[gentoo-commits] proj/hardened-dev:master commit in: sys-libs/libsepol/files/, sys-apps/policycoreutils/, sys-libs/libselinux/, ...

[Sven Vermeulen]

commit:     6a5c55b81c381054cdbdd8bf20e106cf83bf5118
Author:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
AuthorDate: Sat Sep 29 15:27:04 2012 +0000
Commit:     Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be>
CommitDate: Sat Sep 29 15:27:04 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-dev.git;a=commit;h=6a5c55b8

Userspace 20120924

---
 dev-python/sepolgen/ChangeLog                      |   97 ++++
 dev-python/sepolgen/metadata.xml                   |    6 +
 dev-python/sepolgen/sepolgen-1.1.8.ebuild          |   65 +++
 sys-apps/checkpolicy/ChangeLog                     |  289 +++++++++++
 sys-apps/checkpolicy/checkpolicy-2.1.11.ebuild     |   41 ++
 sys-apps/checkpolicy/metadata.xml                  |    6 +
 sys-apps/policycoreutils/ChangeLog                 |  520 ++++++++++++++++++++
 .../policycoreutils-extra-1.21-fix-python3.patch   |  108 ++++
 sys-apps/policycoreutils/metadata.xml              |   21 +
 .../policycoreutils/policycoreutils-2.1.13.ebuild  |  138 ++++++
 sys-libs/libselinux/ChangeLog                      |  371 ++++++++++++++
 .../files/libselinux-2.1.12-mountsys.patch         |   22 +
 .../files/libselinux-2.1.9-mountsys.patch          |   22 +
 sys-libs/libselinux/libselinux-2.1.12.ebuild       |   98 ++++
 sys-libs/libselinux/metadata.xml                   |   10 +
 sys-libs/libsemanage/ChangeLog                     |  216 ++++++++
 sys-libs/libsemanage/libsemanage-2.1.9.ebuild      |  125 +++++
 sys-libs/libsemanage/metadata.xml                  |    6 +
 sys-libs/libsepol/ChangeLog                        |  211 ++++++++
 .../libsepol-2.1.4-fix_role_fix_callback.patch     |   15 +
 sys-libs/libsepol/libsepol-2.1.8.ebuild            |   40 ++
 sys-libs/libsepol/metadata.xml                     |    6 +
 22 files changed, 2433 insertions(+), 0 deletions(-)

diff --git a/dev-python/sepolgen/ChangeLog b/dev-python/sepolgen/ChangeLog
new file mode 100644
index 0000000..5f2ec16
--- /dev/null
+++ b/dev-python/sepolgen/ChangeLog
@@ -0,0 +1,97 @@
+# ChangeLog for dev-python/sepolgen
+# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/dev-python/sepolgen/ChangeLog,v 1.23 2012/07/10 20:05:44 swift Exp $
+
+  10 Jul 2012; <swift@g.o> sepolgen-1.1.5-r2.ebuild:
+  Stabilization (main need for #415091)
+
+*sepolgen-1.1.5-r3 (10 Jul 2012)
+
+  10 Jul 2012; <swift@g.o> +sepolgen-1.1.5-r3.ebuild:
+  Support refpolicy style audit2allow (#417199)
+
+  26 Jun 2012; Mike Gilbert <floppym@g.o> sepolgen-1.1.5.ebuild:
+  Restrict pypy.
+
+  26 Jun 2012; Mike Gilbert <floppym@g.o> sepolgen-1.1.5-r2.ebuild:
+  Set PYTHON_DEPEND="*". Restrict pypy. Thanks Arfrever.
+
+*sepolgen-1.1.5-r2 (25 Jun 2012)
+
+  25 Jun 2012; <swift@g.o> +sepolgen-1.1.5-r2.ebuild:
+  Support python3, fix audit2allow support. bugs #415091 and #408179
+
+  13 May 2012; <swift@g.o> -sepolgen-1.0.23.ebuild,
+  -sepolgen-1.1.0.ebuild:
+  Removing obsoleted ebuilds
+
+  29 Apr 2012; <swift@g.o> sepolgen-1.1.5.ebuild:
+  Stabilization
+
+  13 Apr 2012; Mike Gilbert <floppym@g.o> sepolgen-1.1.5.ebuild:
+  Fix dependencies. Patch by Arfrever.
+
+*sepolgen-1.1.5 (31 Mar 2012)
+
+  31 Mar 2012; <swift@g.o> +sepolgen-1.1.5.ebuild:
+  Bump to version 1.1.5
+
+  23 Oct 2011; <swift@g.o> sepolgen-1.1.0.ebuild:
+  Stabilization (tracker #384231)
+
+  12 Aug 2011; Anthony G. Basile <blueness@g.o> -sepolgen-1.0.13.ebuild,
+  -sepolgen-1.0.17.ebuild, -sepolgen-1.0.17-r1.ebuild:
+  Removed deprecated versions
+
+*sepolgen-1.1.0 (03 Aug 2011)
+
+  03 Aug 2011; Anthony G. Basile <blueness@g.o> +sepolgen-1.1.0.ebuild:
+  Bump to 20110727 release of SELinux userspace
+
+  28 May 2011; Anthony G. Basile <blueness@g.o> sepolgen-1.0.23.ebuild:
+  Stable amd64 x86
+
+  25 Apr 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  sepolgen-1.0.13.ebuild, sepolgen-1.0.17.ebuild, sepolgen-1.0.17-r1.ebuild:
+  Fix deprecation warnings.
+
+  13 Feb 2011; Anthony G. Basile <blueness@g.o> metadata.xml:
+  Updated metadata.xml to reflect new selinux herd.
+
+  06 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  sepolgen-1.0.23.ebuild:
+  Set SUPPORT_PYTHON_ABIS (bug #345551).
+
+*sepolgen-1.0.23 (06 Feb 2011)
+
+  06 Feb 2011; Anthony G. Basile <blueness@g.o>
+  +sepolgen-1.0.23.ebuild:
+  New upstream release.
+
+  04 Apr 2010; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  sepolgen-1.0.13.ebuild, sepolgen-1.0.17.ebuild, sepolgen-1.0.17-r1.ebuild:
+  Delete calls to deprecated python_version().
+
+*sepolgen-1.0.17-r1 (16 Dec 2009)
+
+  16 Dec 2009; Chris PeBenito <pebenito@g.o>
+  +sepolgen-1.0.17-r1.ebuild:
+  Fix build tests for #296737.
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o> sepolgen-1.0.13.ebuild,
+  sepolgen-1.0.17.ebuild:
+  Fix bug #244742.
+
+*sepolgen-1.0.17 (02 Aug 2009)
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o> +sepolgen-1.0.17.ebuild:
+  New upstream release.
+
+  18 Jul 2009; Chris PeBenito <pebenito@g.o> sepolgen-1.0.13.ebuild:
+  Mark stable. Remove old ebuilds.
+
+*sepolgen-1.0.13 (03 Oct 2008)
+
+  03 Oct 2008; Chris PeBenito <pebenito@g.o> +metadata.xml,
+  +sepolgen-1.0.13.ebuild:
+  Initial commit.

diff --git a/dev-python/sepolgen/metadata.xml b/dev-python/sepolgen/metadata.xml
new file mode 100644
index 0000000..d75890e
--- /dev/null
+++ b/dev-python/sepolgen/metadata.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<herd>selinux</herd>
+	<longdescription>Python module needed for audit2allow</longdescription>
+</pkgmetadata>

diff --git a/dev-python/sepolgen/sepolgen-1.1.8.ebuild b/dev-python/sepolgen/sepolgen-1.1.8.ebuild
new file mode 100644
index 0000000..ad98941
--- /dev/null
+++ b/dev-python/sepolgen/sepolgen-1.1.8.ebuild
@@ -0,0 +1,65 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/dev-python/sepolgen/sepolgen-1.1.5-r3.ebuild,v 1.1 2012/07/10 19:59:29 swift Exp $
+
+EAPI="3"
+PYTHON_DEPEND="*"
+SUPPORT_PYTHON_ABIS="1"
+RESTRICT_PYTHON_ABIS="*-jython *-pypy-*"
+
+inherit python eutils
+
+DESCRIPTION="SELinux policy generation library"
+HOMEPAGE="http://userspace.selinuxproject.org"
+SRC_URI="http://userspace.selinuxproject.org/releases/20120924/${P}.tar.gz
+	http://dev.gentoo.org/~swift/patches/sepolgen/patchbundle-sepolgen-1.1.8-r0.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE=""
+
+DEPEND=">=sys-libs/libselinux-2.0[python]
+		app-admin/setools[python]"
+RDEPEND="${DEPEND}"
+
+src_prepare() {
+	# fix up default paths to not be RH specific
+	sed -i -e 's:/usr/share/selinux/devel:/usr/share/selinux/strict:' \
+		"${S}/src/sepolgen/defaults.py" || die
+	sed -i -e 's:/usr/share/selinux/devel:/usr/share/selinux/strict/include:' \
+		"${S}/src/sepolgen/module.py" || die
+
+	EPATCH_MULTI_MSG="Applying sepolgen patches ... " \
+	EPATCH_SUFFIX="patch" \
+	EPATCH_SOURCE="${WORKDIR}/gentoo-patches" \
+	EPATCH_FORCE="yes" \
+	epatch
+}
+
+src_compile() {
+	:
+}
+
+src_test() {
+	if has_version sec-policy/selinux-base-policy; then
+		python_src_test
+	else
+		ewarn "Sepolgen requires sec-policy/selinux-base-policy to run tests."
+	fi
+}
+
+src_install() {
+	installation() {
+		emake DESTDIR="${D}" PYTHONLIBDIR="$(python_get_sitedir)" install
+	}
+	python_execute_function installation
+}
+
+pkg_postinst() {
+	python_mod_optimize sepolgen
+}
+
+pkg_postrm() {
+	python_mod_cleanup sepolgen
+}

