[gentoo-commits] repo/gentoo:master commit in: media-sound/qjackctl/
commit: 76d95b35844b6f16cdf2ff47b947b2a47ffa529f
Author: Miroslav Šulc gentoo org>
AuthorDate: Sun Feb 7 07:52:25 2021 +
Commit: Miroslav Šulc gentoo org>
CommitDate: Sun Feb 7 07:52:38 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=76d95b35
media-sound/qjackctl: 0.9.0 reverted back to stable
Package-Manager: Portage-3.0.14, Repoman-3.0.2
Signed-off-by: Miroslav Šulc gentoo.org>
media-sound/qjackctl/qjackctl-0.9.0.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/media-sound/qjackctl/qjackctl-0.9.0.ebuild
b/media-sound/qjackctl/qjackctl-0.9.0.ebuild
index 3090126b6c2..13ebdc3b69b 100644
--- a/media-sound/qjackctl/qjackctl-0.9.0.ebuild
+++ b/media-sound/qjackctl/qjackctl-0.9.0.ebuild
@@ -11,7 +11,7 @@ SRC_URI="mirror://sourceforge/qjackctl/${P}.tar.gz"
LICENSE="GPL-2"
SLOT="0"
-KEYWORDS="~amd64 ~x86"
+KEYWORDS="amd64 x86"
IUSE="alsa dbus debug portaudio"
BDEPEND="dev-qt/linguist-tools:5"
[gentoo-commits] repo/gentoo:master commit in: sys-libs/llvm-libunwind/
commit: cdd3b24a02784a2e772fb995ad69a80710f1bc0a Author: Sergei Trofimovich gentoo org> AuthorDate: Sun Feb 7 06:50:05 2021 + Commit: Sergei Trofimovich gentoo org> CommitDate: Sun Feb 7 06:56:42 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cdd3b24a sys-libs/llvm-libunwind: disable USE=static-libs by default Bug: https://bugs.gentoo.org/760504 Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sergei Trofimovich gentoo.org> sys-libs/llvm-libunwind/llvm-libunwind-10.0.1.ebuild | 4 ++-- sys-libs/llvm-libunwind/llvm-libunwind-11.0.0.ebuild | 4 ++-- sys-libs/llvm-libunwind/llvm-libunwind-11.0.1.ebuild | 2 +- sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc1.ebuild | 2 +- sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc2.ebuild | 2 +- sys-libs/llvm-libunwind/llvm-libunwind-12.0.0..ebuild | 2 +- sys-libs/llvm-libunwind/llvm-libunwind-12.0.0_rc1.ebuild | 2 +- sys-libs/llvm-libunwind/llvm-libunwind-13.0.0..ebuild | 2 +- sys-libs/llvm-libunwind/llvm-libunwind-9.0.1.ebuild | 4 ++-- 9 files changed, 12 insertions(+), 12 deletions(-) diff --git a/sys-libs/llvm-libunwind/llvm-libunwind-10.0.1.ebuild b/sys-libs/llvm-libunwind/llvm-libunwind-10.0.1.ebuild index 13cab062c86..7be495a5778 100644 --- a/sys-libs/llvm-libunwind/llvm-libunwind-10.0.1.ebuild +++ b/sys-libs/llvm-libunwind/llvm-libunwind-10.0.1.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2020 Gentoo Authors +# Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=7 @@ -16,7 +16,7 @@ llvm.org_set_globals LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="amd64 arm arm64 x86" -IUSE="debug +static-libs test" +IUSE="debug static-libs test" RESTRICT="!test? ( test )" RDEPEND="!sys-libs/libunwind" diff --git a/sys-libs/llvm-libunwind/llvm-libunwind-11.0.0.ebuild b/sys-libs/llvm-libunwind/llvm-libunwind-11.0.0.ebuild index 5f0e806022c..8d86e39b63f 100644 --- a/sys-libs/llvm-libunwind/llvm-libunwind-11.0.0.ebuild +++ b/sys-libs/llvm-libunwind/llvm-libunwind-11.0.0.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2020 Gentoo Authors +# Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=7 @@ -16,7 +16,7 @@ llvm.org_set_globals LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="amd64 arm arm64 x86 ~x64-macos" -IUSE="debug +static-libs test" +IUSE="debug static-libs test" RESTRICT="!test? ( test )" RDEPEND="!sys-libs/libunwind" diff --git a/sys-libs/llvm-libunwind/llvm-libunwind-11.0.1.ebuild b/sys-libs/llvm-libunwind/llvm-libunwind-11.0.1.ebuild index 7427b7f7c97..0856ae1999e 100644 --- a/sys-libs/llvm-libunwind/llvm-libunwind-11.0.1.ebuild +++ b/sys-libs/llvm-libunwind/llvm-libunwind-11.0.1.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://github.com/llvm-mirror/libunwind"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="~amd64 ~arm ~arm64 ~x86 ~x64-macos" -IUSE="debug +static-libs test" +IUSE="debug static-libs test" RESTRICT="!test? ( test )" RDEPEND="!sys-libs/libunwind" diff --git a/sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc1.ebuild b/sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc1.ebuild index 7c1fd0a6d8e..350dc8c7737 100644 --- a/sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc1.ebuild +++ b/sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc1.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://github.com/llvm-mirror/libunwind"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="debug +static-libs test" +IUSE="debug static-libs test" RESTRICT="!test? ( test )" RDEPEND="!sys-libs/libunwind" diff --git a/sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc2.ebuild b/sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc2.ebuild index 7c1fd0a6d8e..350dc8c7737 100644 --- a/sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc2.ebuild +++ b/sys-libs/llvm-libunwind/llvm-libunwind-11.1.0_rc2.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://github.com/llvm-mirror/libunwind"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="debug +static-libs test" +IUSE="debug static-libs test" RESTRICT="!test? ( test )" RDEPEND="!sys-libs/libunwind" diff --git a/sys-libs/llvm-libunwind/llvm-libunwind-12.0.0..ebuild b/sys-libs/llvm-libunwind/llvm-libunwind-12.0.0..ebuild index 0e6da829854..bf538b66689 100644 --- a/sys-libs/llvm-libunwind/llvm-libunwind-12.0.0..ebuild +++ b/sys-libs/llvm-libunwind/llvm-libunwind-12.0.0..ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://github.com/llvm-mirror/libunwind"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="debug +static-libs test" +IUSE="debug static-libs test" RESTRICT="!test? ( test )" RDEPEND="!sys-libs/libunwind" diff --git a/sys-libs/llvm-libunwind/llvm-libunwind-12.0.0_rc1.ebuild b/sys-li
[gentoo-commits] repo/gentoo:master commit in: sys-libs/libcxx/
commit: 813d3bab893e257e2315cb9ba1c96dbb3c359179 Author: Sergei Trofimovich gentoo org> AuthorDate: Sun Feb 7 06:53:42 2021 + Commit: Sergei Trofimovich gentoo org> CommitDate: Sun Feb 7 06:56:43 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=813d3bab sys-libs/libcxx: disable USE=static-libs by default Bug: https://bugs.gentoo.org/760504 Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sergei Trofimovich gentoo.org> sys-libs/libcxx/libcxx-10.0.1.ebuild | 4 ++-- sys-libs/libcxx/libcxx-11.0.0.ebuild | 2 +- sys-libs/libcxx/libcxx-11.0.1.ebuild | 2 +- sys-libs/libcxx/libcxx-11.1.0_rc1.ebuild | 2 +- sys-libs/libcxx/libcxx-11.1.0_rc2.ebuild | 2 +- sys-libs/libcxx/libcxx-12.0.0..ebuild | 2 +- sys-libs/libcxx/libcxx-12.0.0_rc1.ebuild | 2 +- sys-libs/libcxx/libcxx-13.0.0..ebuild | 2 +- sys-libs/libcxx/libcxx-9.0.1.ebuild | 4 ++-- 9 files changed, 11 insertions(+), 11 deletions(-) diff --git a/sys-libs/libcxx/libcxx-10.0.1.ebuild b/sys-libs/libcxx/libcxx-10.0.1.ebuild index 42d16c17aa1..4f386c12837 100644 --- a/sys-libs/libcxx/libcxx-10.0.1.ebuild +++ b/sys-libs/libcxx/libcxx-10.0.1.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2020 Gentoo Authors +# Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=7 @@ -15,7 +15,7 @@ llvm.org_set_globals LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="amd64 arm arm64 x86" -IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind +static-libs test" +IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind static-libs test" REQUIRED_USE="libunwind? ( libcxxabi )" RESTRICT="!test? ( test )" diff --git a/sys-libs/libcxx/libcxx-11.0.0.ebuild b/sys-libs/libcxx/libcxx-11.0.0.ebuild index 83f5fdb6ce1..f63adc4cf51 100644 --- a/sys-libs/libcxx/libcxx-11.0.0.ebuild +++ b/sys-libs/libcxx/libcxx-11.0.0.ebuild @@ -15,7 +15,7 @@ llvm.org_set_globals LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="amd64 arm arm64 ~riscv x86 ~x64-macos" -IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind +static-libs test" +IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind static-libs test" REQUIRED_USE="libunwind? ( libcxxabi )" RESTRICT="!test? ( test )" diff --git a/sys-libs/libcxx/libcxx-11.0.1.ebuild b/sys-libs/libcxx/libcxx-11.0.1.ebuild index acb3f6367ef..9414c15c0f4 100644 --- a/sys-libs/libcxx/libcxx-11.0.1.ebuild +++ b/sys-libs/libcxx/libcxx-11.0.1.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxx.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="~amd64 ~arm ~arm64 ~riscv ~x86 ~x64-macos" -IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind +static-libs test" +IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind static-libs test" REQUIRED_USE="libunwind? ( libcxxabi )" RESTRICT="!test? ( test )" diff --git a/sys-libs/libcxx/libcxx-11.1.0_rc1.ebuild b/sys-libs/libcxx/libcxx-11.1.0_rc1.ebuild index 76372b775b8..8ed99383fe0 100644 --- a/sys-libs/libcxx/libcxx-11.1.0_rc1.ebuild +++ b/sys-libs/libcxx/libcxx-11.1.0_rc1.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxx.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind +static-libs test" +IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind static-libs test" REQUIRED_USE="libunwind? ( libcxxabi )" RESTRICT="!test? ( test )" diff --git a/sys-libs/libcxx/libcxx-11.1.0_rc2.ebuild b/sys-libs/libcxx/libcxx-11.1.0_rc2.ebuild index 76372b775b8..8ed99383fe0 100644 --- a/sys-libs/libcxx/libcxx-11.1.0_rc2.ebuild +++ b/sys-libs/libcxx/libcxx-11.1.0_rc2.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxx.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind +static-libs test" +IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind static-libs test" REQUIRED_USE="libunwind? ( libcxxabi )" RESTRICT="!test? ( test )" diff --git a/sys-libs/libcxx/libcxx-12.0.0..ebuild b/sys-libs/libcxx/libcxx-12.0.0..ebuild index 76372b775b8..8ed99383fe0 100644 --- a/sys-libs/libcxx/libcxx-12.0.0..ebuild +++ b/sys-libs/libcxx/libcxx-12.0.0..ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxx.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind +static-libs test" +IUSE="elibc_glibc elibc_musl +libcxxabi +libunwind static-libs test" REQUIRED_USE="libunwind? ( libcxxabi )" RESTRICT="!test? ( test )" diff --git a/sys-libs/libcxx/libcxx-12.0.0_rc1.ebuild b/sys-libs/libcxx/libcxx-12.0.0_rc1.ebuild index 76372b775b8..8ed99383fe0 100644 --- a/sys-libs/libcxx/libcxx-12.0.0_rc1.ebuild +++ b/sys-libs/libcxx/libcxx-12.0.0_rc1.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxx.llvm.org/"; LICENSE="Apache-2.0-wit
[gentoo-commits] repo/gentoo:master commit in: sys-libs/libcxxabi/
commit: 7efebd7f39451b58ea044854552699b798e747e1 Author: Sergei Trofimovich gentoo org> AuthorDate: Sun Feb 7 06:51:40 2021 + Commit: Sergei Trofimovich gentoo org> CommitDate: Sun Feb 7 06:56:42 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7efebd7f sys-libs/libcxxabi: disable USE=static-libs by default Bug: https://bugs.gentoo.org/760504 Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sergei Trofimovich gentoo.org> sys-libs/libcxxabi/libcxxabi-10.0.1.ebuild | 4 ++-- sys-libs/libcxxabi/libcxxabi-11.0.0.ebuild | 2 +- sys-libs/libcxxabi/libcxxabi-11.0.1.ebuild | 2 +- sys-libs/libcxxabi/libcxxabi-11.1.0_rc1.ebuild | 2 +- sys-libs/libcxxabi/libcxxabi-11.1.0_rc2.ebuild | 2 +- sys-libs/libcxxabi/libcxxabi-12.0.0..ebuild | 2 +- sys-libs/libcxxabi/libcxxabi-12.0.0_rc1.ebuild | 2 +- sys-libs/libcxxabi/libcxxabi-13.0.0..ebuild | 2 +- sys-libs/libcxxabi/libcxxabi-9.0.1.ebuild | 4 ++-- 9 files changed, 11 insertions(+), 11 deletions(-) diff --git a/sys-libs/libcxxabi/libcxxabi-10.0.1.ebuild b/sys-libs/libcxxabi/libcxxabi-10.0.1.ebuild index a8d5a05997f..7aa13e0d8e6 100644 --- a/sys-libs/libcxxabi/libcxxabi-10.0.1.ebuild +++ b/sys-libs/libcxxabi/libcxxabi-10.0.1.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2020 Gentoo Authors +# Copyright 1999-2021 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=7 @@ -16,7 +16,7 @@ llvm.org_set_globals LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="amd64 arm arm64 x86" -IUSE="+libunwind +static-libs test elibc_musl" +IUSE="+libunwind static-libs test elibc_musl" RESTRICT="!test? ( test )" RDEPEND=" diff --git a/sys-libs/libcxxabi/libcxxabi-11.0.0.ebuild b/sys-libs/libcxxabi/libcxxabi-11.0.0.ebuild index fe26ee75eaa..e0342a38384 100644 --- a/sys-libs/libcxxabi/libcxxabi-11.0.0.ebuild +++ b/sys-libs/libcxxabi/libcxxabi-11.0.0.ebuild @@ -17,7 +17,7 @@ llvm.org_set_globals LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="amd64 arm arm64 ~riscv x86 ~x64-macos" -IUSE="+libunwind +static-libs test elibc_musl" +IUSE="+libunwind static-libs test elibc_musl" RESTRICT="!test? ( test )" RDEPEND=" diff --git a/sys-libs/libcxxabi/libcxxabi-11.0.1.ebuild b/sys-libs/libcxxabi/libcxxabi-11.0.1.ebuild index df3f045f720..7ceb778be53 100644 --- a/sys-libs/libcxxabi/libcxxabi-11.0.1.ebuild +++ b/sys-libs/libcxxabi/libcxxabi-11.0.1.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxxabi.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="~amd64 ~arm ~arm64 ~riscv ~x86 ~x64-macos" -IUSE="+libunwind +static-libs test elibc_musl" +IUSE="+libunwind static-libs test elibc_musl" RESTRICT="!test? ( test )" RDEPEND=" diff --git a/sys-libs/libcxxabi/libcxxabi-11.1.0_rc1.ebuild b/sys-libs/libcxxabi/libcxxabi-11.1.0_rc1.ebuild index 32af10f1e6c..59511b92f9e 100644 --- a/sys-libs/libcxxabi/libcxxabi-11.1.0_rc1.ebuild +++ b/sys-libs/libcxxabi/libcxxabi-11.1.0_rc1.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxxabi.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="+libunwind +static-libs test elibc_musl" +IUSE="+libunwind static-libs test elibc_musl" RESTRICT="!test? ( test )" RDEPEND=" diff --git a/sys-libs/libcxxabi/libcxxabi-11.1.0_rc2.ebuild b/sys-libs/libcxxabi/libcxxabi-11.1.0_rc2.ebuild index 32af10f1e6c..59511b92f9e 100644 --- a/sys-libs/libcxxabi/libcxxabi-11.1.0_rc2.ebuild +++ b/sys-libs/libcxxabi/libcxxabi-11.1.0_rc2.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxxabi.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="+libunwind +static-libs test elibc_musl" +IUSE="+libunwind static-libs test elibc_musl" RESTRICT="!test? ( test )" RDEPEND=" diff --git a/sys-libs/libcxxabi/libcxxabi-12.0.0..ebuild b/sys-libs/libcxxabi/libcxxabi-12.0.0..ebuild index fdb1d198e85..8c24d969111 100644 --- a/sys-libs/libcxxabi/libcxxabi-12.0.0..ebuild +++ b/sys-libs/libcxxabi/libcxxabi-12.0.0..ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxxabi.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="+libunwind +static-libs test elibc_musl" +IUSE="+libunwind static-libs test elibc_musl" RESTRICT="!test? ( test )" RDEPEND=" diff --git a/sys-libs/libcxxabi/libcxxabi-12.0.0_rc1.ebuild b/sys-libs/libcxxabi/libcxxabi-12.0.0_rc1.ebuild index fdb1d198e85..8c24d969111 100644 --- a/sys-libs/libcxxabi/libcxxabi-12.0.0_rc1.ebuild +++ b/sys-libs/libcxxabi/libcxxabi-12.0.0_rc1.ebuild @@ -13,7 +13,7 @@ HOMEPAGE="https://libcxxabi.llvm.org/"; LICENSE="Apache-2.0-with-LLVM-exceptions || ( UoI-NCSA MIT )" SLOT="0" KEYWORDS="" -IUSE="+libunwind +static-libs test elibc_musl" +IUSE="+libunwind static-libs test elibc_musl" RESTRICT="!test? ( test )" RDEPEND=" diff --git a/sys-
[gentoo-commits] repo/gentoo:master commit in: eclass/
commit: ca7284468286d72f5bf9e2349a0661584bbc59c4
Author: Hans de Graaff gentoo org>
AuthorDate: Sun Jan 3 06:58:51 2021 +
Commit: Hans de Graaff gentoo org>
CommitDate: Sun Feb 7 06:28:43 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ca728446
ruby-fakegem.eclass: support for extensions
Up to now handling of extensions was done in each ebuild that
contained them. This means that handling is often
inconsistent (e.g. not taking multilib's get_modname into account) and
there is a lot of duplicated code in ebuilds.
Furthermore, this also does not install extensions into the special
extensions directory. rubygems itself has been doing this for some
time, and now bundler 2.2.x has started to explicitly check for the
extensions in this directory, making it incompatibly with our previous
way of installing gems.
The new RUBY_FAKEGEM_EXTENSIONS array and
RUBY_FAKEGEM_EXTENSION_LIBDIR options provide support for installing
extensions automatically based on these settings, taking into account
that the extensions also must be part of testing and that it must be
installed properly.
Signed-off-by: Hans de Graaff gentoo.org>
eclass/ruby-fakegem.eclass | 61 +-
1 file changed, 60 insertions(+), 1 deletion(-)
diff --git a/eclass/ruby-fakegem.eclass b/eclass/ruby-fakegem.eclass
index 8ab44876594..f3b3ee02085 100644
--- a/eclass/ruby-fakegem.eclass
+++ b/eclass/ruby-fakegem.eclass
@@ -1,4 +1,4 @@
-# Copyright 1999-2020 Gentoo Authors
+# Copyright 1999-2021 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
# @ECLASS: ruby-fakegem.eclass
@@ -113,6 +113,20 @@ RUBY_FAKEGEM_BINDIR="${RUBY_FAKEGEM_BINDIR-bin}"
# get installed. Some gems provide extra files such as version information,
# Rails generators, or data that needs to be installed as well.
+# @ECLASS-VARIABLE: RUBY_FAKEGEM_EXTENSIONS
+# @DEFAULT_UNSET
+# @DESCRIPTION
+# List of extensions supported by this gem. Each extension is listed as
+# the configuration script that needs to be run to generate the
+# extension.
+
+# @ECLASS-VARIABLE: RUBY_FAKEGEM_EXTENSION_LIBDIR
+# @DESCRIPTION:
+# The lib directory where extensions are copied directly after they have
+# been compiled. This is needed to run tests on the code and was the
+# legacy way to install extensions for a long time.
+RUBY_FAKEGEM_EXTENSION_LIBDIR="${RUBY_FAKEGEM_EXTENSION_LIBDIR-lib}"
+
case "${EAPI:-0}" in
0|1|2|3)
die "Unsupported EAPI=${EAPI} (too old) for
ruby-fakegem.eclass" ;;
@@ -387,6 +401,22 @@ EOF
) || die "Unable to create fakegem wrapper"
}
+# @FUNCTION: each_fakegem_configure
+# @DESCRIPTION:
+# Configure extensions defined in RUBY_FAKEGEM_EXTENSIONS, if any.
+each_fakegem_configure() {
+ for extension in "${RUBY_FAKEGEM_EXTENSIONS[@]}" ; do
+ ${RUBY} -C ${extension%/*} ${extension##*/} || die
+ done
+}
+
+# @FUNCTION: each_ruby_configure
+# @DESCRIPTION:
+# Run each_fakegem_configure for each ruby target
+each_ruby_configure() {
+ each_fakegem_configure
+}
+
# @FUNCTION: all_fakegem_compile
# @DESCRIPTION:
# Build documentation for the package if indicated by the doc USE flag
@@ -408,6 +438,23 @@ all_fakegem_compile() {
fi
}
+# @FUNCTION: each_fakegem_compile
+# @DESCRIPTION:
+# Compile extensions defined in RUBY_FAKEGEM_EXTENSIONS, if any.
