Initial import of the collection of systrace(1) policies from hairyeyeball.

	The files in this archive are example systrace policy files,
	which can be used to raise the security levels of your
	computer by using the systrace(1) utility.  These example
	policies can be used as a base for custom policies, or as
	learning material.

4 files changed, 242 insertions, 0 deletions

diff --git a/security/systrace-policies/DESCR b/security/systrace-policies/DESCR
new file mode 100644
index 00000000000..ecc0783df2d
--- /dev/null
+++ b/security/systrace-policies/DESCR
@@ -0,0 +1,4 @@
+The files in this archive are example systrace policy files, which can
+be used to raise the security levels of your computer by using the
+systrace(1) utility. These example policies can be used as a base for
+custom policies, or as learning material.
diff --git a/security/systrace-policies/Makefile b/security/systrace-policies/Makefile
new file mode 100644
index 00000000000..99769f96acd
--- /dev/null
+++ b/security/systrace-policies/Makefile
@@ -0,0 +1,24 @@
+# $NetBSD: Makefile,v 1.1.1.1 2005/03/24 17:11:45 agc Exp $
+
+DISTNAME=	hairyeyeball-1.1
+CATEGORIES=	security sysutils
+MASTER_SITES=	http://www.blafasel.org/~floh/he/releases/
+EXTRACT_SUFX=	.tgz
+
+MAINTAINER=	tech-pkg@NetBSD.org
+HOMEPAGE=	http://blafasel.org/~floh/he/
+COMMENT=	Systrace policy examples
+
+WRKSRC=		${WRKDIR}/1.1
+
+NO_BUILD=	# defined
+
+do-install:
+	dir=${PREFIX}/share/examples/systrace-policies;			\
+	${INSTALL_DATA_DIR} $$dir;					\
+	cd ${WRKSRC} &&							\
+		for f in *; do						\
+			${INSTALL_DATA} $$f $$dir;			\
+		done
+
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/systrace-policies/PLIST b/security/systrace-policies/PLIST
new file mode 100644
index 00000000000..d82a032065c
--- /dev/null
+++ b/security/systrace-policies/PLIST
@@ -0,0 +1,209 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2005/03/24 17:11:45 agc Exp $
+share/examples/systrace-policies/00FILELIST.txt
+share/examples/systrace-policies/00README-X11.txt
+share/examples/systrace-policies/00README.txt
+share/examples/systrace-policies/README
+share/examples/systrace-policies/bin_cat
+share/examples/systrace-policies/bin_chmod
+share/examples/systrace-policies/bin_cp
+share/examples/systrace-policies/bin_csh
+share/examples/systrace-policies/bin_date
+share/examples/systrace-policies/bin_df
+share/examples/systrace-policies/bin_echo
+share/examples/systrace-policies/bin_expr
+share/examples/systrace-policies/bin_hostname
+share/examples/systrace-policies/bin_ksh
+share/examples/systrace-policies/bin_ksh~
+share/examples/systrace-policies/bin_ln
+share/examples/systrace-policies/bin_ls
+share/examples/systrace-policies/bin_md5
+share/examples/systrace-policies/bin_mkdir
+share/examples/systrace-policies/bin_mv
+share/examples/systrace-policies/bin_ps
+share/examples/systrace-policies/bin_pwd
+share/examples/systrace-policies/bin_rm
+share/examples/systrace-policies/bin_rmdir
+share/examples/systrace-policies/bin_sh
+share/examples/systrace-policies/bin_sha1
+share/examples/systrace-policies/bin_sleep
+share/examples/systrace-policies/bin_stty
+share/examples/systrace-policies/bin_sync
+share/examples/systrace-policies/bin_systrace
+share/examples/systrace-policies/bin_tar
