logs and environment info

selinux-makewhatis gentoo hardened.txt (text/plain), 27.72 KB, created by herespam1 on 2025-03-26 18:32:35 UTC

# cat /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/temp/build.log
* Package:    sec-policy/selinux-makewhatis-2.20240916-r1:0
 * Repository: gentoo
 * Maintainer: [e-mail]
 * USE:        abi_x86_64 amd64 elibc_glibc kernel_linux
 * FEATURES:   network-sandbox preserve-libs sandbox selinux sesandbox userpriv usersandbox
>>> Unpacking source...
>>> Unpacking refpolicy-2.20240916.tar.bz2 to /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work
>>> Unpacking patchbundle-selinux-base-policy-2.20240916-r1.tar.bz2 to /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work
>>> Source unpacked in /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work
>>> Preparing source in /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work ...
 * Applying SELinux policy updates ...
 * Applying 0001-full-patch-against-stable-release.patch ...                                                                                          [ ok ]
>>> Source prepared.
>>> Configuring source in /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work ...
>>> Source configured.
>>> Compiling source in /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work ...
make -j8 -l9 NAME=strict SHAREDIR=/usr/share/selinux -C /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work//strict
make: Entering directory '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work/strict'
Compiling strict makewhatis module
Creating strict makewhatis.pp policy package
rm tmp/makewhatis.mod tmp/makewhatis.mod.fc
make: Leaving directory '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work/strict'
make -j8 -l9 NAME=targeted SHAREDIR=/usr/share/selinux -C /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work//targeted
make: Entering directory '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work/targeted'
Compiling targeted makewhatis module
Creating targeted makewhatis.pp policy package
rm tmp/makewhatis.mod tmp/makewhatis.mod.fc
make: Leaving directory '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work/targeted'
make -j8 -l9 NAME=mcs SHAREDIR=/usr/share/selinux -C /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work//mcs
make: Entering directory '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work/mcs'
Makefile:8: /usr/share/selinux/mcs/include/Makefile: No such file or directory
make: *** No rule to make target '/usr/share/selinux/mcs/include/Makefile'.  Stop.
make: Leaving directory '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work/mcs'
 * ERROR: sec-policy/selinux-makewhatis-2.20240916-r1::gentoo failed (compile phase):
 *   emake failed
 *
 * If you need support, post the output of `emerge --info '=sec-policy/selinux-makewhatis-2.20240916-r1::gentoo'`,
 * the complete build log and the output of `emerge -pqv '=sec-policy/selinux-makewhatis-2.20240916-r1::gentoo'`.
 * The complete build log is located at '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/temp/environment'.
 * Working directory: '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work'
 * S: '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work/'

# ls /usr/share/selinux/
devel  strict  targeted

# emerge --info '=sec-policy/selinux-makewhatis-2.20240916-r1::gentoo'
Portage 3.0.67 (python 3.12.9-final-0, default/linux/amd64/23.0/no-multilib/hardened/selinux, gcc-14, glibc-2.40-r8, 6.12.16 x86_64)
=================================================================
                         System Settings
=================================================================
System uname: Linux-6.12.16-x86_64-AMD_Ryzen_9_7940HS_w-_Radeon_780M_Graphics-with-glibc2.40
KiB Mem:     8117608 total,    792160 free
KiB Swap:    1048572 total,    772264 free
