1 |
perfinion 15/06/28 14:03:30 |
2 |
|
3 |
Modified: package.mask package.use.force package.use.mask |
4 |
use.mask |
5 |
Log: |
6 |
Mask systemd and deps in selinux profiles because no support in the policies. |
7 |
|
8 |
Revision Changes Path |
9 |
1.58 profiles/features/selinux/package.mask |
10 |
|
11 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.mask?rev=1.58&view=markup |
12 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.mask?rev=1.58&content-type=text/plain |
13 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.mask?r1=1.57&r2=1.58 |
14 |
|
15 |
Index: package.mask |
16 |
=================================================================== |
17 |
RCS file: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.mask,v |
18 |
retrieving revision 1.57 |
19 |
retrieving revision 1.58 |
20 |
diff -u -r1.57 -r1.58 |
21 |
--- package.mask 21 Jun 2015 11:59:12 -0000 1.57 |
22 |
+++ package.mask 28 Jun 2015 14:03:30 -0000 1.58 |
23 |
@@ -1,2 +1,14 @@ |
24 |
-# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.mask,v 1.57 2015/06/21 11:59:12 perfinion Exp $ |
25 |
+# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.mask,v 1.58 2015/06/28 14:03:30 perfinion Exp $ |
26 |
|
27 |
+# Jason Zaman <perfinion@g.o> (27 Jun 2015) |
28 |
+# SystemD has no support in the SELinux policy at the moment. |
29 |
+# Please see: https://wiki.gentoo.org/wiki/SELinux/FAQ#Can_I_use_SELinux_with_SystemD.3F |
30 |
+sys-apps/systemd |
31 |
+gnome-extra/gnome-logs |
32 |
+gnome-extra/office-runner |
33 |
+kde-misc/kcmsystemd |
34 |
+net-firewall/firewalld |
35 |
+net-misc/netctl |
36 |
+sys-apps/gentoo-systemd-integration |
37 |
+sys-apps/systemd-readahead |
38 |
+sys-apps/systemd-sysv-utils |
39 |
|
40 |
|
41 |
|
42 |
1.11 profiles/features/selinux/package.use.force |
43 |
|
44 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.use.force?rev=1.11&view=markup |
45 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.use.force?rev=1.11&content-type=text/plain |
46 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.use.force?r1=1.10&r2=1.11 |
47 |
|
48 |
Index: package.use.force |
49 |
=================================================================== |
50 |
RCS file: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.use.force,v |
51 |
retrieving revision 1.10 |
52 |
retrieving revision 1.11 |
53 |
diff -u -r1.10 -r1.11 |
54 |
--- package.use.force 3 Dec 2014 13:22:09 -0000 1.10 |
55 |
+++ package.use.force 28 Jun 2015 14:03:30 -0000 1.11 |
56 |
@@ -1,6 +1,6 @@ |
57 |
# Copyright 1999-2014 Gentoo Foundation |
58 |
# Distributed under the terms of the GNU General Public License v2 |
59 |
-# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.use.force,v 1.10 2014/12/03 13:22:09 perfinion Exp $ |
60 |
+# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.use.force,v 1.11 2015/06/28 14:03:30 perfinion Exp $ |
61 |
|
62 |
# Sven Vermeulen <swift@g.o> (19 Apr 2013) |
63 |
# sys-apps/policycoreutils (semanage command) uses sepolgen, which requires libselinux with USE="python". |
64 |
@@ -20,3 +20,9 @@ |
65 |
# so stages can build with no interacton. Bug #527938 |
66 |
sys-libs/libselinux static-libs |
67 |
dev-libs/libpcre static-libs |
68 |
+ |
69 |
+# Jason Zaman <perfinion@g.o> (27 Jun 2015) |
70 |
+# SystemD has no support in the SELinux policy at the moment. |
71 |
+# Please see: https://wiki.gentoo.org/wiki/SELinux/FAQ#Can_I_use_SELinux_with_SystemD.3F |
72 |
+gnome-base/gnome-settings-daemon openrc-force |