+share/examples/systrace-policies/emul_linux_usr_local_lib_opera_5_05_tp1_opera_static
+share/examples/systrace-policies/openbsdmirror.txt
+share/examples/systrace-policies/sbin_dmesg
+share/examples/systrace-policies/sbin_ifconfig
+share/examples/systrace-policies/sbin_wicontrol
+share/examples/systrace-policies/usr_X11R6_bin_ssh_askpass
+share/examples/systrace-policies/usr_X11R6_bin_xauth
+share/examples/systrace-policies/usr_X11R6_bin_xlsclients
+share/examples/systrace-policies/usr_X11R6_bin_xlsfonts
+share/examples/systrace-policies/usr_X11R6_bin_xset
+share/examples/systrace-policies/usr_X11R6_bin_xterm
+share/examples/systrace-policies/usr_bin_apropos
+share/examples/systrace-policies/usr_bin_ar
+share/examples/systrace-policies/usr_bin_as
+share/examples/systrace-policies/usr_bin_awk
+share/examples/systrace-policies/usr_bin_basename
+share/examples/systrace-policies/usr_bin_bdes
+share/examples/systrace-policies/usr_bin_cal
+share/examples/systrace-policies/usr_bin_cc
+share/examples/systrace-policies/usr_bin_clear
+share/examples/systrace-policies/usr_bin_cmp
+share/examples/systrace-policies/usr_bin_cpp
+share/examples/systrace-policies/usr_bin_cut
+share/examples/systrace-policies/usr_bin_cvs
+share/examples/systrace-policies/usr_bin_diff
+share/examples/systrace-policies/usr_bin_dirname
+share/examples/systrace-policies/usr_bin_du
+share/examples/systrace-policies/usr_bin_egrep
+share/examples/systrace-policies/usr_bin_env
+share/examples/systrace-policies/usr_bin_file
+share/examples/systrace-policies/usr_bin_find
+share/examples/systrace-policies/usr_bin_ftp
+share/examples/systrace-policies/usr_bin_gcc
+share/examples/systrace-policies/usr_bin_grep
+share/examples/systrace-policies/usr_bin_groff
+share/examples/systrace-policies/usr_bin_grotty
+share/examples/systrace-policies/usr_bin_gunzip
+share/examples/systrace-policies/usr_bin_gzip
+share/examples/systrace-policies/usr_bin_head
+share/examples/systrace-policies/usr_bin_hexdump
+share/examples/systrace-policies/usr_bin_id
+share/examples/systrace-policies/usr_bin_install
+share/examples/systrace-policies/usr_bin_join
+share/examples/systrace-policies/usr_bin_kdump
+share/examples/systrace-policies/usr_bin_ktrace
+share/examples/systrace-policies/usr_bin_ld
+share/examples/systrace-policies/usr_bin_ldd
+share/examples/systrace-policies/usr_bin_less
+share/examples/systrace-policies/usr_bin_lex
+share/examples/systrace-policies/usr_bin_locate
+share/examples/systrace-policies/usr_bin_lorder
+share/examples/systrace-policies/usr_bin_lynx
+share/examples/systrace-policies/usr_bin_make
+share/examples/systrace-policies/usr_bin_man
+share/examples/systrace-policies/usr_bin_mkdep
+share/examples/systrace-policies/usr_bin_mktemp
+share/examples/systrace-policies/usr_bin_more
+share/examples/systrace-policies/usr_bin_nm
+share/examples/systrace-policies/usr_bin_nroff
+share/examples/systrace-policies/usr_bin_patch
+share/examples/systrace-policies/usr_bin_perl
+share/examples/systrace-policies/usr_bin_printf
+share/examples/systrace-policies/usr_bin_ranlib
+share/examples/systrace-policies/usr_bin_rpcgen
+share/examples/systrace-policies/usr_bin_scp
+share/examples/systrace-policies/usr_bin_sed
+share/examples/systrace-policies/usr_bin_sort
+share/examples/systrace-policies/usr_bin_ssh
