[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     09a252d8ef2ff9da793bbfc92c9d339c63112466
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Wed Sep  9 13:46:34 2015 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Wed Sep  9 13:46:34 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=09a252d8

sec-policy/selinux-base: Remove outdated check on previous version

Package-Manager: portage-2.2.20.1

 sec-policy/selinux-base/selinux-base-9999.ebuild | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 3fd50ec..c67def2 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -166,8 +166,3 @@ src_install() {
 	insinto /usr/share/portage/config/sets
 	doins "${FILESDIR}/selinux.conf" || die "failed to install selinux-rebuild portage set"
 }
-
-pkg_preinst() {
-	has_version "<${CATEGORY}/${PN}-2.20101213-r13"
-	previous_less_than_r13=$?
-}

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     f92f6a99787e10d1713ab2b81892ece30573d474
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Mon Oct 26 05:50:25 2015 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon Oct 26 05:51:15 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f92f6a99

sec-policy/selinux-base: Add selinux useflag to live ebuild

Package-Manager: portage-2.2.20.1

 sec-policy/selinux-base/selinux-base-9999.ebuild | 39 ++++++++++++------------
 1 file changed, 20 insertions(+), 19 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index c67def2..d86db33 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -20,7 +20,7 @@ else
 	KEYWORDS="~amd64 ~x86"
 fi
 
-IUSE="+peer_perms +open_perms +ubac +unconfined doc"
+IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
 HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
@@ -36,10 +36,6 @@ DEPEND="${RDEPEND}
 
 S=${WORKDIR}/
 
-#src_unpack() {
-#	git-2_src_unpack
-#}
-
 src_prepare() {
 	if [[ ${PV} != 9999* ]]; then
 		# Apply the gentoo patches to the policy. These patches are only necessary
@@ -64,12 +60,12 @@ src_configure() {
 
 	if ! use peer_perms; then
 		sed -i -e '/network_peer_controls/d' \
-			"${S}/refpolicy/policy/policy_capabilities"
+			"${S}/refpolicy/policy/policy_capabilities" || die
 	fi
 
 	if ! use open_perms; then
 		sed -i -e '/open_perms/d' \
-			"${S}/refpolicy/policy/policy_capabilities"
+			"${S}/refpolicy/policy/policy_capabilities" || die
 	fi
 
 	if ! use ubac; then
@@ -77,20 +73,25 @@ src_configure() {
 			|| die "Failed to disable User Based Access Control"
 	fi
 
-	echo "DISTRO = gentoo" >> "${S}/refpolicy/build.conf"
+	if use systemd; then
+		sed -i -e '/^SYSTEMD/s/n/y/' "${S}/refpolicy/build.conf" \
+			|| die "Failed to enable SystemD"
+	fi
+
+	echo "DISTRO = gentoo" >> "${S}/refpolicy/build.conf" || die
 
 	# Prepare initial configuration
-	cd "${S}/refpolicy";
+	cd "${S}/refpolicy" || die
 	make conf || die "Make conf failed"
 
 	# Setup the policies based on the types delivered by the end user.
 	# These types can be "targeted", "strict", "mcs" and "mls".
 	for i in ${POLICY_TYPES}; do
-		cp -a "${S}/refpolicy" "${S}/${i}"
-		cd "${S}/${i}";
+		cp -a "${S}/refpolicy" "${S}/${i}" || die
+		cd "${S}/${i}" || die
 
 		#cp "${FILESDIR}/modules-2.20120215.conf" "${S}/${i}/policy/modules.conf"
-		sed -i -e "/= module/d" "${S}/${i}/policy/modules.conf"
+		sed -i -e "/= module/d" "${S}/${i}/policy/modules.conf" || die
 
 		sed -i -e '/^QUIET/s/n/y/' -e "/^NAME/s/refpolicy/$i/" \
 			"${S}/${i}/build.conf" || die "build.conf setup failed."
@@ -120,10 +121,10 @@ src_compile() {
 	[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
 
 	for i in ${POLICY_TYPES}; do
-		cd "${S}/${i}"
-		emake base || die "${i} compile failed"
+		cd "${S}/${i}" || die
+		emake base
 		if use doc; then
-			make html || die
+			emake html
 		fi
 	done
 }
@@ -132,7 +133,7 @@ src_install() {
 	[ -z "${POLICY_TYPES}" ] && local POLICY_TYPES="targeted strict mls mcs"
 
 	for i in ${POLICY_TYPES}; do
-		cd "${S}/${i}"
+		cd "${S}/${i}" || die
 
 		make DESTDIR="${D}" install \
 			|| die "${i} install failed."
@@ -140,9 +141,9 @@ src_install() {
 		make DESTDIR="${D}" install-headers \
 			|| die "${i} headers install failed."
 
