Главная   Изменения   Спек   Патчи   Исходники   Загрузить   Gear   Bugs and FR  Repocop 

pax_global_header00006660000000000000000000000064123227301350014510gustar00rootroot0000000000000052 comment=0bcd32c72f0403a90e461f0224fb37b3aa338594
installer-feature-selinux-0.6/000075500000000000000000000000001232273013500164665ustar00rootroot00000000000000installer-feature-selinux-0.6/.gear/000075500000000000000000000000001232273013500174625ustar00rootroot00000000000000installer-feature-selinux-0.6/.gear/rules000064400000000000000000000000071232273013500205340ustar00rootroot00000000000000tar: .
installer-feature-selinux-0.6/installer-feature-selinux.spec000064400000000000000000000021471232273013500244610ustar00rootroot00000000000000Name: installer-feature-selinux
Version: 0.6
Release: alt1

Summary: Installer selinux hooks
License: GPL
Group: System/Configuration/Other
BuildArch: noarch
Source: %name-%version.tar
Provides: %name-stage2

%description
This package contains selinux hooks for installer.


%prep
%setup

%install
%define hookdir %_datadir/install2
mkdir -p %buildroot%hookdir/{initinstall,preinstall,postinstall}.d
install -pm755 preinstall.sh %buildroot%hookdir/preinstall.d/90-selinux.sh
install -pm755 postinstall.sh %buildroot%hookdir/postinstall.d/90-selinux.sh

%files
%hookdir/preinstall.d/*
%hookdir/postinstall.d/*

%changelog
* Mon Apr 14 2014 Anton V. Boyarshinov <boyarsh@altlinux.ru> 0.6-alt1
- adding pam_permit into pam.d/newrole added

* Thu Apr 03 2014 Anton V. Boyarshinov <boyarsh@altlinux.ru> 0.5-alt1
- make stage indifferent

* Wed Apr 02 2014 Timur Aitov <timonbl4@altlinux.org> 0.4-alt1
- [0.4]

* Wed Dec 11 2013 Timur Aitov <timonbl4@altlinux.org> 0.3-alt1
- [0.3]

* Tue Aug 06 2013 Timur Aitov <timonbl4@altlinux.org> 0.2-alt1
- [0.2]

* Tue Jun 25 2013 Timur Aitov <timonbl4@altlinux.org> 0.1-alt1
- first build

installer-feature-selinux-0.6/postinstall.sh000075500000000000000000000007361232273013500214070ustar00rootroot00000000000000#!/bin/sh

a = . install2-init-functions

ln -s "/lib/systemd/system/mcstrans.service" "$destdir/etc/systemd/system/multi-user.target.wants/mcstrans.service" ||:
ln -s "/lib/systemd/system/netlabel.service" "$destdir/etc/systemd/system/multi-user.target.wants/netlabel.service" ||:

rm -rf $destdir/etc/selinux/restorecond_user.conf ||:

cat << 'EOF' >> $destdir/etc/netlabel.rules
cipsov4 add pass doi:1 tags:1
map del default
map add default protocol:cipsov4,1
map s0 off
EOF
installer-feature-selinux-0.6/preinstall.sh000075500000000000000000000017031232273013500212030ustar00rootroot00000000000000#!/bin/sh -efu

a= . install2-init-functions

sed -i '0,/^GRUB_CMDLINE_LINUX_DEFAULT=/{s/'\''$/ security=selinux selinux=1'\''/}' $destdir/etc/sysconfig/grub2
sed -i 's/SELINUX=permissive/SELINUX=enforcing/g' $destdir/etc/selinux/config
sed -i 's|^[^#].*pam_namespace.so.*|\n# added by installer-feature-selinux\nsession		required	pam_exec.so debug /etc/security/alt.newrole/helper /etc/security/alt.newrole/config\n\n&|' $destdir/etc/pam.d/newrole ||:
sed -i 's/#%PAM-1.0/#%PAM-1.0\nauth sufficient pam_permit.so/' $destdir/etc/pam.d/newrole ||:
sed -i '0,/^session.*/{s|^session.*|\n# added by installer-feature-selinux\nsession		required	pam_selinux.so close\n\n&|}' $destdir/etc/pam.d/common-login ||:
cp $destdir/etc/pam.d/common-login /tmp/tmp-common-login
tac /tmp/tmp-common-login | sed '0,/^session.*/{s|^session.*|\nsession		required	pam_selinux.so open verbose\n# added by installer-feature-selinux\n\n&|}' | tac > $destdir/etc/pam.d/common-login ||: