From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 20 Oct 2026 13:49:52 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xJ8Lo-00110n-17 for lore@lore.pengutronix.de; Tue, 20 Oct 2026 13:49:52 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJ8Lm-0002M7-OM; Tue, 20 Oct 2026 13:49:50 +0200 Received: from mx1.white.stw.pengutronix.de ([2a0a:edc0:0:b01:1d::107]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJ8LE-0000Sy-7v for ptxdist@pengutronix.de; Tue, 20 Oct 2026 13:49:16 +0200 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 191C9201EA4 for ; Tue, 20 Oct 2026 13:49:16 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1792496956; a=rsa-sha256; cv=none; b=cbAKRDDI9ABUAify6IsFkt94Z+kcwm4HpdnpB8hxP8m21tYAV8HjklrfHWxYQHnB4ubbaN XsFUI8jORrCwwYyVFz0tHPuDVE06qU39/QOnlWDFytyi5ESifFwXXgsM3SOo4L9eCLU2FS qAtGZA+IgDhOvsHs/I2XIehadUSSH6UydWMAMZA43s3SQ8R6ILkfxOVUviU6fXRDvIhXXn z/4/lJbi2RWjQTbjYHKjcHTsiHgFzoau/nxf+kP3cEMwOgURtYHLztVZe6NWf7zcg/TmgP VNKQ6UmYMvJLlMEFvqEBhfLaxafVCVbgFfW4a+wn3Av1J2fQ3Op9VV4ANh35Tw== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=FXp91bCQ; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1792496956; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=whjICPl8gDe2u5g0/Ivfj/q0YhhHvN4zTwG1oZCPOxM=; b=DU9vLDdpTeeLZbKCiwY0cTkOnePr0rEEmNhqatpztRDc157r1uABPMnNWF6ile1T2eRl0B b1TXLdnmBj7fgl3aaYDDByXXKsqOpksFiI+GXeNApdnQr5vg3MSmO1WdCkAP5mrYA6OCCt uzmKoWgW45pkkRzjcUGIWpp5Yl8bgNOmepsD4+wTiZpiGL+9a0uJQJFsHVpJN9Al+/nCrL +h6yD/fQj5JHEhVGP4KscZ1LXQv6S/k1OedJY02rVl0fFuBW8T32dYd5H0Y/2mehjpquRs DFZ4Jwbf/lEXNLiYsIxlb4U5Ddq8MPn8VKC6rP3DiOHONS7Ov8O7cNWOMY5o4Q== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id J8LAx5Bd8NbEUJ8LDxFQAa; Tue, 20 Oct 2026 13:49:16 +0200 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Tue, 20 Oct 2026 13:49:07 +0200 Message-ID: <53a5de280736081e047d8d7a1dcf5e5a41c230e1.1792491301.git.ladis@triops.cz> X-Mailer: git-send-email 2.47.3 In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfK9SehLm9SNcbdr2k/Xf4nQmPBhBnu5jc1oLSOxA8A9lDAiOFFpR8rfIzFAKcbUMDE7a5htvQjE9IGlFje8NoF/RaXwBHmQD9iZ/B8h+VVV1BmV9wCMD 6GYdvbjCjPado6WmnyXcKeblgb8A2xRrSPM3cGxd7R0lLHlZV5FwbfGO5ohYXX3VbhXkbrIHeGAwsq2/pC5nTwOf6GtWUykSXw8= X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: 191C9201EA4 X-Spamd-Result: default: False [-2.60 / 15.00]; BAYES_HAM(-3.00)[99.99%]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ONE(0.00)[1]; ARC_NA(0.00)[]; RCVD_TLS_ALL(0.00)[]; DMARC_NA(0.00)[triops.cz]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; R_SPF_NA(0.00)[no SPF record]; TO_MATCH_ENVRCPT_ALL(0.00)[]; TO_DN_NONE(0.00)[]; NEURAL_HAM(-0.00)[-0.989]; DKIM_TRACE(0.00)[triops.cz:+] X-Rspamd-Action: no action X-Stat-Signature: 5i5a8cekhk3mou63aien53rehna19xmq Subject: [ptxdist] [PATCH v1 14/17] policycoreutils: version bump 2.1.13 -> 3.11 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl Upstream moved the python tools to selinux-python and the semodule_* tools to semodule-utils. While there also add PAM support. Signed-off-by: Ladislav Michl --- rules/policycoreutils.in | 99 +++++++++-------------- rules/policycoreutils.make | 159 ++++++++++++++++--------------------- 2 files changed, 105 insertions(+), 153 deletions(-) diff --git a/rules/policycoreutils.in b/rules/policycoreutils.in index fce42b002..b9d3a1ff3 