1#
2# CDDL HEADER START
3#
4# The contents of this file are subject to the terms of the
5# Common Development and Distribution License (the "License").
6# You may not use this file except in compliance with the License.
7#
8# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9# or http://www.opensolaris.org/os/licensing.
10# See the License for the specific language governing permissions
11# and limitations under the License.
12#
13# When distributing Covered Code, include this CDDL HEADER in each
14# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15# If applicable, add the following below this CDDL HEADER, with the
16# fields enclosed by brackets "[]" replaced with your own identifying
17# information: Portions Copyright [yyyy] [name of copyright owner]
18#
19# CDDL HEADER END
20#
21
22#
23# Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
24#
25
26#
27# The default for payload-bearing actions in this package is to appear in the
28# global zone only.  See the include file for greater detail, as well as
29# information about overriding the defaults.
30#
31#
32# CDDL HEADER START
33#
34# The contents of this file are subject to the terms of the
35# Common Development and Distribution License (the "License").
36# You may not use this file except in compliance with the License.
37#
38# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
39# or http://www.opensolaris.org/os/licensing.
40# See the License for the specific language governing permissions
41# and limitations under the License.
42#
43# When distributing Covered Code, include this CDDL HEADER in each
44# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
45# If applicable, add the following below this CDDL HEADER, with the
46# fields enclosed by brackets "[]" replaced with your own identifying
47# information: Portions Copyright [yyyy] [name of copyright owner]
48#
49# CDDL HEADER END
50#
51
52#
53# Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
54#
55
56#
57# For packagers:
58#
59# This ruleset is useful for "system" components-- ones which are expected
60# to appear primarily in the global zone, but which may have some small
61# pieces (man pages, header files) which may need to appear in all zones.
62#
63# The current rules specify that all payload-bearing actions (file,
64# dir, hardlink, link) should appear *only* in the global zone, with
65# the following exceptions:
66#
67# 	- man pages appear in all zones
68# 	- header files appear in all zones
69# 	- mdb(1) modules appear in all zones
70#
71# You may well have other actions which you wish to appear in all zones.
72# An example would be an administrative utility for a driver which has
73# been virtualized to work within zones.  For those actions you wish to
74# appear in all zones, add the following attribute to your action.
75#
76#         variant.opensolaris.zone=__NODEFAULT
77#
78# You DO NOT need to specify __NODEFAULT for man pages, headers, or
79# mdb modules, as those are covered by the automatic rules below.
80#
81# Note: When you specify variant.opensolaris.zone=__NODEFAULT, the
82# net effect is that *no* variant.opensolaris.zone attribute will
83# appear in the post-processed manifest.
84#
85
86#
87# For packaging nerds:
88#
89# We have a problem to solve here: To make an action appear in all zones,
90# it should have *no* variant.opensolaris.zone attribute.  So it's a bit
91# more complicated to use "default".
92#
93# Here's what we do: we use "default" to set all payload bearing actions
94# which have no variant.opensolaris.zone attribute to be
95# variant.opensolaris.zone=global.  For those actions which need to appear
96# in all zones, the packager must specify
97# variant.opensolaris.zone=__NODEFAULT.  Additionally we have some rules
98# which set __NODEFAULT for a few classes of well known things, like man
99# pages and headers.
100#
101# We then go through and clean up all of the __NODEFAULTed attributes by
102# simply deleting them.
103#
104
105# Man pages should appear in all zones.
106
107# Headers should appear in all zones.
108
109# MDB modules should appear in all zones, as one might debug a crash dump
110# in a zone.
111
112# Everything else is global zone only unless the user overrides
113# action-by-action with __NODEFAULT.
114
115#
116# Buff out the __NODEFAULT attributes.
