modified: ts/TS_ENV

modified:   ts/bin/bt
	modified:   ts/bin/install_chroot
	modified:   ts/bin/repackage
	modified:   ts/build/kernel/dependencies_package/docker
	new file:   ts/build/kernel/dependencies_package/ebtables-services
	modified:   ts/build/kernel/dependencies_package/nftables
	modified:   ts/build/packages/alternatives/.dna
	modified:   ts/build/packages/alternatives/.unwind
	modified:   ts/build/packages/alternatives/.wind
	modified:   ts/build/packages/base/etc/ashrc
	modified:   ts/build/packages/base/etc/profile
	new file:   ts/build/packages/base/etc/skel/.gitignore
	modified:   ts/build/packages/base/sbin/session
	modified:   ts/build/packages/bash/etc/profile.d/lscolors.sh
	new file:   ts/build/packages/bridge-utils/.dna
	new file:   ts/build/packages/bridge-utils/.unwind
	new file:   ts/build/packages/bridge-utils/.wind
	new file:   ts/build/packages/bridge-utils/build/install
	new file:   ts/build/packages/bridge-utils/build/remove
	new file:   ts/build/packages/bridge-utils/dependencies
	new file:   ts/build/packages/docker/.dna
	new file:   ts/build/packages/docker/.unwind
	new file:   ts/build/packages/docker/.wind
	new file:   ts/build/packages/docker/build/extra/etc/sysctl.d/80-docker
	new file:   ts/build/packages/docker/build/extra/etc/systemd/system/containerd.service.d/overrides.conf
	new file:   ts/build/packages/docker/build/extra/etc/systemd/system/docker.service.d/overrides.conf
	new file:   ts/build/packages/docker/build/finalize
	new file:   ts/build/packages/docker/build/install
	new file:   ts/build/packages/docker/build/remove
	new file:   ts/build/packages/docker/dependencies
	new file:   ts/build/packages/ebtables-services/.dna
	new file:   ts/build/packages/ebtables-services/.unwind
	new file:   ts/build/packages/ebtables-services/.wind
	new file:   ts/build/packages/ebtables-services/build/extra/etc/systemd/system/ebtables.service.d/overrides.conf
	new file:   ts/build/packages/ebtables-services/build/finalize
	new file:   ts/build/packages/ebtables-services/build/install
	new file:   ts/build/packages/ebtables-services/build/remove
	new file:   ts/build/packages/ebtables-services/dependencies
	modified:   ts/build/packages/firewalld/build/install
	modified:   ts/build/packages/firewalld/dependencies
	new file:   ts/build/packages/glib2/.dna
	new file:   ts/build/packages/glib2/.unwind
	new file:   ts/build/packages/glib2/.wind
	new file:   ts/build/packages/glib2/build/install
	new file:   ts/build/packages/glib2/build/remove
	new file:   ts/build/packages/glib2/dependencies
	modified:   ts/build/packages/gtk-3.0/build/install
	modified:   ts/build/packages/gtk-3.0/dependencies
	new file:   ts/build/packages/iproute/.dna
	new file:   ts/build/packages/iproute/.unwind
	new file:   ts/build/packages/iproute/.wind
	new file:   ts/build/packages/iproute/build/install
	new file:   ts/build/packages/iproute/build/remove
	new file:   ts/build/packages/iproute/dependencies
	modified:   ts/build/packages/nftables/build/finalize
	modified:   ts/build/packages/nftables/build/install
	modified:   ts/build/packages/nftables/dependencies
	modified:   ts/build/packages/selinux/build/finalize
	modified:   ts/rpms/system
This commit is contained in:
Donald A. Cupp Jr. 2025-03-07 12:28:58 -06:00
parent 50f752b737
commit be57ce9797
60 changed files with 259 additions and 119 deletions

View file

@ -13,6 +13,7 @@ export PATH
export PAGER=most
#export XZ_OPT="--threads=0"
export MACHTYPE=x86_64-pc-linux-gnu
export CFLAGS="-Wno-error=incompatible-pointer-types"
if [ -n "$chuser" ]; then
export HOME=/home/$chuser
else

View file

@ -1,5 +1,9 @@
#!/bin/bash
set -x
start=$PWD
self="$0"
self_path="`echo $0 |sed -e 's|ts/bin/bt||g'`"
cd "$self_path"
#set -e
setup_qemu()
@ -163,3 +167,4 @@ case $1 in
echo "Exit code $?"
;;
esac
cd "$start"

