From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 31 Oct 2026 21:39:17 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xNFrA-005gU8-1s for lore@lore.pengutronix.de; Sat, 31 Oct 2026 21:39:16 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFr9-0004aq-H5; Sat, 31 Oct 2026 21:39:15 +0100 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqP-0001wv-Cu for ptxdist@pengutronix.de; Sat, 31 Oct 2026 21:38:30 +0100 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 45D1D202882 for ; Sat, 31 Oct 2026 21:38:29 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1793479109; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=7xFw6tEjRaECODgWe8tyxIxC81a8qbsI0erwHFF/trQ=; b=dx74cu6j/Teqbu7SsCqhpXmdNqBkbNcHHXehLePUFanAu8RO4thKc0dTxeQw9YfVxPZAQH U3p4aErJJljvTBwI/sTL4uwaA4RbzIbrZJEpZqNqWIf9oZPg2UsZRlz+zV6XqSuo+4t4rP RArzgt2awjpEzy3+I/dQ+0MfNVLf80VDMcQjKF6aYMqkSyi5Iv98AvcrmVIzaKxKTBCzTF 2EvVFqDZb7WqwkkNUzQQEGPUfDWPNEdhjJOqU0U8iiJVbW8VJ+Xa5bWQew5GBNaKAazCE8 cH8HX9+gX5UFxuokfPau7vufIMD0Xq0s7id8MiJ2hlDUNdS9Ql/byW4xGXdiuA== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=TAjdAfm5; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1793479109; a=rsa-sha256; cv=none; b=eQ1B7Obg6WOW/IRn1BaGNqhSKLOTDFydJv8iR6rh1zg9zRlkisdTJpb91ZWO+GMulUliIM LLJ1YAIkBTXDBfBBYtuLaIM0+kISzar0uCgSyDjIYBp/onDbAitl0mWAyB3bVa1SixB7XY hxx4jpLqigQEeoB4QQPMd5zcIT3ONOFjjMW8NLm6rvWGc4OYbyUcABDIDxVikc+vAWk2J9 x9Jxx5FpftO1JLJ+lSthm+cRHEKIVrK6uUIy9cRP/DmuXZTnJDYRTX+gT8TYqeU/i6aV77 F+e1RLYAbe//uF6wOqvC2wKInvRRUFRvlxO3Lc6fMVRZEW+DfgYcVsn8h8Uj2A== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id NFqKxUpN38HlqNFqPxK73y; Sat, 31 Oct 2026 21:38:29 +0100 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Sat, 31 Oct 2026 21:38:17 +0100 Message-ID: <20261031203823.357406-17-oss-lists@triops.cz> X-Mailer: git-send-email 2.47.3 In-Reply-To: <20261031203823.357406-1-oss-lists@triops.cz> References: <20261031203823.357406-1-oss-lists@triops.cz> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfM0N4Qf9ulSh9lJ49n7dE3i56Za8uRmTlQTJD8mt5dkso7DF4JV/ir3zSm4PuXb+eWVAbxkrPosUEhdkAfAVvyvtqqneidmF/aa6tgRVavr3xewOC7DB LqMTVinCQUOlE94SV7qp2e4EpFOS9L2o0EO3znNS/sQ9fkrPV/c7PN48FiSys3EYTVQiitBqfGMqtyOgp5y+qLYVn6e8qm7/kYc= X-Spamd-Result: default: False [-1.60 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_ALL(0.00)[]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; DMARC_NA(0.00)[triops.cz]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; NEURAL_SPAM(0.00)[0.530]; FROM_EQ_ENVFROM(0.00)[]; TO_DN_NONE(0.00)[]; R_SPF_NA(0.00)[no SPF record]; DKIM_TRACE(0.00)[triops.cz:+] X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: kteb5q1fyft5g6bjms3yewfzfewkrsym X-Rspamd-Queue-Id: 45D1D202882 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.3 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH v2 16/17] sepolgen: version bump 1.1.8 -> 3.11 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl Since SELinux userspace 2.8, the sepolgen python module is shipped in the selinux-python tarball together with audit2allow, so rename the package to selinux-python. Signed-off-by: Ladislav Michl --- CHANGES: - v2: pass PREFIX, BINDIR, PYTHON, PYTHONLIBDIR and CFLAGS as make options instead of environment, so they apply to install as