ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2024-12-27 01:11:14 +00:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity
0526d5bb17
openwrt/package/utils/policycoreutils/Makefile

147 lines
4.3 KiB
Makefile
Raw Normal View History

policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=policycoreutils
policycoreutils: update to version 3.2 d464187c policycoreutils: sestatus belongs to bin not sbin d59932a7 policycoreutils: Resolve path in restorecon_xattr 5682c0d5 policycoreutils/fixfiles.8: add missing file systems and merge check and verify 57dd1f65 policycoreutils/setfiles: Drop unused nerr variable be7f54cb setfiles: drop ABORT_ON_ERRORS and related code 9207823c setfiles: Do not abort on labeling error c064d214 selinux_config(5): add a note that runtime disable is deprecated 8bc865e1 newrole: support cross-compilation with PAM and audit ba2d6c10 fixfiles: correctly restore context of mountpoints Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> (cherry picked from commit 68934a5704be61e952c6ce04573bb54577b26680) Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 20:02:39 +00:00
PKG_VERSION:=3.2
PKG_RELEASE:=1
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
policycoreutils: update to version 3.2 d464187c policycoreutils: sestatus belongs to bin not sbin d59932a7 policycoreutils: Resolve path in restorecon_xattr 5682c0d5 policycoreutils/fixfiles.8: add missing file systems and merge check and verify 57dd1f65 policycoreutils/setfiles: Drop unused nerr variable be7f54cb setfiles: drop ABORT_ON_ERRORS and related code 9207823c setfiles: Do not abort on labeling error c064d214 selinux_config(5): add a note that runtime disable is deprecated 8bc865e1 newrole: support cross-compilation with PAM and audit ba2d6c10 fixfiles: correctly restore context of mountpoints Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> (cherry picked from commit 68934a5704be61e952c6ce04573bb54577b26680) Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 20:02:39 +00:00
PKG_SOURCE_URL:=https://github.com/SELinuxProject/selinux/releases/download/3.2
PKG_HASH:=d1331c6fa766c547b071c491de90b9f343c8dbffdb119be8a5a7e491199b93a9
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
PKG_INSTALL:=1
policycoreutils: add missing gettext dependency Add missing build dependency to both host and target build. The `msgfmt` is required which is missing without gettext-full. Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-09-28 19:48:26 +00:00
HOST_BUILD_DEPENDS:=libsemanage/host gettext-full/host
PKG_BUILD_DEPENDS:=BUSYBOX_CONFIG_PAM:libpam gettext-full/host
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
PKG_MAINTAINER:=Thomas Petazzoni <thomas.petazzoni@bootlin.com>
PKG_CPE_ID:=cpe:/a:selinuxproject:policycoreutils
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=COPYING
include $(INCLUDE_DIR)/package.mk
policycoreutils: add nls.mk Fixes compilation under uClibc-ng. Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-09-02 21:25:19 +00:00
include $(INCLUDE_DIR)/nls.mk
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
include $(INCLUDE_DIR)/host-build.mk
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
DIR_USR_BIN:= \
newrole \
policycoreutils: update to version 3.2 d464187c policycoreutils: sestatus belongs to bin not sbin d59932a7 policycoreutils: Resolve path in restorecon_xattr 5682c0d5 policycoreutils/fixfiles.8: add missing file systems and merge check and verify 57dd1f65 policycoreutils/setfiles: Drop unused nerr variable be7f54cb setfiles: drop ABORT_ON_ERRORS and related code 9207823c setfiles: Do not abort on labeling error c064d214 selinux_config(5): add a note that runtime disable is deprecated 8bc865e1 newrole: support cross-compilation with PAM and audit ba2d6c10 fixfiles: correctly restore context of mountpoints Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> (cherry picked from commit 68934a5704be61e952c6ce04573bb54577b26680) Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 20:02:39 +00:00
secon \
sestatus
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
DIR_USR_SBIN:= \
load_policy \
setsebool
LIBEXEC_UTILS := \
pp
SBIN_UTILS:= \
restorecon_xattr \
setfiles
USR_BIN_UTILS:= \
newrole \
policycoreutils: update to version 3.2 d464187c policycoreutils: sestatus belongs to bin not sbin d59932a7 policycoreutils: Resolve path in restorecon_xattr 5682c0d5 policycoreutils/fixfiles.8: add missing file systems and merge check and verify 57dd1f65 policycoreutils/setfiles: Drop unused nerr variable be7f54cb setfiles: drop ABORT_ON_ERRORS and related code 9207823c setfiles: Do not abort on labeling error c064d214 selinux_config(5): add a note that runtime disable is deprecated 8bc865e1 newrole: support cross-compilation with PAM and audit ba2d6c10 fixfiles: correctly restore context of mountpoints Signed-off-by: Dominick Grift <dominick.grift@defensec.nl> (cherry picked from commit 68934a5704be61e952c6ce04573bb54577b26680) Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 20:02:39 +00:00
secon \
sestatus
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
USR_SBIN_UTILS:= \
fixfiles \
genhomedircon \
open_init_pty \
run_init \
semodule \
load_policy \
setsebool