View file

@ -3,14 +3,14 @@
# URL: http://www.thinstation.org
# Maintainer: Donald A. Cupp Jr. (don cupp jr at ya hoo dot com)
core_ports="`cat ts/rpms/core |sed ':a;N;$!ba;s/\n/ /g'`"
grub_ports="`cat ts/rpms/grub |sed ':a;N;$!ba;s/\n/ /g'`"
kernel_ports="`cat ts/rpms/kernel |sed ':a;N;$!ba;s/\n/ /g'`"
firmware_ports="`cat ts/rpms/firmware |sed ':a;N;$!ba;s/\n/ /g'`"
system_ports="`cat ts/rpms/system |sed ':a;N;$!ba;s/\n/ /g'`"
ts_ports="`cat ts/rpms/ts |sed ':a;N;$!ba;s/\n/ /g'`"
core_ports="`grep -v '^\s*#' ts/rpms/core |sed ':a;N;$!ba;s/\n/ /g'`"
grub_ports="`grep -v '^\s*#' ts/rpms/grub |sed ':a;N;$!ba;s/\n/ /g'`"
kernel_ports="`grep -v '^\s*#' ts/rpms/kernel |sed ':a;N;$!ba;s/\n/ /g'`"
firmware_ports="`grep -v '^\s*#' ts/rpms/firmware |sed ':a;N;$!ba;s/\n/ /g'`"
system_ports="`grep -v '^\s*#' ts/rpms/system |sed ':a;N;$!ba;s/\n/ /g'`"
ts_ports="`grep -v '^\s*#' ts/rpms/ts |sed ':a;N;$!ba;s/\n/ /g'`"
if [ -e ts/rpms/other ]; then
other_ports="`cat ts/rpms/other |sed ':a;N;$!ba;s/\n/ /g'`"
other_ports="`grep -v '^\s*#' ts/rpms/other |sed ':a;N;$!ba;s/\n/ /g'`"
fi
stage1()

View file

@ -94,6 +94,7 @@ extract_scripts()
# Append script content, skipping the header line
sed '1d' "$file" >> "$output_file"
rm "$file" # Clean up temporary split file
sed -i 's/^\s*exit\s\+0\s*$/:/g' "$output_file"
done
if [ -z "`ls -A $pkgpath/build/scripts`" ]; then
rmdir $pkgpath/build/scripts

View file

@ -11,3 +11,21 @@ autofs4
nf_conntrack_netlink
overlay
veth
ip_set
ip_set_bitmap_ip
ip_set_bitmap_ipmac
ip_set_bitmap_port
ip_set_hash_ip
ip_set_hash_ipmac
ip_set_hash_ipmark
ip_set_hash_ipport
ip_set_hash_ipportip
ip_set_hash_ipportnet
ip_set_hash_mac
ip_set_hash_net
ip_set_hash_netiface
ip_set_hash_netnet
ip_set_hash_netport
ip_set_hash_netportnet
ip_set_list_set
em_ipset

View file

@ -0,0 +1,24 @@
ebt_802_3
ebt_among
ebt_arp
ebt_arpreply
ebt_dnat
ebt_ip
ebt_ip6
ebt_limit
ebt_log
ebt_mark
ebt_mark_m
ebt_nflog
ebt_pkttype
ebt_redirect
ebt_snat
ebt_stp
ebt_vlan
ebtable_broute
ebtable_filter
ebtable_nat
ebtables
nf_conntrack_bridge
nft_meta_bridge
nft_reject_bridge

View file

@ -162,3 +162,28 @@ xt_string
xt_tcpmss
xt_time
xt_u32
arp_tables
arpt_mangle
arptable_filter
ip_tables
ipt_ECN
ipt_REJECT
ipt_SYNPROXY
ipt_ah
ipt_rpfilter
iptable_filter
iptable_mangle
iptable_nat
iptable_raw
iptable_security
nf_defrag_ipv4
nf_dup_ipv4
nf_nat_h323
nf_nat_pptp
nf_nat_snmp_basic
nf_reject_ipv4
nf_socket_ipv4
nf_tproxy_ipv4
nft_dup_ipv4
nft_fib_ipv4
nft_reject_ipv4