diff --git a/sys-apps/checkpolicy/ChangeLog b/sys-apps/checkpolicy/ChangeLog
new file mode 100644
index 0000000..f68f08d
--- /dev/null
+++ b/sys-apps/checkpolicy/ChangeLog
@@ -0,0 +1,289 @@
+# ChangeLog for sys-apps/checkpolicy
+# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/checkpolicy/ChangeLog,v 1.66 2012/05/13 13:05:19 swift Exp $
+
+  13 May 2012; <swift@g.o> -checkpolicy-2.1.0.ebuild:
+  Removing obsoleted ebuild
+
+  29 Apr 2012; <swift@g.o> checkpolicy-2.1.8.ebuild:
+  Stabilization
+
+*checkpolicy-2.1.8 (31 Mar 2012)
+
+  31 Mar 2012; <swift@g.o> +checkpolicy-2.1.8.ebuild:
+  Bump to version 2.1.8
+
+  12 Nov 2011; <swift@g.o> -checkpolicy-2.0.21.ebuild,
+  -checkpolicy-2.0.23.ebuild:
+  Removing obsoleted ebuilds
+
+  23 Oct 2011; <swift@g.o> checkpolicy-2.1.0.ebuild:
+  Stabilization (tracker #384231)
+
+  12 Aug 2011; Anthony G. Basile <blueness@g.o>
+  -checkpolicy-2.0.16.ebuild, -checkpolicy-2.0.19.ebuild:
+  Removed deprecated versions
+
+*checkpolicy-2.1.0 (03 Aug 2011)
+
+  03 Aug 2011; Anthony G. Basile <blueness@g.o>
+  +checkpolicy-2.1.0.ebuild:
+  Bump to 20110727 SELinux userspace
+
+*checkpolicy-2.0.23 (15 Jul 2011)
+
+  15 Jul 2011; Anthony G. Basile <blueness@g.o>
+  +checkpolicy-2.0.23.ebuild:
+  Bump to 2.0.23 - proxy for SwifT
+
+  08 Jul 2011; Samuli Suominen <ssuominen@g.o>
+  checkpolicy-2.0.16.ebuild, checkpolicy-2.0.19.ebuild:
+  Convert from "useq" to "use".
+
+  28 May 2011; Anthony G. Basile <blueness@g.o>
+  checkpolicy-2.0.19.ebuild:
+  Fixed minor syntax
+
+  28 May 2011; Anthony G. Basile <blueness@g.o>
+  checkpolicy-2.0.21.ebuild:
+  Stable amd64 x86
+
+  13 Feb 2011; Anthony G. Basile <blueness@g.o> metadata.xml:
+  Updated metadata.xml to reflect new selinux herd.
+
+  08 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  checkpolicy-2.0.21.ebuild:
+  Respect CC.
+
+*checkpolicy-2.0.21 (05 Feb 2011)
+
+  05 Feb 2011; Anthony G. Basile <blueness@g.o>
+  +checkpolicy-2.0.21.ebuild:
+  New upstream release.
+
+*checkpolicy-2.0.19 (02 Aug 2009)
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-2.0.19.ebuild:
+  New upstream release.
+
+  22 Jul 2009; Chris PeBenito <pebenito@g.o>
+  -checkpolicy-1.34.4.ebuild, checkpolicy-2.0.16.ebuild:
+  Mark stable. Remove old ebuilds.
+
+*checkpolicy-2.0.16 (03 Oct 2008)
+
+  03 Oct 2008; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-2.0.16.ebuild:
+  Initial commit of checkpolicy 2.0.
+
+  10 Sep 2008; Chris PeBenito <pebenito@g.o>
+  checkpolicy-1.34.4.ebuild:
+  Remove rdep on flex and bison as they are build tools.
+
+  26 May 2008; Chris PeBenito <pebenito@g.o>
+  checkpolicy-1.34.4.ebuild:
+  Fix libsemanage dependency.
+
+  13 May 2008; Chris PeBenito <pebenito@g.o>
+  -files/checkpolicy-1.30.1.diff, -checkpolicy-1.28.ebuild,
+  -checkpolicy-1.30-r1.ebuild, -checkpolicy-1.34.0.ebuild,
+  -checkpolicy-1.34.3.ebuild, checkpolicy-1.34.4.ebuild:
+  Mark 1.34.4 stable, clear old ebuilds.
+
+*checkpolicy-1.34.4 (29 Jan 2008)
+
+  29 Jan 2008; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-1.34.4.ebuild:
+  New upstream bugfix release.
+
+*checkpolicy-1.34.3 (18 Oct 2007)
+
+  18 Oct 2007; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-1.34.3.ebuild:
+  New upstream release.
+
+  04 Jun 2007; Chris PeBenito <pebenito@g.o>
+  checkpolicy-1.34.0.ebuild:
+  Mark stable.
+
+*checkpolicy-1.34.0 (15 Feb 2007)
+
+  15 Feb 2007; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-1.34.0.ebuild:
+  New upstream release.
+
+*checkpolicy-1.30.12 (05 Oct 2006)
+
+  05 Oct 2006; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-1.30.12.ebuild:
+  Add SVN snapshot.
+
+  31 Jul 2006; Chris PeBenito <pebenito@g.o>
+  checkpolicy-1.30-r1.ebuild:
+  Mark stable, long overdue.
+
+*checkpolicy-1.30-r1 (24 Mar 2006)
+
+  24 Mar 2006; Chris PeBenito <pebenito@g.o>
+  +files/checkpolicy-1.30.1.diff, -checkpolicy-1.30.ebuild,
+  +checkpolicy-1.30-r1.ebuild:
+  Upstream bugfix for require blocks in base module.
+
+*checkpolicy-1.30 (18 Mar 2006)
+
+  18 Mar 2006; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-1.30.ebuild:
+  New upstream release.
+
+  22 Feb 2006; Stephen Bennett <spb@g.o> checkpolicy-1.28.ebuild:
+  Alpha stable
+
+  19 Feb 2006; Joshua Kinard <kumba@g.o> checkpolicy-1.28.ebuild:
+  Marked stable on mips.
+
+  17 Jan 2006; Chris PeBenito <pebenito@g.o> checkpolicy-1.28.ebuild:
+  Mark stable, x86, amd64, ppc, sparc.
+
+  14 Jan 2006; Stephen Bennett <spb@g.o> checkpolicy-1.28.ebuild:
+  Added ~alpha
+
+  15 Dec 2005; Chris PeBenito <pebenito@g.o> checkpolicy-1.24.ebuild,
+  checkpolicy-1.28.ebuild:
+  Tighten up versioning to try to prevent mismatch problems as seen in #112348.
+
+*checkpolicy-1.28 (09 Dec 2005)
+
+  09 Dec 2005; Chris PeBenito <pebenito@g.o>
+  -checkpolicy-1.22.ebuild, +checkpolicy-1.28.ebuild:
+  New upstream release.
+
+  09 Sep 2005; Chris PeBenito <pebenito@g.o> checkpolicy-1.24.ebuild:
+  Mark stable.
+
+*checkpolicy-1.24 (25 Jun 2005)
+
+  25 Jun 2005; Chris PeBenito <pebenito@g.o>
+  -checkpolicy-1.20.ebuild, +checkpolicy-1.24.ebuild:
+  New upstream release.
+
+  10 May 2005; Stephen Bennett <spb@g.o> checkpolicy-1.22.ebuild:
+  mips stable
+
+  01 May 2005; Stephen Bennett <spb@g.o> checkpolicy-1.22.ebuild:
+  Added ~mips.
+
+  01 May 2005; Chris PeBenito <pebenito@g.o> checkpolicy-1.22.ebuild:
+  Mark stable.
+
+*checkpolicy-1.22 (13 Mar 2005)
+
+  13 Mar 2005; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-1.22.ebuild:
+  New upstream release.
+
+  13 Feb 2005; Chris PeBenito <pebenito@g.o> checkpolicy-1.20.ebuild:
+  Mark stable.
+
+*checkpolicy-1.20 (07 Jan 2005)
+
+  07 Jan 2005; Chris PeBenito <pebenito@g.o> checkpolicy-1.18.ebuild,
+  +checkpolicy-1.20.ebuild:
+  New upstream release.  Mark 1.18 stable.
+
+*checkpolicy-1.18 (14 Nov 2004)
+
+  14 Nov 2004; Chris PeBenito <pebenito@g.o>
+  +checkpolicy-1.18.ebuild:
+  New upstream release.
+
+  15 Sep 2004; Chris PeBenito <pebenito@g.o> checkpolicy-1.16.ebuild:
+  Fix Makefile for multiple compile jobs.
+
+*checkpolicy-1.16 (07 Sep 2004)
+
+  07 Sep 2004; Chris PeBenito <pebenito@g.o> +checkpolicy-1.16.ebuild:
+  New upstream release.
+
+*checkpolicy-1.14 (02 Jul 2004)
+
+  02 Jul 2004; Chris PeBenito <pebenito@g.o> +checkpolicy-1.14.ebuild:
+  New upstream version.  This compiles policy versions 15 to 18.
+
+  27 Apr 2004; Chris PeBenito <pebenito@g.o> checkpolicy-1.10.ebuild:
+  Make it listen to LDFLAGS.
+
+*checkpolicy-1.10 (18 Apr 2004)
+
+  18 Apr 2004; Chris PeBenito <pebenito@g.o> +checkpolicy-1.10.ebuild:
+  New upstream version.
+
+  08 Apr 2004; Chris PeBenito <pebenito@g.o> checkpolicy-1.8.ebuild:
+  Mark stable for 2004.1
+
+*checkpolicy-1.8 (12 Mar 2004)
+
+  12 Mar 2004; Chris PeBenito <pebenito@g.o> checkpolicy-1.8.ebuild:
+  New upstream release.
+
+*checkpolicy-1.6 (24 Feb 2004)
+
+  24 Feb 2004; Chris PeBenito <pebenito@g.o> checkpolicy-1.6.ebuild:
+  New upstream release.
+
+  26 Jan 2004; Chris PeBenito <pebenito@g.o> checkpolicy-1.4-r1.ebuild:
+  Mark stable.
+
+*checkpolicy-1.4-r1 (17 Jan 2004)
+
+  17 Jan 2004; Chris PeBenito <pebenito@g.o> checkpolicy-1.4-r1.ebuild,
+  files/checkpolicy-1.4-negset.diff:
+  Add patch to exclude types in TE rules.
+
+  16 Dec 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.4.ebuild:
+  Mark stable.
+
+*checkpolicy-1.4 (06 Dec 2003)
+
+  06 Dec 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.4.ebuild:
+  New upstream version.
+
+  29 Oct 2003; Joshua Brindle <method@g.o> checkpolicy-1.2.ebuild:
+  added sparc
+
+  07 Oct 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.2.ebuild:
+  Mark stable.
+
+*checkpolicy-1.2 (03 Oct 2003)
+
+  03 Oct 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.2.ebuild,
+  files/checkpolicy-1.2-gentoo.diff:
+  New upstream version.
+
+  22 Sep 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.1.ebuild:
+  Add selinux-base-policy dependancy.
+
+  22 Sep 2003; <paul@g.o> metadata.xml:
+  Fix metadata.xml
+
+  24 Aug 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.0-r1.ebuild,
+  checkpolicy-1.1.ebuild, files/checkpolicy-little_endian.diff:
+  Mark stable
+
+*checkpolicy-1.1 (14 Aug 2003)
+
+  14 Aug 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.1.ebuild:
+  New upstream version
+
+*checkpolicy-1.0-r1 (13 Aug 2003)
+
+  13 Aug 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.0-r1.ebuild,
+  checkpolicy-1.0.ebuild, files/checkpolicy-little_endian.diff:
+  Add endian-ness fix
+
+*checkpolicy-1.0 (03 Aug 2003)
+
+  03 Aug 2003; Chris PeBenito <pebenito@g.o> checkpolicy-1.0.ebuild,
+  metadata.xml, files/checkpolicy-1.0-gentoo.diff:
+  Initial commit
+

diff --git a/sys-apps/checkpolicy/checkpolicy-2.1.11.ebuild b/sys-apps/checkpolicy/checkpolicy-2.1.11.ebuild
new file mode 100644
index 0000000..3f41465
--- /dev/null
+++ b/sys-apps/checkpolicy/checkpolicy-2.1.11.ebuild
@@ -0,0 +1,41 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/checkpolicy/checkpolicy-2.1.8.ebuild,v 1.2 2012/04/29 10:08:55 swift Exp $
+
+inherit toolchain-funcs
+
+SEPOL_VER="2.1.8"
+SEMNG_VER="2.1.9"
+
+DESCRIPTION="SELinux policy compiler"
+HOMEPAGE="http://userspace.selinuxproject.org"
+SRC_URI="http://userspace.selinuxproject.org/releases/20120924/${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="debug"
+
+DEPEND=">=sys-libs/libsepol-${SEPOL_VER}
+	>=sys-libs/libsemanage-${SEMNG_VER}
+	sys-devel/flex
+	sys-devel/bison"
+
+RDEPEND=">=sys-libs/libsemanage-${SEMNG_VER}"
+
+src_compile() {
+	emake CC="$(tc-getCC)" YACC="bison -y" || die
+}
+
+src_install() {
+	emake DESTDIR="${D}" install || die
+
+	if use debug; then
+		dobin "${S}/test/dismod"
+		dobin "${S}/test/dispol"
+	fi
+}
+
+pkg_postinst() {
+	einfo "This checkpolicy can compile version `checkpolicy -V |cut -f 1 -d ' '` policy."
+}

diff --git a/sys-apps/checkpolicy/metadata.xml b/sys-apps/checkpolicy/metadata.xml
new file mode 100644
index 0000000..92f48e0
--- /dev/null
+++ b/sys-apps/checkpolicy/metadata.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<herd>selinux</herd>
+	<longdescription>SELinux policy compilier</longdescription>
+</pkgmetadata>