+each_fakegem_compile() {
+ for extension in "${RUBY_FAKEGEM_EXTENSIONS[@]}" ; do
+ emake V=1 -C ${extension%/*}
+ cp "${extension%/*}"/*$(get_modname)
"${RUBY_FAKEGEM_EXTENSION_LIBDIR}" || die "Copy of extension into
${RUBY_FAKEGEM_EXTENSION_LIBDIR} failed"
+ done
+}
+
+# @FUNCTION: each_ruby_compile
+# @DESCRIPTION:
+# Run each_fakegem_compile for each ruby target
+each_ruby_compile() {
+ each_fakegem_compile
+}
+
# @FUNCTION: all_ruby_unpack
# @DESCRIPTION:
# Unpack the source archive, including support for unpacking gems.
@@ -506,6 +553,18 @@ each_fakegem_install() {
[[ -n ${_gemlibdirs} ]] && \
ruby_fakegem_doins -r ${_gemlibdirs}
+
+ if [[ -n ${RUBY_FAKEGEM_EXTENSIONS} ]] && [
${#RUBY_FAKEGEM_EXTENSIONS[@]} -ge 0 ]; then
+ einfo "installing extensions"
+ local
_extensionsdir="$(ruby_fakegem_gemsdir)/extensions/$(ruby_rbconfig_value
'arch')/$(ruby_rbconfig_value
'ruby_version')/${RUBY_FAKEGEM_NAME}-${RUBY_FAKEGEM_VERSION}"
+
+ for extension in ${RUBY_FAKEGEM_EXTENSIONS[@]} ; do
+ emake V=1 sitearchdir="${D}/${_extensionsdir}" -C
${extension%/*} install
+ done
+
+ # Add the marker to indicate that the extensions are installed
+ touch "${D}${_extensionsdir}/gem.build_complete" || die
+ fi
}
# @FUNCTION: each_ruby_install
[gentoo-commits] repo/gentoo:master commit in: www-servers/puma/
commit: 2464927cba4264d0288ca3203026a83328840a8b
Author: Hans de Graaff gentoo org>
AuthorDate: Sun Feb 7 06:10:55 2021 +
Commit: Hans de Graaff gentoo org>
CommitDate: Sun Feb 7 06:10:55 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2464927c
www-servers/puma: add 5.2.1
Package-Manager: Portage-3.0.13, Repoman-3.0.2
Signed-off-by: Hans de Graaff gentoo.org>
www-servers/puma/Manifest | 1 +
www-servers/puma/puma-5.2.1.ebuild | 65 ++
2 files changed, 66 insertions(+)
diff --git a/www-servers/puma/Manifest b/www-servers/puma/Manifest
index e83ce165bd7..f577bf3f32c 100644
--- a/www-servers/puma/Manifest
+++ b/www-servers/puma/Manifest
@@ -4,3 +4,4 @@ DIST puma-4.3.7.tar.gz 242780 BLAKE2B
22a81839bde50c61147712b85fceb90af8f46ada0b
DIST puma-5.0.4.tar.gz 275942 BLAKE2B
1e607d7ff44ae9b677f6fb41355fe3b660bd880a642e5d3859e177c9327b68c0db729621ef0b3d7a5bb08917249fb7eac688027ceb62f072dabe7ba30086bf79
SHA512
6804ef3bfd4fa3a6695c213e3550244adace91121cb2c45f06fa4c68fb502787c5fdebba41b4754216eab880ca8738ab6f83d0ec9456a86fc6db99a4d4405bd8
DIST puma-5.1.1.tar.gz 284807 BLAKE2B
59ba17129e55e79aa2f8092d60a5643840bd996b7832d421cb72538fc48b0fb302353bedef56cc9b115bdfb15b33b0f453bfbf759b2e9552a9490a8b0cef3090
SHA512
8653c622c21dca2116219702e801d7aa3272f0771fd5c2d5149927edbd504a9838fb0d442bfc5dc523035a94dad25946738a5dda954fdaa74a9a00c85ed9f86e
DIST puma-5.2.0.tar.gz 292173 BLAKE2B
e09e524ef651a674373e0c5281832fef2e016f58e9623968e11c47135f7bcddb72c6458e74e85f4264c40f49222161d9749c3c29295d5470e47e7b0382e96bab
SHA512
3e97f17be3926ff23b03def55dd1c9f015750a5aec74f0fa1551d20c9f386e0ec1a9e676dc0df49ae12129be6768a7d2f7df7a944dd2ec3d44f8243098dc7950
+DIST puma-5.2.1.tar.gz 292945 BLAKE2B
1590dd256953578330ffcb4b2e8745c20ea893f62f251813da5b2473694312a9daeccd7cd5f453dbad441619594210fbdac431a6459deea24e1656c4da0ba01c
SHA512
8ec1a351badd68ce6559eb99592e3f4d836ca49406749a6c2cd9162c443eadf3b4cf24ceb6c92e0e27057217f6487ff9923888ff4a1590f8cf9061d06ec16e52
diff --git a/www-servers/puma/puma-5.2.1.ebuild
b/www-servers/puma/puma-5.2.1.ebuild
new file mode 100644
index 000..0d7b9f48b0c
--- /dev/null
+++ b/www-servers/puma/puma-5.2.1.ebuild
@@ -0,0 +1,65 @@
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+USE_RUBY="ruby25 ruby26 ruby27"
+
+RUBY_FAKEGEM_GEMSPEC="puma.gemspec"
+
+inherit multilib ruby-fakegem
+
+DESCRIPTION="a simple, fast, threaded, and highly concurrent HTTP 1.1 server
for Ruby/Rack"
+HOMEPAGE="https://puma.io/";
+SRC_URI="https://github.com/puma/puma/archive/v${PV}.tar.gz -> ${P}.tar.gz"
+
+LICENSE="BSD"
+SLOT="3"
+KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~ppc ~ppc64 ~sparc ~x86"
+IUSE=""
+
+DEPEND+=" dev-libs/openssl:0 test? ( net-misc/curl )"
+RDEPEND+=" dev-libs/openssl:0"
+
+ruby_add_bdepend "virtual/ruby-ssl
+ test? ( dev-ruby/rack >=dev-ruby/minitest-5.9:5
>=dev-ruby/test-unit-3.0:2 )"
+
+ruby_add_rdepend "dev-ruby/nio4r:2"
+
+all_ruby_prepare() {
+ sed -e '/bundler/ s:^:#:' \
+ -e '/prove/ s:^:#:' \
+ -e '/stub_const/ s:^:#:' \
+ -i test/helper.rb || die
+
+ # Avoid tests failing inconsistently
+ sed -i -e '/test_bad_client/askip "inconsistent results"'
test/test_web_server.rb || die
+
+ # Avoid launcher tests since they make assumptions about bundler use
+ rm -f test/test_launcher.rb test/test_worker_gem_independence.rb || die
+
+ # Skip integration tests since they make a lot of assumptions about
+ # the environment
+ rm -f test/test_integration_* test/test_preserve_bundler_env.rb|| die
+
+ # Avoid test that uses unpackaged stub_const
+ sed -i -e '/test_shutdown_with_grace/,/^ end/ s:^:#:'
test/test_thread_pool.rb || die
+
+ sed -e 's/git ls-files --/find/' \
+ -e 's:_relative ": "./:' \
+ -i ${RUBY_FAKEGEM_GEMSPEC} || die
+}
+
+each_ruby_configure() {
+ ${RUBY} -Cext/puma_http11 extconf.rb || die
+}
+
+each_ruby_compile() {
+ emake V=1 -Cext/puma_http11
+ cp ext/puma_http11/puma_http11$(get_modname) lib/puma/ || die
+}
+
+each_ruby_test() {
+ einfo "Running test suite"
+ ${RUBY} -Ilib:.:test -e "gem 'minitest', '~>5.9'; gem 'test-unit',
'~>3.0'; require 'minitest/autorun'; Dir['test/**/*test_*.rb'].each{|f| require
f}" || die
+}
[gentoo-commits] repo/gentoo:master commit in: dev-ruby/xmlrpc/
commit: 4aa1de40f35a34f91913709d2cefe9caf974771c
Author: Hans de Graaff gentoo org>
AuthorDate: Sun Feb 7 05:58:42 2021 +
Commit: Hans de Graaff gentoo org>
CommitDate: Sun Feb 7 05:58:42 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4aa1de40
dev-ruby/xmlrpc: add 0.3.2
Package-Manager: Portage-3.0.13, Repoman-3.0.2
Signed-off-by: Hans de Graaff gentoo.org>
dev-ruby/xmlrpc/Manifest| 1 +
dev-ruby/xmlrpc/xmlrpc-0.3.2.ebuild | 30 ++
2 files changed, 31 insertions(+)
diff --git a/dev-ruby/xmlrpc/Manifest b/dev-ruby/xmlrpc/Manifest
index 4c6c78188a9..4aa86e4c4eb 100644
--- a/dev-ruby/xmlrpc/Manifest
+++ b/dev-ruby/xmlrpc/Manifest
@@ -1,2 +1,3 @@
DIST xmlrpc-0.3.0.tar.gz 34157 BLAKE2B
862bff09fdd7febfd85ef4fde77a913b77f20024692b1475994b93b394d587f1b2139c82ed7159cc756bd1757ee2fee55f103866c52d4297d8a38be70c066c22
SHA512
370b2fe2ed9ca37fbbc2e85d08328450671019a2dc0c2a31ecf8fc8af95105ccf1b8f728307a5d9cf5f4dbcd93ccfb2f66244b441c0aea1cd1aaca2e820dfe31
DIST xmlrpc-0.3.1.tar.gz 34720 BLAKE2B
452640d82bd93568a3d36235a1f86f4d2be85b47022d269131daac4e12e759bf1129fc46293f3f4408cefeacad87214d1e34da1b3e3421638e5609659afb7586
SHA512
df47968288592aba4093b8c4d19ea86d6171c1f2cb10ab7b9a03fccc8ed65a9aec35908d831a281970e75becc7feff7242f9fc3ca5b64a54ffb56a717bccbdf3
+DIST xmlrpc-0.3.2.tar.gz 34780 BLAKE2B
9aeabd5c2549bd36a28bb56162471e5f822f873e3f976fa101a8fe26af9b0ab72bcceaf7b9bfac5488f315f79708db18bc7c507360aa567d95f136fe807084b5
SHA512
9d594971211d556f19db86e2bd5f948610342dbcee031e58cc83bc28c44bb02c54a8c00c44eb15bd96daafe02859a894193d5e507973a0a1df36251138d4999c
diff --git a/dev-ruby/xmlrpc/xmlrpc-0.3.2.ebuild
b/dev-ruby/xmlrpc/xmlrpc-0.3.2.ebuild
new file mode 100644
index 000..902854a7d96
--- /dev/null
+++ b/dev-ruby/xmlrpc/xmlrpc-0.3.2.ebuild
@@ -0,0 +1,30 @@
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+USE_RUBY="ruby25 ruby26 ruby27 ruby30"
+
+RUBY_FAKEGEM_EXTRADOC="README.md"
+
+RUBY_FAKEGEM_BINWRAP=""
+RUBY_FAKEGEM_GEMSPEC="${PN}.gemspec"
+
+inherit ruby-fakegem
+
+DESCRIPTION="XMLRPC is a lightweight protocol that enables remote procedure
calls over HTTP"
+HOMEPAGE="https://github.com/ruby/xmlrpc";
+SRC_URI="https://github.com/ruby/xmlrpc/archive/v${PV}.tar.gz -> ${P}.tar.gz"
+
+LICENSE="Ruby"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~mips ~ppc ~ppc64 ~s390 ~sparc ~x86
~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~sparc-solaris ~sparc64-solaris
~x64-solaris ~x86-solaris"
+IUSE="test"
+
+ruby_add_bdepend "test? ( dev-ruby/test-unit )"
+
+all_ruby_prepare() {
+ sed -i -e '/bundler/ s:^:#:' Rakefile || die
+
+ # Avoid dependency on git
+ sed -i -e 's/git ls-files -z/find * -print0/' ${RUBY_FAKEGEM_GEMSPEC}
|| die
+}
[gentoo-commits] repo/gentoo:master commit in: dev-ruby/ruby-feedparser/
commit: 14f928caba4bb874d8594f9d1cdc002be8cc1678
Author: Hans de Graaff gentoo org>
AuthorDate: Sun Feb 7 05:57:31 2021 +
Commit: Hans de Graaff gentoo org>
CommitDate: Sun Feb 7 05:57:31 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=14f928ca
dev-ruby/ruby-feedparser: add 0.9.7
Package-Manager: Portage-3.0.13, Repoman-3.0.2
Signed-off-by: Hans de Graaff gentoo.org>
dev-ruby/ruby-feedparser/Manifest | 1 +
.../ruby-feedparser/ruby-feedparser-0.9.7.ebuild | 39 ++
2 files changed, 40 insertions(+)
diff --git a/dev-ruby/ruby-feedparser/Manifest
b/dev-ruby/ruby-feedparser/Manifest
index 77325ce33eb..e9d1efa6db6 100644
--- a/dev-ruby/ruby-feedparser/Manifest
+++ b/dev-ruby/ruby-feedparser/Manifest
@@ -1,2 +1,3 @@
DIST ruby-feedparser-0.9.4.tar.gz 2705393 BLAKE2B
22d95f817d7cd80c33da804e391dce877eb3947dc249eff82884e0ba747aae9d6949418311a7596f6639470e32ce81e1bcc180737e25ab1bbc910bbfeaabdcca
SHA512
0fbecb83837996c1a9483d70275cf869a62dcb53bb42d3fc8d1c7992e37c7d2c8b3194a9d0372566c4907f8ffd893c1f6ee1b2e55fa2417c5f34b71496bfad9d
DIST ruby-feedparser-0.9.6.tar.gz 2705372 BLAKE2B
4a169fb980a6fc23f2e1aeaaae6a74607d3aebfa0a779ee52d7621196e39363886a88e5fd77ce84abaf52d956881e02f8b4f776b0abcab234cd1a4d26b012b90
SHA512
a35748bd23e87138583aaf04ecb482712a3774e1f97c471f86d97e506edf33f63651d5fd64c680d5250c42277ff3f33248fa65d2fa53d0e468a51b0d745a7a33
+DIST ruby-feedparser-0.9.7.tar.gz 2705854 BLAKE2B
d64d35696dd66890013643339817cf470e714fef4ecb5ad8c12a221fd949af53b6fa3668ec2ec16ac0a5fa76eb8dedf037530881ce2545356a4bf20dc7153b01
SHA512
6283e21448cebbfc0d07c01d24be48acadb852110c9e940983a22ce3c95592aea12a99dc4763aa267ba7386c935e2f58e52427b57171aa8fcaa332c6bb440fed
diff --git a/dev-ruby/ruby-feedparser/ruby-feedparser-0.9.7.ebuild
b/dev-ruby/ruby-feedparser/ruby-feedparser-0.9.7.ebuild
new file mode 100644
index 000..bcaa2442bb4
--- /dev/null
+++ b/dev-ruby/ruby-feedparser/ruby-feedparser-0.9.7.ebuild
@@ -0,0 +1,39 @@
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+USE_RUBY="ruby25 ruby26 ruby27"
+
+RUBY_FAKEGEM_EXTRADOC="ChangeLog.md README"
+
+RUBY_FAKEGEM_GEMSPEC="${PN}.gemspec"
+
+inherit ruby-fakegem
+
+GITHUB_USER="feed2imap"
+
+DESCRIPTION="Ruby library to parse ATOM/RSS feeds"
+HOMEPAGE="https://github.com/feed2imap/ruby-feedparser";
+SRC_URI="https://github.com/${GITHUB_USER}/${PN}/archive/v${PV}.tar.gz ->
${P}.tar.gz"
+
+LICENSE="GPL-2"
+KEYWORDS="~amd64"
+SLOT="0"
+IUSE=""
+
+ruby_add_rdepend "dev-ruby/magic"
+
+ruby_add_bdepend "dev-ruby/magic
+ test? ( dev-ruby/mocha )"
+
+all_ruby_prepare() {
+ # Extract gemspec source from Rakefile
+ sed -n -e '/Gem::Specification/,/end$/p' Rakefile >
${RUBY_FAKEGEM_GEMSPEC} || die
+ sed -i -e 's/PKG_NAME/"'${PN}'"/' \
+ -e 's/PKG_VERSION/"'${PV}'"/' \
+ -e '/s.files/d' ${RUBY_FAKEGEM_GEMSPEC} || die
+}
+
+each_ruby_prepare() {
+ sed -i -e '/PKG_VERSION/ s:ruby:'${RUBY}':' Rakefile || die
+}
[gentoo-commits] repo/gentoo:master commit in: sys-auth/otpcalc/
commit: 44590cad21715314b40480b71dadbd17a810b0e0
Author: Ulrich Müller gentoo org>
AuthorDate: Sun Feb 7 05:24:38 2021 +
Commit: Ulrich Müller gentoo org>
CommitDate: Sun Feb 7 05:24:38 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=44590cad
sys-auth/otpcalc: Update HOMEPAGE and SRC_URI
Package-Manager: Portage-3.0.14, Repoman-3.0.2
Signed-off-by: Ulrich Müller gentoo.org>
sys-auth/otpcalc/otpcalc-0.97-r8.ebuild | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/sys-auth/otpcalc/otpcalc-0.97-r8.ebuild
b/sys-auth/otpcalc/otpcalc-0.97-r8.ebuild
index f418eb8944e..53da607dd20 100644
--- a/sys-auth/otpcalc/otpcalc-0.97-r8.ebuild
+++ b/sys-auth/otpcalc/otpcalc-0.97-r8.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2020 Gentoo Authors
+# Copyright 1999-2021 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=6
@@ -6,8 +6,8 @@ EAPI=6
inherit toolchain-funcs
DESCRIPTION="A One Time Password and S/Key calculator for X"
-HOMEPAGE="http://killa.net/infosec/otpCalc/";
-SRC_URI="http://killa.net/infosec/otpCalc/otpCalc-${PV}.tar.gz
+HOMEPAGE="http://www.killa.net/infosec/otpCalc/";
+SRC_URI="http://www.killa.net/infosec/otpCalc/otpCalc-${PV}.tar.gz
https://dev.gentoo.org/~ulm/distfiles/${P}-patches-1.tar.xz";
LICENSE="GPL-2+" # bundled crypto functions are not used
[gentoo-commits] repo/gentoo:master commit in: games-roguelike/stone-soup/
commit: 86324186f7bb334aeb86b68535a9951ddd75f5e4
Author: Erik Mackdanz gentoo org>
AuthorDate: Sun Feb 7 04:36:56 2021 +
Commit: Erik Mackdanz gentoo org>
CommitDate: Sun Feb 7 04:36:56 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=86324186
games-roguelike/stone-soup: Bump to 0.26.1
Signed-off-by: Erik Mackdanz gentoo.org>
Package-Manager: Portage-3.0.14, Repoman-3.0.2
games-roguelike/stone-soup/Manifest| 1 +
.../stone-soup/stone-soup-0.26.1.ebuild| 184 +
2 files changed, 185 insertions(+)
diff --git a/games-roguelike/stone-soup/Manifest
b/games-roguelike/stone-soup/Manifest
index 7c05efbbac2..5e9c7c9f98e 100644
--- a/games-roguelike/stone-soup/Manifest
+++ b/games-roguelike/stone-soup/Manifest
@@ -6,3 +6,4 @@ DIST stone-soup.png 1351 BLAKE2B
cc31abd59701aa6f0fb0bdcd90630ceebf7b3cb8b60f0e2
DIST stone-soup.svg 68546 BLAKE2B
7c66286c9e8a3516e8483b3edb628a59fce29d8d248c3fd5b06e308782bbc651814f21ec958b30c36074a2576ced4bb10f291b5236da6f6e865ce1d7cefdf96d
SHA512
dca555271faf704eb8ecdf5ee8a763df42cdeba94e9c163608c438cfc73c6fbf53416547050cad57f477ade191842e701785b65b7a9f18e27ceab05df8f2f75f
DIST stone_soup-0.25.1.zip 95477710 BLAKE2B
0b38a6c7cb7c4c87acccb861b5aae665cd2b6b532f6e86d4a9fa594e0d363b86b4af1ea47275f7fd026ea69d85215be8cdf46258bd620e738b4850e5eceed006
SHA512
fa7e8be582c5c6615531884ade4c113542c06c164b6912095c1adf2f16a31cb2ecce057d74132b11b1b1c256a77433037948d4e54819739b7e222cc896cd5220
DIST stone_soup-0.26.0.zip 95554775 BLAKE2B
03389bae0471efe674b68dd6b99184d77cae50beaa1a82e26afa2b12e0cd06a3bd7b3eecaf5b11a78150cf3eb4694cd07e62f524630b9113fb49ef9cd328d265
SHA512
269b687ce75d8f6e888f1bcc811be2544cb9d82a1a48689187631aa2e6e0a7999bfc3ac7da81cdc44488db5d97bde48b4d6215ebd994f7ebaa6b89bdc2cba281
+DIST stone_soup-0.26.1.zip 95585384 BLAKE2B
6d1cb99fc44e918cad4144608f259e67a26df444b93c8501590ff209e8856fd08c514d4c8c78cb0848d8e6127cdf4360b47d21ced5d919da982421934b46102d
SHA512
637f1a07e9f35e18eda10c17dc28449364c56aee8456497e30552acb55608a9433cff8b64af877049c21cb2a42eb2fcad28f58a7e57a1d835eb8c252e580205d
diff --git a/games-roguelike/stone-soup/stone-soup-0.26.1.ebuild
b/games-roguelike/stone-soup/stone-soup-0.26.1.ebuild
new file mode 100644
index 000..87030f3939c
--- /dev/null
+++ b/games-roguelike/stone-soup/stone-soup-0.26.1.ebuild
@@ -0,0 +1,184 @@
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# TODO
+# - attempt +test, linked bug claims to be fixed
+
+EAPI=7
+
+LUA_COMPAT=( lua5-{1..3} )
+PYTHON_COMPAT=( python3_{7,8,9} )
+VIRTUALX_REQUIRED="manual"
+inherit desktop python-any-r1 eutils lua-single xdg-utils toolchain-funcs
+
+MY_P="stone_soup-${PV}"
+DESCRIPTION="Role-playing roguelike game of exploration and treasure-hunting
in dungeons"
+HOMEPAGE="https://crawl.develz.org";
+SLOT="0.26"
+SRC_URI="
+
https://github.com/crawl/crawl/releases/download/${PV}/${PN/-/_}-${PV}.zip
+ https://dev.gentoo.org/~stasibear/distfiles/${PN}.png ->
${PN}-${SLOT}.png
+ https://dev.gentoo.org/~stasibear/distfiles/${PN}.svg ->
${PN}-${SLOT}.svg
+"
+
+# 3-clause BSD: mt19937ar.cc, MSVC/stdint.h
+# 2-clause BSD: all contributions by Steve Noonan and Jesse Luehrs
+# Public Domain|CC0: most of tiles
+# MIT: json.cc/json.h, some .js files in webserver/static/scripts/contrib/
+LICENSE="GPL-2 BSD BSD-2 public-domain CC0-1.0 MIT"
+KEYWORDS="~amd64 ~x86"
+IUSE="debug ncurses sound test +tiles"
+# test is broken
+# see https://crawl.develz.org/mantis/view.php?id=6121
+RESTRICT="test"
+
+RDEPEND="
+ ${LUA_DEPS}
+ dev-db/sqlite:3
+ sys-libs/zlib
+ !ncurses? ( !tiles? ( sys-libs/ncurses:0 ) )
+ ncurses? ( sys-libs/ncurses:0 )
+ tiles? (
+ media-fonts/dejavu
+ media-libs/freetype:2
+ media-libs/libpng:0
+ sound? (
+ media-libs/libsdl2[X,opengl,sound,video]
+ media-libs/sdl2-mixer
+ )
+ !sound? ( media-libs/libsdl2[X,opengl,video] )
+ media-libs/sdl2-image[png]
+ virtual/glu
+ virtual/opengl
+ )"
+DEPEND="${RDEPEND}
+ app-arch/unzip
+ dev-lang/perl
+ ${PYTHON_DEPS}
+ $(python_gen_any_dep 'dev-python/pyyaml[${PYTHON_USEDEP}]')
+ sys-devel/flex
+ tiles? (
+ sys-libs/ncurses:0
+ )
+ virtual/pkgconfig
+ virtual/yacc
+ "
+
+S=${WORKDIR}/${MY_P}/source
+S_TEST=${WORKDIR}/${MY_P}_test/source
+PATCHES=(
+ "${FILESDIR}"/fixed-font-path.patch
+ "${FILESDIR}"/gitless-1.patch
+ "${FILESDIR}"/rltiles-ldflags-libs.patch
+)
+
+python_check_deps() {
+ has_version "dev-python/pyyaml[${PYTHON_USEDEP}]"
+}
+
+pkg_setup() {
+
+ python-any-r1_pkg_setup
+
+ if use !ncurses && use !tiles ; then
+ ewarn "Neither ncur
[gentoo-commits] repo/gentoo:master commit in: sys-apps/selinux-python/
commit: 1787b1aa0e99cdf8bac5d699efaf4d7cd72af224
Author: Jason Zaman gentoo org>
AuthorDate: Sun Feb 7 04:17:05 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sun Feb 7 04:17:05 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1787b1aa
sys-apps/selinux-python: drop old
Package-Manager: Portage-3.0.13, Repoman-3.0.2
Signed-off-by: Jason Zaman gentoo.org>
.../selinux-python/selinux-python-3.1-r1.ebuild| 95 --
1 file changed, 95 deletions(-)
diff --git a/sys-apps/selinux-python/selinux-python-3.1-r1.ebuild
b/sys-apps/selinux-python/selinux-python-3.1-r1.ebuild
deleted file mode 100644
index 8bafa3c13fb..000
--- a/sys-apps/selinux-python/selinux-python-3.1-r1.ebuild
+++ /dev/null
@@ -1,95 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI="7"
-PYTHON_COMPAT=( python{3_7,3_8} )
-PYTHON_REQ_USE="xml"
-
-inherit python-r1 toolchain-funcs
-
-MY_P="${P//_/-}"
-
-MY_RELEASEDATE="20200710"
-SEPOL_VER="${PV}"
-SELNX_VER="${PV}"
-SEMNG_VER="${PV}"
-
-IUSE=""
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-DESCRIPTION="SELinux core utilities"
-HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki";
-
-if [[ ${PV} == ]] ; then
- inherit git-r3
- EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git";
- S="${WORKDIR}/${MY_P}/${PN#selinux-}"
-else
-
SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${MY_RELEASEDATE}/${MY_P}.tar.gz";
- KEYWORDS="amd64 ~arm64 ~mips x86"
- S="${WORKDIR}/${MY_P}"
-fi
-
-LICENSE="GPL-2"
-SLOT="0"
-
-DEPEND=">=sys-libs/libselinux-${SELNX_VER}:=[python]
- >=sys-libs/libsemanage-${SEMNG_VER}:=[python(+)]
- >=sys-libs/libsepol-${SEPOL_VER}:=
- >=app-admin/setools-4.2.0[${PYTHON_USEDEP}]
- dev-python/ipy[${PYTHON_USEDEP}]
- >=sys-process/audit-1.5.1[python,${PYTHON_USEDEP}]
- ${PYTHON_DEPS}"
-
-RDEPEND="${DEPEND}"
-
-src_prepare() {
- default
- sed -i 's/-Werror//g' "${S}"/*/Makefile || die "Failed to remove Werror"
-
- python_copy_sources
-}
-
-src_compile() {
- building() {
- emake -C "${BUILD_DIR}" \
- CC="$(tc-getCC)" \
- LIBDIR="\$(PREFIX)/$(get_libdir)"
- }
- python_foreach_impl building
-}
-
-src_install() {
- installation() {
- emake -C "${BUILD_DIR}" \
- DESTDIR="${D}" \
- LIBDIR="\$(PREFIX)/$(get_libdir)" \
- install
- python_optimize
- }
- python_foreach_impl installation
-
- # Set version-specific scripts
- for pyscript in audit2allow sepolgen-ifgen sepolicy chcat; do
- python_replicate_script "${ED}/usr/bin/${pyscript}"
- done
- for pyscript in semanage; do
- python_replicate_script "${ED}/usr/sbin/${pyscript}"
- done
-
- # Create sepolgen.conf with different devel location definition
- if [[ -f /etc/selinux/config ]];
- then
- local selinuxtype=$(awk -F'=' '/^SELINUXTYPE/ {print $2}'
