaa6ffc8491752e511d2a7397f4b46bd478f03
 DIST refpolicy-2.20090814.tar.bz2 490191 RMD160 a62b13cac598dcb83e9730d8fc3771f5130a4776 SHA1 b80315c3ea09f1cfac637f09ca3fad1e19674790 SHA256 d7c500e76089240b00a1a53238ccca581ef02cce7812bc68f8d0299b9c261c22
 DIST refpolicy-2.20091215.tar.bz2 502893 RMD160 d4951a3d2025630734c4664dca0cc8297a354275 SHA1 3a64189cda00475d60b70ed0876b3e297ad463c6 SHA256 8c264680d130e7d0e0a49ee80d54a3fbdf083bc341c7f7516b5edef34e222ca5
@@ -22,12 +23,13 @@ EBUILD selinux-base-policy-2.20101213-r17.ebuild 3668 RMD160 72e220bc95a2b9f7e24
 EBUILD selinux-base-policy-2.20101213-r18.ebuild 3665 RMD160 e9d05055519957244db6f893a23ce2ff7bcecac8 SHA1 ab2e6969510b7950a63be62404b3e4f5e35f8261 SHA256 d32cb918c05035a5376a8d7e5b8f28bc591d5f6951ad9fdbc475315ab6e0182c
 EBUILD selinux-base-policy-2.20101213-r20.ebuild 4037 RMD160 754a30a8a8ca2d035fed77e63dfce4dbabe98d0d SHA1 23458dd89213bf64941edaed469dbf8b6d35d8f3 SHA256 0494ab98c4a73bf7bee611f82d7fac745c1d13fc4d580f02dd09da9faabdb3dd
 EBUILD selinux-base-policy-2.20101213-r21.ebuild 4279 RMD160 44143e13822c208b35636c07ed2968978d43a2f8 SHA1 2ae04846e46a465b8ed58fd2ec09ea7c1aaca752 SHA256 31d8a7b345c04ced0cc475eccc1364561d67f6d49729cca0f607bbfd2e1d0236
-MISC ChangeLog 20236 RMD160 4ab57fd6bde3b47c6f8464005bd53485a73eebc4 SHA1 b7e051114b30ef0cd9c35f296f1743dd7e14f4d0 SHA256 ce8015c1c81c1c404c25003344ea1137036480c05654fe697c554120e17b9510
+EBUILD selinux-base-policy-2.20101213-r22.ebuild 4279 RMD160 b0a3e0b0fc6b883b88a2f3b2f85711b9c788195a SHA1 780e69b88c6228b83541ee61a28305074d7b09f8 SHA256 65cfac9b060b7b9ba0e3962b6352272f5bcee7214a872957ebb42c1de95f6646
+MISC ChangeLog 20432 RMD160 437260d61c1c688b6eb15ae2c3524c17ca02ffb9 SHA1 359ca672797ea5b9cd5111fce54eb223ff5269bf SHA256 8d697133b9236d0dc4c9ab18ddc3642d0f0dd970fc78ce6e4f998637c452b654
 MISC metadata.xml 671 RMD160 49dd94bb827c4ab2bb8043739ef7564df4cf1c07 SHA1 a92b8a5ef129707a44fe2ae1913060d02badd566 SHA256 c32ccc54ca7df400974a19ad14c093ea7b777f7a40467bdb672f441314122e55
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2.0.17 (GNU/Linux)
 
-iEYEAREIAAYFAk4t6pAACgkQl5yvQNBFVTXcIgCfVmIKbPj4axoIaj92GXjsR40t
-1mQAoIUXP259F/b2b1PAm3xXzBlPXTYB
-=I7Fz
+iEYEAREIAAYFAk4+bs4ACgkQl5yvQNBFVTXLNQCeNpDzrq9pEvNe7Ft9Bc5ovMAR
+FkcAoInZ4A2KD9PCMLbNgWZQHhd+LvCe
+=JQeo
 -----END PGP SIGNATURE-----
diff --git a/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r22.ebuild b/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r22.ebuild
new file mode 100644
index 000000000000..81187fe31067
--- /dev/null
+++ b/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r22.ebuild
@@ -0,0 +1,147 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sec-policy/selinux-base-policy/selinux-base-policy-2.20101213-r22.ebuild,v 1.1 2011/08/07 10:53:56 blueness Exp $
+
+EAPI="1"
+IUSE="+peer_perms +open_perms +ubac"
+
+inherit eutils
+
+#PATCHBUNDLE="${FILESDIR}/patchbundle-${PF}.tar.bz2"
+PATCHBUNDLE="${DISTDIR}/patchbundle-${PF}.tar.bz2"
+DESCRIPTION="Gentoo base policy for SELinux"
+HOMEPAGE="http://www.gentoo.org/proj/en/hardened/selinux/"
+#SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2"
+SRC_URI="http://oss.tresys.com/files/refpolicy/refpolicy-${PV}.tar.bz2
+	http://dev.gentoo.org/~blueness/patchbundle-selinux-base-policy/patchbundle-${PF}.tar.bz2"
+LICENSE="GPL-2"
+SLOT="0"
+
+KEYWORDS="~amd64 ~x86"
+
+RDEPEND=">=sys-apps/policycoreutils-1.30.30
+	>=sys-fs/udev-151"
