[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-ada/

2020-11-29 Thread Jason Zaman
commit: 7a17e4b3ca4f3caa1c0069fe553382e9efb0fac7
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Nov 30 04:07:45 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 30 04:08:20 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7a17e4b3

sec-policy/selinux-ada: remove 20200818 ebuild

It was removed from the policy in
commit 03e2dcede6a02e4766d14b79a5a70b009b8da2d0

Package-Manager: Portage-3.0.9, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sec-policy/selinux-ada/Manifest |  2 --
 sec-policy/selinux-ada/selinux-ada-2.20200818-r1.ebuild | 15 ---
 sec-policy/selinux-ada/selinux-ada-.ebuild  | 15 ---
 3 files changed, 32 deletions(-)

diff --git a/sec-policy/selinux-ada/Manifest b/sec-policy/selinux-ada/Manifest
index a7e61b604c3..bff747369f3 100644
--- a/sec-policy/selinux-ada/Manifest
+++ b/sec-policy/selinux-ada/Manifest
@@ -1,6 +1,4 @@
 DIST patchbundle-selinux-base-policy-2.20190201-r1.tar.bz2 426390 BLAKE2B 
33e05e03e1e087f0bf460930f074108af5fa05688f7681ba3545530d21174be7d29e9035a7bc37e9acdbe3468680891f9865ad83188eb0f8fb9b9012252d6a1e
 SHA512 
f2855a340f4ae7ba6c4cf0ec9445de7ca20f9fc0f11783992340ca2f073bbbf2d4999190f46f3910213dd1555e9578b3609284af6a7712b401053216c004ff7e
 DIST patchbundle-selinux-base-policy-2.20190609-r1.tar.bz2 407664 BLAKE2B 
e6b6b56f990389365c062522582e2177bc3b70040c99948efad25737e69178f9f72149cc443cb9edacfdd1aa6bc29f637cc61939f66e5cc3841f83298b33c41e
 SHA512 
16195b51bb414ac82821f93756b3b5d0ec206b7035a50379c1f796082d9c53b11369e15086e1e26521808944266364470c43dcfdd1818ba079fda1613b7ef9bd
-DIST patchbundle-selinux-base-policy-2.20200818-r1.tar.bz2 278147 BLAKE2B 
1e63517f15ed297c3cc1ed068db30ef60c0ebb11790abb89a80cde44da882b9381a8eccc66378576d84c106af7e9f7fd9e65b76b8e6f5134b34a2b517f5bb7f1
 SHA512 
d688e3f9d5dceb8a8747025adeddcfdd923e39757ab5ad7b92be00b544e47f0aa0c47aaf5a71eb4d3f616743d3291b8a8babdedfa238913371d58be3fccd4812
 DIST refpolicy-2.20190201.tar.bz2 552750 BLAKE2B 
d3cbdf5c5f8480cd36173d8cfbd2f55a6ad4a9f2176883dcc19eece6059114ca8700d07f8bd318d0430da253bb9e4e6a6e03f7a7db8a7964c95b00452aaab040
 SHA512 
c6568b679ad1a7c5c566b55291e86ce3784ee609c0091e5d465d41055724d950180780c7eedb3413351101b9182db51c7bce1816db1a9a17b3257861363efc6e
 DIST refpolicy-2.20190609.tar.bz2 555882 BLAKE2B 
abc45d9c906e0c880b7c47b0fb8e33f4a277c73244e20e8a95c44452db817241110127a5f8a3347cfbf5e30bf91f9dd4e5dd826426eb88b383fdbff5963f5fcd
 SHA512 
f05ca08d31e62b7bf7203d7b243cce9ba87dd68d13b30067b99a44d5007449078fa82d591faa88c2955d370a346e69faedc850c02bd77c5624a8c746a13467f3
-DIST refpolicy-2.20200818.tar.bz2 570896 BLAKE2B 
502c00fec39e1b81e42de3f7f942623f8b3fbdeac19f9f01126722a368b7d4f70427d6e4a574754c4f2fa551e4bc75c912dbc515c004f0dcd5eb28ab416498f6
 SHA512 
e4b527bb7a87b9359fc42eb111d5008103f57c37128998ea0e21ec7b0b8607ffe3f67697450e4c51a0db172ece69083335b279bacef4b1bd0b7748b58caa99a7

diff --git a/sec-policy/selinux-ada/selinux-ada-2.20200818-r1.ebuild 
b/sec-policy/selinux-ada/selinux-ada-2.20200818-r1.ebuild
deleted file mode 100644
index 9008a2bf117..000
--- a/sec-policy/selinux-ada/selinux-ada-2.20200818-r1.ebuild
+++ /dev/null
@@ -1,15 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI="6"
-
-IUSE=""
-MODS="ada"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for ada"
-
-if [[ ${PV} != * ]] ; then
-   KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86"
-fi

diff --git a/sec-policy/selinux-ada/selinux-ada-.ebuild 
b/sec-policy/selinux-ada/selinux-ada-.ebuild
deleted file mode 100644
index 4d2d3d70d76..000
--- a/sec-policy/selinux-ada/selinux-ada-.ebuild
+++ /dev/null
@@ -1,15 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI="7"
-
-IUSE=""
-MODS="ada"
-
-inherit selinux-policy-2
-
-DESCRIPTION="SELinux policy for ada"
-
-if [[ ${PV} != * ]] ; then
-   KEYWORDS="~amd64 -arm ~arm64 ~mips ~x86"
-fi



[gentoo-commits] proj/hardened-refpolicy: New tag: 2.20200818-r2

2020-11-29 Thread Jason Zaman
commit: 
Commit: Jason Zaman  gentoo  org>
CommitDate: Mon Nov 30 04:10:49 2020 +

New tag: 2.20200818-r2




[gentoo-commits] proj/hardened-refpolicy:master commit in: gentoo/

2020-11-29 Thread Jason Zaman
commit: 51aae0778cb7c0a812c64654fe8f517a8a3450eb
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Nov 30 02:47:19 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 30 02:54:01 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=51aae077

Update gentoo release-prepare script

- Make the glob more specific on selinux-* so it does not match
sec-policy/apparmor-profiles
- Also update the test instructions
- Update copyright year automatically

Signed-off-by: Jason Zaman  gentoo.org>

 gentoo/release-prepare.sh | 17 +
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/gentoo/release-prepare.sh b/gentoo/release-prepare.sh
index 243927b2..d8b69bbe 100644
--- a/gentoo/release-prepare.sh
+++ b/gentoo/release-prepare.sh
@@ -78,7 +78,7 @@ buildpatch() {
 createEbuilds() {
   cd ${GENTOOX86}/sec-policy;
   printf "Removing old patchbundle references in Manifest (in case of 
rebuild)... ";
-  for PKG in *;
+  for PKG in selinux-*;
   do
 [[ -f "${PKG}/Manifest}" ]] || continue;
 sed -i -e "/patchbundle-selinux-base-policy-${NEWVERSION}/d" 
${PKG}/Manifest;
@@ -86,10 +86,11 @@ createEbuilds() {
   printf "done\n";
 
   printf "Creating new ebuilds based on  version... ";
-  for PKG in *;
+  for PKG in selinux-*;
   do
 [[ -f "${PKG}/${PKG}-.ebuild" ]] || continue;
 cp ${PKG}/${PKG}-.ebuild ${PKG}/${PKG}-${NEWVERSION}.ebuild;
+sed -i "s/Copyright 1999-201. Gentoo .*/Copyright 1999-$(date '+%Y') 
Gentoo Authors/" ${PKG}/${PKG}-${NEWVERSION}.ebuild;
   done
   printf "done\n";
 }
@@ -129,19 +130,19 @@ The release has now been prepared.
 Please go do the following to finish up:
 
 In ${GENTOOX86}/sec-policy:
-git add .
-repoman --digest=y full
+$ git add .
+$ repoman --digest=y full
 
 Then, before finally committing - do a run yourself, ensuring that the right
 version is deployed of course:
-- "emerge -1 \$(qlist -IC sec-policy)"
+# emerge -v1 @selinux-rebuild
 
 Only then do:
-repoman commit -m 'sec-policy: Release of SELinux policies ${NEWVERSION}'
-git push --sign
+$ repoman commit -m 'sec-policy: Release of SELinux policies ${NEWVERSION}'
+$ git push --sign
 
 In ${HARDENEDREFPOL} do:
-git push origin --tags
+$ git push origin --tags
 EOF
 
 cleanTmp;



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/admin/

2020-11-29 Thread Jason Zaman
commit: b3f7bbec02352eb175391b51119180bad035b096
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Nov 17 15:58:31 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Nov 29 01:32:30 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b3f7bbec

portage.te: Allow portage_fetch_t to read /dev/urandom through interface.

Closes: https://github.com/perfinion/hardened-refpolicy/pull/3
Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/admin/portage.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/admin/portage.te b/policy/modules/admin/portage.te
index c0d6cace..8e9865e2 100644
--- a/policy/modules/admin/portage.te
+++ b/policy/modules/admin/portage.te
@@ -303,6 +303,7 @@ corenet_udp_bind_generic_node(portage_fetch_t)
 corenet_udp_bind_all_unreserved_ports(portage_fetch_t)
 
 dev_read_rand(portage_fetch_t)
+dev_read_urand(portage_fetch_t)
 
 domain_use_interactive_fds(portage_fetch_t)
 



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: 4a0d8b5637db7d64811d9cfe1d6746d2baf63150
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Nov 28 23:30:04 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 23:30:04 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=4a0d8b56

init: remove gentoo-specific rules that have been upstreamed

Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/init.fc | 20 
 1 file changed, 20 deletions(-)

diff --git a/policy/modules/system/init.fc b/policy/modules/system/init.fc
index c8451701..567bc960 100644
--- a/policy/modules/system/init.fc
+++ b/policy/modules/system/init.fc
@@ -95,23 +95,3 @@ ifdef(`distro_suse', `
 /run/setleds-on--  
gen_context(system_u:object_r:initrc_runtime_t,s0)
 /run/sysconfig(/.*)?   gen_context(system_u:object_r:initrc_runtime_t,s0)
 ')
-
-ifdef(`distro_gentoo',`
-#
-# /lib
-#
-/usr/lib/rc/console(/.*)?  
gen_context(system_u:object_r:initrc_state_t,s0)
-/usr/lib/rc/cache(/.*)?
gen_context(system_u:object_r:initrc_state_t,s0)
-
-#
-# /sbin
-#
-/usr/sbin/openrc   --  
gen_context(system_u:object_r:rc_exec_t,s0)
-
-#
-# /var
-#
-/var/lib/ip6?tables(/.*)?  
gen_context(system_u:object_r:initrc_tmp_t,s0)
-
-/run/openrc(/.*)?  
gen_context(system_u:object_r:initrc_state_t,s0)
-')



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/, policy/modules/admin/, policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: 33cfbfdf7674a98aeb8c94d67fc03b170fcc9d6a
Author: Chris PeBenito  ieee  org>
AuthorDate: Sun Nov 22 19:03:11 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:56:17 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=33cfbfdf

various: Module version bump.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/admin/portage.te | 2 +-
 policy/modules/services/xserver.te  | 2 +-
 policy/modules/system/getty.te  | 2 +-
 policy/modules/system/init.te   | 2 +-
 policy/modules/system/miscfiles.te  | 2 +-
 policy/modules/system/systemd.te| 2 +-
 policy/modules/system/userdomain.te | 2 +-
 policy/modules/system/xdg.te| 2 +-
 8 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/policy/modules/admin/portage.te b/policy/modules/admin/portage.te
index b6d01ea3..c0d6cace 100644
--- a/policy/modules/admin/portage.te
+++ b/policy/modules/admin/portage.te
@@ -1,4 +1,4 @@
-policy_module(portage, 1.19.0)
+policy_module(portage, 1.19.1)
 
 
 #

diff --git a/policy/modules/services/xserver.te 
b/policy/modules/services/xserver.te
index 69992107..f1dcad7d 100644
--- a/policy/modules/services/xserver.te
+++ b/policy/modules/services/xserver.te
@@ -1,4 +1,4 @@
-policy_module(xserver, 3.20.1)
+policy_module(xserver, 3.20.2)
 
 gen_require(`
class x_drawable all_x_drawable_perms;

diff --git a/policy/modules/system/getty.te b/policy/modules/system/getty.te
index f9514c77..ffcee469 100644
--- a/policy/modules/system/getty.te
+++ b/policy/modules/system/getty.te
@@ -1,4 +1,4 @@
-policy_module(getty, 1.14.0)
+policy_module(getty, 1.14.1)
 
 
 #

diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
index 6b2654fa..9f9b78b0 100644
--- a/policy/modules/system/init.te
+++ b/policy/modules/system/init.te
@@ -1,4 +1,4 @@
-policy_module(init, 2.9.2)
+policy_module(init, 2.9.3)
 
 gen_require(`
class passwd rootok;

diff --git a/policy/modules/system/miscfiles.te 
b/policy/modules/system/miscfiles.te
index 436f58e2..6cede382 100644
--- a/policy/modules/system/miscfiles.te
+++ b/policy/modules/system/miscfiles.te
@@ -1,4 +1,4 @@
-policy_module(miscfiles, 1.18.0)
+policy_module(miscfiles, 1.18.1)
 
 
 #

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index a08b83d5..b6e508eb 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1,4 +1,4 @@
-policy_module(systemd, 1.10.4)
+policy_module(systemd, 1.10.5)
 
 #
 #

diff --git a/policy/modules/system/userdomain.te 
b/policy/modules/system/userdomain.te
index fb456127..91af760b 100644
--- a/policy/modules/system/userdomain.te
+++ b/policy/modules/system/userdomain.te
@@ -1,4 +1,4 @@
-policy_module(userdomain, 4.20.2)
+policy_module(userdomain, 4.20.3)
 
 
 #

diff --git a/policy/modules/system/xdg.te b/policy/modules/system/xdg.te
index d0c08975..af4efc3c 100644
--- a/policy/modules/system/xdg.te
+++ b/policy/modules/system/xdg.te
@@ -1,4 +1,4 @@
-policy_module(xdg, 1.1.0)
+policy_module(xdg, 1.1.1)
 
 
 #



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: 850672bdf4d432537c4a064319d1c1da05f67af6
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Nov 17 03:46:25 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:56:08 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=850672bd

init: Added fcontext for openrc-shutdown.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  perfinion.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/init.fc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/init.fc b/policy/modules/system/init.fc
index acf89af4..74fb8211 100644
--- a/policy/modules/system/init.fc
+++ b/policy/modules/system/init.fc
@@ -47,6 +47,7 @@ ifdef(`distro_gentoo', `
 /usr/lib/rc/init\.d(/.*)?  
gen_context(system_u:object_r:initrc_state_t,s0)
 /usr/sbin/rc   --  gen_context(system_u:object_r:rc_exec_t,s0)
 /usr/sbin/openrc-init  --  
gen_context(system_u:object_r:init_exec_t,s0)
+/usr/sbin/openrc-shutdown  --  
gen_context(system_u:object_r:init_exec_t,s0)
 ')
 
 ifdef(`distro_redhat',`



[gentoo-commits] proj/hardened-refpolicy:master commit in: gentoo/

2020-11-28 Thread Jason Zaman
commit: b5ac499c52ff081dd3bc394c9f9713b8a4c3964f
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Nov 28 23:00:45 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 23:00:45 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b5ac499c

Merge upstream

Signed-off-by: Jason Zaman  gentoo.org>

 gentoo/STATE | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gentoo/STATE b/gentoo/STATE
index ddc7f641..91b14bfd 100644
--- a/gentoo/STATE
+++ b/gentoo/STATE
@@ -1 +1 @@
-main f1b83f8ef4a1fc93047df634175873a361558af7
+main fe29a74cade96fc98d5101fcc467bf346ff8a32e



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: 46171c7e1b366ee26f62fcbceab9ea3c9f532628
Author: Jason Zaman  perfinion  com>
AuthorDate: Tue Nov 17 03:46:27 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:56:12 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=46171c7e

init: upstream fcontexts from gentoo policy

Signed-off-by: Jason Zaman  perfinion.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/init.fc | 8 +++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/policy/modules/system/init.fc b/policy/modules/system/init.fc
index 74fb8211..c8451701 100644
--- a/policy/modules/system/init.fc
+++ b/policy/modules/system/init.fc
@@ -44,8 +44,11 @@ ifdef(`distro_gentoo',`
 /usr/sbin/upstart  --  gen_context(system_u:object_r:init_exec_t,s0)
 
 ifdef(`distro_gentoo', `
+/usr/lib/rc/cache(/.*)?
gen_context(system_u:object_r:initrc_state_t,s0)
+/usr/lib/rc/console(/.*)?  
gen_context(system_u:object_r:initrc_state_t,s0)
 /usr/lib/rc/init\.d(/.*)?  
gen_context(system_u:object_r:initrc_state_t,s0)
-/usr/sbin/rc   --  gen_context(system_u:object_r:rc_exec_t,s0)
+/usr/sbin/rc   --  
gen_context(system_u:object_r:rc_exec_t,s0)
+/usr/sbin/openrc   --  
gen_context(system_u:object_r:rc_exec_t,s0)
 /usr/sbin/openrc-init  --  
gen_context(system_u:object_r:init_exec_t,s0)
 /usr/sbin/openrc-shutdown  --  
gen_context(system_u:object_r:init_exec_t,s0)
 ')
@@ -79,6 +82,9 @@ ifdef(`distro_debian',`
 
 ifdef(`distro_gentoo', `
 /var/lib/init\.d(/.*)? gen_context(system_u:object_r:initrc_state_t,s0)
+/var/lib/ip6?tables(/.*)?  gen_context(system_u:object_r:initrc_tmp_t,s0)
+
+/run/openrc(/.*)?  gen_context(system_u:object_r:initrc_state_t,s0)
 /run/svscan\.pid   --  
gen_context(system_u:object_r:initrc_runtime_t,s0)
 ')
 



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: ef51b2e319e62e59306a8b44ed96d98e0de0dec4
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Nov 17 03:46:24 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:56:01 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=ef51b2e3

init: Added fcontext for openrc-init.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  perfinion.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/init.fc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/init.fc b/policy/modules/system/init.fc
index eeeb32be..acf89af4 100644
--- a/policy/modules/system/init.fc
+++ b/policy/modules/system/init.fc
@@ -46,6 +46,7 @@ ifdef(`distro_gentoo',`
 ifdef(`distro_gentoo', `
 /usr/lib/rc/init\.d(/.*)?  
gen_context(system_u:object_r:initrc_state_t,s0)
 /usr/sbin/rc   --  gen_context(system_u:object_r:rc_exec_t,s0)
+/usr/sbin/openrc-init  --  
gen_context(system_u:object_r:init_exec_t,s0)
 ')
 
 ifdef(`distro_redhat',`



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: 50ce02c8052e06fca2e8ec5ba6982effdf522d67
Author: Jason Zaman  gentoo  org>
AuthorDate: Tue Nov 17 03:46:28 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:56:14 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=50ce02c8

systemd: make remaining dbus_* optional

Almost all calls to dbus_ interfaces were already optional, this makes
the remaining one optional_policy so that the modules can be installed /
upgraded easier.

Signed-off-by: Jason Zaman  perfinion.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/systemd.te | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 74f3fc55..a08b83d5 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1450,4 +1450,6 @@ 
userdom_manage_user_runtime_dirs(systemd_user_runtime_dir_t)
 userdom_mounton_user_runtime_dirs(systemd_user_runtime_dir_t)
 userdom_relabelto_user_runtime_dirs(systemd_user_runtime_dir_t)
 
-dbus_system_bus_client(systemd_user_runtime_dir_t)
+optional_policy(`
+dbus_system_bus_client(systemd_user_runtime_dir_t)
+')



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: 47d0b1e01912604be4f030997d4946439e80b1ce
Author: Jason Zaman  gentoo  org>
AuthorDate: Tue Nov 17 03:46:26 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:56:10 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=47d0b1e0

Add transition on gentoo init_t to openrc

Commit "init: replace call to init_domtrans_script"
(be231899f5c7f0882843942624dd268f99bab141 in upstream repo)
removed the call to init_domtrans_script which removed the openrc
domtrans. This adds it back directly in the distro_gentoo block.

Signed-off-by: Jason Zaman  perfinion.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/init.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
index b52eaddb..6b2654fa 100644
--- a/policy/modules/system/init.te
+++ b/policy/modules/system/init.te
@@ -120,6 +120,7 @@ init_unit_file(systemd_unit_t)
 ifdef(`distro_gentoo',`
type rc_exec_t;
domain_entry_file(initrc_t, rc_exec_t)
+   domtrans_pattern(init_t, rc_exec_t, initrc_t)
 ')
 
 ifdef(`enable_mls',`



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/, policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: e2236d7e0c64a40ec71ab835f5818e396437ec2e
Author: Jason Zaman  gentoo  org>
AuthorDate: Tue Nov 17 03:46:21 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:55:48 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e2236d7e

userdomain: Add watch on home dirs

avc:  denied  { watch } for  pid=12351 comm="gmain" 
path="/usr/share/backgrounds/xfce" dev="zfs" ino=366749 
scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 
tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0
avc:  denied  { watch } for  pid=11646 comm="gmain" path="/etc/fonts" dev="zfs" 
ino=237700 scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 
tcontext=system_u:object_r:fonts_t:s0 tclass=dir permissive=0
avc:  denied  { watch } for  pid=12351 comm="gmain" path="/home/jason/Desktop" 
dev="zfs" ino=33153 scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 
tcontext=staff_u:object_r:user_home_t:s0 tclass=dir permissive=0
avc:  denied  { watch } for  pid=12574 comm="gmain" 
path="/home/jason/.local/share/icc" dev="zfs" ino=1954514 
scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 
tcontext=staff_u:object_r:xdg_data_t:s0 tclass=dir permissive=0
avc:  denied  { watch } for  pid=11795 comm="gmain" 
path="/home/jason/.config/xfce4/panel/launcher-19" dev="zfs" ino=35464 
scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 
tcontext=staff_u:object_r:xdg_config_t:s0 tclass=dir permissive=0
avc:  denied  { watch } for  pid=12351 comm="gmain" 
path="/home/jason/downloads/pics" dev="zfs" ino=38173 
scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 
tcontext=staff_u:object_r:xdg_downloads_t:s0 tclass=dir permissive=0
Signed-off-by: Jason Zaman  perfinion.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/xserver.if  |  11 +-
 policy/modules/system/miscfiles.if  |  18 
 policy/modules/system/userdomain.if |  15 ++-
 policy/modules/system/xdg.if| 198 
 4 files changed, 240 insertions(+), 2 deletions(-)

diff --git a/policy/modules/services/xserver.if 
b/policy/modules/services/xserver.if
index baa39ef8..d5d6c791 100644
--- a/policy/modules/services/xserver.if
+++ b/policy/modules/services/xserver.if
@@ -95,6 +95,7 @@ interface(`xserver_restricted_role',`
dev_rw_usbfs($2)
 
miscfiles_read_fonts($2)
+   miscfiles_watch_fonts_dirs($2)
 
xserver_common_x_domain_template(user, $2)  #selint-disable:S-004
xserver_domtrans($2)
@@ -186,10 +187,13 @@ interface(`xserver_role',`
optional_policy(`
xdg_manage_all_cache($2)
xdg_relabel_all_cache($2)
+   xdg_watch_all_cache_dirs($2)
xdg_manage_all_config($2)
xdg_relabel_all_config($2)
+   xdg_watch_all_config_dirs($2)
xdg_manage_all_data($2)
xdg_relabel_all_data($2)
+   xdg_watch_all_data_dirs($2)
 
xdg_generic_user_home_dir_filetrans_cache($2, dir, ".cache")
xdg_generic_user_home_dir_filetrans_config($2, dir, ".config")
@@ -203,14 +207,19 @@ interface(`xserver_role',`
 
xdg_manage_documents($2)
xdg_relabel_documents($2)
+   xdg_watch_documents_dirs($2)
xdg_manage_downloads($2)
xdg_relabel_downloads($2)
+   xdg_watch_downloads_dirs($2)
xdg_manage_music($2)
xdg_relabel_music($2)
+   xdg_watch_music_dirs($2)
xdg_manage_pictures($2)
xdg_relabel_pictures($2)
+   xdg_watch_pictures_dirs($2)
xdg_manage_videos($2)
xdg_relabel_videos($2)
+   xdg_watch_videos_dirs($2)
 
xdg_cache_filetrans($2, mesa_shader_cache_t, dir, 
"mesa_shader_cache")
')
@@ -508,7 +517,7 @@ interface(`xserver_use_user_fonts',`
')
 
# Read per user fonts
-   allow $1 user_fonts_t:dir list_dir_perms;
+   allow $1 user_fonts_t:dir { list_dir_perms watch };
allow $1 user_fonts_t:file { map read_file_perms };
 
# Manipulate the global font cache

diff --git a/policy/modules/system/miscfiles.if 
b/policy/modules/system/miscfiles.if
index a0b13261..751b3579 100644
--- a/policy/modules/system/miscfiles.if
+++ b/policy/modules/system/miscfiles.if
@@ -854,6 +854,24 @@ interface(`miscfiles_manage_public_files',`
manage_lnk_files_pattern($1, public_content_rw_t, public_content_rw_t)
 ')
 
+
+## 
+## Watch public files
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+#
+interface(`miscfiles_watch_public_dirs',`
+   gen_require(`
+   type public_co

[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-11-28 Thread Jason Zaman
commit: e42716a61c8fe4fb0317fbc23a9b8054e0ec9608
Author: Chris PeBenito  ieee  org>
AuthorDate: Fri Nov 20 14:54:32 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:55:46 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e42716a6

dbus: Module version bump.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/dbus.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te
index 86e79b76..f4ee2ad3 100644
--- a/policy/modules/services/dbus.te
+++ b/policy/modules/services/dbus.te
@@ -1,4 +1,4 @@
-policy_module(dbus, 1.29.2)
+policy_module(dbus, 1.29.3)
 
 gen_require(`
class dbus all_dbus_perms;



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/admin/

2020-11-28 Thread Jason Zaman
commit: b0b027157f3d12f12c5f859343ae4c28224c5629
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Nov 17 03:46:23 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:55:59 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b0b02715

portage: Added /var/cache/distfiles path.

Closes: https://github.com/perfinion/hardened-refpolicy/pull/1
Signed-off-by: Jason Zaman  perfinion.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/admin/portage.fc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/admin/portage.fc b/policy/modules/admin/portage.fc
index 5757deaa..b1b28f3e 100644
--- a/policy/modules/admin/portage.fc
+++ b/policy/modules/admin/portage.fc
@@ -28,6 +28,7 @@
 /var/db/pkg(/.*)?  gen_context(system_u:object_r:portage_db_t,s0)
 /var/db/repos(/.*)?gen_context(system_u:object_r:portage_ebuild_t,s0)
 /var/cache/binpkgs(/.*)?  gen_context(system_u:object_r:portage_ebuild_t,s0)
+/var/cache/distfiles(/.*)? 
gen_context(system_u:object_r:portage_ebuild_t,s0)
 /var/cache/distfiles/cvs-src(/.*)? 
gen_context(system_u:object_r:portage_srcrepo_t,s0)
 /var/cache/distfiles/egit-src(/.*)?
gen_context(system_u:object_r:portage_srcrepo_t,s0)
 /var/cache/distfiles/git[0-9]-src(/.*)?
gen_context(system_u:object_r:portage_srcrepo_t,s0)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-11-28 Thread Jason Zaman
commit: 1958d08d70d801a23e7ef15a8b3b0857b6c79946
Author: Daniel Burgener  microsoft  com>
AuthorDate: Wed Nov 11 21:14:43 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:55:41 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=1958d08d

Allow init to mount over the system bus

In portable profiles, systemd bind mounts the system bus into process
namespaces

Signed-off-by: Daniel Burgener  microsoft.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/dbus.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te
index f123c6d9..86e79b76 100644
--- a/policy/modules/services/dbus.te
+++ b/policy/modules/services/dbus.te
@@ -50,6 +50,7 @@ init_named_socket_activation(system_dbusd_t, 
system_dbusd_runtime_t)
 type system_dbusd_runtime_t alias system_dbusd_var_run_t;
 files_runtime_file(system_dbusd_runtime_t)
 init_daemon_runtime_file(system_dbusd_runtime_t, dir, "dbus")
+init_mountpoint(system_dbusd_runtime_t)
 
 type system_dbusd_tmp_t;
 files_tmp_file(system_dbusd_tmp_t)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: 63b316f5821e49c3f6b3e87a219af24e2bebab12
Author: Chris PeBenito  ieee  org>
AuthorDate: Mon Nov  9 16:45:32 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=63b316f5

lvm: Module version bump.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/lvm.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te
index 58517502..9c281a51 100644
--- a/policy/modules/system/lvm.te
+++ b/policy/modules/system/lvm.te
@@ -1,4 +1,4 @@
-policy_module(lvm, 1.25.0)
+policy_module(lvm, 1.25.1)
 
 
 #



[gentoo-commits] proj/hardened-refpolicy:master commit in: gentoo/

2020-11-28 Thread Jason Zaman
commit: 3fcff3ea67938cf4dc21a6f694295b94edbcb79e
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Nov 16 09:04:22 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:04:22 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3fcff3ea

Merge upstream

Signed-off-by: Jason Zaman  gentoo.org>

 gentoo/STATE | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gentoo/STATE b/gentoo/STATE
index ecc91a17..ddc7f641 100644
--- a/gentoo/STATE
+++ b/gentoo/STATE
@@ -1 +1 @@
-master 14a45a594baf987679cbda6302e54ba0617efe48
+main f1b83f8ef4a1fc93047df634175873a361558af7



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/flask/

2020-11-28 Thread Jason Zaman
commit: dadb27bdd553c2e64101dc9992a1df4f6e5975d0
Author: Dannick Pomerleau  hotmail  com>
AuthorDate: Fri Oct 16 00:49:49 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=dadb27bd

access_vectors: Add new capabilities to cap2

Updated location of capability definitions to point to current location within 
kernel source code.

CAP_BPF and CAP_PERFMON mainlined in: cb8e59cc87201af93dfbb6c3dccc8fcad72a09c2, 
original commit: a17b53c4a4b55ec322c132b6670743612229ee9c
CAP_CHECKPOINT_RESTORE mainlined in: 74858abbb103f922487fd1a24513bbed80f9, 
original commit: 124ea650d3072b005457faed69909221c2905a1f

The missing capabilities were noticed on archlinux with kernel 5.8.14-arch1-1.

Signed-off-by: Dannick Pomerleau  hotmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/flask/access_vectors | 5 -
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/policy/flask/access_vectors b/policy/flask/access_vectors
index a9aceb46..d464a3de 100644
--- a/policy/flask/access_vectors
+++ b/policy/flask/access_vectors
@@ -132,7 +132,7 @@ common x_device
 #
 common cap
 {
-   # The capabilities are defined in include/linux/capability.h
+   # The capabilities are defined in include/uapi/linux/capability.h
# Capabilities >= 32 are defined in the cap2 common.
# Care should be taken to ensure that these are consistent with
# those definitions. (Order matters)
@@ -179,6 +179,9 @@ common cap2
wake_alarm
block_suspend
audit_read
+   perfmon
+   bpf
+   checkpoint_restore
 }
 
 #



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/kernel/

2020-11-28 Thread Jason Zaman
commit: de9c38bc9643b4d761a7eff93400c2232d75220c
Author: Anthony PERARD  citrix  com>
AuthorDate: Tue Oct 27 17:22:28 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=de9c38bc

xen: Allow xenstored to map /proc/xen/xsd_kva

xenstored is using mmap() on /proc/xen/xsd_kva, and when the SELinux
boolean "domain_can_mmap_files" in CentOS is set to false the mmap()
call fails.

Signed-off-by: Anthony PERARD  citrix.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/kernel/filesystem.if | 18 ++
 policy/modules/system/xen.te|  1 +
 2 files changed, 19 insertions(+)

diff --git a/policy/modules/kernel/filesystem.if 
b/policy/modules/kernel/filesystem.if
index aa855bd0..05ddc598 100644
--- a/policy/modules/kernel/filesystem.if
+++ b/policy/modules/kernel/filesystem.if
@@ -5328,6 +5328,24 @@ interface(`fs_manage_xenfs_files',`
manage_files_pattern($1, xenfs_t, xenfs_t)
 ')
 
+
+## 
+## Map files a XENFS filesystem.
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+#
+interface(`fs_mmap_xenfs_files',`
+   gen_require(`
+   type xenfs_t;
+   ')
+
+   allow $1 xenfs_t:file map;
+')
+
 
 ## 
 ## Do not audit attempts to create,

diff --git a/policy/modules/system/xen.te b/policy/modules/system/xen.te
index 2c95d0ca..82328cbb 100644
--- a/policy/modules/system/xen.te
+++ b/policy/modules/system/xen.te
@@ -459,6 +459,7 @@ files_read_usr_files(xenstored_t)
 
 fs_search_xenfs(xenstored_t)
 fs_manage_xenfs_files(xenstored_t)
+fs_mmap_xenfs_files(xenstored_t)
 
 term_use_generic_ptys(xenstored_t)
 



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/kernel/, policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: 49688047a9eaf2a136c50ecb7ad5097a9921e870
Author: Chris PeBenito  ieee  org>
AuthorDate: Thu Nov  5 11:55:25 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=49688047

filesystem, xen: Module version bump.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/kernel/filesystem.te | 2 +-
 policy/modules/system/xen.te| 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/policy/modules/kernel/filesystem.te 
b/policy/modules/kernel/filesystem.te
index f338e207..ef891c09 100644
--- a/policy/modules/kernel/filesystem.te
+++ b/policy/modules/kernel/filesystem.te
@@ -1,4 +1,4 @@
-policy_module(filesystem, 1.28.2)
+policy_module(filesystem, 1.28.3)
 
 
 #

diff --git a/policy/modules/system/xen.te b/policy/modules/system/xen.te
index 82328cbb..232c3ee4 100644
--- a/policy/modules/system/xen.te
+++ b/policy/modules/system/xen.te
@@ -1,4 +1,4 @@
-policy_module(xen, 1.18.1)
+policy_module(xen, 1.18.2)
 
 
 #



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: e5553f37a167cc7205e8550025fd2501ba7ed8b3
Author: Jason Zaman  gentoo  org>
AuthorDate: Tue Nov 17 03:46:22 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:55:51 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e5553f37

getty: allow watching file /run/agetty.reload

avc:  denied  { watch } for  pid=2485 comm="agetty" path="/run/agetty.reload" 
dev="tmpfs" ino=22050 scontext=system_u:system_r:getty_t:s0 
tcontext=system_u:object_r:getty_runtime_t:s0 tclass=file permissive=0

Signed-off-by: Jason Zaman  perfinion.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/getty.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/getty.te b/policy/modules/system/getty.te
index ce9e4ded..f9514c77 100644
--- a/policy/modules/system/getty.te
+++ b/policy/modules/system/getty.te
@@ -47,6 +47,7 @@ allow getty_t getty_log_t:file { append_file_perms 
create_file_perms setattr_fil
 logging_log_filetrans(getty_t, getty_log_t, file)
 
 allow getty_t getty_runtime_t:dir watch;
+allow getty_t getty_runtime_t:file watch;
 manage_files_pattern(getty_t, getty_runtime_t, getty_runtime_t)
 files_runtime_filetrans(getty_t, getty_runtime_t, file)
 



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-11-28 Thread Jason Zaman
commit: fb88733bbd3f7017f4baf778b9f147eb769b53e9
Author: Dave Sugar  tresys  com>
AuthorDate: Sat Sep 26 18:55:35 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=fb88733b

Updates for corosync to work in enforcing

Allow corosync to map its own shared memory

Sep 26 18:45:02 localhost audispd: node=virtual type=AVC 
msg=audit(1601145902.400:2972): avc:  denied  { map } for  pid=6903 
comm="corosync" path="/dev/shm/qb-6903-7028-31-FGGoGv/qb-request-cmap-header" 
dev="tmpfs" ino=40759 scontext=system_u:system_r:corosync_t:s0 
tcontext=system_u:object_r:corosync_tmpfs_t:s0 tclass=file permissive=1

Setup corosync lock file type

Sep 27 17:20:07 localhost audispd: node=virtual type=PATH 
msg=audit(1601227207.522:3421): item=1 name="/var/lock/subsys/corosync" 
inode=35029 dev=00:14 mode=0100640 ouid=0 ogid=0 rdev=00:00 
obj=system_u:object_r:var_lock_t:s0 objtype=DELETE cap_fp= 
cap_fi= cap_fe=0 cap_fver=0
Sep 27 17:34:49 localhost audispd: node=virtual type=AVC 
msg=audit(1601228085.093:2862): avc:  denied  { read } for  pid=6748 
comm="corosync" name="lock" dev="dm-0" ino=13082 
scontext=system_u:system_r:corosync_t:s0 
tcontext=system_u:object_r:var_lock_t:s0 tclass=lnk_file permissive=1
Sep 27 17:34:49 localhost audispd: node=virtual type=AVC 
msg=audit(1601228085.093:2862): avc:  denied  { search } for  pid=6748 
comm="corosync" name="lock" dev="tmpfs" ino=10248 
scontext=system_u:system_r:corosync_t:s0 
tcontext=system_u:object_r:var_lock_t:s0 tclass=dir permissive=1
Sep 27 17:34:49 localhost audispd: node=virtual type=AVC 
msg=audit(1601228085.797:2882): avc:  denied  { add_name } for  pid=7066 
comm="touch" name="corosync" scontext=system_u:system_r:corosync_t:s0 
tcontext=system_u:object_r:var_lock_t:s0 tclass=dir permissive=1
Sep 27 17:34:49 localhost audispd: node=virtual type=AVC 
msg=audit(1601228085.797:2882): avc:  denied  { create } for  pid=7066 
comm="touch" name="corosync" scontext=system_u:system_r:corosync_t:s0 
tcontext=system_u:object_r:var_lock_t:s0 tclass=file permissive=1
Sep 27 17:34:49 localhost audispd: node=virtual type=AVC 
msg=audit(1601228085.797:2882): avc:  denied  { write open } for pid=7066 
comm="touch" path="/run/lock/subsys/corosync" dev="tmpfs" ino=35048 
scontext=system_u:system_r:corosync_t:s0 
tcontext=system_u:object_r:var_lock_t:s0 tclass=file permissive=1

On RHEL7 systemd executes '/usr/share/corosync/corosync start' to start, label 
these files.

