add a pile of new selinux profiles

9 files changed, 254 insertions, 0 deletions

diff --git a/profiles/selinux/alpha/2006.1/make.defaults b/profiles/selinux/alpha/2006.1/make.defaults
new file mode 100644
index 000000000000..e6bf241473ae
--- /dev/null
+++ b/profiles/selinux/alpha/2006.1/make.defaults
@@ -0,0 +1,9 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/alpha/2006.1/make.defaults,v 1.1 2006/10/08 18:37:25 pebenito Exp $
+
+# This is currently commented so that the stage1 tarball can also be used to
+# build no-nptl systems.
+#STAGE1_USE="nptl"
+
+USE="alsa apache2 arts avi bitmap-fonts cups eds encode esd fortran foomaticdb gdbm gif gnome gpm gstreamer gtk gtk2 imlib jpeg kde libg++ libwww mad mikmod motif mp3 mpeg nptl nptlonly ogg opengl oss pdflib png qt qt3 qt4 quicktime sdl spell truetype truetype-fonts type1-fonts udev vorbis X xml xmms xv"
diff --git a/profiles/selinux/alpha/2006.1/packages b/profiles/selinux/alpha/2006.1/packages
new file mode 100644
index 000000000000..87454ca1d51e
--- /dev/null
+++ b/profiles/selinux/alpha/2006.1/packages
@@ -0,0 +1,17 @@
+# Copyright 2001-2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/alpha/2006.1/packages,v 1.1 2006/10/08 18:37:25 pebenito Exp $
+
+# For instructions on how this file works (as an inclusion mask, primarily),
+# please refer to ${PORTDIR}/profiles/base/packages
+
+# Use this file to lock down specific versions of packages ONLY TO THIS
+# SPECIFIC PROFILE!
+
+# You can also add files to the base system itself if you prefix them with a
+# *
+
+>=sys-apps/baselayout-1.11.12-r4
+>=sys-devel/binutils-2.15.90.0.3-r4
+>=sys-devel/gcc-3.3.4-r1
+>=sys-libs/glibc-2.3.3.20040420-r1
diff --git a/profiles/selinux/alpha/2006.1/parent b/profiles/selinux/alpha/2006.1/parent
new file mode 100644
index 000000000000..f3229c5b9876
--- /dev/null
+++ b/profiles/selinux/alpha/2006.1/parent
@@ -0,0 +1 @@
+..
diff --git a/profiles/selinux/alpha/make.defaults b/profiles/selinux/alpha/make.defaults
new file mode 100644
index 000000000000..a3bfb6a4525c
--- /dev/null
+++ b/profiles/selinux/alpha/make.defaults
@@ -0,0 +1,14 @@
+# Copyright 1999-2005 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/alpha/make.defaults,v 1.1 2006/10/08 18:37:25 pebenito Exp $
+
+ARCH="alpha"
+ACCEPT_KEYWORDS="alpha"
+
+CHOST="alpha-unknown-linux-gnu"
+CFLAGS="-O2 -pipe"
+CXXFLAGS="${CFLAGS}"
+
+FEATURES="sandbox sfperms"
+
+USE="berkdb crypt ipv6 ncurses nls pam python readline ssl tcpd zlib"
diff --git a/profiles/selinux/alpha/package.mask b/profiles/selinux/alpha/package.mask
new file mode 100644
index 000000000000..e4c5c1d003e5
--- /dev/null
+++ b/profiles/selinux/alpha/package.mask
@@ -0,0 +1,19 @@
+# Jose Luis Rivero <yoswink@gentoo.org> (7 Jul 2006)
+# Masked by lost of virtual java/{jdk,jre} providers see Bug #138747
+# also compaq java is dead upstream and buggy: Bug #84306, and others.
+dev-java/compaq-jdk
+dev-java/compaq-jre
+app-arch/dczip
+app-misc/jitac
+app-misc/openjnlp
+dev-tex/ppower4
+net-p2p/xnap
+dev-util/jarwizard
+
+# Thomas Cort <tcort@gentoo.org> (10 Jun 2006)
+# Masked for security Bug #134792 ; latest version broken
+net-p2p/amule
+
+# Thomas Cort <tcort@gentoo.org> (02 Jun 2006)
+# Masked for security Bug #130888 ; all other versions are broken, Bug #131359.
+mail-client/mozilla-thunderbird
diff --git a/profiles/selinux/alpha/packages b/profiles/selinux/alpha/packages
new file mode 100644
index 000000000000..8072fcb60054
--- /dev/null
+++ b/profiles/selinux/alpha/packages
@@ -0,0 +1,29 @@
+# Copyright 2001-2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/alpha/packages,v 1.1 2006/10/08 18:37:25 pebenito Exp $
+
+# For instructions on how this file works (as an inclusion mask, primarily),
+# please refer to ${PORTDIR}/profiles/base/packages
+
+# Use this file to lock down specific versions of packages ONLY TO THIS
+# SPECIFIC ARCHITECTURE!!