Timestamp of repository gentoo: Tue, 25 Mar 2025 23:45:00 +0000
Head commit of repository gentoo: 898d9afb6b114031d76ca52a6947662a019bbff5
sh bash 5.2_p37
ld GNU ld (Gentoo 2.44 p1) 2.44.0
app-misc/pax-utils:        1.3.8::gentoo
app-shells/bash:           5.2_p37::gentoo
dev-build/autoconf:        2.72-r1::gentoo
dev-build/automake:        1.17-r1::gentoo
dev-build/libtool:         2.5.4::gentoo
dev-build/make:            4.4.1-r100::gentoo
dev-build/meson:           1.7.0::gentoo
dev-lang/perl:             5.40.0-r1::gentoo
dev-lang/python:           3.12.9::gentoo, 3.13.2::gentoo
sec-policy/selinux-base:   2.20240916-r1::gentoo
sys-apps/baselayout:       2.17::gentoo
sys-apps/openrc:           0.56::gentoo
sys-apps/sandbox:          2.39::gentoo
sys-devel/binutils:        2.44::gentoo
sys-devel/binutils-config: 5.5.2::gentoo
sys-devel/gcc:             14.2.1_p20241221::gentoo
sys-devel/gcc-config:      2.12.1::gentoo
sys-kernel/linux-headers:  6.12::gentoo (virtual/os-headers)
sys-libs/glibc:            2.40-r8::gentoo
sys-libs/libselinux:       3.7-r1::gentoo
Repositories:

gentoo
    location: /var/db/repos/gentoo
    sync-type: rsync
    sync-uri: rsync://rsync.gentoo.org/gentoo-portage
    priority: -1000
    volatile: False
    sync-rsync-extra-opts:
    sync-rsync-verify-metamanifest: yes
    sync-rsync-verify-jobs: 1
    sync-rsync-verify-max-age: 3

ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O3 -pipe -march=native -flto -fstack-protector"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/gconf /etc/gentoo-release /etc/sandbox.d"
CXXFLAGS="-O3 -pipe -march=native -flto -fstack-protector"
DISTDIR="/var/cache/distfiles"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-O3 -pipe -march=native -flto -fstack-protector"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg-live config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync merge-wait multilib-strict network-sandbox news parallel-fetch pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox selinux sesandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O3 -pipe -march=native -flto -fstack-protector"
GENTOO_MIRRORS="https://mirror.leaseweb.com/gentoo/"
LANG="en_GB.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,pack-relative-relocs"
LEX="flex"
MAKEOPTS="-j8 -l9"
PKGDIR="/var/cache/binpkgs"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
RUSTFLAGS=" -C target-cpu=native"
SHELL="/bin/bash"
USE="acl amd64 audit bzip2 caps cet crypt dracut gdbm grub hardened iconv libtirpc ncurses nls openmp pam pcre pic pie readline seccomp selinux ssl ssp test-rust unicode xattr xtpax zlib zstd" ABI_X86="64" ADA_TARGET="gcc_14" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2 aes avx avx2 avx512_bf16 avx512_bitalg avx512_vbmi2 avx512_vnni avx512_vpopcntdq avx512bw avx512cd avx512dq avx512f avx512ifma avx512vbmi avx512vl f16c fma3 pclmul popcnt rdrand sha sse3 sse4_1 sse4_2 sse4a ssse3 vpclmulqdq" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" GUILE_SINGLE_TARGET="3-0" GUILE_TARGETS="3-0" INPUT_DEVICES="libinput" KERNEL="linux" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-2" POSTGRES_TARGETS="postgres16" PYTHON_SINGLE_TARGET="python3_12" PYTHON_TARGETS="python3_12" RUBY_TARGETS="ruby32" VIDEO_CARDS="amdgpu fbdev intel nouveau radeon radeonsi vesa dummy" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EMERGE_DEFAULT_OPTS, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, LINGUAS, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PYTHONPATH, RANLIB, READELF, SIZE, STRINGS, STRIP, YACC, YFLAGS

# emerge -pqv '=sec-policy/selinux-makewhatis-2.20240916-r1::gentoo'
[ebuild  N    ] sec-policy/selinux-makewhatis-2.20240916-r1

 * IMPORTANT: 17 news items need reading for repository 'gentoo'.
 * Use eselect news read to view new items.