-		echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type"
+		echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type" || die
 
-		echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types"
+		echo "textrel_shlib_t" >> "${D}/etc/selinux/${i}/contexts/customizable_types" || die
 
 		# libsemanage won't make this on its own
 		keepdir "/etc/selinux/${i}/policy"
@@ -164,5 +165,5 @@ src_install() {
 	doins "${FILESDIR}/config"
 
 	insinto /usr/share/portage/config/sets
-	doins "${FILESDIR}/selinux.conf" || die "failed to install selinux-rebuild portage set"
+	doins "${FILESDIR}/selinux.conf"
 }

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Mike Frysinger]

commit:     7e22573fa172e411691dc7ec015a96bbfb4c3242
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Thu Feb 18 19:57:26 2016 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Thu Feb 18 19:57:42 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7e22573f

sec-policy/selinux-base: add arm/arm64/mips love

 sec-policy/selinux-base/selinux-base-2.20151208-r1.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-9999.ebuild          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20151208-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20151208-r1.ebuild
index 8100820..0500257 100644
--- a/sec-policy/selinux-base/selinux-base-2.20151208-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20151208-r1.ebuild
@@ -15,7 +15,7 @@ else
 	SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
 			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
-	KEYWORDS="amd64 x86"
+	KEYWORDS="amd64 ~arm ~arm64 ~mips x86"
 fi
 
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"

diff --git a/sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild
index 77065ca..78c628e 100644
--- a/sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild
@@ -15,7 +15,7 @@ else
 	SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
 			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
-	KEYWORDS="~amd64 ~x86"
+	KEYWORDS="~amd64 ~arm ~arm64 ~mips ~x86"
 fi
 
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 79c2d8a..51af052 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -15,7 +15,7 @@ else
 	SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
 			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
-	KEYWORDS="~amd64 ~x86"
+	KEYWORDS="~amd64 ~arm ~arm64 ~mips ~x86"
 fi
 
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     2f05c0a1d015ad423069639286159fab2be9201b
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Wed Mar 23 22:34:36 2016 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Wed Mar 23 22:37:00 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2f05c0a1

sec-policy/selinux-base: stabilize missed for -r2 policy

Package-Manager: portage-2.2.26

 sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild
index 78c628e..0500257 100644
--- a/sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20151208-r2.ebuild
@@ -15,7 +15,7 @@ else
 	SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
 			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
-	KEYWORDS="~amd64 ~arm ~arm64 ~mips ~x86"
+	KEYWORDS="amd64 ~arm ~arm64 ~mips x86"
 fi
 
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Sven Vermeulen]

commit:     03be95f41593f80752a6ce2a9ab4d564a78d231c
Author:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
AuthorDate: Sun Jun  5 08:46:50 2016 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Sun Jun  5 08:48:14 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=03be95f4

sec-policy/selinux-base: Drop old blocker on selinux-base-policy

The purpose of selinux-base is to provide the interface files and base module
(but does not necessarily require it to load). Historically, the package was
the full base policy, but since 2012 this was moved to the selinux-base-policy
package.

A blocker was put in place to ensure proper transitioning.

As we no longer have these policies in our repository, remove this old
blocker.

Package-Manager: portage-2.2.28

 sec-policy/selinux-base/selinux-base-9999.ebuild | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 51af052..12e1003 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2015 Gentoo Foundation
+# Copyright 1999-2016 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 # $Id$
 EAPI="5"
@@ -26,8 +26,7 @@ LICENSE="GPL-2"
 SLOT="0"
 
 RDEPEND=">=sys-apps/policycoreutils-2.3
-	virtual/udev
-	!<=sec-policy/selinux-base-policy-2.20120725"
+	virtual/udev"
 DEPEND="${RDEPEND}
 	sys-devel/m4
 	>=sys-apps/checkpolicy-2.3"