+DEPEND="${RDEPEND}
+	sys-devel/m4
+	>=sys-apps/checkpolicy-1.30.12"
+
+S=${WORKDIR}/
+
+src_unpack() {
+	[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
+
+	unpack ${A}
+
+	cd "${S}"
+	epatch "${PATCHBUNDLE}"
+	cd "${S}/refpolicy"
+	# Fix bug 257111
+	sed -i -e 's:system_crond_t:system_cronjob_t:g' \
+		"${S}/refpolicy/config/appconfig-standard/default_contexts"
+	sed -i -e 's|system_r:cronjob_t|system_r:system_cronjob_t|g' \
+		"${S}/refpolicy/config/appconfig-mls/default_contexts"
+	sed -i -e 's|system_r:cronjob_t|system_r:system_cronjob_t|g' \
+		"${S}/refpolicy/config/appconfig-mcs/default_contexts"
+
+	if ! use peer_perms; then
+		sed -i -e '/network_peer_controls/d' \
+			"${S}/refpolicy/policy/policy_capabilities"
+	fi
+
+	if ! use open_perms; then
+		sed -i -e '/open_perms/d' \
+			"${S}/refpolicy/policy/policy_capabilities"
+	fi
+
+	for i in ${POLICY_TYPES}; do
+		cp -a "${S}/refpolicy" "${S}/${i}"
+
+		cd "${S}/${i}";
+		make conf || die "Make conf in ${i} failed"
+
+		# Define what we see as "base" and what we want to remain modular
+		cp "${FILESDIR}/modules.conf" \
+			"${S}/${i}/policy/modules.conf" \
+			|| die "failed to set up modules.conf"
+		if [[ "${i}" == "targeted" ]];
+		then
+			echo "unconfined = base" >> "${S}/${i}/policy/modules.conf"
+		fi
+		sed -i -e '/^QUIET/s/n/y/' -e '/^MONOLITHIC/s/y/n/' \
+			-e "/^NAME/s/refpolicy/$i/" "${S}/${i}/build.conf" \
+			|| die "build.conf setup failed."
+
+		if [[ "${i}" == "mls" ]] || [[ "${i}" == "mcs" ]];
+		then
+			# MCS/MLS require additional settings
+			sed -i -e "/^TYPE/s/standard/${i}/" "${S}/${i}/build.conf" \
+				|| die "failed to set type to mls"
+		fi
+
+		if ! use ubac; then
+			sed -i -e 's:^UBAC = y:UBAC = n:g' "${S}/${i}/build.conf"
+		fi
+
+		echo "DISTRO = gentoo" >> "${S}/${i}/build.conf"
+
+		if [ "${i}" == "targeted" ]; then
+			sed -i -e '/root/d' -e 's/user_u/unconfined_u/' \
+			"${S}/${i}/config/appconfig-standard/seusers" \
+			|| die "targeted seusers setup failed."
+		fi
+	done
+}
+
+src_compile() {
+	[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
+
+	for i in ${POLICY_TYPES}; do
+		cd "${S}/${i}"
+		make base || die "${i} compile failed"
+	done
+}
+
+src_install() {
+	[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
+
+	for i in ${POLICY_TYPES}; do
+		cd "${S}/${i}"
+
+		make DESTDIR="${D}" install \
+			|| die "${i} install failed."
+
+		make DESTDIR="${D}" install-headers \
+			|| die "${i} headers install failed."
+
+		echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
+
+		echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
+
+		# libsemanage won't make this on its own
+		keepdir "/etc/selinux/${i}/policy"
+	done
+
+	dodoc doc/Makefile.example doc/example.{te,fc,if}
+
+	insinto /etc/selinux
+	doins "${FILESDIR}/config"
+}
+
+pkg_preinst() {
+	has_version "<${CATEGORY}/${PN}-2.20101213-r13"
+	previous_less_than_r13=$?
+}
+
+pkg_postinst() {
+	[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
+
+	for i in ${POLICY_TYPES}; do
+		einfo "Inserting base module into ${i} module store."
+
+		cd "/usr/share/selinux/${i}"
+		semodule -s "${i}" -b base.pp || die "Could not load in new base policy"
+	done
+	elog "Updates on policies might require you to relabel files. If you, after"
+	elog "installing new SELinux policies, get 'permission denied' errors,"
+	elog "relabelling your system using 'rlpkg -a -r' might resolve the issues."
+}