From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 31 Oct 2026 21:39:08 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xNFr2-005gSL-0u for lore@lore.pengutronix.de; Sat, 31 Oct 2026 21:39:08 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqz-0003ns-P2; Sat, 31 Oct 2026 21:39:05 +0100 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqO-0001wg-Oe for ptxdist@pengutronix.de; Sat, 31 Oct 2026 21:38:28 +0100 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 91583202882 for ; Sat, 31 Oct 2026 21:38:28 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1793479108; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=kdadT4sQgCILk9LgXPGPDr/8J4GZEiGUoTmV4Uvsgpo=; b=NAcYuIOQ26v6gAzWli1VOuLw3A3lijDma4krlBOrx4volQQhFAkN+/PsRVBz6jj2nEVUmt H/znhoy5OqW+bKMzrVZp9Fig/Q9S3YB5YO6r87L3VwZ3CVG8ojhKewDvO9EbVEl7kd+8E4 H87UrrPpJA969xG0rMwbYmyvCcGbTjkZFvb8OHXvA2n3Ov/LPmZ5+0VvGp3HBgibvMTLAF TfpxeQJQqUTE/jVrpINj2n0MrISqPVh04VbEseirxYSNX6a50NiR13R5nvdYelBoxcb21M SBfrmblJ+vvboRaqhvu0I0p6hgV4luHHmKxHirCFmc31TAyleELLWAES3eTqJw== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=w+fdiSWR; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1793479108; a=rsa-sha256; cv=none; b=KfKs8o9eIDXftupPignvjLQ9Rd4bLWkStM41X7C2SJxh/Hy2+DqT9JE8u0i4YtpaHk0aJk 1nJBPuCAZw08rWnP10divN/VwvODqfuYxJ8MSWakKI7FK9SoJlNSoaks5kd1JbT9YZgACZ g27stj5K5E8wz9u9cW3v9QTXshnqjYHcr4YglM2AAmP6MAzmMFF4Ujh4oq9yUebrS3kpPa H8THnN2Heh3FsjSRHlxrBBR9I4mik5yIKcFjxJq9AnptXX2vSulqC1jBiOLxILZfuUULZF 7XgmNjhTD0Dd6hWGntv1oro4AAjfqTiZoFGbOpAqc5m9JL7oyPas8hlTrItiVQ== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id NFqKxUpN38HlqNFqOxK73p; Sat, 31 Oct 2026 21:38:28 +0100 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Sat, 31 Oct 2026 21:38:14 +0100 Message-ID: <20261031203823.357406-14-oss-lists@triops.cz> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261031203823.357406-1-oss-lists@triops.cz> References: <20261031203823.357406-1-oss-lists@triops.cz> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfNk0GU6LCRajA011q9uxJqoU8IMwVnpaBGM/11KxT7cpsHLh2o0dB6cQ47va66H75vUhflav6k/Xhc9hk91ltJFls7HYokf825KuKjI8g3+jETr6M9SV uLiYGZGOVqhRY1+Ru+Tkbswrf5wWUSgE3tcxRSwRTLW/YZxmCLVFzilDSiSXtwvO43BOGJ82ulGVLbzltREeDSoI3oedFFm++ZA= X-Spamd-Result: default: False [-1.60 / 15.00]; BAYES_HAM(-3.00)[99.99%]; MID_CONTAINS_FROM(1.00)[]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_ALL(0.00)[]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; DMARC_NA(0.00)[triops.cz]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_SPAM(0.00)[0.545]; FROM_EQ_ENVFROM(0.00)[]; TO_DN_NONE(0.00)[]; R_SPF_NA(0.00)[no SPF record]; DKIM_TRACE(0.00)[triops.cz:+] X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: 8n6o5uzczbd4m65u5x5ccdwg9ayjcdjh X-Rspamd-Queue-Id: 91583202882 Subject: [ptxdist] [PATCH v2 13/17] Revert "policycoreutils: remove after more than one year in staging" X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl This partially reverts commit a7faf563f3149944b772a0e7c9540c03867d29dd. Signed-off-by: Ladislav Michl --- CHANGES: - v2: None rules/policycoreutils.in | 111 ++++++++++++++++++++++++++ rules/policycoreutils.make | 159 +++++++++++++++++++++++++++++++++++++ 2 files changed, 270 insertions(+) create mode 100644 rules/policycoreutils.in create mode 100644 rules/policycoreutils.make diff --git a/rules/policycoreutils.in b/rules/policycoreutils.in new file mode 100644 index 000000000..fce42b002 --- /dev/null +++ b/rules/policycoreutils.in @@ -0,0 +1,111 @@ +## SECTION=staging +## old section: +### SECTION=selinux + +menuconfig POLICYCOREUTILS + tristate + prompt "policycoreutils " + select LIBCAP_NG + select LIBCGROUP + select LIBSELINUX + select LIBSEMANAGE + select LIBSEPOL + select DBUS_GLIB if POLICYCOREUTILS_RESTORECOND + select BUSYBOX_FEATURE_FIND_DEPTH if BUSYBOX_FIND + select BUSYBOX_FEATURE_FIND_DELETE if BUSYBOX_FIND + select BUSYBOX_SELINUX if BUSYBOX_FIND + select BUSYBOX_FEATURE_FIND_CONTEXT if BUSYBOX_FIND + help + This package contains the core policy utilities that are required + for basic operation of an SELinux system. These utilities include + load_policy to load policies, setfiles to label filesystems, newrole + to switch roles, and