[gentoo-commits] dev/blueness:master commit in: sys-apps/rsbac-admin/files/, sys-apps/rsbac-admin/

[Anthony G. Basile]

commit:     659586d4582fb7aa91d69ab8e7a2276af755b052
Author:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
AuthorDate: Tue Sep  6 01:01:02 2011 +0000
Commit:     Anthony G. Basile <blueness <AT> gentoo <DOT> org>
CommitDate: Tue Sep  6 01:01:02 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=commit;h=659586d4

sys-apps/rsbac-admin: initial resurrection

(Portage version: 2.1.10.11/git/Linux x86_64, signed Manifest commit with key 0xD0455535)

---
 sys-apps/rsbac-admin/ChangeLog                |    8 +++
 sys-apps/rsbac-admin/Manifest                 |   16 ++++++
 sys-apps/rsbac-admin/files/nsswitch.conf      |   24 ++++++++
 sys-apps/rsbac-admin/files/rsbac.conf         |    8 +++
 sys-apps/rsbac-admin/metadata.xml             |   12 ++++
 sys-apps/rsbac-admin/rsbac-admin-1.4.5.ebuild |   73 +++++++++++++++++++++++++
 6 files changed, 141 insertions(+), 0 deletions(-)

diff --git a/sys-apps/rsbac-admin/ChangeLog b/sys-apps/rsbac-admin/ChangeLog
new file mode 100644
index 0000000..95b2114
--- /dev/null
+++ b/sys-apps/rsbac-admin/ChangeLog
@@ -0,0 +1,8 @@
+
+
+*rsbac-admin-1.4.5 (06 Sep 2011)
+
+  06 Sep 2011; Anthony G. Basile <blueness@g.o>
+  +rsbac-admin-1.4.5.ebuild, +metadata.xml:
+  Initial resurrection
+

diff --git a/sys-apps/rsbac-admin/Manifest b/sys-apps/rsbac-admin/Manifest
new file mode 100644
index 0000000..f09e6c7
--- /dev/null
+++ b/sys-apps/rsbac-admin/Manifest
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+AUX nsswitch.conf 487 RMD160 b45ed6660f60c6b3fbee2218d250e27f7746a2d1 SHA1 ff7f331e26b5008b1665c8a1857eef924d511e76 SHA256 a92f145853fab10e1110b2ff3607a411a6fb4b4b97927d391e788e0bff019954
+AUX rsbac.conf 209 RMD160 fb3ae78191f308ef488832eb844c6f3c7c3ccedf SHA1 82fc8195e237d749cd86650699d0ee172f7ddc18 SHA256 7ce39c310463001cffb2f8db01c8ff5154abdbede48a7e5c7b7a0252c8a80c19
+DIST rsbac-admin-1.4.5.tar.bz2 310327 RMD160 9b9322889f5a8e445a0c9dfd9abab2afe9b357b8 SHA1 6cc98ceaf7606fdefd942253c71b45da9ede1004 SHA256 9a0af540337b46f59ed9382e6e8909d742bffab920d3e819a12b0ddba9427c42
+EBUILD rsbac-admin-1.4.5.ebuild 2204 RMD160 71d4b274abbdce6812fbbddc16302df713daf9cb SHA1 f16ece31095d9cb34abd8cc523923be7c5d0fe80 SHA256 368528ed053b635d2b461aa092036abf9cd50b45cde5d6915d60da4fa526ab84
+MISC ChangeLog 159 RMD160 faa6a5ea24bd59bb7ec2866c1eed01599443ca14 SHA1 67e1d52896eaa7ab5063910a75a438cd7447ac29 SHA256 45c760af87513910544b4b5b180adaa937352945f9521d9aad84aea77e36ad34
+MISC metadata.xml 349 RMD160 74c5b7d98c48912b9e8114a27122085890f2b4f0 SHA1 a0bebf1fca1f7d2c2caba50e49016fb9049f4c4e SHA256 8ee9c6d3ede9f9980227d67737a2b2d5a73eaa1594aa945790566ea5703ce807
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v2.0.17 (GNU/Linux)
+
+iEYEAREIAAYFAk5lcM4ACgkQl5yvQNBFVTWGtwCcD+dWyfOKrzoeHsG5uLqSk2eF
+i20AnjyfVb9UUKDSnqPOOAcSxo2f/Lzg
+=wZAT
+-----END PGP SIGNATURE-----

diff --git a/sys-apps/rsbac-admin/files/nsswitch.conf b/sys-apps/rsbac-admin/files/nsswitch.conf
new file mode 100644
index 0000000..43c5b17
--- /dev/null
+++ b/sys-apps/rsbac-admin/files/nsswitch.conf
@@ -0,0 +1,24 @@
+# /etc/nsswitch.conf:
+
+passwd:      compat rsbac [NOTFOUND=continue SUCCESS=continue]
+shadow:      compat rsbac
+group:       compat rsbac [NOTFOUND=continue SUCCESS=continue]
+
+# passwd:    db files nis
+# shadow:    db files nis
+# group:     db files nis
+
+hosts:       files dns
+networks:    files dns
+
+services:    db files
+protocols:   db files
+rpc:         db files
+ethers:      db files
+
+netmasks:    files
+netgroup:    files
+bootparams:  files
+
+automount:   files
+aliases:     files

