summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris PeBenito <pebenito@gentoo.org>2004-09-20 00:38:34 +0000
committerChris PeBenito <pebenito@gentoo.org>2004-09-20 00:38:34 +0000
commit9a608af005bf691e1d5eebb6c22c6f218649fb84 (patch)
tree4d7c1c4156697b21b557666379a68641c2e09804 /profiles/selinux
parentditto (diff)
downloadgentoo-2-9a608af005bf691e1d5eebb6c22c6f218649fb84.tar.gz
gentoo-2-9a608af005bf691e1d5eebb6c22c6f218649fb84.tar.bz2
gentoo-2-9a608af005bf691e1d5eebb6c22c6f218649fb84.zip
initial commit based on default-linux 2004.3 amd64 profile
Diffstat (limited to 'profiles/selinux')
-rw-r--r--profiles/selinux/2004.1/amd64/lib64/make.defaults18
-rw-r--r--profiles/selinux/2004.1/amd64/lib64/packages20
-rw-r--r--profiles/selinux/2004.1/amd64/lib64/parent6
-rw-r--r--profiles/selinux/2004.1/amd64/make.defaults18
-rw-r--r--profiles/selinux/2004.1/amd64/packages20
-rw-r--r--profiles/selinux/2004.1/amd64/parent6
-rw-r--r--profiles/selinux/2004.1/amd64/profile.bashrc63
-rw-r--r--profiles/selinux/2004.1/amd64/use.mask90
-rw-r--r--profiles/selinux/2004.1/amd64/virtuals9
9 files changed, 250 insertions, 0 deletions
diff --git a/profiles/selinux/2004.1/amd64/lib64/make.defaults b/profiles/selinux/2004.1/amd64/lib64/make.defaults
new file mode 100644
index 000000000000..f8704e1ccc1d
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/lib64/make.defaults
@@ -0,0 +1,18 @@
+# Copyright 1999-2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/lib64/make.defaults,v 1.1 2004/09/20 00:38:34 pebenito Exp $
+
+USE="amd64 berkdb crypt multilib ncurses pam python readline selinux ssl zlib"
+GRP_STAGE23_USE="amd64 berkdb crypt multilib ncurses pam python readline selinux ssl zlib"
+
+ARCH="amd64"
+ACCEPT_KEYWORDS="amd64"
+FEATURES="strict sfperms"
+POLICYDIR="/etc/security/selinux/src/policy"
+
+CONF_LIBDIR="lib64"
+CONF_MULTILIBDIR="lib32"
+
+PORTAGE_T="portage_t"
+PORTAGE_FETCH_T="portage_fetch_t"
+PORTAGE_SANDBOX_T="portage_sandbox_t"
diff --git a/profiles/selinux/2004.1/amd64/lib64/packages b/profiles/selinux/2004.1/amd64/lib64/packages
new file mode 100644
index 000000000000..8f9110d9f7c1
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/lib64/packages
@@ -0,0 +1,20 @@
+# Copyright 1999-2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/lib64/packages,v 1.1 2004/09/20 00:38:34 pebenito Exp $
+
+##############################################################################
+# SELinux required versionings
+
+# Critical xattr fixes:
+>=sys-boot/grub-0.94
+
+# New API SELinux kernels
+>=sys-kernel/gentoo-dev-sources-2.6.0
+>=sys-kernel/hardened-dev-sources-2.6.0
+##############################################################################
+
+*>=sys-apps/baselayout-1.9.4
+*>=sys-apps/portage-2.0.50-r10
+*>=sys-devel/binutils-2.15.90.0.1.1-r1
+*>=sys-devel/gcc-3.3.4
+*>=sys-libs/glibc-2.3.4.20040619-r1
diff --git a/profiles/selinux/2004.1/amd64/lib64/parent b/profiles/selinux/2004.1/amd64/lib64/parent
new file mode 100644
index 000000000000..4627c8bf61b0
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/lib64/parent
@@ -0,0 +1,6 @@
+# Copyright 2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+# $Header: /home/cvsroot/gentoo-x86/profiles/default/x86/2004.0/parent,v 1.2
+# 2004/03/18 00:16:43 seemant Exp $
+
+..