diff --git a/sys-apps/policycoreutils/ChangeLog b/sys-apps/policycoreutils/ChangeLog
new file mode 100644
index 0000000..c2acbad
--- /dev/null
+++ b/sys-apps/policycoreutils/ChangeLog
@@ -0,0 +1,520 @@
+# ChangeLog for sys-apps/policycoreutils
+# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/policycoreutils/ChangeLog,v 1.104 2012/09/08 18:40:59 swift Exp $
+
+*policycoreutils-2.1.10-r5 (08 Sep 2012)
+
+  08 Sep 2012; <swift@g.o> +policycoreutils-2.1.10-r5.ebuild:
+  Fix bug #427596 and #430806
+
+  10 Jul 2012; <swift@g.o> policycoreutils-2.1.10-r3.ebuild:
+  Stabilization, drop libcgroup dependency along the way
+
+*policycoreutils-2.1.10-r4 (10 Jul 2012)
+
+  10 Jul 2012; <swift@g.o> +policycoreutils-2.1.10-r4.ebuild:
+  Support refpolicy style audit2allow (#417199)
+
+  26 Jun 2012; Mike Gilbert <floppym@g.o>
+  policycoreutils-2.1.10-r1.ebuild, policycoreutils-2.1.10-r3.ebuild,
+  policycoreutils-2.1.10.ebuild:
+  Restrict pypy per Arfrever.
+
+*policycoreutils-2.1.10-r3 (25 Jun 2012)
+
+  25 Jun 2012; <swift@g.o>
+  +files/policycoreutils-extra-1.21-fix-python3.patch,
+  +policycoreutils-2.1.10-r3.ebuild:
+  Improve support for python3, fixes bug #416301
+
+  13 May 2012; <swift@g.o> -policycoreutils-2.1.0-r1.ebuild,
+  -policycoreutils-2.1.0-r2.ebuild:
+  Removing obsoleted ebuilds
+
+*policycoreutils-2.1.10-r1 (29 Apr 2012)
+
+  29 Apr 2012; <swift@g.o> policycoreutils-2.1.10.ebuild,
+  +policycoreutils-2.1.10-r1.ebuild:
+  Remove dependency on libcgroup (but drop sesandbox support along the way)
+
+  29 Apr 2012; <swift@g.o> policycoreutils-2.1.10.ebuild:
+  Stabilization
+
+*policycoreutils-2.1.10 (31 Mar 2012)
+
+  31 Mar 2012; <swift@g.o> +policycoreutils-2.1.10.ebuild, metadata.xml:
+  Bump to version 2.1.10
+
+  26 Feb 2012; <swift@g.o> policycoreutils-2.1.0-r2.ebuild:
+  Stabilization
+
+  14 Jan 2012; <swift@g.o> +policycoreutils-2.1.0-r2.ebuild,
+  metadata.xml:
+  Mark audit as a local USE flag
+
+*policycoreutils-2.1.0-r2 (14 Jan 2012)
+
+  14 Jan 2012; <swift@g.o> +policycoreutils-2.1.0-r2.ebuild:
+  Override auto-detection of pam and audit, use USE flags for this
+
+  12 Nov 2011; <swift@g.o> -policycoreutils-2.0.82.ebuild,
+  -policycoreutils-2.0.82-r1.ebuild, -policycoreutils-2.0.85.ebuild,
+  -policycoreutils-2.1.0.ebuild:
+  removing obsoleted ebuilds
+
+  23 Oct 2011; <swift@g.o> policycoreutils-2.1.0-r1.ebuild:
+  Stabilization (tracker #384231)
+
+  23 Oct 2011; <swift@g.o> policycoreutils-2.0.82-r1.ebuild:
+  Stabilize 2.0.82-r1 to fix #372807
+
+*policycoreutils-2.1.0-r1 (17 Sep 2011)
+
+  17 Sep 2011; <swift@g.o> +policycoreutils-2.1.0-r1.ebuild:
+  Add /var/lib/selinux directory, needed for 'semodule permissive' support (bug
+  #381755)
+
+  02 Sep 2011; <swift@g.o> policycoreutils-2.0.85.ebuild,
+  policycoreutils-2.1.0.ebuild:
+  Update patch locations to dev.g.o instead of files/ folder
+
+  12 Aug 2011; Anthony G. Basile <blueness@g.o>
+  -policycoreutils-2.0.55.ebuild, -policycoreutils-2.0.69.ebuild,
+  -policycoreutils-2.0.69-r1.ebuild, -policycoreutils-2.0.69-r2.ebuild,
+  -files/policycoreutils-2.0.69-setfiles.diff:
+  Removed deprecated versions
+
+*policycoreutils-2.1.0 (03 Aug 2011)
+
+  03 Aug 2011; Anthony G. Basile <blueness@g.o>
+  +policycoreutils-2.1.0.ebuild:
+  Bump to 20110727 SELinux userspace release
+
+*policycoreutils-2.0.85 (15 Jul 2011)
+
+  15 Jul 2011; Anthony G. Basile <blueness@g.o>
+  +policycoreutils-2.0.85.ebuild,
+  +files/policycoreutils-2.0.85-fix-seunshare-vuln.patch.gz,
+  +files/policycoreutils-2.0.85-sesandbox.patch.gz:
+  Add fix for bug #374897 and initial support for python3
+
+  08 Jul 2011; Samuli Suominen <ssuominen@g.o>
+  policycoreutils-2.0.55.ebuild, policycoreutils-2.0.69.ebuild,
+  policycoreutils-2.0.69-r1.ebuild, policycoreutils-2.0.69-r2.ebuild:
+  Convert from "useq" to "use".
+
+*policycoreutils-2.0.82-r1 (30 Jun 2011)
+
+  30 Jun 2011; Anthony G. Basile <blueness@g.o>
+  +policycoreutils-2.0.82-r1.ebuild:
+  Overwrite invalid .po files with valid ones, fixes bug #372807
+
+  16 Jun 2011; Anthony G. Basile <blueness@g.o>
+  policycoreutils-2.0.82.ebuild:
+  Drop use_nls dependency on gettext. Its mandatory. See bug #299681.
+  Also put gettext in COMMON_DEPS, it is more than a RDEPEND.
+
+  28 May 2011; Anthony G. Basile <blueness@g.o>
+  policycoreutils-2.0.82.ebuild:
+  Stable amd64 x86
+
+  16 Apr 2011; Anthony G. Basile <blueness@g.o> metadata.xml:
+  Updated metadata info.
+
+  08 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  policycoreutils-2.0.82.ebuild:
+  Set SUPPORT_PYTHON_ABIS (bug #353762). Fix dependencies. Fix installation
+  with FEATURES="multilib-strict".
+
+*policycoreutils-2.0.82 (05 Feb 2011)
+
+  05 Feb 2011; Anthony G. Basile <blueness@g.o>
+  +policycoreutils-2.0.82.ebuild:
+  New upstream release.
+
+*policycoreutils-2.0.69-r2 (05 Feb 2011)
+
+  05 Feb 2011; Anthony G. Basile <blueness@g.o>
+  +policycoreutils-2.0.69-r2.ebuild,
+  +files/policycoreutils-2.0.69-setfiles.diff:
+  Fixed bug #300613
+
+  04 Apr 2010; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  policycoreutils-2.0.55.ebuild, policycoreutils-2.0.69.ebuild,
+  policycoreutils-2.0.69-r1.ebuild:
+  Delete calls to deprecated python_version().
+
+*policycoreutils-2.0.69-r1 (20 Sep 2009)
+
+  20 Sep 2009; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-2.0.69-r1.ebuild:
+  Update rlpkg for ext4 and btrfs.
+
+  14 Sep 2009; Chris PeBenito <pebenito@g.o>
+  policycoreutils-2.0.69.ebuild:
+  Fix libsemanage DEP.
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o>
+  policycoreutils-2.0.55.ebuild, policycoreutils-2.0.69.ebuild:
+  Add python_need_rebuild.
+
+*policycoreutils-2.0.69 (02 Aug 2009)
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-2.0.69.ebuild:
+  New upstream release.
+
+  18 Jul 2009; Chris PeBenito <pebenito@g.o>
+  -policycoreutils-1.34.15.ebuild, policycoreutils-2.0.55.ebuild:
+  Mark stable. Remove old ebuilds.
+
+*policycoreutils-2.0.55 (03 Oct 2008)
+
+  03 Oct 2008; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-2.0.55.ebuild:
+  Initial commit of policycoreutils 2.0.
+
+  29 May 2008; Ali Polatel <hawking@g.o>
+  policycoreutils-1.34.15.ebuild:
+  python_mod_optimize is ROOT aware. Fixed python_mod_cleanup.
+
+  26 May 2008; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.34.15.ebuild:
+  Fix libsemanage dependency.
+
+  13 May 2008; Chris PeBenito <pebenito@g.o>
+  -files/policycoreutils-1.28-quietlp.diff,
+  -files/policycoreutils-1.32-quietlp.diff,
+  -files/policycoreutils-unsigned-char-ppc.diff,
+  -policycoreutils-1.28.ebuild, -policycoreutils-1.30-r1.ebuild,
+  -policycoreutils-1.34.1.ebuild, -policycoreutils-1.34.11.ebuild,
+  policycoreutils-1.34.15.ebuild:
+  Mark 1.34.15 stable, clear old ebuilds.
+
+*policycoreutils-1.34.15 (29 Jan 2008)
+
+  29 Jan 2008; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.34.15.ebuild:
+  New upstream bugfix release.
+
+  19 Oct 2007; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.34.11.ebuild:
+  Fix quoting in unpack.
+
+*policycoreutils-1.34.11 (18 Oct 2007)
+
+  18 Oct 2007; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.34.11.ebuild:
+  New upstream release.
+
+  04 Jun 2007; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.34.1.ebuild:
+  Mark stable.
+
+*policycoreutils-1.34.1 (15 Feb 2007)
+
+  15 Feb 2007; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.34.1.ebuild:
+  New upstream release.
+
+  24 Oct 2006; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.30.30.ebuild:
+  Fix glibc handling.
+
+  09 Oct 2006; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.30.30.ebuild:
+  Stable to make repoman happy.
+
+*policycoreutils-1.30.30 (05 Oct 2006)
+
+  05 Oct 2006; Chris PeBenito <pebenito@g.o>
+  +files/policycoreutils-1.32-quietlp.diff, +policycoreutils-1.30.30.ebuild:
+  Add SVN snapshot and updated extras in preparation for reference policy.
+
+  31 Jul 2006; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.30-r1.ebuild:
+  Mark stable, long overdue.
+
+*policycoreutils-1.30-r1 (28 Mar 2006)
+
+  28 Mar 2006; Chris PeBenito <pebenito@g.o>
+  -policycoreutils-1.30.ebuild, +policycoreutils-1.30-r1.ebuild:
+  Fix install location of python site packages.
+
+  22 Feb 2006; Stephen Bennett <spb@g.o> policycoreutils-1.28.ebuild:
+  Alpha stable
+
+  19 Feb 2006; Joshua Kinard <kumba@g.o> policycoreutils-1.28.ebuild:
+  Marked stable on mips.
+
+*policycoreutils-1.30 (18 Mar 2006)
+
+  18 Mar 2006; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.30.ebuild:
+  New upstream release.
+
+  05 Feb 2006; Chris PeBenito <pebenito@g.o>
+  +files/policycoreutils-unsigned-char-ppc.diff,
+  policycoreutils-1.28.ebuild:
+  Add patch to fix #121689.
+
+  17 Jan 2006; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.28.ebuild:
+  Mark stable, x86, amd64, ppc, sparc.
+
+  14 Jan 2006; Stephen Bennett <spb@g.o> policycoreutils-1.28.ebuild:
+  Added ~alpha
+
+  15 Dec 2005; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.22.ebuild, policycoreutils-1.24-r2.ebuild,
+  policycoreutils-1.28.ebuild:
+  Tighten up versioning to try to prevent mismatch problems as seen in #112348.
+
+*policycoreutils-1.28 (09 Dec 2005)
+
+  09 Dec 2005; Chris PeBenito <pebenito@g.o>
+  +files/policycoreutils-1.28-quietlp.diff, -policycoreutils-1.24-r1.ebuild,
+  +policycoreutils-1.28.ebuild:
+  New upstream release.
+
+*policycoreutils-1.24-r2 (08 Dec 2005)
+
+  08 Dec 2005; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.24-r2.ebuild:
+  Add compatability symlink for genhomedircon.
+
+*policycoreutils-1.24-r1 (09 Sep 2005)
+
+  09 Sep 2005; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.24-r1.ebuild:
+  Update for fixed selinuxconfig source policy path.
+
+  11 Jul 2005; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.22.ebuild, policycoreutils-1.24.ebuild:
+  Fix RDEPEND for building stages.  Libsepol is required now.
+
+*policycoreutils-1.24 (25 Jun 2005)
+
+  25 Jun 2005; Chris PeBenito <pebenito@g.o>
+  +files/policycoreutils-1.24-genhomedircon-quiet.diff,
+  -policycoreutils-1.20-r1.ebuild, +policycoreutils-1.24.ebuild:
+  New upstream release.
+
+  10 May 2005; Stephen Bennett <spb@g.o> policycoreutils-1.22.ebuild:
+  mips stable
+
+  01 May 2005; Stephen Bennett <spb@g.o> policycoreutils-1.22.ebuild:
+  Added ~mips.
+
+  01 May 2005; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.22.ebuild:
+  Mark stable.
+
+*policycoreutils-1.22 (13 Mar 2005)
+
+  13 Mar 2005; Chris PeBenito <pebenito@g.o>
+  +files/policycoreutils-1.22-genhomedircon-quiet.diff,
+  +policycoreutils-1.22.ebuild:
+  New upstream release.
+
+*policycoreutils-1.20-r1 (13 Feb 2005)
+
+  13 Feb 2005; Chris PeBenito <pebenito@g.o>
+  -policycoreutils-1.16.ebuild, +policycoreutils-1.20-r1.ebuild,
+  -policycoreutils-1.20.ebuild:
+  Add back some tools deleted from upstream libselinux.
+
+*policycoreutils-1.20 (07 Jan 2005)
+
+  07 Jan 2005; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.18-r1.ebuild, +policycoreutils-1.20.ebuild:
+  New upstream release. Mark 1.18-r1 stable.
+
+*policycoreutils-1.18-r1 (03 Jan 2005)
+
+  03 Jan 2005; Chris PeBenito <pebenito@g.o>
+  +files/policycoreutils-nonls.diff, +policycoreutils-1.18-r1.ebuild:
+  Make pam and nls optional for embedded systems use.
+
+  22 Nov 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.18.ebuild:
+  Ensure a few dirs and perms during stage1 build.
+
+  15 Nov 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.18.ebuild:
+  Fix libsepol dep.
+
+*policycoreutils-1.18 (14 Nov 2004)
+
+  14 Nov 2004; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.18.ebuild:
+  New upstream release.
+
+*policycoreutils-1.16 (07 Sep 2004)
+
+  07 Sep 2004; Chris PeBenito <pebenito@g.o>
+  +files/policycoreutils-1.16-genhomedircon-compat.diff,
+  +policycoreutils-1.16.ebuild:
+  New upstream release.
+
+  08 Aug 2004; Tom Martin <slarti@g.o> policycoreutils-1.12-r1.ebuild,
+  policycoreutils-1.12-r2.ebuild, policycoreutils-1.14.ebuild,
+  policycoreutils-1.4-r1.ebuild:
+  Typo in DESCRIPTION: utilites -> utilities. Bug 59717.
+
+  06 Jul 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.14.ebuild:
+  Bump extras to fix free() bug in runscript_selinux.so.
+
+*policycoreutils-1.12-r2 (06 Jul 2004)
+
+  06 Jul 2004; Chris PeBenito <pebenito@g.o>
+  +files/runscript-selinux.diff, +policycoreutils-1.12-r2.ebuild:
+  Fix free() error in runscript_selinux.so.
+
+  03 Jul 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.14.ebuild:
+  Update extras.
+
+*policycoreutils-1.14 (02 Jul 2004)
+
+  02 Jul 2004; Chris PeBenito <pebenito@g.o>
+  +files/policycoreutils-1.14-genhomedircon-compat.diff,
+  +policycoreutils-1.14.ebuild:
+  New upstream version.
+
+*policycoreutils-1.12-r1 (28 Jun 2004)
+
+  28 Jun 2004; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.12-r1.ebuild:
+  Add toggle_bool to extras.
+
+  11 Jun 2004; Chris PeBenito <pebenito@g.o>
+  -policycoreutils-1.10-r1.ebuild, policycoreutils-1.12.ebuild:
+  Mark stable
+
+*policycoreutils-1.12 (14 May 2004)
+
+  14 May 2004; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.12.ebuild:
+  New upstream release.
+
+*policycoreutils-1.10-r1 (28 Apr 2004)
+
+  28 Apr 2004; Chris PeBenito <pebenito@g.o>
+  +policycoreutils-1.10-r1.ebuild, -policycoreutils-1.10.ebuild,
+  -policycoreutils-1.8.ebuild:
+  Update extras and mark stable.
+
+*policycoreutils-1.10 (20 Apr 2004)
+
+  08 Apr 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.4-r1.ebuild, policycoreutils-1.8.ebuild:
+  More specific versioning for libselinux.
+
+  08 Apr 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.8.ebuild:
+  Mark stable for 2004.1
+
+  15 Mar 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.8.ebuild:
+  Update extras.
+
+*policycoreutils-1.8 (12 Mar 2004)
+
+  12 Mar 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.8.ebuild:
+  New upstream release.
+
+*policycoreutils-1.6 (24 Feb 2004)
+
+  24 Feb 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.4-r1.ebuild, policycoreutils-1.6.ebuild:
+  New upstream release.  Mark 1.4-r1 stable.
+
+*policycoreutils-1.4-r1 (09 Feb 2004)
+
+  09 Feb 2004; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.4-r1.ebuild:
+  Move extras to mirrors, and add runscript_selinux.so.
+
+  31 Jan 2004; Chris PeBenito <pebenito@g.o> files/rlpkg:
+  Switch to portageq from inline python.  Add missing quotes for completeness.
+
+  16 Dec 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.4.ebuild:
+  Mark stable.
+
+*policycoreutils-1.4 (06 Dec 2003)
+
+  06 Dec 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.4.ebuild:
+  New upstream version.
+
+*policycoreutils-1.2-r2 (23 Nov 2003)
+
+  23 Nov 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.2-r2.ebuild:
+  Bump to add /sbin/seinit.
+
+  29 Oct 2003; Joshua Brindle <method@g.o>
+  policycoreutils-1.2-r1.ebuild:
+  added sparc
+
+*policycoreutils-1.2-r1 (20 Oct 2003)
+
+  20 Oct 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.2-r1.ebuild:
+  Remove unneeded -lattr linking from Makefiles.
+
+  07 Oct 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.2.ebuild:
+  Mark stable.
+
+*policycoreutils-1.2 (03 Oct 2003)
+
+  03 Oct 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.2.ebuild, files/policycoreutils-1.2-gentoo.diff:
+  New upstream version.
+
+  29 Sep 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.1-r1.ebuild:
+  Add build USE flag; when asserted, only setfiles is built and merged.
+
+  22 Sep 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.1-r1.ebuild:
+  Move selinux-base-policy RDEPEND to checkpolicy. No longer RDEPEND on
+  checkpolicy.
+
+  22 Sep 2003; <paul@g.o> metadata.xml:
+  Fix metadata.xml
+
+  24 Aug 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.1-r1.ebuild, policycoreutils-1.1.ebuild:
+  Mark stable
+
+*policycoreutils-1.1-r1 (18 Aug 2003)
+
+  18 Aug 2003; Chris PeBenito <pebenito@g.o> metadata.xml,
+  policycoreutils-1.0.ebuild, policycoreutils-1.1-r1.ebuild,
+  files/avc_enforcing, files/avc_toggle,
+  files/policycoreutils-1.1-setfiles.diff:
+  Add setfiles patch for alternate root. Add avc_enforcing and avc_toggle
+  scripts for ease of use for old API users. Use package description from RPM
+  spec file in metadata.xml long description.
+
+*policycoreutils-1.1 (14 Aug 2003)
+
+  14 Aug 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.1.ebuild:
+  New upstream version
+
+  10 Aug 2003; Chris PeBenito <pebenito@g.o>
+  policycoreutils-1.0.ebuild, files/rlpkg:
+  Add mkinitrd RDEP, add rlpkg.
+
+*policycoreutils-1.0 (03 Aug 2003)
+
+  03 Aug 2003; Chris PeBenito <pebenito@g.o> metadata.xml,
+  policycoreutils-1.0.ebuild, files/policycoreutils-1.0-gentoo.diff:
+  Initial commit