Signed-off-by: Dave Sugar  tresys.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/corosync.fc | 7 +++
 policy/modules/services/corosync.te | 7 +++
 2 files changed, 14 insertions(+)

diff --git a/policy/modules/services/corosync.fc 
b/policy/modules/services/corosync.fc
index 51a558c8..1c4787d7 100644
--- a/policy/modules/services/corosync.fc
+++ b/policy/modules/services/corosync.fc
@@ -6,8 +6,15 @@
 /usr/sbin/corosync --  
gen_context(system_u:object_r:corosync_exec_t,s0)
 /usr/sbin/corosync-notifyd --  
gen_context(system_u:object_r:corosync_exec_t,s0)
 
+ifdef(`distro_redhat',`
+/usr/share/corosync/corosync   --  
gen_context(system_u:object_r:corosync_exec_t,s0)
+/usr/share/corosync/corosync-notifyd   --  
gen_context(system_u:object_r:corosync_exec_t,s0)
+')
+
 /var/lib/corosync(/.*)?
gen_context(system_u:object_r:corosync_var_lib_t,s0)
 
+/var/lock/subsys/corosync  --  
gen_context(system_u:object_r:corosync_lock_t,s0)
+
 /var/log/cluster/corosync\.log.*   --  
gen_context(system_u:object_r:corosync_var_log_t,s0)
 
 /run/cman_.*   -s  gen_context(system_u:object_r:corosync_runtime_t,s0)

diff --git a/policy/modules/services/corosync.te 
b/policy/modules/services/corosync.te
index 36a6ffab..b85b1c9a 100644
--- a/policy/modules/services/corosync.te
+++ b/policy/modules/services/corosync.te
@@ -13,6 +13,9 @@ domain_obj_id_change_exemption(corosync_t)
 type corosync_initrc_exec_t;
 init_script_file(corosync_initrc_exec_t)
 
+type corosync_lock_t;
+files_lock_file(corosync_lock_t)
+
 type corosync_runtime_t alias corosync_var_run_t;
 files_runtime_file(corosync_runtime_t)
 
@@ -43,6 +46,9 @@ allow corosync_t self:shm create_shm_perms;
 allow corosync_t self:unix_dgram_socket sendto;
 allow corosync_t self:unix_stream_socket { accept connectto listen };
 
+manage_files_pattern(corosync_t, corosync_lock_t, corosync_lock_t)
+files_lock_filetrans(corosync_t, corosync_lock_t, file)
+
 manage_dirs_pattern(corosync_t, corosync_tmp_t, corosync_tmp_t)
 manage_files_pattern(corosync_t, corosync_tmp_t, corosync_tmp_t)
 relabel_files_pattern(corosync_t, corosync_tmp_t, corosync_tmp_t)
@

[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-11-28 Thread Jason Zaman
commit: f5fb96b1a6cbde18dcf9bde9b29a84fb81acdb1e
Author: Guido Trentalancia  trentalancia  com>
AuthorDate: Mon Nov  9 14:43:01 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f5fb96b1

Add LVM module permissions needed to open cryptsetup devices.

Signed-off-by: Guido Trentalancia  trentalancia.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/lvm.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/lvm.te b/policy/modules/system/lvm.te
index 23eaceb2..58517502 100644
--- a/policy/modules/system/lvm.te
+++ b/policy/modules/system/lvm.te
@@ -177,6 +177,8 @@ allow lvm_t self:netlink_kobject_uevent_socket 
create_socket_perms;
 allow lvm_t self:sem create_sem_perms;
 # gt: the following is for sockets in the AF_ALG namespace (userspace 
interface to the kernel Crypto API)
 allow lvm_t self:socket create_stream_socket_perms;
+# gt: the following allows opening cryptsetup devices
+allow lvm_t self:key { search write };
 
 allow lvm_t self:unix_stream_socket { connectto create_stream_socket_perms };
 allow lvm_t clvmd_t:unix_stream_socket { connectto rw_socket_perms };



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-11-28 Thread Jason Zaman
commit: 8fff7fea29cd303fb618520b0d792e6ee0cbf0a7
Author: Dave Sugar  tresys  com>
AuthorDate: Sat Sep 26 19:07:30 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=8fff7fea

Allow pacemaker to map/read/write corosync shared memory files

Sep 26 18:44:56 localhost audispd: node=virtual type=AVC 
msg=audit(1601145893.104:2915): avc:  denied  { read write } for pid=7173 
comm="stonithd" name="qb-request-cmap-header" dev="tmpfs" ino=37263 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:corosync_tmpfs_t:s0 tclass=file permissive=1
Sep 26 18:44:56 localhost audispd: node=virtual type=AVC 
msg=audit(1601145893.104:2915): avc:  denied  { open } for  pid=7173 
comm="stonithd" path="/dev/shm/qb-7065-7173-28-i3gF6U/qb-request-cmap-header" 
dev="tmpfs" ino=37263 scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:corosync_tmpfs_t:s0 tclass=file permissive=1
Sep 26 18:44:56 localhost audispd: node=virtual type=AVC 
msg=audit(1601145893.104:2916): avc:  denied  { map } for  pid=7173 
comm="stonithd" path="/dev/shm/qb-7065-7173-28-i3gF6U/qb-request-cmap-header" 
dev="tmpfs" ino=37263 scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:corosync_tmpfs_t:s0 tclass=file permissive=1

Signed-off-by: Dave Sugar  tresys.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/corosync.if  | 19 +++
 policy/modules/services/pacemaker.te |  1 +
 2 files changed, 20 insertions(+)

diff --git a/policy/modules/services/corosync.if 
b/policy/modules/services/corosync.if
index f86dbed3..ee54bc9a 100644
--- a/policy/modules/services/corosync.if
+++ b/policy/modules/services/corosync.if
@@ -97,6 +97,25 @@ interface(`corosync_stream_connect',`
stream_connect_pattern($1, corosync_runtime_t, corosync_runtime_t, 
corosync_t)
 ')
 
+##
+## 
+## Memmap, read and write corosync tmpfs files.
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+#
+interface(`corosync_mmap_rw_tmpfs',`
+   gen_require(`
+   type corosync_tmpfs_t;
+   ')
+
+   fs_search_tmpfs($1)
+   mmap_rw_files_pattern($1, corosync_tmpfs_t, corosync_tmpfs_t)
+')
+
 ##
 ## 
 ## Read and write corosync tmpfs files.

diff --git a/policy/modules/services/pacemaker.te 
b/policy/modules/services/pacemaker.te
index 70d976ea..69d619a1 100644
--- a/policy/modules/services/pacemaker.te
+++ b/policy/modules/services/pacemaker.te
@@ -121,6 +121,7 @@ tunable_policy(`pacemaker_startstop_all_services',`
 
 optional_policy(`
corosync_read_log(pacemaker_t)
+   corosync_mmap_rw_tmpfs(pacemaker_t)
corosync_stream_connect(pacemaker_t)
 ')
 



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-11-28 Thread Jason Zaman
commit: 51a5f6d799fac283615b106a05916e3179123db5
Author: Dave Sugar  tresys  com>
AuthorDate: Sun Sep 27 02:07:21 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=51a5f6d7

pacemaker systemd permissions

Allow pacemaker to get status of all running services and reload systemd

Sep 27 01:59:16 localhost audispd: node=virtual type=USER_AVC 
msg=audit(1601171956.494:2945): pid=1 uid=0 auid=4294967295 ses=4294967295 
subj=system_u:system_r:init_t:s0 msg='avc:  denied  { status } for auid=n/a 
uid=0 gid=0 path="/usr/lib/systemd/system/target-monitor@.service" 
cmdline="/usr/libexec/pacemaker/lrmd" scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:systemd_unit_t:s0 tclass=service 
exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'

Sep 29 01:46:09 localhost audispd: node=virtual type=USER_AVC 
msg=audit(1601343969.962:2974): pid=1 uid=0 auid=4294967295 ses=4294967295 
subj=system_u:system_r:init_t:s0 msg='avc:  denied  { reload } for auid=n/a 
uid=0 gid=0 cmdline="/usr/libexec/pacemaker/lrmd" 
scontext=system_u:system_r:pacemaker_t:s0 tcontext=system_u:system_r:init_t:s0 
tclass=system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? 
terminal=?'

Allow pacemaker to start/sotp all units (when enabled)

Sep 30 14:37:14 localhost audispd: node=virtual type=USER_AVC 
msg=audit(1601476634.877:3075): pid=1 uid=0 auid=4294967295 ses=4294967295 
subj=system_u:system_r:init_t:s0 msg='avc:  denied  { start } for auid=n/a 
uid=0 gid=0 path="/usr/lib/systemd/system/target-monitor@.service" 
cmdline="/usr/libexec/pacemaker/lrmd" scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:systemd_unit_t:s0 tclass=service  
exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'

Allow for dynamic creation of unit files (with private type)

By using a private type pacemaker doesn't need permission to
read/write all init_runtime_t files.

Sep 30 14:37:14 localhost audispd: node=virtual type=AVC 
msg=audit(1601476634.759:3071): avc:  denied  { write } for  pid=5075 
comm="lrmd" name="system" dev="tmpfs" ino=1177 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:init_runtime_t:s0 tclass=dir permissive=1
Sep 30 14:37:14 localhost audispd: node=virtual type=AVC 
msg=audit(1601476634.759:3071): avc:  denied  { add_name } for  pid=5075 
comm="lrmd" name="target-monitor  my.service.d" 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:init_runtime_t:s0 tclass=dir permissive=1
Sep 30 14:37:14 localhost audispd: node=virtual type=AVC 
msg=audit(1601476634.759:3071): avc:  denied  { create } for  pid=5075 
comm="lrmd" name="target-monitor  my.service.d" 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:init_runtime_t:s0 tclass=dir permissive=1
Sep 30 14:37:14 localhost audispd: node=virtual type=AVC 
msg=audit(1601476634.761:3072): avc:  denied  { create } for  pid=5075 
comm="lrmd" name="50-pacemaker.conf" scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:init_runtime_t:s0 tclass=file permissive=1
Sep 30 14:37:14 localhost audispd: node=virtual type=AVC 
msg=audit(1601476634.761:3072): avc:  denied  { write open } for  pid=5075 
comm="lrmd" path="/run/systemd/system/target-monitor  
my.service.d/50-pacemaker.conf" dev="tmpfs" ino=48933 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:init_runtime_t:s0 tclass=file permissive=1
Sep 30 14:37:14 localhost audispd: node=virtual type=AVC 
msg=audit(1601476634.761:3073): avc:  denied  { getattr } for  pid=5075 
comm="lrmd" path="/run/systemd/system/target-monitor  
my.service.d/50-pacemaker.conf" dev="tmpfs" ino=48933 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:init_runtime_t:s0 tclass=file permissive=1

Signed-off-by: Dave Sugar  tresys.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/pacemaker.te | 24 
 1 file changed, 24 insertions(+)

diff --git a/policy/modules/services/pacemaker.te 
b/policy/modules/services/pacemaker.te
index f7a18a7f..70d976ea 100644
--- a/policy/modules/services/pacemaker.te
+++ b/policy/modules/services/pacemaker.te
@@ -5,6 +5,13 @@ policy_module(pacemaker, 1.6.0)
 # Declarations
 #
 
+## 
+## 
+## Allow pacemaker to start/stop services
+## 
+## 
+gen_tunable(pacemaker_startstop_all_services, false)
+
 type pacemaker_t;
 type pacemaker_exec_t;
 init_daemon_domain(pacemaker_t, pacemaker_exec_t)
@@ -18,6 +25,9 @@ logging_log_file(pacemaker_log_t)
 type pacemaker_runtime_t alias pacemaker_var_run_t;
 files_runtime_file(pacemaker_runtime_t)
 
+type pacemaker_runt

[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-11-28 Thread Jason Zaman
commit: 054510904041ecc1b8cbacfbfd853c88e01423d9
Author: Dave Sugar  tresys  com>
AuthorDate: Sun Sep 27 00:43:44 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=05451090

To get pacemaker working in enforcing

Allow pacemaker to map its shared memory

Sep 27 00:30:32 localhost audispd: node=virtual type=AVC 
msg=audit(1601166632.229:2936): avc:  denied  { map } for  pid=7173 comm="cib" 
path="/dev/shm/qb-7173-7465-14-5Voxju/qb-request-cib_rw-header" dev="tmpfs" 
ino=39707 scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:pacemaker_tmpfs_t:s0 tclass=file permissive=1

Label pacemaker private log file

Sep 26 18:44:56 localhost audispd: node=virtual type=AVC 
msg=audit(1601145892.788:2902): avc:  denied  { write } for  pid=7168 
comm="pacemakerd" name="/" dev="tmpfs" ino=13995 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1
Sep 26 18:44:56 localhost audispd: node=virtual type=AVC 
msg=audit(1601145892.788:2902): avc:  denied  { add_name } for  pid=7168 
comm="pacemakerd" name="pacemaker.log" 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1
Sep 26 18:44:56 localhost audispd: node=virtual type=AVC 
msg=audit(1601145892.788:2902): avc:  denied  { create } for  pid=7168 
comm="pacemakerd" name="pacemaker.log" 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1
Sep 26 18:44:56 localhost audispd: node=virtual type=AVC 
msg=audit(1601145892.788:2902): avc:  denied  { append open } for pid=7168 
comm="pacemakerd" path="/var/log/pacemaker.log" dev="tmpfs" ino=32670 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=1

It writes to log, but also reads

Sep 27 00:30:30 localhost audispd: node=virtual type=AVC 
msg=audit(1601166628.381:2892): avc:  denied  { read } for  pid=7177 
comm="pengine" name="pacemaker.log" dev="tmpfs" ino=35813 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:pacemaker_log_t:s0 tclass=file permissive=1

Pacemaker can read stuff in /usr/share/pacemaker/

Sep 27 00:30:30 localhost audispd: node=virtual type=AVC 
msg=audit(1601166628.383:2893): avc:  denied  { read } for  pid=7173 comm="cib" 
name="pacemaker-2.10.rng" dev="dm-0" ino=76508 
scontext=system_u:system_r:pacemaker_t:s0 tcontext=system_u:object_r:usr_t:s0 
tclass=file permissive=1
Sep 27 00:30:30 localhost audispd: node=virtual type=AVC 
msg=audit(1601166628.383:2893): avc:  denied  { open } for  pid=7173 comm="cib" 
path="/usr/share/pacemaker/pacemaker-2.10.rng" dev="dm-0" ino=76508 
scontext=system_u:system_r:pacemaker_t:s0 tcontext=system_u:object_r:usr_t:s0 
tclass=file permissive=1

pacemaker dbus related stuff

Sep 27 00:30:50 localhost audispd: node=virtual type=AVC 
msg=audit(1601166650.761:2953): avc:  denied  { write } for  pid=7175 
comm="lrmd" name="system_bus_socket" dev="tmpfs" ino=13960 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:object_r:system_dbusd_runtime_t:s0 tclass=sock_file 
permissive=1
Sep 27 00:30:50 localhost audispd: node=virtual type=AVC 
msg=audit(1601166650.761:2953): avc:  denied  { connectto } for pid=7175 
comm="lrmd" path="/run/dbus/system_bus_socket" 
scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 
tclass=unix_stream_socket permissive=1
Sep 27 00:30:50 localhost audispd: node=virtual type=USER_AVC 
msg=audit(1601166650.763:2954): pid=2798 uid=81 auid=4294967295 ses=4294967295 
subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { 
send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello 
dest=org.freedesktop.DBus spid=7175 scontext=system_u:system_r:pacemaker_t:s0 
tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dbus 
exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'
Sep 27 00:30:50 localhost audispd: node=virtual type=USER_AVC 
msg=audit(1601166650.764:2955): pid=2798 uid=81 auid=4294967295 ses=4294967295 
subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { 
send_msg } for msgtype=method_call interface=org.freedesktop.systemd1.Manager 
member=LoadUnit dest=org.freedesktop.systemd1 spid=7175 tpid=1 
scontext=system_u:system_r:pacemaker_t:s0 tcontext=system_u:system_r:init_t:s0 
tclass=dbus exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'
Sep 27 00:30:50 localhost audispd: node=virtual type=USER_AVC 
msg=audit(1601166650.767:2959)

[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-11-28 Thread Jason Zaman
commit: 998aa259af68dfd78d712d4688f03fd1be4a78b0
Author: Chris PeBenito  ieee  org>
AuthorDate: Tue Oct 13 19:25:24 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 09:03:43 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=998aa259

corosync, pacemaker: Module version bump.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/corosync.te  | 2 +-
 policy/modules/services/pacemaker.te | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/policy/modules/services/corosync.te 
b/policy/modules/services/corosync.te
index b85b1c9a..4fbc7426 100644
--- a/policy/modules/services/corosync.te
+++ b/policy/modules/services/corosync.te
@@ -1,4 +1,4 @@
-policy_module(corosync, 1.6.0)
+policy_module(corosync, 1.6.1)
 
 
 #

diff --git a/policy/modules/services/pacemaker.te 
b/policy/modules/services/pacemaker.te
index 69d619a1..a34f5536 100644
--- a/policy/modules/services/pacemaker.te
+++ b/policy/modules/services/pacemaker.te
@@ -1,4 +1,4 @@
-policy_module(pacemaker, 1.6.0)
+policy_module(pacemaker, 1.6.1)
 
 
 #



[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow/

2020-11-28 Thread Jason Zaman
commit: fdec981a9b8bf557185abfc4e9c74f0341b23c7e
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Nov 28 21:48:26 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:41:43 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fdec981a

sci-libs/tensorflow: bump 2.4.0_rc3

Package-Manager: Portage-3.0.9, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow/Manifest  | 4 ++--
 .../{tensorflow-2.4.0_rc1.ebuild => tensorflow-2.4.0_rc3.ebuild}  | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/sci-libs/tensorflow/Manifest b/sci-libs/tensorflow/Manifest
index aac7a9c5d30..4b1dec94684 100644
--- a/sci-libs/tensorflow/Manifest
+++ b/sci-libs/tensorflow/Manifest
@@ -52,9 +52,9 @@ DIST tensorflow-1.15.0-python-license.rst.txt 45132 BLAKE2B 
8a8ace4b64fd9eda1932
 DIST tensorflow-2.1.0.tar.gz 41637803 BLAKE2B 
63aac95cdb71097d2e7a257a691a2b51703fb22d2535395494adebfae0d3f97f8dd9e0deaadf1c2f3d3d26138066a7c6fb9b9728b5b0ac3d54360d7b5e4bebff
 SHA512 
6d09ba3c097e4b3d712e7164d649841572c418d56c207eea6d31e3b1851b84ce57e82801d9887d84cfd8fcf990a3ea4c4b4b05265f8d625509986412c230c3c6
 DIST tensorflow-2.2.0.tar.gz 42100791 BLAKE2B 
8b773ae9945ca267af33a34d86f6aef02310976bea1cdd98858d1405e8da845640b72a073b71fcfccb2b73f08600a5eada2c2332a8d9480bba71e9f25dbb2220
 SHA512 
94a2663497d333d543f363e9fea94fbcfdcdbbc0dfbaf009ba9181a808713aeb78f9b8805f56bea5fd3925a36f105427b3996795750589f378d8afbdadc2b86d
 DIST tensorflow-2.3.1.tar.gz 46544608 BLAKE2B 
c3cb0954fcd060b95d63895cbeeca20f6af29ade999dc43db5fe010d6b33b6f650047d529f174a1663c23440a56e057e2f97c503a4a40bcdac9374b549f3220e
 SHA512 
e497ef4564f50abf9f918be4522cf702f4cf945cb1ebf83af1386ac4ddc7373b3ba70c7f803f8ca06faf2c6b5396e60b1e0e9b97bfbd667e733b08b6e6d70ef0
-DIST tensorflow-2.4.0_rc1.tar.gz 53249752 BLAKE2B 
14f4c1d37c9086485b768fa17c9cbdff2a5cb40bf4456aff8739b4ea224889551b08c02a7623866f2e7af3c7ec4a940de2b41cd64530ee4b47508e1747ad15db
 SHA512 
38f06026dccff91c981e8ca0d1164f8f78710238184b6163e2e8ead26863fcf7daa074b1721114d0ee8efff127c42d94b65b696368ad91d74fcb81b5ef41a225
+DIST tensorflow-2.4.0_rc3.tar.gz 53251141 BLAKE2B 
45a05fc1bc6f5f940487ecfd53a5dd37718a39a2a3dfd536cb6e41ba1da9fbac9e166aeb288ad122adc6474af94c13a2370779c37aa7162de3cb0c015acd5c44
 SHA512 
c02901fb41aa996a4d3c4a118cd76c62502e99be64f6ecf98208b2c65ed9f8c87c4060dcc983f6fe8280207b3bfa967e5f325e2d926aa1b4429f99fc0153c2e1
 DIST tensorflow-patches-2.1.0.tar.bz2 5737 BLAKE2B 
67f5004312389ed19e810aad9f2d5d4839d806b5a7422963520e0dff06b91346683647db757ac463af13ca70861a7ed9c94be242910abacc6be350e162947225
 SHA512 
a20bfb619d59e0d2741a27ce36e3d38dbb7a5a706d6bc56f8aa94b5b72288139ad301fc06390b128ef1c3a88b758d09d0224351590dedcda9c5309cc55af6fed
 DIST tensorflow-patches-2.2.0-r1.tar.bz2 3890 BLAKE2B 
cf4e0d579992cd09136fe3a11c5016e7b996ea959dad9f3a1ccff2fa623c2c4eab1c6673dfaf08b3b01220fd00c9edd5966e1162049f6d1e4fe5af280f491850
 SHA512 
8d07c9351b75faf90a137f65c2e6147d884744c5ab9b0bacadfa7bdc7b66ec2ec92920c7d23396bb70f7f4fb290f3f818591f23c6a4e91ab1a79290cb4ea1533
 DIST tensorflow-patches-2.3.1-r1.tar.bz2 12300 BLAKE2B 
068c127d7e980baf63068c524c9411e4f19bb79ee369221cf474a964a15ad340b28bde09504a8d524167eea036caf9d2dc52d0ad7ae1e52a76d1892833b033a0
 SHA512 
510676e4f999c12331a61bfeeca45b2526292d8bca8b0b42c1d8d466bc52722075fbd4df26a5f67dbe1ca4ccd9059e783c113cf694b436ff48c8114c99234cd3
 DIST tensorflow-patches-2.3.1.tar.bz2 11361 BLAKE2B 
22ddd827f616e33fd259ce2b7da5cda539d856701ad108d1d3b52d1dab660bcddc809fd9e9db5e6496552df080493b0205b83a58dc32808dc70c60a5878aa8af
 SHA512 
cdfc3407c775f8529cb8eb939b1046a7094ff999b8225e419e2ab4be19ecba6d853ebd8cd2dda77a7f60425a440f4d60bf3afca4a80688f0cba9967e14f8b8fb
-DIST tensorflow-patches-2.4.0_rc1.tar.bz2 1843 BLAKE2B 
6d4188471502e4411a5a7a6e731142af38421961600c52e7d76d137f952a5b8327dc8d8b4a40b60d3fb46130fe3d40ae2adc3d60d9a882f9d9b07d424e45e194
 SHA512 
abf9fbd870a8fa59b9d4e1b8260c4fbb5badeeca3e2b77caa031036759302bccae4adf91b291bc7a12df3c679b887338a8cd98d41847eb8ddd0c2bf4b8ccf342
+DIST tensorflow-patches-2.4.0_rc3.tar.bz2 1843 BLAKE2B 
6d4188471502e4411a5a7a6e731142af38421961600c52e7d76d137f952a5b8327dc8d8b4a40b60d3fb46130fe3d40ae2adc3d60d9a882f9d9b07d424e45e194
 SHA512 
abf9fbd870a8fa59b9d4e1b8260c4fbb5badeeca3e2b77caa031036759302bccae4adf91b291bc7a12df3c679b887338a8cd98d41847eb8ddd0c2bf4b8ccf342

diff --git a/sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild 
b/sci-libs/tensorflow/tensorflow-2.4.0_rc3.ebuild
similarity index 99%
rename from sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild
rename to sci-libs/tensorflow/tensorflow-2.4.0_rc3.ebuild
index 1481f308418..3ffae5ad6f7 100644
--- a/sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild
+++ b/sci-libs/tensorflow/tensorflow-2.4.0_rc3.ebuild
@@ -118,7 +118,7 @@ RDEPEND="
>=net-libs/google-cloud-cpp-0.10.0
>=sci-libs/keras-applications-1.0.8[${PYTHON_USEDEP}]
   

[gentoo-commits] repo/gentoo:master commit in: sci-visualization/tensorboard/

2020-11-28 Thread Jason Zaman
commit: 2f640640e5e16b210c3f0ad1523154df783dde81
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Nov 28 21:44:45 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 28 22:41:42 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2f640640

sci-visualization/tensorboard: bump 2.4.0

Package-Manager: Portage-3.0.9, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sci-visualization/tensorboard/Manifest |  1 +
 .../tensorboard/tensorboard-2.4.0.ebuild   | 63 ++
 2 files changed, 64 insertions(+)

diff --git a/sci-visualization/tensorboard/Manifest 
b/sci-visualization/tensorboard/Manifest
index 248a8652d06..76cda98bc3c 100644
--- a/sci-visualization/tensorboard/Manifest
+++ b/sci-visualization/tensorboard/Manifest
@@ -1,3 +1,4 @@
 DIST tensorboard-2.1.0.zip 3835182 BLAKE2B 
c2c7dbc1ba4b85c52df6e693e1bd425bd76fe6db7ca25582b57d9c65c68b191dcdba2623ab0560139f1cac1bdf5c7a47261daaaf51fca46f2c5bf441f832a6fd
 SHA512 
7463ace0863b90312a62a7fa96f4eca0147e85cf46ff21729f8996a794d54e14d876d3abe083d6aa4efd8e4e1582f7d5029de367f199981a34d4057b558bc51c
 DIST tensorboard-2.2.1.zip 2950617 BLAKE2B 
487ad01981f994b23cb5fca8b60d9ed5f13ba13735d2613d1f3154eec9791b4b3068fb9fd50e75e16682e09ceb8a9ed8533ca2c43b6dea73db3adaeef15a889b
 SHA512 
e96f8853d282dc19911cf2210ece0a4d7239f37dcba82e91697c80881fbcc21f12e4ba3e7d2eea7a84c9bb5b6521bf488d93d2312e55af9ec2d2c20f135d94fa
 DIST tensorboard-2.3.0.zip 6789437 BLAKE2B 
34fe0ac903f6b79fc1ddebd2fab3d64e48a4ef9bb6159494e6b3ec5444ab6ad339f5ca7e4e478ec03dc7a788bbce6a4bd3ce253640136079a7a470f01f7b3a48
 SHA512 
d4cfdc8dbf030c022ecd635249f643d158c92274b142cd3de93cd8877c47cf59b9aca9aab12a971b986b84c7396bed3d7a012837b08d9dee6b0e53dc56e9fcbe
+DIST tensorboard-2.4.0.zip 10631832 BLAKE2B 
e892c3f62855bd900320adbbea2758191296e2863e8865f4ffed3c5623fe5273a5a26554504b63db58c60d2a8c407e234d6cf3edc3868c88dfebd894def99859
 SHA512 
2301f526a98ac85cf5d182fff0f565c86883ec795bbaf2322696416621c8473d850a3f508079f89ca2a86a05fe020acde1282b72e2bb5ad77aab2d0e5ea2db4f

diff --git a/sci-visualization/tensorboard/tensorboard-2.4.0.ebuild 
b/sci-visualization/tensorboard/tensorboard-2.4.0.ebuild
new file mode 100644
index 000..9d1a9356334
--- /dev/null
+++ b/sci-visualization/tensorboard/tensorboard-2.4.0.ebuild
@@ -0,0 +1,63 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+PYTHON_COMPAT=( python3_{6,7,8} )
+inherit python-r1
+
+DESCRIPTION="TensorFlow's Visualization Toolkit"
+HOMEPAGE="https://www.tensorflow.org/;
+SRC_URI="https://files.pythonhosted.org/packages/py3/${PN::1}/${PN}/${P}-py3-none-any.whl
 -> ${P}.zip"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+IUSE=""
+REQUIRED_USE=${PYTHON_REQUIRED_USE}
+
+RDEPEND="
+   ${PYTHON_DEPS}
+   dev-python/bleach[${PYTHON_USEDEP}]
+   >=dev-python/google-auth-1.6.3[${PYTHON_USEDEP}]
+   >=dev-python/google-auth-oauthlib-0.4.1[${PYTHON_USEDEP}]
+   dev-python/grpcio[${PYTHON_USEDEP}]
+   dev-python/html5lib[${PYTHON_USEDEP}]
+   dev-python/markdown[${PYTHON_USEDEP}]
+   dev-python/numpy[${PYTHON_USEDEP}]
+   dev-python/protobuf-python[${PYTHON_USEDEP}]
+   dev-python/six[${PYTHON_USEDEP}]
+   >=dev-python/setuptools-41[${PYTHON_USEDEP}]
+   dev-python/werkzeug[${PYTHON_USEDEP}]
+   dev-python/wheel[${PYTHON_USEDEP}]
+   >=dev-python/scipy-1.4.1[${PYTHON_USEDEP}]"
+BDEPEND="app-arch/unzip
+   ${PYTHON_DEPS}"
+PDEPEND="sci-libs/tensorflow[python,${PYTHON_USEDEP}]"
+
+S="${WORKDIR}"
+
+src_prepare() {
+   eapply_user
+
+   rm -rf "${S}/${PN}/_vendor/bleach" || die
+   rm -rf "${S}/${PN}/_vendor/html5lib" || die
+   sed -i -e '/_vendor.bleach/d' -e '/_vendor.html5lib/d' 
"${S}/${P}.dist-info/RECORD" || die "failed to unvendor"
+
+   find "${S}/${PN}" -name '*.py' -exec sed -i \
+   -e 's/^from tensorboard\._vendor import html5lib/import 
html5lib/' \
+   -e 's/^from tensorboard\._vendor import bleach/import bleach/' \
+   -e 's/^from tensorboard\._vendor\.html5lib/from html5lib/' \
+   -e 's/^from tensorboard\._vendor\.bleach/from bleach/' \
+   {} + || die "failed to unvendor"
+
+   sed -i -e '/tensorboard-plugin-/d' "${S}/${P}.dist-info/METADATA" || 
die "failed to remove plugin deps"
+}
+
+src_install() {
+   do_install() {
+   python_domodule "${PN}"
+   python_domodule "${P}.dist-info"
+   }
+   python_foreach_impl do_install
+}



[gentoo-commits] repo/gentoo:master commit in: sys-libs/libselinux/

2020-11-21 Thread Jason Zaman
commit: 7e629b5a97b02d2d3427f69d76b1ee5f5e2d5766
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Nov 21 19:02:37 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 21 20:14:24 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7e629b5a

sys-libs/libselinux: update  package

3.1 was updated with BDEPEND for EAPI7 fixes, apply them to the live
ebuild as well.

Package-Manager: Portage-3.0.9, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sys-libs/libselinux/libselinux-.ebuild | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sys-libs/libselinux/libselinux-.ebuild 
b/sys-libs/libselinux/libselinux-.ebuild
index 2f2a870f2d6..d28e9b76f0f 100644
--- a/sys-libs/libselinux/libselinux-.ebuild
+++ b/sys-libs/libselinux/libselinux-.ebuild
@@ -40,8 +40,8 @@ 
RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}:=[${MULTILIB_USEDEP}]
ruby_targets_ruby27? ( dev-lang/ruby:2.7 )
)
elibc_musl? ( sys-libs/fts-standalone )"
-DEPEND="${RDEPEND}
-   virtual/pkgconfig
+DEPEND="${RDEPEND}"
+BDEPEND="virtual/pkgconfig
python? ( >=dev-lang/swig-2.0.9 )
ruby? ( >=dev-lang/swig-2.0.9 )"
 



[gentoo-commits] repo/gentoo:master commit in: sys-libs/libsemanage/

2020-11-21 Thread Jason Zaman
commit: 8353a4e7d519f0ef13004f1081bd2f2f1bcc5cdc
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Nov 21 19:03:30 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Nov 21 20:14:25 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8353a4e7

sys-libs/libsemanage: update  package

3.1 was updated with BDEPEND for EAPI7 fixes, apply them to the live
ebuild as well.

Package-Manager: Portage-3.0.9, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sys-libs/libsemanage/libsemanage-.ebuild | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/sys-libs/libsemanage/libsemanage-.ebuild 
b/sys-libs/libsemanage/libsemanage-.ebuild
index f41d7dffde0..a1f7982ff44 100644
--- a/sys-libs/libsemanage/libsemanage-.ebuild
+++ b/sys-libs/libsemanage/libsemanage-.ebuild
@@ -33,10 +33,9 @@ REQUIRED_USE="${PYTHON_REQUIRED_USE}"
 RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}[${MULTILIB_USEDEP}]
>=sys-libs/libselinux-${SELNX_VER}[${MULTILIB_USEDEP}]
>=sys-process/audit-2.2.2[${MULTILIB_USEDEP}]
-   >=dev-libs/ustr-1.0.4-r2[${MULTILIB_USEDEP}]
${PYTHON_DEPS}"
-DEPEND="${RDEPEND}
-   >=dev-lang/swig-2.0.4-r1
+DEPEND="${RDEPEND}"
+BDEPEND=">=dev-lang/swig-2.0.4-r1
sys-devel/bison
sys-devel/flex
virtual/pkgconfig"



[gentoo-commits] repo/gentoo:master commit in: sys-libs/libsemanage/

2020-11-15 Thread Jason Zaman
commit: 596dac7c061942cd7a73dc8ffd6c49b9595688dc
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Nov 16 05:30:01 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 05:36:12 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=596dac7c

sys-libs/libsemanage: Update BDEPEND

The EAPI 7 bump with version 3.1 did not define BDEPEND, so CBUILD tools
were left in DEPEND. This moves pkgconfig, bison, flex, and swig to
BDEPEND since they must be executed natively and should not be
cross-compiled.

Also drops ustr dep which was removed in commit
https://github.com/SELinuxProject/selinux/commit/300b8ad4235688171f2a91e7aeb14d0ee3561c13

Closes: https://bugs.gentoo.org/753254
Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 .../{libsemanage-3.1.ebuild => libsemanage-3.1-r1.ebuild}| 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/sys-libs/libsemanage/libsemanage-3.1.ebuild 
b/sys-libs/libsemanage/libsemanage-3.1-r1.ebuild
similarity index 97%
rename from sys-libs/libsemanage/libsemanage-3.1.ebuild
rename to sys-libs/libsemanage/libsemanage-3.1-r1.ebuild
index f41d7dffde0..a1f7982ff44 100644
--- a/sys-libs/libsemanage/libsemanage-3.1.ebuild
+++ b/sys-libs/libsemanage/libsemanage-3.1-r1.ebuild
@@ -33,10 +33,9 @@ REQUIRED_USE="${PYTHON_REQUIRED_USE}"
 RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}[${MULTILIB_USEDEP}]
>=sys-libs/libselinux-${SELNX_VER}[${MULTILIB_USEDEP}]
>=sys-process/audit-2.2.2[${MULTILIB_USEDEP}]
-   >=dev-libs/ustr-1.0.4-r2[${MULTILIB_USEDEP}]
${PYTHON_DEPS}"
-DEPEND="${RDEPEND}
-   >=dev-lang/swig-2.0.4-r1
+DEPEND="${RDEPEND}"
+BDEPEND=">=dev-lang/swig-2.0.4-r1
sys-devel/bison
sys-devel/flex
virtual/pkgconfig"



[gentoo-commits] repo/gentoo:master commit in: sys-libs/libselinux/

2020-11-15 Thread Jason Zaman
commit: de0604960a0900547f065083a692a6b42bf713a6
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Nov 16 05:35:25 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Nov 16 05:36:13 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=de060496

sys-libs/libselinux: update BDEPEND

The EAPI 7 bump with version 3.1 did not define BDEPEND, so CBUILD tools
were left in DEPEND. This moves pkgconfig and swig to BDEPEND since they
must be executed natively and should not be cross-compiled.