# cat /var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/temp/environment
declare -x ABI="amd64"
declare -x ABI_MIPS=""
declare -x ABI_S390=""
declare -x ABI_X86="64"
declare -x ADA_TARGET=""
declare -x ALSA_CARDS=""
declare -x AMDGPU_TARGETS=""
declare -x APACHE2_MODULES=""
declare -x APACHE2_MPMS=""
declare -x ARCH="amd64"
declare -- BASEPOL="2.20240916-r1"
declare BDEPEND=$'\n\tsys-devel/m4\n\t>=sys-apps/checkpolicy-2.0.21\n'
declare -x BINPKG_FORMAT="gpkg"
declare -x BINPKG_GPG_SIGNING_BASE_COMMAND="/usr/bin/flock /run/lock/portage-binpkg-gpg.lock /usr/bin/gpg --sign --armor [PORTAGE_CONFIG]"
declare -x BINPKG_GPG_SIGNING_DIGEST="SHA512"
declare -x BINPKG_GPG_VERIFY_BASE_COMMAND="/usr/bin/gpg --verify --batch --no-tty --no-auto-check-trustdb --status-fd 2 [PORTAGE_CONFIG] [SIGNATURE]"
declare -x BINPKG_GPG_VERIFY_GPG_HOME="/etc/portage/gnupg"
declare -x BOOTSTRAP_USE="unicode pkg-config split-usr xml python_targets_python3_12 python_single_target_python3_12 multilib zstd cet hardened pic xtpax -jit -orc curl_ssl_openssl jpeg ssl unconfined"
declare -x CALLIGRA_FEATURES=""
declare -x CAMERAS=""
declare -x CBUILD="x86_64-pc-linux-gnu"
declare -x CFLAGS=""
declare -x CFLAGS_amd64="-m64"
declare -x CFLAGS_x32="-mx32"
declare -x CFLAGS_x86="-m32 -mfpmath=sse"
declare -x CHOST="x86_64-pc-linux-gnu"
declare -x CHOST_amd64="x86_64-pc-linux-gnu"
declare -x CHOST_x32="x86_64-pc-linux-gnux32"
declare -x CHOST_x86="i686-pc-linux-gnu"
declare -x COLLECTD_PLUGINS=""
declare -x COMMON_FLAGS="-O3 -pipe -march=native -flto -fstack-protector"
declare -x CPU_FLAGS_ARM=""
declare -x CPU_FLAGS_PPC=""
declare -x CPU_FLAGS_X86=""
declare -x CURL_QUIC=""
declare -x CURL_SSL=""
declare -x CXXFLAGS="-O3 -pipe -march=native -flto -fstack-protector"
declare -x DEFAULT_ABI="amd64"
declare -x DEFINED_PHASES=" compile install postinst postrm prepare unpack"
declare DEPEND=$'>=sys-apps/policycoreutils-2.0.82\n\t\t>=sec-policy/selinux-base-policy-2.20240916-r1'
declare DESCRIPTION="SELinux policy for makewhatis"
declare -x DIROPTIONS="-m0755"
declare -x EAPI="7"
declare -x ELIBC="glibc"
declare -x ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
declare -- EPOCHREALTIME="1742984832.819380"
declare -- EPOCHSECONDS="1742984832"
declare -x EXEOPTIONS="-m0755"
declare -x FCFLAGS="-O3 -pipe -march=native -flto -fstack-protector"
declare -x FETCHCOMMAND_SSH="bash -c \"x=\\\${2#ssh://} ; host=\\\${x%%/*} ; port=\\\${host##*:} ; host=\\\${host%:*} ; [[ \\\${host} = \\\${port} ]] && port= ; exec rsync --rsh=\\\"ssh \\\${port:+-p\\\${port}} \\\${3}\\\" -avP \\\"\\\${host}:/\\\${x#*/}\\\" \\\"\\\$1\\\"\" rsync \"\${DISTDIR}/\${FILE}\" \"\${URI}\" \"\${PORTAGE_SSH_OPTS}\""
declare -x FFLAGS="-O3 -pipe -march=native -flto -fstack-protector"
declare -x FFTOOLS=""
declare -x GCC_SPECS=""
declare -x GPG_VERIFY_GROUP_DROP="nogroup"
declare -x GPG_VERIFY_USER_DROP="nobody"
declare -x GPSD_PROTOCOLS=""
declare -x GRUB_PLATFORMS=""
declare -x GUILE_SINGLE_TARGET=""
declare -x GUILE_TARGETS=""