well. rules/selinux-python.in | 12 +++++++ rules/selinux-python.make | 68 +++++++++++++++++++++++++++++++++++++++ rules/sepolgen.in | 29 ----------------- rules/sepolgen.make | 54 ------------------------------- 4 files changed, 80 insertions(+), 83 deletions(-) create mode 100644 rules/selinux-python.in create mode 100644 rules/selinux-python.make delete mode 100644 rules/sepolgen.in delete mode 100644 rules/sepolgen.make diff --git a/rules/selinux-python.in b/rules/selinux-python.in new file mode 100644 index 000000000..d2f6eb655 --- /dev/null +++ b/rules/selinux-python.in @@ -0,0 +1,12 @@ +## SECTION=selinux + +config SELINUX_PYTHON + tristate + prompt "selinux-python" + select PYTHON3 + select LIBSEPOL + select LIBSELINUX + select LIBSELINUX_PYTHON + help + audit2allow and the sepolgen python module it uses to + generate SELinux policy from audit messages. diff --git a/rules/selinux-python.make b/rules/selinux-python.make new file mode 100644 index 000000000..89e4c0f32 --- /dev/null +++ b/rules/selinux-python.make @@ -0,0 +1,68 @@ +# -*-makefile-*- +# +# Copyright (C) 2013 by Marc Kleine-Budde +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +# +# We provide this package +# +PACKAGES-$(PTXCONF_SELINUX_PYTHON) += selinux-python + +# +# Paths and names +# +SELINUX_PYTHON_VERSION := $(SELINUX_VERSION) +SELINUX_PYTHON_SHA256 := f854d7fe67981d80c612067e97c1804f641a9dfcca2d38baeb3efe52b7875398 +SELINUX_PYTHON := selinux-python-$(SELINUX_PYTHON_VERSION) +SELINUX_PYTHON_SUFFIX := tar.gz +SELINUX_PYTHON_URL := $(SELINUX_URL)/$(SELINUX_PYTHON).$(SELINUX_PYTHON_SUFFIX) +SELINUX_PYTHON_SOURCE := $(SRCDIR)/$(SELINUX_PYTHON).$(SELINUX_PYTHON_SUFFIX) +SELINUX_PYTHON_DIR := $(BUILDDIR)/$(SELINUX_PYTHON) +SELINUX_PYTHON_LICENSE := GPL-2.0-only +SELINUX_PYTHON_LICENSE_FILES := file://LICENSE;md5=393a5ca445f6965873eca0259a17f833 + +# ---------------------------------------------------------------------------- +# Prepare +# ---------------------------------------------------------------------------- + +SELINUX_PYTHON_CONF_TOOL := NO +SELINUX_PYTHON_MAKE_ENV := $(CROSS_ENV) +SELINUX_PYTHON_MAKE_OPT = \ + SUBDIRS="sepolgen audit2allow" \ + PREFIX=/usr \ + BINDIR=/usr/bin \ + PYTHON=$(CROSS_PYTHON3) \ + PYTHONLIBDIR=$(PYTHON3_SITEPACKAGES) \ + CFLAGS="-O2 -Wall -g" +SELINUX_PYTHON_INSTALL_OPT = \ + $(SELINUX_PYTHON_MAKE_OPT) \ + install + +# ---------------------------------------------------------------------------- +# Target-Install +# ---------------------------------------------------------------------------- + +$(STATEDIR)/selinux-python.targetinstall: + @$(call targetinfo) + + @$(call install_init, selinux-python) + @$(call install_fixup, selinux-python,PRIORITY,optional) + @$(call install_fixup, selinux-python,SECTION,base) + @$(call install_fixup, selinux-python,AUTHOR,"Marc Kleine-Budde ") + @$(call install_fixup, selinux-python,DESCRIPTION,missing) + + @$(call install_tree, selinux-python, 0, 0, -, $(PYTHON3_SITEPACKAGES)) + @$(call install_alternative, selinux-python, 0, 0, 0644, /var/lib/sepolgen/perm_map) + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/audit2allow) + @$(call install_link, selinux-python, audit2allow, /usr/bin/audit2why) + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/sepolgen-ifgen) + @$(call