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     5ddd6219d2dd04977d355f5bc6cea6d8e863c962
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Sun Dec 11 16:23:10 2016 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Dec 11 19:59:45 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5ddd6219

sec-policy/selinux-base: update to EAPI6

Package-Manager: portage-2.3.0

 sec-policy/selinux-base/selinux-base-9999.ebuild | 29 ++++++++++--------------
 1 file changed, 12 insertions(+), 17 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 12e1003..ef52278 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -1,9 +1,7 @@
 # Copyright 1999-2016 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 # $Id$
-EAPI="5"
-
-inherit eutils
+EAPI="6"
 
 if [[ ${PV} == 9999* ]]; then
 	EGIT_REPO_URI="${SELINUX_GIT_REPO:-git://anongit.gentoo.org/proj/hardened-refpolicy.git https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
@@ -35,19 +33,14 @@ S=${WORKDIR}/
 
 src_prepare() {
 	if [[ ${PV} != 9999* ]]; then
-		# Apply the gentoo patches to the policy. These patches are only necessary
-		# for base policies, or for interface changes on modules.
-		EPATCH_MULTI_MSG="Applying SELinux policy updates ... " \
-		EPATCH_SUFFIX="patch" \
-		EPATCH_SOURCE="${WORKDIR}" \
-		EPATCH_FORCE="yes" \
-		epatch
+		einfo "Applying SELinux policy updates ... "
+		eapply -p0 "${WORKDIR}/0001-full-patch-against-stable-release.patch"
 	fi
 
-	cd "${S}/refpolicy"
-	make bare
+	eapply_user
 
-	epatch_user
+	cd "${S}/refpolicy" || die
+	emake bare
 }
 
 src_configure() {
@@ -79,7 +72,7 @@ src_configure() {
 
 	# Prepare initial configuration
 	cd "${S}/refpolicy" || die
-	make conf || die "Make conf failed"
+	emake conf || die "Make conf failed"
 
 	# Setup the policies based on the types delivered by the end user.
 	# These types can be "targeted", "strict", "mcs" and "mls".
@@ -132,10 +125,10 @@ src_install() {
 	for i in ${POLICY_TYPES}; do
 		cd "${S}/${i}" || die
 
-		make DESTDIR="${D}" install \
+		emake DESTDIR="${D}" install \
 			|| die "${i} install failed."
 
-		make DESTDIR="${D}" install-headers \
+		emake DESTDIR="${D}" install-headers \
 			|| die "${i} headers install failed."
 
 		echo "run_init_t" > "${D}/etc/selinux/${i}/contexts/run_init_type" || die
@@ -146,7 +139,8 @@ src_install() {
 		keepdir "/etc/selinux/${i}/policy"
 
 		if use doc; then
-			dohtml doc/html/*;
+			docinto ${i}/html
+			dodoc -r doc/html/*;
 		fi
 
 		insinto /usr/share/selinux/devel;
@@ -154,6 +148,7 @@ src_install() {
 
 	done
 
+	docinto /
 	dodoc doc/Makefile.example doc/example.{te,fc,if}
 
 	doman man/man8/*.8;

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     e8e02844e1740f3ea610019ab1667390ef5ca5f2
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Sun Aug 27 14:57:12 2017 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sun Aug 27 14:57:12 2017 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e8e02844

sec-policy/selinux-base: drop insecure git:// path in favour of https://

Package-Manager: Portage-2.3.6, Repoman-2.3.1

 sec-policy/selinux-base/selinux-base-9999.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 29b2fee3bf1..9ad7a4351bd 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -3,7 +3,7 @@
 EAPI="6"
 
 if [[ ${PV} == 9999* ]]; then
-	EGIT_REPO_URI="${SELINUX_GIT_REPO:-git://anongit.gentoo.org/proj/hardened-refpolicy.git https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
+	EGIT_REPO_URI="${SELINUX_GIT_REPO:-https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
 	EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}"
 	EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy"
 

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Sven Vermeulen]

commit:     cca6ad29df3a788343620d84dd6423aa0fb7cbf5
Author:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
AuthorDate: Thu Jan 18 17:46:12 2018 +0000
Commit:     Sven Vermeulen <swift <AT> gentoo <DOT> org>
CommitDate: Thu Jan 18 17:46:56 2018 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cca6ad29

sec-policy/selinux-base: Dependency on higher/latest SELinux userspace

Package-Manager: Portage-2.3.19, Repoman-2.3.6

 sec-policy/selinux-base/selinux-base-9999.ebuild | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 75f0679ab23..72864e5e303 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -23,11 +23,11 @@ HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.3
+RDEPEND=">=sys-apps/policycoreutils-2.7
 	virtual/udev"
 DEPEND="${RDEPEND}
 	sys-devel/m4
-	>=sys-apps/checkpolicy-2.3"
+	>=sys-apps/checkpolicy-2.7"
 