diff --git a/sys-apps/policycoreutils/files/policycoreutils-extra-1.21-fix-python3.patch b/sys-apps/policycoreutils/files/policycoreutils-extra-1.21-fix-python3.patch
new file mode 100644
index 0000000..66979ab
--- /dev/null
+++ b/sys-apps/policycoreutils/files/policycoreutils-extra-1.21-fix-python3.patch
@@ -0,0 +1,108 @@
+diff -ur policycoreutils-extra.orig/scripts/rlpkg policycoreutils-extra/scripts/rlpkg
+--- policycoreutils-extra.orig/scripts/rlpkg	2012-05-01 16:01:43.321023704 +0200
++++ policycoreutils-extra/scripts/rlpkg	2012-05-01 16:01:53.192023725 +0200
+@@ -86,7 +86,7 @@
+ 		t = portage.db["/"]["vartree"].dbapi.match(search_key)
+ 	# catch the "amgigous package" Exception
+ 	except ValueError as e:
+-		if type(e[0]) == types.ListType:
++		if type(e[0]) == list:
+ 			t = []
+ 			for cp in e[0]:
+ 				t += portage.db["/"]["vartree"].dbapi.match(cp)
+@@ -112,7 +112,7 @@
+ 
+ def find_xattr_mounts():
+ 	"""Find mounted xattr filesystems"""
+-	print("Relabeling filesystem types: "+" ".join(xattrfs))
++	print(("Relabeling filesystem types: "+" ".join(xattrfs)))
+ 	mounts=open("/etc/mtab", "r")
+ 
+ 	fs_matches=[]
+@@ -158,29 +158,29 @@
+ 
+ 		(ret,context) = selinux.getfilecon(filename)
+ 		if ret < 0:
+-			print("Error getting context of "+filename)
++			print(("Error getting context of "+filename))
+ 			continue
+ 
+ 		ctx = string.split(context,":")
+ 
+ 		if len(ctx) < 3:
+-			print("Debug: getfilecon on \""+filename+"\" returned a context of \""+context+"\" which split incorrectly ("+ctx+").")
++			print(("Debug: getfilecon on \""+filename+"\" returned a context of \""+context+"\" which split incorrectly ("+ctx+")."))
+ 			continue
+ 
+ 		if ctx[2] in textrel_ok_relabelfrom:
+ 			if verbose:
+-				print("Relabeling "+filename+" to "+textrel_type+".")
++				print(("Relabeling "+filename+" to "+textrel_type+"."))
+ 			ctx[2] = textrel_type
+ 			if selinux.setfilecon(filename,string.join(ctx,":")) < 0:
+-				print("Failed to relabel "+filename)
++				print(("Failed to relabel "+filename))
+ 		elif ctx[2] == textrel_type:
+ 			if verbose:
+-				print("Skipping "+filename+" because it is already "+textrel_type+".")
++				print(("Skipping "+filename+" because it is already "+textrel_type+"."))
+ 		else:
+-			print("Not relabeling "+filename+" because it is "+ctx[2]+".")
++			print(("Not relabeling "+filename+" because it is "+ctx[2]+"."))
+ 			notok += 1
+ 
+-	print("%(a)d libraries with text relocations, %(b)d not relabeled." % {"a":textrel_libs, "b":notok})
++	print(("%(a)d libraries with text relocations, %(b)d not relabeled." % {"a":textrel_libs, "b":notok}))
+ 
+ 	if notok > 0:
+ 		print("\nSome files were not relabeled!  This is not necessarily bad,")
+@@ -197,10 +197,10 @@
+ 
+ 	textrel_bins = 0
+ 	for line in tb.stdout.readline():
+-		print("PIE executable "+line.split()[1]+" has text relocations!")
++		print(("PIE executable "+line.split()[1]+" has text relocations!"))
+ 		textrel_bins += 1
+ 
+-	print("%d binaries with text relocations detected." % (textrel_bins))
++	print(("%d binaries with text relocations detected." % (textrel_bins)))
+ 
+ 	if textrel_bins > 0:
+ 		print("\nPIE binaries with text relocations have been detected!")
+@@ -234,8 +234,8 @@
+ 	childin = os.popen(string.join(cmdline),'w')
+ 
+ 	for i in pkglist:
+-		print("Relabeling: "+i.get_cpv())
+-		for j in i.get_contents().keys():
++		print(("Relabeling: "+i.get_cpv()))
++		for j in list(i.get_contents().keys()):
+ 			childin.write(j+'\n')
+ 
+ 	rc = childin.close()
+@@ -245,14 +245,14 @@
+ 	if rc == None:
+ 		rc = 0
+ 	else:
+-		print("Error relabeling: %d" % (rc))
++		print(("Error relabeling: %d" % (rc)))
+ 
+ 	return rc
+ 
+ def usage(message=""):
+ 	pgmname = os.path.basename(sys.argv[0])
+ 
+-	print("Usage: %s [OPTIONS] {<pkg1> [<pkg2> ...]}" % (pgmname))
++	print(("Usage: %s [OPTIONS] {<pkg1> [<pkg2> ...]}" % (pgmname)))
+ 	print("\n\
+   -a, --all	 Relabel the entire filesystem instead of individual packages.\n\
+   -r, --reset	 Force reset of context if the file's selinux identity is\n\
+@@ -266,7 +266,7 @@
+ \"policycoreutils\" or \">=sys-apps/policycoreutils-1.30\".\n\
+ ")
+ 	if message != "":
+-		print(pgmname+": "+message)
++		print((pgmname+": "+message))
+ 		sys.exit(1)
+ 	else:
+ 		sys.exit(0)

diff --git a/sys-apps/policycoreutils/metadata.xml b/sys-apps/policycoreutils/metadata.xml
new file mode 100644
index 0000000..e7a78d9
--- /dev/null
+++ b/sys-apps/policycoreutils/metadata.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<herd>selinux</herd>
+	<longdescription>
+		Policycoreutils contains the policy core utilities that are required
+		for basic operation of a SELinux system.  These utilities include
+		load_policy to load policies, setfiles to label filesystems, newrole
+		to switch roles, and run_init to run /etc/init.d scripts in the proper
+		context.
+
+		Gentoo-specific tools include rlpkg for relabeling packages by name,
+		avc_toggle to toggle between enforcing and permissive modes, and
+		avc_enforcing to query the current mode of the system, enforcing or
+		permissive.
+	</longdescription>
+	<use>
+	  <flag name='audit'>Enable support for <pkg>sys-process/audit</pkg> and use the audit_* functions (like audit_getuid instead of getuid())</flag>
+	  <flag name='sesandbox'>Enable support for SELinux sandbox application</flag>
+	</use>
+</pkgmetadata>

diff --git a/sys-apps/policycoreutils/policycoreutils-2.1.13.ebuild b/sys-apps/policycoreutils/policycoreutils-2.1.13.ebuild
new file mode 100644
index 0000000..1a8a50f
--- /dev/null
+++ b/sys-apps/policycoreutils/policycoreutils-2.1.13.ebuild
@@ -0,0 +1,138 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/policycoreutils/policycoreutils-2.1.10-r5.ebuild,v 1.1 2012/09/08 18:40:59 swift Exp $
+
+EAPI="4"
+PYTHON_DEPEND="*"
+PYTHON_USE_WITH="xml"
+SUPPORT_PYTHON_ABIS="1"
+RESTRICT_PYTHON_ABIS="*-jython *-pypy-*"
+
+inherit multilib python toolchain-funcs eutils
+
+EXTRAS_VER="1.22"
+SEMNG_VER="2.1.9"
+SELNX_VER="2.1.12"
+SEPOL_VER="2.1.8"
+
+IUSE="audit pam dbus sesandbox"
+
+DESCRIPTION="SELinux core utilities"
+HOMEPAGE="http://userspace.selinuxproject.org"
+SRC_URI="http://userspace.selinuxproject.org/releases/20120924/${P}.tar.gz
+	http://dev.gentoo.org/~swift/patches/policycoreutils/patchbundle-${P}-gentoo-r1.tar.gz
+	mirror://gentoo/policycoreutils-extra-${EXTRAS_VER}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+
+COMMON_DEPS=">=sys-libs/libselinux-${SELNX_VER}[python]
+	>=sys-libs/glibc-2.4
+	>=sys-libs/libcap-1.10-r10
+	>=sys-libs/libsemanage-${SEMNG_VER}[python]
+	sys-libs/libcap-ng
+	>=sys-libs/libsepol-${SEPOL_VER}
+	sys-devel/gettext
+	dev-python/ipy
+	sesandbox? ( dev-libs/libcgroup )
+	dbus? (
+		sys-apps/dbus
+		dev-libs/dbus-glib
+	)
+	audit? ( >=sys-process/audit-1.5.1 )
+	pam? ( sys-libs/pam )"
+
+### libcgroup -> seunshare
+### dbus -> restorecond
+
+# pax-utils for scanelf used by rlpkg
+RDEPEND="${COMMON_DEPS}
+	dev-python/sepolgen
+	app-misc/pax-utils"
+
+DEPEND="${COMMON_DEPS}"
+
+S2=${WORKDIR}/policycoreutils-extra
+
+src_prepare() {
+	# rlpkg is more useful than fixfiles
+	sed -i -e '/^all/s/fixfiles//' "${S}/scripts/Makefile" \
+		|| die "fixfiles sed 1 failed"
+	sed -i -e '/fixfiles/d' "${S}/scripts/Makefile" \
+		|| die "fixfiles sed 2 failed"
+
+	EPATCH_MULTI_MSG="Applying policycoreutils patches ... " \
+	EPATCH_SUFFIX="patch" \
+	EPATCH_SOURCE="${WORKDIR}/gentoo-patches" \
+	EPATCH_FORCE="yes" \
+	epatch
+
+	# Overwrite gl.po, id.po and et.po with valid PO file
+	cp "${S}/po/sq.po" "${S}/po/gl.po" || die "failed to copy ${S}/po/sq.po to gl.po"
+	cp "${S}/po/sq.po" "${S}/po/id.po" || die "failed to copy ${S}/po/sq.po to id.po"
+	cp "${S}/po/sq.po" "${S}/po/et.po" || die "failed to copy ${S}/po/sq.po to et.po"
+}
+
+src_compile() {
+	local use_audit="n";
+	local use_pam="n";
+	local use_dbus="n";
+	local use_sesandbox="n";
+
+	use audit && use_audit="y";
+	use pam && use_pam="y";
+	use dbus && use_dbus="y";
+	use sesandbox && use_sesandbox="y";
+
+	python_copy_sources semanage sandbox
+	building() {
+		einfo "Compiling policycoreutils"
+		emake -C "${S}" AUDIT_LOG_PRIVS="y" AUDITH="${use_audit}" PAMH="${use_pam}" INOTIFYH="${use_dbus}" SESANDBOX="${use_sesandbox}" CC="$(tc-getCC)" PYLIBVER="python$(python_get_version)" || die
+		einfo "Compiling policycoreutils-extra "
+		emake -C "${S2}" AUDIT_LOG_PRIVS="y" AUDITH="${use_audit}" PAMH="${use_pam}" INOTIFYH="${use_dbus}" SESANDBOX="${use_sesandbox}" CC="$(tc-getCC)" PYLIBVER="python$(python_get_version)" || die
+	}
+	python_execute_function -s --source-dir semanage building
+}
+
+src_install() {
+	local use_audit="n";
+	local use_pam="n";
+	local use_dbus="n";
+	local use_sesandbox="n";
+
+	use audit && use_audit="y";
+	use pam && use_pam="y";
+	use dbus && use_dbus="y";
+	use sesandbox && use_sesandbox="y";
+
+	# Python scripts are present in many places. There are no extension modules.
+	installation() {
+		einfo "Installing policycoreutils"
+		emake -C "${S}" DESTDIR="${T}/images/${PYTHON_ABI}" AUDITH="${use_audit}" PAMH="${use_pam}" INOTIFYH="${use_dbus}" SESANDBOX="${use_sesandbox}" AUDIT_LOG_PRIV="y" PYLIBVER="python$(python_get_version)" install || return 1
+
+		einfo "Installing policycoreutils-extra"
+		emake -C "${S2}" DESTDIR="${T}/images/${PYTHON_ABI}" SHLIBDIR="${D}$(get_libdir)/rc" install || return 1
+	}
+	python_execute_function installation
+	python_merge_intermediate_installation_images "${T}/images"
+
+	# remove redhat-style init script
+	rm -fR "${D}/etc/rc.d"
+
+	# compatibility symlinks
+	dosym /sbin/setfiles /usr/sbin/setfiles
+	dosym /$(get_libdir)/rc/runscript_selinux.so /$(get_libdir)/rcscripts/runscript_selinux.so
+
+	# location for permissive definitions
+	dodir /var/lib/selinux
+	keepdir /var/lib/selinux
+}
+
+pkg_postinst() {
+	python_mod_optimize seobject.py
+}
+
+pkg_postrm() {
+	python_mod_cleanup seobject.py
+}

