blob: 337fcf6f8c3f79727de09336d3b04b47cbd77021 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
#
# ("firewall" and "selinux") security package
#
# NOTE: This file must be "sourced" (not executed).
#
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
human_readable_name() {
echo "'firewall' and 'selinux' security"
}
package_name() {
echo "security"
}
# Use default "empty" suffix
#package_suffix() {
#}
dependencies() {
echo "legacy_compat"
}
package_on_load() {
log_message ""
# define "PACKAGE_NAME" and "PACKAGE_SUFFIX"
PACKAGE_NAME=$(package_name)
log_variable PACKAGE_NAME
PACKAGE_SUFFIX=$(package_suffix)
log_variable PACKAGE_SUFFIX
# define "INSTALL_DIR" for "install_dir()"
INSTALL_DIR=$(_install_dir "${PACKAGE_NAME}" "${PACKAGE_SUFFIX}")
log_variable INSTALL_DIR
# define "VERSION" for "version()"
# _version_file( PACKAGE_NAME, PACKAGE_SUFFIX ) // ${INSTALL_BASE_DIR}, ${VENDOR_LC}
VERSION_FILE=$(_version_file "${PACKAGE_NAME}" "${PACKAGE_SUFFIX}")
log_variable VERSION_FILE
VERSION=$(_load_version_from_file "${VERSION_FILE}")
log_variable VERSION
# define "DIST_VERSION" for "dist_version()"
DIST_VERSION="0.1"
log_variable DIST_VERSION
return
}
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
# allow cups bind 22161 udp port
# for netprinter discovery
# $1 - delete or add ( -d or -a )
selinux_rule() {
local SEMANAGE=semanage
if ! which "$SEMANAGE" >/dev/null 2>&1; then
SEMANAGE=/usr/sbin/semanage
if ! [ -f "$SEMANAGE" ]; then
echo "Failed to find 'semanage'" >&2
return 1
fi
fi
"$SEMANAGE" port "$1" -t ipp_port_t -p udp 22161
}
install_selinux_rule() {
selinux_rule "-a"
}
uninstall_selinux_rule() {
selinux_rule "-d"
}
install_firewall() {
# Setup firewall support
show_nls_message "**** Are you going to use network devices ? If yes, it is recommended to configure your firewall."
show_nls_message_no_nl "**** If you want to configure firewall automatically, enter 'y' or just press 'Enter'. To skip, enter 'n'. : "
if [ -z "${CONFIGURE_FIREWALL}" ] ; then
read CONFIGURE_FIREWALL
fi
if [ -z "${CONFIGURE_FIREWALL}" ] || [ "y" = "${CONFIGURE_FIREWALL}" ] || [ "Y" = "${CONFIGURE_FIREWALL}" ]; then
. "${DIST_DIR}/noarch/firewall.sh"
make_hole_in_firewall "${DIST_DIR}/noarch" 2>&1 | log_redirected_output
touch_p "$FIREWALL_FILE"
fi
}
uninstall_firewall() {
if [ "$REMOVE_FIREWALL" ]; then
. "${DIST_DIR}/noarch/firewall.sh"
plug_hole_in_firewall "${DIST_DIR}/noarch"
fi
}
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
do_install() {
log_message "installing '$(package_name)' package"
install_firewall
install_selinux_rule 2>&1 | log_redirected_output
# install version file
log_variable DIST_VERSION
VERSION_FILE="$(_version_file "${PACKAGE_NAME}" "${PACKAGE_SUFFIX}")"
log_variable VERSION_FILE
echo "${DIST_VERSION}" > "${VERSION_FILE}"
register_installed_item "${VERSION_FILE}"
}
do_uninstall() {
log_message "uninstalling '$(package_name)' package"
uninstall_firewall 2>&1 | log_redirected_output
uninstall_selinux_rule 2>&1 | log_redirected_output
}
# should be called after common_init
package_init() {
FIREWALL_FILE="${INSTALL_DIR}/.firewall"
# need to do it here because function do_uninstall is called after deleting all files
REMOVE_FIREWALL=
if [ -f "${FIREWALL_FILE}" ]; then
REMOVE_FIREWALL="1"
fi
}
|