Closes: https://bugs.gentoo.org/753251
Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 .../libselinux/{libselinux-3.1.ebuild => libselinux-3.1-r1.ebuild}| 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sys-libs/libselinux/libselinux-3.1.ebuild 
b/sys-libs/libselinux/libselinux-3.1-r1.ebuild
similarity index 98%
rename from sys-libs/libselinux/libselinux-3.1.ebuild
rename to sys-libs/libselinux/libselinux-3.1-r1.ebuild
index 2f2a870f2d6..d28e9b76f0f 100644
--- a/sys-libs/libselinux/libselinux-3.1.ebuild
+++ b/sys-libs/libselinux/libselinux-3.1-r1.ebuild
@@ -40,8 +40,8 @@ 
RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}:=[${MULTILIB_USEDEP}]
ruby_targets_ruby27? ( dev-lang/ruby:2.7 )
)
elibc_musl? ( sys-libs/fts-standalone )"
-DEPEND="${RDEPEND}
-   virtual/pkgconfig
+DEPEND="${RDEPEND}"
+BDEPEND="virtual/pkgconfig
python? ( >=dev-lang/swig-2.0.9 )
ruby? ( >=dev-lang/swig-2.0.9 )"
 



[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow/

2020-11-11 Thread Jason Zaman
commit: 3e14e7a1c47932672f739e30bbc46fcbb2bf2ef9
Author: Jason Zaman  gentoo  org>
AuthorDate: Thu Nov 12 00:46:00 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Thu Nov 12 00:46:00 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3e14e7a1

sci-libs/tensorflow: Add missing flatbuffers python dep to 2.4

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild 
b/sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild
index 42027273dcc..1481f308418 100644
--- a/sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild
+++ b/sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild
@@ -101,6 +101,7 @@ RDEPEND="
>=dev-python/astor-0.7.1[${PYTHON_USEDEP}]
dev-python/astunparse[${PYTHON_USEDEP}]
dev-python/dill[${PYTHON_USEDEP}]
+   dev-python/flatbuffers[${PYTHON_USEDEP}]
>=dev-python/gast-0.3.3[${PYTHON_USEDEP}]
dev-python/h5py[${PYTHON_USEDEP}]
>=dev-python/numpy-1.19[${PYTHON_USEDEP}]



[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow/

2020-11-11 Thread Jason Zaman
commit: 7849deded7b2351e8079a67e023d397b44d4906c
Author: Jason Zaman  gentoo  org>
AuthorDate: Wed Nov 11 22:51:43 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Thu Nov 12 00:32:21 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7849dede

sci-libs/tensorflow: bump 2.4.0_rc1

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow/Manifest|   7 +
 sci-libs/tensorflow/tensorflow-2.4.0_rc1.ebuild | 405 
 2 files changed, 412 insertions(+)

diff --git a/sci-libs/tensorflow/Manifest b/sci-libs/tensorflow/Manifest
index dfa445626ad..aac7a9c5d30 100644
--- a/sci-libs/tensorflow/Manifest
+++ b/sci-libs/tensorflow/Manifest
@@ -21,7 +21,9 @@ DIST bazelbuild-rules_python-0.0.1.tar.gz 2302092 BLAKE2B 
1db52eebf2461d779f764f
 DIST bazelbuild-rules_swift-3eeeb53cebda55b349d64c9fc144e18c5f7c0eb8.tar.gz 
140484 BLAKE2B 
2526d808a4763fffa16bb035de78993eefe6371a29139b152370081f548d8147868cc95194c06a54f1c5c0cd8b63ffbc59b00686bfaedede2463a448e38c2810
 SHA512 
e22a85a5dba52cc3474481798264571f6671aace19eecb058b24ac7d586ea7822ed3ae042b4a812671f81d4f9f8915aa2381fa6ac278da7969b976eaf28db636
 DIST bazelbuild-rules_swift.0.12.1.tar.gz 111674 BLAKE2B 
7c116d6098aa0725034dce4c83628c31c85c36a6331b44636deb2efe0f689a5baee8081b33d65e3727a83bca865bcabedd6f8fa1fdb60e901a9b60840c52c018
 SHA512 
6136feb3dc0074f8250cf5335f046f21ea3a1edcb4dcb8c82b56ed6a334e4b03e4e26a4d25549581abcf7df22b60a2bccf823a51bf270051fe18d489
 DIST cub-1.8.0.zip 602396 BLAKE2B 
a5e302a52e04f85ae8e1836c59e799532a8b961a8d10c08fe1241c9045f88e31f1ebda6d26124b85c6df40968e1c7b3985a39961bf7614535aafcab2da1a576a
 SHA512 
6167c5be94989f88e05a07508cf69cf2c6b22a5ac733804043daa46bd86a44a15a758b1ffb811bab28b82039d027516ed85b3d9f7677a740a7e00ec9c2f81aed
+DIST cub-1.9.9.zip 619595 BLAKE2B 
265b797a906b03da886de88863236c9ab90daa31498ddf848fcaf5e5ee1342614ad9a41618120ca09cc4c0da3e96eeec5e20ca9d7ba3f9860c507f06d15e59e1
 SHA512 
8c9c0a3f66f8d518ec07f857b5625e006d52f28bade1c1478a0f37420e2f7586dc3ff029d551748a1802bb5544b16fde5388e8d5a45d61eec595201b9db7a30d
 DIST dlpack-3efc489b55385936531a06ff83425b719387ec63.tar.gz 39637 BLAKE2B 
532a3ce3d0e354a73c19433f0210a64ecbf00d9134d06a0ee7462baaff3f2b981524aa630cf250595671d6673105724482c7d69e803179aac247f2020c883bd0
 SHA512 
3728db5213e887fd946f64ba5dc0c336be9a72a0966ee83f146148749ffc93ddb342e0735df6117d7943874c18f87de5791a28e4a57ea420bb8a4e2a5b7338bc
+DIST eigen-011e0db31d1bed8b7f73662be6d57d9f30fa457a.tar.gz 2667179 BLAKE2B 
8e48418615ca95b27c26725c95f0b21202497284ea439ce1d799f1c86e80bc4fcd5951d9e476c9279e1a902da0b4ad029a73bb59ae8fb216508729803598a566
 SHA512 
cea21877a0aa1a0c1f0bde32494a3f4ffea6ae859d2562cb28c8aafacf009fc7754a110be1be3aa92f0959b7d7ab607768a579bf25a68972b14e30f613f2f54c
 DIST eigen-386d809bde475c65b7940f290efe80e6a05878c4.tar.gz 2628283 BLAKE2B 
feac186ce8d18026b10be4955267ed65b65b4432f02bcf817da08960c9164bcb22b352c413f59890aac2de87c5e3e9e05ea48dff28635bc8901628af518dc4d2
 SHA512 
f183bfe235a98dc308c69a1d9e168b538cc92cfbbe35d4e35596b0b2588ecad66212efb3d3ffbba7c8adbd67be24cc4dda5dba8dcdd67245eca2b1a0fb94d380
 DIST eigen-4e696901f873a2347f76d931cf2f701e31e15d05.tar.gz 2580537 BLAKE2B 
927897c80f3529da40a76ddde26113403926d730fa4539aa9e4121406e8d3852abcfdbc55d178723300e9daa26176f6170db06bb49a59cb190e8c7e6dfdea4dd
 SHA512 
d5461e615044aa94b6ac9ab2815536f4bdf2b9ccfeb578cc7bc62554ba928b4192450f72f1350f3231ed44d2bb90e95218de9a5d0bcee9ec02867499a6dc5db0
 DIST eigen-52a2fbbb008a47c5e3fb8ac1c65c2feecb0c511c.tar.gz 2585583 BLAKE2B 
a2ce9da5f962f891cba748f46ce43667ae2b7fef54d4cc83411eafbc24b331e586c44fb135a2c3597c77fe62b0c8ff1172ae5ce6876f00ddd6f6ef2eca802d9c
 SHA512 
65a73d26474547db83b9b40a133dd2a021e0f5a459104f63124461b4aac28bf3579dc81475441b3576901f28f704d6d4624939b22ecfbfbec896148c4c38da7c
@@ -33,7 +35,9 @@ DIST kissfft-36dbc057604f00aacfc0288ddad57e3b21cfc1b8.tar.gz 
44744 BLAKE2B aeea5
 DIST llvm-387c3f74fd8efdc0be464b0e1a8033cc1eeb739c.tar.gz 115936989 BLAKE2B 
624b4a898321e62002cbf3955f844755b3ba6b1c8acf9a310ddac19cf21f9627902eb0b3684e42bac1fe835be972322a5cc667f78a6e2b0e699f956e0cab81e8
 SHA512 
09ec39ec7a25703bbb47befb406be3de6d15232c971fa186e33dff80192876a827e35523a9782365e26a90abd42b32b9a2ee1443af71cc23cd825b3ff05df629
 DIST llvm-7e825abd5704ce28b166f9463d4bd304348fd2a9.tar.gz 120301408 BLAKE2B 
928117c2bae7bcdd2445e9f65297b45b009dfc62e9c16ed08a8f00aacee2497492b6fb4cbea0047a8aa1425b538e02af9b8e6dd21e52348cc45dfbb71ab3f47f
 SHA512 
a9cfbd00a0530e4f5d001029c33be3723ed009799a42bd730a65319da671020a249ae5ba4496f1347a71a9ee69de4e9fe2b80c60ebd1bc4d6d4120bd3d6fecde
 DIST llvm-ecc999101aadc8dc7d4af9fd88be10fe42674aa0.tar.gz 115788302 BLAKE2B 
ea18d6cb3cc8311a78e543996d88831e1ecf1dec58b7c890a80cd8fce86e1c52244b9cfc0d7ce0867480465c2d914555c16cf003bfdcf90056d63e8f4e0ea0c

[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow-estimator/

2020-11-11 Thread Jason Zaman
commit: cdc2f8e2f404b283c6e136c348d94856c01fffc4
Author: Jason Zaman  gentoo  org>
AuthorDate: Wed Nov 11 22:50:53 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Thu Nov 12 00:32:20 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cdc2f8e2

sci-libs/tensorflow-estimator: bump 2.4.0_rc0

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow-estimator/Manifest |  1 +
 .../tensorflow-estimator-2.4.0_rc0.ebuild  | 76 ++
 2 files changed, 77 insertions(+)

diff --git a/sci-libs/tensorflow-estimator/Manifest 
b/sci-libs/tensorflow-estimator/Manifest
index 70794737dc2..0139d1696be 100644
--- a/sci-libs/tensorflow-estimator/Manifest
+++ b/sci-libs/tensorflow-estimator/Manifest
@@ -4,3 +4,4 @@ DIST 
bazelbuild-rules_java-7cf3cefd652008d0a64a419c34c13bdca6c8f178.zip 9422 BLA
 DIST tensorflow-estimator-2.1.tar.gz 622792 BLAKE2B 
d1c8abb22d90c789ebfadaf78ca932f87428274afe6e1ac20670bf6d2b4c1c6ea8f367b1eb7ee64ff9f6e9b8ecdc2f64113924e7e2286e3f4e3d2c36cb101794
 SHA512 
4aaa21969299b02443e9396c238ef4c03af3bde1d0142a81c04d9706f18b02bfd125f3aaf8ffb47e0a3ffad949c3d3bca3909375f12a1c1e4c55ca1cc7930d51
 DIST tensorflow-estimator-2.2.0.tar.gz 627362 BLAKE2B 
125792fc2167b8af837a99b08a9a26943bc5c1fda8ab3690b01c0d49a6dd39142ff4a063867dfe1bee3b99fb018981d0e4ee45d194caac2cd96a829ad22db0ad
 SHA512 
aaf743835e2c606439fcccb56742997e930ba0e72c01d51633ce86824bbfaacd64607dc1fd7fb9604cc444feb65ebae60c2266be084e1b49ef2a1a9ca5a3d60d
 DIST tensorflow-estimator-2.3.0.tar.gz 642118 BLAKE2B 
29ecf5b64da20e8e6981375f1631b9b7e8ad061f71d0a3f1ac567bcd04b02102c5854d24e5106660f6bcd7b4ca683bd3bfbde51f236669d0f17e8f847feb7039
 SHA512 
0befc9c04650a0cd91ce90bc2e9a5d17ae3f7d8d8e4b8f763f223bbb891c73c7e2cbe91a2779af36342008e16f02d118120d94165c6a8e3c14a723b32ee29cb0
+DIST tensorflow-estimator-2.4.0_rc0.tar.gz 660318 BLAKE2B 
d71988c29c237e686151627723890c623019ea8f3ff1bcdfde64fc29461f3ffd268feb6cee2d57535f45e48ab166331c93e8e48a4c323abc5f6ec08774c39d6a
 SHA512 
1f0a4379e2da96e9ffc9c3a06291c885b0509e1a50806573e9cb15053b40a45aec4b9938356c450bb0abca88156c992c813037a8144cba8b584173d9e4fe5162

diff --git 
a/sci-libs/tensorflow-estimator/tensorflow-estimator-2.4.0_rc0.ebuild 
b/sci-libs/tensorflow-estimator/tensorflow-estimator-2.4.0_rc0.ebuild
new file mode 100644
index 000..1816ca18887
--- /dev/null
+++ b/sci-libs/tensorflow-estimator/tensorflow-estimator-2.4.0_rc0.ebuild
@@ -0,0 +1,76 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+PYTHON_COMPAT=( python3_{6,7,8} )
+MY_PN="estimator"
+MY_PV=${PV/_rc/-rc}
+MY_P=${MY_PN}-${MY_PV}
+
+inherit bazel distutils-r1 flag-o-matic toolchain-funcs
+
+DESCRIPTION="A high-level TensorFlow API that greatly simplifies machine 
learning programming"
+HOMEPAGE="https://www.tensorflow.org/;
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+IUSE=""
+
+bazel_external_uris="
+   
https://github.com/bazelbuild/rules_cc/archive/0d5f3f2768c6ca2faca0079a997a97ce22997a0c.zip
 -> bazelbuild-rules_cc-0d5f3f2768c6ca2faca0079a997a97ce22997a0c.zip
+   
https://github.com/bazelbuild/rules_cc/archive/8bd6cd75d03c01bb82561a96d9c1f9f7157b13d0.zip
 -> bazelbuild-rules_cc-8bd6cd75d03c01bb82561a96d9c1f9f7157b13d0.zip
+   
https://github.com/bazelbuild/rules_java/archive/7cf3cefd652008d0a64a419c34c13bdca6c8f178.zip
 -> bazelbuild-rules_java-7cf3cefd652008d0a64a419c34c13bdca6c8f178.zip"
+
+SRC_URI="https://github.com/tensorflow/${MY_PN}/archive/v${MY_PV}.tar.gz -> 
${P}.tar.gz
+   ${bazel_external_uris}"
+
+RDEPEND="sci-libs/tensorflow[python,${PYTHON_USEDEP}]"
+DEPEND="${RDEPEND}"
+BDEPEND="
+   app-arch/unzip
+   dev-java/java-config
+   >=dev-util/bazel-3"
+
+S="${WORKDIR}/${MY_P}"
+
+DOCS=( CONTRIBUTING.md README.md )
+
+src_unpack() {
+   unpack "${P}.tar.gz"
+   bazel_load_distfiles "${bazel_external_uris}"
+}
+
+src_prepare() {
+   bazel_setup_bazelrc
+   default
+   python_copy_sources
+}
+
+src_compile() {
+   export JAVA_HOME=$(java-config --jre-home)
+
+   do_compile() {
+   ebazel build 
//tensorflow_estimator/tools/pip_package:build_pip_package
+   ebazel shutdown
+
+   local srcdir="${T}/src-${EPYTHON/./_}"
+   mkdir -p "${srcdir}" || die
+   
bazel-bin/tensorflow_estimator/tools/pip_package/build_pip_package --src 
"${srcdir}" || die
+   }
+
+   python_foreach_impl run_in_build_dir do_compile
+}
+
+src_install() {
+   do_install() {
+   cd "${T}/src-${EPYTHON/./_}" || die
+   esetup.py install
+   python_optimize
+   }
+   python_foreach_impl do_install
+
+   cd "${S}" || die
+   einstalldocs
+}



[gentoo-commits] repo/gentoo:master commit in: eclass/

2020-11-05 Thread Jason Zaman
commit: 8e35dbf724e9a4e2530e9c8708256af7343ec5f1
Author: David Michael  gmail  com>
AuthorDate: Mon Nov  2 21:46:03 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Thu Nov  5 09:38:54 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8e35dbf7

selinux-policy-2.eclass: add EAPI 7

Closes: https://bugs.gentoo.org/748483
Signed-off-by: David Michael  gmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 eclass/selinux-policy-2.eclass | 18 --
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/eclass/selinux-policy-2.eclass b/eclass/selinux-policy-2.eclass
index c1e21974021..3ba310e49de 100644
--- a/eclass/selinux-policy-2.eclass
+++ b/eclass/selinux-policy-2.eclass
@@ -1,4 +1,4 @@
-# Copyright 1999-2015 Gentoo Foundation
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Eclass for installing SELinux policy, and optionally
@@ -7,7 +7,7 @@
 # @ECLASS: selinux-policy-2.eclass
 # @MAINTAINER:
 # seli...@gentoo.org
-# @SUPPORTED_EAPIS: 5 6
+# @SUPPORTED_EAPIS: 5 6 7
 # @BLURB: This eclass supports the deployment of the various SELinux modules 
in sec-policy
 # @DESCRIPTION:
 # The selinux-policy-2.eclass supports deployment of the various SELinux 
modules
@@ -76,7 +76,7 @@
 
 case "${EAPI:-0}" in
0|1|2|3|4) die "EAPI<5 is not supported";;
-   5|6) : ;;
+   5|6|7) : ;;
*) die "unknown EAPI" ;;
 esac
 
@@ -117,9 +117,15 @@ else
RDEPEND=">=sys-apps/policycoreutils-2.0.82
>=sec-policy/selinux-base-policy-${PV}"
 fi
-DEPEND="${RDEPEND}
-   sys-devel/m4
-   >=sys-apps/checkpolicy-2.0.21"
+if [[ ${EAPI:-0} == [56] ]]; then
+   DEPEND="${RDEPEND}
+   sys-devel/m4
+   >=sys-apps/checkpolicy-2.0.21"
+else
+   DEPEND="${RDEPEND}"
+   BDEPEND="sys-devel/m4
+   >=sys-apps/checkpolicy-2.0.21"
+fi
 
 EXPORT_FUNCTIONS src_unpack src_prepare src_compile src_install pkg_postinst 
pkg_postrm
 



[gentoo-commits] repo/gentoo:master commit in: eclass/

2020-11-05 Thread Jason Zaman
commit: e84846288b5c018fec9337b9154fa01796675ce1
Author: David Michael  gmail  com>
AuthorDate: Tue Nov  3 14:30:18 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Thu Nov  5 09:38:55 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e8484628

selinux-policy-2.eclass: drop EAPI 5

Signed-off-by: David Michael  gmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 eclass/selinux-policy-2.eclass | 47 +++---
 1 file changed, 12 insertions(+), 35 deletions(-)

diff --git a/eclass/selinux-policy-2.eclass b/eclass/selinux-policy-2.eclass
index 3ba310e49de..5def86fbef9 100644
--- a/eclass/selinux-policy-2.eclass
+++ b/eclass/selinux-policy-2.eclass
@@ -7,7 +7,7 @@
 # @ECLASS: selinux-policy-2.eclass
 # @MAINTAINER:
 # seli...@gentoo.org
-# @SUPPORTED_EAPIS: 5 6 7
+# @SUPPORTED_EAPIS: 6 7
 # @BLURB: This eclass supports the deployment of the various SELinux modules 
in sec-policy
 # @DESCRIPTION:
 # The selinux-policy-2.eclass supports deployment of the various SELinux 
modules
@@ -75,8 +75,8 @@
 : ${SELINUX_GIT_BRANCH:="master"};
 
 case "${EAPI:-0}" in
-   0|1|2|3|4) die "EAPI<5 is not supported";;
-   5|6|7) : ;;
+   0|1|2|3|4|5) die "EAPI<6 is not supported";;
+   6|7) : ;;
*) die "unknown EAPI" ;;
 esac
 
@@ -87,10 +87,6 @@ case ${BASEPOL} in
EGIT_CHECKOUT_DIR="${WORKDIR}/refpolicy";;
 esac
 
-if [[ ${EAPI:-0} == 5 ]]; then
-   inherit eutils
-fi
-
 IUSE=""
 
 HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux;
@@ -117,7 +113,7 @@ else
RDEPEND=">=sys-apps/policycoreutils-2.0.82
>=sec-policy/selinux-base-policy-${PV}"
 fi
-if [[ ${EAPI:-0} == [56] ]]; then
+if [[ ${EAPI} == 6 ]]; then
DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-2.0.21"
@@ -162,25 +158,13 @@ selinux-policy-2_src_prepare() {
# Patch the sources with the base patchbundle
if [[ -n ${BASEPOL} ]] && [[ "${BASEPOL}" != "" ]]; then
cd "${S}"
-   if [[ ${EAPI:-0} == 5 ]]; then
-   EPATCH_MULTI_MSG="Applying SELinux policy updates ... " 
\
-   EPATCH_SUFFIX="patch" \
-   EPATCH_SOURCE="${WORKDIR}" \
-   EPATCH_FORCE="yes" \
-   epatch
-   else
-   einfo "Applying SELinux policy updates ... "
-   eapply -p0 
"${WORKDIR}/0001-full-patch-against-stable-release.patch"
-   fi
+   einfo "Applying SELinux policy updates ... "
+   eapply -p0 
"${WORKDIR}/0001-full-patch-against-stable-release.patch"
fi
 
-   # Call in epatch_user. We do this early on as we start moving
+   # Call in eapply_user. We do this early on as we start moving
# files left and right hereafter.
-   if [[ ${EAPI:-0} == 5 ]]; then
-   epatch_user
-   else
-   eapply_user
-   fi
+   eapply_user
 
# Copy additional files to the 3rd_party/ location
if [[ "$(declare -p POLICY_FILES 2>/dev/null 2>&1)" == "declare -a"* ]] 
||
@@ -195,17 +179,10 @@ selinux-policy-2_src_prepare() {
 
# Apply the additional patches refered to by the module ebuild.
# But first some magic to differentiate between bash arrays and strings
-   if [[ "$(declare -p POLICY_PATCH 2>/dev/null 2>&1)" == "declare -a"* ]] 
||
-  [[ -n ${POLICY_PATCH} ]]; then
-   cd "${S}/refpolicy/policy/modules"
-   for POLPATCH in ${POLICY_PATCH[@]};
-   do
-   if [[ ${EAPI:-0} == 5 ]]; then
-   epatch "${POLPATCH}"
-   else
-   eapply "${POLPATCH}"
-   fi
-   done
+   if [[ "$(declare -p POLICY_PATCH 2>/dev/null 2>&1)" == "declare -a"* 
]]; then
+   [[ -n ${POLICY_PATCH[*]} ]] && eapply -d 
"${S}/refpolicy/policy/modules" "${POLICY_PATCH[@]}"
+   else
+   [[ -n ${POLICY_PATCH} ]] && eapply -d 
"${S}/refpolicy/policy/modules" ${POLICY_PATCH}
fi
 
# Collect only those files needed for this particular module



[gentoo-commits] repo/gentoo:master commit in: sci-libs/keras-preprocessing/

2020-11-04 Thread Jason Zaman
commit: c6c4d901316124d5e0ccf7cd669ecddb94a20aa3
Author: Jason Zaman  gentoo  org>
AuthorDate: Thu Nov  5 04:33:01 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Thu Nov  5 04:58:05 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c6c4d901

sci-libs/keras-preprocessing: bump 1.1.2

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/keras-preprocessing/Manifest  |  1 +
 .../keras-preprocessing-1.1.2.ebuild   | 24 ++
 2 files changed, 25 insertions(+)

diff --git a/sci-libs/keras-preprocessing/Manifest 
b/sci-libs/keras-preprocessing/Manifest
index dca1269031b..de26366e09f 100644
--- a/sci-libs/keras-preprocessing/Manifest
+++ b/sci-libs/keras-preprocessing/Manifest
@@ -1,2 +1,3 @@
+DIST Keras_Preprocessing-1.1.2.tar.gz 163598 BLAKE2B 
94d0bac41ac140015a5d46453c99e1180c8c06d8fab4d6707890b1f24466d287f6da54d66b395e5e50c7aac67cc0abc8153fbfbeb4ffb0e79561bca528a6b81b
 SHA512 
aae4d52accdfb9df260070336b1c5a628e57563978f7cb299aa67a6265f26eb44deb803cef795616a5e94cd8bcd2b9aa067570258fff96642b88cc0c701c3cec
 DIST keras-preprocessing-1.0.9.tar.gz 46476 BLAKE2B 
af80a6647bb56f8c4dba93120bc2b70db36d2c6a0e36c3be9a4843e5c36c9ffe50db1cd9396eecd47f6c0595c110825d70d2e6b28a29a0a199b5cfcc499e4440
 SHA512 
93ef9b294638bfeaea82170b323f08b261a2519f5ee8b9aac7d88e5b32c6486646d91075cea71bfbc27780c8af55125319873361f0431d48b451e574d1e7a400
 DIST keras-preprocessing-1.1.0.tar.gz 50631 BLAKE2B 
235a1a7d296684e5405c6472026a53b1930923e74065529ba6921e91bf8849d35c02378f8eeabc4f532a4e25937e8fd8f712a59067c5b358afe10b88e1531fcb
 SHA512 
68c71e82ea2139d3db4142c86a2c404e4d65a9a881f72b07b4ccf28733b93a9e4837f91534a20c3ca5128600d8b885cc8723181d96c9045d5280ad7f84091cbb

diff --git a/sci-libs/keras-preprocessing/keras-preprocessing-1.1.2.ebuild 
b/sci-libs/keras-preprocessing/keras-preprocessing-1.1.2.ebuild
new file mode 100644
index 000..f59272ef116
--- /dev/null
+++ b/sci-libs/keras-preprocessing/keras-preprocessing-1.1.2.ebuild
@@ -0,0 +1,24 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+PYTHON_COMPAT=( python3_{6,7,8} )
+inherit distutils-r1
+MY_PN="Keras_Preprocessing"
+
+DESCRIPTION="Easy data preprocessing and data augmentation for deep learning 
models"
+HOMEPAGE="https://keras.io/;
+SRC_URI="https://files.pythonhosted.org/packages/source/${MY_PN::1}/${MY_PN}/${MY_PN}-${PV}.tar.gz;
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE=""
+S="${WORKDIR}/${MY_PN}-${PV}"
+
+RDEPEND="dev-python/numpy[${PYTHON_USEDEP}]
+   dev-python/scipy[${PYTHON_USEDEP}]
+   dev-python/six[${PYTHON_USEDEP}]"
+DEPEND="${RDEPEND}
+   dev-python/setuptools[${PYTHON_USEDEP}]"



[gentoo-commits] repo/gentoo:master commit in: dev-python/opt-einsum/

2020-11-04 Thread Jason Zaman
commit: c13109ebd7fb91a792ca426f730b807b1965c65b
Author: Jason Zaman  gentoo  org>
AuthorDate: Thu Nov  5 04:31:58 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Thu Nov  5 04:58:04 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c13109eb

dev-python/opt-einsum: bump 3.3.0

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 dev-python/opt-einsum/Manifest|  1 +
 dev-python/opt-einsum/opt-einsum-3.3.0.ebuild | 19 +++
 2 files changed, 20 insertions(+)

diff --git a/dev-python/opt-einsum/Manifest b/dev-python/opt-einsum/Manifest
index 2f713966407..8205bd4c324 100644
--- a/dev-python/opt-einsum/Manifest
+++ b/dev-python/opt-einsum/Manifest
@@ -1 +1,2 @@
 DIST opt_einsum-3.0.1.tar.gz 66204 BLAKE2B 
a8d2d1246e890d24ea73d129ed1ee99e8fbbca30771c96a48858acb5af5eac93bc73b9e8f1c5f1ece6e0872277de1f01fd1d0f7d27e044fa5f9de09060792565
 SHA512 
d6c2b95d17f523680e3f849ad2b0a4c36e7102e0540fddee365446bfddad4a26be2aed19060570ac0d1db42ccde8e15f0e7e4c066b9117024a58f8cc8978508a
+DIST opt_einsum-3.3.0.tar.gz 73951 BLAKE2B 
c8e39c9589bb6b89150fd5699fafd77c5ac6022f66d1b778a55dd61e606067be4b6df85972dd4078df084e34a39463f5e59d69426b0ed9152e93f93798417eea
 SHA512 
f34c58bd3aa4a15794cfc604167c0e3175b9826da2a2449bb48ea5c3095f8215e3f990daec51e77e505a03204201694df1a09360ee51b8a4a793b9844d9c2d5e

diff --git a/dev-python/opt-einsum/opt-einsum-3.3.0.ebuild 
b/dev-python/opt-einsum/opt-einsum-3.3.0.ebuild
new file mode 100644
index 000..cbcf6d756d0
--- /dev/null
+++ b/dev-python/opt-einsum/opt-einsum-3.3.0.ebuild
@@ -0,0 +1,19 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+PYTHON_COMPAT=( python3_{6,7,8} )
+inherit distutils-r1
+
+DESCRIPTION="Optimized Einsum: A tensor contraction order optimizer"
+HOMEPAGE="https://pypi.org/project/opt-einsum/;
+SRC_URI="mirror://pypi/${PN:0:1}/${PN}/${P/-/_}.tar.gz"
+
+LICENSE="MIT"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE=""
+S="${WORKDIR}/${P/-/_}"
+
+BDEPEND="dev-python/numpy[${PYTHON_USEDEP}]"



[gentoo-commits] repo/gentoo:master commit in: app-admin/selint/

2020-11-02 Thread Jason Zaman
commit: b7d2930545ce1e7b719d432f7657f8dd750078a2
Author: Jason Zaman  gentoo  org>
AuthorDate: Tue Nov  3 06:11:53 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Nov  3 06:13:04 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b7d29305

app-admin/selint: Add subslot dep

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 app-admin/selint/selint-1.1.0.ebuild | 2 +-
 app-admin/selint/selint-.ebuild  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/app-admin/selint/selint-1.1.0.ebuild 
b/app-admin/selint/selint-1.1.0.ebuild
index f7904071225..592cb7fbdf8 100644
--- a/app-admin/selint/selint-1.1.0.ebuild
+++ b/app-admin/selint/selint-1.1.0.ebuild
@@ -22,7 +22,7 @@ IUSE="test"
 RESTRICT="!test? ( test )"
 
 RDEPEND="
-   dev-libs/confuse
+   dev-libs/confuse:=
dev-libs/uthash"
 
 DEPEND="${RDEPEND}

diff --git a/app-admin/selint/selint-.ebuild 
b/app-admin/selint/selint-.ebuild
index f7904071225..592cb7fbdf8 100644
--- a/app-admin/selint/selint-.ebuild
+++ b/app-admin/selint/selint-.ebuild
@@ -22,7 +22,7 @@ IUSE="test"
 RESTRICT="!test? ( test )"
 
 RDEPEND="
-   dev-libs/confuse
+   dev-libs/confuse:=
dev-libs/uthash"
 
 DEPEND="${RDEPEND}



[gentoo-commits] repo/gentoo:master commit in: sec-policy/selinux-base/

2020-11-02 Thread Jason Zaman
commit: 5264e3ef824d7debff99038a4285b0de6c363914
Author: Jason Zaman  gentoo  org>
AuthorDate: Tue Nov  3 05:27:33 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Nov  3 05:27:33 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=5264e3ef

sec-policy/selinux-base: Drop unnecessary virtual/udev dep

Closes: https://bugs.gentoo.org/752186
Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild | 3 +--
 sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild | 3 +--
 sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild | 3 +--
 sec-policy/selinux-base/selinux-base-.ebuild  | 5 ++---
 4 files changed, 5 insertions(+), 9 deletions(-)

diff --git a/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild 
b/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
index c172a8fdb9b..818af8e1c44 100644
--- a/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20190201-r1.ebuild
@@ -23,8 +23,7 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux;
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.8
-   virtual/udev"
+RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-2.8"

diff --git a/sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild 
b/sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild
index fcc6faca334..c11baced556 100644
--- a/sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20190609-r1.ebuild
@@ -23,8 +23,7 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux;
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.8
-   virtual/udev"
+RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-2.8"

diff --git a/sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild 
b/sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild
index bb95a29ae65..a16000f9802 100644
--- a/sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild
+++ b/sec-policy/selinux-base/selinux-base-2.20200818-r1.ebuild
@@ -23,8 +23,7 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux;
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.8
-   virtual/udev"
+RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-2.8"

diff --git a/sec-policy/selinux-base/selinux-base-.ebuild 
b/sec-policy/selinux-base/selinux-base-.ebuild
index 5342853efec..a16000f9802 100644
--- a/sec-policy/selinux-base/selinux-base-.ebuild
+++ b/sec-policy/selinux-base/selinux-base-.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI="6"
@@ -23,8 +23,7 @@ HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux;
 LICENSE="GPL-2"
 SLOT="0"
 
-RDEPEND=">=sys-apps/policycoreutils-2.8
-   virtual/udev"
+RDEPEND=">=sys-apps/policycoreutils-2.8"
 DEPEND="${RDEPEND}
sys-devel/m4
>=sys-apps/checkpolicy-2.8"



[gentoo-commits] repo/gentoo:master commit in: sys-block/zram-init/

2020-10-26 Thread Jason Zaman
commit: eb6daf8a46f5c32e87da3c610938666a8feab6fd
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Oct 26 17:26:36 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Oct 26 17:26:42 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=eb6daf8a

sys-block/zram-init: Fix repoman style issues

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sys-block/zram-init/zram-init-10.5.ebuild | 19 +--
 sys-block/zram-init/zram-init-.ebuild | 19 +--
 2 files changed, 18 insertions(+), 20 deletions(-)

diff --git a/sys-block/zram-init/zram-init-10.5.ebuild 
b/sys-block/zram-init/zram-init-10.5.ebuild
index adc7997651c..c591f149b38 100644
--- a/sys-block/zram-init/zram-init-10.5.ebuild
+++ b/sys-block/zram-init/zram-init-10.5.ebuild
@@ -29,19 +29,18 @@ RDEPEND="
 
 DISABLE_AUTOFORMATTING=true
 DOC_CONTENTS="\
-To use zram-init,  activate it in your kernel and add it to the default
-runlevel:
-  rc-update add zram-init default
-If you use systemd enable zram_swap,   zram_tmp,   and/or zram_var_tmp with
-systemctl. You might need to modify the following file depending on the
+To use zram-init, activate it in your kernel and add it to the default 
runlevel:
+   rc-update add zram-init default
+If you use systemd enable zram_swap, zram_tmp, and/or zram_var_tmp with
+systemctl. You might need to modify the following file depending on the
 number of devices that you want to create:
-  ${EROOT}/etc/modprobe.d/zram.conf.
-If you use the \$TMPDIR as zRAM device with OpenRC, you should add zram-init
+   /etc/modprobe.d/zram.conf.
+If you use the \$TMPDIR as zram device with OpenRC, you should add zram-init
 to the boot runlevel:
-  rc-update add zram-init boot
-Still for the same case,you should add in the OpenRC configuration file
+   rc-update add zram-init boot
+Still for the same case, you should add in the OpenRC configuration file
 for the services using \$TMPDIR the following line:
-  rc_need=\"zram-init\""
+   rc_need=\"zram-init\""
 
 src_prepare() {
default

diff --git a/sys-block/zram-init/zram-init-.ebuild 
b/sys-block/zram-init/zram-init-.ebuild
index adc7997651c..c591f149b38 100644
--- a/sys-block/zram-init/zram-init-.ebuild
+++ b/sys-block/zram-init/zram-init-.ebuild
@@ -29,19 +29,18 @@ RDEPEND="
 