declare HOMEPAGE="https://wiki.gentoo.org/wiki/Project:SELinux"
declare IDEPEND=""
declare -x INHERITED=" selinux-policy-2"
declare -x INPUT_DEVICES=""
declare -x INSOPTIONS="-m0644"
declare IUSE=""
declare -x IUSE_EFFECTIVE="abi_x86_64 alpha amd64 amd64-linux arm arm64 arm64-macos elibc_Darwin elibc_SunOS elibc_bionic elibc_glibc elibc_mingw elibc_musl hppa kernel_Darwin kernel_SunOS kernel_linux loong m68k mips ppc ppc-macos ppc64 ppc64-linux prefix prefix-guest prefix-stack riscv s390 sparc x64-macos x64-solaris x86 x86-linux"
declare -x IUSE_IMPLICIT="abi_x86_64 prefix prefix-guest prefix-stack"
declare -x KERNEL="linux"
declare -x KEYWORDS="amd64 arm arm64 x86"
declare -x L10N=""
declare -x LANG="en_GB.utf8"
declare -x LCD_DEVICES=""
declare -x LC_COLLATE="C"
declare -x LC_MESSAGES="C.utf8"
declare -x LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,pack-relative-relocs"
declare -x LDFLAGS_amd64="-m elf_x86_64"
declare -x LDFLAGS_x32="-m elf32_x86_64"
declare -x LDFLAGS_x86="-m elf_i386"
declare -x LEX="flex"
declare -x LIBDIR_amd64="lib64"
declare -x LIBDIR_x32="libx32"
declare -x LIBDIR_x86="lib"
declare -x LIBOPTIONS="-m0644"
declare -x LIBREOFFICE_EXTENSIONS=""
declare -x LICENSE="GPL-2"
declare -x LLVM_SLOT=""
declare -x LLVM_TARGETS=""
declare -x LUA_SINGLE_TARGET=""
declare -x LUA_TARGETS=""
declare -x MAIL="/var/mail/root"
declare -x MAKEOPTS="-j8 -l9"
declare -x MANPAGER="manpager"
declare -- MODS="makewhatis"
declare -x MOTD_SHOWN="pam"
declare -x MULTILIB_ABIS="amd64"
declare -x MULTILIB_STRICT_DENY="64-bit.*shared object"
declare -x MULTILIB_STRICT_DIRS="/lib32 /lib /usr/lib32 /usr/lib /usr/kde/*/lib32 /usr/kde/*/lib /usr/qt/*/lib32 /usr/qt/*/lib /usr/X11R6/lib32 /usr/X11R6/lib"
declare -x MULTILIB_STRICT_EXEMPT="(perl5|gcc|binutils|eclipse-3|debug|portage|udev|systemd|clang|python-exec|llvm)"
declare -x NGINX_MODULES_HTTP=""
declare -x NGINX_MODULES_MAIL=""
declare -x NGINX_MODULES_STREAM=""
declare -x OFFICE_IMPLEMENTATION=""
declare -x OPENMPI_FABRICS=""
declare -x OPENMPI_OFED_FEATURES=""
declare -x OPENMPI_RM=""
declare -- PATCHBUNDLE="/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/distdir/patchbundle-selinux-base-policy-2.20240916-r1.tar.bz2"
declare -x PATH="/usr/lib/portage/python3.12/ebuild-helpers/xattr:/usr/lib/portage/python3.12/ebuild-helpers:/usr/local/sbin:/usr/local/bin:/usr/bin:/opt/bin"
declare -x PAX_MARKINGS="none"
declare PDEPEND=""
declare -x PERL_FEATURES=""
declare -x PHP_TARGETS=""
declare -- POLICY_FILES=""
declare -- POLICY_PATCH=""
declare -x POLICY_TYPES="strict targeted mcs mls"
declare -x PORTAGE_BZIP2_COMMAND="bzip2"
declare -x PORTAGE_COMPRESSION_COMMAND="zstd -T8"
declare -a PORTAGE_DOCOMPRESS=([0]="/usr/share/doc" [1]="/usr/share/info" [2]="/usr/share/man")
declare -x PORTAGE_DOCOMPRESS_SIZE_LIMIT="128"
declare -a PORTAGE_DOCOMPRESS_SKIP=([0]="/usr/share/doc/selinux-makewhatis-2.20240916-r1/html")
declare -a PORTAGE_DOSTRIP=([0]="/")
declare -a PORTAGE_DOSTRIP_SKIP=()
