109 lines
4 KiB
Nix
109 lines
4 KiB
Nix
{ stdenv, fetchurl
|
|
, autoconf, automake, libtool, makeWrapper
|
|
, perl, bison, flex, glibc, gettext, which, rpm, tetex, LocaleGettext
|
|
, bash, pam, TermReadKey, RpcXML, swig, python }:
|
|
stdenv.mkDerivation rec {
|
|
|
|
name = "apparmor-${version}";
|
|
version = "2.8.1";
|
|
|
|
src = fetchurl {
|
|
url = "http://launchpad.net/apparmor/2.8/${version}/+download/${name}.tar.gz";
|
|
sha256 = "1r0a5k14jbiik28m5gql0f3dbxl252jya7i120rrsbzqqnvw6nw7";
|
|
};
|
|
|
|
buildInputs = [
|
|
autoconf automake libtool perl bison flex gettext which rpm tetex
|
|
LocaleGettext pam TermReadKey RpcXML swig makeWrapper python ];
|
|
|
|
prePatch = ''
|
|
substituteInPlace libraries/libapparmor/src/Makefile.in --replace "/usr/include" "${glibc}/include"
|
|
substituteInPlace libraries/libapparmor/src/Makefile.am --replace "/usr/include" "${glibc}/include"
|
|
substituteInPlace common/Make.rules --replace "/usr/bin/pod2man" "${perl}/bin/pod2man"
|
|
substituteInPlace common/Make.rules --replace "/usr/bin/pod2html" "${perl}/bin/pod2html"
|
|
|
|
substituteInPlace parser/Makefile --replace "/usr/bin/bison" "${bison}/bin/bison"
|
|
substituteInPlace parser/Makefile --replace "/usr/bin/flex" "${flex}/bin/flex"
|
|
substituteInPlace parser/Makefile --replace "/usr/include/bits/socket.h" "${glibc}/include/bits/socket.h"
|
|
substituteInPlace parser/Makefile --replace "/usr/include/linux/capability.h" "${glibc}/include/linux/capability.h"
|
|
|
|
# for some reason pdf documentation doesn't build
|
|
substituteInPlace parser/Makefile --replace "manpages htmlmanpages pdf" "manpages htmlmanpages"
|
|
|
|
substituteInPlace parser/tst/gen-xtrans.pl --replace "/usr/bin/perl" "${perl}/bin/perl"
|
|
substituteInPlace parser/tst/Makefile --replace "/usr/bin/prove" "${perl}/bin/prove"
|
|
substituteInPlace parser/tst/Makefile --replace "./caching.sh" "${bash}/bin/bash ./caching.sh"
|
|
'';
|
|
|
|
patches = ./capability.patch;
|
|
|
|
buildPhase =''
|
|
PERL5LIB=$PERL5LIB:$out/lib/perl5/site_perl:$out/lib
|
|
|
|
cd libraries/libapparmor
|
|
./autogen.sh
|
|
./configure --prefix=$out --with-perl # see below
|
|
make
|
|
make check
|
|
make install
|
|
ensureDir $out/lib/perl5/site_perl/
|
|
cp swig/perl/LibAppArmor.pm $out/lib/perl5/site_perl/
|
|
cp swig/perl/LibAppArmor.bs $out/lib/perl5/site_perl/
|
|
# this is automatically copied elsewhere....
|
|
|
|
cd ../../utils
|
|
make
|
|
make install DESTDIR=$out BINDIR=$out/bin VENDOR_PERL=/lib/perl5/site_perl
|
|
|
|
cd ../parser
|
|
make
|
|
make install DESTDIR=$out DISTRO=unknown
|
|
|
|
# cd ../changehat/mod_apparmor
|
|
# make # depends on libapparmor having been built first
|
|
# make install
|
|
|
|
cd ../changehat/pam_apparmor
|
|
make # depends on libapparmor having been built first
|
|
make install DESTDIR=$out
|
|
|
|
cd ../../profiles
|
|
LD_LIBRARY_PATH=$out/lib make
|
|
#LD_LIBRARY_PATH=$out/lib make check # depends on the parser having been built first
|
|
make install DESTDIR=$out
|
|
|
|
'';
|
|
installPhase = ''
|
|
for i in $out/bin/*; do
|
|
wrapProgram $i --prefix PERL5LIB : "$PERL5LIB:$out/lib/perl5/5.10.1/i686-linux-thread-multi/"
|
|
done
|
|
'';
|
|
passthru = {
|
|
linux_2_6_37_patch = {
|
|
name= "apparmor";
|
|
features.apparmor = true;
|
|
patch = [
|
|
"${src}/kernel-patches/2.6.37/0001-AppArmor-compatibility-patch-for-v5-network-controll.patch"
|
|
"${src}/kernel-patches/2.6.37/0002-AppArmor-compatibility-patch-for-v5-interface.patch"
|
|
"${src}/kernel-patches/2.6.37/0003-AppArmor-Allow-dfa-backward-compatibility-with-broke.patch"
|
|
];
|
|
};
|
|
linux_3_2_patch = {
|
|
features.apparmor = true;
|
|
patch = [
|
|
"${src}/kernel-patches/3.2/0001-AppArmor-compatibility-patch-for-v5-network-controll.patch"
|
|
"${src}/kernel-patches/3.2/0002-AppArmor-compatibility-patch-for-v5-interface.patch"
|
|
"${src}/kernel-patches/3.2/0003-AppArmor-Allow-dfa-backward-compatibility-with-broke.patch"
|
|
];
|
|
};
|
|
};
|
|
|
|
meta = with stdenv.lib; {
|
|
homepage = http://apparmor.net/;
|
|
description = "A Linux application security system";
|
|
license = licenses.gpl2;
|
|
maintainers = [ maintainers.phreedom ];
|
|
platforms = platforms.linux;
|
|
};
|
|
}
|
|
|