install_copy, selinux-python, 0, 0, 0755, -, /usr/bin/sepolgen-ifgen-attr-helper) + + @$(call install_finish, selinux-python) + + @$(call touch) + +# vim: syntax=make diff --git a/rules/sepolgen.in b/rules/sepolgen.in deleted file mode 100644 index 94f2ce071..000000000 --- a/rules/sepolgen.in +++ /dev/null @@ -1,29 +0,0 @@ -## SECTION=staging -## old section: -### SECTION=selinux - -config SEPOLGEN - tristate - prompt "sepolgen" - select PYTHON - select LIBSELINUX - select LIBSELINUX_PYTHON - help - A Python module used in SELinux policy generation - - This package contains a Python module that forms the core of - the modern audit2allow (which is a part of the package - policycoreutils). The sepolgen library is structured to give - flexibility to the application using it. The library - contains: Reference Policy Representation, which are Objects - for representing policies and the reference policy - interfaces. Secondly, it has objects and algorithms for - representing access and sets of access in an abstract way - and searching that access. It also has a parser for - reference policy "headers". It contains infrastructure for - parsing SELinux related messages as produced by the audit - system. It has facilities for generating policy based on - required access. - - STAGING: remove in ptxdist-2020.06.0 - Old version that needs to be updated. diff --git a/rules/sepolgen.make b/rules/sepolgen.make deleted file mode 100644 index 7084e1d1d..000000000 --- a/rules/sepolgen.make +++ /dev/null @@ -1,54 +0,0 @@ -# -*-makefile-*- -# -# Copyright (C) 2013 by Marc Kleine-Budde -# -# For further information about the PTXdist project and license conditions -# see the README file. -# - -# -# We provide this package -# -PACKAGES-$(PTXCONF_SEPOLGEN) += sepolgen - -# -# Paths and names -# -SEPOLGEN_VERSION := 1.1.8 -SEPOLGEN_MD5 := d734ff236639cc1bd3a33901774fa98d -SEPOLGEN := sepolgen-$(SEPOLGEN_VERSION) -SEPOLGEN_SUFFIX := tar.gz -SEPOLGEN_URL := https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20120924/$(SEPOLGEN).$(SEPOLGEN_SUFFIX) -SEPOLGEN_SOURCE := $(SRCDIR)/$(SEPOLGEN).$(SEPOLGEN_SUFFIX) -SEPOLGEN_DIR := $(BUILDDIR)/$(SEPOLGEN) -SEPOLGEN_LICENSE := GPL-2.0-only - -# ---------------------------------------------------------------------------- -# Prepare -# ---------------------------------------------------------------------------- - -SEPOLGEN_CONF_TOOL := NO -# no ':=' because of $(PYTHON_SITEPACKAGES) -SEPOLGEN_MAKE_ENV = PYTHONLIBDIR=$(PYTHON_SITEPACKAGES) - -# ---------------------------------------------------------------------------- -# Target-Install -# ---------------------------------------------------------------------------- - -$(STATEDIR)/sepolgen.targetinstall: - @$(call targetinfo) - - @$(call install_init, sepolgen) - @$(call install_fixup, sepolgen,PRIORITY,optional) - @$(call install_fixup, sepolgen,SECTION,base) - @$(call install_fixup, sepolgen,AUTHOR,"Marc Kleine-Budde ") - @$(call install_fixup, sepolgen,DESCRIPTION,missing) - - @$(call install_tree, sepolgen, 0, 0, -, $(PYTHON_SITEPACKAGES)) - @$(call install_alternative, sepolgen, 0, 0, 0644, /var/lib/sepolgen/perm_map) - - @$(call install_finish, sepolgen) - - @$(call touch) - -# vim: syntax=make -- 2.47.3