117#
118set name=pkg.fmri value=pkg:/system/trusted/global-zone@0.5.11,5.11-0.155.53
119set name=pkg.description value="Solaris Trusted Extensions, globalzone-only files"
120set name=pkg.summary value="Trusted Extensions global"
121set name=info.classification value=org.opensolaris.category.2008:System/Trusted
122set name=variant.arch value=i386
123dir group=sys mode=0755 owner=root path=etc variant.opensolaris.zone=global
124dir group=sys mode=0755 owner=root path=etc/security variant.opensolaris.zone=global
125dir group=sys mode=0755 owner=root path=etc/security/audio variant.opensolaris.zone=global
126dir group=sys mode=0755 owner=root path=etc/security/lib variant.opensolaris.zone=global
127dir group=sys mode=0755 owner=root path=etc/security/tsol variant.opensolaris.zone=global
128dir group=sys mode=0755 owner=root path=etc/zones variant.opensolaris.zone=global
129dir group=bin mode=0755 owner=root path=lib variant.opensolaris.zone=global
130dir group=bin mode=0755 owner=root path=lib/svc variant.opensolaris.zone=global
131dir group=sys mode=0755 owner=root path=lib/svc/manifest variant.opensolaris.zone=global
132dir group=sys mode=0755 owner=root path=lib/svc/manifest/network variant.opensolaris.zone=global
133dir group=sys mode=0755 owner=root path=lib/svc/manifest/system variant.opensolaris.zone=global
134dir group=bin mode=0755 owner=root path=lib/svc/method variant.opensolaris.zone=global
135dir facet.doc.man=true group=bin mode=0755 owner=root path=usr/share/man/man1m
136dir group=sys mode=0755 owner=root path=var variant.opensolaris.zone=global
137dir group=sys mode=0755 owner=root path=var/tsol variant.opensolaris.zone=global
138dir group=sys mode=0755 owner=root path=var/tsol/doors variant.opensolaris.zone=global
139file NOHASH group=sys mode=0555 owner=root path=etc/security/lib/disk_clean variant.opensolaris.zone=global
140file NOHASH group=sys mode=0555 owner=root path=etc/security/lib/wdwmsg variant.opensolaris.zone=global
141file NOHASH group=sys mode=0555 owner=root path=etc/security/lib/wdwwrapper variant.opensolaris.zone=global
142file NOHASH group=sys mode=0644 original_name=SUNWtsg:etc/security/tsol/devalloc_defaults owner=root path=etc/security/tsol/devalloc_defaults preserve=true variant.opensolaris.zone=global
143file NOHASH group=sys mode=0400 original_name=SUNWtsg:etc/security/tsol/label_encodings owner=root path=etc/security/tsol/label_encodings preserve=renamenew variant.opensolaris.zone=global
144file NOHASH group=sys mode=0444 owner=root path=etc/security/tsol/label_encodings.example variant.opensolaris.zone=global
145file NOHASH group=sys mode=0444 owner=root path=etc/security/tsol/label_encodings.gfi.multi variant.opensolaris.zone=global
146file NOHASH group=sys mode=0444 owner=root path=etc/security/tsol/label_encodings.gfi.single variant.opensolaris.zone=global
147file NOHASH group=sys mode=0444 owner=root path=etc/security/tsol/label_encodings.multi variant.opensolaris.zone=global
148file NOHASH group=sys mode=0444 owner=root path=etc/security/tsol/label_encodings.single variant.opensolaris.zone=global
149file NOHASH group=sys mode=0755 original_name=SUNWtsg:etc/security/tsol/relabel owner=root path=etc/security/tsol/relabel preserve=renamenew variant.opensolaris.zone=global
150file NOHASH group=sys mode=0644 original_name=SUNWtsg:etc/security/tsol/tnrhdb owner=root path=etc/security/tsol/tnrhdb preserve=renamenew variant.opensolaris.zone=global
151file NOHASH group=sys mode=0644 original_name=SUNWtsg:etc/security/tsol/tnrhtp owner=root path=etc/security/tsol/tnrhtp preserve=renamenew variant.opensolaris.zone=global
152file NOHASH group=sys mode=0644 original_name=SUNWtsg:etc/security/tsol/tnzonecfg owner=root path=etc/security/tsol/tnzonecfg preserve=renamenew variant.opensolaris.zone=global
153file NOHASH group=bin mode=0444 owner=root path=etc/zones/SUNWtsoldef.xml variant.opensolaris.zone=global
154file NOHASH group=sys mode=0444 owner=root path=lib/svc/manifest/network/tnctl.xml restart_fmri=svc:/system/manifest-import:default variant.opensolaris.zone=global
155file NOHASH group=sys mode=0444 owner=root path=lib/svc/manifest/network/tnd.xml restart_fmri=svc:/system/manifest-import:default variant.opensolaris.zone=global
156file NOHASH group=sys mode=0444 owner=root path=lib/svc/manifest/system/labeld.xml restart_fmri=svc:/system/manifest-import:default variant.opensolaris.zone=global
157file NOHASH group=bin mode=0555 owner=root path=lib/svc/method/svc-labeld variant.opensolaris.zone=global
158file NOHASH group=bin mode=0555 owner=root path=lib/svc/method/svc-tnctl variant.opensolaris.zone=global
159file NOHASH group=bin mode=0555 owner=root path=lib/svc/method/svc-tnd variant.opensolaris.zone=global
160file NOHASH facet.doc.man=true group=bin mode=0444 owner=root path=usr/share/man/man1m/smtnrhdb.1m