 DISABLE_AUTOFORMATTING=true
 DOC_CONTENTS="\
-To use zram-init,  activate it in your kernel and add it to the default
-runlevel:
-  rc-update add zram-init default
-If you use systemd enable zram_swap,   zram_tmp,   and/or zram_var_tmp with
-systemctl. You might need to modify the following file depending on the
+To use zram-init, activate it in your kernel and add it to the default 
runlevel:
+   rc-update add zram-init default
+If you use systemd enable zram_swap, zram_tmp, and/or zram_var_tmp with
+systemctl. You might need to modify the following file depending on the
 number of devices that you want to create:
-  ${EROOT}/etc/modprobe.d/zram.conf.
-If you use the \$TMPDIR as zRAM device with OpenRC, you should add zram-init
+   /etc/modprobe.d/zram.conf.
+If you use the \$TMPDIR as zram device with OpenRC, you should add zram-init
 to the boot runlevel:
-  rc-update add zram-init boot
-Still for the same case,you should add in the OpenRC configuration file
+   rc-update add zram-init boot
+Still for the same case, you should add in the OpenRC configuration file
 for the services using \$TMPDIR the following line:
-  rc_need=\"zram-init\""
+   rc_need=\"zram-init\""
 
 src_prepare() {
default



[gentoo-commits] repo/gentoo:master commit in: sys-block/zram-init/

2020-10-26 Thread Jason Zaman
commit: 109be7e6b9f524f6290b76e15f2b284c3ea43eb9
Author: Mattéo Rossillol‑‑Laruelle  protonmail  com>
AuthorDate: Tue Jun  2 09:30:48 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Oct 26 17:09:28 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=109be7e6

sys-block/zram-init: version bump

Closes: https://bugs.gentoo.org/732176
Closes: https://github.com/gentoo/gentoo/pull/16049
Signed-off-by: Mattéo Rossillol‑‑Laruelle  protonmail.com>
Package-Manager: Portage-2.3.99, Repoman-2.3.23
Signed-off-by: Jason Zaman  gentoo.org>

 sys-block/zram-init/Manifest  |  2 +-
 sys-block/zram-init/metadata.xml  |  7 ++-
 sys-block/zram-init/zram-init-10.5.ebuild | 73 +
 sys-block/zram-init/zram-init-9.1.ebuild  | 56 --
 sys-block/zram-init/zram-init-.ebuild | 77 +++
 5 files changed, 127 insertions(+), 88 deletions(-)

diff --git a/sys-block/zram-init/Manifest b/sys-block/zram-init/Manifest
index f0102627e4b..cc5be001e1a 100644
--- a/sys-block/zram-init/Manifest
+++ b/sys-block/zram-init/Manifest
@@ -1,2 +1,2 @@
+DIST zram-init-10.5.tar.gz 20496 BLAKE2B 
a28ba9e3813be7ca571ac033ca7b4bdf7c95624f9be72288d8478a2fffa950f7bb18fe865b9933fd209dabc705366af8f825fa7ee8a16be364e1d71c7062067c
 SHA512 
97591549aa9b678b0b12efcc27136826c19b42cc0cf027a3f251843ef5678425568c9eb573d24661ce795eede1d136243fcccbf4dcd62e9d61eb7d775f84f1c1
 DIST zram-init-8.1.tar.gz 9177 BLAKE2B 
229a469aeeb0b22b80f48d946d4ff746c7bd5d7b58ea9290db0da011df6d618c7c55ad95810b0be74ff81350182057d9067e834ecba688eb4ffa668521468a8b
 SHA512 
8f688accb7a4231f705f694c4b4e7344bbb338b2b1f09a6dacd900020a4e8583105b25fef5b40f39630db88db6fcc8ec79824945ceaee95ea1279d09d081a994
-DIST zram-init-9.1.tar.gz 11414 BLAKE2B 
d7f7d1fd49594882a043322b905c02ac9e1f6ea78a626fb35ab0939096a062ef384e759d62e2cc4a990946e124317d70a4325b145e38612ebad173752209fa55
 SHA512 
4e3c76a389d188df98479f3f70af28405144b065df60ba191777cbec88d9bfe94be472d94bbb16314c0eefd41d177105cba74b45d1f13e82a741ff21a4d69c6a

diff --git a/sys-block/zram-init/metadata.xml b/sys-block/zram-init/metadata.xml
index b8a5b3e6784..013ba527f06 100644
--- a/sys-block/zram-init/metadata.xml
+++ b/sys-block/zram-init/metadata.xml
@@ -9,8 +9,13 @@
perfin...@gentoo.org
    Jason Zaman

-

+   
+   Martin Väth
+   mar...@mvath.de
+   
+   
https://raw.githubusercontent.com/vaeth/zram-init/master/ChangeLog
+   https://github.com/vaeth/zram-init/issues/
vaeth/zram-init

 

diff --git a/sys-block/zram-init/zram-init-10.5.ebuild 
b/sys-block/zram-init/zram-init-10.5.ebuild
new file mode 100644
index 000..adc7997651c
--- /dev/null
+++ b/sys-block/zram-init/zram-init-10.5.ebuild
@@ -0,0 +1,73 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit prefix readme.gentoo-r1
+
+DESCRIPTION="Scripts to support compressed swap devices or ramdisks with zRAM"
+HOMEPAGE="https://github.com/vaeth/zram-init/;
+
+if [[ ${PV} == * ]]; then
+   inherit git-r3
+   EGIT_REPO_URI="https://github.com/vaeth/${PN}.git;
+else
+   SRC_URI="https://github.com/vaeth/${PN}/archive/v${PV}.tar.gz -> 
${P}.tar.gz"
+   KEYWORDS="~amd64 ~arm64 ~ppc ~ppc64 ~x86"
+fi
+
+LICENSE="GPL-2"
+SLOT="0"
+
+BDEPEND="sys-devel/gettext"
+
+RDEPEND="
+   >=app-shells/push-2.0
+   virtual/libintl
+   || ( sys-apps/openrc sys-apps/systemd )
+"
+
+DISABLE_AUTOFORMATTING=true
+DOC_CONTENTS="\
+To use zram-init,  activate it in your kernel and add it to the default
+runlevel:
+  rc-update add zram-init default
+If you use systemd enable zram_swap,   zram_tmp,   and/or zram_var_tmp with
+systemctl. You might need to modify the following file depending on the
+number of devices that you want to create:
+  ${EROOT}/etc/modprobe.d/zram.conf.
+If you use the \$TMPDIR as zRAM device with OpenRC, you should add zram-init
+to the boot runlevel:
+  rc-update add zram-init boot
+Still for the same case,you should add in the OpenRC configuration file
+for the services using \$TMPDIR the following line:
+  rc_need=\"zram-init\""
+
+src_prepare() {
+   default
+
+   hprefixify "${S}/man/${PN}.8"
+
+   hprefixify -e "s%(}|:)(/(usr/)?sbin)%\1${EPREFIX}\2%g" \
+   "${S}/sbin/${PN}.in"
+
+   hprefixify -e "s%( |=)(/tmp)%\1${EPREFIX}\2%g" \
+   "${S}/systemd/system"/* \
+   "${S}/openrc"/*/*
+}
+
+src_compile() {
+   emake PREFIX="${EPREFIX}/usr" MODIFY_SHEBANG=FALSE
+}
+
+src_install() {
+   einstalldocs
+   readme.gentoo_create_do

[gentoo-commits] repo/gentoo:master commit in: sys-block/zram-init/

2020-10-26 Thread Jason Zaman
commit: fa40f39c92332e55c02c67a68ab4fee1b3f8cb82
Author: Mattéo Rossillol‑‑Laruelle  protonmail  com>
AuthorDate: Mon Oct 26 10:34:41 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Oct 26 16:56:40 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fa40f39c

sys-block/zram-init: adoption

Closes: https://github.com/gentoo/gentoo/pull/18039
Bug: https://bugs.gentoo.org/691120
Allowed-by: Jason Zaman  gentoo.org>
Signed-off-by: Mattéo Rossillol‑‑Laruelle  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>
Package-Manager: Portage-3.0.8, Repoman-3.0.1

 sys-block/zram-init/metadata.xml | 4 
 1 file changed, 4 insertions(+)

diff --git a/sys-block/zram-init/metadata.xml b/sys-block/zram-init/metadata.xml
index fdbc0f6b02d..b8a5b3e6784 100644
--- a/sys-block/zram-init/metadata.xml
+++ b/sys-block/zram-init/metadata.xml
@@ -1,6 +1,10 @@
 
 http://www.gentoo.org/dtd/metadata.dtd;>
 
+   
+   beatus...@protonmail.com
+   Mattéo Rossillol‑‑Laruelle
+   

perfin...@gentoo.org
        Jason Zaman



[gentoo-commits] repo/gentoo:master commit in: profiles/features/selinux/

2020-10-25 Thread Jason Zaman
commit: 7a9ae808043f2ec47ef48c480cd6274767e82a52
Author: Jonathan Davies  protonmail  com>
AuthorDate: Sun Oct 25 13:31:30 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 25 21:28:28 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7a9ae808

selinux profile: set sys-process/audit to use python by default.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 profiles/features/selinux/package.use.force | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/profiles/features/selinux/package.use.force 
b/profiles/features/selinux/package.use.force
index fec892c60b0..f368891a801 100644
--- a/profiles/features/selinux/package.use.force
+++ b/profiles/features/selinux/package.use.force
@@ -17,3 +17,6 @@ dev-lang/python xml
 # so stages can build with no interacton. Bug #527938
 sys-libs/libselinux static-libs
 dev-libs/libpcre static-libs
+
+# Required for semanage to run correctly.
+sys-process/audit python



[gentoo-commits] repo/gentoo:master commit in: sys-process/audit/

2020-10-25 Thread Jason Zaman
commit: 9a32b4fd7472278db968adeed2272af9127b3db5
Author: Jason Zaman  gentoo  org>
AuthorDate: Sun Oct 25 20:35:22 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 25 21:28:30 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9a32b4fd

sys-process/audit: Add py3_8

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sys-process/audit/{audit-2.8.5-r1.ebuild => audit-2.8.5-r2.ebuild} | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sys-process/audit/audit-2.8.5-r1.ebuild 
b/sys-process/audit/audit-2.8.5-r2.ebuild
similarity index 99%
rename from sys-process/audit/audit-2.8.5-r1.ebuild
rename to sys-process/audit/audit-2.8.5-r2.ebuild
index dba672537b5..e6335107904 100644
--- a/sys-process/audit/audit-2.8.5-r1.ebuild
+++ b/sys-process/audit/audit-2.8.5-r2.ebuild
@@ -3,7 +3,7 @@
 
 EAPI="6"
 
-PYTHON_COMPAT=( python{3_6,3_7} )
+PYTHON_COMPAT=( python{3_6,3_7,3_8} )
 
 inherit autotools multilib multilib-minimal toolchain-funcs preserve-libs 
python-r1 linux-info systemd usr-ldscript
 
@@ -152,6 +152,7 @@ multilib_src_install() {

auparse_la_LIBADD="${native_build}/auparse/libauparse.la 
${native_build}/lib/libaudit.la" \
USE_PYTHON3=true \
DESTDIR="${D}" install
+   python_optimize
}
 
local native_build=${BUILD_DIR}



[gentoo-commits] repo/gentoo:master commit in: sys-apps/selinux-python/

2020-10-25 Thread Jason Zaman
commit: 43fea86ba3d04a7993ec748924a4567b2af5f063
Author: Jason Zaman  gentoo  org>
AuthorDate: Sun Oct 25 20:50:57 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 25 21:28:31 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=43fea86b

sys-apps/selinux-python: Add audit[python] dep

It was supposed to be optional in seobject.py but some places use it
unconditionally

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 .../{selinux-python-.ebuild => selinux-python-3.1-r1.ebuild} | 1 +
 sys-apps/selinux-python/selinux-python-.ebuild   | 1 +
 2 files changed, 2 insertions(+)

diff --git a/sys-apps/selinux-python/selinux-python-.ebuild 
b/sys-apps/selinux-python/selinux-python-3.1-r1.ebuild
similarity index 97%
copy from sys-apps/selinux-python/selinux-python-.ebuild
copy to sys-apps/selinux-python/selinux-python-3.1-r1.ebuild
index d890afd5e44..e3fe4738a86 100644
--- a/sys-apps/selinux-python/selinux-python-.ebuild
+++ b/sys-apps/selinux-python/selinux-python-3.1-r1.ebuild
@@ -38,6 +38,7 @@ DEPEND=">=sys-libs/libselinux-${SELNX_VER}:=[python]
>=sys-libs/libsepol-${SEPOL_VER}:=
>=app-admin/setools-4.2.0[${PYTHON_USEDEP}]
dev-python/ipy[${PYTHON_USEDEP}]
+   >=sys-process/audit-1.5.1[python,${PYTHON_USEDEP}]
${PYTHON_DEPS}"
 
 RDEPEND="${DEPEND}"

diff --git a/sys-apps/selinux-python/selinux-python-.ebuild 
b/sys-apps/selinux-python/selinux-python-.ebuild
index d890afd5e44..e3fe4738a86 100644
--- a/sys-apps/selinux-python/selinux-python-.ebuild
+++ b/sys-apps/selinux-python/selinux-python-.ebuild
@@ -38,6 +38,7 @@ DEPEND=">=sys-libs/libselinux-${SELNX_VER}:=[python]
>=sys-libs/libsepol-${SEPOL_VER}:=
>=app-admin/setools-4.2.0[${PYTHON_USEDEP}]
dev-python/ipy[${PYTHON_USEDEP}]
+   >=sys-process/audit-1.5.1[python,${PYTHON_USEDEP}]
${PYTHON_DEPS}"
 
 RDEPEND="${DEPEND}"



[gentoo-commits] repo/gentoo:master commit in: dev-libs/cudnn/

2020-10-24 Thread Jason Zaman
commit: 424b91db087aa96a2808215c3d7cebb6b41192a7
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Oct 24 08:31:48 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Oct 24 08:34:41 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=424b91db

dev-libs/cudnn: bump 8.0.4

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 dev-libs/cudnn/Manifest  |  4 
 dev-libs/cudnn/cudnn-8.0.4.30.ebuild | 40 
 dev-libs/cudnn/metadata.xml  |  4 +++-
 3 files changed, 47 insertions(+), 1 deletion(-)

diff --git a/dev-libs/cudnn/Manifest b/dev-libs/cudnn/Manifest
index 0fa7f69caf4..fe4f0ef0f49 100644
--- a/dev-libs/cudnn/Manifest
+++ b/dev-libs/cudnn/Manifest
@@ -5,6 +5,10 @@ DIST cudnn-10.1-linux-x64-v7.6.0.64.tgz 500810447 BLAKE2B 
cfe884dd3b2a5ca4641844
 DIST cudnn-10.1-linux-x64-v7.6.1.34.tgz 521806738 BLAKE2B 
9804ed394cf58f0c415d454ce83503db3faff74181e3746eabbae648cf85718ccfdcc1b64877e30e367a285294665975169fe1f992c27ac12b65d340784079a8
 SHA512 
81dc9a3d07885996b3b7141ea9785768dd6e266d138a671b934139b38ac1dcab0ffdb97617b308a9f492b5b163cb4dd65972e24de98499a2ecbed2bd261c1244
 DIST cudnn-10.1-linux-x64-v7.6.2.24.tgz 522872521 BLAKE2B 
6424ade8443521138b36bb528105bc482202ff475dd3eb3aaa7f992e8ad8b67628ac1b464d10056f16bb5766fb8464abe8ae406f8766831d248b90796d146c1e
 SHA512 
3451c113b4dcb8aaa33b2740e0e0b60d121ef02525c4e8ece3d7afd76b3472f704a90eb69d1a06f2bc94a981c2bfa3bea2f3bd057dcbdc6eecdea1056563057d
 DIST cudnn-10.1-linux-x64-v7.6.5.32.tgz 523418497 BLAKE2B 
28febb24382d411faa870cd42e999431d1ee1d083c09903ee4a8f5bee676981c60f6daf6cd256978db69345397db743a7a6f6187376520f5c4f968f6177e0201
 SHA512 
1073bc42c2c36fce6b710882a04a4035d66d95c410200b9d50953e993d7b801cc3a837e42843ad2447e62ea5dfc8ba22c8a803464716c56ffb811aa278645771
+DIST cudnn-10.1-linux-x64-v8.0.4.30.tgz 678710754 BLAKE2B 
5ad59925a500968eef8306c7e207c12ea2f55deecd2d044d7f1f158b76264aeb954f3029d1eaa5ef2aa6939c56e39177af28fc00cc04e2fdf26f9091ef46f3ca
 SHA512 
419f2875a0b362107ede5d238250496c1011cb8e1fdaada1ebdca8737e9df4eaddd1d3a25feeb0ef9baa0100c9f84507e527ed922b676f7883e0594b017ed9d9
 DIST cudnn-10.2-linux-x64-v7.6.5.32.tgz 548210361 BLAKE2B 
51fdd14f0bbc5a029bddca94ab7ae56ee77c16fdc525c78b986bb3dc1e0525943e5ab17eb81e356ef92c985ee467bd87a6670c343a96136d932ace86bb649437
 SHA512 
943c1afc0b7711dec87931770eaa567e25361a31ed5e1edabcc3f81df72880428611308e8032a28dc197e8c5edfebe3f67cc9d22a21eb569d8b254d8eb84eac6
+DIST cudnn-10.2-linux-x64-v8.0.4.30.tgz 700128057 BLAKE2B 
9883cb5993850b9dc0fe703925be4980b7768a6b1be940058f727e69e5d606f25b54ec3368fd22dddcc39092ac488ded4a9078c4ebb743e12c59688413c056cd
 SHA512 
ab41425bc5fad91e9a4270059d8125efc93407956b64c2ecc926506d4c826f33fb7561b143b159e92b286937e940f05fb2f4059747ee80c28b1e7a4d8b53c000
+DIST cudnn-11.0-linux-x64-v8.0.4.30.tgz 1048904376 BLAKE2B 
cb9ee44998ca17f670430e2e0641d3f804ff468e1b9fedc88ae6827b340917a89a8dafce88318f30f70333b06dea87c6f7b76851b3fbad6902b020b79e1cb085
 SHA512 
3364625e24bf5e57ceb4e38cf4eca81341245d9ba354816247537c943c70f9981719cf94873b19aa23b45c64d16a0374c0b9f60328e76f8e5b38f6c88610bff4
+DIST cudnn-11.1-linux-x64-v8.0.4.30.tgz 1510998061 BLAKE2B 
1829886516d75ef6015cdbfe26ab8508d9e99d9a3c39b2fedc236663e509f4bfe9adaa54814906a2bb5b885379d4e2349e46d3580f815acdb16e9f73d51574d9
 SHA512 
57615fef93f0897ede6d65da255a61f2e84d25ef46cd85c5f65558ba4bd8fee6f1ff06a4b0ecf20d0ff92bfd019a3068c719cdcd0de0eb2d16b18caee4aae610
 DIST cudnn-9.1-linux-x64-v7.tgz 343081241 BLAKE2B 
22c2fbef38a05e7929ccc28410dfdbff906b2c3e97e0419cf83988c2fc2340005e4a944d43b1a215b0c3458b2cad03480b7e537ae93861924c28ec1010a530fb
 SHA512 
7eadb64a3d5e49aec2761e6f7dc0295c1d356910b114eed450c47081fc81b6e3b7748f3a4153f6a9d957691e3689cd52823bfa12816b1950dfc8794d6f332749
 DIST cudnn-9.2-linux-x64-v7.1.tgz 421083972 BLAKE2B 
1a1dd6708132d6ad6f8f541694b1406de4a26b7bb78b6198bc8ec5ddde2172d0cc0dc540c7c446a2f941ad11cfafa562235d17129ab8e6aa641433c35c8d31d6
 SHA512 
2f67c905976eb041512eb012a7cc98e1f408ec867f6a1d9d440afbcddc622c03c40de10386e44e4ab138c1a4ad040d39b0e9243f68e22975ca27ec297be25c5d

diff --git a/dev-libs/cudnn/cudnn-8.0.4.30.ebuild 
b/dev-libs/cudnn/cudnn-8.0.4.30.ebuild
new file mode 100644
index 000..43f665faded
--- /dev/null
+++ b/dev-libs/cudnn/cudnn-8.0.4.30.ebuild
@@ -0,0 +1,40 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+DESCRIPTION="NVIDIA Accelerated Deep Learning on GPU library"
+HOMEPAGE="https://developer.nvidia.com/cuDNN;
+
+SRC_URI="cuda11-1? ( cudnn-11.1-linux-x64-v${PV}.tgz )
+   cuda11-0? ( cudnn-11.0-linux-x64-v${PV}.tgz )
+   cuda10-2? ( cudnn-10.2-linux-x64-v${PV}.tgz )
+   cuda10-1? ( cudnn-10.1-linux-x64-v${PV}.tgz )"
+
+SLOT="0/8"
+KEYWORDS="~amd64 ~amd64-linux"
+RESTRICT="fetch"
+LICENSE="NVIDIA-cuDNN"
+QA_PREBUILT="

[gentoo-commits] repo/gentoo:master commit in: dev-util/nvidia-cuda-toolkit/

2020-10-24 Thread Jason Zaman
commit: bdc936cc0b5561696bb6bc56daa2939e36721f85
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Oct 24 08:27:48 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sat Oct 24 08:34:39 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bdc936cc

dev-util/nvidia-cuda-toolkit: bump 11.1

Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 dev-util/nvidia-cuda-toolkit/Manifest  |   1 +
 .../nvidia-cuda-toolkit-11.1.0.ebuild  | 228 +
 2 files changed, 229 insertions(+)

diff --git a/dev-util/nvidia-cuda-toolkit/Manifest 
b/dev-util/nvidia-cuda-toolkit/Manifest
index 9fa2801165b..5e0365c8a29 100644
--- a/dev-util/nvidia-cuda-toolkit/Manifest
+++ b/dev-util/nvidia-cuda-toolkit/Manifest
@@ -4,6 +4,7 @@ DIST cuda_10.1.168_418.67_linux.run 2526901749 BLAKE2B 
ed2207400730600c63895cc89
 DIST cuda_10.1.243_418.87.00_linux.run 2572375299 BLAKE2B 
df9cb4faecc536e72697c6c73d544219f1b23cacb7fed646b0908fc7e573e85920861d56f76776ba637d84964cd1c789a0fe0d6541a4e0adf618b6c74d3c
 SHA512 
f92b19d0242969a65a6e6db43bc293e442abc07a9e168c9e995692e1a401679504598c782e511be3879e1650b90f71a50bbc63c9ee45654c26b5007cdf33c4fe
 DIST cuda_10.2.89_440.33.01_linux.run 2645419389 BLAKE2B 
236aa70a7b45e3636c2c229fffa7d1ca0699ab4365865a73edab607a209c42c2899133dd6a83c61c5929fa754668ad15aec4d847639af1c00a8e6657c8487c77
 SHA512 
ad8da539ff5df7caf411d1e497ff3d6978cfa8a1fd9150fa4846089e92a604ea56be8631f3efdfe7229a655b8d2d28e6edb32f5731530a77d6f00241cc7aab6e
 DIST cuda_11.0.3_450.51.06_linux.run 3112522594 BLAKE2B 
f458aeebee3f7145f46c5607d1743d350ed96e9b8fd824fd94d2c998bcd8ccf3ef924cf37e95ce002ba92f464edd5004164497e820084953613ec2deb6edb144
 SHA512 
e7014c868c0bf40c000b1fd14d156265773a399782937cc85a2b09cd62abddcacdc20b412e1cc91c3877d01563cf054b1e021f047b32cfff4ab516e7167382dd
+DIST cuda_11.1.0_455.23.05_linux.run 3498245611 BLAKE2B 
754d974acf309a0f2f969bb3312949aa5469b3ec6ebfc4a89f244420cecebc22dc19fb9f63ec7d5c177eeb533a8984cb6bfa8d271ba36d02aacce22d42442ba4
 SHA512 
b5d64f20dbb51f12c558be4a724c18ddcd6d18670036efb63d19bb8009300463b8051dd1a2d2d7768bf3076681954ea690af399651da832ba00867a3f4a9acdf
 DIST cuda_6.5.14_linux_32.run 76788277 BLAKE2B 
75e79dce6cac5155bde8a3cafa945047c489b10272f8a3b94bf55d499df4b9c8b82506a81a20f9fd816bd4fd0514e515a6435399db1cb62b027c76490bd4dfae
 SHA512 
89649ee0f4543b37037b7c8f5ed0b8bd502512afb4d93e3158b3df4786123be05a5288986b5abbfe15c14eb010777d2527b715225bea96a354a898c34e4a2fcc
 DIST cuda_6.5.14_linux_64.run 972320904 BLAKE2B 
4a4361fb7a90989ec4b4aa433189e7b358e5a2272fb9b9c59429e0014ac14e3b8de1b247ee98dc30c3f3ee4cc009eca4fdd86027bd3b9527a683353d60bdf5c6
 SHA512 
fecca731b86955f5bc7b09d88b02951e3ee5d4b1f1cf5f92658227a029b87cd35d6ac22956a5fa0afe62dcdc57191f1d12bb08c9f7cc05128727cd8455947b1e
 DIST cuda_6.5.19_linux_32.run 81882112 BLAKE2B 
cf55ef7c969503c156431fc56301ed4e9a1234ae0cb867f12649636069f35e56bf6fc9df7482b6baade45d78c8baa2d98c41a28696da59294e0f575c4a0344ce
 SHA512 
1ce9bd6b472b7e4f1fb181eb340dfcb757714d59a89aaa02146cfe1a97c8ccb7eb7699b4ec823276f277eb4d82d95050eaba17e7ed5fd2e47b9b5d78531c5d4e

diff --git a/dev-util/nvidia-cuda-toolkit/nvidia-cuda-toolkit-11.1.0.ebuild 
b/dev-util/nvidia-cuda-toolkit/nvidia-cuda-toolkit-11.1.0.ebuild
new file mode 100644
index 000..8f77d9e9c6e
--- /dev/null
+++ b/dev-util/nvidia-cuda-toolkit/nvidia-cuda-toolkit-11.1.0.ebuild
@@ -0,0 +1,228 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+inherit check-reqs cuda toolchain-funcs unpacker
+
+DRIVER_PV="455.23.05"
+
+DESCRIPTION="NVIDIA CUDA Toolkit (compiler and friends)"
+HOMEPAGE="https://developer.nvidia.com/cuda-zone;
+SRC_URI="https://developer.download.nvidia.com/compute/cuda/${PV}/local_installers/cuda_${PV}_${DRIVER_PV}_linux.run;
+
+LICENSE="NVIDIA-CUDA"
+SLOT="0/${PV}"
+KEYWORDS="-* ~amd64 ~amd64-linux"
+IUSE="debugger nsight profiler vis-profiler sanitizer"
+RESTRICT="bindist mirror"
+
+BDEPEND=""
+RDEPEND="
+   =x11-drivers/nvidia-drivers-${DRIVER_PV}[X,uvm]
+   debugger? (
+   dev-libs/openssl-compat:1.0.0
+   sys-libs/libtermcap-compat
+   sys-libs/ncurses-compat:5[tinfo]
+   )
+   vis-profiler? (
+   dev-libs/openssl-compat:1.0.0
+   >=virtual/jre-1.6
+   )"
+
+S="${WORKDIR}"
+
+QA_PREBUILT="opt/cuda/*"
+
+CHECKREQS_DISK_BUILD="6800M"
+
+pkg_setup() {
+   # We don't like to run cuda_pkg_setup as it depends on us
+   check-reqs_pkg_setup
+}
+
+src_prepare() {
+   local cuda_supported_gcc
+
+   # ATTENTION: change requires revbump
+   cuda_supported_gcc="4.7 4.8 4.9 5.3 5.4 6.3 6.4 7.2 7.3 8.2 8.3 8.4 9.2 
9.3 10.2"
+
+   sed \
+   -e "s:CUDA_SUPPORTED_

[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow/

2020-10-19 Thread Jason Zaman
commit: 06e15d5614b5c837bffe319144e6bff07a54c63f
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Oct 19 22:50:04 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Oct 19 22:50:04 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=06e15d56

sci-libs/tensorflow: Fix compile error against grpc-1.32

Closes: https://bugs.gentoo.org/747547
Package-Manager: Portage-3.0.8, Repoman-3.0.2
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow/Manifest   |   1 +
 sci-libs/tensorflow/tensorflow-2.3.1-r1.ebuild | 405 +
 2 files changed, 406 insertions(+)

diff --git a/sci-libs/tensorflow/Manifest b/sci-libs/tensorflow/Manifest
index 6b74fa6088a..dfa445626ad 100644
--- a/sci-libs/tensorflow/Manifest
+++ b/sci-libs/tensorflow/Manifest
@@ -49,4 +49,5 @@ DIST tensorflow-2.2.0.tar.gz 42100791 BLAKE2B 
8b773ae9945ca267af33a34d86f6aef023
 DIST tensorflow-2.3.1.tar.gz 46544608 BLAKE2B 
c3cb0954fcd060b95d63895cbeeca20f6af29ade999dc43db5fe010d6b33b6f650047d529f174a1663c23440a56e057e2f97c503a4a40bcdac9374b549f3220e
 SHA512 
e497ef4564f50abf9f918be4522cf702f4cf945cb1ebf83af1386ac4ddc7373b3ba70c7f803f8ca06faf2c6b5396e60b1e0e9b97bfbd667e733b08b6e6d70ef0
 DIST tensorflow-patches-2.1.0.tar.bz2 5737 BLAKE2B 
67f5004312389ed19e810aad9f2d5d4839d806b5a7422963520e0dff06b91346683647db757ac463af13ca70861a7ed9c94be242910abacc6be350e162947225
 SHA512 
a20bfb619d59e0d2741a27ce36e3d38dbb7a5a706d6bc56f8aa94b5b72288139ad301fc06390b128ef1c3a88b758d09d0224351590dedcda9c5309cc55af6fed
 DIST tensorflow-patches-2.2.0-r1.tar.bz2 3890 BLAKE2B 
cf4e0d579992cd09136fe3a11c5016e7b996ea959dad9f3a1ccff2fa623c2c4eab1c6673dfaf08b3b01220fd00c9edd5966e1162049f6d1e4fe5af280f491850
 SHA512 
8d07c9351b75faf90a137f65c2e6147d884744c5ab9b0bacadfa7bdc7b66ec2ec92920c7d23396bb70f7f4fb290f3f818591f23c6a4e91ab1a79290cb4ea1533
+DIST tensorflow-patches-2.3.1-r1.tar.bz2 12300 BLAKE2B 
068c127d7e980baf63068c524c9411e4f19bb79ee369221cf474a964a15ad340b28bde09504a8d524167eea036caf9d2dc52d0ad7ae1e52a76d1892833b033a0
 SHA512 
510676e4f999c12331a61bfeeca45b2526292d8bca8b0b42c1d8d466bc52722075fbd4df26a5f67dbe1ca4ccd9059e783c113cf694b436ff48c8114c99234cd3
 DIST tensorflow-patches-2.3.1.tar.bz2 11361 BLAKE2B 
22ddd827f616e33fd259ce2b7da5cda539d856701ad108d1d3b52d1dab660bcddc809fd9e9db5e6496552df080493b0205b83a58dc32808dc70c60a5878aa8af
 SHA512 
cdfc3407c775f8529cb8eb939b1046a7094ff999b8225e419e2ab4be19ecba6d853ebd8cd2dda77a7f60425a440f4d60bf3afca4a80688f0cba9967e14f8b8fb

diff --git a/sci-libs/tensorflow/tensorflow-2.3.1-r1.ebuild 
b/sci-libs/tensorflow/tensorflow-2.3.1-r1.ebuild
new file mode 100644
index 000..5ac893347dd
--- /dev/null
+++ b/sci-libs/tensorflow/tensorflow-2.3.1-r1.ebuild
@@ -0,0 +1,405 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+DISTUTILS_OPTIONAL=1
+PYTHON_COMPAT=( python3_{6,7,8} )
+DISTUTILS_USE_SETUPTOOLS=rdepend
+MY_PV=${PV/_rc/-rc}
+MY_P=${PN}-${MY_PV}
+
+inherit bazel check-reqs cuda distutils-r1 flag-o-matic prefix toolchain-funcs
+
+DESCRIPTION="Computation framework using data flow graphs for scalable machine 
learning"
+HOMEPAGE="https://www.tensorflow.org/;
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+IUSE="cuda mpi +python xla"
+CPU_USE_FLAGS_X86="sse sse2 sse3 sse4_1 sse4_2 avx avx2 fma3 fma4"
+for i in $CPU_USE_FLAGS_X86; do
+   IUSE+=" cpu_flags_x86_$i"
+done
+
+# distfiles that bazel uses for the workspace, will be copied to basel-distdir
+bazel_external_uris="
+   https://github.com/petewarden/OouraFFT/archive/v1.0.tar.gz -> 
OouraFFT-v1.0.tar.gz
+   
https://gitlab.com/libeigen/eigen/-/archive/386d809bde475c65b7940f290efe80e6a05878c4/eigen-386d809bde475c65b7940f290efe80e6a05878c4.tar.gz
+   
https://github.com/abseil/abseil-cpp/archive/df3ea785d8c30a9503321a3d35ee7d35808f190d.tar.gz
 -> abseil-cpp-df3ea785d8c30a9503321a3d35ee7d35808f190d.tar.gz
+   
https://github.com/bazelbuild/bazel-skylib/releases/download/0.9.0/bazel_skylib-0.9.0.tar.gz
+   
https://github.com/bazelbuild/rules_apple/archive/5131f3d46794bf227d296c82f30c2499c9de3c5b.tar.gz
 -> bazelbuild-rules_apple-5131f3d46794bf227d296c82f30c2499c9de3c5b.tar.gz
+   https://github.com/bazelbuild/rules_android/archive/v0.1.1.zip -> 
bazelbuild-rules_android-v0.1.1.zip
+   
https://github.com/bazelbuild/apple_support/archive/501b4afb27745c4813a88ffa28acd901408014e4.tar.gz
 -> bazelbuild-apple_support-501b4afb27745c4813a88ffa28acd901408014e4.tar.gz
+   
https://github.com/bazelbuild/bazel-toolchains/archive/92dd8a7a518a2fb7ba992d47c8b38299fe0be825.tar.gz
 -> bazel-toolchains-92dd8a7a518a2fb7ba992d47c8b38299fe0be825.tar.gz
+   
https://github.com/bazelbuild/rules_cc/archive/01d4a48911d5e7591ecb1c06d3b8af47fe872371.zip
 -> bazelbuild-rule

[gentoo-commits] proj/hardened-refpolicy: New tag: 2.20200818-r1

2020-10-12 Thread Jason Zaman
commit: 
Commit: Jason Zaman  gentoo  org>
CommitDate: Tue Oct 13 03:35:30 2020 +

New tag: 2.20200818-r1




[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 7ee3081a194697c1ebcecff0c40290fa0f498267
Author: Antoine Tenart  bootlin  com>
AuthorDate: Fri Sep 18 14:29:41 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=7ee3081a

systemd: allow systemd-network to get attributes of fs

Fixes:

avc:  denied  { getattr } for  pid=57 comm="systemd-network" name="/"
dev="vda" ino=2 scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/systemd.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index eb6f782f..f58ad97d 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -785,6 +785,7 @@ dev_write_kmsg(systemd_networkd_t)
 files_read_etc_files(systemd_networkd_t)
 files_watch_runtime_dirs(systemd_networkd_t)
 files_watch_root_dirs(systemd_networkd_t)
+fs_getattr_xattr_fs(systemd_networkd_t)
 
 auth_use_nsswitch(systemd_networkd_t)
 



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-10-12 Thread Jason Zaman
commit: 68e66b7974bc222f0f8b09dc02e377fb28f5599d
Author: Chris PeBenito  ieee  org>
AuthorDate: Mon Oct  5 13:55:13 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=68e66b79

snmp: Module version bump.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/snmp.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/services/snmp.te b/policy/modules/services/snmp.te
index c61721c5..c9bb4a72 100644
--- a/policy/modules/services/snmp.te
+++ b/policy/modules/services/snmp.te
@@ -1,4 +1,4 @@
-policy_module(snmp, 1.19.0)
+policy_module(snmp, 1.19.1)
 
 
 #



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-10-12 Thread Jason Zaman
commit: a8cb98adc8518f860b25d7afb7fe35886db3c763
Author: Antoine Tenart  bootlin  com>
AuthorDate: Mon Sep 21 14:13:02 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=a8cb98ad

dbus: allow clients to list runtime dirs and named sockets

Fixes:

avc:  denied  { read } for  pid=77 comm="systemd-resolve" name="dbus"
dev="tmpfs" ino=2748 scontext=system_u:system_r:systemd_resolved_t
tcontext=system_u:object_r:system_dbusd_runtime_t tclass=dir
permissive=1

avc:  denied  { read } for  pid=77 comm="systemd-resolve"
name="system_bus_socket" dev="tmpfs" ino=2765
scontext=system_u:system_r:systemd_resolved_t
tcontext=system_u:object_r:system_dbusd_runtime_t tclass=sock_file
permissive=1

avc:  denied  { read } for  pid=59 comm="systemd-network" name="dbus"
dev="tmpfs" ino=2777 scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:system_dbusd_runtime_t tclass=dir
permissive=1

avc:  denied  { read } for  pid=59 comm="systemd-network"
name="system_bus_socket" dev="tmpfs" ino=2791
scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:system_dbusd_runtime_t tclass=sock_file
permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/dbus.if | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/services/dbus.if b/policy/modules/services/dbus.if
index 13675aaf..540147c7 100644
--- a/policy/modules/services/dbus.if
+++ b/policy/modules/services/dbus.if
@@ -149,6 +149,8 @@ interface(`dbus_system_bus_client',`
stream_connect_pattern($1, system_dbusd_runtime_t, 
system_dbusd_runtime_t, system_dbusd_t)
 
dbus_read_config($1)
+   dbus_list_system_bus_runtime($1)
+   dbus_read_system_bus_runtime_named_sockets($1)
 
ifdef(`distro_gentoo',`
# The /var/lib/dbus/machine-id file is a link to /etc/machine-id



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 8ea2a42f1a0d9051533a8d262f5487f44fa605ae
Author: Antoine Tenart  bootlin  com>
AuthorDate: Thu Aug 13 09:52:20 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=8ea2a42f

systemd: add extra systemd_generator_t rules

Fixes:

avc:  denied  { setfscreate } for  pid=41 comm="systemd-getty-g"
scontext=system_u:system_r:systemd_generator_t
tcontext=system_u:system_r:systemd_generator_t tclass=process
permissive=1

avc:  denied  { dac_override } for  pid=40 comm="systemd-fstab-g"
capability=1  scontext=system_u:system_r:systemd_generator_t
tcontext=system_u:system_r:systemd_generator_t tclass=capability
permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/systemd.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 14306447..d0a852a2 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -362,6 +362,8 @@ seutil_search_default_contexts(systemd_coredump_t)
 #
 
 allow systemd_generator_t self:fifo_file rw_fifo_file_perms;
+allow systemd_generator_t self:capability dac_override;
+allow systemd_generator_t self:process setfscreate;
 
 corecmd_getattr_bin_files(systemd_generator_t)
 



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 539cc57f78a7663ec8bad0d7c6ace4ae42115144
Author: Antoine Tenart  bootlin  com>
AuthorDate: Fri Sep 25 07:30:38 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=539cc57f

systemd: allow systemd-getty-generator to read and write unallocated ttys

Fixes:

avc:  denied  { read write } for  pid=40 comm="systemd-getty-g"
name="ttyS0" dev="devtmpfs" ino=612
scontext=system_u:system_r:systemd_generator_t
tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1

avc:  denied  { open } for  pid=40 comm="systemd-getty-g"
path="/dev/ttyS0" dev="devtmpfs" ino=612
scontext=system_u:system_r:systemd_generator_t
tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1

avc:  denied  { ioctl } for  pid=40 comm="systemd-getty-g"
path="/dev/ttyS0" dev="devtmpfs" ino=612 ioctlcmd=0x5401
scontext=system_u:system_r:systemd_generator_t
tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/systemd.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 495e9e08..e1fc8fd4 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -409,6 +409,8 @@ storage_raw_read_fixed_disk(systemd_generator_t)
 
 systemd_log_parse_environment(systemd_generator_t)
 
+term_use_unallocated_ttys(systemd_generator_t)
+
 optional_policy(`
fstools_exec(systemd_generator_t)
 ')



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/kernel/

2020-10-12 Thread Jason Zaman
commit: 405b164fb380ec576ac7b278436180f2df4efbdc
Author: Deepak Rawat  gmail  com>
AuthorDate: Mon Oct  5 18:18:28 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=405b164f

Add selinux-policy for systemd-pstore service

systemd-pstore is a service to archive contents of pstore.