/etc/selinux/config);
- mkdir -p "${D}"/etc/selinux || die "Failed to create selinux
directory";
- echo
"SELINUX_DEVEL_PATH=/usr/share/selinux/${selinuxtype}/include:/usr/share/selinux/${selinuxtype}"
> "${D}"/etc/selinux/sepolgen.conf;
- else
- local selinuxtype="${POLICY_TYPES%% *}";
- if [[ -n "${selinuxtype}" ]];
- then
- echo
"SELINUX_DEVEL_PATH=/usr/share/selinux/${selinuxtype}/include:/usr/share/selinux/${selinuxtype}"
> "${D}"/etc/selinux/sepolgen.conf;
- else
- echo
"SELINUX_DEVEL_PATH=/usr/share/selinux/strict/include:/usr/share/selinux/strict"
> "${D}"/etc/selinux/sepolgen.conf;
- fi
- fi
-}
[gentoo-commits] repo/gentoo:master commit in: sys-apps/selinux-python/
commit: 2993bd93c8ab9a9ed8a6bc1a99c25490f7a640ab
Author: Jason Zaman gentoo org>
AuthorDate: Sun Feb 7 04:13:25 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sun Feb 7 04:13:25 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2993bd93
sys-apps/selinux-python: stable amd64 x86
Bug: https://bugs.gentoo.org/768258
Package-Manager: Portage-3.0.13, Repoman-3.0.2
Signed-off-by: Jason Zaman gentoo.org>
sys-apps/selinux-python/selinux-python-3.1-r2.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/sys-apps/selinux-python/selinux-python-3.1-r2.ebuild
b/sys-apps/selinux-python/selinux-python-3.1-r2.ebuild
index 59dad86d967..1237105e82d 100644
--- a/sys-apps/selinux-python/selinux-python-3.1-r2.ebuild
+++ b/sys-apps/selinux-python/selinux-python-3.1-r2.ebuild
@@ -25,7 +25,7 @@ if [[ ${PV} == ]] ; then
S="${WORKDIR}/${MY_P}/${PN#selinux-}"
else
SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${MY_RELEASEDATE}/${MY_P}.tar.gz";
- KEYWORDS="~amd64 ~arm64 ~mips ~x86"
+ KEYWORDS="amd64 ~arm64 ~mips x86"
S="${WORKDIR}/${MY_P}"
fi
[gentoo-commits] repo/gentoo:master commit in: sys-apps/policycoreutils/, sys-apps/policycoreutils/files/
commit: 10fc678631a6a54f8183d54c1494aaeb9b08a1da
Author: Jason Zaman gentoo org>
AuthorDate: Sun Feb 7 04:16:19 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sun Feb 7 04:16:19 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=10fc6786
sys-apps/policycoreutils: drop old
Package-Manager: Portage-3.0.13, Repoman-3.0.2
Signed-off-by: Jason Zaman gentoo.org>
...policycoreutils-2.7-0001-newrole-not-suid.patch | 13 --
.../policycoreutils/policycoreutils-3.1-r1.ebuild | 179 -
2 files changed, 192 deletions(-)
diff --git
a/sys-apps/policycoreutils/files/policycoreutils-2.7-0001-newrole-not-suid.patch
b/sys-apps/policycoreutils/files/policycoreutils-2.7-0001-newrole-not-suid.patch
deleted file mode 100644
index 6049bbe282a..000
---
a/sys-apps/policycoreutils/files/policycoreutils-2.7-0001-newrole-not-suid.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/policycoreutils/newrole/Makefile
b/policycoreutils/newrole/Makefile
-index bdefbb8..9cff135 100644
policycoreutils/newrole/Makefile
-+++ policycoreutils/newrole/Makefile
-@@ -49,7 +49,7 @@ ifeq ($(NAMESPACE_PRIV),y)
- IS_SUID=y
- endif
- ifeq ($(IS_SUID),y)
-- MODE := 4555
-+ MODE := 0555
- override LDLIBS += -lcap-ng
- else
- MODE := 0555
diff --git a/sys-apps/policycoreutils/policycoreutils-3.1-r1.ebuild
b/sys-apps/policycoreutils/policycoreutils-3.1-r1.ebuild
deleted file mode 100644
index 9381dac4c14..000
--- a/sys-apps/policycoreutils/policycoreutils-3.1-r1.ebuild
+++ /dev/null
@@ -1,179 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI="7"
-PYTHON_COMPAT=( python{3_7,3_8} )
-PYTHON_REQ_USE="xml"
-
-inherit multilib python-r1 toolchain-funcs bash-completion-r1
-
-MY_P="${P//_/-}"
-
-MY_RELEASEDATE="20200710"
-EXTRAS_VER="1.37"
-SEMNG_VER="${PV}"
-SELNX_VER="${PV}"
-SEPOL_VER="${PV}"
-
-IUSE="audit dbus pam split-usr"
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-DESCRIPTION="SELinux core utilities"
-HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki";
-
-if [[ ${PV} == ]]; then
- inherit git-r3
- EGIT_REPO_URI="https://github.com/SELinuxProject/selinux.git";
-
SRC_URI="https://dev.gentoo.org/~perfinion/distfiles/policycoreutils-extra-${EXTRAS_VER}.tar.bz2";
- S1="${WORKDIR}/${MY_P}/${PN}"
- S2="${WORKDIR}/policycoreutils-extra"
- S="${S1}"
-else
-
SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${MY_RELEASEDATE}/${MY_P}.tar.gz
-
https://dev.gentoo.org/~perfinion/distfiles/policycoreutils-extra-${EXTRAS_VER}.tar.bz2";
- KEYWORDS="amd64 ~arm64 ~mips x86"
- S1="${WORKDIR}/${MY_P}"
- S2="${WORKDIR}/policycoreutils-extra"
- S="${S1}"
-fi
-
-LICENSE="GPL-2"
-SLOT="0"
-
-DEPEND=">=sys-libs/libselinux-${SELNX_VER}:=[python,${PYTHON_USEDEP}]
- >=sys-libs/libcap-1.10-r10:=
- >=sys-libs/libsemanage-${SEMNG_VER}:=[python(+),${PYTHON_USEDEP}]
- sys-libs/libcap-ng:=
- >=sys-libs/libsepol-${SEPOL_VER}:=
- >=app-admin/setools-4.2.0[${PYTHON_USEDEP}]
- dev-python/ipy[${PYTHON_USEDEP}]
- dbus? (
- sys-apps/dbus
- dev-libs/dbus-glib:=
- )
- audit? ( >=sys-process/audit-1.5.1[python,${PYTHON_USEDEP}] )
- pam? ( sys-libs/pam:= )
- ${PYTHON_DEPS}"
-
-# Avoid dependency loop in the cross-compile case, bug #755173
-# (Still exists in native)
-BDEPEND="sys-devel/gettext"
-
-### libcgroup -> seunshare
-### dbus -> restorecond
-
-# pax-utils for scanelf used by rlpkg
-RDEPEND="${DEPEND}
- app-misc/pax-utils"
-
-PDEPEND="sys-apps/semodule-utils
- sys-apps/selinux-python"
-
-src_unpack() {
- # Override default one because we need the SRC_URI ones even in case of
ebuilds
- default
- if [[ ${PV} == ]] ; then
- git-r3_src_unpack
- fi
-}
-
-src_prepare() {
- S="${S1}"
- cd "${S}" || die "Failed to switch to ${S}"
- if [[ ${PV} != ]] ; then
- # If needed for live ebuilds please use /etc/portage/patches
- eapply
"${FILESDIR}/policycoreutils-3.1-0001-newrole-not-suid.patch"
- fi
-
- # rlpkg is more useful than fixfiles
- sed -i -e '/^all/s/fixfiles//' "${S}/scripts/Makefile" \
- || die "fixfiles sed 1 failed"
- sed -i -e '/fixfiles/d' "${S}/scripts/Makefile" \
- || die "fixfiles sed 2 failed"
-
- eapply_user
-
- sed -i 's/-Werror//g' "${S1}"/*/Makefile || die "Failed to remove
Werror"
-
- python_copy_sources
- # Our extra code is outside the regular directory, so set it to the
extra
- # directory. We really should optimize this as it is ugly, but the extra
- # code is needed for Gentoo at the same time that policycoreutils is
present
- # (so we cannot use an additional package for
[gentoo-commits] repo/gentoo:master commit in: sys-process/audit/
commit: 4b39bdb04f235ca6dc33e8a18dc13f40d372376e
Author: Jason Zaman gentoo org>
AuthorDate: Sun Feb 7 04:12:09 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sun Feb 7 04:12:09 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4b39bdb0
sys-process/audit: stable amd64 x86
Bug: https://bugs.gentoo.org/768258
Package-Manager: Portage-3.0.13, Repoman-3.0.2
Signed-off-by: Jason Zaman gentoo.org>
sys-process/audit/audit-3.0.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/sys-process/audit/audit-3.0.ebuild
b/sys-process/audit/audit-3.0.ebuild
index bc901e6325b..8594890e247 100644
--- a/sys-process/audit/audit-3.0.ebuild
+++ b/sys-process/audit/audit-3.0.ebuild
@@ -13,7 +13,7 @@ SRC_URI="https://people.redhat.com/sgrubb/audit/${P}.tar.gz";
LICENSE="GPL-2+ LGPL-2.1+"
SLOT="0"
-KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc
~x86"
+KEYWORDS="amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc
x86"
IUSE="gssapi ldap python static-libs"
REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} )"
[gentoo-commits] repo/gentoo:master commit in: sys-apps/policycoreutils/
commit: f607b35b052d51b12da09473160eee5e5a98f9b0
Author: Jason Zaman gentoo org>
AuthorDate: Sun Feb 7 04:14:03 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sun Feb 7 04:14:03 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f607b35b
sys-apps/policycoreutils: stable amd64 x86
Bug: https://bugs.gentoo.org/768258
Package-Manager: Portage-3.0.13, Repoman-3.0.2
Signed-off-by: Jason Zaman gentoo.org>
sys-apps/policycoreutils/policycoreutils-3.1-r2.ebuild | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/sys-apps/policycoreutils/policycoreutils-3.1-r2.ebuild
b/sys-apps/policycoreutils/policycoreutils-3.1-r2.ebuild
index b03d06939b1..90e31a89872 100644
--- a/sys-apps/policycoreutils/policycoreutils-3.1-r2.ebuild
+++ b/sys-apps/policycoreutils/policycoreutils-3.1-r2.ebuild
@@ -31,7 +31,7 @@ if [[ ${PV} == ]]; then
else
SRC_URI="https://github.com/SELinuxProject/selinux/releases/download/${MY_RELEASEDATE}/${MY_P}.tar.gz
https://dev.gentoo.org/~perfinion/distfiles/policycoreutils-extra-${EXTRAS_VER}.tar.bz2";
- KEYWORDS="~amd64 ~arm64 ~mips ~x86"
+ KEYWORDS="amd64 ~arm64 ~mips x86"
S1="${WORKDIR}/${MY_P}"
S2="${WORKDIR}/policycoreutils-extra"
S="${S1}"
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/
commit: e12b82af4a4be9fab7e8b892e8891995abe7868e Author: Jason Zaman gentoo org> AuthorDate: Sun Feb 7 01:52:28 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sun Feb 7 03:04:51 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e12b82af clamav: Drop conflicting gentoo-specific rule Signed-off-by: Jason Zaman gentoo.org> policy/modules/services/clamav.te | 4 1 file changed, 4 deletions(-) diff --git a/policy/modules/services/clamav.te b/policy/modules/services/clamav.te index c64942f4..691210ef 100644 --- a/policy/modules/services/clamav.te +++ b/policy/modules/services/clamav.te @@ -321,7 +321,3 @@ tunable_policy(`clamav_read_all_non_security_files_clamscan',` optional_policy(` mta_send_mail(clamscan_t) ') - -ifdef(`distro_gentoo',` - init_daemon_runtime_file(clamd_runtime_t, dir, "clamav") -')
[gentoo-commits] proj/hardened-refpolicy:master commit in: gentoo/
commit: 3a3a526e1844c3b77fa6a19a8b668a0b5209a01a Author: Jason Zaman gentoo org> AuthorDate: Sat Feb 6 21:17:10 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:17:10 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3a3a526e Merge upstream Signed-off-by: Jason Zaman gentoo.org> gentoo/STATE | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gentoo/STATE b/gentoo/STATE index 053066d7..a7c834cd 100644 --- a/gentoo/STATE +++ b/gentoo/STATE @@ -1 +1 @@ -main 072c0a945865b1df3116b0c6f6c3aef7061a6049 +main bfa73f3c5923c377c277c878ef794e579b7577fd
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/
commit: b0157d68a28486d4e657dae4f0351e8e5561831b Author: Chris PeBenito ieee org> AuthorDate: Wed Feb 3 18:05:46 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:10 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b0157d68 dovecot, postfix: Module version bump. Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/services/dovecot.te | 2 +- policy/modules/services/postfix.te | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/modules/services/dovecot.te b/policy/modules/services/dovecot.te index 1081e609..b56be9b0 100644 --- a/policy/modules/services/dovecot.te +++ b/policy/modules/services/dovecot.te @@ -1,4 +1,4 @@ -policy_module(dovecot, 1.26.0) +policy_module(dovecot, 1.26.1) # diff --git a/policy/modules/services/postfix.te b/policy/modules/services/postfix.te index 05c0b4a5..690b06ce 100644 --- a/policy/modules/services/postfix.te +++ b/policy/modules/services/postfix.te @@ -1,4 +1,4 @@ -policy_module(postfix, 1.24.0) +policy_module(postfix, 1.24.1) #
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/kernel/, doc/, policy/
commit: cecb7fe66611d6e51bec44507fdda4ef2fcc4808 Author: Jason Zaman gentoo org> AuthorDate: Sat Feb 6 21:18:02 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:18:02 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=cecb7fe6 Update generated policy and doc files Signed-off-by: Jason Zaman gentoo.org> doc/policy.xml | 779 +-- policy/booleans.conf | 6 + policy/modules/kernel/corenetwork.te | 2 +- 3 files changed, 484 insertions(+), 303 deletions(-) diff --git a/doc/policy.xml b/doc/policy.xml index 0537d461..3c0809a4 100644 --- a/doc/policy.xml +++ b/doc/policy.xml @@ -85508,7 +85508,17 @@ Domain allowed access. - + + +Do not audit attempts to get the attributes of the proc filesystem. + + + +Domain to not audit. + + + + Mount on proc directories. @@ -85519,7 +85529,7 @@ Domain allowed access. - + Do not audit attempts to set the attributes of directories in /proc. @@ -85530,7 +85540,7 @@ Domain to not audit. - + Search directories in /proc. @@ -85540,7 +85550,7 @@ Domain allowed access. - + List the contents of directories in /proc. @@ -85550,7 +85560,7 @@ Domain allowed access. - + Do not audit attempts to list the contents of directories in /proc. @@ -85561,7 +85571,7 @@ Domain to not audit. - + Do not audit attempts to write the directories in /proc. @@ -85572,7 +85582,7 @@ Domain to not audit. - + Mount the directories in /proc. @@ -85582,7 +85592,7 @@ Domain allowed access. - + Get the attributes of files in /proc. @@ -85592,7 +85602,7 @@ Domain allowed access. - + Read generic symbolic links in /proc. @@ -85611,7 +85621,7 @@ Domain allowed access. - + Allows caller to read system state information in /proc. @@ -85642,7 +85652,7 @@ Domain allowed access. - + Write to generic proc entries. @@ -85653,7 +85663,7 @@ Domain allowed access. - + Do not audit attempts by caller to read system state information in proc. @@ -85664,7 +85674,7 @@ Domain to not audit. - + Do not audit attempts by caller to read symbolic links in proc. @@ -85675,7 +85685,7 @@ Domain to not audit. - + Allow caller to read and write state information for AFS. @@ -85686,7 +85696,7 @@ Domain allowed access. - + Allow caller to read the state information for software raid. @@ -85697,7 +85707,7 @@ Domain allowed access. - + Allow caller to read and set the state information for software raid. @@ -85707,7 +85717,7 @@ Domain allowed access. - + Allows caller to get attributes of core kernel interface. @@ -85717,7 +85727,7 @@ Domain allowed access. - + Do not audit attempts to get the attributes of core kernel interfaces. @@ -85728,7 +85738,7 @@ Domain to not audit. - + Allows caller to read the core kernel interface. @@ -85738,7 +85748,7 @@ Domain allowed access. - + Allow caller to read kernel messages using the /proc/kmsg interface. @@ -85749,7 +85759,7 @@ Domain allowed access. - + Allow caller to get the attributes of kernel message interface (/proc/kmsg). @@ -85760,7 +85770,7 @@ Domain allowed access. - + Do not audit attempts by caller to get the attributes of kernel message interfaces. @@ -85771,7 +85781,7 @@ Domain to not audit. - + Mount on kernel message interfaces files. @@ -85782,7 +85792,7 @@ Domain allowed access. - + Do not audit attempts to search the network state directory. @@ -85794,7 +85804,7 @@ Domain to not audit. - + Allow searching of network state directory. @@ -85805,7 +85815,7 @@ Domain allowed access. - + Read the network state information. @@ -85827,7 +85837,7 @@ Domain allowed access. - + Allow caller to read the network state symbolic links. @@ -85837,7 +85847,7 @@ Domain allowed access. - + Allow searching of xen state directory. @@ -85848,7 +85858,7 @@ Domain allowed access. - + Do not audit attempts to search the xen state directory. @@ -85860,7 +85870,7 @@ Domain to not audit. - + Allow caller to read the xen state information. @@ -85871,7 +85881,7 @@ Domain allowed access. - + Allow caller to read the xen state symbolic links. @@ -85882,7 +85892,7 @@ Domain allowed access. - + Allow caller to write xen state information. @@ -85893,7 +85903,7 @@ Domain allowed access. - + Allow attempts to list all proc directories. @@ -85903,7 +85913,7 @@ Domain allowed access. - + Do not audit attempts to list all proc directories. @@ -85913,7 +85923,7 @@ Domain to not audit. - + Do not audit attempts by caller to search the base directory of sysctls. @@ -85925,7 +85935,7 @@ Domain to not audit. - + Mount on sysctl_t dirs. @@ -85936,7 +85946,7 @@ Domain allowed access. - + Allow
[gentoo-commits] proj/hardened-refpolicy:master commit in: /
commit: 0d0b3f0b2c0d84a7529175dc505af157f48de2f6
Author: Chris PeBenito ieee org>
AuthorDate: Wed Feb 3 13:38:27 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 21:15:10 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=0d0b3f0b
Update Changelog and VERSION for release 2.20210203.
Signed-off-by: Chris PeBenito ieee.org>
Signed-off-by: Jason Zaman gentoo.org>
Changelog | 193 ++
VERSION | 2 +-
2 files changed, 194 insertions(+), 1 deletion(-)
diff --git a/Changelog b/Changelog
index 59037863..50cd31fc 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,196 @@
+* Wed Feb 03 2021 Chris PeBenito - 2.20210203
+(GalaxyMaster) (1):
+ added policy for systemd-socket-proxyd
+
+0xC0ncord (1):
+ userdomain, xserver: move xdg rules to userdom_xdg_user_template
+
+Anthony PERARD (1):
+ xen: Allow xenstored to map /proc/xen/xsd_kva
+
+Antoine Tenart (15):
+ udev: allow udevadm to retrieve xattrs
+ locallogin: allow login to get attributes of procfs
+ logging: allow systemd-journal to write messages to the audit socket
+ sysnetwork: allow to read network configuration files
+ dbus: add two interfaces to allow reading from directories and named
+ sockets
+ dbus: allow clients to list runtime dirs and named sockets
+ systemd: add extra systemd_generator_t rules
+ systemd: allow systemd-hwdb to search init runtime directories
+ systemd: allow systemd-network to get attributes of fs
+ systemd: allow systemd-resolve to read in tmpfs
+ corecommands: add entry for Busybox shell
+ systemd: allow systemd-getty-generator to read and write unallocated ttys
+ systemd: allow systemd-network to list the runtime directory
+ ntp: allow systemd-timesyn to watch dbus objects
+ ntp: allow systemd-timesyn to setfscreate
+
+Chris PeBenito (117):
+ Merge branch 'acpid_shutdown' of https://github.com/jpds/refpolicy into
+ jpds-acpid_shutdown
+ .travis.yml: Point selint at only the policy dir.
+ corecommands, dbus, locallogin, logging, sysnetwork, systemd, udev:
Module
+ version bump.
+ systemd: Move systemd-pstore block up in alphabetical order.
+ Switch to GitHub actions for CI actions.
+ systemd: Whitespace changes.
+ systemd: Rename systemd_connectto_socket_proxyd_unix_sockets() to
+ systemd_stream_connect_socket_proxyd().
+ Drop criteria on github actions.
+ userdomain: Fix error in calling userdom_xdg_user_template().
+ systemd: Add systemd-tty-ask watch for /run/systemd/ask-password.
+ Makefile: Add -E to setfiles labeling targets.
+ udev: Drop udev_tbl_t.
+ udev: Systemd 246 merged udev and udevadm executables.
+ devicekit: Udisks uses udevadm, it does not exec udev.
+ Remove modules for programs that are deprecated or no longer supported.
+ chromium: Whitespace changes.
+ chromium: Move naclhelper lines.
+ certbot: Whitespace changes.
+ certbot: Drop aliases since they have never had the old names in
+ refpolicy.
+ certbot: Reorder fc lines.
+ miscfiles: Rename miscfiles_manage_generic_tls_privkey_lnk_files.
+ userdomain: Move lines.
+ certbot: Fix lint issues.
+ memlockd: Move lines.
+ memlockd: Whitespace fixes.
+ memlockd: Fix lint issue.
+ file_patterns.spt: Add a mmap_manage_files_pattern().
+ apache, mysql, postgrey, samba, squid: Apply new
+ mmap_manage_files_pattern().
+ devicekit, jabber, samba: Move lines.
+ cron: Make backup call for system_cronjob_t optional.
+ samba: Fix samba_runtime_t alias use.
+ samba: Move service interface definitions.
+ sysnetwork: Merge dhcpc_manage_samba tunable block with existing samba
+ block.
+ samba: Add missing userspace class requirements in unit interfaces.
+ apache: Fix lint error.
+ apache: Really fix lint error.
+ aptcacher: Drop broken config interfaces.
+ samba: Fix lint error.
+ 0xC0ncord/feature/sudodomain_http_connect_boolean
+ 0xC0ncord/bugfix/systemd_system_custom_unit_fc
+ dpkg, aptcatcher, milter, mysql, systemd: Rename interfaces.
+ apt, bootloader: Move lines.
+ systemd: Move lines.
+ systemd: Fix lint errors.
+ systemd: Rename systemd_use_machined_devpts().
+ Bump module versions for release.