View file

@ -0,0 +1 @@
coreutils,readlink,0,0,build/extra/bin,1,,,,,,,,,

View file

@ -1,2 +1,4 @@
#d41d8cd98f00b204e9800998ecf8427e .dna
#fa6185ec6316a08a6032fec2535e51c5 .dna
mkdir -p /ts/build/packages/alternatives/build/extra/bin
ln /usr/bin/readlink /ts/build/packages/alternatives/build/extra/bin/readlink

View file

@ -1,2 +1,3 @@
#d41d8cd98f00b204e9800998ecf8427e .dna
#fa6185ec6316a08a6032fec2535e51c5 .dna
rm /ts/build/packages/alternatives/build/extra/bin/readlink

View file

@ -74,7 +74,7 @@ set_proxy()
get_gnome_proxy
set_proxy
if ! readlink /bin/ls |grep -e busybox; then
if ! readlink /bin/ls |grep -qe busybox; then
export LS_COLORS='rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.cmd=01;32:*.exe=01;32:*.com=01;32:*.btm=01;32:*.bat=01;32:*.conf=01;33:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.axa=00;36:*.oga=00;36:*.spx=00;36:*.xspf=00;36:'
alias ls='ls --color=auto'
fi

View file

@ -9,7 +9,7 @@ else
umask 022
fi
if ! readlink /bin/ls |grep -e busybox; then
if ! readlink /bin/ls |grep -qe busybox; then
export LS_COLORS='rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.cmd=01;32:*.exe=01;32:*.com=01;32:*.btm=01;32:*.bat=01;32:*.conf=01;33:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.axa=00;36:*.oga=00;36:*.spx=00;36:*.xspf=00;36:'
alias ls='ls --color=auto'
fi

View file

View file

@ -31,12 +31,14 @@ if [ "$1" == "open" ]; then
umask 027
mkdir -p $HOME
IFS=$'\n'
for file in `find /etc/skel |cut -d '/' -f4-`; do
if ! [ -e $HOME/"$file" ]; then
mkdir -p $HOME/"`dirname $file`"
cp -a /etc/skel/"$file" $HOME/"$file"
fi
done
if [ -d /etc/skel ]; then
for file in `find /etc/skel |cut -d '/' -f4-`; do
if ! [ -e $HOME/"$file" ]; then
mkdir -p $HOME/"`dirname $file`"
cp -a /etc/skel/"$file" $HOME/"$file"
fi
done
fi
unset IFS
chown -R "$TSUSER:`id -gn $TSUSER`" $HOME
chmod 2700 $HOME

View file

@ -1,4 +1,4 @@
if ! readlink /bin/ls |grep -e busybox; then
if ! readlink /bin/ls |grep -qe busybox; then
export LS_COLORS='rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.cmd=01;32:*.exe=01;32:*.com=01;32:*.btm=01;32:*.bat=01;32:*.conf=01;33:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.axa=00;36:*.oga=00;36:*.spx=00;36:*.xspf=00;36:'
alias ls='ls --color=auto'
fi

View file

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,12 @@
#!/bin/sh
export PACKAGE="bridge-utils"
export PORTS="bridge-utils"
export DROP_FILES=""
export DROP_DIRS=""
export CREATE_EMPTY_DIRS=""
repackage -e
returnval=$?
exit $returnval

View file

@ -0,0 +1,5 @@
#!/bin/sh
export PACKAGE=bridge-utils
repackage -c

View file

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1 @@
net.ipv4.ip_forward = 1

View file

@ -0,0 +1,6 @@
[Unit]
After=tsinit.target
[Install]
WantedBy=
WantedBy=tsinit.target

View file

@ -0,0 +1,6 @@
[Unit]
After=tsinit.target
[Install]
WantedBy=
WantedBy=tsinit.target

View file

@ -0,0 +1,10 @@
#docker 90
. /build/scripts/container-selinux_postinstall.sh 1
. /build/scripts/containerd_postinstall.sh 1
. /build/scripts/memcached-selinux_preinstall.sh 1
. /build/scripts/moby-engine_preinstall.sh 1
. /build/scripts/passt-selinux_preinstall.sh 1
. /build/scripts/container-selinux_preinstall.sh 1
. /build/scripts/memcached-selinux_postinstall.sh 1
. /build/scripts/moby-engine_postinstall.sh 1
. /build/scripts/passt-selinux_postinstall.sh 1