73 |
+gnome-base/gnome-shell openrc-force |
74 |
|
75 |
|
76 |
|
77 |
1.11 profiles/features/selinux/package.use.mask |
78 |
|
79 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.use.mask?rev=1.11&view=markup |
80 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.use.mask?rev=1.11&content-type=text/plain |
81 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/package.use.mask?r1=1.10&r2=1.11 |
82 |
|
83 |
Index: package.use.mask |
84 |
=================================================================== |
85 |
RCS file: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.use.mask,v |
86 |
retrieving revision 1.10 |
87 |
retrieving revision 1.11 |
88 |
diff -u -r1.10 -r1.11 |
89 |
--- package.use.mask 6 Nov 2014 15:07:47 -0000 1.10 |
90 |
+++ package.use.mask 28 Jun 2015 14:03:30 -0000 1.11 |
91 |
@@ -1,6 +1,6 @@ |
92 |
# Copyright 1999-2014 Gentoo Foundation |
93 |
# Distributed under the terms of the GNU General Public License v2 |
94 |
-# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.use.mask,v 1.10 2014/11/06 15:07:47 mgorny Exp $ |
95 |
+# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/package.use.mask,v 1.11 2015/06/28 14:03:30 perfinion Exp $ |
96 |
|
97 |
# Saleem Abdulrasool <compnerd@g.o> (23 Nov 2007) |
98 |
# Unmask when we get HAL 0.5.10 straightened out |
99 |
@@ -13,3 +13,12 @@ |
100 |
app-portage/layman python_targets_pypy python_targets_pypy3 |
101 |
app-admin/webapp-config python_targets_pypy python_targets_pypy3 |
102 |
app-portage/diffmask python_targets_pypy python_targets_pypy3 |
103 |
+ |
104 |
+# Jason Zaman <perfinion@g.o> (27 Jun 2015) |
105 |
+# SystemD has no support in the SELinux policy at the moment. |
106 |
+# Please see: https://wiki.gentoo.org/wiki/SELinux/FAQ#Can_I_use_SELinux_with_SystemD.3F |
107 |
+app-emulation/libvirt firewalld |
108 |
+gnome-base/gdm systemd wayland |
109 |
+sys-kernel/dracut dracut_modules_systemd |
110 |
+www-servers/uwsgi uwsgi_plugins_systemd_logger |
111 |
+x11-wm/mutter kms |
112 |
|
113 |
|
114 |
|
115 |
1.5 profiles/features/selinux/use.mask |
116 |
|
117 |
file : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/use.mask?rev=1.5&view=markup |
118 |
plain: http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/use.mask?rev=1.5&content-type=text/plain |
119 |
diff : http://sources.gentoo.org/viewvc.cgi/gentoo-x86/profiles/features/selinux/use.mask?r1=1.4&r2=1.5 |
120 |
|
121 |
Index: use.mask |
122 |
=================================================================== |
123 |
RCS file: /var/cvsroot/gentoo-x86/profiles/features/selinux/use.mask,v |
124 |
retrieving revision 1.4 |
125 |
retrieving revision 1.5 |
126 |
diff -u -r1.4 -r1.5 |
127 |
--- use.mask 2 Jun 2015 09:15:36 -0000 1.4 |
128 |
+++ use.mask 28 Jun 2015 14:03:30 -0000 1.5 |
129 |
@@ -1,6 +1,6 @@ |
130 |
# Copyright 1999-2015 Gentoo Foundation. |
131 |
# Distributed under the terms of the GNU General Public License v2 |
132 |
-# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/use.mask,v 1.4 2015/06/02 09:15:36 ulm Exp $ |
133 |
+# $Header: /var/cvsroot/gentoo-x86/profiles/features/selinux/use.mask,v 1.5 2015/06/28 14:03:30 perfinion Exp $ |
134 |
|
135 |
# This file masks out USE flags that are simply NOT allowed in the default |
136 |
# profile for any architecture. This works, for example, if a non-default |
137 |
@@ -12,3 +12,7 @@ |
138 |
|
139 |
# tcc is x86-only |
140 |
tcc |
141 |
+ |
142 |
+# no policy yet |
143 |
+systemd |
144 |
+-openrc-force |