Signed-off-by: Deepak Rawat  gmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/kernel/devices.if| 26 +
 policy/modules/kernel/filesystem.if | 58 +
 policy/modules/system/systemd.fc|  2 ++
 policy/modules/system/systemd.te| 37 +++
 4 files changed, 123 insertions(+)

diff --git a/policy/modules/kernel/devices.if b/policy/modules/kernel/devices.if
index f1808c5c..1fae36ed 100644
--- a/policy/modules/kernel/devices.if
+++ b/policy/modules/kernel/devices.if
@@ -4499,6 +4499,32 @@ interface(`dev_read_sysfs',`
list_dirs_pattern($1, sysfs_t, sysfs_t)
 ')
 
+
+## 
+## Write to hardware state information.
+## 
+## 
+## 
+## Allow the specified domain to write to the sysfs
+## filesystem.
+## 
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+## 
+#
+interface(`dev_write_sysfs',`
+   gen_require(`
+   type sysfs_t;
+   ')
+
+   list_dirs_pattern($1, sysfs_t, sysfs_t)
+   write_files_pattern($1, sysfs_t, sysfs_t)
+')
+
 
 ## 
 ## Allow caller to modify hardware state information.

diff --git a/policy/modules/kernel/filesystem.if 
b/policy/modules/kernel/filesystem.if
index 79e87e0f..aa855bd0 100644
--- a/policy/modules/kernel/filesystem.if
+++ b/policy/modules/kernel/filesystem.if
@@ -3868,6 +3868,64 @@ interface(`fs_relabel_pstore_dirs',`
relabel_dirs_pattern($1, pstore_t, pstore_t)
 ')
 
+
+## 
+## List the directories
+## of a pstore filesystem.
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+#
+interface(`fs_list_pstore_dirs',`
+   gen_require(`
+   type pstore_t;
+   ')
+
+   allow $1 pstore_t:dir list_dir_perms;
+   dev_search_sysfs($1)
+')
+
+
+## 
+## Read pstore_t files
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+#
+interface(`fs_read_pstore_files',`
+   gen_require(`
+   type pstore_t;
+   ')
+
+   allow $1 pstore_t:file read_file_perms;
+')
+
+
+## 
+## Delete the files
+## of a pstore filesystem.
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+#
+interface(`fs_delete_pstore_files',`
+   gen_require(`
+   type pstore_t;
+   ')
+
+   delete_files_pattern($1, pstore_t, pstore_t)
+   dev_search_sysfs($1)
+')
+
 
 ## 
 ## Allow the type to associate to ramfs filesystems.

diff --git a/policy/modules/system/systemd.fc b/policy/modules/system/systemd.fc
index f61850b2..34637068 100644
--- a/policy/modules/system/systemd.fc
+++ b/policy/modules/system/systemd.fc
@@ -33,6 +33,7 @@
 /usr/lib/systemd/systemd-machined  --  
gen_context(system_u:object_r:systemd_machined_exec_t,s0)
 /usr/lib/systemd/systemd-modules-load  --  
gen_context(system_u:object_r:systemd_modules_load_exec_t,s0)
 /usr/lib/systemd/systemd-networkd  --  
gen_context(system_u:object_r:systemd_networkd_exec_t,s0)
+/usr/lib/systemd/systemd-pstore--  
gen_context(system_u:object_r:systemd_pstore_exec_t,s0)
 /usr/lib/systemd/systemd-resolved  --  
gen_context(system_u:object_r:systemd_resolved_exec_t,s0)
 /usr/lib/systemd/systemd-rfkill--  
gen_context(system_u:object_r:systemd_rfkill_exec_t,s0)
 /usr/lib/systemd/systemd-update-done   --  
gen_context(system_u:object_r:systemd_update_done_exec_t,s0)
@@ -57,6 +58,7 @@
 /var/lib/systemd/backlight(/.*)?   
gen_context(system_u:object_r:systemd_backlight_var_lib_t,s0)
 /var/lib/systemd/coredump(/.*)?
gen_context(system_u:object_r:systemd_coredump_var_lib_t,s0)
 /var/lib/systemd/linger(/.*)?  
gen_context(system_u:object_r:systemd_logind_var_lib_t,s0)
+/var/lib/systemd/pstore(/.*)?  
gen_context(system_u:object_r:systemd_pstore_var_lib_t,s0)
 /var/lib/systemd/rfkill(/.*)?  
gen_context(system_u:object_r:systemd_rfkill_var_lib_t,s0)
 
 /run/\.nologin[^/]*--  
gen_context(system_u:object_r:systemd_sessions_runtime_t,s0)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index a1c00d62..495e9e08 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -168,6 +168,13 @@ files_runtime_file(systemd_nspawn_runtime_t)
 type systemd_nspawn_tmp_t;
 files_tmp_file(systemd_

[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 18d959895e154d12737bf1dae892e7f9a06f7011
Author: Antoine Tenart  bootlin  com>
AuthorDate: Thu Aug 13 08:49:41 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:00:05 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=18d95989

locallogin: allow login to get attributes of procfs

Fixes:
avc:  denied  { getattr } for  pid=88 comm="login" name="/" dev="proc"
ino=1 scontext=system_u:system_r:local_login_t
tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/locallogin.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/locallogin.te 
b/policy/modules/system/locallogin.te
index 0474c4ef..c0072289 100644
--- a/policy/modules/system/locallogin.te
+++ b/policy/modules/system/locallogin.te
@@ -59,6 +59,7 @@ kernel_read_system_state(local_login_t)
 kernel_read_kernel_sysctls(local_login_t)
 kernel_search_key(local_login_t)
 kernel_link_key(local_login_t)
+kernel_getattr_proc(local_login_t)
 
 corecmd_list_bin(local_login_t)
 # cjp: these are probably not needed:



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-10-12 Thread Jason Zaman
commit: 756a3f044b37130daf744a690cacc0f6fb3c8155
Author: Antoine Tenart  bootlin  com>
AuthorDate: Mon Oct  5 14:59:27 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=756a3f04

ntp: allow systemd-timesyn to setfscreate

Fixes:

avc:  denied  { setfscreate } for  pid=68 comm="systemd-timesyn"
scontext=system_u:system_r:ntpd_t tcontext=system_u:system_r:ntpd_t
tclass=process permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/ntp.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/services/ntp.te b/policy/modules/services/ntp.te
index b9cc0ea2..34c674e1 100644
--- a/policy/modules/services/ntp.te
+++ b/policy/modules/services/ntp.te
@@ -141,6 +141,8 @@ userdom_dontaudit_use_unpriv_user_fds(ntpd_t)
 userdom_list_user_home_dirs(ntpd_t)
 
 ifdef(`init_systemd',`
+   allow ntpd_t self:process setfscreate;
+
allow ntpd_t ntpd_unit_t:file read_file_perms;
 
dbus_system_bus_client(ntpd_t)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 326c950e7b3c5e3ab77aff79f16e6440421f47ae
Author: Antoine Tenart  bootlin  com>
AuthorDate: Mon Aug 31 13:38:13 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:00:05 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=326c950e

udev: allow udevadm to retrieve xattrs

Fixes:

avc:  denied  { getattr } for  pid=50 comm="udevadm" name="/" dev="vda"
ino=2 scontext=system_u:system_r:udevadm_t
tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0

avc:  denied  { getattr } for  pid=52 comm="udevadm" name="/" dev="vda"
ino=2 scontext=system_u:system_r:udevadm_t
tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/udev.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te
index 49380fb2..2ef2337e 100644
--- a/policy/modules/system/udev.te
+++ b/policy/modules/system/udev.te
@@ -451,3 +451,5 @@ kernel_read_kernel_sysctls(udevadm_t)
 kernel_read_system_state(udevadm_t)
 
 seutil_read_file_contexts(udevadm_t)
+
+fs_getattr_xattr_fs(udevadm_t)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-10-12 Thread Jason Zaman
commit: cb663b200b61b96128f908d286ef1370b8c5cd1c
Author: Antoine Tenart  bootlin  com>
AuthorDate: Mon Oct  5 14:54:57 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=cb663b20

ntp: allow systemd-timesyn to watch dbus objects

Fixes:

avc:  denied  { watch } for  pid=68 comm="systemd-timesyn"
path="/run/dbus" dev="tmpfs" ino=2707 scontext=system_u:system_r:ntpd_t
tcontext=system_u:object_r:system_dbusd_runtime_t tclass=dir
permissive=1

avc:  denied  { watch } for  pid=68 comm="systemd-timesyn"
path="/run/dbus/system_bus_socket" dev="tmpfs" ino=2716
scontext=system_u:system_r:ntpd_t
tcontext=system_u:object_r:system_dbusd_runtime_t tclass=sock_file
permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/ntp.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/services/ntp.te b/policy/modules/services/ntp.te
index 86bfc9ff..b9cc0ea2 100644
--- a/policy/modules/services/ntp.te
+++ b/policy/modules/services/ntp.te
@@ -145,6 +145,8 @@ ifdef(`init_systemd',`
 
dbus_system_bus_client(ntpd_t)
dbus_connect_system_bus(ntpd_t)
+   dbus_watch_system_bus_runtime_dirs(ntpd_t)
+   dbus_watch_system_bus_runtime_named_sockets(ntpd_t)
init_dbus_chat(ntpd_t)
init_get_system_status(ntpd_t)
init_list_unit_dirs(ntpd_t)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/kernel/, policy/modules/services/

2020-10-12 Thread Jason Zaman
commit: de272a83fd640df62020dd924780ccd76e7b67a4
Author: Chris PeBenito  ieee  org>
AuthorDate: Tue Sep 22 12:27:05 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=de272a83

corecommands, dbus, locallogin, logging, sysnetwork, systemd, udev: Module 
version bump.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/kernel/corecommands.te | 2 +-
 policy/modules/services/dbus.te   | 2 +-
 policy/modules/system/locallogin.te   | 2 +-
 policy/modules/system/logging.te  | 2 +-
 policy/modules/system/sysnetwork.te   | 2 +-
 policy/modules/system/systemd.te  | 2 +-
 policy/modules/system/udev.te | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/policy/modules/kernel/corecommands.te 
b/policy/modules/kernel/corecommands.te
index b0a67367..a20d41fe 100644
--- a/policy/modules/kernel/corecommands.te
+++ b/policy/modules/kernel/corecommands.te
@@ -1,4 +1,4 @@
-policy_module(corecommands, 1.29.0)
+policy_module(corecommands, 1.29.1)
 
 
 #

diff --git a/policy/modules/services/dbus.te b/policy/modules/services/dbus.te
index 2637c898..f123c6d9 100644
--- a/policy/modules/services/dbus.te
+++ b/policy/modules/services/dbus.te
@@ -1,4 +1,4 @@
-policy_module(dbus, 1.29.1)
+policy_module(dbus, 1.29.2)
 
 gen_require(`
class dbus all_dbus_perms;

diff --git a/policy/modules/system/locallogin.te 
b/policy/modules/system/locallogin.te
index c0072289..6ab8c353 100644
--- a/policy/modules/system/locallogin.te
+++ b/policy/modules/system/locallogin.te
@@ -1,4 +1,4 @@
-policy_module(locallogin, 1.21.0)
+policy_module(locallogin, 1.21.1)
 
 
 #

diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te
index 820fc8d3..0141b178 100644
--- a/policy/modules/system/logging.te
+++ b/policy/modules/system/logging.te
@@ -1,4 +1,4 @@
-policy_module(logging, 1.32.1)
+policy_module(logging, 1.32.2)
 
 
 #

diff --git a/policy/modules/system/sysnetwork.te 
b/policy/modules/system/sysnetwork.te
index 9099802e..632ebdb5 100644
--- a/policy/modules/system/sysnetwork.te
+++ b/policy/modules/system/sysnetwork.te
@@ -1,4 +1,4 @@
-policy_module(sysnetwork, 1.26.1)
+policy_module(sysnetwork, 1.26.2)
 
 
 #

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index b19a20ac..a1c00d62 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1,4 +1,4 @@
-policy_module(systemd, 1.10.2)
+policy_module(systemd, 1.10.3)
 
 #
 #

diff --git a/policy/modules/system/udev.te b/policy/modules/system/udev.te
index 2ef2337e..753caab0 100644
--- a/policy/modules/system/udev.te
+++ b/policy/modules/system/udev.te
@@ -1,4 +1,4 @@
-policy_module(udev, 1.28.0)
+policy_module(udev, 1.28.1)
 
 
 #



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 6d822946c4c98fd62daf6095415a21866790ff95
Author: Antoine Tenart  bootlin  com>
AuthorDate: Thu Aug 13 12:08:37 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=6d822946

systemd: allow systemd-resolve to read in tmpfs

Fixes:
avc:  denied  { read } for  pid=76 comm="systemd-resolve" name="/"
dev="tmpfs" ino=651 scontext=system_u:system_r:systemd_resolved_t
tcontext=system_u:object_r:var_run_t tclass=dir permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/systemd.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index f58ad97d..b19a20ac 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1095,6 +1095,7 @@ auth_use_nsswitch(systemd_resolved_t)
 
 files_watch_root_dirs(systemd_resolved_t)
 files_watch_runtime_dirs(systemd_resolved_t)
+files_list_runtime(systemd_resolved_t)
 
 init_dgram_send(systemd_resolved_t)
 



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-10-12 Thread Jason Zaman
commit: 70268bb783c124594191f4c789b5b1eb2277340d
Author: Antoine Tenart  bootlin  com>
AuthorDate: Mon Sep 14 14:31:54 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:07:46 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=70268bb7

dbus: add two interfaces to allow reading from directories and named sockets

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/dbus.if | 36 
 1 file changed, 36 insertions(+)

diff --git a/policy/modules/services/dbus.if b/policy/modules/services/dbus.if
index e547337c..13675aaf 100644
--- a/policy/modules/services/dbus.if
+++ b/policy/modules/services/dbus.if
@@ -605,6 +605,24 @@ interface(`dbus_watch_system_bus_runtime_dirs',`
allow $1 system_dbusd_runtime_t:dir watch;
 ')
 
+
+## 
+## List system bus runtime directories.
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+#
+interface(`dbus_list_system_bus_runtime',`
+   gen_require(`
+   type system_dbusd_runtime_t;
+   ')
+
+   allow $1 system_dbusd_runtime_t:dir list_dir_perms;
+')
+
 
 ## 
 ## Watch system bus runtime named sockets.
@@ -623,6 +641,24 @@ interface(`dbus_watch_system_bus_runtime_named_sockets',`
allow $1 system_dbusd_runtime_t:sock_file watch;
 ')
 
+
+## 
+## Read system bus runtime named sockets.
+## 
+## 
+## 
+## Domain allowed access.
+## 
+## 
+#
+interface(`dbus_read_system_bus_runtime_named_sockets',`
+   gen_require(`
+   type system_dbusd_runtime_t;
+   ')
+
+   allow $1 system_dbusd_runtime_t:sock_file read;
+')
+
 
 ## 
 ## Unconfined access to DBUS.



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/services/

2020-10-12 Thread Jason Zaman
commit: f08d86da1f32efeee3a182aec308abfd13eeac95
Author: Dave Sugar  tresys  com>
AuthorDate: Thu Oct  1 16:19:54 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=f08d86da

Allow snmpd to read hwdata

Oct  1 16:11:49 localhost audispd: node=virtual type=AVC 
msg=audit(1601568708.950:2198): avc:  denied  { getattr } for  pid=4114 
comm="snmpd" path="/usr/share/hwdata/pci.ids" dev="dm-0" ino=76435 
scontext=system_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:hwdata_t:s0 
tclass=file permissive=1
Oct  1 16:11:49 localhost audispd: node=virtual type=AVC 
msg=audit(1601568708.950:2197): avc:  denied  { read } for  pid=4114 
comm="snmpd" name="pci.ids" dev="dm-0" ino=76435 
scontext=system_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:hwdata_t:s0 
tclass=file permissive=1
Oct  1 16:11:49 localhost audispd: node=virtual type=AVC 
msg=audit(1601568708.950:2197): avc:  denied  { open } for  pid=4114 
comm="snmpd" path="/usr/share/hwdata/pci.ids" dev="dm-0" ino=76435 
scontext=system_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:hwdata_t:s0 
tclass=file permissive=1

Signed-off-by: Dave Sugar  tresys.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/services/snmp.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/services/snmp.te b/policy/modules/services/snmp.te
index 97c457e2..c61721c5 100644
--- a/policy/modules/services/snmp.te
+++ b/policy/modules/services/snmp.te
@@ -108,6 +108,7 @@ init_dontaudit_write_utmp(snmpd_t)
 
 logging_send_syslog_msg(snmpd_t)
 
+miscfiles_read_hwdata(snmpd_t)
 miscfiles_read_localization(snmpd_t)
 
 seutil_dontaudit_search_config(snmpd_t)



[gentoo-commits] proj/hardened-refpolicy:master commit in: gentoo/

2020-10-12 Thread Jason Zaman
commit: 671ed6dc7b1671cbfe6616f6b65ead9f1c07ce22
Author: Jason Zaman  gentoo  org>
AuthorDate: Sun Oct 11 21:33:53 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:33:53 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=671ed6dc

Merge upstream

Signed-off-by: Jason Zaman  gentoo.org>

 gentoo/STATE | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gentoo/STATE b/gentoo/STATE
index 307c1903..ecc91a17 100644
--- a/gentoo/STATE
+++ b/gentoo/STATE
@@ -1 +1 @@
-master aa6c3f4da3f8e4e7d53b3228b91b4bd951ce9aa7
+master 14a45a594baf987679cbda6302e54ba0617efe48



[gentoo-commits] proj/hardened-refpolicy:master commit in: /

2020-10-12 Thread Jason Zaman
commit: 725c323ac43c51ab94f43f70a22a95af31bb11a8
Author: Chris PeBenito  ieee  org>
AuthorDate: Thu Sep 17 13:58:02 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:00:05 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=725c323a

.travis.yml: Point selint at only the policy dir.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 .travis.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.travis.yml b/.travis.yml
index b9e70564..40b612cd 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -114,7 +114,7 @@ script:
 # Run SELint
 #   disable C-005 (Permissions in av rule or class declaration not 
ordered) for now: has 712 findings
 #   disable W-005 (Interface call from module not in optional_policy 
block): refpolicy does not follow this rule
-selint --source --recursive --summary --fail --disable C-005 --disable 
W-005 .
+selint --source --recursive --summary --fail --disable C-005 --disable 
W-005 policy
 
 exit 0
   fi



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/kernel/

2020-10-12 Thread Jason Zaman
commit: b84ca9b9648ba7f073ad7513c4b610b7f0dfbdfc
Author: Antoine Tenart  bootlin  com>
AuthorDate: Mon Sep  7 15:08:12 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b84ca9b9

corecommands: add entry for Busybox shell

Fixes:

vc:  denied  { execute } for  pid=87 comm="login" name="sh" dev="vda"
ino=408 scontext=system_u:system_r:local_login_t
tcontext=system_u:object_r:bin_t tclass=file permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/kernel/corecommands.fc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/corecommands.fc 
b/policy/modules/kernel/corecommands.fc
index 5ced3c67..07a09873 100644
--- a/policy/modules/kernel/corecommands.fc
+++ b/policy/modules/kernel/corecommands.fc
@@ -157,6 +157,7 @@ ifdef(`distro_gentoo',`
 /usr/bin/sesh  --  
gen_context(system_u:object_r:shell_exec_t,s0)
 /usr/bin/scponly   --  
gen_context(system_u:object_r:shell_exec_t,s0)
 /usr/bin/scponlyc  --  
gen_context(system_u:object_r:shell_exec_t,s0)
+/usr/bin/sh--  
gen_context(system_u:object_r:shell_exec_t,s0)
 /usr/bin/smrsh --  
gen_context(system_u:object_r:shell_exec_t,s0)
 /usr/bin/tcsh  --  
gen_context(system_u:object_r:shell_exec_t,s0)
 /usr/bin/yash  --  
gen_context(system_u:object_r:shell_exec_t,s0)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/kernel/, policy/modules/services/

2020-10-12 Thread Jason Zaman
commit: fd0f05a88a59cad71dde39c9234eaddabf75565b
Author: Chris PeBenito  ieee  org>
AuthorDate: Fri Oct  9 13:45:11 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=fd0f05a8

devices, filesystem, systemd, ntp: Module version bump.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/kernel/devices.te| 2 +-
 policy/modules/kernel/filesystem.te | 2 +-
 policy/modules/services/ntp.te  | 2 +-
 policy/modules/system/systemd.te| 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/policy/modules/kernel/devices.te b/policy/modules/kernel/devices.te
index 0137af03..8e72f90a 100644
--- a/policy/modules/kernel/devices.te
+++ b/policy/modules/kernel/devices.te
@@ -1,4 +1,4 @@
-policy_module(devices, 1.27.1)
+policy_module(devices, 1.27.2)
 
 
 #

diff --git a/policy/modules/kernel/filesystem.te 
b/policy/modules/kernel/filesystem.te
index 6439f410..f338e207 100644
--- a/policy/modules/kernel/filesystem.te
+++ b/policy/modules/kernel/filesystem.te
@@ -1,4 +1,4 @@
-policy_module(filesystem, 1.28.1)
+policy_module(filesystem, 1.28.2)
 
 
 #

diff --git a/policy/modules/services/ntp.te b/policy/modules/services/ntp.te
index 34c674e1..98ae0267 100644
--- a/policy/modules/services/ntp.te
+++ b/policy/modules/services/ntp.te
@@ -1,4 +1,4 @@
-policy_module(ntp, 1.22.0)
+policy_module(ntp, 1.22.1)
 
 
 #

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index 7acbc551..74f3fc55 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1,4 +1,4 @@
-policy_module(systemd, 1.10.3)
+policy_module(systemd, 1.10.4)
 
 #
 #



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: e5975779e32d5337266c191163bbde851ee4bda9
Author: Antoine Tenart  bootlin  com>
AuthorDate: Thu Aug 13 10:08:03 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=e5975779

systemd: allow systemd-hwdb to search init runtime directories

Fixes:

avc:  denied  { search } for  pid=54 comm="systemd-hwdb" name="systemd"
dev="tmpfs" ino=664 scontext=system_u:system_r:systemd_hw_t
tcontext=system_u:object_r:init_runtime_t tclass=dir permissive=1

avc:  denied  { search } for  pid=54 comm="systemd-hwdb" name="systemd"
dev="tmpfs" ino=664 scontext=system_u:system_r:systemd_hw_t
tcontext=system_u:object_r:init_runtime_t tclass=dir permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/systemd.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index d0a852a2..eb6f782f 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -461,6 +461,7 @@ selinux_get_fs_mount(systemd_hw_t)
 selinux_use_status_page(systemd_hw_t)
 
 init_read_state(systemd_hw_t)
+init_search_runtime(systemd_hw_t)
 
 seutil_read_config(systemd_hw_t)
 seutil_read_file_contexts(systemd_hw_t)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 3f53590de965cda81024db69cc574633de1693e0
Author: Antoine Tenart  bootlin  com>
AuthorDate: Thu Aug 13 09:08:43 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:00:05 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=3f53590d

logging: allow systemd-journal to write messages to the audit socket

Fixes:

avc:  denied  { nlmsg_write } for  pid=46 comm="systemd-journal"
scontext=system_u:system_r:syslogd_t
tcontext=system_u:system_r:syslogd_t tclass=netlink_audit_socket
permissive=1

avc:  denied  { nlmsg_write } for  pid=46 comm="systemd-journal"
scontext=system_u:system_r:syslogd_t
tcontext=system_u:system_r:syslogd_t tclass=netlink_audit_socket
permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/logging.te | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/policy/modules/system/logging.te b/policy/modules/system/logging.te
index 39664307..820fc8d3 100644
--- a/policy/modules/system/logging.te
+++ b/policy/modules/system/logging.te
@@ -524,7 +524,7 @@ ifdef(`init_systemd',`
allow syslogd_t self:netlink_audit_socket connected_socket_perms;
allow syslogd_t self:capability2 audit_read;
allow syslogd_t self:capability { chown setgid setuid sys_ptrace };
-   allow syslogd_t self:netlink_audit_socket { getattr getopt read setopt 
write };
+   allow syslogd_t self:netlink_audit_socket { getattr getopt read setopt 
write nlmsg_write };
 
# remove /run/log/journal when switching to permanent storage
allow syslogd_t var_log_t:dir rmdir;



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 1fbd9f8a1e6432bf4eec1a77a6a4d652492c0b87
Author: Antoine Tenart  bootlin  com>
AuthorDate: Mon Oct  5 15:51:05 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=1fbd9f8a

systemd: allow systemd-network to list the runtime directory

Fixes:

avc:  denied  { read } for  pid=58 comm="systemd-network" name="/"
dev="tmpfs" ino=652 scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:var_run_t tclass=dir permissive=1

avc:  denied  { read } for  pid=58 comm="systemd-network" name="/"
dev="tmpfs" ino=652 scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:var_run_t tclass=dir permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/systemd.te | 1 +
 1 file changed, 1 insertion(+)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index e1fc8fd4..b7f25594 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -794,6 +794,7 @@ dev_write_kmsg(systemd_networkd_t)
 files_read_etc_files(systemd_networkd_t)
 files_watch_runtime_dirs(systemd_networkd_t)
 files_watch_root_dirs(systemd_networkd_t)
+files_list_runtime(systemd_networkd_t)
 fs_getattr_xattr_fs(systemd_networkd_t)
 
 auth_use_nsswitch(systemd_networkd_t)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: 7e809e87c1da6253cba08a8d8603f78be8b52b64
Author: Yi Zhao  windriver  com>
AuthorDate: Tue Sep 15 02:57:58 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:07:46 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=7e809e87

sysnet: allow dhcpcd to create socket file

The dhcpcd needs to create socket file under /run/dhcpcd directory.

Fixes:
AVC avc:  denied  { create } for  pid=331 comm="dhcpcd" name="eth0.sock"
scontext=system_u:system_r:dhcpc_t:s0-s15:c0.c1023
tcontext=system_u:object_r:dhcpc_runtime_t:s0 tclass=sock_file
permissive=0

AVC avc:  denied  { setattr } for  pid=331 comm="dhcpcd"
name="eth0.sock" dev="tmpfs" ino=19153
scontext=system_u:system_r:dhcpc_t:s0-s15:c0.c1023
tcontext=system_u:object_r:dhcpc_runtime_t:s0 tclass=sock_file
permissive=0

AVC avc:  denied  { sendto } for  pid=331 comm="dhcpcd"
scontext=system_u:system_r:dhcpc_t:s0-s15:c0.c1023
tcontext=system_u:system_r:dhcpc_t:s0-s15:c0.c1023
tclass=unix_dgram_socket permissive=0

Signed-off-by: Yi Zhao  windriver.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/sysnetwork.te | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/sysnetwork.te 
b/policy/modules/system/sysnetwork.te
index 83389037..9099802e 100644
--- a/policy/modules/system/sysnetwork.te
+++ b/policy/modules/system/sysnetwork.te
@@ -62,6 +62,7 @@ allow dhcpc_t self:packet_socket create_socket_perms;
 allow dhcpc_t self:netlink_generic_socket create_socket_perms;
 allow dhcpc_t self:netlink_route_socket create_netlink_socket_perms;
 allow dhcpc_t self:rawip_socket create_socket_perms;
+allow dhcpc_t self:unix_dgram_socket { create_socket_perms sendto };
 
 allow dhcpc_t dhcp_etc_t:dir list_dir_perms;
 read_lnk_files_pattern(dhcpc_t, dhcp_etc_t, dhcp_etc_t)
@@ -74,6 +75,7 @@ allow dhcpc_t dhcpc_state_t:file map;
 
 # create pid file
 manage_files_pattern(dhcpc_t, dhcpc_runtime_t, dhcpc_runtime_t)
+manage_sock_files_pattern(dhcpc_t, dhcpc_runtime_t, dhcpc_runtime_t)
 create_dirs_pattern(dhcpc_t, dhcpc_runtime_t, dhcpc_runtime_t)
 # Create /var/run/dhcpc directory (state directory), needed for /run/dhcpc
 # Gets done through the dhcpcd-hooks



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/, policy/modules/apps/, policy/modules/kernel/, ...

2020-10-12 Thread Jason Zaman
commit: 0b43c7867705de4ae377de61aefe59fe43e4486d
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Oct 12 00:58:21 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Oct 12 01:57:46 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=0b43c786

Fix selint issues

Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/admin/portage.fc   |  3 ---
 policy/modules/admin/puppet.te|  2 +-
 policy/modules/admin/shorewall.fc | 11 ---
 policy/modules/apps/java.fc   |  5 -
 policy/modules/apps/mozilla.fc|  1 -
 policy/modules/contrib/ceph.if|  2 +-
 policy/modules/contrib/ceph.te|  2 +-
 policy/modules/contrib/dirsrv.if  |  4 ++--
 policy/modules/contrib/dirsrv.te  |  4 ++--
 policy/modules/contrib/dropbox.fc |  4 
 policy/modules/contrib/dropbox.if |  1 +
 policy/modules/contrib/gorg.te|  4 ++--
 policy/modules/contrib/links.if   |  6 +++---
 policy/modules/contrib/logsentry.te   |  4 ++--
 policy/modules/contrib/mutt.if|  4 ++--
 policy/modules/contrib/nginx.if   |  2 +-
 policy/modules/contrib/pan.te |  2 +-
 policy/modules/contrib/resolvconf.fc  |  2 --
 policy/modules/contrib/skype.if   |  8 
 policy/modules/contrib/uwsgi.if   |  4 ++--
 policy/modules/contrib/vde.if |  5 ++---
 policy/modules/kernel/corecommands.fc | 18 ++
 policy/modules/kernel/corenetwork.if.in   | 18 ++
 policy/modules/kernel/devices.if  |  2 +-
 policy/modules/kernel/files.fc|  5 +
 policy/modules/services/mysql.fc  |  5 -
 policy/modules/services/networkmanager.if |  2 +-
 policy/modules/services/postgresql.if |  2 +-
 policy/modules/services/snmp.if   |  4 ++--
 policy/modules/system/init.te |  2 +-
 policy/modules/system/libraries.fc|  6 +-
 policy/modules/system/logging.if  |  2 +-
 policy/modules/system/modutils.te |  2 +-
 33 files changed, 69 insertions(+), 79 deletions(-)

diff --git a/policy/modules/admin/portage.fc b/policy/modules/admin/portage.fc
index 6a7e4582..5757deaa 100644
--- a/policy/modules/admin/portage.fc
+++ b/policy/modules/admin/portage.fc
@@ -2,7 +2,6 @@
 /etc/make\.globals --  gen_context(system_u:object_r:portage_conf_t,s0)
 /etc/make\.profile -l  gen_context(system_u:object_r:portage_conf_t,s0)
 /etc/portage(/.*)? gen_context(system_u:object_r:portage_conf_t,s0)
-/etc/portage/bin(/.*)? --  gen_context(system_u:object_r:bin_t,s0)
 /etc/portage/gpg(/.*)? gen_context(system_u:object_r:portage_gpg_t,s0)
 
 /usr/bin/emerge -- gen_context(system_u:object_r:portage_exec_t,s0)
@@ -11,11 +10,9 @@
 /usr/bin/layman--  
gen_context(system_u:object_r:portage_fetch_exec_t,s0)
 /usr/bin/sandbox   --  gen_context(system_u:object_r:portage_exec_t,s0)
 
-/usr/lib/portage/bin/ebuild--  gen_context(system_u:object_r:bin_t,s0)
 /usr/lib/portage/bin/emerge--  
gen_context(system_u:object_r:portage_exec_t,s0)
 /usr/lib/portage/bin/emerge-webrsync   --  
gen_context(system_u:object_r:portage_fetch_exec_t,s0)
 /usr/lib/portage/bin/quickpkg  --  
gen_context(system_u:object_r:portage_exec_t,s0)
-/usr/lib/portage/bin/ebuild\.sh--  
gen_context(system_u:object_r:bin_t,s0)
 /usr/lib/portage/bin/regenworld--  
gen_context(system_u:object_r:portage_exec_t,s0)
 /usr/lib/portage/bin/sandbox   --  
gen_context(system_u:object_r:portage_exec_t,s0)
 

diff --git a/policy/modules/admin/puppet.te b/policy/modules/admin/puppet.te
index fdb2640b..e0e7127e 100644
--- a/policy/modules/admin/puppet.te
+++ b/policy/modules/admin/puppet.te
@@ -376,7 +376,7 @@ ifdef(`distro_gentoo',`
# So, we duplicate the content of files_relabel_all_files 
except for
# the policy configuration stuff and hope users do that through 
Portage

-   gen_require(`
+   gen_require(` #selint-disable:S-001
attribute file_type;
attribute security_file_type;
type policy_config_t;

diff --git a/policy/modules/admin/shorewall.fc 
b/policy/modules/admin/shorewall.fc
index aae46ecb..b18aab7e 100644
--- a/policy/modules/admin/shorewall.fc
+++ b/policy/modules/admin/shorewall.fc
@@ -16,14 +16,3 @@
 /var/lock/subsys/shorewall --  
gen_context(system_u:object_r:shorewall_lock_t,s0)
 
 /var/log/shorewall.*   gen_context(system_u:object_r:shorewall_log_t,s0)
-
-ifdef(`distro_gentoo',`
-/usr/share/shorewall/compiler\.pl  --  
gen_context(system_u:object_r:bin_t,s0)
-/usr/share/shorewall/configpath--  
gen_context(system_u:object_r:bin_t,s0)
-/usr/share/shorewall/getparams --  gen_context(system_u:object_r:bin_t,

[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: fa247cca2d228e0eee5cc6c1cbf812a1dfd1adbb
Author: Chris PeBenito  ieee  org>
AuthorDate: Fri Oct  9 13:42:31 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:14:40 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=fa247cca

systemd: Move systemd-pstore block up in alphabetical order.

No rule change.