View file

@ -0,0 +1,12 @@
#!/bin/sh
export PACKAGE="docker"
export PORTS="docker-cli docker-buildx docker-compose docker-compose-switch checkpolicy container-selinux containerd memcached-selinux moby-filesystem passt-selinux policycoreutils-python-utils python3-audit python3-libselinux python3-libsemanage python3-policycoreutils python3-setools rpm-plugin-selinux runc tini-static moby-engine moby-engine-nano"
export DROP_FILES=""
export DROP_DIRS=""
export CREATE_EMPTY_DIRS=""
repackage -e
returnval=$?
exit $returnval

View file

@ -0,0 +1,5 @@
#!/bin/sh
export PACKAGE=docker
repackage -c

View file

@ -0,0 +1,5 @@
nftables
selinux
bridge-utils
iproute
ebtables-services

View file

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,6 @@
[Unit]
After=tsinit.target
[Install]
WantedBy=
WantedBy=tsinit.target

View file

@ -0,0 +1,4 @@
#ebtables 75
. /build/scripts/ebtables-legacy_postinstall.sh 1
. /build/scripts/ebtables-services_postinstall.sh 1

View file

@ -0,0 +1,12 @@
#!/bin/sh
export PACKAGE="ebtables-services"
export PORTS="ebtables-services ebtables-legacy"
export DROP_FILES=""
export DROP_DIRS=""
export CREATE_EMPTY_DIRS=""
repackage -e
returnval=$?
exit $returnval

View file

@ -0,0 +1,5 @@
#!/bin/sh
export PACKAGE=ebtables-services
repackage -c

View file

@ -1,7 +1,7 @@
#!/bin/sh
export PACKAGE="firewalld"
export PORTS="firewalld firewall-config firewalld-filesystem ipset ipset-libs libcap-ng-python3 python3-firewall python3-nftables"
export PORTS="firewalld firewall-config firewalld-filesystem ipset ipset-libs libcap-ng-python3 python3-firewall python3-nftables libnfnetlink libnetfilter_conntrack"
export DROP_FILES=""
export DROP_DIRS="lib64/rpm"
export CREATE_EMPTY_DIRS=""

View file

@ -1,3 +1,4 @@
python3
gobject-introspection
nftables
glib2

View file

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,12 @@
#!/bin/sh
export PACKAGE="glib2"
export PORTS="glib2"
export DROP_FILES=""
export DROP_DIRS=""
export CREATE_EMPTY_DIRS=""
repackage -e
returnval=$?
exit $returnval

View file

@ -0,0 +1,5 @@
#!/bin/sh
export PACKAGE=glib2
repackage -c

View file

View file

@ -1,7 +1,7 @@
#!/bin/sh
export PACKAGE=gtk-3.0
export PORTS="gtk3 gtk3-immodules dconf glib2"
export PORTS="gtk3 gtk3-immodules dconf"
#export DROP_FILES="gtk-query-immodules-3.0 gtk3-demo gtk3-demo-application gtk3-widget-factory gsettings-data-convert gtk-builder-tool gtk-encode-symbolic-svg gtk3-icon-browser broadwayd"
export DROP_DIRS=""
repackage -e

View file

@ -1,2 +1,3 @@
base
gtk-engines
glib2

View file

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,2 @@
#d41d8cd98f00b204e9800998ecf8427e .dna

View file

@ -0,0 +1,12 @@
#!/bin/sh
export PACKAGE="iproute"
export PORTS="iproute"
export DROP_FILES=""
export DROP_DIRS=""
export CREATE_EMPTY_DIRS=""
repackage -e
returnval=$?
exit $returnval

View file

@ -0,0 +1,5 @@
#!/bin/sh
export PACKAGE=iproute
repackage -c

View file

View file

@ -1,2 +1,5 @@
#nftables 60
#systemctl enable nftables
. /build/scripts/nftables_postinstall.sh 1
. /build/scripts/iptables-nft_postinstall.sh 1
. /build/scripts/iptables-legacy_postinstall.sh 1

View file

@ -1,7 +1,7 @@
#!/bin/sh
export PACKAGE="nftables"
export PORTS="nftables"
export PORTS="nftables iptables-legacy iptables-libs"
export DROP_FILES=""
export DROP_DIRS=""
export CREATE_EMPTY_DIRS=""