declare -x PORTAGE_FETCH_T="portage_fetch_t"
declare -x PORTAGE_REPO_REVISIONS="{\"gentoo\": \"898d9afb6b114031d76ca52a6947662a019bbff5\"}"
declare -x PORTAGE_SANDBOX_T="portage_sandbox_t"
declare -x PORTAGE_T="portage_t"
declare -x POSTGRES_TARGETS=""
declare -x PROFILE_IS_HARDENED="1"
declare -x PROFILE_ONLY_VARIABLES="ARCH ELIBC IUSE_IMPLICIT KERNEL USE_EXPAND_IMPLICIT USE_EXPAND_UNPREFIXED USE_EXPAND_VALUES_ARCH USE_EXPAND_VALUES_ELIBC USE_EXPAND_VALUES_KERNEL"
declare -- PROPERTIES=""
declare -x PYTHONDONTWRITEBYTECODE="1"
declare -x PYTHON_SINGLE_TARGET=""
declare -x PYTHON_TARGETS=""
declare -x QEMU_SOFTMMU_TARGETS=""
declare -x QEMU_USER_TARGETS=""
declare RDEPEND=$'>=sys-apps/policycoreutils-2.0.82\n\t\t>=sec-policy/selinux-base-policy-2.20240916-r1'
declare REPOSITORY
declare REQUIRED_USE=""
declare RESTRICT=""
declare -x RESUMECOMMAND_SSH="bash -c \"x=\\\${2#ssh://} ; host=\\\${x%%/*} ; port=\\\${host##*:} ; host=\\\${host%:*} ; [[ \\\${host} = \\\${port} ]] && port= ; exec rsync --rsh=\\\"ssh \\\${port:+-p\\\${port}} \\\${3}\\\" -avP \\\"\\\${host}:/\\\${x#*/}\\\" \\\"\\\$1\\\"\" rsync \"\${DISTDIR}/\${FILE}\" \"\${URI}\" \"\${PORTAGE_SSH_OPTS}\""
declare -x RUBY_TARGETS=""
declare -x RUSTFLAGS=" -C target-cpu=native"
declare -x S="/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work/"
declare -x SANDBOX_DEBUG="0"
declare -x SANDBOX_DENY=""
declare -x SANDBOX_METHOD="any"
declare -x SANDBOX_PREDICT="/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/homedir:/dev/crypto:/var/cache/man"
declare -x SANDBOX_READ="/:/var/tmp/portage"
declare -x SANDBOX_VERBOSE="1"
declare -x SANDBOX_WRITE=":/dev/console:/dev/fd:/dev/full:/dev/null:/dev/ptmx:/dev/pts/:/dev/pty:/dev/shm:/dev/tts:/dev/tty:/dev/vc/:/dev/zero:/proc/self/:/proc/self/fd:/selinux/:/sys/fs/selinux/:/tmp/:/usr/lib/cf:/usr/lib/conftest:/usr/lib32/cf:/usr/lib32/conftest:/usr/lib64/cf:/usr/lib64/conftest:/usr/tmp/:/usr/tmp/cf:/usr/tmp/conftest:/var/tmp/:/var/tmp/portage:/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/homedir/.bash_history:/selinux/:/sys/fs/selinux/:/proc/self/"
declare -x SANE_BACKENDS=""
declare -- SELINUX_GIT_BRANCH="master"
declare -- SELINUX_GIT_REPO="https://anongit.gentoo.org/git/proj/hardened-refpolicy.git"
declare -x SHELL="/bin/bash"
declare -x SLOT="0"
declare -i SRANDOM="3428093163"
declare SRC_URI=$'https://github.com/SELinuxProject/refpolicy/releases/download/RELEASE_2_20240916/refpolicy-2.20240916.tar.bz2\n\t\thttps://dev.gentoo.org/~perfinion/patches/selinux-base-policy/patchbundle-selinux-base-policy-2.20240916-r1.tar.bz2'
declare -x SSH_CLIENT="192.168.50.98 61565 22"
declare -x SSH_CONNECTION="192.168.50.98 61565 192.168.50.34 22"
declare -x SSH_TTY="/dev/pts/0"
declare -x SYMLINK_LIB="no"
declare -x TWISTED_DISABLE_WRITING_OF_PLUGIN_CACHE="1"
declare -x USE="abi_x86_64 amd64 elibc_glibc kernel_linux"
declare -x USERLAND="GNU"
declare -x USE_EXPAND_IMPLICIT="ARCH ELIBC KERNEL"
declare -x USE_EXPAND_UNPREFIXED="ARCH"