diff --git a/profiles/selinux/2004.1/amd64/make.defaults b/profiles/selinux/2004.1/amd64/make.defaults
new file mode 100644
index 000000000000..aee5a0beecaf
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/make.defaults
@@ -0,0 +1,18 @@
+# Copyright 1999-2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/make.defaults,v 1.1 2004/09/20 00:38:34 pebenito Exp $
+
+USE="amd64 berkdb crypt multilib ncurses pam python readline selinux ssl zlib"
+GRP_STAGE23_USE="amd64 berkdb crypt multilib ncurses pam python readline selinux ssl zlib"
+
+ARCH="amd64"
+ACCEPT_KEYWORDS="amd64"
+FEATURES="strict sfperms"
+POLICYDIR="/etc/security/selinux/src/policy"
+
+CONF_LIBDIR="lib"
+CONF_MULTILIBDIR="lib32"
+
+PORTAGE_T="portage_t"
+PORTAGE_FETCH_T="portage_fetch_t"
+PORTAGE_SANDBOX_T="portage_sandbox_t"
diff --git a/profiles/selinux/2004.1/amd64/packages b/profiles/selinux/2004.1/amd64/packages
new file mode 100644
index 000000000000..874d63189c82
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/packages
@@ -0,0 +1,20 @@
+# Copyright 1999-2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/packages,v 1.1 2004/09/20 00:38:34 pebenito Exp $
+
+##############################################################################
+# SELinux required versionings
+
+# Critical xattr fixes:
+>=sys-boot/grub-0.94
+
+# New API SELinux kernels
+>=sys-kernel/gentoo-dev-sources-2.6.0
+>=sys-kernel/hardened-dev-sources-2.6.0
+##############################################################################
+
+*>=sys-apps/baselayout-1.9.4
+*>=sys-apps/portage-2.0.50-r10
+*>=sys-devel/binutils-2.15.90.0.1.1-r1
+*>=sys-devel/gcc-3.3.4
+*>=sys-libs/glibc-2.3.4.20040619-r1
diff --git a/profiles/selinux/2004.1/amd64/parent b/profiles/selinux/2004.1/amd64/parent
new file mode 100644
index 000000000000..4627c8bf61b0
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/parent
@@ -0,0 +1,6 @@
+# Copyright 2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+# $Header: /home/cvsroot/gentoo-x86/profiles/default/x86/2004.0/parent,v 1.2
+# 2004/03/18 00:16:43 seemant Exp $
+
+..
diff --git a/profiles/selinux/2004.1/amd64/profile.bashrc b/profiles/selinux/2004.1/amd64/profile.bashrc
new file mode 100644
index 000000000000..0ebc1a566b05
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/profile.bashrc
@@ -0,0 +1,63 @@
+# fix for bug 60147, "configure causes sandbox violations when lib64
+# is a directory". currently only works with cvs portage.
+addwrite /usr/lib64/conftest
+addwrite /usr/lib64/cf
+
+# oh goodie, yet ANOTHER sandbox bug!!!! >:|
+# without portage 2.0.51 and the following entries, at least dbus will spew
+# sandbox violations like mad with python in lib64.
+addpredict /usr/lib64/python2.0/
+addpredict /usr/lib64/python2.1/
+addpredict /usr/lib64/python2.2/
+addpredict /usr/lib64/python2.3/
+addpredict /usr/lib64/python2.4/
+addpredict /usr/lib64/python2.5/
+addpredict /usr/lib64/python3.0/
+
+
+# currently theoretical multilib stuff only available if using portage 2.0.51
+CHOST32="i686-pc-linux-gnu"
+CONF_MULTILIBDIR="${CONF_MULTILIBDIR:=lib32}"
+# until everything in the tree understands $(get_libdir), the only sane
+# default for this is lib.
+CONF_LIBDIR="${CONF_LIBDIR:=lib}"
+ARCH_WRAPPER="linux32"
+CC32="gcc32"
+CPP32="g++32"
+
+
+setup_multilib_variables() {
+ # if run via linux32, uname -m will always return i686
+ if [ "$(uname -m)" == "i686" ] ; then
+ CONF_LIBDIR="${CONF_MULTILIBDIR:=lib32}"
+ CHOST="${CHOST32:=i686-pc-linux-gnu}"
+
+ if [ -x /usr/bin/${CC32:=gcc32} ] ; then
+ CC="${CC32:=gcc32}"
+ CPP="${CPP32:=g++32}"
+ else
+ CFLAGS="${CFLAGS} -m32"
+ CXXFLAGS="${CXXFLAGS} -m32"
+ fi
+ else
+ # this isnt needed for profiles that set CONF_LIBDIR, but it
+ # doesnt hurt to be safe.