+
+Christian Göttsche (16):
+ postfixpolicyd: split multi-class rule
+ init/systemd: allow systemd to map the SELinux status page
+ selinux: add selinux_use_status_page and deprecate
+ selinux_map_security_files
+ genhomedircon: drop backwards compatibility section
+ genhomedircon: require match for home directory name
+ genhomedircon: drop unused functions
+ genhomedircon: generate file contexts for %{USERNAME} and %{USERID}
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/
commit: b3afcd57276f8844ab25af288948cca8c543abfa Author: Kenton Groombridge concord sh> AuthorDate: Tue Feb 2 16:34:44 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:10 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b3afcd57 dovecot, postfix: add missing accesses postfix_pipe_t requires reading dovecot configuration and connecting to dovecot stream sockets if configured to use dovecot for local mail delivery. Signed-off-by: Kenton Groombridge concord.sh> Signed-off-by: Jason Zaman gentoo.org> policy/modules/services/dovecot.if | 22 ++ policy/modules/services/postfix.te | 2 ++ 2 files changed, 24 insertions(+) diff --git a/policy/modules/services/dovecot.if b/policy/modules/services/dovecot.if index 1aa28f47..ec66a893 100644 --- a/policy/modules/services/dovecot.if +++ b/policy/modules/services/dovecot.if @@ -61,6 +61,28 @@ interface(`dovecot_domtrans_deliver',` domtrans_pattern($1, dovecot_deliver_exec_t, dovecot_deliver_t) ') + +## +## Read dovecot configuration content. +## +## +## +## Domain allowed access. +## +## +## +# +interface(`dovecot_read_config',` + gen_require(` + type dovecot_etc_t; + ') + + files_search_etc($1) + allow $1 dovecot_etc_t:dir list_dir_perms; + allow $1 dovecot_etc_t:file read_file_perms; + allow $1 dovecot_etc_t:lnk_file read_lnk_file_perms; +') + ## ## Create, read, write, and delete diff --git a/policy/modules/services/postfix.te b/policy/modules/services/postfix.te index 5e25fa75..05c0b4a5 100644 --- a/policy/modules/services/postfix.te +++ b/policy/modules/services/postfix.te @@ -596,6 +596,8 @@ corecmd_exec_bin(postfix_pipe_t) optional_policy(` dovecot_domtrans_deliver(postfix_pipe_t) + dovecot_read_config(postfix_pipe_t) + dovecot_stream_connect(postfix_pipe_t) ') optional_policy(`
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/roles/, policy/modules/apps/, policy/modules/admin/, ...
commit: 2742f6963821a93736cfce494abb24a44fdde15d Author: Chris PeBenito ieee org> AuthorDate: Wed Feb 3 13:38:26 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:10 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=2742f696 Bump module versions for release. Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/admin/acct.te | 2 +- policy/modules/admin/alsa.te | 2 +- policy/modules/admin/apt.te | 2 +- policy/modules/admin/bootloader.te| 2 +- policy/modules/admin/consoletype.te | 2 +- policy/modules/admin/ddcprobe.te | 2 +- policy/modules/admin/dmesg.te | 2 +- policy/modules/admin/dphysswapfile.te | 2 +- policy/modules/admin/dpkg.te | 2 +- policy/modules/admin/fakehwclock.te | 2 +- policy/modules/admin/firstboot.te | 2 +- policy/modules/admin/logrotate.te | 2 +- policy/modules/admin/mrtg.te | 2 +- policy/modules/admin/netutils.te | 2 +- policy/modules/admin/portage.te | 2 +- policy/modules/admin/quota.te | 2 +- policy/modules/admin/rpm.te | 2 +- policy/modules/admin/sosreport.te | 2 +- policy/modules/admin/sudo.te | 2 +- policy/modules/admin/sxid.te | 2 +- policy/modules/admin/updfstab.te | 2 +- policy/modules/admin/usbmodules.te| 2 +- policy/modules/admin/vbetool.te | 2 +- policy/modules/apps/chromium.te | 2 +- policy/modules/apps/cpufreqselector.te| 2 +- policy/modules/apps/evolution.te | 2 +- policy/modules/apps/games.te | 2 +- policy/modules/apps/gpg.te| 2 +- policy/modules/apps/livecd.te | 2 +- policy/modules/apps/loadkeys.te | 2 +- policy/modules/apps/mono.te | 2 +- policy/modules/apps/mozilla.te| 2 +- policy/modules/apps/mplayer.te| 2 +- policy/modules/apps/pulseaudio.te | 2 +- policy/modules/apps/screen.te | 2 +- policy/modules/apps/uml.te| 2 +- policy/modules/apps/vmware.te | 2 +- policy/modules/apps/wine.te | 2 +- policy/modules/apps/wm.te | 2 +- policy/modules/kernel/corecommands.te | 2 +- policy/modules/kernel/corenetwork.te.in | 2 +- policy/modules/kernel/devices.te | 2 +- policy/modules/kernel/files.te| 2 +- policy/modules/kernel/filesystem.te | 2 +- policy/modules/kernel/kernel.te | 2 +- policy/modules/kernel/mls.te | 2 +- policy/modules/kernel/selinux.te | 2 +- policy/modules/kernel/storage.te | 2 +- policy/modules/kernel/terminal.te | 2 +- policy/modules/roles/staff.te | 2 +- policy/modules/roles/sysadm.te| 2 +- policy/modules/roles/unprivuser.te| 2 +- policy/modules/roles/xguest.te| 2 +- policy/modules/services/accountsd.te | 2 +- policy/modules/services/acpi.te | 2 +- policy/modules/services/afs.te| 2 +- policy/modules/services/apache.te | 2 +- policy/modules/services/aptcacher.te | 2 +- policy/modules/services/arpwatch.te | 2 +- policy/modules/services/asterisk.te | 2 +- policy/modules/services/automount.te | 2 +- policy/modules/services/avahi.te | 2 +- policy/modules/services/bind.te | 2 +- policy/modules/services/bluetooth.te | 2 +- policy/modules/services/boinc.te | 2 +- policy/modules/services/canna.te | 2 +- policy/modules/services/certbot.te| 2 +- policy/modules/services/cipe.te | 2 +- policy/modules/services/clamav.te | 2 +- policy/modules/services/colord.te | 2 +- policy/modules/services/corosync.te | 2 +- policy/modules/services/courier.te| 2 +- policy/modules/services/cpucontrol.te | 2 +- policy/modules/services/cron.te | 2 +- policy/modules/services/cups.te | 2 +- policy/modules/services/cyrus.te | 2 +- policy/modules/services/dante.te | 2 +- policy/modules/services/dbus.te | 2 +- policy/modules/services/dcc.te| 2 +- policy/modules/services/ddclient.te | 2 +- policy/modules/services/devicekit.te | 2 +- policy/modules/services/dhcp.te | 2 +- policy/modules/services/dictd.te | 2 +- policy/modules/services/dirmngr.te| 2 +- policy/modules/services/distcc.te | 2 +- policy/modules/services/dkim.te | 2 +- policy/modules/services/dnsmasq.te| 2 +- policy/modules/services/dovecot.te| 2 +- policy/modules/services/entropyd.te | 2 +- policy/modules/services/fail2ban.te | 2 +- policy/modules/services/fetchmail.te | 2 +- policy/modules/services/fin
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/, policy/modules/kernel/, policy/modules/system/
commit: 18093d5cf8b672e6cb0dd6109022b5f6a9915e7b Author: Chris PeBenito ieee org> AuthorDate: Tue Feb 2 19:30:10 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:09 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=18093d5c various: Module version bump. Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/kernel/kernel.te | 2 +- policy/modules/services/dovecot.te | 2 +- policy/modules/services/mta.te | 2 +- policy/modules/services/ssh.te | 2 +- policy/modules/system/authlogin.te | 2 +- policy/modules/system/lvm.te | 2 +- policy/modules/system/selinuxutil.te | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/policy/modules/kernel/kernel.te b/policy/modules/kernel/kernel.te index 2620c98c..f60b70b3 100644 --- a/policy/modules/kernel/kernel.te +++ b/policy/modules/kernel/kernel.te @@ -1,4 +1,4 @@ -policy_module(kernel, 1.28.4) +policy_module(kernel, 1.28.5) # diff --git a/policy/modules/services/dovecot.te b/policy/modules/services/dovecot.te index 16fa4e52..1fd54d31 100644 --- a/policy/modules/services/dovecot.te +++ b/policy/modules/services/dovecot.te @@ -1,4 +1,4 @@ -policy_module(dovecot, 1.25.1) +policy_module(dovecot, 1.25.2) # diff --git a/policy/modules/services/mta.te b/policy/modules/services/mta.te index 4833e74e..872845a1 100644 --- a/policy/modules/services/mta.te +++ b/policy/modules/services/mta.te @@ -1,4 +1,4 @@ -policy_module(mta, 2.14.0) +policy_module(mta, 2.14.1) # diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te index 21109ae6..04c84992 100644 --- a/policy/modules/services/ssh.te +++ b/policy/modules/services/ssh.te @@ -1,4 +1,4 @@ -policy_module(ssh, 2.14.4) +policy_module(ssh, 2.14.5) # diff --git a/policy/modules/system/authlogin.te b/policy/modules/system/authlogin.te index 7fcacf32..24a98ded 100644 --- a/policy/modules/system/authlogin.te +++ b/policy/modules/system/authlogin.te @@ -1,4 +1,4 @@ -policy_module(authlogin, 2.17.7) +policy_module(authlogin, 2.17.8) # diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te index 99053132..bb6a0004 100644 --- a/policy/modules/system/lvm.te +++ b/policy/modules/system/lvm.te @@ -1,4 +1,4 @@ -policy_module(lvm, 1.25.3) +policy_module(lvm, 1.25.4) # diff --git a/policy/modules/system/selinuxutil.te b/policy/modules/system/selinuxutil.te index ec65eb88..966baa6e 100644 --- a/policy/modules/system/selinuxutil.te +++ b/policy/modules/system/selinuxutil.te @@ -1,4 +1,4 @@ -policy_module(selinuxutil, 1.28.1) +policy_module(selinuxutil, 1.28.2) gen_require(` #selint-disable:S-001 bool secure_mode;
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/apps/, policy/modules/services/, ...
commit: 20b5a7c3306cd2c08c705f87f66caaf705494457
Author: Chris PeBenito ieee org>
AuthorDate: Tue Feb 2 18:58:24 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 21:15:09 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=20b5a7c3
various: Module version bump.
Signed-off-by: Chris PeBenito ieee.org>
Signed-off-by: Jason Zaman gentoo.org>
policy/modules/admin/apt.te | 2 +-
policy/modules/admin/bootloader.te | 2 +-
policy/modules/admin/logrotate.te | 2 +-
policy/modules/apps/games.te| 2 +-
policy/modules/apps/mplayer.te | 2 +-
policy/modules/services/dbus.te | 2 +-
policy/modules/services/ssh.te | 2 +-
policy/modules/system/authlogin.te | 2 +-
policy/modules/system/locallogin.te | 2 +-
policy/modules/system/systemd.te| 4 ++--
10 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/policy/modules/admin/apt.te b/policy/modules/admin/apt.te
index 8e5f72b7..e4bfcae7 100644
--- a/policy/modules/admin/apt.te
+++ b/policy/modules/admin/apt.te
@@ -1,4 +1,4 @@
-policy_module(apt, 1.15.0)
+policy_module(apt, 1.15.1)
#
diff --git a/policy/modules/admin/bootloader.te
b/policy/modules/admin/bootloader.te
index cbaf65cd..e2848169 100644
--- a/policy/modules/admin/bootloader.te
+++ b/policy/modules/admin/bootloader.te
@@ -1,4 +1,4 @@
-policy_module(bootloader, 1.21.1)
+policy_module(bootloader, 1.21.2)
#
diff --git a/policy/modules/admin/logrotate.te
b/policy/modules/admin/logrotate.te
index c13f0a73..563237b6 100644
--- a/policy/modules/admin/logrotate.te
+++ b/policy/modules/admin/logrotate.te
@@ -1,4 +1,4 @@
-policy_module(logrotate, 1.24.0)
+policy_module(logrotate, 1.24.1)
#
diff --git a/policy/modules/apps/games.te b/policy/modules/apps/games.te
index c66b382b..59eaf328 100644
--- a/policy/modules/apps/games.te
+++ b/policy/modules/apps/games.te
@@ -1,4 +1,4 @@
-policy_module(games, 2.7.1)
+policy_module(games, 2.7.2)
#
diff --git a/policy/modules/apps/mplayer.te b/policy/modules/apps/mplayer.te
index d885b0b8..c0f38ca8 100644
--- a/policy/modules/apps/mplayer.te
+++ b/policy/modules/apps/mplayer.te
@@ -1,4 +1,4 @@
-policy_module(mplayer, 2.10.0)
+policy_module(mplayer, 2.10.1)
#
diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te
index cbbbd45b..1f1b33c1 100644
--- a/policy/modules/services/dbus.te
+++ b/policy/modules/services/dbus.te
@@ -1,4 +1,4 @@
-policy_module(dbus, 1.29.5)
+policy_module(dbus, 1.29.6)
gen_require(`
class dbus all_dbus_perms;
diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index c5749682..21109ae6 100644
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -1,4 +1,4 @@
-policy_module(ssh, 2.14.3)
+policy_module(ssh, 2.14.4)
#
diff --git a/policy/modules/system/authlogin.te
b/policy/modules/system/authlogin.te
index f5da5048..7fcacf32 100644
--- a/policy/modules/system/authlogin.te
+++ b/policy/modules/system/authlogin.te
@@ -1,4 +1,4 @@
-policy_module(authlogin, 2.17.6)
+policy_module(authlogin, 2.17.7)
#
diff --git a/policy/modules/system/locallogin.te
b/policy/modules/system/locallogin.te
index ed004fb8..c55f4c3c 100644
--- a/policy/modules/system/locallogin.te
+++ b/policy/modules/system/locallogin.te
@@ -1,4 +1,4 @@
-policy_module(locallogin, 1.21.2)
+policy_module(locallogin, 1.21.3)
#
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 9ef509dc..abf62148 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1,4 +1,4 @@
-policy_module(systemd, 1.10.11)
+policy_module(systemd, 1.10.12)
#
#
@@ -731,7 +731,7 @@ allow systemd_machined_t self:process setfscreate;
allow systemd_machined_t self:unix_dgram_socket { connected_socket_perms
connect };
term_create_pty(systemd_machined_t, systemd_machined_devpts_t)
-allow systemd_machined_t systemd_machined_devpts_t:chr_file manage_file_perms;
+allow systemd_machined_t systemd_machined_devpts_t:chr_file
manage_chr_file_perms;
manage_files_pattern(systemd_machined_t, systemd_machined_runtime_t,
systemd_machined_runtime_t)
allow systemd_machined_t systemd_machined_runtime_t:lnk_file
manage_lnk_file_perms;
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
commit: e3ac68ac44916a79cd8c09711c4e689533834275
Author: Chris PeBenito ieee org>
AuthorDate: Tue Feb 2 18:50:45 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 21:15:09 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e3ac68ac
systemd: Move lines.
Signed-off-by: Chris PeBenito ieee.org>
Signed-off-by: Jason Zaman gentoo.org>
policy/modules/system/systemd.if | 1 +
policy/modules/system/systemd.te | 17 +
2 files changed, 10 insertions(+), 8 deletions(-)
diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
index 642d58e2..d7d0eb3d 100644
--- a/policy/modules/system/systemd.if
+++ b/policy/modules/system/systemd.if
@@ -78,6 +78,7 @@ template(`systemd_role_template',`
dbus_system_bus_client($1_systemd_t)
selinux_use_status_page($1_systemd_t)
+
seutil_read_file_contexts($1_systemd_t)
seutil_search_default_contexts($1_systemd_t)
')
diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 39c37ac1..9ef509dc 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -151,13 +151,13 @@ type systemd_machined_t;
type systemd_machined_exec_t;
init_daemon_domain(systemd_machined_t, systemd_machined_exec_t)
+type systemd_machined_devpts_t;
+term_login_pty(systemd_machined_devpts_t)
+
type systemd_machined_runtime_t alias systemd_machined_var_run_t;
files_runtime_file(systemd_machined_runtime_t)
init_daemon_runtime_file(systemd_machined_runtime_t, dir, "machines")
-type systemd_machined_devpts_t;
-term_login_pty(systemd_machined_devpts_t)
-
type systemd_modules_load_t;
type systemd_modules_load_exec_t;
init_daemon_domain(systemd_modules_load_t, systemd_modules_load_exec_t)
@@ -562,9 +562,6 @@ allow systemd_logind_t self:fifo_file rw_fifo_file_perms;
allow systemd_logind_t systemd_logind_var_lib_t:dir manage_dir_perms;
init_var_lib_filetrans(systemd_logind_t, systemd_logind_var_lib_t, dir)
-# for /run/systemd/userdb/io.systemd.Machine
-allow systemd_logind_t systemd_machined_t:unix_stream_socket connectto;
-
manage_fifo_files_pattern(systemd_logind_t, systemd_logind_runtime_t,
systemd_logind_runtime_t)
manage_files_pattern(systemd_logind_t, systemd_logind_runtime_t,
systemd_logind_runtime_t)
allow systemd_logind_t systemd_logind_runtime_t:dir manage_dir_perms;
@@ -574,6 +571,9 @@ manage_files_pattern(systemd_logind_t,
systemd_logind_inhibit_runtime_t, systemd
manage_fifo_files_pattern(systemd_logind_t, systemd_logind_inhibit_runtime_t,
systemd_logind_inhibit_runtime_t)
init_runtime_filetrans(systemd_logind_t, systemd_logind_inhibit_runtime_t,
dir, "inhibit")
+# for /run/systemd/userdb/io.systemd.Machine
+allow systemd_logind_t systemd_machined_t:unix_stream_socket connectto;
+
allow systemd_logind_t systemd_sessions_runtime_t:dir manage_dir_perms;
allow systemd_logind_t systemd_sessions_runtime_t:file manage_file_perms;
allow systemd_logind_t systemd_sessions_runtime_t:fifo_file
manage_fifo_file_perms;
@@ -730,6 +730,9 @@ allow systemd_machined_t self:capability { setgid
sys_chroot sys_ptrace };
allow systemd_machined_t self:process setfscreate;
allow systemd_machined_t self:unix_dgram_socket { connected_socket_perms
connect };
+term_create_pty(systemd_machined_t, systemd_machined_devpts_t)
+allow systemd_machined_t systemd_machined_devpts_t:chr_file manage_file_perms;
+
manage_files_pattern(systemd_machined_t, systemd_machined_runtime_t,
systemd_machined_runtime_t)
allow systemd_machined_t systemd_machined_runtime_t:lnk_file
manage_lnk_file_perms;
@@ -761,8 +764,6 @@ logging_send_syslog_msg(systemd_machined_t)
seutil_search_default_contexts(systemd_machined_t)
-term_create_pty(systemd_machined_t, systemd_machined_devpts_t)
-allow systemd_machined_t systemd_machined_devpts_t:chr_file manage_file_perms;
term_getattr_pty_fs(systemd_machined_t)
optional_policy(`
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
commit: f312afbcbc2ca62b7745e95fbe065c1f60ff28f5
Author: Chris PeBenito ieee org>
AuthorDate: Tue Feb 2 19:02:49 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 21:15:09 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f312afbc
systemd: Fix lint errors.
Signed-off-by: Chris PeBenito ieee.org>
Signed-off-by: Jason Zaman gentoo.org>
policy/modules/system/systemd.if | 5 ++---
1 file changed, 2 insertions(+), 3 deletions(-)
diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
index d7d0eb3d..48a63cb3 100644
--- a/policy/modules/system/systemd.if
+++ b/policy/modules/system/systemd.if
@@ -30,7 +30,6 @@ template(`systemd_role_template',`
attribute systemd_user_session_type, systemd_log_parse_env_type;
type systemd_user_runtime_t, systemd_user_runtime_notify_t;
type systemd_run_exec_t, systemd_analyze_exec_t;
- type systemd_machined_t;
')
#
@@ -68,7 +67,7 @@ template(`systemd_role_template',`
# Allow using file descriptors for user environment generators
allow $3 $1_systemd_t:fd use;
- allow $3 $1_systemd_t:fifo_file rw_inherited_file_perms;
+ allow $3 $1_systemd_t:fifo_file rw_inherited_fifo_file_perms;
# systemctl --user
stream_connect_pattern($3, systemd_user_runtime_t,
systemd_user_runtime_t, $1_systemd_t)
@@ -1351,5 +1350,5 @@ interface(`systemd_use_machined_devpts', `
')
allow $1 systemd_machined_t:fd use;
- allow $1 systemd_machined_devpts_t:chr_file { read write };
+ allow $1 systemd_machined_devpts_t:chr_file rw_inherited_term_perms;
')
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/kernel/, policy/modules/services/
commit: 38249e1e570984cbc60f21a12e0323a2e852a463
Author: Kenton Groombridge concord sh>
AuthorDate: Tue Feb 2 15:52:59 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 21:15:09 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=38249e1e
Various fixes
Allow dovecot to watch the mail spool, and add various dontaudit rules
for several other domains.
Signed-off-by: Kenton Groombridge concord.sh>
Signed-off-by: Jason Zaman gentoo.org>
policy/modules/kernel/kernel.if | 18 ++
policy/modules/services/dovecot.te | 3 +++
policy/modules/services/mta.if | 18 ++
policy/modules/services/ssh.te | 2 ++
policy/modules/system/authlogin.te | 3 +++
policy/modules/system/selinuxutil.te | 1 +
6 files changed, 45 insertions(+)
diff --git a/policy/modules/kernel/kernel.if b/policy/modules/kernel/kernel.if
index 5869eb50..ebd73aca 100644
--- a/policy/modules/kernel/kernel.if
+++ b/policy/modules/kernel/kernel.if
@@ -910,6 +910,24 @@ interface(`kernel_getattr_proc',`
allow $1 proc_t:filesystem getattr;
')
+
+##
+## Do not audit attempts to get the attributes of the proc filesystem.
+##
+##
+##
+## Domain to not audit.
+##
+##
+#
+interface(`kernel_dontaudit_getattr_proc',`
+ gen_require(`
+ type proc_t;
+ ')
+
+ dontaudit $1 proc_t:filesystem getattr;
+')
+
##
## Mount on proc directories.
diff --git a/policy/modules/services/dovecot.te
b/policy/modules/services/dovecot.te
index a2d1cc5e..16fa4e52 100644
--- a/policy/modules/services/dovecot.te
+++ b/policy/modules/services/dovecot.te
@@ -207,6 +207,7 @@ optional_policy(`
optional_policy(`
mta_manage_spool(dovecot_t)
+ mta_watch_spool(dovecot_t)
mta_manage_mail_home_rw_content(dovecot_t)
mta_home_filetrans_mail_home_rw(dovecot_t, dir, "Maildir")
mta_home_filetrans_mail_home_rw(dovecot_t, dir, ".maildir")
@@ -255,6 +256,8 @@ manage_sock_files_pattern(dovecot_auth_t,
dovecot_runtime_t, dovecot_runtime_t)
allow dovecot_auth_t dovecot_t:unix_stream_socket { connectto
rw_stream_socket_perms };
+kernel_dontaudit_getattr_proc(dovecot_auth_t)
+
files_search_runtime(dovecot_auth_t)
files_read_usr_files(dovecot_auth_t)
files_read_var_lib_files(dovecot_auth_t)
diff --git a/policy/modules/services/mta.if b/policy/modules/services/mta.if
index 7039a7f0..5266d52c 100644
--- a/policy/modules/services/mta.if
+++ b/policy/modules/services/mta.if
@@ -991,6 +991,24 @@ interface(`mta_manage_spool',`
manage_lnk_files_pattern($1, mail_spool_t, mail_spool_t)
')
+
+##
+## Watch mail spool content.
+##
+##
+##
+## Domain allowed access.
