From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stefan Schantl To: development@lists.ipfire.org Subject: Re: [PATCH 1/3] libsemanage: Drop package Date: Thu, 12 Oct 2017 12:22:08 +0200 Message-ID: <1507803728.19550.1.camel@ipfire.org> In-Reply-To: <1507801825.4045.82.camel@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1887554021359462047==" List-Id: --===============1887554021359462047== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Michael, thanks for merging. Currently only the "mesa" and "xorg-x11-server" packages still use libselinux-devel and are linked against it. Both packages will be removed during the next step of cleaning up the IPFire 3 codebase. For compatibility reasons, we should keep the selinux libraries for a while in the stable repository unless the buildservice is up again and all modified packages have been build, tested and moved to the stable repository... Best regards, -Stefan > Hi, >=20 > merged, but a few packages still depend on this. >=20 > What is going to happen to those? >=20 > -Michael >=20 > On Thu, 2017-10-12 at 11:28 +0200, Stefan Schantl wrote: > > Signed-off-by: Stefan Schantl > > --- > > =C2=A0libsemanage/libsemanage.nm=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0| 74 ---------= --------- > > --------- > > --- > > =C2=A0libsemanage/patches/libsemanage-rhat.patch | 24 ---------- > > =C2=A0libsemanage/semanage.conf=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0| 50 ------= ------------ > > -- > > =C2=A03 files changed, 148 deletions(-) > > =C2=A0delete mode 100644 libsemanage/libsemanage.nm > > =C2=A0delete mode 100644 libsemanage/patches/libsemanage-rhat.patch > > =C2=A0delete mode 100644 libsemanage/semanage.conf > >=20 > > diff --git a/libsemanage/libsemanage.nm > > b/libsemanage/libsemanage.nm > > deleted file mode 100644 > > index 5bac1be..0000000 > > --- a/libsemanage/libsemanage.nm > > +++ /dev/null > > @@ -1,74 +0,0 @@ > > -################################################################## > > ########### > > ## > > -# IPFire.org=C2=A0=C2=A0=C2=A0=C2=A0- An Open Source Firewall > > Solution=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0# > > -# Copyright (C) - IPFire Development Team =C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 > > =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 > > =C2=A0# > > -################################################################## > > ########### > > ## > > - > > -name=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=3D libsemanage > > -version=C2=A0=C2=A0=C2=A0=C2=A0=3D 2.1.5 > > -release=C2=A0=C2=A0=C2=A0=C2=A0=3D 3 > > - > > -groups=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=3D System/Libraries > > -url=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=3D http://www.selinu= xproject.org > > -license=C2=A0=C2=A0=C2=A0=C2=A0=3D LGPLv2+ > > -summary=C2=A0=C2=A0=C2=A0=C2=A0=3D SELinux binary policy manipulation li= brary. > > - > > -description > > - libsemanage provides an API for the manipulation of > > SELinux > > - binary policies. > > -end > > - > > -sources=C2=A0=C2=A0=C2=A0=C2=A0=3D %{thisapp}.tgz > > - > > -build > > - requires > > - bison > > - bzip2-devel > > - flex > > - libselinux-devel > > - libsepol-devel >=3D 2.1.4 > > - python-devel > > - swig > > - ustr-devel > > - end > > - > > - build > > - make clean > > - make CC=3Dgcc LIBDIR=3D"%{libdir}" CFLAGS=3D"-g > > %{CFLAGS}" swigify > > - make CC=3Dgcc LIBDIR=3D"%{libdir}" CFLAGS=3D"-g > > %{CFLAGS}" all > > - make CC=3Dgcc LIBDIR=3D"%{libdir}" CFLAGS=3D"-g > > %{CFLAGS}" pywrap > > - end > > - > > - # Install libraries to correct place. > > - make_install_targets +=3D \ > > - LIBDIR=3D"%{BUILDROOT}%{libdir}" \ > > - SHLIBDIR=3D"%{BUILDROOT}%{libdir}" > > - > > - install_cmds > > - make install-pywrap %{make_install_targets} > > DESTDIR=3D%{BUILDROOT} > > - > > - # Install our config file > > - cp -vf %{DIR_SOURCE}/semanage.conf > > %{BUILDROOT}/etc/selinux/semanage.conf > > - end > > -end > > - > > -packages > > - package %{name} > > - end > > - > > - package %{name}-devel > > - template DEVEL > > - end > > -=09 > > - package python-libsemanage > > - summary =3D=C2=A0=C2=A0SELinux manage python bindings. > > - description =3D SELinux python bindings for > > libsemanage. > > - > > - files > > - %{libdir}/python* > > - end > > - end > > - > > - package %{name}-debuginfo > > - template DEBUGINFO > > - end > > -end > > diff --git a/libsemanage/patches/libsemanage-rhat.patch > > b/libsemanage/patches/libsemanage-rhat.patch > > deleted file mode 100644 > > index a1f53c5..0000000 > > --- a/libsemanage/patches/libsemanage-rhat.patch > > +++ /dev/null > > @@ -1,24 +0,0 @@ > > -diff --exclude-from=3Dexclude -N -u -r > > nsalibsemanage/src/genhomedircon.c > > libsemanage-2.0.44/src/genhomedircon.c > > ---- nsalibsemanage/src/genhomedircon.c 2009-09-17 > > 08:59:43.000000000 > > -0400 > > -+++ libsemanage-2.0.44/src/genhomedircon.c 2010-02-24 > > 14:57:23.000000000 -0500 > > -@@ -310,6 +310,10 @@ > > -=C2=A0 } > > -=C2=A0 if (strcmp(pwbuf->pw_dir, "/") =3D=3D 0) > > -=C2=A0 continue; > > -+ if (strcmp(pwbuf->pw_dir, "/root") =3D=3D 0) { > > -+ continue; > > -+ } > > -+ > > -=C2=A0 if (semanage_str_count(pwbuf->pw_dir, '/') <=3D 1) > > -=C2=A0 continue; > > -=C2=A0 if (!(path =3D strdup(pwbuf->pw_dir))) { > > -@@ -803,6 +807,9 @@ > > -=C2=A0 =C2=A0* /root */ > > -=C2=A0 continue; > > -=C2=A0 } > > -+ if (strcmp(pwent->pw_dir, "/root") =3D=3D 0) { > > -+ continue; > > -+ } > > -=C2=A0 if (push_user_entry(&head, name, seuname, > > -=C2=A0 =C2=A0=C2=A0=C2=A0=C2=A0prefix, pwent->pw_dir) !=3D > > STATUS_SUCCESS) { > > -=C2=A0 *errors =3D STATUS_ERR; > > diff --git a/libsemanage/semanage.conf b/libsemanage/semanage.conf > > deleted file mode 100644 > > index 882b8f0..0000000 > > --- a/libsemanage/semanage.conf > > +++ /dev/null > > @@ -1,50 +0,0 @@ > > -# Authors: Jason Tang > > -# > > -# Copyright (C) 2004-2005 Tresys Technology, LLC > > -# > > -#=C2=A0=C2=A0This library is free software; you can redistribute it and/= or > > -#=C2=A0=C2=A0modify it under the terms of the GNU Lesser General Public > > -#=C2=A0=C2=A0License as published by the Free Software Foundation; either > > -#=C2=A0=C2=A0version 2.1 of the License, or (at your option) any later > > version. > > -# > > -#=C2=A0=C2=A0This library is distributed in the hope that it will be use= ful, > > -#=C2=A0=C2=A0but WITHOUT ANY WARRANTY; without even the implied warranty= of > > -#=C2=A0=C2=A0MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.