From 354213d8e8b295a99deec4bd586f076eb3b8d3e3 Mon Sep 17 00:00:00 2001 From: Xin Ouyang Date: Mon, 20 Feb 2012 15:32:01 +0800 Subject: Add bb recipes for new release 2012-02-16. --- recipes-security/selinux/checkpolicy_2.1.8.bb | 24 ++++++++ recipes-security/selinux/libselinux_2.1.9.bb | 48 +++++++++++++++ recipes-security/selinux/libsemanage_2.1.6.bb | 45 ++++++++++++++ recipes-security/selinux/libsepol_2.1.4.bb | 18 ++++++ recipes-security/selinux/policycoreutils_2.1.10.bb | 69 ++++++++++++++++++++++ recipes-security/selinux/selinux_20120216.inc | 12 ++++ recipes-security/selinux/sepolgen_1.1.5.bb | 27 +++++++++ 7 files changed, 243 insertions(+) create mode 100644 recipes-security/selinux/checkpolicy_2.1.8.bb create mode 100644 recipes-security/selinux/libselinux_2.1.9.bb create mode 100644 recipes-security/selinux/libsemanage_2.1.6.bb create mode 100644 recipes-security/selinux/libsepol_2.1.4.bb create mode 100644 recipes-security/selinux/policycoreutils_2.1.10.bb create mode 100644 recipes-security/selinux/selinux_20120216.inc create mode 100644 recipes-security/selinux/sepolgen_1.1.5.bb diff --git a/recipes-security/selinux/checkpolicy_2.1.8.bb b/recipes-security/selinux/checkpolicy_2.1.8.bb new file mode 100644 index 0000000..f057855 --- /dev/null +++ b/recipes-security/selinux/checkpolicy_2.1.8.bb @@ -0,0 +1,24 @@ +SUMMARY = "SELinux policy compiler" +DESCRIPTION = "SELinux policy compiler" +SECTION = "base" +PR = "r1" +LICENSE = "GPLv2+" +LIC_FILES_CHKSUM = "file://COPYING;md5=393a5ca445f6965873eca0259a17f833" + +include selinux_20120216.inc + +SRC_URI[md5sum] = "e7b5d62873d4efc8a502b75f042f6735" +SRC_URI[sha256sum] = "8ed586fd2ccf9900f86e38b72af4aa5cc3bade35d0fa19c53ac1a3d59fe0013a" + +DEPENDS += "libsepol libselinux flex-native" + +EXTRA_OEMAKE += "PREFIX=${D}" +EXTRA_OEMAKE += "LEX='flex'" + +BBCLASSEXTEND = "native" + +do_install_append() { + install test/dismod ${D}/${bindir}/sedismod + install test/dispol ${D}/${bindir}/sedispol +} + diff --git a/recipes-security/selinux/libselinux_2.1.9.bb b/recipes-security/selinux/libselinux_2.1.9.bb new file mode 100644 index 0000000..faf9a09 --- /dev/null +++ b/recipes-security/selinux/libselinux_2.1.9.bb @@ -0,0 +1,48 @@ +SUMMARY = "SELinux library and simple utilities" +DESCRIPTION = "libselinux provides an API for SELinux applications to get and set \ +process and file security contexts and to obtain security policy \ +decisions. Required for any applications that use the SELinux API." +SECTION = "base" +PR = "r1" +LICENSE = "NSA-Public_Domain" +LIC_FILES_CHKSUM = "file://LICENSE;md5=84b4d2c6ef954a2d4081e775a270d0d0" + +include selinux_20120216.inc +inherit lib_package + +SRC_URI[md5sum] = "8ea0548dd65e9479b357ba1447f89221" +SRC_URI[sha256sum] = "749d4b39c80aa9df8247b8b3187ab72442c0dbad6e70bf312e25052bd4e7063f" + +DEPENDS += "libsepol python python-native swig-native" + +PACKAGES += "${PN}-python" +FILES_${PN}-python = "${libdir}/python${PYTHON_BASEVERSION}/site-packages/selinux/*" +FILES_${PN}-dbg += "${libdir}/python${PYTHON_BASEVERSION}/site-packages/selinux/.debug/*" + +python __anonymous () { + import re + target = d.getVar('TARGET_ARCH', True) + extra_oemake = d.getVar('EXTRA_OEMAKE', True) + p = re.compile('i.86') + target = p.sub('i386',target) + d.setVar("EXTRA_OEMAKE", extra_oemake + " ARCH='" + target + "'") +} + +do_compile_append() { + oe_runmake pywrap -j1 \ + INCLUDEDIR='${STAGING_INCDIR}' \ + LIBDIR='${STAGING_LIBDIR}' \ + PYLIBVER='python${PYTHON_BASEVERSION}' \ + PYINC='-I${STAGING_INCDIR}/$(PYLIBVER)' \ + PYLIB='-L${STAGING_LIBDIR}/$(PYLIBVER) -l$(PYLIBVER)' \ + PYTHONLIBDIR='${PYLIB}' +} + +do_install_append() { + oe_runmake install-pywrap swigify \ + DESTDIR=${D} \ + PYLIBVER='python${PYTHON_BASEVERSION}' \ + PYLIBDIR='${D}/${libdir}/$(PYLIBVER)' +} + +BBCLASSEXTEND = "native" diff --git a/recipes-security/selinux/libsemanage_2.1.6.bb b/recipes-security/selinux/libsemanage_2.1.6.bb new file mode 100644 index 0000000..7333155 --- /dev/null +++ b/recipes-security/selinux/libsemanage_2.1.6.bb @@ -0,0 +1,45 @@ +SUMMARY = "SELinux binary policy manipulation library" +DESCRIPTION = "libsemanage provides an API for the manipulation of SELinux binary policies. \ +It is used by checkpolicy (the policy compiler) and similar tools, as well \ +as by programs like load_policy that need to perform specific transformations \ +on binary policies such as customizing policy boolean settings." +SECTION = "base" +PR = "r1" +LICENSE = "LGPLv2.1+" +LIC_FILES_CHKSUM = "file://COPYING;md5=a6f89e2100d9b6cdffcea4f398e37343" + +include selinux_20120216.inc +inherit lib_package + +SRC_URI[md5sum] = "b49d75602432d8cfad8a3e5a0a966f07" +SRC_URI[sha256sum] = "64e6849fe50fb463ec0ba24653a26e3452fa4aaa7d7e192213d5c5a7c525aebb" + +DEPENDS += "libsepol libselinux ustr bzip2 python" + +SRC_URI += "file://Fix-segfault-for-standard-policy.patch" + +PACKAGES += "${PN}-python" +FILES_${PN}-python = "${libdir}/python${PYTHON_BASEVERSION}/site-packages/*" +FILES_${PN}-dbg += "${libdir}/python${PYTHON_BASEVERSION}/site-packages/.debug/*" + +do_compile_append() { + oe_runmake pywrap -j1 \ + INCLUDEDIR='${STAGING_INCDIR}' \ + LIBDIR='${STAGING_LIBDIR}' \ + PYLIBVER='python${PYTHON_BASEVERSION}' \ + PYINC='-I${STAGING_INCDIR}/$(PYLIBVER)' \ + PYLIB='-L${STAGING_LIBDIR}/$(PYLIBVER) -l$(PYLIBVER)' \ + PYTHONLIBDIR='${PYLIB}' +} + +do_install_append() { + oe_runmake install-pywrap swigify \ + DESTDIR=${D} \ + PYLIBVER='python${PYTHON_BASEVERSION}' \ + PYLIBDIR='${D}/${libdir}/$(PYLIBVER)' + cd ${D}${libdir} && \ + rm -f libsemanage.so && \ + ln -s ../../`basename ${libdir}`/libsemanage.so.1 libsemanage.so +} + +BBCLASSEXTEND = "native" diff --git a/recipes-security/selinux/libsepol_2.1.4.bb b/recipes-security/selinux/libsepol_2.1.4.bb new file mode 100644 index 0000000..2a7633b --- /dev/null +++ b/recipes-security/selinux/libsepol_2.1.4.bb @@ -0,0 +1,18 @@ +SUMMARY = "SELinux binary policy manipulation library" +DESCRIPTION = "libsepol provides an API for the manipulation of SELinux binary policies. \ +It is used by checkpolicy (the policy compiler) and similar tools, as well \ +as by programs like load_policy that need to perform specific transformations \ +on binary policies such as customizing policy boolean settings." +SECTION = "base" +PR = "r1" +LICENSE = "LGPLv2+" +LIC_FILES_CHKSUM = "file://COPYING;md5=a6f89e2100d9b6cdffcea4f398e37343" + +include selinux_20120216.inc +inherit lib_package + +SRC_URI[md5sum] = "909dae553edb34ea2224002a0c529cb0" +SRC_URI[sha256sum] = "8f5ea42ae6cc00b21f0e5f31f354d19fcce3edfe9328971d266245718714b1e8" + +BBCLASSEXTEND = "native" + diff --git a/recipes-security/selinux/policycoreutils_2.1.10.bb b/recipes-security/selinux/policycoreutils_2.1.10.bb new file mode 100644 index 0000000..b448747 --- /dev/null +++ b/recipes-security/selinux/policycoreutils_2.1.10.bb @@ -0,0 +1,69 @@ +SUMMARY = "SELinux policy core utilities" +DESCRIPTION = "policycoreutils contains the policy core utilities that are required \ +for basic operation of a SELinux system. These utilities include \ +load_policy to load policies, setfiles