+
+# You can also add files to the base system itself if you prefix them with a
+# *
+
+>=sys-devel/binutils-2.13.90.0.4
+>=sys-devel/gcc-3.2
+>=sys-libs/glibc-2.2.5-r7
+
+##############################################################################
+# SELinux required versionings
+
+>=sys-libs/libsepol-1.12.28
+>=sys-libs/libselinux-1.30.29
+>=sys-libs/libsemanage-1.6.17
+>=sys-apps/policycoreutils-1.30.30
+>=sys-apps/checkpolicy-1.30.12
+
+>=sec-policy/selinux-base-policy-20060101
+
+##############################################################################
diff --git a/profiles/selinux/alpha/parent b/profiles/selinux/alpha/parent
new file mode 100644
index 000000000000..f3229c5b9876
--- /dev/null
+++ b/profiles/selinux/alpha/parent
@@ -0,0 +1 @@
+..
diff --git a/profiles/selinux/alpha/use.mask b/profiles/selinux/alpha/use.mask
new file mode 100644
index 000000000000..824a49d458fe
--- /dev/null
+++ b/profiles/selinux/alpha/use.mask
@@ -0,0 +1,157 @@
+# Copyright 2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/alpha/use.mask,v 1.1 2006/10/08 18:37:25 pebenito Exp $
+
+# This file masks out USE flags that are simply NOT allowed in the default
+# profile for any architecture.  This works, for example, if a non-default
+# profile (such as the selinux profiles) have a USE flag associated with
+# them.
+
+# These are debatable, since technically an alpha could support this hardware
+pcmcia
+3dfx
+
+# avifile is broken atm
+avi
+
+# No hardware to test (unmask when tested)
+pda
+upnp
+
+# No apm support on alpha
+apm
+
+# alpha doesn't have java support other than compaq-j*, which isn't a
+# current version.  must mask this to keep things sane
+java
+java-internal
+java-external
+
+# firebird appears to be x86-only (the db, not the browser)
+firebird
+
+# tcc is x86-only
+tcc
+
+# I don't think that openafs really works on other architectures,
+# despite some internal Gentoo efforts (mine) to port it
+afs
+
+# see email to gentoo-dev with subject "use.mask and PHP5's crazy IUSE"
+# Dated Sat, 31 Jul 2004 14:49:28 -0700, from robbat2@gentoo.org
+# all of these are binary-only, and not presently available on this
+# architecture.
+adabas
+birdstep
+cpdflib
+db2
+dbmaker
+empress
+empress-bcs
+esoob
+filepro
+frontbase
+hyperwave
+informix
+ingres
+oracle7
+oci8
+pfpro
+solid
+sybase
+sybase-ct
+
+hardened
+hal
+howl
+jack
+freetts
+djbfft
+lm_sensors
+
+gnustep
+
+emboss
+
+# Mask vpopmail until net-mail/vpopmail goes out of package.mask
+vpopmail
+
+# Mask pyste until gccxml / elementtree work on alpha
+pyste
+
+# Mask mono until ported to alpha
+mono
+
+# RDEPEND on mono
+beagle
+
+# can't test wireless currently
+wifi
+
+# dbus is not currently supported by alpha
+dbus
+dmi
+
+# apache segfaults when using mpm-peruser (bug 105778)
+mpm-peruser
+
+pike
+
+fdftk
+
+timidity
+
+# We don't have any virtual/mpi (bug 111807)
+mpi
+
+# masks required for asterisk
+bri
+pri
+zaptel
+
+# Modular X: mask non-alpha cards
+video_cards_apm
+video_cards_ark
+video_cards_chips
+video_cards_cyrix
+video_cards_i128
+video_cards_i740
+video_cards_i810
+video_cards_imstt
+video_cards_neomagic
+video_cards_newport
+video_cards_nsc
+video_cards_sis
+video_cards_trident
+video_cards_tseng
+video_cards_vesa
+video_cards_via
+
+# Needed for vim-7
+mzscheme
+netbeans
+
+# No go in Alpha
+nvtv
+
+# dspam and dspam-web use this one
+# We've never supported cyrus-imapd because nobody asked for
+cyrus
+
+# Masked until firefox is removed from package.mask
+# See security Bug #135254 ; all other versions are broken, Bug #128777.
+firefox
+
+# Masked until qt4 is keyworded, see Bug #128411 (re-keyword poppler-bindings)
+# Remove once Bug #112811 (keyword qt4) is resolved
+qt4
+
+# Masked until bmpx works and is re-keyworded, see Bug #111975
+bmpx
+
+# Paludis-0.6's QA tools need pcre++ which doesn't yet work
+qa
+
+# disable until tested
+# # bug 148402
+pcsc-lite
diff --git a/profiles/selinux/alpha/virtuals b/profiles/selinux/alpha/virtuals
new file mode 100644
index 000000000000..84b7b6246633
--- /dev/null
+++ b/profiles/selinux/alpha/virtuals
@@ -0,0 +1,7 @@
+# Copyright 2004 Gentoo Foundation.
+# Distributed under the terms of the GNU General Public License, v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/selinux/alpha/virtuals,v 1.1 2006/10/08 18:37:25 pebenito Exp $
+
+virtual/alsa				sys-kernel/vanilla-sources
+virtual/bootloader			sys-boot/aboot
+virtual/linux-sources		sys-kernel/vanilla-sources