Signed-off-by: Chris PeBenito  ieee.org>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/systemd.te | 46 
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
index b7f25594..7acbc551 100644
--- a/policy/modules/system/systemd.te
+++ b/policy/modules/system/systemd.te
@@ -1046,6 +1046,29 @@ optional_policy(`
 ')
 
 
+#
+#
+# systemd-pstore local policy
+#
+
+dontaudit systemd_pstore_t self:capability net_admin;
+
+manage_files_pattern(systemd_pstore_t, systemd_pstore_var_lib_t, 
systemd_pstore_var_lib_t)
+
+files_read_etc_files(systemd_pstore_t)
+files_search_var_lib(systemd_pstore_t)
+
+fs_list_pstore_dirs(systemd_pstore_t)
+fs_read_pstore_files(systemd_pstore_t)
+fs_delete_pstore_files(systemd_pstore_t)
+
+init_search_run(systemd_pstore_t)
+init_list_var_lib_dirs(systemd_pstore_t)
+
+kernel_read_system_state(systemd_pstore_t)
+
+logging_send_syslog_msg(systemd_pstore_t)
+
 ###
 #
 # Rfkill local policy
@@ -1428,26 +1451,3 @@ 
userdom_mounton_user_runtime_dirs(systemd_user_runtime_dir_t)
 userdom_relabelto_user_runtime_dirs(systemd_user_runtime_dir_t)
 
 dbus_system_bus_client(systemd_user_runtime_dir_t)
-
-#
-#
-# systemd-pstore local policy
-#
-
-dontaudit systemd_pstore_t self:capability net_admin;
-
-manage_files_pattern(systemd_pstore_t, systemd_pstore_var_lib_t, 
systemd_pstore_var_lib_t)
-
-files_read_etc_files(systemd_pstore_t)
-files_search_var_lib(systemd_pstore_t)
-
-fs_list_pstore_dirs(systemd_pstore_t)
-fs_read_pstore_files(systemd_pstore_t)
-fs_delete_pstore_files(systemd_pstore_t)
-
-init_search_run(systemd_pstore_t)
-init_list_var_lib_dirs(systemd_pstore_t)
-
-kernel_read_system_state(systemd_pstore_t)
-
-logging_send_syslog_msg(systemd_pstore_t)



[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/modules/system/

2020-10-12 Thread Jason Zaman
commit: b448dc10ff3432e236a94f80ba0c6d924e753953
Author: Antoine Tenart  bootlin  com>
AuthorDate: Thu Aug 13 09:36:54 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Oct 11 21:00:05 2020 +
URL:
https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b448dc10

sysnetwork: allow to read network configuration files

Fixes:

avc:  denied  { getattr } for  pid=55 comm="systemd-udevd"
path="/etc/systemd/network" dev="vda" ino=128
scontext=system_u:system_r:udev_t tcontext=system_u:object_r:net_conf_t
tclass=dir permissive=1

avc:  denied  { getattr } for  pid=55 comm="systemd-udevd"
path="/etc/systemd/network" dev="vda" ino=128
scontext=system_u:system_r:udev_t tcontext=system_u:object_r:net_conf_t
tclass=dir permissive=1

avc:  denied  { read } for  pid=55 comm="systemd-udevd" name="network"
dev="vda" ino=128 scontext=system_u:system_r:udev_t
tcontext=system_u:object_r:net_conf_t tclass=dir permissive=1

avc:  denied  { read } for  pid=55 comm="systemd-udevd" name="network"
dev="vda" ino=128 scontext=system_u:system_r:udev_t
tcontext=system_u:object_r:net_conf_t tclass=dir permissive=1

avc:  denied  { open } for  pid=55 comm="systemd-udevd"
path="/etc/systemd/network" dev="vda" ino=128
scontext=system_u:system_r:udev_t tcontext=system_u:object_r:net_conf_t
tclass=dir permissive=1

avc:  denied  { open } for  pid=55 comm="systemd-udevd"
path="/etc/systemd/network" dev="vda" ino=128
scontext=system_u:system_r:udev_t tcontext=system_u:object_r:net_conf_t
tclass=dir permissive=1

avc:  denied  { getattr } for  pid=59 comm="systemd-network"
path="/etc/systemd/network" dev="vda" ino=128
scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:net_conf_t tclass=dir permissive=1

avc:  denied  { read } for  pid=59 comm="systemd-network" name="network"
dev="vda" ino=128 scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:net_conf_t tclass=dir permissive=1

avc:  denied  { open } for  pid=59 comm="systemd-network"
path="/etc/systemd/network" dev="vda" ino=128
scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:net_conf_t tclass=dir permissive=1

avc:  denied  { search } for  pid=59 comm="systemd-network"
name="network" dev="vda" ino=128
scontext=system_u:system_r:systemd_networkd_t
tcontext=system_u:object_r:net_conf_t tclass=dir permissive=1

avc:  denied  { getattr } for  pid=55 comm="systemd-udevd"
path="/etc/systemd/network" dev="vda" ino=128
scontext=system_u:system_r:udev_t tcontext=system_u:object_r:net_conf_t
tclass=dir permissive=1

Signed-off-by: Antoine Tenart  bootlin.com>
Signed-off-by: Jason Zaman  gentoo.org>

 policy/modules/system/sysnetwork.if | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/policy/modules/system/sysnetwork.if 
b/policy/modules/system/sysnetwork.if
index 3e88974f..53cbbf7f 100644
--- a/policy/modules/system/sysnetwork.if
+++ b/policy/modules/system/sysnetwork.if
@@ -346,6 +346,8 @@ interface(`sysnet_read_config',`
')
 
files_search_etc($1)
+   files_search_runtime($1)
+   allow $1 net_conf_t:dir list_dir_perms;
allow $1 net_conf_t:file read_file_perms;
 
ifdef(`distro_debian',`



[gentoo-commits] repo/gentoo:master commit in: app-admin/selint/

2020-10-11 Thread Jason Zaman
commit: 3875b472e5c7ae6459c9f86a743ee9c7ccc7504c
Author: Jonathan Davies  protonmail  com>
AuthorDate: Fri Sep 18 14:18:50 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Oct 12 02:19:55 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3875b472

app-admin/selint: Added new package with version 1.1.0.

Closes: https://github.com/gentoo/gentoo/pull/17588
Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 app-admin/selint/Manifest|  1 +
 app-admin/selint/metadata.xml| 11 ++
 app-admin/selint/selint-1.1.0.ebuild | 39 
 app-admin/selint/selint-.ebuild  | 39 
 4 files changed, 90 insertions(+)

diff --git a/app-admin/selint/Manifest b/app-admin/selint/Manifest
new file mode 100644
index 000..efeb4bfb72e
--- /dev/null
+++ b/app-admin/selint/Manifest
@@ -0,0 +1 @@
+DIST selint-1.1.0.tar.gz 283926 BLAKE2B 
0908f8830ce4b569c54e8c025dd92c39af59172fee0b8061f5b8cdaf61222979a78c3726a5647af9161ce7e4a7ddd5bee64772afecd2024368afa76294b3d317
 SHA512 
3af358e0f42a285a0360ce2b4db9014ef1e4f0b792623007f88cf510799080975d9e44817e8911bbd32b141704a7fd11e1b4d8f91e124d0fa91c38f71a978c91

diff --git a/app-admin/selint/metadata.xml b/app-admin/selint/metadata.xml
new file mode 100644
index 000..80f8686d2a8
--- /dev/null
+++ b/app-admin/selint/metadata.xml
@@ -0,0 +1,11 @@
+
+http://www.gentoo.org/dtd/metadata.dtd;>
+
+   
+   seli...@gentoo.org
+   SELinux Team
+   
+   
+   TresysTechnology/selint
+   
+

diff --git a/app-admin/selint/selint-1.1.0.ebuild 
b/app-admin/selint/selint-1.1.0.ebuild
new file mode 100644
index 000..f7904071225
--- /dev/null
+++ b/app-admin/selint/selint-1.1.0.ebuild
@@ -0,0 +1,39 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="7"
+
+inherit toolchain-funcs
+
+DESCRIPTION="Policy Analysis Tools for SELinux"
+HOMEPAGE="https://github.com/TresysTechnology/selint/wiki;
+
+if [[ ${PV} ==  ]] ; then
+   inherit autotools git-r3
+   EGIT_REPO_URI="https://github.com/TresysTechnology/selint.git;
+else
+   
SRC_URI="https://github.com/TresysTechnology/selint/releases/download/v${PV}/${P}.tar.gz;
+   KEYWORDS="~amd64 ~x86"
+fi
+
+LICENSE="Apache-2.0"
+SLOT="0"
+IUSE="test"
+RESTRICT="!test? ( test )"
+
+RDEPEND="
+   dev-libs/confuse
+   dev-libs/uthash"
+
+DEPEND="${RDEPEND}
+   test? ( dev-libs/check )"
+
+src_prepare() {
+   [[ ${PV} ==  ]] && eautoreconf
+
+   eapply_user
+}
+
+src_configure() {
+   econf $(use_with test check)
+}

diff --git a/app-admin/selint/selint-.ebuild 
b/app-admin/selint/selint-.ebuild
new file mode 100644
index 000..f7904071225
--- /dev/null
+++ b/app-admin/selint/selint-.ebuild
@@ -0,0 +1,39 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="7"
+
+inherit toolchain-funcs
+
+DESCRIPTION="Policy Analysis Tools for SELinux"
+HOMEPAGE="https://github.com/TresysTechnology/selint/wiki;
+
+if [[ ${PV} ==  ]] ; then
+   inherit autotools git-r3
+   EGIT_REPO_URI="https://github.com/TresysTechnology/selint.git;
+else
+   
SRC_URI="https://github.com/TresysTechnology/selint/releases/download/v${PV}/${P}.tar.gz;
+   KEYWORDS="~amd64 ~x86"
+fi
+
+LICENSE="Apache-2.0"
+SLOT="0"
+IUSE="test"
+RESTRICT="!test? ( test )"
+
+RDEPEND="
+   dev-libs/confuse
+   dev-libs/uthash"
+
+DEPEND="${RDEPEND}
+   test? ( dev-libs/check )"
+
+src_prepare() {
+   [[ ${PV} ==  ]] && eautoreconf
+
+   eapply_user
+}
+
+src_configure() {
+   econf $(use_with test check)
+}



[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow/

2020-10-08 Thread Jason Zaman
commit: 9cb21debae3d6f68cbbaf5a26b9362b515282b66
Author: Jason Zaman  gentoo  org>
AuthorDate: Fri Oct  9 03:56:56 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Fri Oct  9 03:56:56 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9cb21deb

sci-libs/tensorflow: Add missing pybind11 dep to 2.3

Closes: https://bugs.gentoo.org/713482
Package-Manager: Portage-3.0.4, Repoman-3.0.1
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow/tensorflow-2.3.1.ebuild | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sci-libs/tensorflow/tensorflow-2.3.1.ebuild 
b/sci-libs/tensorflow/tensorflow-2.3.1.ebuild
index b6eaf89429a..657eb270e10 100644
--- a/sci-libs/tensorflow/tensorflow-2.3.1.ebuild
+++ b/sci-libs/tensorflow/tensorflow-2.3.1.ebuild
@@ -106,6 +106,7 @@ RDEPEND="
>=dev-python/google-pasta-0.1.8[${PYTHON_USEDEP}]
dev-python/opt-einsum[${PYTHON_USEDEP}]
>=dev-python/protobuf-python-3.8.0[${PYTHON_USEDEP}]
+   dev-python/pybind11[${PYTHON_USEDEP}]
dev-python/six[${PYTHON_USEDEP}]
dev-python/termcolor[${PYTHON_USEDEP}]
>=dev-python/grpcio-1.28[${PYTHON_USEDEP}]



[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow-estimator/

2020-10-08 Thread Jason Zaman
commit: e3c8b1c6f989f78d1713ad00f2229598d71bd651
Author: Jason Zaman  gentoo  org>
AuthorDate: Thu Oct  8 01:36:08 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Fri Oct  9 03:39:54 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e3c8b1c6

sci-libs/tensorflow-estimator: bump 2.3.0

Package-Manager: Portage-3.0.4, Repoman-3.0.1
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow-estimator/Manifest |  1 +
 .../tensorflow-estimator-2.3.0.ebuild  | 75 ++
 2 files changed, 76 insertions(+)

diff --git a/sci-libs/tensorflow-estimator/Manifest 
b/sci-libs/tensorflow-estimator/Manifest
index c8747119185..70794737dc2 100644
--- a/sci-libs/tensorflow-estimator/Manifest
+++ b/sci-libs/tensorflow-estimator/Manifest
@@ -3,3 +3,4 @@ DIST 
bazelbuild-rules_cc-8bd6cd75d03c01bb82561a96d9c1f9f7157b13d0.zip 159656 BLA
 DIST bazelbuild-rules_java-7cf3cefd652008d0a64a419c34c13bdca6c8f178.zip 9422 
BLAKE2B 
bbc45c97551ee8126335b611ffca6574dac843d4db9b3221b10d26487f8eecfe38ba0cd67a4039a3ad921c25fea6294c43e4f4e7a57a060a30791acd6c4f9d39
 SHA512 
ba06242feb711e7fb6e821fd9ac029248b4f3e466fb1acf971d0db8196f3efe4d114ef137acbe4913073f8cbe8ccab4d47d8bafa21b867b2d6a6d57f5a647f0c
 DIST tensorflow-estimator-2.1.tar.gz 622792 BLAKE2B 
d1c8abb22d90c789ebfadaf78ca932f87428274afe6e1ac20670bf6d2b4c1c6ea8f367b1eb7ee64ff9f6e9b8ecdc2f64113924e7e2286e3f4e3d2c36cb101794
 SHA512 
4aaa21969299b02443e9396c238ef4c03af3bde1d0142a81c04d9706f18b02bfd125f3aaf8ffb47e0a3ffad949c3d3bca3909375f12a1c1e4c55ca1cc7930d51
 DIST tensorflow-estimator-2.2.0.tar.gz 627362 BLAKE2B 
125792fc2167b8af837a99b08a9a26943bc5c1fda8ab3690b01c0d49a6dd39142ff4a063867dfe1bee3b99fb018981d0e4ee45d194caac2cd96a829ad22db0ad
 SHA512 
aaf743835e2c606439fcccb56742997e930ba0e72c01d51633ce86824bbfaacd64607dc1fd7fb9604cc444feb65ebae60c2266be084e1b49ef2a1a9ca5a3d60d
+DIST tensorflow-estimator-2.3.0.tar.gz 642118 BLAKE2B 
29ecf5b64da20e8e6981375f1631b9b7e8ad061f71d0a3f1ac567bcd04b02102c5854d24e5106660f6bcd7b4ca683bd3bfbde51f236669d0f17e8f847feb7039
 SHA512 
0befc9c04650a0cd91ce90bc2e9a5d17ae3f7d8d8e4b8f763f223bbb891c73c7e2cbe91a2779af36342008e16f02d118120d94165c6a8e3c14a723b32ee29cb0

diff --git a/sci-libs/tensorflow-estimator/tensorflow-estimator-2.3.0.ebuild 
b/sci-libs/tensorflow-estimator/tensorflow-estimator-2.3.0.ebuild
new file mode 100644
index 000..5fa7d1782c3
--- /dev/null
+++ b/sci-libs/tensorflow-estimator/tensorflow-estimator-2.3.0.ebuild
@@ -0,0 +1,75 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+PYTHON_COMPAT=( python3_{6,7,8} )
+MY_PN="estimator"
+MY_PV=${PV/_rc/-rc}
+MY_P=${MY_PN}-${MY_PV}
+
+inherit bazel distutils-r1 flag-o-matic toolchain-funcs
+
+DESCRIPTION="A high-level TensorFlow API that greatly simplifies machine 
learning programming"
+HOMEPAGE="https://www.tensorflow.org/;
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+IUSE=""
+
+bazel_external_uris="
+   
https://github.com/bazelbuild/rules_cc/archive/0d5f3f2768c6ca2faca0079a997a97ce22997a0c.zip
 -> bazelbuild-rules_cc-0d5f3f2768c6ca2faca0079a997a97ce22997a0c.zip
+   
https://github.com/bazelbuild/rules_cc/archive/8bd6cd75d03c01bb82561a96d9c1f9f7157b13d0.zip
 -> bazelbuild-rules_cc-8bd6cd75d03c01bb82561a96d9c1f9f7157b13d0.zip
+   
https://github.com/bazelbuild/rules_java/archive/7cf3cefd652008d0a64a419c34c13bdca6c8f178.zip
 -> bazelbuild-rules_java-7cf3cefd652008d0a64a419c34c13bdca6c8f178.zip"
+
+SRC_URI="https://github.com/tensorflow/${MY_PN}/archive/v${MY_PV}.tar.gz -> 
${P}.tar.gz
+   ${bazel_external_uris}"
+
+RDEPEND="sci-libs/tensorflow[python,${PYTHON_USEDEP}]"
+DEPEND="${RDEPEND}"
+BDEPEND="
+   dev-java/java-config
+   >=dev-util/bazel-3"
+
+S="${WORKDIR}/${MY_P}"
+
+DOCS=( CONTRIBUTING.md README.md )
+
+src_unpack() {
+   unpack "${P}.tar.gz"
+   bazel_load_distfiles "${bazel_external_uris}"
+}
+
+src_prepare() {
+   bazel_setup_bazelrc
+   default
+   python_copy_sources
+}
+
+src_compile() {
+   export JAVA_HOME=$(java-config --jre-home)
+
+   do_compile() {
+   ebazel build 
//tensorflow_estimator/tools/pip_package:build_pip_package
+   ebazel shutdown
+
+   local srcdir="${T}/src-${EPYTHON/./_}"
+   mkdir -p "${srcdir}" || die
+   
bazel-bin/tensorflow_estimator/tools/pip_package/build_pip_package --src 
"${srcdir}" || die
+   }
+
+   python_foreach_impl run_in_build_dir do_compile
+}
+
+src_install() {
+   do_install() {
+   cd "${T}/src-${EPYTHON/./_}" || die
+   esetup.py install
+   python_optimize
+   }
+   python_foreach_impl do_install
+
+   cd "${S}" || die
+   einstalldocs
+}



[gentoo-commits] repo/gentoo:master commit in: sci-visualization/tensorboard/

2020-10-08 Thread Jason Zaman
commit: 0ea987dcbbc8c663e48f78c6ebb2454977cef1f6
Author: Jason Zaman  gentoo  org>
AuthorDate: Thu Oct  8 01:39:19 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Fri Oct  9 03:39:58 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0ea987dc

sci-visualization/tensorboard: bump 2.3.0

Package-Manager: Portage-3.0.4, Repoman-3.0.1
Signed-off-by: Jason Zaman  gentoo.org>

 sci-visualization/tensorboard/Manifest |  1 +
 .../tensorboard/tensorboard-2.3.0.ebuild   | 63 ++
 2 files changed, 64 insertions(+)

diff --git a/sci-visualization/tensorboard/Manifest 
b/sci-visualization/tensorboard/Manifest
index 78d8909c946..248a8652d06 100644
--- a/sci-visualization/tensorboard/Manifest
+++ b/sci-visualization/tensorboard/Manifest
@@ -1,2 +1,3 @@
 DIST tensorboard-2.1.0.zip 3835182 BLAKE2B 
c2c7dbc1ba4b85c52df6e693e1bd425bd76fe6db7ca25582b57d9c65c68b191dcdba2623ab0560139f1cac1bdf5c7a47261daaaf51fca46f2c5bf441f832a6fd
 SHA512 
7463ace0863b90312a62a7fa96f4eca0147e85cf46ff21729f8996a794d54e14d876d3abe083d6aa4efd8e4e1582f7d5029de367f199981a34d4057b558bc51c
 DIST tensorboard-2.2.1.zip 2950617 BLAKE2B 
487ad01981f994b23cb5fca8b60d9ed5f13ba13735d2613d1f3154eec9791b4b3068fb9fd50e75e16682e09ceb8a9ed8533ca2c43b6dea73db3adaeef15a889b
 SHA512 
e96f8853d282dc19911cf2210ece0a4d7239f37dcba82e91697c80881fbcc21f12e4ba3e7d2eea7a84c9bb5b6521bf488d93d2312e55af9ec2d2c20f135d94fa
+DIST tensorboard-2.3.0.zip 6789437 BLAKE2B 
34fe0ac903f6b79fc1ddebd2fab3d64e48a4ef9bb6159494e6b3ec5444ab6ad339f5ca7e4e478ec03dc7a788bbce6a4bd3ce253640136079a7a470f01f7b3a48
 SHA512 
d4cfdc8dbf030c022ecd635249f643d158c92274b142cd3de93cd8877c47cf59b9aca9aab12a971b986b84c7396bed3d7a012837b08d9dee6b0e53dc56e9fcbe

diff --git a/sci-visualization/tensorboard/tensorboard-2.3.0.ebuild 
b/sci-visualization/tensorboard/tensorboard-2.3.0.ebuild
new file mode 100644
index 000..9d1a9356334
--- /dev/null
+++ b/sci-visualization/tensorboard/tensorboard-2.3.0.ebuild
@@ -0,0 +1,63 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+
+PYTHON_COMPAT=( python3_{6,7,8} )
+inherit python-r1
+
+DESCRIPTION="TensorFlow's Visualization Toolkit"
+HOMEPAGE="https://www.tensorflow.org/;
+SRC_URI="https://files.pythonhosted.org/packages/py3/${PN::1}/${PN}/${P}-py3-none-any.whl
 -> ${P}.zip"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64"
+IUSE=""
+REQUIRED_USE=${PYTHON_REQUIRED_USE}
+
+RDEPEND="
+   ${PYTHON_DEPS}
+   dev-python/bleach[${PYTHON_USEDEP}]
+   >=dev-python/google-auth-1.6.3[${PYTHON_USEDEP}]
+   >=dev-python/google-auth-oauthlib-0.4.1[${PYTHON_USEDEP}]
+   dev-python/grpcio[${PYTHON_USEDEP}]
+   dev-python/html5lib[${PYTHON_USEDEP}]
+   dev-python/markdown[${PYTHON_USEDEP}]
+   dev-python/numpy[${PYTHON_USEDEP}]
+   dev-python/protobuf-python[${PYTHON_USEDEP}]
+   dev-python/six[${PYTHON_USEDEP}]
+   >=dev-python/setuptools-41[${PYTHON_USEDEP}]
+   dev-python/werkzeug[${PYTHON_USEDEP}]
+   dev-python/wheel[${PYTHON_USEDEP}]
+   >=dev-python/scipy-1.4.1[${PYTHON_USEDEP}]"
+BDEPEND="app-arch/unzip
+   ${PYTHON_DEPS}"
+PDEPEND="sci-libs/tensorflow[python,${PYTHON_USEDEP}]"
+
+S="${WORKDIR}"
+
+src_prepare() {
+   eapply_user
+
+   rm -rf "${S}/${PN}/_vendor/bleach" || die
+   rm -rf "${S}/${PN}/_vendor/html5lib" || die
+   sed -i -e '/_vendor.bleach/d' -e '/_vendor.html5lib/d' 
"${S}/${P}.dist-info/RECORD" || die "failed to unvendor"
+
+   find "${S}/${PN}" -name '*.py' -exec sed -i \
+   -e 's/^from tensorboard\._vendor import html5lib/import 
html5lib/' \
+   -e 's/^from tensorboard\._vendor import bleach/import bleach/' \
+   -e 's/^from tensorboard\._vendor\.html5lib/from html5lib/' \
+   -e 's/^from tensorboard\._vendor\.bleach/from bleach/' \
+   {} + || die "failed to unvendor"
+
+   sed -i -e '/tensorboard-plugin-/d' "${S}/${P}.dist-info/METADATA" || 
die "failed to remove plugin deps"
+}
+
+src_install() {
+   do_install() {
+   python_domodule "${PN}"
+   python_domodule "${P}.dist-info"
+   }
+   python_foreach_impl do_install
+}



[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow/

2020-10-08 Thread Jason Zaman
commit: 96446c9edbc678f575d503d66e3703d681da17af
Author: Jason Zaman  gentoo  org>
AuthorDate: Thu Oct  8 01:55:13 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Fri Oct  9 03:40:01 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=96446c9e

sci-libs/tensorflow: bump 2.3.1

Closes: https://bugs.gentoo.org/739938
Package-Manager: Portage-3.0.4, Repoman-3.0.1
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow/Manifest|  16 ++
 sci-libs/tensorflow/tensorflow-2.3.1.ebuild | 404 
 2 files changed, 420 insertions(+)

diff --git a/sci-libs/tensorflow/Manifest b/sci-libs/tensorflow/Manifest
index 1640aa58f4d..6b74fa6088a 100644
--- a/sci-libs/tensorflow/Manifest
+++ b/sci-libs/tensorflow/Manifest
@@ -1,36 +1,52 @@
 DIST ARM_NEON_2_x86_SSE-1200fe90bb174a6224a525ee60148671a786a71f.tar.gz 100612 
BLAKE2B 
84f81072d3298dde613b4c1ebabf852c67e04b5882a4ca0ed6f218b42e8fa3ea9598140b0c0009e8d6b62d08902622a6d57ee005ec3ad8a808c9fb21aa53430c
 SHA512 
03a289d8099a5c4a5298cba8f516d2edb41220935d8db750970113ca7513372c78241c2c948d0ffcd60e84686e50ba1d7fd0b46efea6881dd320435eca92a7b9
+DIST OouraFFT-v1.0.tar.gz 110531 BLAKE2B 
de0e280407e21118e2bc6ca93a7caf3c4a49d0a13eda018b1497f98851af73dda4cef56460dba310336c7ed958e34feef4784ca2575a13287dec2c1ac9a5af6d
 SHA512 
89c6e8fd57abf26351b3efb792008a1bbe62d404a4225dcae8aa666b3782a421be071bdc9760ebb0c95b5336ee5ea517d2fa43ab915045f7cf6fd76e73578079
 DIST abseil-cpp-43ef2148c0936ebf7cb4be6b19927a9d9d145b8f.tar.gz 1281523 
BLAKE2B 
955802c74ed9baf222dcd824d2940147ae89edbc88f12bb8f54839776fe18bb18c0fde23b0d3142bb3be65a57930c96d03fdd243e8da07435eeb04329c31483d
 SHA512 
c2ae1bd789251ec70cd0baafd92521e48fb1648aee8d9d84a8269436300848b6a9d7aead6bef8a12d3a9040f19535ac725ae961f12566500d309bc13dfee26a4
+DIST abseil-cpp-df3ea785d8c30a9503321a3d35ee7d35808f190d.tar.gz 1679879 
BLAKE2B 
ce92197c564ff774db46027c32f97cfd55ff1d77b7cec5424e127d10a3b0a54d9e84537bd643c4eb330ca81959bcc0316b13c013b229df06b7f415864c451e46
 SHA512 
b429758c37749d3d5c5c220fe0dc00fa0e193b406545484095339b25674c4a3bb7850b76dd1a370ed2006729bc1b438995b614e149c2290bdb10038c49d1
 DIST backports.weakref-1.0rc1.tar.gz 7761 BLAKE2B 
4cb2554a4b71bb1f8c41a790268511e4b382effc7e0328f74346d086de539a177111de9e2dabac19a44b2a1cdbf59a7425e30eee4caa4bfe66b0ca97f1f460a9
 SHA512 
f37e9eb0d9060d2e1588a941f623460bd4477d7e180b38b5cd46d9c1db1ee094ae63e4f5eeeb422823bf3d067f46c4124cb124a9e4ddb795bc0bfbc4802ab826
 DIST bazel-skylib.0.8.0.tar.gz 72941 BLAKE2B 
1928989d3e5dc338fee974c5592a524adb492db172b1d2a849ed5f14f91dbb76606335d369e4b15c4eec41adfe3a23cdc5b4f3b2f1351a5e9c25103c002b96a2
 SHA512 
4729941cedca8ddb876a621b28221d3c17dbb5dd72af27e55f48274208f21db986c5e7cb8adb742c42124bfa8073eb782b49e2557cb3f3f95ca56833fef925c0
 DIST bazel-toolchains-92dd8a7a518a2fb7ba992d47c8b38299fe0be825.tar.gz 660374 
BLAKE2B 
549292aa3ad8a6e01c29391a123f3cbc84d1f714ff9c68bfc6c8df07fa0ba3b19c22e61627f227a8a484f6d7d6c59935fd7560c447559ff5e774ddf1437eefe1
 SHA512 
83531a2646a9f63557eff6fefaf551ee7e9f0ccdb31374d7a17c35b9f9d844b9b405597972fcd31b2b68e9da312511bbfd9c8fbb75222f5924e1d2500cd1c2a6
 DIST bazel_skylib-0.9.0.tar.gz 84644 BLAKE2B 
40b69a524e632ea00d34b9cf805b882ac4c549dd465ef37f28e54729ff1b614a7610a4895cede4e0c938edba5b19f781f3c0bfdb62bde628ee0af21d6b679546
 SHA512 
af4bcb641fed05d15f2d0ffe0e3abdfe9c7a5deb9c53064992d6605d224ded1648b1bdfa293e161028913f9f2c178c68cc38bc16028892ca5b0f52b4e645209d
+DIST bazelbuild-apple_support-501b4afb27745c4813a88ffa28acd901408014e4.tar.gz 
19956 BLAKE2B 
73f04a13f8ac3552e6f0770d1ac4edcc1b5ef46e4a3c4f3b83f11eeffa632f764d37aa7a98b35b5be6bd0caef19f84d0dc1b88bc55ff5397012863af4ee6d902
 SHA512 
732f482338996a62db24bfa6acd2fde6b629ac0a49317ed4e4778a55b5f42a6cfa18cdcc51c200e29abe82a1f2a5548df09b7244074ae52e1f62ef66
 DIST bazelbuild-apple_support.0.7.1.tar.gz 20070 BLAKE2B 
e72098fc5017e3371b6af0f33f392a42da18376052f30db5dd602c5ccc0176c1ac8002cca3f598845c5cb33406b4fd8d30c5ea47c69add6c530b75dc6566a4b0
 SHA512 
bbab25c229404123d7d424fa261480cf887c749ae729cc1a00bd6c2554d4b4b3fa81e0eaa670542b3a5d3301f3bd5dcd7727d011ba854f13dbbf4f65895e4b08
+DIST bazelbuild-rules_android-v0.1.1.zip 14654 BLAKE2B 
1cfd5af08c6eab9602883f62d85ef1b9eb02383f73dcc31ae84af880c9ba228ae349ac6b017c550286e248347193e2c56eba30c86174432429809447dd940ed2
 SHA512 
80628a5e2ca9806ab031cd0c2f2999bd67f5621a83e8300a51fe6233373bdaf7c90ff8fa9551c81e60fc904c4d7b24554327ac8ed2ee101e92c4ab9319c53f4a
+DIST bazelbuild-rules_apple-5131f3d46794bf227d296c82f30c2499c9de3c5b.tar.gz 
1951045 BLAKE2B 
d8c17f301de729bbf5254acacf89490ab1034b1180d5ea788251ae6ba3e2b704c82d7f66d33a086f52ce3909cd33df7739d7d536c6be070a2d3454e2f280517f
 SHA512 
a23826d8e53d49de6347eca052e980878d50b431bf02c9b8333234c0659d5e290447121bf9519729639891e67d732474a3c3b7a7502752b32f830680bb334bad
 DIST bazelbuild-rules_apple.0.18.0.tar.gz 133344

[gentoo-commits] repo/gentoo:master commit in: sys-apps/selinux-python/

2020-09-14 Thread Jason Zaman
commit: c097422188db321f9add8e9e724a74bc3a63ed15
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 20:38:06 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:23 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c0974221

sys-apps/selinux-python: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-apps/selinux-python/Manifest   | 1 +
 .../{selinux-python-.ebuild => selinux-python-3.1.ebuild}  | 7 +++
 sys-apps/selinux-python/selinux-python-.ebuild | 7 +++
 3 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/sys-apps/selinux-python/Manifest b/sys-apps/selinux-python/Manifest
index b7c1dcd32c6..95ab19c4176 100644
--- a/sys-apps/selinux-python/Manifest
+++ b/sys-apps/selinux-python/Manifest
@@ -1,2 +1,3 @@
 DIST selinux-python-2.9.tar.gz 2100185 BLAKE2B 
8aad58264197dbf23dfa286ba6530150ca6ae1ddaeb1a58988c05d0b122420cfd7e9be2a1cb7082d73cd41f03c4df00ad81a0fb746b075db24e63f62f86a1bf1
 SHA512 
1138661128635004fec04dc5e39f035680b5f21beb1b79f3328690a1b93a3984d522a02724af793340112a5e647d363dda8a7d3536de959b34ffd69aa396254d
 DIST selinux-python-3.0.tar.gz 2100098 BLAKE2B 
6949911020139378e9bdcc2b7c01c067ddaf71394a0a143a096d5708c5e7caa468b12826965c02af0b994f35d26c573187bf67c8d1ce75f5e8a31a1fb0fc6562
 SHA512 
743df60a643477465e4355880c56813ea8539415ea7c9631fb9b7cd7969a37cce572a6a94b785065d92baf9d7b6c753daa5d2f9709df7c9203c7effba46d58f2
+DIST selinux-python-3.1.tar.gz 2100549 BLAKE2B 
c5d207bad60c379259e3bfc8f029f76d4572818cdd41a263498ed4434a70eaf7ff51af7772cfb27de0e9e4af03bcf9906ab0f6a59e88de10e81cbe0e8c5928b8
 SHA512 
5dd98f77ae8ea8bac6a89ec7def76e12496b9a9f8c9612c4cc1dac7a8e8c60380a00c857426bfefbcb4273706addd2594e9b467f69408ef284f082a09d45bd49

diff --git a/sys-apps/selinux-python/selinux-python-.ebuild 
b/sys-apps/selinux-python/selinux-python-3.1.ebuild
similarity index 96%
copy from sys-apps/selinux-python/selinux-python-.ebuild
copy to sys-apps/selinux-python/selinux-python-3.1.ebuild
index 011db20a008..d890afd5e44 100644
--- a/sys-apps/selinux-python/selinux-python-.ebuild
+++ b/sys-apps/selinux-python/selinux-python-3.1.ebuild
@@ -1,15 +1,15 @@
 # Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
-PYTHON_COMPAT=( python{3_6,3_7} )
+EAPI="7"
+PYTHON_COMPAT=( python{3_6,3_7,3_8} )
 PYTHON_REQ_USE="xml"
 
 inherit python-r1 toolchain-funcs
 
 MY_P="${P//_/-}"
 
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 SEPOL_VER="${PV}"
 SELNX_VER="${PV}"
 SEMNG_VER="${PV}"
@@ -38,7 +38,6 @@ DEPEND=">=sys-libs/libselinux-${SELNX_VER}:=[python]
>=sys-libs/libsepol-${SEPOL_VER}:=
>=app-admin/setools-4.2.0[${PYTHON_USEDEP}]
dev-python/ipy[${PYTHON_USEDEP}]
-   !dev-python/sepolgen
${PYTHON_DEPS}"
 
 RDEPEND="${DEPEND}"

diff --git a/sys-apps/selinux-python/selinux-python-.ebuild 
b/sys-apps/selinux-python/selinux-python-.ebuild
index 011db20a008..d890afd5e44 100644
--- a/sys-apps/selinux-python/selinux-python-.ebuild
+++ b/sys-apps/selinux-python/selinux-python-.ebuild
@@ -1,15 +1,15 @@
 # Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
-PYTHON_COMPAT=( python{3_6,3_7} )
+EAPI="7"
+PYTHON_COMPAT=( python{3_6,3_7,3_8} )
 PYTHON_REQ_USE="xml"
 
 inherit python-r1 toolchain-funcs
 
 MY_P="${P//_/-}"
 
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 SEPOL_VER="${PV}"
 SELNX_VER="${PV}"
 SEMNG_VER="${PV}"
@@ -38,7 +38,6 @@ DEPEND=">=sys-libs/libselinux-${SELNX_VER}:=[python]
>=sys-libs/libsepol-${SEPOL_VER}:=
>=app-admin/setools-4.2.0[${PYTHON_USEDEP}]
dev-python/ipy[${PYTHON_USEDEP}]
-   !dev-python/sepolgen
${PYTHON_DEPS}"
 
 RDEPEND="${DEPEND}"



[gentoo-commits] repo/gentoo:master commit in: sys-apps/semodule-utils/

2020-09-14 Thread Jason Zaman
commit: c395a2723620f5f2f97830fb3b1bb984c2b79168
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 20:42:21 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:25 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c395a272

sys-apps/semodule-utils: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-apps/semodule-utils/Manifest |  1 +
 ...{semodule-utils-.ebuild => semodule-utils-3.1.ebuild} | 12 +---
 sys-apps/semodule-utils/semodule-utils-.ebuild   | 12 +---
 3 files changed, 11 insertions(+), 14 deletions(-)

diff --git a/sys-apps/semodule-utils/Manifest b/sys-apps/semodule-utils/Manifest
index 4bb706757fe..09aa9e42f0e 100644
--- a/sys-apps/semodule-utils/Manifest
+++ b/sys-apps/semodule-utils/Manifest
@@ -1,2 +1,3 @@
 DIST semodule-utils-2.9.tar.gz 14259 BLAKE2B 
f72630c520504596171ac6f678b1fde2bb8482b620f0d8f6374c59b85d634ee8c407e3e4b268dae4d6cecfa2749b26f8808dd56f7c5391e7d1ba11f4a8a789e5
 SHA512 
688f1fcb34042b837019302debda76847691657709130b99bf937a85774a0ae69d789ee82b0633a4d2dc661dc6d0a1706a878ac681317df2abe68418bec3f952
 DIST semodule-utils-3.0.tar.gz 14263 BLAKE2B 
119f40b34184e2cb0719e6a34ffb026f23c172f74d8ca3812220785381fabc5c3761865ec3b211f03f5c96b9ae0081341a661c2be78198171b09c99b37bb0716
 SHA512 
004e8f02f7e7e6f016b2b5a1a7720a87409d77d0040f7df830cf73808c9f8e3d87b41a7cea273420909971ce8bcc6540d5a46bd25be8c032b12257b4861e1769
+DIST semodule-utils-3.1.tar.gz 14257 BLAKE2B 
c8c9a1ce7c9c4f53b1f4c728d16b149fdc284f4cff8b4fce0cb59b77d37d6d7e9bf2102c7177c4eaf94677af6147e42d8d0bd55c0bf3a358968d0162d5a6c65a
 SHA512 
b92794bbfbce5834ee7f62fddb40b5506e9291e8fa7c5d669b2e281089b8f8dc40c4522ea287ac5deffdaee751442ba8e691e2ac45fdd378b60d5d6b2527d157

diff --git a/sys-apps/semodule-utils/semodule-utils-.ebuild 
b/sys-apps/semodule-utils/semodule-utils-3.1.ebuild
similarity index 83%
copy from sys-apps/semodule-utils/semodule-utils-.ebuild
copy to sys-apps/semodule-utils/semodule-utils-3.1.ebuild
index dfe7c8bdc46..db1d166cceb 100644
--- a/sys-apps/semodule-utils/semodule-utils-.ebuild
+++ b/sys-apps/semodule-utils/semodule-utils-3.1.ebuild
@@ -1,11 +1,11 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 
 inherit toolchain-funcs
 
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 SEPOL_VER="${PV}"
 SELNX_VER="${PV}"
 
@@ -30,8 +30,7 @@ SLOT="0"
 
 DEPEND=">=sys-libs/libsepol-${SEPOL_VER}:="
 
-RDEPEND="${DEPEND}
-   !

