On Tue, 16 Dec 2014 14:49:38 +0100 Laurent Bigonville <[email protected]>
wrote:
> Hello,
Hi again,
> Could it be possible to enable openrc selinux support?
>
> The attached patch should achieve this.
Please find here a new patch, it's also adding PAM and audit support
Cheers,
Laurent Bigonville
diff -Nru openrc-0.18.3/debian/changelog openrc-0.18.3/debian/changelog
--- openrc-0.18.3/debian/changelog 2015-11-09 15:11:35.000000000 +0100
+++ openrc-0.18.3/debian/changelog 2016-02-02 17:22:10.000000000 +0100
@@ -1,3 +1,11 @@
+openrc (0.18.3-1.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Enable SELinux, audit and PAM support on linux architectures (Closes:
+ #773287)
+
+ -- Laurent Bigonville <[email protected]> Tue, 02 Feb 2016 17:21:55 +0100
+
openrc (0.18.3-1) unstable; urgency=medium
[ Dmitry Yu Okunev ]
diff -Nru openrc-0.18.3/debian/control openrc-0.18.3/debian/control
--- openrc-0.18.3/debian/control 2015-11-09 15:11:35.000000000 +0100
+++ openrc-0.18.3/debian/control 2016-02-02 18:04:48.000000000 +0100
@@ -5,7 +5,7 @@
Uploaders: Roger Leigh <[email protected]>,
Thomas Goirand <[email protected]>,
Benda Xu <[email protected]>
-Build-Depends: debhelper (>= 9)
+Build-Depends: debhelper (>= 9), libselinux1-dev [linux-any], libaudit-dev [linux-any], libpam0g-dev [linux-any]
Standards-Version: 3.9.6
Homepage: http://www.gentoo.org/proj/en/base/openrc/
Vcs-Git: git://anonscm.debian.org/openrc/openrc.git
@@ -17,6 +17,8 @@
Replaces: sysv-rc
Provides: sysv-rc
Depends: insserv, ${misc:Depends}, ${shlibs:Depends}
+# newrole package is needed when using SELinux
+Suggests: newrole [linux-any]
Description: dependency based init system (runlevel change mechanism)
OpenRC is a dependency based init system. It provides support for System V
init, for booting, changing runlevels, starting and stopping services, and
diff -Nru openrc-0.18.3/debian/rules openrc-0.18.3/debian/rules
--- openrc-0.18.3/debian/rules 2015-11-09 15:11:35.000000000 +0100
+++ openrc-0.18.3/debian/rules 2016-02-02 17:30:02.000000000 +0100
@@ -23,6 +23,12 @@
export LIBEXECDIR = /lib/rc
#export OS = Linux
+ifeq (linux,$(DEB_HOST_ARCH_OS))
+export MKAUDIT = yes
+export MKPAM = pam
+export MKSELINUX = yes
+endif
+
%:
dh $@
@@ -52,6 +58,10 @@
rm -f $(CURDIR)/debian/openrc/sbin/$${file} ; \
done
+ # As openrc start-stop-daemon executable is removed above, we don't
+ # need to install that pam service.
+ rm -rf $(CURDIR)/debian/openrc/etc/pam.d/
+
# These need to be removed, the same way as other stuff above
for file in service.8 service.8.gz start-stop-daemon.8 start-stop-daemon.8.gz ; do \
rm -f $(CURDIR)/debian/openrc/usr/share/man/man8/$${file} ; \