+share/examples/systrace-policies/usr_bin_ssh_add
+share/examples/systrace-policies/usr_bin_strip
+share/examples/systrace-policies/usr_bin_sup
+share/examples/systrace-policies/usr_bin_tail
+share/examples/systrace-policies/usr_bin_top
+share/examples/systrace-policies/usr_bin_touch
+share/examples/systrace-policies/usr_bin_tr
+share/examples/systrace-policies/usr_bin_troff
+share/examples/systrace-policies/usr_bin_tsort
+share/examples/systrace-policies/usr_bin_tty
+share/examples/systrace-policies/usr_bin_uname
+share/examples/systrace-policies/usr_bin_vi
+share/examples/systrace-policies/usr_bin_w
+share/examples/systrace-policies/usr_bin_wc
+share/examples/systrace-policies/usr_bin_which
+share/examples/systrace-policies/usr_bin_whois
+share/examples/systrace-policies/usr_bin_xargs
+share/examples/systrace-policies/usr_bin_yacc
+share/examples/systrace-policies/usr_bin_zcat
+share/examples/systrace-policies/usr_bin_zgrep
+share/examples/systrace-policies/usr_bin_zmore
+share/examples/systrace-policies/usr_games_caesar
+share/examples/systrace-policies/usr_games_fortune
+share/examples/systrace-policies/usr_lib_gcc_lib_${MACHINE_ARCH}_unknown_openbsd3_1_2_95_3_cc1
+share/examples/systrace-policies/usr_lib_gcc_lib_${MACHINE_ARCH}_unknown_openbsd3_1_2_95_3_collect2
+share/examples/systrace-policies/usr_lib_gcc_lib_${MACHINE_ARCH}_unknown_openbsd3_1_2_95_3_cpp0
+share/examples/systrace-policies/usr_libexec_cpp
+share/examples/systrace-policies/usr_libexec_ftpd
+share/examples/systrace-policies/usr_local_AbiSuite_bin_AbiWord_d
+share/examples/systrace-policies/usr_local_Acrobat4_Reader_intellinux_bin_acroread
+share/examples/systrace-policies/usr_local_Acrobat5_Reader_intellinux_bin_acroread
+share/examples/systrace-policies/usr_local_bin_abiword
+share/examples/systrace-policies/usr_local_bin_access
+share/examples/systrace-policies/usr_local_bin_acroread
+share/examples/systrace-policies/usr_local_bin_aestar
+share/examples/systrace-policies/usr_local_bin_antiword
+share/examples/systrace-policies/usr_local_bin_autoheader
+share/examples/systrace-policies/usr_local_bin_autom4te
+share/examples/systrace-policies/usr_local_bin_automake
+share/examples/systrace-policies/usr_local_bin_bison
+share/examples/systrace-policies/usr_local_bin_calc
+share/examples/systrace-policies/usr_local_bin_display
+share/examples/systrace-policies/usr_local_bin_emacs
+share/examples/systrace-policies/usr_local_bin_ethereal
+share/examples/systrace-policies/usr_local_bin_evilwm
+share/examples/systrace-policies/usr_local_bin_gaim
+share/examples/systrace-policies/usr_local_bin_gaim_v2
+share/examples/systrace-policies/usr_local_bin_gftopk
+share/examples/systrace-policies/usr_local_bin_glade
+share/examples/systrace-policies/usr_local_bin_gm4
+share/examples/systrace-policies/usr_local_bin_gmake
+share/examples/systrace-policies/usr_local_bin_gmplayer
+share/examples/systrace-policies/usr_local_bin_gs
+share/examples/systrace-policies/usr_local_bin_gsftopk
+share/examples/systrace-policies/usr_local_bin_gv
+share/examples/systrace-policies/usr_local_bin_jpilot
+share/examples/systrace-policies/usr_local_bin_konq_e
+share/examples/systrace-policies/usr_local_bin_kpsestat
+share/examples/systrace-policies/usr_local_bin_kpsewhich