+##
+##
+#
+interface(`mta_watch_spool',`
+ gen_require(`
+ type mail_spool_t;
+ ')
+
+ allow $1 mail_spool_t:{ dir file } watch;
+')
+
###
##
## Create specified objects in the
diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index 16e86fbf..63a0d824 100644
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -262,6 +262,8 @@ corenet_sendrecv_xserver_server_packets(sshd_t)
ifdef(`distro_debian',`
allow sshd_t self:process { getcap setcap };
auth_use_pam_motd_dynamic(sshd_t)
+',`
+ dontaudit sshd_t self:process { getcap setcap };
')
ifdef(`init_systemd',`
diff --git a/policy/modules/system/authlogin.te
b/policy/modules/system/authlogin.te
index 96ebfa27..f5da5048 100644
--- a/policy/modules/system/authlogin.te
+++ b/policy/modules/system/authlogin.te
@@ -104,6 +104,9 @@ allow chkpwd_t shadow_t:file read_file_perms;
files_list_etc(chkpwd_t)
kernel_read_crypto_sysctls(chkpwd_t)
+kernel_dontaudit_search_kernel_sysctl(chkpwd_t)
+kernel_dontaudit_read_kernel_sysctl(chkpwd_t)
+kernel_dontaudit_getattr_proc(chkpwd_t)
domain_dontaudit_use_interactive_fds(chkpwd_t)
diff --git a/policy/modules/system/selinuxutil.te
b/policy/modules/system/selinuxutil.te
index 560e6c8a..ec65eb88 100644
--- a/policy/modules/system/selinuxutil.te
+++ b/policy/modules/system/selinuxutil.te
@@ -500,6 +500,7 @@ files_tmp_filetrans(semanage_t, semanage_tmp_t, { file dir
})
kernel_read_system_state(semanage_t)
kernel_read_kernel_sysctls(semanage_t)
+kernel_dontaudit_getattr_proc(semanage_t)
corecmd_exec_bin(semanage_t)
corecmd_exec_shell(semanage_t)
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/services/
commit: e3b92a0ef1585d742839a59a365a122eb000fb8e
Author: Russell Coker coker com au>
AuthorDate: Tue Feb 2 15:07:12 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 21:15:09 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e3b92a0e
machined
This patch is for systemd-machined. Some of it will probably need
discussion but some is obviously good, so Chris maybe you could take
the bits you like for this release?
Signed-off-by: Russell Coker coker.com.au>
Signed-off-by: Jason Zaman gentoo.org>
policy/modules/services/dbus.te | 6 +
policy/modules/services/ssh.te | 8 ++
policy/modules/system/authlogin.if | 1 +
policy/modules/system/locallogin.te | 1 +
policy/modules/system/systemd.if| 52 +
policy/modules/system/systemd.te| 12 +
6 files changed, 74 insertions(+), 6 deletions(-)
diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te
index 26ffe456..cbbbd45b 100644
--- a/policy/modules/services/dbus.te
+++ b/policy/modules/services/dbus.te
@@ -157,6 +157,9 @@ miscfiles_read_generic_certs(system_dbusd_t)
seutil_read_config(system_dbusd_t)
seutil_read_default_contexts(system_dbusd_t)
+# for machinectl shell
+term_use_ptmx(system_dbusd_t)
+
userdom_dontaudit_use_unpriv_user_fds(system_dbusd_t)
userdom_dontaudit_search_user_home_dirs(system_dbusd_t)
# read a file in ~/.local/share
@@ -190,6 +193,9 @@ optional_policy(`
systemd_read_logind_runtime_files(system_dbusd_t)
systemd_write_inherited_logind_inhibit_pipes(system_dbusd_t)
systemd_write_inherited_logind_sessions_pipes(system_dbusd_t)
+
+ # for passing around terminal file handles for machinectl shell
+ systemd_use_machined_devpts(system_dbusd_t)
')
optional_policy(`
diff --git a/policy/modules/services/ssh.te b/policy/modules/services/ssh.te
index 63a0d824..c5749682 100644
--- a/policy/modules/services/ssh.te
+++ b/policy/modules/services/ssh.te
@@ -267,9 +267,10 @@ ifdef(`distro_debian',`
')
ifdef(`init_systemd',`
+ auth_use_pam_systemd(sshd_t)
init_dbus_chat(sshd_t)
- systemd_dbus_chat_logind(sshd_t)
init_rw_stream_sockets(sshd_t)
+ systemd_write_inherited_logind_sessions_pipes(sshd_t)
')
tunable_policy(`ssh_sysadm_login',`
@@ -311,11 +312,6 @@ optional_policy(`
rssh_read_ro_content(sshd_t)
')
-optional_policy(`
- systemd_write_inherited_logind_sessions_pipes(sshd_t)
- systemd_dbus_chat_logind(sshd_t)
-')
-
optional_policy(`
xserver_domtrans_xauth(sshd_t)
xserver_link_xdm_keys(sshd_t)
diff --git a/policy/modules/system/authlogin.if
b/policy/modules/system/authlogin.if
index 08361bb5..753a7735 100644
--- a/policy/modules/system/authlogin.if
+++ b/policy/modules/system/authlogin.if
@@ -98,6 +98,7 @@ interface(`auth_use_pam',`
#
interface(`auth_use_pam_systemd',`
dbus_system_bus_client($1)
+ systemd_connect_machined($1)
systemd_dbus_chat_logind($1)
')
diff --git a/policy/modules/system/locallogin.te
b/policy/modules/system/locallogin.te
index 0f710243..ed004fb8 100644
--- a/policy/modules/system/locallogin.te
+++ b/policy/modules/system/locallogin.te
@@ -141,6 +141,7 @@ ifdef(`init_systemd',`
auth_manage_faillog(local_login_t)
init_dbus_chat(local_login_t)
+ systemd_connect_machined(local_login_t)
systemd_dbus_chat_logind(local_login_t)
systemd_use_logind_fds(local_login_t)
systemd_manage_logind_runtime_pipes(local_login_t)
diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if
index 29a561c7..642d58e2 100644
--- a/policy/modules/system/systemd.if
+++ b/policy/modules/system/systemd.if
@@ -19,12 +19,18 @@
## The user domain for the role.
##
##
+##
+##
+## The type for the user pty
+##
+##
#
template(`systemd_role_template',`
gen_require(`
attribute systemd_user_session_type, systemd_log_parse_env_type;
type systemd_user_runtime_t, systemd_user_runtime_notify_t;
type systemd_run_exec_t, systemd_analyze_exec_t;
+ type systemd_machined_t;
')
#
@@ -56,9 +62,13 @@ template(`systemd_role_template',`
allow $1_systemd_t $3:process { setsched rlimitinh };
corecmd_shell_domtrans($1_systemd_t, $3)
corecmd_bin_domtrans($1_systemd_t, $3)
+ allow $1_systemd_t self:process signal;
+
+ files_search_home($1_systemd_t)
# Allow using file descriptors for user environment generators
allow $3 $1_systemd_t:fd use;
+ allow $3 $1_systemd_t:fifo_file rw_inherited_file_perms;
# systemctl --user
stream_connect_pattern($3, systemd_user_runtime_t,
systemd_user_runtime_t, $1_systemd_t)
@@ -66,6 +76,10 @@ template(`systemd_role_template',`
can_exec
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/services/
commit: bf7f2433ab9c0dd622694a8d00e6fc3deca31a8d Author: Chris PeBenito ieee org> AuthorDate: Tue Feb 2 19:11:32 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:09 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=bf7f2433 systemd: Rename systemd_use_machined_devpts(). Renamed to systemd_use_inherited_machined_ptys(). Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/services/dbus.te | 4 ++-- policy/modules/system/systemd.if | 2 +- policy/modules/system/systemd.te | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te index 1f1b33c1..95ff7b36 100644 --- a/policy/modules/services/dbus.te +++ b/policy/modules/services/dbus.te @@ -1,4 +1,4 @@ -policy_module(dbus, 1.29.6) +policy_module(dbus, 1.29.7) gen_require(` class dbus all_dbus_perms; @@ -195,7 +195,7 @@ optional_policy(` systemd_write_inherited_logind_sessions_pipes(system_dbusd_t) # for passing around terminal file handles for machinectl shell - systemd_use_machined_devpts(system_dbusd_t) + systemd_use_inherited_machined_ptys(system_dbusd_t) ') optional_policy(` diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if index 48a63cb3..fb20b528 100644 --- a/policy/modules/system/systemd.if +++ b/policy/modules/system/systemd.if @@ -1344,7 +1344,7 @@ interface(`systemd_run_sysusers', ` ## ## # -interface(`systemd_use_machined_devpts', ` +interface(`systemd_use_inherited_machined_ptys', ` gen_require(` type systemd_machined_t, systemd_machined_devpts_t; ') diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index abf62148..7c7d6256 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -1,4 +1,4 @@ -policy_module(systemd, 1.10.12) +policy_module(systemd, 1.10.13) # #
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/admin/, policy/modules/apps/
commit: 758c98fc22b0795287736330c416d9f3e03fdf00
Author: Russell Coker coker com au>
AuthorDate: Tue Feb 2 14:55:38 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 21:15:09 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=758c98fc
misc apps and admin patches
Send again without the section Dominick didn't like. I think it's ready for
inclusion.
Signed-off-by: Russell Coker coker.com.au>
Signed-off-by: Jason Zaman gentoo.org>
policy/modules/admin/apt.fc| 4 +++-
policy/modules/admin/apt.te| 8
policy/modules/admin/bootloader.te | 3 +++
policy/modules/admin/logrotate.te | 2 ++
policy/modules/apps/games.te | 14 ++
policy/modules/apps/mplayer.if | 2 +-
policy/modules/apps/mplayer.te | 7 ++-
7 files changed, 37 insertions(+), 3 deletions(-)
diff --git a/policy/modules/admin/apt.fc b/policy/modules/admin/apt.fc
index 8a539f06..66fec023 100644
--- a/policy/modules/admin/apt.fc
+++ b/policy/modules/admin/apt.fc
@@ -5,6 +5,8 @@
/usr/bin/apt-shell -- gen_context(system_u:object_r:apt_exec_t,s0)
/usr/bin/aptitude -- gen_context(system_u:object_r:apt_exec_t,s0)
/usr/sbin/update-apt-xapian-index --
gen_context(system_u:object_r:apt_exec_t,s0)
+/usr/share/unattended-upgrades/unattended-upgrade-shutdown --
gen_context(system_u:object_r:apt_exec_t,s0)
+/usr/bin/unattended-upgrade -- gen_context(system_u:object_r:apt_exec_t,s0)
ifndef(`distro_redhat',`
/usr/sbin/synaptic -- gen_context(system_u:object_r:apt_exec_t,s0)
@@ -23,5 +25,5 @@ ifndef(`distro_redhat',`
/var/lock/aptitude gen_context(system_u:object_r:apt_lock_t,s0)
/var/log/aptitude.*gen_context(system_u:object_r:apt_var_log_t,s0)
-
+/var/log/unattended-upgrades(/.*)
gen_context(system_u:object_r:apt_var_log_t,s0)
/var/log/apt(/.*)? gen_context(system_u:object_r:apt_var_log_t,s0)
diff --git a/policy/modules/admin/apt.te b/policy/modules/admin/apt.te
index 841b8c4f..8e5f72b7 100644
--- a/policy/modules/admin/apt.te
+++ b/policy/modules/admin/apt.te
@@ -154,6 +154,10 @@ optional_policy(`
dpkg_lock_db(apt_t)
')
+optional_policy(`
+ networkmanager_dbus_chat(apt_t)
+')
+
optional_policy(`
nis_use_ypbind(apt_t)
')
@@ -168,6 +172,10 @@ optional_policy(`
rpm_domtrans(apt_t)
')
+optional_policy(`
+ systemd_dbus_chat_logind(apt_t)
+')
+
optional_policy(`
unconfined_domain(apt_t)
')
diff --git a/policy/modules/admin/bootloader.te
b/policy/modules/admin/bootloader.te
index 172e5157..78b34125 100644
--- a/policy/modules/admin/bootloader.te
+++ b/policy/modules/admin/bootloader.te
@@ -186,6 +186,9 @@ ifdef(`distro_debian',`
dpkg_read_db(bootloader_t)
dpkg_rw_pipes(bootloader_t)
+
+ apt_use_fds(bootloader_t)
+ apt_use_ptys(bootloader_t)
')
ifdef(`distro_redhat',`
diff --git a/policy/modules/admin/logrotate.te
b/policy/modules/admin/logrotate.te
index 7169d260..c13f0a73 100644
--- a/policy/modules/admin/logrotate.te
+++ b/policy/modules/admin/logrotate.te
@@ -121,6 +121,7 @@ logging_send_syslog_msg(logrotate_t)
logging_send_audit_msgs(logrotate_t)
logging_exec_all_logs(logrotate_t)
+miscfiles_read_generic_certs(logrotate_t)
miscfiles_read_localization(logrotate_t)
seutil_dontaudit_read_config(logrotate_t)
@@ -242,6 +243,7 @@ optional_policy(`
')
optional_policy(`
+ samba_domtrans_smbcontrol(logrotate_t)
samba_exec_log(logrotate_t)
')
diff --git a/policy/modules/apps/games.te b/policy/modules/apps/games.te
index 1de63166..c66b382b 100644
--- a/policy/modules/apps/games.te
+++ b/policy/modules/apps/games.te
@@ -111,9 +111,11 @@ fs_tmpfs_filetrans(games_t, games_tmpfs_t, { file lnk_file
sock_file fifo_file }
can_exec(games_t, games_exec_t)
+kernel_read_kernel_sysctls(games_t)
kernel_read_system_state(games_t)
corecmd_exec_bin(games_t)
+corecmd_exec_shell(games_t)
corenet_all_recvfrom_netlabel(games_t)
corenet_tcp_sendrecv_generic_if(games_t)
@@ -146,6 +148,7 @@ init_dontaudit_rw_utmp(games_t)
logging_dontaudit_search_logs(games_t)
+miscfiles_read_generic_certs(games_t)
miscfiles_read_man_pages(games_t)
miscfiles_read_localization(games_t)
@@ -161,9 +164,15 @@ tunable_policy(`allow_execmem',`
allow games_t self:process execmem;
')
+optional_policy(`
+ alsa_read_config(games_t)
+')
+
optional_policy(`
dbus_all_session_bus_client(games_t)
dbus_connect_all_session_bus(games_t)
+ dbus_read_lib_files(games_t)
+ dbus_system_bus_client(games_t)
')
optional_policy(`
@@ -174,6 +183,11 @@ optional_policy(`
pulseaudio_run(games_t, games_roles)
')
+optional_policy(`
+ xdg_read_config_files(games_t)
+ xdg_read_data_files(games_t)
+')
+
optional_policy(`
xserver_user_x_domain_template(games, games_t, games_tmpfs_t)
xserver_create_xdm_tmp_sockets(games_t)
dif
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/, policy/modules/system/, policy/modules/admin/
commit: 3038102c095f32eaf4df2f0a5caec52dc6106463 Author: Chris PeBenito ieee org> AuthorDate: Tue Feb 2 13:47:00 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:09 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3038102c various: Module version bump. Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/admin/dpkg.te | 2 +- policy/modules/services/aptcacher.te | 2 +- policy/modules/services/clamav.te| 2 +- policy/modules/services/ftp.te | 2 +- policy/modules/services/milter.te| 2 +- policy/modules/services/mysql.te | 2 +- policy/modules/system/authlogin.te | 2 +- policy/modules/system/init.te| 2 +- policy/modules/system/systemd.te | 2 +- policy/modules/system/unconfined.te | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/policy/modules/admin/dpkg.te b/policy/modules/admin/dpkg.te index da365bb2..a3c014d8 100644 --- a/policy/modules/admin/dpkg.te +++ b/policy/modules/admin/dpkg.te @@ -1,4 +1,4 @@ -policy_module(dpkg, 1.16.0) +policy_module(dpkg, 1.16.1) # diff --git a/policy/modules/services/aptcacher.te b/policy/modules/services/aptcacher.te index fa3b2dd0..175afb8f 100644 --- a/policy/modules/services/aptcacher.te +++ b/policy/modules/services/aptcacher.te @@ -1,4 +1,4 @@ -policy_module(aptcacher, 1.1.1) +policy_module(aptcacher, 1.1.2) # diff --git a/policy/modules/services/clamav.te b/policy/modules/services/clamav.te index 2bc067b6..73257d2d 100644 --- a/policy/modules/services/clamav.te +++ b/policy/modules/services/clamav.te @@ -1,4 +1,4 @@ -policy_module(clamav, 1.19.0) +policy_module(clamav, 1.19.1) ## ## diff --git a/policy/modules/services/ftp.te b/policy/modules/services/ftp.te index e2718723..8a30de5f 100644 --- a/policy/modules/services/ftp.te +++ b/policy/modules/services/ftp.te @@ -1,4 +1,4 @@ -policy_module(ftp, 1.24.1) +policy_module(ftp, 1.24.2) # diff --git a/policy/modules/services/milter.te b/policy/modules/services/milter.te index 29183d47..00050d3f 100644 --- a/policy/modules/services/milter.te +++ b/policy/modules/services/milter.te @@ -1,4 +1,4 @@ -policy_module(milter, 1.10.0) +policy_module(milter, 1.10.1) # diff --git a/policy/modules/services/mysql.te b/policy/modules/services/mysql.te index 52a4e142..b19e8672 100644 --- a/policy/modules/services/mysql.te +++ b/policy/modules/services/mysql.te @@ -1,4 +1,4 @@ -policy_module(mysql, 1.22.2) +policy_module(mysql, 1.22.3) # diff --git a/policy/modules/system/authlogin.te b/policy/modules/system/authlogin.te index 375884e7..96ebfa27 100644 --- a/policy/modules/system/authlogin.te +++ b/policy/modules/system/authlogin.te @@ -1,4 +1,4 @@ -policy_module(authlogin, 2.17.5) +policy_module(authlogin, 2.17.6) # diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te index 1c9a5cdd..a07ff86d 100644 --- a/policy/modules/system/init.te +++ b/policy/modules/system/init.te @@ -1,4 +1,4 @@ -policy_module(init, 2.9.8) +policy_module(init, 2.9.9) gen_require(` class passwd rootok; diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te index 8f91f228..9e68824e 100644 --- a/policy/modules/system/systemd.te +++ b/policy/modules/system/systemd.te @@ -1,4 +1,4 @@ -policy_module(systemd, 1.10.10) +policy_module(systemd, 1.10.11) # # diff --git a/policy/modules/system/unconfined.te b/policy/modules/system/unconfined.te index 42879fb7..5281a6c3 100644 --- a/policy/modules/system/unconfined.te +++ b/policy/modules/system/unconfined.te @@ -1,4 +1,4 @@ -policy_module(unconfined, 3.15.0) +policy_module(unconfined, 3.15.1) #
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/admin/
commit: 71f9eaa40d0cca90e45ad49ae78e0ce3767ebb7a Author: Chris PeBenito ieee org> AuthorDate: Tue Feb 2 18:32:42 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:09 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=71f9eaa4 apt, bootloader: Move lines. Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/admin/apt.fc| 6 -- policy/modules/admin/bootloader.te | 5 ++--- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/policy/modules/admin/apt.fc b/policy/modules/admin/apt.fc index 66fec023..456375f9 100644 --- a/policy/modules/admin/apt.fc +++ b/policy/modules/admin/apt.fc @@ -4,9 +4,11 @@ /usr/bin/apt-get -- gen_context(system_u:object_r:apt_exec_t,s0) /usr/bin/apt-shell -- gen_context(system_u:object_r:apt_exec_t,s0) /usr/bin/aptitude -- gen_context(system_u:object_r:apt_exec_t,s0) +/usr/bin/unattended-upgrade -- gen_context(system_u:object_r:apt_exec_t,s0) + /usr/sbin/update-apt-xapian-index -- gen_context(system_u:object_r:apt_exec_t,s0) + /usr/share/unattended-upgrades/unattended-upgrade-shutdown -- gen_context(system_u:object_r:apt_exec_t,s0) -/usr/bin/unattended-upgrade -- gen_context(system_u:object_r:apt_exec_t,s0) ifndef(`distro_redhat',` /usr/sbin/synaptic -- gen_context(system_u:object_r:apt_exec_t,s0) @@ -25,5 +27,5 @@ ifndef(`distro_redhat',` /var/lock/aptitude gen_context(system_u:object_r:apt_lock_t,s0) /var/log/aptitude.*gen_context(system_u:object_r:apt_var_log_t,s0) -/var/log/unattended-upgrades(/.*) gen_context(system_u:object_r:apt_var_log_t,s0) /var/log/apt(/.*)? gen_context(system_u:object_r:apt_var_log_t,s0) +/var/log/unattended-upgrades(/.*) gen_context(system_u:object_r:apt_var_log_t,s0) diff --git a/policy/modules/admin/bootloader.te b/policy/modules/admin/bootloader.te index 78b34125..cbaf65cd 100644 --- a/policy/modules/admin/bootloader.te +++ b/policy/modules/admin/bootloader.te @@ -180,15 +180,14 @@ ifdef(`distro_debian',` libs_relabelto_lib_files(bootloader_t) + apt_use_fds(bootloader_t) + apt_use_ptys(bootloader_t) # for apt-cache apt_read_db(bootloader_t) apt_manage_cache(bootloader_t) dpkg_read_db(bootloader_t) dpkg_rw_pipes(bootloader_t) - - apt_use_fds(bootloader_t) - apt_use_ptys(bootloader_t) ') ifdef(`distro_redhat',`
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/apps/
commit: bf51bea5131ee562ef22444e34aab06f69422cbc Author: Chris PeBenito ieee org> AuthorDate: Tue Feb 2 13:47:55 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:09 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=bf51bea5 screen: Module version bump. Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/apps/screen.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/apps/screen.te b/policy/modules/apps/screen.te index 58575bc9..bcfba653 100644 --- a/policy/modules/apps/screen.te +++ b/policy/modules/apps/screen.te @@ -1,4 +1,4 @@ -policy_module(screen, 2.11.0) +policy_module(screen, 2.11.1) #
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/services/, policy/modules/admin/
commit: 6b6d9fc0d2ae76f8c137b5c3bcb1f184d0c62c57
Author: Russell Coker coker com au>
AuthorDate: Mon Feb 1 04:57:13 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 21:15:09 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=6b6d9fc0
new version of filetrans patch
Name changes suggested by Dominick and some more additions.
Signed-off-by: Russell Coker coker.com.au>
Signed-off-by: Jason Zaman gentoo.org>
policy/modules/admin/dpkg.te | 20 +
policy/modules/services/aptcacher.if | 54
policy/modules/services/clamav.if| 36
policy/modules/services/ftp.if | 18
policy/modules/services/milter.if| 18
policy/modules/services/mysql.fc | 4 +--
policy/modules/services/mysql.if | 38 +
policy/modules/system/authlogin.if | 7 -
policy/modules/system/init.te| 5
policy/modules/system/systemd.if | 25 +
policy/modules/system/unconfined.te | 1 +
11 files changed, 223 insertions(+), 3 deletions(-)
diff --git a/policy/modules/admin/dpkg.te b/policy/modules/admin/dpkg.te
index ee37e504..6830c795 100644
--- a/policy/modules/admin/dpkg.te
+++ b/policy/modules/admin/dpkg.te
@@ -276,6 +276,7 @@ term_use_all_terms(dpkg_script_t)
files_manage_non_auth_files(dpkg_script_t)
+auth_etc_filetrans_shadow(dpkg_script_t, "shadow.upwd-write")
auth_manage_shadow(dpkg_script_t)
init_all_labeled_script_domtrans(dpkg_script_t)
@@ -306,10 +307,20 @@ optional_policy(`
apt_use_fds(dpkg_script_t)
')
+optional_policy(`
+ aptcacher_filetrans_cache_dir(dpkg_script_t)
+ aptcacher_filetrans_conf_dir(dpkg_script_t)
+ aptcacher_filetrans_log_dir(dpkg_script_t)
+')
+
optional_policy(`
bootloader_run(dpkg_script_t, dpkg_roles)
')
+optional_policy(`
+ clamav_filetrans_log(dpkg_script_t)
+')
+
optional_policy(`
devicekit_dbus_chat_power(dpkg_script_t)
')
@@ -318,6 +329,10 @@ optional_policy(`
init_dbus_chat(dpkg_script_t)
')
+optional_policy(`
+ milter_filetrans_spamass_state(dpkg_script_t)
+')
+
optional_policy(`
modutils_run(dpkg_script_t, dpkg_roles)
')
@@ -326,6 +341,11 @@ optional_policy(`
mta_send_mail(dpkg_script_t)
')
+optional_policy(`
+ mysql_create_db_dir(dpkg_script_t)
+ mysql_create_log_dir(dpkg_script_t)
+')
+
optional_policy(`
nis_use_ypbind(dpkg_script_t)
')
diff --git a/policy/modules/services/aptcacher.if
b/policy/modules/services/aptcacher.if
index 12c1335a..bef83332 100644
--- a/policy/modules/services/aptcacher.if
+++ b/policy/modules/services/aptcacher.if
@@ -63,3 +63,57 @@ interface(`aptcacher_stream_connect',`
files_search_runtime($1)
stream_connect_pattern($1, aptcacher_runtime_t, aptcacher_runtime_t,
aptcacher_t)
')
+
+
+##
+## create /var/log/apt-cacher-ng
+##
+##
+##
+## Domain allowed access.