[gentoo-commits] repo/gentoo:master commit in: sys-apps/policycoreutils/, sys-apps/policycoreutils/files/

2020-09-14 Thread Jason Zaman
commit: cb4e07769b3f0b7ec6ad3f3a9b6b6b3e45705d0a
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 20:21:30 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:21 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cb4e0776

sys-apps/policycoreutils: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-apps/policycoreutils/Manifest |  2 ++
 .../files/policycoreutils-3.1-0001-newrole-not-suid.patch | 11 +++
 ...policycoreutils-.ebuild => policycoreutils-3.1.ebuild} |  8 
 sys-apps/policycoreutils/policycoreutils-.ebuild  |  8 
 4 files changed, 21 insertions(+), 8 deletions(-)

diff --git a/sys-apps/policycoreutils/Manifest 
b/sys-apps/policycoreutils/Manifest
index 86052aaf9b0..f5fdac8fb42 100644
--- a/sys-apps/policycoreutils/Manifest
+++ b/sys-apps/policycoreutils/Manifest
@@ -1,3 +1,5 @@
 DIST policycoreutils-2.9.tar.gz 2819360 BLAKE2B 
b0af912e3b4fb2c9598b10ce413c8ffb3f5972a4d5d59270cff40abe8d4e385e0664e24a4f533a95ad2d1657644f3368213f955ac63d9f8c46a661417b07c8b3
 SHA512 
d8356115671ba66de05f1c13193ab47fab69cc4d09603a92171ed40afafc084dd191591bf336b7d722de637378ad09622ebb6eca85c06063ca9ddd6db10e02a2
 DIST policycoreutils-3.0.tar.gz 2818089 BLAKE2B 
6e4aa6d6eecf809efaefccbfa16c44050242d129f496594763aacbb9aaeca23d92b27d30a6f9ae0e49513adc0a1bd58499253eb9ffc003547387c04aa643b462
 SHA512 
d8d25db48c1caef69228e87d7ebb2c0f075e44e4ff6bf18a26af341d948b81375b33945128cd0410ffebc64ca478fd19a207295189c716c95e6a3c586e9f053d
+DIST policycoreutils-3.1.tar.gz 2817914 BLAKE2B 
ef68bb5f9cf577164ead44803b6be2bd6401c9e923d2c775c7c8c47f0e803749feaec4247fec5cc1cb766314954402fd2506370bb397f746437ecfcf65b384f3
 SHA512 
0592f218563a99ba95d2cfd07fdc3761b61c1cc3c01a17ab89ad840169e1a7d4083521d5cacc72d1b76911d516bf592db7a3f90d9ef0cc11ceed007e4580e140
 DIST policycoreutils-extra-1.36.tar.bz2 8830 BLAKE2B 
6d98e41ea379d3e95221a6e53d8a8b144e4e15ca5581381e76a529dbbaca304d5587b30419797c8c70cbd7c2b2588e5ecd62adcf97294e429950899c1c318346
 SHA512 
c6a18e6fb2d65f51dc55b88907f23241f2fbfc033d3d2888b109596d9ed31d509b2c93456727ea4d1f98544831afb15c449ff72d6aedf93b9e474b27817f7fb3
+DIST policycoreutils-extra-1.37.tar.bz2 8809 BLAKE2B 
a7f6122c2e27f54b018174e962bd7f4c14af04e09bbb5300bde6967ea7f2dc5cd03b5787919a4e7f5288bcbc6747922962b5bd3b588ab1e3a035fbff4910d8f5
 SHA512 
0a85cd7cf279256b5e1927f9dfdd89626a1c8b77b0aeb62b496e7e8d1dccbaa315e39f9308fb2df7270f0bc1c10787b19990e7365cad74b47b61e30394c8b23f

diff --git 
a/sys-apps/policycoreutils/files/policycoreutils-3.1-0001-newrole-not-suid.patch
 
b/sys-apps/policycoreutils/files/policycoreutils-3.1-0001-newrole-not-suid.patch
new file mode 100644
index 000..360a4904978
--- /dev/null
+++ 
b/sys-apps/policycoreutils/files/policycoreutils-3.1-0001-newrole-not-suid.patch
@@ -0,0 +1,11 @@
+--- a/newrole/Makefile
 b/newrole/Makefile
+@@ -50,7 +50,7 @@ ifeq ($(NAMESPACE_PRIV),y)
+   IS_SUID=y
+ endif
+ ifeq ($(IS_SUID),y)
+-  MODE := 4555
++  MODE := 0555
+   override LDLIBS += -lcap-ng
+ else
+   MODE := 0555

diff --git a/sys-apps/policycoreutils/policycoreutils-.ebuild 
b/sys-apps/policycoreutils/policycoreutils-3.1.ebuild
similarity index 97%
copy from sys-apps/policycoreutils/policycoreutils-.ebuild
copy to sys-apps/policycoreutils/policycoreutils-3.1.ebuild
index d083c523220..569dc07cfcf 100644
--- a/sys-apps/policycoreutils/policycoreutils-.ebuild
+++ b/sys-apps/policycoreutils/policycoreutils-3.1.ebuild
@@ -1,7 +1,7 @@
 # Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 PYTHON_COMPAT=( python{3_6,3_7} )
 PYTHON_REQ_USE="xml"
 
@@ -9,8 +9,8 @@ inherit multilib python-r1 toolchain-funcs bash-completion-r1
 
 MY_P="${P//_/-}"
 
-MY_RELEASEDATE="20191204"
-EXTRAS_VER="1.36"
+MY_RELEASEDATE="20200710"
+EXTRAS_VER="1.37"
 SEMNG_VER="${PV}"
 SELNX_VER="${PV}"
 SEPOL_VER="${PV}"
@@ -79,7 +79,7 @@ src_prepare() {
cd "${S}" || die "Failed to switch to ${S}"
if [[ ${PV} !=  ]] ; then
# If needed for live ebuilds please use /etc/portage/patches
-   eapply 
"${FILESDIR}/policycoreutils-2.7-0001-newrole-not-suid.patch"
+   eapply 
"${FILESDIR}/policycoreutils-3.1-0001-newrole-not-suid.patch"
fi
 
# rlpkg is more useful than fixfiles

diff --git a/sys-apps/policycoreutils/policycoreutils-.ebuild 
b/sys-apps/policycoreutils/policycoreutils-.ebuild
index d083c523220..569dc07cfcf 100644
--- a/sys-apps/policycoreutils/policycoreutils-.ebuild
+++ b/sys-apps/policycoreutils/policycoreutils-.ebuild
@@ -1,7 +1,7 @@
 # Copyright 1999-2020 Gentoo Auth

[gentoo-commits] repo/gentoo:master commit in: sys-apps/checkpolicy/

2020-09-14 Thread Jason Zaman
commit: e20b1b55b07cfdb0d74a1960ca4a342e51e3b332
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 20:10:58 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:19 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e20b1b55

sys-apps/checkpolicy: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-apps/checkpolicy/Manifest  |  1 +
 .../{checkpolicy-.ebuild => checkpolicy-3.1.ebuild}| 10 ++
 sys-apps/checkpolicy/checkpolicy-.ebuild   | 10 ++
 3 files changed, 13 insertions(+), 8 deletions(-)

diff --git a/sys-apps/checkpolicy/Manifest b/sys-apps/checkpolicy/Manifest
index c800d814560..2a07ee9daf5 100644
--- a/sys-apps/checkpolicy/Manifest
+++ b/sys-apps/checkpolicy/Manifest
@@ -1,2 +1,3 @@
 DIST checkpolicy-2.9.tar.gz 68735 BLAKE2B 
092b7b67ea952be6a829529249f0b209c31245490f263b248cb0208d9f1f4ec922522791c6555c0b913b56b8a0037bfde54a3511940f0be287f13e3a193c8f26
 SHA512 
8dafdd871c5fd32023883149c74891279c386cc87d70cbfc6f0a8dcb0406f17f1158f9078c1b35892a0f0edcb6b5208a031594ab80898eec016ad765ad046e03
 DIST checkpolicy-3.0.tar.gz 69037 BLAKE2B 
30b8a5e19e02472d1cf256636c70f95739098514ef9d630ee5e782085bd09ff58b4ab6b8c97e9fa652e8260211a7803d80eb765e0fd2f1dde9c328682078d3c1
 SHA512 
196d24638ec7fc88d427637e2308c7a0c5a3d4cc88c372a5f5dc61d6c1e2f895e308b8e06ee9e47d340d65a1b2d4486dc4decfa6074594dda14e46f1308ded89
+DIST checkpolicy-3.1.tar.gz 69072 BLAKE2B 
31cb5ef52533b0a62f954e770278fc5766a961d87fb86260b04abe562bcd90d0025b33931c6ad54096c64ab54150c7562c112eac80eb2f60dbcdda57f4cacfe2
 SHA512 
2276a5a0919286049d2ceba386ef5f6de523745b588bb81cb4fed5eced5fd0b8070249b7a3ae5a85e2abb9369a86318f727d4073aad14ab75c43750a46069168

diff --git a/sys-apps/checkpolicy/checkpolicy-.ebuild 
b/sys-apps/checkpolicy/checkpolicy-3.1.ebuild
similarity index 83%
copy from sys-apps/checkpolicy/checkpolicy-.ebuild
copy to sys-apps/checkpolicy/checkpolicy-3.1.ebuild
index 5be101d66c6..fe88e2f1c07 100644
--- a/sys-apps/checkpolicy/checkpolicy-.ebuild
+++ b/sys-apps/checkpolicy/checkpolicy-3.1.ebuild
@@ -1,12 +1,12 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 
 inherit toolchain-funcs
 
 MY_P="${P//_/-}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 SEPOL_VER="${PV}"
 SEMNG_VER="${PV}"
@@ -53,5 +53,7 @@ src_install() {
 }
 
 pkg_postinst() {
-   einfo "This checkpolicy can compile version `checkpolicy -V | cut -f 1 
-d ' '` policy."
+   if ! tc-is-cross-compiler; then
+   einfo "This checkpolicy can compile version `checkpolicy -V | 
cut -f 1 -d ' '` policy."
+   fi
 }

diff --git a/sys-apps/checkpolicy/checkpolicy-.ebuild 
b/sys-apps/checkpolicy/checkpolicy-.ebuild
index 5be101d66c6..fe88e2f1c07 100644
--- a/sys-apps/checkpolicy/checkpolicy-.ebuild
+++ b/sys-apps/checkpolicy/checkpolicy-.ebuild
@@ -1,12 +1,12 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 
 inherit toolchain-funcs
 
 MY_P="${P//_/-}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 SEPOL_VER="${PV}"
 SEMNG_VER="${PV}"
@@ -53,5 +53,7 @@ src_install() {
 }
 
 pkg_postinst() {
-   einfo "This checkpolicy can compile version `checkpolicy -V | cut -f 1 
-d ' '` policy."
+   if ! tc-is-cross-compiler; then
+   einfo "This checkpolicy can compile version `checkpolicy -V | 
cut -f 1 -d ' '` policy."
+   fi
 }



[gentoo-commits] repo/gentoo:master commit in: sys-libs/libsepol/

2020-09-14 Thread Jason Zaman
commit: 87de30f50d44b9be299117be09fe22fd195e6fef
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 19:42:29 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:11 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=87de30f5

sys-libs/libsepol: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-libs/libsepol/Manifest  | 1 +
 sys-libs/libsepol/{libsepol-.ebuild => libsepol-3.1.ebuild} | 6 +++---
 sys-libs/libsepol/libsepol-.ebuild  | 6 +++---
 3 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/sys-libs/libsepol/Manifest b/sys-libs/libsepol/Manifest
index 17ca9f8a935..07eedac7d74 100644
--- a/sys-libs/libsepol/Manifest
+++ b/sys-libs/libsepol/Manifest
@@ -1,2 +1,3 @@
 DIST libsepol-2.9.tar.gz 474861 BLAKE2B 
2d0941a003bbe6f15f047e3e55ce4561c36fb4946ce46b618df1b884881579cd192a0ac7cbedfb67ae5e926ab03ca35988d2a4fc279f31a88c83874e85862d13
 SHA512 
415af623c2b2898d98828c9bf0b12cf05d05790d2b412cad291f0759a8c3feacf1bd88c2ba6f2f1bca8f9f71e1627e9d5b1b69d60e7ef96fdd52df8a3d57d3e9
 DIST libsepol-3.0.tar.gz 473864 BLAKE2B 
ff4da6e12c1635de88a2aaba26bd3630576a3806543d7176d8fbdb4deda5c9c5fbf8a5a4f68c8041cca0af97429e720d908cd31052d13ac72780bc85db1f56c8
 SHA512 
82a5bae0afd9ae53b55ddcfc9f6dd61724a55e45aef1d9cd0122d1814adf2abe63c816a7ac63b64b401f5c67acb910dd8e0574eec546bed04da7842ab6c3bb55
+DIST libsepol-3.1.tar.gz 473842 BLAKE2B 
ef1d596c4d53cc0a87e899ef4aeb5bf29c9d6b8303632ddc866c100d30debd8aedd0e8b38cb4ce3141b80421cd914148ff072e492d63dc2dacf03ac2ce59ca5a
 SHA512 
4b5f4e82853ff3e9b4fac2dbdea5c2fc3bb7b508af912217ac4b75da6540fbcd77aa314ab95cd9dfa94fbc4a885000656a663c1a152f65b4cf6970ea0b6034ab

diff --git a/sys-libs/libsepol/libsepol-.ebuild 
b/sys-libs/libsepol/libsepol-3.1.ebuild
similarity index 93%
copy from sys-libs/libsepol/libsepol-.ebuild
copy to sys-libs/libsepol/libsepol-3.1.ebuild
index bffc7757949..5b122e23e55 100644
--- a/sys-libs/libsepol/libsepol-.ebuild
+++ b/sys-libs/libsepol/libsepol-3.1.ebuild
@@ -1,12 +1,12 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 
 inherit multilib toolchain-funcs multilib-minimal
 
 MY_P="${P//_/-}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 DESCRIPTION="SELinux binary policy representation library"
 HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki;

diff --git a/sys-libs/libsepol/libsepol-.ebuild 
b/sys-libs/libsepol/libsepol-.ebuild
index bffc7757949..5b122e23e55 100644
--- a/sys-libs/libsepol/libsepol-.ebuild
+++ b/sys-libs/libsepol/libsepol-.ebuild
@@ -1,12 +1,12 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 
 inherit multilib toolchain-funcs multilib-minimal
 
 MY_P="${P//_/-}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 DESCRIPTION="SELinux binary policy representation library"
 HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki;



[gentoo-commits] repo/gentoo:master commit in: sys-apps/restorecond/, sys-apps/restorecond/files/

2020-09-14 Thread Jason Zaman
commit: 3d0d4e7d6834fbb5a7e5a5a0ab819df74c5c61fd
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 20:28:38 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:31 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3d0d4e7d

sys-apps/restorecond: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-apps/restorecond/Manifest |  1 +
 sys-apps/restorecond/files/restorecond.init   |  0
 .../{restorecond-.ebuild => restorecond-3.1.ebuild}   | 15 ---
 sys-apps/restorecond/restorecond-.ebuild  | 15 ---
 4 files changed, 17 insertions(+), 14 deletions(-)

diff --git a/sys-apps/restorecond/Manifest b/sys-apps/restorecond/Manifest
index 887422d4fd5..84f10cfb46b 100644
--- a/sys-apps/restorecond/Manifest
+++ b/sys-apps/restorecond/Manifest
@@ -1,2 +1,3 @@
 DIST restorecond-2.9.tar.gz 18893 BLAKE2B 
fcdae1a4ec489f3f581212cdd3c13c5561feac3ee758f354dca75c97938c62b9ed04aedbd4b3b5cde09a5887247389262718145620d0b9749e364d1614f57241
 SHA512 
6de9dd4c6b8e5d8275221aba5df27437998f635cfe83a5da75de479e260ceea884a36253eb873a8d71e1a77ed67544d8657fb75fe409af1f630052ce73ec5d8a
 DIST restorecond-3.0.tar.gz 18797 BLAKE2B 
354477ea9f57cc27c14a2648b99b32c45ac6d4e32caeb0fb108ed8f40a2e2e04101e2658d0107a1f2741717c242ad80b2e14db03488ab62b88eeb8b1a9ac0dd4
 SHA512 
f75088f72a17f1f7550ef67052202cea1fd9cf1bb1eec0355f4a0641ba25097b289f629df328ee79aec00f8361cbc6df10efc4a5af2f0b67f9922ceaf92aa956
+DIST restorecond-3.1.tar.gz 18939 BLAKE2B 
3a3fcde057dad3ed05692d679ba27e0b24f191d92ed5114fa38cb5f846c4cc00d85bb09b5d4e560ed2b91e0c2d1c407f6c03900610624d5626d05f2991bc
 SHA512 
cdcf299f48b89a7c641ded9507b9b966bf648497394f8e988a9cb1ceb3224c86369706027f3416a4f9750836f7a8f4580a4b3df76673e03f897b383d7ed0e2c8

diff --git a/sys-apps/restorecond/files/restorecond.init 
b/sys-apps/restorecond/files/restorecond.init
old mode 100755
new mode 100644

diff --git a/sys-apps/restorecond/restorecond-.ebuild 
b/sys-apps/restorecond/restorecond-3.1.ebuild
similarity index 78%
copy from sys-apps/restorecond/restorecond-.ebuild
copy to sys-apps/restorecond/restorecond-3.1.ebuild
index efe40fb0d73..001d8cd6d3f 100644
--- a/sys-apps/restorecond/restorecond-.ebuild
+++ b/sys-apps/restorecond/restorecond-3.1.ebuild
@@ -1,11 +1,11 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 
-inherit toolchain-funcs
+inherit systemd toolchain-funcs
 
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 MY_P="${P//_/-}"
 IUSE=""
@@ -32,8 +32,7 @@ DEPEND=">=sys-libs/libsepol-${PV}:=
dev-libs/libpcre:=
>=sys-libs/libcap-1.10-r10:="
 
-RDEPEND="${DEPEND}
-   !

[gentoo-commits] repo/gentoo:master commit in: sys-apps/secilc/

2020-09-14 Thread Jason Zaman
commit: 8fcab3b2947b4db43b7af479520e51f7db88b63e
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 20:30:50 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:27 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8fcab3b2

sys-apps/secilc: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-apps/secilc/Manifest  | 1 +
 sys-apps/secilc/{secilc-.ebuild => secilc-3.1.ebuild} | 6 +++---
 sys-apps/secilc/secilc-.ebuild| 6 +++---
 3 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/sys-apps/secilc/Manifest b/sys-apps/secilc/Manifest
index 7cbc7ab1d41..771d092acdb 100644
--- a/sys-apps/secilc/Manifest
+++ b/sys-apps/secilc/Manifest
@@ -1,2 +1,3 @@
 DIST secilc-2.9.tar.gz 175885 BLAKE2B 
0a5fd0adb70ce80574148ac035dcb8c5c80f6779a6a0c696eaba26cb6c4441e58eb161600034102dcb34c87099357bfc66015d245cf2fd49b56e65d782fc8aac
 SHA512 
c552ce65fc23bef1a93b3dc485369d64ad19a3f30707b95d0dd488d1766ab9f5e75884b79e6464997eaafee119193a1fdd5ff8228aee0fa902e426eefa14a4ee
 DIST secilc-3.0.tar.gz 176060 BLAKE2B 
dcceaa72f3e34777f0d4a6a05de073e4f2dc53b7577c2a52d5b5ab5e10d394ad85817985e683c9af241cf6bdc9a549d52142477281000e19ff66063f440b4b3a
 SHA512 
e82d973c99b95a7f34060ce10a7f39802c3d6d428a52992efd8551da7bceafbdf9f81262d9aa2ad9d22a0704959de525c5a2de21fd96651277fab433ef340225
+DIST secilc-3.1.tar.gz 176631 BLAKE2B 
e79818580d2a788d672574ebd77349f0c59b678d2be628479f517412ca876fa225ba0dd63ef3200ed15ff693cd5f4cb4ff537d81666fef3a008ba4b3a7577e0c
 SHA512 
79e3e4910178af49ea164d620aa997adb21dd18581c054a4023dd9116ec9dd203bd12989ef308aa1d253b47fcd251ee2b99c26e143d1db3de22a7f374ff38e0b

diff --git a/sys-apps/secilc/secilc-.ebuild 
b/sys-apps/secilc/secilc-3.1.ebuild
similarity index 92%
copy from sys-apps/secilc/secilc-.ebuild
copy to sys-apps/secilc/secilc-3.1.ebuild
index d920dbb0436..db36c3ca9f4 100644
--- a/sys-apps/secilc/secilc-.ebuild
+++ b/sys-apps/secilc/secilc-3.1.ebuild
@@ -1,11 +1,11 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 inherit toolchain-funcs
 
 MY_P="${P//_/-}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 SEPOL_VER="${PV}"
 

diff --git a/sys-apps/secilc/secilc-.ebuild 
b/sys-apps/secilc/secilc-.ebuild
index d920dbb0436..db36c3ca9f4 100644
--- a/sys-apps/secilc/secilc-.ebuild
+++ b/sys-apps/secilc/secilc-.ebuild
@@ -1,11 +1,11 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 inherit toolchain-funcs
 
 MY_P="${P//_/-}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 SEPOL_VER="${PV}"
 



[gentoo-commits] repo/gentoo:master commit in: sys-libs/libsemanage/

2020-09-14 Thread Jason Zaman
commit: 0040f873d46367c8d16c8effc6ebd14474d9c829
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 19:44:57 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:15 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0040f873

sys-libs/libsemanage: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-libs/libsemanage/Manifest  |  1 +
 ...semanage-.ebuild => libsemanage-3.1.ebuild} | 33 +-
 sys-libs/libsemanage/libsemanage-.ebuild   | 33 +-
 3 files changed, 29 insertions(+), 38 deletions(-)

diff --git a/sys-libs/libsemanage/Manifest b/sys-libs/libsemanage/Manifest
index 6c9813422e3..1231fb64b80 100644
--- a/sys-libs/libsemanage/Manifest
+++ b/sys-libs/libsemanage/Manifest
@@ -1,2 +1,3 @@
 DIST libsemanage-2.9.tar.gz 157690 BLAKE2B 
98a7800a4f4a5b6eeaad8be9870a49bc697cec6cd053cb44bcd618d22146ed1adc32b432667f8fd245ac073a458e048894cbaf68903b79577bc8596b1c255f56
 SHA512 
ea2924e8ce97d376519d40d499145b3db413cf9cc1eb995ed338b95c131e043d8c43b87b2012cee2bb6354a6e3161ebf5ce4a1200278d3ecd4294b43d177a5c2
 DIST libsemanage-3.0.tar.gz 180745 BLAKE2B 
a7e7f0c98e365fcc132e2e66de736db29b46599be2da227dbf1384110a607120f141975b859e55073f734e3ff533bdf90b7bbefd79f7bc5857bbb0722a75ad4e
 SHA512 
f960e1bd6815d3c9f000efa7ae717bc7937e742af5a7fea4aa865cf1aee49486e34897d83dbdb9cf77975a09a5ad77e5512d47690a74512a468a89432b72a42c
+DIST libsemanage-3.1.tar.gz 179601 BLAKE2B 
69450a4eda1f3728d339f65db1eec9940995fcea5208d17dca531ebc998aefbfec48fe91beffa3490e1502953aa550405fb696635d01b0eb8050c8f00f11106a
 SHA512 
8609ca7d13b5c603677740f2b14558fea3922624af182d20d618237ba11fcf2559fab82fc68d1efa6ff118f064d426f005138521652c761de92cd66150102197

diff --git a/sys-libs/libsemanage/libsemanage-.ebuild 
b/sys-libs/libsemanage/libsemanage-3.1.ebuild
similarity index 86%
copy from sys-libs/libsemanage/libsemanage-.ebuild
copy to sys-libs/libsemanage/libsemanage-3.1.ebuild
index 767ab9d45e1..f41d7dffde0 100644
--- a/sys-libs/libsemanage/libsemanage-.ebuild
+++ b/sys-libs/libsemanage/libsemanage-3.1.ebuild
@@ -1,13 +1,13 @@
 # Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 PYTHON_COMPAT=( python{3_6,3_7,3_8} )
 
 inherit multilib python-r1 toolchain-funcs multilib-minimal
 
 MY_P="${P//_/-}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 SEPOL_VER="${PV}"
 SELNX_VER="${PV}"
@@ -27,21 +27,19 @@ fi
 
 LICENSE="GPL-2"
 SLOT="0"
-IUSE="python"
-REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} )"
+IUSE=""
+REQUIRED_USE="${PYTHON_REQUIRED_USE}"
 
 RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}[${MULTILIB_USEDEP}]
>=sys-libs/libselinux-${SELNX_VER}[${MULTILIB_USEDEP}]
>=sys-process/audit-2.2.2[${MULTILIB_USEDEP}]
>=dev-libs/ustr-1.0.4-r2[${MULTILIB_USEDEP}]
-   python? ( ${PYTHON_DEPS} )"
+   ${PYTHON_DEPS}"
 DEPEND="${RDEPEND}
+   >=dev-lang/swig-2.0.4-r1
sys-devel/bison
sys-devel/flex
-   python? (
-   >=dev-lang/swig-2.0.4-r1
-   virtual/pkgconfig
-   )"
+   virtual/pkgconfig"
 
 # tests are not meant to be run outside of the
 # full SELinux userland repo
@@ -84,7 +82,7 @@ multilib_src_compile() {
LIBDIR="${EPREFIX}/usr/$(get_libdir)" \
all
 
-   if multilib_is_native_abi && use python; then
+   if multilib_is_native_abi; then
building_py() {
emake \
AR="$(tc-getAR)" \
@@ -102,7 +100,7 @@ multilib_src_install() {
LIBDIR="${EPREFIX}/usr/$(get_libdir)" \
DESTDIR="${ED}" install
 
-   if multilib_is_native_abi && use python; then
+   if multilib_is_native_abi; then
installation_py() {
emake DESTDIR="${ED}" \
LIBDIR="${EPREFIX}/usr/$(get_libdir)" \
@@ -113,6 +111,11 @@ multilib_src_install() {
fi
 }
 
+multiib_src_install_all() {
+   python_setup
+   python_fix_shebang "${ED}"/usr/libexec/selinux/semanage_migrate_store
+}
+
 pkg_postinst() {
# Migrate the SELinux semanage configuration store if not done already
local selinuxtype=$(awk -F'=' '/SELINUXTYPE=/ {print $2}' 
"${EROOT}"/etc/selinux/config 2>/dev/null)
@@ -124,12 +127,4 @@ pkg_postinst() {
ewarn "For more information, please see"
ewarn "- 
https://github.com/SELinuxProject/selinux/wiki/Policy-Store-Migration;
fi
-
-   # Ru

[gentoo-commits] repo/gentoo:master commit in: sys-apps/mcstrans/, sys-apps/mcstrans/files/

2020-09-14 Thread Jason Zaman
commit: dbbef8051c3976bd1f6013d52edb54c51549ce7e
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 20:12:37 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:29 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=dbbef805

sys-apps/mcstrans: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-apps/mcstrans/Manifest  | 1 +
 sys-apps/mcstrans/files/mcstransd.init  | 0
 sys-apps/mcstrans/{mcstrans-.ebuild => mcstrans-3.1.ebuild} | 9 -
 sys-apps/mcstrans/mcstrans-.ebuild  | 9 -
 4 files changed, 9 insertions(+), 10 deletions(-)

diff --git a/sys-apps/mcstrans/Manifest b/sys-apps/mcstrans/Manifest
index eb2c9989a8f..98571ed1154 100644
--- a/sys-apps/mcstrans/Manifest
+++ b/sys-apps/mcstrans/Manifest
@@ -1,2 +1,3 @@
 DIST mcstrans-2.9.tar.gz 44451 BLAKE2B 
e73121351a5d3a09c4754cd0fc6bcdac4b47e3f99d8bd2c40ee9b2bb510095a41721d0dae0d3edb56c36d9e9ef72ece4c69a01298c7f34fe96ccf4883372b1fd
 SHA512 
25a37c6dd7fa23b0599d7e92da78805e1da1605c998edf00777113c8467b1703f634223dff57627337da51e565cf2d1e475698a5a2310966f1f6dcf6687671d1
 DIST mcstrans-3.0.tar.gz 44570 BLAKE2B 
82358f6564e42ebfa50647892b35e4788ff9b8636eef3c776dbc6cefff7532906479b5826c1f515d2994611f62100a2622a5cce130bc7dbb4db3afc2167ec072
 SHA512 
02d9754daf1f85941cc8eea934931b6963d1a2133f6f313a2c7fc6a485687add434d587eeac96bfaf2b490c8e1cea34514a7689f880ebb49ca59ebf9b8956eba
+DIST mcstrans-3.1.tar.gz 44598 BLAKE2B 
1755c2f56e3d40fa2ea95c349988fe5dd7b52a9f26bef0f42e42bda8f7b94993b9a47d2e37f746cbabd9dd571118b0a8e1ffb7c22c604db58fc809bcc033
 SHA512 
21e9b7a8c9d98cbee61f2eb1c440a51d19ac111a5955c24d365a8784e1aa34fb47a22a108e550c8a4cde4f25ec5afc466126a68e9faedfc796bef83eada93b60

diff --git a/sys-apps/mcstrans/files/mcstransd.init 
b/sys-apps/mcstrans/files/mcstransd.init
old mode 100755
new mode 100644

diff --git a/sys-apps/mcstrans/mcstrans-.ebuild 
b/sys-apps/mcstrans/mcstrans-3.1.ebuild
similarity index 88%
copy from sys-apps/mcstrans/mcstrans-.ebuild
copy to sys-apps/mcstrans/mcstrans-3.1.ebuild
index e68d520f437..c848c15f507 100644
--- a/sys-apps/mcstrans/mcstrans-.ebuild
+++ b/sys-apps/mcstrans/mcstrans-3.1.ebuild
@@ -1,11 +1,11 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 
 inherit toolchain-funcs
 
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 MY_P="${P//_/-}"
 IUSE=""
@@ -31,8 +31,7 @@ DEPEND=">=sys-libs/libsepol-${PV}:=
dev-libs/libpcre:=
>=sys-libs/libcap-1.10-r10:="
 
-RDEPEND="${DEPEND}
-   !

[gentoo-commits] repo/gentoo:master commit in: sys-libs/libselinux/

2020-09-14 Thread Jason Zaman
commit: b9167517361eb4648f7952dff072763cb6627262
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 19:38:47 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:13 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b9167517

sys-libs/libselinux: Version bump to 3.1.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 sys-libs/libselinux/Manifest   |  1 +
 .../{libselinux-.ebuild => libselinux-3.1.ebuild}  | 10 +-
 sys-libs/libselinux/libselinux-.ebuild | 10 +-
 3 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/sys-libs/libselinux/Manifest b/sys-libs/libselinux/Manifest
index b536d946068..90c22e8e0d2 100644
--- a/sys-libs/libselinux/Manifest
+++ b/sys-libs/libselinux/Manifest
@@ -1,2 +1,3 @@
 DIST libselinux-2.9.tar.gz 211546 BLAKE2B 
5b06b922690e48924865c98ed34ebfc1ce5e30e78dbeaccb6b9c931a35bed113c030f8f8575084429fe13b91aeafc73abaa24fe609a17ba54c8472d783f6ac61
 SHA512 
727b211d09f374d45aa3fa4dec7fd5463dfdcf5aaa47f7fcaccee51fb74896c3aa1a6f0bac9cdd47ebe4929e13f66f5f70447b27b783dca5f7b1576d30d0
 DIST libselinux-3.0.tar.gz 212096 BLAKE2B 
7502c77243928adfc445f55357b0e894087859c3a83e2beb446c31818362d10111c3e52b970150638c055f96a6fccde79440026201a2a48bfda3565c27d3
 SHA512 
6fd8c3711e25cb1363232e484268609b71d823975537b3863e403836222eba026abce8ca198f64dba6f4c1ea4deb7ecef68a0397b9656a67b363e4d74409cd95
+DIST libselinux-3.1.tar.gz 204703 BLAKE2B 
72ff2d99dd6640405e804f58bdfbf05e152615ea92f902b3942602af13dc17080afeabb942ed33ae6b3f528870f4b11584e533848e455a97bf8f7151a8d44646
 SHA512 
57730cddd2d4751556d9e1f207c0f85119c81848f0620c16239e997150989e3f9a586a8c23861fd51ed89f7e084ad441190a58a288258a49a95f7beef7dbbb13

diff --git a/sys-libs/libselinux/libselinux-.ebuild 
b/sys-libs/libselinux/libselinux-3.1.ebuild
similarity index 95%
copy from sys-libs/libselinux/libselinux-.ebuild
copy to sys-libs/libselinux/libselinux-3.1.ebuild
index 48ecacbdf7a..2f2a870f2d6 100644
--- a/sys-libs/libselinux/libselinux-.ebuild
+++ b/sys-libs/libselinux/libselinux-3.1.ebuild
@@ -1,16 +1,16 @@
 # Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 PYTHON_COMPAT=( python3_{6..9} )
-USE_RUBY="ruby24 ruby25 ruby26"
+USE_RUBY="ruby25 ruby26 ruby27"
 
 # No, I am not calling ruby-ng
 inherit multilib python-r1 toolchain-funcs multilib-minimal
 
 MY_P="${P//_/-}"
 SEPOL_VER="${PV}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 DESCRIPTION="SELinux userland library"
 HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki;
@@ -27,7 +27,7 @@ fi
 
 LICENSE="public-domain"
 SLOT="0"
-IUSE="pcre2 python ruby static-libs ruby_targets_ruby24 ruby_targets_ruby25 
ruby_targets_ruby26"
+IUSE="pcre2 python ruby static-libs ruby_targets_ruby25 ruby_targets_ruby26 
ruby_targets_ruby27"
 REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} )"
 
 RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}:=[${MULTILIB_USEDEP}]
@@ -35,9 +35,9 @@ 
RDEPEND=">=sys-libs/libsepol-${SEPOL_VER}:=[${MULTILIB_USEDEP}]
pcre2? ( dev-libs/libpcre2:=[static-libs?,${MULTILIB_USEDEP}] )
python? ( ${PYTHON_DEPS} )
ruby? (
-   ruby_targets_ruby24? ( dev-lang/ruby:2.4 )
ruby_targets_ruby25? ( dev-lang/ruby:2.5 )
ruby_targets_ruby26? ( dev-lang/ruby:2.6 )
+   ruby_targets_ruby27? ( dev-lang/ruby:2.7 )
)
elibc_musl? ( sys-libs/fts-standalone )"
 DEPEND="${RDEPEND}

diff --git a/sys-libs/libselinux/libselinux-.ebuild 
b/sys-libs/libselinux/libselinux-.ebuild
index 48ecacbdf7a..2f2a870f2d6 100644
--- a/sys-libs/libselinux/libselinux-.ebuild
+++ b/sys-libs/libselinux/libselinux-.ebuild
@@ -1,16 +1,16 @@
 # Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
+EAPI="7"
 PYTHON_COMPAT=( python3_{6..9} )
-USE_RUBY="ruby24 ruby25 ruby26"
+USE_RUBY="ruby25 ruby26 ruby27"
 
 # No, I am not calling ruby-ng
 inherit multilib python-r1 toolchain-funcs multilib-minimal
 
 MY_P="${P//_/-}"
 SEPOL_VER="${PV}"
-MY_RELEASEDATE="20191204"
+MY_RELEASEDATE="20200710"
 
 DESCRIPTION="SELinux userland library"
 HOMEPAGE="https://github.com/SELinuxProject/selinux/wiki;
@@ -27,7 +27,7 @@ fi
 
 LICENSE="public-domain"
 SLOT="0"
-IUSE="pcre2 python ruby static-libs ruby_targets_ruby24 ruby_targets_ruby25 
ruby_targets_ruby26"
+IUSE="pcre2 python ruby static-libs ruby_targets_ruby25 ruby_targets_ruby26 
ruby_targets_ruby27"

[gentoo-commits] repo/gentoo:master commit in: app-admin/setools/, app-admin/setools/files/

2020-09-14 Thread Jason Zaman
commit: a2677b8ee540c538e3cb5ebafbb3984518c1665e
Author: Jonathan Davies  protonmail  com>
AuthorDate: Tue Sep  1 19:33:00 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Tue Sep 15 03:40:17 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a2677b8e

app-admin/setools: Version bump to 4.3.0.