diff --git a/sys-libs/libselinux/ChangeLog b/sys-libs/libselinux/ChangeLog
new file mode 100644
index 0000000..2fb4d23
--- /dev/null
+++ b/sys-libs/libselinux/ChangeLog
@@ -0,0 +1,371 @@
+# ChangeLog for sys-libs/libselinux
+# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-libs/libselinux/ChangeLog,v 1.84 2012/09/08 18:44:22 swift Exp $
+
+*libselinux-2.1.9-r2 (08 Sep 2012)
+
+  08 Sep 2012; <swift@g.o> +libselinux-2.1.9-r2.ebuild:
+  Fix bugs #429456 and #417303
+
+  06 Aug 2012; Patrick Lauer <patrick@g.o> libselinux-2.1.9-r1.ebuild:
+  Restricting python ABIs that don't work
+
+  10 Jul 2012; <swift@g.o> libselinux-2.1.9-r1.ebuild:
+  Stabilization
+
+  26 Jun 2012; Mike Gilbert <floppym@g.o> libselinux-2.1.9-r1.ebuild,
+  libselinux-2.1.9.ebuild:
+  Restrict pypy per Arfrever.
+
+  13 May 2012; <swift@g.o> -libselinux-2.1.0.ebuild:
+  Removing obsoleted ebuild
+
+*libselinux-2.1.9-r1 (13 May 2012)
+
+  13 May 2012; <swift@g.o> +libselinux-2.1.9-r1.ebuild,
+  +files/libselinux-2.1.9-mountsys.patch:
+  Mount /sys before trying to mount /sys/fs/selinux from within the policy load
+  functions, bug #414779
+
+  29 Apr 2012; <swift@g.o> libselinux-2.1.9.ebuild:
+  Stabilization
+
+*libselinux-2.1.9 (31 Mar 2012)
+
+  31 Mar 2012; <swift@g.o> +libselinux-2.1.9.ebuild:
+  Bump to version 2.1.9
+
+  12 Nov 2011; <swift@g.o> -libselinux-2.0.94.ebuild,
+  -libselinux-2.0.98.ebuild:
+  Remove deprecated ebuilds
+
+  23 Oct 2011; <swift@g.o> libselinux-2.1.0.ebuild:
+  Stabilization (tracker #384231)
+
+  12 Aug 2011; Anthony G. Basile <blueness@g.o>
+  -libselinux-2.0.71.ebuild, -libselinux-2.0.85.ebuild,
+  -files/libselinux-2.0.85-headers.patch, -files/compat.py:
+  Removed deprecated versions
+
+*libselinux-2.1.0 (03 Aug 2011)
+
+  03 Aug 2011; Anthony G. Basile <blueness@g.o>
+  +libselinux-2.1.0.ebuild:
+  Bump to 20110727 SELinux userspace release
+
+*libselinux-2.0.98 (15 Jul 2011)
+
+  15 Jul 2011; Anthony G. Basile <blueness@g.o>
+  +libselinux-2.0.98.ebuild:
+  Bump to 2.0.98 - proxy for SwifT
+
+  28 May 2011; Anthony G. Basile <blueness@g.o>
+  libselinux-2.0.94.ebuild:
+  Stable amd64 x86
+
+  13 Feb 2011; Anthony G. Basile <blueness@g.o> metadata.xml:
+  Updated metadata.xml to reflect new selinux herd.
+
+  06 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  libselinux-2.0.94.ebuild:
+  Add "python" USE flag.
+
+  05 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  libselinux-2.0.94.ebuild:
+  Set SUPPORT_PYTHON_ABIS (bug #353763). Respect AR and CC.
+
+*libselinux-2.0.94 (05 Feb 2011)
+
+  05 Feb 2011; Anthony G. Basile <blueness@g.o>
+  +libselinux-2.0.94.ebuild:
+  New upstream release.
+
+  29 Sep 2010; Mike Frysinger <vapier@g.o> libselinux-2.0.85.ebuild,
+  +files/libselinux-2.0.85-headers.patch:
+  Fix by Chris Richards for building with glibc-2.12 #338302.
+
+  16 Apr 2010; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  libselinux-2.0.71.ebuild, libselinux-2.0.85.ebuild:
+  Delete calls to deprecated python_version().
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o>
+  libselinux-2.0.71.ebuild, libselinux-2.0.85.ebuild:
+  Add python_need_rebuild.
+
+*libselinux-2.0.85 (02 Aug 2009)
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o>
+  +libselinux-2.0.85.ebuild:
+  New upstream release.
+
+  18 Jul 2009; Chris PeBenito <pebenito@g.o>
+  -libselinux-1.34.14.ebuild, libselinux-2.0.71.ebuild:
+  Mark stable. Remove old ebuilds.
+
+*libselinux-2.0.71 (03 Oct 2008)
+
+  03 Oct 2008; Chris PeBenito <pebenito@g.o>
+  +libselinux-2.0.71.ebuild:
+  Initial commit of 2.0 libselinux.
+
+  29 May 2008; Ali Polatel <hawking@g.o> libselinux-1.34.14.ebuild:
+  python_mod_optimize is ROOT aware. Fixed python_mod_cleanup.
+
+  13 May 2008; Chris PeBenito <pebenito@g.o>
+  -libselinux-1.28-r1.ebuild, -libselinux-1.30.ebuild,
+  -libselinux-1.34.0.ebuild, -libselinux-1.34.13.ebuild,
+  libselinux-1.34.14.ebuild:
+  Mark 1.34.14 stable, clear old ebuilds.
+
+  11 May 2008; Chris PeBenito <pebenito@g.o>
+  libselinux-1.34.0.ebuild, libselinux-1.34.13.ebuild,
+  libselinux-1.34.14.ebuild:
+  Fix bug #221501.
+
+*libselinux-1.34.14 (29 Jan 2008)
+
+  29 Jan 2008; Chris PeBenito <pebenito@g.o>
+  +libselinux-1.34.14.ebuild:
+  New upstream bugfix release.
+
+*libselinux-1.34.13 (18 Oct 2007)
+
+  18 Oct 2007; Chris PeBenito <pebenito@g.o>
+  +libselinux-1.34.13.ebuild:
+  New upstream release.
+
+  04 Jun 2007; Chris PeBenito <pebenito@g.o>
+  libselinux-1.34.0.ebuild:
+  Mark stable.
+
+  16 Feb 2007; Stephen Bennett <spb@g.o> libselinux-1.34.0.ebuild:
+  Add missing swig depend. Bug #167007
+
+*libselinux-1.34.0 (15 Feb 2007)
+
+  15 Feb 2007; Chris PeBenito <pebenito@g.o>
+  +libselinux-1.34.0.ebuild:
+  New upstream release.
+
+  23 Oct 2006; Chris PeBenito <pebenito@g.o>
+  libselinux-1.30.29.ebuild:
+  Fix depend for glibc
+
+  09 Oct 2006; Chris PeBenito <pebenito@g.o>
+  libselinux-1.30.29.ebuild:
+  Stable to make repoman happy.
+
+*libselinux-1.30.29 (05 Oct 2006)
+
+  05 Oct 2006; Chris PeBenito <pebenito@g.o>
+  +libselinux-1.30.29.ebuild:
+  Add SVN snapshot.
+
+  31 Jul 2006; Chris PeBenito <pebenito@g.o> libselinux-1.30.ebuild:
+  Mark stable, long overdue.
+
+  07 Apr 2006; Chris PeBenito <pebenito@g.o> libselinux-1.30.ebuild:
+  Split python wrapper compile into a separate emake to ensure the main
+  library is built before trying to build the wrapper. Fixes bug #129074.
+
+  22 Mar 2006; Chris PeBenito <pebenito@g.o> -libselinux-1.24.ebuild,
+  -libselinux-1.28.ebuild, libselinux-1.28-r1.ebuild:
+  Mark 1.28-r1 stable, clean out old ebuilds.
+
+*libselinux-1.30 (18 Mar 2006)
+
+  18 Mar 2006; Chris PeBenito <pebenito@g.o> +libselinux-1.30.ebuild:
+  New upstream release.
+
+  22 Feb 2006; Stephen Bennett <spb@g.o> libselinux-1.28.ebuild:
+  Alpha stable
+
+*libselinux-1.28-r1 (20 Feb 2006)
+
+  20 Feb 2006; Chris PeBenito <pebenito@g.o> +files/compat.py,
+  +libselinux-1.28-r1.ebuild:
+  Add python-selinux compatability aliases to swig wrapper.
+
+  19 Feb 2006; Joshua Kinard <kumba@g.o> libselinux-1.28.ebuild:
+  Marked stable on mips.
+
+  09 Feb 2006; Chris PeBenito <pebenito@g.o> libselinux-1.28.ebuild:
+  Move python_version out of global scope.
+
+  29 Jan 2006; Chris PeBenito <pebenito@g.o> libselinux-1.28.ebuild:
+  Add python version handling to fix #120829, and add -fPIC to LDFLAGS to
+  hopefully fix #119271.
+
+  17 Jan 2006; Chris PeBenito <pebenito@g.o> libselinux-1.28.ebuild:
+  Mark stable, x86, amd64, ppc, sparc.
+
+  14 Jan 2006; Stephen Bennett <spb@g.o> libselinux-1.28.ebuild:
+  Added ~alpha
+
+  15 Dec 2005; Chris PeBenito <pebenito@g.o> libselinux-1.28.ebuild:
+  Tighten up versioning to try to prevent mismatch problems as seen in #112348.
+
+*libselinux-1.28 (09 Dec 2005)
+
+  09 Dec 2005; Chris PeBenito <pebenito@g.o>
+  -files/libselinux-1.22.diff, -libselinux-1.22-r1.ebuild,
+  +libselinux-1.28.ebuild:
+  New upstream release.
+
+  09 Sep 2005; Chris PeBenito <pebenito@g.o> libselinux-1.24.ebuild:
+  Mark stable.
+
+*libselinux-1.24 (25 Jun 2005)
+
+  25 Jun 2005; Chris PeBenito <pebenito@g.o> -libselinux-1.20.ebuild,
+  -libselinux-1.22.ebuild, +libselinux-1.24.ebuild:
+  New upstream release.
+
+  13 May 2005; Chris PeBenito <pebenito@g.o>
+  libselinux-1.22-r1.ebuild:
+  Mark stable.
+
+  10 May 2005; Stephen Bennett <spb@g.o> libselinux-1.22.ebuild:
+  mips stable
+
+*libselinux-1.22-r1 (08 May 2005)
+
+  08 May 2005; Chris PeBenito <pebenito@g.o>
+  +files/libselinux-1.22.diff, +libselinux-1.22-r1.ebuild:
+  A couple fixes, including one for bug #91921.
+
+  01 May 2005; Stephen Bennett <spb@g.o> libselinux-1.22.ebuild:
+  Mark ~mips.
+
+  01 May 2005; Chris PeBenito <pebenito@g.o> libselinux-1.22.ebuild:
+  Mark stable.
+
+*libselinux-1.22 (13 Mar 2005)
+
+  13 Mar 2005; Chris PeBenito <pebenito@g.o> +libselinux-1.22.ebuild:
+  New upstream release.
+
+  13 Feb 2005; Chris PeBenito <pebenito@g.o> libselinux-1.20.ebuild:
+  Mark stable.
+
+*libselinux-1.20 (07 Jan 2005)
+
+  07 Jan 2005; Chris PeBenito <pebenito@g.o> libselinux-1.18.ebuild,
+  +libselinux-1.20.ebuild:
+  New upstream release.  Mark 1.18 stable.
+
+  03 Jan 2005; Chris PeBenito <pebenito@g.o> libselinux-1.16.ebuild,
+  libselinux-1.18.ebuild:
+  Switch to libc virtual for DEP since uclibc now has xattr support.
+
+*libselinux-1.18 (14 Nov 2004)
+
+  14 Nov 2004; Chris PeBenito <pebenito@g.o>
+  +files/selinuxconfig.c.diff, +libselinux-1.18.ebuild:
+  New upstream release.
+
+*libselinux-1.16 (07 Sep 2004)
+
+  07 Sep 2004; Chris PeBenito <pebenito@g.o> +libselinux-1.16.ebuild:
+  New upstream release.
+
+*libselinux-1.14 (02 Jul 2004)
+
+  02 Jul 2004; Chris PeBenito <pebenito@g.o> +libselinux-1.14.ebuild:
+  New upstream version.
+
+  11 Jun 2004; Chris PeBenito <pebenito@g.o> -libselinux-1.10.ebuild,
+  libselinux-1.12.ebuild:
+  Mark stable
+
+*libselinux-1.12 (14 May 2004)
+
+  14 May 2004; Chris PeBenito <pebenito@g.o> +libselinux-1.12.ebuild:
+  New upstream release.
+
+*libselinux-1.10 (17 Apr 2004)
+
+  17 Apr 2004; Chris PeBenito <pebenito@g.o> +libselinux-1.10.ebuild:
+  New upstream version.
+
+  08 Apr 2004; Chris PeBenito <pebenito@g.o> libselinux-1.8.ebuild:
+  Mark stable for 2004.1
+
+*libselinux-1.8 (12 Mar 2004)
+
+  12 Mar 2004; Chris PeBenito <pebenito@g.o> libselinux-1.8.ebuild:
+  New upstream release.
+
+*libselinux-1.6 (24 Feb 2004)
+
+  24 Feb 2004; Chris PeBenito <pebenito@g.o> libselinux-1.6.ebuild:
+  New upstream release.
+
+  16 Dec 2003; Chris PeBenito <pebenito@g.o> libselinux-1.4.ebuild:
+  Mark stable.
+
+*libselinux-1.4 (06 Dec 2003)
+
+  06 Dec 2003; Chris PeBenito <pebenito@g.o> libselinux-1.4.ebuild:
+  New upstream version.
+
+  29 Oct 2003; Joshua Brindle <method@g.o> libselinux-1.2-r2.ebuild:
+  added sparc
+
+*libselinux-1.2-r2 (20 Oct 2003)
+
+  20 Oct 2003; Chris PeBenito <pebenito@g.o> libselinux-1.2-r2.ebuild,
+  files/libselinux-1.2-attr.diff:
+  Compile against sys-apps/attr only if linux-headers are older than 2.4.20.
+
+*libselinux-1.2-r1 (07 Oct 2003)
+
+  07 Oct 2003; Chris PeBenito <pebenito@g.o> libselinux-1.2-r1.ebuild,
+  files/libselinux-1.2-gentoo.diff:
+  Move libraries to /lib, to fix problems with having a separate /usr during
+  booting.
+
+*libselinux-1.2 (03 Oct 2003)
+
+  03 Oct 2003; Chris PeBenito <pebenito@g.o> libselinux-1.2.ebuild,
+  files/libselinux-1.2-const.diff:
+  New upstream version.
+
+  22 Sep 2003; <paul@g.o> metadata.xml:
+  Fix metadata.xml
+
+  21 Aug 2003; Chris PeBenito <pebenito@g.o> libselinux-1.1-r1.ebuild:
+  Add a dep for portage. The newer versions have labelling support for the old
+  API.
+
+  18 Aug 2003; Chris PeBenito <pebenito@g.o> libselinux-1.1-r1.ebuild,
+  metadata.xml:
+  Fix license, this is public-domain, not GPL-2. Use package description in RPM
+  spec file as metadata.xml long description.
+
+  15 Aug 2003; Chris PeBenito <pebenito@g.o> libselinux-1.0.ebuild,
+  libselinux-1.1-r1.ebuild, files/libselinux-1.0-gentoo.diff:
+  Mark stable
+
+*libselinux-1.1-r1 (14 Aug 2003)
+
+  14 Aug 2003; Chris PeBenito <pebenito@g.o> libselinux-1.1-r1.ebuild,
+  libselinux-1.1.ebuild, files/libselinux-1.1-linkfix.diff:
+  Add fix for a random linking problem that causes libselinux to work
+  incorrectly.
+
+*libselinux-1.1 (14 Aug 2003)
+
+  14 Aug 2003; Chris PeBenito <pebenito@g.o> libselinux-1.1.ebuild,
+  files/libselinux-1.1-gentoo.diff:
+  New upstream version
+
+  04 Aug 2003; Chris PeBenito <pebenito@g.o>
+  files/libselinux-1.0-gentoo.diff:
+  Add on a NSA nullbyte patch to the gentoo patch
+
+*libselinux-1.0 (03 Aug 2003)
+
+  03 Aug 2003; Chris PeBenito <pebenito@g.o> libselinux-1.0.ebuild,
+  metadata.xml, files/libselinux-1.0-gentoo.diff:
+  Initial commit