+share/examples/systrace-policies/usr_local_bin_mf
+share/examples/systrace-policies/usr_local_bin_mgp
+share/examples/systrace-policies/usr_local_bin_mgp_orig
+share/examples/systrace-policies/usr_local_bin_mktexlsr
+share/examples/systrace-policies/usr_local_bin_mktexpk
+share/examples/systrace-policies/usr_local_bin_mpg123
+share/examples/systrace-policies/usr_local_bin_mplayer
+share/examples/systrace-policies/usr_local_bin_mplayer_v2
+share/examples/systrace-policies/usr_local_bin_netscape
+share/examples/systrace-policies/usr_local_bin_opera
+share/examples/systrace-policies/usr_local_bin_pnmdepth
+share/examples/systrace-policies/usr_local_bin_pnmscale
+share/examples/systrace-policies/usr_local_bin_readlink
+share/examples/systrace-policies/usr_local_bin_screen
+share/examples/systrace-policies/usr_local_bin_silc
+share/examples/systrace-policies/usr_local_bin_smbclient
+share/examples/systrace-policies/usr_local_bin_sqlite
+share/examples/systrace-policies/usr_local_bin_tex
+share/examples/systrace-policies/usr_local_bin_xanim
+share/examples/systrace-policies/usr_local_bin_xdvi
+share/examples/systrace-policies/usr_local_bin_xdvi_bin
+share/examples/systrace-policies/usr_local_bin_xemacs_21_1_14
+share/examples/systrace-policies/usr_local_bin_xmgrace
+share/examples/systrace-policies/usr_local_bin_xpdf
+share/examples/systrace-policies/usr_local_bin_xsteg
+share/examples/systrace-policies/usr_local_bin_xv
+share/examples/systrace-policies/usr_local_emul_redhat_usr_local_bin_opera
+share/examples/systrace-policies/usr_local_emul_redhat_usr_local_lib_opera_5_05_tp1_opera_static
+share/examples/systrace-policies/usr_local_lib_opera_plugins_operamotifwrapper
+share/examples/systrace-policies/usr_local_libexec_opera
+share/examples/systrace-policies/usr_local_netscape_netscape
+share/examples/systrace-policies/usr_local_sbin_dsniff
+share/examples/systrace-policies/usr_local_sbin_privoxy
+share/examples/systrace-policies/usr_local_sbin_snmpd
+share/examples/systrace-policies/usr_local_share_texmf_web2c_mktexdir
+share/examples/systrace-policies/usr_local_share_texmf_web2c_mktexnam
+share/examples/systrace-policies/usr_local_share_texmf_web2c_mktexupd
+share/examples/systrace-policies/usr_sbin_apm
+share/examples/systrace-policies/usr_sbin_host
+share/examples/systrace-policies/usr_sbin_host_v2
+share/examples/systrace-policies/usr_sbin_httpd
+share/examples/systrace-policies/usr_sbin_mtree
+share/examples/systrace-policies/usr_sbin_named
+share/examples/systrace-policies/usr_sbin_nslookup
+share/examples/systrace-policies/usr_sbin_openssl
+share/examples/systrace-policies/usr_sbin_pkg_create
+share/examples/systrace-policies/usr_sbin_pkg_info
+share/examples/systrace-policies/usr_sbin_tcpdump
+share/examples/systrace-policies/usr_sbin_zzz
+@dirrm share/examples/systrace-policies
diff --git a/security/systrace-policies/distinfo b/security/systrace-policies/distinfo
new file mode 100644
index 00000000000..0825c6c3c92
--- /dev/null
+++ b/security/systrace-policies/distinfo
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1.1.1 2005/03/24 17:11:45 agc Exp $
+
+SHA1 (hairyeyeball-1.1.tgz) = a8d15c79c86d9bbab4dc2f6e782e7767bfa5a4d5
+RMD160 (hairyeyeball-1.1.tgz) = 44f4aff011fcf90445bc5005fe235aa0e7117085
+Size (hairyeyeball-1.1.tgz) = 30982 bytes