+##
+##
+#
+interface(`aptcacher_filetrans_log_dir',`
+ gen_require(`
+ type aptcacher_log_t;
+ ')
+
+ logging_log_filetrans($1, aptcacher_log_t, dir, "apt-cacher-ng")
+')
+
+
+##
+## create /var/cache/apt-cacher-ng
+##
+##
+##
+## Domain allowed access.
+##
+##
+#
+interface(`aptcacher_filetrans_cache_dir',`
+ gen_require(`
+ type aptcacher_cache_t;
+ ')
+
+ files_var_filetrans($1, aptcacher_cache_t, dir, "apt-cacher-ng")
+')
+
+
+##
+## create /etc/apt-cacher-ng
+##
+##
+##
+## Domain allowed access.
+##
+##
+#
+interface(`aptcacher_filetrans_conf_dir',`
+ gen_require(`
+ type aptcacher_conf_t;
+ ')
+
+ files_etc_filetrans($1, aptcacher_conf_t, dir, "apt-cacher-ng")
+')
diff --git a/policy/modules/services/clamav.if
b/policy/modules/services/clamav.if
index 33909248..29d00c98 100644
--- a/policy/modules/services/clamav.if
+++ b/policy/modules/services/clamav.if
@@ -430,3 +430,39 @@ interface(`clamav_admin',`
files_list_tmp($1)
admin_pattern($1, { clamd_tmp_t clamscan_tmp_t })
')
+
+
+##
+## specified domain creates /var/log/clamav/freshclam.log with correct type
+##
+##
+##
+## Domain allowed access.
+##
+##
+#
+interface(`clamav_filetrans_log',`
+ gen_require(`
+ type clamd_var_log_t, freshclam_var_log_t;
+ ')
+
+ filetrans_pattern($1, clamd_var_log_t, freshclam_var_log_t, file,
"freshclam.log")
+')
+
+
+##
+## specified domain creates /run/clamav with correct type
+##
+##
+##
+## Domain allowed access.
+##
+##
+#
+interface(`clamav_filetrans_runtime_dir',`
+ gen_
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/
commit: a57a062f937ba25ea6d7035f932d3917f8c19bdb Author: Chris PeBenito ieee org> AuthorDate: Mon Feb 1 20:56:31 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=a57a062f certbot: Module version bump. Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/services/certbot.te | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/policy/modules/services/certbot.te b/policy/modules/services/certbot.te index 62a59478..7d8cf2d9 100644 --- a/policy/modules/services/certbot.te +++ b/policy/modules/services/certbot.te @@ -1,4 +1,4 @@ -policy_module(certbot, 1.0.0) +policy_module(certbot, 1.0.1) ## ##
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/
commit: db53283aab8d16614c4c72b3967d8570083a2e20
Author: Kenton Groombridge concord sh>
AuthorDate: Mon Feb 1 20:46:24 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 20:54:11 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=db53283a
lvm: add lvm_tmpfs_t type and rules
cryptsetup uses tmpfs when performing some operations on encrypted
volumes such as changing keys.
Signed-off-by: Kenton Groombridge concord.sh>
Signed-off-by: Jason Zaman gentoo.org>
policy/modules/system/lvm.te | 7 +++
1 file changed, 7 insertions(+)
diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te
index a0cc3bd9..99053132 100644
--- a/policy/modules/system/lvm.te
+++ b/policy/modules/system/lvm.te
@@ -42,6 +42,9 @@ init_unit_file(lvm_unit_t)
type lvm_tmp_t;
files_tmp_file(lvm_tmp_t)
+type lvm_tmpfs_t;
+files_tmpfs_file(lvm_tmpfs_t)
+
type lvm_var_lib_t;
files_type(lvm_var_lib_t)
@@ -183,6 +186,10 @@ manage_dirs_pattern(lvm_t, lvm_tmp_t, lvm_tmp_t)
manage_files_pattern(lvm_t, lvm_tmp_t, lvm_tmp_t)
files_tmp_filetrans(lvm_t, lvm_tmp_t, { file dir })
+manage_dirs_pattern(lvm_t, lvm_tmpfs_t, lvm_tmpfs_t)
+manage_files_pattern(lvm_t, lvm_tmpfs_t, lvm_tmpfs_t)
+fs_tmpfs_filetrans(lvm_t, lvm_tmpfs_t, { dir file })
+
# /lib/lvm- holds the actual LVM binaries (and symlinks)
read_files_pattern(lvm_t, lvm_exec_t, lvm_exec_t)
read_lnk_files_pattern(lvm_t, lvm_exec_t, lvm_exec_t)
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/admin/, policy/modules/system/, policy/modules/services/
commit: e57bc26069d27c092d703ab9e323c9590552a73e Author: Chris PeBenito ieee org> AuthorDate: Tue Feb 2 13:46:41 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:09 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e57bc260 dpkg, aptcatcher, milter, mysql, systemd: Rename interfaces. Rename interfaces from a7f3fdabadd47279800688d5ee2e19662b7fc58b. Signed-off-by: Chris PeBenito ieee.org> Signed-off-by: Jason Zaman gentoo.org> policy/modules/admin/dpkg.te | 8 policy/modules/services/aptcacher.if | 2 +- policy/modules/services/milter.if| 2 +- policy/modules/services/mysql.if | 4 ++-- policy/modules/system/systemd.if | 2 +- 5 files changed, 9 insertions(+), 9 deletions(-) diff --git a/policy/modules/admin/dpkg.te b/policy/modules/admin/dpkg.te index 6830c795..da365bb2 100644 --- a/policy/modules/admin/dpkg.te +++ b/policy/modules/admin/dpkg.te @@ -309,7 +309,7 @@ optional_policy(` optional_policy(` aptcacher_filetrans_cache_dir(dpkg_script_t) - aptcacher_filetrans_conf_dir(dpkg_script_t) + aptcacher_etc_filetrans_conf_dir(dpkg_script_t) aptcacher_filetrans_log_dir(dpkg_script_t) ') @@ -330,7 +330,7 @@ optional_policy(` ') optional_policy(` - milter_filetrans_spamass_state(dpkg_script_t) + milter_var_lib_filetrans_spamass_state(dpkg_script_t) ') optional_policy(` @@ -342,8 +342,8 @@ optional_policy(` ') optional_policy(` - mysql_create_db_dir(dpkg_script_t) - mysql_create_log_dir(dpkg_script_t) + mysql_var_lib_filetrans_db_dir(dpkg_script_t) + mysql_log_filetrans_log_dir(dpkg_script_t) ') optional_policy(` diff --git a/policy/modules/services/aptcacher.if b/policy/modules/services/aptcacher.if index bef83332..40f19560 100644 --- a/policy/modules/services/aptcacher.if +++ b/policy/modules/services/aptcacher.if @@ -110,7 +110,7 @@ interface(`aptcacher_filetrans_cache_dir',` ## ## # -interface(`aptcacher_filetrans_conf_dir',` +interface(`aptcacher_etc_filetrans_conf_dir',` gen_require(` type aptcacher_conf_t; ') diff --git a/policy/modules/services/milter.if b/policy/modules/services/milter.if index 13b05498..5323b6e0 100644 --- a/policy/modules/services/milter.if +++ b/policy/modules/services/milter.if @@ -108,7 +108,7 @@ interface(`milter_manage_spamass_state',` ## ## # -interface(`milter_filetrans_spamass_state',` +interface(`milter_var_lib_filetrans_spamass_state',` gen_require(` type spamass_milter_state_t; ') diff --git a/policy/modules/services/mysql.if b/policy/modules/services/mysql.if index e89a66d9..0b2e5685 100644 --- a/policy/modules/services/mysql.if +++ b/policy/modules/services/mysql.if @@ -251,7 +251,7 @@ interface(`mysql_manage_db_files',` ## ## # -interface(`mysql_create_db_dir',` +interface(`mysql_var_lib_filetrans_db_dir',` gen_require(` type mysqld_db_t; ') @@ -357,7 +357,7 @@ interface(`mysql_write_log',` ## ## # -interface(`mysql_create_log_dir',` +interface(`mysql_log_filetrans_log_dir',` gen_require(` type mysqld_log_t; ') diff --git a/policy/modules/system/systemd.if b/policy/modules/system/systemd.if index ac431aba..29a561c7 100644 --- a/policy/modules/system/systemd.if +++ b/policy/modules/system/systemd.if @@ -546,7 +546,7 @@ interface(`systemd_run_passwd_agent',` type systemd_passwd_agent_t, systemd_passwd_agent_exec_t; ') - domain_auto_transition_pattern($1, systemd_passwd_agent_exec_t, systemd_passwd_agent_t) + domtrans_pattern($1, systemd_passwd_agent_exec_t, systemd_passwd_agent_t) allow systemd_passwd_agent_t $1:fd use; role $2 types systemd_passwd_agent_t; ')
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/apps/
commit: f633f22afb5aff7f1173813fe7559851bc62b557 Author: Jonathan Davies protonmail com> AuthorDate: Fri Jan 29 14:56:40 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 21:15:09 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f633f22a apps/screen.te: Allow screen to search xdg directories. Signed-off-by: Jonathan Davies protonmail.com> Signed-off-by: Jason Zaman gentoo.org> policy/modules/apps/screen.te | 4 1 file changed, 4 insertions(+) diff --git a/policy/modules/apps/screen.te b/policy/modules/apps/screen.te index f8546e84..58575bc9 100644 --- a/policy/modules/apps/screen.te +++ b/policy/modules/apps/screen.te @@ -111,6 +111,10 @@ tunable_policy(`use_nfs_home_dirs',` fs_read_nfs_symlinks(screen_domain) ') +optional_policy(` + xdg_search_config_dirs(screen_domain) +') + ifdef(`distro_gentoo',` ## #
[gentoo-commits] proj/hardened-refpolicy:master commit in: /
commit: b2fb7db240074e72ce1d052191db6990ce2a4571 Author: Christian Göttsche googlemail com> AuthorDate: Sun Jan 31 20:57:01 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b2fb7db2 Preset OUTPUT_POLICY to 32 32 is the policy version of the latest SELinux userland release, 3.1 . Signed-off-by: Christian Göttsche googlemail.com> Signed-off-by: Jason Zaman gentoo.org> build.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.conf b/build.conf index 2ab0b2f2..3f2a2fdb 100644 --- a/build.conf +++ b/build.conf @@ -8,7 +8,7 @@ # version policy it supports. Setting this will # override the version. This only has an # effect for monolithic policies. -#OUTPUT_POLICY = 18 +#OUTPUT_POLICY = 32 # Policy Type # standard, mls, mcs
[gentoo-commits] proj/hardened-refpolicy:master commit in: /
commit: fc8dab0ab22890514d6376a71fae781467053c82 Author: Christian Göttsche googlemail com> AuthorDate: Mon Feb 1 19:05:19 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=fc8dab0a Rules.monolithic: do not suppress load_policy warning messages Also do not supply the policy path, it is ignored since at least 2008 (https://github.com/SELinuxProject/selinux/commit/13cd4c8960688af11ad23b4c946149015c80d549). /usr/sbin/load_policy: Warning! Policy file argument (/etc/selinux/debian/policy/policy.32) is no longer supported, installed policy is always loaded. Continuing... Signed-off-by: Christian Göttsche googlemail.com> Signed-off-by: Jason Zaman gentoo.org> Rules.monolithic | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Rules.monolithic b/Rules.monolithic index 65529d38..92557529 100644 --- a/Rules.monolithic +++ b/Rules.monolithic @@ -111,7 +111,7 @@ ifneq ($(polbinpath).$(pv),$(loadpath)) Check $(topdir)/config file entry is: "SELINUXTYPE=$(NAME)") endif @echo "Loading $(NAME) $(loadpath)" - $(verbose) $(LOADPOLICY) -q $(loadpath) + $(verbose) $(LOADPOLICY) #
[gentoo-commits] proj/hardened-refpolicy:master commit in: support/
commit: 16fa2fe4be80df6b61c0ecfa755ce7ad0ea9d358
Author: Christian Göttsche googlemail com>
AuthorDate: Sun Jan 31 20:50:27 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 20:54:11 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=16fa2fe4
genhomedircon: improve error messages for min uid search
Only grep if the files exist.
grep returns 1 on no match, check against 1 instead of 256.
Signed-off-by: Christian Göttsche googlemail.com>
Signed-off-by: Jason Zaman gentoo.org>
support/genhomedircon.py | 56 +---
1 file changed, 29 insertions(+), 27 deletions(-)
diff --git a/support/genhomedircon.py b/support/genhomedircon.py
index e4475f5c..2721bd7d 100644
--- a/support/genhomedircon.py
+++ b/support/genhomedircon.py
@@ -40,7 +40,7 @@
# are always "real" (including root, in the default configuration).
#
-import sys, pwd, getopt, re
+import sys, pwd, getopt, re, os
from subprocess import getstatusoutput
EXCLUDE_LOGINS=["/sbin/nologin", "/bin/false"]
@@ -71,32 +71,34 @@ def getStartingUID():
def getDefaultHomeDir():
ret = []
- rc=getstatusoutput("grep -h '^HOME' /etc/default/useradd")
- if rc[0] == 0:
- homedir = rc[1].split("=")[1]
- homedir = homedir.split("#")[0]
- homedir = homedir.strip()
- if not homedir in ret:
- ret.append(homedir)
- else:
- #rc[0] == 256 means the file was there, we read it, but the
grep didn't match
- if rc[0] != 256:
- sys.stderr.write("%s\n" % rc[1])
- sys.stderr.write("You do not have access to
/etc/default/useradd HOME=\n")
- sys.stderr.flush()
- rc=getstatusoutput("grep -h '^LU_HOMEDIRECTORY' /etc/libuser.conf")
- if rc[0] == 0:
- homedir = rc[1].split("=")[1]
- homedir = homedir.split("#")[0]
- homedir = homedir.strip()
- if not homedir in ret:
- ret.append(homedir)
- else:
- #rc[0] == 256 means the file was there, we read it, but the
grep didn't match
- if rc[0] != 256:
- sys.stderr.write("%s\n" % rc[1])
- sys.stderr.write("You do not have access to
/etc/libuser.conf LU_HOMEDIRECTORY=\n")
- sys.stderr.flush()
+ if os.path.isfile('/etc/default/useradd'):
+ rc=getstatusoutput("grep -h '^HOME' /etc/default/useradd")
+ if rc[0] == 0:
+ homedir = rc[1].split("=")[1]
+ homedir = homedir.split("#")[0]
+ homedir = homedir.strip()
+ if not homedir in ret:
+ ret.append(homedir)
+ else:
+ #rc[0] == 1 means the file was there, we read it, but
the grep didn't match
+ if rc[0] != 1:
+ sys.stderr.write("(%d): %s\n" % (rc[0], rc[1]))
+ sys.stderr.write("You do not have access to
/etc/default/useradd HOME=\n")
+ sys.stderr.flush()
+ if os.path.isfile('/etc/libuser.conf'):
+ rc=getstatusoutput("grep -h '^LU_HOMEDIRECTORY'
/etc/libuser.conf")
+ if rc[0] == 0:
+ homedir = rc[1].split("=")[1]
+ homedir = homedir.split("#")[0]
+ homedir = homedir.strip()
+ if not homedir in ret:
+ ret.append(homedir)
+ else:
+ #rc[0] == 1 means the file was there, we read it, but
the grep didn't match
+ if rc[0] != 1:
+ sys.stderr.write("(%d): %s\n" % (rc[0], rc[1]))
+ sys.stderr.write("You do not have access to
/etc/libuser.conf LU_HOMEDIRECTORY=\n")
+ sys.stderr.flush()
if ret == []:
ret.append("/home")
return ret
[gentoo-commits] proj/hardened-refpolicy:master commit in: /
commit: f4d0c88878d7899b27f3c2c09bbd1e34bd975abf Author: Christian Göttsche googlemail com> AuthorDate: Mon Feb 1 19:09:27 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f4d0c888 Rules.monolithic: add missing phony declarations Signed-off-by: Christian Göttsche googlemail.com> Signed-off-by: Jason Zaman gentoo.org> Rules.monolithic | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Rules.monolithic b/Rules.monolithic index 5ccd7875..87edd2d3 100644 --- a/Rules.monolithic +++ b/Rules.monolithic @@ -267,4 +267,4 @@ clean: $(verbose) rm -f *.res $(verbose) rm -fR $(tmpdir) -.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel check longcheck clean +.PHONY: default policy install load reload enableaudit checklabels restorelabels relabel resetlabels validate check longcheck clean
[gentoo-commits] proj/hardened-refpolicy:master commit in: /
commit: 451967e07ca8eb3b77e9c9cef67fa626d430e346 Author: Christian Göttsche googlemail com> AuthorDate: Mon Feb 1 19:07:40 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=451967e0 Rules.monolithic: tweak checkpolicy arguments - enable optimizations (3.0 https://github.com/SELinuxProject/selinux/commit/071247e8f4e9584095474093537f1869379ca43f) - fail on warnings (3.1 https://github.com/SELinuxProject/selinux/commit/62a91d7d71736c67dcecff3060dd2301b6313285) - sort ocontexts (2.9 https://github.com/SELinuxProject/selinux/commit/9077c5c056f348ab4908bdf004ca82cb1f01bd38) Signed-off-by: Christian Göttsche googlemail.com> Signed-off-by: Jason Zaman gentoo.org> Rules.monolithic | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Rules.monolithic b/Rules.monolithic index 92557529..1696021f 100644 --- a/Rules.monolithic +++ b/Rules.monolithic @@ -81,7 +81,7 @@ ifneq ($(pv),$(kv)) @echo "WARNING: Policy version mismatch (policy:$(pv) kernel:$(kv))! Is your OUTPUT_POLICY set correctly?" @echo endif - $(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) $^ -o $@ + $(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) -S -O -E $^ -o $@ # @@ -95,7 +95,7 @@ ifneq ($(pv),$(kv)) @echo endif @$(INSTALL) -d -m 0755 $(@D) - $(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) $^ -o $@ + $(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) -S -O -E $^ -o $@ #
[gentoo-commits] proj/hardened-refpolicy:master commit in: /
commit: a261f848d3d423e370ef93f259e7661fbb5fc1ff Author: Christian Göttsche googlemail com> AuthorDate: Mon Feb 1 19:08:54 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=a261f848 Rules.monolithic: drop dead variable USEPWD is nowhere declared or documented. Signed-off-by: Christian Göttsche googlemail.com> Signed-off-by: Jason Zaman gentoo.org> Rules.monolithic | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Rules.monolithic b/Rules.monolithic index 1696021f..5ccd7875 100644 --- a/Rules.monolithic +++ b/Rules.monolithic @@ -217,7 +217,7 @@ $(fcpath): $(fc) $(loadpath) $(userpath)/system.users @$(INSTALL) -d -m 0755 $(@D) $(verbose) $(INSTALL) -m 0644 $(fc) $(fcpath) $(verbose) $(INSTALL) -m 0644 $(homedir_template) $(homedirpath) - $(verbose) $(UMASK) 022 ; $(genhomedircon) -d $(topdir) -t $(NAME) $(USEPWD) + $(verbose) $(UMASK) 022 ; $(genhomedircon) -d $(topdir) -t $(NAME) #
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/
commit: 0b6c2d466e55f5f6e14ef67b2ecd9303a6b507a5 Author: Kenton Groombridge concord sh> AuthorDate: Fri Jan 29 16:22:30 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=0b6c2d46 certbot: add support for acme.sh Signed-off-by: Kenton Groombridge concord.sh> Signed-off-by: Jason Zaman gentoo.org> policy/modules/services/certbot.fc | 2 ++ policy/modules/services/certbot.te | 13 + 2 files changed, 15 insertions(+) diff --git a/policy/modules/services/certbot.fc b/policy/modules/services/certbot.fc index 508f9862..d1bc3f64 100644 --- a/policy/modules/services/certbot.fc +++ b/policy/modules/services/certbot.fc @@ -1,4 +1,6 @@ /usr/bin/certbot -- gen_context(system_u:object_r:certbot_exec_t,s0) /usr/bin/letsencrypt -- gen_context(system_u:object_r:certbot_exec_t,s0) +/usr/share/acme\.sh/acme\.sh -- gen_context(system_u:object_r:certbot_exec_t,s0) /var/lib/letsencrypt(/.*)? gen_context(system_u:object_r:certbot_lib_t,s0) /var/log/letsencrypt(/.*)? gen_context(system_u:object_r:certbot_log_t,s0) +/var/lib/acme\.sh(/.*)? gen_context(system_u:object_r:certbot_lib_t,s0) diff --git a/policy/modules/services/certbot.te b/policy/modules/services/certbot.te index 5f3b155f..62a59478 100644 --- a/policy/modules/services/certbot.te +++ b/policy/modules/services/certbot.te @@ -1,5 +1,13 @@ policy_module(certbot, 1.0.0) +## +## +## Determine whether additional rules +## should be enabled to support acme.sh +## +## +gen_tunable(certbot_acmesh, false) + # # Declarations @@ -93,6 +101,11 @@ sysnet_read_config(certbot_t) userdom_dontaudit_search_user_home_dirs(certbot_t) userdom_use_user_ptys(certbot_t) +tunable_policy(`certbot_acmesh',` + corecmd_exec_bin(certbot_t) + corecmd_exec_shell(certbot_t) +') + optional_policy(` # for writing to webroot apache_manage_sys_content(certbot_t)
[gentoo-commits] proj/hardened-refpolicy:master commit in: support/
commit: c7d0c5c923977ecd27f6e3464d12b296151c17ad
Author: Christian Göttsche googlemail com>
AuthorDate: Sun Jan 31 20:50:11 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 20:54:11 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=c7d0c5c9
genhomedircon: drop backwards compatibility section
Signed-off-by: Christian Göttsche googlemail.com>
Signed-off-by: Jason Zaman gentoo.org>
support/genhomedircon.py | 162 +--
1 file changed, 1 insertion(+), 161 deletions(-)
diff --git a/support/genhomedircon.py b/support/genhomedircon.py
index bb4e5061..e9d72067 100644
--- a/support/genhomedircon.py
+++ b/support/genhomedircon.py
@@ -40,7 +40,7 @@
# are always "real" (including root, in the default configuration).
#
-import sys, os, pwd, getopt, re
+import sys, pwd, getopt, re
from subprocess import getstatusoutput
EXCLUDE_LOGINS=["/sbin/nologin", "/bin/false"]
@@ -69,162 +69,6 @@ def getStartingUID():
starting_uid = 500
return starting_uid
-#
-#
-# This section is just for backwards compatibility
-#
-#
-def getPrefixes():
- ulist = pwd.getpwall()
- STARTING_UID=getStartingUID()
- prefixes = {}
- for u in ulist:
- if u[2] >= STARTING_UID and \
- not u[6] in EXCLUDE_LOGINS and \
- u[5] != "/" and \
- u[5].count("/") > 1:
- prefix = u[5][:u[5].rfind("/")]
- if not prefix in prefixes:
- prefixes[prefix] = ""
- return prefixes
-
-def getUsers(filecontextdir):
- rc = getstatusoutput("grep ^user %s/users" % filecontextdir)
- udict = {}
- if rc[0] == 0:
- ulist = rc[1].strip().split("\n")
- for u in ulist:
- user = u.split()
- try:
- if user[1] == "user_u" or user[1] == "system_u":
- continue
- # !!! chooses first role in the list to use in
the file context !!!
