137 lines
4.7 KiB
Bash
137 lines
4.7 KiB
Bash
# Copyright 1999-2015 Gentoo Foundation
|
|
# Distributed under the terms of the GNU General Public License v2
|
|
# $Id$
|
|
|
|
EAPI="5"
|
|
PYTHON_COMPAT=( python2_7 python3_3 python3_4 )
|
|
|
|
inherit multilib python-r1 toolchain-funcs eutils multilib-minimal
|
|
|
|
MY_P="${P//_/-}"
|
|
MY_RELEASEDATE="20150202"
|
|
|
|
SEPOL_VER="${PV}"
|
|
SELNX_VER="${PV}"
|
|
|
|
DESCRIPTION="SELinux kernel and policy management library"
|
|
HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki"
|
|
|
|
if [[ ${PV} == 9999 ]] ; then
|
|
inherit git-r3
|
|
EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git"
|
|
S="${WORKDIR}/${MY_P}/${PN}"
|
|
else
|
|
SRC_URI="https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20150202/${MY_P}.tar.gz"
|
|
KEYWORDS="~amd64 ~x86"
|
|
S="${WORKDIR}/${MY_P}"
|
|
fi
|
|
|
|
LICENSE="GPL-2"
|
|
SLOT="0"
|
|
IUSE="python"
|
|
|
|
RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}[${MULTILIB_USEDEP}]
|
|
>=sys-libs/libselinux-${SELNX_VER}[${MULTILIB_USEDEP}]
|
|
>=sys-process/audit-2.2.2[${MULTILIB_USEDEP}]
|
|
>=dev-libs/ustr-1.0.4-r2[${MULTILIB_USEDEP}]
|
|
"
|
|
DEPEND="${RDEPEND}
|
|
sys-devel/bison
|
|
sys-devel/flex
|
|
python? (
|
|
>=dev-lang/swig-2.0.4-r1
|
|
virtual/pkgconfig
|
|
${PYTHON_DEPS}
|
|
)"
|
|
|
|
# tests are not meant to be run outside of the
|
|
# full SELinux userland repo
|
|
RESTRICT="test"
|
|
|
|
src_prepare() {
|
|
echo "# Set this to true to save the linked policy." >> "${S}/src/semanage.conf"
|
|
echo "# This is normally only useful for analysis" >> "${S}/src/semanage.conf"
|
|
echo "# or debugging of policy." >> "${S}/src/semanage.conf"
|
|
echo "save-linked=false" >> "${S}/src/semanage.conf"
|
|
echo >> "${S}/src/semanage.conf"
|
|
echo "# Set this to 0 to disable assertion checking." >> "${S}/src/semanage.conf"
|
|
echo "# This should speed up building the kernel policy" >> "${S}/src/semanage.conf"
|
|
echo "# from policy modules, but may leave you open to" >> "${S}/src/semanage.conf"
|
|
echo "# dangerous rules which assertion checking" >> "${S}/src/semanage.conf"
|
|
echo "# would catch." >> "${S}/src/semanage.conf"
|
|
echo "expand-check=1" >> "${S}/src/semanage.conf"
|
|
echo >> "${S}/src/semanage.conf"
|
|
echo "# Modules in the module store can be compressed" >> "${S}/src/semanage.conf"
|
|
echo "# with bzip2. Set this to the bzip2 blocksize" >> "${S}/src/semanage.conf"
|
|
echo "# 1-9 when compressing. The higher the number," >> "${S}/src/semanage.conf"
|
|
echo "# the more memory is traded off for disk space." >> "${S}/src/semanage.conf"
|
|
echo "# Set to 0 to disable bzip2 compression." >> "${S}/src/semanage.conf"
|
|
echo "bzip-blocksize=0" >> "${S}/src/semanage.conf"
|
|
echo >> "${S}/src/semanage.conf"
|
|
echo "# Reduce memory usage for bzip2 compression and" >> "${S}/src/semanage.conf"
|
|
echo "# decompression of modules in the module store." >> "${S}/src/semanage.conf"
|
|
echo "bzip-small=true" >> "${S}/src/semanage.conf"
|
|
|
|
if [[ ${PV} != 9999 ]] ; then
|
|
# If wanted for live builds, please use /etc/portage/patches
|
|
epatch "${FILESDIR}/0001-libsemanage-do-not-copy-contexts-in-semanage_migrate.patch"
|
|
fi
|
|
|
|
epatch_user
|
|
|
|
multilib_copy_sources
|
|
}
|
|
|
|
multilib_src_compile() {
|
|
emake \
|
|
AR="$(tc-getAR)" \
|
|
CC="$(tc-getCC)" \
|
|
LIBDIR="${EPREFIX}/usr/$(get_libdir)" \
|
|
all
|
|
|
|
if multilib_is_native_abi && use python; then
|
|
building_py() {
|
|
python_export PYTHON_INCLUDEDIR PYTHON_LIBPATH
|
|
emake CC="$(tc-getCC)" PYINC="-I${PYTHON_INCLUDEDIR}" PYTHONLBIDIR="${PYTHON_LIBPATH}" PYPREFIX="${EPYTHON##*/}" "$@"
|
|
}
|
|
python_foreach_impl building_py swigify
|
|
python_foreach_impl building_py pywrap
|
|
fi
|
|
}
|
|
|
|
multilib_src_install() {
|
|
emake \
|
|
LIBDIR="${ED}/usr/$(get_libdir)" \
|
|
SHLIBDIR="${ED}/usr/$(get_libdir)" \
|
|
DESTDIR="${ED}" install
|
|
|
|
if multilib_is_native_abi && use python; then
|
|
installation_py() {
|
|
emake DESTDIR="${ED}" LIBDIR="${ED}/usr/$(get_libdir)" \
|
|
SHLIBDIR="${ED}/usr/$(get_libdir)" install-pywrap
|
|
python_optimize # bug 531638
|
|
}
|
|
python_foreach_impl installation_py
|
|
fi
|
|
}
|
|
|
|
pkg_postinst() {
|
|
# Migrate the SELinux semanage configuration store if not done already
|
|
local selinuxtype=$(awk -F'=' '/SELINUXTYPE=/ {print $2}' /etc/selinux/config);
|
|
if [ -n "${selinuxtype}" ] && [ ! -d /var/lib/selinux/${mcs}/active ] ; then
|
|
ewarn "Since the 2.4 SELinux userspace, the policy module store is moved"
|
|
ewarn "from /etc/selinux to /var/lib/selinux. The migration will be run now."
|
|
ewarn "If there are any issues, it can be done manually by running:"
|
|
ewarn "/usr/libexec/selinux/semanage_migrate_store"
|
|
ewarn "For more information, please see"
|
|
ewarn "- https://github.com/SELinuxProject/selinux/wiki/Policy-Store-Migration"
|
|
fi
|
|
|
|
# Run the store migration without rebuilds
|
|
for POLICY_TYPE in ${POLICY_TYPES} ; do
|
|
if [ ! -d "${ROOT}/var/lib/selinux/${POLICY_TYPE}/active" ] ; then
|
|
einfo "Migrating store ${POLICY_TYPE} (without policy rebuild)."
|
|
/usr/libexec/selinux/semanage_migrate_store -n -s "${POLICY_TYPE}" || die "Failed to migrate store ${POLICY_TYPE}"
|
|
fi
|
|
done
|
|
}
|