+ CONF_LIBDIR="${CONF_LIBDIR:=lib64}"
+ fi
+
+ export CONF_LIBDIR
+}
+
+[ "${CCHOST}" == "" -o "${CCHOST}" == "${CHOST}" -o "${CCHOST}" == "${CHOST32}" ] && setup_multilib_variables
+[ "${CONF_MULTILIBDIR}" == "lib" -a "${CONF_LIBDIR}" == "lib64" ] && SKIP_MULTILIB_HACK="YES"
+
+
+# spec switching support only available in gcc 3.4.2-r1 and later
+if [ -n "${USE_SPECS}" ] ; then
+ GCC_VER="$(${CC:=gcc} --version | grep ^gcc | awk '{ print $3 }')"
+ SPECSLOC="/usr/lib/gcc-lib/${CHOST}/${GCC_VER}/"
+ if [ -f ${SPECSLOC}/${USE_SPECS}.specs ] ; then
+ export GCC_SPECS="${SPECSLOC}/${USE_SPECS}.specs"
+ fi
+fi
+
diff --git a/profiles/selinux/2004.1/amd64/use.mask b/profiles/selinux/2004.1/amd64/use.mask
new file mode 100644
index 000000000000..c47505bd32a3
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/use.mask
@@ -0,0 +1,90 @@
+# Copyright 2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/use.mask,v 1.1 2004/09/20 00:38:34 pebenito Exp $
+
+#unknowns
+afs
+drac
+
+# WON'T BUILD - SECTION
+
+# 2004/06/22 - Taken from 2004.0 profile
+# Anything that relies on vm86.h will not built on amd64
+# SVGAlib doesnt build
+svga
+
+# 2004/06/22 - Taken from 2004.0 profile
+# Firebird doesnt build on amd64
+firebird
+
+# 2004/06/22 - Taken from 2004.0 profile
+# x86 binary only, used by php
+fdftk
+
+# 2004/06/22 - Danny van Dyk <kugelfang@gentoo.org>
+# version in portage does not work on amd64 yet
+uclibc
+
+# 2004/06/22 - Taken from 2004.0 profile
+# versions that are in portage do not support amd64,
+# will be removed when Intel issues an update and it gets into portage
+# (it seems to be in the works)
+icc
+ifc
+
+# 2004/06/22 - Taken from 2004.0 profile
+# masked
+3dfx
+
+# 2004/07/22 - Danny van Dyk <kugelfang@gentoo.org>
+# libcaca part of libSDL causes breakage due to missing shared object.
+# BUG #53857
+libcaca
+
+# NOT NECESSARY - SECTION
+
+# 2004/06/22 - Taken from 2004.0 profile
+# Too many packages assume that mmx/sse/sse2/3dnow are 86-32 only things to
+# make them useful on amd64. Anyway, all amd64 cpus have them, so they should
+# not be many flag dependant in this case
+mmx
+mmx2
+sse
+sse2
+3dnow
+
+# 2004/06/22 - Taken from 2004.0 profile
+# Chris PeBenito <pebenito@gentoo.org>
+# must use a SELinux profile
+selinux
+
+# 2004/06/25 - Danny van Dyk <kugelfang@gentoo.org>
+# Known BUGs (#54760) + lack of brain/man power to maintain "hardened" in the
+# default profile. Use the hardened profile instead.
+hardened
+uclibc
+
+# altivec is a ppc instruction set.
+altivec
+
+# see email to gentoo-dev with subject "use.mask and PHP5's crazy IUSE"
+# Dated Sat, 31 Jul 2004 14:49:28 -0700, from robbat2@gentoo.org
+# all of these are binary-only, and not presently available on this
+# architecture.
+adabas
+birdstep
+cpdflib
+dbmaker
+empress
+empress-bcs
+esoob
+filepro
+frontbase
+hyperwave
+informix
+ingres
+pfpro
+solid
+sybase
+sybase-ct
+
diff --git a/profiles/selinux/2004.1/amd64/virtuals b/profiles/selinux/2004.1/amd64/virtuals
new file mode 100644
index 000000000000..465d6ac292a2
--- /dev/null
+++ b/profiles/selinux/2004.1/amd64/virtuals
@@ -0,0 +1,9 @@
+# Copyright 2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/2004.1/amd64/virtuals,v 1.1 2004/09/20 00:38:34 pebenito Exp $
+
+virtual/os-headers sys-kernel/linux26-headers
+virtual/alsa sys-kernel/gentoo-dev-sources
+virtual/kernel sys-kernel/linux26-headers
+virtual/linux-sources sys-kernel/gentoo-dev-sources
+virtual/bootloader sys-boot/grub-static