TARGET_LDFLAGS += $(INTL_LDFLAGS) $(if $(INTL_FULL),-lintl)
MAKE_FLAGS += \
PAMH=$(CONFIG_BUSYBOX_CONFIG_PAM)
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
HOST_MAKE_FLAGS += \
PAMH=$(CONFIG_BUSYBOX_CONFIG_PAM) \
policycoreutils: install to host/bin not hostpkg By installing policycoreutils to host/bin it is also available within the ImageBuilder and SDK, allowing to correctly label both filesystems and packages. Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-09-28 08:37:53 +00:00
DESTDIR=$(STAGING_DIR_HOST) \
policycoreutils: fix host utils rpath and bin directory 'setfiles' and others should be installed to $(STAGING_DIR_HOSTPKG)/bin rather than $(...)/sbin which isn't in PATH. Also using -Wl,-rpath to set library search location instead of setting LD_LIBRARY_PATH when calling setfiles in image.mk. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-27 16:10:34 +00:00
PREFIX= \
SBINDIR=/bin
HOST_LDFLAGS += -Wl,-rpath=$(STAGING_DIR_HOSTPKG)/lib
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
$(eval $(foreach a,$(DIR_SBIN),ALTS_$(a):=300:/sbin/$(a):/sbin/policycoreutils-$(a)$(newline)))
$(eval $(foreach a,$(DIR_USR_BIN),ALTS_$(a):=300:/usr/bin/$(a):/usr/bin/policycoreutils-$(a)$(newline)))
$(eval $(foreach a,$(DIR_USR_SBIN),ALTS_$(a):=300:/usr/sbin/$(a):/usr/sbin/policycoreutils-$(a)$(newline)))
policycoreutils: 'restorecon' is a 'setfiles' applet Instead of duplicating the '/sbin/setfiles' binary, have '/sbin/restorecon' as yet another alias for '/sbin/policycoreutils-setfiles'. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-10-11 02:18:28 +00:00
ALTS_setfiles:=300:/sbin/restorecon:/sbin/policycoreutils-setfiles 300:/sbin/setfiles:/sbin/policycoreutils-setfiles
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
DEPENDS_genhomedircon:=+libsemanage $(INTL_DEPENDS)
DEPENDS_load_policy:=+libselinux $(INTL_DEPENDS)
DEPENDS_newrole:=+libselinux +libaudit +BUSYBOX_CONFIG_PAM:libpam $(INTL_DEPENDS)
DEPENDS_open_init_pty:=$(INTL_DEPENDS)
DEPENDS_pp:=+libsepol $(INTL_DEPENDS)
DEPENDS_restorecon_xattr:=+libselinux +libsepol +libaudit $(INTL_DEPENDS)
DEPENDS_run_init:=+libselinux +libaudit +BUSYBOX_CONFIG_PAM:libpam $(INTL_DEPENDS)
DEPENDS_secon:=+libselinux $(INTL_DEPENDS)
DEPENDS_semanage:=+libsemanage
DEPENDS_semodule:=+libsemanage $(INTL_DEPENDS)
DEPENDS_sestatus:=+libselinux $(INTL_DEPENDS)
DEPENDS_setfiles:=+libselinux +libsepol +libaudit $(INTL_DEPENDS)
DEPENDS_setsebool:=+libsemanage $(INTL_DEPENDS)
define Package/policycoreutils/Default
SECTION:=utils
CATEGORY:=Utilities
TITLE:=SELinux policy utility
URL:=http://selinuxproject.org/page/Main_Page
endef
define Package/policycoreutils
$(call Package/policycoreutils/Default)
MENU:=1
TITLE+= common files
endef
define GenUtilPkg
define Package/$(1)
$(call Package/policycoreutils/Default)
DEPENDS+= policycoreutils $(DEPENDS_$(2))
TITLE+= $(2)
ALTERNATIVES:=$(ALTS_$(2))
endef
define Package/$(1)/description
Policycoreutils is a collection of policy utilities
(originally the "core" set of utilities needed to use
SELinux, although it has grown a bit over time).
This package provides the $(2) utility.
endef
endef
$(foreach a,$(LIBEXEC_UTILS) $(SBIN_UTILS) $(USR_BIN_UTILS) $(USR_SBIN_UTILS),$(eval $(call GenUtilPkg,policycoreutils-$(a),$(a))))
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
define Package/policycoreutils/install
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
$(INSTALL_DIR) $(1)/etc
$(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/sestatus.conf $(1)/etc
ifdef CONFIG_BUSYBOX_CONFIG_PAM
$(INSTALL_DIR) $(1)/etc/pam.d
$(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/pam.d/run_init $(1)/etc/pam.d
$(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/pam.d/newrole $(1)/etc/pam.d
endif
endef
define BuildUtil
define Package/$(1)/install
$(INSTALL_DIR) $$(1)$(2)
policycoreutils: fix ALTERNATIVES install location Fixes: 7817c831ef ("policycoreutils: break into smaller packages") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:51:37 +00:00
$(INSTALL_BIN) $$(PKG_INSTALL_DIR)$(2)/$(3) $$(1)$(2)/$(if $(ALTS_$(3)),policycoreutils-$(3),$(3))
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
endef
$$(eval $$(call BuildPackage,$(1)))
policycoreutils: new package Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> [update to 3.1, make use of Python 3, use ALTERNATIVES, and move to openwrt.git] Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-08-24 03:01:34 +00:00
endef
$(eval $(call BuildPackage,policycoreutils))
policycoreutils: break into smaller packages Instead of vaguely describing dependencies in the package description actually split-up into individual packages, each with their dependencies expressed accurately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-21 17:12:24 +00:00
$(foreach a,$(SBIN_UTILS),$(eval $(call BuildUtil,policycoreutils-$(a),/sbin,$(a))))
$(foreach a,$(USR_BIN_UTILS),$(eval $(call BuildUtil,policycoreutils-$(a),/usr/bin,$(a))))
$(foreach a,$(USR_SBIN_UTILS),$(eval $(call BuildUtil,policycoreutils-$(a),/usr/sbin,$(a))))
$(foreach a,$(LIBEXEC_UTILS),$(eval $(call BuildUtil,policycoreutils-$(a),/usr/libexec/selinux/hll,$(a))))
$(eval $(call HostBuild))
Reference in New Issue Copy Permalink