[SM-Commit] GIT changes to master grimoire by Jaka Kranjc (edce5d1279eb1c51fbb44be4117a2e0806c47dee)

Jaka Kranjc scm at mail.sourcemage.org
Wed Oct 18 09:51:50 EDT 2006


GIT changes to master grimoire by Jaka Kranjc <lynxlynxlynx at sourcemage.org>:

 security/usr-systrace/BUILD                  |    5 ++---
 security/usr-systrace/DETAILS                |   18 +++++++++---------
 security/usr-systrace/FINAL                  |    5 +++++
 security/usr-systrace/HISTORY                |    8 ++++++++
 security/usr-systrace/POST_INSTALL           |    5 -----
 security/usr-systrace/PRE_BUILD              |    3 +++
 security/usr-systrace/provos.gpg             |binary
 security/usr-systrace/systrace-regress.patch |   14 ++++++++++++++
 8 files changed, 41 insertions(+), 17 deletions(-)

New commits:
commit 8521b8cb81b082d301f8310d0fcf4fe0d97c8473
Author: Jaka Kranjc <lynxlynxlynx at sourcemage.org>
Commit: Jaka Kranjc <lynxlynxlynx at sourcemage.org>

    usr-systrace: big update and cleanup, fixes #4197

diff --git a/security/usr-systrace/BUILD b/security/usr-systrace/BUILD
index f881e01..85108c2 100755
--- a/security/usr-systrace/BUILD
+++ b/security/usr-systrace/BUILD
@@ -1,3 +1,2 @@
-sedit  's:netbsd-syscalls.c::'  Makefile.in  &&
-
-default_build
\ No newline at end of file
+LDFLAGS="${LDFLAGS/-s}"
+default_build
diff --git a/security/usr-systrace/DETAILS b/security/usr-systrace/DETAILS
index 8608a5d..761c79a 100755
--- a/security/usr-systrace/DETAILS
+++ b/security/usr-systrace/DETAILS
@@ -1,16 +1,16 @@
-        PKG_NAME=systrace  
-	   SPELL=usr-${PKG_NAME}
-         VERSION=2004-01-01
-	 PKG_VER=1.5
-          SOURCE=${SPELL}-${VERSION}.tar.gz
-SOURCE_DIRECTORY=${BUILD_DIRECTORY}/${PKG_NAME}-${PKG_VER}
-   SOURCE_URL[0]=http://www.citi.umich.edu/u/provos/${PKG_NAME}/${SOURCE}
-     SOURCE_HASH=sha512:d9e52a40845ac22cb7491ac8a9286edbed449bf3e0407ddc10c268547295ae4925a448b35234b1f477845888e6b3ade17c4769936ac2e5c015109d42ed5cfdb5
+	   SPELL=usr-systrace
+         VERSION=1.6d
+          SOURCE=${SPELL/usr-}-${VERSION}.tar.gz
+          SOURCE2=$SOURCE.sig
+SOURCE_DIRECTORY=${BUILD_DIRECTORY}/systrace-$VERSION
+   SOURCE_URL[0]=http://www.citi.umich.edu/u/provos/systrace/$SOURCE
+   SOURCE2_URL[0]=${SOURCE_URL[0]}.sig
+      SOURCE_GPG="provos.gpg:$SOURCE.sig:UPSTREAM_KEY"
+  SOURCE2_IGNORE=signature
       LICENSE[0]=BSD
          ENTERED=20030728
         WEB_SITE=http://www.citi.umich.edu/u/provos/systrace/
         KEYWORDS="security"
-       BUILD_API=1
            SHORT="Current snapshot of systrace userland."
 cat << EOF
 Systrace enforces system call policies for applications by 
diff --git a/security/usr-systrace/FINAL b/security/usr-systrace/FINAL
new file mode 100755
index 0000000..cb473ed
--- /dev/null
+++ b/security/usr-systrace/FINAL
@@ -0,0 +1,5 @@
+message "$MESSAGE_COLOR"
+message "Since 1.6d systrace can run without kernel changes using the ptrace "
+message "backend. Otherwise you need the systrace kernel patch from:"
+message "http://www.citi.umich.edu/u/provos/systrace/linux.html"
+message "$DEFAULT_COLOR" 
diff --git a/security/usr-systrace/HISTORY b/security/usr-systrace/HISTORY
index 3e2b5af..6a47a10 100644
--- a/security/usr-systrace/HISTORY
+++ b/security/usr-systrace/HISTORY
@@ -1,3 +1,11 @@
+2006-10-17 Jaka Kranjc <lynxlynxlynx at sourcemage.org>
+	* converted to build api 2
+	* POST_INSTALL -> FINAL: updated message
+	* DETAILS: updated to 1.6d, use upstream gpg sig; fixes #4197
+	* provos.gpg: added
+	* systrace-regress.patch, PRE_BUILD: gentoo patch fixing a regression test
+	* BUILD: removed a sedit and disabled stripping (needed for the above test)
+
 2006-10-03 Juuso Alasuutari <iuso at sourcemage.org>
 	* DETAILS: [automated] Removed UPDATED.
 
diff --git a/security/usr-systrace/POST_INSTALL b/security/usr-systrace/POST_INSTALL
deleted file mode 100755
index 5517e37..0000000
--- a/security/usr-systrace/POST_INSTALL
+++ /dev/null
@@ -1,5 +0,0 @@
-
- message  ""
- message  " This userland utilities doesn't have sense without :"
- message  "   systrace kernel patch - http://www.citi.umich.edu/u/provos/systrace/linux.html"
- message  "" 
\ No newline at end of file
diff --git a/security/usr-systrace/PRE_BUILD b/security/usr-systrace/PRE_BUILD
new file mode 100755
index 0000000..6beef07
--- /dev/null
+++ b/security/usr-systrace/PRE_BUILD
@@ -0,0 +1,3 @@
+default_pre_build &&
+cd $SOURCE_DIRECTORY &&
+patch -p1 < $SPELL_DIRECTORY/systrace-regress.patch
diff --git a/security/usr-systrace/provos.gpg b/security/usr-systrace/provos.gpg
new file mode 100644
index 0000000..4897bd9
Binary files /dev/null and b/security/usr-systrace/provos.gpg differ
diff --git a/security/usr-systrace/systrace-regress.patch b/security/usr-systrace/systrace-regress.patch
new file mode 100644
index 0000000..2ec3f4d
--- /dev/null
+++ b/security/usr-systrace/systrace-regress.patch
@@ -0,0 +1,14 @@
+--- systrace-1.6d/regress/regress.sh	2006-03-24 04:17:16.000000000 +0100
++++ systrace-1.6d-regress_patch/regress/regress.sh	2006-04-18 00:43:48.000000000 +0200
+@@ -12,8 +12,9 @@ for POL in *.policy.$OS; do
+ 	fi
+ 
+ 	echo -n "$PROG:"
+-	SYSTR_RES=`eval ../systrace -f $POL -a $PROG $ARGS 2>/dev/null`
+-	# echo -e "\t(../systrace -f $POL -a $PROG $ARGS)"
++	SYSTR_POL=`eval ../systrace -t -d . -A $PROG $ARGS 2>/dev/null`
++	SYSTR_RES=`eval ../systrace -t -d . -a $PROG $ARGS 2>/dev/null`
++	echo -e "\t(../systrace -f $POL.learn -a $PROG $ARGS)"
+ 	NORM_RES=`$PROG $ARGS`
+ 
+ 	if [ -z "$SYSTR_RES" ] ; then



More information about the SM-Commit mailing list