161file NOHASH facet.doc.man=true group=bin mode=0444 owner=root path=usr/share/man/man1m/smtnrhtp.1m
162file NOHASH facet.doc.man=true group=bin mode=0444 owner=root path=usr/share/man/man1m/smtnzonecfg.1m
163legacy arch=i386 category=system desc="Solaris Trusted Extensions, globalzone-only files" hotline="Please contact your local service provider" name="Trusted Extensions global" pkg=SUNWtsg vendor=Illumos version=11.11,REV=2009.11.11
164license cr_Sun license=cr_Sun
165license lic_CDDL license=lic_CDDL
166link path=etc/security/lib/audio_clean.windowing target=./audio_clean variant.opensolaris.zone=global
167link path=etc/security/lib/disk_clean.windowing target=./disk_clean variant.opensolaris.zone=global
168link path=etc/security/lib/st_clean.windowing target=./st_clean variant.opensolaris.zone=global
169# etc/security/lib/wdwmsg runs usr/bin/zenity
170#
171# CDDL HEADER START
172#
173# The contents of this file are subject to the terms of the
174# Common Development and Distribution License (the "License").
175# You may not use this file except in compliance with the License.
176#
177# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
178# or http://www.opensolaris.org/os/licensing.
179# See the License for the specific language governing permissions
180# and limitations under the License.
181#
182# When distributing Covered Code, include this CDDL HEADER in each
183# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
184# If applicable, add the following below this CDDL HEADER, with the
185# fields enclosed by brackets "[]" replaced with your own identifying
186# information: Portions Copyright [yyyy] [name of copyright owner]
187#
188# CDDL HEADER END
189#
190
191#
192# Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
193#
194
195#
196# These actions represent settings which should appear in every package.
197#
198
199#
200# Name the consolidation this package came from.
201#
202set name=org.opensolaris.consolidation value=osnet
203
204#
205# Indicate that the package was published in a zones aware
206# fashion.
207#
208set name=variant.opensolaris.zone value=global value=nonglobal
209#
210# CDDL HEADER START
211#
212# The contents of this file are subject to the terms of the
213# Common Development and Distribution License (the "License").
214# You may not use this file except in compliance with the License.
215#
216# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
217# or http://www.opensolaris.org/os/licensing.
218# See the License for the specific language governing permissions
219# and limitations under the License.
220#
221# When distributing Covered Code, include this CDDL HEADER in each
222# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
223# If applicable, add the following below this CDDL HEADER, with the
224# fields enclosed by brackets "[]" replaced with your own identifying
225# information: Portions Copyright [yyyy] [name of copyright owner]
226#
227# CDDL HEADER END
228#
229
230#
231# Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
232# Use is subject to license terms.
233#
234
235#
236# Only publish packages for the currently specified architecture
237#
238# This is somewhat nonintuitive.  In English:
239#
240#	For any action of type "set",
241#	if the "name" property matches the regex "variant.arch",
242#	and *every* occurrence of the "value" property does not match
243#		$ARCH, then don't publish it.
244#
245# ...in other words, if *any* occurrence of "value" matches i386,
246# then the negative lookahead assertion in the regex will fail, and we
247# won't abort based on the action.
248#
249
250#
251# Catch don't-publish settings from manifest-embedded transforms
252#
253#
254# CDDL HEADER START
255#
256# The contents of this file are subject to the terms of the
257# Common Development and Distribution License (the "License").
258# You may not use this file except in compliance with the License.
259#
260# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
261# or http://www.opensolaris.org/os/licensing.
262# See the License for the specific language governing permissions
263# and limitations under the License.
264#
265# When distributing Covered Code, include this CDDL HEADER in each
266# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
267# If applicable, add the following below this CDDL HEADER, with the
268# fields enclosed by brackets "[]" replaced with your own identifying
269# information: Portions Copyright [yyyy] [name of copyright owner]
270#
271# CDDL HEADER END
272#
273
274#
275# Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
276#
277
278#
279# This file and its contents are supplied under the terms of the
280# Common Development and Distribution License ("CDDL"), version 1.0.