diff --git a/sys-libs/libselinux/files/libselinux-2.1.12-mountsys.patch b/sys-libs/libselinux/files/libselinux-2.1.12-mountsys.patch
new file mode 100644
index 0000000..625ccfb
--- /dev/null
+++ b/sys-libs/libselinux/files/libselinux-2.1.12-mountsys.patch
@@ -0,0 +1,22 @@
+diff -ur libselinux-2.1.12.orig/src/load_policy.c libselinux-2.1.12/src/load_policy.c
+--- libselinux-2.1.12.orig/src/load_policy.c	2012-09-29 09:32:18.374170451 +0200
++++ libselinux-2.1.12/src/load_policy.c	2012-09-29 09:34:05.130172917 +0200
+@@ -370,8 +370,16 @@
+ 	 * mount it if present for use in the calls below.  
+ 	 */
+ 	const char *mntpoint = NULL;
+-	if (mount(SELINUXFS, SELINUXMNT, SELINUXFS, 0, 0) == 0 || errno == EBUSY) {
+-		mntpoint = SELINUXMNT;
++	/* First make sure /sys is mounted */
++	if (mount("sysfs", "/sys", "sysfs", 0, 0) == 0 || errno == EBUSY) {
++		if (mount(SELINUXFS, SELINUXMNT, SELINUXFS, 0, 0) == 0 || errno == EBUSY) {
++			mntpoint = SELINUXMNT;
++		} else {
++			/* check old mountpoint */
++			if (mount(SELINUXFS, OLDSELINUXMNT, SELINUXFS, 0, 0) == 0 || errno == EBUSY) {
++				mntpoint = OLDSELINUXMNT;
++			}
++		}
+ 	} else {
+ 		/* check old mountpoint */
+ 		if (mount(SELINUXFS, OLDSELINUXMNT, SELINUXFS, 0, 0) == 0 || errno == EBUSY) {

diff --git a/sys-libs/libselinux/files/libselinux-2.1.9-mountsys.patch b/sys-libs/libselinux/files/libselinux-2.1.9-mountsys.patch
new file mode 100644
index 0000000..f2a206d
--- /dev/null
+++ b/sys-libs/libselinux/files/libselinux-2.1.9-mountsys.patch
@@ -0,0 +1,22 @@
+diff -ur libselinux-2.1.9.orig/src/load_policy.c libselinux-2.1.9/src/load_policy.c
+--- libselinux-2.1.9.orig/src/load_policy.c	2012-05-05 10:33:06.130719282 +0200
++++ libselinux-2.1.9/src/load_policy.c	2012-05-05 10:43:45.024720646 +0200
+@@ -370,8 +370,16 @@
+ 	 * mount it if present for use in the calls below.  
+ 	 */
+ 	char *mntpoint = NULL;
+-	if (mount(SELINUXFS, SELINUXMNT, SELINUXFS, 0, 0) == 0 || errno == EBUSY) {
+-		mntpoint = SELINUXMNT;
++	/* First make sure /sys is mounted */
++	if (mount("sysfs", "/sys", "sysfs", 0, 0) == 0 || errno == EBUSY) {
++		if (mount(SELINUXFS, SELINUXMNT, SELINUXFS, 0, 0) == 0 || errno == EBUSY) {
++			mntpoint = SELINUXMNT;
++		} else {
++			/* check old mountpoint */
++			if (mount(SELINUXFS, OLDSELINUXMNT, SELINUXFS, 0, 0) == 0 || errno == EBUSY) {
++				mntpoint = OLDSELINUXMNT;
++			}
++		}
+ 	} else {
+ 		/* check old mountpoint */
+ 		if (mount(SELINUXFS, OLDSELINUXMNT, SELINUXFS, 0, 0) == 0 || errno == EBUSY) {

diff --git a/sys-libs/libselinux/libselinux-2.1.12.ebuild b/sys-libs/libselinux/libselinux-2.1.12.ebuild
new file mode 100644
index 0000000..cbb227e
--- /dev/null
+++ b/sys-libs/libselinux/libselinux-2.1.12.ebuild
@@ -0,0 +1,98 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-libs/libselinux/libselinux-2.1.9-r2.ebuild,v 1.1 2012/09/08 18:44:22 swift Exp $
+
+EAPI="4"
+PYTHON_DEPEND="python? *"
+SUPPORT_PYTHON_ABIS="1"
+RESTRICT_PYTHON_ABIS="2.5 *-jython *-pypy-*"
+USE_RUBY="ruby18"
+RUBY_OPTIONAL="yes"
+
+inherit multilib python toolchain-funcs eutils ruby-ng
+
+SEPOL_VER="2.1.8"
+
+DESCRIPTION="SELinux userland library"
+HOMEPAGE="http://userspace.selinuxproject.org"
+SRC_URI="http://userspace.selinuxproject.org/releases/20120924/${P}.tar.gz"
+
+LICENSE="public-domain"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="python ruby"
+
+RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}
+	>=dev-libs/libpcre-8.30-r2
+	ruby? ( $(ruby_implementations_depend) )"
+DEPEND="${RDEPEND}
+	ruby? ( dev-lang/swig )
+	python? ( dev-lang/swig )"
+
+S="${WORKDIR}/${P}"
+
+pkg_setup() {
+	if use python; then
+		python_pkg_setup
+	fi
+
+	if use ruby; then
+		ruby-ng_pkg_setup
+	fi
+}
+
+src_unpack() {
+	default
+}
+
+src_prepare() {
+	# fix up paths for multilib
+	sed -i -e "/^LIBDIR/s/lib/$(get_libdir)/" "${S}/src/Makefile" \
+		|| die "Fix for multilib LIBDIR failed."
+	sed -i -e "/^SHLIBDIR/s/lib/$(get_libdir)/" "${S}/src/Makefile" \
+		|| die "Fix for multilib SHLIBDIR failed."
+	epatch "${FILESDIR}/${P}-mountsys.patch"
+}
+
+src_compile() {
+	emake AR="$(tc-getAR)" CC="$(tc-getCC)" LDFLAGS="-fPIC -lpcre ${LDFLAGS}" all || die
+
+	if use python; then
+		python_copy_sources src
+		building() {
+			emake CC="$(tc-getCC)" PYINC="-I$(python_get_includedir)" PYTHONLIBDIR="$(python_get_library -l)" PYPREFIX="python-$(python_get_version)" LDFLAGS="-fPIC -lpcre ${LDFLAGS}" pywrap
+		}
+		python_execute_function -s --source-dir src building
+	fi
+
+	if use ruby; then
+		emake CC="$(tc-getCC)" rubywrap || die
+	fi
+}
+
+src_install() {
+	emake DESTDIR="${D}" install || die
+
+	if use python; then
+		installation() {
+			emake DESTDIR="${D}" PYLIBVER="python$(python_get_version)" PYPREFIX="python-$(python_get_version)" install-pywrap
+		}
+		python_execute_function -s --source-dir src installation
+	fi
+
+	if use ruby; then
+		emake DESTDIR="${D}" install-rubywrap || die
+	fi
+}
+
+pkg_postinst() {
+	if use python; then
+		python_mod_optimize selinux
+	fi
+}
+
+pkg_postrm() {
+	if use python; then
+		python_mod_cleanup selinux
+	fi
+}

diff --git a/sys-libs/libselinux/metadata.xml b/sys-libs/libselinux/metadata.xml
new file mode 100644
index 0000000..0c7f186
--- /dev/null
+++ b/sys-libs/libselinux/metadata.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<herd>selinux</herd>
+	<longdescription>
+		Libselinux provides an API for SELinux applications to get and set
+		process and file security contexts and to obtain security policy
+		decisions.  Required for any applications that use the SELinux API.
+	</longdescription>
+</pkgmetadata>