 S=${WORKDIR}/
 

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Patrice Clement]

commit:     46b2d8fcf0f699be4e665942d8e9335c999b9700
Author:     Michael Mair-Keimberger <m.mairkeimberger <AT> gmail <DOT> com>
AuthorDate: Sat Feb 17 15:55:41 2018 +0000
Commit:     Patrice Clement <monsieurp <AT> gentoo <DOT> org>
CommitDate: Sun Feb 18 17:15:04 2018 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=46b2d8fc

sec-policy/selinux-base: fix HOMEPAGE.

 sec-policy/selinux-base/selinux-base-2.20170204-r1.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20170204-r2.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20170204-r3.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20170204-r4.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20170805-r2.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20170805-r3.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20170805-r4.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-9999.ebuild          | 2 +-
 9 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20170204-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20170204-r1.ebuild
index e868d90864d..c820f10346b 100644
--- a/sec-policy/selinux-base/selinux-base-2.20170204-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20170204-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20170204-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20170204-r2.ebuild
index 71409d1bb6c..93269b394a8 100644
--- a/sec-policy/selinux-base/selinux-base-2.20170204-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20170204-r2.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20170204-r3.ebuild b/sec-policy/selinux-base/selinux-base-2.20170204-r3.ebuild
index 71409d1bb6c..93269b394a8 100644
--- a/sec-policy/selinux-base/selinux-base-2.20170204-r3.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20170204-r3.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20170204-r4.ebuild b/sec-policy/selinux-base/selinux-base-2.20170204-r4.ebuild
index 71409d1bb6c..93269b394a8 100644
--- a/sec-policy/selinux-base/selinux-base-2.20170204-r4.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20170204-r4.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20170805-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20170805-r2.ebuild
index c2ac18ef37a..072e411f021 100644
--- a/sec-policy/selinux-base/selinux-base-2.20170805-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20170805-r2.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20170805-r3.ebuild b/sec-policy/selinux-base/selinux-base-2.20170805-r3.ebuild
index c2ac18ef37a..072e411f021 100644
--- a/sec-policy/selinux-base/selinux-base-2.20170805-r3.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20170805-r3.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20170805-r4.ebuild b/sec-policy/selinux-base/selinux-base-2.20170805-r4.ebuild
index 75f0679ab23..868a49d1c08 100644
--- a/sec-policy/selinux-base/selinux-base-2.20170805-r4.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20170805-r4.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild
index 32019798de7..17235751cf3 100644
--- a/sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 72864e5e303..b779ed9e7cf 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -19,7 +19,7 @@ fi
 IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
-HOMEPAGE="https://www.gentoo.org/proj/en/hardened/selinux/"
+HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     171ce4a06b0f2e5e7a747ebc83f96aff8c35e1c6
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Thu Jul 12 14:32:20 2018 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Jul 12 15:28:32 2018 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=171ce4a0

sec-policy/selinux-base: update SRC_URI

Package-Manager: Portage-2.3.40, Repoman-2.3.9

 sec-policy/selinux-base/selinux-base-9999.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index b779ed9e7cf..6da755d1665 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -10,7 +10,7 @@ if [[ ${PV} == 9999* ]]; then
 
 	inherit git-r3
 else
-	SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
+	SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2
 			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
 	KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86"

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     181e91a3b79035df18b5c53640fa3026a022ab98
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Thu Jul 12 15:04:29 2018 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Thu Jul 12 15:28:39 2018 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=181e91a3

sec-policy/selinux-base: 2.20180701 policies require userspace 2.8

Package-Manager: Portage-2.3.40, Repoman-2.3.9

 sec-policy/selinux-base/selinux-base-9999.ebuild | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 6da755d1665..000ddea14dd 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -23,11 +23,11 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.7
+RDEPEND=">=sys-apps/policycoreutils-2.8
 	virtual/udev"
 DEPEND="${RDEPEND}
 	sys-devel/m4
-	>=sys-apps/checkpolicy-2.7"
+	>=sys-apps/checkpolicy-2.8"
 
 S=${WORKDIR}/
 

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     5a52527eff95ab73ec3d1418019a9cc318db3726
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Sat Apr 20 08:20:19 2019 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Apr 20 08:23:40 2019 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5a52527e

sec-policy/selinux-base: move patches to my dev space

Swift is retiring so move the SRC_URI for all the patches to
dev.gentoo.org/~perfinion/patches/ instead.

Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
Package-Manager: Portage-2.3.62, Repoman-2.3.11

 sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20180114-r2.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20180114-r3.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20180701-r1.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20180701-r2.ebuild | 4 ++--
 sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-9999.ebuild          | 4 ++--
 7 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild
index 17235751cf3..5c86e23535c 100644
--- a/sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20180114-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2018 Gentoo Foundation
+# Copyright 1999-2019 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -11,7 +11,7 @@ if [[ ${PV} == 9999* ]]; then
 	inherit git-r3
 else
 	SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
-			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
+			https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
 	KEYWORDS="amd64 -arm ~arm64 ~mips x86"
 fi

diff --git a/sec-policy/selinux-base/selinux-base-2.20180114-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20180114-r2.ebuild
index 17235751cf3..5c86e23535c 100644
--- a/sec-policy/selinux-base/selinux-base-2.20180114-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20180114-r2.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2018 Gentoo Foundation
+# Copyright 1999-2019 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -11,7 +11,7 @@ if [[ ${PV} == 9999* ]]; then
 	inherit git-r3
 else
 	SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
-			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
+			https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
 	KEYWORDS="amd64 -arm ~arm64 ~mips x86"
 fi

diff --git a/sec-policy/selinux-base/selinux-base-2.20180114-r3.ebuild b/sec-policy/selinux-base/selinux-base-2.20180114-r3.ebuild
index b779ed9e7cf..b4344907d54 100644
--- a/sec-policy/selinux-base/selinux-base-2.20180114-r3.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20180114-r3.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2018 Gentoo Foundation
+# Copyright 1999-2019 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -11,7 +11,7 @@ if [[ ${PV} == 9999* ]]; then
 	inherit git-r3
 else
 	SRC_URI="https://raw.githubusercontent.com/wiki/TresysTechnology/refpolicy/files/refpolicy-${PV}.tar.bz2
-			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
+			https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
 	KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86"
 fi

diff --git a/sec-policy/selinux-base/selinux-base-2.20180701-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20180701-r1.ebuild
index 4cfcbe775ba..020f30cfb94 100644
--- a/sec-policy/selinux-base/selinux-base-2.20180701-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20180701-r1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2018 Gentoo Foundation
+# Copyright 1999-2019 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -11,7 +11,7 @@ if [[ ${PV} == 9999* ]]; then
 	inherit git-r3
 else
 	SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2
-			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
+			https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
 	KEYWORDS="amd64 -arm ~arm64 ~mips x86"
 fi

diff --git a/sec-policy/selinux-base/selinux-base-2.20180701-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20180701-r2.ebuild
index 32e8fed4269..942ea13d67f 100644
--- a/sec-policy/selinux-base/selinux-base-2.20180701-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20180701-r2.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2018 Gentoo Authors
+# Copyright 1999-2019 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -11,7 +11,7 @@ if [[ ${PV} == 9999* ]]; then
 	inherit git-r3
 else
 	SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2
-			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
+			https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
 	KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86"
 fi

diff --git a/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
index e34c4523afe..942ea13d67f 100644
--- a/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
@@ -11,7 +11,7 @@ if [[ ${PV} == 9999* ]]; then
 	inherit git-r3
 else
 	SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2
-			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
+			https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
 	KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86"
 fi

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 000ddea14dd..942ea13d67f 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2018 Gentoo Foundation
+# Copyright 1999-2019 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -11,7 +11,7 @@ if [[ ${PV} == 9999* ]]; then
 	inherit git-r3
 else
 	SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2
-			https://dev.gentoo.org/~swift/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
+			https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
 	KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86"
 fi

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     da8b7c85dee97c773d1595d2f4e41e4426ca8b13
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Mon Dec 16 12:23:23 2019 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Sat Dec 21 14:00:44 2019 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=da8b7c85

sec-policy/selinux-base: Add unknown-perms policy capability

Package-Manager: Portage-2.3.79, Repoman-2.3.16
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 sec-policy/selinux-base/metadata.xml             |  1 +
 sec-policy/selinux-base/selinux-base-9999.ebuild | 15 ++++++---------
 2 files changed, 7 insertions(+), 9 deletions(-)

diff --git a/sec-policy/selinux-base/metadata.xml b/sec-policy/selinux-base/metadata.xml
index 16f3d9c00e6..cf565be6f04 100644
--- a/sec-policy/selinux-base/metadata.xml
+++ b/sec-policy/selinux-base/metadata.xml
@@ -14,5 +14,6 @@
 		<flag name="open_perms">Enable the open permissions for file object classes (SELinux policy capability).</flag>
 		<flag name="ubac">Enable User Based Access Control (UBAC) in the SELinux policy</flag>
 		<flag name="unconfined">Enable support for the unconfined SELinux module</flag>
+		<flag name="unknown-perms">Default allow unknown classes in kernels newer than the policy (SELinux policy capability).</flag>
 	</use>
 </pkgmetadata>