Signed-off-by: Jonathan Davies  protonmail.com>
Signed-off-by: Jason Zaman  gentoo.org>

 app-admin/setools/Manifest   |  1 +
 app-admin/setools/files/setools-4.3.0-remove-gui.patch   | 16 
 .../{setools-.ebuild => setools-4.3.0.ebuild}|  6 +++---
 app-admin/setools/setools-.ebuild|  6 +++---
 4 files changed, 23 insertions(+), 6 deletions(-)

diff --git a/app-admin/setools/Manifest b/app-admin/setools/Manifest
index 8c9e34e2529..bd5ba05e8cf 100644
--- a/app-admin/setools/Manifest
+++ b/app-admin/setools/Manifest
@@ -1 +1,2 @@
 DIST setools-4.2.2.tar.bz2 237881 BLAKE2B 
6c09223e36af4ccf1ab3c194df3a4dd2871887abf25c9bcd66ef3510357f2fb6efef65a8c773267eb951c05e8308b12d96bab8efb65eb07c2ae53be60f045e82
 SHA512 
03eb9dfa22da6d6cffd1732fbc7d50eb8276c235d29f76b774e190b3f04f3b00533131885c6d4bc3c8dc965526b1bf4d6aec4bb3af193b4eb76a15acaa9f743f
+DIST setools-4.3.0.tar.bz2 249694 BLAKE2B 
03d689f0f7dcc5ad7cf1ed114b7466aa0add96b70aa4b4a0a563805ad58cd1bde5651b155d202835e238aee9f07bf7595bfb09c20d2984ef6b921866ac1dca2e
 SHA512 
f2ef045e76223918f16d8b0d8365166d6afa320558269be96f3a8875189607253056179092fb8134aaa2e50a5d0862f246c0aa0f8d33060919f4bc1257c109d8

diff --git a/app-admin/setools/files/setools-4.3.0-remove-gui.patch 
b/app-admin/setools/files/setools-4.3.0-remove-gui.patch
new file mode 100644
index 000..85abbf5a7aa
--- /dev/null
+++ b/app-admin/setools/files/setools-4.3.0-remove-gui.patch
@@ -0,0 +1,16 @@
+--- a/setup.py
 b/setup.py
+@@ -146,10 +146,10 @@ setup(name='setools',
+   author_email='peben...@ieee.org',
+   url='https://github.com/SELinuxProject/setools',
+   cmdclass={'build_qhc': QtHelpCommand, 'clean': CleanCommand},
+-  packages=['setools', 'setools.diff', 'setoolsgui', 'setoolsgui.apol'],
+-  scripts=['apol', 'sediff', 'seinfo', 'seinfoflow', 'sesearch', 'sedta'],
++  packages=['setools', 'setools.diff'],
++  scripts=['sediff', 'seinfo', 'seinfoflow', 'sesearch', 'sedta'],
+   data_files=installed_data,
+-  package_data={'': ['*.ui', '*.qhc', '*.qch'], 'setools': ['perm_map']},
++  package_data={'setools': ['perm_map']},
+   ext_modules=cythonize(ext_py_mods, include_path=['setools/policyrep'],
+ annotate=cython_annotate,
+ compiler_directives={"language_level": 3,

diff --git a/app-admin/setools/setools-.ebuild 
b/app-admin/setools/setools-4.3.0.ebuild
similarity index 90%
copy from app-admin/setools/setools-.ebuild
copy to app-admin/setools/setools-4.3.0.ebuild
index 88bea390204..fd1fb1b07fa 100644
--- a/app-admin/setools/setools-.ebuild
+++ b/app-admin/setools/setools-4.3.0.ebuild
@@ -1,8 +1,8 @@
 # Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
-PYTHON_COMPAT=( python{3_6,3_7} )
+EAPI="7"
+PYTHON_COMPAT=( python{3_6,3_7,3_8,3_9} )
 
 inherit distutils-r1
 
@@ -42,7 +42,7 @@ python_prepare_all() {
sed -i "s@^lib_dirs = .*@lib_dirs = ['${ROOT:-/}usr/$(get_libdir)']@" 
"${S}"/setup.py || \
die "failed to set lib_dirs"
 
-   use X || local PATCHES=( "${FILESDIR}"/setools-4.2.2-remove-gui.patch )
+   use X || local PATCHES=( "${FILESDIR}"/setools-4.3.0-remove-gui.patch )
distutils-r1_python_prepare_all
 }
 

diff --git a/app-admin/setools/setools-.ebuild 
b/app-admin/setools/setools-.ebuild
index 88bea390204..fd1fb1b07fa 100644
--- a/app-admin/setools/setools-.ebuild
+++ b/app-admin/setools/setools-.ebuild
@@ -1,8 +1,8 @@
 # Copyright 1999-2020 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-EAPI="6"
-PYTHON_COMPAT=( python{3_6,3_7} )
+EAPI="7"
+PYTHON_COMPAT=( python{3_6,3_7,3_8,3_9} )
 
 inherit distutils-r1
 
@@ -42,7 +42,7 @@ python_prepare_all() {
sed -i "s@^lib_dirs = .*@lib_dirs = ['${ROOT:-/}usr/$(get_libdir)']@" 
"${S}"/setup.py || \
die "failed to set lib_dirs"
 
-   use X || local PATCHES=( "${FILESDIR}"/setools-4.2.2-remove-gui.patch )
+   use X || local PATCHES=( "${FILESDIR}"/setools-4.3.0-remove-gui.patch )
distutils-r1_python_prepare_all
 }
 



[gentoo-commits] repo/gentoo:master commit in: net-misc/rclone/

2020-09-07 Thread Jason Zaman
commit: 346c9d55988e1ebe799cd6cbd69eafbaa4cb1241
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Sep  7 06:08:19 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Sep  7 09:32:44 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=346c9d55

net-misc/rclone: drop old

Package-Manager: Portage-2.3.103, Repoman-2.3.23
Signed-off-by: Jason Zaman  gentoo.org>

 net-misc/rclone/Manifest |  2 --
 net-misc/rclone/rclone-1.51.0.ebuild | 39 
 net-misc/rclone/rclone-1.52.1.ebuild | 36 -
 3 files changed, 77 deletions(-)

diff --git a/net-misc/rclone/Manifest b/net-misc/rclone/Manifest
index 481e7f93879..30588d8e2a5 100644
--- a/net-misc/rclone/Manifest
+++ b/net-misc/rclone/Manifest
@@ -1,3 +1 @@
-DIST rclone-1.51.0.tar.gz 18835242 BLAKE2B 
5798a844c893e111e73ae409adcb06fd4291df3c0319bf983f2336ada45a60df253e750397bead55278cbb497c541a63498f695ce03af7b6cc1056f022ad2748
 SHA512 
b0881e09b75093abe4d31e95425a90513aed4a16d9e2dbf79023c9dc68875b90a1332204879530c450a16ab9cac475d967f7657d6f810a1e0f0d84b88d7de916
-DIST rclone-1.52.1.tar.gz 20029046 BLAKE2B 
0dc7deebf1d362c1b7ad466991c3fc481c62d4c5803e5fa768dbe09adecfc79c2af9dcc19e7621542b464325b03be1390eff54d165c8c899c48adfac63b6cd7a
 SHA512 
bbd305074071986cf6fb8146c634e35c28e1ea8ce2ce95507c55b95cb19eb3b1453dfb11e365bef5948978328d91df44b936b866c49db26149a17f5ca451ba15
 DIST rclone-1.52.2.tar.gz 19515310 BLAKE2B 
50ba7085d8994f7faf9e723d5a14ef5db0ce1dfdf9ab11394c26e9c8bb20dd62f0a20cd7925f3fc5b870a4eadb7ea7323dea1d0793a51b7c58b10e37676e3581
 SHA512 
f49f0dcf8bfa105b01b35921daa655a6c1161f6505e2299f027a4059d196adcc673038b1718320e6f0b8bb053fad8d2de7714f66fa245dd90ea0a791e848a418

diff --git a/net-misc/rclone/rclone-1.51.0.ebuild 
b/net-misc/rclone/rclone-1.51.0.ebuild
deleted file mode 100644
index 380576cdebc..000
--- a/net-misc/rclone/rclone-1.51.0.ebuild
+++ /dev/null
@@ -1,39 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-inherit golang-build bash-completion-r1
-EGO_PN="github.com/rclone/${PN}"
-
-if [[ ${PV} == ** ]]; then
-   inherit golang-vcs
-else
-   KEYWORDS="amd64 ~arm ~arm64 x86"
-   EGIT_COMMIT="v${PV}"
-   SRC_URI="https://${EGO_PN}/archive/${EGIT_COMMIT}.tar.gz -> ${P}.tar.gz"
-   inherit golang-vcs-snapshot
-fi
-
-DESCRIPTION="A program to sync files to and from various cloud storage 
providers"
-HOMEPAGE="https://rclone.org/;
-
-LICENSE="MIT"
-SLOT="0"
-IUSE=""
-
-DEPEND=""
-RDEPEND="${DEPEND}"
-
-src_install() {
-   dobin ${PN}
-   doman src/${EGO_PN}/${PN}.1
-   dodoc src/${EGO_PN}/README.md
-
-   ./rclone genautocomplete bash ${PN}.bash || die
-   newbashcomp ${PN}.bash ${PN}
-
-   ./rclone genautocomplete zsh ${PN}.zsh || die
-   insinto /usr/share/zsh/site-functions
-   newins ${PN}.zsh _${PN}
-}

diff --git a/net-misc/rclone/rclone-1.52.1.ebuild 
b/net-misc/rclone/rclone-1.52.1.ebuild
deleted file mode 100644
index 9617d4c91b1..000
--- a/net-misc/rclone/rclone-1.52.1.ebuild
+++ /dev/null
@@ -1,36 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-inherit bash-completion-r1 go-module
-
-if [[ ${PV} == ** ]]; then
-   inherit git-r3
-else
-   KEYWORDS="amd64 ~arm ~arm64 x86"
-   SRC_URI="https://github.com/rclone/rclone/archive/v${PV}.tar.gz -> 
${P}.tar.gz"
-fi
-
-DESCRIPTION="A program to sync files to and from various cloud storage 
providers"
-HOMEPAGE="https://rclone.org/;
-
-LICENSE="MIT"
-SLOT="0"
-IUSE=""
-
-src_compile() {
-   go build -mod=vendor . || die "compile failed"
-}
-
-src_install() {
-   dobin ${PN}
-   doman ${PN}.1
-   dodoc README.md
-
-   ./rclone genautocomplete bash ${PN}.bash || die
-   newbashcomp ${PN}.bash ${PN}
-
-   ./rclone genautocomplete zsh ${PN}.zsh || die
-   insinto /usr/share/zsh/site-functions
-   newins ${PN}.zsh _${PN}
-}



[gentoo-commits] repo/gentoo:master commit in: net-misc/rclone/

2020-09-07 Thread Jason Zaman
commit: a68b125f0f6014b80b45a21691592ab79743d091
Author: Jason Zaman  gentoo  org>
AuthorDate: Mon Sep  7 06:00:40 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Sep  7 09:32:42 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a68b125f

net-misc/rclone: stable 1.52.2

Package-Manager: Portage-2.3.103, Repoman-2.3.23
Signed-off-by: Jason Zaman  gentoo.org>

 net-misc/rclone/rclone-1.52.2.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/net-misc/rclone/rclone-1.52.2.ebuild 
b/net-misc/rclone/rclone-1.52.2.ebuild
index 18755cd5a7e..9617d4c91b1 100644
--- a/net-misc/rclone/rclone-1.52.2.ebuild
+++ b/net-misc/rclone/rclone-1.52.2.ebuild
@@ -7,7 +7,7 @@ inherit bash-completion-r1 go-module
 if [[ ${PV} == ** ]]; then
inherit git-r3
 else
-   KEYWORDS="~amd64 ~arm ~arm64 ~x86"
+   KEYWORDS="amd64 ~arm ~arm64 x86"
SRC_URI="https://github.com/rclone/rclone/archive/v${PV}.tar.gz -> 
${P}.tar.gz"
 fi
 



[gentoo-commits] repo/gentoo:master commit in: net-misc/rclone/

2020-09-07 Thread Jason Zaman
commit: ef73a40c32ee2f335a49f057a3a08f7514327db9
Author: Alexander Kurakin  mail  ru>
AuthorDate: Sun Jul 12 08:57:55 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Mon Sep  7 09:32:40 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ef73a40c

net-misc/rclone: bump 1.52.2

Closes: https://bugs.gentoo.org/732318
Signed-off-by: Alexander Kurakin  mail.ru>
Signed-off-by: Jason Zaman  gentoo.org>

 net-misc/rclone/Manifest |  1 +
 net-misc/rclone/rclone-1.52.2.ebuild | 36 
 2 files changed, 37 insertions(+)

diff --git a/net-misc/rclone/Manifest b/net-misc/rclone/Manifest
index 54d68761a9b..481e7f93879 100644
--- a/net-misc/rclone/Manifest
+++ b/net-misc/rclone/Manifest
@@ -1,2 +1,3 @@
 DIST rclone-1.51.0.tar.gz 18835242 BLAKE2B 
5798a844c893e111e73ae409adcb06fd4291df3c0319bf983f2336ada45a60df253e750397bead55278cbb497c541a63498f695ce03af7b6cc1056f022ad2748
 SHA512 
b0881e09b75093abe4d31e95425a90513aed4a16d9e2dbf79023c9dc68875b90a1332204879530c450a16ab9cac475d967f7657d6f810a1e0f0d84b88d7de916
 DIST rclone-1.52.1.tar.gz 20029046 BLAKE2B 
0dc7deebf1d362c1b7ad466991c3fc481c62d4c5803e5fa768dbe09adecfc79c2af9dcc19e7621542b464325b03be1390eff54d165c8c899c48adfac63b6cd7a
 SHA512 
bbd305074071986cf6fb8146c634e35c28e1ea8ce2ce95507c55b95cb19eb3b1453dfb11e365bef5948978328d91df44b936b866c49db26149a17f5ca451ba15
+DIST rclone-1.52.2.tar.gz 19515310 BLAKE2B 
50ba7085d8994f7faf9e723d5a14ef5db0ce1dfdf9ab11394c26e9c8bb20dd62f0a20cd7925f3fc5b870a4eadb7ea7323dea1d0793a51b7c58b10e37676e3581
 SHA512 
f49f0dcf8bfa105b01b35921daa655a6c1161f6505e2299f027a4059d196adcc673038b1718320e6f0b8bb053fad8d2de7714f66fa245dd90ea0a791e848a418

diff --git a/net-misc/rclone/rclone-1.52.2.ebuild 
b/net-misc/rclone/rclone-1.52.2.ebuild
new file mode 100644
index 000..18755cd5a7e
--- /dev/null
+++ b/net-misc/rclone/rclone-1.52.2.ebuild
@@ -0,0 +1,36 @@
+# Copyright 1999-2020 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=7
+inherit bash-completion-r1 go-module
+
+if [[ ${PV} == ** ]]; then
+   inherit git-r3
+else
+   KEYWORDS="~amd64 ~arm ~arm64 ~x86"
+   SRC_URI="https://github.com/rclone/rclone/archive/v${PV}.tar.gz -> 
${P}.tar.gz"
+fi
+
+DESCRIPTION="A program to sync files to and from various cloud storage 
providers"
+HOMEPAGE="https://rclone.org/;
+
+LICENSE="MIT"
+SLOT="0"
+IUSE=""
+
+src_compile() {
+   go build -mod=vendor . || die "compile failed"
+}
+
+src_install() {
+   dobin ${PN}
+   doman ${PN}.1
+   dodoc README.md
+
+   ./rclone genautocomplete bash ${PN}.bash || die
+   newbashcomp ${PN}.bash ${PN}
+
+   ./rclone genautocomplete zsh ${PN}.zsh || die
+   insinto /usr/share/zsh/site-functions
+   newins ${PN}.zsh _${PN}
+}



[gentoo-commits] repo/gentoo:master commit in: sci-visualization/tensorboard/

2020-08-29 Thread Jason Zaman
commit: 339db812a3e3fe2b0f64bf9de80cc92cc18e3546
Author: Jason Zaman  gentoo  org>
AuthorDate: Sun Aug 30 00:31:48 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Aug 30 00:31:48 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=339db812

sci-visualization/tensorboard: drop old

Package-Manager: Portage-2.3.103, Repoman-2.3.23
Signed-off-by: Jason Zaman  gentoo.org>

 sci-visualization/tensorboard/Manifest |  2 -
 .../tensorboard/tensorboard-1.15.0.ebuild  | 58 --
 .../tensorboard/tensorboard-2.0.0.ebuild   | 58 --
 3 files changed, 118 deletions(-)

diff --git a/sci-visualization/tensorboard/Manifest 
b/sci-visualization/tensorboard/Manifest
index c8680026167..78d8909c946 100644
--- a/sci-visualization/tensorboard/Manifest
+++ b/sci-visualization/tensorboard/Manifest
@@ -1,4 +1,2 @@
-DIST tensorboard-1.15.0.zip 3765194 BLAKE2B 
54a9987b65d4e2b127789f0e66eb5bdef8c024d19a82867632b44eefc4718bc6eb6c68fa61fdb2306af2c3adbacc3c75ec15f7aa331038b15cec27af2d846f85
 SHA512 
7b47d60929b4be91b4d56e36fc5a19b79511b8f3a1081fe308d3a107f978f2c5d23ad2d209104de983bc44f4506cdb0cb6e09b37e552dc042600ea16e14827dc
-DIST tensorboard-2.0.0.zip 3776140 BLAKE2B 
2bfd5b9d5b1c21f7df19ce5dae8a3d72381092630d1f53409fa0b96cab56be323ddef116bab95184d045f82fec88f4162e1f7277b25ed9c19b77189cf1a132ba
 SHA512 
e87ea39eae9b64c3314de771de98c21148517aee4103a4bc23d674273b1a220248d6ba85a9f94481c6d67e8d3733af099b91df3dae38537411082c1595aad73d
 DIST tensorboard-2.1.0.zip 3835182 BLAKE2B 
c2c7dbc1ba4b85c52df6e693e1bd425bd76fe6db7ca25582b57d9c65c68b191dcdba2623ab0560139f1cac1bdf5c7a47261daaaf51fca46f2c5bf441f832a6fd
 SHA512 
7463ace0863b90312a62a7fa96f4eca0147e85cf46ff21729f8996a794d54e14d876d3abe083d6aa4efd8e4e1582f7d5029de367f199981a34d4057b558bc51c
 DIST tensorboard-2.2.1.zip 2950617 BLAKE2B 
487ad01981f994b23cb5fca8b60d9ed5f13ba13735d2613d1f3154eec9791b4b3068fb9fd50e75e16682e09ceb8a9ed8533ca2c43b6dea73db3adaeef15a889b
 SHA512 
e96f8853d282dc19911cf2210ece0a4d7239f37dcba82e91697c80881fbcc21f12e4ba3e7d2eea7a84c9bb5b6521bf488d93d2312e55af9ec2d2c20f135d94fa

diff --git a/sci-visualization/tensorboard/tensorboard-1.15.0.ebuild 
b/sci-visualization/tensorboard/tensorboard-1.15.0.ebuild
deleted file mode 100644
index 4bf4063d7d7..000
--- a/sci-visualization/tensorboard/tensorboard-1.15.0.ebuild
+++ /dev/null
@@ -1,58 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-PYTHON_COMPAT=( python3_{6,7} )
-inherit python-r1
-
-DESCRIPTION="TensorFlow's Visualization Toolkit"
-HOMEPAGE="https://www.tensorflow.org/;
-SRC_URI="https://files.pythonhosted.org/packages/py3/${PN::1}/${PN}/${P}-py3-none-any.whl
 -> ${P}.zip"
-
-LICENSE="Apache-2.0"
-SLOT="0"
-KEYWORDS="~amd64"
-IUSE=""
-REQUIRED_USE=${PYTHON_REQUIRED_USE}
-
-RDEPEND="
-   ${PYTHON_DEPS}
-   dev-python/bleach[${PYTHON_USEDEP}]
-   dev-python/grpcio[${PYTHON_USEDEP}]
-   dev-python/html5lib[${PYTHON_USEDEP}]
-   dev-python/markdown[${PYTHON_USEDEP}]
-   dev-python/numpy[${PYTHON_USEDEP}]
-   dev-python/protobuf-python[${PYTHON_USEDEP}]
-   dev-python/six[${PYTHON_USEDEP}]
-   >=dev-python/setuptools-41[${PYTHON_USEDEP}]
-   dev-python/werkzeug[${PYTHON_USEDEP}]
-   dev-python/wheel[${PYTHON_USEDEP}]"
-BDEPEND="app-arch/unzip
-   ${PYTHON_DEPS}"
-PDEPEND="sci-libs/tensorflow[python,${PYTHON_USEDEP}]"
-
-S="${WORKDIR}"
-
-src_prepare() {
-   eapply_user
-
-   rm -rf "${S}/${PN}/_vendor/bleach" || die
-   rm -rf "${S}/${PN}/_vendor/html5lib" || die
-   sed -i -e '/_vendor.bleach/d' -e '/_vendor.html5lib/d' 
"${S}/${P}.dist-info/RECORD" || die "failed to unvendor"
-
-   find "${S}/${PN}" -name '*.py' -exec sed -i \
-   -e 's/^from tensorboard\._vendor import html5lib/import 
html5lib/' \
-   -e 's/^from tensorboard\._vendor import bleach/import bleach/' \
-   -e 's/^from tensorboard\._vendor\.html5lib/from html5lib/' \
-   -e 's/^from tensorboard\._vendor\.bleach/from bleach/' \
-   {} + || die "failed to unvendor"
-}
-
-src_install() {
-   do_install() {
-   python_domodule "${PN}"
-   python_domodule "${P}.dist-info"
-   }
-   python_foreach_impl do_install
-}

diff --git a/sci-visualization/tensorboard/tensorboard-2.0.0.ebuild 
b/sci-visualization/tensorboard/tensorboard-2.0.0.ebuild
deleted file mode 100644
index 4bf4063d7d7..000
--- a/sci-visualization/tensorboard/tensorboard-2.0.0.ebuild
+++ /dev/null
@@ -1,58 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-PYTH

[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow-estimator/

2020-08-29 Thread Jason Zaman
commit: 14eb77981f9f5cab9c2ca2919e419b3805a7f91a
Author: Jason Zaman  gentoo  org>
AuthorDate: Sun Aug 30 00:30:53 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Aug 30 00:30:53 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=14eb7798

sci-libs/tensorflow-estimator: drop old

Package-Manager: Portage-2.3.103, Repoman-2.3.23
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow-estimator/Manifest |  2 -
 .../tensorflow-estimator-1.15.1.ebuild | 59 --
 .../tensorflow-estimator-2.0.1.ebuild  | 69 --
 3 files changed, 130 deletions(-)

diff --git a/sci-libs/tensorflow-estimator/Manifest 
b/sci-libs/tensorflow-estimator/Manifest
index e67cc45af40..c8747119185 100644
--- a/sci-libs/tensorflow-estimator/Manifest
+++ b/sci-libs/tensorflow-estimator/Manifest
@@ -1,7 +1,5 @@
 DIST bazelbuild-rules_cc-0d5f3f2768c6ca2faca0079a997a97ce22997a0c.zip 72534 
BLAKE2B 
0bbcc2b3fefb8df84d9f72b13da59c377fcd657ead378f85f80a587f8750302236212ae5c58819933015e62425126bead0733d2924a567fb9c5cb14fb75271a8
 SHA512 
1818c04ba89afff88d75fe8b4e1386b3665a3ad477c26b4e9504c8f52f398b6aaedbad41a4ab8b8d9b3f86e0992e7c83a6da70241685d7b79ba177af1035
 DIST bazelbuild-rules_cc-8bd6cd75d03c01bb82561a96d9c1f9f7157b13d0.zip 159656 
BLAKE2B 
c2ebed5165907e5452db2e8797253ce17fb39a00d3ca3aab11dec475399821dd529629d710af6f9892b74d0654293bd7989fa2be24caf5836490e8df566c7c18
 SHA512 
deecf484f5e888db345a57c3b557d6548e4e71fd4c62ea10b4dc9c47be9d303df55c03bb446158675b131064c4eccb401bf217e131e78d629c8fc1836600cb51
 DIST bazelbuild-rules_java-7cf3cefd652008d0a64a419c34c13bdca6c8f178.zip 9422 
BLAKE2B 
bbc45c97551ee8126335b611ffca6574dac843d4db9b3221b10d26487f8eecfe38ba0cd67a4039a3ad921c25fea6294c43e4f4e7a57a060a30791acd6c4f9d39
 SHA512 
ba06242feb711e7fb6e821fd9ac029248b4f3e466fb1acf971d0db8196f3efe4d114ef137acbe4913073f8cbe8ccab4d47d8bafa21b867b2d6a6d57f5a647f0c
-DIST tensorflow-estimator-1.15.1.tar.gz 696316 BLAKE2B 
7797ae13fa5f56920df912f7d0eaef214a381acb25632dc2d21c6bbf5744bcc36b32f21e30b18be16d37f7a1deb30b2139d58c2c0f97a1de7a5f767a8a5462d8
 SHA512 
ae42057870cfb0e19d45ee59bd99c110ecfb3ae43cd5a5536711c7d2528b429c433b0f594e462eae9c40b34dd7813f3b14b1282cbf2edc725e13c45e93da818d
-DIST tensorflow-estimator-2.0.1.tar.gz 618583 BLAKE2B 
d4ae6225cb8a56febc9ffa64d5f811fc41db462534361a183095f724ce6deb17fa22edbd13bacd2d556adcc023dff1daeb7bf7338360b3cb49b19dc3bc3e97d0
 SHA512 
d7aa35784aa2726c49039be50b73cc957e7f883414bb43101527918bacfa55632df89e6f54cfc58a096512fc49a6ea7524aea87af0579c2a52db2ca7f5ee4bc2
 DIST tensorflow-estimator-2.1.tar.gz 622792 BLAKE2B 
d1c8abb22d90c789ebfadaf78ca932f87428274afe6e1ac20670bf6d2b4c1c6ea8f367b1eb7ee64ff9f6e9b8ecdc2f64113924e7e2286e3f4e3d2c36cb101794
 SHA512 
4aaa21969299b02443e9396c238ef4c03af3bde1d0142a81c04d9706f18b02bfd125f3aaf8ffb47e0a3ffad949c3d3bca3909375f12a1c1e4c55ca1cc7930d51
 DIST tensorflow-estimator-2.2.0.tar.gz 627362 BLAKE2B 
125792fc2167b8af837a99b08a9a26943bc5c1fda8ab3690b01c0d49a6dd39142ff4a063867dfe1bee3b99fb018981d0e4ee45d194caac2cd96a829ad22db0ad
 SHA512 
aaf743835e2c606439fcccb56742997e930ba0e72c01d51633ce86824bbfaacd64607dc1fd7fb9604cc444feb65ebae60c2266be084e1b49ef2a1a9ca5a3d60d

diff --git a/sci-libs/tensorflow-estimator/tensorflow-estimator-1.15.1.ebuild 
b/sci-libs/tensorflow-estimator/tensorflow-estimator-1.15.1.ebuild
deleted file mode 100644
index 37a74e0d419..000
--- a/sci-libs/tensorflow-estimator/tensorflow-estimator-1.15.1.ebuild
+++ /dev/null
@@ -1,59 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-PYTHON_COMPAT=( python{3_6,3_7} )
-MY_PN="estimator"
-MY_PV=${PV/_rc/-rc}
-MY_P=${MY_PN}-${MY_PV}
-
-inherit bazel distutils-r1 flag-o-matic toolchain-funcs
-
-DESCRIPTION="A high-level TensorFlow API that greatly simplifies machine 
learning programming"
-HOMEPAGE="https://www.tensorflow.org/;
-
-LICENSE="Apache-2.0"
-SLOT="0"
-KEYWORDS="~amd64"
-IUSE=""
-
-SRC_URI="https://github.com/tensorflow/${MY_PN}/archive/v${MY_PV}.tar.gz -> 
${P}.tar.gz"
-
-RDEPEND="sci-libs/tensorflow[python,${PYTHON_USEDEP}]"
-DEPEND="${RDEPEND}"
-BDEPEND="
-   dev-java/java-config"
-
-S="${WORKDIR}/${MY_P}"
-
-DOCS=( CONTRIBUTING.md README.md )
-
-src_prepare() {
-   sed -i "/^_VERSION/s/'[0-9.]*'/'${PV}'/" 
tensorflow_estimator/tools/pip_package/setup.py || die
-   bazel_setup_bazelrc
-   default
-}
-
-src_compile() {
-   export JAVA_HOME=$(java-config --jre-home)
-
-   ebazel build //tensorflow_estimator/tools/pip_package:build_pip_package
-   ebazel shutdown
-
-   local srcdir="${T}/src"
-   mkdir -p "${srcdir}" || die
-   bazel-bin/tensorflow_estimator/tools/pip_package/build_pip_package 
--src "${s

[gentoo-commits] repo/gentoo:master commit in: sci-libs/tensorflow/

2020-08-29 Thread Jason Zaman
commit: 0f654de63913a1631a9a7ec25cee4f8447de7f2f
Author: Jason Zaman  gentoo  org>
AuthorDate: Sat Aug 29 21:50:43 2020 +
Commit:     Jason Zaman  gentoo  org>
CommitDate: Sun Aug 30 00:25:08 2020 +
URL:https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0f654de6

sci-libs/tensorflow: Fix build failures in 2.2

Patch needed to build against numpy-1.19.
Also updated deps for flatbuffers, h5py

Closes: https://bugs.gentoo.org/736155
Closes: https://bugs.gentoo.org/710074
Closes: https://bugs.gentoo.org/725120
Package-Manager: Portage-2.3.103, Repoman-2.3.23
Signed-off-by: Jason Zaman  gentoo.org>

 sci-libs/tensorflow/Manifest | 2 +-
 .../{tensorflow-2.2.0.ebuild => tensorflow-2.2.0-r1.ebuild}  | 9 +
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/sci-libs/tensorflow/Manifest b/sci-libs/tensorflow/Manifest
index a59b7ec1b39..96ff16f223c 100644
--- a/sci-libs/tensorflow/Manifest
+++ b/sci-libs/tensorflow/Manifest
@@ -41,4 +41,4 @@ DIST tensorflow-2.0.0.tar.gz 46176997 BLAKE2B 
761e91a774f61b50459240a83fe52f723a
 DIST tensorflow-2.1.0.tar.gz 41637803 BLAKE2B 
63aac95cdb71097d2e7a257a691a2b51703fb22d2535395494adebfae0d3f97f8dd9e0deaadf1c2f3d3d26138066a7c6fb9b9728b5b0ac3d54360d7b5e4bebff
 SHA512 
6d09ba3c097e4b3d712e7164d649841572c418d56c207eea6d31e3b1851b84ce57e82801d9887d84cfd8fcf990a3ea4c4b4b05265f8d625509986412c230c3c6
 DIST tensorflow-2.2.0.tar.gz 42100791 BLAKE2B 
8b773ae9945ca267af33a34d86f6aef02310976bea1cdd98858d1405e8da845640b72a073b71fcfccb2b73f08600a5eada2c2332a8d9480bba71e9f25dbb2220
 SHA512 
94a2663497d333d543f363e9fea94fbcfdcdbbc0dfbaf009ba9181a808713aeb78f9b8805f56bea5fd3925a36f105427b3996795750589f378d8afbdadc2b86d
 DIST tensorflow-patches-2.1.0.tar.bz2 5737 BLAKE2B 
67f5004312389ed19e810aad9f2d5d4839d806b5a7422963520e0dff06b91346683647db757ac463af13ca70861a7ed9c94be242910abacc6be350e162947225
 SHA512 
a20bfb619d59e0d2741a27ce36e3d38dbb7a5a706d6bc56f8aa94b5b72288139ad301fc06390b128ef1c3a88b758d09d0224351590dedcda9c5309cc55af6fed
-DIST tensorflow-patches-2.2.0.tar.bz2 3197 BLAKE2B 
e88211e6eaed9818e63680aaa451cad1a0b53e6087e2d8a1c34126e539d509ed5180ce1bdd902f0a0acd357a4e334bb30638d18d15a585465881abf1ecfbb830
 SHA512 
5370700df4b3741e4f41629684c8bdba28182b5d488df241a8f4f55ba821797d38ef98676b30712c1716310054307fbec03db406d1cf17a7f3430697e8378d2c
+DIST tensorflow-patches-2.2.0-r1.tar.bz2 3890 BLAKE2B 
cf4e0d579992cd09136fe3a11c5016e7b996ea959dad9f3a1ccff2fa623c2c4eab1c6673dfaf08b3b01220fd00c9edd5966e1162049f6d1e4fe5af280f491850
 SHA512 
8d07c9351b75faf90a137f65c2e6147d884744c5ab9b0bacadfa7bdc7b66ec2ec92920c7d23396bb70f7f4fb290f3f818591f23c6a4e91ab1a79290cb4ea1533

diff --git a/sci-libs/tensorflow/tensorflow-2.2.0.ebuild 
b/sci-libs/tensorflow/tensorflow-2.2.0-r1.ebuild
similarity index 98%
rename from sci-libs/tensorflow/tensorflow-2.2.0.ebuild
rename to sci-libs/tensorflow/tensorflow-2.2.0-r1.ebuild
index 7abd3707e97..cefe66efeca 100644
--- a/sci-libs/tensorflow/tensorflow-2.2.0.ebuild
+++ b/sci-libs/tensorflow/tensorflow-2.2.0-r1.ebuild
@@ -85,12 +85,13 @@ RDEPEND="
mpi? ( virtual/mpi )
python? (
${PYTHON_DEPS}
-   >=dev-libs/flatbuffers-1.8.0
+   >=dev-libs/flatbuffers-1.12.0
dev-python/absl-py[${PYTHON_USEDEP}]
>=dev-python/astor-0.7.1[${PYTHON_USEDEP}]
dev-python/astunparse[${PYTHON_USEDEP}]
>=dev-python/gast-0.3.3[${PYTHON_USEDEP}]
-   >=dev-python/numpy-1.16[${PYTHON_USEDEP}]
+   dev-python/h5py[${PYTHON_USEDEP}]
+   >=dev-python/numpy-1.19[${PYTHON_USEDEP}]
>=dev-python/google-pasta-0.1.8[${PYTHON_USEDEP}]
dev-python/opt-einsum[${PYTHON_USEDEP}]
>=dev-python/protobuf-python-3.8.0[${PYTHON_USEDEP}]
@@ -101,7 +102,7 @@ RDEPEND="
>=net-libs/google-cloud-cpp-0.10.0
>=sci-libs/keras-applications-1.0.8[${PYTHON_USEDEP}]
>=sci-libs/keras-preprocessing-1.1.0[${PYTHON_USEDEP}]
-   >=sci-visualization/tensorboard-2.0.0[${PYTHON_USEDEP}]
+   >=sci-visualization/tensorboard-2.2.0[${PYTHON_USEDEP}]
)"
 DEPEND="${RDEPEND}
python? (
@@ -109,7 +110,7 @@ DEPEND="${RDEPEND}
dev-python/setuptools
)"
 PDEPEND="python? (
-   >=sci-libs/tensorflow-estimator-2.0.0[${PYTHON_USEDEP}]
+   >=sci-libs/tensorflow-estimator-2.2.0[${PYTHON_USEDEP}]
)"
 BDEPEND="
app-arch/unzip



  1   2   3   4   5   6   7   8   9   10   >