=C2=A0= =C2=A0See the > > GNU > > -#=C2=A0=C2=A0Lesser General Public License for more details. > > -# > > -#=C2=A0=C2=A0You should have received a copy of the GNU Lesser General > > Public > > -#=C2=A0=C2=A0License along with this library; if not, write to the Free > > Software > > -#=C2=A0=C2=A0Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, > > MA=C2=A0=C2=A002110-1301=C2=A0=C2=A0USA > > -# > > -# Specify how libsemanage will interact with a SELinux policy > > manager. > > -# The four options are: > > -# > > -#=C2=A0=C2=A0"source"=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0- libsemanage manipul= ates a source SELinux policy > > -#=C2=A0=C2=A0"direct"=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0- libsemanage will wr= ite directly to a module > > store. > > -#=C2=A0=C2=A0/foo/bar=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0- Write by way of a p= olicy management server, > > whose > > -#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0named socket is at /foo/bar.=C2=A0=C2=A0The = path must > > begin > > -#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0with a '/'. > > -#=C2=A0=C2=A0foo.com:4242 - Establish a TCP connection to a remote policy > > -#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0management server at foo.com.=C2=A0=C2=A0If = there is a > > colon > > -#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0then the remainder is interpreted as a port > > number; > > -#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0otherwise default to port 4242. > > -module-store =3D direct > > - > > -# When generating the final linked and expanded policy, by default > > -# semanage will set the policy version to POLICYDB_VERSION_MAX, as > > -# given in .=C2=A0=C2=A0Change this setting if a diffe= rent > > -# version is necessary. > > -#policy-version =3D 19 > > - > > -# expand-check check neverallow rules when executing all semanage > > commands. > > -# Large penalty in time if you turn this on.=C2=A0=C2=A0 > > -expand-check=3D0 > > - > > -# usepasswd check tells semanage to scan all pass word records for > > home > > directories > > -# and setup the labeling correctly.=C2=A0=C2=A0If this is turned off, > > SELinux will > > label /home=C2=A0 > > -# correctly only.=C2=A0=C2=A0You will need to use semanage fcontext > > command.=C2=A0=C2=A0 > > -# For example, if you had home dirs in /althome directory you > > would have to > > execute > > -# semanage fcontext -a -e /home /althome > > -usepasswd=3DFalse > > -bzip-small=3Dtrue > > -bzip-blocksize=3D5 --===============1887554021359462047== Content-Type: application/pgp-signature Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" MIME-Version: 1.0 LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjIKCmlRSWNCQUFC Q2dBR0JRSlozMEpSQUFvSkVFN1hUaFdQazdMZStHZ1AvMVYwSjZub0ZqeEd4WjBCSktRQ2N5ZUQK UWxJbWFvTkpSaytkWUoyR3R3bElwS2FJWUNsVXd1Y282dlpKMGZ3TGRRYXYySUxTdGNxS1B1Wjg0 Nnk3VXI4UgoxSHJycnZKY3p0THdWVUVkQmt6NWhZNFF5V25SS1A4YVVLdm1SOUpIa0xNeVJEaEtO M0dwMitkVytsSEVVeHNkCjJIN1Y3SVRvRU80eVl4TFo0MXgrZmFCWGcrMkVGNVZFZzBoUTBkZXcx emdxRjhHc29rdmt6N1Ixby82bDMzR2sKZlhrMGcvNTBRY0x3cmRvQ3picnp1aWIrWXRsclpKSjJD NUg5SjQzdzErWGV4NDdVWll3alFxWk9BUUtMVjRkRgo0aDlvcEQrTGVIakR5dXBkL3QzVDFpcWVp RmdyZnIrRk5NcVhjbU1PYk1UaGdrYVgySlNGcHp5ZlZSRVBiVHRoCkxneEtTWWw2WmI0RCtoQ0dK T2FObUE2MnF4d2VuS3pvYjIrZGhHUkJoUkRScWZKbWtWbE9Ed2IxbkJuakJDOWIKL1NiK0xjUmdo VHJVVEpRazA0bkdoSHhvT1JHWVZMQ1hhR2xHdndkVGFOSzd1OUtrbHlYcXEyYzFZRmtWaXBVcApW R1U2bW1DRGpjd0tUVGJydDlZQy95RUdZdklqNEFzY2xmdXhTNjZwTU1IMlBKS1M5SUF1WVF6SW5n dU4yL2g3CmVYa05aNDlDSEtxODRybzhQZjJCajRHYTZOdlg3TXN2NTRxZzZ3c3ltSjJiNDJQWVQw WVdXUzIwOVVhQkRiNGEKL2F2Ri9qWGNCaDhkS0Z5YmZ1OHNyWjRFci9NRmtTL1p2OEx4SGVlNUpr T2dQaGZuMm91dThIUzVxb1dVaHM3UQozTTNYNWdVN0JFRmxpdCt3VGQwMAo9ekVOSAotLS0tLUVO RCBQR1AgU0lHTkFUVVJFLS0tLS0K --===============1887554021359462047==--