diff --git a/sys-apps/rsbac-admin/files/rsbac.conf b/sys-apps/rsbac-admin/files/rsbac.conf
new file mode 100644
index 0000000..e646c00
--- /dev/null
+++ b/sys-apps/rsbac-admin/files/rsbac.conf
@@ -0,0 +1,8 @@
+# RSBAC menu configuration
+# Thu Jun 17 01:36:19 CEST 2004
+RSBACMOD="PAX DAZ FF RC ACL AUTH CAP JAIL RES "
+DIALOG="dialog"
+# RSBACLANG is not set
+TMPDIR="/tmp"
+# RSBACPATH is not set
+# RSBACLOGFILE is not set

diff --git a/sys-apps/rsbac-admin/metadata.xml b/sys-apps/rsbac-admin/metadata.xml
new file mode 100644
index 0000000..b7f3952
--- /dev/null
+++ b/sys-apps/rsbac-admin/metadata.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<herd>hardened</herd>
+	<maintainer>
+		<email>blueness@g.o</email>
+		<name>Anthony G. Basile</name>
+	</maintainer>
+	<longdescription lang="en">
+		Administrative tool for RSBAC system
+	</longdescription>
+</pkgmetadata>

diff --git a/sys-apps/rsbac-admin/rsbac-admin-1.4.5.ebuild b/sys-apps/rsbac-admin/rsbac-admin-1.4.5.ebuild
new file mode 100644
index 0000000..2ed6f3e
--- /dev/null
+++ b/sys-apps/rsbac-admin/rsbac-admin-1.4.5.ebuild
@@ -0,0 +1,73 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: $
+
+EAPI=4
+
+inherit eutils libtool multilib toolchain-funcs
+
+DESCRIPTION="Rule Set Based Access Control (RSBAC) Admin Tools"
+HOMEPAGE="http://www.rsbac.org/"
+SRC_URI="http://www.rsbac.org/dl.php?file=code/1.4.5/${P}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="pam"
+
+DEPEND="dev-util/dialog
+	pam? ( sys-libs/pam )
+	sys-apps/baselayout"
+
+RDEPEND=">=sys-libs/ncurses-5.2"
+
+src_compile() {
+	local rsbacmakeargs
+	rsbacmakeargs="libs tools"
+	use pam && {
+		rsbacmakeargs="${makeargs} pam nss"
+	}
+	emake PREFIX=/usr LIBDIR=/$(get_libdir) ${rsbacmakeargs} || die "cannot build (${rsbacmakeargs})"
+}
+
+src_install() {
+	local rsabacinstallargs
+	rsbacinstallargs="headers-install libs-install tools-install"
+	use pam && {
+		rsbacinstallargs="${rsbacinstallargs} pam-install nss-install"
+	}
+	make PREFIX=/usr LIBDIR=/$(get_libdir) DESTDIR=${D} ${rsbacinstallargs} || \
+		die "cannot install (${rsbacinstallargs})"
+	insinto /etc
+	doins ${FILESDIR}/rsbac.conf
+	doins ${FILESDIR}/nsswitch.conf
+	dodir /secoff
+	keepdir /secoff
+	dodir /var/log/rsbac
+	keepdir /var/log/rsbac
+	#FHS compliance
+	dodir /usr/$(get_libdir)
+	mv ${D}/$(get_libdir)/librsbac.{,l}a ${D}/usr/$(get_libdir)
+	mv ${D}/$(get_libdir)/libnss_rsbac.{,l}a ${D}/usr/$(get_libdir)
+	gen_usr_ldscript librsbac.so
+	gen_usr_ldscript libnss_rsbac.so
+}
+
+pkg_postinst() {
+	enewgroup secoff 400 || die "problem adding group secoff"
+	enewuser secoff 400 /bin/bash /secoff secoff || \
+		die "problem adding user secoff"
+	enewgroup audit 404 || die "problem adding group audit"
+	enewuser audit 404 -1 /dev/null audit || \
+		die "problem adding user audit"
+
+	chmod 700 /secoff /var/log/rsbac ||  \
+		die "problem changing permissions of /secoff and/or /secoff/log"
+	chown secoff:secoff -R /secoff || \
+		die "problem changing ownership of /secoff"
+
+	einfo "It is suggested to run (for example) a separate copy of syslog-ng to"
+	einfo "log RSBAC messages, as user audit (uid 404) instead of using the deprecated"
+	einfo "rklogd. See http://www.rsbac.org/documentation/administration_examples/syslog-ng"
+	einfo "for more information."
+}