declare -x USE_EXPAND_VALUES_ARCH="alpha amd64 amd64-linux arm arm64 arm64-macos hppa loong m68k mips ppc ppc64 ppc64-linux ppc-macos riscv s390 sparc x64-macos x64-solaris x86 x86-linux"
declare -x USE_EXPAND_VALUES_ELIBC="bionic Darwin glibc mingw musl SunOS"
declare -x USE_EXPAND_VALUES_KERNEL="Darwin linux SunOS"
declare -x UWSGI_PLUGINS=""
declare -x VIDEO_CARDS=""
declare -x VOICEMAIL_STORAGE=""
declare -x XTABLES_ADDONS=""
declare -- _SELINUX_POLICY_2_ECLASS="1"
declare -x __E_DESTTREE="/usr"
declare -x __E_DOCDESTTREE=""
declare -x __E_EXEDESTTREE=""
declare -x __E_INSDESTTREE=""
declare -x ac_cv_c_undeclared_builtin_options="none needed"
declare -x enable_year2038="no"
declare -x gl_cv_compiler_check_decl_option="-Werror=implicit-function-declaration"
declare -x gl_cv_func_getcwd_path_max="yes"
declare -- i="mls"
_eapply_patch ()
{
    local f=${1};
    local prefix=${2};
    ebegin "${prefix:-Applying }${f##*/}";
    local all_opts=(-p1 -f -g0 --no-backup-if-mismatch "${patch_options[@]}");
    if ${patch_cmd} "${all_opts[@]}" --dry-run -s -F0 < "${f}" &> /dev/null; then
        all_opts+=(-s -F0);
    fi;
    ${patch_cmd} "${all_opts[@]}" < "${f}";
    failed=${?};
    if ! eend "${failed}"; then
        __helpers_die "patch -p1 ${patch_options[*]} failed with ${f}";
    fi
}
pkg_nofetch ()
{
    default
}
pkg_postinst ()
{
    selinux-policy-2_pkg_postinst "$@"
}
pkg_postrm ()
{
    selinux-policy-2_pkg_postrm "$@"
}
selinux-policy-2_pkg_postinst ()
{
    local root_opts="";
    if [[ -n ${ROOT} ]]; then
        root_opts="-p ${ROOT} -n";
    fi;
    local COMMAND;
    for i in ${POLICY_TYPES};
    do
        if [[ "${i}" == "strict" ]] && [[ "${MODS}" = "unconfined" ]]; then
            einfo "Ignoring loading of unconfined module in strict module store.";
            continue;
        fi;
        einfo "Inserting the following modules into the $i module store: ${MODS}";
        cd "${ROOT}/usr/share/selinux/${i}" || die "Could not enter /usr/share/selinux/${i}";
        for j in ${MODS};
        do
            if [[ -f "${j}.pp" ]]; then
                COMMAND="${j}.pp ${COMMAND}";
            else
                if [[ -f "${j}.cil" ]]; then
                    COMMAND="${j}.cil ${COMMAND}";
                fi;
            fi;
        done;
        semodule ${root_opts} -s ${i} -i ${COMMAND};
        if [[ $? -ne 0 ]]; then
            ewarn "SELinux module load failed. Trying full reload...";
            local COMMAND_base="-i base.pp";
            if has_version "<sys-apps/policycoreutils-2.5"; then
                COMMAND_base="-b base.pp";
            fi;
            if [[ "${i}" == "targeted" ]]; then
                semodule ${root_opts} -s ${i} ${COMMAND_base} -i $(ls *.pp | grep -v base.pp);
            else
                semodule ${root_opts} -s ${i} ${COMMAND_base} -i $(ls *.pp | grep -v base.pp | grep -v unconfined.pp);
            fi;
            if [[ $? -ne 0 ]]; then
                ewarn "Failed to reload SELinux policies.";