100644 --- a/rules/policycoreutils.in +++ b/rules/policycoreutils.in @@ -1,16 +1,14 @@ -## SECTION=staging -## old section: -### SECTION=selinux +## SECTION=selinux menuconfig POLICYCOREUTILS tristate prompt "policycoreutils " - select LIBCAP_NG - select LIBCGROUP select LIBSELINUX - select LIBSEMANAGE select LIBSEPOL - select DBUS_GLIB if POLICYCOREUTILS_RESTORECOND + select LIBSEMANAGE if POLICYCOREUTILS_SEMODULE + select LIBSEMANAGE if POLICYCOREUTILS_SETSEBOOL + select AUDIT if POLICYCOREUTILS_AUDIT + select PAM if GLOBAL_PAM select BUSYBOX_FEATURE_FIND_DEPTH if BUSYBOX_FIND select BUSYBOX_FEATURE_FIND_DELETE if BUSYBOX_FIND select BUSYBOX_SELINUX if BUSYBOX_FIND @@ -22,90 +20,65 @@ menuconfig POLICYCOREUTILS to switch roles, and run_init to run /etc/init.d scripts in the proper context. - STAGING: remove in ptxdist-2020.12.0 - Old version that need to be updated. Moved to staging with libselinux. - if POLICYCOREUTILS -menuconfig POLICYCOREUTILS_PYTHON - # needs sepolgen - depends on BROKEN - bool "python based tools" - -if POLICYCOREUTILS_PYTHON - -config POLICYCOREUTILS_AUDIT2ALLOW - bool "audit2allow" - -config POLICYCOREUTILS_SEPOLGEN_IFGEN - select POLICYCOREUTILS_AUDIT2ALLOW - bool "sepolgen-ifgen" - -config POLICYCOREUTILS_AUDIT2WHY - select POLICYCOREUTILS_AUDIT2ALLOW - bool "audit2why" - -config POLICYCOREUTILS_SANDBOX - bool "sandbox" - depends on BROKEN - -config POLICYCOREUTILS_CHCAT - select LIBSEMANAGE_PYTHON - depends on BROKEN - bool "chcat" - -config POLICYCOREUTILS_SEMANAGE - select LIBSEMANAGE_PYTHON - depends on BROKEN - bool "semanage" - -endif +config POLICYCOREUTILS_AUDIT + bool "audit support" + help + Let newrole, run_init and setfiles log to the audit subsystem. config POLICYCOREUTILS_LOAD_POLICY bool "load_policy" + depends on !BUSYBOX_LOAD_POLICY || ALLYES + +comment "busybox' load_policy is selected!" + depends on BUSYBOX_LOAD_POLICY config POLICYCOREUTILS_NEWROLE bool "newrole" -config POLICYCOREUTILS_RESTORECOND - bool "restorecond" - depends on BROKEN +config POLICYCOREUTILS_NEWROLE_PAM_CFG + bool "install /etc/pam.d/newrole" + depends on POLICYCOREUTILS_NEWROLE && GLOBAL_PAM config POLICYCOREUTILS_RUN_INIT bool "run_init/open_init_pty" +config POLICYCOREUTILS_RUN_INIT_PAM_CFG + bool "install /etc/pam.d/run_init" + depends on POLICYCOREUTILS_RUN_INIT && GLOBAL_PAM + config POLICYCOREUTILS_FIXFILES bool "fixfiles" -config POLICYCOREUTILS_GENHOMEDIRCON - select POLICYCOREUTILS_SEMODULE - bool "genhomedircon" - config POLICYCOREUTILS_SECON bool "secon" config POLICYCOREUTILS_SEMODULE - bool "semodule" - -config POLICYCOREUTILS_SEMODULE_DEPS - bool "semodule_deps" - -config POLICYCOREUTILS_SEMODULE_EXPAND - bool "semodule_expand" - -config POLICYCOREUTILS_SEMODULE_LINK - bool "semodule_link" - -config POLICYCOREUTILS_SEMODULE_PACKAGE - bool "semodule_package" + bool "semodule/genhomedircon" config POLICYCOREUTILS_SESTATUS bool "sestatus" + depends on !BUSYBOX_SESTATUS || ALLYES + +comment "busybox' sestatus is selected!" + depends on BUSYBOX_SESTATUS config POLICYCOREUTILS_SETFILES bool "setfiles/restorecon" + depends on !BUSYBOX_SETFILES && !BUSYBOX_RESTORECON || ALLYES + +comment "busybox' setfiles/restorecon is selected!" + depends on BUSYBOX_SETFILES || BUSYBOX_RESTORECON config POLICYCOREUTILS_SETSEBOOL