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 16ee9f2b2ab..5342853efec 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -16,7 +16,7 @@ else
 	KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86"
 fi
 
-IUSE="doc +open_perms +peer_perms systemd +ubac +unconfined"
+IUSE="doc +unknown-perms systemd +ubac +unconfined"
 
 DESCRIPTION="Gentoo base policy for SELinux"
 HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
@@ -48,14 +48,11 @@ src_configure() {
 
 	# Update the SELinux refpolicy capabilities based on the users' USE flags.
 
-	if ! use peer_perms; then
-		sed -i -e '/network_peer_controls/d' \
-			"${S}/refpolicy/policy/policy_capabilities" || die
-	fi
-
-	if ! use open_perms; then
-		sed -i -e '/open_perms/d' \
-			"${S}/refpolicy/policy/policy_capabilities" || die
+	if use unknown-perms; then
+		sed -i -e '/^UNK_PERMS/s/deny/allow/' "${S}/refpolicy/build.conf" \
+			|| die "Failed to allow Unknown Permissions Handling"
+		sed -i -e '/^UNK_PERMS/s/deny/allow/' "${S}/refpolicy/Makefile" \
+			|| die "Failed to allow Unknown Permissions Handling"
 	fi
 
 	if ! use ubac; then

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jason Zaman]

commit:     5264e3ef824d7debff99038a4285b0de6c363914
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Tue Nov  3 05:27:33 2020 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Tue Nov  3 05:27:33 2020 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5264e3ef

sec-policy/selinux-base: Drop unnecessary virtual/udev dep

Closes: https://bugs.gentoo.org/752186
Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild | 3 +--
 sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild | 3 +--
 sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild | 3 +--
 sec-policy/selinux-base/selinux-base-9999.ebuild          | 5 ++---
 4 files changed, 5 insertions(+), 9 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
index c172a8fdb9b..818af8e1c44 100644
--- a/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
@@ -23,8 +23,7 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.8
-	virtual/udev"
+RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}
 	sys-devel/m4
 	>=sys-apps/checkpolicy-2.8"

diff --git a/sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild
index fcc6faca334..c11baced556 100644
--- a/sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild
@@ -23,8 +23,7 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.8
-	virtual/udev"
+RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}
 	sys-devel/m4
 	>=sys-apps/checkpolicy-2.8"

diff --git a/sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild
index bb95a29ae65..a16000f9802 100644
--- a/sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild
@@ -23,8 +23,7 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.8
-	virtual/udev"
+RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}
 	sys-devel/m4
 	>=sys-apps/checkpolicy-2.8"

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 5342853efec..a16000f9802 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -23,8 +23,7 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.8
-	virtual/udev"
+RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}
 	sys-devel/m4
 	>=sys-apps/checkpolicy-2.8"

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Sam James]

commit:     e95da4d04a00591133eefbf8df6dd6121b4ea472
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Tue Nov  2 14:49:46 2021 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Tue Nov  2 14:50:17 2021 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e95da4d0

sec-policy/selinux-base: use python-any-r1 (needs Python to generate XML)

Noticed after checking downstream for any changes we should pick up:
https://github.com/flatcar-linux/coreos-overlay/commit/3086ea99010fc51cced60a7badc572feaaf551f6.

Closes: https://bugs.gentoo.org/770901
Signed-off-by: Sam James <sam <AT> gentoo.org>

 sec-policy/selinux-base/selinux-base-2.20210203-r1.ebuild | 5 +++++
 sec-policy/selinux-base/selinux-base-9999.ebuild          | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/sec-policy/selinux-base/selinux-base-2.20210203-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20210203-r1.ebuild
index 7597060e52e..30334fc4b6f 100644
--- a/sec-policy/selinux-base/selinux-base-2.20210203-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20210203-r1.ebuild
@@ -3,6 +3,10 @@
 
 EAPI="7"
 
+PYTHON_COMPAT=( python3_{8,9,10} )
+PYTHON_REQ_USE="xml"
+inherit python-any-r1
+
 if [[ ${PV} == 9999* ]]; then
 	EGIT_REPO_URI="${SELINUX_GIT_REPO:-https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
 	EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}"
@@ -26,6 +30,7 @@ SLOT="0"
 RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}"
 BDEPEND="
+	${PYTHON_DEPS}
 	>=sys-apps/checkpolicy-2.8
 	sys-devel/m4"
 