                ewarn "";
                ewarn "If this is *not* the last SELinux module package being installed,";
                ewarn "then you can safely ignore this as the reloads will be retried";
                ewarn "with other, recent modules.";
                ewarn "";
                ewarn "If it is the last SELinux module package being installed however,";
                ewarn "then it is advised to look at the error above and take appropriate";
                ewarn "action since the new SELinux policies are not loaded until the";
                ewarn "command finished successfully.";
                ewarn "";
                ewarn "To reload, run the following command from within /usr/share/selinux/${i}:";
                ewarn "  semodule ${COMMAND_base} -i \$(ls *.pp | grep -v base.pp)";
                ewarn "or";
                ewarn "  semodule ${COMMAND_base} -i \$(ls *.pp | grep -v base.pp | grep -v unconfined.pp)";
                ewarn "depending on if you need the unconfined domain loaded as well or not.";
            else
                einfo "SELinux modules reloaded successfully.";
            fi;
        else
            einfo "SELinux modules loaded successfully.";
        fi;
        COMMAND="";
    done;
    if [[ -z ${ROOT} ]]; then
        local PKGSET="";
        if [[ -x /usr/bin/qdepends ]]; then
            PKGSET=$(/usr/bin/qdepends -Cq -r -Q ${CATEGORY}/${PN} | grep -v "sec-policy/selinux-");
        else
            if [[ -x /usr/bin/equery ]]; then
                PKGSET=$(/usr/bin/equery -Cq depends ${CATEGORY}/${PN} | grep -v "sec-policy/selinux-");
            fi;
        fi;
        if [[ -n "${PKGSET}" ]]; then
            rlpkg ${PKGSET};
        fi;
    fi
}
selinux-policy-2_pkg_postrm ()
{
    if [[ -z "${REPLACED_BY_VERSION}" ]]; then
        local root_opts="";
        if [[ -n ${ROOT} ]]; then
            root_opts="-p ${ROOT} -n";
        fi;
        local COMMAND;
        for i in ${MODS};
        do
            COMMAND="-r ${i} ${COMMAND}";
        done;
        for i in ${POLICY_TYPES};
        do
            einfo "Removing the following modules from the $i module store: ${MODS}";
            semodule ${root_opts} -s ${i} ${COMMAND};
            if [[ $? -ne 0 ]]; then
                ewarn "SELinux module unload failed.";
            else
                einfo "SELinux modules unloaded successfully.";
            fi;
        done;
    fi
}
selinux-policy-2_src_compile ()
{
    local makeuse="";
    for useflag in ${IUSE};
    do
        use ${useflag} && makeuse="${makeuse} -D use_${useflag}";
    done;
    for i in ${POLICY_TYPES};
    do
        export M4PARAM="${makeuse}";
        emake NAME=$i SHAREDIR="${EPREFIX}"/usr/share/selinux -C "${S}"/${i};
    done
}
selinux-policy-2_src_install ()
{
    local BASEDIR="/usr/share/selinux";
    for i in ${POLICY_TYPES};
    do
        for j in ${MODS};
        do
            einfo "Installing ${i} ${j} policy package";
            insinto ${BASEDIR}/${i};