diff --git a/sys-libs/libsemanage/ChangeLog b/sys-libs/libsemanage/ChangeLog
new file mode 100644
index 0000000..fd40213
--- /dev/null
+++ b/sys-libs/libsemanage/ChangeLog
@@ -0,0 +1,216 @@
+# ChangeLog for sys-libs/libsemanage
+# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-libs/libsemanage/ChangeLog,v 1.50 2012/06/26 05:04:33 floppym Exp $
+
+  26 Jun 2012; Mike Gilbert <floppym@g.o> libsemanage-2.1.6-r2.ebuild,
+  libsemanage-2.1.6.ebuild:
+  Restrict pypy per Arfrever.
+
+*libsemanage-2.1.6-r2 (25 Jun 2012)
+
+  25 Jun 2012; <swift@g.o> +libsemanage-2.1.6-r2.ebuild:
+  Fix python3 support
+
+  13 May 2012; <swift@g.o> -libsemanage-2.1.0.ebuild:
+  Removing obsoleted ebuild
+
+  29 Apr 2012; <swift@g.o> libsemanage-2.1.6.ebuild:
+  Stabilization
+
+  05 Apr 2012; <swift@g.o> libsemanage-2.1.0.ebuild,
+  libsemanage-2.1.6.ebuild:
+  Depending on swig-2.0.4-r1 to fix build failures as per bug #409959
+
+*libsemanage-2.1.6 (31 Mar 2012)
+
+  31 Mar 2012; <swift@g.o> +libsemanage-2.1.6.ebuild:
+  Bump to version 2.1.6
+
+  12 Nov 2011; <swift@g.o> -libsemanage-2.0.45.ebuild,
+  -libsemanage-2.0.46.ebuild:
+  Remove deprecated ebuilds
+
+  23 Oct 2011; <swift@g.o> libsemanage-2.1.0.ebuild:
+  Stabilization (tracker #384231)
+
+  17 Sep 2011; <swift@g.o> libsemanage-2.0.45.ebuild,
+  libsemanage-2.0.46.ebuild:
+  Adding dependencies on bison and flex as per bug #382583
+
+  17 Sep 2011; <swift@g.o> libsemanage-2.1.0.ebuild:
+  Add dependency for flex and bison
+
+  12 Aug 2011; Anthony G. Basile <blueness@g.o> ChangeLog:
+  Fix failed gpg signing of Manifest
+
+  12 Aug 2011; Anthony G. Basile <blueness@g.o>
+  -libsemanage-2.0.27.ebuild, -libsemanage-2.0.33.ebuild,
+  -libsemanage-2.0.33-r1.ebuild, -files/libsemanage-2.0.33-bzip.diff:
+  Removed deprecated versions
+
+*libsemanage-2.1.0 (03 Aug 2011)
+
+  03 Aug 2011; Anthony G. Basile <blueness@g.o>
+  +libsemanage-2.1.0.ebuild:
+  Bump to 20110727 SELinux userspace release
+
+*libsemanage-2.0.46 (15 Jul 2011)
+
+  15 Jul 2011; Anthony G. Basile <blueness@g.o>
+  +libsemanage-2.0.46.ebuild:
+  Bump to 2.0.46 - proxy for SwifT
+
+  30 Jun 2011; Anthony G. Basile <blueness@g.o>
+  libsemanage-2.0.45.ebuild:
+  Only build libsemanage for python-2, fixes bug #369089
+
+  28 May 2011; Anthony G. Basile <blueness@g.o>
+  libsemanage-2.0.27.ebuild, libsemanage-2.0.33.ebuild:
+  Make RDEPEND explicit
+
+  28 May 2011; Anthony G. Basile <blueness@g.o>
+  libsemanage-2.0.45.ebuild:
+  Stable amd64 x86
+
+  13 Feb 2011; Anthony G. Basile <blueness@g.o> metadata.xml:
+  Updated metadata.xml to reflect new selinux herd.
+
+  06 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  libsemanage-2.0.45.ebuild:
+  Add "python" and "ruby" USE flags.
+
+  05 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  libsemanage-2.0.45.ebuild:
+  Set SUPPORT_PYTHON_ABIS (bug #353764). Respect AR and CC.
+
+*libsemanage-2.0.45 (05 Feb 2011)
+
+  05 Feb 2011; Anthony G. Basile <blueness@g.o>
+  +libsemanage-2.0.45.ebuild:
+  New upstream release.
+
+  16 Apr 2010; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  libsemanage-2.0.27.ebuild, libsemanage-2.0.33.ebuild,
+  libsemanage-2.0.33-r1.ebuild:
+  Delete calls to deprecated python_version().
+
+*libsemanage-2.0.33-r1 (24 Aug 2009)
+
+  24 Aug 2009; Chris PeBenito <pebenito@g.o>
+  +libsemanage-2.0.33-r1.ebuild, +files/libsemanage-2.0.33-bzip.diff:
+  Add patch to make bzip2 compression configurable.
+
+  03 Aug 2009; Chris PeBenito <pebenito@g.o>
+  libsemanage-2.0.33.ebuild:
+  Fix libsepol dependency.
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o>
+  libsemanage-2.0.27.ebuild, libsemanage-2.0.33.ebuild:
+  Add python_need_rebuild to libsemanage.
+
+*libsemanage-2.0.33 (02 Aug 2009)
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o>
+  +libsemanage-2.0.33.ebuild:
+  New upstream release.
+
+  18 Jul 2009; Chris PeBenito <pebenito@g.o>
+  -libsemanage-1.10.9.ebuild, libsemanage-2.0.27.ebuild:
+  Mark stable. Remove old ebuilds.
+
+*libsemanage-2.0.27 (03 Oct 2008)
+
+  03 Oct 2008; Chris PeBenito <pebenito@g.o>
+  +libsemanage-2.0.27.ebuild:
+  Initial commit of 2.0 libsemanage.
+
+  10 Sep 2008; Chris PeBenito <pebenito@g.o>
+  libsemanage-1.10.9.ebuild:
+  Tests cannot be run in the ebuild, they are supposed to be ran on the full
+  SELinux userland repo.
+
+  29 May 2008; Ali Polatel <hawking@g.o> libsemanage-1.10.9.ebuild:
+  python_mod_optimize is ROOT aware. Fixed python_mod_cleanup.
+
+  26 May 2008; Chris PeBenito <pebenito@g.o>
+  libsemanage-1.10.9.ebuild:
+  Fix libsepol dependency.
+
+  13 May 2008; Chris PeBenito <pebenito@g.o> -libsemanage-1.4.ebuild,
+  -libsemanage-1.6.ebuild, -libsemanage-1.10.0.ebuild,
+  -libsemanage-1.10.5.ebuild, libsemanage-1.10.9.ebuild:
+  Mark 1.10.9 stable, clear old ebuilds.
+
+*libsemanage-1.10.9 (29 Jan 2008)
+
+  29 Jan 2008; Chris PeBenito <pebenito@g.o>
+  +libsemanage-1.10.9.ebuild:
+  New upstream bugfix release.
+
+*libsemanage-1.10.5 (18 Oct 2007)
+
+  18 Oct 2007; Chris PeBenito <pebenito@g.o>
+  +libsemanage-1.10.5.ebuild:
+  New upstream release.
+
+  04 Jun 2007; Chris PeBenito <pebenito@g.o>
+  libsemanage-1.10.0.ebuild:
+  Mark stable.
+
+*libsemanage-1.10.0 (15 Feb 2007)
+
+  15 Feb 2007; Chris PeBenito <pebenito@g.o>
+  +libsemanage-1.10.0.ebuild:
+  New upstream release.
+
+  09 Oct 2006; Chris PeBenito <pebenito@g.o>
+  libsemanage-1.6.17-r1.ebuild:
+  Stable to make repoman happy.
+
+*libsemanage-1.6.17-r1 (08 Oct 2006)
+
+  08 Oct 2006; Chris PeBenito <pebenito@g.o>
+  -libsemanage-1.6.17.ebuild, +libsemanage-1.6.17-r1.ebuild:
+  Install semanage.conf since this is masked on example policy-based profiles.
+
+*libsemanage-1.6.17 (05 Oct 2006)
+
+  05 Oct 2006; Chris PeBenito <pebenito@g.o>
+  +libsemanage-1.6.17.ebuild:
+  Add SVN snapshot.
+
+  31 Jul 2006; Chris PeBenito <pebenito@g.o> libsemanage-1.6.ebuild:
+  Mark stable, long overdue.
+
+  27 Apr 2006; Alec Warner <antarus@g.o>
+  files/digest-libsemanage-1.4, Manifest:
+  Fixing SHA256 digest, pass four
+
+*libsemanage-1.6 (18 Mar 2006)
+
+  18 Mar 2006; Chris PeBenito <pebenito@g.o> +libsemanage-1.6.ebuild:
+  New upstream release.
+
+  22 Feb 2006; Stephen Bennett <spb@g.o> libsemanage-1.4.ebuild:
+  Alpha stable
+
+  19 Feb 2006; Joshua Kinard <kumba@g.o> libsemanage-1.4.ebuild:
+  Marked stable on mips.
+
+  09 Feb 2006; Chris PeBenito <pebenito@g.o> libsemanage-1.4.ebuild:
+  Set python version to fix compiles on non 2.4 pythons.
+
+  17 Jan 2006; Chris PeBenito <pebenito@g.o> libsemanage-1.4.ebuild:
+  Mark stable, x86, amd64, ppc, sparc.
+
+  14 Jan 2006; Stephen Bennett <spb@g.o> libsemanage-1.4.ebuild:
+  Added ~alpha
+
+  15 Dec 2005; Chris PeBenito <pebenito@g.o> libsemanage-1.4.ebuild:
+  Tighten up versioning to try to prevent mismatch problems as seen in #112348.
+
+*libsemanage-1.4 (09 Dec 2005)
+
+  09 Dec 2005; Chris PeBenito <pebenito@g.o> +metadata.xml,
+  +libsemanage-1.4.ebuild:
+  Initial commit.

diff --git a/sys-libs/libsemanage/libsemanage-2.1.9.ebuild b/sys-libs/libsemanage/libsemanage-2.1.9.ebuild
new file mode 100644
index 0000000..c60d152
--- /dev/null
+++ b/sys-libs/libsemanage/libsemanage-2.1.9.ebuild
@@ -0,0 +1,125 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-libs/libsemanage/libsemanage-2.1.6-r2.ebuild,v 1.2 2012/06/26 05:04:33 floppym Exp $
+
+EAPI="3"
+# Support for 4 depends on python.eclass
+PYTHON_DEPEND="python? *"
+SUPPORT_PYTHON_ABIS="1"
+RESTRICT_PYTHON_ABIS="*-jython *-pypy-*"
+
+inherit multilib python toolchain-funcs eutils
+
+SEPOL_VER="2.1.8"
+SELNX_VER="2.1.12"
+
+DESCRIPTION="SELinux kernel and policy management library"
+HOMEPAGE="http://userspace.selinuxproject.org"
+SRC_URI="http://userspace.selinuxproject.org/releases/20120924/${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="python ruby"
+
+RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}
+	>=sys-libs/libselinux-${SELNX_VER}
+	dev-libs/ustr
+	ruby? ( dev-lang/ruby )"
+DEPEND="${RDEPEND}
+	sys-devel/bison
+	sys-devel/flex
+	ruby? ( >=dev-lang/swig-2.0.4-r1 )
+	python? ( >=dev-lang/swig-2.0.4-r1 )"
+
+# tests are not meant to be run outside of the
+# full SELinux userland repo
+RESTRICT="test"
+
+pkg_setup() {
+	if use python; then
+		python_pkg_setup
+	fi
+}
+
+src_prepare() {
+	echo "# Set this to true to save the linked policy." >> "${S}/src/semanage.conf"
+	echo "# This is normally only useful for analysis" >> "${S}/src/semanage.conf"
+	echo "# or debugging of policy." >> "${S}/src/semanage.conf"
+	echo "save-linked=false" >> "${S}/src/semanage.conf"
+	echo >> "${S}/src/semanage.conf"
+	echo "# Set this to 0 to disable assertion checking." >> "${S}/src/semanage.conf"
+	echo "# This should speed up building the kernel policy" >> "${S}/src/semanage.conf"
+	echo "# from policy modules, but may leave you open to" >> "${S}/src/semanage.conf"
+	echo "# dangerous rules which assertion checking" >> "${S}/src/semanage.conf"
+	echo "# would catch." >> "${S}/src/semanage.conf"
+	echo "expand-check=1" >> "${S}/src/semanage.conf"
+	echo >> "${S}/src/semanage.conf"
+	echo "# Modules in the module store can be compressed" >> "${S}/src/semanage.conf"
+	echo "# with bzip2.  Set this to the bzip2 blocksize" >> "${S}/src/semanage.conf"
+	echo "# 1-9 when compressing.  The higher the number," >> "${S}/src/semanage.conf"
+	echo "# the more memory is traded off for disk space." >> "${S}/src/semanage.conf"
+	echo "# Set to 0 to disable bzip2 compression." >> "${S}/src/semanage.conf"
+	echo "bzip-blocksize=0" >> "${S}/src/semanage.conf"
+	echo >> "${S}/src/semanage.conf"
+	echo "# Reduce memory usage for bzip2 compression and" >> "${S}/src/semanage.conf"
+	echo "# decompression of modules in the module store." >> "${S}/src/semanage.conf"
+	echo "bzip-small=true" >> "${S}/src/semanage.conf"
+}
+
+src_compile() {
+	emake AR="$(tc-getAR)" CC="$(tc-getCC)" all || die
+
+	if use python; then
+		python_copy_sources src
+		building() {
+			emake CC="$(tc-getCC)" PYLIBVER="python$(python_get_version)" PYPREFIX="python-$(python_get_version)" "$@"
+		}
+		python_execute_function -s --source-dir src building -- swigify
+		python_execute_function -s --source-dir src building -- pywrap
+	fi
+
+	if use ruby; then
+		emake -C src CC="$(tc-getCC)" rubywrap || die
+	fi
+}
+
+src_install() {
+	emake \
+		DESTDIR="${D}" \
+		LIBDIR="${D}usr/$(get_libdir)" \
+		SHLIBDIR="${D}$(get_libdir)" \
+		install || die
+	dosym "../../$(get_libdir)/libsemanage.so.1" "/usr/$(get_libdir)/libsemanage.so" || die
+
+	if use python; then
+		installation() {
+			emake \
+				DESTDIR="${D}" \
+				PYLIBVER="python$(python_get_version)" \
+				PYPREFIX="python-$(python_get_version)" \
+				LIBDIR="${D}usr/$(get_libdir)" \
+				install-pywrap
+		}
+		python_execute_function -s --source-dir src installation
+	fi
+
+	if use ruby; then
+		emake -C src \
+			DESTDIR="${D}" \
+			LIBDIR="${D}usr/$(get_libdir)" \
+			install-rubywrap || die
+	fi
+}
+
+pkg_postinst() {
+	if use python; then
+		python_mod_optimize semanage.py
+	fi
+}
+
+pkg_postrm() {
+	if use python; then
+		python_mod_cleanup semanage.py
+	fi
+}