281# You may only use this file in accordance with the terms of version
282# 1.0 of the CDDL.
283#
284# A full copy of the text of the CDDL should have accompanied this
285# source.  A copy of the CDDL is also available via the Internet
286# at http://www.illumos.org/license/CDDL.
287#
288
289# Copyright 2011, Richard Lowe
290
291# Manual pages are documentation, and more specifically 'man' documentation
292#
293# CDDL HEADER START
294#
295# The contents of this file are subject to the terms of the
296# Common Development and Distribution License (the "License").
297# You may not use this file except in compliance with the License.
298#
299# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
300# or http://www.opensolaris.org/os/licensing.
301# See the License for the specific language governing permissions
302# and limitations under the License.
303#
304# When distributing Covered Code, include this CDDL HEADER in each
305# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
306# If applicable, add the following below this CDDL HEADER, with the
307# fields enclosed by brackets "[]" replaced with your own identifying
308# information: Portions Copyright [yyyy] [name of copyright owner]
309#
310# CDDL HEADER END
311#
312
313#
314# Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
315# Copyright 2011, Richard Lowe
316#
317
318#
319# For kernel/drv, set .conf files to mode 0644.  Assume all other
320# files there are drivers, and give them mode 0755 and reboot-needed.
321#
322# The (?<!r) construct in the reboot-needed transform is a negative
323# lookbehind assertion: it says "only match this regex if the
324# previously matched text does NOT match regex r."  So it will match
325# all files in the various kernel trees, except for .conf files.
326#
327
328
329#
330# Non-global zones should not have content in kernel, usr/kernel (and
331# other kernel dirs) or in boot/.
332#
333
334
335#
336# shared objects should generally have mode 0755
337#
338
339#
340# Catch some of the collections of largely read-only files
341#
342
343
344#
345# For what's left, go with root:bin 0644, +x for directories
346#
347
348#
349# Default values for legacy actions
350#
351#
352# CDDL HEADER START
353#
354# The contents of this file are subject to the terms of the
355# Common Development and Distribution License (the "License").
356# You may not use this file except in compliance with the License.
357#
358# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
359# or http://www.opensolaris.org/os/licensing.
360# See the License for the specific language governing permissions
361# and limitations under the License.
362#
363# When distributing Covered Code, include this CDDL HEADER in each
364# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
365# If applicable, add the following below this CDDL HEADER, with the
366# fields enclosed by brackets "[]" replaced with your own identifying
367# information: Portions Copyright [yyyy] [name of copyright owner]
368#
369# CDDL HEADER END
370#
371
372#
373# Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
374#
375
376#
377# Pull out the license paths for staging in the proto area.  Ignore
378# those with no path separators, as that indicates a file kept in
379# $SRC/pkg/license_files, rather than alongside the associated source.
380#
381
382#
383# Ordering is important here, and the last line wins.
384#
385# The default of "current" is provided by the calling environment,
386# rather than a print operation.
387#
388set name=org.opensolaris.smf.fmri value=svc:/network/tnctl value=svc:/network/tnctl:default value=svc:/network/tnd value=svc:/network/tnd:default value=svc:/system/labeld value=svc:/system/labeld:default
389depend fmri=consolidation/osnet/osnet-incorporation type=require
390depend fmri=gnome/zenity type=require
391depend fmri=pkg:/SUNWcs@0.5.11-0.155.53 type=require variant.opensolaris.zone=global
392#
393# This file and its contents are supplied under the terms of the
394# Common Development and Distribution License ("CDDL"). You may
395# only use this file in accordance with the terms of the CDDL.
396#
397# A full copy of the text of the CDDL should have accompanied this
398# source. A copy of the CDDL is also available via the Internet at
399# http://www.illumos.org/license/CDDL.
400#
401
402#
403# Copyright 2019 Alexander Pyhalov
404# Copyright 2020 OmniOS Community Edition (OmniOSce) Association.
405#
406
407#
408# These transforms drop the information that we don't want to appear
409# in final package versions.
410#
411
412# Drop pkg.depend.bypass-generate attributes
413
414# Drop pkg.depend.runpath attributes
415
416# Remove pkg debug information
417
418