- role = user[3]
- if role == "{":
- role = user[4]
- role = role.split("_r")[0]
- home = pwd.getpwnam(user[1])[5]
- if home == "/":
- continue
- prefs = {}
- prefs["role"] = role
- prefs["home"] = home
- udict[user[1]] = prefs
- except KeyError:
- sys.stderr.write("The user \"%s\" is not
present in the passwd file, skipping...\n" % user[1])
- return udict
-
-def update(filecontext, user, prefs):
- rc=getstatusoutput("grep -h '^HOME_DIR' %s | grep -v vmware | sed -e
's|HOME_DIR|%s|' -e 's/ROLE/%s/' -e 's/system_u/%s/'" % (filecontext,
prefs["home"], prefs["role"], user))
- if rc[0] == 0:
- print(rc[1])
- else:
- errorExit("grep/sed error " + rc[1])
- return rc
-
-def oldgenhomedircon(filecontextdir, filecontext):
-sys.stderr.flush()
-
-if os.path.isdir(filecontextdir) == 0:
-sys.stderr.write("New usage is the following\n")
-usage()
-#We are going to define home directory used by libuser and show-utils
as a home directory root
-prefixes = {}
-rc=getstatusoutput("grep -h '^HOME' /etc/default/useradd")
-if rc[0] == 0:
-homedir = rc[1].split("=")[1]
-homedir = homedir.split("#")[0]
-homedir = homedir.strip()
-if not homedir in prefixes:
-prefixes[homedir] = ""
-else:
-#rc[0] == 256 means the file was there, we read it, but the
grep didn't match
-if rc[0] != 256:
-sys.stderr.write("%s\n" % rc[1])
-sys.stderr.write("You do not have access to
/etc/default/useradd HOME=\n")
-sys.stderr.flush()
-
-
-rc=getstatusoutput("grep -h '^LU_HOMEDIRECTORY' /etc/libuser.conf")
-if rc[0] == 0:
-homedir = rc[1].split("=")[1]
-homedir = homedir.split("#")[0]
-homedir = homedir.strip()
-homedir = re.sub(r"[^/a-zA-Z0-9].*$", "", homedir)
-if not homedir in prefixes:
-prefixes[homedir] = ""
-
-#the idea is that we need to find all of the home_root
[gentoo-commits] proj/hardened-refpolicy:master commit in: /
commit: 9640bce3661c84abb5bfd0aebccd60dc22a13c5e Author: Christian Göttsche googlemail com> AuthorDate: Sun Jan 31 20:50:29 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=9640bce3 Rules.monolithic: ignore version mismatch Ignore version mismatch when OUTPUT_POLICY is defined and the kernel supports a higher policy version. Currently Debian ships SELinux userland tools 3.1, which supports version 32, and Linux 5.10, which supports version 33. Signed-off-by: Christian Göttsche googlemail.com> Signed-off-by: Jason Zaman gentoo.org> Rules.monolithic | 9 +++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/Rules.monolithic b/Rules.monolithic index 7dbc2e1c..65529d38 100644 --- a/Rules.monolithic +++ b/Rules.monolithic @@ -13,6 +13,11 @@ ifeq "$(kv)" "" kv := $(pv) endif +# dont print version warnings if we specified a lower version than the kernel supports +ifneq "$(OUTPUT_POLICY)" "" + kv := $(shell if test $(kv) -gt $(pv); then echo $(pv); else echo $(kv); fi) +endif + # load_policy(8) loads policy from /etc/selinux//policy/policy.$(pv) # It does this by reading the /etc/selinux/config file SELINUXTYPE entry to # form the full path. $(polbinpath) will contain this evaluated path for use as @@ -73,7 +78,7 @@ $(polver): $(policy_conf) @echo "Compiling $(NAME) $(polver)" ifneq ($(pv),$(kv)) @echo - @echo "WARNING: Policy version mismatch! Is your OUTPUT_POLICY set correctly?" + @echo "WARNING: Policy version mismatch (policy:$(pv) kernel:$(kv))! Is your OUTPUT_POLICY set correctly?" @echo endif $(verbose) $(CHECKPOLICY) -U $(UNK_PERMS) $^ -o $@ @@ -86,7 +91,7 @@ $(loadpath): $(policy_conf) @echo "Compiling and installing $(NAME) $(loadpath)" ifneq ($(pv),$(kv)) @echo - @echo "WARNING: Policy version mismatch! Is your OUTPUT_POLICY set correctly?" + @echo "WARNING: Policy version mismatch (policy:$(pv) kernel:$(kv))! Is your OUTPUT_POLICY set correctly?" @echo endif @$(INSTALL) -d -m 0755 $(@D)
[gentoo-commits] proj/hardened-refpolicy:master commit in: /
commit: 449bb6dbaadb3a5d862ee5b84a9185b2c4785310 Author: Christian Göttsche googlemail com> AuthorDate: Sun Jan 31 20:50:33 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=449bb6db gitignore: ignore monolithic generated files Signed-off-by: Christian Göttsche googlemail.com> Signed-off-by: Jason Zaman gentoo.org> .gitignore | 5 + 1 file changed, 5 insertions(+) diff --git a/.gitignore b/.gitignore index 3f320d39..4e4f2e3f 100644 --- a/.gitignore +++ b/.gitignore @@ -22,3 +22,8 @@ /tmp/ .vagrant/ + +# monolithic generated files +/file_contexts +/homedir_template +/policy.conf
[gentoo-commits] proj/hardened-refpolicy:master commit in: support/
commit: 607c61b089898d26c00af42a887cd1f24372be4d
Author: Christian Göttsche googlemail com>
AuthorDate: Sun Jan 31 20:50:25 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 20:54:11 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=607c61b0
genhomedircon: misc pylint cleanup
support/genhomedircon.py:297:5: R1714: Consider merging these comparisons with
"in" to "o in ('--type', '-t')" (consider-using-in)
support/genhomedircon.py:299:5: R1714: Consider merging these comparisons with
"in" to "o in ('--nopasswd', '-n')" (consider-using-in)
support/genhomedircon.py:301:5: R1714: Consider merging these comparisons with
"in" to "o in ('--dir', '-d')" (consider-using-in)
support/genhomedircon.py:238:2: R1705: Unnecessary "else" after "return"
(no-else-return)
support/genhomedircon.py:207:11: C0201: Consider iterating the dictionary
directly instead of calling .keys() (consider-iterating-dictionary)
support/genhomedircon.py:146:2: R1705: Unnecessary "else" after "return"
(no-else-return)
support/genhomedircon.py:144:1: R1710: Either all return statements in a
function should return an expression, or none of them should.
(inconsistent-return-statements)
Signed-off-by: Christian Göttsche googlemail.com>
Signed-off-by: Jason Zaman gentoo.org>
support/genhomedircon.py | 18 --
1 file changed, 8 insertions(+), 10 deletions(-)
diff --git a/support/genhomedircon.py b/support/genhomedircon.py
index 0490f724..e4475f5c 100644
--- a/support/genhomedircon.py
+++ b/support/genhomedircon.py
@@ -143,10 +143,9 @@ class selinuxConfig:
def getHomeRootContext(self, homedir):
rc=getstatusoutput("grep HOME_ROOT %s | sed -e
\"s|^HOME_ROOT|%s|\"" % ( self.getHomeDirTemplate(), homedir))
- if rc[0] == 0:
- return rc[1]+"\n"
- else:
- errorExit("sed error " + rc[1])
+ if rc[0] != 0:
+ errorExit("sed error (" + str(rc[0]) + "): " + rc[1])
+ return rc[1]+"\n"
def getUsersFile(self):
return self.selinuxdir+self.setype+"/users/local.users"
@@ -211,7 +210,7 @@ class selinuxConfig:
users = self.getUsers()
ret=""
# Fill in HOME and ROLE for users that are defined
- for u in users.keys():
+ for u in users:
ret += self.getHomeDirContext (u, users[u]["home"],
users[u]["role"], users[u]["name"], users[u]["uid"])
return ret+"\n"
@@ -244,8 +243,7 @@ class selinuxConfig:
break
if exists == 1:
return 1
- else:
- return 0
+ return 0
def getHomeDirs(self):
@@ -301,11 +299,11 @@ try:
'nopasswd',
'dir='])
for o,a in gopts:
- if o == '--type' or o == "-t":
+ if o in ('--type', '-t'):
setype=a
- if o == '--nopasswd' or o == "-n":
+ if o in ('--nopasswd', '-n'):
usepwd=0
- if o == '--dir' or o == "-d":
+ if o in ('--dir', '-d'):
directory=a
if o == '--help':
usage()
[gentoo-commits] proj/hardened-refpolicy:master commit in: support/
commit: b4d183812aec480eae859f4c32d20829a8ff53bf
Author: Christian Göttsche googlemail com>
AuthorDate: Sun Jan 31 20:50:23 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 20:54:11 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b4d18381
genhomedircon: generate file contexts for %{USERNAME} and %{USERID}
Generate substituted file contexts for templated paths containing
%{USERNAME} or %{USERID}, like semodules' genhomedircon.
Example:
/run/user/%{USERID} -d gen_context(system_u:object_r:user_runtime_t,s0)
Signed-off-by: Christian Göttsche googlemail.com>
Signed-off-by: Jason Zaman gentoo.org>
support/genhomedircon.py | 24 +---
1 file changed, 17 insertions(+), 7 deletions(-)
diff --git a/support/genhomedircon.py b/support/genhomedircon.py
index 13e9c9e8..0490f724 100644
--- a/support/genhomedircon.py
+++ b/support/genhomedircon.py
@@ -168,7 +168,6 @@ class selinuxConfig:
if rc[0] == 0:
users+=rc[1]
udict = {}
- prefs = {}
if users != "":
ulist = users.split("\n")
for u in ulist:
@@ -181,20 +180,31 @@ class selinuxConfig:
if role == "{":
role = user[4]
role = role.split("_r")[0]
- home = pwd.getpwnam(user[1])[5]
+ pwdentry = pwd.getpwnam(user[1])
+ home = pwdentry[5]
if home == "/":
continue
prefs = {}
prefs["role"] = role
prefs["home"] = home
+ prefs["name"] = pwdentry[0]
+ prefs["uid"] = pwdentry[2]
udict[user[1]] = prefs
except KeyError:
sys.stderr.write("The user \"%s\" is
not present in the passwd file, skipping...\n" % user[1])
return udict
- def getHomeDirContext(self, user, home, role):
- ret="\n\n#\n# Context for user %s\n#\n\n" % user
- rc=getstatusoutput("grep '^HOME_DIR' %s | sed -e
's|HOME_DIR|%s|' -e 's/ROLE/%s/' -e 's/system_u/%s/'" %
(self.getHomeDirTemplate(), home, role, user))
+ def getHomeDirContext(self, seuser, home, role, username, userid):
+ ret = "\n\n#\n# Context for user %s\n#\n\n" % seuser
+ rc = getstatusoutput("grep -E
'^HOME_DIR|%%{USERID}|%%{USERNAME}' %s | sed"
+ " -e 's|HOME_DIR|%s|'"
+ " -e 's|ROLE|%s|'"
+ " -e 's|system_u|%s|'"
+ " -e 's|%%{USERID}|%s|'"
+ " -e 's|%%{USERNAME}|%s|'"
+ % (self.getHomeDirTemplate(), home, role, seuser,
userid, username))
+ if rc[0] != 0:
+ errorExit("sed error (" + str(rc[0]) + "): " + rc[1])
return ret + rc[1] + "\n"
def genHomeDirContext(self):
@@ -202,7 +212,7 @@ class selinuxConfig:
ret=""
# Fill in HOME and ROLE for users that are defined
for u in users.keys():
- ret += self.getHomeDirContext (u, users[u]["home"],
users[u]["role"])
+ ret += self.getHomeDirContext (u, users[u]["home"],
users[u]["role"], users[u]["name"], users[u]["uid"])
return ret+"\n"
def checkExists(self, home):
@@ -263,7 +273,7 @@ class selinuxConfig:
def genoutput(self):
ret= self.heading()
for h in self.getHomeDirs():
- ret += self.getHomeDirContext ("user_u" , h+'/[^/]+',
"user")
+ ret += self.getHomeDirContext ("user_u" , h+'/[^/]+',
"user", "[^/]+", "[0-9]+")
ret += self.getHomeRootContext(h)
ret += self.genHomeDirContext()
return ret
[gentoo-commits] proj/hardened-refpolicy:master commit in: support/
commit: 8f9a8d44ce4ec0d2229d5bd9363a56621416676c
Author: Christian Göttsche googlemail com>
AuthorDate: Sun Jan 31 20:50:18 2021 +
Commit: Jason Zaman gentoo org>
CommitDate: Sat Feb 6 20:54:11 2021 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=8f9a8d44
genhomedircon: require match for home directory name
Use regular expression '/[^/]+' instead of '/[^/]*', like semodule's
genhomedircon.
Generates file contexts like '/home/[^/]+/dead\.letter'
Signed-off-by: Christian Göttsche googlemail.com>
Signed-off-by: Jason Zaman gentoo.org>
support/genhomedircon.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/support/genhomedircon.py b/support/genhomedircon.py
index e9d72067..54745730 100644
--- a/support/genhomedircon.py
+++ b/support/genhomedircon.py
@@ -266,7 +266,7 @@ class selinuxConfig:
def genoutput(self):
ret= self.heading()
for h in self.getHomeDirs():
- ret += self.getHomeDirContext ("user_u" , h+'/[^/]*',
"user")
+ ret += self.getHomeDirContext ("user_u" , h+'/[^/]+',
"user")
ret += self.getHomeRootContext(h)
ret += self.genHomeDirContext()
return ret
[gentoo-commits] proj/hardened-refpolicy:master commit in: support/
commit: d9f222e97e52817baf1340926455efed93113feb Author: Christian Göttsche googlemail com> AuthorDate: Sun Jan 31 20:50:21 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=d9f222e9 genhomedircon: drop unused functions Signed-off-by: Christian Göttsche googlemail.com> Signed-off-by: Jason Zaman gentoo.org> support/genhomedircon.py | 6 -- 1 file changed, 6 deletions(-) diff --git a/support/genhomedircon.py b/support/genhomedircon.py index 54745730..13e9c9e8 100644 --- a/support/genhomedircon.py +++ b/support/genhomedircon.py @@ -138,9 +138,6 @@ class selinuxConfig: def getFileContextFile(self): return self.getFileContextDir()+"/file_contexts" - def getContextDir(self): - return self.selinuxdir+self.setype+self.contextdir - def getHomeDirTemplate(self): return self.getFileContextDir()+"/homedir_template" @@ -271,9 +268,6 @@ class selinuxConfig: ret += self.genHomeDirContext() return ret - def printout(self): - print(self.genoutput()) - def write(self): try: fd = open(self.getFileContextDir()+"/file_contexts.homedirs", "w")
[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/apps/
commit: e27adab96f63c43ee299bf65dc9234ab898c9a95 Author: Jonathan Davies protonmail com> AuthorDate: Fri Jan 29 14:56:29 2021 + Commit: Jason Zaman gentoo org> CommitDate: Sat Feb 6 20:54:11 2021 + URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e27adab9 apps/screen.fc: Added fcontext for tmux xdg directory. Signed-off-by: Jonathan Davies protonmail.com> Signed-off-by: Jason Zaman gentoo.org> policy/modules/apps/screen.fc | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/apps/screen.fc b/policy/modules/apps/screen.fc index 7196c598..e51e01d9 100644 --- a/policy/modules/apps/screen.fc +++ b/policy/modules/apps/screen.fc @@ -1,3 +1,4 @@ +HOME_DIR/\.config/tmux(/.*)? -- gen_context(system_u:object_r:screen_home_t,s0) HOME_DIR/\.screen(/.*)? gen_context(system_u:object_r:screen_home_t,s0) HOME_DIR/\.screenrc-- gen_context(system_u:object_r:screen_home_t,s0) HOME_DIR/\.tmux\.conf -- gen_context(system_u:object_r:screen_home_t,s0)
[gentoo-commits] repo/gentoo:master commit in: profiles/targets/desktop/
commit: 6072604b1ced0df272998fcc205c43424a04e109 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:15:20 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:15:20 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6072604b profiles/targets/desktop/package.use: media-video/mpv cleanup Signed-off-by: Sam James gentoo.org> profiles/targets/desktop/package.use | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/profiles/targets/desktop/package.use b/profiles/targets/desktop/package.use index d72e1ac7bc4..afc1923b4e5 100644 --- a/profiles/targets/desktop/package.use +++ b/profiles/targets/desktop/package.use @@ -59,9 +59,10 @@ dev-lang/php -exif -truetype # Enable luajit for OSC and youtube-dl support by default. # Override default +sdl from desktop profile and disable sdl outputs. # These outputs are for systems without a proper audio/video support. +# NOTE: Needs syncing to negate profile defaults if we decide +# to keep this up. media-video/mpv lua luajit -sdl media-video/mpv -lua_single_target_lua5-1 -lua_single_target_lua5-2 -media-video/mpv -lua_single_target_lua5-3 -lua_single_target_lua5-4 media-video/mpv lua_single_target_luajit # Mike Gilbert (2017-01-04)
[gentoo-commits] repo/gentoo:master commit in: profiles/base/
commit: 8c29ad3a2c388c3e50b5e9c6f53e77348a75db92 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:14:19 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:14:26 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8c29ad3a profiles/base/package.use.mask: drop obsolete sys-apps/razercfg[pm-utils] mask Signed-off-by: Sam James gentoo.org> profiles/base/package.use.mask | 1 - 1 file changed, 1 deletion(-) diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask index b0698fd7df5..04cbe2ec4ba 100644 --- a/profiles/base/package.use.mask +++ b/profiles/base/package.use.mask @@ -384,7 +384,6 @@ dev-lang/gnat-gpl go # Pacho Ramos (2018-11-11) # pm-utils will be removed, bug #659616 -sys-apps/razercfg pm-utils sys-power/powermgmt-base pm-utils # Alfredo Tupone (2018-10-24)
[gentoo-commits] repo/gentoo:master commit in: profiles/arch/riscv/
commit: 31664c19c9e730aac910c4c4537b959a3950672d Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:11:27 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:11:27 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=31664c19 profiles/arch/riscv/package.use.mask: drop trailing whitespace Signed-off-by: Sam James gentoo.org> profiles/arch/riscv/package.use.mask | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/profiles/arch/riscv/package.use.mask b/profiles/arch/riscv/package.use.mask index cc704402a51..6feb1fcf614 100644 --- a/profiles/arch/riscv/package.use.mask +++ b/profiles/arch/riscv/package.use.mask @@ -68,7 +68,7 @@ app-arch/unzip natspec app-crypt/gnupg smartcard tofu wks-server app-crypt/mit-krb5 doc test xinetd app-crypt/pinentry gnome-keyring -app-doc/doxygen clang doc +app-doc/doxygen clang doc app-editors/emacs alsa json lcms mailutils app-misc/pax-utils python app-text/asciidoc test
[gentoo-commits] repo/gentoo:master commit in: profiles/default/linux/
commit: cd1f2b8be17797d5efc38aeca51ab86a6fd34eb6 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:13:37 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:13:37 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cd1f2b8b profiles/default/linux/package.use.mask: net-dns/pdnsd[isdn] is gone Signed-off-by: Sam James gentoo.org> profiles/default/linux/package.use.mask | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/profiles/default/linux/package.use.mask b/profiles/default/linux/package.use.mask index 3bb3d790136..511d4bbaff6 100644 --- a/profiles/default/linux/package.use.mask +++ b/profiles/default/linux/package.use.mask @@ -48,4 +48,4 @@ app-arch/libarchive -e2fsprogs # Diego E. Pettenò (2011-03-27) # # Unmask pdnsd's Linux-specific USE flags. -net-dns/pdnsd -isdn -urandom +net-dns/pdnsd -urandom
[gentoo-commits] repo/gentoo:master commit in: profiles/targets/desktop/plasma/
commit: 3d0ce492c8205d8e06bc12fbc7af8d1e9cedb488 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:15:56 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:15:56 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3d0ce492 profiles/targets/desktop/plasma/package.use: media-libs/mlt cleanup kdenlive and melt are now unconditional. Signed-off-by: Sam James gentoo.org> profiles/targets/desktop/plasma/package.use | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/profiles/targets/desktop/plasma/package.use b/profiles/targets/desktop/plasma/package.use index 3391075bd06..7369f1b8b1f 100644 --- a/profiles/targets/desktop/plasma/package.use +++ b/profiles/targets/desktop/plasma/package.use @@ -34,7 +34,7 @@ media-libs/mesa egl wayland x11-apps/mesa-progs egl # Required by kde-apps/kdenlive -media-libs/mlt ffmpeg frei0r kdenlive melt rubberband +media-libs/mlt ffmpeg frei0r rubberband # Required by media-gfx/digikam media-libs/opencv contrib contribdnn
[gentoo-commits] repo/gentoo:master commit in: profiles/arch/s390/
commit: bbcd557b0d5b6d2d8b71791e47c1a053b575 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:11:46 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:11:46 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bbcd557b profiles/arch/s390/package.use.mask: drop obsolete mask Signed-off-by: Sam James gentoo.org> profiles/arch/s390/package.use.mask | 1 - 1 file changed, 1 deletion(-) diff --git a/profiles/arch/s390/package.use.mask b/profiles/arch/s390/package.use.mask index 240f60e462d..ea81db75304 100644 --- a/profiles/arch/s390/package.use.mask +++ b/profiles/arch/s390/package.use.mask @@ -11,7 +11,6 @@ dev-vcs/subversion ruby # Mikle Kolyada (2018-06-03) # Not tested -app-crypt/pinentry fltk dev-python/cssselect doc # not really interested in supporting alternative # VCS for oberlays yet.