View file

@ -1 +1,2 @@
firewalld
alternatives

View file

@ -1,98 +1,5 @@
#selinux 90
if [ "$1" == "1" ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then
# Initial installation
/usr/lib/systemd/systemd-update-helper install-system-units selinux-check-proper-disable.service || :
fi
if [ ! -s /etc/selinux/config ]; then
#
# New install so we will default to targeted policy
#
echo "
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
# See also:
# https://docs.fedoraproject.org/en-US/quick-docs/getting-started-with-selinux/#getting-started-with-selinux-selinux-states-and-modes
#
# NOTE: In earlier Fedora kernel builds, SELINUX=disabled would also
# fully disable SELinux during boot. If you need a system with SELinux
# fully disabled instead of SELinux running with no policy loaded, you
# need to pass selinux=0 to the kernel command line. You can use grubby
# to persistently set the bootloader to boot with selinux=0:
#
# grubby --update-kernel ALL --args selinux=0
#
# To revert back to SELinux enabled:
#
# grubby --update-kernel ALL --remove-args selinux
#
SELINUX=permissive
#SELINUX=enforcing
# SELINUXTYPE= can take one of these three values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
SELINUXTYPE=targeted
" > /etc/selinux/config
# ln -sf ../selinux/config /etc/sysconfig/selinux
/usr/sbin/restorecon /etc/selinux/config 2> /dev/null || :
else
. /etc/selinux/config
fi
if [ "$1" == "1" ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then
# Initial installation
/usr/lib/systemd/systemd-update-helper install-system-units selinux-autorelabel-mark.service || :
fi
if [ "$1" != "1" ] && [ -s /etc/selinux/config ]; then
for MOD_NAME in ganesha ipa_custodia kdbus; do
if [ -d /var/lib/selinux/targeted/active/modules/100/$MOD_NAME ]; then
/usr/sbin/semodule -n -d $MOD_NAME 2> /dev/null;
fi;
done;
. /etc/selinux/config;
FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts;
if [ "${SELINUXTYPE}" = targeted -a -f ${FILE_CONTEXT} ]; then
[ -f ${FILE_CONTEXT}.pre ] || cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.pre;
fi;
touch /etc/selinux/targeted/.rebuild;
if [ -e /etc/selinux/targeted/.policy.sha512 ]; then
POLICY_FILE=`ls /etc/selinux/targeted/policy/policy.* | sort | head -1`
sha512=`sha512sum $POLICY_FILE | cut -d ' ' -f 1`;
checksha512=`cat /etc/selinux/targeted/.policy.sha512`;
if [ "$sha512" == "$checksha512" ] ; then
rm /etc/selinux/targeted/.rebuild;
fi;
fi;
fi;
if [ -f /etc/selinux/.config_backup ]; then
. /etc/selinux/.config_backup;
else
BACKUP_SELINUXTYPE=targeted;
fi;
if [ -s /etc/selinux/config ]; then
. /etc/selinux/config;
if ls /etc/selinux/$BACKUP_SELINUXTYPE/policy/policy.* &>/dev/null; then
if [ "$BACKUP_SELINUXTYPE" != "$SELINUXTYPE" ]; then
sed -i 's/^SELINUXTYPE=.*/SELINUXTYPE='"$BACKUP_SELINUXTYPE"'/g' /etc/selinux/config;
fi;
elif [ "targeted" = "targeted" ]; then
if [ "targeted" != "$SELINUXTYPE" ]; then
sed -i 's/^SELINUXTYPE=.*/SELINUXTYPE=targeted/g' /etc/selinux/config;
fi;
elif ! ls /etc/selinux/$SELINUXTYPE/policy/policy.* &>/dev/null; then
if [ "targeted" != "$SELINUXTYPE" ]; then
sed -i 's/^SELINUXTYPE=.*/SELINUXTYPE=targeted/g' /etc/selinux/config;
fi;
fi;
fi;
#touch .autorelabel
#restorecon -Rv /
#selinux 80
. /build/scripts/policycoreutils_postinstall.sh 1
. /build/scripts/selinux-policy-targeted_preinstall.sh 1
. /build/scripts/selinux-policy-targeted_postinstall.sh 1
. /build/scripts/selinux-policy_postinstall.sh 1

View file

@ -1,10 +1,13 @@
ImageMagick
cmake
cups-devel
dbus-devel
dialog
dosfstools
dropbear
fedpkg
gcc
glib2-devel
glibc-locale-source
glx-utils
heimdal-libs
@ -23,6 +26,7 @@ net-tools
openssl
pciutils
pip
psmisc
poppler-utils
python-devel
qemu