to label filesystems, newrole \ +to switch roles, and run_init to run /etc/init.d scripts in the proper \ +context." +SECTION = "base" +PR = "r1" +LICENSE = "GPLv2+" +LIC_FILES_CHKSUM = "file://COPYING;md5=393a5ca445f6965873eca0259a17f833" + +include selinux_20120216.inc + +SRC_URI[md5sum] = "fefdede2815cdd2ba8b68599fef1f257" +SRC_URI[sha256sum] = "8bbbc36b7d375edff891503932da93e37553f0dd7bdceded7ce9a45c80bec3d1" + +DEPENDS += "libsepol libselinux libsemanage libcap-ng libcgroup" +DEPENDS += "${@base_contains('DISTRO_FEATURES', 'pam', 'libpam audit', '', d)}" + +RDEPENDS_${PN} += "\ + libselinux-python \ + libsemanage-python \ + sepolgen \ + " +RDEPENDS_${PN} += "\ + python \ + python-unixadmin \ + python-shell \ + python-crypt \ + python-subprocess \ + python-syslog \ + python-textutils \ + python-IPy \ + " +#RDEPENDS_${PN} += "setools" + +RDEPENDS_${PN}_virtclass-native = "python-native sepolgen-native" + + +PACKAGES =+ "${PN}-python ${PN}-sandbox" +FILES_${PN}-python = "${libdir}/python${PYTHON_BASEVERSION}/site-packages/*" +FILES_${PN}-sandbox = "${datadir}/sandbox/*" +FILES_${PN}-sandbox += "${bindir}/sandbox" +FILES_${PN}-sandbox += "${sbindir}/seunshare" + +CFLAGS_append = " -Wno-error=format-security" +EXTRA_OEMAKE += "${@base_contains('DISTRO_FEATURES', 'pam', 'PAMH=y AUDITH=y', '', d)}" +EXTRA_OEMAKE += "PREFIX=${D}" + +BBCLASSEXTEND = "native" + +PCU_NATIVE_CMDS = "setfiles semodule_package semodule semodule_link semodule_expand semodule_deps" + +do_compile_virtclass-native() { + for PCU_CMD in ${PCU_NATIVE_CMDS} ; do + oe_runmake -C $PCU_CMD \ + INCLUDEDIR='${STAGING_INCDIR}' \ + LIBDIR='${STAGING_LIBDIR}' + done +} + +do_install_virtclass-native() { + for PCU_CMD in ${PCU_NATIVE_CMDS} ; do + oe_runmake -C $PCU_CMD install \ + DESTDIR="${D}" \ + PREFIX="${D}/${prefix}" \ + SBINDIR="${D}/${base_sbindir}" + done +} diff --git a/recipes-security/selinux/selinux_20120216.inc b/recipes-security/selinux/selinux_20120216.inc new file mode 100644 index 0000000..b2fac15 --- /dev/null +++ b/recipes-security/selinux/selinux_20120216.inc @@ -0,0 +1,12 @@ +SELINUX_RELEASE = "20120216" + +SRC_URI = "http://userspace.selinuxproject.org/releases/${SELINUX_RELEASE}/${BPN}-${PV}.tar.gz" + +PREFERRED_VERSION_checkpolicy = "2.1.8" +PREFERRED_VERSION_libselinux = "2.1.9" +PREFERRED_VERSION_libsemanage = "2.1.6" +PREFERRED_VERSION_libsepol = "2.1.4" +PREFERRED_VERSION_policycoreutils = "2.1.10" +PREFERRED_VERSION_sepolgen = "1.1.5" + +include selinux_common.inc diff --git a/recipes-security/selinux/sepolgen_1.1.5.bb b/recipes-security/selinux/sepolgen_1.1.5.bb new file mode 100644 index 0000000..36246a9 --- /dev/null +++ b/recipes-security/selinux/sepolgen_1.1.5.bb @@ -0,0 +1,27 @@ +SUMMARY = "Python modules for supporting various SELinux utilities." +DESCRIPTION = "Python modules for supporting various SELinux utilities." +SECTION = "base" +PR = "r1" +LICENSE = "LGPLv2+" +LIC_FILES_CHKSUM = "file://COPYING;md5=393a5ca445f6965873eca0259a17f833" + +include selinux_20120216.inc + +SRC_URI[md5sum] = "4ecadef3880019d8cdc08896687608b1" +SRC_URI[sha256sum] = "16c2b10510be7dbb2dc0967aedb2d69c654ca52ed03d04881c17d2f8b863b3bb" + +FILES_${PN} = "${libdir}/python${PYTHON_BASEVERSION}/site-packages/*" + +DEPENDS += "python" + +FILES_${PN} += "${libdir}/python${PYTHON_BASEVERSION}/site-packages \ + /var/lib/sepolgen" + +do_install() { + oe_runmake DESTDIR=${D} \ + PYTHONLIBDIR='${libdir}/python${PYTHON_BASEVERSION}/site-packages' \ + install +} + +BBCLASSEXTEND = "native" + -- cgit v1.2.3-54-g00ecf