[gentoo-commits] repo/gentoo:master commit in: profiles/arch/riscv/
commit: 560ecbdd6f671d4d06dedb29fcc112e8baf6d620 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:11:10 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:11:10 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=560ecbdd profiles/arch/riscv/package.use.mask: drop obsolete mask Signed-off-by: Sam James gentoo.org> profiles/arch/riscv/package.use.mask | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/profiles/arch/riscv/package.use.mask b/profiles/arch/riscv/package.use.mask index f69a25a297d..cc704402a51 100644 --- a/profiles/arch/riscv/package.use.mask +++ b/profiles/arch/riscv/package.use.mask @@ -67,7 +67,7 @@ app-arch/p7zip wxwidgets app-arch/unzip natspec app-crypt/gnupg smartcard tofu wks-server app-crypt/mit-krb5 doc test xinetd -app-crypt/pinentry fltk gnome-keyring +app-crypt/pinentry gnome-keyring app-doc/doxygen clang doc app-editors/emacs alsa json lcms mailutils app-misc/pax-utils python
[gentoo-commits] repo/gentoo:master commit in: profiles/arch/s390/
commit: 25f857d3f249da0fae70a3cddf03148fdb32a5a3 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:12:07 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:12:07 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=25f857d3 profiles/arch/s390/package.use.mask: fix typo Signed-off-by: Sam James gentoo.org> profiles/arch/s390/package.use.mask | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/profiles/arch/s390/package.use.mask b/profiles/arch/s390/package.use.mask index ea81db75304..fca3adf4dad 100644 --- a/profiles/arch/s390/package.use.mask +++ b/profiles/arch/s390/package.use.mask @@ -13,7 +13,7 @@ dev-vcs/subversion ruby # Not tested dev-python/cssselect doc # not really interested in supporting alternative -# VCS for oberlays yet. +# VCS for overlays yet. app-portage/layman darcs mercurial dev-python/setuptools_scm test # no lua support for vim
[gentoo-commits] repo/gentoo:master commit in: profiles/base/
commit: a8bcd50297c858d70928228d8dd080dcee536bda Author: Sam James gentoo org> AuthorDate: Sun Feb 7 02:13:05 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 02:13:05 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a8bcd502 profiles/base/package.use.mask: net-dns/pdnsd[isdn] is gone Signed-off-by: Sam James gentoo.org> profiles/base/package.use.mask | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask index f5ad60862fa..b0698fd7df5 100644 --- a/profiles/base/package.use.mask +++ b/profiles/base/package.use.mask @@ -670,7 +670,7 @@ sci-libs/mathgl octave # Diego E. Pettenò (2011-03-27) # # Mask pdnsd's Linux-specific USE flags. -net-dns/pdnsd isdn urandom +net-dns/pdnsd urandom # Raúl Porcel (2011-02-13) # Masked until devs know how to use repoman
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-xvmc/
commit: 5e452988a0ff40fdc5d077a4bf1aa7678f73e672 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:43:20 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:41 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5e452988 app-eselect/eselect-xvmc: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-xvmc/metadata.xml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/app-eselect/eselect-xvmc/metadata.xml b/app-eselect/eselect-xvmc/metadata.xml index 088f6633818..d4ebc830dfb 100644 --- a/app-eselect/eselect-xvmc/metadata.xml +++ b/app-eselect/eselect-xvmc/metadata.xml @@ -5,4 +5,5 @@ jungh...@gentoo.org Christoph Junghans - + +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-vdr/
commit: 2ee9439a9f214503a535d1ce6210728ff2bc7714 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:40:38 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:40 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2ee9439a app-eselect/eselect-vdr: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-vdr/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-vdr/metadata.xml b/app-eselect/eselect-vdr/metadata.xml index 984a01fab26..bd704c971c2 100644 --- a/app-eselect/eselect-vdr/metadata.xml +++ b/app-eselect/eselect-vdr/metadata.xml @@ -5,4 +5,5 @@ v...@gentoo.org Gentoo VDR Project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-wine/
commit: 7229cbd0e6377d2cc122bdafe133cb2be7fc6e93 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:42:16 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:40 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7229cbd0 app-eselect/eselect-wine: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-wine/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-wine/metadata.xml b/app-eselect/eselect-wine/metadata.xml index 1ded1127484..2c65a131bcc 100644 --- a/app-eselect/eselect-wine/metadata.xml +++ b/app-eselect/eselect-wine/metadata.xml @@ -12,4 +12,5 @@ NP-Hardass/eselect-wine +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-wxwidgets/
commit: b143e4464940945e9c6aca98e0ede4641a924f3c Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:42:50 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:41 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b143e446 app-eselect/eselect-wxwidgets: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-wxwidgets/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-wxwidgets/metadata.xml b/app-eselect/eselect-wxwidgets/metadata.xml index 0c7ee856e10..d2eb4480289 100644 --- a/app-eselect/eselect-wxwidgets/metadata.xml +++ b/app-eselect/eselect-wxwidgets/metadata.xml @@ -5,4 +5,5 @@ wxwidg...@gentoo.org Gentoo wxWidgets Project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-timidity/
commit: 8011f754c87cb97e33af7b0ff3e748c4b6406b39 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:39:45 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:39 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8011f754 app-eselect/eselect-timidity: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-timidity/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-timidity/metadata.xml b/app-eselect/eselect-timidity/metadata.xml index ee7258ac28e..f0585120893 100644 --- a/app-eselect/eselect-timidity/metadata.xml +++ b/app-eselect/eselect-timidity/metadata.xml @@ -5,4 +5,5 @@ so...@gentoo.org Gentoo Sound project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-vi/
commit: 82156264f0ef25d9657abe99ed933c8f42fc9eeb Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:41:34 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:40 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=82156264 app-eselect/eselect-vi: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-vi/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-vi/metadata.xml b/app-eselect/eselect-vi/metadata.xml index 5c000c76308..9e2e447825e 100644 --- a/app-eselect/eselect-vi/metadata.xml +++ b/app-eselect/eselect-vi/metadata.xml @@ -5,4 +5,5 @@ v...@gentoo.org Gentoo Vim Project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-timezone/
commit: 601e4416d175d8f5e45740cfe430fae6afa8cd95 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:39:01 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:39 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=601e4416 app-eselect/eselect-timezone: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-timezone/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-timezone/metadata.xml b/app-eselect/eselect-timezone/metadata.xml index ef6b5dcd53a..d4ebc830dfb 100644 --- a/app-eselect/eselect-timezone/metadata.xml +++ b/app-eselect/eselect-timezone/metadata.xml @@ -5,4 +5,5 @@ jungh...@gentoo.org Christoph Junghans +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-sndpeek/
commit: 1b586478203943442aad1f2a1df5e25a74b2a73b Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:38:37 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:38 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1b586478 app-eselect/eselect-sndpeek: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-sndpeek/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-sndpeek/metadata.xml b/app-eselect/eselect-sndpeek/metadata.xml index 7a38bb90096..3c58a0219fb 100644 --- a/app-eselect/eselect-sndpeek/metadata.xml +++ b/app-eselect/eselect-sndpeek/metadata.xml @@ -2,4 +2,5 @@ http://www.gentoo.org/dtd/metadata.dtd";> +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-sndpeek/
commit: 2c1378be2120224248c7273de7f5c08c6492 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:38:22 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:38 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2c13 app-eselect/eselect-sndpeek: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-sndpeek/metadata.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-eselect/eselect-sndpeek/metadata.xml b/app-eselect/eselect-sndpeek/metadata.xml index 6f49eba8f49..7a38bb90096 100644 --- a/app-eselect/eselect-sndpeek/metadata.xml +++ b/app-eselect/eselect-sndpeek/metadata.xml @@ -1,5 +1,5 @@ http://www.gentoo.org/dtd/metadata.dtd";> - +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-timidity/
commit: 5498a315cade7a9f48500e11f7f23ef66d07e311 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:39:26 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:39 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5498a315 app-eselect/eselect-timidity: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-timidity/metadata.xml | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/app-eselect/eselect-timidity/metadata.xml b/app-eselect/eselect-timidity/metadata.xml index c870d0eef0a..ee7258ac28e 100644 --- a/app-eselect/eselect-timidity/metadata.xml +++ b/app-eselect/eselect-timidity/metadata.xml @@ -1,8 +1,8 @@ http://www.gentoo.org/dtd/metadata.dtd";> - - so...@gentoo.org - Gentoo Sound project - + + so...@gentoo.org + Gentoo Sound project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-ruby/
commit: 63abaa9549961127d4bd9fe04e4d642c0543714a Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:36:15 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:37 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=63abaa95 app-eselect/eselect-ruby: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-ruby/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-ruby/metadata.xml b/app-eselect/eselect-ruby/metadata.xml index 28ab0c15f20..3b56f59 100644 --- a/app-eselect/eselect-ruby/metadata.xml +++ b/app-eselect/eselect-ruby/metadata.xml @@ -5,4 +5,5 @@ r...@gentoo.org Gentoo Ruby Project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-scala/
commit: 73e6fad7d6536dc19d0e258d86d6e8e3e3b23926 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:37:28 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:37 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=73e6fad7 app-eselect/eselect-scala: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-scala/metadata.xml | 14 +++--- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/app-eselect/eselect-scala/metadata.xml b/app-eselect/eselect-scala/metadata.xml index d4ca24982e1..c4d9676a745 100644 --- a/app-eselect/eselect-scala/metadata.xml +++ b/app-eselect/eselect-scala/metadata.xml @@ -1,11 +1,11 @@ http://www.gentoo.org/dtd/metadata.dtd";> - - gie...@gentoo.org - - - j...@gentoo.org - Java - + + gie...@gentoo.org + + + j...@gentoo.org + Java +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-scala/
commit: 6aae8b3922bfbc9b8f26925e740c0a1b7ab7be15 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:37:50 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:38 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6aae8b39 app-eselect/eselect-scala: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-scala/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-scala/metadata.xml b/app-eselect/eselect-scala/metadata.xml index c4d9676a745..7345f4078d6 100644 --- a/app-eselect/eselect-scala/metadata.xml +++ b/app-eselect/eselect-scala/metadata.xml @@ -8,4 +8,5 @@ j...@gentoo.org Java +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-rust/
commit: f8f5c6ed9da5a5523721329a04f8530106c2654c Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:36:43 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:37 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f8f5c6ed app-eselect/eselect-rust: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-rust/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-rust/metadata.xml b/app-eselect/eselect-rust/metadata.xml index 10efdddc421..d11f1c3ca9a 100644 --- a/app-eselect/eselect-rust/metadata.xml +++ b/app-eselect/eselect-rust/metadata.xml @@ -7,4 +7,5 @@ jauhien/eselect-rust +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-php/
commit: c1eabc7ba6db422d059d99e009fc8fb3b9a2bc24 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:30:01 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:35 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c1eabc7b app-eselect/eselect-php: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-php/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-php/metadata.xml b/app-eselect/eselect-php/metadata.xml index 5f8c8aae7b3..843b88603f4 100644 --- a/app-eselect/eselect-php/metadata.xml +++ b/app-eselect/eselect-php/metadata.xml @@ -12,4 +12,5 @@ Enable the FastCGI Process Manager SAPI +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-oodict/
commit: f476bf05c09a856c7d770c60e920d4fbbbce796b Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:28:02 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:34 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f476bf05 app-eselect/eselect-oodict: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-oodict/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-oodict/metadata.xml b/app-eselect/eselect-oodict/metadata.xml index 13ce236ee51..db28af29f3d 100644 --- a/app-eselect/eselect-oodict/metadata.xml +++ b/app-eselect/eselect-oodict/metadata.xml @@ -5,4 +5,5 @@ off...@gentoo.org Gentoo Office project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-rails/
commit: c02c248569f70cc6fa8addf6ea7ba9a6b84bc5d6 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:34:56 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:36 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c02c2485 app-eselect/eselect-rails: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-rails/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-rails/metadata.xml b/app-eselect/eselect-rails/metadata.xml index 28ab0c15f20..3b56f59 100644 --- a/app-eselect/eselect-rails/metadata.xml +++ b/app-eselect/eselect-rails/metadata.xml @@ -5,4 +5,5 @@ r...@gentoo.org Gentoo Ruby Project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-renpy/
commit: 3939fd235b89cfc521a61f101d3f0e193aed9987 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:35:26 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:36 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3939fd23 app-eselect/eselect-renpy: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-renpy/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-renpy/metadata.xml b/app-eselect/eselect-renpy/metadata.xml index 3d9228cdbf8..bc881dba500 100644 --- a/app-eselect/eselect-renpy/metadata.xml +++ b/app-eselect/eselect-renpy/metadata.xml @@ -9,4 +9,5 @@ birc...@gentoo.org Andrew Savchenko +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-pinentry/
commit: d06c01c714e5338e551a7e80f42048be270139b1 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:30:32 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:35 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d06c01c7 app-eselect/eselect-pinentry: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-pinentry/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-pinentry/metadata.xml b/app-eselect/eselect-pinentry/metadata.xml index 6698a4ab788..4a479623312 100644 --- a/app-eselect/eselect-pinentry/metadata.xml +++ b/app-eselect/eselect-pinentry/metadata.xml @@ -5,4 +5,5 @@ zlog...@gentoo.org Mikle Kolyada +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-postgresql/
commit: 864682830d393f9fc170ebd4d97cd7c996c9997f Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:30:59 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:36 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=86468283 app-eselect/eselect-postgresql: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-postgresql/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-postgresql/metadata.xml b/app-eselect/eselect-postgresql/metadata.xml index 0f879f1a790..e8066bae967 100644 --- a/app-eselect/eselect-postgresql/metadata.xml +++ b/app-eselect/eselect-postgresql/metadata.xml @@ -9,4 +9,5 @@ pgsql-b...@gentoo.org PostgreSQL and Related Package Development +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-package-manager/
commit: 0f5731d07167dc6a42eb671c0fb4eb7ea37b6702 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:29:11 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:35 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0f5731d0 app-eselect/eselect-package-manager: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-package-manager/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-package-manager/metadata.xml b/app-eselect/eselect-package-manager/metadata.xml index 1935b3149bd..4b7f6d3f915 100644 --- a/app-eselect/eselect-package-manager/metadata.xml +++ b/app-eselect/eselect-package-manager/metadata.xml @@ -5,4 +5,5 @@ esel...@gentoo.org eselect configuration and management tool +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-notify-send/
commit: ab957fcdf1f00fd99d609b63f3b6690d1ca4c467 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:27:29 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:33 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ab957fcd app-eselect/eselect-notify-send: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-notify-send/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-notify-send/metadata.xml b/app-eselect/eselect-notify-send/metadata.xml index 95e86c12108..ee279c56da5 100644 --- a/app-eselect/eselect-notify-send/metadata.xml +++ b/app-eselect/eselect-notify-send/metadata.xml @@ -4,4 +4,5 @@ freedesktop-b...@gentoo.org +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-mpg123/
commit: 08f7a6dc5f4fb38eda5ad296d753d0a60e15ade7 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:27:01 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:33 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=08f7a6dc app-eselect/eselect-mpg123: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-mpg123/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-mpg123/metadata.xml b/app-eselect/eselect-mpg123/metadata.xml index ee7258ac28e..f0585120893 100644 --- a/app-eselect/eselect-mpg123/metadata.xml +++ b/app-eselect/eselect-mpg123/metadata.xml @@ -5,4 +5,5 @@ so...@gentoo.org Gentoo Sound project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-opencascade/
commit: 9d675f4b0cc95e8c779e5242208c72f014d0aae7 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:28:46 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:34 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9d675f4b app-eselect/eselect-opencascade: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-opencascade/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-opencascade/metadata.xml b/app-eselect/eselect-opencascade/metadata.xml index 8ece8715b30..e796ad8a3e2 100644 --- a/app-eselect/eselect-opencascade/metadata.xml +++ b/app-eselect/eselect-opencascade/metadata.xml @@ -9,4 +9,5 @@ proxy-ma...@gentoo.org Proxy Maintainers project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-opencascade/
commit: 3eca4918141c7d0788cd0a93cfcb3c33ac698aac Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:28:35 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:43:34 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3eca4918 app-eselect/eselect-opencascade: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-opencascade/metadata.xml | 16 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/app-eselect/eselect-opencascade/metadata.xml b/app-eselect/eselect-opencascade/metadata.xml index ebf94fdbcb0..8ece8715b30 100644 --- a/app-eselect/eselect-opencascade/metadata.xml +++ b/app-eselect/eselect-opencascade/metadata.xml @@ -1,12 +1,12 @@ http://www.gentoo.org/dtd/metadata.dtd";> - - wae...@gmail.com - Bernd Waibel - - - proxy-ma...@gentoo.org - Proxy Maintainers project - + + wae...@gmail.com + Bernd Waibel + + + proxy-ma...@gentoo.org + Proxy Maintainers project +
[gentoo-commits] repo/gentoo:master commit in: gui-apps/kanshi/
commit: 75a2c2f6e42a50e705fcdb5d630207e68237be05
Author: Aaron Bauman gentoo org>
AuthorDate: Sun Feb 7 01:40:49 2021 +
Commit: Aaron Bauman gentoo org>
CommitDate: Sun Feb 7 01:40:49 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=75a2c2f6
gui-apps/kanshi: disable Werror during compilation
Closes: https://bugs.gentoo.org/750710
Signed-off-by: Aaron Bauman gentoo.org>
gui-apps/kanshi/kanshi-1.1.0.ebuild | 1 +
1 file changed, 1 insertion(+)
diff --git a/gui-apps/kanshi/kanshi-1.1.0.ebuild
b/gui-apps/kanshi/kanshi-1.1.0.ebuild
index 221a5f5f59e..f24c1c7c59d 100644
--- a/gui-apps/kanshi/kanshi-1.1.0.ebuild
+++ b/gui-apps/kanshi/kanshi-1.1.0.ebuild
@@ -38,6 +38,7 @@ fi
src_configure() {
local emesonargs=(
$(meson_feature man man-pages)
+ "-Dwerror=false"
)
meson_src_configure
}
[gentoo-commits] repo/gentoo:master commit in: app-editors/gummi/
commit: a23525ea06649fe792e889be0aa2e50fc1530542
Author: Aaron Bauman gentoo org>
AuthorDate: Sun Feb 7 01:25:12 2021 +
Commit: Aaron Bauman gentoo org>
CommitDate: Sun Feb 7 01:25:12 2021 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a23525ea
app-editors/gummi: drop old
Closes: https://bugs.gentoo.org/711752
Signed-off-by: Aaron Bauman gentoo.org>
app-editors/gummi/Manifest | 1 -
app-editors/gummi/gummi-0.6.6-r2.ebuild | 44 -
2 files changed, 45 deletions(-)
diff --git a/app-editors/gummi/Manifest b/app-editors/gummi/Manifest
index 7d306f77e9f..b7602e36136 100644
--- a/app-editors/gummi/Manifest
+++ b/app-editors/gummi/Manifest
@@ -1,2 +1 @@
-DIST gummi-0.6.6.tar.gz 792642 BLAKE2B
4f6096999b06361811a9149fa08eff5d2315f01e55539c5849c4bc86aab5a482ad9a0adfe84de5d093e66a328b294b4d88e1e2e2f0355bab320f0c094581da97
SHA512
3be94927c9aafa4914ed2b6f6f5022dce5bcca315a1f947fafb8a4c8bbc5a2bc57f07f8ceaaacdd0b92a5a30483ea8b00e570faf62479280d2ad874716e4c47d
DIST gummi-0.8.1.tar.gz 580887 BLAKE2B
ce06df4e85e2dfd510e39aeab785d1289335802fd24fa0b25eb9a0b920849d7ab2b89d62509e91ddb41c8f4c601544f3da8819f69ff3e38fc59dbde0aa3e789d
SHA512
dccef28f6ceb2743a5a44c5224cce7326e9bb9e6f1baccb51c23d801ce595914d1b960fe11d230dcad5f041d80fe57b46c0e5aa9c6abd881dd2e32db373d329a
diff --git a/app-editors/gummi/gummi-0.6.6-r2.ebuild
b/app-editors/gummi/gummi-0.6.6-r2.ebuild
deleted file mode 100644
index f67449975de..000
--- a/app-editors/gummi/gummi-0.6.6-r2.ebuild
+++ /dev/null
@@ -1,44 +0,0 @@
-# Copyright 1999-2018 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=6
-
-inherit autotools xdg-utils
-
-DESCRIPTION="Simple LaTeX editor for GTK+ users"
-HOMEPAGE="https://github.com/alexandervdm/gummi";
-SRC_URI="https://github.com/alexandervdm/${PN}/archive/${PV}.tar.gz ->
${P}.tar.gz"
-
-LICENSE="MIT"
-SLOT="0"
-KEYWORDS="amd64 ~arm64 x86"
-IUSE=""
-
-RDEPEND="
- app-text/gtkspell:2
- app-text/poppler[cairo]
- dev-libs/glib:2
- dev-texlive/texlive-latex
- dev-texlive/texlive-latexextra
- x11-libs/gtk+:2
- x11-libs/gtksourceview:2.0
- x11-libs/pango"
-
-DEPEND="${RDEPEND}"
-
-src_prepare() {
- default
- eautoreconf
-}
-
-pkg_postinst() {
- xdg_desktop_database_update
-
- elog "Gummi supports spell-checking through gtkspell. Support for"
- elog "additional languages can be added by installing myspell-**-"
- elog "packages for your language of choice."
-}
-
-pkg_postrm() {
- xdg_desktop_database_update
-}
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-chuck/
commit: d54fa5aec43ff9559bf46296fd63e0fc1738581d Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:18:31 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:18:31 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d54fa5ae app-eselect/eselect-chuck: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-chuck/metadata.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-eselect/eselect-chuck/metadata.xml b/app-eselect/eselect-chuck/metadata.xml index 6f49eba8f49..7a38bb90096 100644 --- a/app-eselect/eselect-chuck/metadata.xml +++ b/app-eselect/eselect-chuck/metadata.xml @@ -1,5 +1,5 @@ http://www.gentoo.org/dtd/metadata.dtd";> - +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-cblas/
commit: b00ac09efdf830fee73e7940371046a8a165b3b1 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:17:21 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:17:21 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b00ac09e app-eselect/eselect-cblas: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-cblas/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-cblas/metadata.xml b/app-eselect/eselect-cblas/metadata.xml index ae9640ffb9f..d4dd553c186 100644 --- a/app-eselect/eselect-cblas/metadata.xml +++ b/app-eselect/eselect-cblas/metadata.xml @@ -5,4 +5,5 @@ s...@gentoo.org Gentoo Science Project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-cdparanoia/
commit: 722a07b4f3318a951b5072f367f4d99fe4a8faf2 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:18:10 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:18:10 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=722a07b4 app-eselect/eselect-cdparanoia: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-cdparanoia/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-cdparanoia/metadata.xml b/app-eselect/eselect-cdparanoia/metadata.xml index ee7258ac28e..f0585120893 100644 --- a/app-eselect/eselect-cdparanoia/metadata.xml +++ b/app-eselect/eselect-cdparanoia/metadata.xml @@ -5,4 +5,5 @@ so...@gentoo.org Gentoo Sound project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-chuck/
commit: a3ec5e03fc442d21006cfe5689b4969436687709 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:18:44 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:18:44 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a3ec5e03 app-eselect/eselect-chuck: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-chuck/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-chuck/metadata.xml b/app-eselect/eselect-chuck/metadata.xml index 7a38bb90096..3c58a0219fb 100644 --- a/app-eselect/eselect-chuck/metadata.xml +++ b/app-eselect/eselect-chuck/metadata.xml @@ -2,4 +2,5 @@ http://www.gentoo.org/dtd/metadata.dtd";> +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-audicle/
commit: 09f44d21ed90d62d7dcc79b97f2f2aefd6ac98af Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:14:56 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:14:56 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=09f44d21 app-eselect/eselect-audicle: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-audicle/metadata.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-eselect/eselect-audicle/metadata.xml b/app-eselect/eselect-audicle/metadata.xml index 6f49eba8f49..7a38bb90096 100644 --- a/app-eselect/eselect-audicle/metadata.xml +++ b/app-eselect/eselect-audicle/metadata.xml @@ -1,5 +1,5 @@ http://www.gentoo.org/dtd/metadata.dtd";> - +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-cblas/
commit: 767c91f517e8a00ec7377ca688cd7eb5bfce620e Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:17:03 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:17:03 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=767c91f5 app-eselect/eselect-cblas: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-cblas/metadata.xml | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/app-eselect/eselect-cblas/metadata.xml b/app-eselect/eselect-cblas/metadata.xml index 0c6991d7902..ae9640ffb9f 100644 --- a/app-eselect/eselect-cblas/metadata.xml +++ b/app-eselect/eselect-cblas/metadata.xml @@ -1,8 +1,8 @@ http://www.gentoo.org/dtd/metadata.dtd";> - - s...@gentoo.org - Gentoo Science Project - + + s...@gentoo.org + Gentoo Science Project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-cdparanoia/
commit: 5f241fe3d0e22d8f7efcf202c217b9d5a6bd64e2 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:17:53 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:17:53 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5f241fe3 app-eselect/eselect-cdparanoia: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-cdparanoia/metadata.xml | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/app-eselect/eselect-cdparanoia/metadata.xml b/app-eselect/eselect-cdparanoia/metadata.xml index c870d0eef0a..ee7258ac28e 100644 --- a/app-eselect/eselect-cdparanoia/metadata.xml +++ b/app-eselect/eselect-cdparanoia/metadata.xml @@ -1,8 +1,8 @@ http://www.gentoo.org/dtd/metadata.dtd";> - - so...@gentoo.org - Gentoo Sound project - + + so...@gentoo.org + Gentoo Sound project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-audicle/
commit: 790d8bea6eb3a56526d19c64e8f9b9190f202b25 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:15:10 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:15:10 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=790d8bea app-eselect/eselect-audicle: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-audicle/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-audicle/metadata.xml b/app-eselect/eselect-audicle/metadata.xml index 7a38bb90096..3c58a0219fb 100644 --- a/app-eselect/eselect-audicle/metadata.xml +++ b/app-eselect/eselect-audicle/metadata.xml @@ -2,4 +2,5 @@ http://www.gentoo.org/dtd/metadata.dtd";> +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-blas/
commit: 42f85ba66b8e85a6e5d2dc7608bc0efa1bfe541e Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:16:06 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:16:06 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=42f85ba6 app-eselect/eselect-blas: fix metadata indentation Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-blas/metadata.xml | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/app-eselect/eselect-blas/metadata.xml b/app-eselect/eselect-blas/metadata.xml index 0c6991d7902..ae9640ffb9f 100644 --- a/app-eselect/eselect-blas/metadata.xml +++ b/app-eselect/eselect-blas/metadata.xml @@ -1,8 +1,8 @@ http://www.gentoo.org/dtd/metadata.dtd";> - - s...@gentoo.org - Gentoo Science Project - + + s...@gentoo.org + Gentoo Science Project +
[gentoo-commits] repo/gentoo:master commit in: app-eselect/eselect-blas/
commit: 48a85a78de56609353e3db78712290043c0833c1 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:16:30 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:16:30 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=48a85a78 app-eselect/eselect-blas: mark ALLARCHES Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> app-eselect/eselect-blas/metadata.xml | 1 + 1 file changed, 1 insertion(+) diff --git a/app-eselect/eselect-blas/metadata.xml b/app-eselect/eselect-blas/metadata.xml index ae9640ffb9f..d4dd553c186 100644 --- a/app-eselect/eselect-blas/metadata.xml +++ b/app-eselect/eselect-blas/metadata.xml @@ -5,4 +5,5 @@ s...@gentoo.org Gentoo Science Project +
[gentoo-commits] repo/gentoo:master commit in: net-dns/nsd/
commit: 601c3830534f1485a72b902c6488b1c58c2cbd29 Author: Sam James gentoo org> AuthorDate: Sun Feb 7 01:11:04 2021 + Commit: Sam James gentoo org> CommitDate: Sun Feb 7 01:11:04 2021 + URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=601c3830 net-dns/nsd: add github remote-id Package-Manager: Portage-3.0.14, Repoman-3.0.2 Signed-off-by: Sam James gentoo.org> net-dns/nsd/metadata.xml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net-dns/nsd/metadata.xml b/net-dns/nsd/metadata.xml index 80941c35662..9670f147c7c 100644 --- a/net-dns/nsd/metadata.xml +++ b/net-dns/nsd/metadata.xml @@ -23,4 +23,7 @@ Install a plugin for net-analyzer/munin to graph statistical data from nsd. + + NLnetLabs/nsd +