            if [[ -f "${S}/${i}/${j}.pp" ]]; then
                doins "${S}"/${i}/${j}.pp || die "Failed to add ${j}.pp to ${i}";
            else
                if [[ -f "${S}/${i}/${j}.cil" ]]; then
                    doins "${S}"/${i}/${j}.cil || die "Failed to add ${j}.cil to ${i}";
                fi;
            fi;
            if [[ "${POLICY_FILES[@]}" == *"${j}.if"* ]]; then
                insinto ${BASEDIR}/${i}/include/3rd_party;
                doins "${S}"/${i}/${j}.if || die "Failed to add ${j}.if to ${i}";
            fi;
        done;
    done
}
selinux-policy-2_src_prepare ()
{
    local modfiles;
    local add_interfaces=0;
    cd "${S}/refpolicy/policy/modules" && mkdir 3rd_party;
    if [[ -n ${BASEPOL} ]] && [[ "${BASEPOL}" != "9999" ]]; then
        cd "${S}";
        einfo "Applying SELinux policy updates ... ";
        eapply -p0 -- "${WORKDIR}/0001-full-patch-against-stable-release.patch";
    fi;
    eapply_user;
    if [[ "$(declare -p POLICY_FILES 2> /dev/null 2>&1)" == "declare -a"* ]] || [[ -n ${POLICY_FILES} ]]; then
        add_interfaces=1;
        cd "${S}/refpolicy/policy/modules";
        for POLFILE in ${POLICY_FILES[@]};
        do
            cp "${FILESDIR}/${POLFILE}" 3rd_party/ || die "Could not copy ${POLFILE} to 3rd_party/ location";
        done;
    fi;
    if [[ "$(declare -p POLICY_PATCH 2> /dev/null 2>&1)" == "declare -a"* ]]; then
        [[ -n ${POLICY_PATCH[*]} ]] && eapply -d "${S}/refpolicy/policy/modules" -- "${POLICY_PATCH[@]}";
    else
        [[ -n ${POLICY_PATCH} ]] && eapply -d "${S}/refpolicy/policy/modules" -- ${POLICY_PATCH};
    fi;
    for i in ${MODS};
    do
        modfiles="$(find "${S}/refpolicy/policy/modules" -iname $i.te) $modfiles";
        modfiles="$(find "${S}/refpolicy/policy/modules" -iname $i.fc) $modfiles";
        modfiles="$(find "${S}/refpolicy/policy/modules" -iname $i.cil) $modfiles";
        if [[ ${add_interfaces} -eq 1 ]]; then
            modfiles="$(find "${S}/refpolicy/policy/modules" -iname $i.if) $modfiles";
        fi;
    done;
    for i in ${POLICY_TYPES};
    do
        mkdir "${S}"/${i} || die "Failed to create directory ${S}/${i}";
        cp "${S}"/refpolicy/doc/Makefile.example "${S}"/${i}/Makefile || die "Failed to copy Makefile.example to ${S}/${i}/Makefile";
        cp ${modfiles} "${S}"/${i} || die "Failed to copy the module files to ${S}/${i}";
    done
}
selinux-policy-2_src_unpack ()
{
    if [[ "${BASEPOL}" != "9999" ]]; then
        unpack ${A};
    else
        git-r3_src_unpack;
    fi
}
src_compile ()
{
    selinux-policy-2_src_compile "$@"
}
src_configure ()
{
    default
}
src_install ()
{
    selinux-policy-2_src_install "$@"
}
src_prepare ()
{
    selinux-policy-2_src_prepare "$@"
}
src_test ()
{
    default
}
src_unpack ()
{
    selinux-policy-2_src_unpack "$@"
}

# ls '/var/tmp/portage/sec-policy/selinux-makewhatis-2.20240916-r1/work'
0001-full-patch-against-stable-release.patch  mcs  mls  refpolicy  strict  targeted