From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 31 Oct 2026 21:39:01 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xNFqv-005gR4-0C for lore@lore.pengutronix.de; Sat, 31 Oct 2026 21:39:01 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqt-0003Ip-AU; Sat, 31 Oct 2026 21:38:59 +0100 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqO-0001wg-AF for ptxdist@pengutronix.de; Sat, 31 Oct 2026 21:38:28 +0100 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 2E2A520294F for ; Sat, 31 Oct 2026 21:38:28 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1793479108; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=vAOM5giDByrVPI0/2UEZ3mr9OWSAeyA3uOILn0M7I0Y=; b=KazPBxDsQVbFx3RML0w3zbowN14dXBO/8ZSKaSz4YxqNVepRDq1hceZdiOYRtJSBSAGAZ9 /r9ZRa3HuystoRxbZDQQlm9q3IHXHQyWoKcLoDJWal+vR8JnO5KGfCBSLmw+qFbCp40iYU M3k96ZcEfp+VO3bjaKeC9l2Kzvm6sq6aQmrVh1G9I9CZhBrjZ2FjccWkFHChpGvVF4nSOp nOy12NT33R1+mH0wGsjLTJyERkVSRlZVl2dIksHQQA1S7FSNFQQ6DuMEGgwBVvQqMKtJn4 mGx6/yP0iSABKMPmxoxiqZ714TMjPHYVk0g1IhBpJUkhYrBgtmFHiOCpV79WiA== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=PxGsoVxb; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1793479108; a=rsa-sha256; cv=none; b=Plb0Cr3E/SWix7zLH+V14bVhJhA3WaDHiq5907Ondc7GYBRpgIrDftiEduLBvzHnBys5DB jULWVqEzP+CF2Ms/C6bqZd/37tCbpc/3ioJ3JQ63hEQafxMquSnLvob5NPV3Vp2pNc7Ov2 fQJ/hNTy4GNPOhPBu0fLyR8duqBgnKRRZw1TAJF2ljhbX+5yciYOnn1WoSRsBe1ZR4nG6F Rg4jNSMcfnm2rYXA9aD2cKQPLxv3TR2mXCktvDkLEYujHgXQiExlepdlj/X3//nTQ3JFcP Nq8Sr138kwzdQnq1x8utTZPtYGSncTw2RYyliKYPcdK5wA9CMqWwrys6dtUM1A== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id NFqKxUpN38HlqNFqOxK73k; Sat, 31 Oct 2026 21:38:28 +0100 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Sat, 31 Oct 2026 21:38:12 +0100 Message-ID: <20261031203823.357406-12-oss-lists@triops.cz> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261031203823.357406-1-oss-lists@triops.cz> References: <20261031203823.357406-1-oss-lists@triops.cz> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfNk0GU6LCRajA011q9uxJqoU8IMwVnpaBGM/11KxT7cpsHLh2o0dB6cQ47va66H75vUhflav6k/Xhc9hk91ltJFls7HYokf825KuKjI8g3+jETr6M9SV uLiYGZGOVqhRY1+Ru+Tkbswrf5wWUSgE3tcxRSwRTLW/YZxmCLVFzilDSiSXtwvO43BOGJ82ulGVLbzltREeDSoI3oedFFm++ZA= X-Spamd-Result: default: False [-1.60 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_ALL(0.00)[]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; DMARC_NA(0.00)[triops.cz]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_SPAM(0.00)[0.540]; FROM_EQ_ENVFROM(0.00)[]; TO_DN_NONE(0.00)[]; R_SPF_NA(0.00)[no SPF record]; DKIM_TRACE(0.00)[triops.cz:+] X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: qjcudm7me5kbd7t4uxqoihwmy3i4u3jh X-Rspamd-Queue-Id: 2E2A520294F Subject: [ptxdist] [PATCH v2 11/17] Revert "checkpolicy: remove after more than one year in staging" X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl This partially reverts commit be09c6089c7c6c818b17701af5127ed47160d625. Signed-off-by: Ladislav Michl --- CHANGES: - v2: None rules/checkpolicy.in | 36 ++++++++++++++++++++++++++ rules/checkpolicy.make | 59 ++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 95 insertions(+) create mode 100644 rules/checkpolicy.in create mode 100644 rules/checkpolicy.make diff --git a/rules/checkpolicy.in b/rules/checkpolicy.in new file mode 100644 index 000000000..b1e8bca01 --- /dev/null +++ b/rules/checkpolicy.in @@ -0,0 +1,36 @@ +## SECTION=staging +## old section: +### SECTION=selinux + +config CHECKPOLICY + tristate + prompt "checkpolicy" + # + # The target package is not functional yet, but we need the host + # package. Depend on broken for now. + # + depends on BROKEN + select LIBSELINUX + select LIBSEPOL + select FLEX + help + Security-enhanced Linux is a patch of the Linux kernel and a + number of utilities with enhanced security functionality + designed to add mandatory access controls to Linux. The + Security-enhanced Linux kernel contains new architectural + components originally developed to improve the security of + the Flask operating system. These architectural components + provide general support for the enforcement of many kinds of + mandatory access control policies, including those based on + the concepts of Type Enforcement, Role-based Access Control, + and Multi-level Security. + + This package contains checkpolicy, the SELinux policy + compiler. Only required for building policies. It uses + libsepol to generate the binary policy. checkpolicy uses + the static libsepol since it deals with low level details of + the policy that have not been encapsulated/abstracted by a + proper shared library interface. + + STAGING: remove in ptxdist-2020.12.0 + Old version that need to be updated. Moved to staging with libselinux. diff --git a/rules/checkpolicy.make b/rules/checkpolicy.make new file mode 100644 index 000000000..6946fcecd --- /dev/null +++ b/rules/checkpolicy.make @@ -0,0 +1,59 @@ +# -*-makefile-*- +# +# Copyright (C) 2013 by Marc Kleine-Budde +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +# +# We provide this package +# +PACKAGES-$(PTXCONF_CHECKPOLICY) += checkpolicy + +# +# Paths and names +# +CHECKPOLICY_VERSION := 2.1.11 +CHECKPOLICY_MD5 := 046b590de004f8a6cee655c4e95a7970 +CHECKPOLICY := checkpolicy-$(CHECKPOLICY_VERSION) +CHECKPOLICY_SUFFIX := tar.gz +CHECKPOLICY_URL := https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20120924/$(CHECKPOLICY).$(CHECKPOLICY_SUFFIX) +CHECKPOLICY_SOURCE := $(SRCDIR)/$(CHECKPOLICY).$(CHECKPOLICY_SUFFIX) +CHECKPOLICY_DIR := $(BUILDDIR)/$(CHECKPOLICY) +CHECKPOLICY_LICENSE := unknown + +# ---------------------------------------------------------------------------- +# Prepare +# ---------------------------------------------------------------------------- + +# +# autoconf +# +CHECKPOLICY_CONF_TOOL := NO +CHECKPOLICY_MAKE_ENV := $(CROSS_ENV) +CHECKPOLICY_MAKE_OPT := LIBDIR=$(PTXDIST_SYSROOT_TARGET)/usr/lib +CHECKPOLICY_INSTALL_OPT = \ + PREFIX=$(CHECKPOLICY_PKGDIR) \ + install + +# ---------------------------------------------------------------------------- +# Target-Install +# ---------------------------------------------------------------------------- + +$(STATEDIR)/checkpolicy.targetinstall: + @$(call targetinfo) + + @$(call install_init, checkpolicy) + @$(call install_fixup, checkpolicy,PRIORITY,optional) + @$(call install_fixup, checkpolicy,SECTION,base) + @$(call install_fixup, checkpolicy,AUTHOR,"Marc Kleine-Budde ") + @$(call install_fixup, checkpolicy,DESCRIPTION,missing) + + @$(call install_copy, checkpolicy, 0, 0, 0755, $(CHECKPOLICY_DIR)/foobar, /dev/null) + + @$(call install_finish, checkpolicy) + + @$(call touch) + +# vim: syntax=make -- 2.47.3