run_init to run /etc/init.d scripts in the proper + context. + + STAGING: remove in ptxdist-2020.12.0 + Old version that need to be updated. Moved to staging with libselinux. + +if POLICYCOREUTILS + +menuconfig POLICYCOREUTILS_PYTHON + # needs sepolgen + depends on BROKEN + bool "python based tools" + +if POLICYCOREUTILS_PYTHON + +config POLICYCOREUTILS_AUDIT2ALLOW + bool "audit2allow" + +config POLICYCOREUTILS_SEPOLGEN_IFGEN + select POLICYCOREUTILS_AUDIT2ALLOW + bool "sepolgen-ifgen" + +config POLICYCOREUTILS_AUDIT2WHY + select POLICYCOREUTILS_AUDIT2ALLOW + bool "audit2why" + +config POLICYCOREUTILS_SANDBOX + bool "sandbox" + depends on BROKEN + +config POLICYCOREUTILS_CHCAT + select LIBSEMANAGE_PYTHON + depends on BROKEN + bool "chcat" + +config POLICYCOREUTILS_SEMANAGE + select LIBSEMANAGE_PYTHON + depends on BROKEN + bool "semanage" + +endif + +config POLICYCOREUTILS_LOAD_POLICY + bool "load_policy" + +config POLICYCOREUTILS_NEWROLE + bool "newrole" + +config POLICYCOREUTILS_RESTORECOND + bool "restorecond" + depends on BROKEN + +config POLICYCOREUTILS_RUN_INIT + bool "run_init/open_init_pty" + +config POLICYCOREUTILS_FIXFILES + bool "fixfiles" + +config POLICYCOREUTILS_GENHOMEDIRCON + select POLICYCOREUTILS_SEMODULE + bool "genhomedircon" + +config POLICYCOREUTILS_SECON + bool "secon" + +config POLICYCOREUTILS_SEMODULE + bool "semodule" + +config POLICYCOREUTILS_SEMODULE_DEPS + bool "semodule_deps" + +config POLICYCOREUTILS_SEMODULE_EXPAND + bool "semodule_expand" + +config POLICYCOREUTILS_SEMODULE_LINK + bool "semodule_link" + +config POLICYCOREUTILS_SEMODULE_PACKAGE + bool "semodule_package" + +config POLICYCOREUTILS_SESTATUS + bool "sestatus" + +config POLICYCOREUTILS_SETFILES + bool "setfiles/restorecon" + +config POLICYCOREUTILS_SETSEBOOL + bool "setsebool" + +endif diff --git a/rules/policycoreutils.make b/rules/policycoreutils.make new file mode 100644 index 000000000..07baaebe8 --- /dev/null +++ b/rules/policycoreutils.make @@ -0,0 +1,159 @@ +# -*-makefile-*- +# +# Copyright (C) 2012 by Wolfram Sang +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +# +# We provide this package +# +PACKAGES-$(PTXCONF_POLICYCOREUTILS) += policycoreutils + +# +# Paths and names +# +POLICYCOREUTILS_VERSION := 2.1.13 +POLICYCOREUTILS_MD5 := 97c0b828599fe608f37894989820d71d +POLICYCOREUTILS := policycoreutils-$(POLICYCOREUTILS_VERSION) +POLICYCOREUTILS_SUFFIX := tar.gz +POLICYCOREUTILS_URL := https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20120924/$(POLICYCOREUTILS).$(POLICYCOREUTILS_SUFFIX) +POLICYCOREUTILS_SOURCE := $(SRCDIR)/$(POLICYCOREUTILS).$(POLICYCOREUTILS_SUFFIX) +POLICYCOREUTILS_DIR := $(BUILDDIR)/$(POLICYCOREUTILS) +POLICYCOREUTILS_LICENSE := GPL-2.0-or-later + +# ---------------------------------------------------------------------------- +# Prepare +# ---------------------------------------------------------------------------- + +POLICYCOREUTILS_SUBDIRS_y := \ + man \ + po \ + scripts + +POLICYCOREUTILS_PROGS_y := + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_AUDIT2ALLOW) += audit2allow +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_AUDIT2ALLOW) += /usr/bin/audit2allow + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEPOLGEN_IFGEN) += sepolgen-ifgen +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEPOLGEN_IFGEN) += /usr/bin/sepolgen-ifgen +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEPOLGEN_IFGEN) += /usr/bin/sepolgen-ifgen-attr-helper + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_AUDIT2WHY) += audit2why +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_AUDIT2WHY) += /usr/bin/audit2why + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_LOAD_POLICY) += load_policy +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_LOAD_POLICY) += /usr/sbin/load_policy + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_NEWROLE) += newrole +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_NEWROLE) += /usr/bin/newrole + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_RESTORECOND) += restorecond +#POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_RESTORECOND) += + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += run_init +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += /usr/sbin/run_init +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += /usr/sbin/open_init_pty + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SANDBOX) += sandbox +#POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SANDBOX) += + +# no SUBDIRS needed for scripts +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_CHCAT) += /usr/bin/chcat +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_FIXFILES) += /usr/sbin/fixfiles +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_GENHOMEDIRCON) += /usr/sbin/genhomedircon + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SECON) += secon +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SECON) += /usr/bin/secon + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMANAGE) += semanage +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMANAGE) += /usr/sbin/semanage + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE) += semodule +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE) += /usr/sbin/semodule + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_DEPS) += semodule_deps +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_DEPS) += /usr/bin/semodule_deps + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_EXPAND) += semodule_expand +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_EXPAND) += /usr/bin/semodule_expand + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_LINK) += semodule_link +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_LINK) += /usr/bin/semodule_link + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_PACKAGE) += semodule_package +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_PACKAGE) += /usr/bin/semodule_package +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_PACKAGE) += /usr/bin/semodule_unpackage + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SESTATUS) += sestatus +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SESTATUS) += /usr/sbin/sestatus + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SETFILES) += setfiles +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SETFILES) += /usr/sbin/setfiles + +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SETSEBOOL) += setsebool +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SETSEBOOL) += /usr/sbin/setsebool + +POLICYCOREUTILS_CONF_TOOL := NO + +# no ':=' because of $(PYTHON_SITEPACKAGES) +POLICYCOREUTILS_MAKE_ENV = \ + $(CROSS_ENV) \ + SBINDIR=$(POLICYCOREUTILS_PKGDIR)/usr/sbin \ + PYTHONLIBDIR=$(POLICYCOREUTILS_PKGDIR)$(PYTHON_SITEPACKAGES)/.. \ + CFLAGS="-O2 -Wall" \ + INOTIFYH="/usr/include/sys/inotify.h" \ + PAMH="" \ + AUDITH="" +# +# We don't have PAM or AUDIT, so turn off. +# +# Use the following to turn on: +# (Use these paths, as of version 2.1.13) +# +# PAMH=/usr/include/security/pam_appl.h +# AUDITH=/usr/include/libaudit.h +# + +POLICYCOREUTILS_MAKE_OPT := \ + SUBDIRS="$(POLICYCOREUTILS_SUBDIRS_y)" \ + LIBDIR=$(PTXDIST_SYSROOT_TARGET)/usr/lib +POLICYCOREUTILS_INSTALL_OPT := \ + SUBDIRS="$(POLICYCOREUTILS_SUBDIRS_y)" \ + install + +# ---------------------------------------------------------------------------- +# Target-Install +# ---------------------------------------------------------------------------- + +$(STATEDIR)/policycoreutils.targetinstall: + @$(call targetinfo) + + @$(call install_init, policycoreutils) + @$(call install_fixup, policycoreutils,PRIORITY,optional) + @$(call install_fixup, policycoreutils,SECTION,base) + @$(call install_fixup, policycoreutils,AUTHOR,"Wolfram Sang ") + @$(call install_fixup, policycoreutils,DESCRIPTION,missing) + + @$(foreach prog, $(POLICYCOREUTILS_PROGS_y), \ + $(call install_copy, policycoreutils, 0, 0, 0755, -, $(prog));) + +ifdef PTXCONF_POLICYCOREUTILS_SETFILES + @$(call install_link, policycoreutils, setfiles, /usr/sbin/restorecon) +endif + +ifdef PTXCONF_POLICYCOREUTILS_SEMANAGE + @$(call install_copy, policycoreutils, 0, 0, 0644, -, $(PYTHON_SITEPACKAGES)/seobject.py) +endif + +ifdef PTXCONF_POLICYCOREUTILS_SESTATUS + @$(call install_alternative, policycoreutils, 0, 0, 0644, /etc/sestatus.conf) +endif + + @$(call install_finish, policycoreutils) + + @$(call touch) + +# vim: syntax=make -- 2.47.3