diff --git a/sys-libs/libsemanage/metadata.xml b/sys-libs/libsemanage/metadata.xml
new file mode 100644
index 0000000..ebc32c0
--- /dev/null
+++ b/sys-libs/libsemanage/metadata.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<herd>selinux</herd>
+	<longdescription>SELinux policy management libraries</longdescription>
+</pkgmetadata>

diff --git a/sys-libs/libsepol/ChangeLog b/sys-libs/libsepol/ChangeLog
new file mode 100644
index 0000000..398d524
--- /dev/null
+++ b/sys-libs/libsepol/ChangeLog
@@ -0,0 +1,211 @@
+# ChangeLog for sys-libs/libsepol
+# Copyright 1999-2012 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-libs/libsepol/ChangeLog,v 1.48 2012/05/13 12:48:20 swift Exp $
+
+  13 May 2012; <swift@g.o> -libsepol-2.1.0.ebuild:
+  Removing obsoleted ebuild
+
+  29 Apr 2012; <swift@g.o> libsepol-2.1.4-r1.ebuild:
+  Stabilization
+
+*libsepol-2.1.4-r1 (31 Mar 2012)
+
+  31 Mar 2012; <swift@g.o> +libsepol-2.1.4-r1.ebuild,
+  +files/libsepol-2.1.4-fix_role_fix_callback.patch:
+  Bump to version 2.1.4
+
+  12 Nov 2011; <swift@g.o> -libsepol-2.0.41.ebuild,
+  -libsepol-2.0.42.ebuild:
+  removing deprecated ebuilds
+
+  23 Oct 2011; <swift@g.o> libsepol-2.1.0.ebuild:
+  Stabilization (tracker #384231)
+
+  12 Aug 2011; Anthony G. Basile <blueness@g.o> -libsepol-2.0.32.ebuild,
+  -files/libsepol-2.0.32-expand_rule.diff, -libsepol-2.0.37.ebuild:
+  Removed deprecated versions
+
+*libsepol-2.1.0 (03 Aug 2011)
+
+  03 Aug 2011; Anthony G. Basile <blueness@g.o> +libsepol-2.1.0.ebuild:
+  Bump to 20110727 SELinux userspace release
+
+*libsepol-2.0.42 (15 Jul 2011)
+
+  15 Jul 2011; Anthony G. Basile <blueness@g.o> +libsepol-2.0.42.ebuild:
+  Bump to 2.0.42 - proxy for SwifT
+
+  28 May 2011; Anthony G. Basile <blueness@g.o> libsepol-2.0.32.ebuild,
+  libsepol-2.0.37.ebuild:
+  Make RDEPEND explicit
+
+  28 May 2011; Anthony G. Basile <blueness@g.o> libsepol-2.0.41.ebuild:
+  Stable amd64 x86
+
+  13 Feb 2011; Anthony G. Basile <blueness@g.o> metadata.xml:
+  Updated metadata.xml to reflect new selinux herd.
+
+  05 Feb 2011; Arfrever Frehtes Taifersar Arahesis <arfrever@g.o>
+  libsepol-2.0.41.ebuild:
+  Respect AR and CC.
+
+*libsepol-2.0.41 (05 Feb 2011)
+
+  05 Feb 2011; Anthony G. Basile <blueness@g.o>
+  +libsepol-2.0.41.ebuild:
+  New upstream release.
+
+  23 Sep 2009; Patrick Lauer <patrick@g.o> libsepol-2.0.32.ebuild,
+  libsepol-2.0.37.ebuild:
+  Remove virtual/libc
+
+*libsepol-2.0.37 (02 Aug 2009)
+
+  02 Aug 2009; Chris PeBenito <pebenito@g.o> +libsepol-2.0.37.ebuild:
+  New upstream release.
+
+  18 Jul 2009; Chris PeBenito <pebenito@g.o>
+  -files/libsepol-1.12.2.diff, -libsepol-1.16.11.ebuild,
+  libsepol-2.0.32.ebuild:
+  Mark stable. Remove old ebuilds.
+
+*libsepol-2.0.32 (03 Oct 2008)
+
+  03 Oct 2008; Chris PeBenito <pebenito@g.o>
+  +files/libsepol-2.0.32-expand_rule.diff, +libsepol-2.0.32.ebuild:
+  Initial commit of 2.0 libsepol.
+
+  10 Sep 2008; Chris PeBenito <pebenito@g.o> libsepol-1.16.11.ebuild:
+  Tests cannot be run in the ebuild, they are supposed to be ran on the full
+  SELinux userland repo.
+
+  13 May 2008; Chris PeBenito <pebenito@g.o> -libsepol-1.10.ebuild,
+  -libsepol-1.12-r1.ebuild, -libsepol-1.16.3.ebuild,
+  -libsepol-1.16.6.ebuild, libsepol-1.16.11.ebuild:
+  Mark 1.16.11 stable, clear old ebuilds.
+
+*libsepol-1.16.11 (07 Feb 2008)
+
+  07 Feb 2008; Chris PeBenito <pebenito@g.o>
+  -libsepol-1.16.10.ebuild, +libsepol-1.16.11.ebuild:
+  sys-libs/libsepol: upstream bugfix release.
+
+*libsepol-1.16.10 (29 Jan 2008)
+
+  29 Jan 2008; Chris PeBenito <pebenito@g.o>
+  +libsepol-1.16.10.ebuild:
+  New upstream bugfix release.
+
+*libsepol-1.16.6 (18 Oct 2007)
+
+  18 Oct 2007; Chris PeBenito <pebenito@g.o> +libsepol-1.16.6.ebuild:
+  New upstream release.
+
+  04 Jun 2007; Chris PeBenito <pebenito@g.o> libsepol-1.16.3.ebuild:
+  Mark stable.
+
+*libsepol-1.16.3 (10 May 2007)
+
+  10 May 2007; Chris PeBenito <pebenito@g.o> +libsepol-1.16.3.ebuild:
+  New stable bugfix release.
+
+  17 Apr 2007; Chris PeBenito <pebenito@g.o> libsepol-1.16.2.ebuild:
+  This was a critical bug fix for SELinux policy linking, mark stable.
+
+*libsepol-1.16.2 (04 Apr 2007)
+
+  04 Apr 2007; Chris PeBenito <pebenito@g.o> +libsepol-1.16.2.ebuild:
+  Add bugfix release to fix boolean mapping problem.
+
+  25 Mar 2007; Chris PeBenito <pebenito@g.o> libsepol-1.16.0.ebuild:
+  Mark stable.
+
+*libsepol-1.16.0 (15 Feb 2007)
+
+  15 Feb 2007; Chris PeBenito <pebenito@g.o> +libsepol-1.16.0.ebuild:
+  New upstream release.
+
+  09 Oct 2006; Chris PeBenito <pebenito@g.o> libsepol-1.12.28.ebuild:
+  Stable to make repoman happy.
+
+*libsepol-1.12.28 (05 Oct 2006)
+
+  05 Oct 2006; Chris PeBenito <pebenito@g.o>
+  +libsepol-1.12.28.ebuild:
+  Add SVN snapshot.
+
+  31 Jul 2006; Chris PeBenito <pebenito@g.o> libsepol-1.12-r1.ebuild:
+  Mark stable, long overdue.
+
+*libsepol-1.12-r1 (27 Mar 2006)
+
+  27 Mar 2006; Chris PeBenito <pebenito@g.o>
+  +files/libsepol-1.12.2.diff, -libsepol-1.12.ebuild,
+  +libsepol-1.12-r1.ebuild:
+  Uptream bugfix patch, including a fix for big endian machines. Users of big
+  endian systems should remerge checkpolicy as it statically links against
+  libsepol.
+
+*libsepol-1.12 (18 Mar 2006)
+
+  18 Mar 2006; Chris PeBenito <pebenito@g.o> +libsepol-1.12.ebuild:
+  New upstream release.
+
+  22 Feb 2006; Stephen Bennett <spb@g.o> libsepol-1.10.ebuild:
+  Alpha stable
+
+  19 Feb 2006; Joshua Kinard <kumba@g.o> libsepol-1.10.ebuild:
+  Marked stable on mips.
+
+  17 Jan 2006; Chris PeBenito <pebenito@g.o> libsepol-1.10.ebuild:
+  Mark stable, x86, amd64, ppc, sparc.
+
+  14 Jan 2006; Stephen Bennett <spb@g.o> libsepol-1.10.ebuild:
+  Added ~alpha
+
+*libsepol-1.10 (09 Dec 2005)
+
+  09 Dec 2005; Chris PeBenito <pebenito@g.o> -libsepol-1.4.ebuild,
+  +libsepol-1.10.ebuild:
+  New upstream release.
+
+  09 Sep 2005; Chris PeBenito <pebenito@g.o> libsepol-1.6.ebuild:
+  Mark stable.
+
+*libsepol-1.6 (25 Jun 2005)
+
+  25 Jun 2005; Chris PeBenito <pebenito@g.o> +libsepol-1.6.ebuild:
+  New upstream release.
+
+  10 May 2005; Stephen Bennett <spb@g.o> libsepol-1.4.ebuild:
+  mips stable
+
+  01 May 2005; Stephen Bennett <spb@g.o> libsepol-1.4.ebuild:
+  Added ~mips.
+
+  01 May 2005; Chris PeBenito <pebenito@g.o> libsepol-1.4.ebuild:
+  Mark stable.
+
+*libsepol-1.4 (13 Mar 2005)
+
+  13 Mar 2005; Chris PeBenito <pebenito@g.o> +libsepol-1.4.ebuild:
+  New upstream release.
+
+  07 Jan 2005; Chris PeBenito <pebenito@g.o> libsepol-1.0.ebuild,
+  libsepol-1.2.ebuild:
+  Mark 1.2 stable.  Change glibc dep to libc virtual.
+
+  15 Nov 2004; Chris PeBenito <pebenito@g.o> libsepol-1.2.ebuild:
+  Fix non mls compile.
+
+*libsepol-1.2 (14 Nov 2004)
+
+  14 Nov 2004; Chris PeBenito <pebenito@g.o> +libsepol-1.2.ebuild:
+  New upstream release.
+
+*libsepol-1.0 (07 Sep 2004)
+
+  07 Sep 2004; Chris PeBenito <pebenito@g.o> +metadata.xml,
+  +libsepol-1.0.ebuild:
+  Initial commit.
+

diff --git a/sys-libs/libsepol/files/libsepol-2.1.4-fix_role_fix_callback.patch b/sys-libs/libsepol/files/libsepol-2.1.4-fix_role_fix_callback.patch
new file mode 100644
index 0000000..256cc52
--- /dev/null
+++ b/sys-libs/libsepol/files/libsepol-2.1.4-fix_role_fix_callback.patch
@@ -0,0 +1,15 @@
+diff -uNr libsepol-2.1.4.orig/src/expand.c libsepol-2.1.4-fix_role_fix_callback/src/expand.c
+--- libsepol-2.1.4.orig/src/expand.c	2012-02-25 14:34:37.408341044 +0100
++++ libsepol-2.1.4-fix_role_fix_callback/src/expand.c	2012-02-25 14:35:58.345341216 +0100
+@@ -688,6 +688,11 @@
+ 		return 0;
+ 	}
+ 
++	if (!is_id_enabled(id, state->base, SYM_ROLES)) {
++		/* Identifiers scope is not enabled */
++		return 0;
++	}
++
+ 	if (role->flavor != ROLE_ATTRIB)
+ 		return 0;
+ 

diff --git a/sys-libs/libsepol/libsepol-2.1.8.ebuild b/sys-libs/libsepol/libsepol-2.1.8.ebuild
new file mode 100644
index 0000000..f56b4fd
--- /dev/null
+++ b/sys-libs/libsepol/libsepol-2.1.8.ebuild
@@ -0,0 +1,40 @@
+# Copyright 1999-2012 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-libs/libsepol/libsepol-2.1.4-r1.ebuild,v 1.2 2012/04/29 10:07:40 swift Exp $
+
+EAPI="2"
+
+inherit multilib toolchain-funcs eutils
+
+DESCRIPTION="SELinux binary policy representation library"
+HOMEPAGE="http://userspace.selinuxproject.org"
+SRC_URI="http://userspace.selinuxproject.org/releases/20120924/${P}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE=""
+
+DEPEND=""
+RDEPEND=""
+
+# tests are not meant to be run outside of the
+# full SELinux userland repo
+RESTRICT="test"
+
+src_prepare() {
+	# fix up paths for multilib
+	sed -i -e "/^LIBDIR/s/lib/$(get_libdir)/" src/Makefile \
+		|| die "Fix for multilib LIBDIR failed."
+	sed -i -e "/^SHLIBDIR/s/lib/$(get_libdir)/" src/Makefile \
+		|| die "Fix for multilib SHLIBDIR failed."
+	epatch "${FILESDIR}/libsepol-2.1.4-fix_role_fix_callback.patch"
+}
+
+src_compile() {
+	emake AR="$(tc-getAR)" CC="$(tc-getCC)" || die
+}
+
+src_install() {
+	emake DESTDIR="${D}" install || die
+}

diff --git a/sys-libs/libsepol/metadata.xml b/sys-libs/libsepol/metadata.xml
new file mode 100644
index 0000000..b13f947
--- /dev/null
+++ b/sys-libs/libsepol/metadata.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<herd>selinux</herd>
+	<longdescription>SELinux library for manipulating binary security policies</longdescription>
+</pkgmetadata>