bool "setsebool" + depends on !BUSYBOX_SETSEBOOL || ALLYES + +comment "busybox' setsebool is selected!" + depends on BUSYBOX_SETSEBOOL + +config POLICYCOREUTILS_UNSETFILES + bool "unsetfiles" endif diff --git a/rules/policycoreutils.make b/rules/policycoreutils.make index 07baaebe8..4daf28f2c 100644 --- a/rules/policycoreutils.make +++ b/rules/policycoreutils.make @@ -14,116 +14,88 @@ PACKAGES-$(PTXCONF_POLICYCOREUTILS) += policycoreutils # # Paths and names # -POLICYCOREUTILS_VERSION := 2.1.13 -POLICYCOREUTILS_MD5 := 97c0b828599fe608f37894989820d71d +POLICYCOREUTILS_VERSION := $(SELINUX_VERSION) +POLICYCOREUTILS_SHA256 := 054e41ec039731a5ee6b797a8e0b8d6e346ee1d0a9bac2f252db48c23f9a8b1b POLICYCOREUTILS := policycoreutils-$(POLICYCOREUTILS_VERSION) POLICYCOREUTILS_SUFFIX := tar.gz -POLICYCOREUTILS_URL := https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20120924/$(POLICYCOREUTILS).$(POLICYCOREUTILS_SUFFIX) +POLICYCOREUTILS_URL := $(SELINUX_URL)/$(POLICYCOREUTILS).$(POLICYCOREUTILS_SUFFIX) POLICYCOREUTILS_SOURCE := $(SRCDIR)/$(POLICYCOREUTILS).$(POLICYCOREUTILS_SUFFIX) POLICYCOREUTILS_DIR := $(BUILDDIR)/$(POLICYCOREUTILS) -POLICYCOREUTILS_LICENSE := GPL-2.0-or-later +POLICYCOREUTILS_LICENSE := GPL-2.0-only +POLICYCOREUTILS_LICENSE_FILES := file://LICENSE;md5=393a5ca445f6965873eca0259a17f833 +POLICYCOREUTILS_CVE_PRODUCT := selinuxproject:policycoreutils # ---------------------------------------------------------------------------- # Prepare # ---------------------------------------------------------------------------- -POLICYCOREUTILS_SUBDIRS_y := \ - man \ - po \ - scripts - +POLICYCOREUTILS_SUBDIRS_y := POLICYCOREUTILS_PROGS_y := -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_AUDIT2ALLOW) += audit2allow -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_AUDIT2ALLOW) += /usr/bin/audit2allow - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEPOLGEN_IFGEN) += sepolgen-ifgen -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEPOLGEN_IFGEN) += /usr/bin/sepolgen-ifgen -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEPOLGEN_IFGEN) += /usr/bin/sepolgen-ifgen-attr-helper - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_AUDIT2WHY) += audit2why -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_AUDIT2WHY) += /usr/bin/audit2why - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_LOAD_POLICY) += load_policy -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_LOAD_POLICY) += /usr/sbin/load_policy - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_NEWROLE) += newrole -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_NEWROLE) += /usr/bin/newrole - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_RESTORECOND) += restorecond -#POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_RESTORECOND) += - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += run_init -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += /usr/sbin/run_init -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += /usr/sbin/open_init_pty - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SANDBOX) += sandbox -#POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SANDBOX) += +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_LOAD_POLICY) += load_policy +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_LOAD_POLICY) += /usr/sbin/load_policy -# no SUBDIRS needed for scripts -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_CHCAT) += /usr/bin/chcat -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_FIXFILES) += /usr/sbin/fixfiles -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_GENHOMEDIRCON) += /usr/sbin/genhomedircon +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_NEWROLE) += newrole +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_NEWROLE) += /usr/bin/newrole -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SECON) += secon -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SECON) += /usr/bin/secon +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += run_init +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += /usr/sbin/run_init +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_RUN_INIT) += /usr/sbin/open_init_pty -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMANAGE) += semanage -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMANAGE) += /usr/sbin/semanage +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_FIXFILES) += scripts +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_FIXFILES) += /usr/sbin/fixfiles -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE) += semodule -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE) += /usr/sbin/semodule +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SECON) += secon +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SECON) += /usr/bin/secon -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_DEPS) += semodule_deps -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_DEPS) += /usr/bin/semodule_deps +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE) += semodule hll/pp +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE) += /usr/sbin/semodule +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE) += /usr/libexec/selinux/hll/pp -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_EXPAND) += semodule_expand -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_EXPAND) += /usr/bin/semodule_expand +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SESTATUS) += sestatus +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SESTATUS) += /usr/bin/sestatus -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_LINK) += semodule_link -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_LINK) += /usr/bin/semodule_link +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SETFILES) += setfiles +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SETFILES) += /usr/sbin/setfiles +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SETFILES) += /usr/sbin/restorecon_xattr -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_PACKAGE) += semodule_package -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_PACKAGE) += /usr/bin/semodule_package -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SEMODULE_PACKAGE) += /usr/bin/semodule_unpackage +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SETSEBOOL) += setsebool +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SETSEBOOL) += /usr/sbin/setsebool -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SESTATUS) += sestatus -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SESTATUS) += /usr/sbin/sestatus - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SETFILES) += setfiles -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SETFILES) += /usr/sbin/setfiles - -POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_SETSEBOOL) += setsebool -POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_SETSEBOOL) += /usr/sbin/setsebool - -POLICYCOREUTILS_CONF_TOOL := NO - -# no ':=' because of $(PYTHON_SITEPACKAGES) -POLICYCOREUTILS_MAKE_ENV = \ - $(CROSS_ENV) \ - SBINDIR=$(POLICYCOREUTILS_PKGDIR)/usr/sbin \ - PYTHONLIBDIR=$(POLICYCOREUTILS_PKGDIR)$(PYTHON_SITEPACKAGES)/.. \ - CFLAGS="-O2 -Wall" \ - INOTIFYH="/usr/include/sys/inotify.h" \ - PAMH="" \ - AUDITH="" -# -# We don't have PAM or AUDIT, so turn off. -# -# Use the following to turn on: -# (Use these paths, as of version 2.1.13) -# -# PAMH=/usr/include/security/pam_appl.h -# AUDITH=/usr/include/libaudit.h -# +POLICYCOREUTILS_SUBDIRS_$(PTXCONF_POLICYCOREUTILS_UNSETFILES) += unsetfiles +POLICYCOREUTILS_PROGS_$(PTXCONF_POLICYCOREUTILS_UNSETFILES) += /usr/sbin/unsetfiles -POLICYCOREUTILS_MAKE_OPT := \ - SUBDIRS="$(POLICYCOREUTILS_SUBDIRS_y)" \ - LIBDIR=$(PTXDIST_SYSROOT_TARGET)/usr/lib -POLICYCOREUTILS_INSTALL_OPT := \ +POLICYCOREUTILS_CONF_TOOL := NO +POLICYCOREUTILS_MAKE_ENV := $(CROSS_ENV) +POLICYCOREUTILS_MAKE_OPT := \ SUBDIRS="$(POLICYCOREUTILS_SUBDIRS_y)" \ + PREFIX=/usr \ + BINDIR=/usr/bin \ + SBINDIR=/usr/sbin \ + ETCDIR=/etc \ + LOCALEDIR=/usr/share/locale \ + PAMH=$(call ptx/ifdef, GLOBAL_PAM, y, n) \ + AUDITH=$(call ptx/ifdef, POLICYCOREUTILS_AUDIT, y, n) \ + AUDIT_LOG_PRIV=n \ + NAMESPACE_PRIV=n \ + LSPP_PRIV=n \ + CFLAGS="-O2 -Wall -g" +POLICYCOREUTILS_INSTALL_OPT := \ + $(POLICYCOREUTILS_MAKE_OPT) \ install +# ---------------------------------------------------------------------------- +# Install +# ---------------------------------------------------------------------------- + +$(STATEDIR)/policycoreutils.install: + @$(call targetinfo) +ifdef PTXCONF_GLOBAL_PAM + @mkdir -p $(POLICYCOREUTILS_PKGDIR)/etc/pam.d +endif + @$(call world/install, POLICYCOREUTILS) + @$(call touch) + # ---------------------------------------------------------------------------- # Target-Install # ---------------------------------------------------------------------------- @@ -137,15 +109,22 @@ $(STATEDIR)/policycoreutils.targetinstall: @$(call install_fixup, policycoreutils,AUTHOR,"Wolfram Sang ") @$(call install_fixup, policycoreutils,DESCRIPTION,missing) +ifdef POLICYCOREUTILS_NEWROLE_PAM_CFG + @$(call install_alternative, policycoreutils, 0, 0, 0644, /etc/pam.d/newrole) +endif +ifdef POLICYCOREUTILS_RUN_INIT_PAM_CFG + @$(call install_alternative, policycoreutils, 0, 0, 0644, /etc/pam.d/run_init) +endif + @$(foreach prog, $(POLICYCOREUTILS_PROGS_y), \ $(call install_copy, policycoreutils, 0, 0, 0755, -, $(prog));) -ifdef PTXCONF_POLICYCOREUTILS_SETFILES - @$(call install_link, policycoreutils, setfiles, /usr/sbin/restorecon) +ifdef PTXCONF_POLICYCOREUTILS_SEMODULE + @$(call install_link, policycoreutils, semodule, /usr/sbin/genhomedircon) endif -ifdef PTXCONF_POLICYCOREUTILS_SEMANAGE - @$(call install_copy, policycoreutils, 0, 0, 0644, -, $(PYTHON_SITEPACKAGES)/seobject.py) +ifdef PTXCONF_POLICYCOREUTILS_SETFILES + @$(call install_link, policycoreutils, setfiles, /usr/sbin/restorecon) endif ifdef PTXCONF_POLICYCOREUTILS_SESTATUS -- 2.47.3