diff options
author | Chris PeBenito <pebenito@gentoo.org> | 2004-09-20 00:38:34 +0000 |
---|---|---|
committer | Chris PeBenito <pebenito@gentoo.org> | 2004-09-20 00:38:34 +0000 |
commit | 9a608af005bf691e1d5eebb6c22c6f218649fb84 (patch) | |
tree | 4d7c1c4156697b21b557666379a68641c2e09804 /profiles/selinux | |
parent | ditto (diff) | |
download | gentoo-2-9a608af005bf691e1d5eebb6c22c6f218649fb84.tar.gz gentoo-2-9a608af005bf691e1d5eebb6c22c6f218649fb84.tar.bz2 gentoo-2-9a608af005bf691e1d5eebb6c22c6f218649fb84.zip |
initial commit based on default-linux 2004.3 amd64 profile
Diffstat (limited to 'profiles/selinux')
-rw-r--r-- | profiles/selinux/2004.1/amd64/lib64/make.defaults | 18 | ||||
-rw-r--r-- | profiles/selinux/2004.1/amd64/lib64/packages | 20 | ||||
-rw-r--r-- | profiles/selinux/2004.1/amd64/lib64/parent | 6 | ||||
-rw-r--r-- | profiles/selinux/2004.1/amd64/make.defaults | 18 | ||||
-rw-r--r-- | profiles/selinux/2004.1/amd64/packages | 20 | ||||
-rw-r--r-- | profiles/selinux/2004.1/amd64/parent | 6 | ||||
-rw-r--r-- | profiles/selinux/2004.1/amd64/profile.bashrc | 63 | ||||
-rw-r--r-- | profiles/selinux/2004.1/amd64/use.mask | 90 | ||||
-rw-r--r-- | profiles/selinux/2004.1/amd64/virtuals | 9 |
9 files changed, 250 insertions, 0 deletions
diff --git a/profiles/selinux/2004.1/amd64/lib64/make.defaults b/profiles/selinux/2004.1/amd64/lib64/make.defaults new file mode 100644 index 000000000000..f8704e1ccc1d --- /dev/null +++ b/profiles/selinux/2004.1/amd64/lib64/make.defaults @@ -0,0 +1,18 @@ +# Copyright 1999-2004 Gentoo Foundation. +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/lib64/make.defaults,v 1.1 2004/09/20 00:38:34 pebenito Exp $ + +USE="amd64 berkdb crypt multilib ncurses pam python readline selinux ssl zlib" +GRP_STAGE23_USE="amd64 berkdb crypt multilib ncurses pam python readline selinux ssl zlib" + +ARCH="amd64" +ACCEPT_KEYWORDS="amd64" +FEATURES="strict sfperms" +POLICYDIR="/etc/security/selinux/src/policy" + +CONF_LIBDIR="lib64" +CONF_MULTILIBDIR="lib32" + +PORTAGE_T="portage_t" +PORTAGE_FETCH_T="portage_fetch_t" +PORTAGE_SANDBOX_T="portage_sandbox_t" diff --git a/profiles/selinux/2004.1/amd64/lib64/packages b/profiles/selinux/2004.1/amd64/lib64/packages new file mode 100644 index 000000000000..8f9110d9f7c1 --- /dev/null +++ b/profiles/selinux/2004.1/amd64/lib64/packages @@ -0,0 +1,20 @@ +# Copyright 1999-2004 Gentoo Foundation. +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/lib64/packages,v 1.1 2004/09/20 00:38:34 pebenito Exp $ + +############################################################################## +# SELinux required versionings + +# Critical xattr fixes: +>=sys-boot/grub-0.94 + +# New API SELinux kernels +>=sys-kernel/gentoo-dev-sources-2.6.0 +>=sys-kernel/hardened-dev-sources-2.6.0 +############################################################################## + +*>=sys-apps/baselayout-1.9.4 +*>=sys-apps/portage-2.0.50-r10 +*>=sys-devel/binutils-2.15.90.0.1.1-r1 +*>=sys-devel/gcc-3.3.4 +*>=sys-libs/glibc-2.3.4.20040619-r1 diff --git a/profiles/selinux/2004.1/amd64/lib64/parent b/profiles/selinux/2004.1/amd64/lib64/parent new file mode 100644 index 000000000000..4627c8bf61b0 --- /dev/null +++ b/profiles/selinux/2004.1/amd64/lib64/parent @@ -0,0 +1,6 @@ +# Copyright 2004 Gentoo Foundation. +# Distributed under the terms of the GNU General Public License, v2 +# $Header: /home/cvsroot/gentoo-x86/profiles/default/x86/2004.0/parent,v 1.2 +# 2004/03/18 00:16:43 seemant Exp $ + +.. diff --git a/profiles/selinux/2004.1/amd64/make.defaults b/profiles/selinux/2004.1/amd64/make.defaults new file mode 100644 index 000000000000..aee5a0beecaf --- /dev/null +++ b/profiles/selinux/2004.1/amd64/make.defaults @@ -0,0 +1,18 @@ +# Copyright 1999-2004 Gentoo Foundation. +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/make.defaults,v 1.1 2004/09/20 00:38:34 pebenito Exp $ + +USE="amd64 berkdb crypt multilib ncurses pam python readline selinux ssl zlib" +GRP_STAGE23_USE="amd64 berkdb crypt multilib ncurses pam python readline selinux ssl zlib" + +ARCH="amd64" +ACCEPT_KEYWORDS="amd64" +FEATURES="strict sfperms" +POLICYDIR="/etc/security/selinux/src/policy" + +CONF_LIBDIR="lib" +CONF_MULTILIBDIR="lib32" + +PORTAGE_T="portage_t" +PORTAGE_FETCH_T="portage_fetch_t" +PORTAGE_SANDBOX_T="portage_sandbox_t" diff --git a/profiles/selinux/2004.1/amd64/packages b/profiles/selinux/2004.1/amd64/packages new file mode 100644 index 000000000000..874d63189c82 --- /dev/null +++ b/profiles/selinux/2004.1/amd64/packages @@ -0,0 +1,20 @@ +# Copyright 1999-2004 Gentoo Foundation. +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/packages,v 1.1 2004/09/20 00:38:34 pebenito Exp $ + +############################################################################## +# SELinux required versionings + +# Critical xattr fixes: +>=sys-boot/grub-0.94 + +# New API SELinux kernels +>=sys-kernel/gentoo-dev-sources-2.6.0 +>=sys-kernel/hardened-dev-sources-2.6.0 +############################################################################## + +*>=sys-apps/baselayout-1.9.4 +*>=sys-apps/portage-2.0.50-r10 +*>=sys-devel/binutils-2.15.90.0.1.1-r1 +*>=sys-devel/gcc-3.3.4 +*>=sys-libs/glibc-2.3.4.20040619-r1 diff --git a/profiles/selinux/2004.1/amd64/parent b/profiles/selinux/2004.1/amd64/parent new file mode 100644 index 000000000000..4627c8bf61b0 --- /dev/null +++ b/profiles/selinux/2004.1/amd64/parent @@ -0,0 +1,6 @@ +# Copyright 2004 Gentoo Foundation. +# Distributed under the terms of the GNU General Public License, v2 +# $Header: /home/cvsroot/gentoo-x86/profiles/default/x86/2004.0/parent,v 1.2 +# 2004/03/18 00:16:43 seemant Exp $ + +.. diff --git a/profiles/selinux/2004.1/amd64/profile.bashrc b/profiles/selinux/2004.1/amd64/profile.bashrc new file mode 100644 index 000000000000..0ebc1a566b05 --- /dev/null +++ b/profiles/selinux/2004.1/amd64/profile.bashrc @@ -0,0 +1,63 @@ +# fix for bug 60147, "configure causes sandbox violations when lib64 +# is a directory". currently only works with cvs portage. +addwrite /usr/lib64/conftest +addwrite /usr/lib64/cf + +# oh goodie, yet ANOTHER sandbox bug!!!! >:| +# without portage 2.0.51 and the following entries, at least dbus will spew +# sandbox violations like mad with python in lib64. +addpredict /usr/lib64/python2.0/ +addpredict /usr/lib64/python2.1/ +addpredict /usr/lib64/python2.2/ +addpredict /usr/lib64/python2.3/ +addpredict /usr/lib64/python2.4/ +addpredict /usr/lib64/python2.5/ +addpredict /usr/lib64/python3.0/ + + +# currently theoretical multilib stuff only available if using portage 2.0.51 +CHOST32="i686-pc-linux-gnu" +CONF_MULTILIBDIR="${CONF_MULTILIBDIR:=lib32}" +# until everything in the tree understands $(get_libdir), the only sane +# default for this is lib. +CONF_LIBDIR="${CONF_LIBDIR:=lib}" +ARCH_WRAPPER="linux32" +CC32="gcc32" +CPP32="g++32" + + +setup_multilib_variables() { + # if run via linux32, uname -m will always return i686 + if [ "$(uname -m)" == "i686" ] ; then + CONF_LIBDIR="${CONF_MULTILIBDIR:=lib32}" + CHOST="${CHOST32:=i686-pc-linux-gnu}" + + if [ -x /usr/bin/${CC32:=gcc32} ] ; then + CC="${CC32:=gcc32}" + CPP="${CPP32:=g++32}" + else + CFLAGS="${CFLAGS} -m32" + CXXFLAGS="${CXXFLAGS} -m32" + fi + else + # this isnt needed for profiles that set CONF_LIBDIR, but it + # doesnt hurt to be