blob: b4a212ac783b656837d08720734b40a7a599c9d4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Id$
EAPI=5
inherit multilib toolchain-funcs
DESCRIPTION="Rule Set Based Access Control (RSBAC) Admin Tools"
HOMEPAGE="http://www.rsbac.org/"
SRC_URI="http://download.rsbac.org/code/${PV}/${P}.tar.xz"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="~amd64 ~x86"
# using rklogd is deprecated but offer the option since it is fully removed
# from source
IUSE="pam rklogd"
DEPEND="
dev-util/dialog
pam? ( sys-libs/pam )
sys-apps/baselayout
>=sys-libs/ncurses-5.2"
RDEPEND="${DEPEND}"
src_compile() {
local rsbacmakeargs="libs tools"
use rklogd && rsbacmakeargs="${rsbacmakeargs} rklogd"
use pam && rsbacmakeargs="${rsbacmakeargs} pam nss"
emake PREFIX=/usr LIBDIR=/$(get_libdir) ${rsbacmakeargs}
}
src_install() {
local rsbacinstallargs="headers-install libs-install tools-install"
use rklogd && rsbacinstallargs="${rsbacinstallargs} rklogd-install"
use pam && rsbacinstallargs="${rsbacinstallargs} pam-install nss-install"
emake PREFIX=/usr LIBDIR=/$(get_libdir) DESTDIR="${D}" ${rsbacinstallargs}
use rklogd && doinitd "${FILESDIR}"/rklogd
insinto /etc
doins "${FILESDIR}"/rsbac.conf
#FHS compliance
dodir /usr/$(get_libdir)
mv "${D}"/$(get_libdir)/librsbac.{,l}a "${D}"/usr/$(get_libdir)
mv "${D}"/$(get_libdir)/libnss_rsbac.{,l}a "${D}"/usr/$(get_libdir)
gen_usr_ldscript librsbac.so
gen_usr_ldscript libnss_rsbac.so
}
pkg_postinst() {
einfo "********************************************************************************"
einfo "You have to add a security user to your system if you have not already done so."
einfo "The name could be 'secoff' or 'security' and, if you did not change the default"
einfo "uid in the RSBAC kernel configuration, then the following will work:"
einfo
einfo " groupadd -g 400 security"
einfo " useradd -g 400 -u 400 security"
einfo
einfo "We suggest you run a separate copy of syslog-ng (for example) to log RSBAC"
einfo "messages as user 'audit' (uid 404) instead of using the deprecated rklogd."
einfo "See"
einfo
einfo " http://www.rsbac.org/documentation/administration_examples/syslog-ng"
einfo
einfo "for more information."
einfo "********************************************************************************"
}
|
GitWeb