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 72948d1e2c9..f9dcacae70f 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -3,6 +3,10 @@
 
 EAPI="7"
 
+PYTHON_COMPAT=( python3_{8,9,10} )
+PYTHON_REQ_USE="xml"
+inherit python-any-r1
+
 if [[ ${PV} == 9999* ]]; then
 	EGIT_REPO_URI="${SELINUX_GIT_REPO:-https://anongit.gentoo.org/git/proj/hardened-refpolicy.git}"
 	EGIT_BRANCH="${SELINUX_GIT_BRANCH:-master}"
@@ -26,6 +30,7 @@ SLOT="0"
 RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}"
 BDEPEND="
+	${PYTHON_DEPS}
 	>=sys-apps/checkpolicy-2.8
 	sys-devel/m4"
 

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Michał Górny]

commit:     fe5330e08bed15648fc35e4b9f6e717eb8c89fae
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Sun Sep  4 19:43:24 2022 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Wed Sep  7 07:52:06 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fe5330e0

sec-policy/selinux-base: Update PYTHON_REQ_USE to xml(+)

Update PYTHON_REQ_USE to specify "xml(+)", as Python 3.11 no longer
features the "xml" flag.

Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 sec-policy/selinux-base/selinux-base-2.20220106-r1.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-2.20220106-r2.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-2.20220106-r3.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-2.20220520-r1.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-9999.ebuild          | 4 ++--
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20220106-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20220106-r1.ebuild
index 16ffa2766f65..794e2cddbca9 100644
--- a/sec-policy/selinux-base/selinux-base-2.20220106-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20220106-r1.ebuild
@@ -4,7 +4,7 @@
 EAPI="7"
 
 PYTHON_COMPAT=( python3_{8,9,10} )
-PYTHON_REQ_USE="xml"
+PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 
 if [[ ${PV} == 9999* ]]; then

diff --git a/sec-policy/selinux-base/selinux-base-2.20220106-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20220106-r2.ebuild
index 16ffa2766f65..794e2cddbca9 100644
--- a/sec-policy/selinux-base/selinux-base-2.20220106-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20220106-r2.ebuild
@@ -4,7 +4,7 @@
 EAPI="7"
 
 PYTHON_COMPAT=( python3_{8,9,10} )
-PYTHON_REQ_USE="xml"
+PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 
 if [[ ${PV} == 9999* ]]; then

diff --git a/sec-policy/selinux-base/selinux-base-2.20220106-r3.ebuild b/sec-policy/selinux-base/selinux-base-2.20220106-r3.ebuild
index 16ffa2766f65..794e2cddbca9 100644
--- a/sec-policy/selinux-base/selinux-base-2.20220106-r3.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20220106-r3.ebuild
@@ -4,7 +4,7 @@
 EAPI="7"
 
 PYTHON_COMPAT=( python3_{8,9,10} )
-PYTHON_REQ_USE="xml"
+PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 
 if [[ ${PV} == 9999* ]]; then

diff --git a/sec-policy/selinux-base/selinux-base-2.20220520-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20220520-r1.ebuild
index 659fad659691..6926182d8e27 100644
--- a/sec-policy/selinux-base/selinux-base-2.20220520-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20220520-r1.ebuild
@@ -4,7 +4,7 @@
 EAPI="7"
 
 PYTHON_COMPAT=( python3_{8,9,10} )
-PYTHON_REQ_USE="xml"
+PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 
 if [[ ${PV} == 9999* ]]; then

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index f9dcacae70f1..6926182d8e27 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -1,10 +1,10 @@
-# Copyright 1999-2021 Gentoo Authors
+# Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="7"
 
 PYTHON_COMPAT=( python3_{8,9,10} )
-PYTHON_REQ_USE="xml"
+PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 
 if [[ ${PV} == 9999* ]]; then

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Kenton Groombridge]

commit:     85b212c973585130d4702a4c868f8b0b46b5d260
Author:     Kenton Groombridge <concord <AT> gentoo <DOT> org>
AuthorDate: Fri Mar 31 17:13:50 2023 +0000
Commit:     Kenton Groombridge <concord <AT> gentoo <DOT> org>
CommitDate: Fri Mar 31 18:22:30 2023 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=85b212c9

sec-policy/selinux-base: enable py3.11

Closes: https://bugs.gentoo.org/897250
Signed-off-by: Kenton Groombridge <concord <AT> gentoo.org>

 sec-policy/selinux-base/selinux-base-2.20221101-r2.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-2.20221101-r3.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-9999.ebuild          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20221101-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20221101-r2.ebuild
index 18ba1231c5b6..d38a576e7f7d 100644
--- a/sec-policy/selinux-base/selinux-base-2.20221101-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20221101-r2.ebuild
@@ -3,7 +3,7 @@
 