safe. + CONF_LIBDIR="${CONF_LIBDIR:=lib64}" + fi + + export CONF_LIBDIR +} + +[ "${CCHOST}" == "" -o "${CCHOST}" == "${CHOST}" -o "${CCHOST}" == "${CHOST32}" ] && setup_multilib_variables +[ "${CONF_MULTILIBDIR}" == "lib" -a "${CONF_LIBDIR}" == "lib64" ] && SKIP_MULTILIB_HACK="YES" + + +# spec switching support only available in gcc 3.4.2-r1 and later +if [ -n "${USE_SPECS}" ] ; then + GCC_VER="$(${CC:=gcc} --version | grep ^gcc | awk '{ print $3 }')" + SPECSLOC="/usr/lib/gcc-lib/${CHOST}/${GCC_VER}/" + if [ -f ${SPECSLOC}/${USE_SPECS}.specs ] ; then + export GCC_SPECS="${SPECSLOC}/${USE_SPECS}.specs" + fi +fi + diff --git a/profiles/selinux/2004.1/amd64/use.mask b/profiles/selinux/2004.1/amd64/use.mask new file mode 100644 index 000000000000..c47505bd32a3 --- /dev/null +++ b/profiles/selinux/2004.1/amd64/use.mask @@ -0,0 +1,90 @@ +# Copyright 2004 Gentoo Foundation. +# Distributed under the terms of the GNU General Public License, v2 +# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/use.mask,v 1.1 2004/09/20 00:38:34 pebenito Exp $ + +#unknowns +afs +drac + +# WON'T BUILD - SECTION + +# 2004/06/22 - Taken from 2004.0 profile +# Anything that relies on vm86.h will not built on amd64 +# SVGAlib doesnt build +svga + +# 2004/06/22 - Taken from 2004.0 profile +# Firebird doesnt build on amd64 +firebird + +# 2004/06/22 - Taken from 2004.0 profile +# x86 binary only, used by php +fdftk + +# 2004/06/22 - Danny van Dyk <kugelfang@gentoo.org> +# version in portage does not work on amd64 yet +uclibc + +# 2004/06/22 - Taken from 2004.0 profile +# versions that are in portage do not support amd64, +# will be removed when Intel issues an update and it gets into portage +# (it seems to be in the works) +icc +ifc + +# 2004/06/22 - Taken from 2004.0 profile +# masked +3dfx + +# 2004/07/22 - Danny van Dyk <kugelfang@gentoo.org> +# libcaca part of libSDL causes breakage due to missing shared object. +# BUG #53857 +libcaca + +# NOT NECESSARY - SECTION + +# 2004/06/22 - Taken from 2004.0 profile +# Too many packages assume that mmx/sse/sse2/3dnow are 86-32 only things to +# make them useful on amd64. Anyway, all amd64 cpus have them, so they should +# not be many flag dependant in this case +mmx +mmx2 +sse +sse2 +3dnow + +# 2004/06/22 - Taken from 2004.0 profile +# Chris PeBenito <pebenito@gentoo.org> +# must use a SELinux profile +selinux + +# 2004/06/25 - Danny van Dyk <kugelfang@gentoo.org> +# Known BUGs (#54760) + lack of brain/man power to maintain "hardened" in the +# default profile. Use the hardened profile instead. +hardened +uclibc + +# altivec is a ppc instruction set. +altivec + +# see email to gentoo-dev with subject "use.mask and PHP5's crazy IUSE" +# Dated Sat, 31 Jul 2004 14:49:28 -0700, from robbat2@gentoo.org +# all of these are binary-only, and not presently available on this +# architecture. +adabas +birdstep +cpdflib +dbmaker +empress +empress-bcs +esoob +filepro +frontbase +hyperwave +informix +ingres +pfpro +solid +sybase +sybase-ct + diff --git a/profiles/selinux/2004.1/amd64/virtuals b/profiles/selinux/2004.1/amd64/virtuals new file mode 100644 index 000000000000..465d6ac292a2 --- /dev/null +++ b/profiles/selinux/2004.1/amd64/virtuals @@ -0,0 +1,9 @@ +# Copyright 2004 Gentoo Foundation. +# Distributed under the terms of the GNU General Public License, v2 +# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/virtuals,v 1.1 2004/09/20 00:38:34 pebenito Exp $ + +virtual/os-headers sys-kernel/linux26-headers +virtual/alsa sys-kernel/gentoo-dev-sources +virtual/kernel sys-kernel/linux26-headers +virtual/linux-sources sys-kernel/gentoo-dev-sources +virtual/bootloader sys-boot/grub-static |