 EAPI="7"
 
-PYTHON_COMPAT=( python3_{9,10} )
+PYTHON_COMPAT=( python3_{9..11} )
 PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20221101-r3.ebuild b/sec-policy/selinux-base/selinux-base-2.20221101-r3.ebuild
index 18ba1231c5b6..d38a576e7f7d 100644
--- a/sec-policy/selinux-base/selinux-base-2.20221101-r3.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20221101-r3.ebuild
@@ -3,7 +3,7 @@
 
 EAPI="7"
 
-PYTHON_COMPAT=( python3_{9,10} )
+PYTHON_COMPAT=( python3_{9..11} )
 PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 2c15225073f4..11859691550d 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -3,7 +3,7 @@
 
 EAPI="7"
 
-PYTHON_COMPAT=( python3_{9,10} )
+PYTHON_COMPAT=( python3_{9..11} )
 PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Kenton Groombridge]

commit:     c35b5449cfd7ecbacb7244e0d008b551ab21e235
Author:     Kenton Groombridge <concord <AT> gentoo <DOT> org>
AuthorDate: Mon Jul  8 13:31:52 2024 +0000
Commit:     Kenton Groombridge <concord <AT> gentoo <DOT> org>
CommitDate: Mon Jul  8 13:33:04 2024 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c35b5449

sec-policy/selinux-base: enable py3.12

Closes: https://bugs.gentoo.org/929805
Signed-off-by: Kenton Groombridge <concord <AT> gentoo.org>

 sec-policy/selinux-base/selinux-base-2.20240226-r1.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild | 2 +-
 sec-policy/selinux-base/selinux-base-9999.ebuild          | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20240226-r1.ebuild b/sec-policy/selinux-base/selinux-base-2.20240226-r1.ebuild
index 25a937600d34..4fa0e038ce61 100644
--- a/sec-policy/selinux-base/selinux-base-2.20240226-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20240226-r1.ebuild
@@ -3,7 +3,7 @@
 
 EAPI="7"
 
-PYTHON_COMPAT=( python3_{9..11} )
+PYTHON_COMPAT=( python3_{10..12} )
 PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 

diff --git a/sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild
index 25a937600d34..4fa0e038ce61 100644
--- a/sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild
@@ -3,7 +3,7 @@
 
 EAPI="7"
 
-PYTHON_COMPAT=( python3_{9..11} )
+PYTHON_COMPAT=( python3_{10..12} )
 PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 

diff --git a/sec-policy/selinux-base/selinux-base-9999.ebuild b/sec-policy/selinux-base/selinux-base-9999.ebuild
index 11859691550d..bd1990dd7d94 100644
--- a/sec-policy/selinux-base/selinux-base-9999.ebuild
+++ b/sec-policy/selinux-base/selinux-base-9999.ebuild
@@ -1,9 +1,9 @@
-# Copyright 1999-2023 Gentoo Authors
+# Copyright 1999-2024 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="7"
 
-PYTHON_COMPAT=( python3_{9..11} )
+PYTHON_COMPAT=( python3_{10..12} )
 PYTHON_REQ_USE="xml(+)"
 inherit python-any-r1
 

[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

[Jakov Smolić]

commit:     113dbe814c7d5183d8a2bcacd5c132e6053c457e
Author:     Jakov Smolić <jsmolic <AT> gentoo <DOT> org>
AuthorDate: Fri Jul 19 19:50:28 2024 +0000
Commit:     Jakov Smolić <jsmolic <AT> gentoo <DOT> org>
CommitDate: Fri Jul 19 19:50:28 2024 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=113dbe81

sec-policy/selinux-base: Keyword 2.20240226-r2 riscv, #936297

Signed-off-by: Jakov Smolić <jsmolic <AT> gentoo.org>

 sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild b/sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild
index 4fa0e038ce61..1d65f2c54201 100644
--- a/sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20240226-r2.ebuild
@@ -17,7 +17,7 @@ else
 	SRC_URI="https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_${PV/./_}/refpolicy-${PV}.tar.bz2
 			https://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-${PVR}.tar.bz2"
 
-	KEYWORDS="amd64 arm arm64 ~mips x86"
+	KEYWORDS="amd64 arm arm64 ~mips ~riscv x86"
 fi
 
 IUSE="doc +unknown-perms systemd +ubac +unconfined"